@rnbsolucoes/axion-code 0.1.13 → 0.1.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -45,6 +45,7 @@ axion-code provider model list openrouter --json
|
|
|
45
45
|
axion-code provider test openrouter google/gemini-2.5-flash-lite
|
|
46
46
|
axion-code permission list --json
|
|
47
47
|
axion-code permission set full_permission
|
|
48
|
+
axion-code permission inspect Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
|
|
48
49
|
axion-code graphics doctor
|
|
49
50
|
axion-code graphics logo
|
|
50
51
|
axion-code graphics logo --mode sixel --width 180
|
|
@@ -264,6 +265,34 @@ Subagents are stored in `%USERPROFILE%\.axion\sub-agents.json`. The initial cata
|
|
|
264
265
|
|
|
265
266
|
Execution contract: subagents inherit the active provider/model, receive an isolated prompt containing only their role and the requested task, do not access the main hidden context unless explicitly included in the prompt, and return findings/evidence/actions back to the main timeline.
|
|
266
267
|
|
|
268
|
+
## Approval And Sandbox Policy
|
|
269
|
+
|
|
270
|
+
`axion permission inspect` exposes the native Go approval policy without running
|
|
271
|
+
the tool. It classifies native tools, shell commands and MCP-proxied tools into
|
|
272
|
+
stable risk classes, reports whether the active permission mode would require
|
|
273
|
+
approval, redacts secret-shaped inputs and returns the sandbox profile that a
|
|
274
|
+
future tool dispatcher must use.
|
|
275
|
+
|
|
276
|
+
Examples:
|
|
277
|
+
|
|
278
|
+
```powershell
|
|
279
|
+
axion permission inspect Read --mode approved_by_me --json
|
|
280
|
+
axion permission inspect Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
|
|
281
|
+
axion permission inspect mcp__serena__replace_symbol_body "{}" --mode full_permission --json
|
|
282
|
+
```
|
|
283
|
+
|
|
284
|
+
Security invariants:
|
|
285
|
+
|
|
286
|
+
- `Full permission` skips only read and non-destructive write tiers.
|
|
287
|
+
- package install, network download/egress, destructive commands, process
|
|
288
|
+
control, paid generation, browser actions, mutating MCP tools and unknown
|
|
289
|
+
tools still require approval under `Full permission`.
|
|
290
|
+
- `YOLO` is the only mode that bypasses every class, and remains explicit user
|
|
291
|
+
opt-in.
|
|
292
|
+
- unknown native tools are default-deny until they are classified.
|
|
293
|
+
- MCP tools are mutating by default; only read-shaped names such as `find_*`,
|
|
294
|
+
`get_*`, `list_*`, `search_*` and `*_overview` are downgraded to read-only.
|
|
295
|
+
|
|
267
296
|
Provider menu actions:
|
|
268
297
|
|
|
269
298
|
```text
|
|
@@ -294,10 +323,12 @@ If Go is not on PATH, use a verified local Go toolchain and keep generated binar
|
|
|
294
323
|
|
|
295
324
|
This is a functional direction MVP, not the full harness:
|
|
296
325
|
|
|
297
|
-
-
|
|
326
|
+
- direct provider streaming exists for OpenAI-compatible chat completions,
|
|
327
|
+
OpenAI Responses and Anthropic Messages; Nexus stream normalization remains
|
|
328
|
+
deferred until the Nexus beta handoff;
|
|
298
329
|
- terminal logo uses Sixel when available and falls back to width-bounded ANSI/block rendering;
|
|
299
330
|
- initial chat splash shows the Axion logo and system name until the first interaction;
|
|
300
|
-
- no tool execution yet;
|
|
331
|
+
- no mutating tool execution yet; the approval/sandbox classification contract is implemented and inspectable;
|
|
301
332
|
- no executable Pi RPC bridge yet;
|
|
302
333
|
- no MCP transport execution yet;
|
|
303
334
|
- native subagent execution is prompt-isolated and provider/model-inherited; richer multi-subagent orchestration, streaming and budget telemetry remain next-cycle items.
|
|
Binary file
|
|
Binary file
|