@mtreeai/msapling-cli 2.3.6-beta.15 → 2.3.6-beta.16

package/dist/index.js

@@ -581,15 +581,22 @@ var init_src = __esm({
         const controller = new AbortController();
         const timeout = setTimeout(() => controller.abort(), 3e4);
         try {
+          const headers = {
+            "Authorization": `Bearer ${this.token}`,
+            "Content-Type": "application/json"
+          };
+          if (this.cookies.size > 0) {
+            headers["Cookie"] = this.serializeCookies();
+          }
+          const csrf = this.cookies.get("msapling_csrftoken");
+          if (csrf) headers["X-CSRF-Token"] = csrf;
           const response = await fetch(`${this.apiUrl}/api/chat/message`, {
             method: "POST",
-            headers: {
-              "Authorization": `Bearer ${this.token}`,
-              "Content-Type": "application/json"
-            },
+            headers,
             body: JSON.stringify(params),
             signal: controller.signal
           });
+          this.updateCookiesFromResponse(response);
           clearTimeout(timeout);
           if (response.status === 423) {
             await new Promise((r) => setTimeout(r, 1e3));
@@ -9684,7 +9691,7 @@ var init_version = __esm({
       description: "Show version information for CLI and core packages",
       category: "debug",
       handler: async (_args, context) => {
-        const cliVersion = true ? "2.3.6-beta.15" : "(dev)";
+        const cliVersion = true ? "2.3.6-beta.16" : "(dev)";
         const coreVersion = true ? "2.3.2" : "(dev)";
         const runtime = process.version;
         context.addMessage("system", "MSapling Version Info");
@@ -9693,7 +9700,7 @@ var init_version = __esm({
         context.addMessage("system", row2("Core (@msapling/core)", coreVersion));
         context.addMessage("system", row2("Runtime (Node/Bun)", runtime));
         try {
-          const ts = "2026-05-28T14:58:50.319Z";
+          const ts = "2026-05-28T15:34:41.643Z";
           if (ts && ts !== "__BUILD_TIMESTAMP__") {
             context.addMessage("system", row2("Build Timestamp", ts));
           }
@@ -13277,7 +13284,7 @@ import { jsx, jsxs } from "react/jsx-runtime";
 var Header = () => /* @__PURE__ */ jsxs(Box, { borderStyle: "single", borderColor: "cyan", paddingX: 1, marginBottom: 1, children: [
   /* @__PURE__ */ jsxs(Text, { bold: true, color: "cyan", children: [
     "\u25CF MSapling CLI v",
-    "2.3.6-beta.15"
+    "2.3.6-beta.16"
   ] }),
   /* @__PURE__ */ jsx(Box, { marginLeft: 2, children: /* @__PURE__ */ jsx(Text, { color: "gray", children: "Platinum Tier Architecture" }) })
 ] });
@@ -13888,7 +13895,7 @@ function parseApprovalMode(raw, now) {
   if (typeof mode !== "string" || !VALID_MODES.includes(mode)) {
     return { kind: "invalid", error: `approvalMode.mode invalid: ${JSON.stringify(mode)}` };
   }
-  if (obj.ttlMs === void 0 && obj.timestamp === void 0) {
+  if (mode !== "bypassPermissions") {
     return { kind: "ok", mode };
   }
   if (typeof obj.ttlMs !== "number" || !Number.isFinite(obj.ttlMs) || obj.ttlMs <= 0) {
@@ -13903,9 +13910,6 @@ function parseApprovalMode(raw, now) {
       error: `approvalMode.timestamp must be a positive number, got ${JSON.stringify(obj.timestamp)}`
     };
   }
-  if (mode !== "bypassPermissions") {
-    return { kind: "ok", mode };
-  }
   const age = now - obj.timestamp;
   if (age > obj.ttlMs) {
     return { kind: "expired", mode: "default", agedMs: age };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mtreeai/msapling-cli",
-  "version": "2.3.6-beta.15",
+  "version": "2.3.6-beta.16",
   "description": "MSapling CLI — React/Ink terminal client for the MSapling backend (chat, projects, MDrive, agent tools). Proprietary; redistribution prohibited.",
   "license": "UNLICENSED",
   "author": "MSapling Team",