ai_co_discuss 0.3.5 → 0.3.6

package/docs/en/runner.md

@@ -67,7 +67,7 @@ Choose a provider and enter a key under **Smart Scheduling** (智能调度) when
 
 ## Permissions
 
-Project file access is set per member and is read-only by default. Agents can only run the `codiscuss` commands that read and write rooms. How strictly this is enforced depends on the tool: Codex uses its native sandbox, `agy` uses dedicated project permission rules, and permissions you have already granted in Claude Code still apply.
+Permissions are set per automatically started CLI member and default to read-only. The four levels are read-only, writable, automatic approval, and unrestricted; unsupported levels are disabled (`agy` does not support automatic approval in the background). Read-only pre-approves room-related `codiscuss` commands and answer drafts; writable allows project edits and commands. Automatic approval delegates decisions to the tool, while unrestricted skips permission prompts. Hover over a level for its exact scope. Codex uses its native sandbox, `agy` uses dedicated project rules, and existing Claude Code grants still apply. Manually started members keep their session's own permissions.
 
 ## Local Service
 

package/docs/runner.md

@@ -69,7 +69,7 @@ API 成员可以担任专家或主持人，只有房间读写工具，不访问
 
 ## 权限
 
-项目文件权限按成员设置，默认只读。AI 只能运行读写房间的 `codiscuss` 命令。限制强度取决于各软件：Codex 使用原生沙箱，agy 使用独立的项目权限规则，Claude Code 中你已有的授权仍然生效。
+项目权限按程序启动的 CLI 成员设置，默认只读；可选只读、可写、自动、全放开，软件不支持的档位灰显（agy 后台不支持自动）。只读档预先放行读写房间的 `codiscuss` 命令和答案草稿，可写档允许修改项目、运行命令；自动档由软件审核操作，全放开跳过权限确认。具体范围见档位的悬停说明。Codex 使用原生沙箱，agy 使用独立项目规则，Claude Code 中你已有的授权仍然生效；手动启动成员的权限沿用原会话设置。
 
 ## 常驻讨论服务
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai_co_discuss",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "bin": {
     "codiscuss": "runner/codiscuss.mjs"
   },

package/runner/discussion_adapters.mjs

@@ -256,7 +256,7 @@ function agy_project_grants(config, task, resources, user_home) {
     throw new Error('agy 草稿目录不能位于只读项目、运行目录、技能或 .gemini 配置目录中，未交付讨论任务');
   }
   const write_rule = directory => `write_file(${resolve(directory).replaceAll('\\', '/')})`;
-  // 全放开 also runs commands outside agy's sandbox and allows MCP tools; run data stays protected at every level.
+  // 全放开 also allows commands outside agy's sandbox and MCP tools; deny rules are still written, but bypass may override them.
   const full = config.project_access === 'full';
   return { allow: [agy_rule(), write_rule(task.draft_directory),
     ...(config.project_access === 'read' ? [] : [...projects.map(write_rule), 'command(*)']), ...(full ? ['unsandboxed_command(*)'] : []),
@@ -727,7 +727,10 @@ function cli_invocation(config, binding, task, user_home) {
   const project = config.session_id ? null : prepare_agy_project(config, binding, task, user_home);
   const args = ['--output-format', 'stream-json', '--print-timeout', '0', '--add-dir', task.directory,
     '--add-dir', task.draft_directory, '--add-dir', task.skills_directory];
-  args.push('--mode', 'accept-edits', ...(project ? ['--project', project.project_id] : []));
+  // Headless agy refuses `--mode auto` ("not available for this account", 1.4.10–1.4.11) though its interactive window
+  // offers it; 全放开 uses the flag its own denial message suggests on top of the open project grants.
+  args.push('--mode', 'accept-edits', ...(config.project_access === 'full' ? ['--dangerously-skip-permissions'] : []),
+    ...(project ? ['--project', project.project_id] : []));
   if (binding.session_id) args.push('--conversation', binding.session_id);
   if (config.model) args.push('--model', config.model);
   if (config.effort) args.push('--effort', config.effort);

package/runner/discussion_launch.mjs

@@ -3,7 +3,7 @@ import { spawn } from 'node:child_process';
 import { createHash, randomUUID } from 'node:crypto';
 import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, statSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { dirname, isAbsolute, join, posix, resolve, win32 } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
 import { setTimeout as sleep } from 'node:timers/promises';
 import { pathToFileURL } from 'node:url';
@@ -210,7 +210,9 @@ export function pick_directory({ platform = process.platform, spawn_process = sp
     child.once('error', () => reject(new Error('无法打开目录选择窗口，请直接输入完整路径')));
     child.once('close', code => {
       const path = output.trim();
-      resolve_result(code === 0 && isAbsolute(path) ? { path } : { cancelled: true });
+      // Judge the path by the picker's platform, not the host's: a Windows path is not absolute on POSIX.
+      const absolute = platform === 'win32' ? win32.isAbsolute(path) : posix.isAbsolute(path);
+      resolve_result(code === 0 && absolute ? { path } : { cancelled: true });
     });
   });
 }

package/runner/expert_prompts.mjs

@@ -58,17 +58,23 @@ const ACCESS_HINTS = {
   codex_cli: { read: '只读沙箱', write: '项目可写的沙箱，命令在沙箱内运行、可联网',
     auto: '沙箱外的操作由模型申请提权，Codex 自动审核代替人工批准', full: '无沙箱、无审批（--dangerously-bypass-approvals-and-sandbox）' },
   antigravity_cli: { read: '只放行网站命令；碰到未放行的命令会直接结束本轮', write: '可写项目，命令全部放行（在 agy 沙箱内）',
-    full: '再放开沙箱外命令与 MCP 工具' },
+    full: '跳过全部权限确认（--dangerously-skip-permissions），并放开沙箱外命令与 MCP 工具' },
 };
 
-/** agy has no automatic mode headless ("not available for this account", tested 1.4.10), so it offers no 自动. */
+/** agy offers 自动 only in its interactive window; headless `--mode auto` is "not available for this account" (1.4.10–1.4.11). */
 export function access_levels(adapter) {
   return adapter === 'antigravity_cli' ? PROJECT_ACCESS.filter(level => level !== 'auto') : PROJECT_ACCESS;
 }
 
-/** The levels a software supports, labelled for the page, with what each does there on hover. */
+// Why a level a software lacks is shown but disabled, so every CLI card lines up the same four levels.
+const UNSUPPORTED_HINTS = { antigravity_cli: { auto: 'agy 只在交互窗口提供自动模式，后台运行（-p）不支持' } };
+
+/** All four levels labelled for the page, with what each does in this software on hover; ones it lacks are disabled. */
 export function access_options(adapter) {
-  return access_levels(adapter).map(value => ({ value, label: ACCESS_LABELS[value], hint: ACCESS_HINTS[adapter]?.[value] || '' }));
+  const levels = access_levels(adapter);
+  return PROJECT_ACCESS.map(value => levels.includes(value)
+    ? { value, label: ACCESS_LABELS[value], hint: ACCESS_HINTS[adapter]?.[value] || '' }
+    : { value, label: ACCESS_LABELS[value], hint: UNSUPPORTED_HINTS[adapter]?.[value] || '该软件不支持此档位', disabled: true });
 }
 
 /** The page's name for a level; `own` reads as decided by the member's own session. */

package/web/app.js

@@ -2458,12 +2458,11 @@ function launch_access(name) {
 /** Classic select options; an empty value inherits the launch-wide setting. */
 const ACCESS_LABELS = { read: "只读", write: "可写", auto: "自动", full: "完全放开" };
 
-// Mirrors access_options in runner/expert_prompts.mjs; agy has no headless 自动, and the shared setting stays 只读 / 可写.
+// Mirrors access_options in runner/expert_prompts.mjs; agy shows 自动 disabled (no headless auto), and the shared setting stays 只读 / 可写.
 function access_options(value = "", inherit = "", adapter = "") {
-  const levels = !inherit ? [["read", "只读"], ["write", "可写"]]
-    : [["read", "只读"], ["write", "可写"], ...(adapter === "antigravity_cli" ? [] : [["auto", "自动"]]), ["full", "完全放开"]];
+  const levels = !inherit ? [["read", "只读"], ["write", "可写"]] : [["read", "只读"], ["write", "可写"], ["auto", "自动"], ["full", "全放开"]];
   const options = [...(inherit ? [["", inherit]] : []), ...levels];
-  return options.map(([key, label]) => `<option value="${key}" ${(value || (inherit ? "" : "read")) === key ? "selected" : ""}>${label}</option>`).join("");
+  return options.map(([key, label]) => `<option value="${key}" ${(value || (inherit ? "" : "read")) === key ? "selected" : ""}${key === "auto" && adapter === "antigravity_cli" ? " disabled" : ""}>${label}</option>`).join("");
 }
 
 /** Refresh classic readbacks without replacing the input currently being edited. */