auto-mode 3.0.0 → 3.1.0

package/mods/auto-mode/contract/cli-limits.ts

@@ -1,14 +1,8 @@
 const KEY_COMMAND_MS = 5000;
 const JEV_MS = 5000;
 const JUDGE_MS = 120_000;
-
-// Node start, the config and scope reads, and the action log, none of which
-// waits on the network.
 const STARTUP_MS = 5000;
 
-// The CLI stops each step of one `run` at its limit. The worst case runs Jev
-// and the judge twice, on a named containment deny and on Jev's deny, each
-// after its own key command.
 export const CLI_LIMITS = {
   keyCommandMs: KEY_COMMAND_MS,
   jevMs: JEV_MS,

package/mods/auto-mode/contract/message-origins.ts

@@ -1,3 +1,3 @@
 // Composer, Remote Control and the SDK are the prompt origins a person types
-// into; any other origin is a delivery from a tool, not direct user evidence.
+// into; any other origin is a delivery from a tool.
 export const MESSAGE_ORIGINS = ['composer', 'bridge', 'sdk'] as const;

package/mods/auto-mode/contract/scope-commands.ts

@@ -1,5 +1,3 @@
-// The commands that can create a worktree, a branch, or a PR, keyed by program.
-// Each entry is the words that follow the program and its leading options.
 export const SCOPE_COMMANDS = {
   git: ['worktree add', 'checkout', 'switch', 'branch'],
   gh: ['pr create'],

package/mods/auto-mode/hooks/is-scope-command.ts

@@ -1,7 +1,6 @@
 import { SCOPE_COMMANDS } from '../contract/scope-commands.ts';
 
-// A cheap gate before the record subprocess: options may sit between the
-// program and its subcommand, and the CLI parses the words exactly.
+// Options may sit between the program and its subcommand on a command line.
 const SCOPE_COMMAND_PATTERN = new RegExp(
   Object.entries(SCOPE_COMMANDS)
     .map(([program, commands]) => {

package/mods/auto-mode/hooks/parse-decision.ts

@@ -1,7 +1,5 @@
 import type { ModVerdict } from '../contract/types.ts';
 
-// The CLI ships with this mod, so any other shape is a mismatched or broken CLI,
-// and only an exact verdict may replace the prompt.
 export function parseDecision(stdout: string): ModVerdict | null {
   let body: unknown;
 

package/mods/auto-mode/hooks/register.ts

@@ -7,8 +7,6 @@ import { isToolInput } from './is-tool-input.ts';
 import { parseDecision } from './parse-decision.ts';
 import type { ModOn, ModOptions, PromptContext } from './types.ts';
 
-// The record may look up a created PR's head branch with gh, which the CLI
-// bounds at 5 seconds.
 const RECORD_TIMEOUT_MS = 8000;
 
 export function register(on: ModOn, options: ModOptions): void {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-mode",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "A permission classifier library and Claude Code mod, so agents that are not Claude can run unattended",
   "keywords": [
     "agent",
@@ -64,40 +64,46 @@
     "prepare": "bash scripts/link-evals-package.sh && (command -v git > /dev/null 2>&1 && lefthook install --force || true)",
     "publint": "publint",
     "test": "bun run build && bun --no-env-file test --conditions=auto-mode-eval",
-    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p evals/tsconfig.json --noEmit",
+    "typecheck": "tsrs -p tsconfig.json --noEmit && tsrs -p evals/tsconfig.json --noEmit",
     "check:artifact": "bun --no-env-file scripts/check-artifact.ts",
     "check:claude-mod": "bun --no-env-file scripts/check-claude-mod.ts",
-    "files:branch": "bun scripts/collect-branch-files.ts",
+    "files:branch": "bun scripts/read-branch-files.ts",
     "lint:files": "oxlint --no-error-on-unmatched-pattern",
-    "test:related": "bun scripts/run-related-tests.ts"
+    "test:related": "bun scripts/run-related-tests.ts",
+    "check:commits": "bun scripts/run-commits-check.ts",
+    "check:local-paths": "bun scripts/run-local-paths-check.ts",
+    "check:test-timeouts": "bun scripts/run-test-timeouts-check.ts",
+    "check:workflows": "bun scripts/run-workflows-check.ts",
+    "memory-capped": "bash scripts/run-memory-capped.sh \"$(bun scripts/read-memory-budget.ts)\""
   },
   "devDependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.3.296",
-    "@commitlint/cli": "21.2.3",
+    "@anthropic-ai/claude-agent-sdk": "0.3.303",
+    "@commitlint/cli": "21.2.4",
     "@faker-js/faker": "10.6.0",
     "@stylistic/eslint-plugin": "5.10.0",
     "@tsconfig/strictest": "2.0.8",
-    "@types/bun": "1.4.2",
+    "@types/bun": "1.4.3",
     "@types/node": "26.6.5",
     "@zgeoff/bun-test-extended": "0.2.1",
-    "@zgeoff/format-codemod": "0.3.0",
-    "@zgeoff/oxlint-config": "0.6.1",
-    "@zgeoff/skill-gate": "0.2.2",
+    "@zgeoff/format-codemod": "0.3.3",
+    "@zgeoff/oxlint-config": "0.7.0",
+    "@zgeoff/skill-gate": "0.2.9",
     "gunshi": "1.0.0-rc.1",
-    "knip": "6.41.0",
-    "lefthook": "2.2.1",
+    "knip": "6.42.0",
+    "lefthook": "2.2.2",
     "mitata": "1.0.34",
     "msw": "2.15.0",
-    "oxfmt": "0.72.0",
-    "oxlint": "1.87.0",
+    "oxfmt": "0.73.0",
+    "oxlint": "1.88.0",
     "oxlint-tsgolint": "7.0.2004",
     "publint": "0.3.25",
-    "re2js": "2.8.6",
+    "re2js": "2.8.8",
     "tiny-invariant": "1.3.3",
-    "ts-pattern": "5.9.0",
+    "ts-pattern": "5.9.2",
     "tsdown": "0.23.1",
+    "tsrs": "0.18.0-ts7.1.0-dev.20260929",
     "typescript": "7.0.2",
-    "zod": "4.6.6"
+    "zod": "4.6.7"
   },
   "overrides": {
     "smol-toml": "1.9.1"

package/policy/judge.md

@@ -25,6 +25,8 @@ When neither reason clearly holds, confirm.
 
 Always confirm a HARD BLOCK rule and a configured hard deny entry. Consent never clears one, and you cannot overturn one; your task for these is the reason only.
 
+One exception applies only to a deny whose own evidence holds `"misreadMayClear": true`, which only a HARD BLOCK rule can hold. You may overturn that deny with the basis `misread` when the facts show that the action cannot cause the harm its rule describes and that no other rule covers the action, including a SOFT BLOCK rule the classifier doubted. Otherwise confirm it. This exception changes nothing for any other deny.
+
 Confirm a SOFT BLOCK rule when the last direct user message is missing, when it does not name both the operation and the target, and when the action reaches past what it names.
 
 ## The reason

package/dist/start-judge-session-B-KYQG13.js

@@ -1 +0,0 @@
-export { t as startJudgeSession } from "./start-judge-session-vxiG-kDp.js";