@threadbase-sh/streamer 1.49.0 → 1.51.0

package/dist/cli.cjs

@@ -1490,6 +1490,10 @@ function isPermissionMode(value) {
 function isDangerousPermissionMode(mode) {
   return DANGEROUS_PERMISSION_MODES.includes(mode);
 }
+function effectivePermissionMode(flags, fallback) {
+  const candidate = flags?.permissionMode ?? fallback;
+  return isPermissionMode(candidate) ? candidate : void 0;
+}
 function isEffortLevel(value) {
   return typeof value === "string" && EFFORT_LEVELS.includes(value);
 }
@@ -6223,6 +6227,12 @@ var init_feature_flags = __esm({
         default: true,
         env: "THREADBASE_FEATURE_SESSION_REHYDRATION"
       },
+      {
+        id: "liveActivityPush",
+        description: "Drive iOS Live Activity surfaces for running sessions. Off by default: the streamer half needs an APNs p8 and a registered push-to-start token, and without both, mobile falls back to starting the activity locally \u2014 which freezes the moment the app backgrounds and expires silently after ~8h. Mobile reads this flag and skips its local path too, so one switch turns the whole surface off.",
+        default: false,
+        env: "THREADBASE_FEATURE_LIVE_ACTIVITY_PUSH"
+      },
       {
         id: "ptyHost",
         description: "Keep live PTYs in a separate host process so a streamer restart can reconnect without restarting the agents. Off by default until cross-platform behavior is qualified.",
@@ -149553,6 +149563,13 @@ var StreamerServer = class {
    * on disk; neither it nor any device token is ever logged.
    */
   initLiveActivityPush(pushRepo) {
+    if (!this.featureFlags.liveActivityPush) {
+      this.log.info(
+        "Live Activity push is disabled by the liveActivityPush feature flag. Enable it with THREADBASE_FEATURE_LIVE_ACTIVITY_PUSH=1, --feature liveActivityPush=true, or feature_flags: in server.yaml.",
+        { event: "live_activity.disabled" }
+      );
+      return;
+    }
     const creds = readApnsCredentialsFromEnv();
     if (!creds) {
       const why = describeMissingApnsCredentials();
@@ -157474,6 +157491,17 @@ program2.command("serve").description("Start the streamer server").option("-p, -
       takeoverProd2({ port: plan.port, repoToplevel });
     }
   }
+  const spawnMode = effectivePermissionMode(
+    claudeFlags,
+    resolvedDefaultPermissionMode ?? loadDefaultPermissionMode()
+  );
+  if (spawnMode !== void 0 && isDangerousPermissionMode(spawnMode)) {
+    log14.warn(
+      `[WARN] permission mode is ${spawnMode} \u2014 spawned sessions run without confirmation prompts, so anyone holding the API key can execute arbitrary code on this machine. There is no spend limit.`,
+      void 0,
+      "console"
+    );
+  }
   const server = new StreamerServer({
     port: resolvedPort,
     apiKey,