@wrongstack/cli 1.0.4 → 1.0.7

package/dist/{cli-context-WFC3BNGM.js → cli-context-TIAP6YQK.js}

@@ -5,7 +5,7 @@ import {
   makePromptDelegate,
   renderAgentsTemplate,
   renderDiff
-} from "./chunk-VFCJOWJB.js";
+} from "./chunk-RMQNCHGO.js";
 import {
   theme as theme2
 } from "./chunk-QD544J2B.js";
@@ -19,24 +19,24 @@ import {
 } from "./chunk-GPPRNAKW.js";
 import {
   subcommands
-} from "./chunk-BIWE22O5.js";
+} from "./chunk-RLCKKLJA.js";
 import {
   renderDeepHelp,
   renderFocusedHelp
 } from "./chunk-JX6KL7OF.js";
 import {
   handleHelpVersionShortCircuit
-} from "./chunk-U6PGWDMZ.js";
+} from "./chunk-4OLAZIIN.js";
 import {
   DEFAULT_PORT
-} from "./chunk-3I5ZJXM5.js";
+} from "./chunk-XIZZ2EXG.js";
 import "./chunk-HXJYHAR4.js";
 import {
   resolveHqPasswordInput
 } from "./chunk-AUQDGU5D.js";
 import {
   normalizeHqPublicOrigin
-} from "./chunk-I7V2OYVH.js";
+} from "./chunk-5EA6OTLJ.js";
 import {
   parseHqIpAllowlist
 } from "./chunk-Q7E3BPDU.js";
@@ -47,7 +47,7 @@ import {
   applyNodeEnvDefault,
   applySessionShellDefault,
   runPreflight
-} from "./chunk-O4A3HHKD.js";
+} from "./chunk-672UXYL3.js";
 import "./chunk-6WRKAACA.js";
 import {
   CLI_VERSION
@@ -63,13 +63,13 @@ import {
   runPicker,
   saveToGlobalConfig,
   theme
-} from "./chunk-ONOT5OJ2.js";
+} from "./chunk-FSZ5QU3M.js";
 import "./chunk-2VMJ3E5Z.js";
 import "./chunk-B4JLSXZB.js";
 import {
   isKeylessLocalProvider,
   visibleModelIds
-} from "./chunk-VUVOMXWP.js";
+} from "./chunk-3VXYY5JC.js";
 import {
   activeProfileConfigPath
 } from "./chunk-YMXXOOFN.js";
@@ -125,11 +125,64 @@ function resolveBundledSkillsDir() {
   }
 }
 
+// src/permission-prompt-mirror.ts
+import { randomUUID } from "node:crypto";
+import { describeWriteTargets } from "@wrongstack/core/security";
+var REPL_MIRROR_TTL_MS = 6e4;
+var REPL_MIRROR_HEARTBEAT_MS = 2e4;
+function makeMirroredPromptDelegate(deps) {
+  const now = deps.now ?? Date.now;
+  return async (tool, input, suggestedPattern) => {
+    const registry = deps.getRegistry();
+    const controller = new AbortController();
+    if (registry === void 0) {
+      return deps.inner(tool, input, suggestedPattern, controller.signal);
+    }
+    const toolUseId = `repl:${randomUUID()}`;
+    let settled = false;
+    let remoteDecision;
+    const finish = registry.register({
+      toolUseId,
+      toolName: tool.name,
+      sessionId: deps.getSessionId?.(),
+      deadlineAt: now() + REPL_MIRROR_TTL_MS,
+      input,
+      suggestedPattern,
+      ...tool.riskTier ? { riskTier: tool.riskTier } : {},
+      decisionSource: "default",
+      writeTargets: describeWriteTargets(tool, input),
+      destructive: tool.riskTier === "destructive",
+      resolve: (decision) => {
+        if (settled) return;
+        settled = true;
+        remoteDecision = decision;
+        controller.abort();
+      }
+    });
+    const heartbeat = setInterval(() => {
+      registry.renew(toolUseId, now() + REPL_MIRROR_TTL_MS);
+    }, REPL_MIRROR_HEARTBEAT_MS);
+    heartbeat.unref?.();
+    try {
+      const typed = await deps.inner(tool, input, suggestedPattern, controller.signal);
+      if (remoteDecision !== void 0) return remoteDecision;
+      settled = true;
+      const decision = typed === "yes" || typed === "always" || typed === "deny" ? typed : "no";
+      finish(decision);
+      return decision;
+    } finally {
+      clearInterval(heartbeat);
+      finish("no");
+    }
+  };
+}
+
 // src/boot/container-wiring.ts
 function wireContainer(deps) {
   const pathResolver = new DefaultPathResolver(deps.cwd);
   const events = new CoreEventBus();
   events.setLogger(deps.logger);
+  const approvalMirror = { current: void 0 };
   const container = createDefaultContainer({
     config: deps.config,
     wpaths: deps.wpaths,
@@ -138,7 +191,15 @@ function wireContainer(deps) {
     events,
     permission: {
       yolo: deps.config.yolo,
-      promptDelegate: makePromptDelegate(deps.reader)
+      // Wrapped so the REPL's terminal prompt also appears on the HQ
+      // dashboard and can be answered from there. The wrapper is a no-op
+      // until `approvalMirror.current` is populated (HQ telemetry boot), and
+      // the terminal prompt itself behaves exactly as it always has.
+      promptDelegate: makeMirroredPromptDelegate({
+        inner: makePromptDelegate(deps.reader),
+        getRegistry: () => approvalMirror.current,
+        getSessionId: () => approvalMirror.sessionId?.()
+      })
     },
     compactor: {
       preserveK: deps.config.context.preserveK,
@@ -150,7 +211,7 @@ function wireContainer(deps) {
   container.bind(TOKENS.PathResolver, () => pathResolver);
   container.bind(TOKENS.Renderer, () => deps.renderer);
   container.bind(TOKENS.InputReader, () => deps.reader);
-  return { pathResolver, events, container };
+  return { pathResolver, events, container, approvalMirror };
 }
 
 // src/boot/launch-menu.ts
@@ -714,6 +775,10 @@ function stripDesktopLauncherArgs(argv) {
   }
   return out;
 }
+function selectDesktopLauncherExecutable(execPath, runningUnderBun, nodeOverride) {
+  if (!runningUnderBun) return execPath;
+  return nodeOverride?.trim() || "node";
+}
 async function handleDesktopShortCircuit(flags, argv) {
   if (flags["desktop"] !== true) return null;
   return launchDesktop(stripDesktopLauncherArgs(argv));
@@ -740,7 +805,12 @@ async function launchDesktop(args) {
     return 1;
   }
   return await new Promise((resolve2) => {
-    const child = spawn(process.execPath, [launcherPath, ...args], {
+    const executable = selectDesktopLauncherExecutable(
+      process.execPath,
+      typeof globalThis.Bun !== "undefined",
+      process.env["NODE"]
+    );
+    const child = spawn(executable, [launcherPath, ...args], {
       stdio: "inherit",
       env: process.env,
       windowsHide: false
@@ -796,7 +866,7 @@ async function isPortInUse(host, port) {
 }
 async function handleHqShortCircuit(flags) {
   if (flags["hq"] !== true) return null;
-  const { startHqServer } = await import("./hq-server-CNUTBWTK.js");
+  const { startHqServer } = await import("./hq-server-G3VVVMIG.js");
   const tunnelRequested = flags["tunnel"] === true;
   const rawPublicUrl = typeof flags["hq-public-url"] === "string" ? flags["hq-public-url"] : process.env.WRONGSTACK_HQ_PUBLIC_URL;
   let publicOrigin;
@@ -1818,8 +1888,10 @@ var ReadlineInputReader = class {
       }
     });
   }
-  async readKey(prompt, options) {
+  async readKey(prompt, options, opts = {}) {
     setOutputLineGuard(null);
+    const signal = opts.signal;
+    if (signal?.aborted) return "";
     writeOut(prompt);
     return new Promise((resolve2) => {
       const stdin = process.stdin;
@@ -1849,14 +1921,21 @@ var ReadlineInputReader = class {
         cleanup();
         resolve2("");
       };
+      const onAbort = () => {
+        cleanup();
+        writeOut("\n");
+        resolve2("");
+      };
       const cleanup = () => {
         stdin.off("data", onData);
         stdin.off("close", onClose);
+        signal?.removeEventListener("abort", onAbort);
         setRawMode2(stdin, wasRaw);
         if (wasPaused) stdin.pause();
       };
       stdin.on("data", onData);
       stdin.on("close", onClose);
+      signal?.addEventListener("abort", onAbort, { once: true });
     });
   }
   /**
@@ -3201,7 +3280,7 @@ async function initializeCli(argv) {
     }).catch(() => {
     });
   });
-  const { events, container } = wireContainer({
+  const { events, container, approvalMirror } = wireContainer({
     config,
     wpaths,
     cwd,
@@ -3216,6 +3295,7 @@ async function initializeCli(argv) {
     updateInfo: refreshedUpdateInfo,
     events,
     container,
+    approvalMirror,
     configStore,
     webuiSessionChild
   };
@@ -3223,4 +3303,4 @@ async function initializeCli(argv) {
 export {
   initializeCli
 };
-//# sourceMappingURL=cli-context-WFC3BNGM.js.map
+//# sourceMappingURL=cli-context-TIAP6YQK.js.map

package/dist/cli-context.d.ts

@@ -22,6 +22,8 @@ import type { BootContext } from './boot.js';
 export interface CliContext extends BootContext {
     events: EventBus;
     container: ReturnType<typeof wireContainer>['container'];
+    /** Late-bound handle the REPL prompt uses to mirror approvals to HQ. */
+    approvalMirror: ReturnType<typeof wireContainer>['approvalMirror'];
     configStore: ConfigStore;
     webuiSessionChild?: WebuiSessionChildOptions | undefined;
 }