devez-vibe 1.9.31 → 1.9.33

package/bridge/claude-agent-sdk-bridge.mjs

@@ -902,11 +902,14 @@ async function requestToolPermission(toolName, input, permission) {
   // decide that a human answer is needed. Forward every such request to the host;
   // auto-allowing the ordinary cases here would silently defeat default/auto mode.
   const planApproval = toolName === "ExitPlanMode";
-  const persistentApprovalLabel = permissionSuggestionLabel(permission.suggestions);
-  const common = {
-    claudePermission: true,
-    title: permission.title || permission.displayName,
-    persistentApprovalLabel,
+  const persistentApprovalLabel = permission.suppressAlwaysAllowRule
+    ? "" : permissionSuggestionLabel(permission.suggestions);
+  const common = {
+    claudePermission: true,
+    title: permission.title || permission.displayName,
+    persistentApprovalLabel,
+    defaultToNo: Boolean(permission.defaultToNo),
+    suppressAlwaysAllowRule: Boolean(permission.suppressAlwaysAllowRule),
   };
 
   let method = "item/permissions/requestApproval";
@@ -944,9 +947,10 @@ async function requestToolPermission(toolName, input, permission) {
   return {
     behavior: "allow",
     updatedInput: input,
-    ...(response?.decision === "acceptForSession" || response?.scope === "session"
-      ? { updatedPermissions: permission.suggestions }
-      : {}),
+    ...(!permission.suppressAlwaysAllowRule
+      && (response?.decision === "acceptForSession" || response?.scope === "session")
+      ? { updatedPermissions: permission.suggestions }
+      : {}),
   };
 }
 
@@ -3891,7 +3895,7 @@ async function dispatch(method, params = {}) {
   throw new Error(`지원하지 않는 Claude 브리지 메서드: ${method}`);
 }
 
-async function runPermissionModeSelfTest() {
+async function runPermissionModeSelfTest() {
   const fakeSession = (setPermissionMode) => ({
     id: "permission-mode-self-test",
     permissionMode: BOOTSTRAP_PERMISSION_MODE,
@@ -3923,7 +3927,35 @@ async function runPermissionModeSelfTest() {
       || rejectedCalls.join(",") !== "auto" || rejected.permissionModeVerified) {
     throw new Error(`Claude permission double rejection self-test failed: ${doubleRejection}`);
   }
-}
+}
+
+async function runGuardedPermissionSelfTest() {
+  const captured = [];
+  const originalWrite = process.stdout.write;
+  process.stdout.write = (chunk) => { captured.push(JSON.parse(String(chunk))); return true; };
+  try {
+    const pending = requestToolPermission("Bash", { command: "npm test" }, {
+      defaultToNo: true,
+      suppressAlwaysAllowRule: true,
+      suggestions: [{ destination: "projectSettings", rules: [{ toolName: "Bash" }] }],
+    });
+    const request = captured[0];
+    if (request.params.defaultToNo !== true
+        || request.params.suppressAlwaysAllowRule !== true
+        || request.params.persistentApprovalLabel) {
+      throw new Error("Claude guarded permission request self-test failed");
+    }
+    const reply = pendingHostRequests.get(request.id);
+    pendingHostRequests.delete(request.id);
+    reply.resolve({ decision: "acceptForSession" });
+    const result = await pending;
+    if (result.behavior !== "allow" || "updatedPermissions" in result) {
+      throw new Error("Claude guarded permission response self-test failed");
+    }
+  } finally {
+    process.stdout.write = originalWrite;
+  }
+}
 
 function runToolPolicySelfTest() {
   const cwd = process.platform === "win32" ? "C:\\repo" : "/repo";
@@ -4019,7 +4051,8 @@ async function runSelfTest() {
   if (startupGaps.length) {
     throw new Error(`Claude 기동 실패 안내 누락: ${startupGaps.join(", ")}`);
   }
-  await runPermissionModeSelfTest();
+  await runPermissionModeSelfTest();
+  await runGuardedPermissionSelfTest();
   runToolPolicySelfTest();
   await runCommandTimeoutSelfTest();
   // A turn that ends with no answer must reach the user: refusal as an error

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devez-vibe",
-  "version": "1.9.31",
+  "version": "1.9.33",
   "type": "module",
   "description": "Stable terminal UI for Codex and Claude Agent SDK",
   "keywords": [
@@ -45,6 +45,6 @@
     "postinstall": "node install-skills.mjs && node prepare-search-deps.mjs"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.3.280"
+    "@anthropic-ai/claude-agent-sdk": "0.3.283"
   }
 }