@deksden-com/dd-flow-cli 0.6.0 → 0.7.0

package/dist/services/cli-operation-classifier.js

@@ -34,21 +34,63 @@ export function isReadOnlyCliOperation(args, env = process.env) {
 export function isMbUpgradeCliOperation(args, env = process.env) {
     return classifyCliOperation(args, env).mode === "mb_upgrade";
 }
-function isMbUpgradeMode(args, env) {
-    if (env.DD_FLOW_COMPATIBILITY_MODE === "mb-upgrade" || env.DD_FLOW_MB_UPGRADE_MODE === "1") {
+export function requiresExplicitUpgradeAuthorization(args) {
+    const positional = positionalArgs(args);
+    const [family, command] = positional;
+    if (family === "migration" && command === "apply")
         return true;
-    }
+    if (family === "run" && command === "start" && optionValue(args, "flow-kind") === "mb-upgrade")
+        return true;
+    return false;
+}
+function isMbUpgradeMode(args, env) {
+    const marked = env.DD_FLOW_COMPATIBILITY_MODE === "mb-upgrade" || env.DD_FLOW_MB_UPGRADE_MODE === "1";
     for (let index = 0; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === "--compatibility-mode" && args[index + 1] === "mb-upgrade")
-            return true;
+            return isUpgradeAllowlisted(args);
         if (arg === "--mb-upgrade-mode")
-            return true;
-        if (arg?.startsWith("--compatibility-mode="))
-            return arg.slice("--compatibility-mode=".length) === "mb-upgrade";
+            return isUpgradeAllowlisted(args);
+        if (arg?.startsWith("--compatibility-mode=") && arg.slice("--compatibility-mode=".length) === "mb-upgrade") {
+            return isUpgradeAllowlisted(args);
+        }
     }
+    return marked && isUpgradeAllowlisted(args);
+}
+function isUpgradeAllowlisted(args) {
+    const positional = positionalArgs(args);
+    const [family, command] = positional;
+    if (family === "status")
+        return true;
+    if (family === "engine" && command === "resolve")
+        return true;
+    if (family === "migration" && ["impact", "plan", "report", "verify", "apply"].includes(command ?? ""))
+        return true;
+    if (family === "memory" && command === "permissions" && positional[2] === "preflight")
+        return true;
+    if (family === "run" && command === "start")
+        return optionValue(args, "flow-kind") === "mb-upgrade";
+    if (family === "stage" && ["start", "finish"].includes(command ?? ""))
+        return hasRunBinding(args);
+    if (family === "session" && ["status", "register", "stop", "usage"].includes(command ?? ""))
+        return hasRunBinding(args);
+    if (family === "dashboard" && ["data", "render", "refresh", "open"].includes(command ?? ""))
+        return true;
     return false;
 }
+function hasRunBinding(args) {
+    return Boolean(optionValue(args, "run") || positionalArgs(args).some((value) => value.startsWith("RUN-")));
+}
+function optionValue(args, name) {
+    for (let index = args.length - 1; index >= 0; index -= 1) {
+        const arg = args[index];
+        if (arg === `--${name}`)
+            return args[index + 1] ?? null;
+        if (arg?.startsWith(`--${name}=`))
+            return arg.slice(name.length + 3);
+    }
+    return null;
+}
 function isRouterNative(args) {
     const first = args[0];
     if (!first || first === "--version")
@@ -57,7 +99,9 @@ function isRouterNative(args) {
         return true;
     if (args.includes("--help") || args.includes("-h"))
         return true;
-    return ["engine", "version", "schema"].includes(first);
+    if (["engine", "version", "schema"].includes(first))
+        return true;
+    return first === "codex" && args[1] === "hook" && args[2] === "handle";
 }
 function isReadOnlyDiagnostic(family, command, action) {
     if (!family)

package/dist/services/compatibility-preflight.js

@@ -11,7 +11,7 @@ export function preflightCliCompatibility(context, args, env = process.env, reso
     if (!projectRoot) {
         return { ok: true, classification, compatibility: null };
     }
-    const selection = selectEngine(context, { projectRoot });
+    const selection = selectEngine(context, { projectRoot, env }, { allowCurrentInProcess: true }, classification);
     const compatibility = compatibilityReport(selection, classification);
     if (classification.mode === "read_only_diagnostics" || classification.mode === "mb_upgrade") {
         return { ok: true, classification, compatibility };

package/dist/services/dashboard.js

@@ -893,7 +893,7 @@ function planSummaryForProtocol(context, projectId, protocolId) {
         return { plan_id: "none", total: 0, done: 0, blocked: 0 };
     }
     try {
-        const summary = planSummary(context, { projectId, protocolId, planPath: protocol.plan_path });
+        const summary = planSummary(context, { projectId, protocolId, planPath: protocol.plan_path }, { bind: false });
         return { plan_id: summary.plan_id, total: summary.total, done: summary.done, blocked: summary.blocked };
     }
     catch {
@@ -909,7 +909,7 @@ function activePlanItems(context, projectId, protocols) {
         }
         let plan;
         try {
-            plan = planWithProgress(context, { projectId, protocolId: protocol.id, planPath: record.plan_path }).plan;
+            plan = planWithProgress(context, { projectId, protocolId: protocol.id, planPath: record.plan_path }, { bind: false }).plan;
         }
         catch {
             continue;