erosolar-cli 2.1.169 → 2.1.171

package/dist/shell/interactiveShell.js

@@ -90,6 +90,7 @@ export class InteractiveShell {
     profile;
     profileLabel;
     workingDir;
+    codexContext;
     runtimeSession;
     baseSystemPrompt;
     workspaceOptions;
@@ -136,6 +137,7 @@ export class InteractiveShell {
     autosaveEnabled;
     verificationEnabled = false;
     criticalApprovalMode = 'auto';
+    codexApprovalForced = false;
     editGuardMode = 'display-edits';
     pendingPermissionInput = null;
     suppressNextNetworkReset = false;
@@ -190,6 +192,7 @@ export class InteractiveShell {
     version;
     alternateScreenEnabled;
     welcomeShown = false;
+    guardrailBannerShown = false;
     renderer;
     // Message queue for streaming mode coordination - prevents race conditions
     pendingMessages = [];
@@ -197,6 +200,7 @@ export class InteractiveShell {
         this.profile = config.profile;
         this.profileLabel = config.profileLabel;
         this.workingDir = config.workingDir;
+        this.codexContext = config.codexContext;
         this.runtimeSession = config.session;
         this.baseSystemPrompt = config.baseSystemPrompt;
         this.workspaceOptions = { ...config.workspaceOptions };
@@ -204,6 +208,10 @@ export class InteractiveShell {
         this.thinkingMode = this.sessionPreferences.thinkingMode;
         this.autosaveEnabled = this.sessionPreferences.autosave;
         this.criticalApprovalMode = this.sessionPreferences.criticalApprovalMode;
+        if (this.codexContext && this.shouldForceApprovalMode(this.codexContext.approvalPolicy)) {
+            this.criticalApprovalMode = 'approval';
+            this.codexApprovalForced = true;
+        }
         const featureFlags = loadFeatureFlags();
         this.verificationEnabled = featureFlags.verification === true;
         this.sessionRestoreConfig = config.sessionRestore ?? { mode: 'none' };
@@ -507,6 +515,51 @@ export class InteractiveShell {
         }
         return pathValue;
     }
+    shouldForceApprovalMode(policy) {
+        return policy === 'on-request' || policy === 'untrusted' || policy === 'never';
+    }
+    getGuardrailMeta() {
+        if (!this.codexContext) {
+            return {};
+        }
+        const approvals = this.codexContext.approvalPolicy === 'on-request' || this.codexContext.approvalPolicy === 'untrusted'
+            ? 'ask'
+            : this.codexContext.approvalPolicy === 'never'
+                ? 'never'
+                : 'auto';
+        const sandbox = this.codexContext.sandboxMode === 'workspace-write'
+            ? 'workspace'
+            : this.codexContext.sandboxMode === 'danger-full-access'
+                ? 'danger'
+                : this.codexContext.sandboxMode;
+        const network = this.codexContext.networkAccess === 'enabled' ? 'enabled' : 'restricted';
+        return { sandbox, network, approvals };
+    }
+    describePlanPath() {
+        const planPath = join(this.workingDir, '.erosolar', 'codex', 'plan.json');
+        const relative = planPath.startsWith(this.workingDir) && planPath.length > this.workingDir.length
+            ? planPath.slice(this.workingDir.length + 1)
+            : planPath;
+        return this.abbreviatePath(relative);
+    }
+    maybeShowCodexGuardrails() {
+        if (!this.codexContext || this.guardrailBannerShown) {
+            return;
+        }
+        const meta = this.getGuardrailMeta();
+        const lines = [];
+        lines.push(`Guardrails: sandbox ${meta.sandbox ?? 'workspace'} · network ${meta.network ?? 'restricted'} · approvals ${meta.approvals ?? 'auto'}`);
+        lines.push('Flow: plan before edits, targeted reads, one in-progress step, validate once at the end.');
+        const planPath = this.describePlanPath();
+        if (planPath) {
+            lines.push(`Plan file: ${planPath}`);
+        }
+        if (this.codexApprovalForced) {
+            lines.push('Approval mode set to ask per environment policy.');
+        }
+        this.streamEventBlock(lines.join('\n'));
+        this.guardrailBannerShown = true;
+    }
     async checkAndShowUpdates() {
         try {
             const { checkForUpdates, getUpdateDecision, formatUpdateBanner, performBackgroundUpdate, readAutoUpdateState, shouldShowUpdateNotification, } = await import('../core/updateChecker.js');
@@ -624,6 +677,7 @@ export class InteractiveShell {
         this.terminalInput.start();
         this.resetRendererStreamingMode();
         await this.showWelcomeBanner();
+        this.maybeShowCodexGuardrails();
         // Now refresh control bar with profile/model/version info
         this.refreshControlBar();
         // Now sync renderer and control bar state
@@ -1646,7 +1700,9 @@ export class InteractiveShell {
             criticalApprovalHotkey: 'ctrl+shift+a',
         });
         const workspaceDisplay = this.abbreviatePath(this.workingDir);
+        const guardrails = this.getGuardrailMeta();
         this.terminalInput.setChromeMeta({
+            ...guardrails,
             profile: this.profileLabel,
             workspace: workspaceDisplay,
             directory: workspaceDisplay,