@4pm/cli 1.5.29 → 1.5.30

package/dist/index.js

@@ -32954,6 +32954,15 @@ var dispatchCommandRequestSchema = external_exports.object({
    * **mutually exclusive with `aiOneShot`** (a run is one-shot | read-only | full-agent).
    */
   aiReadOnly: external_exports.boolean().optional(),
+  /**
+   * Write-capable agent AI mode (ADR-0271): a full agent that must run file + git/`gh`/`glab`
+   * writes **headless without approval prompts** (the project-template "Update", which creates a
+   * branch and opens a PR). The cli runs claude under `--permission-mode bypassPermissions` (codex
+   * full-auto) so the run doesn't stall on an interactive approval it can't answer. Still bounded by
+   * the folder-scope guard (ADR-0181). Only meaningful with `ai:true`; **mutually exclusive with
+   * `aiOneShot`/`aiReadOnly`** (a run is one-shot | read-only | full-agent [| write-capable]).
+   */
+  aiBypass: external_exports.boolean().optional(),
   /**
    * Per-run AI execution overrides (ADR-0261): model/thinking/temperature chosen in the web
    * "AI settings" modal (per-user localStorage), layered over the profile default by the cli.
@@ -32975,6 +32984,13 @@ var dispatchCommandRequestSchema = external_exports.object({
       message: "aiOneShot and aiReadOnly are mutually exclusive."
     });
   }
+  if (v.aiBypass && (v.aiOneShot || v.aiReadOnly)) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["aiBypass"],
+      message: "aiBypass is mutually exclusive with aiOneShot and aiReadOnly."
+    });
+  }
   if (!v.ai && v.command.length > COMMAND_MAX_LEN) {
     ctx.addIssue({
       code: external_exports.ZodIssueCode.too_big,
@@ -33363,6 +33379,25 @@ var putSpecDraftRequestSchema = external_exports.object({
 var putProjectSpecRequestSchema = external_exports.object({
   spec: external_exports.record(external_exports.unknown())
 });
+var TEMPLATE_ANALYSIS_MAX_BYTES = 512 * 1024;
+var TEMPLATE_UPDATE_MAX_BYTES = 512 * 1024;
+var putTemplateAnalysisRequestSchema = external_exports.object({
+  report: external_exports.string().min(1),
+  instruction: external_exports.string().nullable(),
+  fromVersion: external_exports.string().nullable(),
+  toVersion: external_exports.string().min(1)
+});
+var putTemplateUpdateRequestSchema = external_exports.object({
+  output: external_exports.string().min(1),
+  status: external_exports.enum(["success", "warning", "failed"]),
+  pullRequestId: external_exports.string().nullable(),
+  pullRequestUrl: external_exports.string().nullable(),
+  branch: external_exports.string().nullable(),
+  message: external_exports.string().nullable(),
+  instruction: external_exports.string().nullable(),
+  fromVersion: external_exports.string().nullable(),
+  toVersion: external_exports.string().min(1)
+});
 var ARTIFACT_MAX_BYTES = 512 * 1024;
 var listArtifactsQuerySchema = external_exports.object({
   kind: external_exports.enum(TEMPLATE_KINDS).optional()
@@ -34596,6 +34631,11 @@ function readOnlyArgs(cmd) {
   if (cmd.includes("codex")) return ["--sandbox", "read-only"];
   return [];
 }
+function bypassArgs(cmd) {
+  if (cmd.includes("claude")) return ["--permission-mode", "bypassPermissions"];
+  if (cmd.includes("codex")) return ["--dangerously-bypass-approvals-and-sandbox"];
+  return [];
+}
 function requiredArgs(cmd) {
   if (cmd.includes("claude")) return REQUIRED_AI_ARGS.claude;
   if (cmd.includes("codex")) return REQUIRED_AI_ARGS.codex;
@@ -34669,12 +34709,12 @@ function overrideEnv(cmd, o) {
   const budget = THINKING_TOKENS[o.thinking];
   return budget ? { MAX_THINKING_TOKENS: String(budget) } : {};
 }
-function buildRunArgs(profile, cmd, resumeId, oneShot = false, override, readOnly = false) {
+function buildRunArgs(profile, cmd, resumeId, oneShot = false, override, readOnly = false, bypass = false) {
   const extras = profile.args ?? [];
   const model = override?.model?.trim() || profile.model?.trim();
   const modelArgs = model ? ["--model", model] : [];
   const resumeArgs = resumeId && cmd.includes("claude") ? ["--resume", resumeId] : [];
-  const modeExtra = oneShot ? oneShotArgs(cmd) : readOnly ? readOnlyArgs(cmd) : [];
+  const modeExtra = oneShot ? oneShotArgs(cmd) : readOnly ? readOnlyArgs(cmd) : bypass ? bypassArgs(cmd) : [];
   return [
     ...requiredArgs(cmd),
     ...resumeArgs,
@@ -34721,10 +34761,10 @@ function resolveClaudeProfiles(config, workingDir) {
   if (idx > 0) profiles.unshift(profiles.splice(idx, 1)[0]);
   return profiles;
 }
-function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map(), oneShot = false, override, readOnly = false) {
-  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume, oneShot, override, readOnly) : planLegacyRun(prompt, config, hint.dir ?? null, resume, oneShot, override, readOnly);
+function planAiRun(prompt, config, hint = {}, resume = /* @__PURE__ */ new Map(), oneShot = false, override, readOnly = false, bypass = false) {
+  return isUnifiedConfig(config) ? planUnifiedRun(prompt, config, hint.credential ?? null, resume, oneShot, override, readOnly, bypass) : planLegacyRun(prompt, config, hint.dir ?? null, resume, oneShot, override, readOnly, bypass);
 }
-function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, override, readOnly = false) {
+function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, override, readOnly = false, bypass = false) {
   const baseEnv = config.aiEnv ?? {};
   const active = activeProvider(config);
   const usable = config.aiProfiles.filter(isUsableCredential);
@@ -34733,7 +34773,7 @@ function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, over
     return {
       cmd: active,
       attempts: [
-        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, void 0, oneShot, override, readOnly), stdin: prompt, env: { ...baseEnv, ...overrideEnv(active, override) } }
+        { cmd: active, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, active, void 0, oneShot, override, readOnly, bypass), stdin: prompt, env: { ...baseEnv, ...overrideEnv(active, override) } }
       ]
     };
   }
@@ -34751,20 +34791,20 @@ function planUnifiedRun(prompt, config, workingCredential, resume, oneShot, over
     label: cred.label?.trim() || profileDisplayLabel(dir2),
     dir: dir2,
     key,
-    args: buildRunArgs(cred, cmd, resume.get(key), oneShot, override, readOnly),
+    args: buildRunArgs(cred, cmd, resume.get(key), oneShot, override, readOnly, bypass),
     stdin: prompt,
     env: envVar ? { ...baseEnv, [envVar]: dir2, ...overrideEnv(cmd, override) } : { ...baseEnv, ...overrideEnv(cmd, override) }
   }));
   return { cmd: attempts[0]?.cmd ?? DEFAULT_AI_CLI, attempts };
 }
-function planLegacyRun(prompt, config, workingDir, resume, oneShot, override, readOnly = false) {
+function planLegacyRun(prompt, config, workingDir, resume, oneShot, override, readOnly = false, bypass = false) {
   const cmd = config.aiCli || DEFAULT_AI_CLI;
   const baseEnv = config.aiEnv ?? {};
   const envVar = profileEnvVar(cmd);
   const defaultPlan = {
     cmd,
     attempts: [
-      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, void 0, oneShot, override, readOnly), stdin: prompt, env: { ...baseEnv, ...overrideEnv(cmd, override) } }
+      { cmd, label: "default", dir: null, key: null, args: buildRunArgs({ profile: "" }, cmd, void 0, oneShot, override, readOnly, bypass), stdin: prompt, env: { ...baseEnv, ...overrideEnv(cmd, override) } }
     ]
   };
   if (!envVar) return defaultPlan;
@@ -34781,7 +34821,7 @@ function planLegacyRun(prompt, config, workingDir, resume, oneShot, override, re
       label: profileDisplayLabel(dir2),
       dir: dir2,
       key,
-      args: buildRunArgs(profile, cmd, resume.get(key), oneShot, override, readOnly),
+      args: buildRunArgs(profile, cmd, resume.get(key), oneShot, override, readOnly, bypass),
       stdin: prompt,
       env: { ...baseEnv, [envVar]: dir2, ...overrideEnv(cmd, override) }
     };
@@ -36460,7 +36500,8 @@ function handleCommandChannels(ctx, message, payload) {
         dispatch.aiOneShot ?? false,
         dispatch.images,
         dispatch.aiConfig,
-        dispatch.aiReadOnly ?? false
+        dispatch.aiReadOnly ?? false,
+        dispatch.aiBypass ?? false
       );
     }
     return true;
@@ -36518,7 +36559,7 @@ async function runLocalCommand(ctx, input) {
   const commandId = randomCommandId();
   await runAiPrompt(ctx, prompt, commandId, "local");
 }
-async function runAiPrompt(ctx, prompt, commandId, origin, oneShot = false, images, aiConfig, readOnly = false) {
+async function runAiPrompt(ctx, prompt, commandId, origin, oneShot = false, images, aiConfig, readOnly = false, bypass = false) {
   const config = readProfileConfig(ctx.profileDir);
   const projectTimeoutSec = config.projectAiRunTimeoutSec ?? 0;
   const machineTimeoutSec = config.aiRunTimeoutSec ?? 0;
@@ -36590,7 +36631,7 @@ async function runAiPrompt(ctx, prompt, commandId, origin, oneShot = false, imag
   const guardedPrompt = ctx.restrictToFolder && ctx.physicRoot ? folderScopeGuard(ctx.physicRoot, aiBodyPrompt) : aiBodyPrompt;
   const hint = unified ? { credential: startCred ?? workingCred } : { dir: startDir ?? workingDir };
   const memCfg = resolveMemoryConfig(config);
-  const firstAttempt = planAiRun(guardedPrompt, config, hint, /* @__PURE__ */ new Map(), oneShot, aiConfig, readOnly).attempts[0];
+  const firstAttempt = planAiRun(guardedPrompt, config, hint, /* @__PURE__ */ new Map(), oneShot, aiConfig, readOnly, bypass).attempts[0];
   const resumeId = memCfg.enabled && firstAttempt?.key && firstAttempt.cmd === "claude" ? ctx.sessionIdByKey.get(firstAttempt.key) : void 0;
   let effectivePrompt = guardedPrompt;
   let resume = /* @__PURE__ */ new Map();
@@ -36602,7 +36643,7 @@ ${ctx.aiMemory}
 
 ${guardedPrompt}`;
   }
-  const plan = planAiRun(effectivePrompt, config, hint, resume, oneShot, aiConfig, readOnly);
+  const plan = planAiRun(effectivePrompt, config, hint, resume, oneShot, aiConfig, readOnly, bypass);
   const markerArgs = plan.attempts[0]?.args ?? [];
   const startStamp = formatTimestampInZone(/* @__PURE__ */ new Date(), ctx.orgTimezone);
   ctx.bus.push({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4pm/cli",
-  "version": "1.5.29",
+  "version": "1.5.30",
   "private": false,
   "description": "4PM CLI — drives Claude/Codex CLIs on AI worker machines (Node + TypeScript)",
   "license": "LicenseRef-4PM-Source-Available",