claude-bridge-cli 2.0.11 → 2.0.12

package/lib/bridge.js

@@ -675,11 +675,19 @@ function askClaude(config, { prompt, session_id, images, cwd, plan_mode, allow_t
       fs.writeFileSync(tmpFile, finalPrompt, "utf8");
     }
 
+    // Allow list — the caller (extension) can override via `allow_tools`, e.g.
+    // after the user clicks "Allow <tool>" on a permission denial, so an MCP
+    // tool (mcp__server__tool) or any other non-default tool can be granted for
+    // the session. Falls back to the default working set. Mirrors the Python
+    // bridge so both behave identically.
+    const defaultAllow = ["Read", "Write", "Edit", "Bash", "Grep", "Glob", "WebFetch", "WebSearch",
+                          "Task", "TaskCreate", "TaskList", "TaskGet", "TaskUpdate", "NotebookEdit"];
+    const allow = (Array.isArray(allow_tools) && allow_tools.length &&
+                   allow_tools.every(x => typeof x === "string")) ? allow_tools : defaultAllow;
     const settings = JSON.stringify({
       permissions: {
         defaultMode: "acceptEdits",
-        allow: ["Read", "Write", "Edit", "Bash", "Grep", "Glob", "WebFetch", "WebSearch",
-                "Task", "TaskCreate", "TaskList", "TaskGet", "TaskUpdate", "NotebookEdit"],
+        allow,
         deny: ["AskUserQuestion"],
       }
     });
@@ -751,12 +759,22 @@ function askClaude(config, { prompt, session_id, images, cwd, plan_mode, allow_t
           const newDir = path.join(dataDir(), "images", sid);
           try { fs.renameSync(oldDir, newDir); } catch {}
         }
+        // Surface tool-permission denials so the extension can show an "Allow
+        // <tool>" button (then resend with allow_tools including it). Without
+        // this, a tool that needs approval — notably any MCP tool, which isn't
+        // in the default allow list — silently fails with no way to grant it in
+        // headless -p mode. Mirrors the Python bridge's shape.
+        const rawDenials = Array.isArray(result.permission_denials) ? result.permission_denials : [];
+        const permission_denials = rawDenials
+          .filter(x => x && typeof x === "object")
+          .map(x => ({ tool_name: x.tool_name || "?", tool_input: x.tool_input || {} }));
         resolve({
           response: result.result || result.assistantMessage || stdout.slice(0, 5000),
           session_id: sid,
           cost_usd: result.cost_usd || null,
           duration_ms: result.duration_ms || null,
           context: result.context || null,
+          permission_denials,
         });
       } catch {
         if (stdout.trim()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-bridge-cli",
-  "version": "2.0.11",
+  "version": "2.0.12",
   "description": "Use Claude Code from your browser. Runs a local server that connects your browser tools to the Claude CLI.",
   "main": "lib/bridge.js",
   "bin": {