@stage-labs/metro 0.1.0-beta.109 → 0.1.0-beta.110

package/dist/claude.js

@@ -1,18 +1,19 @@
 import { spawn, spawnSync } from 'node:child_process';
 import { markOnboardingDone, seedChannels } from './onboarding.js';
 import { writeMcpConfig } from './mcp-config.js';
-import { currentRoute, routeModelEnv } from './route.js';
+import { currentRoute, permissionMode, routeModelEnv } from './route.js';
 import { settingsConflicts, settingsFiles } from './claude-settings.js';
 import { localAgents, pickLocalAgent } from './local.js';
 import { PROVIDER_FLAGS } from './provider-flags.js';
 import { localPort, localUrl } from './runtime.js';
 const CHANNEL_FLAGS = ['--dangerously-load-development-channels', 'server:metro'];
-const PERMISSION_FLAGS = ['--permission-mode', 'auto'];
+const PERMISSION_MODE_FLAG = { auto: 'auto', bypass: 'bypassPermissions' };
 const KEY_HEADER = 'x-metro-key';
 const PROBE_MS = 3_000;
-export const claudeArgs = (extra, mcpConfig) => [
+export const claudeArgs = (extra, mcpConfig, mode = 'auto') => [
     ...CHANNEL_FLAGS,
-    ...PERMISSION_FLAGS,
+    '--permission-mode',
+    PERMISSION_MODE_FLAG[mode],
     ...(mcpConfig === undefined ? [] : ['--mcp-config', mcpConfig]),
     ...extra,
 ];
@@ -150,12 +151,13 @@ export async function launchClaude(extra) {
     const decision = await verdict();
     const port = localPort();
     const mcp = mcpConfigFor(await servedKey(decision), port);
+    const mode = permissionMode();
     try {
         if ('skip' in decision) {
             process.stderr.write(`metro claude: ${decision.skip}\n`);
-            return await runClaude(claudeArgs(extra, mcp?.path), process.env);
+            return await runClaude(claudeArgs(extra, mcp?.path, mode), process.env);
         }
-        return await runClaude(claudeArgs(extra, mcp?.path), gatewayLaunchEnv(decision.key, port));
+        return await runClaude(claudeArgs(extra, mcp?.path, mode), gatewayLaunchEnv(decision.key, port));
     }
     finally {
         mcp?.cleanup();

package/dist/route.js

@@ -24,3 +24,15 @@ export function routeModelEnv(env, route) {
         return env;
     return { ...env, ANTHROPIC_MODEL: route };
 }
+export function permissionMode(dir = agentsDir()) {
+    const path = join(dir, 'claude-setup.json');
+    if (!existsSync(path))
+        return 'auto';
+    try {
+        const state = JSON.parse(readFileSync(path, 'utf8'));
+        return state.permissionMode === 'bypass' ? 'bypass' : 'auto';
+    }
+    catch {
+        return 'auto';
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.109",
+  "version": "0.1.0-beta.110",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.109",
+  "version": "0.1.0-beta.110",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, the standing rules loaded at each session start, and a refresh skill for when the daemon could not keep the server list current. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/claude/api.ts

@@ -21,9 +21,10 @@ import {
   startClaudeLogin,
   type LoginDeps,
 } from './login.js';
-import { claudeSetupStatus, ensureClaudeSetup, setPrivacy, type SetupDeps } from './setup.js';
+import { claudeSetupStatus, ensureClaudeSetup, isPermissionMode, permissionMode, setPermissionMode, setPrivacy, type PermissionMode, type SetupDeps } from './setup.js';
 import {
   ensureSession,
+  sessionRunning,
   sessionStatus,
   setAutostart,
   startSession,
@@ -115,15 +116,35 @@ const LOGIN = 'login';
 const SESSION = 'session';
 const SETUP = 'setup';
 
+interface SetupChange {
+  privacy?: boolean;
+  permissionMode?: PermissionMode;
+}
+
+function setupChange(body: unknown): SetupChange {
+  if (!isRecord(body)) throw new ApiError('a body is required', 400);
+  if (body.privacy !== undefined && typeof body.privacy !== 'boolean') throw new ApiError('privacy must be true or false', 400);
+  if (body.permissionMode !== undefined && !isPermissionMode(body.permissionMode)) throw new ApiError('permissionMode must be auto or bypass', 400);
+  if (body.privacy === undefined && body.permissionMode === undefined) throw new ApiError('nothing to change', 400);
+  return { ...(typeof body.privacy === 'boolean' ? { privacy: body.privacy } : {}), ...(isPermissionMode(body.permissionMode) ? { permissionMode: body.permissionMode } : {}) };
+}
+
+function applySetupChange(change: SetupChange, deps: ClaudeApiDeps): void {
+  const setup = deps.setup ?? {};
+  if (change.privacy !== undefined) setPrivacy(change.privacy, setup.agents);
+  if (change.permissionMode !== undefined && change.permissionMode !== permissionMode(setup.agents)) {
+    setPermissionMode(change.permissionMode, setup.agents);
+    if (sessionRunning(deps.session?.tmux ?? 'tmux')) stopSession(deps.session ?? {});
+  }
+  ensureClaudeSetup(setup);
+}
+
 async function setupAnswer(req: IncomingMessage, deps: ClaudeApiDeps): Promise<unknown> {
   const setup = deps.setup ?? {};
   const method = req.method ?? 'GET';
   if (method === 'GET') return claudeSetupStatus(setup);
   if (method !== 'POST') throw new ApiError('method not allowed', 405);
-  const body = await readJsonBody(req);
-  if (!isRecord(body) || typeof body.privacy !== 'boolean') throw new ApiError('privacy must be true or false', 400);
-  setPrivacy(body.privacy, setup.agents);
-  ensureClaudeSetup(setup);
+  applySetupChange(setupChange(await readJsonBody(req)), deps);
   return claudeSetupStatus(setup);
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/claude/setup.ts

@@ -55,6 +55,7 @@ export interface SetupReport {
 
 export interface SetupStatus {
   privacy: boolean;
+  permissionMode: PermissionMode;
   guard: 'plugin';
   worker: boolean;
   skill: boolean;
@@ -64,13 +65,34 @@ export interface SetupStatus {
 
 const statePath = (agents: string): string => join(agents, STATE_FILE);
 
-export function privacyEnabled(agents = agentsDir()): boolean {
+export const PERMISSION_MODES = ['auto', 'bypass'] as const;
+export type PermissionMode = (typeof PERMISSION_MODES)[number];
+
+function readState(agents: string): Record<string, unknown> {
   const raw = readJson<unknown>(statePath(agents), null);
-  return !isRecord(raw) || raw.privacy !== false;
+  return isRecord(raw) ? raw : {};
 }
 
+function writeState(agents: string, patch: Record<string, unknown>): void {
+  mkdirSync(agents, { recursive: true });
+  writeJson(statePath(agents), { ...readState(agents), ...patch });
+}
+
+export const privacyEnabled = (agents = agentsDir()): boolean => readState(agents).privacy !== false;
+
 export function setPrivacy(enabled: boolean, agents = agentsDir()): void {
-  writeJson(statePath(agents), { privacy: enabled });
+  writeState(agents, { privacy: enabled });
+}
+
+export const isPermissionMode = (value: unknown): value is PermissionMode => PERMISSION_MODES.some((m) => m === value);
+
+export function permissionMode(agents = agentsDir()): PermissionMode {
+  const mode = readState(agents).permissionMode;
+  return isPermissionMode(mode) ? mode : 'auto';
+}
+
+export function setPermissionMode(mode: PermissionMode, agents = agentsDir()): void {
+  writeState(agents, { permissionMode: mode });
 }
 
 export function guidancePath(env: NodeJS.ProcessEnv = process.env): string {
@@ -155,6 +177,7 @@ export function claudeSetupStatus(deps: SetupDeps = {}): SetupStatus {
   const days = settings?.cleanupPeriodDays;
   return {
     privacy: privacyEnabled(deps.agents ?? agentsDir()),
+    permissionMode: permissionMode(deps.agents ?? agentsDir()),
     guard: 'plugin',
     worker: existsSync(workerPath(dir)),
     skill: existsSync(skillPath(dir)),

package/runtime/node_modules/@metro-labs/daemon/src/terminal/api.ts

@@ -8,6 +8,8 @@ import { mintTerminalTicket } from './tickets.js';
 
 const PREFIX = '/api/terminal';
 const TICKETS = `${PREFIX}/tickets`;
+const BUFFER = `${PREFIX}/buffer`;
+const BUFFER_MAX = 1024 * 1024;
 const SESSION_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,31}$/;
 
 export const tmuxCommand = (session: string, home = homedir()): string[] => [
@@ -37,6 +39,7 @@ export const tmuxCommand = (session: string, home = homedir()): string[] => [
 ];
 
 export interface TerminalApiDeps {
+  tmux?: string;
   authorize: (subject: string) => void;
   command?: (session: string) => string[];
 }
@@ -64,9 +67,15 @@ export function sessionOf(raw: unknown): string {
   return raw;
 }
 
+export function tmuxBuffer(tmux = 'tmux'): string {
+  const run = spawnSync(tmux, ['save-buffer', '-'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: BUFFER_MAX });
+  if (run.error !== undefined || run.status !== 0) throw new ApiError('tmux holds nothing copied yet: select text in the terminal first', 404);
+  return run.stdout;
+}
+
 export function handleTerminalRequest(req: IncomingMessage, res: ServerResponse, deps: TerminalApiDeps): boolean {
   const path = (req.url ?? '').split('?')[0] ?? '';
-  if (path !== PREFIX && path !== TICKETS) return false;
+  if (path !== PREFIX && path !== TICKETS && path !== BUFFER) return false;
   if (req.method === 'OPTIONS') {
     res.writeHead(204, cors(req)).end();
     return true;
@@ -84,6 +93,10 @@ export function handleTerminalRequest(req: IncomingMessage, res: ServerResponse,
         sendJson(req, res, 200, { available: tmuxAvailable(deps), sessions: tmuxSessions() });
         return;
       }
+      if (path === BUFFER) {
+        sendJson(req, res, 200, { text: tmuxBuffer(deps.tmux) });
+        return;
+      }
       const wanted = sessionOf(bodyField(await readJsonBody(req), 'session'));
       const minted = mintTerminalTicket(session.subject, wanted);
       log.info({ subject: session.subject, session: wanted }, 'terminal: ticket minted');

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.109"
+  "version": "0.1.0-beta.110"
 }