@chatpanel/bridge 0.7.0 → 0.9.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chatpanel/bridge",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "type": "module",
   "description": "Local bridge that exposes the AI coding agents installed on your machine — Claude Code (CLI), Codex (CLI), and Gemini CLI — to the ChatPanel Chrome extension over a localhost SSE endpoint. Bring your own agent.",
   "keywords": [

package/src/engines/antigravity.js

@@ -115,6 +115,7 @@ export async function chat({ messages, system, options, images }, emit) {
   const args = ['-p', prompt];
   if (options.model) args.push('--model', options.model);
   if (options.permissionMode === 'bypassPermissions') args.push('--dangerously-skip-permissions');
+  if (options.extraArgs) args.push(...String(options.extraArgs).split(/\s+/).filter(Boolean));
 
   await new Promise((resolve, reject) => {
     let child;

package/src/engines/claude.js

@@ -244,6 +244,7 @@ export async function chat({ messages, system, options, images }, emit) {
     }: ${imageFiles.join(', ')}`;
   }
 
+  if (options.extraArgs) args.push(...String(options.extraArgs).split(/\s+/).filter(Boolean));
   const run = runClaude({ prompt, args, cwd, emit });
   if (run === null) {
     cleanup(); // SDK fallback doesn't take images yet

package/src/engines/codex.js

@@ -133,18 +133,18 @@ export async function chat({ messages, system, options, images }, emit) {
   const cleanupImages = () => imageFiles.forEach((f) => unlink(f).catch(() => {}));
 
   const cwd = options.workingDir ? path.resolve(options.workingDir) : SCRATCH;
-  const sandbox =
-    options.permissionMode === 'bypassPermissions'
-      ? 'danger-full-access'
-      : options.permissionMode === 'acceptEdits'
-        ? 'workspace-write'
-        : 'read-only';
-
-  const args = ['exec', '--json', '--skip-git-repo-check', '-s', sandbox, '-o', outFile];
-  // Headless exec has no human to approve commands. Auto-run within the sandbox
-  // so skill/startup reads don't get "approval declined" (and skills can load in
-  // local-config mode). The sandbox above still bounds what can actually happen.
-  args.push('-c', 'approval_policy=never');
+  const args = ['exec', '--json', '--skip-git-repo-check', '-o', outFile];
+  // Headless exec has no human to approve actions. With MCP/browser tools armed
+  // Codex would otherwise raise an approval prompt it can't show — and cancel the
+  // tool call. So in bypassPermissions (full autonomy, what "Act on page" needs)
+  // use the all-in bypass flag, which also clears MCP-tool approval. Lower modes
+  // keep the sandbox + never-ask, which auto-runs within bounds.
+  if (options.permissionMode === 'bypassPermissions') {
+    args.push('--dangerously-bypass-approvals-and-sandbox');
+  } else {
+    const sandbox = options.permissionMode === 'acceptEdits' ? 'workspace-write' : 'read-only';
+    args.push('-s', sandbox, '-c', 'approval_policy=never');
+  }
   if (REASONING) args.push('-c', `model_reasoning_effort=${REASONING}`);
   // Browser tools: register the bridge's MCP server as a stdio MCP server (the
   // bridge binary in --mcp-stdio mode), so Codex can call our page-action tools.
@@ -156,6 +156,7 @@ export async function chat({ messages, system, options, images }, emit) {
     args.push('-c', `mcp_servers.${name}.args=${JSON.stringify(pargs)}`);
   }
   if (options.model) args.push('-m', options.model);
+  if (options.extraArgs) args.push(...String(options.extraArgs).split(/\s+/).filter(Boolean));
   for (const f of imageFiles) args.push('-i', f); // attach images to the initial prompt
   args.push('-');
 

package/src/engines/custom.js

@@ -171,6 +171,10 @@ export async function runSpec(spec, { messages, system, options = {}, images },
     : spec.args
       ? String(spec.args).split(/\s+/).filter(Boolean)
       : [];
+  // User-supplied extra CLI flags (Settings → agent → "Extra arguments"), placed
+  // right after the base args/subcommand — e.g. opencode `run --format json
+  // --dangerously-skip-permissions`. Applies to every built-in & custom CLI agent.
+  if (options.extraArgs) args.push(...String(options.extraArgs).split(/\s+/).filter(Boolean));
   // Inject the selected model via the agent's CONFIGURED model-arg template
   // (e.g. "--model {model}" or, for opencode, "-m {model}" with provider/model).
   // Without a template we can't know how this CLI takes a model, so options.model

package/src/server.js

@@ -30,7 +30,7 @@ import { callLocalMcp } from './mcp-local.js';
 // Hardcoded (not read from package.json) so it survives Bun's single-file
 // --compile, where package.json isn't on a readable FS. CI fails the publish if
 // this drifts from package.json, so the two can't silently diverge.
-const VERSION = '0.7.0';
+const VERSION = '0.9.0';
 const HOST = process.env.CHATPANEL_BRIDGE_HOST || '127.0.0.1';
 const PORT = Number(process.env.CHATPANEL_BRIDGE_PORT) || 4319;