@aspectlylabs/mikka 0.0.155 → 0.0.157

package/client.js

@@ -3741,7 +3741,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.157",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3801,7 +3801,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "6b1b0ad1cf20baee870da2c08c5d57c49a02daba"
 };
 
 // src/paths.ts

package/http-link.js

@@ -2410,11 +2410,42 @@ function classifyWrite(worktree, target) {
   return ok2 ? "write_in_worktree" : "write_outside_repo";
 }
 
+// src/agents/run-sandbox-launcher.ts
+import { isIP } from "node:net";
+import { NetworkConfigSchema } from "@anthropic-ai/sandbox-runtime";
+var NETWORK_DECISION_MS = 5 * 6e4;
+function canonicalHost(host) {
+  if (!host || /[\s\x00-\x1f\x7f%\\/@?#*]/u.test(host)) return;
+  const bare = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+  if (isIP(bare) === 6) return new URL(`http://[${bare}]`).hostname.slice(1, -1);
+  if (bare.includes(":")) return;
+  try {
+    return new URL(`http://${bare}`).hostname.toLowerCase();
+  } catch {
+    return void 0;
+  }
+}
+function matchesRunSandboxDomain(request, domains) {
+  const host = canonicalHost(request.host);
+  if (!host || !Number.isInteger(request.port) || request.port < 1 || request.port > 65535) return false;
+  return domains.some((entry) => {
+    if (entry === "*") return true;
+    const parts = /^(\[[^\]]+\]|[^:]+?)(?::([1-9][0-9]{0,4}))?$/u.exec(entry);
+    if (!parts || parts[2] !== void 0 && (Number(parts[2]) > 65535 || Number(parts[2]) !== request.port)) return false;
+    const wildcard = parts[1].startsWith("*.");
+    const pattern = canonicalHost(wildcard ? parts[1].slice(2) : parts[1]);
+    if (!pattern) return false;
+    if (!wildcard) return host === pattern;
+    return !isIP(host) && pattern.includes(".") && host.endsWith(`.${pattern}`);
+  });
+}
+
 // src/agents/tool-approval-policy.ts
-function toolApprovalDecision(request, policy, worktree, apps = []) {
+function toolApprovalDecision(request, policy, worktree, apps = [], runHosts = []) {
   if (request.method === "sandbox/network" && policy) {
     const value = request.input;
     if (!value || typeof value.host !== "string" || /[*/:]/.test(value.host) || !networkDomainSchema.safeParse(value.host).success || !Number.isInteger(value.port) || Number(value.port) < 1 || Number(value.port) > 65535) return "deny";
+    if (policy.permissions.network === "ask" && matchesRunSandboxDomain({ host: value.host, port: Number(value.port) }, [...policy.networkAllow, ...runHosts])) return "allow";
     return policy.permissions.network;
   }
   if (request.method.startsWith("cli/") && policy && worktree) {
@@ -4144,7 +4175,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.157",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4204,7 +4235,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "6b1b0ad1cf20baee870da2c08c5d57c49a02daba"
 };
 
 // src/paths.ts
@@ -4429,7 +4460,13 @@ var HttpServerLink = class {
     const response = z26.object({ decision: z26.enum(["pending", "allow", "deny"]) });
     const liveness = new AbortController();
     const gate = new ToolApprovalGate(assignment.runId, {
-      permission: (request) => toolApprovalDecision(request, assignment.policy, worktree, runApps(assignment.mcp)?.apps.map((app) => app.name)),
+      permission: (request) => toolApprovalDecision(
+        request,
+        assignment.policy,
+        worktree,
+        runApps(assignment.mcp)?.apps.map((app) => app.name),
+        assignment.github ? [new URL(assignment.github.endpoint).host] : []
+      ),
       // Keep the callback pending at the tool boundary. The adapter's current
       // session and checkpoint remain intact; handback resolves this same call.
       isLive: async () => {

package/login.js

@@ -3748,7 +3748,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.157",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3808,7 +3808,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "6b1b0ad1cf20baee870da2c08c5d57c49a02daba"
 };
 
 // src/paths.ts
@@ -3817,6 +3817,10 @@ var DAEMON_VERSION = package_default.version;
 // src/server-link-http.ts
 import { z as z26 } from "zod";
 
+// src/agents/run-sandbox-launcher.ts
+import { NetworkConfigSchema } from "@anthropic-ai/sandbox-runtime";
+var NETWORK_DECISION_MS = 5 * 6e4;
+
 // ../protocol/src/capture.ts
 import { z as z23 } from "zod";
 var CAPTURE_CONTENT_TYPES = [

package/main.js

@@ -3785,7 +3785,7 @@ import { join as join5 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.155",
+  version: "0.0.157",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3845,7 +3845,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "a0295ff9031591fc84944f77c47074e8345d129e"
+  gitHead: "6b1b0ad1cf20baee870da2c08c5d57c49a02daba"
 };
 
 // src/paths.ts
@@ -3985,7 +3985,7 @@ function classifySegment(segment, depth) {
   if (entry && verb && entry[1].includes(verb)) return "install_dependency";
   return null;
 }
-function claudePermissionRules(policy) {
+function claudePermissionRules(policy, agentDelivers = false) {
   const install2 = INSTALL_COMMANDS.flatMap(
     ([tool2, verbs]) => verbs.map((verb) => `Bash(${tool2} ${verb}:*)`)
   );
@@ -3995,7 +3995,7 @@ function claudePermissionRules(policy) {
     ask: decision === "ask" ? install2 : [],
     deny: [
       ...!rawCliShellAvailable(policy) ? ["Bash", "PowerShell", "Monitor"] : [],
-      "Bash(git push:*)",
+      ...agentDelivers && !policy.readOnly ? [] : ["Bash(git push:*)"],
       ...policy.readOnly ? READ_ONLY_TOOLS : [],
       ...decision === "deny" ? install2 : []
     ]
@@ -6015,6 +6015,14 @@ var RunContext = class {
   tempEnv() {
     return { TMPDIR: this.tmpDir, TMPPREFIX: join8(this.tmpDir, "zsh"), ...withGitConfig(this.githubEnv, RUN_GIT_CONFIG), ...this.options.policyHash ? { MIKKA_POLICY_HASH: this.options.policyHash } : {} };
   }
+  /**
+   * The agent delivers this run itself: it commits, pushes to the issue
+   * branch and opens the pull request with run-scoped GitHub credentials. The
+   * server sends GitHub delivery only for a run whose push is allowed.
+   */
+  get agentDelivers() {
+    return Object.keys(this.githubEnv).length > 0;
+  }
   /** A hand-in from an earlier session would end this one at once. */
   clearHandoff() {
     rmSync7(this.handoffFile, { force: true });
@@ -7072,10 +7080,10 @@ function claudeSandboxSettings(policy) {
     }
   };
 }
-function claudeSettings(policy, workspace) {
+function claudeSettings(policy, workspace, agentDelivers = false) {
   return {
     sandbox: claudeSandboxSettings(policy),
-    permissions: claudePermissionRules(runPolicy(workspace))
+    permissions: claudePermissionRules(runPolicy(workspace), agentDelivers)
   };
 }
 function claudeChunks(message) {
@@ -7415,7 +7423,7 @@ var ClaudeAdapter = class {
         },
         settingSources: [],
         settings: {
-          ...claudeSettings(ctx.policy(), options.policy),
+          ...claudeSettings(ctx.policy(), options.policy, ctx.agentDelivers),
           // The official runtime launcher encloses the entire CLI. Nesting
           // the CLI's Bash-only sandbox is unsupported on macOS.
           ...outerLocal ? { sandbox: { enabled: false, allowUnsandboxedCommands: true, autoAllowBashIfSandboxed: false } } : {},
@@ -8270,7 +8278,7 @@ var CodexAdapter = class {
 import { Readable, Writable } from "node:stream";
 import * as acp from "@agentclientprotocol/sdk";
 import { join as join13 } from "node:path";
-function acpPermissionResponse(params, policy) {
+function acpPermissionResponse(params, policy, agentDelivers = false) {
   const pick = (kinds) => {
     for (const kind of kinds) {
       const option = params.options.find((o) => o.kind === kind);
@@ -8282,7 +8290,7 @@ function acpPermissionResponse(params, policy) {
   const raw = params.toolCall.rawInput;
   const command = Array.isArray(raw?.command) ? raw.command.join(" ") : typeof raw?.command === "string" ? raw.command : params.toolCall.title ?? "";
   const action = classifyCommand(command);
-  const refused = action === "git_push" || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
+  const refused = action === "git_push" && !agentDelivers || action !== null && decide(action, { policy: runPolicy(policy) }) !== "allow";
   if (refused)
     return { response: pick(["reject_once", "reject_always"]), refused };
   const allowed = pick(["allow_always", "allow_once"]);
@@ -8465,7 +8473,8 @@ var CursorAdapter = class {
         async requestPermission(params) {
           const { response, refused } = acpPermissionResponse(
             params,
-            options.policy
+            options.policy,
+            ctx.agentDelivers
           );
           if (refused)
             log.info(

package/mikka-release-manifest.json

@@ -1,11 +1,11 @@
 {
   "version": 1,
-  "sourceSha": "a0295ff9031591fc84944f77c47074e8345d129e",
+  "sourceSha": "6b1b0ad1cf20baee870da2c08c5d57c49a02daba",
   "repository": "alexj11324/Mikka",
-  "buildRunId": "41301858649",
+  "buildRunId": "41301888300",
   "buildKind": "github-actions-main",
   "sourceLockSha256": "c99f1e4f641d8e004cfe807653478e10f91e53fcf47102add5f4c154cdc1cb57",
-  "createdAt": "2026-11-01T11:31:02.333Z",
+  "createdAt": "2026-11-01T11:38:56.518Z",
   "sbom": "sbom.cdx.json",
   "files": [
     {
@@ -40,13 +40,13 @@
     },
     {
       "path": "cli.js",
-      "size": 649393,
-      "sha256": "80d315deabf491b19d9fd4c4c7504538b9a61384c6657f5e1366f046d51f0599"
+      "size": 650215,
+      "sha256": "e16b73443a1f6d71bce65e568853cb1dbf2461a030082f05cd5665269c6b6317"
     },
     {
       "path": "client.js",
       "size": 141206,
-      "sha256": "3ec2e556beec11fe31d93aa0b7556b44262f6649635a0ee824d32583c357af52"
+      "sha256": "f0a3a3e922932cd9dfe903ffa2304b33da5cb1ddc94d8132e90d6f64a1764579"
     },
     {
       "path": "computer/driver.mjs",
@@ -175,8 +175,8 @@
     },
     {
       "path": "http-link.js",
-      "size": 182550,
-      "sha256": "c508932885e19e4799d1cdcc7520d53bdd4f0ed252e0bf49290f80fa87c95145"
+      "size": 184199,
+      "sha256": "2b7b6ca45649f0a429c783818760b77ef58b329b918099d3081b0c4290be88f3"
     },
     {
       "path": "log.js",
@@ -185,13 +185,13 @@
     },
     {
       "path": "login.js",
-      "size": 145941,
-      "sha256": "3eb7143f66eca50a633fd5392a831428b82066e797411e6e2b7edac440920315"
+      "size": 146084,
+      "sha256": "b3482d29728c169a63ac1d10542b3a20a594d9edcc86319f5b0b4715a0006159"
     },
     {
       "path": "main.js",
-      "size": 594919,
-      "sha256": "d291c36403b253623ab236a7c11e753d62ce7fc9bdb8131935bc1e838e4f4254"
+      "size": 595432,
+      "sha256": "d2a09ef9c0ef8075fc3cfa5760a39df9f4b6e0b2426c96f916f3cc3b0bc9acd0"
     },
     {
       "path": "mikka-mcp.mjs",
@@ -200,23 +200,23 @@
     },
     {
       "path": "mikka.js",
-      "size": 649409,
-      "sha256": "c2487ea75f1c0e96b48b6769a9a90c389fffa6fb6f179aa204cea7f9305dc621"
+      "size": 650231,
+      "sha256": "01e7a639bc865321647ed3aa466df5566fe486eb2e8613055cfe6727fe483f52"
     },
     {
       "path": "npm-shrinkwrap.json",
       "size": 78117,
-      "sha256": "31ea2bd8080c86920394085e7bf8ee590f876c900749e7183061e2b07dc3b7e5"
+      "sha256": "352f22a8aea1291c81702563522c8d317aefdd20443121c158adccba613014d5"
     },
     {
       "path": "package.json",
       "size": 1247,
-      "sha256": "7f037c1026312bdc90f1df4e56467e4abb2edf1263140529708d3cc498d447c5"
+      "sha256": "65bd4996790c46e8936e5ff0897a7541f2013a99017511e1288deda0ec01f141"
     },
     {
       "path": "paths.js",
       "size": 4138,
-      "sha256": "be92460dc50121d80c377f23017f6a8e92a1e91f4df91a7aad0208bf45595a12"
+      "sha256": "2a6c023bf79fe57bb53ad1c09884d4b174262c7f2fdef0c91898cecd90736291"
     },
     {
       "path": "sandbox.js",
@@ -226,7 +226,7 @@
     {
       "path": "sbom.cdx.json",
       "size": 144314,
-      "sha256": "054e7e065839261ed3371a9b2f5347d43dc7d056a985813dec2f0df280eaf531"
+      "sha256": "dcd3651fcf42cdf961c171abc21433639a5eda76f3c5bfee378cc2b4c110242a"
     }
   ]
 }