@rnbsolucoes/axion-code 0.1.15 → 0.1.16
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md
CHANGED
|
@@ -46,6 +46,9 @@ axion-code provider test openrouter google/gemini-2.5-flash-lite
|
|
|
46
46
|
axion-code permission list --json
|
|
47
47
|
axion-code permission set full_permission
|
|
48
48
|
axion-code permission inspect Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
|
|
49
|
+
axion-code permission request Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
|
|
50
|
+
axion-code permission approvals --decision pending --json
|
|
51
|
+
axion-code permission resolve <approval-id> --approve --reason "reviewed" --json
|
|
49
52
|
axion-code graphics doctor
|
|
50
53
|
axion-code graphics logo
|
|
51
54
|
axion-code graphics logo --mode sixel --width 180
|
|
@@ -270,8 +273,15 @@ Execution contract: subagents inherit the active provider/model, receive an isol
|
|
|
270
273
|
`axion permission inspect` exposes the native Go approval policy without running
|
|
271
274
|
the tool. It classifies native tools, shell commands and MCP-proxied tools into
|
|
272
275
|
stable risk classes, reports whether the active permission mode would require
|
|
273
|
-
approval, redacts secret-shaped inputs and returns the sandbox profile that
|
|
274
|
-
|
|
276
|
+
approval, redacts secret-shaped inputs and returns the sandbox profile that the
|
|
277
|
+
guarded dispatcher must use.
|
|
278
|
+
|
|
279
|
+
`axion permission request|approvals|resolve` adds the auditable approval queue.
|
|
280
|
+
Requests are persisted in the shared session database under
|
|
281
|
+
`%USERPROFILE%\.axion\sessions\axion.db` with the redacted decision, risk class,
|
|
282
|
+
permission mode, impact summary and pending/approved/denied state. This is the
|
|
283
|
+
headless contract that the TUI approval modal and guarded dispatcher will use
|
|
284
|
+
before mutating filesystem, shell or MCP tools are enabled.
|
|
275
285
|
|
|
276
286
|
Examples:
|
|
277
287
|
|
|
@@ -279,6 +289,9 @@ Examples:
|
|
|
279
289
|
axion permission inspect Read --mode approved_by_me --json
|
|
280
290
|
axion permission inspect Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --json
|
|
281
291
|
axion permission inspect mcp__serena__replace_symbol_body "{}" --mode full_permission --json
|
|
292
|
+
axion permission request Bash "{\"command\":\"npm install left-pad\"}" --mode full_permission --session smoke --turn turn-1 --json
|
|
293
|
+
axion permission approvals --session smoke --decision pending --json
|
|
294
|
+
axion permission resolve <approval-id> --deny --reason "not needed" --json
|
|
282
295
|
```
|
|
283
296
|
|
|
284
297
|
Security invariants:
|
|
@@ -328,7 +341,7 @@ This is a functional direction MVP, not the full harness:
|
|
|
328
341
|
deferred until the Nexus beta handoff;
|
|
329
342
|
- terminal logo uses Sixel when available and falls back to width-bounded ANSI/block rendering;
|
|
330
343
|
- initial chat splash shows the Axion logo and system name until the first interaction;
|
|
331
|
-
- no mutating tool execution yet; the approval/sandbox classification
|
|
344
|
+
- no mutating tool execution yet; the approval/sandbox classification and persisted approval queue contracts are implemented and inspectable;
|
|
332
345
|
- no executable Pi RPC bridge yet;
|
|
333
346
|
- no MCP transport execution yet;
|
|
334
347
|
- native subagent execution is prompt-isolated and provider/model-inherited; richer multi-subagent orchestration, streaming and budget telemetry remain next-cycle items.
|
|
Binary file
|
|
Binary file
|