@instaclaw/dispatch 0.1.1 → 0.2.0

package/dist/index.js

@@ -9,7 +9,7 @@
 import { loadConfig, saveConfig, getConfigPath } from "./config.js";
 import { checkPermissions, printPermissionGuide, runPermissionTest } from "./permissions.js";
 import { connect, disconnect } from "./connection.js";
-import { closeSupervisor } from "./supervisor.js";
+import { closeSupervisor, setMode } from "./supervisor.js";
 import readline from "readline";
 import os from "os";
 async function main() {
@@ -55,7 +55,7 @@ async function main() {
             gatewayToken: args.token,
             vmAddress: args.vm,
             port: args.port || 8765,
-            mode: "supervised",
+            mode: args.autonomous ? "autonomous" : "supervised",
         };
         saveConfig(config);
     }
@@ -65,6 +65,10 @@ async function main() {
         saveConfig(config);
         console.log(`  Config saved to ${getConfigPath()}\n`);
     }
+    // Set supervisor mode
+    if (config.mode === "autonomous") {
+        setMode("autonomous");
+    }
     console.log(`  VM:   ${config.vmAddress}:${config.port}`);
     console.log(`  Mode: ${config.mode}`);
     console.log(`  Token: ${config.gatewayToken.substring(0, 8)}...\n`);
@@ -77,8 +81,14 @@ async function main() {
         rejectUnauthorized: false, // Accept self-signed (TOFU)
         certFingerprint: config.certFingerprint,
         onConnect: () => {
-            console.log(`\n  Dispatch mode: SUPERVISED`);
-            console.log(`  Screenshots auto-approved. Actions require [Enter] to confirm.`);
+            if (config.mode === "autonomous") {
+                console.log(`\n  Dispatch mode: AUTONOMOUS`);
+                console.log(`  All actions auto-approved (dangerous actions still require confirmation).`);
+            }
+            else {
+                console.log(`\n  Dispatch mode: SUPERVISED`);
+                console.log(`  Screenshots auto-approved. Actions require [Enter] to confirm.`);
+            }
             console.log(`  Press Ctrl+C to disconnect.\n`);
         },
         onDisconnect: () => {
@@ -133,6 +143,9 @@ function parseArgs() {
         else if ((args[i] === "--port" || args[i] === "-p") && args[i + 1]) {
             result.port = parseInt(args[++i], 10);
         }
+        else if (args[i] === "--autonomous" || args[i] === "--auto") {
+            result.autonomous = true;
+        }
     }
     return result;
 }

package/dist/supervisor.d.ts

@@ -1,3 +1,4 @@
 import type { DispatchCommand } from "./types.js";
+export declare function setMode(m: "supervised" | "autonomous"): void;
 export declare function requestApproval(command: DispatchCommand): Promise<boolean>;
 export declare function closeSupervisor(): void;

package/dist/supervisor.js

@@ -1,9 +1,25 @@
 /**
- * Supervisor — prompts user for approval before executing commands.
- * Screenshots are auto-approved. All other actions require Enter to proceed.
+ * Supervisor — controls whether commands need user approval.
+ *
+ * Modes:
+ *   supervised (default) — all non-passive commands require Enter to approve
+ *   autonomous — auto-approves most commands, but ALWAYS prompts for dangerous ones
  */
 import readline from "readline";
 const AUTO_APPROVE_TYPES = new Set(["screenshot", "windows", "status"]);
+// Patterns that indicate dangerous actions — always require confirmation even in autonomous mode
+const DANGEROUS_TEXT_PATTERNS = [
+    /password/i, /passwd/i, /secret/i, /credential/i,
+    /delete/i, /remove/i, /destroy/i, /format/i, /erase/i,
+    /purchase/i, /submit.*order/i, /confirm.*payment/i, /buy\s/i,
+    /transfer.*fund/i, /send.*money/i, /withdraw/i,
+    /sudo\s/i, /rm\s+-rf/i, /shutdown/i, /reboot/i,
+];
+const DANGEROUS_KEY_COMBOS = new Set([
+    "cmd+delete", "cmd+shift+delete", "ctrl+delete",
+    "cmd+q", "alt+f4",
+]);
+let mode = "supervised";
 const isTTY = process.stdin.isTTY ?? false;
 let rl = null;
 if (isTTY) {
@@ -12,18 +28,36 @@ if (isTTY) {
         output: process.stdout,
     });
 }
+export function setMode(m) {
+    mode = m;
+}
 export async function requestApproval(command) {
-    // Auto-approve passive commands
+    // Always auto-approve passive commands
     if (AUTO_APPROVE_TYPES.has(command.type)) {
         return true;
     }
     const desc = formatCommand(command);
-    console.log(`\n  Agent wants to: ${desc}`);
-    // Non-interactive mode (no TTY) — auto-approve with log
+    const dangerous = isDangerous(command);
+    // Non-interactive (no TTY) — auto-approve everything (can't prompt)
     if (!rl) {
+        if (dangerous) {
+            console.log(`\n  BLOCKED (dangerous, no TTY): ${desc}`);
+            return false;
+        }
+        console.log(`\n  Agent wants to: ${desc}`);
         console.log("  Auto-approved (non-interactive mode)");
         return true;
     }
+    // Autonomous mode — auto-approve non-dangerous actions
+    if (mode === "autonomous" && !dangerous) {
+        console.log(`\n  Agent: ${desc}`);
+        return true;
+    }
+    // Supervised mode OR dangerous action in autonomous mode — prompt user
+    console.log(`\n  Agent wants to: ${desc}`);
+    if (dangerous) {
+        console.log("  ⚠️  DANGEROUS ACTION — requires confirmation");
+    }
     return new Promise((resolve) => {
         rl.question("  [Enter] to approve, [n] to deny: ", (answer) => {
             const denied = answer.trim().toLowerCase() === "n";
@@ -34,6 +68,18 @@ export async function requestApproval(command) {
         });
     });
 }
+function isDangerous(cmd) {
+    const p = cmd.params;
+    if (cmd.type === "type") {
+        const text = String(p.text || "");
+        return DANGEROUS_TEXT_PATTERNS.some((pat) => pat.test(text));
+    }
+    if (cmd.type === "press") {
+        const key = String(p.key || "").toLowerCase();
+        return DANGEROUS_KEY_COMBOS.has(key);
+    }
+    return false;
+}
 function formatCommand(cmd) {
     const p = cmd.params;
     switch (cmd.type) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@instaclaw/dispatch",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Let your InstaClaw AI agent control your computer — screenshots, clicks, typing, and more via a secure WebSocket relay",
   "bin": {
     "instaclaw-dispatch": "./dist/index.js"