@agentconnect.md/codex-acp 2.6.0-agentconnect.4 → 2.6.0-agentconnect.5

package/dist/index.js

@@ -41951,7 +41951,7 @@ var package_default = {
   publishConfig: {
     access: "public"
   },
-  version: "2.6.0-agentconnect.4",
+  version: "2.6.0-agentconnect.5",
   description: "",
   main: "dist/index.js",
   bin: {
@@ -42576,6 +42576,17 @@ var permissionProfileConfigSchema = external_exports.object({
     "agent-full-access": external_exports.string().min(1)
   })
 });
+function sessionPermissionProfiles(meta3, launcher) {
+  const raw = external_exports.object({ codex: external_exports.object({ permissionProfiles: external_exports.unknown().optional() }).optional() }).passthrough().safeParse(meta3 ?? {});
+  const profiles = raw.success ? raw.data.codex?.permissionProfiles : void 0;
+  if (profiles == null) return void 0;
+  const parsed = external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.json())).safeParse(profiles);
+  const allowed = new Set(Object.values(launcher?.modeProfiles ?? {}));
+  if (!parsed.success || Object.keys(parsed.data).some((id) => !allowed.has(id))) {
+    throw RequestError.invalidParams(void 0, "Session permission profiles must name launcher-owned profiles");
+  }
+  return parsed.data;
+}
 function readPermissionProfileConfig(env = process.env) {
   const raw = env[PERMISSION_PROFILE_CONFIG_ENV];
   if (!raw) return void 0;
@@ -43069,7 +43080,7 @@ var CodexAcpClient = class _CodexAcpClient {
     const additionalDirectories = readAdditionalDirectories(request.cwd, request.additionalDirectories, request._meta);
     const initialAgentMode = AgentMode.getInitialAgentMode();
     await this.refreshSkills(request.cwd, additionalDirectories);
-    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
+    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? [], request._meta);
     const { config: config2, skippedMcpServers, defaultPermissionProfileId, ...permissionProfileMetadata } = sessionConfig;
     await this.restrictResumedMcpServers(request.sessionId, sessionConfig);
     const response = await this.resumeThreadWithInstructions({
@@ -43109,7 +43120,7 @@ var CodexAcpClient = class _CodexAcpClient {
     return await forkSession(request, additionalDirectories, {
       codexClient: this.codexClient,
       refreshSkills: (cwd, directories) => this.refreshSkills(cwd, directories),
-      createSessionConfig: (cwd, directories, mcpServers) => this.createSessionConfig(cwd, directories, mcpServers),
+      createSessionConfig: (cwd, directories, mcpServers) => this.createSessionConfig(cwd, directories, mcpServers, request._meta),
       getResumeModelProvider: () => this.getResumeModelProvider(),
       fetchAvailableModels: () => this.fetchAvailableModels(),
       createCurrentModelId: (models, model, reasoningEffort) => this.createModelId(models, model, reasoningEffort).toString(),
@@ -43123,7 +43134,7 @@ var CodexAcpClient = class _CodexAcpClient {
     const additionalDirectories = readAdditionalDirectories(request.cwd, request.additionalDirectories, request._meta);
     const initialAgentMode = AgentMode.getInitialAgentMode();
     await this.refreshSkills(request.cwd, additionalDirectories);
-    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
+    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? [], request._meta);
     const { config: config2, skippedMcpServers, defaultPermissionProfileId, ...permissionProfileMetadata } = sessionConfig;
     await this.restrictResumedMcpServers(request.sessionId, sessionConfig);
     const response = await this.resumeThreadWithInstructions({
@@ -43227,7 +43238,7 @@ var CodexAcpClient = class _CodexAcpClient {
     const developerInstructions = instructions?.developerInstructions;
     const initialAgentMode = AgentMode.getInitialAgentMode();
     await this.refreshSkills(request.cwd, additionalDirectories);
-    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? []);
+    const sessionConfig = await this.createSessionConfig(request.cwd, additionalDirectories, request.mcpServers ?? [], request._meta);
     const { config: config2, skippedMcpServers, defaultPermissionProfileId: _defaultPermissionProfileId, ...permissionProfileMetadata } = sessionConfig;
     const response = await this.codexClient.threadStart({
       config: config2,
@@ -43370,6 +43381,9 @@ var CodexAcpClient = class _CodexAcpClient {
   isProtectedFullAccess(agentMode) {
     return this.permissionProfileConfig !== void 0 && agentMode.kind === "full_access";
   }
+  supportsSessionPermissionProfiles() {
+    return this.permissionProfileConfig !== void 0;
+  }
   approvalPolicyForMode(agentMode) {
     if (!this.isProtectedFullAccess(agentMode)) return agentMode.approvalPolicy;
     return { granular: { sandbox_approval: false, rules: false, skill_approval: false, request_permissions: false, mcp_elicitations: false } };
@@ -43450,7 +43464,7 @@ var CodexAcpClient = class _CodexAcpClient {
   getMcpServerStartupVersion() {
     return this.codexClient.mcpStartup.version();
   }
-  async createSessionConfig(projectPath, additionalDirectories, mcpServers) {
+  async createSessionConfig(projectPath, additionalDirectories, mcpServers, meta3) {
     const sessionRoots2 = [projectPath, ...additionalDirectories];
     const activeProvider = this.gatewayConfig ? {
       apiType: gatewayApiTypeFromConfig(this.gatewayConfig),
@@ -43463,8 +43477,10 @@ var CodexAcpClient = class _CodexAcpClient {
       apiType: activeProvider.apiType,
       baseUrl: activeProvider.baseUrl
     });
+    const permissionProfilesOverride = sessionPermissionProfiles(meta3, this.permissionProfileConfig);
     const mergedConfig = {
       ...disableUnsupportedSkills(forceGitRootTurnDiffPaths(mergeGatewayConfig(this.config, this.gatewayConfig))),
+      ...permissionProfilesOverride ? { permissions: permissionProfilesOverride } : {},
       projects: Object.fromEntries(sessionRoots2.map((root) => [root, {
         trust_level: "trusted"
       }]))
@@ -51257,6 +51273,7 @@ var CodexAcpServer = class {
       ...this.sessionIndex.agentCapabilities()
     ];
     return {
+      ...this.codexAcpClient.supportsSessionPermissionProfiles() ? { codex: { sessionPermissionProfiles: true } } : {},
       steering: {
         supported: true
       },

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "2.6.0-agentconnect.4",
+  "version": "2.6.0-agentconnect.5",
   "description": "",
   "main": "dist/index.js",
   "bin": {