@namzu/cli 37.2.1 → 38.0.0

package/dist/chunks/{chunk-WWREIUJR.js → chunk-BQRKMDDF.js}

@@ -9,11 +9,11 @@ import {
 } from "./chunk-JV3LONAU.js";
 import {
   openInBrowser
-} from "./chunk-VUE7LP6D.js";
+} from "./chunk-U6EH3UCL.js";
 import {
   beginCodexDeviceLogin,
   beginSubscriptionLogin
-} from "./chunk-57GLVV5T.js";
+} from "./chunk-UKOMZND2.js";
 import {
   EXIT_FAIL,
   EXIT_OK,
@@ -29,7 +29,7 @@ import {
   readStoredCodexCredential,
   readStoredGeminiApiKey,
   readStoredSubscriptionCredential
-} from "./chunk-24GH4KQJ.js";
+} from "./chunk-735YHXE3.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -308,4 +308,4 @@ export {
   loginCommand,
   logoutCommand
 };
-//# sourceMappingURL=chunk-WWREIUJR.js.map
+//# sourceMappingURL=chunk-BQRKMDDF.js.map

package/dist/chunks/{chunk-BMR6E2FY.js → chunk-D5HL6QDV.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-EEDZOGV4.js";
 import {
   hostTimeZone
-} from "./chunk-N2ANOFXH.js";
+} from "./chunk-LA7SHC2B.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -209,4 +209,4 @@ export {
   PAUSED_TURN_LINES,
   handoffContinuationNote
 };
-//# sourceMappingURL=chunk-BMR6E2FY.js.map
+//# sourceMappingURL=chunk-D5HL6QDV.js.map

package/dist/chunks/{chunk-QVUDFCFY.js → chunk-G2ZBMR22.js}

@@ -7,15 +7,15 @@ import {
   listRecent,
   loadResumableConversation,
   openSessions
-} from "./chunk-WOY76GQF.js";
+} from "./chunk-SZUOO7A2.js";
 import {
   cliLogger
-} from "./chunk-HGADGGEG.js";
+} from "./chunk-YMSXUKHE.js";
 import {
   GitWorktreeDriver,
   asSessionId,
   generateWorkspaceId
-} from "./chunk-N2ANOFXH.js";
+} from "./chunk-LA7SHC2B.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -242,4 +242,4 @@ export {
   worktreeOpenHint,
   openManagedWorktrees
 };
-//# sourceMappingURL=chunk-QVUDFCFY.js.map
+//# sourceMappingURL=chunk-G2ZBMR22.js.map

package/dist/chunks/{chunk-3MUR66WZ.js → chunk-G6ETOUUR.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-HE7WUOX2.js";
 import {
   codeAnalysisSelfTest
-} from "./chunk-YHSMEYOT.js";
+} from "./chunk-MJG4FQ27.js";
 import {
   EXIT_USAGE
 } from "./chunk-Y7B67G22.js";
@@ -33,7 +33,7 @@ import {
   resolveChainCapabilities,
   unresolvedMembers,
   wslWindowsHome
-} from "./chunk-GHF6GJ5Y.js";
+} from "./chunk-PKIH55PX.js";
 import {
   PROVIDER_REGISTRY
 } from "./chunk-6LLJQ3KY.js";
@@ -52,7 +52,7 @@ import {
   invariants,
   isolationOf,
   resolveNamzuHome
-} from "./chunk-N2ANOFXH.js";
+} from "./chunk-LA7SHC2B.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -1161,4 +1161,4 @@ export {
   runDoctorCommand,
   doctorCommand
 };
-//# sourceMappingURL=chunk-3MUR66WZ.js.map
+//# sourceMappingURL=chunk-G6ETOUUR.js.map

package/dist/chunks/{chunk-VIS4SNKA.js → chunk-GAYGCGIY.js}

@@ -2,17 +2,17 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   claimPalConversation
-} from "./chunk-MCXVH6TQ.js";
+} from "./chunk-PWFLM6BJ.js";
 import {
   closeSessions,
   openSessions
-} from "./chunk-WOY76GQF.js";
+} from "./chunk-SZUOO7A2.js";
 import {
   getCliPalStore
-} from "./chunk-PJWDYXQI.js";
+} from "./chunk-466ECWQB.js";
 import {
   restrictToOwner
-} from "./chunk-24GH4KQJ.js";
+} from "./chunk-735YHXE3.js";
 import {
   DiskPalActivitySubscriptionPolicy,
   DiskPalActivitySubscriptionStore,
@@ -23,7 +23,7 @@ import {
   createPalIngressInboxSource,
   createPalMessagingTools,
   resolveNamzuHome
-} from "./chunk-N2ANOFXH.js";
+} from "./chunk-LA7SHC2B.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -316,4 +316,4 @@ export {
   createCliPalIngressHost,
   createCliPalMessagingContext
 };
-//# sourceMappingURL=chunk-VIS4SNKA.js.map
+//# sourceMappingURL=chunk-GAYGCGIY.js.map

package/dist/chunks/chunk-GK4HLIQQ.js

@@ -0,0 +1,63 @@
+import { createRequire as __namzuCreateRequire } from 'node:module';
+const require = __namzuCreateRequire(import.meta.url);
+import {
+  namzuHomePath
+} from "./chunk-GW7O5N42.js";
+import {
+  __name
+} from "./chunk-76FLAFCG.js";
+
+// src/permissions/consent.ts
+import { randomUUID } from "node:crypto";
+import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+var FILE_MODE = 384;
+var DIR_MODE = 448;
+var VERSION = 1;
+function acknowledgementsPath(home) {
+  return join(namzuHomePath(home), "acknowledgements.json");
+}
+__name(acknowledgementsPath, "acknowledgementsPath");
+function read(path) {
+  try {
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    return {
+      version: VERSION,
+      ...typeof parsed.bypass === "string" ? { bypass: parsed.bypass } : {}
+    };
+  } catch {
+    return { version: VERSION };
+  }
+}
+__name(read, "read");
+function hasAcknowledgedBypass(home) {
+  return read(acknowledgementsPath(home)).bypass !== void 0;
+}
+__name(hasAcknowledgedBypass, "hasAcknowledgedBypass");
+function acknowledgeBypass(home, now = () => /* @__PURE__ */ new Date()) {
+  const path = acknowledgementsPath(home);
+  const current = read(path);
+  if (current.bypass !== void 0) return;
+  const next = { ...current, bypass: now().toISOString() };
+  mkdirSync(dirname(path), { recursive: true, mode: DIR_MODE });
+  const temp = `${path}.${randomUUID()}.tmp`;
+  try {
+    writeFileSync(temp, `${JSON.stringify(next, null, 2)}
+`, { mode: FILE_MODE });
+    renameSync(temp, path);
+  } catch (error) {
+    rmSync(temp, { force: true });
+    throw error;
+  }
+}
+__name(acknowledgeBypass, "acknowledgeBypass");
+var BYPASS_CONSENT_TITLE = "Run without asking?";
+var BYPASS_CONSENT_BODY = "In bypass mode Namzu runs commands and edits files anywhere you can, without asking, including outside this folder. It still stops for removing a home or top-level folder, leaving a sandbox, rules that say deny or ask, and a short list of destructive commands. Only use it in a folder and on a machine you trust.";
+
+export {
+  hasAcknowledgedBypass,
+  acknowledgeBypass,
+  BYPASS_CONSENT_TITLE,
+  BYPASS_CONSENT_BODY
+};
+//# sourceMappingURL=chunk-GK4HLIQQ.js.map

package/dist/chunks/chunk-GK4HLIQQ.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../src/permissions/consent.ts"],
+  "mappings": ";;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,WAAW,cAAc,YAAY,QAAQ,qBAAqB;AAC3E,SAAS,SAAS,YAAY;AAa9B,IAAM,YAAY;AAClB,IAAM,WAAW;AACjB,IAAM,UAAU;AAOT,SAAS,qBAAqB,MAAuB;AAC3D,SAAO,KAAK,cAAc,IAAI,GAAG,uBAAuB;AACzD;AAFgB;AAIhB,SAAS,KAAK,MAAmC;AAChD,MAAI;AACH,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,WAAO;AAAA,MACN,SAAS;AAAA,MACT,GAAI,OAAO,OAAO,WAAW,WAAW,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IACtE;AAAA,EACD,QAAQ;AACP,WAAO,EAAE,SAAS,QAAQ;AAAA,EAC3B;AACD;AAVS;AAaF,SAAS,sBAAsB,MAAwB;AAC7D,SAAO,KAAK,qBAAqB,IAAI,CAAC,EAAE,WAAW;AACpD;AAFgB;AAKT,SAAS,kBAAkB,MAAe,MAAkB,MAAM,oBAAI,KAAK,GAAS;AAC1F,QAAM,OAAO,qBAAqB,IAAI;AACtC,QAAM,UAAU,KAAK,IAAI;AACzB,MAAI,QAAQ,WAAW,OAAW;AAClC,QAAM,OAA4B,EAAE,GAAG,SAAS,QAAQ,IAAI,EAAE,YAAY,EAAE;AAC5E,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,SAAS,CAAC;AAC5D,QAAM,OAAO,GAAG,IAAI,IAAI,WAAW,CAAC;AACpC,MAAI;AACH,kBAAc,MAAM,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,UAAU,CAAC;AAC7E,eAAW,MAAM,IAAI;AAAA,EACtB,SAAS,OAAO;AACf,WAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAC5B,UAAM;AAAA,EACP;AACD;AAdgB;AAiBT,IAAM,uBAAuB;AAC7B,IAAM,sBACZ;",
+  "names": []
+}

package/dist/chunks/{chunk-BLDYNZ3J.js → chunk-GW7O5N42.js}

@@ -2,7 +2,7 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   resolveNamzuHome
-} from "./chunk-N2ANOFXH.js";
+} from "./chunk-LA7SHC2B.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -17,4 +17,4 @@ __name(namzuHomePath, "namzuHomePath");
 export {
   namzuHomePath
 };
-//# sourceMappingURL=chunk-BLDYNZ3J.js.map
+//# sourceMappingURL=chunk-GW7O5N42.js.map

package/dist/chunks/{chunk-OCGWHJEN.js → chunk-HA37WH7H.js}

@@ -17,16 +17,16 @@ import {
   projectDigestChanges,
   scriptShellUnavailableReason,
   verifyScheduledScript
-} from "./chunk-MQVRM5OC.js";
+} from "./chunk-2WMXW2HX.js";
 import {
   allowsWrites,
   compileJobPolicy,
   compileScriptCheckPolicy,
   withheldTools
-} from "./chunk-KS43Q64I.js";
+} from "./chunk-TZLYJWSW.js";
 import {
   resumeCommand
-} from "./chunk-ZARLAIDT.js";
+} from "./chunk-N5L7HGNL.js";
 import {
   appendHistory,
   compactHistory,
@@ -35,13 +35,13 @@ import {
   readState,
   withoutUndefined,
   writeState
-} from "./chunk-S44YIFC3.js";
+} from "./chunk-TFA5ZAGJ.js";
 import {
   resolveTrustedProjectContext
 } from "./chunk-CHIEVVQ2.js";
 import {
   readPermissionLayers
-} from "./chunk-WCUCNKJU.js";
+} from "./chunk-AQM2Q6XZ.js";
 import {
   SCHEDULE_FORMAT_VERSION,
   confirmationHolds,
@@ -65,7 +65,7 @@ import {
 } from "./chunk-OEW7CJKK.js";
 import {
   readWslMountRoot
-} from "./chunk-GHF6GJ5Y.js";
+} from "./chunk-PKIH55PX.js";
 import {
   pauseWait
 } from "./chunk-XEUQN4JC.js";
@@ -73,7 +73,7 @@ import {
   describeTurnInterruption,
   retryAfterMs,
   unattendedNote
-} from "./chunk-BMR6E2FY.js";
+} from "./chunk-D5HL6QDV.js";
 import {
   archiveConversation,
   closeSessions,
@@ -82,12 +82,12 @@ import {
   readIdentity,
   setTitle,
   startConversation
-} from "./chunk-WOY76GQF.js";
+} from "./chunk-SZUOO7A2.js";
 import {
   cliLogger,
   createStderrSink,
   installCliLogging
-} from "./chunk-HGADGGEG.js";
+} from "./chunk-YMSXUKHE.js";
 import {
   DiskSessionLeaseStore,
   DiskSessionLog,
@@ -107,7 +107,7 @@ import {
   releaseHeldSessionLeases,
   revealHiddenCharacters,
   scanSchedulePrompt
-} from "./chunk-N2ANOFXH.js";
+} from "./chunk-LA7SHC2B.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -2590,7 +2590,7 @@ async function runFire(ctx, paths, args, deps = {}) {
   const daemonEnv = readDaemonEnv(paths.daemonEnv);
   warnings.push(...daemonEnv.warnings);
   const discoveryEnv = { ...deps.env ?? process.env, ...daemonEnv.values };
-  const agent = deps.agent ?? await import("./agent-W75JSUKG.js");
+  const agent = deps.agent ?? await import("./agent-UNGHD2P3.js");
   const probe = await agent.probeAgentSession({ env: discoveryEnv });
   const detected = probe.detected.find((d) => d.entry.id === model.provider);
   if (!detected) {
@@ -2953,4 +2953,4 @@ export {
   parseFireArgs,
   runFire
 };
-//# sourceMappingURL=chunk-OCGWHJEN.js.map
+//# sourceMappingURL=chunk-HA37WH7H.js.map

package/dist/chunks/{chunk-T6NRDLAQ.js → chunk-HCQUBJTS.js}

@@ -26,6 +26,9 @@ import {
 import {
   REASONING_EFFORT_LEVELS
 } from "./chunk-LXB3S4IC.js";
+import {
+  PERMISSION_MODE_NAMES
+} from "./chunk-WMEZTDLT.js";
 import {
   __name
 } from "./chunk-76FLAFCG.js";
@@ -152,7 +155,7 @@ var acpCommand = lazyCommand(
     description: "Speak the agent-client protocol over this process\u2019s stdio",
     passThrough: true
   },
-  async () => (await import("./acp-IV4G4DDN.js")).acpCommand
+  async () => (await import("./acp-WH4EFAFK.js")).acpCommand
 );
 var computerCommand = lazyCommand(
   {
@@ -168,7 +171,7 @@ var archiveCommand = lazyCommand(
     description: "List or restore archived conversations in this project",
     passThrough: true
   },
-  async () => (await import("./archive-KEMEXDTF.js")).archiveCommand
+  async () => (await import("./archive-IAT6HD7B.js")).archiveCommand
 );
 var doctorCommand = lazyCommand(
   {
@@ -176,7 +179,7 @@ var doctorCommand = lazyCommand(
     description: "Run health checks against the local Namzu environment",
     passThrough: true
   },
-  async () => (await import("./doctor-GEZEPFP6.js")).doctorCommand
+  async () => (await import("./doctor-BSYUHWBV.js")).doctorCommand
 );
 var execCommand = lazyCommand(
   {
@@ -185,7 +188,7 @@ var execCommand = lazyCommand(
     description: "Run a single prompt headlessly: print the reply, or stream events with --json",
     passThrough: true
   },
-  async () => (await import("./exec-4QTKYNLX.js")).execCommand
+  async () => (await import("./exec-66BTZSXT.js")).execCommand
 );
 var residentCommand = lazyCommand(
   {
@@ -193,7 +196,7 @@ var residentCommand = lazyCommand(
     description: "Manage persistent work and explicitly authorized resident runners (experimental)",
     passThrough: true
   },
-  async () => (await import("./resident-BNR3NVGQ.js")).residentCommand
+  async () => (await import("./resident-YDO5N5JH.js")).residentCommand
 );
 var loginCommand = lazyCommand(
   {
@@ -201,7 +204,7 @@ var loginCommand = lazyCommand(
     description: "Sign in with a provider subscription and store the credential.",
     passThrough: true
   },
-  async () => (await import("./login-JICZUCU4.js")).loginCommand
+  async () => (await import("./login-3NTMRWH5.js")).loginCommand
 );
 var logoutCommand = lazyCommand(
   {
@@ -209,11 +212,11 @@ var logoutCommand = lazyCommand(
     description: "Remove a credential namzu stored on this machine.",
     passThrough: true
   },
-  async () => (await import("./login-JICZUCU4.js")).logoutCommand
+  async () => (await import("./login-3NTMRWH5.js")).logoutCommand
 );
 var mcpCommand = lazyCommand(
   { name: "mcp", description: "Manage user tool servers", passThrough: true },
-  async () => (await import("./mcp-AWQZVLNR.js")).mcpCommand
+  async () => (await import("./mcp-R7AB2UAO.js")).mcpCommand
 );
 var drainCommand = lazyCommand(
   {
@@ -221,11 +224,11 @@ var drainCommand = lazyCommand(
     description: "Continue a turn another process left behind (one pass, then exit)",
     passThrough: true
   },
-  async () => (await import("./drain-HB5HGWEM.js")).drainCommand
+  async () => (await import("./drain-ANNH6M4M.js")).drainCommand
 );
 var evalCommand = lazyCommand(
   { name: "eval", description: "Run eval suites and set an exit code", passThrough: true },
-  async () => (await import("./eval-RA3FXHBB.js")).evalCommand
+  async () => (await import("./eval-FOOSHOQH.js")).evalCommand
 );
 var historyCommand = lazyCommand(
   {
@@ -233,7 +236,7 @@ var historyCommand = lazyCommand(
     description: "Print a session's persisted messages as JSON (for host UIs)",
     passThrough: true
   },
-  async () => (await import("./host-queries-KV4PSA37.js")).historyCommand
+  async () => (await import("./host-queries-DAZODJGM.js")).historyCommand
 );
 var skillsCommand = lazyCommand(
   {
@@ -241,7 +244,7 @@ var skillsCommand = lazyCommand(
     description: "List skills available to a working directory",
     passThrough: true
   },
-  async () => (await import("./skills-7YS6Z6KZ.js")).skillsCommand
+  async () => (await import("./skills-JOY3NTBC.js")).skillsCommand
 );
 var skillsJSONCommand = lazyCommand(
   {
@@ -249,7 +252,7 @@ var skillsJSONCommand = lazyCommand(
     description: "Print discovered skills as JSON (for host UIs)",
     passThrough: true
   },
-  async () => (await import("./host-queries-KV4PSA37.js")).skillsJSONCommand
+  async () => (await import("./host-queries-DAZODJGM.js")).skillsJSONCommand
 );
 var providersJSONCommand = lazyCommand(
   {
@@ -257,7 +260,7 @@ var providersJSONCommand = lazyCommand(
     description: "Print providers + per-provider models as JSON (for host UIs)",
     passThrough: true
   },
-  async () => (await import("./host-queries-KV4PSA37.js")).providersJSONCommand
+  async () => (await import("./host-queries-DAZODJGM.js")).providersJSONCommand
 );
 var upgradeCommand = lazyCommand(
   {
@@ -265,7 +268,7 @@ var upgradeCommand = lazyCommand(
     description: "Update the active global Namzu installation",
     passThrough: true
   },
-  async () => (await import("./upgrade-JRTE42RR.js")).upgradeCommand
+  async () => (await import("./upgrade-ZZYBXJXO.js")).upgradeCommand
 );
 var serveCommand = lazyCommand(
   {
@@ -280,7 +283,7 @@ var stateCommand = lazyCommand(
     description: "Inspect local Namzu state without changing it",
     passThrough: true
   },
-  async () => (await import("./state-2RDZT6FZ.js")).stateCommand
+  async () => (await import("./state-QQ2YFP4G.js")).stateCommand
 );
 var scheduleCommand = lazyCommand(
   {
@@ -288,7 +291,7 @@ var scheduleCommand = lazyCommand(
     description: "Scheduled jobs that run while namzu is closed, and the service that runs them",
     passThrough: true
   },
-  async () => (await import("./schedule-2UXRUWFI.js")).scheduleCommand
+  async () => (await import("./schedule-6XIBAC7U.js")).scheduleCommand
 );
 var browserCommand = lazyCommand(
   {
@@ -296,7 +299,7 @@ var browserCommand = lazyCommand(
     description: "Browser profiles for the browser tools: sign in, list, status, install, remove",
     passThrough: true
   },
-  async () => (await import("./browser-7KFOR6DK.js")).browserCommand
+  async () => (await import("./browser-4P3N4ZQL.js")).browserCommand
 );
 function createLazyPalCommand(resumeCommand) {
   return lazyCommand(
@@ -305,7 +308,7 @@ function createLazyPalCommand(resumeCommand) {
       description: "Create and operate persistent Pals with their own local virtual computers",
       passThrough: true
     },
-    async () => (await import("./pal-5F3CH7BQ.js")).createPalCommand(resumeCommand)
+    async () => (await import("./pal-TNQSB2GK.js")).createPalCommand(resumeCommand)
   );
 }
 __name(createLazyPalCommand, "createLazyPalCommand");
@@ -316,20 +319,11 @@ function createLazyWorktreeCommand(open) {
       description: "Create, fork, list and resume managed Git worktrees",
       passThrough: true
     },
-    async () => (await import("./worktree-ZK2OD56A.js")).createWorktreeCommand(open)
+    async () => (await import("./worktree-7C3EZZ7D.js")).createWorktreeCommand(open)
   );
 }
 __name(createLazyWorktreeCommand, "createLazyWorktreeCommand");
 
-// src/permissions/mode-names.ts
-var PERMISSION_MODE_NAMES = [
-  "prompt",
-  "accept-edits",
-  "auto",
-  "strict",
-  "plan"
-];
-
 // src/cli.ts
 var EX_USAGE = 64;
 var REMOVED_COMMANDS = {
@@ -385,10 +379,10 @@ async function runCli(opts) {
     ).choices(["pretty", "json"])
   ).option(
     "--dangerously-skip-permissions",
-    "Run tools without asking for approval (no permission prompts). Only use in a sandbox or a folder you fully trust."
+    "Start in bypass mode: run tools without asking, except for what always needs a person. Only use in a sandbox or a folder you fully trust."
   ).option("--yolo", "Alias of --dangerously-skip-permissions.").option(
     "--allow-dangerously-skip-permissions",
-    "Let Shift+Tab reach the auto-approve mode, without starting in it."
+    "Let Shift+Tab reach bypass mode, without starting in it."
   ).option(
     "--provider <id>",
     "Start the interactive session on this provider for this launch only; the saved choice is untouched."
@@ -403,7 +397,7 @@ async function runCli(opts) {
   ).addOption(
     new Option(
       "--permission-mode <mode>",
-      "Permission mode for this launch only; wins over --yolo. /permissions changes it from inside."
+      "Permission mode for this launch only; wins over --yolo. auto lets a second model check each call; bypass runs without asking. /permissions changes it from inside."
     ).choices(PERMISSION_MODE_NAMES)
   ).option(
     "--message <text>",
@@ -420,7 +414,7 @@ async function runCli(opts) {
     "--profile <name>",
     "Apply a named profile from the config files. A name no file declares is refused, not ignored."
   ).hook("preAction", async (command, action) => {
-    rt ??= await import("./cli-runtime-23BX2YCB.js");
+    rt ??= await import("./cli-runtime-HEQVJMIJ.js");
     const launchOnly = ["provider", "model", "effort", "permissionMode", "message", "continue", "resume"].filter((key) => command.opts()[key] !== void 0);
     if (launchOnly.length > 0 && !["namzu", "resume"].includes(action.name())) {
       const flags = launchOnly.map(
@@ -595,8 +589,8 @@ async function runCli(opts) {
       let conversationId = initialConversationId;
       let openResumePicker;
       if (conversationId === void 0 && (launchOpts.continue || launchOpts.resume !== void 0)) {
-        const { resolveTuiResume } = await import("./resume-6HKESNKD.js");
-        const { openSessions, closeSessions } = await import("./store-3CNDOQL4.js");
+        const { resolveTuiResume } = await import("./resume-OJYZ6YER.js");
+        const { openSessions, closeSessions } = await import("./store-47KUDP7H.js");
         let sessions = null;
         try {
           sessions = await openSessions(process.cwd());
@@ -622,17 +616,40 @@ async function runCli(opts) {
         if (outcome.kind === "picker")
           openResumePicker = outcome.query === void 0 ? {} : { query: outcome.query };
       }
-      const structuredOutput = launchOpts.outputSchema ? (await import("./output-schema-ASYUJL2G.js")).loadOutputSchema(
+      const structuredOutput = launchOpts.outputSchema ? (await import("./output-schema-SKFZ25BQ.js")).loadOutputSchema(
         resolve(process.cwd(), launchOpts.outputSchema)
       ) : void 0;
       const skipPermissions = Boolean(launchOpts.dangerouslySkipPermissions || launchOpts.yolo);
+      const permissionPlanFor = /* @__PURE__ */ __name((config) => runtime().planLaunchMode({
+        permissionModeFlag: launchOpts.permissionMode,
+        skipPermissions,
+        allowBypassFlag: launchOpts.allowDangerouslySkipPermissions === true,
+        settings: config.permissionSettings
+      }), "permissionPlanFor");
+      const firstPlan = permissionPlanFor(getBootstrapContext().config);
+      if ("error" in firstPlan) {
+        getBootstrapContext().formatter.error({ message: firstPlan.error });
+        setExitCode(EX_USAGE);
+        return;
+      }
+      let launchPlan = firstPlan.plan;
+      if (launchPlan.mode === "bypass" && !runtime().hasAcknowledgedBypass()) {
+        if (await runtime().askBypassConsent()) {
+          try {
+            runtime().acknowledgeBypass();
+          } catch {
+          }
+        } else {
+          launchPlan = { ...launchPlan, mode: "prompt", source: "default" };
+        }
+      }
       const provider = launchOpts.provider?.trim();
       const model = launchOpts.model?.trim();
       const launchSettings = {
         ...provider ? { provider } : {},
         ...model ? { model } : {},
         ...launchOpts.effort ? { effort: launchOpts.effort } : {},
-        ...launchOpts.permissionMode ? { permissionMode: launchOpts.permissionMode } : {},
+        ...launchPlan.source === "launch-flag" || launchPlan.source === "config-default" ? { permissionMode: launchPlan.mode } : {},
         ...launchOpts.message?.trim() ? { message: launchOpts.message } : {}
       };
       const commandCtx = getBootstrapContext();
@@ -661,8 +678,16 @@ async function runCli(opts) {
           ...structuredOutput ? { structuredOutput } : {},
           version: CLI_VERSION,
           configDebug: resolvedCtx.configDebug,
-          skipPermissions,
+          skipPermissions: skipPermissions && launchPlan.source === "launch-bypass",
           ...launchOpts.allowDangerouslySkipPermissions ? { allowDangerouslySkipPermissions: true } : {},
+          permissionSource: launchPlan.source,
+          // The project's own file may close bypass or auto for its folder, so the
+          // door is recomputed from the full configuration.
+          bypassAvailable: (() => {
+            const full = permissionPlanFor(resolvedCtx.config);
+            return "plan" in full && full.plan.bypassAvailable;
+          })(),
+          ...resolvedCtx.config.permissionSettings ? { permissionSettings: resolvedCtx.config.permissionSettings } : {},
           ...Object.keys(launchSettings).length > 0 ? { launchSettings } : {},
           ...additionalDirectories.length > 0 ? { additionalDirectories } : {},
           rules: browserSites ? runtime().withBrowserSiteRules(permissions.rules, browserSites.rules) : permissions.rules,
@@ -707,7 +732,7 @@ async function runCli(opts) {
         tuiCtx,
         (cwd) => buildTuiContext(resolveTrustedProjectContext(commandCtx, cwd), cwd)
       );
-      const { launchTui } = await import("./tui-EZVA52PY.js");
+      const { launchTui } = await import("./tui-2M6OGQUI.js");
       const resumeCommand = launchOpts.outputSchema ? [
         ...opts.resumeCommand ?? ["namzu"],
         "--output-schema",
@@ -724,7 +749,7 @@ async function runCli(opts) {
     );
   }, "launchInteractiveTui");
   program.command("resume").description("Resume an interactive conversation by its durable id").argument("<conversation-id>", "Conversation id printed when the TUI exited").action(async (conversationId) => {
-    const { scheduledSessionElsewhere } = await import("./resume-command-PPNI2EC7.js");
+    const { scheduledSessionElsewhere } = await import("./resume-command-5KZPLTK7.js");
     const elsewhere = scheduledSessionElsewhere(
       runtime().resolveNamzuHome(),
       conversationId,
@@ -777,7 +802,7 @@ namzu will not start with an explicit config value it cannot honour. ${remediati
       );
       return EXIT_BAD_CONFIG;
     }
-    const { reportCrash } = await import("./crash-report-V3BWOZ2M.js");
+    const { reportCrash } = await import("./crash-report-4ZIUEO2T.js");
     process.stderr.write(reportCrash(err));
     return EXIT_INTERNAL_ERROR;
   } finally {
@@ -839,4 +864,4 @@ export {
   registerAll,
   runCli
 };
-//# sourceMappingURL=chunk-T6NRDLAQ.js.map
+//# sourceMappingURL=chunk-HCQUBJTS.js.map