auto-mode 2.0.2 → 3.0.1

package/dist/{start-judge-server-D-zcMyFZ.js → start-judge-server-BlhDO_4A.js}

@@ -1,5 +1,5 @@
 import { d as string, s as number, u as strictObject } from "./schemas-B_w83Dze.js";
-import { t as startJudgeSession } from "./start-judge-session-DX3Oek85.js";
+import { t as startJudgeSession } from "./start-judge-session-vxiG-kDp.js";
 import { randomBytes } from "node:crypto";
 import { chmod, mkdir, rename, rm, stat } from "node:fs/promises";
 import { dirname, join } from "node:path";
@@ -68,20 +68,6 @@ async function startJudgeServer(options) {
 		stop
 	};
 }
-async function removeOwnSocket(socketPath, ino, onRemoved) {
-	const current = await stat(socketPath).catch(() => null);
-	if (ino !== null && current?.ino === ino) await rm(socketPath, { force: true });
-	onRemoved();
-}
-function startListening(server, socketPath) {
-	return new Promise((resolve, reject) => {
-		server.once("error", reject);
-		server.listen(socketPath, () => {
-			server.off("error", reject);
-			resolve();
-		});
-	});
-}
 function isAnswering(socketPath) {
 	return new Promise((resolve) => {
 		const probe = connect(socketPath);
@@ -94,6 +80,11 @@ function isAnswering(socketPath) {
 		});
 	});
 }
+async function removeOwnSocket(socketPath, ino, onRemoved) {
+	const current = await stat(socketPath).catch(() => null);
+	if (ino !== null && current?.ino === ino) await rm(socketPath, { force: true });
+	onRemoved();
+}
 const MAX_REQUEST_BYTES = 4194304;
 async function runReview(socket, session) {
 	const controller = new AbortController();
@@ -155,9 +146,6 @@ function readLine(socket, maxBytes) {
 		socket.once("close", stopReading);
 	});
 }
-function writeResponse(socket, response) {
-	if (!socket.destroyed) socket.end(`${JSON.stringify(response)}\n`);
-}
 function parseJSON(text) {
 	try {
 		return JSON.parse(text);
@@ -165,5 +153,17 @@ function parseJSON(text) {
 		return null;
 	}
 }
+function writeResponse(socket, response) {
+	if (!socket.destroyed) socket.end(`${JSON.stringify(response)}\n`);
+}
+function startListening(server, socketPath) {
+	return new Promise((resolve, reject) => {
+		server.once("error", reject);
+		server.listen(socketPath, () => {
+			server.off("error", reject);
+			resolve();
+		});
+	});
+}
 //#endregion
 export { startJudgeServer };

package/dist/start-judge-session-B-KYQG13.js

@@ -0,0 +1 @@
+export { t as startJudgeSession } from "./start-judge-session-vxiG-kDp.js";

package/dist/{start-judge-session-DX3Oek85.js → start-judge-session-vxiG-kDp.js}

@@ -37795,8 +37795,8 @@ function cWe(e, t) {
 	}), ST(n, e, o, i), n;
 }
 //#endregion
-//#region src/process/find-executable.ts
-function findExecutable(name, path) {
+//#region src/process/resolve-executable.ts
+function resolveExecutable(name, path) {
 	for (const directory of (path ?? "").split(delimiter)) {
 		if (directory === "" || !isAbsolute(directory)) continue;
 		const candidate = join(directory, name);
@@ -37897,37 +37897,10 @@ function startJudgeSession(env) {
 		stop
 	};
 }
-function waitUnlessAborted(previous, signal) {
-	return new Promise((resolve, reject) => {
-		const onAbort = () => {
-			reject(new DOMException("Judge review aborted", "AbortError"));
-		};
-		if (signal.aborted) {
-			onAbort();
-			return;
-		}
-		signal.addEventListener("abort", onAbort, { once: true });
-		waitThenRelease(previous, () => {
-			signal.removeEventListener("abort", onAbort);
-			resolve();
-		});
-	});
-}
-async function waitThenRelease(previous, release) {
-	await previous;
-	release();
-}
-async function sendClear(send, stop) {
-	try {
-		await send("/clear");
-	} catch {
-		stop();
-	}
-}
 const MAX_LINE_BYTES = 1048576;
 function startLiveProcess(model, system, key, env) {
 	const input = makeInputChannel();
-	const executable = findExecutable("claude", env["PATH"]);
+	const executable = resolveExecutable("claude", env["PATH"]);
 	let waiter = null;
 	let closed = false;
 	if (executable === null) throw new Error("claude is not on the PATH");
@@ -38001,12 +37974,6 @@ function startLiveProcess(model, system, key, env) {
 		})
 	};
 }
-async function readMessages(stream, onMessage, onEnd) {
-	try {
-		for await (const message of stream) onMessage(message);
-	} catch {}
-	onEnd();
-}
 function makeInputChannel() {
 	const pending = [];
 	let wake = null;
@@ -38053,14 +38020,27 @@ async function* readPending(reader) {
 		await reader.waitForPush();
 	}
 }
-function buildChildEnv(env) {
-	return Object.fromEntries(Object.entries(env).filter(([name]) => !name.startsWith("ANTHROPIC_") && !PROVIDER_SWITCHES.has(name)));
-}
 const PROVIDER_SWITCHES = /* @__PURE__ */ new Set([
 	"CLAUDE_CODE_USE_BEDROCK",
 	"CLAUDE_CODE_USE_VERTEX",
 	"CLAUDE_CODE_USE_FOUNDRY"
 ]);
+function buildChildEnv(env) {
+	return Object.fromEntries(Object.entries(env).filter(([name]) => !name.startsWith("ANTHROPIC_") && !PROVIDER_SWITCHES.has(name)));
+}
+async function readMessages(stream, onMessage, onEnd) {
+	try {
+		for await (const message of stream) onMessage(message);
+	} catch {}
+	onEnd();
+}
+async function sendClear(send, stop) {
+	try {
+		await send("/clear");
+	} catch {
+		stop();
+	}
+}
 const MODEL_USAGE = record(string(), object({ outputTokens: number() }));
 const SAFETY_STOPS = object({ safety_stops: number() });
 function buildReply(result, fallbacks, requested, warm) {
@@ -38084,5 +38064,25 @@ function isFallbackReply(usage, stops) {
 	const entries = Object.values(usage ?? {});
 	return entries.some((entry) => entry.outputTokens === 0) && entries.some((entry) => entry.outputTokens > 0);
 }
+function waitUnlessAborted(previous, signal) {
+	return new Promise((resolve, reject) => {
+		const onAbort = () => {
+			reject(new DOMException("Judge review aborted", "AbortError"));
+		};
+		if (signal.aborted) {
+			onAbort();
+			return;
+		}
+		signal.addEventListener("abort", onAbort, { once: true });
+		waitThenRelease(previous, () => {
+			signal.removeEventListener("abort", onAbort);
+			resolve();
+		});
+	});
+}
+async function waitThenRelease(previous, release) {
+	await previous;
+	release();
+}
 //#endregion
 export { startJudgeSession as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-mode",
-  "version": "2.0.2",
+  "version": "3.0.1",
   "description": "A permission classifier library and Claude Code mod, so agents that are not Claude can run unattended",
   "keywords": [
     "agent",
@@ -64,10 +64,10 @@
     "prepare": "bash scripts/link-evals-package.sh && (command -v git > /dev/null 2>&1 && lefthook install --force || true)",
     "publint": "publint",
     "test": "bun run build && bun --no-env-file test --conditions=auto-mode-eval",
-    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p evals/tsconfig.json --noEmit",
+    "typecheck": "tsrs -p tsconfig.json --noEmit && tsrs -p evals/tsconfig.json --noEmit",
     "check:artifact": "bun --no-env-file scripts/check-artifact.ts",
     "check:claude-mod": "bun --no-env-file scripts/check-claude-mod.ts",
-    "files:branch": "bun scripts/collect-branch-files.ts",
+    "files:branch": "bun scripts/read-branch-files.ts",
     "lint:files": "oxlint --no-error-on-unmatched-pattern",
     "test:related": "bun scripts/run-related-tests.ts"
   },
@@ -79,10 +79,10 @@
     "@tsconfig/strictest": "2.0.8",
     "@types/bun": "1.4.2",
     "@types/node": "26.6.5",
-    "@zgeoff/bun-test-extended": "0.2.0",
-    "@zgeoff/format-codemod": "0.2.0",
-    "@zgeoff/oxlint-config": "0.2.12",
-    "@zgeoff/skill-gate": "0.1.0",
+    "@zgeoff/bun-test-extended": "0.2.1",
+    "@zgeoff/format-codemod": "0.3.1",
+    "@zgeoff/oxlint-config": "0.6.1",
+    "@zgeoff/skill-gate": "0.2.4",
     "gunshi": "1.0.0-rc.1",
     "knip": "6.41.0",
     "lefthook": "2.2.1",
@@ -96,6 +96,7 @@
     "tiny-invariant": "1.3.3",
     "ts-pattern": "5.9.0",
     "tsdown": "0.23.1",
+    "tsrs": "0.18.0-ts7.1.0-dev.20260929",
     "typescript": "7.0.2",
     "zod": "4.6.6"
   },

package/policy/judge.md

@@ -25,6 +25,8 @@ When neither reason clearly holds, confirm.
 
 Always confirm a HARD BLOCK rule and a configured hard deny entry. Consent never clears one, and you cannot overturn one; your task for these is the reason only.
 
+One exception applies only to a deny whose own evidence holds `"misreadMayClear": true`, which only a HARD BLOCK rule can hold. You may overturn that deny with the basis `misread` when the facts show that the action cannot cause the harm its rule describes and that no other rule covers the action. Otherwise confirm it. This exception changes nothing for any other deny.
+
 Confirm a SOFT BLOCK rule when the last direct user message is missing, when it does not name both the operation and the target, and when the action reaches past what it names.
 
 ## The reason

package/dist/start-judge-session-DOkwKT_N.js

@@ -1 +0,0 @@
-export { t as startJudgeSession } from "./start-judge-session-DX3Oek85.js";