flavor-code 1.2.3 → 1.2.5

package/dist/{chunk-XGCFBGBB.js → chunk-3TYRDK34.js}

@@ -12,7 +12,7 @@ import {
   redactConfig,
   setProjectMcpServerDisabled,
   updateProtectedFile
-} from "./chunk-MVIMQEQT.js";
+} from "./chunk-HFR2WS6T.js";
 import {
   AuditLogger,
   appendUsageLog,
@@ -23,7 +23,7 @@ import {
   resolveLanguage,
   setUsageSession,
   usageLogPath
-} from "./chunk-VOCZVFP7.js";
+} from "./chunk-N2S7USST.js";
 
 // src/models/types.ts
 function modelContentText(content) {
@@ -104,10 +104,12 @@ function isDestructiveTool(name) {
   return DESTRUCTIVE_TOOLS.has(name);
 }
 var PermissionEngine = class {
+  #lexicalWorkspace;
   #workspace;
   #mode;
   constructor(options) {
     const root = resolve(options.workspace);
+    this.#lexicalWorkspace = root;
     this.#workspace = existsSync(root) ? realpathSync.native(root) : root;
     this.#mode = canonicalMode(options.mode ?? "default");
   }
@@ -128,13 +130,13 @@ var PermissionEngine = class {
       return { decision: "deny", reason: `${request.tool} requires source and destination paths` };
     }
     for (const path of paths) {
-      const classification = classifyPath(this.#workspace, path);
+      const classification = classifyPath(this.#lexicalWorkspace, this.#workspace, path);
       if (classification.escape) return { decision: "deny", reason: classification.reason ?? "Path escapes the workspace" };
       if (request.agent === "subagent" && !classification.inside) {
         return { decision: "deny", reason: "Subagents are restricted to the workspace" };
       }
     }
-    const inside = paths.every((path) => classifyPath(this.#workspace, path).inside);
+    const inside = paths.every((path) => classifyPath(this.#lexicalWorkspace, this.#workspace, path).inside);
     if (this.#mode === "plan") {
       return READ_TOOLS.has(request.tool) ? { decision: "allow" } : { decision: "deny", reason: "Plan mode is read-only" };
     }
@@ -161,11 +163,11 @@ var PermissionEngine = class {
     const analysis = request.args === void 0 ? analyzeCommand(request.command ?? "") : analyzeArgumentCommand(request.command ?? "", request.args);
     if (request.agent === "subagent") {
       if (request.cwd === void 0) return { decision: "ask", reason: "Subagent shell commands require an explicit workspace cwd" };
-      const cwd = classifyPath(this.#workspace, request.cwd);
+      const cwd = classifyPath(this.#lexicalWorkspace, this.#workspace, request.cwd);
       if (cwd.escape || !cwd.inside) return { decision: "deny", reason: "Subagent shell cwd must remain in the workspace" };
       if (analysis.destructive) return { decision: "deny", reason: "Destructive commands are forbidden for subagents" };
       if (analysis.wrapped || analysis.opaque || !isRoutineCommand(analysis.command)) return { decision: "ask", reason: "Subagent shell command requires main-Agent approval" };
-      const argumentDecision = assessRoutineArguments(analysis.command, request.cwd, this.#workspace);
+      const argumentDecision = assessRoutineArguments(analysis.command, request.cwd, this.#lexicalWorkspace, this.#workspace);
       if (argumentDecision !== "allow") {
         return argumentDecision === "deny" ? { decision: "deny", reason: "Subagent command arguments escape the workspace" } : { decision: "ask", reason: "Ambiguous subagent command arguments require main-Agent approval" };
       }
@@ -177,12 +179,12 @@ var PermissionEngine = class {
     if (analysis.wrapped || analysis.opaque) return ask(this.#mode, "Shell wrapper requires approval");
     if (this.#mode === "bypassPermissions") return { decision: "allow" };
     if ((this.#mode === "acceptEdits" || this.#mode === "auto") && isRoutineCommand(analysis.command)) {
-      const cwd = request.cwd ?? this.#workspace;
-      const cwdClassification = classifyPath(this.#workspace, cwd);
+      const cwd = request.cwd ?? this.#lexicalWorkspace;
+      const cwdClassification = classifyPath(this.#lexicalWorkspace, this.#workspace, cwd);
       if (cwdClassification.escape || !cwdClassification.inside) {
         return { decision: "deny", reason: "Routine command cwd must remain in the workspace" };
       }
-      const argumentDecision = assessRoutineArguments(analysis.command, cwd, this.#workspace);
+      const argumentDecision = assessRoutineArguments(analysis.command, cwd, this.#lexicalWorkspace, this.#workspace);
       if (argumentDecision === "deny") return { decision: "deny", reason: "Routine command arguments escape the workspace" };
       if (argumentDecision === "ask") return ask(this.#mode, "Ambiguous routine command arguments require approval");
       return { decision: "allow" };
@@ -219,16 +221,16 @@ function analyzeArgumentCommand(executable, args) {
   }
   return { command, destructive: isForbiddenCommand(command), opaque: false, wrapped: false };
 }
-function classifyPath(workspace, input) {
-  const candidate = resolve(workspace, input);
-  const lexicalInside = isWithin(workspace, candidate);
+function classifyPath(lexicalWorkspace, physicalWorkspace, input) {
+  const candidate = resolve(lexicalWorkspace, input);
+  const lexicalInside = isWithin(lexicalWorkspace, candidate);
   const traversal = input.split(/[\\/]+/).includes("..");
-  const startsInWorkspace = pathStartsWith(workspace, input);
+  const startsInWorkspace = pathStartsWith(lexicalWorkspace, input);
   if ((!isAbsolute(input) || startsInWorkspace) && traversal && !lexicalInside) {
     return { inside: false, escape: true, reason: "Path traversal escapes the workspace" };
   }
   const physical = resolvePhysical(candidate);
-  const physicalInside = isWithin(workspace, physical);
+  const physicalInside = isWithin(physicalWorkspace, physical);
   if (lexicalInside && !physicalInside) return { inside: false, escape: true, reason: "Symlink escapes the workspace" };
   return { inside: physicalInside, escape: false };
 }
@@ -318,7 +320,7 @@ function isRoutineCommand(command) {
   if (command.executable === "go") return first === "test";
   return ["pytest", "vitest", "jest", "eslint", "tsc"].includes(command.executable);
 }
-function assessRoutineArguments(command, cwd, workspace) {
+function assessRoutineArguments(command, cwd, lexicalWorkspace, physicalWorkspace) {
   const args = routineArguments(command);
   if (args === void 0) return "ask";
   const pathOptions = /* @__PURE__ */ new Set([
@@ -343,7 +345,7 @@ function assessRoutineArguments(command, cwd, workspace) {
       const option2 = equals[1]?.toLowerCase() ?? "";
       const value = equals[2] ?? "";
       if (!pathOptions.has(option2)) return "ask";
-      const decision = assessArgumentPath(value, cwd, workspace);
+      const decision = assessArgumentPath(value, cwd, lexicalWorkspace, physicalWorkspace);
       if (decision !== "allow") return decision;
       continue;
     }
@@ -351,14 +353,14 @@ function assessRoutineArguments(command, cwd, workspace) {
     if (option !== void 0 && pathOptions.has(option)) {
       const value = args[index + 1];
       if (value === void 0 || value.startsWith("-")) return "ask";
-      const decision = assessArgumentPath(value, cwd, workspace);
+      const decision = assessArgumentPath(value, cwd, lexicalWorkspace, physicalWorkspace);
       if (decision !== "allow") return decision;
       index += 1;
       continue;
     }
     if (arg.startsWith("-")) continue;
     if (looksLikePath(arg)) {
-      const decision = assessArgumentPath(arg, cwd, workspace);
+      const decision = assessArgumentPath(arg, cwd, lexicalWorkspace, physicalWorkspace);
       if (decision !== "allow") return decision;
       continue;
     }
@@ -376,10 +378,10 @@ function routineArguments(command) {
   if (["pytest", "vitest", "jest", "eslint", "tsc"].includes(command.executable)) return command.args;
   return void 0;
 }
-function assessArgumentPath(value, cwd, workspace) {
+function assessArgumentPath(value, cwd, lexicalWorkspace, physicalWorkspace) {
   if (value.length === 0) return "ask";
   const resolved = resolve(cwd, value);
-  const classification = classifyPath(workspace, resolved);
+  const classification = classifyPath(lexicalWorkspace, physicalWorkspace, resolved);
   return classification.escape || !classification.inside ? "deny" : "allow";
 }
 function looksLikePath(value) {
@@ -5042,7 +5044,8 @@ var ToolRuntime = class {
         } catch {
         }
       }
-      if (pre.decision === "ask" || permission.decision === "ask") {
+      const sessionAllowed = this.#alwaysAllowed.has(getToolCategory(tool.name));
+      if (!sessionAllowed && (pre.decision === "ask" || permission.decision === "ask")) {
         const reason = [pre.reason, permission.reason].filter((value) => value !== void 0).join("\n") || "Approval required";
         const requestDecision = await this.#hooks.emit({
           version: 1,
@@ -5067,8 +5070,7 @@ var ToolRuntime = class {
           throw signal.reason;
         } else {
           const category = getToolCategory(tool.name);
-          if (this.#alwaysAllowed.has(category)) {
-          } else if (this.#approve === void 0) {
+          if (this.#approve === void 0) {
             return this.#fail(tool.name, input, context.agent, "permission_denied", reason);
           } else {
             const decision = await this.#approve({ ...request, reason }, signal);
@@ -9220,9 +9222,11 @@ var SkillRegistry = class {
     for (const configuredRoot of roots) {
       const root = resolve13(configuredRoot);
       let entries;
+      let physicalRoot = root;
       try {
         const rootInfo = await lstat6(root);
         if (rootInfo.isSymbolicLink() || !rootInfo.isDirectory()) throw new Error("Skill root must be a real directory");
+        physicalRoot = await realpath4(root);
         entries = await readdir5(root, { withFileTypes: true });
       } catch (error) {
         if (isMissing2(error)) continue;
@@ -9235,12 +9239,12 @@ var SkillRegistry = class {
         try {
           if (entry2.isSymbolicLink()) throw new Error("Symlinked skill directories are not allowed");
           if (!entry2.isDirectory()) continue;
-          const physicalRoot = await realpath4(skillRoot);
-          if (!isWithin3(root, physicalRoot)) throw new Error("Skill directory escapes its registry root");
+          const physicalSkillRoot = await realpath4(skillRoot);
+          if (!isWithin3(physicalRoot, physicalSkillRoot)) throw new Error("Skill directory escapes its registry root");
           const skillFile = resolve13(skillRoot, "SKILL.md");
           const parsed = await readFrontmatterFile(
             skillFile,
-            physicalRoot,
+            physicalSkillRoot,
             this.#options.maxMetadataBytes,
             this.#options.openFile
           );
@@ -9251,7 +9255,7 @@ var SkillRegistry = class {
               name: parsed.name,
               description: parsed.description,
               source,
-              root: physicalRoot,
+              root: physicalSkillRoot,
               disableModelInvocation: parsed.disableModelInvocation
             }),
             skillFile
@@ -10664,19 +10668,20 @@ function createReadTool(workspace, options = {}) {
       if (startLine !== void 0 && endLine !== void 0 && endLine < startLine) {
         throw new Error(`endLine (${endLine}) must not be below startLine (${startLine})`);
       }
-      const contents = await readBounded2(path, maxBytes, signal, openFile2);
+      const rangeRequested = startLine !== void 0 || endLine !== void 0;
+      const windowBytes = rangeRequested ? Math.max(maxBytes, Math.min(info.size, MAX_READ_BYTES)) : maxBytes;
+      const contents = await readBounded2(path, windowBytes, signal, openFile2);
       if (isBinary(contents)) throw new Error("Cannot read binary file as text");
-      const textEnd = utf8SafeEnd(contents, maxBytes);
-      const truncated = contents.length > maxBytes;
+      const textEnd = utf8SafeEnd(contents, windowBytes);
+      const truncated = contents.length > windowBytes;
       const text = contents.subarray(0, textEnd).toString("utf8").replaceAll("\r\n", "\n");
       const lines = text.split("\n");
       if (lines.at(-1) === "") lines.pop();
       const availableLines = lines.length;
-      const rangeRequested = startLine !== void 0 || endLine !== void 0;
       const start = startLine ?? 1;
       const end = Math.min(endLine ?? availableLines, availableLines);
       if (rangeRequested && start > availableLines) {
-        throw new Error(`startLine (${start}) is beyond the ${availableLines} line${availableLines === 1 ? "" : "s"} available${truncated ? ` in this read (truncated at ${maxBytes} bytes)` : " in this file"}`);
+        throw new Error(`startLine (${start}) is beyond the ${availableLines} line${availableLines === 1 ? "" : "s"} available${truncated ? ` in this read (truncated at ${windowBytes} bytes)` : " in this file"}`);
       }
       if (rangeRequested && end < start) {
         throw new Error(`endLine (${endLine}) must not be below startLine (${start})`);
@@ -10692,13 +10697,13 @@ function createReadTool(workspace, options = {}) {
         record.ranges = mergeRange(record.ranges, start, end);
       }
       if (rangeRequested) {
-        const header = `[Lines ${start}-${end} of ${availableLines}${truncated ? ` visible in this read (truncated at ${maxBytes} bytes)` : ""}]`;
+        const header = `[Lines ${start}-${end} of ${availableLines}${truncated ? ` visible in this read (truncated at ${windowBytes} bytes)` : ""}]`;
         return `${header}
 
 ${lines.slice(start - 1, end).join("\n")}`;
       }
       if (truncated) {
-        return `[Truncated to ${maxBytes} bytes. File is ${info.size} bytes total. Request a higher maxBytes or read a specific range with startLine/endLine.]
+        return `[Truncated to ${windowBytes} bytes. File is ${info.size} bytes total. Request a higher maxBytes or read a specific range with startLine/endLine.]
 
 ${text}`;
       }
@@ -10746,6 +10751,7 @@ function createEditTool(workspace, options = {}) {
     paths: (input) => [guard.lexical(input.path)],
     execute: async (input, signal) => {
       abortIfNeeded(signal);
+      const displayPath = guard.lexical(input.path);
       const path = await guard.existing(input.path);
       const contents = await readText(path);
       const hasCRLF = contents.includes("\r\n");
@@ -10761,11 +10767,11 @@ function createEditTool(workspace, options = {}) {
       }
       const updatedLF = contentsLF.slice(0, first) + newTextLF + contentsLF.slice(first + oldTextLF.length);
       const updated = hasCRLF ? updatedLF.replace(/\n/g, "\r\n") : updatedLF;
-      await options.beforeCommit?.({ path, before: contents, after: updated, kind: "update" }, signal);
+      await options.beforeCommit?.({ path: displayPath, before: contents, after: updated, kind: "update" }, signal);
       await atomicWrite(path, updated, signal);
       return withToolPresentation(
-        { path, replacements: 1 },
-        buildFileChangePresentation(path, contents, updated, "update")
+        { path: displayPath, replacements: 1 },
+        buildFileChangePresentation(displayPath, contents, updated, "update")
       );
     }
   };
@@ -15783,4 +15789,3 @@ export {
   createExecutionEnvironment,
   createProductionRuntime
 };
-//# sourceMappingURL=chunk-XGCFBGBB.js.map

package/dist/{chunk-MVIMQEQT.js → chunk-HFR2WS6T.js}

@@ -689,4 +689,3 @@ export {
   setProjectProviderConfig,
   redactConfig
 };
-//# sourceMappingURL=chunk-MVIMQEQT.js.map

package/dist/{chunk-DM64TM4Z.js → chunk-KKIBYDJI.js}

@@ -121,4 +121,3 @@ export {
   staticTaskLines,
   statusPresentation
 };
-//# sourceMappingURL=chunk-DM64TM4Z.js.map

package/dist/{chunk-VOCZVFP7.js → chunk-N2S7USST.js}

@@ -150,4 +150,3 @@ export {
   resolveLanguage,
   languageInstruction
 };
-//# sourceMappingURL=chunk-VOCZVFP7.js.map

package/dist/{chunk-XS2JU6S3.js → chunk-NVLYFU6P.js}

@@ -5,12 +5,12 @@ import {
   getGraphemeSegmenter,
   isEnvTruthy,
   logError
-} from "./chunk-VOCZVFP7.js";
+} from "./chunk-N2S7USST.js";
 import {
   __commonJS,
   __require,
   __toESM
-} from "./chunk-JZ322RCJ.js";
+} from "./chunk-S32JRDZK.js";
 
 // node_modules/scheduler/cjs/scheduler.production.js
 var require_scheduler_production = __commonJS({
@@ -28001,7 +28001,7 @@ var styles_default = styles2;
 // src/claude-ink/reconciler.ts
 if (process.env.NODE_ENV === "development") {
   try {
-    void import("./devtools-SXJBSV2N.js");
+    void import("./devtools-4QTPKBKK.js");
   } catch (error) {
     if (error.code === "ERR_MODULE_NOT_FOUND") {
       console.warn(
@@ -35554,4 +35554,3 @@ react-reconciler/cjs/react-reconciler-constants.development.js:
    * LICENSE file in the root directory of this source tree.
    *)
 */
-//# sourceMappingURL=chunk-XS2JU6S3.js.map

package/dist/{chunk-JZ322RCJ.js → chunk-S32JRDZK.js}

@@ -37,4 +37,3 @@ export {
   __commonJS,
   __toESM
 };
-//# sourceMappingURL=chunk-JZ322RCJ.js.map

package/dist/{chunk-AHUOGT4I.js → chunk-Z3BW52MK.js}

@@ -4,7 +4,7 @@ import {
   message,
   redactErrorText,
   redactSecrets
-} from "./chunk-XGCFBGBB.js";
+} from "./chunk-3TYRDK34.js";
 
 // src/rpc/server.ts
 import { createInterface } from "readline";
@@ -243,4 +243,3 @@ export {
   TraceRecordSchema,
   TraceRecorder
 };
-//# sourceMappingURL=chunk-AHUOGT4I.js.map

package/dist/{claude-ink-ZL4UZMFY.js → claude-ink-WPWPEL5A.js}

@@ -10,9 +10,9 @@ import {
   useStdout,
   use_app_default,
   use_input_default
-} from "./chunk-XS2JU6S3.js";
-import "./chunk-VOCZVFP7.js";
-import "./chunk-JZ322RCJ.js";
+} from "./chunk-NVLYFU6P.js";
+import "./chunk-N2S7USST.js";
+import "./chunk-S32JRDZK.js";
 export {
   AlternateScreen,
   Box_default as Box,
@@ -24,4 +24,3 @@ export {
   use_input_default as useInput,
   useStdout
 };
-//# sourceMappingURL=claude-ink-ZL4UZMFY.js.map

package/dist/cli.js

@@ -3,10 +3,10 @@ import { createRequire } from "node:module"; const require = createRequire(impor
 import {
   FlavorRpcServer,
   TraceRecorder
-} from "./chunk-AHUOGT4I.js";
+} from "./chunk-Z3BW52MK.js";
 import {
   staticTaskLines
-} from "./chunk-DM64TM4Z.js";
+} from "./chunk-KKIBYDJI.js";
 import {
   DEFAULT_MAX_OUTPUT_BYTES,
   MEMORY_TYPES,
@@ -20,7 +20,7 @@ import {
   message,
   packageVersion,
   redactErrorText
-} from "./chunk-XGCFBGBB.js";
+} from "./chunk-3TYRDK34.js";
 import {
   McpServerConfigSchema,
   McpServerNameSchema,
@@ -29,9 +29,9 @@ import {
   readRecoverableFile,
   setProjectSkillDisabled,
   updateProtectedFile
-} from "./chunk-MVIMQEQT.js";
-import "./chunk-VOCZVFP7.js";
-import "./chunk-JZ322RCJ.js";
+} from "./chunk-HFR2WS6T.js";
+import "./chunk-N2S7USST.js";
+import "./chunk-S32JRDZK.js";
 
 // src/cli.tsx
 import { realpathSync } from "fs";
@@ -669,7 +669,7 @@ async function runEvaluationFile(path, outputPath) {
     })),
     ...parsed.maxTokens === void 0 ? {} : { maxTokens: parsed.maxTokens }
   };
-  const configured = await import("./load-WQGNTCHC.js").then(({ loadConfig: loadConfig2 }) => loadConfig2({ cwd: workspace, home: process.env.USERPROFILE ?? process.env.HOME ?? workspace }));
+  const configured = await import("./load-XC5JYYBQ.js").then(({ loadConfig: loadConfig2 }) => loadConfig2({ cwd: workspace, home: process.env.USERPROFILE ?? process.env.HOME ?? workspace }));
   const environment = createExecutionEnvironment(workspace, configured.config.execution) ?? new LocalExecutionEnvironment();
   let report;
   try {
@@ -769,9 +769,9 @@ function createProgram() {
     }
     setInteractiveProcessTitle();
     const [{ render, AlternateScreen }, { createElement }, { App }] = await Promise.all([
-      import("./claude-ink-ZL4UZMFY.js"),
+      import("./claude-ink-WPWPEL5A.js"),
       import("react"),
-      import("./app-SCHNJSXI.js")
+      import("./app-3DXEGSS7.js")
     ]);
     const instance = await render(createElement(
       AlternateScreen,
@@ -912,4 +912,3 @@ export {
   runRpcMode,
   setInteractiveProcessTitle
 };
-//# sourceMappingURL=cli.js.map