@shipit-ai/cli 1.166.1 → 1.167.0

package/dist/packages/core/src/infrastructure/services/agents/common/agent-permissions.js

@@ -0,0 +1,49 @@
+/**
+ * Agent Permission Mode Resolver
+ *
+ * Resolves the permission mode for a given agent from Settings,
+ * falling back to a sensible default per agent type.
+ */
+/**
+ * Maps AgentType string values to their corresponding key in AgentPermissionSettings.
+ */
+const SETTINGS_KEY_BY_AGENT = {
+    'claude-code': 'claudeCode',
+    cursor: 'cursor',
+    'gemini-cli': 'geminiCli',
+    'codex-cli': 'codexCli',
+    'copilot-cli': 'copilotCli',
+    'rovo-dev': 'rovoDev',
+};
+/**
+ * Default permission modes per agent — these match the previously hardcoded values
+ * to preserve backward compatibility.
+ */
+const DEFAULT_MODE_BY_AGENT = {
+    'claude-code': 'bypassPermissions',
+    cursor: 'yolo',
+    'gemini-cli': 'yolo',
+    'codex-cli': 'danger-full-access',
+    'copilot-cli': 'yolo',
+    'rovo-dev': 'yolo',
+};
+/**
+ * Resolve the permission mode for an agent from settings.
+ *
+ * Resolution order:
+ * 1. Explicit setting in `settings.agent.permissions.<agentKey>`
+ * 2. Default for the agent type (matches previous hardcoded behavior)
+ * 3. undefined (when agent type is unknown)
+ *
+ * @param settings - Optional Settings object (when omitted, returns default for agentType)
+ * @param agentType - Optional explicit agent type (falls back to settings.agent.type)
+ */
+export function resolveAgentPermissionMode(settings, agentType) {
+    const type = agentType ?? settings?.agent?.type;
+    if (!type)
+        return undefined;
+    const key = SETTINGS_KEY_BY_AGENT[type];
+    if (!key || !settings?.agent?.permissions)
+        return DEFAULT_MODE_BY_AGENT[type];
+    return settings.agent.permissions[key] ?? DEFAULT_MODE_BY_AGENT[type];
+}

package/dist/packages/core/src/infrastructure/services/agents/common/agent-runner.service.d.ts

@@ -11,11 +11,13 @@ import type { IAgentRegistry } from '../../../../application/ports/output/agents
 import type { IAgentExecutorProvider } from '../../../../application/ports/output/agents/agent-executor-provider.interface.js';
 import type { IAgentRunRepository } from '../../../../application/ports/output/agents/agent-run-repository.interface.js';
 import type { AgentRun, AgentRunEvent } from '../../../../domain/generated/output.js';
+import type { ISettingsReader } from '../../../../application/ports/output/services/settings-reader.interface.js';
 export declare class AgentRunnerService implements IAgentRunner {
     private readonly registry;
     private readonly executorProvider;
     private readonly runRepository;
-    constructor(registry: IAgentRegistry, executorProvider: IAgentExecutorProvider, runRepository: IAgentRunRepository);
+    private readonly settingsReader;
+    constructor(registry: IAgentRegistry, executorProvider: IAgentExecutorProvider, runRepository: IAgentRunRepository, settingsReader: ISettingsReader);
     runAgent(agentName: string, prompt: string, options?: AgentRunOptions): Promise<AgentRun>;
     runAgentStream(agentName: string, prompt: string, options?: AgentRunOptions): AsyncIterable<AgentRunEvent>;
     private setupRun;

package/dist/packages/core/src/infrastructure/services/agents/common/agent-runner.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-runner.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/agent-runner.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EAChB,MAAM,6DAA6D,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AACpG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qEAAqE,CAAC;AAE/G,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAoB5E,qBAAa,kBAAmB,YAAW,YAAY;IAEnD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAFb,QAAQ,EAAE,cAAc,EACxB,gBAAgB,EAAE,sBAAsB,EACxC,aAAa,EAAE,mBAAmB;IAG/C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;IAoBxF,cAAc,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,eAAe,GACxB,aAAa,CAAC,aAAa,CAAC;YAwCjB,QAAQ;YAwCR,aAAa;YAUb,UAAU;CAQzB"}
+{"version":3,"file":"agent-runner.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/agent-runner.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EAChB,MAAM,6DAA6D,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AACpG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qEAAqE,CAAC;AAE/G,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kEAAkE,CAAC;AAkBxG,qBAAa,kBAAmB,YAAW,YAAY;IAEnD,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,QAAQ,EAAE,cAAc,EACxB,gBAAgB,EAAE,sBAAsB,EACxC,aAAa,EAAE,mBAAmB,EAClC,cAAc,EAAE,eAAe;IAG5C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;IAoBxF,cAAc,CACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,eAAe,GACxB,aAAa,CAAC,aAAa,CAAC;YAwCjB,QAAQ;YAwCR,aAAa;YAUb,UAAU;CAQzB"}

package/dist/packages/core/src/infrastructure/services/agents/common/agent-runner.service.js

@@ -8,7 +8,6 @@
  */
 import * as crypto from 'node:crypto';
 import { AgentRunStatus } from '../../../../domain/generated/output.js';
-import { getSettings } from '../../../services/settings.service.js';
 import { EventChannel } from '../streaming/event-channel.js';
 import { StreamingExecutorProxy } from '../streaming/streaming-executor-proxy.js';
 /**
@@ -28,10 +27,12 @@ export class AgentRunnerService {
     registry;
     executorProvider;
     runRepository;
-    constructor(registry, executorProvider, runRepository) {
+    settingsReader;
+    constructor(registry, executorProvider, runRepository, settingsReader) {
         this.registry = registry;
         this.executorProvider = executorProvider;
         this.runRepository = runRepository;
+        this.settingsReader = settingsReader;
     }
     async runAgent(agentName, prompt, options) {
         const { definition, executor, runId, threadId } = await this.setupRun(agentName, prompt);
@@ -87,7 +88,7 @@ export class AgentRunnerService {
                 .map((a) => a.name)
                 .join(', ')}`);
         }
-        const settings = getSettings();
+        const settings = this.settingsReader.getSettings();
         const agentType = settings.agent.type;
         const executor = await this.executorProvider.getExecutor();
         const runId = crypto.randomUUID();

package/dist/packages/core/src/infrastructure/services/agents/common/agent-validator.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-validator.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/agent-validator.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACtB,MAAM,0EAA0E,CAAC;AAElF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAc/C;;;;;GAKG;AACH,qBACa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IAEtC;;;OAGG;gBACiC,MAAM,EAAE,YAAY;IAIxD;;;;;OAKG;IACG,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA8BxE"}
+{"version":3,"file":"agent-validator.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/agent-validator.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,KAAK,EACV,eAAe,EACf,qBAAqB,EACtB,MAAM,0EAA0E,CAAC;AAElF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAc/C;;;;;GAKG;AACH,qBACa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IAEtC;;;OAGG;gBACiC,MAAM,EAAE,YAAY;IAIxD;;;;;OAKG;IACG,WAAW,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA2BxE"}

package/dist/packages/core/src/infrastructure/services/agents/common/agent-validator.service.js

@@ -54,9 +54,6 @@ let AgentValidatorService = class AgentValidatorService {
      * @returns Validation result with availability status and version
      */
     async isAvailable(agentType) {
-        // Dev type requires no binary — always available for local development
-        if (agentType === 'dev')
-            return { available: true, version: 'dev' };
         const binary = AGENT_BINARY_MAP[agentType];
         if (!binary) {
             return {

package/dist/packages/core/src/infrastructure/services/agents/common/executors/claude-code-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/claude-code-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAEpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAWlD;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA8B;gBAE/C,KAAK,EAAE,aAAa;IAI1B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA4FtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IA6D3C;;;OAGG;IACH,OAAO,CAAC,cAAc;IA0CtB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAI/C,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,eAAe;IA6BvB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,eAAe;CAkExB"}
+{"version":3,"file":"claude-code-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/claude-code-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EAEb,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAEpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAWlD;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA8B;gBAE/C,KAAK,EAAE,aAAa;IAI1B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA4FtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IA6D3C;;;OAGG;IACH,OAAO,CAAC,cAAc;IA0CtB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAI/C,OAAO,CAAC,SAAS;IA4BjB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,eAAe;IA6BvB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,eAAe;CAkExB"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/claude-code-executor.service.js

@@ -197,6 +197,17 @@ export class ClaudeCodeExecutorService extends ExecutorBase {
     buildArgs(_prompt, options) {
         // Prompt is piped via stdin — not passed as a CLI argument — to avoid
         // ENAMETOOLONG on Windows when prompts exceed the ~32 KB arg-length limit.
+        const mode = options?.permissionMode ?? 'bypassPermissions';
+        switch (mode) {
+            case 'bypassPermissions':
+                // OK for batch pipeline
+                break;
+            case 'default':
+            case 'acceptEdits':
+            case 'plan':
+                throw new Error(`Claude Code mode '${mode}' requires interactive input and cannot run in the batch pipeline. ` +
+                    `Use 'bypassPermissions' for batch runs, or switch to the Chat tab for interactive modes.`);
+        }
         const args = ['-p', '--output-format', 'json', '--dangerously-skip-permissions'];
         if (options?.resumeSession)
             args.push('--resume', options.resumeSession);

package/dist/packages/core/src/infrastructure/services/agents/common/executors/claude-code-interactive-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-interactive-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/claude-code-interactive-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAOH,OAAO,KAAK,EACV,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAE9B,MAAM,wFAAwF,CAAC;AAgBhG,qBAAa,6BAA8B,YAAW,yBAAyB;IACvE,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAOvF,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,6BAA6B,CAAC;IAOzC;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;IAmBf,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,WAAW;IAoBnB;;;;;;OAMG;YACY,SAAS;IA6BxB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;CAuPtB"}
+{"version":3,"file":"claude-code-interactive-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/claude-code-interactive-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAOH,OAAO,KAAK,EACV,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAE9B,MAAM,wFAAwF,CAAC;AAgBhG,qBAAa,6BAA8B,YAAW,yBAAyB;IACvE,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAOvF,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,6BAA6B,CAAC;IAOzC;;;;;;OAMG;IACH,OAAO,CAAC,OAAO;IAmBf,OAAO,CAAC,eAAe;IAuBvB,OAAO,CAAC,WAAW;IAoBnB;;;;;;OAMG;YACY,SAAS;IA6BxB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,aAAa;CAuPtB"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/claude-code-interactive-executor.service.js

@@ -85,7 +85,7 @@ export class ClaudeCodeInteractiveExecutor {
         const { CLAUDECODE: _, ...cleanEnv } = process.env;
         return {
             model: options.model ?? DEFAULT_MODEL,
-            permissionMode: 'bypassPermissions',
+            permissionMode: options.permissionMode ?? 'bypassPermissions',
             env: cleanEnv,
             // Forward system prompt using preset+append pattern
             ...(options.systemPrompt && {

package/dist/packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAEpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAsBlD;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA4B;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;gBAE9B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuItF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoM3C;;;;OAIG;IACH,wDAAwD;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAEnF,OAAO,CAAC,cAAc;IAkJtB;;;;;OAKG;IACH,OAAO,CAAC,SAAS;cA4BE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAQtE;;OAEG;IACH,OAAO,CAAC,YAAY;IAUpB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAkBvB;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAU/B"}
+{"version":3,"file":"codex-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EAEZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAEpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAsBlD;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,YAAY;IACvD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA4B;IAEzD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;gBAE9B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuItF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoM3C;;;;OAIG;IACH,wDAAwD;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAyC;IAEnF,OAAO,CAAC,cAAc;IAkJtB;;;;;OAKG;IACH,OAAO,CAAC,SAAS;cA+BE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAQtE;;OAEG;IACH,OAAO,CAAC,YAAY;IAUpB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAgBxB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAkBvB;;;OAGG;IACH,OAAO,CAAC,sBAAsB;CAU/B"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/codex-cli-executor.service.js

@@ -464,10 +464,13 @@ export class CodexCliExecutorService extends ExecutorBase {
      * For resume: `codex exec resume <threadId> "prompt" --json --sandbox danger-full-access ...`
      */
     buildArgs(prompt, options, tempSchemaPath) {
+        const sandbox = options?.permissionMode ?? 'danger-full-access';
         const baseFlags = [
             '--json',
             '--sandbox',
-            'danger-full-access',
+            sandbox,
+            '--ask-for-approval',
+            'never', // BUG FIX: was implicit/missing — required for non-interactive batch runs
             '--skip-git-repo-check',
             '--color',
             'never',

package/dist/packages/core/src/infrastructure/services/agents/common/executors/copilot-cli-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"copilot-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/copilot-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA8B;gBAE/C,KAAK,EAAE,aAAa;IAIhC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkEtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoE3C;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CAelB"}
+{"version":3,"file":"copilot-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/copilot-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EAEb,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,YAAY;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA8B;gBAE/C,KAAK,EAAE,aAAa;IAIhC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkEtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoE3C;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CAoBlB"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/copilot-cli-executor.service.js

@@ -136,13 +136,20 @@ export class CopilotCliExecutorService extends ExecutorBase {
      * -p: prompt text
      */
     buildArgs(prompt, options) {
+        const mode = options?.permissionMode ?? 'yolo';
         const args = ['-s', '-p', prompt];
         if (options?.model)
             args.push('--model', options.model);
-        // Enable autonomous mode when all tools are allowed
-        if (options?.allowedTools?.includes('*') ||
-            (options?.allowedTools && options.allowedTools.length > 0)) {
-            args.push('--yolo');
+        switch (mode) {
+            case 'yolo':
+                args.push('--yolo');
+                break;
+            case 'allow-paths':
+                args.push('--allow-all-paths');
+                break;
+            case 'prompt':
+                // No flag — Copilot prompts for approval
+                break;
         }
         return args;
     }

package/dist/packages/core/src/infrastructure/services/agents/common/executors/cursor-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/cursor-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAsBlD;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;IACrD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAyB;gBAE1C,KAAK,EAAE,aAAa;IAIhC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0HtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAsD3C;;OAEG;IACH,OAAO,CAAC,cAAc;IAkCtB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,eAAe;IAOvB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,UAAU;IA2DlB,OAAO,CAAC,eAAe;CAgDxB"}
+{"version":3,"file":"cursor-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/cursor-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EAEb,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAsBlD;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;IACrD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAyB;gBAE1C,KAAK,EAAE,aAAa;IAIhC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0HtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAsD3C;;OAEG;IACH,OAAO,CAAC,cAAc;IAkCtB,OAAO,CAAC,SAAS;IAmBjB,OAAO,CAAC,eAAe;IAOvB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,UAAU;IA2DlB,OAAO,CAAC,eAAe;CAgDxB"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/cursor-executor.service.js

@@ -239,7 +239,17 @@ export class CursorExecutorService extends ExecutorBase {
         }
     }
     buildArgs(prompt, options) {
-        const args = ['--yolo', '-p', prompt, '--output-format', 'json'];
+        const mode = options?.permissionMode ?? 'yolo';
+        const args = ['-p', prompt, '--output-format', 'json'];
+        switch (mode) {
+            case 'yolo':
+                args.unshift('--yolo');
+                args.push('--force'); // BUG FIX: was missing — required for file writes in print mode
+                break;
+            case 'propose':
+                // No flags — Cursor proposes changes without applying
+                break;
+        }
         if (options?.resumeSession)
             args.push('--resume', options.resumeSession);
         if (options?.model)

package/dist/packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gemini-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,YAAY;IACxD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA6B;IAE1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;gBAE9B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsFtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAgF3C;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAmDxB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAI3C;IAEF;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;cAwBE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAOvE"}
+{"version":3,"file":"gemini-cli-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EAEZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,YAAY;IACxD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA6B;IAE1D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAc;gBAE9B,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,WAAW;IAK1D,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsFtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAgF3C;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAmDxB;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAI3C;IAEF;;;OAGG;IACH,OAAO,CAAC,sBAAsB;IAY9B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,SAAS;cAyBE,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAOvE"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/gemini-cli-executor.service.js

@@ -260,7 +260,8 @@ export class GeminiCliExecutorService extends ExecutorBase {
     buildArgs(_prompt, options, outputFormat = 'json') {
         // Prompt is piped via stdin — not passed as a CLI argument — to avoid
         // ENAMETOOLONG on Windows when prompts exceed the ~32 KB arg-length limit.
-        const args = ['-p', '--output-format', outputFormat, '-y'];
+        const mode = options?.permissionMode ?? 'yolo';
+        const args = ['-p', '--output-format', outputFormat, '--approval-mode', mode];
         if (options?.resumeSession)
             args.push('--resume', options.resumeSession);
         if (options?.model)

package/dist/packages/core/src/infrastructure/services/agents/common/executors/rovo-dev-executor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rovo-dev-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/rovo-dev-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACzF,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,YAAY;IACtD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA2B;gBAE5C,KAAK,EAAE,aAAa;IAIhC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkEtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoE3C;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CAalB"}
+{"version":3,"file":"rovo-dev-executor.service.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/common/executors/rovo-dev-executor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,YAAY,EAEb,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EAC1B,MAAM,4EAA4E,CAAC;AACpF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,YAAY;IACtD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAA2B;gBAE5C,KAAK,EAAE,aAAa;IAIhC,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkEtF,aAAa,CAClB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,yBAAyB,CAAC;IAoE3C;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;CAkBlB"}

package/dist/packages/core/src/infrastructure/services/agents/common/executors/rovo-dev-executor.service.js

@@ -139,11 +139,18 @@ export class RovoDevExecutorService extends ExecutorBase {
      * No --model flag exists for Rovo Dev — model selection is only via config file.
      */
     buildArgs(prompt, options) {
+        const mode = options?.permissionMode ?? 'yolo';
         const args = ['rovodev', 'run', prompt];
-        // Enable autonomous mode when all tools are allowed
-        if (options?.allowedTools?.includes('*') ||
-            (options?.allowedTools && options.allowedTools.length > 0)) {
-            args.push('--yolo');
+        switch (mode) {
+            case 'yolo':
+                args.push('--yolo');
+                break;
+            case 'shadow':
+                args.push('--shadow');
+                break;
+            case 'config':
+                // No flag — uses config-file-defined permissions
+                break;
         }
         return args;
     }

package/dist/packages/core/src/infrastructure/services/agents/common/structured-agent-caller.service.d.ts

@@ -1,6 +1,7 @@
 import type { IAgentExecutorProvider } from '../../../../application/ports/output/agents/agent-executor-provider.interface.js';
 import type { IAgentExecutorFactory } from '../../../../application/ports/output/agents/agent-executor-factory.interface.js';
 import type { IStructuredAgentCaller, StructuredCallOptions } from '../../../../application/ports/output/agents/structured-agent-caller.interface.js';
+import type { ISettingsReader } from '../../../../application/ports/output/services/settings-reader.interface.js';
 /**
  * Structured agent caller that abstracts native structured output vs prompt-based JSON extraction.
  *
@@ -10,7 +11,8 @@ import type { IStructuredAgentCaller, StructuredCallOptions } from '../../../../
 export declare class StructuredAgentCallerService implements IStructuredAgentCaller {
     private readonly executorProvider;
     private readonly executorFactory;
-    constructor(executorProvider: IAgentExecutorProvider, executorFactory: IAgentExecutorFactory);
+    private readonly settingsReader;
+    constructor(executorProvider: IAgentExecutorProvider, executorFactory: IAgentExecutorFactory, settingsReader: ISettingsReader);
     call<T>(prompt: string, schema: object, options?: StructuredCallOptions): Promise<T>;
     private callWithNativeSchema;
     private callWithPromptFallback;

package/dist/packages/core/src/infrastructure/services/agents/common/structured-agent-caller.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"structured-agent-caller.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/structured-agent-caller.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kFAAkF,CAAC;AAC/H,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iFAAiF,CAAC;AAE7H,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,kFAAkF,CAAC;AAI1F;;;;;GAKG;AACH,qBACa,4BAA6B,YAAW,sBAAsB;IAGvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAEjC,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAFf,gBAAgB,EAAE,sBAAsB,EAExC,eAAe,EAAE,qBAAqB;IAGnD,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,CAAC,CAAC;YAgB5E,oBAAoB;YAapB,sBAAsB;IAWpC,OAAO,CAAC,8BAA8B;IAYtC,OAAO,CAAC,iBAAiB;CA4C1B"}
+{"version":3,"file":"structured-agent-caller.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/common/structured-agent-caller.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kFAAkF,CAAC;AAC/H,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iFAAiF,CAAC;AAE7H,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,kFAAkF,CAAC;AAE1F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4EAA4E,CAAC;AAGlH;;;;;GAKG;AACH,qBACa,4BAA6B,YAAW,sBAAsB;IAGvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IAEjC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAEhC,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAJd,gBAAgB,EAAE,sBAAsB,EAExC,eAAe,EAAE,qBAAqB,EAEtC,cAAc,EAAE,eAAe;IAG5C,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,CAAC,CAAC;YAsB5E,oBAAoB;YAapB,sBAAsB;IAWpC,OAAO,CAAC,8BAA8B;IAYtC,OAAO,CAAC,iBAAiB;CA4C1B"}

package/dist/packages/core/src/infrastructure/services/agents/common/structured-agent-caller.service.js

@@ -13,7 +13,7 @@ var __param = (this && this.__param) || function (paramIndex, decorator) {
 import { injectable, inject } from 'tsyringe';
 import { AgentFeature } from '../../../../domain/generated/output.js';
 import { StructuredCallError } from '../../../../application/ports/output/agents/structured-call-error.js';
-import { getSettings } from '../../settings.service.js';
+import { resolveAgentPermissionMode } from './agent-permissions.js';
 /**
  * Structured agent caller that abstracts native structured output vs prompt-based JSON extraction.
  *
@@ -23,23 +23,29 @@ import { getSettings } from '../../settings.service.js';
 let StructuredAgentCallerService = class StructuredAgentCallerService {
     executorProvider;
     executorFactory;
-    constructor(executorProvider, executorFactory) {
+    settingsReader;
+    constructor(executorProvider, executorFactory, settingsReader) {
         this.executorProvider = executorProvider;
         this.executorFactory = executorFactory;
+        this.settingsReader = settingsReader;
     }
     async call(prompt, schema, options) {
         let executor;
+        const settings = this.settingsReader.getSettings();
         if (options?.agentType) {
-            const settings = getSettings();
             executor = this.executorFactory.createExecutor(options.agentType, settings.agent);
         }
         else {
             executor = await this.executorProvider.getExecutor();
         }
+        // Inject permissionMode from settings when not explicitly provided
+        const resolvedOptions = options?.permissionMode || !settings
+            ? options
+            : { ...options, permissionMode: resolveAgentPermissionMode(settings) };
         if (executor.supportsFeature(AgentFeature.structuredOutput)) {
-            return this.callWithNativeSchema(executor, prompt, schema, options);
+            return this.callWithNativeSchema(executor, prompt, schema, resolvedOptions);
         }
-        return this.callWithPromptFallback(executor, prompt, schema, options);
+        return this.callWithPromptFallback(executor, prompt, schema, resolvedOptions);
     }
     // Native structured output path
     async callWithNativeSchema(executor, prompt, schema, options) {
@@ -110,6 +116,7 @@ StructuredAgentCallerService = __decorate([
     injectable(),
     __param(0, inject('IAgentExecutorProvider')),
     __param(1, inject('IAgentExecutorFactory')),
-    __metadata("design:paramtypes", [Object, Object])
+    __param(2, inject('ISettingsReader')),
+    __metadata("design:paramtypes", [Object, Object, Object])
 ], StructuredAgentCallerService);
 export { StructuredAgentCallerService };

package/dist/packages/core/src/infrastructure/services/agents/conflict-resolution/conflict-resolution.service.d.ts

@@ -7,10 +7,12 @@
  */
 import type { IAgentExecutorProvider } from '../../../../application/ports/output/agents/agent-executor-provider.interface.js';
 import type { IGitPrService } from '../../../../application/ports/output/services/git-pr-service.interface.js';
+import type { ISettingsReader } from '../../../../application/ports/output/services/settings-reader.interface.js';
 export declare class ConflictResolutionService {
     private readonly agentProvider;
     private readonly gitPrService;
-    constructor(agentProvider: IAgentExecutorProvider, gitPrService: IGitPrService);
+    private readonly settingsReader;
+    constructor(agentProvider: IAgentExecutorProvider, gitPrService: IGitPrService, settingsReader: ISettingsReader);
     /**
      * Resolve all conflicts during a rebase operation.
      *

package/dist/packages/core/src/infrastructure/services/agents/conflict-resolution/conflict-resolution.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conflict-resolution.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/conflict-resolution/conflict-resolution.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iEAAiE,CAAC;AAerG,qBACa,yBAAyB;IAGlC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAFZ,aAAa,EAAE,sBAAsB,EAErC,YAAY,EAAE,aAAa;IAG9C;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkEpF;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAWlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;OAEG;IACH,OAAO,CAAC,iCAAiC;CAyB1C"}
+{"version":3,"file":"conflict-resolution.service.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/conflict-resolution/conflict-resolution.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wEAAwE,CAAC;AACrH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iEAAiE,CAAC;AAKrG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kEAAkE,CAAC;AAYxG,qBACa,yBAAyB;IAGlC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAE7B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAJd,aAAa,EAAE,sBAAsB,EAErC,YAAY,EAAE,aAAa,EAE3B,cAAc,EAAE,eAAe;IAGlD;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuEpF;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAWlC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAgB1B;;OAEG;IACH,OAAO,CAAC,iCAAiC;CAyB1C"}

package/dist/packages/core/src/infrastructure/services/agents/conflict-resolution/conflict-resolution.service.js

@@ -21,6 +21,7 @@ import { injectable, inject } from 'tsyringe';
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { GitPrError, GitPrErrorCode, } from '../../../../application/ports/output/services/git-pr-service.interface.js';
+import { resolveAgentPermissionMode } from '../common/agent-permissions.js';
 import { buildConflictResolutionPrompt, } from './conflict-resolution.prompt.js';
 const MAX_RETRIES_PER_COMMIT = 3;
 /** Conflict markers that indicate unresolved conflicts */
@@ -28,9 +29,11 @@ const CONFLICT_MARKERS = ['<<<<<<<', '=======', '>>>>>>>'];
 let ConflictResolutionService = class ConflictResolutionService {
     agentProvider;
     gitPrService;
-    constructor(agentProvider, gitPrService) {
+    settingsReader;
+    constructor(agentProvider, gitPrService, settingsReader) {
         this.agentProvider = agentProvider;
         this.gitPrService = gitPrService;
+        this.settingsReader = settingsReader;
     }
     /**
      * Resolve all conflicts during a rebase operation.
@@ -68,7 +71,12 @@ let ConflictResolutionService = class ConflictResolutionService {
                     maxAttempts: MAX_RETRIES_PER_COMMIT,
                     previousFeedback,
                 });
-                await executor.execute(prompt, { cwd });
+                const settings = this.settingsReader.getSettings();
+                const permissionMode = settings ? resolveAgentPermissionMode(settings) : undefined;
+                await executor.execute(prompt, {
+                    cwd,
+                    ...(permissionMode ? { permissionMode } : {}),
+                });
                 // Validate: check no conflict markers remain
                 if (this.validateResolution(cwd, conflictedFiles)) {
                     resolved = true;
@@ -164,6 +172,7 @@ ConflictResolutionService = __decorate([
     injectable(),
     __param(0, inject('IAgentExecutorProvider')),
     __param(1, inject('IGitPrService')),
-    __metadata("design:paramtypes", [Object, Object])
+    __param(2, inject('ISettingsReader')),
+    __metadata("design:paramtypes", [Object, Object, Object])
 ], ConflictResolutionService);
 export { ConflictResolutionService };

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/fast-feature-agent-graph.d.ts

@@ -45,6 +45,7 @@ export declare function createFastFeatureAgentGraph(depsOrExecutor: FastFeatureA
     error: string | null;
     approvalGates: import("../../../../domain/index.js").ApprovalGates | undefined;
     model: string | undefined;
+    permissionMode: string | undefined;
     messages: string[];
     validationRetries: number;
     lastValidationTarget: string;
@@ -78,6 +79,7 @@ export declare function createFastFeatureAgentGraph(depsOrExecutor: FastFeatureA
     error?: string | import("@langchain/langgraph").OverwriteValue<string | null> | null | undefined;
     approvalGates?: import("../../../../domain/index.js").ApprovalGates | import("@langchain/langgraph").OverwriteValue<import("../../../../domain/index.js").ApprovalGates | undefined> | undefined;
     model?: string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined;
+    permissionMode?: string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined;
     messages?: string[] | import("@langchain/langgraph").OverwriteValue<string[]> | undefined;
     validationRetries?: number | import("@langchain/langgraph").OverwriteValue<number> | undefined;
     lastValidationTarget?: string | import("@langchain/langgraph").OverwriteValue<string> | undefined;
@@ -131,6 +133,7 @@ export declare function createFastFeatureAgentGraph(depsOrExecutor: FastFeatureA
     error: import("@langchain/langgraph").BaseChannel<string | null, string | import("@langchain/langgraph").OverwriteValue<string | null> | null, unknown>;
     approvalGates: import("@langchain/langgraph").BaseChannel<import("../../../../domain/index.js").ApprovalGates | undefined, import("../../../../domain/index.js").ApprovalGates | import("@langchain/langgraph").OverwriteValue<import("../../../../domain/index.js").ApprovalGates | undefined> | undefined, unknown>;
     model: import("@langchain/langgraph").BaseChannel<string | undefined, string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined, unknown>;
+    permissionMode: import("@langchain/langgraph").BaseChannel<string | undefined, string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined, unknown>;
     messages: import("@langchain/langgraph").BaseChannel<string[], string[] | import("@langchain/langgraph").OverwriteValue<string[]>, unknown>;
     validationRetries: import("@langchain/langgraph").BaseChannel<number, number | import("@langchain/langgraph").OverwriteValue<number>, unknown>;
     lastValidationTarget: import("@langchain/langgraph").BaseChannel<string, string | import("@langchain/langgraph").OverwriteValue<string>, unknown>;
@@ -184,6 +187,7 @@ export declare function createFastFeatureAgentGraph(depsOrExecutor: FastFeatureA
     error: import("@langchain/langgraph").BaseChannel<string | null, string | import("@langchain/langgraph").OverwriteValue<string | null> | null, unknown>;
     approvalGates: import("@langchain/langgraph").BaseChannel<import("../../../../domain/index.js").ApprovalGates | undefined, import("../../../../domain/index.js").ApprovalGates | import("@langchain/langgraph").OverwriteValue<import("../../../../domain/index.js").ApprovalGates | undefined> | undefined, unknown>;
     model: import("@langchain/langgraph").BaseChannel<string | undefined, string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined, unknown>;
+    permissionMode: import("@langchain/langgraph").BaseChannel<string | undefined, string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined, unknown>;
     messages: import("@langchain/langgraph").BaseChannel<string[], string[] | import("@langchain/langgraph").OverwriteValue<string[]>, unknown>;
     validationRetries: import("@langchain/langgraph").BaseChannel<number, number | import("@langchain/langgraph").OverwriteValue<number>, unknown>;
     lastValidationTarget: import("@langchain/langgraph").BaseChannel<string, string | import("@langchain/langgraph").OverwriteValue<string>, unknown>;
@@ -238,6 +242,7 @@ export declare function createFastFeatureAgentGraph(depsOrExecutor: FastFeatureA
         error: import("@langchain/langgraph").BaseChannel<string | null, string | import("@langchain/langgraph").OverwriteValue<string | null> | null, unknown>;
         approvalGates: import("@langchain/langgraph").BaseChannel<import("../../../../domain/index.js").ApprovalGates | undefined, import("../../../../domain/index.js").ApprovalGates | import("@langchain/langgraph").OverwriteValue<import("../../../../domain/index.js").ApprovalGates | undefined> | undefined, unknown>;
         model: import("@langchain/langgraph").BaseChannel<string | undefined, string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined, unknown>;
+        permissionMode: import("@langchain/langgraph").BaseChannel<string | undefined, string | import("@langchain/langgraph").OverwriteValue<string | undefined> | undefined, unknown>;
         messages: import("@langchain/langgraph").BaseChannel<string[], string[] | import("@langchain/langgraph").OverwriteValue<string[]>, unknown>;
         validationRetries: import("@langchain/langgraph").BaseChannel<number, number | import("@langchain/langgraph").OverwriteValue<number>, unknown>;
         lastValidationTarget: import("@langchain/langgraph").BaseChannel<string, string | import("@langchain/langgraph").OverwriteValue<string>, unknown>;

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/fast-feature-agent-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fast-feature-agent-graph.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/fast-feature-agent-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AAGpG,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGlF,OAAO,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE5E;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;CACjD;AAkBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,cAAc,EAAE,yBAAyB,GAAG,cAAc,EAC1D,YAAY,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA6BnC"}
+{"version":3,"file":"fast-feature-agent-graph.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/fast-feature-agent-graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AAGpG,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAGlF,OAAO,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE5E;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;CACjD;AAkBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CACzC,cAAc,EAAE,yBAAyB,GAAG,cAAc,EAC1D,YAAY,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA6BnC"}