@hasna/accounts 0.1.11 → 0.1.13

package/dist/lib/claude-auth.d.ts

@@ -1,4 +1,8 @@
 import type { ToolDef } from "../types.js";
+export declare const CLAUDE_API_AUTH_ENV_KEYS: readonly ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_BASE_URL", "CLAUDE_CODE_API_KEY_HELPER", "CLAUDE_CODE_API_KEY_HELPER_TTL_MS", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_VERTEX"];
+export declare function sanitizeClaudeProfileApiSettings(profileDir: string, tool: ToolDef): boolean;
+export declare function sanitizeClaudeOAuthProfileSettings(profileDir: string, tool: ToolDef): boolean;
+export declare function sanitizeLiveClaudeOAuthSettings(): boolean;
 /** Email address of the account currently authenticated on the live Claude paths. */
 export declare function liveOAuthEmail(): string | undefined;
 /** Snapshot live Claude auth into a profile directory (used when switching away on apply). */

package/dist/lib/claude-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-auth.d.ts","sourceRoot":"","sources":["../../src/lib/claude-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAyF3C,qFAAqF;AACrF,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAKnD;AAED,8FAA8F;AAC9F,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAmBlF;AAED,gDAAgD;AAChD,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAEnF;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,IAAI,CAiBN;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED,6DAA6D;AAC7D,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI,CAqDN;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAM3D"}
+{"version":3,"file":"claude-auth.d.ts","sourceRoot":"","sources":["../../src/lib/claude-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAuB3C,eAAO,MAAM,wBAAwB,sMAQ3B,CAAC;AAoGX,wBAAgB,gCAAgC,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAG3F;AAED,wBAAgB,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAM7F;AAED,wBAAgB,+BAA+B,IAAI,OAAO,CAEzD;AAED,qFAAqF;AACrF,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAKnD;AAED,8FAA8F;AAC9F,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAmBlF;AAED,gDAAgD;AAChD,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAEnF;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,IAAI,CAmBN;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAEzE;AAED,6DAA6D;AAC7D,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,OAAO,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI,CAwDN;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAM3D"}

package/dist/lib/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAMpD,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQlF;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAIxE;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAIrE"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/lib/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAOpD,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYlF;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAIxE;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAIrE"}

package/dist/lib/supervisor.d.ts

@@ -21,6 +21,7 @@ export type SupervisorRequest = {
     mode?: SwitchMode;
     resume?: boolean;
     args?: string[];
+    permissions?: string;
 } | {
     type: "stop";
 };

package/dist/lib/supervisor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/lib/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMjF,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAKpD,OAAO,EAAiB,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GACpD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAID,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM3D;AAqBD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAQ/E;AAED,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAQxD;AA6BD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,oBAAoB,CAuBtB;AA0CD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAoDzC;AAED,wBAAsB,iBAAiB,CACrC,cAAc,EAAE,OAAO,EACvB,IAAI,EAAE,OAAO,EACb,WAAW,GAAE,MAAM,EAAO,EAC1B,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAmLjB"}
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/lib/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAMjF,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAKpD,OAAO,EAAiB,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GACpD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAID,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM3D;AAqBD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAQ/E;AAED,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAQxD;AA6BD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,oBAAoB,CAuBtB;AA0CD,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,uBAA4B,GACjC,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAoDzC;AAED,wBAAsB,iBAAiB,CACrC,cAAc,EAAE,OAAO,EACvB,IAAI,EAAE,OAAO,EACb,WAAW,GAAE,MAAM,EAAO,EAC1B,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,MAAM,CAAC,CAoLjB"}

package/dist/lib/switch.d.ts

@@ -5,6 +5,7 @@ export interface SwitchOptions {
     mode?: SwitchMode;
     resume?: boolean;
     args?: string[];
+    permissions?: string;
 }
 export interface SwitchResult {
     profile: Profile;
@@ -15,6 +16,7 @@ export interface SwitchResult {
     exports: string;
     command: string[];
     commandLine: string;
+    permissions?: string;
     restartRequired: boolean;
     message: string;
 }

package/dist/lib/switch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"switch.d.ts","sourceRoot":"","sources":["../../src/lib/switch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAOpD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,YAAY,CAmClF"}
+{"version":3,"file":"switch.d.ts","sourceRoot":"","sources":["../../src/lib/switch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAOpD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AAgBD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,YAAY,CAoClF"}

package/dist/lib/tools.d.ts

@@ -6,6 +6,12 @@ import { type ToolDef } from "../types.js";
  */
 export declare const BUILTIN_TOOLS: ToolDef[];
 export declare const DEFAULT_TOOL = "claude";
+export interface ToolArgOptions {
+    permissions?: string;
+}
+export declare function normalizePermissionPreset(value: string): string;
+export declare function permissionArgsFor(tool: ToolDef, permissions?: string): string[];
+export declare function mergeToolArgs(tool: ToolDef, args: string[], opts?: ToolArgOptions): string[];
 export declare function isBuiltinTool(id: string): boolean;
 /** All tools: built-ins plus any user-registered ones (custom wins on id clash). */
 export declare function listTools(): ToolDef[];

package/dist/lib/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/lib/tools.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,OAAO,EAAgC,MAAM,aAAa,CAAC;AAGzE;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,OAAO,EAkGlC,CAAC;AAEF,eAAO,MAAM,YAAY,WAAW,CAAC;AAIrC,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,oFAAoF;AACpF,wBAAgB,SAAS,IAAI,OAAO,EAAE,CAMrC;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAS3C;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAanD;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAWjD"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/lib/tools.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,OAAO,EAAgC,MAAM,aAAa,CAAC;AAGzE;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,OAAO,EAuIlC,CAAC;AAEF,eAAO,MAAM,YAAY,WAAW,CAAC;AAErC,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAkBD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAW/E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,cAAmB,GAAG,MAAM,EAAE,CAGhG;AAID,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,oFAAoF;AACpF,wBAAgB,SAAS,IAAI,OAAO,EAAE,CAMrC;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAS3C;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAanD;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAWjD"}

package/dist/mcp.js

@@ -16634,6 +16634,7 @@ var toolDefSchema = exports_external.object({
   loginArgs: exports_external.array(exports_external.string()).optional(),
   loginHint: exports_external.string().optional(),
   resumeArgs: exports_external.array(exports_external.string()).optional(),
+  permissionArgs: exports_external.record(exports_external.array(exports_external.string())).optional(),
   accountFile: exports_external.string().optional(),
   emailPath: exports_external.array(exports_external.string()).optional()
 });
@@ -16808,6 +16809,15 @@ var BUILTIN_TOOLS = [
     bin: "claude",
     loginHint: "run /login inside Claude, then /exit when done",
     resumeArgs: ["--continue"],
+    permissionArgs: {
+      dangerous: ["--dangerously-skip-permissions"],
+      "allow-dangerous": ["--allow-dangerously-skip-permissions"],
+      bypass: ["--permission-mode", "bypassPermissions"],
+      auto: ["--permission-mode", "auto"],
+      "accept-edits": ["--permission-mode", "acceptEdits"],
+      "dont-ask": ["--permission-mode", "dontAsk"],
+      plan: ["--permission-mode", "plan"]
+    },
     accountFile: ".claude.json",
     emailPath: ["oauthAccount", "emailAddress"]
   },
@@ -16819,7 +16829,10 @@ var BUILTIN_TOOLS = [
     bin: "codex",
     loginArgs: ["login"],
     loginHint: "complete the Codex login flow for this CODEX_HOME",
-    resumeArgs: ["resume", "--last"]
+    resumeArgs: ["resume", "--last"],
+    permissionArgs: {
+      dangerous: ["--dangerously-bypass-approvals-and-sandbox"]
+    }
   },
   {
     id: "takumi",
@@ -16829,6 +16842,15 @@ var BUILTIN_TOOLS = [
     bin: "takumi",
     loginHint: "complete Takumi auth in this TAKUMI_CONFIG_DIR",
     resumeArgs: ["--continue"],
+    permissionArgs: {
+      dangerous: ["--dangerously-skip-permissions"],
+      "allow-dangerous": ["--allow-dangerously-skip-permissions"],
+      bypass: ["--permission-mode", "bypassPermissions"],
+      auto: ["--permission-mode", "auto"],
+      "accept-edits": ["--permission-mode", "acceptEdits"],
+      "dont-ask": ["--permission-mode", "dontAsk"],
+      plan: ["--permission-mode", "plan"]
+    },
     accountFile: ".claude.json",
     emailPath: ["oauthAccount", "emailAddress"]
   },
@@ -16838,7 +16860,13 @@ var BUILTIN_TOOLS = [
     envVar: "GEMINI_CONFIG_DIR",
     defaultDir: join2(homedir2(), ".gemini"),
     bin: "gemini",
-    loginHint: "complete Gemini auth in this GEMINI_CONFIG_DIR"
+    loginHint: "complete Gemini auth in this GEMINI_CONFIG_DIR",
+    permissionArgs: {
+      dangerous: ["--yolo"],
+      yolo: ["--yolo"],
+      "auto-edit": ["--approval-mode", "auto_edit"],
+      plan: ["--approval-mode", "plan"]
+    }
   },
   {
     id: "opencode",
@@ -16877,7 +16905,11 @@ var BUILTIN_TOOLS = [
     envVar: "HERMES_HOME",
     defaultDir: join2(homedir2(), ".hermes"),
     bin: "hermes",
-    loginHint: "complete Hermes auth in this HERMES_HOME"
+    loginHint: "complete Hermes auth in this HERMES_HOME",
+    permissionArgs: {
+      dangerous: ["--yolo"],
+      yolo: ["--yolo"]
+    }
   },
   {
     id: "kimi",
@@ -16886,7 +16918,13 @@ var BUILTIN_TOOLS = [
     defaultDir: join2(homedir2(), ".kimi-code"),
     bin: "kimi",
     loginArgs: ["login"],
-    loginHint: "complete kimi login for this KIMI_CODE_HOME"
+    loginHint: "complete kimi login for this KIMI_CODE_HOME",
+    permissionArgs: {
+      dangerous: ["--yolo"],
+      yolo: ["--yolo"],
+      auto: ["--auto"],
+      plan: ["--plan"]
+    }
   },
   {
     id: "grok",
@@ -16898,6 +16936,43 @@ var BUILTIN_TOOLS = [
     loginHint: "complete grok login in this process-scoped HOME; prefer launch/shell over exporting HOME globally"
   }
 ];
+var PERMISSION_ALIASES = new Map([
+  ["danger", "dangerous"],
+  ["dangerously-skip-permissions", "dangerous"],
+  ["skip-permissions", "dangerous"],
+  ["skip", "dangerous"],
+  ["bypasspermissions", "bypass"],
+  ["bypass-permissions", "bypass"],
+  ["acceptedits", "accept-edits"],
+  ["accept-edit", "accept-edits"],
+  ["autoedit", "auto-edit"],
+  ["auto-edits", "auto-edit"],
+  ["auto_edit", "auto-edit"],
+  ["dontask", "dont-ask"],
+  ["dont-ask-permissions", "dont-ask"]
+]);
+function normalizePermissionPreset(value) {
+  const normalized = value.trim().replace(/^--/, "").replaceAll("_", "-").toLowerCase();
+  return PERMISSION_ALIASES.get(normalized) ?? normalized;
+}
+function permissionArgsFor(tool, permissions) {
+  if (!permissions)
+    return [];
+  const preset = normalizePermissionPreset(permissions);
+  if (preset === "default" || preset === "none" || preset === "off")
+    return [];
+  const args = tool.permissionArgs?.[preset];
+  if (!args) {
+    const supported = Object.keys(tool.permissionArgs ?? {}).sort();
+    const suffix = supported.length > 0 ? ` Supported permissions: ${supported.join(", ")}.` : " No permission presets are configured.";
+    throw new AccountsError(`tool "${tool.id}" does not support permissions "${permissions}".${suffix}`);
+  }
+  return args;
+}
+function mergeToolArgs(tool, args, opts = {}) {
+  const permissionArgs = permissionArgsFor(tool, opts.permissions).filter((arg) => !args.includes(arg));
+  return [...permissionArgs, ...args];
+}
 var BUILTIN_IDS = new Set(BUILTIN_TOOLS.map((t) => t.id));
 function listTools() {
   const custom3 = loadStore().tools;
@@ -17072,6 +17147,15 @@ function writeClaudeKeychain(cred) {
 }
 
 // src/lib/claude-auth.ts
+var CLAUDE_API_AUTH_ENV_KEYS = [
+  "ANTHROPIC_API_KEY",
+  "ANTHROPIC_AUTH_TOKEN",
+  "ANTHROPIC_BASE_URL",
+  "CLAUDE_CODE_API_KEY_HELPER",
+  "CLAUDE_CODE_API_KEY_HELPER_TTL_MS",
+  "CLAUDE_CODE_USE_BEDROCK",
+  "CLAUDE_CODE_USE_VERTEX"
+];
 function readJsonFile(path) {
   if (!existsSync3(path))
     return;
@@ -17090,6 +17174,11 @@ function writeJsonFile(path, data, stayUnder) {
 function readOAuthFromPaths(paths) {
   return findOAuthSource(paths)?.oauth;
 }
+function readOAuthSnapshot(profileDir) {
+  const snap = readJsonFile(profileOAuthSnapshot(profileDir));
+  const oauth = snap?.oauthAccount;
+  return oauth && typeof oauth === "object" ? oauth : undefined;
+}
 function findOAuthSource(paths) {
   for (const p of paths) {
     const data = readJsonFile(p);
@@ -17131,6 +17220,46 @@ function mergeOAuthInto(paths, oauth, allowDelete, stayUnder) {
     }
   }
 }
+function sanitizeSettingsFile(configDir, stayUnder) {
+  const settingsPath = join4(configDir, "settings.json");
+  const settings = readJsonFile(settingsPath);
+  if (!settings)
+    return false;
+  let changed = false;
+  if ("apiKeyHelper" in settings) {
+    delete settings.apiKeyHelper;
+    changed = true;
+  }
+  const env = settings.env;
+  if (env && typeof env === "object" && !Array.isArray(env)) {
+    const envRecord = env;
+    for (const key of CLAUDE_API_AUTH_ENV_KEYS) {
+      if (key in envRecord) {
+        delete envRecord[key];
+        changed = true;
+      }
+    }
+  }
+  if (changed)
+    writeJsonFile(settingsPath, settings, stayUnder);
+  return changed;
+}
+function sanitizeClaudeProfileApiSettings(profileDir, tool) {
+  if (tool.id !== "claude")
+    return false;
+  return sanitizeSettingsFile(profileDir, profileDir);
+}
+function sanitizeClaudeOAuthProfileSettings(profileDir, tool) {
+  if (tool.id !== "claude")
+    return false;
+  if (!readOAuthSnapshot(profileDir) && !readOAuthFromPaths(profileAccountJsonPaths(profileDir, tool))) {
+    return false;
+  }
+  return sanitizeClaudeProfileApiSettings(profileDir, tool);
+}
+function sanitizeLiveClaudeOAuthSettings() {
+  return sanitizeSettingsFile(liveClaudePaths().configDir, liveClaudeBase());
+}
 function liveOAuthEmail() {
   const live = liveClaudePaths();
   const oauth = readOAuthFromPaths([live.homeJson]);
@@ -17171,6 +17300,7 @@ function ensureProfileAuthSnapshot(profileDir, tool, opts = {}) {
     assertSafeWritePath(credSnap, { mustStayUnder: profileDir });
     copyFileSync(credFile, credSnap);
   }
+  sanitizeClaudeOAuthProfileSettings(profileDir, tool);
 }
 function profileHasAuth(profileDir, tool) {
   return hasAuthSnapshot(profileDir) || !!readOAuthFromPaths(profileAccountJsonPaths(profileDir, tool));
@@ -17189,6 +17319,8 @@ function restoreClaudeAuthFromProfile(profileDir, tool, profileName) {
   if (!oauth) {
     throw new AccountsError("profile has no OAuth account data to apply");
   }
+  sanitizeClaudeOAuthProfileSettings(profileDir, tool);
+  sanitizeLiveClaudeOAuthSettings();
   assertSafeWritePath(live.homeJson, { mustStayUnder: liveRoot });
   mergeOAuthInto([live.homeJson], oauth, false, liveRoot);
   const credSnap = profileCredentialsSnapshot(profileDir);
@@ -17306,6 +17438,11 @@ function profileEnv(profile, tool) {
   for (const [name, value] of Object.entries(tool.extraEnv ?? {})) {
     env[name] = renderTemplate(value, profile);
   }
+  if (tool.id === "claude") {
+    sanitizeClaudeProfileApiSettings(profile.dir, tool);
+    for (const key of CLAUDE_API_AUTH_ENV_KEYS)
+      env[key] = "";
+  }
   return env;
 }
 function formatEnvAssignments(env) {
@@ -17326,7 +17463,8 @@ function commandLine(env, command) {
   return `${formatEnvAssignments(env)} ${command.map(shellQuote).join(" ")}`.trim();
 }
 function commandFor(tool, opts) {
-  return [tool.bin, ...opts.resume ? tool.resumeArgs ?? [] : [], ...opts.args ?? []];
+  const args = [...opts.resume ? tool.resumeArgs ?? [] : [], ...opts.args ?? []];
+  return [tool.bin, ...mergeToolArgs(tool, args, { permissions: opts.permissions })];
 }
 function switchProfile(name, opts = {}) {
   const profile = getProfile(name, opts.tool);
@@ -17355,6 +17493,7 @@ function switchProfile(name, opts = {}) {
     exports: formatExportLines(env),
     command,
     commandLine: commandLine(env, command),
+    ...opts.permissions ? { permissions: normalizePermissionPreset(opts.permissions) } : {},
     restartRequired,
     message
   };
@@ -17464,7 +17603,7 @@ function ok(data) {
 function fail(message) {
   return { content: [{ type: "text", text: JSON.stringify({ error: message }) }], isError: true };
 }
-var server = new Server({ name: "accounts", version: "0.1.8" }, { capabilities: { tools: {} } });
+var server = new Server({ name: "accounts", version: "0.1.13" }, { capabilities: { tools: {} } });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({
   tools: [
     {
@@ -17497,6 +17636,7 @@ server.setRequestHandler(ListToolsRequestSchema, async () => ({
           tool: { type: "string" },
           mode: { type: "string", enum: ["auto", "apply", "env", "active"] },
           resume: { type: "boolean" },
+          permissions: { type: "string" },
           args: { type: "array", items: { type: "string" } }
         },
         required: ["name"]
@@ -17530,13 +17670,15 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
         const profile = getProfile(name, typeof args["tool"] === "string" ? args["tool"] : undefined);
         const resume = args["resume"] !== false;
         const switchArgs = Array.isArray(args["args"]) ? args["args"].filter((value) => typeof value === "string") : undefined;
+        const permissions = typeof args["permissions"] === "string" ? args["permissions"] : undefined;
         const supervisor = await sendSupervisorRequest(profile.tool, {
           type: "switch_profile",
           name: profile.name,
           tool: profile.tool,
           mode: typeof args["mode"] === "string" ? args["mode"] : "auto",
           resume,
-          args: switchArgs
+          args: switchArgs,
+          permissions
         }, { allowMissing: true });
         if (supervisor) {
           if (!supervisor.ok)
@@ -17551,7 +17693,8 @@ server.setRequestHandler(CallToolRequestSchema, async (req) => {
           tool: profile.tool,
           mode: typeof args["mode"] === "string" ? args["mode"] : "auto",
           resume,
-          args: switchArgs
+          args: switchArgs,
+          permissions
         });
         return ok({
           supervised: false,

package/dist/storage.js

@@ -4007,6 +4007,7 @@ var toolDefSchema = exports_external.object({
   loginArgs: exports_external.array(exports_external.string()).optional(),
   loginHint: exports_external.string().optional(),
   resumeArgs: exports_external.array(exports_external.string()).optional(),
+  permissionArgs: exports_external.record(exports_external.array(exports_external.string())).optional(),
   accountFile: exports_external.string().optional(),
   emailPath: exports_external.array(exports_external.string()).optional()
 });

package/dist/types.d.ts

@@ -12,6 +12,8 @@ export declare const toolDefSchema: z.ZodObject<{
     loginArgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     loginHint: z.ZodOptional<z.ZodString>;
     resumeArgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** Tool-specific permission presets exposed through `--permissions <preset>`. */
+    permissionArgs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
     accountFile: z.ZodOptional<z.ZodString>;
     emailPath: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
@@ -24,6 +26,7 @@ export declare const toolDefSchema: z.ZodObject<{
     loginArgs?: string[] | undefined;
     loginHint?: string | undefined;
     resumeArgs?: string[] | undefined;
+    permissionArgs?: Record<string, string[]> | undefined;
     accountFile?: string | undefined;
     emailPath?: string[] | undefined;
 }, {
@@ -36,6 +39,7 @@ export declare const toolDefSchema: z.ZodObject<{
     loginArgs?: string[] | undefined;
     loginHint?: string | undefined;
     resumeArgs?: string[] | undefined;
+    permissionArgs?: Record<string, string[]> | undefined;
     accountFile?: string | undefined;
     emailPath?: string[] | undefined;
 }>;
@@ -117,6 +121,8 @@ export declare const storeSchema: z.ZodObject<{
         loginArgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         loginHint: z.ZodOptional<z.ZodString>;
         resumeArgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /** Tool-specific permission presets exposed through `--permissions <preset>`. */
+        permissionArgs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
         accountFile: z.ZodOptional<z.ZodString>;
         emailPath: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
@@ -129,6 +135,7 @@ export declare const storeSchema: z.ZodObject<{
         loginArgs?: string[] | undefined;
         loginHint?: string | undefined;
         resumeArgs?: string[] | undefined;
+        permissionArgs?: Record<string, string[]> | undefined;
         accountFile?: string | undefined;
         emailPath?: string[] | undefined;
     }, {
@@ -141,6 +148,7 @@ export declare const storeSchema: z.ZodObject<{
         loginArgs?: string[] | undefined;
         loginHint?: string | undefined;
         resumeArgs?: string[] | undefined;
+        permissionArgs?: Record<string, string[]> | undefined;
         accountFile?: string | undefined;
         emailPath?: string[] | undefined;
     }>, "many">>;
@@ -167,6 +175,7 @@ export declare const storeSchema: z.ZodObject<{
         loginArgs?: string[] | undefined;
         loginHint?: string | undefined;
         resumeArgs?: string[] | undefined;
+        permissionArgs?: Record<string, string[]> | undefined;
         accountFile?: string | undefined;
         emailPath?: string[] | undefined;
     }[];
@@ -193,6 +202,7 @@ export declare const storeSchema: z.ZodObject<{
         loginArgs?: string[] | undefined;
         loginHint?: string | undefined;
         resumeArgs?: string[] | undefined;
+        permissionArgs?: Record<string, string[]> | undefined;
         accountFile?: string | undefined;
         emailPath?: string[] | undefined;
     }[] | undefined;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,8BAA8B;AAC9B,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C,uEAAuE;AACvE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYxB,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;EAQxB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,WAAW;;IAEtB,mEAAmE;;IAEnE;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;IAGH,0EAA0E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE1E,CAAC;AAEH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,8BAA8B;AAC9B,eAAO,MAAM,iBAAiB,aAAa,CAAC;AAE5C,uEAAuE;AACvE,eAAO,MAAM,aAAa;;;;;;;;;;IAUxB,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIjF,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;EAQxB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,WAAW;;IAEtB,mEAAmE;;IAEnE;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;IAGH,0EAA0E;;;;;;;;;;;QApC1E,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsCjF,CAAC;AAEH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/accounts",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "Manage and switch between multiple Claude Code (and other AI coding tool) profiles/accounts locally — isolated config dirs, per-account email, one-command switching.",
   "type": "module",
   "main": "dist/index.js",