@cosmicstack/mercury-agent 0.2.5 → 0.2.7

package/dist/index.js

@@ -7,7 +7,6 @@ import { dirname as dirname3, join as join11 } from "path";
 import { Command } from "commander";
 import readline2 from "readline";
 import chalk6 from "chalk";
-import figlet from "figlet";
 
 // src/utils/config.ts
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "fs";
@@ -2304,6 +2303,7 @@ var PermissionManager = class {
   elevatedCommands = /* @__PURE__ */ new Set();
   pendingApprovals = /* @__PURE__ */ new Set();
   currentChannelType = "cli";
+  tempScopes = [];
   constructor() {
     this.cwd = process.cwd();
     this.manifest = this.load();
@@ -2394,12 +2394,18 @@ var PermissionManager = class {
     }
     const resolved = resolve(path3);
     const scope = this.findScope(resolved);
+    const tempScope = this.findTempScope(resolved);
     if (scope) {
       if (mode === "read" && scope.read) return { allowed: true };
       if (mode === "write" && scope.write) return { allowed: true };
       return { allowed: false, reason: `Permission denied: ${mode} access to ${path3} (scope has ${mode}=false)` };
     }
-    return await this.requestScope(resolved, mode);
+    if (tempScope) {
+      if (mode === "read" && tempScope.read) return { allowed: true };
+      if (mode === "write" && tempScope.write) return { allowed: true };
+      return { allowed: false, reason: `Permission denied: ${mode} access to ${path3}` };
+    }
+    return { allowed: false, reason: `Permission denied for ${mode} access to ${path3}` };
   }
   async checkShellCommand(command) {
     if (this.autoApproveAll) {
@@ -2430,7 +2436,7 @@ var PermissionManager = class {
       if (hasPathTraversal) {
         const scopeCheck = await this.checkFsAccess(hasPathTraversal, "write");
         if (!scopeCheck.allowed) {
-          return { allowed: false, reason: scopeCheck.reason, needsApproval: true };
+          return { allowed: false, reason: `No permission to access ${hasPathTraversal}. Use approve_scope tool with path="${hasPathTraversal}" and mode="write" to request access.`, needsApproval: false };
         }
       }
     }
@@ -2502,9 +2508,6 @@ var PermissionManager = class {
     return void 0;
   }
   async requestScopeExternal(path3, mode) {
-    return this.requestScope(path3, mode);
-  }
-  async requestScope(path3, mode) {
     if (!this.askHandler) {
       return { allowed: false, reason: `Permission denied for ${mode} access to ${path3}` };
     }
@@ -2517,11 +2520,26 @@ Allow access?`;
       this.addScope(path3, mode === "read", mode === "write");
       return { allowed: true };
     }
-    if (response === "yes" || response === "y") {
+    if (response === "yes") {
+      this.addTempScope(path3, mode === "read", mode === "write");
       return { allowed: true };
     }
     return { allowed: false, reason: `Permission denied for ${mode} access to ${path3}` };
   }
+  addTempScope(path3, read, write) {
+    const resolved = resolve(path3);
+    this.tempScopes.push({ path: resolved, read, write });
+    logger.info({ path: resolved, read, write }, "Temp permission scope added (session only)");
+  }
+  findTempScope(resolvedPath) {
+    for (const scope of this.tempScopes) {
+      const scopeResolved = resolve(scope.path.replace(/^~/, homedir2()));
+      if (resolvedPath === scopeResolved || resolvedPath.startsWith(scopeResolved + sep)) {
+        return scope;
+      }
+    }
+    return void 0;
+  }
   matchPattern(command, pattern) {
     const regexStr = "^" + pattern.replace(/\*/g, ".*").replace(/\?/g, ".") + "$";
     try {
@@ -2861,18 +2879,18 @@ import { z as z8 } from "zod";
 import { resolve as resolve9 } from "path";
 function createApproveScopeTool(permissions) {
   return tool8({
-    description: "Request user approval to add a directory to the allowed filesystem scopes. Use this when a file operation fails due to scope permissions. The user will see an approval prompt (inline keyboard on Telegram, readline on CLI). If approved, the scope is added permanently.",
+    description: 'Request user approval to access a directory outside current scopes. Use this when a file tool returns a permission denied error. The user gets an approval prompt (Allow/Always/Deny buttons on Telegram, yes/always/no on CLI). "Allow" grants session-only access. "Always" persists to disk. After approval, retry the original file operation.',
     parameters: z8.object({
-      path: z8.string().describe("The directory path to add to allowed scopes"),
+      path: z8.string().describe("The directory path to request access to"),
       mode: z8.enum(["read", "write"]).describe("The access mode needed")
     }),
     execute: async ({ path: path3, mode }) => {
       const resolved = resolve9(path3);
       const result = await permissions.requestScopeExternal(resolved, mode);
       if (result.allowed) {
-        return `Access approved for ${mode} access to ${resolved}`;
+        return `Access approved for ${mode} access to ${resolved}. You can now retry the file operation.`;
       }
-      return `Access denied for ${mode} access to ${resolved}`;
+      return `Access denied for ${mode} access to ${resolved}. The user did not approve scope access.`;
     }
   });
 }
@@ -4300,11 +4318,17 @@ var pkgVersion = JSON.parse(readFileSync12(join11(__dirname, "..", "package.json
 function hr() {
   console.log(chalk6.dim("\u2500".repeat(50)));
 }
+var MERCURY_ASCII = [
+  "    __  _____________  ________  ________  __",
+  "   /  |/  / ____/ __ \\/ ____/ / / / __ \\/ < /",
+  "  / /|_/ / __/ / /_/ / /   / / / / /_/ /\\  / ",
+  " / /  / / /___/ _, _/ /___/ /_/ / _, _/ / /  ",
+  "/_/  /_/_____/_/ |_|\\____/\\____/_/ |_| /_/   "
+].filter((l) => l.trim());
 function banner() {
   console.log("");
-  const art = figlet.textSync("MERCURY", { font: "Slant", horizontalLayout: "default" });
-  for (const line of art.split("\n")) {
-    if (line.trim()) console.log(chalk6.bold.cyan(`  ${line}`));
+  for (const line of MERCURY_ASCII) {
+    console.log(chalk6.bold.cyan(`  ${line}`));
   }
   console.log("");
   console.log(chalk6.white("  an AI agent for personal tasks"));
@@ -4313,9 +4337,8 @@ function banner() {
 }
 function splashScreen() {
   console.log("");
-  const art = figlet.textSync("MERCURY", { font: "Slant", horizontalLayout: "default" });
-  for (const line of art.split("\n")) {
-    if (line.trim()) console.log(chalk6.bold.cyan(`  ${line}`));
+  for (const line of MERCURY_ASCII) {
+    console.log(chalk6.bold.cyan(`  ${line}`));
   }
   console.log("");
   console.log(chalk6.dim("  an AI agent for personal tasks"));