balladeer 1.0.12 → 1.0.13

package/dist/commands/setup.js

@@ -21,7 +21,7 @@ import { StoreError, assertStoreWritable, credentialsPath, dropPendingPairing, f
 import { CLI_VERSION, DELEGATED_SCOPES, } from "../wire.js";
 import { explainText } from "./explain.js";
 import { probeAgentConnection } from "./mcp.js";
-const REFUSAL_SENTENCE = "It may not agree to what a promise means, agree a change to what a promise means, grant an exception, transfer ownership, supersede, retire, or offboard anything.";
+const REFUSAL_SENTENCE = "It may not agree to what a promise means, agree a change to what a promise means, transfer ownership, supersede, retire, or offboard anything.";
 const MAX_WAIT_MS = 10 * 60 * 1000;
 const AGENT_WAIT_MS = 90 * 1000;
 /** The bound the control plane's own name check holds, refused here so a name

package/dist/guidance-hook.mjs

@@ -2027,7 +2027,7 @@ var require_toml = __commonJS({
 });
 
 // src/wire.ts
-var CLI_VERSION = "1.0.12";
+var CLI_VERSION = "1.0.13";
 var CLIENT_HEADER = "x-balladeer-client";
 var CLIENT_HEADER_VALUE = `balladeer/${CLI_VERSION}`;
 var DEFAULT_CONTROL_PLANE = "https://envelopes.balladeer.ai";

package/dist/remove-earlier.js

@@ -94,8 +94,15 @@ function claudeConnector(home, controlPlane, now) {
         },
     ];
 }
+// This product's own hook runs `guidance --hook claude|codex --event ...`,
+// whether by npx, by a checkout path, or by the installed command's absolute
+// path (1.0.11 and later). The July client's hook ran nothing of the kind, so
+// that shape is the line: a hook that names it is ours and is never "earlier".
+// Found on 22 September 2026: the installed-path form was being removed as
+// the older client on every setup run, leaving the laptop with no hook.
 const isEarlierHook = (command) => typeof command === "string" &&
     /balladeer/i.test(command) &&
+    !/\bguidance --hook (?:claude|codex)\b/.test(command) &&
     !/balladeer@(?:latest|\d+\.\d+\.\d+)\b/.test(command) &&
     !/\bpackages[/\\]cli[/\\]dist[/\\]cli\.js\b/.test(command);
 function claudeSettings(home, now) {

package/dist/user-scope.d.ts

@@ -15,6 +15,8 @@
  * shape, never by trust in the name.
  */
 export declare const USER_SCOPE_OWNER = "Balladeer current guidance (user scope, loader 1)";
+/** Every tool of the server named `balladeer`, in Claude Code's permission rule form. */
+export declare const USER_SCOPE_ALLOW_RULE = "mcp__balladeer__*";
 export type UserScopeHost = "claude" | "codex";
 export type UserScopeWrite = Readonly<{
     host: UserScopeHost;

package/dist/user-scope.js

@@ -22,6 +22,8 @@ import { writeJsonAtomically } from "./mcp-config.js";
  */
 export const USER_SCOPE_OWNER = "Balladeer current guidance (user scope, loader 1)";
 const CLAUDE_EVENTS = ["SessionStart", "UserPromptSubmit", "SubagentStart"];
+/** Every tool of the server named `balladeer`, in Claude Code's permission rule form. */
+export const USER_SCOPE_ALLOW_RULE = "mcp__balladeer__*";
 /**
  * The command a host runs to reach Balladeer, with no repository named: the
  * directory decides.
@@ -192,6 +194,24 @@ export function mergeClaudeUserHooks(home, published, installed) {
         hooks[event] = [...rows.filter((row) => !own.includes(row)), expected];
         changed = true;
     }
+    // Claude Code asks the person before every call to a server's tools unless
+    // a rule allows them. Without one, each read the guidance asks for costs a
+    // click, and a session that says no once hears no offer at all (measured
+    // 23 September 2026). The rule names this server's tools and nothing else;
+    // a deny rule the person wrote for them is theirs and is left to win.
+    const permissions = root.permissions && typeof root.permissions === "object" && !Array.isArray(root.permissions)
+        ? { ...root.permissions }
+        : {};
+    const allow = permissions.allow === undefined ? [] : permissions.allow;
+    if (!Array.isArray(allow))
+        return { host, path, status: "refused", reason: "permissions.allow is not a list" };
+    const deny = Array.isArray(permissions.deny) ? permissions.deny : [];
+    const denied = deny.some((rule) => typeof rule === "string" && /^mcp__balladeer(__|$)/.test(rule));
+    if (!denied && !allow.some((rule) => rule === USER_SCOPE_ALLOW_RULE)) {
+        permissions.allow = [...allow, USER_SCOPE_ALLOW_RULE];
+        root.permissions = permissions;
+        changed = true;
+    }
     if (!changed)
         return { host, path, status: "current" };
     root.hooks = hooks;

package/dist/wire.d.ts

@@ -5,10 +5,10 @@
  * runtime dependency at all: Node 22 builtins and global fetch, nothing else.
  * A contract test compares the scope list below against the server's.
  */
-export declare const CLI_VERSION = "1.0.12";
+export declare const CLI_VERSION = "1.0.13";
 export declare const CLI_INVOCATION = "npx -y balladeer@latest";
 export declare const CLIENT_HEADER = "x-balladeer-client";
-export declare const CLIENT_HEADER_VALUE = "balladeer/1.0.12";
+export declare const CLIENT_HEADER_VALUE = "balladeer/1.0.13";
 export declare const DEFAULT_CONTROL_PLANE = "https://envelopes.balladeer.ai";
 export type DelegatedScope = "repository:enroll" | "agent:issue" | "ci:connect" | "workspace:invite" | "candidate:propose";
 export declare const DELEGATED_SCOPES: readonly DelegatedScope[];

package/dist/wire.js

@@ -5,7 +5,7 @@
  * runtime dependency at all: Node 22 builtins and global fetch, nothing else.
  * A contract test compares the scope list below against the server's.
  */
-export const CLI_VERSION = "1.0.12";
+export const CLI_VERSION = "1.0.13";
 export const CLI_INVOCATION = "npx -y balladeer@latest";
 export const CLIENT_HEADER = "x-balladeer-client";
 export const CLIENT_HEADER_VALUE = `balladeer/${CLI_VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "balladeer",
-  "version": "1.0.12",
+  "version": "1.0.13",
   "description": "Set up Balladeer from your terminal, or from a coding agent's.",
   "license": "Apache-2.0",
   "private": false,