@ordewell/cli 0.8.1 → 0.9.0

package/dist/main.js

@@ -220,6 +220,13 @@ Environment:
   ORCHESTRATOR_MODEL         Default: deepseek/deepseek-v4-flash
   OPENROUTER_BASE_URL        Default: https://openrouter.ai/api/v1
   ORDEWELL_AUTONOMOUS_MODE   true: Full, false: Guarded, for new sessions (see "ordewell auto")
+  ORDEWELL_APPROVAL_MODE     What the planner may run beyond read-only commands: auto (default:
+                             Guarded asks, Full runs only the allowlist), ask, allowlist or allow.
+                             File writes are always refused
+  ORDEWELL_APPROVAL_ALLOW    Extra allowlist entries, comma-separated: "gh issue list",
+                             "gcloud * * list", "mcp:find-*", "https://docs.example.com/*";
+                             a leading ! excludes
+  ORDEWELL_APPROVAL_DEFAULTS false: drop the built-in read-only allowlist
   ORDEWELL_PORT              Daemon port CLI commands target (default: 3742)
   ORDEWELL_DIRENV            false: agents skip the project's direnv .envrc
   ORDEWELL_RESEARCH_ENABLED  true (default) or false
@@ -978,6 +985,7 @@ function describeApproval(event) {
   const detail = event.detail ? String(event.detail) : "";
   const headline = event.kind === "shell_command" ? `The planner wants to run a command:
     ${subject}` : event.kind === "url_fetch" ? `The planner wants to fetch a URL:
+    ${subject}` : event.kind === "mcp_tool" ? `The planner wants to use an MCP tool:
     ${subject}` : `The planner wants to read a path outside the workspace:
     ${subject}`;
   const detailLine = detail ? `
@@ -4009,6 +4017,7 @@ var APPROVAL_KIND = {
   shell_command: "Run a command",
   url_fetch: "Fetch a URL",
   external_path: "Read outside the workspace",
+  mcp_tool: "Use an MCP tool",
   runner_tool: "Use a tool"
 };
 var DECIDED_BY = {
@@ -4919,7 +4928,7 @@ function renderOverlay(state, rows, cols) {
   if (overlay.kind === "help") return renderHelp(overlay.scroll ?? 0, rows, cols);
   if (overlay.kind === "approval") {
     const { request } = overlay;
-    const headline = request.kind === "shell_command" ? "The planner wants to run a command" : request.kind === "url_fetch" ? "The planner wants to fetch a URL" : "The planner wants to read a path outside the workspace";
+    const headline = request.kind === "shell_command" ? "The planner wants to run a command" : request.kind === "url_fetch" ? "The planner wants to fetch a URL" : request.kind === "mcp_tool" ? "The planner wants to use an MCP tool" : "The planner wants to read a path outside the workspace";
     const queued = state.pendingApprovals.length;
     return frame(
       "Approval needed",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ordewell/cli",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "description": "Ordewell CLI and TUI — plan, run and verify coding-agent tasks from the terminal.",
   "license": "Apache-2.0",
   "author": "Alessandro Costanzo Ciano",
@@ -49,8 +49,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ordewell/core": "^0.8.1",
-    "@ordewell/web": "^0.8.1",
+    "@ordewell/core": "^0.9.0",
+    "@ordewell/web": "^0.9.0",
     "string-width": "^7.2.0",
     "ws": "^8.18.0"
   },