@codexhost/cli-linux-arm64 0.6.2 → 0.7.1

package/app/plugins/antigravity/plugin.mjs

@@ -15360,45 +15360,37 @@ var updateStatusResultSchema = external_exports.strictObject({
 // ../../shared-contracts/dist/index.js
 var workspaceContractVersionSchema = external_exports.literal(WORKSPACE_CONTRACT_VERSION);
 
-// ../../harness-adapter/dist/approval.js
-function invalidRequest(message) {
-  return { code: "invalidRequest", message, retryable: false };
-}
-function validateHostApprovalResponse(interaction, response) {
-  return interaction.actions.some(({ id }) => id === response.actionId) ? null : invalidRequest("Approval Response contains an undeclared action ID");
-}
-
 // ../../harness-adapter/dist/question.js
-function invalidRequest2(message) {
+function invalidRequest(message) {
   return { code: "invalidRequest", message, retryable: false };
 }
 function validateHostQuestionResponse(interaction, response) {
   const questionIds = new Set(interaction.questions.map(({ id }) => id));
   if (response.cancelled) {
-    return Object.keys(response.answers).length === 0 ? null : invalidRequest2("Cancelled Question Response must not contain answers");
+    return Object.keys(response.answers).length === 0 ? null : invalidRequest("Cancelled Question Response must not contain answers");
   }
   for (const answerId of Object.keys(response.answers)) {
     if (!questionIds.has(answerId)) {
-      return invalidRequest2("Question Response contains an unknown Question ID");
+      return invalidRequest("Question Response contains an unknown Question ID");
     }
   }
   for (const question of interaction.questions) {
     const answers = response.answers[question.id] ?? [];
     if (!question.optional && answers.length === 0) {
-      return invalidRequest2("Question Response omits a required answer");
+      return invalidRequest("Question Response omits a required answer");
     }
     if (question.type === "text") {
       if (answers.length > 1) {
-        return invalidRequest2("Text Question accepts at most one answer");
+        return invalidRequest("Text Question accepts at most one answer");
       }
       continue;
     }
     if (!question.multiple && answers.length > 1) {
-      return invalidRequest2("Single-choice Question accepts at most one answer");
+      return invalidRequest("Single-choice Question accepts at most one answer");
     }
     const declared = new Set(question.options.map(({ value }) => value));
     if (!question.allowOther && answers.some((answer) => !declared.has(answer))) {
-      return invalidRequest2("Question Response contains an undeclared choice");
+      return invalidRequest("Question Response contains an undeclared choice");
     }
   }
   return null;
@@ -16241,7 +16233,7 @@ async function forkAntigravitySession(options) {
   }));
   const model = sourceSession?.model ?? sourceHistory.model;
   const thinkingOptionId = sourceSession?.thinkingOptionId ?? sourceHistory.thinkingOptionId;
-  const permissionMode = sourceSession?.permissionMode ?? "configured";
+  const permissionMode = sourceSession?.permissionMode ?? "dangerously-skip-permissions";
   const forkedHistory = await AntigravityHistory.createDerived({
     environment: sessionEnvironment,
     nativeSessionId: derivedNativeSessionId,
@@ -16366,23 +16358,13 @@ function antigravityAvailableThinkingOptions(catalog, model) {
 }
 
 // dist/permission-modes.js
-var ANTIGRAVITY_DEFAULT_PERMISSION_MODE_ID = harnessPermissionModeIdSchema.parse("configured");
+var ANTIGRAVITY_DEFAULT_PERMISSION_MODE_ID = harnessPermissionModeIdSchema.parse("dangerously-skip-permissions");
 var ANTIGRAVITY_PERMISSION_MODE_CATALOG = harnessPermissionModeCatalogSchema.parse({
   modes: [
-    {
-      id: "configured",
-      label: "Configured permissions",
-      description: "Use Antigravity CLI permission rules; headless prompts are denied safely."
-    },
-    {
-      id: "desktop-approvals",
-      label: "Desktop approvals",
-      description: "Ask Desktop before each parent tool action. Uses native auto-execution behind a verified, fail-closed Hook; does not use configured permission prompts."
-    },
     {
       id: "dangerously-skip-permissions",
       label: "Skip permissions",
-      description: "Auto-approve every Antigravity CLI tool action.",
+      description: "Run Antigravity CLI with --dangerously-skip-permissions. codexhost adds no tool approval or workspace restrictions.",
       dangerous: true
     }
   ],
@@ -16390,10 +16372,10 @@ var ANTIGRAVITY_PERMISSION_MODE_CATALOG = harnessPermissionModeCatalogSchema.par
 });
 function decodeAntigravityPermissionModeId(value) {
   const parsed = harnessPermissionModeIdSchema.parse(value);
-  if (parsed !== "configured" && parsed !== "desktop-approvals" && parsed !== "dangerously-skip-permissions") {
-    throw new Error("Antigravity Permission Mode belongs to another Adapter");
+  if (parsed !== "dangerously-skip-permissions") {
+    throw new Error("Antigravity only supports Skip permissions (dangerous). Explicitly select Skip permissions to continue; codexhost does not enforce tool permissions.");
   }
-  return parsed;
+  return "dangerously-skip-permissions";
 }
 
 // dist/rollback.js
@@ -16465,7 +16447,7 @@ async function rollbackAntigravityLastTurn(options) {
   }));
   const model = sourceSession?.model ?? sourceHistory.model;
   const thinkingOptionId = sourceSession?.thinkingOptionId ?? sourceHistory.thinkingOptionId;
-  const permissionMode = sourceSession?.permissionMode ?? "configured";
+  const permissionMode = sourceSession?.permissionMode ?? "dangerously-skip-permissions";
   const rolledBackHistory = await AntigravityHistory.createDerived({
     environment: sessionEnvironment,
     nativeSessionId: derivedNativeSessionId,
@@ -17113,9 +17095,15 @@ function parseBuckets(groups) {
 }
 function leadingBucket(buckets) {
   return [...buckets].sort((left, right) => {
-    if (right.usagePercent !== left.usagePercent)
+    const leftIsFiveHour = periodTypeFrom(left.window) === "five_hour";
+    const rightIsFiveHour = periodTypeFrom(right.window) === "five_hour";
+    if (leftIsFiveHour !== rightIsFiveHour) {
+      return Number(rightIsFiveHour) - Number(leftIsFiveHour);
+    }
+    if (right.usagePercent !== left.usagePercent) {
       return right.usagePercent - left.usagePercent;
-    return Number(periodTypeFrom(right.window) === "five_hour") - Number(periodTypeFrom(left.window) === "five_hour");
+    }
+    return 0;
   })[0];
 }
 function parseAntigravityUsageCommand(command, fetchedAt = (/* @__PURE__ */ new Date()).toISOString()) {
@@ -17207,9 +17195,7 @@ process.stdin.on("end", () => {
         target.pathname !== "/question" || target.username || target.password) {
       return unavailable();
     }
-    const payload = JSON.parse(input);
-    const approval = process.env.CODEXHOST_AGY_QUESTION_APPROVALS === "1" &&
-      payload.toolCall && payload.toolCall.name !== "ask_question";
+    JSON.parse(input);
     request = http.request(target, {
       method: "POST",
       headers: {
@@ -17230,7 +17216,7 @@ process.stdin.on("end", () => {
         try {
           const value = JSON.parse(body);
           if (response.statusCode !== 200 ||
-              (value.decision !== "deny" && !(approval && value.decision === "allow")) ||
+              value.decision !== "deny" ||
               typeof value.reason !== "string") return unavailable();
           finish(value);
         } catch { unavailable(); }
@@ -17265,23 +17251,11 @@ var responseSchema = external_exports.object({
   answers: external_exports.record(external_exports.string(), external_exports.array(external_exports.string().max(8e3)).max(30)),
   cancelled: external_exports.boolean().optional()
 }).strict();
-var approvalRequestSchema = external_exports.object({
-  conversationId: external_exports.string().min(1).max(128),
-  stepIdx: external_exports.number().int().nonnegative(),
-  toolCall: external_exports.object({
-    name: external_exports.string().min(1).max(256).refine((name) => name !== "ask_question"),
-    args: jsonValueSchema
-  })
-});
-var approvalResponseSchema = external_exports.strictObject({
-  type: external_exports.literal("approval"),
-  actionId: external_exports.string()
-});
-function deny(response, reason, status = 200, decision = "deny") {
+function deny(response, reason, status = 200) {
   if (response.destroyed || response.writableEnded)
     return;
   response.writeHead(status, { "content-type": "application/json", connection: "close" });
-  response.end(JSON.stringify({ decision, reason }));
+  response.end(JSON.stringify({ decision: "deny", reason }));
 }
 var AntigravityQuestionBridge = class _AntigravityQuestionBridge {
   directory;
@@ -17297,14 +17271,12 @@ var AntigravityQuestionBridge = class _AntigravityQuestionBridge {
   #seenSteps = /* @__PURE__ */ new Set();
   #stopped = false;
   #disposal = null;
-  #hookCommand = "";
   constructor(directory, options) {
     this.directory = directory;
     this.#options = options;
     this.environment = {
       CODEXHOST_AGY_QUESTION_TOKEN: this.#token,
-      CODEXHOST_AGY_QUESTION_TIMEOUT_MS: String(options.timeoutMs ?? QUESTION_TIMEOUT_MS),
-      CODEXHOST_AGY_QUESTION_APPROVALS: options.approvals ? "1" : "0"
+      CODEXHOST_AGY_QUESTION_TIMEOUT_MS: String(options.timeoutMs ?? QUESTION_TIMEOUT_MS)
     };
     this.#server.on("request", (request, response) => this.#receive(request, response));
   }
@@ -17331,12 +17303,11 @@ var AntigravityQuestionBridge = class _AntigravityQuestionBridge {
       bridge.environment.CODEXHOST_AGY_QUESTION_NODE = `"${process.execPath.replaceAll("\\", "/")}"`;
       bridge.environment.CODEXHOST_AGY_QUESTION_CLIENT = `"${client.replaceAll("\\", "/")}"`;
       const command = process.platform === "win32" ? "%CODEXHOST_AGY_QUESTION_NODE% %CODEXHOST_AGY_QUESTION_CLIENT%" : `${quote(process.execPath)} ${quote(client)}`;
-      bridge.#hookCommand = command;
       await writeFile2(path7.join(directory, ".agents", "hooks.json"), JSON.stringify({
         "codexhost-question-bridge": {
           PreToolUse: [
             {
-              matcher: options.approvals ? ".*" : "^ask_question$",
+              matcher: "^ask_question$",
               hooks: [
                 {
                   type: "command",
@@ -17354,38 +17325,6 @@ var AntigravityQuestionBridge = class _AntigravityQuestionBridge {
       throw error51;
     }
   }
-  verifyApprovalHooks(stdout) {
-    if (!this.#options.approvals)
-      return false;
-    const hookSchema = external_exports.object({
-      event: external_exports.literal("command_result"),
-      command: external_exports.object({
-        name: external_exports.literal("hooks"),
-        data: external_exports.object({
-          hooks: external_exports.array(external_exports.object({
-            name: external_exports.string(),
-            enabled: external_exports.boolean(),
-            source: external_exports.string(),
-            actions: external_exports.array(external_exports.object({
-              event: external_exports.string(),
-              matcher: external_exports.string(),
-              command: external_exports.string()
-            }))
-          }))
-        })
-      })
-    });
-    for (const line of stdout.split("\n")) {
-      try {
-        const parsed = hookSchema.safeParse(JSON.parse(line));
-        if (!parsed.success)
-          continue;
-        return parsed.data.command.data.hooks.some((hook) => hook.name === "codexhost-question-bridge" && hook.enabled && path7.resolve(hook.source) === path7.join(this.directory, ".agents", "hooks.json") && hook.actions.some((action) => action.event === "PreToolUse" && action.matcher === ".*" && action.command === this.#hookCommand));
-      } catch {
-      }
-    }
-    return false;
-  }
   #receive(request, response) {
     const auth = Buffer.from(request.headers.authorization ?? "");
     const expected = Buffer.from(`Bearer ${this.#token}`);
@@ -17419,13 +17358,6 @@ var AntigravityQuestionBridge = class _AntigravityQuestionBridge {
         return;
       }
       if (!parsed.success) {
-        if (this.#options.approvals) {
-          const approval = approvalRequestSchema.safeParse(JSON.parse(body));
-          if (approval.success) {
-            this.#options.schedule(() => this.#approve(approval.data, response));
-            return;
-          }
-        }
         deny(response, "Invalid question payload", 400);
         return;
       }
@@ -17433,52 +17365,6 @@ var AntigravityQuestionBridge = class _AntigravityQuestionBridge {
       this.#options.schedule(() => this.#ask(payload, response));
     });
   }
-  #approve(payload, response) {
-    if (this.#stopped || response.destroyed || payload.conversationId !== this.#options.nativeSessionId() && !this.#options.ownsApprovalSession?.(payload.conversationId)) {
-      deny(response, "Tool approval does not belong to the active codexhost Turn.");
-      return;
-    }
-    if (payload.toolCall.name === "ask_permission") {
-      deny(response, "Desktop approves actual tool actions. Call the intended tool directly instead of ask_permission.");
-      return;
-    }
-    const stepKey = `${payload.conversationId}:${payload.stepIdx}`;
-    if (this.#seenSteps.has(stepKey) || this.#seenSteps.size >= 128) {
-      deny(response, "Duplicate or overlapping tool approval. No permission was granted.");
-      return;
-    }
-    this.#seenSteps.add(stepKey);
-    const interaction = {
-      type: "approval",
-      interactionId: hostInteractionIdSchema.parse(randomUUID4()),
-      turnId: this.#options.turnId,
-      title: `Antigravity: ${payload.toolCall.name}`,
-      description: `Tool: ${payload.toolCall.name}
-Session: ${payload.conversationId}
-Arguments:
-${JSON.stringify(payload.toolCall.args, null, 2)}`,
-      subject: { type: "nativeAction" },
-      actions: [
-        { id: "allow-once", label: "Allow once", effect: "allowOnce" },
-        { id: "deny", label: "Deny", effect: "deny" }
-      ]
-    };
-    const pending = {
-      interaction,
-      response,
-      expiresAt: Date.now() + (this.#options.timeoutMs ?? QUESTION_TIMEOUT_MS),
-      timer: setTimeout(() => {
-        this.#finish(pending, "expired", "Tool approval expired. No permission was granted.");
-      }, this.#options.timeoutMs ?? QUESTION_TIMEOUT_MS)
-    };
-    this.#pending.set(interaction.interactionId, pending);
-    response.on("close", () => {
-      if (!response.writableFinished) {
-        this.#finish(pending, "cancelled", "Tool approval connection closed. No permission was granted.");
-      }
-    });
-    this.#options.emit({ kind: "interaction", interaction });
-  }
   #ask(payload, response) {
     if (this.#stopped || response.destroyed || payload.conversationId !== this.#options.nativeSessionId()) {
       deny(response, "This question does not belong to the active codexhost Turn. No answer was received.");
@@ -17554,27 +17440,12 @@ ${JSON.stringify(payload.toolCall.args, null, 2)}`,
       };
     }
     if (Date.now() >= pending.expiresAt) {
-      this.#finish(pending, "expired", pending.interaction.type === "approval" ? "Tool approval expired. No permission was granted." : EXPIRED_REASON);
+      this.#finish(pending, "expired", EXPIRED_REASON);
       return {
         ok: false,
         error: { code: "invalidState", message: "Question has expired", retryable: false }
       };
     }
-    if (pending.interaction.type === "approval") {
-      const parsed2 = approvalResponseSchema.safeParse(command.response);
-      if (!parsed2.success) {
-        return {
-          ok: false,
-          error: { code: "invalidRequest", message: "Invalid Approval response", retryable: false }
-        };
-      }
-      const error52 = validateHostApprovalResponse(pending.interaction, parsed2.data);
-      if (error52)
-        return { ok: false, error: error52 };
-      const allowed = parsed2.data.actionId === "allow-once";
-      this.#finish(pending, "responded", allowed ? "User approved this tool call once." : "User denied this tool call.", allowed ? "allow" : "deny");
-      return { ok: true, value: { accepted: true } };
-    }
     const parsed = responseSchema.safeParse(command.response);
     if (!parsed.success) {
       return {
@@ -17610,11 +17481,11 @@ ${JSON.stringify(payload.toolCall.args, null, 2)}`,
     this.#finish(pending, parsed.data.cancelled ? "cancelled" : "responded", reason);
     return { ok: true, value: { accepted: true } };
   }
-  #finish(pending, reason, text, decision = "deny") {
+  #finish(pending, reason, text) {
     if (!this.#pending.delete(pending.interaction.interactionId))
       return;
     clearTimeout(pending.timer);
-    deny(pending.response, text, 200, decision);
+    deny(pending.response, text);
     this.#options.emit({
       kind: "event",
       event: {
@@ -17645,7 +17516,7 @@ ${JSON.stringify(payload.toolCall.args, null, 2)}`,
       return;
     this.#stopped = true;
     for (const pending of this.#pending.values()) {
-      this.#finish(pending, "cancelled", pending.interaction.type === "approval" ? "The codexhost Turn ended before tool approval. No permission was granted." : "The codexhost Turn ended before an answer was received. Do not infer a user choice.");
+      this.#finish(pending, "cancelled", "The codexhost Turn ended before an answer was received. Do not infer a user choice.");
     }
   }
   dispose() {
@@ -18183,7 +18054,7 @@ function permissionDeniedTurnError(nativeMode, denial) {
   const mode = nativeMode ? ` '${nativeMode}'` : "";
   return {
     code: "nativeFailure",
-    message: `Antigravity denied a tool call under its${mode} permission mode and produced no response. Headless Antigravity evaluates its own permission rules and cannot ask for approval; retry with the Skip permissions Permission Mode.`,
+    message: `Antigravity denied a tool call under its${mode} permission mode and produced no response. codexhost uses native Skip permissions and does not enforce tool permissions. Check Antigravity CLI diagnostics and native Hooks for the denial; Desktop approvals and Configured permissions are not supported.`,
     retryable: false,
     diagnostic: sanitizeDiagnosticTail(denial)
   };
@@ -18459,8 +18330,6 @@ var AntigravitySession = class {
     }
     let questions;
     this.#preparingQuestions = AntigravityQuestionBridge.create({
-      approvals: this.#permissionMode === "desktop-approvals",
-      ownsApprovalSession: (id) => this.#active?.command === command && !this.#active.cancellationRequested && this.#active.subagents.state(id) !== void 0,
       turnId: command.turnId,
       nativeSessionId: () => this.#active?.command === command && !this.#active.cancellationRequested ? this.#nativeRef?.nativeSessionId : void 0,
       schedule: (action) => {
@@ -18483,26 +18352,6 @@ var AntigravitySession = class {
         }
         this.#channel.emit(output);
       }
-    }).then(async (bridge) => {
-      if (this.#permissionMode !== "desktop-approvals")
-        return bridge;
-      try {
-        const { stdout } = await runBuffered(this.#executable, [
-          "--add-dir",
-          this.#cwd,
-          "--add-dir",
-          bridge.directory,
-          "--print=/hooks",
-          "--output-format",
-          "stream-json"
-        ], this.#cwd, { ...this.#environment, ...bridge.environment }, DEFAULT_INSPECT_TIMEOUT_MS);
-        if (!bridge.verifyApprovalHooks(stdout))
-          throw new Error("Desktop approval Hook was not loaded");
-        return bridge;
-      } catch {
-        await bridge.dispose();
-        throw new Error("Desktop approval Hook verification failed; no tools were started");
-      }
     });
     try {
       questions = await this.#preparingQuestions;
@@ -18535,9 +18384,7 @@ var AntigravitySession = class {
     if (this.#nativeRef)
       arguments_.unshift("--conversation", this.#nativeRef.nativeSessionId);
     arguments_.push(...antigravityModelArguments(this.#model, this.#thinkingOptionId));
-    if (this.#permissionMode === "dangerously-skip-permissions" || this.#permissionMode === "desktop-approvals") {
-      arguments_.push("--dangerously-skip-permissions");
-    }
+    arguments_.push("--dangerously-skip-permissions");
     arguments_.push("--add-dir", this.#cwd);
     arguments_.push("--add-dir", questions.directory);
     arguments_.push("--log-file", logPath);
@@ -19319,6 +19166,17 @@ var AntigravityAdapter = class {
   async open(input) {
     if (this.#closed)
       return { ok: false, error: invalidState("Antigravity Adapter is closed") };
+    let permissionMode = "dangerously-skip-permissions";
+    if (input.kind !== "fork" && input.permissionModeId) {
+      try {
+        permissionMode = decodeAntigravityPermissionModeId(input.permissionModeId);
+      } catch (error51) {
+        return {
+          ok: false,
+          error: { code: "invalidRequest", message: errorMessage(error51), retryable: false }
+        };
+      }
+    }
     if (!input.cwd) {
       return {
         ok: false,
@@ -19430,17 +19288,6 @@ var AntigravityAdapter = class {
         };
       }
     }
-    let permissionMode = "configured";
-    if (input.kind === "create" && input.permissionModeId) {
-      try {
-        permissionMode = decodeAntigravityPermissionModeId(input.permissionModeId);
-      } catch (error51) {
-        return {
-          ok: false,
-          error: { code: "invalidRequest", message: errorMessage(error51), retryable: false }
-        };
-      }
-    }
     const sessionEnvironment = { ...this.#environment, ...input.environment ?? {} };
     const history = await AntigravityHistory.open({
       environment: sessionEnvironment,