@namzu/cli 36.4.0 → 36.5.0

package/dist/chunks/{chunk-UH5LZDKB.js → chunk-QB6CLDHT.js}

@@ -2,10 +2,10 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   createCliPalMessagingContext
-} from "./chunk-WDIIFX5X.js";
+} from "./chunk-WEVDA4IS.js";
 import {
   palConversationBinding
-} from "./chunk-FAPXHMTL.js";
+} from "./chunk-J7GTTLAZ.js";
 import {
   constructProvider,
   createCurrentCredentialReader,
@@ -18,21 +18,21 @@ import {
   resolveAutoDefault,
   reviewExemptionFor,
   toAgentEvent
-} from "./chunk-RAKBF6PY.js";
+} from "./chunk-WBR7JG42.js";
 import {
   readStoredTurnGuards,
   resolveTurnGuards
-} from "./chunk-ZJXRPK5W.js";
+} from "./chunk-CAOXGCUA.js";
 import {
   ensureFreshStoredCodexCredential
-} from "./chunk-3N3CDMDI.js";
+} from "./chunk-ZBWLULPM.js";
 import {
   canSelectModel,
   ensureRegistered,
   findDetected,
   primaryProvider,
   readCodexCredentialFile
-} from "./chunk-QZSP4UWJ.js";
+} from "./chunk-QNHDYR4J.js";
 import {
   PROVIDER_REGISTRY
 } from "./chunk-6LLJQ3KY.js";
@@ -61,7 +61,7 @@ import {
   query,
   resumeSession,
   toolset
-} from "./chunk-5YWWQUJ5.js";
+} from "./chunk-E2OJSRDE.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -1380,4 +1380,4 @@ export {
   palSessionEnvironment,
   createPalAgentSession
 };
-//# sourceMappingURL=chunk-UH5LZDKB.js.map
+//# sourceMappingURL=chunk-QB6CLDHT.js.map

package/dist/chunks/{chunk-DHXMHWOW.js → chunk-QLB4KNQA.js}

@@ -3,7 +3,7 @@ const require = __namzuCreateRequire(import.meta.url);
 import {
   REVIEW_MODES,
   isReviewMode
-} from "./chunk-5YWWQUJ5.js";
+} from "./chunk-E2OJSRDE.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -26,10 +26,24 @@ function permissionModeLabel(mode) {
   }
 }
 __name(permissionModeLabel, "permissionModeLabel");
-function effectivePermissionMode(mode, approvedAll) {
-  return approvedAll && (mode === "prompt" || mode === "accept-edits") ? "auto" : mode;
+function nextCycleMode(current, bypassAvailable) {
+  switch (current) {
+    case "prompt":
+      return "accept-edits";
+    case "accept-edits":
+      return "plan";
+    case "plan":
+      return bypassAvailable ? "auto" : "prompt";
+    case "auto":
+    case "strict":
+      return "prompt";
+  }
+}
+__name(nextCycleMode, "nextCycleMode");
+function bypassAvailableAtLaunch(opts) {
+  return opts.launchMode === "auto" || opts.allowDangerouslySkipPermissions === true;
 }
-__name(effectivePermissionMode, "effectivePermissionMode");
+__name(bypassAvailableAtLaunch, "bypassAvailableAtLaunch");
 function permissionModeDescription(mode) {
   switch (mode) {
     case "prompt":
@@ -62,8 +76,9 @@ __name(resolvePermissionMode, "resolvePermissionMode");
 export {
   isPermissionMode,
   permissionModeLabel,
-  effectivePermissionMode,
+  nextCycleMode,
+  bypassAvailableAtLaunch,
   permissionModeDescription,
   resolvePermissionMode
 };
-//# sourceMappingURL=chunk-DHXMHWOW.js.map
+//# sourceMappingURL=chunk-QLB4KNQA.js.map

package/dist/chunks/chunk-QLB4KNQA.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/permissions/mode.ts"],
+  "mappings": ";;;;;;;;;;;AA+BO,IAAM,mBAA8C;AAIpD,IAAM,mBAAgE;AAEtE,SAAS,oBAAoB,MAA8B;AACjE,UAAQ,MAAM;AAAA,IACb,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,EACT;AACD;AAbgB;AAqBT,SAAS,cAAc,SAAyB,iBAA0C;AAChG,UAAQ,SAAS;AAAA,IAChB,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO,kBAAkB,SAAS;AAAA,IACnC,KAAK;AAAA,IACL,KAAK;AACJ,aAAO;AAAA,EACT;AACD;AAZgB;AAoBT,SAAS,wBAAwB,MAG5B;AACX,SAAO,KAAK,eAAe,UAAU,KAAK,oCAAoC;AAC/E;AALgB;AAQT,SAAS,0BAA0B,MAA8B;AACvE,UAAQ,MAAM;AAAA,IACb,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,IACR,KAAK;AACJ,aAAO;AAAA,EACT;AACD;AAbgB;AA2BT,SAAS,sBAAsB,MAIW;AAChD,MAAI,KAAK,QAAQ,QAAQ,KAAK,SAAS,IAAI;AAC1C,QAAI,CAAC,iBAAiB,KAAK,IAAI,GAAG;AACjC,aAAO;AAAA,QACN,OAAO,qCAAqC,iBAAiB,KAAK,IAAI,CAAC,UAAU,KAAK,IAAI;AAAA,MAC3F;AAAA,IACD;AACA,WAAO,EAAE,MAAM,KAAK,KAAK;AAAA,EAC1B;AACA,MAAI,KAAK,gBAAiB,QAAO,EAAE,MAAM,OAAO;AAGhD,SAAO,EAAE,MAAM,KAAK,cAAc,WAAW,OAAO;AACrD;AAjBgB;",
+  "names": []
+}

package/dist/chunks/{chunk-QZSP4UWJ.js → chunk-QNHDYR4J.js}

@@ -18,15 +18,15 @@ import {
   readStoredCodexCredential,
   readStoredGeminiApiKey,
   readStoredSubscriptionCredential
-} from "./chunk-O5FRXERG.js";
+} from "./chunk-R5OZ6DCD.js";
 import {
   namzuHomePath
-} from "./chunk-IQKT222K.js";
+} from "./chunk-7RP7HIBA.js";
 import {
   EnvCredentialProvider,
   ProviderRegistry,
   resolveProviderCapabilities
-} from "./chunk-5YWWQUJ5.js";
+} from "./chunk-E2OJSRDE.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -1223,47 +1223,47 @@ async function ensureRegistered(id) {
   if (registered.has(id)) return;
   switch (id) {
     case "anthropic": {
-      const mod = await import("./dist-M4QJEZ6W.js");
+      const mod = await import("./dist-TFSA6QEB.js");
       mod.registerAnthropic();
       break;
     }
     case "google": {
-      const mod = await import("./dist-YW5SKAUO.js");
+      const mod = await import("./dist-GR6IFO7M.js");
       mod.registerGoogle();
       break;
     }
     case "openai": {
-      const mod = await import("./dist-YGBNYJXU.js");
+      const mod = await import("./dist-OLFVZDAR.js");
       mod.registerOpenAI();
       break;
     }
     case "codex": {
-      const mod = await import("./dist-YGBNYJXU.js");
+      const mod = await import("./dist-OLFVZDAR.js");
       mod.registerCodex();
       break;
     }
     case "deepseek": {
-      const mod = await import("./dist-BT2HNR4P.js");
+      const mod = await import("./dist-ZIZ457D5.js");
       mod.registerDeepSeek();
       break;
     }
     case "openrouter": {
-      const mod = await import("./dist-X5AY7IYY.js");
+      const mod = await import("./dist-B3WFU7LE.js");
       mod.registerOpenRouter();
       break;
     }
     case "zen": {
-      const mod = await import("./dist-WVLCXQIR.js");
+      const mod = await import("./dist-2PTH7PME.js");
       mod.registerZen();
       break;
     }
     case "zen-go": {
-      const mod = await import("./dist-WVLCXQIR.js");
+      const mod = await import("./dist-2PTH7PME.js");
       mod.registerZenGo();
       break;
     }
     case "ollama": {
-      const mod = await import("./dist-AEKRLZ3M.js");
+      const mod = await import("./dist-AVGYNTRY.js");
       mod.registerOllama();
       break;
     }
@@ -1352,4 +1352,4 @@ export {
   isRegistered,
   resolveChainCapabilities
 };
-//# sourceMappingURL=chunk-QZSP4UWJ.js.map
+//# sourceMappingURL=chunk-QNHDYR4J.js.map

package/dist/chunks/{chunk-6RJSJGZF.js → chunk-QQ2TBG2P.js}

@@ -27,7 +27,7 @@ import {
   resolveChainCapabilities,
   unresolvedMembers,
   wslWindowsHome
-} from "./chunk-QZSP4UWJ.js";
+} from "./chunk-QNHDYR4J.js";
 import {
   PROVIDER_REGISTRY
 } from "./chunk-6LLJQ3KY.js";
@@ -49,7 +49,7 @@ import {
   invariants,
   isolationOf,
   resolveNamzuHome
-} from "./chunk-5YWWQUJ5.js";
+} from "./chunk-E2OJSRDE.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -1139,4 +1139,4 @@ export {
   runDoctorCommand,
   doctorCommand
 };
-//# sourceMappingURL=chunk-6RJSJGZF.js.map
+//# sourceMappingURL=chunk-QQ2TBG2P.js.map

package/dist/chunks/{chunk-5VB3X4UB.js → chunk-QXUJNVPO.js}

@@ -2,7 +2,7 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   isTrusted
-} from "./chunk-CYYGWTKF.js";
+} from "./chunk-OF6QIV42.js";
 import {
   canonicalProjectPath
 } from "./chunk-JORONMD3.js";
@@ -43,4 +43,4 @@ __name(decideHeadlessTrust, "decideHeadlessTrust");
 export {
   decideHeadlessTrust
 };
-//# sourceMappingURL=chunk-5VB3X4UB.js.map
+//# sourceMappingURL=chunk-QXUJNVPO.js.map

package/dist/chunks/{chunk-O5FRXERG.js → chunk-R5OZ6DCD.js}

@@ -2,7 +2,7 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   namzuHomePath
-} from "./chunk-IQKT222K.js";
+} from "./chunk-7RP7HIBA.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -658,4 +658,4 @@ export {
   restrictToOwner,
   restrictToOwnerOnce
 };
-//# sourceMappingURL=chunk-O5FRXERG.js.map
+//# sourceMappingURL=chunk-R5OZ6DCD.js.map

package/dist/chunks/{chunk-TCHEQRJE.js → chunk-R5QMJRF7.js}

@@ -5,16 +5,16 @@ import {
 } from "./chunk-NUGPLXVK.js";
 import {
   restrictToOwner
-} from "./chunk-O5FRXERG.js";
+} from "./chunk-R5OZ6DCD.js";
 import {
   namzuHomePath
-} from "./chunk-IQKT222K.js";
+} from "./chunk-7RP7HIBA.js";
 import {
   MCPClient,
   MCPHttpStatusError,
   mcpToolset,
   requireApproval
-} from "./chunk-5YWWQUJ5.js";
+} from "./chunk-E2OJSRDE.js";
 import {
   __export,
   __name
@@ -25323,4 +25323,4 @@ export {
   * MIT Licensed
   *)
 */
-//# sourceMappingURL=chunk-TCHEQRJE.js.map
+//# sourceMappingURL=chunk-R5QMJRF7.js.map

package/dist/chunks/{chunk-GTJVK5TJ.js → chunk-TC7HMH6P.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-US5ZFPAU.js";
 import {
   namzuHomePath
-} from "./chunk-IQKT222K.js";
+} from "./chunk-7RP7HIBA.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -72,4 +72,4 @@ export {
   writeCrashLog,
   reportCrash
 };
-//# sourceMappingURL=chunk-GTJVK5TJ.js.map
+//# sourceMappingURL=chunk-TC7HMH6P.js.map

package/dist/chunks/{chunk-RAKBF6PY.js → chunk-WBR7JG42.js}

@@ -2,16 +2,16 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   openManagedWorktrees
-} from "./chunk-WIPSZYIM.js";
+} from "./chunk-P6AM76US.js";
 import {
   createBrowserControl
 } from "./chunk-WHODOMXA.js";
 import {
   connectMcpServers
-} from "./chunk-TCHEQRJE.js";
+} from "./chunk-R5QMJRF7.js";
 import {
   createSessionSkillCatalog
-} from "./chunk-6ZEROVY4.js";
+} from "./chunk-6G3TX6QD.js";
 import {
   SAVE_SKILL_TOOL_NAME,
   WORKFLOW_TOOL_DESCRIPTION,
@@ -27,10 +27,10 @@ import {
   viewFromJournal,
   workflowOffered,
   workflowRefusal
-} from "./chunk-ZJXRPK5W.js";
+} from "./chunk-CAOXGCUA.js";
 import {
   openInBrowser
-} from "./chunk-IGHTIUKD.js";
+} from "./chunk-DQNJEGUV.js";
 import {
   CredentialRefreshRejectedError,
   CredentialWithdrawnError,
@@ -38,7 +38,7 @@ import {
   ensureFreshStoredCodexCredential,
   readSubscriptionCredential,
   sameOAuthCredential
-} from "./chunk-3N3CDMDI.js";
+} from "./chunk-ZBWLULPM.js";
 import {
   debugRequested
 } from "./chunk-GNBMKISG.js";
@@ -46,7 +46,7 @@ import {
   configuredPassthroughTools,
   resolveToolResultScreens,
   unmatchedPassthroughTools
-} from "./chunk-MUUBLY7G.js";
+} from "./chunk-ZHWB7GXV.js";
 import {
   formatSize,
   homePath,
@@ -74,7 +74,7 @@ import {
   requiresCredentialForModel,
   resolveChainCapabilities,
   unresolvedMembers
-} from "./chunk-QZSP4UWJ.js";
+} from "./chunk-QNHDYR4J.js";
 import {
   PROVIDER_REGISTRY,
   missingCredentialMessage,
@@ -82,11 +82,11 @@ import {
 } from "./chunk-6LLJQ3KY.js";
 import {
   cliLogger
-} from "./chunk-KZJUG4HN.js";
+} from "./chunk-GKVDZZN6.js";
 import {
   isPermissionMode,
   permissionModeLabel
-} from "./chunk-DHXMHWOW.js";
+} from "./chunk-QLB4KNQA.js";
 import {
   probeCapabilities
 } from "./chunk-OH6TB27S.js";
@@ -97,7 +97,7 @@ import {
 import {
   conversationLogPath,
   ensureSessionStarted
-} from "./chunk-ZSPSXPRH.js";
+} from "./chunk-XMN2OSBG.js";
 import {
   INSTRUCTIONS_FILENAME,
   MAX_CHARS_PER_FILE,
@@ -107,13 +107,13 @@ import {
 } from "./chunk-H6B6AROX.js";
 import {
   ensurePrivateStateDirectory
-} from "./chunk-PAE4DIXR.js";
+} from "./chunk-BQYV3WGF.js";
 import {
   restrictToOwner
-} from "./chunk-O5FRXERG.js";
+} from "./chunk-R5OZ6DCD.js";
 import {
   namzuHomePath
-} from "./chunk-IQKT222K.js";
+} from "./chunk-7RP7HIBA.js";
 import {
   AgentManager,
   AgentRegistry,
@@ -183,6 +183,7 @@ import {
   buildResidentHistoryTools,
   buildResidentToolEvidenceTools,
   buildSessionGoalTools,
+  builtinCommandArguments,
   classifyEvidenceSource,
   collectChatCompletion,
   compactNow,
@@ -251,7 +252,7 @@ import {
   windowsShellNotice,
   withProviderFallback,
   wrapUntrusted
-} from "./chunk-5YWWQUJ5.js";
+} from "./chunk-E2OJSRDE.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -3942,7 +3943,7 @@ async function searchConversationCore(sessions, sessionId, request, signal, acti
         result.excludedToolResults = (result.excludedToolResults ?? 0) + page.excludedToolResults;
       if (page.excludedSummaries)
         result.excludedSummaries = (result.excludedSummaries ?? 0) + page.excludedSummaries;
-      const matches = page.matches.map(
+      const matches2 = page.matches.map(
         (match) => ({
           seq: match.seq,
           recordedAt: match.recordedAt,
@@ -3957,11 +3958,11 @@ async function searchConversationCore(sessions, sessionId, request, signal, acti
           ...match.characterOffset === void 0 ? {} : { byteOffset: match.byteOffset }
         })
       );
-      const bytes = Buffer.byteLength(JSON.stringify(matches));
+      const bytes = Buffer.byteLength(JSON.stringify(matches2));
       if (outputBytes + bytes > OUTPUT_BYTES)
         throw new Error("Evidence exceeded its output allowance.");
       outputBytes += bytes;
-      result.matches.push(...matches);
+      result.matches.push(...matches2);
       result.unavailable += page.unavailable.length;
       result.incomplete ||= page.incomplete || page.unavailable.length > 0;
       state.omitted ||= page.incomplete || page.unavailable.length > 0;
@@ -8742,6 +8743,121 @@ function createLiveModeControl(options) {
 }
 __name(createLiveModeControl, "createLiveModeControl");
 
+// src/permissions/session-allow.ts
+var WEB_FETCH_TOOL = "web_fetch";
+var MAX_LABEL_COMMAND = 60;
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+__name(isRecord2, "isRecord");
+function alwaysAsked(call) {
+  return call.escalation !== void 0 || call.requiresApproval === true || call.authorization?.explicitReview === true || call.isDestructive === true;
+}
+__name(alwaysAsked, "alwaysAsked");
+function allowFor(call, commands) {
+  if (alwaysAsked(call)) return void 0;
+  const input = isRecord2(call.input) ? call.input : void 0;
+  const commandArgument = commands.get(call.name);
+  if (commandArgument !== void 0) {
+    const line = input?.[commandArgument];
+    if (typeof line !== "string") return void 0;
+    const command = line.trim();
+    if (command === "" || /[\n\r;&|<>`$()*?{}\\]/.test(command)) return void 0;
+    if (input?.dangerously_disable_sandbox === true) return void 0;
+    return { kind: "command", tool: call.name, command };
+  }
+  if (call.name === WEB_FETCH_TOOL) {
+    const url = input?.url;
+    if (typeof url !== "string") return void 0;
+    try {
+      const host = new URL(url).hostname;
+      if (host === "" || host.includes("*")) return void 0;
+      return { kind: "host", tool: call.name, host };
+    } catch {
+      return void 0;
+    }
+  }
+  if (call.name.startsWith("mcp__")) return { kind: "tool", tool: call.name };
+  return void 0;
+}
+__name(allowFor, "allowFor");
+function allowsForBatch(calls, commands) {
+  if (calls.length === 0) return void 0;
+  const out = [];
+  for (const call of calls) {
+    const allow = allowFor(call, commands);
+    if (!allow) return void 0;
+    if (!out.some((existing) => sameAllow(existing, allow))) out.push(allow);
+  }
+  return out;
+}
+__name(allowsForBatch, "allowsForBatch");
+function sameAllow(a, b) {
+  if (a.kind !== b.kind || a.tool !== b.tool) return false;
+  if (a.kind === "command" && b.kind === "command") return a.command === b.command;
+  if (a.kind === "host" && b.kind === "host") return a.host === b.host;
+  return true;
+}
+__name(sameAllow, "sameAllow");
+function shorten(text) {
+  return text.length > MAX_LABEL_COMMAND ? `${text.slice(0, MAX_LABEL_COMMAND - 1)}\u2026` : text;
+}
+__name(shorten, "shorten");
+function describeAllows(allows) {
+  const parts = allows.map((allow) => {
+    switch (allow.kind) {
+      case "command":
+        return `${shorten(allow.command)} commands`;
+      case "host":
+        return allow.host;
+      case "tool":
+        return allow.tool.replace(/^mcp__/, "").replace(/__/g, " ");
+    }
+  });
+  return parts.length <= 1 ? parts[0] ?? "" : `${parts.slice(0, -1).join(", ")} and ${parts.at(-1)}`;
+}
+__name(describeAllows, "describeAllows");
+function matches(allow, toolName2, toolInput, commands) {
+  if (allow.tool !== toolName2) return false;
+  switch (allow.kind) {
+    case "tool":
+      return true;
+    case "host": {
+      const url = isRecord2(toolInput) ? toolInput.url : void 0;
+      if (typeof url !== "string") return false;
+      try {
+        return new URL(url).hostname === allow.host;
+      } catch {
+        return false;
+      }
+    }
+    case "command": {
+      const argument = commands.get(toolName2);
+      if (argument === void 0 || !isRecord2(toolInput)) return false;
+      const line = toolInput[argument];
+      return typeof line === "string" && line.trim() === allow.command && toolInput.dangerously_disable_sandbox !== true;
+    }
+  }
+}
+__name(matches, "matches");
+function createSessionAllows(commands) {
+  const entries = [];
+  return {
+    add(allows) {
+      for (const allow of allows) {
+        if (!entries.some((existing) => sameAllow(existing, allow))) entries.push(allow);
+      }
+    },
+    list: /* @__PURE__ */ __name(() => [...entries], "list"),
+    rule: {
+      type: "predicate",
+      description: "allowed for this session by an answer at a prompt",
+      decide: /* @__PURE__ */ __name((call) => entries.some((allow) => matches(allow, call.toolName, call.toolInput, commands)) ? "allow" : null, "decide")
+    }
+  };
+}
+__name(createSessionAllows, "createSessionAllows");
+
 // src/skills/directory.ts
 function createSkillDirectoryResolver(options) {
   return async (skill, context) => {
@@ -8898,17 +9014,17 @@ async function resolveModelSwitch(request, options) {
   const first = selected ?? usable.find(({ entry }) => entry.id === options.currentProvider);
   if (first && await inspect(first)) return resolve9(first);
   const candidates = selected ? [selected] : usable;
-  const matches = selected ? [] : (await Promise.all(
+  const matches2 = selected ? [] : (await Promise.all(
     candidates.filter((candidate) => candidate !== first).map(async (candidate) => await inspect(candidate) ? candidate : void 0)
   )).filter((candidate) => candidate !== void 0);
   signal?.throwIfAborted();
-  const uniqueMatch = matches.length === 1 ? matches[0] : void 0;
+  const uniqueMatch = matches2.length === 1 ? matches2[0] : void 0;
   if (uniqueMatch) return resolve9(uniqueMatch);
-  if (matches.length > 1) {
+  if (matches2.length > 1) {
     return {
       kind: "rejected",
-      reason: `Model "${model}" is available from multiple providers. Specify one: ${matches.map(({ entry }) => entry.id).join(", ")}.`,
-      choices: matches.map(({ entry }) => ({ provider: entry.id, model }))
+      reason: `Model "${model}" is available from multiple providers. Specify one: ${matches2.map(({ entry }) => entry.id).join(", ")}.`,
+      choices: matches2.map(({ entry }) => ({ provider: entry.id, model }))
     };
   }
   const choices = candidates.flatMap((candidate) => {
@@ -9327,12 +9443,15 @@ function clipRequestContext(prompt, limit, kind) {
 __name(clipRequestContext, "clipRequestContext");
 async function createAgentSession(prefs, detected, options = {}) {
   if (options.palEnvironment) {
-    const { createPalAgentSession } = await import("./agent-session-NATAL4BA.js");
+    const { createPalAgentSession } = await import("./agent-session-FXZ4RXQH.js");
     return createPalAgentSession(prefs, detected, options);
   }
-  const { palAtWorkspace } = await import("./store-VVOUETR5.js");
+  const { palAtWorkspace } = await import("./store-ULDTJXKN.js");
   if (palAtWorkspace(options.cwd ?? process.cwd()))
     throw new Error("This Pal requires its owned virtual computer. Open it with namzu pal chat.");
+  const commandArguments = builtinCommandArguments();
+  const sessionAllows = createSessionAllows(commandArguments);
+  const sessionRules = [...options.rules ?? [], sessionAllows.rule];
   const fileObservations = /* @__PURE__ */ new Map();
   const observationsFor = /* @__PURE__ */ __name((id, prior) => {
     let seeded = fileObservations.get(id);
@@ -10067,10 +10186,10 @@ async function createAgentSession(prefs, detected, options = {}) {
             }
           })
         );
-        const matches = catalogues.flat();
+        const matches2 = catalogues.flat();
         return JSON.stringify({
-          models: matches.slice(0, 40),
-          omitted: Math.max(0, matches.length - 40),
+          models: matches2.slice(0, 40),
+          omitted: Math.max(0, matches2.length - 40),
           guidance: "Use exact IDs. Omitted capability fields are unknown, not unsupported. Narrow query when results are omitted."
         });
       }, "listModels"),
@@ -10106,7 +10225,7 @@ async function createAgentSession(prefs, detected, options = {}) {
           childToolsets.push(toolset("web-search", [createWebSearchTool()]));
         return childToolsets;
       }, "buildTools"),
-      authorizationGate: gateFor(options.rules)
+      authorizationGate: gateFor(sessionRules)
     });
     subagentRuntime = sub;
     const agentToolsets = [toolset("agents", [sub.agentTool, sub.waitForTaskTool])];
@@ -10260,7 +10379,7 @@ async function createAgentSession(prefs, detected, options = {}) {
   if (options.openUrl) toolsets.push(toolset("open-url", [createOpenUrlTool()]));
   const decisionTool = maybeCreateDecisionTool(options.decision, process.env);
   if (decisionTool) toolsets.push(toolset("decide", [decisionTool]));
-  const operatorPals = await import("./operator-tools-4NS32VMF.js");
+  const operatorPals = await import("./operator-tools-BRBJUOP5.js");
   toolsets.push(
     readyWhen(
       toolset(
@@ -10620,7 +10739,7 @@ async function createAgentSession(prefs, detected, options = {}) {
         ...subagentRuntime ? {
           taskScheduler: await subagentRuntime.gatewayForTurn(entry2.turnId)
         } : {},
-        authorizationGate: gateFor(rules ?? options.rules),
+        authorizationGate: gateFor(rules ?? sessionRules),
         ...pendingDecision ? { pendingDecision } : {},
         compactionConfig: compactionConfigFor(options.compaction),
         retainedToolPreviewChars: options.conversationSessions ? options.compaction?.retainedToolPreviewChars ?? 4e3 : void 0,
@@ -11085,10 +11204,8 @@ async function createAgentSession(prefs, detected, options = {}) {
     errorHint: null,
     errorKind: null,
     // Reads the same object the handler mutates, at call time.
-    approvalLatched: /* @__PURE__ */ __name(() => approval.all, "approvalLatched"),
-    resetApprovalLatch: /* @__PURE__ */ __name(() => {
-      approval.all = false;
-    }, "resetApprovalLatch"),
+    allowForSession: /* @__PURE__ */ __name((allows) => sessionAllows.add(allows), "allowForSession"),
+    commandArguments,
     setPermissionMode: /* @__PURE__ */ __name(async (mode, reason) => {
       await Promise.all(
         [...liveModeControls].map(
@@ -11380,7 +11497,7 @@ async function createAgentSession(prefs, detected, options = {}) {
               escalation,
               limits: turnLimits,
               sandboxWorkspace,
-              rules: options.rules,
+              rules: sessionRules,
               structuredOutput: options.structuredOutput,
               reviewAnswer: options.reviewAnswer,
               maxAnswerReviews: options.maxAnswerReviews,
@@ -12684,9 +12801,6 @@ function emptySession(errorHint, errorKind = "environment", rawDetail) {
     configNotices: [],
     errorHint,
     // No turn can run here, so no prompt can have been answered.
-    approvalLatched: /* @__PURE__ */ __name(() => false, "approvalLatched"),
-    resetApprovalLatch: /* @__PURE__ */ __name(() => {
-    }, "resetApprovalLatch"),
     // No registry was built, so there is no roster to report on.
     promptExemptTools: /* @__PURE__ */ __name(() => [], "promptExemptTools"),
     send: /* @__PURE__ */ __name(async function* () {
@@ -12745,6 +12859,8 @@ export {
   renderMemorySaveResult,
   renderTypedNoteResult,
   renderStoredMemorySection,
+  allowsForBatch,
+  describeAllows,
   assistantTranscriptTexts,
   projectTurnConversation,
   resolveModelSwitch,
@@ -12774,4 +12890,4 @@ export {
   RESULT_SUMMARY_WHOLE_MAX,
   resultSummaryLine
 };
-//# sourceMappingURL=chunk-RAKBF6PY.js.map
+//# sourceMappingURL=chunk-WBR7JG42.js.map