@great-arrow/cli 0.1.34 → 0.1.35

package/dist/index.js

@@ -9399,7 +9399,7 @@ function isNodeError(value) {
 
 // src/lib/version.ts
 var CLI_PACKAGE_NAME = "@great-arrow/cli";
-var CLI_VERSION = "0.1.34";
+var CLI_VERSION = "0.1.35";
 var GAD_INSTALL_VERSION = "2026.08.08";
 var GAD_INSTALL_MIN_VERSION = "2026.06.22";
 var GAD_INSTALL_HEADER = "X-GAD-Install-Version";
@@ -12760,7 +12760,25 @@ import { dirname as dirname4, join as join5 } from "node:path";
 import { execFileSync as execFileSync5 } from "node:child_process";
 var CODEX_SERVER_NAME = "great-arrow";
 var CODEX_CLIENT_ID = "codex-cli";
-var CODEX_APPROVAL_POLICY = 'approval_policy = "never"';
+var CODEX_APPROVAL_POLICIES = [
+  "never",
+  "on-request",
+  "on-failure",
+  "untrusted"
+];
+function resolveCodexApprovalPolicy(raw = process.env.GAD_CODEX_APPROVAL_POLICY) {
+  if (raw === void 0 || raw === "") return "never";
+  if (raw === "none") return "none";
+  if (CODEX_APPROVAL_POLICIES.includes(raw))
+    return raw;
+  throw new Error(
+    `GAD_CODEX_APPROVAL_POLICY="${raw}" is not a Codex approval policy. Valid: none (leave Codex alone) | ${CODEX_APPROVAL_POLICIES.join(" | ")}`
+  );
+}
+function codexApprovalPolicyLine() {
+  const policy = resolveCodexApprovalPolicy();
+  return policy === "none" ? "" : `approval_policy = "${policy}"`;
+}
 var SAFE_GLOBAL_MCP_SERVERS = /* @__PURE__ */ new Set([
   CODEX_SERVER_NAME,
   "great-arrow-kiro-terminal",
@@ -12837,7 +12855,7 @@ function repoKey(repoUrl) {
   }
 }
 function generateCodexConfigToml(apiUrl, _repoUrl) {
-  return `${CODEX_APPROVAL_POLICY}
+  return `${codexApprovalPolicyLine()}
 
 [mcp_servers.${CODEX_SERVER_NAME}]
 command = "npx"
@@ -12848,6 +12866,9 @@ env_vars = ["GREAT_ARROW_TOKEN"]
 GAD_API_URL = "${tomlEscape(normalizeApiUrl(apiUrl))}"
 GAD_MCP_CLIENT = "${CODEX_CLIENT_ID}"
 ${GAD_INSTALL_HEADER} = "${GAD_INSTALL_VERSION}"
+
+[mcp_servers.${CODEX_SERVER_NAME}.tools."*"]
+approval_mode = "approve"
 `;
 }
 function generateCodexEnv(token) {
@@ -12918,12 +12939,12 @@ function upsertCodexServerBlock(existingContent, apiUrl, repoUrl) {
     /* @__PURE__ */ new Set([CODEX_SERVER_NAME])
   ).replace(/^\s*approval_policy\s*=.*(?:\n|$)/gm, "").replace(/^\s+/, "").replace(/\s*$/, "");
   if (!withoutGreatArrow) {
-    return `${CODEX_APPROVAL_POLICY}
+    return `${codexApprovalPolicyLine()}
 
 ${block}
 `;
   }
-  return `${CODEX_APPROVAL_POLICY}
+  return `${codexApprovalPolicyLine()}
 
 ${withoutGreatArrow}
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@great-arrow/cli",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "GreatArrow.ai CLI tool",
   "type": "module",
   "bin": {