@halcyonlabs/app 0.47.0-halcyon.21 → 0.47.0-halcyon.22

package/server/dist/drizzle/meta/_journal.json

@@ -1030,6 +1030,13 @@
       "when": 1792453324528,
       "tag": "0146_diff_viewed_files",
       "breakpoints": true
+    },
+    {
+      "idx": 147,
+      "version": "6",
+      "when": 1792940193464,
+      "tag": "0147_project_permission_escalation",
+      "breakpoints": true
     }
   ]
 }

package/server/dist/start-server.js

@@ -20077,6 +20077,7 @@ var init_project = __esm({
   "../../packages/domain/src/project.ts"() {
     "use strict";
     init_zod();
+    init_shared_types();
     PERSONAL_PROJECT_ID = "proj_personal";
     projectKindValues = ["standard", "personal"];
     projectKindSchema = external_exports.enum(projectKindValues);
@@ -20085,6 +20086,7 @@ var init_project = __esm({
       kind: projectKindSchema,
       name: external_exports.string(),
       gitRemoteUrl: external_exports.string().nullable(),
+      permissionEscalation: permissionEscalationSchema,
       createdAt: external_exports.number(),
       updatedAt: external_exports.number()
     });
@@ -22641,9 +22643,10 @@ var init_projects = __esm({
     }).partial();
     promptHistoryResponseSchema = external_exports.array(promptHistoryEntrySchema);
     updateProjectRequestSchema = external_exports.object({
-      name: external_exports.string().min(1)
+      name: external_exports.string().min(1),
+      permissionEscalation: permissionEscalationSchema
     }).partial().refine(
-      (value) => value.name !== void 0,
+      (value) => value.name !== void 0 || value.permissionEscalation !== void 0,
       "At least one field must be provided"
     );
     updateProjectSourceRequestSchema = external_exports.object({
@@ -37988,6 +37991,7 @@ var init_schema = __esm({
         name: text("name").notNull(),
         gitRemoteUrl: text("git_remote_url"),
         sortKey: text("sort_key").notNull().default("V"),
+        permissionEscalation: text("permission_escalation").$type().notNull().default("ask"),
         deletedAt: integer2("deleted_at"),
         createdAt: integer2("created_at").notNull(),
         updatedAt: integer2("updated_at").notNull()
@@ -58415,7 +58419,7 @@ var init_templates_generated = __esm({
       },
       {
         "id": "bbGuideProjects",
-        "body": "Project commands\n\nA project maps to a code repository. All threads belong to a project.\n\n  bb project list                         List ordinary projects\n    --include-personal                    Also include the personal project\n  bb project discover                     Find recently used git repos\n    --machine <id-or-name>                Machine to scan (default: local)\n    --host <id-or-name>                   Alias for --machine\n  bb project history <id>                 List prompt history\n  bb project reorder <id>                 Reorder in the sidebar\n    --after <id>                          Previous project, or omit for start\n    --before <id>                         Next project, or omit for end\n  bb project create --name \"...\" [options]\n    --root <path>                         Project source path\n    --machine <id-or-name>                Bind the path to a connected machine\n    --host <id-or-name>                   Alias for --machine\n\n  An explicit machine/host selector accepts an exact ID or unambiguous name and\n  binds --root to that machine. Omitting the selector preserves the existing\n  local CLI machine fallback (normally the server machine).\n\n  bb project show <id>                    Show project details\n    Accepts proj_personal to inspect Personal.\n  bb project update <id>                  Update a project\n    --name <name>                         New name\n\n  bb project delete <id>                  Delete project and all threads\n    --yes                                 Skip confirmation\n\nGlobal prompt history:\n\n  bb prompt-history list [--cursor <cursor>] [--limit <number>]\n\n  Lists accepted prompts across projects and threads newest first. Pass the\n  returned cursor to continue from the next page.\n\nDiscovery:\n\n  bb project branches <id> --host <id>   List branches for a machine source\n  bb project paths <id>                   Search workspace paths\n  bb project files <id>                   List workspace files\n  bb project content <id> <path>          Read file content (binary is base64;\n                                          --json reports contentEncoding)\n  bb project commands <id> --provider <id>\n                                          List commands and skills\n    --machine <id-or-name>                Target project source machine\n    --host <id-or-name>                   Alias for --machine\n    --environment <id>                    Target environment workspace\n\n  The machine/host and environment selectors are mutually exclusive. An\n  environment selects its owning machine and workspace; otherwise an explicit\n  machine selects that machine's project source. Omitting both intentionally\n  falls back to the server machine's project source.\n\n  Personal file access (`paths`, `files`, `content`) requires an explicit\n  --environment <id> belonging to Personal. Personal has no default project\n  source; the selected environment must be ready.\n\n  Path and file searches honor Git ignore rules, including local and global\n  exclusions; tracked and non-ignored untracked files, including hidden files,\n  remain searchable. Non-Git workspaces use filesystem listings. Use\n  `bb file list|paths` for listings that include ignored files.\n\nAttachments:\n\n  bb project attachment upload <id>       Upload bytes from the CLI machine\n    --client-file <path>                  Path read on this CLI machine\n    --filename <name>                     Attachment filename override\n    --mime-type <type>                    MIME override (otherwise inferred)\n  bb project attachment download <id> <attachment-path>\n    --client-file <path>                  Destination on this CLI machine\n\n  Uploads use multipart bytes and return a server-managed attachment DTO. Pass\n  its relative `path` to thread --file/--image input. Thread --file and --image\n  upload absolute paths and file: URLs from the CLI machine automatically;\n  relative values remain existing server attachment paths.\n  image/* uploads are limited to 10MB; other files are limited to 25MB.\n  image/heic and image/heif uploads are rejected because no renderer or\n  provider can decode them; convert them to JPEG or PNG first. There is no\n  command to list or remove project attachments.\n\nSources:\n\n  Projects can have multiple machine-local path sources.\n\n  bb project source add <projectId>       Add a source\n    --path <path>                         Local path\n    --clone                               Clone the project's Git remote\n    --remote-url <url>                    Git remote override for --clone\n    --target-path <path>                  Destination override for --clone\n    --machine <id-or-name>                Target machine (--host is an alias)\n    --default                             Set as default source\n\n  Explicit project source selectors must name a connected machine. Omitting\n  the selector preserves the same local CLI machine fallback as project create.\n\n  bb project source update <projectId> <sourceId>\n    --path <path>\n    --default\n\n  bb project source delete <projectId> <sourceId>\n\n  A live project must retain at least one source; a project pending deletion\n  may remove its last source.",
+        "body": "Project commands\n\nA project maps to a code repository. All threads belong to a project.\n\n  bb project list                         List ordinary projects\n    --include-personal                    Also include the personal project\n  bb project discover                     Find recently used git repos\n    --machine <id-or-name>                Machine to scan (default: local)\n    --host <id-or-name>                   Alias for --machine\n  bb project history <id>                 List prompt history\n  bb project reorder <id>                 Reorder in the sidebar\n    --after <id>                          Previous project, or omit for start\n    --before <id>                         Next project, or omit for end\n  bb project create --name \"...\" [options]\n    --root <path>                         Project source path\n    --machine <id-or-name>                Bind the path to a connected machine\n    --host <id-or-name>                   Alias for --machine\n\n  An explicit machine/host selector accepts an exact ID or unambiguous name and\n  binds --root to that machine. Omitting the selector preserves the existing\n  local CLI machine fallback (normally the server machine).\n\n  bb project show <id>                    Show project details\n    Accepts proj_personal to inspect Personal.\n  bb project update <id>                  Update a project\n    --name <name>                         New name\n    --permission-escalation <ask|deny>    Whether the project's turns may ask\n                                          for approval (default ask)\n\n  Permission escalation: with ask, a turn a person sends in Accept Edits or\n  Auto mode may ask for approval to leave the workspace sandbox, and turns not\n  sent by a person (agents, automations, bb's own messages) are refused without\n  asking. With deny,\n  every turn in the project is refused without asking, whoever sent it: Codex\n  runs with approval policy never and Claude Code denies its permission\n  requests. Full access has no sandbox to escalate from. Changes apply from the\n  next turn. `bb project show` prints it; `sdk.projects.update` sets it.\n\n  bb project delete <id>                  Delete project and all threads\n    --yes                                 Skip confirmation\n\nGlobal prompt history:\n\n  bb prompt-history list [--cursor <cursor>] [--limit <number>]\n\n  Lists accepted prompts across projects and threads newest first. Pass the\n  returned cursor to continue from the next page.\n\nDiscovery:\n\n  bb project branches <id> --host <id>   List branches for a machine source\n  bb project paths <id>                   Search workspace paths\n  bb project files <id>                   List workspace files\n  bb project content <id> <path>          Read file content (binary is base64;\n                                          --json reports contentEncoding)\n  bb project commands <id> --provider <id>\n                                          List commands and skills\n    --machine <id-or-name>                Target project source machine\n    --host <id-or-name>                   Alias for --machine\n    --environment <id>                    Target environment workspace\n\n  The machine/host and environment selectors are mutually exclusive. An\n  environment selects its owning machine and workspace; otherwise an explicit\n  machine selects that machine's project source. Omitting both intentionally\n  falls back to the server machine's project source.\n\n  Personal file access (`paths`, `files`, `content`) requires an explicit\n  --environment <id> belonging to Personal. Personal has no default project\n  source; the selected environment must be ready.\n\n  Path and file searches honor Git ignore rules, including local and global\n  exclusions; tracked and non-ignored untracked files, including hidden files,\n  remain searchable. Non-Git workspaces use filesystem listings. Use\n  `bb file list|paths` for listings that include ignored files.\n\nAttachments:\n\n  bb project attachment upload <id>       Upload bytes from the CLI machine\n    --client-file <path>                  Path read on this CLI machine\n    --filename <name>                     Attachment filename override\n    --mime-type <type>                    MIME override (otherwise inferred)\n  bb project attachment download <id> <attachment-path>\n    --client-file <path>                  Destination on this CLI machine\n\n  Uploads use multipart bytes and return a server-managed attachment DTO. Pass\n  its relative `path` to thread --file/--image input. Thread --file and --image\n  upload absolute paths and file: URLs from the CLI machine automatically;\n  relative values remain existing server attachment paths.\n  image/* uploads are limited to 10MB; other files are limited to 25MB.\n  image/heic and image/heif uploads are rejected because no renderer or\n  provider can decode them; convert them to JPEG or PNG first. There is no\n  command to list or remove project attachments.\n\nSources:\n\n  Projects can have multiple machine-local path sources.\n\n  bb project source add <projectId>       Add a source\n    --path <path>                         Local path\n    --clone                               Clone the project's Git remote\n    --remote-url <url>                    Git remote override for --clone\n    --target-path <path>                  Destination override for --clone\n    --machine <id-or-name>                Target machine (--host is an alias)\n    --default                             Set as default source\n\n  Explicit project source selectors must name a connected machine. Omitting\n  the selector preserves the same local CLI machine fallback as project create.\n\n  bb project source update <projectId> <sourceId>\n    --path <path>\n    --default\n\n  bb project source delete <projectId> <sourceId>\n\n  A live project must retain at least one source; a project pending deletion\n  may remove its last source.",
         "variables": {}
       },
       {
@@ -58445,7 +58449,7 @@ var init_templates_generated = __esm({
       },
       {
         "id": "bbGuideThreads",
-        "body": "Thread commands\n\nEvery command supports --json for machine-readable output. Read-only commands\ntake a thread ID or --self where supported; mutating lifecycle and messaging\ncommands require an explicit ID or --self.\n\nThread commands are split across four chapters:\n\n  threads            Spawning, handing off, forking, and editing sent messages\n  thread-inspection  Listing, sections, inspecting, waiting, opening in the app,\n                     and panel tabs\n  thread-messaging   Messages, plan mode, metadata and ownership, interactions,\n                     and queued messages\n  thread-lifecycle   Stop, compact, clear, retry, archive, and delete\n\nSpawning:\n\n  bb thread spawn --project <id> --prompt \"...\" [options]\n  bb thread spawn --project <id> --prompt-file <path> [options]\n\n    --prompt <prompt>              Initial prompt (one of --prompt or --prompt-file is required)\n    --prompt-file <path>           Read the prompt from a file; `-` reads stdin. Use this for\n                                   multi-line or Markdown prompts: inside double quotes the shell\n                                   runs `backticks` and $(...) before bb sees them\n    --title <title>                Thread title\n    --project <id>                 Project (required; when omitted the error prints this thread's project ID to add)\n    --parent-thread <id>           Parent thread (may be in another project)\n    --parent-self                  Parent to the current thread (BB_THREAD_ID)\n    --lifecycle-owner-thread <id>  Archive/delete with this owner\n    --provider <id>                Provider override\n    --model <model>                Model override\n    --reasoning-level <level>      Reasoning level id the model lists: low, medium, high, xhigh, max, or a provider-specific id\n    --environment <id-or-path>     Attach to an existing environment (ID or workspace path)\n    --new-environment <kind>       Create a fresh personal workspace or managed worktree\n    --base-branch <branch>         Exact Git ref for a new managed worktree\n                                   (--new-environment worktree only; an\n                                   --environment-provider takes its branch\n                                   through --environment-inputs)\n    --environment-provider <id>    Run on an environment provider by id (list them with\n                                   `bb environment providers`). The provider\n                                   provisions where the thread runs; its steps show in the\n                                   thread's workspace-setup block. Its `requires` names the\n                                   facts it consumes: `host` takes --machine (the local\n                                   machine by default); `gitCheckout` needs this project's\n                                   checkout on that machine to be a Git repository with\n                                   commits; `gitRemote` needs a project remote;\n                                   `projectless` serves only threads with no project.\n    --environment-inputs <json>    JSON value for an --environment-provider that declares\n                                   inputs; `bb environment providers --json` prints each\n                                   provider's inputs as JSON Schema (null when it takes\n                                   none). Omitted, it defaults to {} when the schema\n                                   accepts an empty object and is otherwise required;\n                                   refused when the provider declares no inputs\n    --machine <id-or-name>         Run on a machine (--host is an alias)\n    --service-tier <tier>          Service tier id the provider lists for the model, such as\n                                   default or fast (see `bb provider models`)\n    --option <option=value>        Choose a value for an option the provider's model lists, applied\n                                   before the first message; true or false for an on/off option\n                                   (repeatable; see `bb provider models`)\n    --permission-mode <mode>       Permission mode: accept-edits, auto, or full\n    --plan                         Send the prompt as the provider's /plan action (plan first, execute after approval)\n    --section <id>                 Create the thread in a section\n    --pinned                       Create the thread in Pinned (combines with --section;\n                                   unpinning reveals it in that section)\n    --visibility <visibility>      visible or hidden; a child inherits its parent by default\n    --parent-notifications <value> auto (default), stuck, or off; which outcomes wake the parent\n    --send-at <when>               Dispatch the first message at an ISO 8601 timestamp or a duration from now (30s, 10m, 2h, 7d)\n    --file <path>                  CLI-local absolute path, file: URL, or uploaded file path\n    --image <path>                 CLI-local absolute path, file: URL, or uploaded image path\n    --origin-kind <kind>           Create a fork thread\n    --source-thread <id>           Source thread for a fork\n    --source-seq-end <seq>         Fork after the source turn containing this event sequence\n\n  Execution defaults resolve from explicit flags, live parent execution, and\n  remembered project defaults. With no remembered model, bb uses the explicitly\n  requested provider or Codex and resolves its provider-reported default model\n  on the target machine (or the first catalog model when none is marked). The product reasoning and permission defaults are\n  medium and auto.\n  accept-edits uses workspace sandboxing with user-reviewed escalation. auto uses\n  the same workspace sandbox with provider-native automatic review. full is the\n  explicit sandbox and approval bypass. Plan mode is separate from permissions.\n  Subagents inherit the parent's permission mode by default, adapted to the child provider's supported modes. Explicit requests and a thread's recorded mode take precedence; nesting a thread does not cap its permissions. The host permission ceiling still applies.\n  Parenting is opt-in. Inside a thread, pass --parent-self to parent the new thread to the current thread.\n  Hidden threads are for plugin/background workers. They remain addressable by\n  ID while staying out of sidebar organization and unread/pending favicon\n  attention. Thread lists exclude them unless\n  --include-hidden is passed; direct-ID operations remain available.\n  A new child thread inherits the visibility of its parent, so the subagents of\n  a hidden thread stay hidden too. Pass --visibility to override the inherited\n  value. A hidden child still reports its turns and blockers to its parent\n  thread; only source-derived forks stay silent.\n  --parent-notifications chooses which child outcomes wake the parent. auto\n  reports every finished, failed, or interrupted turn and every blocker. stuck\n  skips completed turns and keeps failures, interruptions, and blockers on an\n  approval or question; the child sends its results with `bb thread tell`, so\n  say so in its prompt. off reports nothing. Under stuck and off, unassigning\n  the child does not notify the former parent either. `bb status` and\n  `bb thread show` print the value for a child thread.\n  A machine selector accepts an exact ID or an unambiguous name. It works with\n  an unmanaged --environment path, --new-environment worktree, or the personal\n  workspace. It cannot be combined with an existing environment ID because that\n  environment already selects its machine. Without the flag, local/server\n  machine resolution is unchanged.\n  Omit --base-branch for bb's default. Explicit values are exact; use\n  origin/<branch> for a remote ref.\n  With no environment flag, a new thread gets a fresh worktree of the\n  project's default branch (the project checkout when the project has no\n  branch) on the primary host, or on the persistent machine that holds the\n  project's source when the primary host has none. A child of a live thread\n  in the same project gets a worktree on its parent's machine.\n  Before selecting a provider, run `bb environment providers --project <id>\n  --machine <id-or-name>` to see whether it is available, needs setup, or is\n  unavailable and why. The first-party providers are Project checkout,\n  Worktree, and Personal workspace.\n\nHandoff:\n  The app's Handoff to new thread (in the follow-up model picker) starts a new\n  thread that references the source. From the CLI, run bb thread spawn with\n  --provider, --model, --environment and --prompt 'Continue from\n  @thread:THREAD_ID ...'; SDK callers pass the same fields to threads.spawn.\n\nForking:\n\n  bb thread fork <source-thread-id> [options]\n\n    --prompt <prompt>              Optional first prompt; omit for an idle fork\n    --prompt-file <path>           Read the first prompt from a file; `-` reads stdin\n    --lifecycle-owner-thread <id>  Archive/delete with this owner\n    --source-seq-end <seq>         Fork after the source turn containing this event sequence (tip by default)\n    --environment <id-or-path>     Existing environment ID or unmanaged workspace path\n    --new-environment <kind>       Create a fresh personal workspace or managed worktree\n    --base-branch <branch>         Exact Git ref for a new worktree; omit for the project default\n    --title <title>                Thread title (idle forks default to \"(1) <source title>\")\n    --permission-mode <mode>       Inherit source by default; accepts accept-edits, auto, full\n    --visibility <visibility>      visible (default) or hidden\n    --agent-context-seed <text>    Persist agent-only context without a first run\n    --file <path>                  CLI-local absolute path, file: URL, or uploaded file path\n    --image <path>                 CLI-local absolute path, file: URL, or uploaded image path\n\n  Forks clone the source provider session on the same machine and inherit the\n  source conversation in their timeline. --source-seq-end anchors the fork on\n  the completed source turn that contains that sequence: the clone and the\n  inherited timeline both end with that turn (an anchor on a user message\n  branches before it, like editing it). Without it a fork clones the session\n  tip and inherits every completed turn. Providers that can only clone a whole\n  session accept an anchor only on the source's latest turn. A fork reuses the\n  source environment by default. Use --new-environment personal for a fresh\n  personal workspace or --new-environment worktree for a fresh worktree on the\n  source machine; --environment can select another environment or unmanaged\n  path on that machine. A different machine is rejected because the source\n  provider session lives on its original machine. Omit --prompt to create an\n  idle fork. A visible idle fork without --title is named after its source with\n  a numbered prefix: \"foo\" becomes \"(1) foo\" and \"(1) foo\" becomes \"(2) foo\".\n  Forks created with a first prompt get a title from that prompt.\n\nEditing a sent message:\n\n  bb thread edit-message <id> --message \"Replacement text\"\n    --message-file <path>               Read the replacement from a file; `-` reads stdin\n    --self                              Target the current thread (BB_THREAD_ID)\n    --expected-request-sequence <seq>   Select the message and reject a stale target\n\n  Without --expected-request-sequence, the latest eligible message is edited.\n  Codex, Claude Code, and Pi threads are supported, including failed and\n  incomplete turns; grouped multi-message requests are not editable.\n  `canEditMessages` on `bb thread show --json` reports whether the thread's\n  provider and archive state allow edits. The\n  original conversation remains unchanged until the provider prepares the\n  replacement history. If the thread is running,\n  submission stops the current turn and waits for it to settle. Provider-owned\n  background commands, agents, and workflows are stopped before replacing the\n  session, and retained task cards keep their terminal status. Durable runs\n  managed by the Workflows plugin continue independently. It then\n  replaces the selected turn and every later turn while retaining workspace\n  changes. Unsent queued messages remain in the queue and dispatch after the\n  replacement turn when their waits clear. An already-sending queued message\n  must finish before the edit can start. Retries of turns replaced by the edit\n  are removed from the queue. From an agent thread, the command\n  carries `BB_THREAD_ID` so the replacement runs under agent permission policy.\n  An edit is refused if removing its history would erase ownership evidence\n  shared with another thread. Use bb thread clear <id> to start a new session\n  while keeping the history and its ownership evidence.\n\nLifecycle ownership:\n  spawn and fork accept --lifecycle-owner-thread <id> (SDK\n  lifecycleOwnerThreadId, also returned in thread responses, null if\n  independent). The owner must be live; projects, hosts and environments may\n  differ. Ownership is immutable. Archiving the owner archives and stops its\n  dependents; deleting it deletes them. Unarchive the owner before explicitly\n  restoring a dependent. Stop does not cascade. Sidebar parents and ordinary\n  forks keep their own policies.",
+        "body": "Thread commands\n\nEvery command supports --json for machine-readable output. Read-only commands\ntake a thread ID or --self where supported; mutating lifecycle and messaging\ncommands require an explicit ID or --self.\n\nThread commands are split across four chapters:\n\n  threads            Spawning, handing off, forking, and editing sent messages\n  thread-inspection  Listing, sections, inspecting, waiting, opening in the app,\n                     and panel tabs\n  thread-messaging   Messages, plan mode, metadata and ownership, interactions,\n                     and queued messages\n  thread-lifecycle   Stop, compact, clear, retry, archive, and delete\n\nSpawning:\n\n  bb thread spawn --project <id> --prompt \"...\" [options]\n  bb thread spawn --project <id> --prompt-file <path> [options]\n\n    --prompt <prompt>              Initial prompt (one of --prompt or --prompt-file is required)\n    --prompt-file <path>           Read the prompt from a file; `-` reads stdin. Use this for\n                                   multi-line or Markdown prompts: inside double quotes the shell\n                                   runs `backticks` and $(...) before bb sees them\n    --title <title>                Thread title\n    --project <id>                 Project (required; when omitted the error prints this thread's project ID to add)\n    --parent-thread <id>           Parent thread (may be in another project)\n    --parent-self                  Parent to the current thread (BB_THREAD_ID)\n    --lifecycle-owner-thread <id>  Archive/delete with this owner\n    --provider <id>                Provider override\n    --model <model>                Model override\n    --reasoning-level <level>      Reasoning level id the model lists: low, medium, high, xhigh, max, or a provider-specific id\n    --environment <id-or-path>     Attach to an existing environment (ID or workspace path)\n    --new-environment <kind>       Create a fresh personal workspace or managed worktree\n    --base-branch <branch>         Exact Git ref for a new managed worktree\n                                   (--new-environment worktree only; an\n                                   --environment-provider takes its branch\n                                   through --environment-inputs)\n    --environment-provider <id>    Run on an environment provider by id (list them with\n                                   `bb environment providers`). The provider\n                                   provisions where the thread runs; its steps show in the\n                                   thread's workspace-setup block. Its `requires` names the\n                                   facts it consumes: `host` takes --machine (the local\n                                   machine by default); `gitCheckout` needs this project's\n                                   checkout on that machine to be a Git repository with\n                                   commits; `gitRemote` needs a project remote;\n                                   `projectless` serves only threads with no project.\n    --environment-inputs <json>    JSON value for an --environment-provider that declares\n                                   inputs; `bb environment providers --json` prints each\n                                   provider's inputs as JSON Schema (null when it takes\n                                   none). Omitted, it defaults to {} when the schema\n                                   accepts an empty object and is otherwise required;\n                                   refused when the provider declares no inputs\n    --machine <id-or-name>         Run on a machine (--host is an alias)\n    --service-tier <tier>          Service tier id the provider lists for the model, such as\n                                   default or fast (see `bb provider models`)\n    --option <option=value>        Choose a value for an option the provider's model lists, applied\n                                   before the first message; true or false for an on/off option\n                                   (repeatable; see `bb provider models`)\n    --permission-mode <mode>       Permission mode: accept-edits, auto, or full\n    --plan                         Send the prompt as the provider's /plan action (plan first, execute after approval)\n    --section <id>                 Create the thread in a section\n    --pinned                       Create the thread in Pinned (combines with --section;\n                                   unpinning reveals it in that section)\n    --visibility <visibility>      visible or hidden; a child inherits its parent by default\n    --parent-notifications <value> auto (default), stuck, or off; which outcomes wake the parent\n    --send-at <when>               Dispatch the first message at an ISO 8601 timestamp or a duration from now (30s, 10m, 2h, 7d)\n    --file <path>                  CLI-local absolute path, file: URL, or uploaded file path\n    --image <path>                 CLI-local absolute path, file: URL, or uploaded image path\n    --origin-kind <kind>           Create a fork thread\n    --source-thread <id>           Source thread for a fork\n    --source-seq-end <seq>         Fork after the source turn containing this event sequence\n\n  Execution defaults resolve from explicit flags, live parent execution, and\n  remembered project defaults. With no remembered model, bb uses the explicitly\n  requested provider or Codex and resolves its provider-reported default model\n  on the target machine (or the first catalog model when none is marked). The product reasoning and permission defaults are\n  medium and auto.\n  accept-edits uses workspace sandboxing with user-reviewed escalation. auto uses\n  the same workspace sandbox with provider-native automatic review. full is the\n  explicit sandbox and approval bypass. Plan mode is separate from permissions.\n  A project set to `--permission-escalation deny` (`bb guide projects`) refuses\n  every escalation in its threads without asking.\n  Subagents inherit the parent's permission mode by default, adapted to the child provider's supported modes. Explicit requests and a thread's recorded mode take precedence; nesting a thread does not cap its permissions. The host permission ceiling still applies.\n  Parenting is opt-in. Inside a thread, pass --parent-self to parent the new thread to the current thread.\n  Hidden threads are for plugin/background workers. They remain addressable by\n  ID while staying out of sidebar organization and unread/pending favicon\n  attention. Thread lists exclude them unless\n  --include-hidden is passed; direct-ID operations remain available.\n  A new child thread inherits the visibility of its parent, so the subagents of\n  a hidden thread stay hidden too. Pass --visibility to override the inherited\n  value. A hidden child still reports its turns and blockers to its parent\n  thread; only source-derived forks stay silent.\n  --parent-notifications chooses which child outcomes wake the parent. auto\n  reports every finished, failed, or interrupted turn and every blocker. stuck\n  skips completed turns and keeps failures, interruptions, and blockers on an\n  approval or question; the child sends its results with `bb thread tell`, so\n  say so in its prompt. off reports nothing. Under stuck and off, unassigning\n  the child does not notify the former parent either. `bb status` and\n  `bb thread show` print the value for a child thread.\n  A machine selector accepts an exact ID or an unambiguous name. It works with\n  an unmanaged --environment path, --new-environment worktree, or the personal\n  workspace. It cannot be combined with an existing environment ID because that\n  environment already selects its machine. Without the flag, local/server\n  machine resolution is unchanged.\n  Omit --base-branch for bb's default. Explicit values are exact; use\n  origin/<branch> for a remote ref.\n  With no environment flag, a new thread gets a fresh worktree of the\n  project's default branch (the project checkout when the project has no\n  branch) on the primary host, or on the persistent machine that holds the\n  project's source when the primary host has none. A child of a live thread\n  in the same project gets a worktree on its parent's machine.\n  Before selecting a provider, run `bb environment providers --project <id>\n  --machine <id-or-name>` to see whether it is available, needs setup, or is\n  unavailable and why. The first-party providers are Project checkout,\n  Worktree, and Personal workspace.\n\nHandoff:\n  The app's Handoff to new thread (in the follow-up model picker) starts a new\n  thread that references the source. From the CLI, run bb thread spawn with\n  --provider, --model, --environment and --prompt 'Continue from\n  @thread:THREAD_ID ...'; SDK callers pass the same fields to threads.spawn.\n\nForking:\n\n  bb thread fork <source-thread-id> [options]\n\n    --prompt <prompt>              Optional first prompt; omit for an idle fork\n    --prompt-file <path>           Read the first prompt from a file; `-` reads stdin\n    --lifecycle-owner-thread <id>  Archive/delete with this owner\n    --source-seq-end <seq>         Fork after the source turn containing this event sequence (tip by default)\n    --environment <id-or-path>     Existing environment ID or unmanaged workspace path\n    --new-environment <kind>       Create a fresh personal workspace or managed worktree\n    --base-branch <branch>         Exact Git ref for a new worktree; omit for the project default\n    --title <title>                Thread title (idle forks default to \"(1) <source title>\")\n    --permission-mode <mode>       Inherit source by default; accepts accept-edits, auto, full\n    --visibility <visibility>      visible (default) or hidden\n    --agent-context-seed <text>    Persist agent-only context without a first run\n    --file <path>                  CLI-local absolute path, file: URL, or uploaded file path\n    --image <path>                 CLI-local absolute path, file: URL, or uploaded image path\n\n  Forks clone the source provider session on the same machine and inherit the\n  source conversation in their timeline. --source-seq-end anchors the fork on\n  the completed source turn that contains that sequence: the clone and the\n  inherited timeline both end with that turn (an anchor on a user message\n  branches before it, like editing it). Without it a fork clones the session\n  tip and inherits every completed turn. Providers that can only clone a whole\n  session accept an anchor only on the source's latest turn. A fork reuses the\n  source environment by default. Use --new-environment personal for a fresh\n  personal workspace or --new-environment worktree for a fresh worktree on the\n  source machine; --environment can select another environment or unmanaged\n  path on that machine. A different machine is rejected because the source\n  provider session lives on its original machine. Omit --prompt to create an\n  idle fork. A visible idle fork without --title is named after its source with\n  a numbered prefix: \"foo\" becomes \"(1) foo\" and \"(1) foo\" becomes \"(2) foo\".\n  Forks created with a first prompt get a title from that prompt.\n\nEditing a sent message:\n\n  bb thread edit-message <id> --message \"Replacement text\"\n    --message-file <path>               Read the replacement from a file; `-` reads stdin\n    --self                              Target the current thread (BB_THREAD_ID)\n    --expected-request-sequence <seq>   Select the message and reject a stale target\n\n  Without --expected-request-sequence, the latest eligible message is edited.\n  Codex, Claude Code, and Pi threads are supported, including failed and\n  incomplete turns; grouped multi-message requests are not editable.\n  `canEditMessages` on `bb thread show --json` reports whether the thread's\n  provider and archive state allow edits. The\n  original conversation remains unchanged until the provider prepares the\n  replacement history. If the thread is running,\n  submission stops the current turn and waits for it to settle. Provider-owned\n  background commands, agents, and workflows are stopped before replacing the\n  session, and retained task cards keep their terminal status. Durable runs\n  managed by the Workflows plugin continue independently. It then\n  replaces the selected turn and every later turn while retaining workspace\n  changes. Unsent queued messages remain in the queue and dispatch after the\n  replacement turn when their waits clear. An already-sending queued message\n  must finish before the edit can start. Retries of turns replaced by the edit\n  are removed from the queue. From an agent thread, the command\n  carries `BB_THREAD_ID` so the replacement runs under agent permission policy.\n  An edit is refused if removing its history would erase ownership evidence\n  shared with another thread. Use bb thread clear <id> to start a new session\n  while keeping the history and its ownership evidence.\n\nLifecycle ownership:\n  spawn and fork accept --lifecycle-owner-thread <id> (SDK\n  lifecycleOwnerThreadId, also returned in thread responses, null if\n  independent). The owner must be live; projects, hosts and environments may\n  differ. Ownership is immutable. Archiving the owner archives and stops its\n  dependents; deleting it deletes them. Unarchive the owner before explicitly\n  restoring a dependent. Stop does not cascade. Sidebar parents and ordinary\n  forks keep their own policies.",
         "variables": {}
       },
       {
@@ -83757,6 +83761,12 @@ function resolvePermissionEscalation(args) {
   }
   return "ask";
 }
+function applyProjectPermissionEscalation(args) {
+  if (args.projectPermissionEscalation === "deny") {
+    return "deny";
+  }
+  return args.turnPermissionEscalation;
+}
 async function resolveThreadRuntimeCommandConfig(deps, args) {
   markTurnTraceSpan("runtimeConfig.started");
   const workspacePath = requireWorkspacePath(args.environment);
@@ -83922,6 +83932,7 @@ async function resolveThreadRuntimeCommandConfig(deps, args) {
     instructionMode: "append",
     instructions,
     projectId: args.thread.projectId,
+    projectPermissionEscalation: project.permissionEscalation,
     providerId: args.thread.providerId,
     threadStoragePath,
     workspacePath
@@ -84971,13 +84982,17 @@ function toRuntimeExecutionOptions(args) {
       permissionEscalation: null
     };
   }
+  const permissionEscalation = applyProjectPermissionEscalation({
+    projectPermissionEscalation: args.projectPermissionEscalation,
+    turnPermissionEscalation: args.permissionEscalation
+  });
   if (permissionMode === "auto") {
     return {
       ...base,
       permissionMode: "auto",
       permissionScope: "workspace",
       approvalReviewer: "automatic",
-      permissionEscalation: args.permissionEscalation
+      permissionEscalation
     };
   }
   return {
@@ -84985,7 +85000,7 @@ function toRuntimeExecutionOptions(args) {
     permissionMode: "accept-edits",
     permissionScope: "workspace",
     approvalReviewer: "user",
-    permissionEscalation: args.permissionEscalation
+    permissionEscalation
   };
 }
 async function buildExecutionOptions(deps, request2, args) {
@@ -85024,6 +85039,7 @@ async function buildThreadStartCommand(deps, args) {
       deps,
       hostId: args.environment.hostId,
       input: args.input,
+      projectPermissionEscalation: runtimeContext.projectPermissionEscalation,
       threadId: args.thread.id
     }),
     instructions: runtimeContext.instructions,
@@ -85051,6 +85067,7 @@ function buildPreparedTurnSubmitCommandPayload(args) {
       ...args,
       input: args.input,
       projectId: args.runtimeContext.projectId,
+      projectPermissionEscalation: args.runtimeContext.projectPermissionEscalation,
       providerId: args.runtimeContext.providerId
     }),
     target: args.target,
@@ -187241,6 +187258,7 @@ function toProjectResponseProjectFields(project) {
     kind: project.kind,
     name: project.name,
     gitRemoteUrl: project.gitRemoteUrl,
+    permissionEscalation: project.permissionEscalation,
     createdAt: project.createdAt,
     updatedAt: project.updatedAt
   };
@@ -194921,7 +194939,8 @@ function createServerArea(args) {
 init_src5();
 function projectUpdateJson(args) {
   return {
-    name: args.name
+    ...args.name !== void 0 ? { name: args.name } : {},
+    ...args.permissionEscalation !== void 0 ? { permissionEscalation: args.permissionEscalation } : {}
   };
 }
 function projectSourceAddJson(args) {

package/app/dist/assets/ProjectDetailSettingsView-BOV7URzQ.js

@@ -1 +0,0 @@
-import{o as e}from"./rolldown-runtime-BM3Ffeng.js";import{Ar as t,Or as n,Vr as r,mi as i,ni as a,zr as o}from"./boot-vendor-BBLG7GwQ.js";import{t as s}from"./permission-mode-options-BrNWKCMS.js";import{Dr as c,Fi as l,Gr as u,Hr as d,Ii as f,Ir as p,Kr as m,Lr as h,Po as g,Pr as _,Qm as v,Rr as y,Sa as b,Tc as x,Ui as S,Ur as C,Vi as w,a_ as T,di as E,em as D,nh as ee,nm as O,oh as k,zr as A}from"./index-BBxUiLNy.js";import{B as j,I as te,L as M,R as ne,b as re,z as N}from"./resource-list-B6MkAu8v.js";import{t as P}from"./page-shell-BHTOdeQn.js";import{t as ie}from"./project-default-execution-options-query-h6eTG6_Q.js";import{n as ae,r as F,s as oe}from"./ProjectsSettingsSection-BI_xhcA2.js";import"./icon-extended-DDFkslJU.js";import{n as se,r as ce,t as le}from"./ProjectMachineSetupDialog-BW4gUYj0.js";var I=e(i(),1),L=n(),R=e(a(),1);function ue(e){let t=(0,L.c)(8),{target:n,pending:r,onOpenChange:i,onDelete:a}=e,o=n!==null,s;t[0]!==a||t[1]!==r||t[2]!==n?(s=n?(0,R.jsx)(z,{target:n,pending:r,onDelete:a}):null,t[0]=a,t[1]=r,t[2]=n,t[3]=s):s=t[3];let c;return t[4]!==i||t[5]!==o||t[6]!==s?(c=(0,R.jsx)(h,{open:o,onOpenChange:i,children:s}),t[4]=i,t[5]=o,t[6]=s,t[7]=c):c=t[7],c}function z(e){let t=(0,L.c)(7),{target:n,pending:r,onDelete:i}=e,a=`Remove "${n.label}" from this project? This cannot be undone.`,o;t[0]!==i||t[1]!==n.id?(o=()=>i(n.id),t[0]=i,t[1]=n.id,t[2]=o):o=t[2];let s;return t[3]!==r||t[4]!==a||t[5]!==o?(s=(0,R.jsx)(y,{title:`Remove source?`,description:a,confirmLabel:`Remove source`,pending:r,onConfirm:o}),t[3]=r,t[4]=a,t[5]=o,t[6]=s):s=t[6],s}var de=`Where this project lives on each machine. A machine needs a checkout before it can run threads for this project.`,fe=`What new threads in this project start with. bb remembers the last options you used here.`;function pe(e){let n=(0,L.c)(41),{host:r,isPrimary:i,source:a,isPathInvalid:o,canEditPath:s,isOnlySource:l,pending:u,onSetUp:d,onChangePath:f,onRemove:p}=e,m=r.status===`connected`,h=!m&&`opacity-60`,g;n[0]===h?g=n[1]:(g=k(`size-4 shrink-0 text-muted-foreground`,h),n[0]=h,n[1]=g);let _;n[2]===g?_=n[3]:(_=(0,R.jsx)(v,{name:`Laptop`,className:g}),n[2]=g,n[3]=_);let y;n[4]===m?y=n[5]:(y=(0,R.jsx)(S,{connected:m}),n[4]=m,n[5]=y);let b;n[6]===r.id?b=n[7]:(b=D(r.id),n[6]=r.id,n[7]=b);let x;n[8]!==r.name||n[9]!==b?(x=(0,R.jsx)(t,{to:b,className:`min-w-0 truncate text-sm font-medium text-foreground hover:underline`,children:r.name}),n[8]=r.name,n[9]=b,n[10]=x):x=n[10];let C;n[11]===i?C=n[12]:(C=i?(0,R.jsx)(te,{children:`primary`}):null,n[11]=i,n[12]=C);let w;n[13]===o?w=n[14]:(w=o?(0,R.jsx)(c,{variant:`destructive`,children:`Path not found`}):null,n[13]=o,n[14]=w);let T;n[15]!==_||n[16]!==y||n[17]!==x||n[18]!==C||n[19]!==w?(T=(0,R.jsxs)(`div`,{className:`flex min-w-0 items-center gap-1.5`,children:[_,y,x,C,w]}),n[15]=_,n[16]=y,n[17]=x,n[18]=C,n[19]=w,n[20]=T):T=n[20];let E;n[21]===a?E=n[22]:(E=a===null?(0,R.jsx)(`span`,{className:`font-sans italic`,children:`Not set up on this machine`}):a.path,n[21]=a,n[22]=E);let O;n[23]===E?O=n[24]:(O=(0,R.jsx)(`div`,{className:`min-w-0 truncate font-mono text-xs text-subtle-foreground/75`,children:E}),n[23]=E,n[24]=O);let A;n[25]!==O||n[26]!==T?(A=(0,R.jsxs)(`div`,{className:`min-w-0 flex-1 space-y-0.5`,children:[T,O]}),n[25]=O,n[26]=T,n[27]=A):A=n[27];let j;n[28]!==s||n[29]!==m||n[30]!==r.name||n[31]!==l||n[32]!==f||n[33]!==p||n[34]!==d||n[35]!==u||n[36]!==a?(j=(0,R.jsx)(`div`,{className:`flex shrink-0 items-center gap-1`,children:a===null?(0,R.jsx)(ee,{type:`button`,variant:`outline`,size:`sm`,disabled:u||!m,onClick:d,children:m?`Set up`:`Offline`}):(0,R.jsx)(re,{label:`${r.name} checkout actions`,items:[{label:`Change folder`,icon:`Folder`,disabled:!s||u,disabledReason:s?void 0:`Folders on other machines are changed from that machine.`,onSelect:f},{label:`Remove checkout`,icon:`Trash2`,tone:`destructive`,disabled:l||u,disabledReason:l?`A project needs at least one checkout.`:void 0,onSelect:p}]})}),n[28]=s,n[29]=m,n[30]=r.name,n[31]=l,n[32]=f,n[33]=p,n[34]=d,n[35]=u,n[36]=a,n[37]=j):j=n[37];let M;return n[38]!==A||n[39]!==j?(M=(0,R.jsxs)(ne,{className:`items-start`,children:[A,j]}),n[38]=A,n[39]=j,n[40]=M):M=n[40],M}function B(e){let n=(0,L.c)(4),{children:r}=e,i;n[0]===Symbol.for(`react.memo_cache_sentinel`)?(i=O(`projects`),n[0]=i):i=n[0];let a;n[1]===Symbol.for(`react.memo_cache_sentinel`)?(a=(0,R.jsxs)(t,{to:i,className:`inline-flex items-center gap-1 text-sm text-muted-foreground hover:text-foreground`,children:[(0,R.jsx)(v,{name:`ChevronLeft`,className:`size-3.5`}),`Projects`]}),n[1]=a):a=n[1];let o;return n[2]===r?o=n[3]:(o=(0,R.jsx)(P,{contentClassName:`pt-4 md:pt-5`,children:(0,R.jsxs)(`div`,{className:`mx-auto w-full max-w-3xl space-y-3`,children:[a,r]})}),n[2]=r,n[3]=o),o}function me(){let{projectId:e}=r(),n=o(),i=x(),a=w(),c=g(),h=ie({projectId:e}),y=m(),S=C(),D=A(),L=u(),z=d(),[me,V]=(0,I.useState)(null),[he,H]=(0,I.useState)(null),[ge,U]=(0,I.useState)(null),[_e,W]=(0,I.useState)(null),ve=i.data?.projects,G=ve?.find(t=>t.id===e)??null,ye=G?.sources,K=(0,I.useMemo)(()=>ye??[],[ye]),be=G?.name??``,xe=(0,I.useMemo)(()=>f(a.data,`all`),[a.data]),Se=(0,I.useMemo)(()=>f(a.data,`persistent`),[a.data]),[q,Ce]=(0,I.useState)(!1),J=q?xe:Se,we=xe.length-Se.length,Te=c.data?.primaryHostId??null,Y=D.isPending||L.isPending,X=E({isPending:Y,submit:(0,I.useCallback)(({path:t,hostId:n,target:r,closeDialog:i})=>{if(e){if(r.kind===`add-source`)D.mutate({projectId:e,path:t,hostId:n},{onSuccess:i});else if(r.kind===`update`){let r=K.find(e=>e.hostId===n);if(!r)return;L.mutate({projectId:e,sourceId:r.id,path:t},{onSuccess:i})}}},[D,e,K,L])}),Z=X.hostId,Ee=ce(Z,(0,I.useMemo)(()=>Z?K.filter(e=>e.hostId===Z).map(e=>e.path):[],[Z,K])),De=(0,I.useCallback)(e=>{if(G){if(e.id===Z){X.openPicker({kind:`add-source`,projectId:G.id,projectName:G.name});return}W({projectId:G.id,projectName:G.name,gitRemoteUrl:G.gitRemoteUrl,hostId:e.id,hostName:e.name})}},[X,Z,G]);if(i.isError||a.isError)return(0,R.jsx)(B,{children:(0,R.jsx)(`p`,{className:`text-sm text-destructive`,role:`alert`,children:`Couldn't load this project.`})});if(ve===void 0||a.data===void 0)return(0,R.jsx)(B,{children:(0,R.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`Loading…`})});if(G===null)return(0,R.jsx)(B,{children:(0,R.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`This project no longer exists.`})});let Oe=G.gitRemoteUrl===null?null:ae(G.gitRemoteUrl),ke=new Set(K.map(e=>e.hostId)),Q=J.filter(e=>ke.has(e.id)).length,$=h.data??null,Ae=$===null?null:s.find(e=>e.value===$.permissionMode)?.label??$.permissionMode,je=Date.now();return(0,R.jsxs)(P,{contentClassName:`pt-4 md:pt-5`,children:[(0,R.jsxs)(`div`,{className:`mx-auto w-full max-w-3xl space-y-6 pb-10`,children:[(0,R.jsxs)(`div`,{className:`space-y-3`,children:[(0,R.jsxs)(t,{to:O(`projects`),className:`inline-flex items-center gap-1 text-sm text-muted-foreground hover:text-foreground`,children:[(0,R.jsx)(v,{name:`ChevronLeft`,className:`size-3.5`}),`Projects`]}),(0,R.jsxs)(`div`,{className:`flex min-w-0 items-start justify-between gap-3`,children:[(0,R.jsxs)(`div`,{className:`min-w-0`,children:[(0,R.jsxs)(`div`,{className:`flex min-w-0 items-center gap-2`,children:[(0,R.jsx)(v,{name:`FolderGit`,className:`size-4 shrink-0 text-muted-foreground`}),(0,R.jsx)(`h1`,{className:`min-w-0 truncate text-sm font-semibold text-foreground`,children:G.name}),Q===0?(0,R.jsx)(te,{children:`needs setup`}):null]}),(0,R.jsxs)(`p`,{className:`mt-1 min-w-0 truncate text-xs text-subtle-foreground/75`,children:[Oe??`No git remote`,` · `,J.length>1?`${Q} of ${F(J.length,`machine`)}`:F(Q,`machine`),` · `,F(G.threads.length,`thread`)]})]}),(0,R.jsx)(re,{label:`${G.name} actions`,items:[{label:`Rename`,icon:`Edit`,onSelect:()=>{y.reset(),V({id:G.id,currentName:G.name})}}]})]})]}),(0,R.jsxs)(j,{title:`Checkouts`,description:de,children:[J.length===0?(0,R.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`No machines are paired yet.`}):(0,R.jsx)(N,{children:J.map(e=>{let t=T(K,e.id),n=e.id===Z;return(0,R.jsx)(pe,{host:e,isPrimary:J.length>1&&e.id===Te,source:t??null,isPathInvalid:t!==void 0&&n&&se(Ee,t.path),canEditPath:n,isOnlySource:K.length<=1,pending:Y||z.isPending,onSetUp:()=>De(e),onChangePath:()=>{t&&X.openPicker({kind:`update`,projectId:G.id,projectName:be,currentPath:t.path})},onRemove:()=>{t&&U({id:t.id,label:`${e.name} · ${t.path}`})}},e.id)})}),we>0?(0,R.jsxs)(`button`,{type:`button`,"aria-expanded":q,onClick:()=>Ce(e=>!e),className:`-ml-1 inline-flex items-center gap-1.5 self-start rounded-md px-1.5 py-0.5 text-xs text-muted-foreground transition-colors hover:bg-state-hover hover:text-foreground`,children:[(0,R.jsx)(v,{name:`ChevronDown`,className:k(`size-3.5 transition-transform`,q&&`rotate-180`),"aria-hidden":!0}),(0,R.jsx)(`span`,{children:q?`Show fewer machines`:`Show all machines`})]}):null]}),(0,R.jsx)(j,{title:`Thread defaults`,description:fe,children:h.isError?(0,R.jsx)(`p`,{className:`text-sm text-destructive`,role:`alert`,children:`Couldn't load thread defaults.`}):h.isPending?(0,R.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`Loading…`}):$===null?(0,R.jsx)(`p`,{className:`text-sm text-muted-foreground`,children:`No threads have run here yet. The first thread's options become the defaults.`}):(0,R.jsxs)(N,{children:[(0,R.jsx)(M,{label:`Provider`,children:(0,R.jsx)(`span`,{children:$.providerId})}),(0,R.jsx)(M,{label:`Model`,children:(0,R.jsx)(`span`,{className:`font-mono text-xs`,children:$.model})}),(0,R.jsx)(M,{label:`Permission mode`,children:(0,R.jsx)(`span`,{children:Ae})}),(0,R.jsx)(M,{label:`Reasoning`,children:(0,R.jsx)(`span`,{children:$.reasoningLevel})})]})}),(0,R.jsx)(j,{title:`Project information`,children:(0,R.jsxs)(N,{children:[(0,R.jsx)(M,{label:`Git remote`,children:G.gitRemoteUrl===null?(0,R.jsx)(`span`,{children:`None detected`}):(0,R.jsx)(`span`,{className:`min-w-0 truncate font-mono text-xs`,children:G.gitRemoteUrl})}),(0,R.jsx)(M,{label:`Project ID`,children:(0,R.jsx)(`span`,{className:`font-mono text-xs`,children:G.id})}),(0,R.jsx)(M,{label:`Created`,children:(0,R.jsx)(`span`,{children:b({timestamp:G.createdAt,now:je})})})]})}),(0,R.jsx)(oe,{projectId:G.id}),(0,R.jsx)(j,{title:`Danger zone`,description:`Deleting ${G.name} removes the project and every thread in it, including archived ones. Checkouts stay on disk.`,children:(0,R.jsx)(N,{children:(0,R.jsx)(ne,{children:(0,R.jsx)(ee,{type:`button`,variant:`destructive`,size:`sm`,onClick:()=>{S.reset(),H({id:G.id,name:G.name})},children:`Delete project`})})})})]}),(0,R.jsx)(l,{target:X.projectPathDialog.target,pending:Y,platform:X.platform,hostId:X.hostId,hostName:X.hostName,onOpenChange:X.projectPathDialog.onOpenChange,onSubmit:X.submitProjectPath}),(0,R.jsx)(le,{target:_e,onOpenChange:e=>{e||W(null)},onComplete:()=>W(null)}),(0,R.jsx)(ue,{target:ge,pending:z.isPending,onOpenChange:e=>{e||U(null)},onDelete:e=>z.mutate({projectId:G.id,sourceId:e},{onSuccess:()=>U(null)})}),(0,R.jsx)(_,{target:me,pending:y.isPending,onOpenChange:e=>{!e&&!y.isPending&&V(null)},onRename:(e,t)=>y.mutate({id:e,name:t},{onSuccess:()=>V(null)})}),(0,R.jsx)(p,{target:he,pending:S.isPending,onOpenChange:e=>{!e&&!S.isPending&&H(null)},onDelete:e=>S.mutate(e,{onSuccess:()=>{H(null),n(O(`projects`),{replace:!0})}})})]})}export{me as ProjectDetailSettingsView};

package/app/dist/assets/code-loading-skeletons-C_099GEq.js.br

@@ -1,5 +0,0 @@
-m �Ҷ�6�[v0�J���Al�G!���vQ��f�|�e>��l��c[�&Th�q�9l�l�5�6�<^���ҭ.bҍ��V�(6����(���4.�k�N>
-ɝ>P�B�U�Vo}$8X�
-A���.��]��K
-�~�6\<�TPp�!y��6��
-f��2�0�N�2aN1@2�З���q��E?��ç�7d�ߊ���H�q���Ҡ7,���/j�����'