第 11 章：你确定吗

// → src/utils/permissions/PermissionRule.ts 的 permissionBehaviorSchema
export const permissionBehaviorSchema = lazySchema(() =>
  z.enum(['allow', 'deny', 'ask']),
)

// → src/utils/permissions/permissions.ts 的 hasPermissionsToUseTool() 函数
export const hasPermissionsToUseTool: CanUseToolFn = async (
  tool,
  input,
  context,
  assistantMessage,
  toolUseID,
): Promise<PermissionDecision> => {
  const result = await hasPermissionsToUseToolInner(tool, input, context)

  if (result.behavior === 'allow') {
    // 重置连续拒绝计数器
    return result
  }

  if (result.behavior === 'ask') {
    const appState = context.getAppState()

    // dontAsk 模式：把 ask 变成 deny
    if (appState.toolPermissionContext.mode === 'dontAsk') {
      return {
        behavior: 'deny',
        decisionReason: { type: 'mode', mode: 'dontAsk' },
        message: DONT_ASK_REJECT_MESSAGE(tool.name),
      }
    }
    // ...还有 auto 模式等处理
  }

// → src/utils/permissions/permissions.ts 的 hasPermissionsToUseToolInner() 函数（简化版）
function hasPermissionsToUseToolInner(tool, input, context) {
  // Step 1: 规则检查（所有模式通用）

  // 1a. 工具级 deny：整个工具被禁用
  const denyRule = getDenyRuleForTool(tool.name, context)
  if (denyRule) return { behavior: 'deny', reason: 'rule' }

  // 1b. 工具级 ask：需要提示
  const askRule = getAskRuleForTool(tool.name, context)
  if (askRule) return { behavior: 'ask', reason: 'rule' }

  // 1c. 工具自定义检查
  const toolResult = tool.checkPermissions(input, context)

  // Step 2: 模式决策
  if (isBypassMode(context)) return { behavior: 'allow' }
  if (toolAlwaysAllowedRule(tool.name, context)) return { behavior: 'allow' }

  // Step 3: 回退到 ask
  return { behavior: 'ask' }
}

// → src/types/permissions.ts 的 PermissionMode 类型（简化版）
type PermissionMode =
  | 'default'           // 默认：逐个提示
  | 'plan'              // 计划模式：只读
  | 'acceptEdits'       // 自动接受文件编辑
  | 'bypassPermissions' // 跳过权限检查
  | 'dontAsk'           // 静默拒绝
  | 'auto'              // AI 分类器

// → src/tools/BashTool/bashPermissions.ts 的 bashToolHasPermission() 函数（简化版）
function bashToolHasPermission(command, context) {
  // 1. AST 安全解析（tree-sitter）
  const parseResult = parseCommandAST(command)

  if (parseResult === 'too-complex') {
    return { behavior: 'ask' }  // AST 无法静态分析 → ask
  }

  // 2. 语义检查：危险构造（eval、命令替换等）
  const semanticResult = checkSemantics(command)

  // 3. 沙盒自动允许（如果启用）
  if (isSandboxed && autoAllowBashIfSandboxed) {
    return { behavior: 'allow', sandboxed: true }
  }

  // 4. 精确匹配 deny/ask
  // 5. 子命令分割和逐个检查
  return checkSubcommands(command, context)
}

// → src/utils/permissions/permissions.ts 的 createPermissionRequestMessage() 函数
export function createPermissionRequestMessage(
  toolName: string,
  decisionReason?: PermissionDecisionReason,
): string {
  if (decisionReason) {
    switch (decisionReason.type) {
      case 'rule': {
        const ruleString = permissionRuleValueToString(decisionReason.rule.ruleValue)
        return `Permission rule '${ruleString}' requires approval for ${toolName}`
      }
      case 'mode': {
        return `Current permission mode requires approval for ${toolName}`
      }
      // ... hook、safetyCheck 等
    }
  }
  return `Claude requested permissions to use ${toolName}, but you haven't granted it yet.`
}

console.log('[DEBUG] Permission check:', tool.name, 'mode:', context.mode)

console.log('[DEBUG] Bash readOnly:', isReadOnly, 'command:', input.command?.substring(0, 80))

console.log('[DEBUG] Rule match:', ruleSource, ruleBehavior, 'for:', toolName)