@hmharness/agent 0.14.19 → 0.14.20

package/dist/index.d.ts

@@ -5,7 +5,7 @@ export { mechanicalGate, parseVerdict, runPipeline, type PipelineOptions, type P
 export { buildSystemPrompt } from './prompt.ts';
 export { strings, type Locale, type Strings } from './i18n.ts';
 export { makeSpawnTool, MAX_SPAWN_DEPTH, type SpawnBase } from './spawn.ts';
-export { buildRegistry, contextPack, makeApproval, nativeRegistry, runAgentTask, spawnBase, toServerConfig, type AgentTaskOptions, type RunnerEvents, } from './runner.ts';
+export { buildRegistry, contextPack, makeApproval, liveYolo, nativeRegistry, runAgentTask, spawnBase, toServerConfig, type AgentTaskOptions, type RunnerEvents, } from './runner.ts';
 export * from './skills-conformance.ts';
 export * from './acp.ts';
 export * from './topology.ts';

package/dist/index.js

@@ -5,7 +5,7 @@ export { mechanicalGate, parseVerdict, runPipeline, } from "./pipeline.js";
 export { buildSystemPrompt } from "./prompt.js";
 export { strings } from "./i18n.js";
 export { makeSpawnTool, MAX_SPAWN_DEPTH } from "./spawn.js";
-export { buildRegistry, contextPack, makeApproval, nativeRegistry, runAgentTask, spawnBase, toServerConfig, } from "./runner.js";
+export { buildRegistry, contextPack, makeApproval, liveYolo, nativeRegistry, runAgentTask, spawnBase, toServerConfig, } from "./runner.js";
 export * from "./skills-conformance.js";
 export * from "./acp.js";
 export * from "./topology.js";

package/dist/runner.d.ts

@@ -66,6 +66,14 @@ export declare function loadApprovedRules(home: string): ApprovedRule[];
  *  path SEGMENT of the extension may be `..` (a boundary-only check missed
  *  `node scripts/sub/../../evil.js`, whose first differing segment is `sub`). */
 export declare function matchesRule(rules: ApprovedRule[], toolName: string, args: Record<string, unknown>): boolean;
+/** Live unattended-mode override (2026-09-25 user request: "YOLO 需要即时
+ *  生效"). Flipping this applies at the VERY NEXT approval ask of any running
+ *  task - not only from the next session. The web /yolo command and the TUI
+ *  /yolo toggle both write it AND persist via patchConfig, so it survives
+ *  restarts (one selection = the standing default). */
+export declare const liveYolo: {
+    on: boolean;
+};
 export declare function makeApproval(cfg: HmhConfig, yes: boolean, sharedRl?: readline.Interface): LoopApproval;
 export interface RunnerEvents {
     onLine?(line: string): void;

package/dist/runner.js

@@ -187,12 +187,18 @@ export function matchesRule(rules, toolName, args) {
         }
     });
 }
+/** Live unattended-mode override (2026-09-25 user request: "YOLO 需要即时
+ *  生效"). Flipping this applies at the VERY NEXT approval ask of any running
+ *  task - not only from the next session. The web /yolo command and the TUI
+ *  /yolo toggle both write it AND persist via patchConfig, so it survives
+ *  restarts (one selection = the standing default). */
+export const liveYolo = { on: false };
 export function makeApproval(cfg, yes, sharedRl) {
     const t = strings(cfg.locale ?? 'zh');
     const home = homeDir();
     return {
         async ask(toolName, args) {
-            if (yes || cfg.approval === 'auto')
+            if (yes || cfg.approval === 'auto' || liveYolo.on)
                 return true;
             // Persistent rules: patterns the user previously approved are auto-passed
             if (matchesRule(loadApprovedRules(home), toolName, args))
@@ -307,8 +313,10 @@ export async function runAgentTask(opts) {
     // YOLO fix: when yes=true the caller's approvalAsk (TUI dialog, web remote
     // gate) must NOT override the auto-approve gate - it used to take
     // precedence unconditionally, so /yolo was cosmetic (user-reported).
+    // 2026-09-25: the live toggle also gates a caller-supplied approvalAsk -
+    // the web remote gate is bypassed the moment /yolo goes on, mid-run too.
     const approval = (opts.approvalAsk && !opts.yes)
-        ? { ask: opts.approvalAsk }
+        ? { ask: async (name, args) => (liveYolo.on ? true : opts.approvalAsk(name, args)) }
         : makeApproval(cfg, opts.yes === true);
     spawnBase.current = {
         provider: resolveProvider(cfg, 'chat'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hmharness/agent",
-  "version": "0.14.19",
+  "version": "0.14.20",
   "description": "hmharness agent execution layer: base tools, system prompt, sub-agent spawn, and the shared task runner that frontends (cli, web) drive.",
   "type": "module",
   "main": "dist/index.js",