@ycodium-ai/agent-claude 0.2.3108 → 0.2.3114

package/dist/index.js

@@ -22771,27 +22771,47 @@ function assertSteeringTarget(expectedTurnId, turnState) {
 }
 
 // src/hostMcpAllowRules.ts
+import { setsOwnModelConnection } from "@ycodium-ai/plugin-api/executor";
 function claudeHostMcpAllowRules(servers) {
   return (servers ?? []).filter((server) => server.hostOwned === true).map((server) => `mcp__${server.name}`);
 }
-function claudePermissionAllow(rules, mode) {
-  return mode === "auto" ? [...rules.read, ...rules.hostMcp] : rules.read;
+function claudeUsesOfficialChannel(env2) {
+  const connectivity = CLAUDE_CARD.modelConnectivity;
+  const rows = Object.entries(env2).map(([name, value]) => ({ name, value }));
+  if (setsOwnModelConnection({ backendSwitchEnvKeys: connectivity?.backendSwitchEnvKeys }, rows))
+    return false;
+  const key = connectivity?.baseUrlEnvKey;
+  const baseUrl = key === void 0 ? void 0 : env2[key]?.trim();
+  if (baseUrl === void 0 || baseUrl === "") return true;
+  try {
+    const host = new URL(baseUrl).hostname.toLowerCase();
+    return host === "anthropic.com" || host.endsWith(".anthropic.com");
+  } catch {
+    return false;
+  }
+}
+var ALLOWLIST_MODE_TOOLS = ["Read", "Edit", "Bash"];
+function claudeSdkPermission(rules, mode) {
+  if (mode !== "auto") return { mode, allow: rules.read };
+  if (rules.officialChannel) return { mode, allow: [...rules.read, ...rules.hostMcp] };
+  return { mode: "default", allow: [...rules.read, ...rules.hostMcp, ...ALLOWLIST_MODE_TOOLS] };
 }
 
 // src/adapter/permissionMode.ts
 var sameRules = (a, b3) => a.join("\n") === b3.join("\n");
 var permissionAllowInSync = (context) => sameRules(
-  claudePermissionAllow(context.permissionRules, context.currentPermissionMode),
+  claudeSdkPermission(context.permissionRules, context.currentPermissionMode ?? "default").allow,
   context.currentPermissionAllow
 );
 async function applyClaudePermissionMode(context, mode, failAs) {
+  const sdk = claudeSdkPermission(context.permissionRules, mode);
   try {
-    await context.query.setPermissionMode(mode);
+    await context.query.setPermissionMode(sdk.mode);
   } catch (cause) {
     throw toRequestError(failAs.threadId, failAs.method, cause);
   }
   context.currentPermissionMode = mode;
-  const allow = claudePermissionAllow(context.permissionRules, mode);
+  const allow = sdk.allow;
   if (sameRules(allow, context.currentPermissionAllow)) return;
   try {
     await context.query.applyFlagSettings({
@@ -23983,9 +24003,19 @@ var makeStartSession = (deps) => {
     const querySettings = { ...settings };
     const permissionRules = {
       read: claudeReadAllowRules(input.readOnlyDirectories),
-      hostMcp: claudeHostMcpAllowRules(input.mcpServers)
+      hostMcp: claudeHostMcpAllowRules(input.mcpServers),
+      officialChannel: claudeUsesOfficialChannel(spawnEnvironment.processEnv)
     };
-    const permissionAllow = claudePermissionAllow(permissionRules, permissionMode);
+    const sdkPermission = claudeSdkPermission(permissionRules, permissionMode);
+    const permissionAllow = sdkPermission.allow;
+    if (sdkPermission.mode !== permissionMode) {
+      log.warn("claude.permission.allowlistMode", {
+        threadId: input.threadId,
+        seatMode: permissionMode,
+        sdkMode: sdkPermission.mode,
+        reason: "model requests do not use the official channel; the auto-mode classifier is unavailable"
+      });
+    }
     if (permissionAllow.length > 0) {
       querySettings.permissions = { allow: [...permissionAllow] };
     }
@@ -24006,7 +24036,7 @@ var makeStartSession = (deps) => {
       ...effectiveEffort ? {
         effort: effectiveEffort
       } : {},
-      ...permissionMode ? { permissionMode } : {},
+      permissionMode: sdkPermission.mode,
       ...permissionMode === "bypassPermissions" ? { allowDangerouslySkipPermissions: true } : {},
       ...Object.keys(querySettings).length > 0 ? { settings: querySettings } : {},
       ...existingResumeSessionId ? { resume: existingResumeSessionId } : {},
@@ -27055,7 +27085,7 @@ import * as NodePath15 from "node:path";
 // src/usageRead/quota.ts
 import * as NodeFS4 from "node:fs";
 import * as NodePath12 from "node:path";
-import { mergeLaunchEnv as mergeLaunchEnv2, setsOwnModelConnection } from "@ycodium-ai/plugin-api/executor";
+import { mergeLaunchEnv as mergeLaunchEnv2, setsOwnModelConnection as setsOwnModelConnection2 } from "@ycodium-ai/plugin-api/executor";
 import {
   parseRetryAfterMs
 } from "@ycodium-ai/plugin-api/usage";
@@ -27151,8 +27181,8 @@ var readClaudeQuota = async (request) => {
     name,
     value
   }));
-  if (connectivity !== void 0 && setsOwnModelConnection(connectivity, environmentRows)) {
-    const changesEndpoint = setsOwnModelConnection(
+  if (connectivity !== void 0 && setsOwnModelConnection2(connectivity, environmentRows)) {
+    const changesEndpoint = setsOwnModelConnection2(
       {
         baseUrlEnvKey: connectivity.baseUrlEnvKey,
         backendSwitchEnvKeys: connectivity.backendSwitchEnvKeys

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ycodium-ai/agent-claude",
-  "version": "0.2.3108",
+  "version": "0.2.3114",
   "description": "Claude executor: Claude Code CLI via @anthropic-ai/claude-agent-sdk.",
   "keywords": [
     "ycodium",
@@ -24,7 +24,7 @@
     "@types/node": "24.12.4",
     "esbuild": "0.28.1",
     "vite-plus": "0.2.2",
-    "@ycodium-ai/plugin-api": "0.2.3108",
+    "@ycodium-ai/plugin-api": "0.2.3114",
     "ycodium-composer-tokens": "0.0.0",
     "ycodium-executor-testing": "0.0.0",
     "ycodium-jsonl-stream": "0.0.0"