@ordewell/cli 0.8.1 → 0.9.1

package/dist/main.js

@@ -220,6 +220,19 @@ Environment:
   ORCHESTRATOR_MODEL         Default: deepseek/deepseek-v4-flash
   OPENROUTER_BASE_URL        Default: https://openrouter.ai/api/v1
   ORDEWELL_AUTONOMOUS_MODE   true: Full, false: Guarded, for new sessions (see "ordewell auto")
+  ORDEWELL_APPROVAL_MODE     What the planner may run beyond read-only commands: auto (default:
+                             Guarded asks, Full runs only the allowlist and web reads), ask,
+                             allowlist or allow. File writes are always refused
+  ORDEWELL_APPROVAL_ALLOW    Extra allowlist entries, comma-separated: "gh issue list",
+                             "gcloud * * list", "mcp:find-*", "https://docs.example.com/*";
+                             "web_search:<provider>" covers one search provider (anthropic, openai,
+                             opencode or duckduckgo); a leading ! excludes, and !web_search:* turns
+                             every search off. To turn web reads off: !web_search:*, !https://*,
+                             !http://*, or ORDEWELL_WEB_READ_BUDGET=0. "mcp-server:<name>@<hash>"
+                             starts one exact MCP server a repository declares; !mcp-server:* starts none
+  ORDEWELL_APPROVAL_DEFAULTS false: drop the built-in read-only allowlist
+  ORDEWELL_WEB_READ_BUDGET   Fetches and web searches the planner may make per turn
+                             (default: 40; 0 turns web reads off)
   ORDEWELL_PORT              Daemon port CLI commands target (default: 3742)
   ORDEWELL_DIRENV            false: agents skip the project's direnv .envrc
   ORDEWELL_RESEARCH_ENABLED  true (default) or false
@@ -978,6 +991,9 @@ function describeApproval(event) {
   const detail = event.detail ? String(event.detail) : "";
   const headline = event.kind === "shell_command" ? `The planner wants to run a command:
     ${subject}` : event.kind === "url_fetch" ? `The planner wants to fetch a URL:
+    ${subject}` : event.kind === "web_search" ? `The planner wants to search the web:
+    ${subject}` : event.kind === "mcp_tool" ? `The planner wants to use an MCP tool:
+    ${subject}` : event.kind === "mcp_server" ? `The planner wants to start an MCP server the repository declares:
     ${subject}` : `The planner wants to read a path outside the workspace:
     ${subject}`;
   const detailLine = detail ? `
@@ -988,7 +1004,7 @@ function describeApproval(event) {
 function describeApprovalDecision(event) {
   const subject = String(event.subject ?? "");
   const source = String(event.source ?? "");
-  const label = source === "pre-approved" ? "pre-approved" : source === "remembered" ? "remembered" : source === "mode" ? "policy" : "no approval channel";
+  const label = source === "pre-approved" ? "pre-approved" : source === "remembered" ? "remembered" : source === "mode" ? "policy" : source === "excluded" ? "excluded" : source === "guard" ? "blocked address" : source === "secret" ? "secret check" : source === "budget" ? "web-read budget" : source === "unsupported" ? "not usable on this runner version" : "no approval channel";
   return `${event.granted ? "Auto-approved" : "Auto-denied"} (${label}): ${subject}`;
 }
 function createApprovalHandler(sessionId, deps) {
@@ -4008,14 +4024,22 @@ function subagentLines(block, cols, detailAll) {
 var APPROVAL_KIND = {
   shell_command: "Run a command",
   url_fetch: "Fetch a URL",
+  web_search: "Search the web",
   external_path: "Read outside the workspace",
+  mcp_tool: "Use an MCP tool",
+  mcp_server: "Start a project MCP server",
   runner_tool: "Use a tool"
 };
 var DECIDED_BY = {
   "pre-approved": "pre-approved",
   remembered: "remembered",
   mode: "policy",
-  "no-channel": "no approval channel"
+  "no-channel": "no approval channel",
+  excluded: "excluded",
+  guard: "blocked address",
+  secret: "secret check",
+  budget: "web-read budget",
+  unsupported: "not usable on this runner version"
 };
 function approvalLine(block, cols) {
   const policy = block.decidedBy && block.decidedBy !== "asked" ? DECIDED_BY[block.decidedBy] : void 0;
@@ -4919,7 +4943,7 @@ function renderOverlay(state, rows, cols) {
   if (overlay.kind === "help") return renderHelp(overlay.scroll ?? 0, rows, cols);
   if (overlay.kind === "approval") {
     const { request } = overlay;
-    const headline = request.kind === "shell_command" ? "The planner wants to run a command" : request.kind === "url_fetch" ? "The planner wants to fetch a URL" : "The planner wants to read a path outside the workspace";
+    const headline = request.kind === "shell_command" ? "The planner wants to run a command" : request.kind === "url_fetch" ? "The planner wants to fetch a URL" : request.kind === "web_search" ? "The planner wants to search the web" : request.kind === "mcp_tool" ? "The planner wants to use an MCP tool" : request.kind === "mcp_server" ? "The planner wants to start a project MCP server" : "The planner wants to read a path outside the workspace";
     const queued = state.pendingApprovals.length;
     return frame(
       "Approval needed",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ordewell/cli",
-  "version": "0.8.1",
+  "version": "0.9.1",
   "description": "Ordewell CLI and TUI — plan, run and verify coding-agent tasks from the terminal.",
   "license": "Apache-2.0",
   "author": "Alessandro Costanzo Ciano",
@@ -49,8 +49,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ordewell/core": "^0.8.1",
-    "@ordewell/web": "^0.8.1",
+    "@ordewell/core": "^0.9.1",
+    "@ordewell/web": "^0.9.1",
     "string-width": "^7.2.0",
     "ws": "^8.18.0"
   },