flavor-code 1.4.2 → 1.4.3-beta.2

package/dist/plugin-worker-entry.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
 
 // src/plugins/plugin-worker-entry.ts
 import { readFile, realpath } from "fs/promises";

package/dist/production-6DIZ6YLQ.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  ApprovalBridge,
+  DEFAULT_SHUTDOWN_STEP_TIMEOUT_MS,
+  compileHeadlessToolAllowlist,
+  createProductionRuntime,
+  createPromptEnvironment,
+  matchesHeadlessAllowlist,
+  runGoalSession,
+  runResumeGoalSession
+} from "./chunk-IDJAHEG6.js";
+import "./chunk-TIEOVQW6.js";
+import "./chunk-OKHV7CTB.js";
+import "./chunk-K7UGGWJV.js";
+import "./chunk-IU3UBETC.js";
+import "./chunk-PZ5NKRVA.js";
+import "./chunk-6F66UXBI.js";
+import "./chunk-3UX2CGDW.js";
+import "./chunk-7Y64WNBB.js";
+import "./chunk-CVP5OUHD.js";
+import "./chunk-3563SW4X.js";
+import "./chunk-RBAZLFKB.js";
+import "./chunk-FAJ6YDZK.js";
+import "./chunk-WLZUAVVU.js";
+import "./chunk-RV3EXUXM.js";
+import "./chunk-IQEEFDEE.js";
+import "./chunk-GTFP2R5I.js";
+import "./chunk-HGTCIHWA.js";
+import "./chunk-SJUIIHIA.js";
+import "./chunk-BDX777JR.js";
+import "./chunk-6X62CGMA.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-KRWWCVXA.js";
+import "./chunk-X442CJJH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  ApprovalBridge,
+  DEFAULT_SHUTDOWN_STEP_TIMEOUT_MS,
+  compileHeadlessToolAllowlist,
+  createProductionRuntime,
+  createPromptEnvironment,
+  matchesHeadlessAllowlist,
+  runGoalSession,
+  runResumeGoalSession
+};

package/dist/production.d.ts

@@ -1,7 +1,7 @@
 import type { AgentEvent } from "./agent/types.js";
 import { GoalOrchestrator } from "./goal/orchestrator.js";
 import { type McpClientFactory } from "./mcp/client.js";
-import type { PermissionProfile, PermissionRequest } from "./permissions/engine.js";
+import type { PermissionMode, PermissionProfile, PermissionRequest } from "./permissions/engine.js";
 import { type PromptEnvironment } from "./prompts/system.js";
 import type { ApprovalDecision } from "./tools/runtime.js";
 import { type MemoryRestartContinuation } from "./utils/memory-restart.js";
@@ -35,6 +35,12 @@ export interface ProductionRuntimeOptions {
     onToolsChange?(): void;
     /** Non-interactive callers must deny requests instead of waiting for input. */
     approvalPolicy?: "prompt" | "deny";
+    /** Override the resolved permission mode for this runtime (CLI --permission-mode). Takes precedence over recovered and configured modes. */
+    permissionMode?: PermissionMode;
+    /** Override the main model for this runtime (CLI --model), validated against the registry and any PKCE allowlist. */
+    modelOverride?: string;
+    /** Tool patterns auto-approved when approvalPolicy is "deny" (CLI --allowed-tools), e.g. "Read", "mcp__docs__*", "Shell(npm test:*)". */
+    headlessToolAllowlist?: readonly string[];
     /** Allow a protocol host to resolve tool approvals without enabling other interactive UI bridges. */
     rpcToolApprovals?: boolean;
     /** Optional pre-commit gate used by protocol hosts to stream a proposed text write before it reaches disk. */
@@ -118,5 +124,26 @@ export interface MemoryRestartRotation {
     /** Retention census holders reported by the major in-memory owners. */
     holders?: Record<string, RotationCensusHolder>;
 }
+interface HeadlessAllowlistEntry {
+    /** Exact tool name match. */
+    tool?: string;
+    /** `pattern*` matches any tool name starting with the pattern. */
+    prefix?: string;
+    /** `Shell(prefix:*)` additionally requires the raw shell command to start with prefix. */
+    command?: string;
+}
+/**
+ * Compiles CLI --allowed-tools patterns for headless runs. Supported forms:
+ * `Read` (exact tool), `mcp__docs__*` (name prefix), `Shell(npm test:*)`
+ * (shell command prefix). Malformed patterns are ignored.
+ */
+export declare function compileHeadlessToolAllowlist(patterns: readonly string[]): readonly HeadlessAllowlistEntry[];
+/**
+ * Decides whether an "ask" permission request is pre-approved by the headless
+ * allowlist. Monotonic denials from the permission engine never reach here,
+ * and wrapped/opaque shell commands are never auto-approved.
+ */
+export declare function matchesHeadlessAllowlist(entries: readonly HeadlessAllowlistEntry[], request: Pick<PermissionRequest, "tool" | "command" | "args">): boolean;
 export declare function runGoalSession(orchestrator: GoalOrchestrator, goal: string, signal: AbortSignal): AsyncIterable<AgentEvent>;
 export declare function runResumeGoalSession(orchestrator: GoalOrchestrator, goalId: string, signal: AbortSignal): AsyncIterable<AgentEvent>;
+export {};

package/dist/project-3QXE22TG.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  initializeFlavor,
+  inspectProject
+} from "./chunk-OKHV7CTB.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  initializeFlavor,
+  inspectProject
+};

package/dist/react-M6JGXSJZ.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  require_react
+} from "./chunk-PULWAH6E.js";
+import "./chunk-ZKKVSR37.js";
+export default require_react();

package/dist/recorder-FAGJJH3N.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  TraceRecorder
+} from "./chunk-4TMLXZVZ.js";
+import "./chunk-WLZUAVVU.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  TraceRecorder
+};

package/dist/sdk/index.js

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
-import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  FlavorRpcServer
+} from "../chunk-6URQ7FIF.js";
 import {
-  FlavorRpcServer,
   TraceRecordSchema,
   TraceRecorder
-} from "../chunk-KMBDK4SN.js";
+} from "../chunk-4TMLXZVZ.js";
 import {
   AgentMessageQueue,
   DockerExecutionEnvironment,
@@ -13,11 +15,31 @@ import {
   WorkspaceCheckpointStore,
   buildDockerInvocation,
   createProductionRuntime
-} from "../chunk-QKND3FX7.js";
-import "../chunk-N5MXHJKD.js";
-import "../chunk-7YFHRORG.js";
-import "../chunk-B23V72YR.js";
-import "../chunk-S32JRDZK.js";
+} from "../chunk-IDJAHEG6.js";
+import "../chunk-TIEOVQW6.js";
+import "../chunk-OKHV7CTB.js";
+import "../chunk-K7UGGWJV.js";
+import "../chunk-IU3UBETC.js";
+import "../chunk-PZ5NKRVA.js";
+import "../chunk-6F66UXBI.js";
+import "../chunk-3UX2CGDW.js";
+import "../chunk-7Y64WNBB.js";
+import "../chunk-CVP5OUHD.js";
+import "../chunk-3563SW4X.js";
+import "../chunk-RBAZLFKB.js";
+import "../chunk-FAJ6YDZK.js";
+import "../chunk-WLZUAVVU.js";
+import "../chunk-RV3EXUXM.js";
+import "../chunk-IQEEFDEE.js";
+import "../chunk-GTFP2R5I.js";
+import "../chunk-HGTCIHWA.js";
+import "../chunk-SJUIIHIA.js";
+import "../chunk-BDX777JR.js";
+import "../chunk-6X62CGMA.js";
+import "../chunk-EWD7FWTH.js";
+import "../chunk-KRWWCVXA.js";
+import "../chunk-X442CJJH.js";
+import "../chunk-ZKKVSR37.js";
 
 // src/trace/replay.ts
 import { readFile } from "fs/promises";

package/dist/server-2KLKPHPL.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  FlavorRpcServer
+} from "./chunk-6URQ7FIF.js";
+import "./chunk-BDX777JR.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  FlavorRpcServer
+};

package/dist/session/store.d.ts

@@ -109,6 +109,7 @@ export declare const SessionDocumentSchema: z.ZodObject<{
                 cacheBreakpoint: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strict>>;
             sources: z.ZodRecord<z.ZodString, z.ZodString>;
+            pinnedSources: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
             stableSourceHash: z.ZodString;
         }, z.core.$strict>>;
         visibilityLog: z.ZodOptional<z.ZodArray<z.ZodObject<{

package/dist/store-ZIHN6363.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  DEFAULT_MAX_SESSION_BYTES,
+  SESSION_VERSION,
+  SessionDocumentSchema,
+  SessionStore
+} from "./chunk-SJUIIHIA.js";
+import "./chunk-BDX777JR.js";
+import "./chunk-6X62CGMA.js";
+import "./chunk-EWD7FWTH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  DEFAULT_MAX_SESSION_BYTES,
+  SESSION_VERSION,
+  SessionDocumentSchema,
+  SessionStore
+};

package/dist/usage-summary-G5FBOJLK.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import {
+  formatUsageSummary,
+  parseUsageEntries,
+  summarizeUsage
+} from "./chunk-X442CJJH.js";
+import "./chunk-ZKKVSR37.js";
+export {
+  formatUsageSummary,
+  parseUsageEntries,
+  summarizeUsage
+};

package/dist/write-stream-CGD57URC.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+import { createRequire as createFlavorRequire } from "node:module"; const require = createFlavorRequire(import.meta.url);
+import "./chunk-ZKKVSR37.js";
+
+// src/rpc/write-stream.ts
+import { randomUUID } from "crypto";
+var RpcWriteStreamBridge = class {
+  #output;
+  #pending;
+  constructor(output) {
+    this.#output = output;
+  }
+  get pendingId() {
+    return this.#pending?.id;
+  }
+  async preview(proposal, signal) {
+    if (this.#pending !== void 0) throw new Error("Another streamed write is still awaiting commit");
+    if (signal.aborted) throw signal.reason;
+    const id = randomUUID();
+    this.#output({
+      type: "write-start",
+      id,
+      path: proposal.path,
+      before: proposal.before,
+      totalBytes: Buffer.byteLength(proposal.after)
+    });
+    for (const delta of streamChunks(proposal.after)) this.#output({ type: "write-delta", id, delta });
+    this.#output({ type: "write-ready", id });
+    await new Promise((resolve, reject) => {
+      const onAbort = () => {
+        this.#output({ type: "write-cancelled", id });
+        this.#clear(id);
+        reject(signal.reason);
+      };
+      signal.addEventListener("abort", onAbort, { once: true });
+      this.#pending = {
+        id,
+        resolve,
+        reject,
+        removeAbort: () => signal.removeEventListener("abort", onAbort)
+      };
+    });
+  }
+  commit(id) {
+    const pending = this.#pending;
+    if (pending === void 0 || pending.id !== id) throw new Error("Streamed write is no longer awaiting commit");
+    pending.removeAbort();
+    this.#pending = void 0;
+    pending.resolve();
+  }
+  dispose() {
+    const pending = this.#pending;
+    if (pending === void 0) return;
+    pending.removeAbort();
+    this.#pending = void 0;
+    pending.reject(new Error("Streamed write bridge disposed"));
+  }
+  #clear(id) {
+    if (this.#pending?.id !== id) return;
+    this.#pending.removeAbort();
+    this.#pending = void 0;
+  }
+};
+function streamChunks(content, maxChars = 2048) {
+  if (!content) return [];
+  const chunks = [];
+  for (const line of content.match(/[^\n]*\n|[^\n]+$/g) ?? []) {
+    for (let offset = 0; offset < line.length; offset += maxChars) {
+      chunks.push(line.slice(offset, offset + maxChars));
+    }
+  }
+  return chunks;
+}
+export {
+  RpcWriteStreamBridge,
+  streamChunks
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flavor-code",
-  "version": "1.4.2",
+  "version": "1.4.3-beta.2",
   "author": "YachuanWzh",
   "type": "module",
   "publishConfig": {

package/dist/chunk-B23V72YR.js

@@ -1,170 +0,0 @@
-#!/usr/bin/env node
-import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
-
-// src/utils/execFileNoThrow.ts
-import { execFile } from "child_process";
-function execFileNoThrow(file, args, options = {}) {
-  return new Promise((resolve2) => {
-    const child = execFile(file, args, {
-      timeout: options.timeout,
-      maxBuffer: options.maxBuffer,
-      cwd: options.useCwd === false ? void 0 : process.cwd(),
-      env: options.env,
-      encoding: "utf8",
-      windowsHide: true,
-      ...options.signal === void 0 ? {} : { signal: options.signal }
-    }, (error, stdout, stderr) => {
-      resolve2({
-        stdout,
-        stderr,
-        code: typeof error?.code === "number" ? error.code : error ? 1 : 0,
-        ...error === null ? {} : { error: error.message }
-      });
-    });
-    if (options.input !== void 0) child.stdin?.end(options.input);
-  });
-}
-
-// src/utils/log.ts
-import { appendFile, mkdir } from "fs/promises";
-import { dirname, join, resolve } from "path";
-var pending = Promise.resolve();
-var usagePending = Promise.resolve();
-function logError(error) {
-  if (process.env.DEBUG) process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}
-`);
-}
-function usageLogPath() {
-  return process.env.FLAVOR_USAGE_FILE ?? join(process.cwd(), ".flavor", "usage.jsonl");
-}
-var usageSessionId = "unknown";
-var truncateOnNextAppend = false;
-function setUsageSession(sessionId) {
-  usageSessionId = sessionId;
-  truncateOnNextAppend = true;
-}
-function currentUsageSession() {
-  return usageSessionId;
-}
-async function appendUsageLog(line) {
-  usagePending = usagePending.catch(() => void 0).then(async () => {
-    try {
-      const path = usageLogPath();
-      await mkdir(dirname(path), { recursive: true, mode: 448 });
-      const flag = truncateOnNextAppend ? "w" : "a";
-      truncateOnNextAppend = false;
-      await appendFile(path, `${line}
-`, { encoding: "utf8", mode: 384, flag });
-    } catch {
-    }
-  });
-  return usagePending;
-}
-var AuditLogger = class {
-  #path;
-  #closed = false;
-  constructor(workspace) {
-    this.#path = join(resolve(workspace), ".flavor", "audit.jsonl");
-  }
-  get path() {
-    return this.#path;
-  }
-  async append(entry) {
-    if (this.#closed) return;
-    const line = `${JSON.stringify(entry)}
-`;
-    pending = pending.catch(() => void 0).then(() => this.#write(line));
-    return pending;
-  }
-  async #write(line) {
-    try {
-      await mkdir(dirname(this.#path), { recursive: true, mode: 448 });
-      await appendFile(this.#path, line, { encoding: "utf8", mode: 384, flag: "a" });
-    } catch {
-    }
-  }
-  close() {
-    this.#closed = true;
-  }
-};
-
-// src/utils/semver.ts
-import { gt as semverGt, gte as semverGte, valid as semverValid } from "semver";
-function gte(a, b) {
-  return semverGte(a, b, { loose: true });
-}
-function gt(a, b) {
-  return semverGt(a, b, { loose: true });
-}
-function isValidVersion(value) {
-  return semverValid(value, { loose: true }) !== null;
-}
-
-// src/utils/intl.ts
-var graphemeSegmenter;
-function getGraphemeSegmenter() {
-  return graphemeSegmenter ??= new Intl.Segmenter(void 0, { granularity: "grapheme" });
-}
-function detectSystemLocale() {
-  try {
-    const locale = Intl.DateTimeFormat().resolvedOptions().locale;
-    if (locale && locale.length >= 2) return locale;
-  } catch {
-  }
-  for (const key of ["LANG", "LC_ALL", "LC_MESSAGES"]) {
-    const raw = process.env[key];
-    if (!raw || raw === "C" || raw === "POSIX") continue;
-    const match = raw.match(/^([a-z]{2})_([A-Z]{2})(?:[.@].*)?$/);
-    if (match) return `${match[1]}-${match[2]}`;
-  }
-  return "zh-CN";
-}
-function resolveLanguage(explicit) {
-  if (explicit !== void 0) return explicit;
-  return detectSystemLocale();
-}
-function languageInstruction(language) {
-  const label = LANG_LABELS.get(language) ?? language;
-  return `Always respond in ${label}. Do NOT reply in any other language unless the user explicitly asks for it.`;
-}
-var LANG_LABELS = /* @__PURE__ */ new Map([
-  ["zh-CN", "Simplified Chinese (zh-CN)"],
-  ["zh-TW", "Traditional Chinese (zh-TW)"],
-  ["zh-HK", "Traditional Chinese (zh-HK)"],
-  ["ja-JP", "Japanese (ja-JP)"],
-  ["ko-KR", "Korean (ko-KR)"],
-  ["en-US", "English (en-US)"],
-  ["en-GB", "English (en-GB)"],
-  ["fr-FR", "French (fr-FR)"],
-  ["de-DE", "German (de-DE)"],
-  ["es-ES", "Spanish (es-ES)"],
-  ["pt-BR", "Portuguese (pt-BR)"],
-  ["ru-RU", "Russian (ru-RU)"],
-  ["ar-SA", "Arabic (ar-SA)"],
-  ["vi-VN", "Vietnamese (vi-VN)"],
-  ["th-TH", "Thai (th-TH)"],
-  ["id-ID", "Indonesian (id-ID)"]
-]);
-
-// src/utils/envUtils.ts
-function isEnvTruthy(value) {
-  if (typeof value === "boolean") return value;
-  return value === "1" || value?.toLowerCase() === "true" || value?.toLowerCase() === "yes";
-}
-
-export {
-  execFileNoThrow,
-  isEnvTruthy,
-  logError,
-  usageLogPath,
-  setUsageSession,
-  currentUsageSession,
-  appendUsageLog,
-  AuditLogger,
-  gte,
-  gt,
-  isValidVersion,
-  getGraphemeSegmenter,
-  resolveLanguage,
-  languageInstruction
-};