@kaoruisaac/pedelec 0.4.11 → 0.4.12

package/README.md

@@ -355,7 +355,7 @@ const value = JSON.parse(result.stdout);
 
 The default timeout is 60 seconds; `timeoutMs` must be a positive integer. The return value is the raw `DenoRunOutput` shape: `exitCode`, `stdout`, `stderr`, `stdoutTruncated`, and `stderrTruncated`. A non-zero `exitCode` still resolves normally. The application parses `stdout` when it wants a function-like return value. Check truncation flags before relying on output; an oversized browser response fails with `WORKSPACE_RUN_OUTPUT_TOO_LARGE`.
 
-`workspace.run()` has read and write access to the Workspace, but no network, host environment, subprocess execution, FFI, or `sys` permission. The existing no-remote, cached-only, and no-npm runtime restrictions still apply. This is a direct deterministic capability for an approved Web application to read and modify the opened Workspace; it is not unrestricted host code execution and is not mediated by an Agent.
+By default, `workspace.run()` has read and write access to the Workspace, but no network, host environment, subprocess execution, FFI, or `sys` permission. In Sandbox, the existing no-remote, cached-only, and no-npm runtime restrictions still apply. This default mode is a direct capability for an approved Web application and is not mediated by an Agent.
 
 Multiple Sessions, Agent/provider operations, and `workspace.run()` executions may operate concurrently in the same Workspace. A second turn on the same Session is still rejected while that Session is busy. Pedelec does not provide filesystem-level locking, snapshots, transactions, or conflict resolution between concurrent Workspace actors. Applications are responsible for coordinating shared file access when required.
 
@@ -482,10 +482,12 @@ const full = await privileged.createSession({ runtimeFullAccess: true });
 
 Review the Extension permissions before creating sessions. An Instance requesting Full Access cannot create any session with only the Agent Sessions grant, including a Sandbox session. A standard Instance cannot request a Full Access session, even if another Instance on the same Origin has permission. Ordinary Origin approval never substitutes for the Full Access grant; the Popup offers an additional permission review with Full Access unchecked by default. `getApprovalStatus()` only reads status and does not open that review.
 
-The Thread mode is fixed at creation and preserved on resume. Instances on the same Origin and Threads in the same Workspace retain their own requested modes. `workspace.run()` always stays Sandbox, and Provider sandbox settings are unchanged. Full Access changes the TypeScript Runtime's OS permissions only. Revoking the Full Access grant rejects subsequent high-privilege execution and attempts to cancel affected running processes; unrelated Origins retain their grants.
+The Thread mode is fixed at creation and preserved on resume. Instances on the same Origin and Threads in the same Workspace retain their own requested modes. `workspace.run()` independently defaults to Sandbox. With a Full Instance and both Extension grants, `workspace.run(script, { runtimeFullAccess: true })` selects Full Access for that run only; no Session is required. Provider sandbox settings are unchanged. Full Access changes the TypeScript Runtime's OS permissions only. Revoking the Full Access grant rejects subsequent high-privilege execution and attempts to cancel affected running processes; unrelated Origins retain their grants.
 
 Upgrade the SDK, Extension, and Desktop together when using Full Access. Missing mode acknowledgment is an error, never a successful downgrade. See [Error Codes](https://kaoruisaac.github.io/pedelec/reference/error-codes/) for authorization and protocol failures.
 
 ## Runtime compatibility
 
 New code uses `defineRuntimeModule`, `RuntimeModuleDefinition`, and `runtimeModules`. `defineDenoModule`, `DenoModuleDefinition`, and `denoModules` remain supported deprecated aliases. Never pass both module fields in one options object (`INVALID_INPUT`). `pedelec-ts-runtime --thread-id <id> run scripts/task.ts` and stdin `run -` are the standard CLI; `pedelec-deno` is a legal legacy alias with identical behavior. Actual `Deno.*` APIs, `DENO_DIR`, Deno flags, and `DENO_*` error codes retain their existing meanings.
+
+A Full Access Workspace run uses the same host permissions as a Full Access Session, including network, host environment, subprocesses and files outside the Workspace. Revoking Full Runtime Access cancels affected running Full Access executions. A standard Instance cannot request it. Older peers may omit the Sandbox acknowledgment, but a Full Access request fails unless the connected Extension and Desktop confirm the requested mode.

package/dist/index.d.ts

@@ -138,6 +138,7 @@ export type SerializableSkillsManifest = {
 };
 export type WorkspaceRunOptions = {
     timeoutMs?: number;
+    runtimeFullAccess?: boolean;
     runtimeModules?: readonly RuntimeModuleDefinition[];
     /** @deprecated Use runtimeModules. */
     denoModules?: readonly DenoModuleDefinition[];
@@ -403,6 +404,8 @@ export declare class Pedelec {
     private readonly channelId;
     private readonly bridgeTimeoutMs;
     private readonly runtimeFullAccess;
+    /** @internal */
+    get runtimeFullAccessInternal(): boolean;
     private readonly pendingRequests;
     private readonly sessions;
     private readonly lastSeqBySession;

package/dist/index.js

@@ -493,7 +493,12 @@ export class PedelecWorkspace {
             return Promise.reject(makeError("INVALID_INPUT", "timeoutMs must be a positive integer"));
         }
         let modules;
+        let runtimeFullAccess;
         try {
+            runtimeFullAccess = normalizeRuntimeFullAccess(options.runtimeFullAccess);
+            if (runtimeFullAccess && !this.client.runtimeFullAccessInternal) {
+                throw makeError("INVALID_INPUT", "Workspace runtimeFullAccess requires an Instance with runtimeFullAccess enabled");
+            }
             modules = normalizeWorkspaceDenoModules(resolveRuntimeModules(options));
         }
         catch (error) {
@@ -518,9 +523,10 @@ export class PedelecWorkspace {
             return this.client.requestWithOptions("workspace_run", {
                 workspaceId: this.workspaceId,
                 script,
+                ...(options.runtimeFullAccess === undefined ? {} : { runtimeFullAccess }),
                 ...(timeoutMs === undefined ? {} : { timeoutMs }),
                 ...(modules.length === 0 ? {} : { denoModules: modules.map(({ name }) => name) }),
-            }, { timeoutMs: null }).then(normalizeWorkspaceRunResponse);
+            }, { timeoutMs: null }).then((value) => normalizeWorkspaceRunResponse(value, runtimeFullAccess));
         };
         return run();
     }
@@ -551,6 +557,8 @@ export class Pedelec {
     channelId;
     bridgeTimeoutMs;
     runtimeFullAccess;
+    /** @internal */
+    get runtimeFullAccessInternal() { return this.runtimeFullAccess; }
     pendingRequests = new Map();
     sessions = new Map();
     lastSeqBySession = new Map();
@@ -2131,12 +2139,17 @@ function normalizeWorkspaceDenoModulePrepareResponse(value, requestedNames) {
     }
     return value.missingModuleNames;
 }
-function normalizeWorkspaceRunResponse(value) {
+function normalizeWorkspaceRunResponse(value, runtimeFullAccess) {
     if (!isPlainObject(value) || !Number.isInteger(value.exitCode) || typeof value.stdout !== "string" ||
         typeof value.stderr !== "string" || typeof value.stdoutTruncated !== "boolean" ||
         typeof value.stderrTruncated !== "boolean") {
         throw makeError("SDK_PROTOCOL_ERROR", "workspace_run response had an invalid shape");
     }
+    if ((runtimeFullAccess && value.runtimeFullAccessApplied !== true) ||
+        (!runtimeFullAccess && value.runtimeFullAccessApplied === true) ||
+        (value.runtimeFullAccessApplied !== undefined && typeof value.runtimeFullAccessApplied !== "boolean")) {
+        throw makeError("SDK_PROTOCOL_ERROR", "The connected Pedelec Extension/Desktop did not confirm the requested Runtime mode");
+    }
     return {
         exitCode: value.exitCode,
         stdout: value.stdout,

package/dist/version.generated.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "0.4.11";
+export declare const SDK_VERSION = "0.4.12";

package/dist/version.generated.js

@@ -1,2 +1,2 @@
 // Generated from sdk/package.json. Do not edit manually.
-export const SDK_VERSION = "0.4.11";
+export const SDK_VERSION = "0.4.12";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kaoruisaac/pedelec",
-  "version": "0.4.11",
+  "version": "0.4.12",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -49,7 +49,7 @@
   },
   "devDependencies": {
     "@types/node": "24.13.6",
-    "vite": "8.3.0",
-    "vitest": "4.1.11"
+    "vite": "^8.3.5",
+    "vitest": "^4.1.12"
   }
 }