@aspectlylabs/mikka 0.0.155 → 0.0.156

package/cli.js

@@ -4480,7 +4480,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.156",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4540,7 +4540,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "3fe02256b52ef29ce2581173987f01d3b2054448"
 };
 
 // src/paths.ts
@@ -4815,7 +4815,7 @@ function classifySegment(segment, depth) {
   if (entry && verb && entry[1].includes(verb)) return "install_dependency";
   return null;
 }
-function claudePermissionRules(policy) {
+function claudePermissionRules(policy, agentDelivers = false) {
   const install2 = INSTALL_COMMANDS.flatMap(
     ([tool2, verbs]) => verbs.map((verb) => `Bash(${tool2} ${verb}:*)`)
   );
@@ -4825,7 +4825,7 @@ function claudePermissionRules(policy) {
     ask: decision === "ask" ? install2 : [],
     deny: [
       ...!rawCliShellAvailable(policy) ? ["Bash", "PowerShell", "Monitor"] : [],
-      "Bash(git push:*)",
+      ...agentDelivers && !policy.readOnly ? [] : ["Bash(git push:*)"],
       ...policy.readOnly ? READ_ONLY_TOOLS : [],
       ...decision === "deny" ? install2 : []
     ]
@@ -7230,6 +7230,14 @@ var RunContext = class {
   tempEnv() {
     return { TMPDIR: this.tmpDir, TMPPREFIX: join11(this.tmpDir, "zsh"), ...withGitConfig(this.githubEnv, RUN_GIT_CONFIG), ...this.options.policyHash ? { MIKKA_POLICY_HASH: this.options.policyHash } : {} };
   }
+  /**
+   * The agent delivers this run itself: it commits, pushes to the issue
+   * branch and opens the pull request with run-scoped GitHub credentials. The
+   * server sends GitHub delivery only for a run whose push is allowed.
+   */
+  get agentDelivers() {
+    return Object.keys(this.githubEnv).length > 0;
+  }
   /** A hand-in from an earlier session would end this one at once. */
   clearHandoff() {
     rmSync8(this.handoffFile, { force: true });
@@ -8252,10 +8260,10 @@ function claudeSandboxSettings(policy) {
     }
   };
 }
-function claudeSettings(policy, workspace) {
+function claudeSettings(policy, workspace, agentDelivers = false) {
   return {
     sandbox: claudeSandboxSettings(policy),
-    permissions: claudePermissionRules(runPolicy(workspace))
+    permissions: claudePermissionRules(runPolicy(workspace), agentDelivers)
   };
 }
 function claudeChunks(message) {
@@ -8595,7 +8603,7 @@ var ClaudeAdapter = class {
         },
         settingSources: [],
         settings: {
-          ...claudeSettings(ctx.policy(), options.policy),
+          ...claudeSettings(ctx.policy(), options.policy, ctx.agentDelivers),
           // The official runtime launcher encloses the entire CLI. Nesting
           // the CLI's Bash-only sandbox is unsupported on macOS.
           ...outerLocal ? { sandbox: { enabled: false, allowUnsandboxedCommands: true, autoAllowBashIfSandboxed: false } } : {},
@@ -9450,7 +9458,7 @@ var CodexAdapter = class {
 import { Readable, Writable } from "node:stream";
 import * as acp from "@agentclientprotocol/sdk";
 import { join as join16 } from "node:path";
-function acpPermissionResponse(params, policy) {
+function acpPermissionResponse(params, policy, agentDelivers = false) {
   const pick = (kinds) => {
     for (const kind of kinds) {
       const option = params.options.find((o) => o.kind === kind);
@@ -9462,7 +9470,7 @@ function acpPermissionResponse(params, policy) {
   const raw = params.toolCall.rawInput;
   const command = Array.isArray(raw?.command) ? raw.command.join(" ") : typeof raw?.command === "string" ? raw.command : params.toolCall.title ?? "";
   const action = classifyCommand(command);
-  const refused = action === "git_push" || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
+  const refused = action === "git_push" && !agentDelivers || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
   if (refused)
     return { response: pick(["reject_once", "reject_always"]), refused };
   const allowed = pick(["allow_always", "allow_once"]);
@@ -9645,7 +9653,8 @@ var CursorAdapter = class {
         async requestPermission(params) {
           const { response, refused } = acpPermissionResponse(
             params,
-            options.policy
+            options.policy,
+            ctx.agentDelivers
           );
           if (refused)
             log.info(

package/client.js

@@ -3741,7 +3741,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.156",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3801,7 +3801,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "3fe02256b52ef29ce2581173987f01d3b2054448"
 };
 
 // src/paths.ts

package/http-link.js

@@ -4144,7 +4144,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.156",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4204,7 +4204,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "3fe02256b52ef29ce2581173987f01d3b2054448"
 };
 
 // src/paths.ts

package/login.js

@@ -3748,7 +3748,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.156",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3808,7 +3808,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "3fe02256b52ef29ce2581173987f01d3b2054448"
 };
 
 // src/paths.ts

package/main.js

@@ -3785,7 +3785,7 @@ import { join as join5 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.156",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3845,7 +3845,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "3fe02256b52ef29ce2581173987f01d3b2054448"
 };
 
 // src/paths.ts
@@ -3985,7 +3985,7 @@ function classifySegment(segment, depth) {
   if (entry && verb && entry[1].includes(verb)) return "install_dependency";
   return null;
 }
-function claudePermissionRules(policy) {
+function claudePermissionRules(policy, agentDelivers = false) {
   const install2 = INSTALL_COMMANDS.flatMap(
     ([tool2, verbs]) => verbs.map((verb) => `Bash(${tool2} ${verb}:*)`)
   );
@@ -3995,7 +3995,7 @@ function claudePermissionRules(policy) {
     ask: decision === "ask" ? install2 : [],
     deny: [
       ...!rawCliShellAvailable(policy) ? ["Bash", "PowerShell", "Monitor"] : [],
-      "Bash(git push:*)",
+      ...agentDelivers && !policy.readOnly ? [] : ["Bash(git push:*)"],
       ...policy.readOnly ? READ_ONLY_TOOLS : [],
       ...decision === "deny" ? install2 : []
     ]
@@ -6015,6 +6015,14 @@ var RunContext = class {
   tempEnv() {
     return { TMPDIR: this.tmpDir, TMPPREFIX: join8(this.tmpDir, "zsh"), ...withGitConfig(this.githubEnv, RUN_GIT_CONFIG), ...this.options.policyHash ? { MIKKA_POLICY_HASH: this.options.policyHash } : {} };
   }
+  /**
+   * The agent delivers this run itself: it commits, pushes to the issue
+   * branch and opens the pull request with run-scoped GitHub credentials. The
+   * server sends GitHub delivery only for a run whose push is allowed.
+   */
+  get agentDelivers() {
+    return Object.keys(this.githubEnv).length > 0;
+  }
   /** A hand-in from an earlier session would end this one at once. */
   clearHandoff() {
     rmSync7(this.handoffFile, { force: true });
@@ -7072,10 +7080,10 @@ function claudeSandboxSettings(policy) {
     }
   };
 }
-function claudeSettings(policy, workspace) {
+function claudeSettings(policy, workspace, agentDelivers = false) {
   return {
     sandbox: claudeSandboxSettings(policy),
-    permissions: claudePermissionRules(runPolicy(workspace))
+    permissions: claudePermissionRules(runPolicy(workspace), agentDelivers)
   };
 }
 function claudeChunks(message) {
@@ -7415,7 +7423,7 @@ var ClaudeAdapter = class {
         },
         settingSources: [],
         settings: {
-          ...claudeSettings(ctx.policy(), options.policy),
+          ...claudeSettings(ctx.policy(), options.policy, ctx.agentDelivers),
           // The official runtime launcher encloses the entire CLI. Nesting
           // the CLI's Bash-only sandbox is unsupported on macOS.
           ...outerLocal ? { sandbox: { enabled: false, allowUnsandboxedCommands: true, autoAllowBashIfSandboxed: false } } : {},
@@ -8270,7 +8278,7 @@ var CodexAdapter = class {
 import { Readable, Writable } from "node:stream";
 import * as acp from "@agentclientprotocol/sdk";
 import { join as join13 } from "node:path";
-function acpPermissionResponse(params, policy) {
+function acpPermissionResponse(params, policy, agentDelivers = false) {
   const pick = (kinds) => {
     for (const kind of kinds) {
       const option = params.options.find((o) => o.kind === kind);
@@ -8282,7 +8290,7 @@ function acpPermissionResponse(params, policy) {
   const raw = params.toolCall.rawInput;
   const command = Array.isArray(raw?.command) ? raw.command.join(" ") : typeof raw?.command === "string" ? raw.command : params.toolCall.title ?? "";
   const action = classifyCommand(command);
-  const refused = action === "git_push" || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
+  const refused = action === "git_push" && !agentDelivers || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
   if (refused)
     return { response: pick(["reject_once", "reject_always"]), refused };
   const allowed = pick(["allow_always", "allow_once"]);
@@ -8465,7 +8473,8 @@ var CursorAdapter = class {
         async requestPermission(params) {
           const { response, refused } = acpPermissionResponse(
             params,
-            options.policy
+            options.policy,
+            ctx.agentDelivers
           );
           if (refused)
             log.info(

package/mikka-release-manifest.json

@@ -1,11 +1,11 @@
 {
   "version": 1,
-  "sourceSha": "a0295ff9031591fc84944f77c47074e8345d129e",
+  "sourceSha": "3fe02256b52ef29ce2581173987f01d3b2054448",
   "repository": "alexj11324/Mikka",
-  "buildRunId": "41301858649",
+  "buildRunId": "41301873626",
   "buildKind": "github-actions-main",
   "sourceLockSha256": "c99f1e4f641d8e004cfe807653478e10f91e53fcf47102add5f4c154cdc1cb57",
-  "createdAt": "2026-11-01T11:31:02.333Z",
+  "createdAt": "2026-11-01T11:34:59.039Z",
   "sbom": "sbom.cdx.json",
   "files": [
     {
@@ -40,13 +40,13 @@
     },
     {
       "path": "cli.js",
-      "size": 649393,
-      "sha256": "80d315deabf491b19d9fd4c4c7504538b9a61384c6657f5e1366f046d51f0599"
+      "size": 649906,
+      "sha256": "ea0a5d8f7d1729d9a7febf4a1474182ea867594b08bba034046ce9e1660ea88a"
     },
     {
       "path": "client.js",
       "size": 141206,
-      "sha256": "3ec2e556beec11fe31d93aa0b7556b44262f6649635a0ee824d32583c357af52"
+      "sha256": "186de19be0c69837ec16496844d3fce1054404df99236b0c632751ae004a6d9f"
     },
     {
       "path": "computer/driver.mjs",
@@ -176,7 +176,7 @@
     {
       "path": "http-link.js",
       "size": 182550,
-      "sha256": "c508932885e19e4799d1cdcc7520d53bdd4f0ed252e0bf49290f80fa87c95145"
+      "sha256": "b16fcb4cc7efaeb1d01b7737d7d398736c080e99b77510f42539c00cde8865a7"
     },
     {
       "path": "log.js",
@@ -186,12 +186,12 @@
     {
       "path": "login.js",
       "size": 145941,
-      "sha256": "3eb7143f66eca50a633fd5392a831428b82066e797411e6e2b7edac440920315"
+      "sha256": "fc3edd9d7e5c7d59028e288c6f18c1f53380da713b49a63476d0742e2aabf1d0"
     },
     {
       "path": "main.js",
-      "size": 594919,
-      "sha256": "d291c36403b253623ab236a7c11e753d62ce7fc9bdb8131935bc1e838e4f4254"
+      "size": 595432,
+      "sha256": "056bb0f88e08eacfdc643f775a2d101593e0f722d076006515358c05f99f8b90"
     },
     {
       "path": "mikka-mcp.mjs",
@@ -200,23 +200,23 @@
     },
     {
       "path": "mikka.js",
-      "size": 649409,
-      "sha256": "c2487ea75f1c0e96b48b6769a9a90c389fffa6fb6f179aa204cea7f9305dc621"
+      "size": 649922,
+      "sha256": "8e03efbabb2d9a8ff443ebfbab63fd859e4b05fff4340f8543d3003eb0731053"
     },
     {
       "path": "npm-shrinkwrap.json",
       "size": 78117,
-      "sha256": "31ea2bd8080c86920394085e7bf8ee590f876c900749e7183061e2b07dc3b7e5"
+      "sha256": "7a9077f4872f82c1b74dab4c0d5abe22862bcc4cf0b349560439bd51df7f1c11"
     },
     {
       "path": "package.json",
       "size": 1247,
-      "sha256": "7f037c1026312bdc90f1df4e56467e4abb2edf1263140529708d3cc498d447c5"
+      "sha256": "10cd534abaa4aedba3968f2000a3dfe0738ef5af654a76567b15edfbdb9a1db4"
     },
     {
       "path": "paths.js",
       "size": 4138,
-      "sha256": "be92460dc50121d80c377f23017f6a8e92a1e91f4df91a7aad0208bf45595a12"
+      "sha256": "3f687c02d1b5442dd6243b682e8d2db4902bdf4354e4fe9b9507ff3966b9e27d"
     },
     {
       "path": "sandbox.js",
@@ -226,7 +226,7 @@
     {
       "path": "sbom.cdx.json",
       "size": 144314,
-      "sha256": "054e7e065839261ed3371a9b2f5347d43dc7d056a985813dec2f0df280eaf531"
+      "sha256": "93003336a8e6c7f2520b064b5250af5188aad04e25550daee8d6fdf89164ff17"
     }
   ]
 }

package/mikka.js

@@ -4481,7 +4481,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.156",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4541,7 +4541,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "3fe02256b52ef29ce2581173987f01d3b2054448"
 };
 
 // src/paths.ts
@@ -4816,7 +4816,7 @@ function classifySegment(segment, depth) {
   if (entry && verb && entry[1].includes(verb)) return "install_dependency";
   return null;
 }
-function claudePermissionRules(policy) {
+function claudePermissionRules(policy, agentDelivers = false) {
   const install2 = INSTALL_COMMANDS.flatMap(
     ([tool2, verbs]) => verbs.map((verb) => `Bash(${tool2} ${verb}:*)`)
   );
@@ -4826,7 +4826,7 @@ function claudePermissionRules(policy) {
     ask: decision === "ask" ? install2 : [],
     deny: [
       ...!rawCliShellAvailable(policy) ? ["Bash", "PowerShell", "Monitor"] : [],
-      "Bash(git push:*)",
+      ...agentDelivers && !policy.readOnly ? [] : ["Bash(git push:*)"],
       ...policy.readOnly ? READ_ONLY_TOOLS : [],
       ...decision === "deny" ? install2 : []
     ]
@@ -7231,6 +7231,14 @@ var RunContext = class {
   tempEnv() {
     return { TMPDIR: this.tmpDir, TMPPREFIX: join11(this.tmpDir, "zsh"), ...withGitConfig(this.githubEnv, RUN_GIT_CONFIG), ...this.options.policyHash ? { MIKKA_POLICY_HASH: this.options.policyHash } : {} };
   }
+  /**
+   * The agent delivers this run itself: it commits, pushes to the issue
+   * branch and opens the pull request with run-scoped GitHub credentials. The
+   * server sends GitHub delivery only for a run whose push is allowed.
+   */
+  get agentDelivers() {
+    return Object.keys(this.githubEnv).length > 0;
+  }
   /** A hand-in from an earlier session would end this one at once. */
   clearHandoff() {
     rmSync8(this.handoffFile, { force: true });
@@ -8253,10 +8261,10 @@ function claudeSandboxSettings(policy) {
     }
   };
 }
-function claudeSettings(policy, workspace) {
+function claudeSettings(policy, workspace, agentDelivers = false) {
   return {
     sandbox: claudeSandboxSettings(policy),
-    permissions: claudePermissionRules(runPolicy(workspace))
+    permissions: claudePermissionRules(runPolicy(workspace), agentDelivers)
   };
 }
 function claudeChunks(message) {
@@ -8596,7 +8604,7 @@ var ClaudeAdapter = class {
         },
         settingSources: [],
         settings: {
-          ...claudeSettings(ctx.policy(), options.policy),
+          ...claudeSettings(ctx.policy(), options.policy, ctx.agentDelivers),
           // The official runtime launcher encloses the entire CLI. Nesting
           // the CLI's Bash-only sandbox is unsupported on macOS.
           ...outerLocal ? { sandbox: { enabled: false, allowUnsandboxedCommands: true, autoAllowBashIfSandboxed: false } } : {},
@@ -9451,7 +9459,7 @@ var CodexAdapter = class {
 import { Readable, Writable } from "node:stream";
 import * as acp from "@agentclientprotocol/sdk";
 import { join as join16 } from "node:path";
-function acpPermissionResponse(params, policy) {
+function acpPermissionResponse(params, policy, agentDelivers = false) {
   const pick = (kinds) => {
     for (const kind of kinds) {
       const option = params.options.find((o) => o.kind === kind);
@@ -9463,7 +9471,7 @@ function acpPermissionResponse(params, policy) {
   const raw = params.toolCall.rawInput;
   const command = Array.isArray(raw?.command) ? raw.command.join(" ") : typeof raw?.command === "string" ? raw.command : params.toolCall.title ?? "";
   const action = classifyCommand(command);
-  const refused = action === "git_push" || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
+  const refused = action === "git_push" && !agentDelivers || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
   if (refused)
     return { response: pick(["reject_once", "reject_always"]), refused };
   const allowed = pick(["allow_always", "allow_once"]);
@@ -9646,7 +9654,8 @@ var CursorAdapter = class {
         async requestPermission(params) {
           const { response, refused } = acpPermissionResponse(
             params,
-            options.policy
+            options.policy,
+            ctx.agentDelivers
           );
           if (refused)
             log.info(

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.155",
+  "version": "0.0.156",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@aspectlylabs/mikka",
-      "version": "0.0.155",
+      "version": "0.0.156",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@agentclientprotocol/sdk": "1.9.0",

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.155",
+  "version": "0.0.156",
   "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-  "gitHead": "a0295ff9031591fc84944f77c47074e8345d129e",
+  "gitHead": "3fe02256b52ef29ce2581173987f01d3b2054448",
   "type": "module",
   "private": false,
   "license": "AGPL-3.0-only",

package/paths.js

@@ -6,7 +6,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.156",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -66,7 +66,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "3fe02256b52ef29ce2581173987f01d3b2054448"
 };
 
 // src/paths.ts

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:e7394798-8931-48d8-bf37-b1552788707f",
+  "serialNumber": "urn:uuid:8d063e4c-21da-49c9-a7fa-c1346a8fad06",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-11-01T11:31:01.301Z",
+    "timestamp": "2026-11-01T11:34:58.062Z",
     "lifecycles": [
       {
         "phase": "pre-build"
@@ -19,13 +19,13 @@
       }
     ],
     "component": {
-      "bom-ref": "@aspectlylabs/mikka@0.0.155",
+      "bom-ref": "@aspectlylabs/mikka@0.0.156",
       "type": "library",
-      "name": ".retained-build-CZssE9",
-      "version": "0.0.155",
+      "name": ".retained-build-SsBNoF",
+      "version": "0.0.156",
       "scope": "required",
       "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.155",
+      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.156",
       "properties": [],
       "externalReferences": [
         {
@@ -4627,7 +4627,7 @@
   ],
   "dependencies": [
     {
-      "ref": "@aspectlylabs/mikka@0.0.155",
+      "ref": "@aspectlylabs/mikka@0.0.156",
       "dependsOn": [
         "@agentclientprotocol/sdk@1.9.0",
         "@anthropic-ai/claude-agent-sdk@0.3.305",