@link-assistant/agent 0.22.10 → 0.24.0

package/src/config/config.ts

@@ -52,6 +52,10 @@ export interface AgentConfig {
   mcpDefaultToolCallTimeout: number;
   mcpMaxToolCallTimeout: number;
   verifyImagesAtReadTool: boolean;
+  readOnly: boolean;
+  disableTools: string;
+  permissionMode: string;
+  permission: string;
 }
 
 // Fallback helpers for when config is not yet initialized (early imports/tests)
@@ -132,6 +136,10 @@ function defaultConfig(): AgentConfig {
     })(),
     verifyImagesAtReadTool:
       getEnvStr('LINK_ASSISTANT_AGENT_VERIFY_IMAGES_AT_READ_TOOL') !== 'false',
+    readOnly: truthyEnv('LINK_ASSISTANT_AGENT_READ_ONLY'),
+    disableTools: getEnvStr('LINK_ASSISTANT_AGENT_DISABLE_TOOLS') ?? '',
+    permissionMode: getEnvStr('LINK_ASSISTANT_AGENT_PERMISSION_MODE') ?? 'auto',
+    permission: getEnvStr('LINK_ASSISTANT_AGENT_PERMISSION') ?? '',
   };
 }
 
@@ -240,6 +248,31 @@ function buildAgentConfigOptions({
       type: 'boolean',
       description: 'Verify images when using the read tool',
       default: getenv('LINK_ASSISTANT_AGENT_VERIFY_IMAGES_AT_READ_TOOL', true),
+    })
+    .option('read-only', {
+      type: 'boolean',
+      description:
+        'Enforceable read-only / planning mode. Disables all filesystem-mutating and shell tools (bash, edit, write, multiedit, patch).',
+      default: getenv('LINK_ASSISTANT_AGENT_READ_ONLY', false),
+    })
+    .option('disable-tools', {
+      type: 'string',
+      description:
+        'Comma-separated list of tool ids to disable (e.g. "bash,write,edit"). Disabled tools are never exposed to the model and are rejected if invoked via batch.',
+      default: getenv('LINK_ASSISTANT_AGENT_DISABLE_TOOLS', ''),
+    })
+    .option('permission-mode', {
+      type: 'string',
+      choices: ['auto', 'plan', 'readonly', 'ask'],
+      description:
+        'Permission policy for mutating tools. "auto" (default) allows everything; "plan" allows read-only shell and asks before mutations; "readonly" denies all mutations; "ask" asks before every mutating tool. Approvals are driven over JSON (permission_request / permission_response).',
+      default: getenv('LINK_ASSISTANT_AGENT_PERMISSION_MODE', 'auto'),
+    })
+    .option('permission', {
+      type: 'string',
+      description:
+        'OpenCode-compatible permission override as JSON, merged on top of --permission-mode. Example: \'{"edit":"ask","bash":{"git push*":"ask","*":"allow"},"webfetch":"allow"}\'.',
+      default: getenv('LINK_ASSISTANT_AGENT_PERMISSION', ''),
     });
 }
 
@@ -292,6 +325,10 @@ export function initConfig(argv?: string[]): AgentConfig {
     mcpDefaultToolCallTimeout: parsed.mcpDefaultToolCallTimeout ?? 120000,
     mcpMaxToolCallTimeout: parsed.mcpMaxToolCallTimeout ?? 600000,
     verifyImagesAtReadTool: parsed.verifyImagesAtReadTool ?? true,
+    readOnly: parsed.readOnly ?? false,
+    disableTools: parsed.disableTools ?? '',
+    permissionMode: parsed.permissionMode ?? 'auto',
+    permission: parsed.permission ?? '',
   });
 
   // Propagate verbose to env var for subprocess resilience (issue #227).

package/src/index.js

@@ -36,6 +36,7 @@ import {
   runContinuousDirectMode,
   resolveResumeSession,
 } from './cli/continuous-mode.js';
+import { parseStreamJsonInput } from './cli/input-queue.js';
 import { createBusEventSubscription } from './cli/event-handler.js';
 import {
   outputStatus,
@@ -259,6 +260,19 @@ async function readSystemMessages(argv) {
   return { systemMessage, appendSystemMessage };
 }
 
+function getInputFormat(argv) {
+  return argv['input-format'] || argv.inputFormat || 'text';
+}
+
+function getAcceptedInputFormats(inputFormat, isInteractive) {
+  if (inputFormat === 'stream-json') {
+    return ['Claude stream-json user frames'];
+  }
+  return isInteractive
+    ? ['JSON object with "message" field', 'Plain text']
+    : ['JSON object with "message" field'];
+}
+
 async function runAgentMode(argv, request) {
   // Log version and command info in verbose mode using lazy logging
   Log.Default.info(() => ({
@@ -663,8 +677,15 @@ async function main() {
           // Check if stdin is a TTY (interactive terminal)
           if (process.stdin.isTTY) {
             // Enter interactive terminal mode with continuous listening
-            const isInteractive = argv.interactive !== false;
-            const autoMerge = argv['auto-merge-queued-messages'] !== false;
+            const inputFormat = getInputFormat(argv);
+            const isInteractive =
+              inputFormat === 'stream-json'
+                ? false
+                : argv.interactive !== false;
+            const autoMerge =
+              inputFormat === 'stream-json'
+                ? false
+                : argv['auto-merge-queued-messages'] !== false;
             const alwaysAcceptStdin = argv['always-accept-stdin'] !== false;
 
             // Exit if --no-always-accept-stdin is set (single message mode not supported in TTY)
@@ -688,10 +709,12 @@ async function main() {
                 message:
                   'Agent CLI in interactive terminal mode. Type your message and press Enter.',
                 hint: 'Press CTRL+C to exit. Use --help for options.',
-                acceptedFormats: isInteractive
-                  ? ['JSON object with "message" field', 'Plain text']
-                  : ['JSON object with "message" field'],
+                acceptedFormats: getAcceptedInputFormats(
+                  inputFormat,
+                  isInteractive
+                ),
                 options: {
+                  inputFormat,
                   interactive: isInteractive,
                   autoMergeQueuedMessages: autoMerge,
                   alwaysAcceptStdin,
@@ -707,8 +730,13 @@ async function main() {
           }
 
           // stdin is piped - enter stdin listening mode
-          const isInteractive = argv.interactive !== false;
-          const autoMerge = argv['auto-merge-queued-messages'] !== false;
+          const inputFormat = getInputFormat(argv);
+          const isInteractive =
+            inputFormat === 'stream-json' ? false : argv.interactive !== false;
+          const autoMerge =
+            inputFormat === 'stream-json'
+              ? false
+              : argv['auto-merge-queued-messages'] !== false;
           const alwaysAcceptStdin = argv['always-accept-stdin'] !== false;
 
           outputStatus(
@@ -719,10 +747,12 @@ async function main() {
                 ? 'Agent CLI in continuous listening mode. Accepts JSON and plain text input.'
                 : 'Agent CLI in single-message mode. Accepts JSON and plain text input.',
               hint: 'Press CTRL+C to exit. Use --help for options.',
-              acceptedFormats: isInteractive
-                ? ['JSON object with "message" field', 'Plain text']
-                : ['JSON object with "message" field'],
+              acceptedFormats: getAcceptedInputFormats(
+                inputFormat,
+                isInteractive
+              ),
               options: {
+                inputFormat,
                 interactive: isInteractive,
                 autoMergeQueuedMessages: autoMerge,
                 alwaysAcceptStdin,
@@ -757,27 +787,52 @@ async function main() {
 
           // Try to parse as JSON, if it fails treat it as plain text message
           let request;
-          try {
-            request = JSON.parse(trimmedInput);
-          } catch (_e) {
-            // Not JSON
-            if (!isInteractive) {
-              // In non-interactive mode, only accept JSON
+          if (inputFormat === 'stream-json') {
+            try {
+              const firstFrame = trimmedInput
+                .split(/\r?\n/)
+                .find((line) => line.trim());
+              request = parseStreamJsonInput(firstFrame || '');
+              if (request.kind !== 'message') {
+                throw new Error(
+                  `Expected stream-json user frame, received ${request.kind}`
+                );
+              }
+            } catch (error) {
               outputError(
                 {
                   errorType: 'ValidationError',
                   message:
-                    'Invalid JSON input. In non-interactive mode (--no-interactive), only JSON input is accepted.',
-                  hint: 'Use --interactive to accept plain text, or provide valid JSON: {"message": "your text"}',
+                    error instanceof Error ? error.message : String(error),
+                  hint: 'Provide one Claude stream-json user frame per line.',
                 },
                 compactJson
               );
               process.exit(1);
             }
-            // In interactive mode, treat as plain text message
-            request = {
-              message: trimmedInput,
-            };
+          } else {
+            try {
+              request = JSON.parse(trimmedInput);
+            } catch (_e) {
+              // Not JSON
+              if (!isInteractive) {
+                // In non-interactive mode, only accept JSON
+                outputError(
+                  {
+                    errorType: 'ValidationError',
+                    message:
+                      'Invalid JSON input. In non-interactive mode (--no-interactive), only JSON input is accepted.',
+                    hint: 'Use --interactive to accept plain text, or provide valid JSON: {"message": "your text"}',
+                  },
+                  compactJson
+                );
+                process.exit(1);
+              }
+              // In interactive mode, treat as plain text message
+              request = {
+                message: trimmedInput,
+              };
+            }
           }
 
           // Output input confirmation in JSON format
@@ -785,7 +840,12 @@ async function main() {
             {
               raw: trimmedInput,
               parsed: request,
-              format: isInteractive ? 'text' : 'json',
+              format:
+                inputFormat === 'stream-json'
+                  ? 'stream-json'
+                  : isInteractive
+                    ? 'text'
+                    : 'json',
             },
             compactJson
           );