@primusclaw/connector 0.1.0 → 0.1.2

package/dist/cli.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 // src/commands.ts
-import fs13 from "node:fs";
-import os4 from "node:os";
-import path14 from "node:path";
+import fs14 from "node:fs";
+import os5 from "node:os";
+import path15 from "node:path";
 import { fileURLToPath } from "node:url";
 import { parseArgs } from "node:util";
 
@@ -335,11 +335,11 @@ var RevokedError = class extends Error {
   }
 };
 var HttpError = class extends Error {
-  constructor(status, code, path15) {
-    super(`${path15} answered ${status} ${code}`);
+  constructor(status, code, path16) {
+    super(`${path16} answered ${status} ${code}`);
     this.status = status;
     this.code = code;
-    this.path = path15;
+    this.path = path16;
   }
   status;
   code;
@@ -363,8 +363,8 @@ var ClawClient = class {
       ...extra
     };
   }
-  async send(method, path15, body, signal) {
-    const url = this.o.server + path15;
+  async send(method, path16, body, signal) {
+    const url = this.o.server + path16;
     for (let attempt = 0; ; attempt++) {
       const headers = await this.headers(body === void 0 ? {} : { "content-type": "application/json" });
       let res;
@@ -376,7 +376,7 @@ var ClawClient = class {
           signal: signal ?? AbortSignal.timeout(this.o.requestTimeoutMs ?? 2e4)
         });
       } catch (e) {
-        throw new TransportError(`${method} ${path15}: ${errMessage(e)}`);
+        throw new TransportError(`${method} ${path16}: ${errMessage(e)}`);
       }
       if (res.status !== 401) return res;
       const err = await errorCode(res);
@@ -385,12 +385,12 @@ var ClawClient = class {
         this.o.tokens.invalidate();
         continue;
       }
-      throw new HttpError(401, err, path15);
+      throw new HttpError(401, err, path16);
     }
   }
-  async json(method, path15, body) {
-    const res = await this.send(method, path15, body);
-    if (!res.ok) throw new HttpError(res.status, await errorCode(res), path15);
+  async json(method, path16, body) {
+    const res = await this.send(method, path16, body);
+    if (!res.ok) throw new HttpError(res.status, await errorCode(res), path16);
     const parsed = await res.json().catch(() => null);
     return isObject(parsed) && isObject(parsed.data) ? parsed.data : {};
   }
@@ -428,21 +428,21 @@ var ClawClient = class {
     };
     try {
       arm();
-      const path15 = `/v1/remote-agents/connectors/${cid}/commands`;
+      const path16 = `/v1/remote-agents/connectors/${cid}/commands`;
       const headers = await this.headers({ accept: "text/event-stream", ...opts.lastEventId ? { "last-event-id": String(opts.lastEventId) } : {} });
       let res;
       try {
-        res = await this.f(this.o.server + path15, { headers, signal: stop.signal });
+        res = await this.f(this.o.server + path16, { headers, signal: stop.signal });
       } catch (e) {
-        throw new TransportError(timedOut ? `no response for ${opts.watchdogMs} ms` : `GET ${path15}: ${errMessage(e)}`);
+        throw new TransportError(timedOut ? `no response for ${opts.watchdogMs} ms` : `GET ${path16}: ${errMessage(e)}`);
       }
       if (res.status === 401) {
         const err = await errorCode(res);
         if (err === "revoked") throw new RevokedError();
         this.o.tokens.invalidate();
-        throw new HttpError(401, err, path15);
+        throw new HttpError(401, err, path16);
       }
-      if (!res.ok || !res.body) throw new HttpError(res.status, await errorCode(res), path15);
+      if (!res.ok || !res.body) throw new HttpError(res.status, await errorCode(res), path16);
       try {
         for await (const frame of readSse(res.body, arm)) yield frame;
       } catch (e) {
@@ -992,22 +992,93 @@ async function deviceLogin(o) {
   return pollDeviceToken(o, auth);
 }
 
+// src/claude-mode.ts
+import fs6 from "node:fs";
+import os2 from "node:os";
+import path6 from "node:path";
+var isClaude = (a) => !a.attach && [a.command, ...a.args].some((s) => s.includes("claude-agent-acp"));
+function managedSettingsFile(platform = process.platform) {
+  if (platform === "darwin") return "/Library/Application Support/ClaudeCode/managed-settings.json";
+  if (platform === "win32") return "C:\\Program Files\\ClaudeCode\\managed-settings.json";
+  return "/etc/claude-code/managed-settings.json";
+}
+function readSettings(file, unreadable) {
+  let text;
+  try {
+    text = fs6.readFileSync(file, "utf8");
+  } catch (e) {
+    if (e.code !== "ENOENT") unreadable.push(file);
+    return null;
+  }
+  try {
+    const v = JSON.parse(text);
+    return isObject(v) ? v : null;
+  } catch {
+    unreadable.push(file);
+    return null;
+  }
+}
+function claudeStartMode(o) {
+  const home = o.env.HOME?.trim() || os2.homedir();
+  const configDir = o.env.CLAUDE_CONFIG_DIR?.trim() || path6.join(home, ".claude");
+  const files = [
+    ["user", path6.join(configDir, "settings.json")],
+    ...o.cwd === null ? [] : [
+      ["project", path6.join(o.cwd, ".claude", "settings.json")],
+      ["local", path6.join(o.cwd, ".claude", "settings.local.json")]
+    ],
+    ["managed", o.managedFile ?? managedSettingsFile()]
+  ];
+  const unreadable = [];
+  let raw;
+  let from = null;
+  let disable;
+  for (const [source, file] of files) {
+    const s = readSettings(file, unreadable);
+    const perms = s && isObject(s.permissions) ? s.permissions : null;
+    if (!perms) continue;
+    if (perms.defaultMode !== void 0) {
+      raw = perms.defaultMode;
+      from = [source, file];
+    }
+    if (perms.disableBypassPermissionsMode !== void 0) disable = perms.disableBypassPermissionsMode;
+  }
+  let bypass = raw === "bypassPermissions" && from !== null && from[0] !== "project" && from[0] !== "local";
+  if (bypass) {
+    const euid = o.euid === void 0 ? process.geteuid?.() ?? null : o.euid;
+    if (euid === 0 && !o.env.IS_SANDBOX || disable === "disable") bypass = false;
+  }
+  return { bypass, file: bypass ? from[1] : null, unreadable };
+}
+function noAskWarnings(agents, env, opts = {}) {
+  const out = [];
+  for (const a of agents) {
+    if (!isClaude(a) || a.allowUnsafeModes) continue;
+    const r = claudeStartMode({ env: { ...env, ...a.env }, cwd: null, ...opts });
+    if (r.bypass) {
+      out.push(`${a.id}: sessions will be refused (mode_not_enforced): Claude defaults to bypassPermissions here (permissions.defaultMode in ${r.file}); set approval = "never" on this agent or change defaultMode`);
+    }
+    for (const f of r.unreadable) out.push(`${a.id}: cannot tell whether Claude defaults to bypassPermissions: ${f} is not readable JSON`);
+  }
+  return out;
+}
+
 // src/hooks.ts
-import fs7 from "node:fs";
-import path7 from "node:path";
+import fs8 from "node:fs";
+import path8 from "node:path";
 
 // src/terminals.ts
-import fs6 from "node:fs";
-import path6 from "node:path";
+import fs7 from "node:fs";
+import path7 from "node:path";
 var SESSION_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var TERMINALS_DIR = "claw-connector-terminals";
-var terminalsDir = (configDir) => path6.join(configDir, TERMINALS_DIR);
+var terminalsDir = (configDir) => path7.join(configDir, TERMINALS_DIR);
 var UNREADABLE_GRACE_MS = 6e4;
 var MAX_STDIN = 1 << 20;
 function localPidDomain() {
   if (process.platform !== "linux") return null;
   try {
-    return `linux:${fs6.readFileSync("/etc/machine-id", "utf8").trim()}:${fs6.readlinkSync("/proc/self/ns/pid")}`;
+    return `linux:${fs7.readFileSync("/etc/machine-id", "utf8").trim()}:${fs7.readlinkSync("/proc/self/ns/pid")}`;
   } catch {
     return null;
   }
@@ -1038,7 +1109,7 @@ function readTerminals(configDir, localDomain, now = Date.now()) {
   const dir = terminalsDir(configDir);
   let names;
   try {
-    names = fs6.readdirSync(dir);
+    names = fs7.readdirSync(dir);
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -1046,15 +1117,15 @@ function readTerminals(configDir, localDomain, now = Date.now()) {
   const out = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const file = path6.join(dir, name);
+    const file = path7.join(dir, name);
     let doc;
     try {
-      doc = JSON.parse(fs6.readFileSync(file, "utf8"));
+      doc = JSON.parse(fs7.readFileSync(file, "utf8"));
     } catch (e) {
       if (e.code === "ENOENT") continue;
       let age = Infinity;
       try {
-        age = now - fs6.statSync(file).mtimeMs;
+        age = now - fs7.statSync(file).mtimeMs;
       } catch {
       }
       if (age < UNREADABLE_GRACE_MS) throw new Error(`${file} is unreadable (${e.message.split("\n")[0]})`);
@@ -1081,19 +1152,19 @@ var shellQuote = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
 function hookCommand(node, script, arg, configDir) {
   return `${shellQuote(node)} ${shellQuote(script)} ${arg} --dir ${shellQuote(configDir)} ${MANAGED_MARK}`;
 }
-var settingsFile = (configDir) => path7.join(configDir, "settings.json");
+var settingsFile = (configDir) => path8.join(configDir, "settings.json");
 var isObject3 = (x) => typeof x === "object" && x !== null && !Array.isArray(x);
 var isOurs = (h) => isObject3(h) && h.type === "command" && typeof h.command === "string" && h.command.endsWith(` ${MANAGED_MARK}`) && OURS_RE.test(h.command);
 function load(configDir) {
   const given = settingsFile(configDir);
   let file = given;
   try {
-    file = fs7.realpathSync(given);
+    file = fs8.realpathSync(given);
   } catch {
   }
   let text;
   try {
-    text = fs7.readFileSync(file, "utf8");
+    text = fs8.readFileSync(file, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") return { doc: {}, text: null, file };
     throw new HooksError(`cannot read ${given}: ${e.message}`);
@@ -1111,18 +1182,18 @@ function load(configDir) {
 function save(l, doc) {
   const indent = l.text?.match(/^([ \t]+)"/m)?.[1] ?? "  ";
   const body = JSON.stringify(doc, null, indent) + "\n";
-  fs7.mkdirSync(path7.dirname(l.file), { recursive: true, mode: 448 });
+  fs8.mkdirSync(path8.dirname(l.file), { recursive: true, mode: 448 });
   let mode = 384;
   try {
-    mode = fs7.statSync(l.file).mode & 511;
+    mode = fs8.statSync(l.file).mode & 511;
   } catch {
   }
   const tmp = `${l.file}.claw-connector.${process.pid}.tmp`;
-  fs7.writeFileSync(tmp, body, { mode });
+  fs8.writeFileSync(tmp, body, { mode });
   try {
-    fs7.renameSync(tmp, l.file);
+    fs8.renameSync(tmp, l.file);
   } catch (e) {
-    fs7.rmSync(tmp, { force: true });
+    fs8.rmSync(tmp, { force: true });
     throw e;
   }
 }
@@ -1202,7 +1273,7 @@ function uninstallHooks(configDir) {
     if (touchedAny && Object.keys(hooks).length === 0) delete doc.hooks;
   }
   if (touchedAny) save(l, doc);
-  fs7.rmSync(terminalsDir(configDir), { recursive: true, force: true });
+  fs8.rmSync(terminalsDir(configDir), { recursive: true, force: true });
   return { changed: touchedAny, file: l.file };
 }
 function hooksStatus(configDir) {
@@ -1225,7 +1296,7 @@ function hooksStatus(configDir) {
       const m = /^'((?:[^']|'\\'')*)' '((?:[^']|'\\'')*)' /.exec(String(x.command));
       if (!m) continue;
       for (const f of [m[1], m[2]].map((s) => s.replace(/'\\''/g, "'"))) {
-        if (!fs7.existsSync(f)) {
+        if (!fs8.existsSync(f)) {
           healthy = false;
           problem ??= `${f} (named by the ${h.event} hook) does not exist; run: claw-connector hooks install`;
         }
@@ -1236,19 +1307,19 @@ function hooksStatus(configDir) {
 }
 
 // src/connector.ts
-import fs12 from "node:fs";
+import fs13 from "node:fs";
 import { randomUUID as randomUUID2 } from "node:crypto";
 
 // src/attach.ts
 import { execFile, execFileSync as execFileSync2 } from "node:child_process";
-import fs9 from "node:fs";
-import os2 from "node:os";
-import path9 from "node:path";
+import fs10 from "node:fs";
+import os3 from "node:os";
+import path10 from "node:path";
 
 // src/adapter.ts
 import { spawn } from "node:child_process";
-import fs8 from "node:fs";
-import path8 from "node:path";
+import fs9 from "node:fs";
+import path9 from "node:path";
 import { Readable, Writable } from "node:stream";
 import * as acp from "@agentclientprotocol/sdk";
 var AdapterProcess = class _AdapterProcess {
@@ -1264,8 +1335,8 @@ var AdapterProcess = class _AdapterProcess {
   exited = false;
   conn;
   static async start(o) {
-    fs8.mkdirSync(path8.dirname(o.logFile), { recursive: true, mode: 448 });
-    const log = fs8.openSync(o.logFile, "a", 384);
+    fs9.mkdirSync(path9.dirname(o.logFile), { recursive: true, mode: 448 });
+    const log = fs9.openSync(o.logFile, "a", 384);
     const child = spawn(o.cfg.command, o.cfg.args, {
       cwd: o.cwd,
       env: { ...process.env, ...o.cfg.env },
@@ -1277,7 +1348,7 @@ var AdapterProcess = class _AdapterProcess {
       child.once("spawn", () => resolve());
       child.once("error", (e) => reject(new Error(`could not start ${o.cfg.command}: ${errMessage(e)}`)));
     }).catch((e) => {
-      fs8.closeSync(log);
+      fs9.closeSync(log);
       throw e;
     });
     const pid = child.pid;
@@ -1287,7 +1358,7 @@ var AdapterProcess = class _AdapterProcess {
     const flushLine = (line) => {
       const text = redactText(line).text;
       try {
-        fs8.writeSync(log, text + "\n");
+        fs9.writeSync(log, text + "\n");
       } catch {
       }
       try {
@@ -1313,7 +1384,7 @@ var AdapterProcess = class _AdapterProcess {
         tail = "";
       }
       try {
-        fs8.closeSync(log);
+        fs9.closeSync(log);
       } catch {
       }
     });
@@ -1449,7 +1520,7 @@ var AttachSupport = class {
   constructor(agent, d) {
     this.agent = agent;
     this.d = d;
-    this.configDir = path9.resolve(agent.env.CLAUDE_CONFIG_DIR ?? d.env.CLAUDE_CONFIG_DIR ?? path9.join(os2.homedir(), ".claude"));
+    this.configDir = path10.resolve(agent.env.CLAUDE_CONFIG_DIR ?? d.env.CLAUDE_CONFIG_DIR ?? path10.join(os3.homedir(), ".claude"));
   }
   agent;
   d;
@@ -1506,9 +1577,9 @@ var AttachSupport = class {
         cfg: this.agent,
         registry: this.d.registry,
         sessionId: `list-${this.agent.id}`,
-        cwd: this.agent.roots[0] ?? os2.homedir(),
+        cwd: this.agent.roots[0] ?? os3.homedir(),
         hooks: NO_HOOKS,
-        logFile: path9.join(this.d.logDir, `adapter-${this.agent.id}.log`),
+        logFile: path10.join(this.d.logDir, `adapter-${this.agent.id}.log`),
         version: this.d.version,
         initTimeoutMs: 3e4
       });
@@ -1602,7 +1673,7 @@ var AttachSupport = class {
       const file = this.transcriptFile(want);
       let age = null;
       try {
-        if (file) age = this.now() - fs9.statSync(file).mtimeMs;
+        if (file) age = this.now() - fs10.statSync(file).mtimeMs;
       } catch {
       }
       if (age !== null && age < this.d.recentWriteMs) return { ok: false, reason: "recently_written", detail: `its transcript was written ${Math.max(0, Math.round(age / 1e3))} s ago` };
@@ -1657,7 +1728,7 @@ var AttachSupport = class {
   transcriptSize(ref) {
     const file = SESSION_REF_RE.test(ref) ? this.transcriptFile(ref.toLowerCase()) : null;
     try {
-      return file ? fs9.statSync(file).size : null;
+      return file ? fs10.statSync(file).size : null;
     } catch {
       return null;
     }
@@ -1665,24 +1736,24 @@ var AttachSupport = class {
   /** `<config dir>/projects/<working directory with every non-alphanumeric turned into "-">/<id>.jsonl`, found by name when that guess misses. */
   transcriptFile(ref) {
     const cached = this.transcripts.get(ref);
-    if (cached && fs9.existsSync(cached)) return cached;
+    if (cached && fs10.existsSync(cached)) return cached;
     this.transcripts.delete(ref);
-    const projects = path9.join(this.configDir, "projects");
+    const projects = path10.join(this.configDir, "projects");
     const remember = (f) => {
       this.transcripts.set(ref, f);
       return f;
     };
     const known = this.listed.find((l) => l.ref === ref);
     if (known) {
-      const guess = path9.join(projects, known.cwd.replace(/[^A-Za-z0-9]/g, "-"), `${ref}.jsonl`);
-      if (fs9.existsSync(guess)) return remember(guess);
+      const guess = path10.join(projects, known.cwd.replace(/[^A-Za-z0-9]/g, "-"), `${ref}.jsonl`);
+      if (fs10.existsSync(guess)) return remember(guess);
     }
     try {
       let n = 0;
-      for (const dir of fs9.readdirSync(projects)) {
+      for (const dir of fs10.readdirSync(projects)) {
         if (++n > MAX_SCANNED_PROJECT_DIRS) break;
-        const f = path9.join(projects, dir, `${ref}.jsonl`);
-        if (fs9.existsSync(f)) return remember(f);
+        const f = path10.join(projects, dir, `${ref}.jsonl`);
+        if (fs10.existsSync(f)) return remember(f);
       }
     } catch {
     }
@@ -1728,24 +1799,24 @@ function parseAgentsJson(text) {
   return out;
 }
 function readRegistry(configDir, localDomain, now = Date.now()) {
-  const dir = path9.join(configDir, "sessions");
+  const dir = path10.join(configDir, "sessions");
   let names;
   try {
-    names = fs9.readdirSync(dir);
+    names = fs10.readdirSync(dir);
   } catch (e) {
     throw new TwinCheckError(`${dir}: ${errMessage(e)}`);
   }
   const out = [];
   for (const name of names) {
     if (!name.endsWith(".json")) continue;
-    const file = path9.join(dir, name);
+    const file = path10.join(dir, name);
     let doc;
     try {
-      doc = JSON.parse(fs9.readFileSync(file, "utf8"));
+      doc = JSON.parse(fs10.readFileSync(file, "utf8"));
     } catch (e) {
       let age = Infinity;
       try {
-        age = now - fs9.statSync(file).mtimeMs;
+        age = now - fs10.statSync(file).mtimeMs;
       } catch {
       }
       if (age < UNREADABLE_GRACE_MS2) throw new TwinCheckError(`${file} is unreadable (${errMessage(e).split("\n")[0]})`);
@@ -1765,7 +1836,7 @@ function readRegistry(configDir, localDomain, now = Date.now()) {
 function processGroup(pid) {
   try {
     if (process.platform === "linux") {
-      const stat = fs9.readFileSync(`/proc/${pid}/stat`, "utf8");
+      const stat = fs10.readFileSync(`/proc/${pid}/stat`, "utf8");
       return Number(stat.slice(stat.lastIndexOf(")") + 2).split(" ")[2]) || null;
     }
     return Number(execFileSync2("ps", ["-o", "pgid=", "-p", String(pid)], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim()) || null;
@@ -1789,7 +1860,7 @@ function fitResumable(base, items, limit = REMOTE_AGENT_LIMITS.maxCapabilitiesBy
 }
 
 // src/session.ts
-import path10 from "node:path";
+import path11 from "node:path";
 
 // src/permissions.ts
 import { randomUUID } from "node:crypto";
@@ -2135,7 +2206,7 @@ var Session = class {
       sessionId: this.id,
       cwd: this.cwd,
       hooks: this.hooks(),
-      logFile: path10.join(this.env.logDir, `adapter-${this.agent.id}.log`),
+      logFile: path11.join(this.env.logDir, `adapter-${this.agent.id}.log`),
       version: this.env.version
     }).catch((e) => {
       throw new SessionRefusal("adapter_start_failed", errMessage(e));
@@ -2835,8 +2906,8 @@ var SessionManager = class {
 };
 
 // src/outbox.ts
-import fs10 from "node:fs";
-import path11 from "node:path";
+import fs11 from "node:fs";
+import path12 from "node:path";
 var DROPPABLE_TYPES = /* @__PURE__ */ new Set([
   "agent_message_chunk",
   "agent_thought_chunk",
@@ -2863,35 +2934,35 @@ var Outbox = class {
     this.dir = opts.dir;
     this.maxBytes = opts.maxBytesPerSession ?? 5 * 1024 * 1024;
     this.now = opts.now ?? Date.now;
-    fs10.mkdirSync(this.dir, { recursive: true, mode: 448 });
+    fs11.mkdirSync(this.dir, { recursive: true, mode: 448 });
     this.load();
   }
-  eventsFile = (sid) => path11.join(this.dir, `${safeName(sid)}.jsonl`);
-  metaFile = (sid) => path11.join(this.dir, `${safeName(sid)}.meta.json`);
+  eventsFile = (sid) => path12.join(this.dir, `${safeName(sid)}.jsonl`);
+  metaFile = (sid) => path12.join(this.dir, `${safeName(sid)}.meta.json`);
   writeMeta(sid) {
     const tmp = this.metaFile(sid) + ".tmp";
-    fs10.writeFileSync(tmp, JSON.stringify(this.meta.get(sid)), { mode: 384 });
-    fs10.renameSync(tmp, this.metaFile(sid));
+    fs11.writeFileSync(tmp, JSON.stringify(this.meta.get(sid)), { mode: 384 });
+    fs11.renameSync(tmp, this.metaFile(sid));
   }
   /** Rebuild the queue from disk. The highest sequence number ever used is the larger of the meta file and the log itself. */
   load() {
     const loaded = [];
     const bases = /* @__PURE__ */ new Set();
-    for (const name of fs10.readdirSync(this.dir)) {
+    for (const name of fs11.readdirSync(this.dir)) {
       if (name.endsWith(".meta.json")) bases.add(name.slice(0, -".meta.json".length));
       else if (name.endsWith(".jsonl")) bases.add(name.slice(0, -".jsonl".length));
     }
     for (const base of bases) {
       let meta = { lastSeq: 0, acked: 0 };
       try {
-        meta = JSON.parse(fs10.readFileSync(path11.join(this.dir, `${base}.meta.json`), "utf8"));
+        meta = JSON.parse(fs11.readFileSync(path12.join(this.dir, `${base}.meta.json`), "utf8"));
       } catch {
       }
       let sid = null;
-      const file = path11.join(this.dir, `${base}.jsonl`);
+      const file = path12.join(this.dir, `${base}.jsonl`);
       let text = "";
       try {
-        text = fs10.readFileSync(file, "utf8");
+        text = fs11.readFileSync(file, "utf8");
       } catch {
       }
       for (const line of text.split("\n")) {
@@ -2909,8 +2980,8 @@ var Outbox = class {
       if (sid === null) {
         sid = base;
         try {
-          if (this.now() - fs10.statSync(path11.join(this.dir, `${base}.meta.json`)).mtimeMs > TOMBSTONE_MS) {
-            for (const f of [`${base}.meta.json`, `${base}.jsonl`]) fs10.rmSync(path11.join(this.dir, f), { force: true });
+          if (this.now() - fs11.statSync(path12.join(this.dir, `${base}.meta.json`)).mtimeMs > TOMBSTONE_MS) {
+            for (const f of [`${base}.meta.json`, `${base}.jsonl`]) fs11.rmSync(path12.join(this.dir, f), { force: true });
             continue;
           }
         } catch {
@@ -2932,7 +3003,7 @@ var Outbox = class {
     meta.lastSeq = ev.seq;
     this.meta.set(sessionId, meta);
     const line = JSON.stringify(ev);
-    fs10.appendFileSync(this.eventsFile(sessionId), line + "\n", { mode: 384 });
+    fs11.appendFileSync(this.eventsFile(sessionId), line + "\n", { mode: 384 });
     if (ev.seq === 1) this.writeMeta(sessionId);
     this.queue.push(ev);
     this.bytes.set(sessionId, (this.bytes.get(sessionId) ?? 0) + line.length);
@@ -2961,8 +3032,8 @@ var Outbox = class {
     this.writeMeta(sessionId);
     const mine = this.queue.filter((e) => e.session_id === sessionId);
     const tmp = this.eventsFile(sessionId) + ".tmp";
-    fs10.writeFileSync(tmp, mine.map((e) => JSON.stringify(e) + "\n").join(""), { mode: 384 });
-    fs10.renameSync(tmp, this.eventsFile(sessionId));
+    fs11.writeFileSync(tmp, mine.map((e) => JSON.stringify(e) + "\n").join(""), { mode: 384 });
+    fs11.renameSync(tmp, this.eventsFile(sessionId));
   }
   /** The oldest events not yet acknowledged, in the order they were appended. */
   pending(max) {
@@ -3000,7 +3071,7 @@ var Outbox = class {
     this.writeMeta(sid);
     const left = this.queue.filter((e) => e.session_id === sid);
     if (left.length === 0) {
-      fs10.writeFileSync(this.eventsFile(sid), "", { mode: 384 });
+      fs11.writeFileSync(this.eventsFile(sid), "", { mode: 384 });
       this.bytes.set(sid, 0);
       if (this.closed.has(sid)) this.forget(sid);
     } else if (left.length < this.queue.length / 2 || meta.acked > 1e3) {
@@ -3019,7 +3090,7 @@ var Outbox = class {
    * repeat. What stays is the small meta file, a tombstone, removed after {@link TOMBSTONE_MS}.
    */
   forget(sid) {
-    fs10.rmSync(this.eventsFile(sid), { force: true });
+    fs11.rmSync(this.eventsFile(sid), { force: true });
     if (this.meta.has(sid)) this.writeMeta(sid);
     this.bytes.delete(sid);
     this.closed.delete(sid);
@@ -3027,40 +3098,40 @@ var Outbox = class {
 };
 
 // src/paths.ts
-import os3 from "node:os";
-import path12 from "node:path";
-function resolveDirs(env = process.env, home = os3.homedir()) {
+import os4 from "node:os";
+import path13 from "node:path";
+function resolveDirs(env = process.env, home = os4.homedir()) {
   const one = env.CLAW_CONNECTOR_HOME?.trim();
-  if (one) return { config: path12.join(one, "config"), state: path12.join(one, "state") };
-  const cfg = env.XDG_CONFIG_HOME?.trim() || path12.join(home, ".config");
-  const st = env.XDG_STATE_HOME?.trim() || path12.join(home, ".local", "state");
-  return { config: path12.join(cfg, "claw-connector"), state: path12.join(st, "claw-connector") };
-}
-var configFile = (d) => path12.join(d.config, "agents.toml");
-var credentialsFile = (d) => path12.join(d.config, "credentials.json");
-var identityFile = (d) => path12.join(d.state, "connector.json");
-var sessionsFile = (d) => path12.join(d.state, "sessions.json");
-var childrenFile = (d) => path12.join(d.state, "children.json");
-var pidFile = (d) => path12.join(d.state, "connector.pid");
-var pauseFile = (d) => path12.join(d.state, "paused");
-var auditFile = (d) => path12.join(d.state, "audit.jsonl");
-var outboxDir = (d) => path12.join(d.state, "outbox");
-var logDir = (d) => path12.join(d.state, "logs");
+  if (one) return { config: path13.join(one, "config"), state: path13.join(one, "state") };
+  const cfg = env.XDG_CONFIG_HOME?.trim() || path13.join(home, ".config");
+  const st = env.XDG_STATE_HOME?.trim() || path13.join(home, ".local", "state");
+  return { config: path13.join(cfg, "claw-connector"), state: path13.join(st, "claw-connector") };
+}
+var configFile = (d) => path13.join(d.config, "agents.toml");
+var credentialsFile = (d) => path13.join(d.config, "credentials.json");
+var identityFile = (d) => path13.join(d.state, "connector.json");
+var sessionsFile = (d) => path13.join(d.state, "sessions.json");
+var childrenFile = (d) => path13.join(d.state, "children.json");
+var pidFile = (d) => path13.join(d.state, "connector.pid");
+var pauseFile = (d) => path13.join(d.state, "paused");
+var auditFile = (d) => path13.join(d.state, "audit.jsonl");
+var outboxDir = (d) => path13.join(d.state, "outbox");
+var logDir = (d) => path13.join(d.state, "logs");
 
 // src/session-store.ts
-import fs11 from "node:fs";
-import path13 from "node:path";
+import fs12 from "node:fs";
+import path14 from "node:path";
 var SessionStore = class {
   constructor(file) {
     this.file = file;
     this.pendingFile = `${file}.pending`;
     try {
-      const raw = JSON.parse(fs11.readFileSync(this.pendingFile, "utf8"));
+      const raw = JSON.parse(fs12.readFileSync(this.pendingFile, "utf8"));
       if (Array.isArray(raw)) this.pending = raw.filter((p) => p && typeof p.session_id === "string" && typeof p.action_id === "string");
     } catch {
     }
     try {
-      const raw = JSON.parse(fs11.readFileSync(file, "utf8"));
+      const raw = JSON.parse(fs12.readFileSync(file, "utf8"));
       if (raw && typeof raw === "object" && !Array.isArray(raw)) this.recs = raw;
     } catch {
     }
@@ -3103,19 +3174,19 @@ var SessionStore = class {
     return out;
   }
   savePending() {
-    fs11.mkdirSync(path13.dirname(this.pendingFile), { recursive: true, mode: 448 });
+    fs12.mkdirSync(path14.dirname(this.pendingFile), { recursive: true, mode: 448 });
     const tmp = `${this.pendingFile}.${process.pid}.tmp`;
-    fs11.writeFileSync(tmp, JSON.stringify(this.pending), { mode: 384 });
-    fs11.renameSync(tmp, this.pendingFile);
+    fs12.writeFileSync(tmp, JSON.stringify(this.pending), { mode: 384 });
+    fs12.renameSync(tmp, this.pendingFile);
   }
   ids() {
     return Object.keys(this.recs);
   }
   save() {
-    fs11.mkdirSync(path13.dirname(this.file), { recursive: true, mode: 448 });
+    fs12.mkdirSync(path14.dirname(this.file), { recursive: true, mode: 448 });
     const tmp = `${this.file}.${process.pid}.tmp`;
-    fs11.writeFileSync(tmp, JSON.stringify(this.recs), { mode: 384 });
-    fs11.renameSync(tmp, this.file);
+    fs12.writeFileSync(tmp, JSON.stringify(this.recs), { mode: 384 });
+    fs12.renameSync(tmp, this.file);
   }
 };
 
@@ -3255,7 +3326,7 @@ var Connector = class {
   // --- identity -------------------------------------------------------------------
   readIdentity() {
     try {
-      const raw = JSON.parse(fs12.readFileSync(identityFile(this.d.dirs), "utf8"));
+      const raw = JSON.parse(fs13.readFileSync(identityFile(this.d.dirs), "utf8"));
       if (isObject(raw) && raw.server === this.d.server && typeof raw.connector_id === "string") {
         return { server: raw.server, connector_id: raw.connector_id, cursor: typeof raw.cursor === "number" ? raw.cursor : 0, handled: Array.isArray(raw.handled) ? raw.handled.filter((x) => typeof x === "string") : [] };
       }
@@ -3266,9 +3337,9 @@ var Connector = class {
   writeIdentity() {
     const st = { server: this.d.server, connector_id: this.cid, cursor: this.ledger.cursor, handled: this.ledger.recentIds, ...this.rowRevoked ? { revoked: true } : {} };
     const file = identityFile(this.d.dirs);
-    fs12.mkdirSync(this.d.dirs.state, { recursive: true, mode: 448 });
-    fs12.writeFileSync(`${file}.tmp`, JSON.stringify(st), { mode: 384 });
-    fs12.renameSync(`${file}.tmp`, file);
+    fs13.mkdirSync(this.d.dirs.state, { recursive: true, mode: 448 });
+    fs13.writeFileSync(`${file}.tmp`, JSON.stringify(st), { mode: 384 });
+    fs13.renameSync(`${file}.tmp`, file);
   }
   /** Use the connector id this machine already has, or register a new one. */
   async identify(forceNew = false) {
@@ -3358,7 +3429,7 @@ var Connector = class {
   }
   async pauseWatcher() {
     while (!this.ctl.signal.aborted) {
-      const want = fs12.existsSync(pauseFile(this.d.dirs));
+      const want = fs13.existsSync(pauseFile(this.d.dirs));
       if (want && !this.paused) {
         this.paused = true;
         this.d.audit.record("paused");
@@ -3514,15 +3585,15 @@ var Connector = class {
   }
   /** Run until stopped or revoked. Always leaves no adapter process behind. */
   async run() {
-    fs12.mkdirSync(this.d.dirs.state, { recursive: true, mode: 448 });
+    fs13.mkdirSync(this.d.dirs.state, { recursive: true, mode: 448 });
     await this.registry.killAll();
     for (const p of this.store.takePending()) {
       this.d.audit.record("permission_orphaned", { session_id: p.session_id, action_id: p.action_id });
       this.emit(p.session_id, "permission_resolved", { actionId: p.action_id, optionId: null, outcome: "cancelled", by: "connector_restart" });
     }
     const pidf = pidFile(this.d.dirs);
-    fs12.writeFileSync(pidf, JSON.stringify({ pid: process.pid, start: processStart(process.pid) ?? "" }), { mode: 384 });
-    this.paused = fs12.existsSync(pauseFile(this.d.dirs));
+    fs13.writeFileSync(pidf, JSON.stringify({ pid: process.pid, start: processStart(process.pid) ?? "" }), { mode: 384 });
+    this.paused = fs13.existsSync(pauseFile(this.d.dirs));
     try {
       const up = await this.startup();
       if (up !== "ok") return up;
@@ -3535,7 +3606,7 @@ var Connector = class {
       await Promise.all([this.sender(), this.heartbeater(), this.streamLoop(), this.pauseWatcher()]);
     } finally {
       await this.manager.killAll(this.revoked ? "revoked" : "stopped").catch(() => void 0);
-      fs12.rmSync(pidf, { force: true });
+      fs13.rmSync(pidf, { force: true });
     }
     return this.revoked ? "revoked" : "stopped";
   }
@@ -3551,7 +3622,7 @@ var Connector = class {
 };
 
 // src/version.ts
-var VERSION = "0.1.0";
+var VERSION = "0.1.2";
 
 // src/commands.ts
 var EXIT = { ok: 0, failure: 1, usage: 2, revoked: 3 };
@@ -3582,8 +3653,9 @@ Files: ${"$"}XDG_CONFIG_HOME/claw-connector (agents.toml, credentials.json) and
 (audit.jsonl, logs, outbox); set CLAW_CONNECTOR_HOME to keep everything under one directory.
 `;
 function loadCfg(ctx) {
-  return loadConfig(configFile(ctx.dirs), { hostname: ctx.hostname ?? os4.hostname() });
+  return loadConfig(configFile(ctx.dirs), { hostname: ctx.hostname ?? os5.hostname() });
 }
+var noAsk = (ctx, cfg) => noAskWarnings(cfg.agents, ctx.env, { managedFile: ctx.claudeManagedSettings, euid: ctx.euid });
 function serverUrl(ctx, flag, cfg, creds) {
   const v = flag ?? ctx.env.CLAW_URL ?? cfg?.server ?? creds?.server ?? null;
   return v ? secureUrl(v.trim(), "the Claw server URL") : null;
@@ -3659,9 +3731,9 @@ async function cmdInit(args, ctx) {
     return EXIT.usage;
   }
   const file = configFile(ctx.dirs);
-  fs13.mkdirSync(path14.dirname(file), { recursive: true, mode: 448 });
+  fs14.mkdirSync(path15.dirname(file), { recursive: true, mode: 448 });
   try {
-    fs13.writeFileSync(file, sampleConfig(approval), { mode: 384, flag: "wx" });
+    fs14.writeFileSync(file, sampleConfig(approval), { mode: 384, flag: "wx" });
     ctx.out(`wrote ${file}: edit the roots (the directories an agent may work in), then run: claw-connector login`);
     const { unattended, parked } = sampleApprovals(approval);
     ctx.out(unattended.length ? `no per-step approval for: ${unattended.join(", ")}. Those agents write files and run commands without asking; the phone shows such a session as unattended. To go back, set approval = "ask" on the agent.` : `every agent in this file asks before it writes a file or runs a command. To let phone sessions run like your terminal instead: claw-connector init --approval never (on a new file), or set approval = "never" on an agent.`);
@@ -3672,7 +3744,7 @@ async function cmdInit(args, ctx) {
   }
   if (!values["no-hooks"]) {
     const dir = defaultClaudeDir(ctx);
-    if (!fs13.existsSync(dir)) ctx.out(`no Claude Code directory at ${dir}; once you use Claude Code, run: claw-connector hooks install`);
+    if (!fs14.existsSync(dir)) ctx.out(`no Claude Code directory at ${dir}; once you use Claude Code, run: claw-connector hooks install`);
     else installForInit(ctx, dir);
   }
   return EXIT.ok;
@@ -3684,19 +3756,19 @@ function installForInit(ctx, dir) {
     ctx.err(`hooks: ${errMessage(e)} (everything else is set up; fix it and run: claw-connector hooks install)`);
   }
 }
-var defaultClaudeDir = (ctx) => path14.resolve(ctx.env.CLAUDE_CONFIG_DIR?.trim() || path14.join(os4.homedir(), ".claude"));
+var defaultClaudeDir = (ctx) => path15.resolve(ctx.env.CLAUDE_CONFIG_DIR?.trim() || path15.join(os5.homedir(), ".claude"));
 function claudeDirs(ctx, flag) {
-  if (flag !== void 0) return [path14.resolve(flag)];
+  if (flag !== void 0) return [path15.resolve(flag)];
   let dirs = [];
   try {
-    dirs = loadCfg(ctx).agents.filter((a) => a.attach).map((a) => path14.resolve(a.env.CLAUDE_CONFIG_DIR ?? ctx.env.CLAUDE_CONFIG_DIR?.trim() ?? path14.join(os4.homedir(), ".claude")));
+    dirs = loadCfg(ctx).agents.filter((a) => a.attach).map((a) => path15.resolve(a.env.CLAUDE_CONFIG_DIR ?? ctx.env.CLAUDE_CONFIG_DIR?.trim() ?? path15.join(os5.homedir(), ".claude")));
   } catch {
   }
   return dirs.length ? [...new Set(dirs)] : [defaultClaudeDir(ctx)];
 }
 function hookScript(ctx) {
   const script = ctx.hookScript ?? fileURLToPath(new URL("./terminal-hook.js", import.meta.url));
-  if (!fs13.existsSync(script)) throw new HooksError(`${script} does not exist (a source checkout needs "npm run build" first)`);
+  if (!fs14.existsSync(script)) throw new HooksError(`${script} does not exist (a source checkout needs "npm run build" first)`);
   return script;
 }
 function installOne(ctx, dir) {
@@ -3716,7 +3788,7 @@ function cmdHooks(args, ctx) {
   for (const dir of dirs) {
     try {
       if (sub === "install") {
-        if (values["config-dir"] === void 0 && !fs13.existsSync(dir)) {
+        if (values["config-dir"] === void 0 && !fs14.existsSync(dir)) {
           ctx.err(`no Claude Code directory at ${dir}; pass --config-dir to name one`);
           code = EXIT.failure;
           continue;
@@ -3741,11 +3813,11 @@ function forgetRevokedIdentity(ctx) {
   const file = identityFile(ctx.dirs);
   let revoked = false;
   try {
-    const raw = JSON.parse(fs13.readFileSync(file, "utf8"));
+    const raw = JSON.parse(fs14.readFileSync(file, "utf8"));
     revoked = isObject(raw) && raw.revoked === true;
   } catch {
   }
-  if (revoked) fs13.rmSync(file, { force: true });
+  if (revoked) fs14.rmSync(file, { force: true });
 }
 async function cmdLogin(args, ctx) {
   const { values } = parseArgs({
@@ -3778,7 +3850,7 @@ async function cmdLogin(args, ctx) {
     ctx.err("login needs --identity-url <identity service URL> (or CLAW_IDENTITY_URL, or identity_url = in agents.toml)");
     return EXIT.usage;
   }
-  const deviceName = values.name ?? cfg?.name ?? ctx.hostname ?? os4.hostname();
+  const deviceName = values.name ?? cfg?.name ?? ctx.hostname ?? os5.hostname();
   const tok = await deviceLogin({ identityUrl, deviceName, fetch: ctx.fetch, print: ctx.out });
   saveCredentials(file, {
     v: 1,
@@ -3796,7 +3868,7 @@ async function cmdLogin(args, ctx) {
 }
 function runningPid(ctx) {
   try {
-    const raw = JSON.parse(fs13.readFileSync(pidFile(ctx.dirs), "utf8"));
+    const raw = JSON.parse(fs14.readFileSync(pidFile(ctx.dirs), "utf8"));
     if (isObject(raw) && typeof raw.pid === "number" && typeof raw.start === "string" && raw.start !== "" && processStart(raw.pid) === raw.start) return raw.pid;
   } catch {
   }
@@ -3826,6 +3898,7 @@ async function cmdRun(_args, ctx) {
   const connector2 = new Connector({ config: cfg, dirs: ctx.dirs, client: client2, server, audit, log, version: VERSION, timing: ctx.timing });
   ctx.onConnector?.(connector2);
   ctx.out(`connecting ${cfg.agents.map((a) => a.unattended ? `${a.id} (no per-step approval)` : a.id).join(", ")} to ${server} as "${cfg.name}"`);
+  for (const w of noAsk(ctx, cfg)) ctx.out(`warning: ${w}`);
   try {
     const result = await connector2.run();
     if (result === "revoked") {
@@ -3853,16 +3926,18 @@ function cmdStatus(args, ctx) {
   let agents = [];
   let unattended = [];
   let configProblem = null;
+  let warnings = [];
   try {
     const cfg = loadCfg(ctx);
     agents = cfg.agents.map((a) => a.id);
     unattended = cfg.agents.filter((a) => a.unattended).map((a) => a.id);
+    warnings = noAsk(ctx, cfg);
   } catch (e) {
     configProblem = errMessage(e);
   }
   let connectorId = null;
   try {
-    const raw = JSON.parse(fs13.readFileSync(identityFile(ctx.dirs), "utf8"));
+    const raw = JSON.parse(fs14.readFileSync(identityFile(ctx.dirs), "utf8"));
     if (isObject(raw) && typeof raw.connector_id === "string") connectorId = raw.connector_id;
   } catch {
   }
@@ -3870,14 +3945,16 @@ function cmdStatus(args, ctx) {
   const status = {
     version: VERSION,
     running: runningPid(ctx),
-    paused: fs13.existsSync(pauseFile(ctx.dirs)),
+    paused: fs14.existsSync(pauseFile(ctx.dirs)),
     signed_in: creds ? { kind: creds.kind, server: creds.server, device_name: creds.device_name ?? null } : null,
     connector_id: connectorId,
     agents,
     /** Agents whose sessions start without asking before a write or a command. */
     unattended,
     adapters: reg.list().filter((r) => reg.isOurs(r)).map((r) => ({ pid: r.pid, agent: r.agent_id, session: r.session_id })),
-    problems: [credsProblem, configProblem].filter((x) => !!x)
+    problems: [credsProblem, configProblem].filter((x) => !!x),
+    /** Agents whose sessions will be refused as things stand (Claude's own settings start them in a mode that never asks). */
+    warnings
   };
   if (values.json) {
     ctx.out(JSON.stringify(status, null, 2));
@@ -3888,11 +3965,12 @@ function cmdStatus(args, ctx) {
   ctx.out(`agents:     ${agents.map((a) => unattended.includes(a) ? `${a} (no per-step approval)` : a).join(", ") || "none configured"}`);
   ctx.out(`adapters:   ${status.adapters.length ? status.adapters.map((a) => `${a.agent} pid ${a.pid}`).join(", ") : "none running"}`);
   for (const p of status.problems) ctx.out(`problem:    ${p}`);
+  for (const w of status.warnings) ctx.out(`warning:    ${w}`);
   return EXIT.ok;
 }
 async function cmdPause(ctx) {
-  fs13.mkdirSync(ctx.dirs.state, { recursive: true, mode: 448 });
-  fs13.writeFileSync(pauseFile(ctx.dirs), (/* @__PURE__ */ new Date()).toISOString() + "\n", { mode: 384 });
+  fs14.mkdirSync(ctx.dirs.state, { recursive: true, mode: 448 });
+  fs14.writeFileSync(pauseFile(ctx.dirs), (/* @__PURE__ */ new Date()).toISOString() + "\n", { mode: 384 });
   if (runningPid(ctx) === null) {
     const left = await new ChildRegistry(childrenFile(ctx.dirs)).killAll();
     ctx.out(`paused (the connector is not running${left.killed.length ? `; stopped ${left.killed.length} leftover agent process group(s)` : ""})`);
@@ -3902,7 +3980,7 @@ async function cmdPause(ctx) {
   return EXIT.ok;
 }
 function cmdResume(ctx) {
-  fs13.rmSync(pauseFile(ctx.dirs), { force: true });
+  fs14.rmSync(pauseFile(ctx.dirs), { force: true });
   ctx.out(runningPid(ctx) === null ? "resumed; start it with: claw-connector run" : "resumed: the running connector reconnects now");
   return EXIT.ok;
 }
@@ -3942,7 +4020,7 @@ async function cmdLogout(ctx) {
       ctx.err(`could not revoke the sign-in at the identity service (${errMessage(e)}); it was removed from this machine`);
     }
   }
-  fs13.rmSync(file, { force: true });
+  fs14.rmSync(file, { force: true });
   forgetRevokedIdentity(ctx);
   ctx.out("signed out");
   return EXIT.ok;