create-vellaveto 4.0.5 → 4.0.7

package/dist/generators/toml.js

@@ -160,15 +160,7 @@ function generateStrictPreset() {
     toml += "[policies.network_rules]\n";
     toml +=
         'blocked_domains = ["*.pastebin.com", "*.transfer.sh", "*.ngrok.io"]\n\n';
-    // Require approval for destructive
-    toml += "[[policies]]\n";
-    toml += 'id = "approve-destructive"\n';
-    toml += 'name = "Require approval for destructive operations"\n';
-    toml += 'policy_type = "RequireApproval"\n';
-    toml += "priority = 50\n";
-    toml += 'tool_pattern = "*"\n';
-    toml += 'function_pattern = "*"\n\n';
-    // No path_rules needed — tool_pattern/function_pattern already match all
+    // Note: all operations not explicitly allowed are denied by default-deny
     return toml;
 }
 function generateBalancedPreset() {
@@ -202,14 +194,7 @@ function generateBalancedPreset() {
     toml += "priority = 50\n";
     toml += 'tool_pattern = "*"\n';
     toml += 'function_pattern = "read*"\n\n';
-    // Require approval for writes
-    toml += "[[policies]]\n";
-    toml += 'id = "approve-writes"\n';
-    toml += 'name = "Require approval for file writes"\n';
-    toml += 'policy_type = "RequireApproval"\n';
-    toml += "priority = 50\n";
-    toml += 'tool_pattern = "*"\n';
-    toml += 'function_pattern = "write*"\n\n';
+    // Note: writes are denied by default-deny; only reads are explicitly allowed
     return toml;
 }
 function generatePermissivePreset() {

package/dist/wizard.js

@@ -172,7 +172,7 @@ function nextSteps(state, absDir) {
         case "binary":
             lines.push(`  cd ${absDir}`);
             lines.push("  bash setup.sh");
-            lines.push(`  VELLAVETO_API_KEY='${state.apiKey}' ./bin/vellaveto serve --config vellaveto.toml`);
+            lines.push(`  VELLAVETO_API_KEY='${state.apiKey}' ./bin/vellaveto serve --config vellaveto.toml --open`);
             break;
         case "kubernetes":
             lines.push(`  kubectl create secret generic vellaveto-api-key \\`);
@@ -186,7 +186,7 @@ function nextSteps(state, absDir) {
             lines.push("  cd vellaveto-src");
             lines.push("  cargo build --release");
             lines.push(`  VELLAVETO_API_KEY='${state.apiKey}' \\`);
-            lines.push(`    ./target/release/vellaveto serve --config ${absDir}/vellaveto.toml`);
+            lines.push(`    ./target/release/vellaveto serve --config ${absDir}/vellaveto.toml --open`);
             break;
     }
     lines.push("");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-vellaveto",
-  "version": "4.0.5",
+  "version": "4.0.7",
   "description": "Setup wizard for Vellaveto — MCP Tool Firewall",
   "type": "module",
   "bin": {