From 7052395b0e69e0498c30d2485417a45efb95e084 Mon Sep 17 00:00:00 2001
From: kumarabhirup <hey@kumareth.com>
Date: Tue, 10 Mar 2026 13:29:50 -0700
Subject: [PATCH] fix(workspace): parse YAML list syntax in parseSimpleYaml

parseSimpleYaml only matched `key: value` lines (regex required `.+`
after the colon), so `permissions:` followed by indented `- database`
list items was never parsed. This caused app bridge methods like
db.query to always fail with "Unknown method or insufficient
permissions" even when the app manifest granted the database permission.

Change the regex to `.*` to also match keys with no inline value, then
collect subsequent indented `- item` lines into an array.

Closes #87
---
 apps/web/lib/workspace.ts | 32 +++++++++++++++++++++++++++++---
 1 file changed, 29 insertions(+), 3 deletions(-)

diff --git a/apps/web/lib/workspace.ts b/apps/web/lib/workspace.ts
index 7dc424fe064..efb37fc06d8 100644
--- a/apps/web/lib/workspace.ts
+++ b/apps/web/lib/workspace.ts
@@ -1067,17 +1067,24 @@ export function parseSimpleYaml(
 ): Record<string, unknown> {
   const result: Record<string, unknown> = {};
   const lines = content.split("\n");
+  let currentListKey: string | null = null;
 
   for (const line of lines) {
-    // Skip comments and empty lines
     if (line.trim().startsWith("#") || !line.trim()) {continue;}
 
-    // Match top-level key: value
-    const match = line.match(/^(\w[\w_-]*)\s*:\s*(.+)/);
+    // Match top-level key: value (value may be empty for list parents)
+    const match = line.match(/^(\w[\w_-]*)\s*:\s*(.*)/);
     if (match) {
+      currentListKey = null;
       const key = match[1];
       let value: unknown = match[2].trim();
 
+      if (value === "") {
+        currentListKey = key;
+        result[key] = [];
+        continue;
+      }
+
       // Strip quotes
       if (
         typeof value === "string" &&
@@ -1099,6 +1106,25 @@ export function parseSimpleYaml(
       }
 
       result[key] = value;
+      continue;
+    }
+
+    // Collect indented list items ("  - value") under the current list key
+    if (currentListKey) {
+      const listMatch = line.match(/^\s+-\s+(.*)/);
+      if (listMatch) {
+        let item: unknown = listMatch[1].trim();
+        if (
+          typeof item === "string" &&
+          ((item.startsWith('"') && item.endsWith('"')) ||
+            (item.startsWith("'") && item.endsWith("'")))
+        ) {
+          item = (item).slice(1, -1);
+        }
+        (result[currentListKey] as unknown[]).push(item);
+      } else {
+        currentListKey = null;
+      }
     }
   }