@ycodium-ai/agent-claude 0.2.3106 → 0.2.3112

package/dist/index.js

@@ -22770,6 +22770,39 @@ function assertSteeringTarget(expectedTurnId, turnState) {
   throw rejected;
 }
 
+// src/hostMcpAllowRules.ts
+function claudeHostMcpAllowRules(servers) {
+  return (servers ?? []).filter((server) => server.hostOwned === true).map((server) => `mcp__${server.name}`);
+}
+function claudePermissionAllow(rules, mode) {
+  return mode === "auto" ? [...rules.read, ...rules.hostMcp] : rules.read;
+}
+
+// src/adapter/permissionMode.ts
+var sameRules = (a, b3) => a.join("\n") === b3.join("\n");
+var permissionAllowInSync = (context) => sameRules(
+  claudePermissionAllow(context.permissionRules, context.currentPermissionMode),
+  context.currentPermissionAllow
+);
+async function applyClaudePermissionMode(context, mode, failAs) {
+  try {
+    await context.query.setPermissionMode(mode);
+  } catch (cause) {
+    throw toRequestError(failAs.threadId, failAs.method, cause);
+  }
+  context.currentPermissionMode = mode;
+  const allow = claudePermissionAllow(context.permissionRules, mode);
+  if (sameRules(allow, context.currentPermissionAllow)) return;
+  try {
+    await context.query.applyFlagSettings({
+      permissions: allow.length > 0 ? { allow: [...allow] } : null
+    });
+  } catch (cause) {
+    throw toRequestError(failAs.threadId, "session/applyFlagSettings", cause);
+  }
+  context.currentPermissionAllow = allow;
+}
+
 // src/adapter/sendTurn.ts
 var makeSendTurn = (deps) => {
   const {
@@ -22824,19 +22857,15 @@ var makeSendTurn = (deps) => {
       context.currentEffort = getEffectiveClaudeAgentEffort(turnEffort ?? null) ?? void 0;
     }
     if (input.interactionMode === "plan") {
-      try {
-        await context.query.setPermissionMode("plan");
-      } catch (cause) {
-        throw toRequestError(input.threadId, "turn/setPermissionMode", cause);
-      }
-      context.currentPermissionMode = "plan";
+      await applyClaudePermissionMode(context, "plan", {
+        threadId: input.threadId,
+        method: "turn/setPermissionMode"
+      });
     } else if (input.interactionMode === "default") {
-      try {
-        await context.query.setPermissionMode(context.basePermissionMode ?? "default");
-      } catch (cause) {
-        throw toRequestError(input.threadId, "turn/setPermissionMode", cause);
-      }
-      context.currentPermissionMode = context.basePermissionMode;
+      await applyClaudePermissionMode(context, context.basePermissionMode ?? "default", {
+        threadId: input.threadId,
+        method: "turn/setPermissionMode"
+      });
     }
     const turnCapsForPrompt = claudeModelCapabilities(
       modelSelection?.model,
@@ -23377,7 +23406,7 @@ var makeSessionControls = (deps) => {
   };
   const setRuntimeMode = async (threadId, runtimeMode) => {
     const context = requireSession(threadId);
-    if (context.session.runtimeMode === runtimeMode) {
+    if (context.session.runtimeMode === runtimeMode && permissionAllowInSync(context)) {
       return;
     }
     const permissionMode = claudePermissionModeFor(runtimeMode);
@@ -23389,12 +23418,10 @@ var makeSessionControls = (deps) => {
       updatedAt: nowIso()
     };
     if (context.currentPermissionMode !== "plan") {
-      try {
-        await context.query.setPermissionMode(permissionMode);
-      } catch (cause) {
-        throw toRequestError(threadId, "session/setPermissionMode", cause);
-      }
-      context.currentPermissionMode = permissionMode;
+      await applyClaudePermissionMode(context, permissionMode, {
+        threadId,
+        method: "session/setPermissionMode"
+      });
     }
     if (permissionMode !== "bypassPermissions") {
       return;
@@ -23407,7 +23434,7 @@ var makeSessionControls = (deps) => {
   const setNativeMode = async (threadId, nativeModeId) => {
     const context = requireSession(threadId);
     if (!isClaudeNativeModeId(nativeModeId)) return;
-    if (context.currentPermissionMode === nativeModeId) return;
+    if (context.currentPermissionMode === nativeModeId && permissionAllowInSync(context)) return;
     context.basePermissionMode = nativeModeId;
     context.session = {
       ...context.session,
@@ -23415,12 +23442,10 @@ var makeSessionControls = (deps) => {
       updatedAt: nowIso()
     };
     if (context.currentPermissionMode !== "plan" || nativeModeId === "plan") {
-      try {
-        await context.query.setPermissionMode(nativeModeId);
-      } catch (cause) {
-        throw toRequestError(threadId, "session/setPermissionMode", cause);
-      }
-      context.currentPermissionMode = nativeModeId;
+      await applyClaudePermissionMode(context, nativeModeId, {
+        threadId,
+        method: "session/setPermissionMode"
+      });
     }
     if (nativeModeId !== "bypassPermissions") {
       return;
@@ -23956,9 +23981,13 @@ var makeStartSession = (deps) => {
     const additionalDirectories = input.cwd ? [input.cwd] : [];
     const mcpServers = toClaudeMcpServers(input.mcpServers);
     const querySettings = { ...settings };
-    const readAllowRules = claudeReadAllowRules(input.readOnlyDirectories);
-    if (readAllowRules.length > 0) {
-      querySettings.permissions = { allow: [...readAllowRules] };
+    const permissionRules = {
+      read: claudeReadAllowRules(input.readOnlyDirectories),
+      hostMcp: claudeHostMcpAllowRules(input.mcpServers)
+    };
+    const permissionAllow = claudePermissionAllow(permissionRules, permissionMode);
+    if (permissionAllow.length > 0) {
+      querySettings.permissions = { allow: [...permissionAllow] };
     }
     const stderrTail = createOutputTail(CLAUDE_STDERR_TAIL_CHARS);
     const mcpConfig = await createClaudeMcpConfig(mcpServers, log);
@@ -24055,6 +24084,8 @@ var makeStartSession = (deps) => {
       sessionSkills: input.skills,
       spawnEnvironment,
       currentSettings: settings,
+      permissionRules,
+      currentPermissionAllow: permissionAllow,
       interruptSettled: void 0,
       resumeSessionId: sessionId,
       pendingApprovals,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ycodium-ai/agent-claude",
-  "version": "0.2.3106",
+  "version": "0.2.3112",
   "description": "Claude executor: Claude Code CLI via @anthropic-ai/claude-agent-sdk.",
   "keywords": [
     "ycodium",
@@ -24,7 +24,7 @@
     "@types/node": "24.12.4",
     "esbuild": "0.28.1",
     "vite-plus": "0.2.2",
-    "@ycodium-ai/plugin-api": "0.2.0",
+    "@ycodium-ai/plugin-api": "0.2.3112",
     "ycodium-composer-tokens": "0.0.0",
     "ycodium-jsonl-stream": "0.0.0",
     "ycodium-executor-testing": "0.0.0"