@ashx-j/lunr 0.2.23 → 0.2.25

package/dist/node-runtime/{chunk-5D7LC2ZQ.js → chunk-ZXSGTGJ6.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-FQMM2EZ2.js";
 
 // packages/coding-agent/dist/core/plan-mode.js
-var PLAN_MODE_ADDENDUM = "You are in plan mode. Investigate read-only, then present your plan by calling the present_plan tool with a concise summary \u2014 the user approves or declines it in a dialog. Do not make changes until the plan is approved. The user can also exit plan mode manually with /plan off.", PLAN_MODE_BLOCK_MESSAGE = "Plan mode is active \u2014 propose a plan; no file changes.", BLOCKED_TOOLS = /* @__PURE__ */ new Set(["edit", "write", "memory_add", "memory_remove", "cron"]), ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
+var READ_ONLY_MODE_ADDENDUM = "You are in read-only mode. Investigate and answer without making changes. If the user asks for a plan, you may call present_plan for approval. Do not implement until the user switches modes or approves that plan.", READ_ONLY_MODE_BLOCK_MESSAGE = "Read-only mode is active; no changes allowed.", BLOCKED_TOOLS = /* @__PURE__ */ new Set(["edit", "write", "memory_add", "memory_remove", "cron"]), ALLOWED_COMMANDS = /* @__PURE__ */ new Set([
   "ls",
   "ll",
   "cat",
@@ -125,15 +125,15 @@ var PLAN_MODE_ADDENDUM = "You are in plan mode. Investigate read-only, then pres
 function isCodeRewriteMutating(input) {
   return input?.dry_run === !1;
 }
-function planModeBlockReason(toolName, input) {
+function readOnlyModeBlockReason(toolName, input) {
   if (toolName === "browser" && input?.action === "act")
-    return `${PLAN_MODE_BLOCK_MESSAGE} Browser interactions require a non-plan session; observation remains available.`;
+    return `${READ_ONLY_MODE_BLOCK_MESSAGE} Browser interactions require a writable mode; observation remains available.`;
   if (BLOCKED_TOOLS.has(toolName) || toolName === "code_rewrite" && isCodeRewriteMutating(input))
-    return PLAN_MODE_BLOCK_MESSAGE;
+    return READ_ONLY_MODE_BLOCK_MESSAGE;
   if (toolName === "bash") {
     let command = readBashCommand(input);
     if (command && isMutatingBashCommand(command))
-      return `${PLAN_MODE_BLOCK_MESSAGE} Blocked command: ${command}`;
+      return `${READ_ONLY_MODE_BLOCK_MESSAGE} Blocked command: ${command}`;
   }
 }
 function readBashCommand(input) {
@@ -365,16 +365,16 @@ function effectiveLargeSubagentLaunchCountForTurn(args, assistantMessage) {
 }
 
 // packages/coding-agent/dist/core/permissions.js
-var PERMISSION_MODES = ["manual", "yolo", "plan", "auto"];
+var PERMISSION_MODES = ["yolo", "auto", "read-only"];
 function nextPermissionMode(current) {
   let i = PERMISSION_MODES.indexOf(current);
   return PERMISSION_MODES[(i + 1) % PERMISSION_MODES.length];
 }
-function isPlanModeActive(sessionId) {
-  return getPermissionMode(sessionId) === "plan";
+function isReadOnlyModeActive(sessionId) {
+  return getPermissionMode(sessionId) === "read-only";
 }
 function restorePermissionModeAfterPlan(previous, defaultMode) {
-  return previous && previous !== "plan" ? previous : defaultMode === "plan" ? "yolo" : defaultMode;
+  return previous && previous !== "read-only" ? previous : defaultMode;
 }
 var READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
   "read",
@@ -398,8 +398,15 @@ var READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
   "lsp_symbols",
   "lsp_code_actions",
   "lsp_completions",
-  "memory_load"
-]), MUTATING_TOOLS = /* @__PURE__ */ new Set(["bash", "edit", "write", "memory_add", "memory_remove", "cron"]), REJECT_REASON = "Rejected by user (permission mode: manual).", NO_HANDLER_REASON = "Mutating tool blocked in manual mode: no approval channel available.", LARGE_SUBAGENT_LAUNCH_REJECT_REASON = "Large subagent launch rejected by user.", NO_LARGE_SUBAGENT_LAUNCH_HANDLER_REASON = "Large subagent launch blocked: no approval channel available.", LARGE_SUBAGENT_LAUNCH_ACTION = "large-subagent-launch", FULL_CHILD_ACTION = "subagent-full", contexts = /* @__PURE__ */ new Map(), defaultContext = { mode: "manual", approvals: /* @__PURE__ */ new Set() }, approvalHandler, turnLargeLaunchDecisions = /* @__PURE__ */ new WeakMap();
+  "lsp_rename",
+  "memory_load",
+  "subagent_wait",
+  "subagent_supervisor",
+  "intercom",
+  "contact_supervisor",
+  "present_plan",
+  "structured_output"
+]), NO_HANDLER_REASON = "Approval channel unavailable.", LARGE_SUBAGENT_LAUNCH_REJECT_REASON = "Large subagent launch rejected by user.", NO_LARGE_SUBAGENT_LAUNCH_HANDLER_REASON = "Large subagent launch blocked: no approval channel available.", LARGE_SUBAGENT_LAUNCH_ACTION = "large-subagent-launch", contexts = /* @__PURE__ */ new Map(), defaultContext = { mode: "yolo", approvals: /* @__PURE__ */ new Set() }, approvalHandler, turnLargeLaunchDecisions = /* @__PURE__ */ new WeakMap();
 function getContext(sessionId) {
   return sessionId ? contexts.get(sessionId) ?? defaultContext : defaultContext;
 }
@@ -415,7 +422,7 @@ function getPermissionMode(sessionId) {
 function setPermissionMode(mode, sessionId) {
   getContext(sessionId).mode = mode;
 }
-function resetPermissions(defaultMode = "manual", sessionId) {
+function resetPermissions(defaultMode = "yolo", sessionId) {
   sessionId ? contexts.set(sessionId, { mode: defaultMode, approvals: /* @__PURE__ */ new Set() }) : defaultContext = { mode: defaultMode, approvals: /* @__PURE__ */ new Set() };
 }
 function registerApprovalHandler(fn) {
@@ -439,10 +446,6 @@ async function requestPlanApproval(summary) {
   return planApprovalResultText(resp);
 }
 var AUTO_MODE_ADDENDUM = "You are running fully autonomously. Do not ask the user questions or wait for confirmation; make reasonable decisions and complete the task end-to-end.";
-function isPathOutsideCwd(absPath, cwd) {
-  let norm = (p) => p.replace(/\\/g, "/").replace(/\/$/, ""), np = norm(absPath), nc = norm(cwd);
-  return np === nc ? !1 : !np.startsWith(`${nc}/`);
-}
 function resolvePath(cwd, p) {
   return typeof p != "string" || !p ? "" : resolve(cwd, p);
 }
@@ -467,9 +470,6 @@ function protectedFileWriteReason(toolName, input, cwd) {
   if (normalizedTarget === globalSettings || normalizedTarget === projectSettings)
     return SETTINGS_FILE_DIRECT_WRITE_BLOCK_REASON;
 }
-function isMutatingTool(toolName) {
-  return MUTATING_TOOLS.has(toolName);
-}
 function collectRequestedChildLaunches(value, launches) {
   if (!value || typeof value != "object" || Array.isArray(value))
     return;
@@ -493,9 +493,6 @@ function getRequestedChildLaunches(input) {
   let launches = [];
   return collectRequestedChildLaunches(input, launches), launches;
 }
-function requiresManualApproval(toolName, input) {
-  return toolName === "browser" ? input.action === "act" : isMutatingTool(toolName) ? !0 : toolName === "subagent" ? getRequestedChildLaunches(input).some((launch) => launch.permissions === "full") : toolName === "code_rewrite" && isCodeRewriteMutating(input);
-}
 function firstTaskText(value) {
   return typeof value == "string" && value.trim() ? sanitizeDetail(value) : "";
 }
@@ -522,16 +519,14 @@ async function gateLargeSubagentLaunch(input, ctx, options) {
   if (ctx.mode === "auto" || options?.confirmLargeSubagentLaunches === !1)
     return;
   let count = effectiveLargeSubagentLaunchCountForTurn(input, options?.assistantMessage);
-  if (count <= 2)
+  if (count <= 2 || ctx.approvals.has(LARGE_SUBAGENT_LAUNCH_ACTION))
     return;
-  if (ctx.approvals.has(LARGE_SUBAGENT_LAUNCH_ACTION))
-    return { fullChildrenApproved: !1 };
   let turnKey = options?.assistantMessage, cached = turnKey ? turnLargeLaunchDecisions.get(turnKey) : void 0;
   if (cached)
     return cached.decision === "reject" ? {
       block: !0,
       reason: cached.feedback ? `${LARGE_SUBAGENT_LAUNCH_REJECT_REASON} ${cached.feedback}` : LARGE_SUBAGENT_LAUNCH_REJECT_REASON
-    } : { fullChildrenApproved: cached.fullChildrenApproved };
+    } : void 0;
   if (!approvalHandler)
     return { block: !0, reason: NO_LARGE_SUBAGENT_LAUNCH_HANDLER_REASON };
   let summary = largeLaunchTaskSummary(input, options?.assistantMessage), siblingLaunches = (options?.assistantMessage?.content ?? []).flatMap((block) => {
@@ -539,7 +534,7 @@ async function gateLargeSubagentLaunch(input, ctx, options) {
       return [];
     let args = block.arguments && typeof block.arguments == "object" && !Array.isArray(block.arguments) ? block.arguments : void 0;
     return args ? getRequestedChildLaunches(args) : [];
-  }), launches = siblingLaunches.length > 0 ? siblingLaunches : getRequestedChildLaunches(input), fullChildrenApproved = launches.some((launch) => launch.permissions === "full"), launchSummary = launches.map((launch) => `${launch.description}
+  }), launchSummary = (siblingLaunches.length > 0 ? siblingLaunches : getRequestedChildLaunches(input)).map((launch) => `${launch.description}
 permissions: ${launch.permissions}`).join(`
 `), resp;
   try {
@@ -554,10 +549,15 @@ ${launchSummary || summary}` : ""}`,
     return { block: !0, reason: err instanceof Error ? err.message : NO_LARGE_SUBAGENT_LAUNCH_HANDLER_REASON };
   }
   let rawDecision = typeof resp == "string" ? resp : resp.decision, decision = rawDecision === "approve" ? "once" : rawDecision, feedback = typeof resp == "string" ? void 0 : resp.feedback?.trim();
-  return turnKey && turnLargeLaunchDecisions.set(turnKey, { decision, ...feedback ? { feedback } : {}, fullChildrenApproved }), decision === "session" ? (ctx.approvals.add(LARGE_SUBAGENT_LAUNCH_ACTION), fullChildrenApproved && ctx.approvals.add(FULL_CHILD_ACTION), { fullChildrenApproved }) : decision === "reject" ? {
-    block: !0,
-    reason: feedback ? `${LARGE_SUBAGENT_LAUNCH_REJECT_REASON} ${feedback}` : LARGE_SUBAGENT_LAUNCH_REJECT_REASON
-  } : { fullChildrenApproved };
+  if (turnKey && turnLargeLaunchDecisions.set(turnKey, { decision, ...feedback ? { feedback } : {} }), decision === "session") {
+    ctx.approvals.add(LARGE_SUBAGENT_LAUNCH_ACTION);
+    return;
+  }
+  if (decision === "reject")
+    return {
+      block: !0,
+      reason: feedback ? `${LARGE_SUBAGENT_LAUNCH_REJECT_REASON} ${feedback}` : LARGE_SUBAGENT_LAUNCH_REJECT_REASON
+    };
 }
 function sanitizeDetail(value) {
   let text = String(value ?? "").trim();
@@ -567,66 +567,35 @@ async function gateToolCall(toolName, input, cwd, sessionId, options) {
   let ctx = getContext(sessionId), protectedWriteReason = protectedFileWriteReason(toolName, input, cwd);
   if (protectedWriteReason)
     return { block: !0, reason: protectedWriteReason };
-  if (READ_ONLY_TOOLS.has(toolName))
-    return;
-  let largeLaunchCoveredManualApproval = !1;
-  if (toolName === "subagent") {
-    let launchResult = await gateLargeSubagentLaunch(input, ctx, options);
-    if (launchResult && "block" in launchResult)
-      return launchResult;
-    largeLaunchCoveredManualApproval = ctx.mode === "manual" && launchResult?.fullChildrenApproved === !0;
-  }
-  if (ctx.mode === "plan") {
-    let reason = planModeBlockReason(toolName, input);
-    return reason ? { block: !0, reason } : void 0;
-  }
-  if (ctx.mode !== "manual" || !requiresManualApproval(toolName, input) || largeLaunchCoveredManualApproval)
-    return;
-  let action, detail;
-  if (toolName === "bash")
-    action = "bash", detail = sanitizeDetail(input.command);
-  else if (toolName === "edit" || toolName === "write") {
-    let path = resolvePath(cwd, input.path);
-    action = (path ? isPathOutsideCwd(path, cwd) : !1) ? `${toolName}-outside` : toolName, detail = path || String(input.path ?? "");
-  } else if (toolName === "memory_add")
-    action = toolName, detail = sanitizeDetail(input.content);
-  else if (toolName === "memory_remove")
-    action = toolName, detail = sanitizeDetail(input.line);
-  else if (toolName === "cron")
-    action = "cron", detail = sanitizeDetail(input.action);
-  else if (toolName === "subagent") {
-    action = FULL_CHILD_ACTION;
-    let launches = getRequestedChildLaunches(input).filter((launch) => launch.permissions === "full");
-    detail = sanitizeDetail(launches.map((launch) => `${launch.description}
-permissions: ${launch.permissions}`).join(`
-`));
-  } else toolName === "browser" ? (action = "browser", detail = sanitizeDetail(`${input.interaction ?? ""} ${input.role ?? ""} ${input.name ?? input.label ?? ""}. Website effects cannot be undone.`)) : toolName === "code_rewrite" ? (action = "code_rewrite", detail = sanitizeDetail(input.path ?? input.pattern)) : (action = toolName, detail = "");
-  if (ctx.approvals.has(action))
-    return;
-  if (!approvalHandler)
-    return { block: !0, reason: NO_HANDLER_REASON };
-  let resp;
-  try {
-    resp = await approvalHandler({ toolName, action, detail });
-  } catch (err) {
-    return { block: !0, reason: err instanceof Error ? err.message : NO_HANDLER_REASON };
-  }
-  let decision = typeof resp == "string" ? resp : resp.decision;
-  if (decision === "session") {
-    ctx.approvals.add(action);
-    return;
-  }
-  if (decision === "reject") {
-    let feedback = typeof resp == "string" ? void 0 : resp.feedback?.trim();
-    return { block: !0, reason: feedback ? `${REJECT_REASON} ${feedback}` : REJECT_REASON };
+  if (!READ_ONLY_TOOLS.has(toolName)) {
+    if (ctx.mode === "read-only") {
+      let reason = readOnlyModeBlockReason(toolName, input);
+      if (reason)
+        return { block: !0, reason };
+      if (toolName === "mcp")
+        return input.tool || input.connect || input.action && input.action !== "ui-messages" ? { block: !0, reason: "Read-only mode blocks MCP tool calls, connections, and authentication." } : void 0;
+      if (toolName === "subagent") {
+        let action = input.action;
+        return getRequestedChildLaunches(input).some((child) => child.permissions === "full") || action === "resume" || action === "steer" || action === "append-step" || action === "schedule" || action === "schedule-cancel" ? {
+          block: !0,
+          reason: "Read-only mode cannot launch full-access children or change running children."
+        } : void 0;
+      }
+      return toolName === "bash" || toolName === "browser" || toolName === "code_rewrite" ? void 0 : { block: !0, reason: `Read-only mode cannot verify that ${toolName} is safe.` };
+    }
+    if (toolName === "subagent") {
+      let launchResult = await gateLargeSubagentLaunch(input, ctx, options);
+      if (launchResult)
+        return launchResult;
+    }
   }
 }
 
 export {
-  PLAN_MODE_ADDENDUM,
+  READ_ONLY_MODE_ADDENDUM,
   PERMISSION_MODES,
   nextPermissionMode,
-  isPlanModeActive,
+  isReadOnlyModeActive,
   restorePermissionModeAfterPlan,
   NO_HANDLER_REASON,
   createPermissionContext,

package/dist/node-runtime/cli-runtime.js

@@ -57,7 +57,7 @@ var args = process.argv.slice(2), startupBenchmark = process.env.PI_STARTUP_BENC
 markStartupMilestone("mode_routed");
 var startupView;
 if (preloadMode === "interactive") {
-  let { InteractiveView } = await import("./interactive-view-TUZHCQM3.js");
+  let { InteractiveView } = await import("./interactive-view-NGFAMHPW.js");
   startupView = new InteractiveView(), startupView.start(), await startupView.waitForFirstFrame(), startupView.isExitRequested && process.exit(0);
 }
 var startRuntime = async () => {

package/dist/node-runtime/{command-PDVTBRWA.js → command-6WDOYKS6.js}

@@ -8,11 +8,11 @@ async function handleGatewayCommand(args) {
   try {
     let sub = args[1];
     if (sub === "setup")
-      await (await import("./setup-5SR2J35A.js")).setupGateway();
+      await (await import("./setup-CQ2NLVK5.js")).setupGateway();
     else if (sub === "pair" && args[2] === "approve" && args.includes("--owner"))
-      console.log((await import("./setup-5SR2J35A.js")).approveGatewayOwner(args[3], args[4]));
+      console.log((await import("./setup-CQ2NLVK5.js")).approveGatewayOwner(args[3], args[4]));
     else if (["start", "stop", "restart", "status", "logs", "doctor", "autostart"].includes(sub)) {
-      let service = await import("./service-ISSP6VHE.js");
+      let service = await import("./service-MDQIPQ26.js");
       if (sub === "start" && console.log(await service.startGatewayService()), sub === "stop" && console.log(await service.stopGatewayService()), sub === "restart" && (await service.stopGatewayService(), console.log(await service.startGatewayService())), (sub === "status" || sub === "doctor") && console.log(service.serviceStatusText()), sub === "logs" && console.log(service.readGatewayLog()), sub === "autostart") {
         let mode = args[2];
         if (mode !== "off" && mode !== "login" && mode !== "boot")
@@ -20,7 +20,7 @@ async function handleGatewayCommand(args) {
         await service.configureStartup(mode), console.log(`Automatic startup: ${mode}`);
       }
       if (sub === "doctor") {
-        let { loadGatewayConfig, resolvePlatformToken } = await import("./config-RORQUQFG.js"), cfg = loadGatewayConfig();
+        let { loadGatewayConfig, resolvePlatformToken } = await import("./config-D4QUPAHX.js"), cfg = loadGatewayConfig();
         for (let platform of ["telegram", "discord"])
           console.log(`${platform}: ${cfg[platform].enabled ? "enabled" : "disabled"}, token ${resolvePlatformToken(platform, cfg[platform]) ? "configured" : "missing"}, owners ${cfg.owners?.[platform].length ?? 0}`);
         console.log(`Project roots: ${cfg.projectRoots?.length ?? 0}. Run lunr gateway setup to change these.
@@ -32,7 +32,7 @@ lunr gateway autostart off|login|boot
 lunr gateway pair approve <platform> <code> [--owner]
 lunr gateway pair list`);
     else {
-      let { runGateway } = await import("./gateway-AYWM5DIO.js");
+      let { runGateway } = await import("./gateway-INAYBF4Q.js");
       process.exitCode = await runGateway(sub === "run" ? args.slice(2) : args.slice(1));
     }
   } catch (error) {

package/dist/node-runtime/{commands-KAMO2T6P.js → commands-NZLSOHPE.js}

@@ -5,7 +5,7 @@ import {
   lazyConnect,
   updateMetadataCache,
   updateStatusBar
-} from "./chunk-YJMMG7C6.js";
+} from "./chunk-DSIKTUPW.js";
 import {
   authenticate,
   getAuthForUrl,
@@ -24,7 +24,7 @@ import {
   writeDirectToolsConfig,
   writeSharedServerEntry,
   writeStarterProjectConfig
-} from "./chunk-VSELYKWU.js";
+} from "./chunk-LWYIVUGV.js";
 import {
   getAgentPath
 } from "./chunk-4HXHDDCF.js";

package/dist/node-runtime/{commands-XDCFGIGW.js → commands-QC6VUZJQ.js}

@@ -5,23 +5,23 @@ import {
   formatHelpText,
   runChatCommand,
   sendCommandReply
-} from "./chunk-LFZDVKSP.js";
-import "./chunk-EKVFP6YF.js";
-import "./chunk-DD5YWFSJ.js";
+} from "./chunk-E4D3IGP2.js";
+import "./chunk-TORR5XBV.js";
+import "./chunk-QTU6AKNJ.js";
 import "./chunk-RMQZU2YU.js";
-import "./chunk-UWPJL22I.js";
-import "./chunk-TQGPP4SC.js";
-import "./chunk-OFKSVRV7.js";
+import "./chunk-SLVOAQOY.js";
+import "./chunk-CDVHZOOK.js";
+import "./chunk-GYIXXQAO.js";
 import "./chunk-GJ2RDBRL.js";
 import "./chunk-CGBXPL3E.js";
 import "./chunk-BBUVIEZB.js";
-import "./chunk-5D7LC2ZQ.js";
+import "./chunk-ZXSGTGJ6.js";
 import "./chunk-M3LZLQW2.js";
-import "./chunk-XLTL257W.js";
+import "./chunk-2KIPT4HJ.js";
 import "./chunk-FVDOXRUD.js";
 import "./chunk-IMLCWLPI.js";
 import "./chunk-UAEOTO52.js";
-import "./chunk-R3K2F5GI.js";
+import "./chunk-B4HP6ZWM.js";
 import "./chunk-E24EO34J.js";
 import "./chunk-RDDAZOMU.js";
 import "./chunk-FQMM2EZ2.js";

package/dist/node-runtime/{config-RORQUQFG.js → config-D4QUPAHX.js}

@@ -6,7 +6,7 @@ import {
   platformConfigFor,
   resolvePlatformToken,
   saveGatewayConfig
-} from "./chunk-R3K2F5GI.js";
+} from "./chunk-B4HP6ZWM.js";
 import "./chunk-FQMM2EZ2.js";
 import "./chunk-Q4Q6D4IY.js";
 import "./chunk-BRJX2PRC.js";

package/dist/node-runtime/{direct-tool-executor-YAVOLDFY.js → direct-tool-executor-77GW4F5P.js}

@@ -6,12 +6,12 @@ import {
   resolveMcpOutputGuardOptions,
   resolveMcpResultContent,
   transformMcpContent
-} from "./chunk-BX2RB477.js";
+} from "./chunk-HFVZUPFJ.js";
 import {
   formatSchema,
   getFailureAgeSeconds,
   lazyConnect
-} from "./chunk-YJMMG7C6.js";
+} from "./chunk-DSIKTUPW.js";
 import {
   UrlElicitationRequiredError,
   authenticate,
@@ -21,7 +21,7 @@ import {
   abortable,
   formatAuthRequiredMessage,
   throwIfAborted
-} from "./chunk-VSELYKWU.js";
+} from "./chunk-LWYIVUGV.js";
 import "./chunk-4HXHDDCF.js";
 import "./chunk-ARC4KOTI.js";
 import "./chunk-BI3DHYCN.js";

package/dist/node-runtime/{export-html-KSOIMVPI.js → export-html-VM4J2MNR.js}

@@ -1,7 +1,7 @@
 import { createRequire as __lunrRequire } from "node:module"; const require = __lunrRequire(import.meta.url);
 import {
   SessionManager
-} from "./chunk-XLTL257W.js";
+} from "./chunk-2KIPT4HJ.js";
 import "./chunk-FVDOXRUD.js";
 import "./chunk-UAEOTO52.js";
 import {