feat: vendor permission system source

2026-08-28 08:35:57 +00:00 · 2026-08-19 14:35:19 +08:00
parent 198584daf8
commit 410c50a3e5
809 changed files with 157793 additions and 139 deletions
@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+// Regenerate schemas/permissions.schema.json from the zod source of truth.
+// Run via `pnpm run gen:schema`. Never edit the JSON by hand — a parity test
+// (test/config-schema.test.ts) fails if the committed file drifts from this.
+
+import { writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import { buildPermissionsJsonSchema } from "../src/config-schema.ts";
+
+const outputPath = join(
+  dirname(fileURLToPath(import.meta.url)),
+  "..",
+  "schemas",
+  "permissions.schema.json",
+);
+
+const json = `${JSON.stringify(buildPermissionsJsonSchema(), null, 2)}\n`;
+writeFileSync(outputPath, json);
+console.log(`Wrote ${outputPath}`);
@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+# Verify the public surface is type-consumable from the *packaged* tarball,
+# exactly as an external developer would consume it — no workspace privileges,
+# no publish round-trip.
+#
+#   1. pnpm pack       — triggers prepack -> build:types -> dist/public.d.ts
+#   2. self-containment guard — the emitted .d.ts carries no #src/* aliases
+#   3. install the tarball into a throwaway consumer and run tsc against it
+set -euo pipefail
+
+PKG_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+WORK="$(mktemp -d)"
+trap 'rm -rf "$WORK"' EXIT
+
+# --- 1. Pack the real tarball (prepack regenerates the declaration) --------
+pnpm --dir "$PKG_DIR" pack --pack-destination "$WORK" >/dev/null
+TARBALL="$(ls "$WORK"/*.tgz | head -n1)"
+echo "Packed: $(basename "$TARBALL")"
+
+# --- 2. Self-containment guard on the emitted declarations -----------------
+DTS="$PKG_DIR/dist/public.d.ts"
+if grep -q '#src' "$DTS"; then
+  echo "FAIL: dist/public.d.ts still references #src/* (not self-contained)" >&2
+  grep -n '#src' "$DTS" >&2
+  exit 1
+fi
+for sym in getPermissionsService publishPermissionsService unpublishPermissionsService \
+  PermissionsService PermissionCheckResult PermissionState ToolInputFormatter \
+  PERMISSIONS_UI_PROMPT_CHANNEL PERMISSIONS_READY_CHANNEL PERMISSIONS_DECISION_CHANNEL \
+  PermissionUiPromptEvent registerAuthorizer PermissionQuery Authorizer \
+  AuthorizerVerdict PromptPermissionDetails PromptPayload PromptRequestFacts; do
+  grep -q "$sym" "$DTS" || { echo "FAIL: '$sym' missing from dist/public.d.ts" >&2; exit 1; }
+done
+echo "OK: dist/public.d.ts is self-contained and exports the public surface"
+
+# --- 3. Build a throwaway consumer and type-check it against the tarball ----
+CONSUMER="$WORK/consumer"
+mkdir -p "$CONSUMER"
+
+cat > "$CONSUMER/package.json" <<'JSON'
+{ "name": "consumer", "version": "0.0.0", "private": true, "type": "module" }
+JSON
+
+cat > "$CONSUMER/tsconfig.json" <<'JSON'
+{
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "verbatimModuleSyntax": true,
+    "strict": true,
+    "noEmit": true,
+    "skipLibCheck": true
+  },
+  "include": ["probe.ts"]
+}
+JSON
+
+# Probe reproduces the exact reported import from #592 (PERMISSIONS_UI_PROMPT_CHANNEL)
+# plus the accessor and a representative type from each re-exported source module.
+cat > "$CONSUMER/probe.ts" <<'TS'
+import {
+  getPermissionsService,
+  PERMISSIONS_UI_PROMPT_CHANNEL,
+  type PermissionCheckResult,
+  type PermissionUiPromptEvent,
+} from "@gotgenes/pi-permission-system";
+
+void getPermissionsService;
+void PERMISSIONS_UI_PROMPT_CHANNEL;
+const _e: PermissionUiPromptEvent | undefined = undefined;
+const _r: PermissionCheckResult | undefined = undefined;
+void _e;
+void _r;
+TS
+
+# Install the packaged tarball plus the two peer deps a real consumer would have.
+# --ignore-scripts: a type-check needs no dependency build scripts, and it
+# avoids ERR_PNPM_IGNORED_BUILDS in the isolated (--ignore-workspace) consumer,
+# which does not inherit the workspace allowBuilds approvals.
+pnpm --dir "$CONSUMER" --ignore-workspace --ignore-scripts add \
+  "$TARBALL" \
+  "@earendil-works/pi-coding-agent@>=0.79.0" \
+  "@earendil-works/pi-tui@>=0.79.0" \
+  >/dev/null
+
+# Use the workspace TypeScript against the consumer project; module resolution
+# starts from the probe file, so the tarball and peers resolve from the consumer's
+# own node_modules via the package's exports "types" condition.
+pnpm --dir "$PKG_DIR" exec tsc -p "$CONSUMER/tsconfig.json"
+echo "OK: external consumer type-checks against the packaged @gotgenes/pi-permission-system"