flavor-code 1.4.1 → 1.4.3-beta.2

package/dist/plugin-worker-entry.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
 
 // src/plugins/plugin-worker-entry.ts
 import { readFile, realpath } from "fs/promises";

package/dist/production-6DIZ6YLQ.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  ApprovalBridge,
+  DEFAULT_SHUTDOWN_STEP_TIMEOUT_MS,
+  compileHeadlessToolAllowlist,
+  createProductionRuntime,
+  createPromptEnvironment,
+  matchesHeadlessAllowlist,
+  runGoalSession,
+  runResumeGoalSession
+} from "./chunk-IDJAHEG6.js";
+import "./chunk-TIEOVQW6.js";
+import "./chunk-OKHV7CTB.js";
+import "./chunk-K7UGGWJV.js";
+import "./chunk-IU3UBETC.js";
+import "./chunk-PZ5NKRVA.js";
+import "./chunk-6F66UXBI.js";
+import "./chunk-3UX2CGDW.js";
+import "./chunk-7Y64WNBB.js";
+import "./chunk-CVP5OUHD.js";
+import "./chunk-3563SW4X.js";
+import "./chunk-RBAZLFKB.js";
+import "./chunk-FAJ6YDZK.js";
+import "./chunk-WLZUAVVU.js";
+import "./chunk-RV3EXUXM.js";
+import "./chunk-IQEEFDEE.js";
+import "./chunk-GTFP2R5I.js";
+import "./chunk-HGTCIHWA.js";
+import "./chunk-SJUIIHIA.js";
+import "./chunk-BDX777JR.js";
+import "./chunk-6X62CGMA.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-KRWWCVXA.js";
+import "./chunk-X442CJJH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  ApprovalBridge,
+  DEFAULT_SHUTDOWN_STEP_TIMEOUT_MS,
+  compileHeadlessToolAllowlist,
+  createProductionRuntime,
+  createPromptEnvironment,
+  matchesHeadlessAllowlist,
+  runGoalSession,
+  runResumeGoalSession
+};

package/dist/production.d.ts

@@ -1,7 +1,7 @@
 import type { AgentEvent } from "./agent/types.js";
 import { GoalOrchestrator } from "./goal/orchestrator.js";
 import { type McpClientFactory } from "./mcp/client.js";
-import type { PermissionProfile, PermissionRequest } from "./permissions/engine.js";
+import type { PermissionMode, PermissionProfile, PermissionRequest } from "./permissions/engine.js";
 import { type PromptEnvironment } from "./prompts/system.js";
 import type { ApprovalDecision } from "./tools/runtime.js";
 import { type MemoryRestartContinuation } from "./utils/memory-restart.js";
@@ -35,6 +35,12 @@ export interface ProductionRuntimeOptions {
     onToolsChange?(): void;
     /** Non-interactive callers must deny requests instead of waiting for input. */
     approvalPolicy?: "prompt" | "deny";
+    /** Override the resolved permission mode for this runtime (CLI --permission-mode). Takes precedence over recovered and configured modes. */
+    permissionMode?: PermissionMode;
+    /** Override the main model for this runtime (CLI --model), validated against the registry and any PKCE allowlist. */
+    modelOverride?: string;
+    /** Tool patterns auto-approved when approvalPolicy is "deny" (CLI --allowed-tools), e.g. "Read", "mcp__docs__*", "Shell(npm test:*)". */
+    headlessToolAllowlist?: readonly string[];
     /** Allow a protocol host to resolve tool approvals without enabling other interactive UI bridges. */
     rpcToolApprovals?: boolean;
     /** Optional pre-commit gate used by protocol hosts to stream a proposed text write before it reaches disk. */
@@ -118,5 +124,26 @@ export interface MemoryRestartRotation {
     /** Retention census holders reported by the major in-memory owners. */
     holders?: Record<string, RotationCensusHolder>;
 }
+interface HeadlessAllowlistEntry {
+    /** Exact tool name match. */
+    tool?: string;
+    /** `pattern*` matches any tool name starting with the pattern. */
+    prefix?: string;
+    /** `Shell(prefix:*)` additionally requires the raw shell command to start with prefix. */
+    command?: string;
+}
+/**
+ * Compiles CLI --allowed-tools patterns for headless runs. Supported forms:
+ * `Read` (exact tool), `mcp__docs__*` (name prefix), `Shell(npm test:*)`
+ * (shell command prefix). Malformed patterns are ignored.
+ */
+export declare function compileHeadlessToolAllowlist(patterns: readonly string[]): readonly HeadlessAllowlistEntry[];
+/**
+ * Decides whether an "ask" permission request is pre-approved by the headless
+ * allowlist. Monotonic denials from the permission engine never reach here,
+ * and wrapped/opaque shell commands are never auto-approved.
+ */
+export declare function matchesHeadlessAllowlist(entries: readonly HeadlessAllowlistEntry[], request: Pick<PermissionRequest, "tool" | "command" | "args">): boolean;
 export declare function runGoalSession(orchestrator: GoalOrchestrator, goal: string, signal: AbortSignal): AsyncIterable<AgentEvent>;
 export declare function runResumeGoalSession(orchestrator: GoalOrchestrator, goalId: string, signal: AbortSignal): AsyncIterable<AgentEvent>;
+export {};

package/dist/project-3QXE22TG.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  initializeFlavor,
+  inspectProject
+} from "./chunk-OKHV7CTB.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  initializeFlavor,
+  inspectProject
+};

package/dist/react-M6JGXSJZ.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  require_react
+} from "./chunk-PULWAH6E.js";
+import "./chunk-ZKKVSR37.js";
+export default require_react();

package/dist/recorder-FAGJJH3N.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  TraceRecorder
+} from "./chunk-4TMLXZVZ.js";
+import "./chunk-WLZUAVVU.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  TraceRecorder
+};

package/dist/sdk/index.js

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
-import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  FlavorRpcServer
+} from "../chunk-6URQ7FIF.js";
 import {
-  FlavorRpcServer,
   TraceRecordSchema,
   TraceRecorder
-} from "../chunk-FAORPP4F.js";
+} from "../chunk-4TMLXZVZ.js";
 import {
   AgentMessageQueue,
   DockerExecutionEnvironment,
@@ -13,11 +15,31 @@ import {
   WorkspaceCheckpointStore,
   buildDockerInvocation,
   createProductionRuntime
-} from "../chunk-O2PC44GY.js";
-import "../chunk-N5MXHJKD.js";
-import "../chunk-7YFHRORG.js";
-import "../chunk-ZJCAQXA7.js";
-import "../chunk-S32JRDZK.js";
+} from "../chunk-IDJAHEG6.js";
+import "../chunk-TIEOVQW6.js";
+import "../chunk-OKHV7CTB.js";
+import "../chunk-K7UGGWJV.js";
+import "../chunk-IU3UBETC.js";
+import "../chunk-PZ5NKRVA.js";
+import "../chunk-6F66UXBI.js";
+import "../chunk-3UX2CGDW.js";
+import "../chunk-7Y64WNBB.js";
+import "../chunk-CVP5OUHD.js";
+import "../chunk-3563SW4X.js";
+import "../chunk-RBAZLFKB.js";
+import "../chunk-FAJ6YDZK.js";
+import "../chunk-WLZUAVVU.js";
+import "../chunk-RV3EXUXM.js";
+import "../chunk-IQEEFDEE.js";
+import "../chunk-GTFP2R5I.js";
+import "../chunk-HGTCIHWA.js";
+import "../chunk-SJUIIHIA.js";
+import "../chunk-BDX777JR.js";
+import "../chunk-6X62CGMA.js";
+import "../chunk-EWD7FWTH.js";
+import "../chunk-KRWWCVXA.js";
+import "../chunk-X442CJJH.js";
+import "../chunk-ZKKVSR37.js";
 
 // src/trace/replay.ts
 import { readFile } from "fs/promises";

package/dist/server-2KLKPHPL.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  FlavorRpcServer
+} from "./chunk-6URQ7FIF.js";
+import "./chunk-BDX777JR.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  FlavorRpcServer
+};

package/dist/session/store.d.ts

@@ -109,6 +109,7 @@ export declare const SessionDocumentSchema: z.ZodObject<{
                 cacheBreakpoint: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strict>>;
             sources: z.ZodRecord<z.ZodString, z.ZodString>;
+            pinnedSources: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             stableSourceHash: z.ZodString;
         }, z.core.$strict>>;
         visibilityLog: z.ZodOptional<z.ZodArray<z.ZodObject<{

package/dist/store-ZIHN6363.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  DEFAULT_MAX_SESSION_BYTES,
+  SESSION_VERSION,
+  SessionDocumentSchema,
+  SessionStore
+} from "./chunk-SJUIIHIA.js";
+import "./chunk-BDX777JR.js";
+import "./chunk-6X62CGMA.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  DEFAULT_MAX_SESSION_BYTES,
+  SESSION_VERSION,
+  SessionDocumentSchema,
+  SessionStore
+};

package/dist/ui/commands.d.ts

@@ -1,4 +1,4 @@
-export declare const MVP_COMMANDS: readonly ["model", "init", "config", "login", "logout", "permissions", "skills", "plugins", "hooks", "tasks", "finish", "compact", "clear", "help", "exit", "audit", "usage", "doctor", "loop", "goal", "evolve", "mcp", "commit", "review", "explain", "ide", "memory", "remember", "forget", "forget-cold", "checkpoint", "tree", "rewind", "unrevert", "fork", "pals", "chat", "co-work", "tool"];
+export declare const MVP_COMMANDS: readonly ["model", "init", "config", "login", "logout", "permissions", "skills", "plugins", "hooks", "tasks", "finish", "compact", "clear", "paste-image", "help", "exit", "audit", "usage", "doctor", "loop", "goal", "evolve", "mcp", "commit", "review", "explain", "ide", "memory", "remember", "forget", "forget-cold", "checkpoint", "tree", "rewind", "unrevert", "fork", "pals", "chat", "co-work", "tool"];
 export declare const COMMAND_DESCRIPTIONS: Record<(typeof MVP_COMMANDS)[number], string>;
 export type PermissionCommandMode = PermissionMode;
 export type ModelRole = "main" | "subagent";
@@ -102,10 +102,6 @@ export type SlashCommand = {
 } | {
     name: "evolve";
     args: string[];
-} | {
-    name: "unknown";
-    input: string;
-    suggestions: string[];
 } | {
     name: "invalid";
     command: string;

package/dist/usage-summary-G5FBOJLK.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  formatUsageSummary,
+  parseUsageEntries,
+  summarizeUsage
+} from "./chunk-X442CJJH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  formatUsageSummary,
+  parseUsageEntries,
+  summarizeUsage
+};

package/dist/utils/execFileNoThrow.d.ts

@@ -1,5 +1,6 @@
 export interface ExecFileNoThrowOptions {
     timeout?: number;
+    maxBuffer?: number;
     useCwd?: boolean;
     env?: NodeJS.ProcessEnv;
     stdin?: "ignore" | "inherit" | "pipe";

package/dist/write-stream-CGD57URC.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import "./chunk-ZKKVSR37.js";
+
+// src/rpc/write-stream.ts
+import { randomUUID } from "crypto";
+var RpcWriteStreamBridge = class {
+  #output;
+  #pending;
+  constructor(output) {
+    this.#output = output;
+  }
+  get pendingId() {
+    return this.#pending?.id;
+  }
+  async preview(proposal, signal) {
+    if (this.#pending !== void 0) throw new Error("Another streamed write is still awaiting commit");
+    if (signal.aborted) throw signal.reason;
+    const id = randomUUID();
+    this.#output({
+      type: "write-start",
+      id,
+      path: proposal.path,
+      before: proposal.before,
+      totalBytes: Buffer.byteLength(proposal.after)
+    });
+    for (const delta of streamChunks(proposal.after)) this.#output({ type: "write-delta", id, delta });
+    this.#output({ type: "write-ready", id });
+    await new Promise((resolve, reject) => {
+      const onAbort = () => {
+        this.#output({ type: "write-cancelled", id });
+        this.#clear(id);
+        reject(signal.reason);
+      };
+      signal.addEventListener("abort", onAbort, { once: true });
+      this.#pending = {
+        id,
+        resolve,
+        reject,
+        removeAbort: () => signal.removeEventListener("abort", onAbort)
+      };
+    });
+  }
+  commit(id) {
+    const pending = this.#pending;
+    if (pending === void 0 || pending.id !== id) throw new Error("Streamed write is no longer awaiting commit");
+    pending.removeAbort();
+    this.#pending = void 0;
+    pending.resolve();
+  }
+  dispose() {
+    const pending = this.#pending;
+    if (pending === void 0) return;
+    pending.removeAbort();
+    this.#pending = void 0;
+    pending.reject(new Error("Streamed write bridge disposed"));
+  }
+  #clear(id) {
+    if (this.#pending?.id !== id) return;
+    this.#pending.removeAbort();
+    this.#pending = void 0;
+  }
+};
+function streamChunks(content, maxChars = 2048) {
+  if (!content) return [];
+  const chunks = [];
+  for (const line of content.match(/[^\n]*\n|[^\n]+$/g) ?? []) {
+    for (let offset = 0; offset < line.length; offset += maxChars) {
+      chunks.push(line.slice(offset, offset + maxChars));
+    }
+  }
+  return chunks;
+}
+export {
+  RpcWriteStreamBridge,
+  streamChunks
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flavor-code",
-  "version": "1.4.1",
+  "version": "1.4.3-beta.2",
   "author": "YachuanWzh",
   "type": "module",
   "publishConfig": {