@namzu/cli 37.2.0 → 38.0.0

package/dist/chunks/{acp-WRUFVVVS.js → acp-WH4EFAFK.js}

@@ -1,21 +1,42 @@
 import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
+import {
+  dispatchCliPalMessages
+} from "./chunk-47W5PCU5.js";
 import {
   conversationMarkdown,
   lookupPr,
   runCommand,
   withKeyNote
-} from "./chunk-MUG3SBGU.js";
-import {
-  dispatchCliPalMessages
-} from "./chunk-2TDWK353.js";
-import "./chunk-ND6ZNIUM.js";
+} from "./chunk-V5WCUTSO.js";
+import "./chunk-UW42IRA4.js";
 import {
   decideHeadlessTrust
-} from "./chunk-VCUPZJDO.js";
+} from "./chunk-6PMO2KA2.js";
 import {
   palSessionEnvironment
-} from "./chunk-PSLRTJU5.js";
+} from "./chunk-4DQ5TVCH.js";
+import {
+  FileCheckpointStore,
+  PluginSettingsStore,
+  createAgentSession,
+  describeProviderModels,
+  describeProviderReasoning,
+  probeAgentSession,
+  sessionLogCheckpointView,
+  validateComposerSendSettings,
+  verifyCredential
+} from "./chunk-BKBXEXIL.js";
+import "./chunk-7PBYGA76.js";
+import "./chunk-G2ZBMR22.js";
+import "./chunk-UZ7ONUMS.js";
+import "./chunk-WHODOMXA.js";
+import "./chunk-25P24RKO.js";
+import "./chunk-HVJXMGCJ.js";
+import "./chunk-U6EH3UCL.js";
+import "./chunk-NUGPLXVK.js";
+import "./chunk-UKOMZND2.js";
+import "./chunk-YXFS44LU.js";
 import {
   cliPalComputerStatus,
   cliPalScreen,
@@ -28,65 +49,47 @@ import {
   startCliPalComputer,
   stopCliPalComputer,
   takeOverCliPalComputer
-} from "./chunk-UI3MX7CC.js";
+} from "./chunk-XHBZBISL.js";
 import {
   cliPalActivitySubscriptionPolicy,
   cliPalActivitySubscriptionStore,
   cliPalCommunicationPolicy,
   cliPalCommunicationStore
-} from "./chunk-HJBZYFCC.js";
+} from "./chunk-GAYGCGIY.js";
 import {
   claimPalConversation,
   listPalConversations,
   palConversationBinding
-} from "./chunk-4GIDESAM.js";
+} from "./chunk-PWFLM6BJ.js";
 import "./chunk-ZWA2JRJV.js";
-import {
-  FileCheckpointStore,
-  PluginSettingsStore,
-  createAgentSession,
-  describeProviderModels,
-  describeProviderReasoning,
-  probeAgentSession,
-  sessionLogCheckpointView,
-  validateComposerSendSettings,
-  verifyCredential
-} from "./chunk-GEB3OP2H.js";
-import "./chunk-O6X4O7VQ.js";
-import "./chunk-ERY3CYIM.js";
-import "./chunk-MF45FNH3.js";
-import "./chunk-WHODOMXA.js";
-import "./chunk-TQGYYDLF.js";
-import "./chunk-N2CP3FIQ.js";
-import "./chunk-XHJMDBRV.js";
-import "./chunk-NUGPLXVK.js";
-import "./chunk-ABHX2QBJ.js";
-import "./chunk-E6RPYGJP.js";
 import {
   resolveTrustedProjectContext
 } from "./chunk-CHIEVVQ2.js";
-import {
-  CLI_VERSION
-} from "./chunk-HE7WUOX2.js";
 import "./chunk-GNBMKISG.js";
-import "./chunk-72TESSG2.js";
+import "./chunk-AQM2Q6XZ.js";
 import "./chunk-KONYGNG6.js";
-import "./chunk-R7HI2NMR.js";
+import "./chunk-XDA57K4Q.js";
 import "./chunk-US5ZFPAU.js";
-import "./chunk-YDD74UVE.js";
+import {
+  CLI_VERSION
+} from "./chunk-HE7WUOX2.js";
+import "./chunk-MJG4FQ27.js";
 import {
   automaticKind,
   canSelectModel,
   discoverProviders,
   hasApiCredential,
   isAnonymousZen
-} from "./chunk-HLHYVGQE.js";
+} from "./chunk-PKIH55PX.js";
 import {
   ALL_PROVIDER_IDS,
   PROVIDER_REGISTRY
 } from "./chunk-6LLJQ3KY.js";
-import "./chunk-GYM3FUBH.js";
-import "./chunk-N3YMYKEU.js";
+import {
+  launchRefusal
+} from "./chunk-Z7J6WN6G.js";
+import "./chunk-D5HL6QDV.js";
+import "./chunk-356N4VBU.js";
 import "./chunk-EEDZOGV4.js";
 import {
   archiveConversation,
@@ -105,11 +108,11 @@ import {
   refreshIndex,
   setTitle,
   unarchiveConversation
-} from "./chunk-KK73BCYK.js";
+} from "./chunk-SZUOO7A2.js";
 import {
   cliProjectRoot
 } from "./chunk-H6B6AROX.js";
-import "./chunk-V6NJWYMP.js";
+import "./chunk-ZDAUAJ4L.js";
 import {
   cliPalStore,
   createPal,
@@ -119,27 +122,28 @@ import {
   listPals,
   palAtWorkspace,
   updatePal
-} from "./chunk-DRXG4OLL.js";
+} from "./chunk-466ECWQB.js";
 import {
   isTrusted,
   isTrustedAtStateRoot,
   trustDir,
   untrustDir
-} from "./chunk-DW23UIKM.js";
+} from "./chunk-RU3AE4JE.js";
 import {
   compilePermissionLayers,
   permissionLayersOf,
   warnLegacyMcpPermissionNames
-} from "./chunk-KSLX3NGM.js";
+} from "./chunk-3CEDA5YH.js";
+import "./chunk-WMEZTDLT.js";
 import {
   cliLogger
-} from "./chunk-34IZ6DMB.js";
+} from "./chunk-YMSXUKHE.js";
 import "./chunk-OH6TB27S.js";
 import {
   isOfferableModel
 } from "./chunk-U3JIZFOS.js";
 import "./chunk-TCXFKEYW.js";
-import "./chunk-T5GKAQHN.js";
+import "./chunk-ORHVELT4.js";
 import {
   canonicalProjectPath
 } from "./chunk-JORONMD3.js";
@@ -150,8 +154,8 @@ import {
   readStoredGeminiApiKey,
   writeStoredApiKey,
   writeStoredGeminiApiKey
-} from "./chunk-LO5DFG6H.js";
-import "./chunk-UARWI3TA.js";
+} from "./chunk-735YHXE3.js";
+import "./chunk-GW7O5N42.js";
 import {
   ACPServer,
   DiskLogMedium,
@@ -185,7 +189,7 @@ import {
   resolveWithinAnyReal,
   resolveWithinReal,
   selectAssistantText
-} from "./chunk-77AX2GEP.js";
+} from "./chunk-LA7SHC2B.js";
 import {
   __commonJS,
   __name,
@@ -8529,7 +8533,7 @@ __name(parseCodexModels, "parseCodexModels");
 function codexPermissionConfig(mode, cwd) {
   if (mode === "plan" || mode === "strict")
     return { approvalPolicy: "never", sandboxPolicy: { type: "readOnly", networkAccess: false } };
-  if (mode === "auto")
+  if (mode === "auto" || mode === "bypass")
     return { approvalPolicy: "on-request", sandboxPolicy: { type: "dangerFullAccess" } };
   if (mode === "accept-edits")
     return {
@@ -8836,7 +8840,7 @@ var CodexConnection = class {
     permissions: "interactive",
     interrupt: "native-terminal",
     attachments: [],
-    reviewModes: ["prompt", "accept-edits", "auto", "strict", "plan"]
+    reviewModes: ["prompt", "accept-edits", "auto", "bypass", "strict", "plan"]
   };
   get capabilities() {
     return this.capabilitiesValue;
@@ -9094,9 +9098,9 @@ var CodexConnection = class {
       decisions: ["approve-once", "reject", "cancel"]
     };
     this.reviews.set(request.requestId, { rpcId: id2, method, request, params });
-    if (["auto", "strict", "plan"].includes(this.permissionMode)) {
+    if (["auto", "bypass", "strict", "plan"].includes(this.permissionMode)) {
       await this.respond(request, {
-        kind: this.permissionMode === "auto" ? "approve-once" : "reject"
+        kind: this.permissionMode === "auto" || this.permissionMode === "bypass" ? "approve-once" : "reject"
       });
       return;
     }
@@ -9789,7 +9793,7 @@ function withCliHarnesses(base, directory, deps = createDefaults()) {
         const { row: model } = await findModel(choice.engine, cwd, choice.model);
         if (!model) throw new Error("Choose a model listed by this engine.");
         const mode = request.options?.permissionMode ?? "prompt";
-        const supportedReviewModes = choice.engine === "codex-cli" ? ["prompt", "plan", "accept-edits", "auto", "strict"] : ["prompt", "plan"];
+        const supportedReviewModes = choice.engine === "codex-cli" ? ["prompt", "plan", "accept-edits", "auto", "bypass", "strict"] : ["prompt", "plan"];
         if (!supportedReviewModes.includes(mode))
           throw new Error(
             choice.engine === "claude-code" ? "This engine supports Ask first and Plan only." : "This engine does not support the selected permission mode."
@@ -12311,6 +12315,14 @@ async function lookupInIndex(protocol, kind, externalId) {
   }
 }
 __name(lookupInIndex, "lookupInIndex");
+function assertModeAllowed(record2, mode) {
+  const refusal = launchRefusal(mode, { settings: record2.permissionSettings });
+  if (refusal) throw new Error(refusal);
+  if (mode === "classify" && record2.session.autoMode?.available === false) {
+    throw new Error(record2.session.autoMode.reason ?? "Auto mode is not available here.");
+  }
+}
+__name(assertModeAllowed, "assertModeAllowed");
 var MISSING_RETRY_COMPUTER = "The original Pal computer lifetime cannot be verified. This checkpoint is retained; Retry cannot attach it to a new computer.";
 var CHANGED_RETRY_COMPUTER = "The original Pal computer is unavailable, changed or under operator control. This checkpoint is retained.";
 function readyComputerPin(record2) {
@@ -12608,6 +12620,7 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
           } : {},
           ...target.origin ? { origin: target.origin } : {},
           rules: permissions.rules,
+          ...projectCtx.config.permissionSettings ? { permissionSettings: projectCtx.config.permissionSettings } : {},
           ...projectCtx.config.mcpServers ? { mcpServers: projectCtx.config.mcpServers } : {},
           ...projectCtx.config.plugins ? { plugins: projectCtx.config.plugins } : {},
           ...projectCtx.config.skills ? { skills: projectCtx.config.skills } : {},
@@ -12657,6 +12670,7 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
           ownedPal: !!palBinding,
           ...palBinding ? { palId: palBinding.pal.id, readyComputer: palEnvironment?.readyComputer } : {},
           provider: primary.id,
+          ...projectCtx.config.permissionSettings ? { permissionSettings: projectCtx.config.permissionSettings } : {},
           model: primary.model ?? probe.detected.find(({ entry }) => entry.id === primary.id)?.entry.defaultModel ?? "",
           ...carriedRetry ? { retrySettings: carriedRetry } : {},
           conversations: conversationState,
@@ -12761,6 +12775,8 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
           record2.session,
           record2.ownedPal ? "auto" : "prompt"
         );
+        assertModeAllowed(record2, settings.permissionMode);
+        let turnMode = settings.permissionMode;
         if (!record2.ownedPal) {
           liveInputs.get(sessionId)?.close();
           liveInbox = new LivePromptInbox(
@@ -12782,6 +12798,10 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
         undoNotes.delete(sessionId);
         for await (const event of record2.session.send(messages, {
           ...settings,
+          currentPermissionMode: /* @__PURE__ */ __name(() => turnMode, "currentPermissionMode"),
+          onAutoModeLimit: /* @__PURE__ */ __name(() => {
+            turnMode = "prompt";
+          }, "onAutoModeLimit"),
           ...undoNote ? { systemNote: undoNote } : {},
           ...computer ? { assertExecutionAllowed: /* @__PURE__ */ __name(() => assertRetryComputer(record2, original), "assertExecutionAllowed") } : {},
           signal,
@@ -12850,6 +12870,7 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
         record2.session,
         "prompt"
       );
+      assertModeAllowed(record2, settings.permissionMode);
       const facts = await readConversationFacts(record2.conversations, target.sessionId);
       const started = facts?.records.find(
         (row2) => row2.type === "turn_started" && row2.turnId === turnId
@@ -13497,6 +13518,8 @@ async function runAcpCommand(ctx, desktop = false) {
   const server = new ACPServer({
     supportsPromptAttachments: true,
     supportsPromptOptions: true,
+    // `assertModeAllowed` below applies the settings that shut either door.
+    promptPermissionModes: ["bypass", "classify"],
     supportsTaskNotifications: desktop,
     transport,
     gateway: runtime.gateway,
@@ -13564,4 +13587,4 @@ export {
   resolveAcpSession,
   runAcpCommand
 };
-//# sourceMappingURL=acp-WRUFVVVS.js.map
+//# sourceMappingURL=acp-WH4EFAFK.js.map