@blockrun/franklin 3.15.99 → 3.15.101

package/dist/agent/permissions.d.ts

@@ -30,6 +30,21 @@ export declare class PermissionManager {
      * Returns true if allowed, false if denied.
      */
     promptUser(toolName: string, input: Record<string, unknown>, pendingCount?: number): Promise<boolean>;
+    /**
+     * Persist a tool name to the user's allow rules so future sessions
+     * skip the prompt. Idempotent: appends to the existing
+     * `allow: []` array only if not already present.
+     *
+     * Why this exists: pre-2026-05-12, "always" in the UI prompt was a
+     * misnomer — it only added the tool to the in-memory `sessionAllowed`
+     * Set, which evaporated on every `franklin start`. Users reported
+     * being prompted repeatedly across sessions despite hitting [a] each
+     * time. Persistence here makes "always" actually mean always.
+     *
+     * Best-effort writes (try/catch around fs) — a logging failure should
+     * never block the paid call that just got approved.
+     */
+    private persistAllowRule;
     private loadRules;
     private matchesRule;
     private getPrimaryInputValue;

package/dist/agent/permissions.js

@@ -122,7 +122,15 @@ export class PermissionManager {
         if (this.promptFn) {
             const result = await this.promptFn(toolName, hint);
             if (result === 'always') {
+                // "Always" must mean ALWAYS — including after the user restarts
+                // franklin. Pre-fix it was only in-memory: every `franklin start`
+                // re-asked the same prompts even after the user had pressed [a]
+                // explicitly. Verified 2026-05-12: ~/.blockrun/franklin-permissions.json
+                // was non-existent despite the user reporting repeated prompts.
+                // Persist to disk and update in-memory rules so subsequent
+                // checks short-circuit at the allow-rule stage (line 124).
                 this.sessionAllowed.add(toolName);
+                this.persistAllowRule(toolName);
                 return true;
             }
             return result === 'yes';
@@ -140,7 +148,8 @@ export class PermissionManager {
         const normalized = answer.trim().toLowerCase();
         if (normalized === 'a' || normalized === 'always') {
             this.sessionAllowed.add(toolName);
-            console.error(chalk.green(`  ✓ ${toolName} allowed for this session`));
+            this.persistAllowRule(toolName);
+            console.error(chalk.green(`  ✓ ${toolName} allowed (saved to ~/.blockrun/franklin-permissions.json)`));
             return true;
         }
         if (normalized === 'y' || normalized === 'yes' || normalized === '') {
@@ -150,6 +159,50 @@ export class PermissionManager {
         return false;
     }
     // ─── Internal ──────────────────────────────────────────────────────────
+    /**
+     * Persist a tool name to the user's allow rules so future sessions
+     * skip the prompt. Idempotent: appends to the existing
+     * `allow: []` array only if not already present.
+     *
+     * Why this exists: pre-2026-05-12, "always" in the UI prompt was a
+     * misnomer — it only added the tool to the in-memory `sessionAllowed`
+     * Set, which evaporated on every `franklin start`. Users reported
+     * being prompted repeatedly across sessions despite hitting [a] each
+     * time. Persistence here makes "always" actually mean always.
+     *
+     * Best-effort writes (try/catch around fs) — a logging failure should
+     * never block the paid call that just got approved.
+     */
+    persistAllowRule(toolName) {
+        const configPath = path.join(BLOCKRUN_DIR, 'franklin-permissions.json');
+        try {
+            // Read current state (may not exist). Treat missing/malformed as
+            // empty rules — never throw on the user's tool execution path.
+            let current = { allow: [], deny: [], ask: [] };
+            if (fs.existsSync(configPath)) {
+                try {
+                    const raw = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+                    current = {
+                        allow: Array.isArray(raw.allow) ? raw.allow : [],
+                        deny: Array.isArray(raw.deny) ? raw.deny : [],
+                        ask: Array.isArray(raw.ask) ? raw.ask : [],
+                    };
+                }
+                catch { /* malformed — reset */ }
+            }
+            if (current.allow.includes(toolName))
+                return; // already saved
+            current.allow.push(toolName);
+            // Update in-memory rules too so subsequent checks short-circuit
+            // at line 124 (matchesRule against allow) without re-prompting.
+            if (!this.rules.allow.includes(toolName)) {
+                this.rules.allow.push(toolName);
+            }
+            fs.mkdirSync(path.dirname(configPath), { recursive: true });
+            fs.writeFileSync(configPath, JSON.stringify(current, null, 2));
+        }
+        catch { /* best-effort */ }
+    }
     loadRules() {
         const configPath = path.join(BLOCKRUN_DIR, 'franklin-permissions.json');
         const legacyPath = path.join(BLOCKRUN_DIR, 'runcode-permissions.json');

package/dist/banner.js

@@ -102,7 +102,7 @@ export function printBanner(version) {
         const update = getAvailableUpdate();
         if (update) {
             console.log(chalk.yellow('⟳ ') +
-                chalk.bold(`Franklin ${update.latest}`) +
+                chalk.bold(`Franklin Agent ${update.latest}`) +
                 chalk.dim(` available — you have ${update.current}`));
             console.log(chalk.dim('  Run: ') +
                 chalk.bold('npm install -g @blockrun/franklin@latest'));

package/dist/commands/doctor.js

@@ -43,7 +43,7 @@ async function runChecks() {
     kickoffVersionCheck();
     const update = await freshUpdatePromise;
     out.push({
-        name: 'Franklin',
+        name: 'Franklin Agent',
         status: update ? 'warn' : 'ok',
         detail: update
             ? `v${VERSION} — update available: v${update.latest}`

package/dist/index.js

@@ -29,8 +29,8 @@ import { VERSION as version } from './config.js';
 const program = new Command();
 program
     .name('franklin')
-    .description('Franklin — The AI agent with a wallet.\n\n' +
-    'While others chat, Franklin spends — turning your USDC into real work.\n\n' +
+    .description('Franklin Agent — The AI agent with a wallet.\n\n' +
+    'While others chat, Franklin Agent spends — turning your USDC into real work.\n\n' +
     'Pay per action in USDC on Base or Solana. No subscriptions. No accounts.')
     .version(version);
 program

package/dist/ui/app.js

@@ -1060,7 +1060,7 @@ function RunCodeApp({ initialModel, workDir, walletAddress, walletBalance, chain
                                             : `${formatTokens(r.tokens.input)} in / ${formatTokens(r.tokens.output)} out`, r.cost > 0 ? `  ·  $${r.cost.toFixed(4)}` : '', r.savings !== undefined && r.savings > 0 ? _jsxs(Text, { color: "green", children: ["  saved ", Math.round(r.savings * 100), "%"] }) : '', r.ctxPct !== undefined && r.ctxPct >= 5
                                             ? _jsxs(Text, { color: r.ctxPct >= 80 ? 'red' : r.ctxPct >= 50 ? 'yellow' : undefined, dimColor: r.ctxPct < 50, children: ["  \u00B7  ctx ", r.ctxPct, "%"] })
                                             : ''] }) }))] }, r.key));
-                } }), permissionRequest && (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginLeft: 2, children: [_jsx(Text, { color: "red", bold: true, children: "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501 \u26A0  ACTION REQUIRED  \u26A0 \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501" }), _jsx(Text, { color: "yellow", children: "\u256D\u2500 Permission required \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsxs(Text, { color: "yellow", children: ["\u2502 ", _jsx(Text, { bold: true, children: permissionRequest.toolName })] }), permissionRequest.description.split('\n').map((line, i) => (_jsxs(Text, { dimColor: true, children: ["\u2502 ", line] }, i))), _jsx(Text, { color: "yellow", children: "\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsx(Box, { marginLeft: 2, children: _jsxs(Text, { children: [_jsx(Text, { bold: true, color: "green", children: "[y]" }), _jsx(Text, { dimColor: true, children: " yes  " }), _jsx(Text, { bold: true, color: "cyan", children: "[a]" }), _jsx(Text, { dimColor: true, children: " always  " }), _jsx(Text, { bold: true, color: "red", children: "[n]" }), _jsx(Text, { dimColor: true, children: " no" })] }) })] })), askUserRequest && (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginLeft: 2, children: [_jsx(Text, { color: "magenta", bold: true, children: "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501 \u26A0  ANSWER REQUIRED  \u26A0 \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501" }), _jsx(Text, { color: "cyan", children: "\u256D\u2500 Question \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsxs(Text, { color: "cyan", children: ["\u2502 ", _jsx(Text, { bold: true, children: askUserRequest.question })] }), askUserRequest.options && askUserRequest.options.length > 0 && (askUserRequest.options.map((opt, i) => (_jsxs(Text, { dimColor: true, children: ["\u2502 ", i + 1, ". ", opt] }, i)))), _jsx(Text, { color: "cyan", children: "\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsxs(Box, { marginLeft: 2, children: [_jsx(Text, { bold: true, children: "answer> " }), _jsx(TextInput, { value: askUserInput, onChange: setAskUserInput, onSubmit: (val) => {
+                } }), permissionRequest && (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginLeft: 2, children: [_jsx(Text, { color: "red", bold: true, children: "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501 \u26A0  ACTION REQUIRED  \u26A0 \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501" }), _jsx(Text, { color: "yellow", children: "\u256D\u2500 Permission required \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsxs(Text, { color: "yellow", children: ["\u2502 ", _jsx(Text, { bold: true, children: permissionRequest.toolName })] }), permissionRequest.description.split('\n').map((line, i) => (_jsxs(Text, { dimColor: true, children: ["\u2502 ", line] }, i))), _jsx(Text, { color: "yellow", children: "\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsx(Box, { marginLeft: 2, children: _jsxs(Text, { children: [_jsx(Text, { bold: true, color: "green", children: "[y]" }), _jsx(Text, { dimColor: true, children: " yes  " }), _jsx(Text, { bold: true, color: "cyan", children: "[a]" }), _jsx(Text, { dimColor: true, children: " always " }), _jsx(Text, { dimColor: true, italic: true, children: "(saved across sessions)" }), _jsx(Text, { dimColor: true, children: "  " }), _jsx(Text, { bold: true, color: "red", children: "[n]" }), _jsx(Text, { dimColor: true, children: " no" })] }) })] })), askUserRequest && (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginLeft: 2, children: [_jsx(Text, { color: "magenta", bold: true, children: "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501 \u26A0  ANSWER REQUIRED  \u26A0 \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501" }), _jsx(Text, { color: "cyan", children: "\u256D\u2500 Question \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsxs(Text, { color: "cyan", children: ["\u2502 ", _jsx(Text, { bold: true, children: askUserRequest.question })] }), askUserRequest.options && askUserRequest.options.length > 0 && (askUserRequest.options.map((opt, i) => (_jsxs(Text, { dimColor: true, children: ["\u2502 ", i + 1, ". ", opt] }, i)))), _jsx(Text, { color: "cyan", children: "\u2570\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500" }), _jsxs(Box, { marginLeft: 2, children: [_jsx(Text, { bold: true, children: "answer> " }), _jsx(TextInput, { value: askUserInput, onChange: setAskUserInput, onSubmit: (val) => {
                                     // resolveAskUserAnswer translates "1" / "2" / ... into the
                                     // matching label string when the dialog showed a numbered
                                     // option list. Without it, every onAskUser caller's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockrun/franklin",
-  "version": "3.15.99",
+  "version": "3.15.101",
   "description": "Franklin Agent — The AI agent with a wallet. Spends USDC autonomously to get real work done. Pay per action, no subscriptions.",
   "type": "module",
   "exports": {