auto-mode 3.1.1 → 3.1.3

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { C as pickJudgeLane, E as updateJSONFile, S as CLI_LIMITS, T as resolveXDGDir, _ as readCheckout, a as resolveSessionScopePath, b as loadConfig, c as splitGitCommand, d as loadCheckoutFacts, f as writeActionDiagnostic, g as isUnresolvedWord, h as resolveShellPath, i as classifyAction, l as loadPolicy, m as collectShellCommands, n as readRuntime, o as loadSessionScope, p as toRepositorySlug, s as EMPTY_SESSION_SCOPE, t as parseActionRequest, u as resolveShippedPolicyDir, v as readGitEntry, w as M, x as runCapped, y as DEFAULT_SCOPE_SOURCES } from "./parse-action-request-qyh3MBGg.js";
+import { C as pickJudgeLane, E as updateJSONFile, S as CLI_LIMITS, T as resolveXDGDir, _ as readCheckout, a as resolveSessionScopePath, b as loadConfig, c as splitGitCommand, d as loadCheckoutFacts, f as writeActionDiagnostic, g as isUnresolvedWord, h as resolveShellPath, i as classifyAction, l as loadPolicy, m as collectShellCommands, n as readRuntime, o as loadSessionScope, p as toRepositorySlug, s as EMPTY_SESSION_SCOPE, t as parseActionRequest, u as resolveShippedPolicyDir, v as readGitEntry, w as M, x as runCapped, y as DEFAULT_SCOPE_SOURCES } from "./parse-action-request-Czvdr5DS.js";
 import { a as literal, d as string, i as discriminatedUnion, r as boolean, s as number, u as strictObject } from "./schemas-B80Yxv6m.js";
 import { createHash, randomUUID } from "node:crypto";
 import { chmod, mkdir, open, readFile, realpath, stat } from "node:fs/promises";

package/dist/index.d.ts

@@ -148,6 +148,7 @@ interface UserTask {
 }
 interface DirectUserMessage extends UserTask {
   readonly freshness?: 'stale' | undefined;
+  readonly position?: 'opening' | undefined;
 }
 interface DelegatedTask {
   readonly text: string;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { b as loadConfig$1, i as classifyAction$1, n as readRuntime, r as readHostEnvironment, t as parseActionRequest } from "./parse-action-request-qyh3MBGg.js";
+import { b as loadConfig$1, i as classifyAction$1, n as readRuntime, r as readHostEnvironment, t as parseActionRequest } from "./parse-action-request-Czvdr5DS.js";
 //#region src/index.ts
 function classifyAction(request, config, options = {}) {
 	return classifyAction$1(request, config, {

package/dist/{parse-action-request-qyh3MBGg.js → parse-action-request-Czvdr5DS.js}

@@ -3575,7 +3575,7 @@ function buildJudgedVerdict(rule, basis, reply, options) {
 	};
 	if (reply.kind === "overturn") {
 		const clearsHardRule = reply.basis === "misread" && options.misreadClears === true;
-		return rule.tier === "hard" && !clearsHardRule || reply.basis === "misread" && options.overturns === "consent" ? {
+		return rule.tier === "hard" && !clearsHardRule || reply.basis === "misread" && options.overturns === "consent" || reply.basis === "consent" && !options.hasUserMessage ? {
 			verdict: template,
 			status: "held",
 			overturnBasis: reply.basis
@@ -3833,6 +3833,7 @@ async function classifyWithJudge(payload, evidence, judge, options) {
 	let failure = null;
 	let answered = null;
 	let replies = evidence.map(() => null);
+	const directMessage = findCurrentDirectUserMessage(payload.decisionContext?.lastDirectUserMessage);
 	try {
 		failure = "credential";
 		const needsKey = pickJudgeLane(judge).credential === "api-key";
@@ -3840,7 +3841,6 @@ async function classifyWithJudge(payload, evidence, judge, options) {
 		if (needsKey && apiKey === null) throw new Error("no API key for the judge");
 		failure = "policy";
 		const system = await loadPolicy({ rulesPath: options.rulesPath }, "judge.md");
-		const directMessage = findCurrentDirectUserMessage(payload.decisionContext?.lastDirectUserMessage);
 		const user = buildJudgeMessage({
 			denies: evidence.map((entry) => ({
 				rule: entry.rule,
@@ -3881,7 +3881,8 @@ async function classifyWithJudge(payload, evidence, judge, options) {
 		const verdict = buildJudgedVerdict(entry.rule, entry.basis, reply, {
 			overturns,
 			heldReason: entry.containment?.reason,
-			misreadClears: entry.misreadClears
+			misreadClears: entry.misreadClears,
+			hasUserMessage: directMessage !== null
 		});
 		return {
 			...verdict,
@@ -5927,6 +5928,28 @@ async function loadTaskScope(request, sources, host, stderr) {
 	});
 }
 //#endregion
+//#region src/scope/probe-launcher-spawner.ts
+async function probeLauncherSpawner(location, readTextFile) {
+	const load = await loadScopeFile(location, readTextFile);
+	return load.kind === "malformed" || load.kind === "scope" && load.scope.replyChannels.length > 0;
+}
+//#endregion
+//#region src/scope/resolve-opening-prompt.ts
+async function resolveOpeningPrompt(request, runtime) {
+	const context = request.decisionContext;
+	const message = context?.lastDirectUserMessage;
+	if (context === void 0 || message?.position !== "opening") return request;
+	const { position: _, ...unmarked } = message;
+	const isSpawned = await probeLauncherSpawner(runtime.host.env["AUTO_MODE_SCOPE_FILE"], runtime.readTextFile);
+	return {
+		...request,
+		decisionContext: {
+			...context,
+			lastDirectUserMessage: isSpawned ? null : unmarked
+		}
+	};
+}
+//#endregion
 //#region src/classify-action.ts
 async function classifyAction(request, config, options) {
 	const stderr = options.stderr;
@@ -5936,7 +5959,8 @@ async function classifyAction(request, config, options) {
 		invocationID,
 		status: "started"
 	}, host, stderr);
-	const outcome = options.budget === true ? await classifyWithBudget(request, config, options) : await classifyStages(request, config, options);
+	const resolved = await resolveOpeningPrompt(request, options.runtime);
+	const outcome = options.budget === true ? await classifyWithBudget(resolved, config, options) : await classifyStages(resolved, config, options);
 	if (options.actionLog === true) await writeActionDiagnostic(request, {
 		invocationID,
 		status: outcome.status,
@@ -6294,7 +6318,8 @@ const userTaskSchema = strictObject({
 });
 const directUserMessageSchema = strictObject({
 	...userTaskSchema.shape,
-	freshness: literal("stale").optional()
+	freshness: literal("stale").optional(),
+	position: literal("opening").optional()
 });
 const delegatedTaskSchema = strictObject({
 	text: string(),

package/mods/auto-mode/contract/types.ts

@@ -9,6 +9,7 @@ export interface UserTask {
 
 export interface DirectUserMessage extends UserTask {
   readonly freshness?: 'stale' | undefined;
+  readonly position?: 'opening' | undefined;
 }
 
 interface DelegatedTask {

package/mods/auto-mode/hooks/build-prompt-context.ts

@@ -17,6 +17,11 @@ export function buildPromptContext(
       originalUserTask: null,
       lastDirectUserMessage: null,
       canCaptureOriginal: input.source === 'startup' || input.source === 'clear',
+
+      // A launcher can pass the opening prompt on the command line, which
+      // Claude Code reports with the origin of a typed prompt. A clear happens
+      // only at the prompt of a running session.
+      awaitsOpeningPrompt: input.source !== 'clear',
     };
   }
 
@@ -27,21 +32,29 @@ export function buildPromptContext(
       originalUserTask: previous?.originalUserTask ?? null,
       lastDirectUserMessage: buildStaleMessage(previous?.lastDirectUserMessage ?? null),
       canCaptureOriginal: previous?.canCaptureOriginal ?? false,
+      awaitsOpeningPrompt: previous?.awaitsOpeningPrompt ?? true,
     };
   }
 
   const message: UserTask = { text: input.text, origin };
+  const isOpeningPrompt = previous?.awaitsOpeningPrompt ?? true;
 
   return {
     originalUserTask:
       previous?.originalUserTask ?? (previous?.canCaptureOriginal === true ? message : null),
-    lastDirectUserMessage: message,
+    lastDirectUserMessage: isOpeningPrompt ? { ...message, position: 'opening' } : message,
     canCaptureOriginal: previous?.canCaptureOriginal ?? false,
+    awaitsOpeningPrompt: false,
   };
 }
 
 function buildStaleMessage(message: DirectUserMessage | null): DirectUserMessage | null {
   return message === null
     ? null
-    : { text: message.text, origin: message.origin, freshness: 'stale' };
+    : {
+        text: message.text,
+        origin: message.origin,
+        freshness: 'stale',
+        ...(message.position === undefined ? {} : { position: message.position }),
+      };
 }

package/mods/auto-mode/hooks/types.ts

@@ -51,6 +51,7 @@ export interface PromptContext {
   readonly originalUserTask: UserTask | null;
   readonly lastDirectUserMessage: DirectUserMessage | null;
   readonly canCaptureOriginal: boolean;
+  readonly awaitsOpeningPrompt: boolean;
 }
 
 interface PromptInput {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-mode",
-  "version": "3.1.1",
+  "version": "3.1.3",
   "description": "A permission classifier library and Claude Code mod, so agents that are not Claude can run unattended",
   "keywords": [
     "agent",
@@ -70,6 +70,8 @@
     "files:branch": "bun scripts/read-branch-files.ts",
     "lint:files": "oxlint --no-error-on-unmatched-pattern",
     "test:related": "bun scripts/run-related-tests.ts",
+    "check:publish": "bun scripts/run-publish-check.ts",
+    "setup:ci-tools": "bun scripts/run-ci-tools-install.ts",
     "check:commits": "bun scripts/run-commits-check.ts",
     "check:local-paths": "bun scripts/run-local-paths-check.ts",
     "check:test-timeouts": "bun scripts/run-test-timeouts-check.ts",
@@ -86,7 +88,7 @@
     "@types/node": "26.6.5",
     "@zgeoff/bun-test-extended": "0.2.1",
     "@zgeoff/format-codemod": "0.3.3",
-    "@zgeoff/oxlint-config": "0.7.0",
+    "@zgeoff/oxlint-config": "0.7.1",
     "@zgeoff/skill-gate": "0.2.9",
     "gunshi": "1.0.0-rc.1",
     "knip": "6.42.0",