@namzu/cli 37.2.1 → 38.1.0

package/dist/chunks/{acp-IV4G4DDN.js → acp-QDANXLMJ.js}

@@ -2,20 +2,20 @@ import { createRequire as __namzuCreateRequire } from 'node:module';
 const require = __namzuCreateRequire(import.meta.url);
 import {
   dispatchCliPalMessages
-} from "./chunk-AHD7MEBE.js";
+} from "./chunk-E4RUPCFR.js";
 import {
   conversationMarkdown,
   lookupPr,
   runCommand,
   withKeyNote
-} from "./chunk-WK6GEMBO.js";
-import "./chunk-5M256BI5.js";
+} from "./chunk-3WIGPA6H.js";
+import "./chunk-OGBOS4O6.js";
 import {
   decideHeadlessTrust
-} from "./chunk-VKZIX3HT.js";
+} from "./chunk-PQNLAOAW.js";
 import {
   palSessionEnvironment
-} from "./chunk-2UHRQ45K.js";
+} from "./chunk-54U4UGTC.js";
 import {
   FileCheckpointStore,
   PluginSettingsStore,
@@ -26,17 +26,17 @@ import {
   sessionLogCheckpointView,
   validateComposerSendSettings,
   verifyCredential
-} from "./chunk-YUEHR7BW.js";
-import "./chunk-LC5CSMLC.js";
-import "./chunk-QVUDFCFY.js";
-import "./chunk-HWR7GXGJ.js";
+} from "./chunk-Y6O5MV4Y.js";
+import "./chunk-2UWTSQHA.js";
+import "./chunk-AIV33BFR.js";
+import "./chunk-7N5PZOSU.js";
 import "./chunk-WHODOMXA.js";
-import "./chunk-Z2LUKZ27.js";
-import "./chunk-EZOZQJBG.js";
-import "./chunk-VUE7LP6D.js";
+import "./chunk-TSSO2X7U.js";
+import "./chunk-NTC7YGAM.js";
+import "./chunk-GL4E6OIO.js";
 import "./chunk-NUGPLXVK.js";
-import "./chunk-57GLVV5T.js";
-import "./chunk-BGRWTZGG.js";
+import "./chunk-6BHLLXPK.js";
+import "./chunk-TR7AV6E5.js";
 import {
   cliPalComputerStatus,
   cliPalScreen,
@@ -49,44 +49,47 @@ import {
   startCliPalComputer,
   stopCliPalComputer,
   takeOverCliPalComputer
-} from "./chunk-E73OMVMG.js";
+} from "./chunk-ZJ575MQN.js";
 import {
   cliPalActivitySubscriptionPolicy,
   cliPalActivitySubscriptionStore,
   cliPalCommunicationPolicy,
   cliPalCommunicationStore
-} from "./chunk-VIS4SNKA.js";
+} from "./chunk-73XHOUDX.js";
 import {
   claimPalConversation,
   listPalConversations,
   palConversationBinding
-} from "./chunk-MCXVH6TQ.js";
+} from "./chunk-BOMYJAHT.js";
 import "./chunk-ZWA2JRJV.js";
 import {
   resolveTrustedProjectContext
 } from "./chunk-CHIEVVQ2.js";
 import "./chunk-GNBMKISG.js";
-import "./chunk-WCUCNKJU.js";
+import "./chunk-5TXMCMJL.js";
 import "./chunk-KONYGNG6.js";
-import "./chunk-WI2MIQOJ.js";
+import "./chunk-4UEMLMAO.js";
 import "./chunk-US5ZFPAU.js";
 import {
   CLI_VERSION
 } from "./chunk-HE7WUOX2.js";
-import "./chunk-YHSMEYOT.js";
+import "./chunk-IMVIKNHR.js";
 import {
   automaticKind,
   canSelectModel,
   discoverProviders,
   hasApiCredential,
   isAnonymousZen
-} from "./chunk-GHF6GJ5Y.js";
+} from "./chunk-JF3HMHOH.js";
 import {
   ALL_PROVIDER_IDS,
   PROVIDER_REGISTRY
 } from "./chunk-6LLJQ3KY.js";
-import "./chunk-BMR6E2FY.js";
-import "./chunk-JW7ZIF23.js";
+import {
+  launchRefusal
+} from "./chunk-AJVXO5QA.js";
+import "./chunk-BV57PYGE.js";
+import "./chunk-YI4HMJOG.js";
 import "./chunk-EEDZOGV4.js";
 import {
   archiveConversation,
@@ -105,11 +108,11 @@ import {
   refreshIndex,
   setTitle,
   unarchiveConversation
-} from "./chunk-WOY76GQF.js";
+} from "./chunk-MKT3L5E6.js";
 import {
   cliProjectRoot
 } from "./chunk-H6B6AROX.js";
-import "./chunk-BHUDDJYS.js";
+import "./chunk-ZWG3EZTX.js";
 import {
   cliPalStore,
   createPal,
@@ -119,27 +122,28 @@ import {
   listPals,
   palAtWorkspace,
   updatePal
-} from "./chunk-PJWDYXQI.js";
+} from "./chunk-ZDDZWL3G.js";
 import {
   isTrusted,
   isTrustedAtStateRoot,
   trustDir,
   untrustDir
-} from "./chunk-QDLHNM37.js";
+} from "./chunk-N37EFNAV.js";
 import {
   compilePermissionLayers,
   permissionLayersOf,
   warnLegacyMcpPermissionNames
-} from "./chunk-QEUOFWAZ.js";
+} from "./chunk-PBBISRKF.js";
+import "./chunk-WMEZTDLT.js";
 import {
   cliLogger
-} from "./chunk-HGADGGEG.js";
+} from "./chunk-RDPCXVEX.js";
 import "./chunk-OH6TB27S.js";
 import {
   isOfferableModel
 } from "./chunk-U3JIZFOS.js";
 import "./chunk-TCXFKEYW.js";
-import "./chunk-VEPUBE3H.js";
+import "./chunk-R5DD4NG3.js";
 import {
   canonicalProjectPath
 } from "./chunk-JORONMD3.js";
@@ -150,8 +154,8 @@ import {
   readStoredGeminiApiKey,
   writeStoredApiKey,
   writeStoredGeminiApiKey
-} from "./chunk-24GH4KQJ.js";
-import "./chunk-BLDYNZ3J.js";
+} from "./chunk-JOLXEWMZ.js";
+import "./chunk-KHUNDRQB.js";
 import {
   ACPServer,
   DiskLogMedium,
@@ -185,7 +189,7 @@ import {
   resolveWithinAnyReal,
   resolveWithinReal,
   selectAssistantText
-} from "./chunk-N2ANOFXH.js";
+} from "./chunk-2UGC7RUB.js";
 import {
   __commonJS,
   __name,
@@ -8529,7 +8533,7 @@ __name(parseCodexModels, "parseCodexModels");
 function codexPermissionConfig(mode, cwd) {
   if (mode === "plan" || mode === "strict")
     return { approvalPolicy: "never", sandboxPolicy: { type: "readOnly", networkAccess: false } };
-  if (mode === "auto")
+  if (mode === "auto" || mode === "bypass")
     return { approvalPolicy: "on-request", sandboxPolicy: { type: "dangerFullAccess" } };
   if (mode === "accept-edits")
     return {
@@ -8836,7 +8840,7 @@ var CodexConnection = class {
     permissions: "interactive",
     interrupt: "native-terminal",
     attachments: [],
-    reviewModes: ["prompt", "accept-edits", "auto", "strict", "plan"]
+    reviewModes: ["prompt", "accept-edits", "auto", "bypass", "strict", "plan"]
   };
   get capabilities() {
     return this.capabilitiesValue;
@@ -9094,9 +9098,9 @@ var CodexConnection = class {
       decisions: ["approve-once", "reject", "cancel"]
     };
     this.reviews.set(request.requestId, { rpcId: id2, method, request, params });
-    if (["auto", "strict", "plan"].includes(this.permissionMode)) {
+    if (["auto", "bypass", "strict", "plan"].includes(this.permissionMode)) {
       await this.respond(request, {
-        kind: this.permissionMode === "auto" ? "approve-once" : "reject"
+        kind: this.permissionMode === "auto" || this.permissionMode === "bypass" ? "approve-once" : "reject"
       });
       return;
     }
@@ -9789,7 +9793,7 @@ function withCliHarnesses(base, directory, deps = createDefaults()) {
         const { row: model } = await findModel(choice.engine, cwd, choice.model);
         if (!model) throw new Error("Choose a model listed by this engine.");
         const mode = request.options?.permissionMode ?? "prompt";
-        const supportedReviewModes = choice.engine === "codex-cli" ? ["prompt", "plan", "accept-edits", "auto", "strict"] : ["prompt", "plan"];
+        const supportedReviewModes = choice.engine === "codex-cli" ? ["prompt", "plan", "accept-edits", "auto", "bypass", "strict"] : ["prompt", "plan"];
         if (!supportedReviewModes.includes(mode))
           throw new Error(
             choice.engine === "claude-code" ? "This engine supports Ask first and Plan only." : "This engine does not support the selected permission mode."
@@ -12311,6 +12315,14 @@ async function lookupInIndex(protocol, kind, externalId) {
   }
 }
 __name(lookupInIndex, "lookupInIndex");
+function assertModeAllowed(record2, mode) {
+  const refusal = launchRefusal(mode, { settings: record2.permissionSettings });
+  if (refusal) throw new Error(refusal);
+  if (mode === "classify" && record2.session.autoMode?.available === false) {
+    throw new Error(record2.session.autoMode.reason ?? "Auto mode is not available here.");
+  }
+}
+__name(assertModeAllowed, "assertModeAllowed");
 var MISSING_RETRY_COMPUTER = "The original Pal computer lifetime cannot be verified. This checkpoint is retained; Retry cannot attach it to a new computer.";
 var CHANGED_RETRY_COMPUTER = "The original Pal computer is unavailable, changed or under operator control. This checkpoint is retained.";
 function readyComputerPin(record2) {
@@ -12608,6 +12620,7 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
           } : {},
           ...target.origin ? { origin: target.origin } : {},
           rules: permissions.rules,
+          ...projectCtx.config.permissionSettings ? { permissionSettings: projectCtx.config.permissionSettings } : {},
           ...projectCtx.config.mcpServers ? { mcpServers: projectCtx.config.mcpServers } : {},
           ...projectCtx.config.plugins ? { plugins: projectCtx.config.plugins } : {},
           ...projectCtx.config.skills ? { skills: projectCtx.config.skills } : {},
@@ -12657,6 +12670,7 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
           ownedPal: !!palBinding,
           ...palBinding ? { palId: palBinding.pal.id, readyComputer: palEnvironment?.readyComputer } : {},
           provider: primary.id,
+          ...projectCtx.config.permissionSettings ? { permissionSettings: projectCtx.config.permissionSettings } : {},
           model: primary.model ?? probe.detected.find(({ entry }) => entry.id === primary.id)?.entry.defaultModel ?? "",
           ...carriedRetry ? { retrySettings: carriedRetry } : {},
           conversations: conversationState,
@@ -12761,6 +12775,8 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
           record2.session,
           record2.ownedPal ? "auto" : "prompt"
         );
+        assertModeAllowed(record2, settings.permissionMode);
+        let turnMode = settings.permissionMode;
         if (!record2.ownedPal) {
           liveInputs.get(sessionId)?.close();
           liveInbox = new LivePromptInbox(
@@ -12782,6 +12798,10 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
         undoNotes.delete(sessionId);
         for await (const event of record2.session.send(messages, {
           ...settings,
+          currentPermissionMode: /* @__PURE__ */ __name(() => turnMode, "currentPermissionMode"),
+          onAutoModeLimit: /* @__PURE__ */ __name(() => {
+            turnMode = "prompt";
+          }, "onAutoModeLimit"),
           ...undoNote ? { systemNote: undoNote } : {},
           ...computer ? { assertExecutionAllowed: /* @__PURE__ */ __name(() => assertRetryComputer(record2, original), "assertExecutionAllowed") } : {},
           signal,
@@ -12850,6 +12870,7 @@ function createCliAcpRuntime(bootstrapCtx, deps = DEFAULT_RUNTIME_DEPS) {
         record2.session,
         "prompt"
       );
+      assertModeAllowed(record2, settings.permissionMode);
       const facts = await readConversationFacts(record2.conversations, target.sessionId);
       const started = facts?.records.find(
         (row2) => row2.type === "turn_started" && row2.turnId === turnId
@@ -13497,6 +13518,8 @@ async function runAcpCommand(ctx, desktop = false) {
   const server = new ACPServer({
     supportsPromptAttachments: true,
     supportsPromptOptions: true,
+    // `assertModeAllowed` below applies the settings that shut either door.
+    promptPermissionModes: ["bypass", "classify"],
     supportsTaskNotifications: desktop,
     transport,
     gateway: runtime.gateway,
@@ -13564,4 +13587,4 @@ export {
   resolveAcpSession,
   runAcpCommand
 };
-//# sourceMappingURL=acp-IV4G4DDN.js.map
+//# sourceMappingURL=acp-QDANXLMJ.js.map