xiaotime 0.2.0 → 0.3.0

package/dist/__tests__/approval_menu.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Approval-menu rendering + selection tests.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR1.
+ *
+ * The full echo-bug fix is structural: the rl is closed (its keypress
+ * echo handler detached from stdin) for the duration of the menu, so
+ * the bug is physically unreachable during promptApprovalMenu. These
+ * tests verify the structure + the no-TTY fallback path. Full
+ * keystroke-emission tests are in the manual PR-body walkthrough
+ * because they require driving a real TTY (vitest's stdin is not a
+ * TTY, so setRawMode throws — which we test).
+ */
+export {};
+//# sourceMappingURL=approval_menu.test.d.ts.map

package/dist/__tests__/approval_menu.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval_menu.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/approval_menu.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/__tests__/approval_menu.test.js

@@ -0,0 +1,107 @@
+"use strict";
+/**
+ * Approval-menu rendering + selection tests.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR1.
+ *
+ * The full echo-bug fix is structural: the rl is closed (its keypress
+ * echo handler detached from stdin) for the duration of the menu, so
+ * the bug is physically unreachable during promptApprovalMenu. These
+ * tests verify the structure + the no-TTY fallback path. Full
+ * keystroke-emission tests are in the manual PR-body walkthrough
+ * because they require driving a real TTY (vitest's stdin is not a
+ * TTY, so setRawMode throws — which we test).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const ui_state_js_1 = require("../ui_state.js");
+let writes;
+(0, vitest_1.beforeEach)(() => {
+    writes = [];
+    vitest_1.vi.spyOn(process.stdout, "write").mockImplementation((chunk) => {
+        writes.push(typeof chunk === "string" ? chunk : chunk.toString());
+        return true;
+    });
+});
+(0, vitest_1.afterEach)(() => {
+    vitest_1.vi.restoreAllMocks();
+});
+(0, vitest_1.describe)("SessionUI public surface", () => {
+    (0, vitest_1.test)("exposes promptApprovalMenu", () => {
+        const ui = new ui_state_js_1.SessionUI();
+        (0, vitest_1.expect)(typeof ui.promptApprovalMenu).toBe("function");
+        ui.getRl().close();
+    });
+    (0, vitest_1.test)("exposes onRlClose for persistent close-listener registration", () => {
+        const ui = new ui_state_js_1.SessionUI();
+        (0, vitest_1.expect)(typeof ui.onRlClose).toBe("function");
+        ui.getRl().close();
+    });
+    (0, vitest_1.test)("no longer exposes promptApproval (pre-#6509 API)", () => {
+        const ui = new ui_state_js_1.SessionUI();
+        (0, vitest_1.expect)(ui.promptApproval).toBeUndefined();
+        ui.getRl().close();
+    });
+});
+(0, vitest_1.describe)("no-TTY fallback (vitest's stdin is not a TTY)", () => {
+    (0, vitest_1.test)("returns reject result when setRawMode throws", async () => {
+        // vitest's process.stdin.setRawMode throws because stdin is not a
+        // TTY. promptApprovalMenu should catch + return reject (option 3)
+        // with rejectReason "(no TTY)" rather than crash.
+        const ui = new ui_state_js_1.SessionUI();
+        const result = await ui.promptApprovalMenu();
+        (0, vitest_1.expect)(result.approved).toBe(false);
+        if (!result.approved) {
+            // The rejection-reason prompt also fails in no-TTY mode (rl.once
+            // line never fires); we don't run that path under vitest. The
+            // important invariant is the fall-through returns a structurally
+            // valid reject.
+            (0, vitest_1.expect)(result.rejectReason).toBeDefined();
+        }
+    });
+});
+(0, vitest_1.describe)("rl close-and-recreate (structural echo-bug fix)", () => {
+    (0, vitest_1.test)("getRl() returns a different rl object after promptApprovalMenu", async () => {
+        const ui = new ui_state_js_1.SessionUI();
+        const before = ui.getRl();
+        await ui.promptApprovalMenu();
+        const after = ui.getRl();
+        // The rl was closed + recreated by promptApprovalMenu, so the
+        // identity should differ. This is the structural guarantee that
+        // readline's keypress echo cannot fire during the menu — the rl
+        // object that owned the echo handler is gone.
+        (0, vitest_1.expect)(after).not.toBe(before);
+    });
+    (0, vitest_1.test)("onRlClose listener is re-attached to the recreated rl", async () => {
+        const ui = new ui_state_js_1.SessionUI();
+        let fireCount = 0;
+        ui.onRlClose(() => {
+            fireCount++;
+        });
+        // First menu invocation closes + recreates the rl. The intra-menu
+        // close is suppressed (removeAllListeners before close), so
+        // fireCount should stay at 0 across the menu render.
+        await ui.promptApprovalMenu();
+        (0, vitest_1.expect)(fireCount).toBe(0);
+        // After the menu, the recreated rl has the listener re-attached.
+        // Closing it now should fire the listener exactly once.
+        ui.getRl().close();
+        (0, vitest_1.expect)(fireCount).toBe(1);
+    });
+});
+(0, vitest_1.describe)("ApprovalMenuResult shape", () => {
+    (0, vitest_1.test)("approved-result carries allowlistRequested bool", async () => {
+        // Result shape is checked at the type level + the no-TTY fallback
+        // already returns an instance — verify it satisfies the
+        // discriminated union we exported.
+        const ui = new ui_state_js_1.SessionUI();
+        const result = await ui.promptApprovalMenu();
+        if (result.approved) {
+            (0, vitest_1.expect)(typeof result.allowlistRequested).toBe("boolean");
+        }
+        else {
+            (0, vitest_1.expect)(typeof result.rejectReason).toBe("string");
+        }
+    });
+});
+//# sourceMappingURL=approval_menu.test.js.map

package/dist/__tests__/approval_menu.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval_menu.test.js","sourceRoot":"","sources":["../../src/__tests__/approval_menu.test.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AAEH,mCAA2E;AAC3E,gDAAoE;AAEpE,IAAI,MAAgB,CAAC;AAErB,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC;IACZ,WAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAAU,EAAE,EAAE;QAClE,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,WAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAA,aAAI,EAAC,4BAA4B,EAAE,GAAG,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,IAAA,eAAM,EAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,IAAA,eAAM,EAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7C,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC5D,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,IAAA,eAAM,EAAE,EAAU,CAAC,cAAc,CAAC,CAAC,aAAa,EAAE,CAAC;QACnD,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,IAAA,aAAI,EAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC9D,kEAAkE;QAClE,kEAAkE;QAClE,kDAAkD;QAClD,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAuB,MAAM,EAAE,CAAC,kBAAkB,EAAE,CAAC;QACjE,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,iEAAiE;YACjE,8DAA8D;YAC9D,iEAAiE;YACjE,gBAAgB;YAChB,IAAA,eAAM,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,IAAA,aAAI,EAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;QACzB,8DAA8D;QAC9D,gEAAgE;QAChE,gEAAgE;QAChE,8CAA8C;QAC9C,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE;YAChB,SAAS,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,kEAAkE;QAClE,4DAA4D;QAC5D,qDAAqD;QACrD,MAAM,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC9B,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE1B,iEAAiE;QACjE,wDAAwD;QACxD,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAA,aAAI,EAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QACjE,kEAAkE;QAClE,wDAAwD;QACxD,mCAAmC;QACnC,MAAM,EAAE,GAAG,IAAI,uBAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,kBAAkB,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAA,eAAM,EAAC,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,IAAA,eAAM,EAAC,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/server_tool_render.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Server-tool-call visibility rendering.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR3.
+ *
+ * Tests the CLI side of the `server_tool_call` WS event: the
+ * `printServerToolCall` helper writes a single dim log line matching
+ * the visual style of the existing client-tool inline logs in
+ * `cli/src/tools.ts`. The server-side payload-building logic (input
+ * summary truncation, preferred-key selection per tool, newline
+ * stripping) is tested in
+ * `tests/test_terminal_orchestrator_main.py` — those tests
+ * collectively validate the wire-shape of the `server_tool_call`
+ * event (ISC-6509-009 + ISC-6509-010 emission contract).
+ */
+export {};
+//# sourceMappingURL=server_tool_render.test.d.ts.map

package/dist/__tests__/server_tool_render.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server_tool_render.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/server_tool_render.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/__tests__/server_tool_render.test.js

@@ -0,0 +1,74 @@
+"use strict";
+/**
+ * Server-tool-call visibility rendering.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR3.
+ *
+ * Tests the CLI side of the `server_tool_call` WS event: the
+ * `printServerToolCall` helper writes a single dim log line matching
+ * the visual style of the existing client-tool inline logs in
+ * `cli/src/tools.ts`. The server-side payload-building logic (input
+ * summary truncation, preferred-key selection per tool, newline
+ * stripping) is tested in
+ * `tests/test_terminal_orchestrator_main.py` — those tests
+ * collectively validate the wire-shape of the `server_tool_call`
+ * event (ISC-6509-009 + ISC-6509-010 emission contract).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const display_js_1 = require("../display.js");
+let logs;
+(0, vitest_1.beforeEach)(() => {
+    logs = [];
+    vitest_1.vi.spyOn(console, "log").mockImplementation((msg) => {
+        logs.push(typeof msg === "string" ? msg : String(msg));
+    });
+});
+(0, vitest_1.afterEach)(() => {
+    vitest_1.vi.restoreAllMocks();
+});
+(0, vitest_1.describe)("printServerToolCall (ISC-6509-009)", () => {
+    (0, vitest_1.test)("renders `  [server:<name>] <input_summary>` for a typical call", () => {
+        (0, display_js_1.printServerToolCall)("query_knowledge_base", "query=halock voice");
+        (0, vitest_1.expect)(logs).toHaveLength(1);
+        (0, vitest_1.expect)(logs[0]).toContain("[server:query_knowledge_base]");
+        (0, vitest_1.expect)(logs[0]).toContain("query=halock voice");
+    });
+    (0, vitest_1.test)("drops the trailing space when inputSummary is empty", () => {
+        // `librarian_list_collections` has no meaningful input to render
+        // — the server returns "" for its summary, and the line should
+        // collapse to just `[server:<name>]` with no trailing whitespace.
+        (0, display_js_1.printServerToolCall)("librarian_list_collections", "");
+        (0, vitest_1.expect)(logs).toHaveLength(1);
+        // Strip ANSI escape codes (chalk wraps the text) for the suffix
+        // check. The dim wrapper adds reset codes after the content.
+        const stripped = logs[0].replace(/\x1b\[[^m]*m/g, "");
+        (0, vitest_1.expect)(stripped).toBe("  [server:librarian_list_collections]");
+    });
+    (0, vitest_1.test)("each call produces exactly one log line", () => {
+        (0, display_js_1.printServerToolCall)("search_entities", "query=foo");
+        (0, display_js_1.printServerToolCall)("read_register", "register_type=control");
+        (0, vitest_1.expect)(logs).toHaveLength(2);
+    });
+    (0, vitest_1.test)("renders the literal text regardless of chalk's TTY detection", () => {
+        // chalk strips ANSI codes when stdout isn't detected as a TTY
+        // (which is the case under vitest). The dim styling is a
+        // visual-only concern verified via the manual walkthrough; the
+        // load-bearing contract — the text content — is asserted here.
+        (0, display_js_1.printServerToolCall)("task_create", "name=test, command=echo hi");
+        const stripped = logs[0].replace(/\x1b\[[^m]*m/g, "");
+        (0, vitest_1.expect)(stripped).toBe("  [server:task_create] name=test, command=echo hi");
+    });
+    (0, vitest_1.test)("handles special characters in tool name (#6550 CR-r1)", () => {
+        // Tool names are server-controlled (defined by
+        // terminal_orchestrator/tools.py TERMINAL_TOOLS) and won't
+        // contain shell metacharacters in practice — but the render
+        // helper shouldn't mangle the bytes if a future tool name
+        // does contain `<>&` or similar. Pin the passthrough.
+        (0, display_js_1.printServerToolCall)("tool<>&", "query=test");
+        (0, vitest_1.expect)(logs).toHaveLength(1);
+        const stripped = logs[0].replace(/\x1b\[[^m]*m/g, "");
+        (0, vitest_1.expect)(stripped).toBe("  [server:tool<>&] query=test");
+    });
+});
+//# sourceMappingURL=server_tool_render.test.js.map

package/dist/__tests__/server_tool_render.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server_tool_render.test.js","sourceRoot":"","sources":["../../src/__tests__/server_tool_render.test.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAEH,mCAA2E;AAC3E,8CAAoD;AAEpD,IAAI,IAAc,CAAC;AAEnB,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,IAAI,GAAG,EAAE,CAAC;IACV,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAY,EAAE,EAAE;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,WAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAA,aAAI,EAAC,gEAAgE,EAAE,GAAG,EAAE;QAC1E,IAAA,gCAAmB,EAAC,sBAAsB,EAAE,oBAAoB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,iEAAiE;QACjE,+DAA+D;QAC/D,kEAAkE;QAClE,IAAA,gCAAmB,EAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,gEAAgE;QAChE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,IAAA,gCAAmB,EAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QACpD,IAAA,gCAAmB,EAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;QAC9D,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,8DAA8D;QAC9D,yDAAyD;QACzD,+DAA+D;QAC/D,+DAA+D;QAC/D,IAAA,gCAAmB,EAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,+CAA+C;QAC/C,2DAA2D;QAC3D,4DAA4D;QAC5D,0DAA0D;QAC1D,sDAAsD;QACtD,IAAA,gCAAmB,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC7C,IAAA,eAAM,EAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/settings.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Settings + allowlist tests.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR2.
+ *
+ * Tests:
+ *   - ISC-6509-003: pattern derivation per tool
+ *   - ISC-6509-004: matchAllowlist semantics + cross-tool isolation
+ *   - ISC-6509-007: load tolerance (missing / malformed / unknown
+ *     version) + mode 0600 on first write + on overwrite
+ *
+ * Tests redirect `XIAOTIME_SETTINGS_PATH` to a per-test tmpdir so
+ * the real `~/.xiaotime/settings.json` is never touched.
+ */
+export {};
+//# sourceMappingURL=settings.test.d.ts.map

package/dist/__tests__/settings.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/settings.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/__tests__/settings.test.js

@@ -0,0 +1,289 @@
+"use strict";
+/**
+ * Settings + allowlist tests.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509) PR2.
+ *
+ * Tests:
+ *   - ISC-6509-003: pattern derivation per tool
+ *   - ISC-6509-004: matchAllowlist semantics + cross-tool isolation
+ *   - ISC-6509-007: load tolerance (missing / malformed / unknown
+ *     version) + mode 0600 on first write + on overwrite
+ *
+ * Tests redirect `XIAOTIME_SETTINGS_PATH` to a per-test tmpdir so
+ * the real `~/.xiaotime/settings.json` is never touched.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const settings_js_1 = require("../settings.js");
+let tmpDir;
+let settingsPath;
+let origEnv;
+(0, vitest_1.beforeEach)(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "xiaotime-settings-test-"));
+    settingsPath = path.join(tmpDir, "settings.json");
+    origEnv = process.env.XIAOTIME_SETTINGS_PATH;
+    process.env.XIAOTIME_SETTINGS_PATH = settingsPath;
+});
+(0, vitest_1.afterEach)(() => {
+    if (origEnv === undefined) {
+        delete process.env.XIAOTIME_SETTINGS_PATH;
+    }
+    else {
+        process.env.XIAOTIME_SETTINGS_PATH = origEnv;
+    }
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+    vitest_1.vi.restoreAllMocks();
+});
+(0, vitest_1.describe)("_settingsPath honors XIAOTIME_SETTINGS_PATH env override", () => {
+    (0, vitest_1.test)("returns the env-var path when set", () => {
+        (0, vitest_1.expect)((0, settings_js_1._settingsPath)()).toBe(settingsPath);
+    });
+    (0, vitest_1.test)("returns ~/.xiaotime/settings.json when env unset", () => {
+        delete process.env.XIAOTIME_SETTINGS_PATH;
+        const resolved = (0, settings_js_1._settingsPath)();
+        (0, vitest_1.expect)(resolved).toBe(path.join(os.homedir(), ".xiaotime", "settings.json"));
+    });
+});
+(0, vitest_1.describe)("loadAllowlist tolerance (ISC-6509-007)", () => {
+    (0, vitest_1.test)("missing file returns empty array (first-run is not an error)", () => {
+        (0, vitest_1.expect)((0, settings_js_1.loadAllowlist)()).toEqual([]);
+    });
+    (0, vitest_1.test)("malformed JSON returns empty + writes stderr warning", () => {
+        fs.writeFileSync(settingsPath, "not json {");
+        const stderrSpy = vitest_1.vi
+            .spyOn(process.stderr, "write")
+            .mockImplementation(() => true);
+        (0, vitest_1.expect)((0, settings_js_1.loadAllowlist)()).toEqual([]);
+        (0, vitest_1.expect)(stderrSpy).toHaveBeenCalledWith(vitest_1.expect.stringContaining("malformed JSON"));
+    });
+    (0, vitest_1.test)("unknown schema version returns empty + writes stderr warning", () => {
+        fs.writeFileSync(settingsPath, JSON.stringify({ version: 99 }));
+        const stderrSpy = vitest_1.vi
+            .spyOn(process.stderr, "write")
+            .mockImplementation(() => true);
+        (0, vitest_1.expect)((0, settings_js_1.loadAllowlist)()).toEqual([]);
+        (0, vitest_1.expect)(stderrSpy).toHaveBeenCalledWith(vitest_1.expect.stringContaining("unrecognized schema version"));
+    });
+    (0, vitest_1.test)("non-object root returns empty silently", () => {
+        fs.writeFileSync(settingsPath, JSON.stringify(null));
+        (0, vitest_1.expect)((0, settings_js_1.loadAllowlist)()).toEqual([]);
+    });
+    (0, vitest_1.test)("missing permissions.allow array returns empty silently", () => {
+        fs.writeFileSync(settingsPath, JSON.stringify({ version: 1 }));
+        (0, vitest_1.expect)((0, settings_js_1.loadAllowlist)()).toEqual([]);
+    });
+    (0, vitest_1.test)("invalid entries are filtered out, valid ones retained", () => {
+        fs.writeFileSync(settingsPath, JSON.stringify({
+            version: 1,
+            permissions: {
+                allow: [
+                    {
+                        tool: "shell_command",
+                        pattern: "npm install",
+                        added_at: "2026-05-20T00:00:00Z",
+                    },
+                    { tool: "invalid_tool", pattern: "x", added_at: "2026-05-20" },
+                    { tool: "write_file" },
+                    null,
+                    "string entry",
+                ],
+            },
+        }));
+        const result = (0, settings_js_1.loadAllowlist)();
+        (0, vitest_1.expect)(result).toHaveLength(1);
+        (0, vitest_1.expect)(result[0].tool).toBe("shell_command");
+    });
+});
+(0, vitest_1.describe)("appendAllowlist write + mode (ISC-6509-007 + ISC-6509-003)", () => {
+    (0, vitest_1.test)("creates settings.json with mode 0600 on first write", () => {
+        (0, settings_js_1.appendAllowlist)({ tool: "shell_command", pattern: "npm install" });
+        (0, vitest_1.expect)(fs.existsSync(settingsPath)).toBe(true);
+        const stat = fs.statSync(settingsPath);
+        (0, vitest_1.expect)(stat.mode & 0o777).toBe(0o600);
+    });
+    (0, vitest_1.test)("creates parent directory with mode 0700 if absent", () => {
+        const nested = path.join(tmpDir, "deep", "settings.json");
+        process.env.XIAOTIME_SETTINGS_PATH = nested;
+        (0, settings_js_1.appendAllowlist)({ tool: "git_commit", pattern: "*" });
+        (0, vitest_1.expect)(fs.existsSync(nested)).toBe(true);
+        const dirStat = fs.statSync(path.dirname(nested));
+        (0, vitest_1.expect)(dirStat.mode & 0o777).toBe(0o700);
+    });
+    (0, vitest_1.test)("appends entry with ISO timestamp", () => {
+        (0, settings_js_1.appendAllowlist)({ tool: "git_commit", pattern: "*" });
+        const loaded = (0, settings_js_1.loadAllowlist)();
+        (0, vitest_1.expect)(loaded).toHaveLength(1);
+        (0, vitest_1.expect)(loaded[0]).toMatchObject({ tool: "git_commit", pattern: "*" });
+        (0, vitest_1.expect)(loaded[0].added_at).toMatch(/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}/);
+    });
+    (0, vitest_1.test)("idempotent on duplicate (tool, pattern) — no second entry written", () => {
+        (0, settings_js_1.appendAllowlist)({ tool: "shell_command", pattern: "npm install" });
+        (0, settings_js_1.appendAllowlist)({ tool: "shell_command", pattern: "npm install" });
+        (0, settings_js_1.appendAllowlist)({ tool: "shell_command", pattern: "npm install" });
+        (0, vitest_1.expect)((0, settings_js_1.loadAllowlist)()).toHaveLength(1);
+    });
+    (0, vitest_1.test)("re-write preserves mode 0600 even if user chmod'd up", () => {
+        (0, settings_js_1.appendAllowlist)({ tool: "shell_command", pattern: "npm install" });
+        // User accidentally chmod'd to 0644; next write must reset.
+        fs.chmodSync(settingsPath, 0o644);
+        (0, settings_js_1.appendAllowlist)({ tool: "shell_command", pattern: "git push" });
+        const stat = fs.statSync(settingsPath);
+        (0, vitest_1.expect)(stat.mode & 0o777).toBe(0o600);
+    });
+    (0, vitest_1.test)("file payload conforms to SettingsV1 shape", () => {
+        (0, settings_js_1.appendAllowlist)({ tool: "git_commit", pattern: "*" });
+        const raw = fs.readFileSync(settingsPath, "utf-8");
+        const parsed = JSON.parse(raw);
+        (0, vitest_1.expect)(parsed.version).toBe(1);
+        (0, vitest_1.expect)(parsed.permissions.allow).toHaveLength(1);
+        (0, vitest_1.expect)(raw.endsWith("\n")).toBe(true);
+    });
+});
+(0, vitest_1.describe)("derivePattern (ISC-6509-003)", () => {
+    (0, vitest_1.test)("shell_command: 'npm install --no-save lodash' → 'npm install'", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", {
+            command: "npm install --no-save lodash",
+        })).toBe("npm install");
+    });
+    (0, vitest_1.test)("shell_command: 'git push origin dev' → 'git push'", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "git push origin dev" })).toBe("git push");
+    });
+    (0, vitest_1.test)("shell_command: 'ls -la /tmp' → 'ls -la' (stops at first non-flag past argv[1])", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "ls -la /tmp" })).toBe("ls -la");
+    });
+    (0, vitest_1.test)("shell_command: 'ls -la -h /tmp' → 'ls -la -h' (multiple leading flags)", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "ls -la -h /tmp" })).toBe("ls -la -h");
+    });
+    (0, vitest_1.test)("shell_command: 'pwd' → 'pwd' (single token)", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "pwd" })).toBe("pwd");
+    });
+    (0, vitest_1.test)("shell_command: 'gh issue list' → 'gh issue' (multi-level grammar collapses to 2-token prefix)", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "gh issue list" })).toBe("gh issue");
+    });
+    (0, vitest_1.test)("shell_command: empty / whitespace / missing → null", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "" })).toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "   " })).toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", {})).toBeNull();
+    });
+    (0, vitest_1.test)("shell_command: flag-only input → null (#6538 CR-r1)", () => {
+        // Pre-CR-r1 these produced nonsense patterns like "-la -h"
+        // which would persist as broken allowlist entries with no
+        // argv[0]. Guard rejects them up front.
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "-la -h" })).toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "--version" })).toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("shell_command", { command: "-x" })).toBeNull();
+    });
+    (0, vitest_1.test)("write_file: relative path with traversal is normalized (#6538 CR-r1)", () => {
+        // Pre-CR-r1, `"../../etc/passwd"` would derive
+        // `"../../etc/**"` and persist as a literal traversal-relative
+        // entry, which subsequent legitimate writes through the same
+        // (or other) cwd could accidentally match. path.resolve
+        // anchors against process.cwd before dirname, producing the
+        // absolute canonical form. The traversal segments collapse.
+        const result = (0, settings_js_1.derivePattern)("write_file", { path: "../foo.txt" });
+        (0, vitest_1.expect)(result).not.toBeNull();
+        // The exact value depends on process.cwd at test time, but it
+        // must (a) be absolute and (b) NOT contain ".." segments.
+        (0, vitest_1.expect)(path.isAbsolute(result)).toBe(true);
+        (0, vitest_1.expect)(result).not.toContain("..");
+        (0, vitest_1.expect)(result.endsWith(path.sep + "**")).toBe(true);
+    });
+    (0, vitest_1.test)("write_file: existing absolute paths still round-trip cleanly", () => {
+        // Existing tests above assume the storage shape; pin it
+        // explicitly post-normalization.
+        const out = (0, settings_js_1.derivePattern)("write_file", {
+            path: "/home/haeyoon/Desktop/foo.txt",
+        });
+        (0, vitest_1.expect)(out).toBe("/home/haeyoon/Desktop" + path.sep + "**");
+    });
+    (0, vitest_1.test)("write_file: dirname + /** glob", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("write_file", { path: "/home/haeyoon/Desktop/foo.txt" })).toBe("/home/haeyoon/Desktop/**");
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("write_file", { path: "/repo/src/sub/x.ts" })).toBe("/repo/src/sub/**");
+    });
+    (0, vitest_1.test)("write_file: empty / missing path → null", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("write_file", { path: "" })).toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("write_file", {})).toBeNull();
+    });
+    (0, vitest_1.test)("git_commit: always '*'", () => {
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("git_commit", { message: "feat: x" })).toBe("*");
+        (0, vitest_1.expect)((0, settings_js_1.derivePattern)("git_commit", {})).toBe("*");
+    });
+});
+(0, vitest_1.describe)("matchAllowlist (ISC-6509-004)", () => {
+    const entry = (tool, pattern) => ({
+        tool,
+        pattern,
+        added_at: "2026-05-20T00:00:00Z",
+    });
+    (0, vitest_1.test)("shell_command: derived pattern equality match", () => {
+        const allowlist = [entry("shell_command", "npm install")];
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("shell_command", { command: "npm install --save lodash" }, allowlist)).not.toBeNull();
+    });
+    (0, vitest_1.test)("shell_command: divergent derived pattern → no match", () => {
+        const allowlist = [entry("shell_command", "npm install")];
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("shell_command", { command: "npm uninstall lodash" }, allowlist)).toBeNull();
+    });
+    (0, vitest_1.test)("write_file: directory glob match (exact dir + deep subpath)", () => {
+        const allowlist = [entry("write_file", "/repo/src/**")];
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("write_file", { path: "/repo/src/foo.ts" }, allowlist)).not.toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("write_file", { path: "/repo/src/sub/deep/bar.ts" }, allowlist)).not.toBeNull();
+    });
+    (0, vitest_1.test)("write_file: sibling directory → no match", () => {
+        const allowlist = [entry("write_file", "/repo/src/**")];
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("write_file", { path: "/repo/test/baz.ts" }, allowlist)).toBeNull();
+    });
+    (0, vitest_1.test)("git_commit: any entry matches", () => {
+        const allowlist = [entry("git_commit", "*")];
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("git_commit", { message: "anything" }, allowlist)).not.toBeNull();
+    });
+    (0, vitest_1.test)("cross-tool isolation: shell_command entry cannot authorize write_file (PR3 invariant)", () => {
+        // Adversarial: an entry stored as shell_command whose pattern
+        // coincidentally matches a write_file glob. Must NOT authorize a
+        // write_file call — the tool field is the load-bearing scope key.
+        const allowlist = [entry("shell_command", "/tmp/**")];
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("write_file", { path: "/tmp/foo.txt" }, allowlist)).toBeNull();
+    });
+    (0, vitest_1.test)("empty allowlist never matches", () => {
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("shell_command", { command: "npm install" }, [])).toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("write_file", { path: "/repo/x.ts" }, [])).toBeNull();
+        (0, vitest_1.expect)((0, settings_js_1.matchAllowlist)("git_commit", {}, [])).toBeNull();
+    });
+});
+//# sourceMappingURL=settings.test.js.map

package/dist/__tests__/settings.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.test.js","sourceRoot":"","sources":["../../src/__tests__/settings.test.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,mCAA2E;AAC3E,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,gDAOwB;AAExB,IAAI,MAAc,CAAC;AACnB,IAAI,YAAoB,CAAC;AACzB,IAAI,OAA2B,CAAC;AAEhC,IAAA,mBAAU,EAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC3E,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAClD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,YAAY,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,OAAO,CAAC;IAC/C,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,WAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,IAAA,aAAI,EAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC5D,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAA,2BAAa,GAAE,CAAC;QACjC,IAAA,eAAM,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,IAAA,aAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAChE,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,WAAE;aACjB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;aAC9B,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,eAAM,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,WAAE;aACjB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;aAC9B,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpC,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,eAAM,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAClE,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,uDAAuD,EAAE,GAAG,EAAE;QACjE,EAAE,CAAC,aAAa,CACd,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,CAAC;YACV,WAAW,EAAE;gBACX,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,aAAa;wBACtB,QAAQ,EAAE,sBAAsB;qBACjC;oBACD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE;oBAC9D,EAAE,IAAI,EAAE,YAAY,EAAE;oBACtB,IAAI;oBACJ,cAAc;iBACf;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,2BAAa,GAAE,CAAC;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,IAAA,aAAI,EAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;QAC5C,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,kCAAkC,EAAE,GAAG,EAAE;QAC5C,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAA,2BAAa,GAAE,CAAC;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAChC,sCAAsC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,mEAAmE,EAAE,GAAG,EAAE;QAC7E,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACnE,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACnE,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,2BAAa,GAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAChE,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QACnE,4DAA4D;QAC5D,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAClC,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvC,IAAA,eAAM,EAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACrD,IAAA,6BAAe,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAA,aAAI,EAAC,+DAA+D,EAAE,GAAG,EAAE;QACzE,IAAA,eAAM,EACJ,IAAA,2BAAa,EAAC,eAAe,EAAE;YAC7B,OAAO,EAAE,8BAA8B;SACxC,CAAC,CACH,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC7D,IAAA,eAAM,EACJ,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CACnE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,gFAAgF,EAAE,GAAG,EAAE;QAC1F,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CACrE,QAAQ,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,wEAAwE,EAAE,GAAG,EAAE;QAClF,IAAA,eAAM,EACJ,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAC9D,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACvD,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,+FAA+F,EAAE,GAAG,EAAE;QACzG,IAAA,eAAM,EACJ,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAC7D,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC9D,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtE,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,2DAA2D;QAC3D,0DAA0D;QAC1D,wCAAwC;QACxC,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzE,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5E,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,sEAAsE,EAAE,GAAG,EAAE;QAChF,+CAA+C;QAC/C,+DAA+D;QAC/D,6DAA6D;QAC7D,wDAAwD;QACxD,4DAA4D;QAC5D,4DAA4D;QAC5D,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,8DAA8D;QAC9D,0DAA0D;QAC1D,IAAA,eAAM,EAAC,IAAI,CAAC,UAAU,CAAC,MAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,IAAA,eAAM,EAAC,MAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACxE,wDAAwD;QACxD,iCAAiC;QACjC,MAAM,GAAG,GAAG,IAAA,2BAAa,EAAC,YAAY,EAAE;YACtC,IAAI,EAAE,+BAA+B;SACtC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,gCAAgC,EAAE,GAAG,EAAE;QAC1C,IAAA,eAAM,EACJ,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CACvE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACnC,IAAA,eAAM,EACJ,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAC5D,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACnD,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7D,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,wBAAwB,EAAE,GAAG,EAAE;QAClC,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,IAAA,eAAM,EAAC,IAAA,2BAAa,EAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,MAAM,KAAK,GAAG,CACZ,IAA4B,EAC5B,OAAe,EACC,EAAE,CAAC,CAAC;QACpB,IAAI;QACJ,OAAO;QACP,QAAQ,EAAE,sBAAsB;KACjC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACzD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1D,IAAA,eAAM,EACJ,IAAA,4BAAc,EACZ,eAAe,EACf,EAAE,OAAO,EAAE,2BAA2B,EAAE,EACxC,SAAS,CACV,CACF,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,qDAAqD,EAAE,GAAG,EAAE;QAC/D,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;QAC1D,IAAA,eAAM,EACJ,IAAA,4BAAc,EACZ,eAAe,EACf,EAAE,OAAO,EAAE,sBAAsB,EAAE,EACnC,SAAS,CACV,CACF,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACvE,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QACxD,IAAA,eAAM,EACJ,IAAA,4BAAc,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,SAAS,CAAC,CACtE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,IAAA,eAAM,EACJ,IAAA,4BAAc,EACZ,YAAY,EACZ,EAAE,IAAI,EAAE,2BAA2B,EAAE,EACrC,SAAS,CACV,CACF,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,0CAA0C,EAAE,GAAG,EAAE;QACpD,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;QACxD,IAAA,eAAM,EACJ,IAAA,4BAAc,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,SAAS,CAAC,CACvE,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAA,eAAM,EACJ,IAAA,4BAAc,EAAC,YAAY,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,CAAC,CACjE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,uFAAuF,EAAE,GAAG,EAAE;QACjG,8DAA8D;QAC9D,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;QACtD,IAAA,eAAM,EACJ,IAAA,4BAAc,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,SAAS,CAAC,CAClE,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,IAAA,aAAI,EAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,IAAA,eAAM,EACJ,IAAA,4BAAc,EAAC,eAAe,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAChE,CAAC,QAAQ,EAAE,CAAC;QACb,IAAA,eAAM,EACJ,IAAA,4BAAc,EAAC,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CACzD,CAAC,QAAQ,EAAE,CAAC;QACb,IAAA,eAAM,EAAC,IAAA,4BAAc,EAAC,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/tools.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Tool-execution surface tests.
+ *
+ * SPRINT-CLI-APPROVAL-MENU-1 (#6509):
+ *   - PR1: ISC-6509-006 (read-only tools never prompt)
+ *           + write_file approval integration (#6532 CR-r1)
+ *   - PR2: ISC-6509-004 (allowlist match skips promptApprovalMenu +
+ *           auto-approved suffix)
+ *           + option-2 selection writes the derived pattern to
+ *           ~/.xiaotime/settings.json
+ *
+ * Tests redirect XIAOTIME_SETTINGS_PATH to a per-test tmpdir so
+ * the user's real ~/.xiaotime/settings.json is never read or
+ * written.
+ */
+export {};
+//# sourceMappingURL=tools.test.d.ts.map

package/dist/__tests__/tools.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tools.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}