@botconnector/bccli 0.4.0-beta.36 → 0.4.0-beta.38

package/dist/{chunk-NSCC5VMS.js → chunk-OB7FN66F.js}

@@ -35,8 +35,8 @@ function readSecret(prompt) {
   });
 }
 async function runLogin(providerId, cwd) {
-  const { runProviderCommand } = await import("./providerCli-WJXJW3W2.js");
-  const { parseCliArgs } = await import("./args-GJUGK4F4.js");
+  const { runProviderCommand } = await import("./providerCli-TGDE3633.js");
+  const { parseCliArgs } = await import("./args-MNVI2OJI.js");
   return runProviderCommand(parseCliArgs(["provider", "add", providerId]), {
     env: process.env,
     cwd,

package/dist/{chunk-ELML4KVQ.js → chunk-R3ND76LW.js}

@@ -6,10 +6,23 @@ var MODE_ORDER = ["default", "acceptEdits", "plan", "allowAll"];
 function nextMode(mode) {
   return MODE_ORDER[(MODE_ORDER.indexOf(mode) + 1) % MODE_ORDER.length];
 }
-var TWO_WORD = /* @__PURE__ */ new Set(["npm", "npx", "pnpm", "yarn", "bun", "git", "cargo", "go", "docker", "python", "python3", "uv", "make"]);
+var ALWAYS_ASK_COMMANDS = /* @__PURE__ */ new Set(["sudo", "sh", "bash", "zsh", "su"]);
+function isAlwaysAsk(segment) {
+  const words = segment.trim().split(/\s+/);
+  const first = words[0] ?? "";
+  if (ALWAYS_ASK_COMMANDS.has(first)) return true;
+  const flags = words.slice(1).filter((w) => w.startsWith("-"));
+  if (first === "rm" && flags.some((w) => w.includes("r"))) return true;
+  if (first === "chmod" && flags.some((w) => w.includes("R"))) return true;
+  if (first === "kill" && words.slice(1).includes("-9")) return true;
+  if (first === "git" && words[1] === "push") {
+    return words.slice(2).some((w) => w === "-f" || w === "--force" || w.startsWith("--force="));
+  }
+  return false;
+}
 function commandKey(segment) {
   const words = segment.trim().split(/\s+/);
-  return TWO_WORD.has(words[0]) && words[1] ? `${words[0]} ${words[1]}` : words[0];
+  return words[1] ? `${words[0]} ${words[1]}` : words[0];
 }
 var Permissions = class {
   constructor(mode, rules = [], cwd = process.cwd()) {
@@ -42,6 +55,7 @@ var Permissions = class {
       if (/`|\$\(|[<>]|^\s*[({]/.test(req.target)) return void 0;
       const segments = req.target.split(/&&|\|\||[;&|\n]/).map((s) => s.trim()).filter(Boolean);
       if (!segments.length) return void 0;
+      if (segments.some(isAlwaysAsk)) return void 0;
       return [...new Set(segments.map((s) => `bash(${commandKey(s)})`))];
     }
     if (req.kind === "mcp") return [`mcp(${req.tool})`];

package/dist/{chunk-SZRM2VOB.js → chunk-TASYQW7B.js}

@@ -1,13 +1,33 @@
 #!/usr/bin/env node
 import {
-  ConfigError,
+  ConfigError
+} from "./chunk-H5N4ST6B.js";
+import {
   t
-} from "./chunk-CZMTWXCE.js";
+} from "./chunk-4RMP4CNT.js";
 
 // src/mcp/config.ts
 import { createHash } from "crypto";
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join, resolve } from "path";
+var ENV_REF = /\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-([^}]*))?\}/g;
+function expandEnvVars(config, env) {
+  const expand = (value) => value.replace(ENV_REF, (match, name, fallback) => {
+    const resolved = env[name];
+    if (resolved !== void 0) return resolved;
+    return fallback !== void 0 ? fallback : match;
+  });
+  const expandMap = (map) => Object.fromEntries(Object.entries(map).map(([k, v]) => [k, expand(v)]));
+  if (config.type === "http") {
+    return { ...config, url: expand(config.url), ...config.headers ? { headers: expandMap(config.headers) } : {} };
+  }
+  return {
+    ...config,
+    command: expand(config.command),
+    ...config.args ? { args: config.args.map(expand) } : {},
+    ...config.env ? { env: expandMap(config.env) } : {}
+  };
+}
 var globalMcpPath = (home) => join(home, "mcp.json");
 var projectMcpPath = (cwd) => join(cwd, ".bccli", "mcp.json");
 var trustPath = (home) => join(home, "trusted-mcp.json");
@@ -59,6 +79,7 @@ function serversToStart(home, cwd) {
 }
 
 export {
+  expandEnvVars,
   globalMcpPath,
   projectMcpPath,
   readMcpFile,

package/dist/{chunk-3DHJO7NC.js → chunk-U66JJ6RN.js}

@@ -5,7 +5,7 @@ import {
   readCredentials,
   readJsonConfig,
   removeCredential
-} from "./chunk-CZMTWXCE.js";
+} from "./chunk-H5N4ST6B.js";
 
 // src/providers.ts
 import { mkdirSync, writeFileSync } from "fs";

package/dist/{chunk-SJH3YLW4.js → chunk-XFTBML3H.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  contentText
+} from "./chunk-H66PC2EB.js";
 
 // src/session.ts
 import { randomBytes } from "crypto";
@@ -36,7 +39,7 @@ var Session = class _Session {
     return readdirSync(dir).filter((f) => f.endsWith(".jsonl")).map((f) => {
       const session = new _Session(join(dir, f));
       const first = session.load().find((m) => m.role === "user");
-      return { session, mtime: statSync(session.file).mtime, preview: first ? String(first.content).slice(0, 80) : "" };
+      return { session, mtime: statSync(session.file).mtime, preview: first ? contentText(first.content).slice(0, 80) : "" };
     }).sort((a, b) => b.mtime.getTime() - a.mtime.getTime() || b.session.file.localeCompare(a.session.file));
   }
   static latest(home, cwd) {

package/dist/{chunk-3NTTXK4Y.js → chunk-YURAIW7A.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   t
-} from "./chunk-CZMTWXCE.js";
+} from "./chunk-4RMP4CNT.js";
 
 // src/reasoning.ts
 var REASONING_LEVELS = ["auto", "off", "low", "medium", "high", "max"];