@atlasharness/atlascode 0.1.24 → 0.1.26

package/dist/cli.js

@@ -45912,7 +45912,7 @@ var init_bashCommandHelpers = __esm(() => {
 // src/engine/tools/bash/bashReadOnly.ts
 function isReadOnlyCommand(command) {
   const trimmed = command.trim();
-  if (trimmed.includes("&&") || trimmed.includes("||") || trimmed.includes(";") || trimmed.includes("|") || trimmed.includes("`") || trimmed.includes("$(")) {
+  if (trimmed.includes("&&") || trimmed.includes("||") || trimmed.includes(";") || trimmed.includes("|") || trimmed.includes("`") || trimmed.includes("$(") || trimmed.includes(">")) {
     return false;
   }
   return READ_ONLY_PREFIXES.some((p) => trimmed === p || trimmed.startsWith(p + " "));
@@ -46479,11 +46479,15 @@ function validateCommandPaths(command, args, cwd, toolPermissionContext, compoun
           decisionReason
         };
       }
+      const effectiveDecisionReason = decisionReason ?? {
+        type: "other",
+        reason: `${command} target '${resolvedPath}' requires manual approval`
+      };
       return {
         behavior: "ask",
         message,
         blockedPath: resolvedPath,
-        decisionReason
+        decisionReason: effectiveDecisionReason
       };
     }
   }
@@ -46619,11 +46623,15 @@ function validateOutputRedirections(redirections, cwd, toolPermissionContext, co
           decisionReason
         };
       }
+      const effectiveDecisionReason = decisionReason ?? {
+        type: "other",
+        reason: `Output redirection target '${resolvedPath}' requires manual approval`
+      };
       return {
         behavior: "ask",
         message,
         blockedPath: resolvedPath,
-        decisionReason,
+        decisionReason: effectiveDecisionReason,
         suggestions: [
           {
             type: "addDirectories",
@@ -51973,7 +51981,11 @@ function createPermissionGate(context, opts = {}) {
   return async (tool, input) => {
     const decision = await hasPermissionsToUseTool(tool, input ?? {}, { getToolPermissionContext: () => context, getAppState: opts.getAppState });
     if (decision.behavior === "allow") {
-      return { allowed: true, updatedInput: decision.updatedInput };
+      return {
+        allowed: true,
+        updatedInput: decision.updatedInput,
+        decisionReason: decision.decisionReason
+      };
     }
     if (decision.behavior === "deny") {
       return { allowed: false, reason: decision.message };
@@ -178701,6 +178713,7 @@ __export(exports_engineCompat, {
   backgroundAgentTask: () => backgroundAgentTask,
   backgroundAll: () => backgroundAll,
   backgroundExistingForegroundTask: () => backgroundExistingForegroundTask,
+  bashToolHasPermission: () => bashToolHasPermission,
   blockTask: () => blockTask,
   buildChildMessage: () => buildChildMessage,
   buildConversationChain: () => buildConversationChain,
@@ -269654,8 +269667,12 @@ function successCardRenderMode(renderedMessage, userApproved) {
     return "full";
   return userApproved ? "marker" : "skip";
 }
+function hasSuccessCardMarker(allowVerdictLine, yoloReason, classifierRule) {
+  return allowVerdictLine !== null || feature("TRANSCRIPT_CLASSIFIER") && yoloReason !== undefined || feature("BASH_CLASSIFIER") && classifierRule !== undefined;
+}
 var VERDICT_PREFIX = "Verdict";
 var init_permissionVerdict = __esm(() => {
+  init_shared();
   init_constants5();
   init_permissionRuleParser2();
   init_PermissionMode();
@@ -269676,6 +269693,21 @@ var init_userApprovals = __esm(() => {
   USER_APPROVALS = new Map;
 });
 
+// src/tui/utils/allowVerdicts.ts
+function setAllowVerdict(toolUseID, verdict) {
+  ALLOW_VERDICTS.set(toolUseID, verdict);
+}
+function getAllowVerdict(toolUseID) {
+  return ALLOW_VERDICTS.get(toolUseID);
+}
+function deleteAllowVerdict(toolUseID) {
+  ALLOW_VERDICTS.delete(toolUseID);
+}
+var ALLOW_VERDICTS;
+var init_allowVerdicts = __esm(() => {
+  ALLOW_VERDICTS = new Map;
+});
+
 // src/tui/components/messages/UserToolResultMessage/UserToolSuccessMessage.tsx
 function UserToolSuccessMessage({
   message,
@@ -269693,9 +269725,11 @@ function UserToolSuccessMessage({
   const [classifierRule] = React32.useState(() => getClassifierApproval2(toolUseID));
   const [yoloReason] = React32.useState(() => getYoloClassifierApproval2(toolUseID));
   const [userApproved] = React32.useState(() => getUserApproval(toolUseID));
+  const [allowVerdict] = React32.useState(() => getAllowVerdict(toolUseID));
   React32.useEffect(() => {
     deleteClassifierApproval2(toolUseID);
     deleteUserApproval(toolUseID);
+    deleteAllowVerdict(toolUseID);
   }, [toolUseID]);
   if (!message.toolUseResult || !tool) {
     return null;
@@ -269713,8 +269747,19 @@ function UserToolSuccessMessage({
     isTranscriptMode,
     input: lookups.toolUseByToolUseID.get(toolUseID)?.input
   }) ?? null;
+  let allowVerdictLine = null;
+  if (allowVerdict) {
+    const vReason = allowVerdict.reason;
+    const vMode = allowVerdict.mode;
+    if (vMode === "bypassPermissions") {
+      allowVerdictLine = verdictLine({ type: "other", reason: "" }, "bypassPermissions", tool.name);
+    } else if (vReason?.type === "rule" && vReason.rule.ruleBehavior === "allow") {
+      allowVerdictLine = verdictLine(vReason, vMode, tool.name);
+    }
+  }
+  const hasMarkerLine = hasSuccessCardMarker(allowVerdictLine, yoloReason, classifierRule);
   const renderMode = successCardRenderMode(renderedMessage, userApproved);
-  if (renderMode === "skip") {
+  if (renderMode === "skip" && !hasMarkerLine) {
     return null;
   }
   const rendersAsAssistantText = tool.userFacingName(undefined) === "";
@@ -269745,8 +269790,9 @@ function UserToolSuccessMessage({
             children: /* @__PURE__ */ jsx_dev_runtime103.jsxDEV(ThemedText, {
               dimColor: true,
               children: [
-                "Allowed by auto mode classifier: ",
-                yoloReason
+                "Auto-approved by classifier: ",
+                yoloReason,
+                "."
               ]
             }, undefined, true, undefined, this)
           }, undefined, false, undefined, this) : null,
@@ -269762,6 +269808,13 @@ function UserToolSuccessMessage({
                 " Allowed · your decision"
               ]
             }, undefined, true, undefined, this)
+          }, undefined, false, undefined, this),
+          allowVerdictLine && /* @__PURE__ */ jsx_dev_runtime103.jsxDEV(MessageResponse, {
+            height: 1,
+            children: /* @__PURE__ */ jsx_dev_runtime103.jsxDEV(ThemedText, {
+              dimColor: true,
+              children: allowVerdictLine
+            }, undefined, false, undefined, this)
           }, undefined, false, undefined, this)
         ]
       }, undefined, true, undefined, this),
@@ -269787,6 +269840,7 @@ var init_UserToolSuccessMessage = __esm(() => {
   init_classifierApprovals();
   init_permissionVerdict();
   init_userApprovals();
+  init_allowVerdicts();
   init_MessageResponse();
   init_HookProgressMessage();
   React32 = __toESM(require_react(), 1);
@@ -319339,8 +319393,19 @@ function buildInteractiveGate(params) {
   });
   return async (tool, input, callContext) => {
     const verdict = await engineGate(tool, input);
-    if (!verdict.ask)
+    if (!verdict.ask) {
+      if (verdict.allowed && verdict.decisionReason) {
+        const tpc = (params.getAppState?.() ?? {
+          toolPermissionContext: params.toolPermissionContext
+        }).toolPermissionContext;
+        const tpcMode = tpc?.mode ?? "default";
+        setAllowVerdict(callContext?.toolUseId ?? "", {
+          reason: verdict.decisionReason,
+          mode: tpcMode
+        });
+      }
       return verdict;
+    }
     const decision = await params.canUseTool(tool, input ?? {}, params.toolUseContext, callContext?.assistantMessage, callContext?.toolUseId ?? "");
     if (decision.behavior === "allow") {
       return { allowed: true, updatedInput: decision.updatedInput };
@@ -319350,6 +319415,7 @@ function buildInteractiveGate(params) {
 }
 var init_loopPermissionBridge = __esm(() => {
   init_engine();
+  init_allowVerdicts();
 });
 
 // src/tui/agentLoopDeps.ts
@@ -322691,8 +322757,16 @@ var init_BashTool = __esm(() => {
     async prompt() {
       return getSimplePrompt2();
     },
-    async checkPermissions(input) {
-      return { behavior: "allow", updatedInput: input };
+    async checkPermissions(input, context) {
+      const ctx = context;
+      const mode = ctx?.getAppState?.()?.toolPermissionContext?.mode ?? ctx?.getToolPermissionContext?.()?.mode;
+      if (mode === "auto") {
+        return {
+          behavior: "passthrough",
+          message: "Bash command in auto mode requires confirmation"
+        };
+      }
+      return bashToolHasPermission(input, context);
     },
     renderToolUseMessage: renderToolUseMessage25,
     mapToolResultToToolResultBlockParam: BashTool.mapToolResultToToolResultBlockParam,
@@ -465848,6 +465922,11 @@ function useCanUseTool(setToolUseConfirmQueue, setToolPermissionContext) {
           if (feature("TRANSCRIPT_CLASSIFIER") && result.decisionReason?.type === "classifier" && result.decisionReason.classifier === "auto-mode") {
             setYoloClassifierApproval2(toolUseID, result.decisionReason.reason);
           }
+          const allowAppState = toolUseContext.getAppState();
+          setAllowVerdict(toolUseID, {
+            reason: result.decisionReason,
+            mode: allowAppState.toolPermissionContext?.mode ?? "default"
+          });
           ctx.logDecision({
             decision: "accept",
             source: "config"
@@ -466031,6 +466110,7 @@ var init_useCanUseTool = __esm(() => {
   init_PermissionContext();
   init_permissionLogging();
   init_decisionLog();
+  init_allowVerdicts();
   import_compiler_runtime303 = __toESM(require_compiler_runtime(), 1);
   jsx_dev_runtime404 = __toESM(require_jsx_dev_runtime(), 1);
   useCanUseTool_default = useCanUseTool;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasharness/atlascode",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "description": "AtlasCode \u2014 Coding Agent for the domestic computing ecosystem (Ascend NPU + domestic LLM backends)",
   "bin": {
     "atlas": "dist/cli.js",