@rnbsolucoes/axion-code 0.1.15 → 0.1.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -46,6 +46,9 @@ axion-code provider test openrouter google/gemini-2.5-flash-lite
46
46
  axion-code permission list --json
47
47
  axion-code permission set full_permission
48
48
  axion-code permission inspect Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
49
+ axion-code permission request Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
50
+ axion-code permission approvals --decision pending --json
51
+ axion-code permission resolve <approval-id> --approve --reason "reviewed" --json
49
52
  axion-code graphics doctor
50
53
  axion-code graphics logo
51
54
  axion-code graphics logo --mode sixel --width 180
@@ -270,8 +273,15 @@ Execution contract: subagents inherit the active provider/model, receive an isol
270
273
  `axion permission inspect` exposes the native Go approval policy without running
271
274
  the tool. It classifies native tools, shell commands and MCP-proxied tools into
272
275
  stable risk classes, reports whether the active permission mode would require
273
- approval, redacts secret-shaped inputs and returns the sandbox profile that a
274
- future tool dispatcher must use.
276
+ approval, redacts secret-shaped inputs and returns the sandbox profile that the
277
+ guarded dispatcher must use.
278
+
279
+ `axion permission request|approvals|resolve` adds the auditable approval queue.
280
+ Requests are persisted in the shared session database under
281
+ `%USERPROFILE%\.axion\sessions\axion.db` with the redacted decision, risk class,
282
+ permission mode, impact summary and pending/approved/denied state. This is the
283
+ headless contract that the TUI approval modal and guarded dispatcher will use
284
+ before mutating filesystem, shell or MCP tools are enabled.
275
285
 
276
286
  Examples:
277
287
 
@@ -279,6 +289,9 @@ Examples:
279
289
  axion permission inspect Read --mode approved_by_me --json
280
290
  axion permission inspect Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
281
291
  axion permission inspect mcp__serena__replace_symbol_body "{}" --mode full_permission --json
292
+ axion permission request Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --session smoke --turn turn-1 --json
293
+ axion permission approvals --session smoke --decision pending --json
294
+ axion permission resolve <approval-id> --deny --reason "not needed" --json
282
295
  ```
283
296
 
284
297
  Security invariants:
@@ -328,7 +341,7 @@ This is a functional direction MVP, not the full harness:
328
341
  deferred until the Nexus beta handoff;
329
342
  - terminal logo uses Sixel when available and falls back to width-bounded ANSI/block rendering;
330
343
  - initial chat splash shows the Axion logo and system name until the first interaction;
331
- - no mutating tool execution yet; the approval/sandbox classification contract is implemented and inspectable;
344
+ - no mutating tool execution yet; the approval/sandbox classification and persisted approval queue contracts are implemented and inspectable;
332
345
  - no executable Pi RPC bridge yet;
333
346
  - no MCP transport execution yet;
334
347
  - native subagent execution is prompt-isolated and provider/model-inherited; richer multi-subagent orchestration, streaming and budget telemetry remain next-cycle items.
Binary file
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rnbsolucoes/axion-code",
3
- "version": "0.1.15",
3
+ "version": "0.1.16",
4
4
  "description": "Axion Code CLI harness for the Axion ecosystem.",
5
5
  "type": "module",
6
6
  "repository": {