@botconnector/bccli 0.4.0-beta.39 → 0.4.0-beta.40

package/dist/{acp-4XE2KOIJ.js → acp-5A7EXLCG.js}

@@ -97,8 +97,8 @@ function runAcp(input, output, opts) {
 function runtimeAgent(cwd) {
   return {
     async run(text, onChunk, signal) {
-      const { parseCliArgs } = await import("./args-BD2PHEKG.js");
-      const { createRuntime } = await import("./setup-FGCFKC7Z.js");
+      const { parseCliArgs } = await import("./args-4SMOHFN5.js");
+      const { createRuntime } = await import("./setup-I7UY7X7C.js");
       const rt = createRuntime({ cwd, args: { ...parseCliArgs([]), allowAll: true } });
       rt.agent.onEvent = (event) => {
         if (event.type === "text") onChunk(event.delta);

package/dist/{args-BD2PHEKG.js → args-4SMOHFN5.js}

@@ -2,8 +2,8 @@
 import {
   helpText,
   parseCliArgs
-} from "./chunk-ZG7HCXYA.js";
-import "./chunk-R3ND76LW.js";
+} from "./chunk-AS7VV7D3.js";
+import "./chunk-GAFJEQTJ.js";
 import "./chunk-NI5JZUZ3.js";
 import "./chunk-M7LLJQ7M.js";
 import "./chunk-M23QBX3V.js";

package/dist/{chunk-ZG7HCXYA.js → chunk-AS7VV7D3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   MODE_ORDER
-} from "./chunk-R3ND76LW.js";
+} from "./chunk-GAFJEQTJ.js";
 import {
   REASONING_LEVELS,
   isReasoningLevel

package/dist/{chunk-EONFDWBE.js → chunk-DSFHN5CH.js}

@@ -36,7 +36,7 @@ function readSecret(prompt) {
 }
 async function runLogin(providerId, cwd) {
   const { runProviderCommand } = await import("./providerCli-DDH4ZZUY.js");
-  const { parseCliArgs } = await import("./args-BD2PHEKG.js");
+  const { parseCliArgs } = await import("./args-4SMOHFN5.js");
   return runProviderCommand(parseCliArgs(["provider", "add", providerId]), {
     env: process.env,
     cwd,

package/dist/{chunk-R3ND76LW.js → chunk-GAFJEQTJ.js}

@@ -24,6 +24,19 @@ function commandKey(segment) {
   const words = segment.trim().split(/\s+/);
   return words[1] ? `${words[0]} ${words[1]}` : words[0];
 }
+function requiresSensitiveToolApproval(req) {
+  const target = req.target.trim();
+  if (req.kind === "read" || req.kind === "edit") {
+    return /(?:^|[/\\])(?:\.env(?:\..*)?|\.ssh|\.aws|\.config\/gcloud|secrets?|credentials?)(?:[/\\]|$)/i.test(target) || /(?:id_rsa|id_ed25519|\.pem|\.p12|\.key)$/i.test(target);
+  }
+  if (req.kind === "bash") {
+    return /\b(?:rm\s+-[a-z]*r[a-z]*f[a-z]*\s|rm\s+-[a-z]*f[a-z]*r[a-z]*\s|mkfs(?:\.|\s)|wipefs\b|shred\s|git\s+push\s+(?:--force|-f)\b|docker\s+(?:system\s+prune|volume\s+rm)|kubectl\s+delete\b|drop\s+(?:database|table)|npm\s+publish\b)/i.test(target) || /\b(?:deploy-service\.sh|aws\s+secretsmanager|cat\s+[^;&|]*\.env\b)/i.test(target);
+  }
+  if (req.kind === "mcp") {
+    return /(?:delete|remove|revoke|transfer|send_email|publish|deploy|execute_command|run_command|read_secret)/i.test(req.tool);
+  }
+  return false;
+}
 var Permissions = class {
   constructor(mode, rules = [], cwd = process.cwd()) {
     this.mode = mode;
@@ -43,6 +56,7 @@ var Permissions = class {
   }
   /** Rules that "[a] allow for this session" would add; undefined when it must always be asked. */
   rulesFor(req) {
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return void 0;
     if (req.kind === "edit") return this.editInProject(req.target) ? ["edit(project)"] : void 0;
     if (req.kind === "fetch") {
       try {
@@ -62,6 +76,8 @@ var Permissions = class {
     return [];
   }
   check(req) {
+    if (this.mode === "plan" && req.kind !== "read") return "deny";
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return "ask";
     if (req.kind === "read") return "allow";
     if (this.mode === "allowAll") return "allow";
     if (this.mode === "plan") return "deny";

package/dist/{chunk-PDZPPSLU.js → chunk-PDVS4UWM.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/version.ts
-var VERSION = true ? "0.4.0-beta.39" : "0.0.0-dev";
+var VERSION = true ? "0.4.0-beta.40" : "0.0.0-dev";
 
 export {
   VERSION

package/dist/{chunk-QETGQXPL.js → chunk-WH7XLDGZ.js}

@@ -20,7 +20,7 @@ import {
 } from "./chunk-ZMU7MXCH.js";
 import {
   Permissions
-} from "./chunk-R3ND76LW.js";
+} from "./chunk-GAFJEQTJ.js";
 import {
   addProviderKey
 } from "./chunk-JROUQ5YS.js";

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-PDZPPSLU.js";
+} from "./chunk-PDVS4UWM.js";
 import {
   resolveWorktree,
   runPrint
@@ -9,16 +9,16 @@ import {
 import {
   helpText,
   parseCliArgs
-} from "./chunk-ZG7HCXYA.js";
+} from "./chunk-AS7VV7D3.js";
 import {
   runLogin
-} from "./chunk-EONFDWBE.js";
+} from "./chunk-DSFHN5CH.js";
 import {
   createRuntime
-} from "./chunk-QETGQXPL.js";
+} from "./chunk-WH7XLDGZ.js";
 import "./chunk-3HCOAJEQ.js";
 import "./chunk-ZMU7MXCH.js";
-import "./chunk-R3ND76LW.js";
+import "./chunk-GAFJEQTJ.js";
 import "./chunk-JROUQ5YS.js";
 import "./chunk-LN32JIZR.js";
 import {
@@ -67,12 +67,12 @@ async function main() {
   if (args.command === "login") return runLogin(args.loginProvider ?? "bc-cloud", cwd);
   if (args.command === "mcp") {
     const { runMcpCommand } = await import("./mcpCli-5QTXH7XJ.js");
-    const { readSecret } = await import("./login-IWBRUNT4.js");
+    const { readSecret } = await import("./login-T5S6SPZA.js");
     return runMcpCommand(args, { env: process.env, cwd, out: (s) => console.log(s), err: (s) => console.error(s), readSecret });
   }
   if (args.command === "provider") {
     const { runProviderCommand } = await import("./providerCli-DDH4ZZUY.js");
-    const { readSecret } = await import("./login-IWBRUNT4.js");
+    const { readSecret } = await import("./login-T5S6SPZA.js");
     return runProviderCommand(args, { env: process.env, cwd, out: (s) => console.log(s), err: (s) => console.error(s), readSecret });
   }
   if (args.command === "connect" || args.command === "disconnect" || args.command === "integrations") {
@@ -90,16 +90,16 @@ async function main() {
     return runModelsCommand(args, { env: process.env, cwd, out: (s) => console.log(s), err: (s) => console.error(s), fetch: globalThis.fetch });
   }
   if (args.command === "update") {
-    const { runUpdateCommand } = await import("./update-73WI27VM.js");
+    const { runUpdateCommand } = await import("./update-SZUG3YSB.js");
     return runUpdateCommand({ env: process.env });
   }
   if (args.command === "acp") {
-    const { runtimeAgent, runAcp } = await import("./acp-4XE2KOIJ.js");
+    const { runtimeAgent, runAcp } = await import("./acp-5A7EXLCG.js");
     await runAcp(process.stdin, process.stdout, { cwd, newAgent: (c) => runtimeAgent(c) });
     return 0;
   }
   if (args.command === "serve") {
-    const { startServe } = await import("./serve-7BP5BVX3.js");
+    const { startServe } = await import("./serve-JNQUP7CZ.js");
     const handle = await startServe({ port: args.port, host: args.host, token: args.token, cwd, env: process.env });
     process.stderr.write(`bccli serve ${handle.url} \u2014 Authorization: Bearer ${handle.token}
 `);
@@ -135,13 +135,13 @@ async function main() {
   if (!process.stdin.isTTY) throw new ConfigError(t('Interactive mode needs a terminal. For scripts/CI use: bccli -p "task"'));
   if (rt.config.updateCheck !== "off" && !process.env.BCCLI_NO_UPDATE_CHECK) {
     try {
-      const { checkForUpdate } = await import("./update-73WI27VM.js");
+      const { checkForUpdate } = await import("./update-SZUG3YSB.js");
       const update = await checkForUpdate({ home: rt.home, fetch: globalThis.fetch, now: /* @__PURE__ */ new Date() });
       if (update) console.error(update);
     } catch {
     }
   }
-  const { startInteractive } = await import("./ui-MLOXPAHT.js");
+  const { startInteractive } = await import("./ui-GVIMUZNS.js");
   return startInteractive(rt, { initialPrompt: args.prompt, resume: args.resume, version: VERSION });
 }
 main().then(

package/dist/{login-IWBRUNT4.js → login-T5S6SPZA.js}

@@ -2,7 +2,7 @@
 import {
   readSecret,
   runLogin
-} from "./chunk-EONFDWBE.js";
+} from "./chunk-DSFHN5CH.js";
 export {
   readSecret,
   runLogin

package/dist/sdk.js

@@ -677,6 +677,19 @@ function commandKey(segment) {
   const words2 = segment.trim().split(/\s+/);
   return words2[1] ? `${words2[0]} ${words2[1]}` : words2[0];
 }
+function requiresSensitiveToolApproval(req) {
+  const target = req.target.trim();
+  if (req.kind === "read" || req.kind === "edit") {
+    return /(?:^|[/\\])(?:\.env(?:\..*)?|\.ssh|\.aws|\.config\/gcloud|secrets?|credentials?)(?:[/\\]|$)/i.test(target) || /(?:id_rsa|id_ed25519|\.pem|\.p12|\.key)$/i.test(target);
+  }
+  if (req.kind === "bash") {
+    return /\b(?:rm\s+-[a-z]*r[a-z]*f[a-z]*\s|rm\s+-[a-z]*f[a-z]*r[a-z]*\s|mkfs(?:\.|\s)|wipefs\b|shred\s|git\s+push\s+(?:--force|-f)\b|docker\s+(?:system\s+prune|volume\s+rm)|kubectl\s+delete\b|drop\s+(?:database|table)|npm\s+publish\b)/i.test(target) || /\b(?:deploy-service\.sh|aws\s+secretsmanager|cat\s+[^;&|]*\.env\b)/i.test(target);
+  }
+  if (req.kind === "mcp") {
+    return /(?:delete|remove|revoke|transfer|send_email|publish|deploy|execute_command|run_command|read_secret)/i.test(req.tool);
+  }
+  return false;
+}
 var Permissions = class {
   constructor(mode, rules = [], cwd = process.cwd()) {
     this.mode = mode;
@@ -696,6 +709,7 @@ var Permissions = class {
   }
   /** Rules that "[a] allow for this session" would add; undefined when it must always be asked. */
   rulesFor(req) {
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return void 0;
     if (req.kind === "edit") return this.editInProject(req.target) ? ["edit(project)"] : void 0;
     if (req.kind === "fetch") {
       try {
@@ -715,6 +729,8 @@ var Permissions = class {
     return [];
   }
   check(req) {
+    if (this.mode === "plan" && req.kind !== "read") return "deny";
+    if (process.env.BC_TOOL_POLICY_ENFORCE === "true" && requiresSensitiveToolApproval(req)) return "ask";
     if (req.kind === "read") return "allow";
     if (this.mode === "allowAll") return "allow";
     if (this.mode === "plan") return "deny";

package/dist/{serve-7BP5BVX3.js → serve-JNQUP7CZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-PDZPPSLU.js";
+} from "./chunk-PDVS4UWM.js";
 import {
   LOOPBACK_BIND,
   MAX_FRAME_BYTES,
@@ -10,13 +10,13 @@ import {
   parseClientFrame,
   randomToken,
   trustFence
-} from "./chunk-ZG7HCXYA.js";
+} from "./chunk-AS7VV7D3.js";
 import {
   createRuntime
-} from "./chunk-QETGQXPL.js";
+} from "./chunk-WH7XLDGZ.js";
 import "./chunk-3HCOAJEQ.js";
 import "./chunk-ZMU7MXCH.js";
-import "./chunk-R3ND76LW.js";
+import "./chunk-GAFJEQTJ.js";
 import "./chunk-JROUQ5YS.js";
 import {
   listAllModels

package/dist/{setup-FGCFKC7Z.js → setup-I7UY7X7C.js}

@@ -2,10 +2,10 @@
 import {
   createRuntime,
   lunaPtcAutoEnabled
-} from "./chunk-QETGQXPL.js";
+} from "./chunk-WH7XLDGZ.js";
 import "./chunk-3HCOAJEQ.js";
 import "./chunk-ZMU7MXCH.js";
-import "./chunk-R3ND76LW.js";
+import "./chunk-GAFJEQTJ.js";
 import "./chunk-JROUQ5YS.js";
 import "./chunk-LN32JIZR.js";
 import "./chunk-SESBH44L.js";

package/dist/{ui-MLOXPAHT.js → ui-GVIMUZNS.js}

@@ -24,7 +24,7 @@ import {
 } from "./chunk-ZMU7MXCH.js";
 import {
   nextMode
-} from "./chunk-R3ND76LW.js";
+} from "./chunk-GAFJEQTJ.js";
 import {
   hasKey,
   providerName,

package/dist/{update-73WI27VM.js → update-SZUG3YSB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   VERSION
-} from "./chunk-PDZPPSLU.js";
+} from "./chunk-PDVS4UWM.js";
 import {
   t
 } from "./chunk-M23QBX3V.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botconnector/bccli",
-  "version": "0.4.0-beta.39",
+  "version": "0.4.0-beta.40",
   "description": "BCCLI — BotConnector AI coding agent for the terminal",
   "type": "module",
   "bin": {