@funnycode/myclaude 0.1.184 → 0.1.186

package/dist/myclaude.js

@@ -4,8 +4,8 @@
 // MACRO - build-time constants (injected by build.ts)
 // MACRO injected by build script
 globalThis.MACRO = {
-  VERSION: "0.1.184",
-  BUILD_TIME: "2026-08-10T02:03:01.135Z",
+  VERSION: "0.1.186",
+  BUILD_TIME: "2026-08-10T04:16:05.099Z",
   PACKAGE_URL: "@funnycode/myclaude",
   NATIVE_PACKAGE_URL: "@funnycode/myclaude",
   VERSION_CHANGELOG: '',
@@ -60512,6 +60512,7 @@ var init_types4 = __esm(() => {
     autoDreamEnabled: exports_external.boolean().optional().describe("Enable background memory consolidation (auto-dream). When set, overrides the server-side default."),
     showThinkingSummaries: exports_external.boolean().optional().describe("Show thinking summaries in the transcript view (ctrl+o). Default: false."),
     skipDangerousModePermissionPrompt: exports_external.boolean().optional().describe("Whether the user has accepted the bypass permissions mode dialog"),
+    commandApproval: exports_external.enum(["always", "dangerous", "never"]).optional().describe('Terminal command approval policy: "always" asks before every command, ' + '"dangerous" only asks for heuristically dangerous commands (default), ' + '"never" auto-approves commands that pass deny rules without prompting'),
     ...{},
     disableAutoMode: exports_external.enum(["disable"]).optional().describe("Disable auto mode"),
     sshConfigs: exports_external.array(exports_external.object({
@@ -117151,7 +117152,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@funnycode/myclaude",
-    version: "0.1.184",
+    version: "0.1.186",
     private: false,
     description: "An open-source AI coding assistant in your terminal - powered by Claude",
     license: "MIT",
@@ -209358,6 +209359,13 @@ function parseEventData(event) {
     return null;
   }
 }
+function isDumpPromptsEnabled() {
+  if (false)
+    ;
+  if (process.env.DUMP_PROMPTS !== "1")
+    return false;
+  return process.env.USER_TYPE === "ant" || process.env.MYCLAUDE_ALLOW_DUMP_PROMPTS === "1";
+}
 function hashString3(str) {
   return createHash5("sha256").update(str).digest("hex");
 }
@@ -209414,7 +209422,7 @@ function clearAllDumpState() {
   dumpState.clear();
 }
 function addApiRequestToCache(requestData) {
-  if (process.env.USER_TYPE !== "ant")
+  if (!isDumpPromptsEnabled())
     return;
   const metadata = {
     timestamp: new Date().toISOString(),
@@ -209453,7 +209461,7 @@ function initFingerprint(req) {
 async function dumpRequest(body, ts, state, filePath) {
   if (false)
     ;
-  if (process.env.USER_TYPE !== "ant")
+  if (!isDumpPromptsEnabled())
     return;
   try {
     const req = jsonParse(body);
@@ -209511,7 +209519,7 @@ function createDumpPromptsFetch(agentIdOrSessionId) {
     trimDumpState();
     let timestamp;
     if (init2?.method === "POST" && init2.body) {
-      if (process.env.USER_TYPE === "ant") {
+      if (isDumpPromptsEnabled()) {
         timestamp = new Date().toISOString();
         enqueueDumpRequest(agentIdOrSessionId, async () => {
           await dumpRequest(init2.body, timestamp, state, filePath);
@@ -209519,7 +209527,7 @@ function createDumpPromptsFetch(agentIdOrSessionId) {
       }
     }
     const response = await globalThis.fetch(input, init2);
-    if (timestamp && response.ok && true && process.env.USER_TYPE === "ant" && process.env.DUMP_PROMPTS === "1") {
+    if (timestamp && response.ok && isDumpPromptsEnabled()) {
       const cloned = response.clone();
       (async () => {
         try {
@@ -209623,7 +209631,7 @@ var init_dumpPrompts = __esm(() => {
   init_debug();
   init_log3();
   init_async_mutex();
-  if (process.env.USER_TYPE === "ant" && process.env.DUMP_PROMPTS === "1") {
+  if (isDumpPromptsEnabled()) {
     logForDebugging("DUMP_PROMPTS is enabled. This will write full API payloads (including system prompts, user messages, and tool definitions) to the filesystem. This is intended for debugging only and should NOT be used in production.", { level: "warn" });
   }
   cachedApiRequests = [];
@@ -382545,7 +382553,8 @@ For commands that are harder to parse at a glance (piped commands, obscure flags
       };
     },
     async checkPermissions(input, context) {
-      return bashToolHasPermission(input, context);
+      const verdict = await bashToolHasPermission(input, context);
+      return applyCommandApprovalPolicy(input.command, verdict);
     },
     renderToolUseMessage: renderToolUseMessage7,
     renderToolUseProgressMessage: renderToolUseProgressMessage5,
@@ -382781,6 +382790,101 @@ ${stderr}` : stdout;
   });
 });
 
+// src/tools/BashTool/destructiveCommandWarning.ts
+function getDestructiveCommandWarning(command) {
+  for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) {
+    if (pattern.test(command)) {
+      return warning;
+    }
+  }
+  return null;
+}
+var DESTRUCTIVE_PATTERNS;
+var init_destructiveCommandWarning = __esm(() => {
+  DESTRUCTIVE_PATTERNS = [
+    {
+      pattern: /\bgit\s+reset\s+--hard\b/,
+      warning: "Note: may discard uncommitted changes"
+    },
+    {
+      pattern: /\bgit\s+push\b[^;&|\n]*[ \t](--force|--force-with-lease|-f)\b/,
+      warning: "Note: may overwrite remote history"
+    },
+    {
+      pattern: /\bgit\s+clean\b(?![^;&|\n]*(?:-[a-zA-Z]*n|--dry-run))[^;&|\n]*-[a-zA-Z]*f/,
+      warning: "Note: may permanently delete untracked files"
+    },
+    {
+      pattern: /\bgit\s+checkout\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
+      warning: "Note: may discard all working tree changes"
+    },
+    {
+      pattern: /\bgit\s+restore\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
+      warning: "Note: may discard all working tree changes"
+    },
+    {
+      pattern: /\bgit\s+stash[ \t]+(drop|clear)\b/,
+      warning: "Note: may permanently remove stashed changes"
+    },
+    {
+      pattern: /\bgit\s+branch\s+(-D[ \t]|--delete\s+--force|--force\s+--delete)\b/,
+      warning: "Note: may force-delete a branch"
+    },
+    {
+      pattern: /\bgit\s+(commit|push|merge)\b[^;&|\n]*--no-verify\b/,
+      warning: "Note: may skip safety hooks"
+    },
+    {
+      pattern: /\bgit\s+commit\b[^;&|\n]*--amend\b/,
+      warning: "Note: may rewrite the last commit"
+    },
+    {
+      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR][a-zA-Z]*f|(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f[a-zA-Z]*[rR]/,
+      warning: "Note: may recursively force-remove files"
+    },
+    {
+      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR]/,
+      warning: "Note: may recursively remove files"
+    },
+    {
+      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f/,
+      warning: "Note: may force-remove files"
+    },
+    {
+      pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i,
+      warning: "Note: may drop or truncate database objects"
+    },
+    {
+      pattern: /\bDELETE\s+FROM\s+\w+[ \t]*(;|"|'|\n|$)/i,
+      warning: "Note: may delete all rows from a database table"
+    },
+    {
+      pattern: /\bkubectl\s+delete\b/,
+      warning: "Note: may delete Kubernetes resources"
+    },
+    {
+      pattern: /\bterraform\s+destroy\b/,
+      warning: "Note: may destroy Terraform infrastructure"
+    },
+    {
+      pattern: /\bsudo\b/,
+      warning: "Note: runs with elevated privileges"
+    },
+    {
+      pattern: /\bdd\b[^;&|\n]*\bof=(?:\/dev\/(?!null\b)[a-zA-Z0-9]+|\/dev\/disk)/,
+      warning: "Note: may overwrite a raw block device"
+    },
+    {
+      pattern: /\bchmod\b[^;&|\n]*(?:-[a-zA-Z]*R[a-zA-Z]*|\s+[0-7]{3,4}\s+\/)/,
+      warning: "Note: recursively changes permissions (may break system files)"
+    },
+    {
+      pattern: /\bmkfs(?:\.\w+)?\b/,
+      warning: "Note: will format/erase a filesystem"
+    }
+  ];
+});
+
 // src/tools/BashTool/bashCommandHelpers.ts
 async function segmentedCommandPermissionResult(input, segments, bashToolHasPermissionFn, checkers) {
   const cdCommands = segments.filter((segment2) => {
@@ -383809,6 +383913,29 @@ function isNormalizedCdCommand(command) {
 function commandHasAnyCd(command) {
   return splitCommand(command).some((subcmd) => isNormalizedCdCommand(subcmd.trim()));
 }
+async function applyCommandApprovalPolicy(command, result) {
+  if (result.behavior !== "allow") {
+    return result;
+  }
+  const approvalMode = getInitialSettings().commandApproval;
+  if (approvalMode === "never") {
+    return result;
+  }
+  const isDangerous = getDestructiveCommandWarning(command) !== null;
+  if (approvalMode === "always" || approvalMode === "dangerous" && isDangerous) {
+    const decisionReason = {
+      type: "other",
+      reason: approvalMode === "always" ? "commandApproval=always requires confirmation before running commands" : "commandApproval=dangerous requires confirmation for heuristically dangerous commands"
+    };
+    return {
+      behavior: "ask",
+      message: createPermissionRequestMessage2(BashTool.name, decisionReason),
+      updatedInput: result.updatedInput,
+      decisionReason
+    };
+  }
+  return result;
+}
 var bashCommandIsSafeAsync, splitCommand, ENV_VAR_ASSIGN_RE, MAX_SUBCOMMANDS_FOR_SECURITY_CHECK = 50, MAX_SUGGESTED_RULES_FOR_COMPOUND = 5, BARE_SHELL_PREFIXES, permissionRuleExtractPrefix3, bashPermissionRule, SAFE_ENV_VARS2, ANT_ONLY_SAFE_ENV_VARS, BINARY_HIJACK_VARS, bashToolCheckExactMatchPermission = (input, toolPermissionContext) => {
   const command = input.command.trim();
   const { matchingDenyRules, matchingAskRules, matchingAllowRules } = matchingRulesForInput2(input, toolPermissionContext, "exact");
@@ -383946,8 +384073,10 @@ var init_bashPermissions = __esm(() => {
   init_platform();
   init_sandbox_adapter();
   init_slowOperations();
+  init_settings2();
   init_windowsPaths();
   init_BashTool();
+  init_destructiveCommandWarning();
   init_bashCommandHelpers();
   init_bashSecurity();
   init_modeValidation2();
@@ -514611,85 +514740,6 @@ var init_AskUserQuestionPermissionRequest = __esm(() => {
   jsx_dev_runtime373 = __toESM(require_jsx_dev_runtime(), 1);
 });
 
-// src/tools/BashTool/destructiveCommandWarning.ts
-function getDestructiveCommandWarning(command8) {
-  for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) {
-    if (pattern.test(command8)) {
-      return warning;
-    }
-  }
-  return null;
-}
-var DESTRUCTIVE_PATTERNS;
-var init_destructiveCommandWarning = __esm(() => {
-  DESTRUCTIVE_PATTERNS = [
-    {
-      pattern: /\bgit\s+reset\s+--hard\b/,
-      warning: "Note: may discard uncommitted changes"
-    },
-    {
-      pattern: /\bgit\s+push\b[^;&|\n]*[ \t](--force|--force-with-lease|-f)\b/,
-      warning: "Note: may overwrite remote history"
-    },
-    {
-      pattern: /\bgit\s+clean\b(?![^;&|\n]*(?:-[a-zA-Z]*n|--dry-run))[^;&|\n]*-[a-zA-Z]*f/,
-      warning: "Note: may permanently delete untracked files"
-    },
-    {
-      pattern: /\bgit\s+checkout\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
-      warning: "Note: may discard all working tree changes"
-    },
-    {
-      pattern: /\bgit\s+restore\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
-      warning: "Note: may discard all working tree changes"
-    },
-    {
-      pattern: /\bgit\s+stash[ \t]+(drop|clear)\b/,
-      warning: "Note: may permanently remove stashed changes"
-    },
-    {
-      pattern: /\bgit\s+branch\s+(-D[ \t]|--delete\s+--force|--force\s+--delete)\b/,
-      warning: "Note: may force-delete a branch"
-    },
-    {
-      pattern: /\bgit\s+(commit|push|merge)\b[^;&|\n]*--no-verify\b/,
-      warning: "Note: may skip safety hooks"
-    },
-    {
-      pattern: /\bgit\s+commit\b[^;&|\n]*--amend\b/,
-      warning: "Note: may rewrite the last commit"
-    },
-    {
-      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR][a-zA-Z]*f|(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f[a-zA-Z]*[rR]/,
-      warning: "Note: may recursively force-remove files"
-    },
-    {
-      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR]/,
-      warning: "Note: may recursively remove files"
-    },
-    {
-      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f/,
-      warning: "Note: may force-remove files"
-    },
-    {
-      pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i,
-      warning: "Note: may drop or truncate database objects"
-    },
-    {
-      pattern: /\bDELETE\s+FROM\s+\w+[ \t]*(;|"|'|\n|$)/i,
-      warning: "Note: may delete all rows from a database table"
-    },
-    {
-      pattern: /\bkubectl\s+delete\b/,
-      warning: "Note: may delete Kubernetes resources"
-    },
-    {
-      pattern: /\bterraform\s+destroy\b/,
-      warning: "Note: may destroy Terraform infrastructure"
-    }
-  ];
-});
-
 // src/utils/shell/specPrefix.ts
 function isKnownSubcommand(arg, spec) {
   if (!spec?.subcommands?.length)
@@ -563509,6 +563559,7 @@ var init_migrateEnableAllProjectMcpServersToSettings = __esm(() => {
 // src/migrations/migrateFennecToOpus.ts
 var init_migrateFennecToOpus = __esm(() => {
   init_log3();
+  init_config();
   init_providers();
   init_settings2();
 });

package/dist/myclaude.mjs

@@ -4,8 +4,8 @@
 // MACRO - build-time constants (injected by build.ts)
 // MACRO injected by build script
 globalThis.MACRO = {
-  VERSION: "0.1.184",
-  BUILD_TIME: "2026-08-10T02:03:01.135Z",
+  VERSION: "0.1.186",
+  BUILD_TIME: "2026-08-10T04:16:05.099Z",
   PACKAGE_URL: "@funnycode/myclaude",
   NATIVE_PACKAGE_URL: "@funnycode/myclaude",
   VERSION_CHANGELOG: '',
@@ -60512,6 +60512,7 @@ var init_types4 = __esm(() => {
     autoDreamEnabled: exports_external.boolean().optional().describe("Enable background memory consolidation (auto-dream). When set, overrides the server-side default."),
     showThinkingSummaries: exports_external.boolean().optional().describe("Show thinking summaries in the transcript view (ctrl+o). Default: false."),
     skipDangerousModePermissionPrompt: exports_external.boolean().optional().describe("Whether the user has accepted the bypass permissions mode dialog"),
+    commandApproval: exports_external.enum(["always", "dangerous", "never"]).optional().describe('Terminal command approval policy: "always" asks before every command, ' + '"dangerous" only asks for heuristically dangerous commands (default), ' + '"never" auto-approves commands that pass deny rules without prompting'),
     ...{},
     disableAutoMode: exports_external.enum(["disable"]).optional().describe("Disable auto mode"),
     sshConfigs: exports_external.array(exports_external.object({
@@ -117151,7 +117152,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@funnycode/myclaude",
-    version: "0.1.184",
+    version: "0.1.186",
     private: false,
     description: "An open-source AI coding assistant in your terminal - powered by Claude",
     license: "MIT",
@@ -209358,6 +209359,13 @@ function parseEventData(event) {
     return null;
   }
 }
+function isDumpPromptsEnabled() {
+  if (false)
+    ;
+  if (process.env.DUMP_PROMPTS !== "1")
+    return false;
+  return process.env.USER_TYPE === "ant" || process.env.MYCLAUDE_ALLOW_DUMP_PROMPTS === "1";
+}
 function hashString3(str) {
   return createHash5("sha256").update(str).digest("hex");
 }
@@ -209414,7 +209422,7 @@ function clearAllDumpState() {
   dumpState.clear();
 }
 function addApiRequestToCache(requestData) {
-  if (process.env.USER_TYPE !== "ant")
+  if (!isDumpPromptsEnabled())
     return;
   const metadata = {
     timestamp: new Date().toISOString(),
@@ -209453,7 +209461,7 @@ function initFingerprint(req) {
 async function dumpRequest(body, ts, state, filePath) {
   if (false)
     ;
-  if (process.env.USER_TYPE !== "ant")
+  if (!isDumpPromptsEnabled())
     return;
   try {
     const req = jsonParse(body);
@@ -209511,7 +209519,7 @@ function createDumpPromptsFetch(agentIdOrSessionId) {
     trimDumpState();
     let timestamp;
     if (init2?.method === "POST" && init2.body) {
-      if (process.env.USER_TYPE === "ant") {
+      if (isDumpPromptsEnabled()) {
         timestamp = new Date().toISOString();
         enqueueDumpRequest(agentIdOrSessionId, async () => {
           await dumpRequest(init2.body, timestamp, state, filePath);
@@ -209519,7 +209527,7 @@ function createDumpPromptsFetch(agentIdOrSessionId) {
       }
     }
     const response = await globalThis.fetch(input, init2);
-    if (timestamp && response.ok && true && process.env.USER_TYPE === "ant" && process.env.DUMP_PROMPTS === "1") {
+    if (timestamp && response.ok && isDumpPromptsEnabled()) {
       const cloned = response.clone();
       (async () => {
         try {
@@ -209623,7 +209631,7 @@ var init_dumpPrompts = __esm(() => {
   init_debug();
   init_log3();
   init_async_mutex();
-  if (process.env.USER_TYPE === "ant" && process.env.DUMP_PROMPTS === "1") {
+  if (isDumpPromptsEnabled()) {
     logForDebugging("DUMP_PROMPTS is enabled. This will write full API payloads (including system prompts, user messages, and tool definitions) to the filesystem. This is intended for debugging only and should NOT be used in production.", { level: "warn" });
   }
   cachedApiRequests = [];
@@ -382545,7 +382553,8 @@ For commands that are harder to parse at a glance (piped commands, obscure flags
       };
     },
     async checkPermissions(input, context) {
-      return bashToolHasPermission(input, context);
+      const verdict = await bashToolHasPermission(input, context);
+      return applyCommandApprovalPolicy(input.command, verdict);
     },
     renderToolUseMessage: renderToolUseMessage7,
     renderToolUseProgressMessage: renderToolUseProgressMessage5,
@@ -382781,6 +382790,101 @@ ${stderr}` : stdout;
   });
 });
 
+// src/tools/BashTool/destructiveCommandWarning.ts
+function getDestructiveCommandWarning(command) {
+  for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) {
+    if (pattern.test(command)) {
+      return warning;
+    }
+  }
+  return null;
+}
+var DESTRUCTIVE_PATTERNS;
+var init_destructiveCommandWarning = __esm(() => {
+  DESTRUCTIVE_PATTERNS = [
+    {
+      pattern: /\bgit\s+reset\s+--hard\b/,
+      warning: "Note: may discard uncommitted changes"
+    },
+    {
+      pattern: /\bgit\s+push\b[^;&|\n]*[ \t](--force|--force-with-lease|-f)\b/,
+      warning: "Note: may overwrite remote history"
+    },
+    {
+      pattern: /\bgit\s+clean\b(?![^;&|\n]*(?:-[a-zA-Z]*n|--dry-run))[^;&|\n]*-[a-zA-Z]*f/,
+      warning: "Note: may permanently delete untracked files"
+    },
+    {
+      pattern: /\bgit\s+checkout\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
+      warning: "Note: may discard all working tree changes"
+    },
+    {
+      pattern: /\bgit\s+restore\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
+      warning: "Note: may discard all working tree changes"
+    },
+    {
+      pattern: /\bgit\s+stash[ \t]+(drop|clear)\b/,
+      warning: "Note: may permanently remove stashed changes"
+    },
+    {
+      pattern: /\bgit\s+branch\s+(-D[ \t]|--delete\s+--force|--force\s+--delete)\b/,
+      warning: "Note: may force-delete a branch"
+    },
+    {
+      pattern: /\bgit\s+(commit|push|merge)\b[^;&|\n]*--no-verify\b/,
+      warning: "Note: may skip safety hooks"
+    },
+    {
+      pattern: /\bgit\s+commit\b[^;&|\n]*--amend\b/,
+      warning: "Note: may rewrite the last commit"
+    },
+    {
+      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR][a-zA-Z]*f|(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f[a-zA-Z]*[rR]/,
+      warning: "Note: may recursively force-remove files"
+    },
+    {
+      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR]/,
+      warning: "Note: may recursively remove files"
+    },
+    {
+      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f/,
+      warning: "Note: may force-remove files"
+    },
+    {
+      pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i,
+      warning: "Note: may drop or truncate database objects"
+    },
+    {
+      pattern: /\bDELETE\s+FROM\s+\w+[ \t]*(;|"|'|\n|$)/i,
+      warning: "Note: may delete all rows from a database table"
+    },
+    {
+      pattern: /\bkubectl\s+delete\b/,
+      warning: "Note: may delete Kubernetes resources"
+    },
+    {
+      pattern: /\bterraform\s+destroy\b/,
+      warning: "Note: may destroy Terraform infrastructure"
+    },
+    {
+      pattern: /\bsudo\b/,
+      warning: "Note: runs with elevated privileges"
+    },
+    {
+      pattern: /\bdd\b[^;&|\n]*\bof=(?:\/dev\/(?!null\b)[a-zA-Z0-9]+|\/dev\/disk)/,
+      warning: "Note: may overwrite a raw block device"
+    },
+    {
+      pattern: /\bchmod\b[^;&|\n]*(?:-[a-zA-Z]*R[a-zA-Z]*|\s+[0-7]{3,4}\s+\/)/,
+      warning: "Note: recursively changes permissions (may break system files)"
+    },
+    {
+      pattern: /\bmkfs(?:\.\w+)?\b/,
+      warning: "Note: will format/erase a filesystem"
+    }
+  ];
+});
+
 // src/tools/BashTool/bashCommandHelpers.ts
 async function segmentedCommandPermissionResult(input, segments, bashToolHasPermissionFn, checkers) {
   const cdCommands = segments.filter((segment2) => {
@@ -383809,6 +383913,29 @@ function isNormalizedCdCommand(command) {
 function commandHasAnyCd(command) {
   return splitCommand(command).some((subcmd) => isNormalizedCdCommand(subcmd.trim()));
 }
+async function applyCommandApprovalPolicy(command, result) {
+  if (result.behavior !== "allow") {
+    return result;
+  }
+  const approvalMode = getInitialSettings().commandApproval;
+  if (approvalMode === "never") {
+    return result;
+  }
+  const isDangerous = getDestructiveCommandWarning(command) !== null;
+  if (approvalMode === "always" || approvalMode === "dangerous" && isDangerous) {
+    const decisionReason = {
+      type: "other",
+      reason: approvalMode === "always" ? "commandApproval=always requires confirmation before running commands" : "commandApproval=dangerous requires confirmation for heuristically dangerous commands"
+    };
+    return {
+      behavior: "ask",
+      message: createPermissionRequestMessage2(BashTool.name, decisionReason),
+      updatedInput: result.updatedInput,
+      decisionReason
+    };
+  }
+  return result;
+}
 var bashCommandIsSafeAsync, splitCommand, ENV_VAR_ASSIGN_RE, MAX_SUBCOMMANDS_FOR_SECURITY_CHECK = 50, MAX_SUGGESTED_RULES_FOR_COMPOUND = 5, BARE_SHELL_PREFIXES, permissionRuleExtractPrefix3, bashPermissionRule, SAFE_ENV_VARS2, ANT_ONLY_SAFE_ENV_VARS, BINARY_HIJACK_VARS, bashToolCheckExactMatchPermission = (input, toolPermissionContext) => {
   const command = input.command.trim();
   const { matchingDenyRules, matchingAskRules, matchingAllowRules } = matchingRulesForInput2(input, toolPermissionContext, "exact");
@@ -383946,8 +384073,10 @@ var init_bashPermissions = __esm(() => {
   init_platform();
   init_sandbox_adapter();
   init_slowOperations();
+  init_settings2();
   init_windowsPaths();
   init_BashTool();
+  init_destructiveCommandWarning();
   init_bashCommandHelpers();
   init_bashSecurity();
   init_modeValidation2();
@@ -514611,85 +514740,6 @@ var init_AskUserQuestionPermissionRequest = __esm(() => {
   jsx_dev_runtime373 = __toESM(require_jsx_dev_runtime(), 1);
 });
 
-// src/tools/BashTool/destructiveCommandWarning.ts
-function getDestructiveCommandWarning(command8) {
-  for (const { pattern, warning } of DESTRUCTIVE_PATTERNS) {
-    if (pattern.test(command8)) {
-      return warning;
-    }
-  }
-  return null;
-}
-var DESTRUCTIVE_PATTERNS;
-var init_destructiveCommandWarning = __esm(() => {
-  DESTRUCTIVE_PATTERNS = [
-    {
-      pattern: /\bgit\s+reset\s+--hard\b/,
-      warning: "Note: may discard uncommitted changes"
-    },
-    {
-      pattern: /\bgit\s+push\b[^;&|\n]*[ \t](--force|--force-with-lease|-f)\b/,
-      warning: "Note: may overwrite remote history"
-    },
-    {
-      pattern: /\bgit\s+clean\b(?![^;&|\n]*(?:-[a-zA-Z]*n|--dry-run))[^;&|\n]*-[a-zA-Z]*f/,
-      warning: "Note: may permanently delete untracked files"
-    },
-    {
-      pattern: /\bgit\s+checkout\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
-      warning: "Note: may discard all working tree changes"
-    },
-    {
-      pattern: /\bgit\s+restore\s+(--\s+)?\.[ \t]*($|[;&|\n])/,
-      warning: "Note: may discard all working tree changes"
-    },
-    {
-      pattern: /\bgit\s+stash[ \t]+(drop|clear)\b/,
-      warning: "Note: may permanently remove stashed changes"
-    },
-    {
-      pattern: /\bgit\s+branch\s+(-D[ \t]|--delete\s+--force|--force\s+--delete)\b/,
-      warning: "Note: may force-delete a branch"
-    },
-    {
-      pattern: /\bgit\s+(commit|push|merge)\b[^;&|\n]*--no-verify\b/,
-      warning: "Note: may skip safety hooks"
-    },
-    {
-      pattern: /\bgit\s+commit\b[^;&|\n]*--amend\b/,
-      warning: "Note: may rewrite the last commit"
-    },
-    {
-      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR][a-zA-Z]*f|(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f[a-zA-Z]*[rR]/,
-      warning: "Note: may recursively force-remove files"
-    },
-    {
-      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*[rR]/,
-      warning: "Note: may recursively remove files"
-    },
-    {
-      pattern: /(^|[;&|\n]\s*)rm\s+-[a-zA-Z]*f/,
-      warning: "Note: may force-remove files"
-    },
-    {
-      pattern: /\b(DROP|TRUNCATE)\s+(TABLE|DATABASE|SCHEMA)\b/i,
-      warning: "Note: may drop or truncate database objects"
-    },
-    {
-      pattern: /\bDELETE\s+FROM\s+\w+[ \t]*(;|"|'|\n|$)/i,
-      warning: "Note: may delete all rows from a database table"
-    },
-    {
-      pattern: /\bkubectl\s+delete\b/,
-      warning: "Note: may delete Kubernetes resources"
-    },
-    {
-      pattern: /\bterraform\s+destroy\b/,
-      warning: "Note: may destroy Terraform infrastructure"
-    }
-  ];
-});
-
 // src/utils/shell/specPrefix.ts
 function isKnownSubcommand(arg, spec) {
   if (!spec?.subcommands?.length)
@@ -563509,6 +563559,7 @@ var init_migrateEnableAllProjectMcpServersToSettings = __esm(() => {
 // src/migrations/migrateFennecToOpus.ts
 var init_migrateFennecToOpus = __esm(() => {
   init_log3();
+  init_config();
   init_providers();
   init_settings2();
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@funnycode/myclaude",
-  "version": "0.1.184",
+  "version": "0.1.186",
   "private": false,
   "description": "An open-source AI coding assistant in your terminal - powered by Claude",
   "license": "MIT",