@letta-ai/letta-code 0.27.5 → 0.27.6

package/letta.js

@@ -5077,7 +5077,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@letta-ai/letta-code",
-    version: "0.27.5",
+    version: "0.27.6",
     description: "Letta Code is a CLI tool for interacting with stateful Letta agents from the terminal.",
     type: "module",
     packageManager: "bun@1.3.0",
@@ -5272,6 +5272,7 @@ var init_request = __esm(() => {
 var exports_conversations = {};
 __export(exports_conversations, {
   updateConversationDescription: () => updateConversationDescription,
+  summarizeConversation: () => summarizeConversation,
   forkConversation: () => forkConversation
 });
 async function forkConversation(conversationId, options = {}) {
@@ -5284,12 +5285,15 @@ async function forkConversation(conversationId, options = {}) {
 async function updateConversationDescription(conversationId, body) {
   return apiRequest("PATCH", `/v1/conversations/${encodeURIComponent(conversationId)}`, body);
 }
+async function summarizeConversation(conversationId, body, options = {}) {
+  return apiRequest("POST", `/v1/conversations/${encodeURIComponent(conversationId)}/summarize`, body, options);
+}
 var init_conversations2 = __esm(() => {
   init_request();
 });
 
 // src/constants.ts
-var DEFAULT_SUMMARIZATION_MODEL = "letta/auto", DEFAULT_AGENT_NAME = "Letta Code", INTERRUPTED_BY_USER = "Interrupted by user", TURN_DID_NOT_COMPLETE = "Turn did not complete", SYSTEM_REMINDER_TAG = "system-reminder", SYSTEM_REMINDER_OPEN, SYSTEM_REMINDER_CLOSE, SYSTEM_ALERT_TAG = "system-alert", SYSTEM_ALERT_OPEN, SYSTEM_ALERT_CLOSE, COMPACTION_SUMMARY_HEADER = "(Earlier messages in this conversation have been compacted to free up context, summarized below)", TOKEN_DISPLAY_THRESHOLD = 100, ELAPSED_DISPLAY_THRESHOLD_MS;
+var DEFAULT_SUMMARIZATION_MODEL = "letta/auto", DEFAULT_TITLE_SUMMARIZATION_MODEL = "letta/auto-fast", DEFAULT_AGENT_NAME = "Letta Code", INTERRUPTED_BY_USER = "Interrupted by user", TURN_DID_NOT_COMPLETE = "Turn did not complete", SYSTEM_REMINDER_TAG = "system-reminder", SYSTEM_REMINDER_OPEN, SYSTEM_REMINDER_CLOSE, SYSTEM_ALERT_TAG = "system-alert", SYSTEM_ALERT_OPEN, SYSTEM_ALERT_CLOSE, COMPACTION_SUMMARY_HEADER = "(Earlier messages in this conversation have been compacted to free up context, summarized below)", TOKEN_DISPLAY_THRESHOLD = 100, ELAPSED_DISPLAY_THRESHOLD_MS;
 var init_constants = __esm(() => {
   SYSTEM_REMINDER_OPEN = `<${SYSTEM_REMINDER_TAG}>`;
   SYSTEM_REMINDER_CLOSE = `</${SYSTEM_REMINDER_TAG}>`;
@@ -5322,63 +5326,28 @@ function normalizeConversationTitle(value) {
   }
   return normalized.slice(0, CONVERSATION_TITLE_MAX_LENGTH);
 }
-function extractAssistantText(content) {
-  if (typeof content === "string") {
-    return content;
-  }
-  if (Array.isArray(content)) {
-    let collected = "";
-    for (const part of content) {
-      if (part && typeof part === "object" && "text" in part && typeof part.text === "string") {
-        collected += part.text;
-      }
-    }
-    return collected;
+async function generateConversationTitleFromSummary(conversationId, messages, model = DEFAULT_TITLE_SUMMARIZATION_MODEL) {
+  if (messages.length === 0) {
+    return null;
   }
-  return "";
-}
-async function generateConversationTitleFromFork(client, conversationId) {
-  let forkId = null;
   const abortController = new AbortController;
   const timeoutId = setTimeout(() => abortController.abort(), CONVERSATION_TITLE_TIMEOUT_MS);
   try {
-    const fork = await forkConversation(conversationId, { hidden: true });
-    forkId = fork.id;
-    const stream = await client.conversations.messages.create(forkId, {
-      messages: [
-        {
-          role: "user",
-          content: CONVERSATION_TITLE_USER_PROMPT
-        }
-      ],
-      override_model: DEFAULT_SUMMARIZATION_MODEL,
-      override_system: CONVERSATION_TITLE_SYSTEM_PROMPT,
-      max_steps: 1,
-      streaming: true,
-      stream_tokens: false,
-      include_pings: false
-    }, { signal: abortController.signal });
-    let titleText = "";
-    for await (const chunk of stream) {
-      if (chunk && typeof chunk === "object" && "message_type" in chunk && chunk.message_type === "assistant_message") {
-        titleText += extractAssistantText(chunk.content);
-      }
-    }
-    return normalizeConversationTitle(titleText);
+    const response = await summarizeConversation(conversationId, {
+      prompt: CONVERSATION_TITLE_SYSTEM_PROMPT,
+      messages,
+      model
+    }, {
+      signal: abortController.signal
+    });
+    return normalizeConversationTitle(response.summary);
   } catch (err) {
     if (isDebugEnabled()) {
-      console.error("[DEBUG] generateConversationTitleFromFork failed:", err);
+      console.error("[DEBUG] generateConversationTitleFromSummary failed:", err);
     }
     return null;
   } finally {
     clearTimeout(timeoutId);
-    if (forkId) {
-      client.conversations.delete(forkId).catch((err) => {
-        if (isDebugEnabled()) {
-          console.error("[DEBUG] failed to delete title-fork conversation:", err);
-        }
-      });
-    }
   }
 }
 var CONVERSATION_TITLE_MAX_LENGTH = 100, CONVERSATION_TITLE_TIMEOUT_MS = 30000, CONVERSATION_TITLE_SYSTEM_PROMPT = `You are a conversation title generator.
@@ -5389,7 +5358,7 @@ Rules:
 - describe the actual topic, not the mood
 - no quotes, markdown, prefixes, or trailing punctuation
 - never call any tools — reply with plain text only
-- avoid generic titles like "New conversation" or "Help request"`, CONVERSATION_TITLE_USER_PROMPT = "Based on the conversation above, output a short title (2-7 words) describing the topic. Reply with ONLY the title text — no quotes, no tools, no preamble.";
+- avoid generic titles like "New conversation" or "Help request"`;
 var init_conversation_title = __esm(() => {
   init_conversations2();
   init_constants();
@@ -161725,6 +161694,104 @@ function disableExtensionsForProcess() {
 }
 var LETTA_DISABLE_EXTENSIONS_ENV = "LETTA_DISABLE_EXTENSIONS";
 
+// src/extensions/permission-registry.ts
+function getMutableExtensionPermissionsRegistry() {
+  const global2 = globalThis;
+  if (!global2[EXTENSION_PERMISSIONS_KEY]) {
+    global2[EXTENSION_PERMISSIONS_KEY] = new Map;
+  }
+  return global2[EXTENSION_PERMISSIONS_KEY];
+}
+function getAvailableExtensionPermissionsRegistry() {
+  if (areExtensionsDisabled())
+    return new Map;
+  return new Map(Array.from(getMutableExtensionPermissionsRegistry().entries()).filter(([, permission]) => {
+    if (permission.activationSignal.aborted)
+      return false;
+    try {
+      return permission.isAvailable();
+    } catch {
+      return false;
+    }
+  }));
+}
+function registerExtensionPermission(permission) {
+  if (areExtensionsDisabled())
+    return;
+  getMutableExtensionPermissionsRegistry().set(permission.id, permission);
+}
+function unregisterExtensionPermission(id2, owner) {
+  const registry2 = getMutableExtensionPermissionsRegistry();
+  const existing = registry2.get(id2);
+  if (existing?.owner?.id === owner.id) {
+    registry2.delete(id2);
+  }
+}
+function unregisterExtensionPermissionsForOwner(owner) {
+  const registry2 = getMutableExtensionPermissionsRegistry();
+  for (const [id2, permission] of registry2.entries()) {
+    if (permission.owner?.id === owner.id) {
+      registry2.delete(id2);
+    }
+  }
+}
+function clearExtensionPermissions() {
+  getMutableExtensionPermissionsRegistry().clear();
+}
+function getExtensionPermissionDefinition(id2, registry2 = getMutableExtensionPermissionsRegistry()) {
+  if (areExtensionsDisabled())
+    return;
+  return registry2.get(id2);
+}
+function normalizePermissionResult(result) {
+  if (result === undefined)
+    return;
+  if (result.decision === "allow" || result.decision === "ask" || result.decision === "deny") {
+    return result;
+  }
+  return;
+}
+function composePermissionDecision(decisions) {
+  return decisions.find((result) => result.decision === "deny") ?? decisions.find((result) => result.decision === "ask") ?? decisions.find((result) => result.decision === "allow");
+}
+async function checkExtensionPermissions(event2, registry2 = getAvailableExtensionPermissionsRegistry()) {
+  if (areExtensionsDisabled())
+    return;
+  const decisions = [];
+  for (const permission of registry2.values()) {
+    if (permission.activationSignal.aborted)
+      continue;
+    let rawResult;
+    try {
+      if (!permission.isAvailable())
+        continue;
+      rawResult = await permission.check(event2, {
+        getContext: permission.getContext,
+        signal: permission.activationSignal
+      });
+    } catch (error54) {
+      return {
+        decision: "deny",
+        matchedRule: `extension permission:${permission.id}`,
+        reason: `Extension permission '${permission.id}' failed: ${error54 instanceof Error ? error54.message : String(error54)}`
+      };
+    }
+    const result = normalizePermissionResult(rawResult);
+    if (!result)
+      continue;
+    decisions.push({
+      decision: result.decision,
+      matchedRule: `extension permission:${permission.id}`,
+      reason: result.reason
+    });
+  }
+  return composePermissionDecision(decisions);
+}
+var EXTENSION_PERMISSIONS_KEY;
+var init_permission_registry = __esm(() => {
+  EXTENSION_PERMISSIONS_KEY = Symbol.for("@letta/extensionPermissions");
+});
+
 // src/extensions/tool-registry.ts
 function getMutableExtensionToolsRegistry() {
   const global2 = globalThis;
@@ -193099,8 +193166,28 @@ function getDefaultDecision(toolName, toolArgs) {
   }
   return "ask";
 }
-async function checkPermissionWithHooks(toolName, toolArgs, permissions, workingDirectory = process.cwd(), modeState, agentId) {
-  const result = checkPermission(toolName, toolArgs, permissions, workingDirectory, modeState, agentId);
+async function checkPermissionWithHooks(toolName, toolArgs, permissions, workingDirectory = process.cwd(), modeState, agentId, extensionPermissions = getAvailableExtensionPermissionsRegistry(), extensionPermissionOptions = {}) {
+  let result = checkPermission(toolName, toolArgs, permissions, workingDirectory, modeState, agentId);
+  if (result.decision !== "deny") {
+    const extensionDecision = await checkExtensionPermissions({
+      agentId: agentId ?? null,
+      conversationId: extensionPermissionOptions.conversationId ?? null,
+      toolCallId: extensionPermissionOptions.toolCallId ?? null,
+      toolName,
+      args: toolArgs,
+      cwd: workingDirectory,
+      workingDirectory,
+      permissionMode: modeState?.mode ?? permissionMode.getMode(),
+      phase: extensionPermissionOptions.phase ?? "approval"
+    }, extensionPermissions);
+    if (extensionDecision) {
+      result = {
+        decision: extensionDecision.decision,
+        matchedRule: extensionDecision.matchedRule,
+        reason: extensionDecision.reason ?? `Matched ${extensionDecision.matchedRule}`
+      };
+    }
+  }
   if (result.decision === "ask") {
     const hookResult = await runPermissionRequestHooks(toolName, toolArgs, "ask", undefined, workingDirectory, agentId);
     if (hookResult.blocked) {
@@ -193126,6 +193213,7 @@ async function checkPermissionWithHooks(toolName, toolArgs, permissions, working
 var WORKING_DIRECTORY_TOOLS_V2, WORKING_DIRECTORY_TOOLS_V1, READ_ONLY_SHELL_TOOLS, FILE_TOOLS_V2, FILE_TOOLS_V1, SAFE_AUTO_APPROVE_SUBAGENT_TYPES;
 var init_checker = __esm(() => {
   init_context();
+  init_permission_registry();
   init_tool_registry();
   init_hooks2();
   init_canonical();
@@ -195235,6 +195323,7 @@ function capturePreparedToolExecutionContext(snapshot, options3) {
     externalTools: filterExternalToolsByClientAllowlist(snapshot.externalTools, options3?.clientToolAllowlist),
     externalExecutor: snapshot.externalExecutor,
     extensionEvents: options3?.extensionEvents ?? snapshot.extensionEvents,
+    extensionPermissions: snapshot.extensionPermissions,
     extensionTools: filterExtensionToolsByClientAllowlist(snapshot.extensionTools, options3?.clientToolAllowlist),
     workingDirectory: runtimeContext.workingDirectory ?? getCurrentWorkingDirectory(),
     runtimeContext,
@@ -195253,6 +195342,7 @@ function captureToolExecutionContext(workingDirectory = getCurrentWorkingDirecto
     toolRegistry: new Map(toolRegistry),
     externalTools: new Map(getExternalToolsRegistry()),
     externalExecutor: getExternalToolExecutor(),
+    extensionPermissions: getAvailableExtensionPermissionsRegistry(),
     extensionTools: getAvailableExtensionToolsRegistry()
   }, {
     workingDirectory,
@@ -195268,6 +195358,7 @@ async function prepareCurrentToolExecutionContext(options3) {
     externalTools: new Map(getExternalToolsRegistry()),
     externalExecutor: getExternalToolExecutor(),
     extensionEvents: options3?.extensionEvents,
+    extensionPermissions: getAvailableExtensionPermissionsRegistry(),
     extensionTools: getAvailableExtensionToolsRegistry()
   }, options3);
 }
@@ -195278,6 +195369,7 @@ async function prepareToolExecutionContextForSpecificTools(toolNames, options3)
     externalTools: new Map(getExternalToolsRegistry()),
     externalExecutor: getExternalToolExecutor(),
     extensionEvents: options3?.extensionEvents,
+    extensionPermissions: getAvailableExtensionPermissionsRegistry(),
     extensionTools: getAvailableExtensionToolsRegistry()
   }, options3);
 }
@@ -195288,6 +195380,7 @@ async function prepareToolExecutionContextForModel(modelIdentifier, options3) {
     externalTools: new Map(getExternalToolsRegistry()),
     externalExecutor: getExternalToolExecutor(),
     extensionEvents: options3?.extensionEvents,
+    extensionPermissions: getAvailableExtensionPermissionsRegistry(),
     extensionTools: getAvailableExtensionToolsRegistry()
   }, options3);
 }
@@ -195302,15 +195395,38 @@ function isExtensionToolParallelSafeForContext(toolName, contextId) {
   const context2 = contextId ? getExecutionContextById(contextId) : undefined;
   return isExtensionToolParallelSafe(toolName, context2?.extensionTools ?? getAvailableExtensionToolsRegistry());
 }
-async function checkToolPermission(toolName, toolArgs, workingDirectory = process.cwd(), permissionModeStateArg, agentIdArg) {
+async function checkExtensionPermissionForContext(options3) {
+  const runtimeContext = options3.context?.runtimeContext;
+  const permissionModeState = options3.context?.permissionModeState;
+  return checkExtensionPermissions({
+    agentId: runtimeContext?.agentId ?? null,
+    conversationId: runtimeContext?.conversationId ?? null,
+    toolCallId: options3.toolCallId ?? null,
+    toolName: options3.toolName,
+    args: options3.args,
+    cwd: options3.workingDirectory,
+    workingDirectory: options3.workingDirectory,
+    permissionMode: permissionModeState?.mode ?? runtimeContext?.permissionMode ?? null,
+    phase: options3.phase
+  }, options3.context?.extensionPermissions ?? getAvailableExtensionPermissionsRegistry());
+}
+async function checkToolPermission(toolName, toolArgs, workingDirectory, permissionModeStateArg, agentIdArg, toolContextIdArg, toolCallIdArg) {
   const { checkPermissionWithHooks: checkPermissionWithHooks2 } = await Promise.resolve().then(() => (init_checker(), exports_checker));
   const { loadPermissions: loadPermissions2 } = await Promise.resolve().then(() => (init_loader2(), exports_loader));
-  const permissions = await loadPermissions2(workingDirectory);
+  const context2 = toolContextIdArg ? getExecutionContextById(toolContextIdArg) : undefined;
+  const effectiveWorkingDirectory = workingDirectory ?? context2?.workingDirectory ?? process.cwd();
+  const effectivePermissionModeState = permissionModeStateArg ?? context2?.permissionModeState;
+  const effectiveAgentId = agentIdArg ?? context2?.runtimeContext.agentId ?? undefined;
+  const permissions = await loadPermissions2(effectiveWorkingDirectory);
   return runWithRuntimeContext({
-    ...agentIdArg ? { agentId: agentIdArg } : {},
-    workingDirectory,
-    permissionMode: permissionModeStateArg?.mode
-  }, () => checkPermissionWithHooks2(toolName, toolArgs, permissions, workingDirectory, permissionModeStateArg, agentIdArg));
+    ...effectiveAgentId ? { agentId: effectiveAgentId } : {},
+    workingDirectory: effectiveWorkingDirectory,
+    permissionMode: effectivePermissionModeState?.mode
+  }, () => checkPermissionWithHooks2(toolName, toolArgs, permissions, effectiveWorkingDirectory, effectivePermissionModeState, effectiveAgentId, context2?.extensionPermissions ?? getAvailableExtensionPermissionsRegistry(), {
+    conversationId: context2?.runtimeContext.conversationId ?? null,
+    phase: "approval",
+    toolCallId: toolCallIdArg ?? null
+  }));
 }
 async function savePermissionRule2(rule, ruleType, scope, workingDirectory = process.cwd()) {
   if (scope === "session") {
@@ -195687,9 +195803,12 @@ function cloneToolArgsForExtensionEvent(args) {
     return { ...args };
   }
 }
-function createExtensionDenialToolResult(denial) {
+function createExtensionPermissionToolResult(decision) {
+  const isApprovalRequest = decision.decision === "ask";
+  const action3 = isApprovalRequest ? "blocked" : "denied";
+  const fallbackReason = isApprovalRequest ? "Approval requested but cannot reopen during execution." : "No reason given.";
   return {
-    toolReturn: `Error: Tool execution denied by extension. ${denial.reason ?? "No reason given."}`,
+    toolReturn: `Error: Tool execution ${action3} by ${decision.matchedRule}. ${decision.reason ?? fallbackReason}`,
     status: "error"
   };
 }
@@ -195704,21 +195823,12 @@ async function emitToolStartEvent(options3) {
     toolName: options3.toolName,
     args: cloneToolArgsForExtensionEvent(options3.args)
   };
-  let emitResult;
   try {
-    emitResult = await emitExtensionEvent(options3.events, "tool_start", event2);
+    await emitExtensionEvent(options3.events, "tool_start", event2);
   } catch (error54) {
     debugLog("extensions", "tool_start event failed", error54);
     return { args: options3.args };
   }
-  const firstDenial = emitResult?.results?.find((r2) => typeof r2 === "object" && r2 !== null && r2.deny === true);
-  if (firstDenial) {
-    debugLog("extensions", `tool_start denied: ${firstDenial.reason ?? "no reason given"}`);
-    return {
-      args: isToolStartArgs(event2.args) ? event2.args : options3.args,
-      denied: { reason: firstDenial.reason }
-    };
-  }
   return { args: isToolStartArgs(event2.args) ? event2.args : options3.args };
 }
 async function executeExtensionTool(toolName, tool2, args, executionScope, options3) {
@@ -195858,15 +195968,25 @@ async function executeTool(name, args, options3) {
         status: "error"
       };
     }
-    const { args: eventArgs2, denied: extDenial2 } = await emitToolStartEvent({
+    const { args: eventArgs2 } = await emitToolStartEvent({
       args,
       events: extensionEvents,
       executionScope,
       toolCallId: options3?.toolCallId,
       toolName: name
     });
-    if (extDenial2) {
-      return createExtensionDenialToolResult(extDenial2);
+    const permissionDecision2 = await checkExtensionPermissionForContext({
+      args: eventArgs2,
+      context: context2,
+      phase: "execution",
+      toolCallId: options3?.toolCallId,
+      toolName: name,
+      workingDirectory
+    });
+    if (permissionDecision2?.decision !== undefined) {
+      if (permissionDecision2.decision !== "allow") {
+        return createExtensionPermissionToolResult(permissionDecision2);
+      }
     }
     return executeExtensionTool(name, extensionTool, eventArgs2, executionScope, {
       signal: options3?.signal,
@@ -195877,15 +195997,25 @@ async function executeTool(name, args, options3) {
     });
   }
   if (activeExternalTools.has(name)) {
-    const { args: eventArgs2, denied: extDenial2 } = await emitToolStartEvent({
+    const { args: eventArgs2 } = await emitToolStartEvent({
       args,
       events: extensionEvents,
       executionScope,
       toolCallId: options3?.toolCallId,
       toolName: name
     });
-    if (extDenial2) {
-      return createExtensionDenialToolResult(extDenial2);
+    const permissionDecision2 = await checkExtensionPermissionForContext({
+      args: eventArgs2,
+      context: context2,
+      phase: "execution",
+      toolCallId: options3?.toolCallId,
+      toolName: name,
+      workingDirectory
+    });
+    if (permissionDecision2?.decision !== undefined) {
+      if (permissionDecision2.decision !== "allow") {
+        return createExtensionPermissionToolResult(permissionDecision2);
+      }
     }
     return executeExternalTool(options3?.toolCallId ?? `ext-${Date.now()}`, name, eventArgs2, activeExternalExecutor);
   }
@@ -195913,7 +196043,7 @@ async function executeTool(name, args, options3) {
       status: "error"
     };
   }
-  const { args: eventArgs, denied: extDenial } = await emitToolStartEvent({
+  const { args: eventArgs } = await emitToolStartEvent({
     args,
     events: extensionEvents,
     executionScope,
@@ -195921,8 +196051,18 @@ async function executeTool(name, args, options3) {
     toolName: internalName
   });
   args = eventArgs;
-  if (extDenial) {
-    return createExtensionDenialToolResult(extDenial);
+  const permissionDecision = await checkExtensionPermissionForContext({
+    args,
+    context: context2,
+    phase: "execution",
+    toolCallId: options3?.toolCallId,
+    toolName: internalName,
+    workingDirectory
+  });
+  if (permissionDecision?.decision !== undefined) {
+    if (permissionDecision.decision !== "allow") {
+      return createExtensionPermissionToolResult(permissionDecision);
+    }
   }
   const startTime = Date.now();
   const run = async () => {
@@ -196173,6 +196313,7 @@ var init_manager4 = __esm(async () => {
   init_registry();
   init_constants();
   init_conversation_handle();
+  init_permission_registry();
   init_tool_registry();
   init_hooks2();
   init_mode();
@@ -257157,7 +257298,7 @@ async function classifyApprovals(approvals, opts = {}) {
         continue;
       }
     }
-    const permission = await checkToolPermission(toolName, parsedArgs, opts.workingDirectory, opts.permissionModeState, opts.agentId);
+    const permission = await checkToolPermission(toolName, parsedArgs, opts.workingDirectory, opts.permissionModeState, opts.agentId, opts.toolContextId, approval.toolCallId);
     const context3 = opts.getContext ? await opts.getContext(toolName, parsedArgs, opts.workingDirectory) : null;
     let decision = permission.decision;
     if (opts.alwaysRequiresUserInput?.(toolName) && decision === "allow") {
@@ -257823,7 +257964,7 @@ function normalizeConversationDescription(value) {
   }
   return trimToWordLimit(normalized, CONVERSATION_DESCRIPTION_MAX_WORDS);
 }
-function extractAssistantText2(content) {
+function extractAssistantText(content) {
   if (typeof content === "string") {
     return content;
   }
@@ -257862,7 +258003,7 @@ async function generateConversationDescriptionFromFork(client, conversationId) {
     let descriptionText = "";
     for await (const chunk of stream5) {
       if (chunk && typeof chunk === "object" && "message_type" in chunk && chunk.message_type === "assistant_message") {
-        descriptionText += extractAssistantText2(chunk.content);
+        descriptionText += extractAssistantText(chunk.content);
       }
     }
     return normalizeConversationDescription(descriptionText);
@@ -264270,6 +264411,7 @@ function cloneExtensionCapabilities(capabilities) {
       tools: capabilities.events.tools,
       turns: capabilities.events.turns
     },
+    permissions: capabilities.permissions,
     providers: capabilities.providers,
     ui: {
       panels: capabilities.ui.panels,
@@ -264291,6 +264433,7 @@ var init_capabilities = __esm(() => {
       tools: true,
       turns: true
     },
+    permissions: true,
     providers: true,
     ui: {
       panels: true,
@@ -264306,6 +264449,7 @@ var init_capabilities = __esm(() => {
       tools: false,
       turns: false
     },
+    permissions: false,
     providers: false,
     ui: {
       panels: false,
@@ -264327,6 +264471,7 @@ function createDisabledExtensionRegistry() {
     loadedPaths: [],
     ownerAbortControllers: {},
     owners: {},
+    permissions: {},
     sources: [],
     tools: {},
     ui: {
@@ -264357,6 +264502,7 @@ function createDisabledExtensionEngine(registry2) {
   };
 }
 function createDisabledExtensionAdapter(options3) {
+  clearExtensionPermissions();
   clearExtensionTools();
   clearRegisteredPiProviders();
   let context3 = options3.initialContext;
@@ -264402,6 +264548,7 @@ function createDisabledExtensionAdapter(options3) {
 var init_disabled_extension_adapter = __esm(() => {
   init_pi_provider_extension_registry();
   init_capabilities();
+  init_permission_registry();
   init_tool_registry();
 });
 
@@ -433270,6 +433417,7 @@ function createEmptyExtensionRegistry(sources, generation, capabilities) {
     loadedPaths: [],
     ownerAbortControllers: {},
     owners: {},
+    permissions: {},
     sources,
     tools: {},
     ui: {
@@ -433305,6 +433453,7 @@ function snapshotRegistryForReaders(registry2) {
     loadedPaths: [...registry2.loadedPaths],
     ownerAbortControllers: { ...registry2.ownerAbortControllers },
     owners: { ...registry2.owners },
+    permissions: { ...registry2.permissions },
     sources: registry2.sources.map((source2) => ({
       ...source2,
       files: [...source2.files]
@@ -433526,6 +433675,25 @@ function normalizeExtensionCommand(command, owner) {
     run: command.run
   };
 }
+function validateExtensionPermissionId(id2) {
+  if (!/^[a-z0-9][a-z0-9-]*$/.test(id2)) {
+    throw new Error("Extension permission id must be a lowercase slug using letters, numbers, and hyphens");
+  }
+}
+function normalizeExtensionPermission(permission, owner) {
+  validateExtensionPermissionId(permission.id);
+  if (typeof permission.check !== "function") {
+    throw new Error(`Extension permission '${permission.id}' must include check()`);
+  }
+  return {
+    id: permission.id,
+    ...permission.description ? { description: permission.description } : {},
+    owner,
+    path: owner.path,
+    ...permission.isEnabled ? { isEnabled: permission.isEnabled } : {},
+    check: permission.check
+  };
+}
 function validateExtensionToolName(name) {
   if (!/^[a-zA-Z0-9_-]{1,64}$/.test(name)) {
     throw new Error("Extension tool name must be 1-64 characters using letters, numbers, underscores, or hyphens");
@@ -433631,6 +433799,19 @@ function createLettaExtensionApi(registry2, owner, capabilities, getClient2, get
       onChange();
     }
   };
+  const unregisterPermission = (id2) => {
+    if (!capabilities.permissions)
+      return;
+    validateExtensionPermissionId(id2);
+    if (!guardLive({ id: id2, kind: "permission" }))
+      return;
+    const existing = registry2.permissions[id2];
+    if (existing?.owner?.id === owner.id) {
+      delete registry2.permissions[id2];
+      unregisterExtensionPermission(id2, owner);
+      onChange();
+    }
+  };
   const clearPanel = (id2) => {
     if (!capabilities.ui.panels)
       return;
@@ -433827,6 +434008,40 @@ function createLettaExtensionApi(registry2, owner, capabilities, getClient2, get
       off: unregisterEvent,
       on: onEvent
     },
+    permissions: {
+      register(permission) {
+        if (!capabilities.permissions) {
+          return () => {
+            return;
+          };
+        }
+        if (!guardLive({ id: permission.id, kind: "permission" })) {
+          return () => {
+            return;
+          };
+        }
+        const normalized = normalizeExtensionPermission(permission, owner);
+        const existing = registry2.permissions[normalized.id];
+        const existingGlobal = getExtensionPermissionDefinition(normalized.id);
+        if (existing || existingGlobal) {
+          throw new Error(`Extension permission '${normalized.id}' is already registered by ${existing?.path ?? existingGlobal?.path}`);
+        }
+        registry2.permissions[normalized.id] = normalized;
+        registerExtensionPermission({
+          ...normalized,
+          activationSignal: signal,
+          getContext: getContext3,
+          isAvailable: () => {
+            if (signal.aborted)
+              return false;
+            return normalized.isEnabled?.(getContext3()) ?? true;
+          }
+        });
+        onChange();
+        return () => unregisterPermission(normalized.id);
+      },
+      unregister: unregisterPermission
+    },
     diagnostics: {
       report: reportDiagnostic
     },
@@ -434053,6 +434268,7 @@ function disposeLocalExtensions(registry2) {
   }
   for (const owner of Object.values(registry2.owners)) {
     unregisterPiProvidersForOwner(owner.id);
+    unregisterExtensionPermissionsForOwner(owner);
     unregisterExtensionToolsForOwner(owner);
   }
   clearAvailableModelsCache();
@@ -434060,6 +434276,7 @@ function disposeLocalExtensions(registry2) {
   registry2.events = {};
   registry2.ownerAbortControllers = {};
   registry2.owners = {};
+  registry2.permissions = {};
   registry2.tools = {};
   registry2.ui.panels = {};
   registry2.ui.statusOwners = {};
@@ -434164,6 +434381,7 @@ var init_extension_engine = __esm(async () => {
   init_pi_provider_extension_registry();
   init_capabilities();
   init_conversation_handle();
+  init_permission_registry();
   init_tool_registry();
   await init_message();
   ts = __toESM(require_typescript(), 1);
@@ -434446,6 +434664,7 @@ var init_extension_adapter2 = __esm(async () => {
       tools: false,
       turns: false
     },
+    permissions: false,
     providers: true,
     ui: {
       panels: false,
@@ -442568,6 +442787,7 @@ var init_headless_extension_adapter = __esm(async () => {
       tools: true,
       turns: true
     },
+    permissions: true,
     providers: true,
     ui: {
       panels: false,
@@ -448050,6 +448270,7 @@ var init_capabilities2 = __esm(() => {
       tools: true,
       turns: true
     },
+    permissions: true,
     providers: true,
     ui: {
       panels: true,
@@ -451057,7 +451278,11 @@ var init_InlineMemoryApproval = __esm(async () => {
 });
 
 // src/cli/components/InlineQuestionApproval.tsx
-var import_react52, jsx_dev_runtime26, SOLID_LINE8 = "─", InlineQuestionApproval;
+function shouldRenderQuestionAsMarkdown(question) {
+  return question.includes(`
+`) || MARKDOWN_QUESTION_PATTERNS.some((pattern4) => pattern4.test(question));
+}
+var import_react52, jsx_dev_runtime26, SOLID_LINE8 = "─", MARKDOWN_QUESTION_PATTERNS, InlineQuestionApproval;
 var init_InlineQuestionApproval = __esm(async () => {
   init_use_progress_indicator();
   init_use_terminal_width();
@@ -451065,10 +451290,21 @@ var init_InlineQuestionApproval = __esm(async () => {
   init_colors();
   await __promiseAll([
     init_build4(),
+    init_MarkdownDisplay(),
     init_Text2()
   ]);
   import_react52 = __toESM(require_react(), 1);
   jsx_dev_runtime26 = __toESM(require_jsx_dev_runtime(), 1);
+  MARKDOWN_QUESTION_PATTERNS = [
+    /^#{1,6}\s+/m,
+    /^\s*[-*+]\s+/m,
+    /^\s*\d+\.\s+/m,
+    /^>\s+/m,
+    /^```/m,
+    /\|.+\|\n\|[\s:]*-+/m,
+    /\*\*[^*]+\*\*/,
+    /`[^`]+`/
+  ];
   InlineQuestionApproval = import_react52.memo(({ questions, onSubmit, onCancel, isFocused = true }) => {
     const [currentQuestionIndex, setCurrentQuestionIndex] = import_react52.useState(0);
     const [answers, setAnswers] = import_react52.useState({});
@@ -451251,6 +451487,8 @@ var init_InlineQuestionApproval = __esm(async () => {
       }
     }, { isActive: isFocused });
     const solidLine = SOLID_LINE8.repeat(Math.max(columns, 10));
+    const questionText = currentQuestion?.question ?? "";
+    const renderQuestionAsMarkdown = shouldRenderQuestionAsMarkdown(questionText);
     const memoizedHeaderContent = import_react52.useMemo(() => /* @__PURE__ */ jsx_dev_runtime26.jsxDEV(jsx_dev_runtime26.Fragment, {
       children: [
         /* @__PURE__ */ jsx_dev_runtime26.jsxDEV(Text2, {
@@ -451263,9 +451501,11 @@ var init_InlineQuestionApproval = __esm(async () => {
         /* @__PURE__ */ jsx_dev_runtime26.jsxDEV(Box_default, {
           height: 1
         }, undefined, false, undefined, this),
-        /* @__PURE__ */ jsx_dev_runtime26.jsxDEV(Text2, {
+        renderQuestionAsMarkdown ? /* @__PURE__ */ jsx_dev_runtime26.jsxDEV(MarkdownDisplay, {
+          text: questionText
+        }, undefined, false, undefined, this) : /* @__PURE__ */ jsx_dev_runtime26.jsxDEV(Text2, {
           bold: true,
-          children: currentQuestion?.question
+          children: questionText
         }, undefined, false, undefined, this),
         /* @__PURE__ */ jsx_dev_runtime26.jsxDEV(Box_default, {
           height: 1
@@ -451285,9 +451525,10 @@ var init_InlineQuestionApproval = __esm(async () => {
       ]
     }, undefined, true, undefined, this), [
       currentQuestion?.header,
-      currentQuestion?.question,
       currentQuestionIndex,
       questions.length,
+      questionText,
+      renderQuestionAsMarkdown,
       solidLine
     ]);
     const hintText = currentQuestion?.multiSelect ? "Enter to toggle · Arrow to navigate · Esc to cancel" : "Enter to select · Arrow to navigate · Esc to cancel";
@@ -468230,6 +468471,11 @@ function providerSelectionFlow(provider, connectedProviderId) {
     return "multiInput";
   return "input";
 }
+function fieldValuesFromProviderPlaceholders(fields) {
+  if (!fields)
+    return {};
+  return Object.fromEntries(fields.filter((field) => !field.secret && field.placeholder).map((field) => [field.key, field.placeholder]));
+}
 function isProviderTargetLoading(input) {
   return input.connectedProvidersByTarget[input.selectedTarget] === undefined && (input.selectedTarget === "local" || input.showProviderStoreTabs);
 }
@@ -468431,7 +468677,7 @@ function ProviderSelector({
       setMethodIndex(0);
     } else if (flow === "multiInput") {
       setViewState({ type: "multiInput", provider });
-      setFieldValues({});
+      setFieldValues(fieldValuesFromProviderPlaceholders(provider.fields));
       setFocusedFieldIndex(0);
       setValidationState("idle");
       setValidationError(null);
@@ -490746,7 +490992,7 @@ function useApprovalFlow(ctx) {
     if (remainingApprovals.length > 0) {
       const recheckResults = await Promise.all(remainingApprovals.map(async (approval) => {
         const parsedArgs2 = safeJsonParseOr(approval.toolArgs, {});
-        const permission = await checkToolPermission(approval.toolName, parsedArgs2);
+        const permission = await checkToolPermission(approval.toolName, parsedArgs2, undefined, undefined, undefined, approvalToolContextIdRef.current, approval.toolCallId);
         return { approval, permission };
       }));
       const nowAutoAllowed = recheckResults.filter((r5) => r5.permission.decision === "allow");
@@ -490862,7 +491108,8 @@ function useApprovalFlow(ctx) {
     setAutoHandledResults,
     setIsExecutingTool,
     setPendingApprovals,
-    setThinkingMessage
+    setThinkingMessage,
+    approvalToolContextIdRef
   ]);
   const handleDenyCurrent = import_react113.useCallback(async (reason) => {
     if (isExecutingTool)
@@ -492989,11 +493236,14 @@ ${feedback}
           }
           if (shouldAutoGenerateConversationTitleRef.current && !isAutoConversationTitleInFlightRef.current && conversationIdRef.current !== "default") {
             isAutoConversationTitleInFlightRef.current = true;
+            const titleConversationId = conversationIdRef.current;
             const conversationTitle = await generateConversationTitle();
             if (!conversationTitle) {
               isAutoConversationTitleInFlightRef.current = false;
+            } else if (!shouldAutoGenerateConversationTitleRef.current || conversationIdRef.current !== titleConversationId) {
+              isAutoConversationTitleInFlightRef.current = false;
             } else {
-              getBackend().updateConversation(conversationIdRef.current, {
+              getBackend().updateConversation(titleConversationId, {
                 summary: conversationTitle
               }).then(() => {
                 shouldAutoGenerateConversationTitleRef.current = false;
@@ -493148,7 +493398,8 @@ ${feedback}
           const { needsUserInput, autoAllowed, autoDenied } = await classifyApprovals(approvalsToProcess, {
             getContext: analyzeToolApproval,
             alwaysRequiresUserInput,
-            missingNameReason: "Tool call incomplete - missing name or arguments"
+            missingNameReason: "Tool call incomplete - missing name or arguments",
+            toolContextId: approvalToolContextIdRef.current
           });
           for (const ac of [...autoAllowed, ...needsUserInput]) {
             const toolName = ac.approval.toolName;
@@ -499973,12 +500224,14 @@ function App2({
   const _queuedSystemPromptRecompileByConversationRef = import_react123.useRef(new Set);
   const shouldAutoGenerateConversationTitleRef = import_react123.useRef(!resumedExistingConversation);
   const isAutoConversationTitleInFlightRef = import_react123.useRef(false);
+  const autoConversationTitleStartIndexRef = import_react123.useRef(!resumedExistingConversation ? 0 : null);
   const shouldAutoGenerateConversationDescriptionRef = import_react123.useRef(!resumedExistingConversation);
   const isAutoConversationDescriptionInFlightRef = import_react123.useRef(false);
   const firstUserQueryRef = import_react123.useRef(null);
   const setConversationAutoTitleEligibility = import_react123.useCallback((enabled) => {
     shouldAutoGenerateConversationTitleRef.current = enabled;
     isAutoConversationTitleInFlightRef.current = false;
+    autoConversationTitleStartIndexRef.current = enabled ? buffersRef.current.order.length : null;
     shouldAutoGenerateConversationDescriptionRef.current = enabled;
     isAutoConversationDescriptionInFlightRef.current = false;
     firstUserQueryRef.current = null;
@@ -500012,8 +500265,30 @@ function App2({
       return fallback;
     }
     try {
-      const client = await getClient();
-      const aiTitle = await generateConversationTitleFromFork(client, conversationId2);
+      const messages = [];
+      const startIndex = autoConversationTitleStartIndexRef.current ?? 0;
+      const titleLineIds = buffersRef.current.order.slice(Math.min(startIndex, buffersRef.current.order.length));
+      for (const lineId of titleLineIds) {
+        const line = buffersRef.current.byId.get(lineId);
+        if (line?.kind === "user" || line?.kind === "assistant") {
+          const content = line.text.trim();
+          if (content) {
+            messages.push({ role: line.kind, content });
+          }
+        }
+      }
+      let summaryModel;
+      if (currentModelLabel) {
+        try {
+          const providers = await listProviders2();
+          const byokProviderAliases = buildByokProviderAliases(providers);
+          summaryModel = isByokHandleForSelector(currentModelLabel, byokProviderAliases) ? currentModelLabel : undefined;
+        } catch {
+          const byokProviderAliases = buildByokProviderAliases([]);
+          summaryModel = isByokHandleForSelector(currentModelLabel, byokProviderAliases) ? currentModelLabel : undefined;
+        }
+      }
+      const aiTitle = await generateConversationTitleFromSummary(conversationId2, messages, summaryModel);
       return aiTitle ?? fallback;
     } catch (err) {
       if (isDebugEnabled()) {
@@ -500021,7 +500296,7 @@ function App2({
       }
       return fallback;
     }
-  }, [deriveAutoConversationTitle]);
+  }, [deriveAutoConversationTitle, currentModelLabel]);
   const generateConversationDescription = import_react123.useCallback(async (options3) => {
     if (!experimentManager.isEnabled("desktop_conversation_bootstrap")) {
       return;
@@ -502634,6 +502909,7 @@ var init_AppCoordinator = __esm(async () => {
   init_goal_loop_mode();
   init_hooks2();
   init_mode();
+  init_byok_providers();
   init_openai_codex_provider();
   init_queue_runtime();
   init_runtime_context();
@@ -514658,6 +514934,7 @@ init_message_tool();
 init_registry();
 init_constants();
 init_conversation_handle();
+init_permission_registry();
 init_tool_registry();
 init_hooks2();
 init_mode();
@@ -516848,4 +517125,4 @@ Error during initialization: ${message}`);
 }
 main2();
 
-//# debugId=F89FB8A13230037564756E2164756E21
+//# debugId=0844D2D27038729C64756E2164756E21