veto-leash 0.1.3 → 1.0.0

package/dist/compiler/content.js

@@ -0,0 +1,461 @@
+// src/compiler/content.ts
+// Content pattern matching for Phase 2 content-aware enforcement
+//
+// DESIGN PRINCIPLES:
+// 1. Builtins are comprehensive pattern SETS, not single regex
+// 2. Each pattern has exceptions to prevent false positives
+// 3. 'strict' mode strips comments/strings before matching
+// 4. LLM generates per-user rules for custom restrictions
+import micromatch from 'micromatch';
+const { isMatch } = micromatch;
+/**
+ * Strip single-line and multi-line comments from code.
+ * Preserves line numbers by replacing with spaces.
+ */
+export function stripComments(content) {
+    // State machine to handle strings and comments
+    let result = '';
+    let i = 0;
+    let inString = null;
+    let inTemplate = false;
+    let templateDepth = 0;
+    while (i < content.length) {
+        const char = content[i];
+        const next = content[i + 1];
+        const prev = i > 0 ? content[i - 1] : '';
+        // Handle escape sequences in strings
+        if (inString && char === '\\') {
+            result += char + (next || '');
+            i += 2;
+            continue;
+        }
+        // Handle string boundaries
+        if (!inString && !inTemplate && (char === '"' || char === "'" || char === '`')) {
+            if (char === '`') {
+                inTemplate = true;
+                templateDepth = 1;
+            }
+            else {
+                inString = char;
+            }
+            result += char;
+            i++;
+            continue;
+        }
+        if (inString && char === inString) {
+            inString = null;
+            result += char;
+            i++;
+            continue;
+        }
+        // Handle template literal nesting
+        if (inTemplate) {
+            if (char === '`' && prev !== '\\') {
+                templateDepth--;
+                if (templateDepth === 0) {
+                    inTemplate = false;
+                }
+            }
+            else if (char === '$' && next === '{') {
+                // Entering expression, but still in template
+            }
+            result += char;
+            i++;
+            continue;
+        }
+        // Skip if inside a string
+        if (inString) {
+            result += char;
+            i++;
+            continue;
+        }
+        // Handle single-line comments
+        if (char === '/' && next === '/') {
+            // Replace comment with spaces until newline
+            while (i < content.length && content[i] !== '\n') {
+                result += ' ';
+                i++;
+            }
+            continue;
+        }
+        // Handle multi-line comments
+        if (char === '/' && next === '*') {
+            result += '  '; // Replace /*
+            i += 2;
+            while (i < content.length) {
+                if (content[i] === '*' && content[i + 1] === '/') {
+                    result += '  '; // Replace */
+                    i += 2;
+                    break;
+                }
+                // Preserve newlines for line number accuracy
+                result += content[i] === '\n' ? '\n' : ' ';
+                i++;
+            }
+            continue;
+        }
+        result += char;
+        i++;
+    }
+    return result;
+}
+/**
+ * Strip string literals from code, replacing with placeholder.
+ * Preserves line numbers.
+ */
+export function stripStrings(content) {
+    let result = '';
+    let i = 0;
+    let inString = null;
+    while (i < content.length) {
+        const char = content[i];
+        const next = content[i + 1];
+        // Handle escape sequences
+        if (inString && char === '\\') {
+            result += '  '; // Replace escaped char
+            i += 2;
+            continue;
+        }
+        // String boundaries
+        if (!inString && (char === '"' || char === "'" || char === '`')) {
+            inString = char;
+            result += char;
+            i++;
+            continue;
+        }
+        if (inString && char === inString) {
+            inString = null;
+            result += char;
+            i++;
+            continue;
+        }
+        // Inside string - replace with space but preserve newlines
+        if (inString) {
+            result += char === '\n' ? '\n' : ' ';
+            i++;
+            continue;
+        }
+        result += char;
+        i++;
+    }
+    return result;
+}
+/**
+ * Check if a file path matches any of the file type patterns.
+ */
+export function fileMatchesPatterns(filePath, patterns) {
+    if (!patterns || patterns.length === 0) {
+        return true;
+    }
+    const normalized = filePath.replace(/\\/g, '/');
+    const basename = normalized.split('/').pop() || normalized;
+    for (const pattern of patterns) {
+        if (pattern.startsWith('*.') && !pattern.includes('/')) {
+            if (basename.endsWith(pattern.slice(1))) {
+                return true;
+            }
+            continue;
+        }
+        if (isMatch(normalized, pattern, { nocase: true }) ||
+            isMatch(basename, pattern, { nocase: true })) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Check if match is an exception (false positive).
+ */
+function isException(content, matchIndex, matchText, exceptions) {
+    if (!exceptions || exceptions.length === 0) {
+        return false;
+    }
+    // Get context around match (100 chars before and after)
+    const start = Math.max(0, matchIndex - 100);
+    const end = Math.min(content.length, matchIndex + matchText.length + 100);
+    const context = content.slice(start, end);
+    for (const exception of exceptions) {
+        try {
+            const exceptionRegex = new RegExp(exception);
+            if (exceptionRegex.test(context)) {
+                return true;
+            }
+        }
+        catch {
+            // Invalid regex, skip
+        }
+    }
+    return false;
+}
+/**
+ * Check content against a single content rule.
+ */
+export function checkContentRule(content, filePath, rule) {
+    if (!fileMatchesPatterns(filePath, rule.fileTypes)) {
+        return null;
+    }
+    // Apply mode-specific preprocessing
+    let processedContent = content;
+    const mode = rule.mode || 'fast';
+    if (mode === 'strict') {
+        processedContent = stripComments(content);
+        processedContent = stripStrings(processedContent);
+    }
+    let regex;
+    try {
+        regex = new RegExp(rule.pattern, 'gm');
+    }
+    catch {
+        return null;
+    }
+    let match;
+    while ((match = regex.exec(processedContent)) !== null) {
+        // Check exceptions
+        if (isException(content, match.index, match[0], rule.exceptions || [])) {
+            continue;
+        }
+        // Find line and column using original content positions
+        const beforeMatch = content.slice(0, match.index);
+        const lines = beforeMatch.split('\n');
+        const line = lines.length;
+        const column = (lines[lines.length - 1]?.length ?? 0) + 1;
+        return {
+            file: filePath,
+            line,
+            column,
+            match: match[0],
+            rule,
+        };
+    }
+    return null;
+}
+/**
+ * Check content against all content rules in a policy.
+ */
+export function checkContent(content, filePath, policy) {
+    if (!policy.contentRules || policy.contentRules.length === 0) {
+        return { blocked: false };
+    }
+    for (const rule of policy.contentRules) {
+        const match = checkContentRule(content, filePath, rule);
+        if (match) {
+            return {
+                blocked: true,
+                rule,
+                line: match.line,
+                match: match.match,
+            };
+        }
+    }
+    return { blocked: false };
+}
+/**
+ * Check content against multiple policies.
+ */
+export function checkContentAgainstPolicies(content, filePath, policies) {
+    for (const policy of policies) {
+        const result = checkContent(content, filePath, policy);
+        if (result.blocked) {
+            return { ...result, policy };
+        }
+    }
+    return { blocked: false };
+}
+/**
+ * Get all matches for a rule in content.
+ */
+export function findAllMatches(content, filePath, rule) {
+    if (!fileMatchesPatterns(filePath, rule.fileTypes)) {
+        return [];
+    }
+    let processedContent = content;
+    if (rule.mode === 'strict') {
+        processedContent = stripComments(content);
+        processedContent = stripStrings(processedContent);
+    }
+    let regex;
+    try {
+        regex = new RegExp(rule.pattern, 'gm');
+    }
+    catch {
+        return [];
+    }
+    const matches = [];
+    let match;
+    while ((match = regex.exec(processedContent)) !== null) {
+        if (isException(content, match.index, match[0], rule.exceptions || [])) {
+            continue;
+        }
+        const beforeMatch = content.slice(0, match.index);
+        const lines = beforeMatch.split('\n');
+        const line = lines.length;
+        const column = (lines[lines.length - 1]?.length ?? 0) + 1;
+        matches.push({
+            file: filePath,
+            line,
+            column,
+            match: match[0],
+            rule,
+        });
+    }
+    return matches;
+}
+// ═══════════════════════════════════════════════════════════════════════════
+// COMPREHENSIVE PATTERN SETS
+// Each restriction type has MULTIPLE patterns to catch all variants
+// ═══════════════════════════════════════════════════════════════════════════
+/**
+ * Pattern set for detecting lodash usage.
+ * Covers: ES imports, CommonJS, dynamic imports, submodules, individual packages
+ */
+export const LODASH_PATTERNS = {
+    // ES6 imports
+    esDefault: String.raw `import\s+\w+\s+from\s+['"]lodash['"]`,
+    esNamed: String.raw `import\s+\{[^}]+\}\s+from\s+['"]lodash['"]`,
+    esNamespace: String.raw `import\s+\*\s+as\s+\w+\s+from\s+['"]lodash['"]`,
+    esSubmodule: String.raw `import\s+\w+\s+from\s+['"]lodash\/[^'"]+['"]`,
+    // Individual lodash packages (lodash.map, lodash.filter, etc.)
+    esIndividual: String.raw `import\s+\w+\s+from\s+['"]lodash\.[a-z]+['"]`,
+    // lodash-es variant
+    esLodashEs: String.raw `import\s+.*\s+from\s+['"]lodash-es['"]`,
+    // CommonJS
+    cjsRequire: String.raw `require\s*\(\s*['"]lodash['"]\s*\)`,
+    cjsSubmodule: String.raw `require\s*\(\s*['"]lodash\/[^'"]+['"]\s*\)`,
+    cjsIndividual: String.raw `require\s*\(\s*['"]lodash\.[a-z]+['"]\s*\)`,
+    // Dynamic import
+    dynamicImport: String.raw `import\s*\(\s*['"]lodash`,
+    // Combined pattern (use this for simple matching)
+    any: String.raw `(?:import|require)\s*(?:\(|\s).*['"]lodash(?:[-./][^'"]*)?['"]`,
+};
+/**
+ * Pattern set for detecting TypeScript 'any' type usage.
+ * Covers: annotations, generics, assertions, type aliases, defaults
+ */
+export const ANY_TYPE_PATTERNS = {
+    // Type annotations
+    annotation: String.raw `:\s*any\s*(?:[,;)\]=]|$)`,
+    annotationArray: String.raw `:\s*any\s*\[\s*\]`,
+    // Generic parameters
+    genericParam: String.raw `<\s*any\s*>`,
+    genericInArray: String.raw `Array\s*<\s*any\s*>`,
+    genericInRecord: String.raw `Record\s*<[^>]*,\s*any\s*>`,
+    genericInPromise: String.raw `Promise\s*<\s*any\s*>`,
+    genericInMap: String.raw `Map\s*<[^>]*,?\s*any\s*>`,
+    genericInSet: String.raw `Set\s*<\s*any\s*>`,
+    // Type assertions
+    asAny: String.raw `as\s+any\s*(?:[,;)\]]|$)`,
+    asUnknownAsAny: String.raw `as\s+unknown\s+as\s+any`,
+    // Type definitions
+    typeAlias: String.raw `type\s+\w+\s*=\s*any\s*;`,
+    typeAliasPartial: String.raw `type\s+\w+\s*=\s*[^;]*\|\s*any`,
+    // Generic defaults
+    genericDefault: String.raw `<[^>]*=\s*any\s*>`,
+    // Function return types
+    returnAny: String.raw `\)\s*:\s*any\s*(?:\{|=>)`,
+    // Extends/implements
+    extendsAny: String.raw `extends\s+any\b`,
+    // Intersection/union
+    intersectionAny: String.raw `&\s*any\b`,
+    unionAny: String.raw `\|\s*any\b`,
+    // Combined (most common cases)
+    common: String.raw `(?::\s*any\s*(?:[,;)\]=]|$)|<\s*any\s*>|as\s+any\b)`,
+};
+/**
+ * Pattern set for detecting console usage.
+ * Covers: direct calls, destructuring, aliasing, bracket notation
+ */
+export const CONSOLE_PATTERNS = {
+    // Direct method calls
+    log: String.raw `\bconsole\s*\.\s*log\s*\(`,
+    warn: String.raw `\bconsole\s*\.\s*warn\s*\(`,
+    error: String.raw `\bconsole\s*\.\s*error\s*\(`,
+    info: String.raw `\bconsole\s*\.\s*info\s*\(`,
+    debug: String.raw `\bconsole\s*\.\s*debug\s*\(`,
+    trace: String.raw `\bconsole\s*\.\s*trace\s*\(`,
+    table: String.raw `\bconsole\s*\.\s*table\s*\(`,
+    dir: String.raw `\bconsole\s*\.\s*dir\s*\(`,
+    // Bracket notation
+    bracket: String.raw `\bconsole\s*\[\s*['"](?:log|warn|error|info|debug)['"]\s*\]`,
+    // Destructuring (const { log } = console)
+    destructure: String.raw `\{\s*(?:log|warn|error|info|debug)(?:\s*:\s*\w+)?\s*\}\s*=\s*console`,
+    // Aliasing (const l = console.log)
+    alias: String.raw `=\s*console\s*\.\s*(?:log|warn|error|info|debug)\s*[,;]`,
+    // Combined common patterns
+    anyMethod: String.raw `\bconsole\s*[.\[]\s*['"]?(?:log|warn|error|info|debug|trace|table|dir)`,
+};
+/**
+ * Pattern set for detecting React class components.
+ * Covers: Component, PureComponent, with/without React prefix
+ */
+export const CLASS_COMPONENT_PATTERNS = {
+    component: String.raw `class\s+\w+\s+extends\s+(?:React\s*\.\s*)?Component\s*(?:<|{)`,
+    pureComponent: String.raw `class\s+\w+\s+extends\s+(?:React\s*\.\s*)?PureComponent\s*(?:<|{)`,
+    // Combined
+    any: String.raw `class\s+\w+\s+extends\s+(?:React\s*\.\s*)?(?:Pure)?Component\s*(?:<|{)`,
+};
+/**
+ * Pattern set for detecting eval usage.
+ * Covers: direct eval, Function constructor, setTimeout/setInterval with strings
+ */
+export const EVAL_PATTERNS = {
+    direct: String.raw `\beval\s*\(`,
+    functionConstructor: String.raw `new\s+Function\s*\(`,
+    setTimeoutString: String.raw `setTimeout\s*\(\s*['"]`,
+    setIntervalString: String.raw `setInterval\s*\(\s*['"]`,
+    // Combined
+    any: String.raw `(?:\beval\s*\(|new\s+Function\s*\()`,
+};
+/**
+ * Pattern set for moment.js detection.
+ */
+export const MOMENT_PATTERNS = {
+    esImport: String.raw `import\s+.*\s+from\s+['"]moment['"]`,
+    cjsRequire: String.raw `require\s*\(\s*['"]moment['"]\s*\)`,
+    dynamicImport: String.raw `import\s*\(\s*['"]moment['"]`,
+    any: String.raw `(?:import|require)\s*(?:\(|\s).*['"]moment['"]`,
+};
+// ═══════════════════════════════════════════════════════════════════════════
+// LEGACY EXPORTS (for backwards compatibility)
+// ═══════════════════════════════════════════════════════════════════════════
+export const COMMON_PATTERNS = {
+    // Import patterns - USE LODASH_PATTERNS.any for comprehensive matching
+    lodashImport: LODASH_PATTERNS.esDefault,
+    lodashRequire: LODASH_PATTERNS.cjsRequire,
+    anyLodash: LODASH_PATTERNS.any,
+    // Console patterns - USE CONSOLE_PATTERNS.anyMethod for comprehensive matching
+    consoleLog: CONSOLE_PATTERNS.log,
+    consoleWarn: CONSOLE_PATTERNS.warn,
+    consoleError: CONSOLE_PATTERNS.error,
+    anyConsole: CONSOLE_PATTERNS.anyMethod,
+    // React patterns
+    classComponent: CLASS_COMPONENT_PATTERNS.any,
+    reactClass: CLASS_COMPONENT_PATTERNS.any,
+    // TypeScript patterns - USE ANY_TYPE_PATTERNS.common for comprehensive matching
+    anyType: ANY_TYPE_PATTERNS.annotation,
+    anyTypeGeneric: ANY_TYPE_PATTERNS.genericParam,
+    asAny: ANY_TYPE_PATTERNS.asAny,
+    // Deprecated patterns
+    momentImport: MOMENT_PATTERNS.any,
+    jqueryImport: String.raw `(?:import|require)\s*(?:\(|\s).*['"]jquery['"]`,
+    underscoreImport: String.raw `(?:import|require)\s*(?:\(|\s).*['"]underscore['"]`,
+    // Security patterns
+    eval: EVAL_PATTERNS.any,
+    innerHtml: String.raw `\.innerHTML\s*=`,
+    dangerouslySetInnerHTML: String.raw `dangerouslySetInnerHTML`,
+    // Code quality
+    todoComment: String.raw `//\s*TODO:?`,
+    fixmeComment: String.raw `//\s*FIXME:?`,
+    debugger: String.raw `\bdebugger\b`,
+};
+// ═══════════════════════════════════════════════════════════════════════════
+// EXCEPTION PATTERNS (to prevent false positives)
+// ═══════════════════════════════════════════════════════════════════════════
+export const EXCEPTION_PATTERNS = {
+    // Don't flag 'any' in variable names like 'anyValue', 'company', 'many'
+    anyInVariableName: String.raw `(?:const|let|var|function)\s+\w*any\w*`,
+    // Don't flag console in test files (handled by fileTypes, but backup)
+    consoleInTest: String.raw `(?:describe|it|test|expect)\s*\(`,
+    // Don't flag lodash in comments about migration
+    lodashMigration: String.raw `(?:migrat|replac|remov|deprecat).*lodash`,
+};
+//# sourceMappingURL=content.js.map

package/dist/compiler/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/compiler/content.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,iEAAiE;AACjE,EAAE;AACF,qBAAqB;AACrB,+DAA+D;AAC/D,4DAA4D;AAC5D,2DAA2D;AAC3D,0DAA0D;AAE1D,OAAO,UAAU,MAAM,YAAY,CAAC;AAGpC,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;AAa/B;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,+CAA+C;IAC/C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzC,qCAAqC;QACrC,IAAI,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9B,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC/E,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,UAAU,GAAG,IAAI,CAAC;gBAClB,aAAa,GAAG,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,kCAAkC;QAClC,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClC,aAAa,EAAE,CAAC;gBAChB,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;oBACxB,UAAU,GAAG,KAAK,CAAC;gBACrB,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxC,6CAA6C;YAC/C,CAAC;YACD,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,0BAA0B;QAC1B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,4CAA4C;YAC5C,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,CAAC;gBACd,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,IAAI,IAAI,CAAC,CAAC,aAAa;YAC7B,CAAC,IAAI,CAAC,CAAC;YACP,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACjD,MAAM,IAAI,IAAI,CAAC,CAAC,aAAa;oBAC7B,CAAC,IAAI,CAAC,CAAC;oBACP,MAAM;gBACR,CAAC;gBACD,6CAA6C;gBAC7C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC3C,CAAC,EAAE,CAAC;YACN,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,IAAI,IAAI,CAAC;QACf,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,0BAA0B;QAC1B,IAAI,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,IAAI,CAAC,CAAC,uBAAuB;YACvC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAChE,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,IAAI,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,2DAA2D;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACrC,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,MAAM,IAAI,IAAI,CAAC;QACf,CAAC,EAAE,CAAC;IACN,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,QAAkB;IAElB,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC;IAE3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC9C,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,OAAe,EACf,UAAkB,EAClB,SAAiB,EACjB,UAAoB;IAEpB,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE1C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAgB,EAChB,IAAiB;IAEjB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oCAAoC;IACpC,IAAI,gBAAgB,GAAG,OAAO,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;IAEjC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,gBAAgB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,mBAAmB;QACnB,IAAI,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,SAAS;QACX,CAAC;QAED,wDAAwD;QACxD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAE1D,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,IAAI;SACL,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,QAAgB,EAChB,MAAc;IAEd,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI;gBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAAe,EACf,QAAgB,EAChB,QAAkB;IAElB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,QAAgB,EAChB,IAAiB;IAEjB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,gBAAgB,GAAG,OAAO,CAAC;IAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,gBAAgB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,KAA6B,CAAC;IAElC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,IAAI,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAE1D,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,oEAAoE;AACpE,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc;IACd,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,sCAAsC;IAC3D,OAAO,EAAE,MAAM,CAAC,GAAG,CAAA,4CAA4C;IAC/D,WAAW,EAAE,MAAM,CAAC,GAAG,CAAA,gDAAgD;IACvE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAA,8CAA8C;IACrE,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,8CAA8C;IACtE,oBAAoB;IACpB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,wCAAwC;IAC9D,WAAW;IACX,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,oCAAoC;IAC1D,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,4CAA4C;IACpE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAA,4CAA4C;IACrE,iBAAiB;IACjB,aAAa,EAAE,MAAM,CAAC,GAAG,CAAA,0BAA0B;IACnD,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,gEAAgE;CAChF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,mBAAmB;IACnB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,0BAA0B;IAChD,eAAe,EAAE,MAAM,CAAC,GAAG,CAAA,mBAAmB;IAC9C,qBAAqB;IACrB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,aAAa;IACrC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAA,qBAAqB;IAC/C,eAAe,EAAE,MAAM,CAAC,GAAG,CAAA,4BAA4B;IACvD,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAA,uBAAuB;IACnD,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,0BAA0B;IAClD,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,mBAAmB;IAC3C,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,0BAA0B;IAC3C,cAAc,EAAE,MAAM,CAAC,GAAG,CAAA,yBAAyB;IACnD,mBAAmB;IACnB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,0BAA0B;IAC/C,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAA,gCAAgC;IAC5D,mBAAmB;IACnB,cAAc,EAAE,MAAM,CAAC,GAAG,CAAA,mBAAmB;IAC7C,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,0BAA0B;IAC/C,qBAAqB;IACrB,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,iBAAiB;IACvC,qBAAqB;IACrB,eAAe,EAAE,MAAM,CAAC,GAAG,CAAA,WAAW;IACtC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,YAAY;IAChC,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAA,qDAAqD;CACxE,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,sBAAsB;IACtB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,4BAA4B;IAC5C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,6BAA6B;IAC9C,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,4BAA4B;IAC5C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,6BAA6B;IAC9C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,6BAA6B;IAC9C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,6BAA6B;IAC9C,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,2BAA2B;IAC1C,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAA,6DAA6D;IAChF,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC,GAAG,CAAA,sEAAsE;IAC7F,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAA,yDAAyD;IAC1E,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,wEAAwE;CAC9F,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,+DAA+D;IACpF,aAAa,EAAE,MAAM,CAAC,GAAG,CAAA,mEAAmE;IAC5F,WAAW;IACX,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,wEAAwE;CACxF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAA,aAAa;IAC/B,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAA,qBAAqB;IACpD,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAA,wBAAwB;IACpD,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAA,yBAAyB;IACtD,WAAW;IACX,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,qCAAqC;CACrD,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,qCAAqC;IACzD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAA,oCAAoC;IAC1D,aAAa,EAAE,MAAM,CAAC,GAAG,CAAA,8BAA8B;IACvD,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,gDAAgD;CAChE,CAAC;AAEF,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,uEAAuE;IACvE,YAAY,EAAE,eAAe,CAAC,SAAS;IACvC,aAAa,EAAE,eAAe,CAAC,UAAU;IACzC,SAAS,EAAE,eAAe,CAAC,GAAG;IAE9B,+EAA+E;IAC/E,UAAU,EAAE,gBAAgB,CAAC,GAAG;IAChC,WAAW,EAAE,gBAAgB,CAAC,IAAI;IAClC,YAAY,EAAE,gBAAgB,CAAC,KAAK;IACpC,UAAU,EAAE,gBAAgB,CAAC,SAAS;IAEtC,iBAAiB;IACjB,cAAc,EAAE,wBAAwB,CAAC,GAAG;IAC5C,UAAU,EAAE,wBAAwB,CAAC,GAAG;IAExC,gFAAgF;IAChF,OAAO,EAAE,iBAAiB,CAAC,UAAU;IACrC,cAAc,EAAE,iBAAiB,CAAC,YAAY;IAC9C,KAAK,EAAE,iBAAiB,CAAC,KAAK;IAE9B,sBAAsB;IACtB,YAAY,EAAE,eAAe,CAAC,GAAG;IACjC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,gDAAgD;IACxE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAA,oDAAoD;IAEhF,oBAAoB;IACpB,IAAI,EAAE,aAAa,CAAC,GAAG;IACvB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA,iBAAiB;IACtC,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAA,yBAAyB;IAE5D,eAAe;IACf,WAAW,EAAE,MAAM,CAAC,GAAG,CAAA,aAAa;IACpC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAA,cAAc;IACtC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAA,cAAc;CAC1B,CAAC;AAEX,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,wEAAwE;IACxE,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAA,wCAAwC;IACrE,sEAAsE;IACtE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAA,kCAAkC;IAC3D,gDAAgD;IAChD,eAAe,EAAE,MAAM,CAAC,GAAG,CAAA,0CAA0C;CACtE,CAAC"}

package/dist/compiler/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/compiler/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAK1C,wBAAsB,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmDlE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/compiler/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAsB1C,wBAAsB,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiElE"}

package/dist/compiler/index.js

@@ -2,10 +2,27 @@
 import { findBuiltin } from './builtins.js';
 import { getFromCache, saveToCache } from './cache.js';
 import { compileWithLLM } from './llm.js';
+/**
+ * Detect if the restriction is about command/tool preferences
+ * rather than file protection
+ */
+function isCommandPreference(phrase) {
+    const commandKeywords = [
+        /\b(prefer|use)\s+(pnpm|bun|yarn|npm)\b/,
+        /\b(pnpm|bun|yarn)\s+(over|not|instead)/,
+        /\bno\s+(sudo|force.?push|hard.?reset)\b/,
+        /\b(vitest|jest|pytest)\s+(over|not|instead)/,
+        /\buse\s+(vitest|pytest|docker.?compose)\b/,
+        /\bno\s+curl\b/,
+    ];
+    return commandKeywords.some(pattern => pattern.test(phrase));
+}
 export async function compile(restriction) {
     const normalized = restriction.toLowerCase().trim();
+    // Check if this is a command preference (not file-based)
+    const isCommand = isCommandPreference(normalized);
     // Extract action from input
-    let action = 'modify';
+    let action = isCommand ? 'execute' : 'modify';
     let targetPhrase = normalized;
     const actionPatterns = [
         [/^(don'?t\s+)?(delete|remove|rm)\s+/, 'delete'],
@@ -13,9 +30,11 @@ export async function compile(restriction) {
         [/^(don'?t\s+)?(run|execute|running|executing)\s+/, 'execute'],
         [/^(don'?t\s+)?(read|view|access)\s+/, 'read'],
         [/^(protect|preserve|keep|save)\s+/, 'modify'],
+        // Tool preferences default to execute
+        [/^(prefer|use)\s+/, 'execute'],
         // "no running X" → execute, "no X" (files) → modify
         [/^no\s+(running|executing)\s+/, 'execute'],
-        [/^no\s+/, 'modify'], // Default "no X" to modify (protects files)
+        [/^no\s+/, isCommand ? 'execute' : 'modify'],
     ];
     for (const [pattern, act] of actionPatterns) {
         if (pattern.test(normalized)) {
@@ -24,16 +43,24 @@ export async function compile(restriction) {
             break;
         }
     }
-    // Strip filler words
-    targetPhrase = targetPhrase
-        .replace(/^(any|all|the)\s+/g, '')
-        .replace(/\s+(files?|directories?|folders?)$/g, '')
-        .trim();
+    // Strip filler words (but preserve tool names)
+    if (!isCommand) {
+        targetPhrase = targetPhrase
+            .replace(/^(any|all|the)\s+/g, '')
+            .replace(/\s+(files?|directories?|folders?)$/g, '')
+            .trim();
+    }
     // Layer 1: Builtins (instant)
     const builtin = findBuiltin(targetPhrase);
     if (builtin) {
+        // Preserve commandRules from builtin
         return { action, ...builtin };
     }
+    // Also try the original restriction for builtins
+    const builtinOriginal = findBuiltin(normalized);
+    if (builtinOriginal) {
+        return { action, ...builtinOriginal };
+    }
     // Layer 2: Cache (instant)
     const cached = getFromCache(normalized);
     if (cached) {

package/dist/compiler/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/compiler/index.ts"],"names":[],"mappings":"AAAA,wBAAwB;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,WAAmB;IAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEpD,4BAA4B;IAC5B,IAAI,MAAM,GAAqB,QAAQ,CAAC;IACxC,IAAI,YAAY,GAAG,UAAU,CAAC;IAE9B,MAAM,cAAc,GAAsC;QACxD,CAAC,oCAAoC,EAAE,QAAQ,CAAC;QAChD,CAAC,yDAAyD,EAAE,QAAQ,CAAC;QACrE,CAAC,iDAAiD,EAAE,SAAS,CAAC;QAC9D,CAAC,oCAAoC,EAAE,MAAM,CAAC;QAC9C,CAAC,kCAAkC,EAAE,QAAQ,CAAC;QAC9C,oDAAoD;QACpD,CAAC,8BAA8B,EAAE,SAAS,CAAC;QAC3C,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,4CAA4C;KACnE,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,cAAc,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC;YACb,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM;QACR,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,YAAY,GAAG,YAAY;SACxB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;SACjC,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;SAClD,IAAI,EAAE,CAAC;IAEV,8BAA8B;IAC9B,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IAChC,CAAC;IAED,2BAA2B;IAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAEzD,8BAA8B;IAC9B,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEhC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/compiler/index.ts"],"names":[],"mappings":"AAAA,wBAAwB;AAGxB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C;;;GAGG;AACH,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,eAAe,GAAG;QACtB,wCAAwC;QACxC,wCAAwC;QACxC,yCAAyC;QACzC,6CAA6C;QAC7C,2CAA2C;QAC3C,eAAe;KAChB,CAAC;IAEF,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,WAAmB;IAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEpD,yDAAyD;IACzD,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAElD,4BAA4B;IAC5B,IAAI,MAAM,GAAqB,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChE,IAAI,YAAY,GAAG,UAAU,CAAC;IAE9B,MAAM,cAAc,GAAsC;QACxD,CAAC,oCAAoC,EAAE,QAAQ,CAAC;QAChD,CAAC,yDAAyD,EAAE,QAAQ,CAAC;QACrE,CAAC,iDAAiD,EAAE,SAAS,CAAC;QAC9D,CAAC,oCAAoC,EAAE,MAAM,CAAC;QAC9C,CAAC,kCAAkC,EAAE,QAAQ,CAAC;QAC9C,sCAAsC;QACtC,CAAC,kBAAkB,EAAE,SAAS,CAAC;QAC/B,oDAAoD;QACpD,CAAC,8BAA8B,EAAE,SAAS,CAAC;QAC3C,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;KAC7C,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,cAAc,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC;YACb,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM;QACR,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,YAAY,GAAG,YAAY;aACxB,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;aACjC,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;aAClD,IAAI,EAAE,CAAC;IACZ,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,qCAAqC;QACrC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IAChC,CAAC;IAED,iDAAiD;IACjD,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;IACxC,CAAC;IAED,2BAA2B;IAC3B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAEzD,8BAA8B;IAC9B,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEhC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/compiler/llm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llm.d.ts","sourceRoot":"","sources":["../../src/compiler/llm.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AA0C1C,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,GAChC,OAAO,CAAC,MAAM,CAAC,CAkCjB"}
+{"version":3,"file":"llm.d.ts","sourceRoot":"","sources":["../../src/compiler/llm.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAiI1C,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,GAChC,OAAO,CAAC,MAAM,CAAC,CAkCjB"}