friend-assistant 0.1.15 → 0.1.16

package/README.md

@@ -131,6 +131,7 @@ Connectors (Gmail, Chrome control, any MCP service) are managed inside the app,
 | Key | What it is |
 |---|---|
 | `provider` | Which model answers: `claude` (API key), `claude-code` (your subscription), `ollama` (this PC) or `openai` (any OpenAI-compatible server, such as OmniRoute). |
+| `approvals` | How much Friend asks before acting: `manual` (asks every time, the default), `edits` (file work and the sandboxed code runner go ahead) or `auto` (commands and tools go ahead too). Risky commands (they need your PIN), the camera, adding connectors or plugins, and Friend's own data folder always ask, in every mode. The AI cannot change this. Easier: Esc → Settings → Approvals. |
 | `ownerName` | Your name, shown on the profile badge (a shield in the corner) while you are signed in; it shows whoever Friend just recognized when they speak. Empty shows "Owner". |
 | `apiKey`, `model` | The Anthropic API key and the Claude model used with it. |
 | `claudeCode.model`, `claudeCode.command`, `claudeCode.fallback` | The subscription route: model (`sonnet`, `haiku`, `opus`), the command that starts Claude Code, and `ollama` or `none` for what to use when Claude is unavailable. |

package/dist/BUILD.json

@@ -1,5 +1,5 @@
 {
   "name": "friend-assistant",
-  "version": "0.1.15",
-  "builtAt": "2026-10-10T11:42:54.414Z"
+  "version": "0.1.16",
+  "builtAt": "2026-10-10T11:58:33.881Z"
 }

package/dist/friend.mjs

@@ -375,11 +375,21 @@ function matcherMatches(m, args) {
 // ../server/src/policy/engine.ts
 var ASK_EVERY_TIME = /* @__PURE__ */ new Set(["camera.snap"]);
 var MEMBER_TOOLS = /* @__PURE__ */ new Set(["weather.get", "stage.scene", "stage.show", "stage.update", "stage.hide", "stage.presence", "stage.mood"]);
+var EDIT_TOOLS = /* @__PURE__ */ new Set(["fs.list", "fs.read", "fs.write", "code.run"]);
+var isAdminTool = (tool) => tool.startsWith("connectors.") || tool.startsWith("plugins.");
 var PolicyEngine = class {
-  rules;
-  constructor(db, _config) {
+  constructor(db, config) {
+    this.config = config;
     this.rules = new RuleStore(db);
   }
+  config;
+  rules;
+  /** Whether the approval mode lets this tool go ahead without a card. Risky (T3) actions never get here. */
+  modeAllows(tool, protectedPath) {
+    if (protectedPath || isAdminTool(tool)) return false;
+    const mode = this.config.approvals;
+    return mode === "auto" || mode === "edits" && EDIT_TOOLS.has(tool);
+  }
   decide(input) {
     if (input.trust === "guest") return input.tool === "stage.presence" ? "allow" : "deny";
     if (input.trust === "member") return MEMBER_TOOLS.has(input.tool) ? "allow" : "deny";
@@ -391,7 +401,8 @@ var PolicyEngine = class {
         return "allow";
       case "T2":
         if (ASK_EVERY_TIME.has(input.tool)) return "ask";
-        return this.rules.matches(input.tool, input.args) ? "allow" : "ask";
+        if (this.rules.matches(input.tool, input.args)) return "allow";
+        return this.modeAllows(input.tool, input.protectedPath) ? "allow" : "ask";
       case "T3":
         return "ask_with_pin";
     }
@@ -1904,7 +1915,8 @@ var Agent = class {
     if (call.name === "shell.run") tier = classifyShell(String(args.command), d.config.destructivePatterns);
     const p = pathArg(call.name, args);
     const insideRoots = p === void 0 ? true : lexicalInsideRoots(p, d.config.roots);
-    const decision = d.policy.decide({ tool: call.name, baseTier: tier, args, trust: ctx.trust, insideRoots });
+    const protectedPath = p !== void 0 && lexicalInsideRoots(p, [d.config.dataDir]);
+    const decision = d.policy.decide({ tool: call.name, baseTier: tier, args, trust: ctx.trust, insideRoots, protectedPath });
     let approvedOutside = false;
     const device = def.target === "device" ? d.devices.targetName() : null;
     if (decision === "deny") {
@@ -3680,6 +3692,7 @@ var defaults = (dataDir) => ({
   view: "companion",
   look: { ...DEFAULT_LOOK },
   ownerName: "",
+  approvals: "manual",
   dataDir
 });
 function configPath(dataDir) {
@@ -3717,6 +3730,7 @@ function loadConfig(dataDir = defaultDataDir()) {
     view: stored.view === "minimal" || stored.view === "workspace" ? stored.view : "companion",
     look: sanitizeLook(stored.look),
     ownerName: typeof stored.ownerName === "string" ? stored.ownerName.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 40) : "",
+    approvals: stored.approvals === "edits" || stored.approvals === "auto" ? stored.approvals : "manual",
     dataDir
   };
 }
@@ -5441,6 +5455,8 @@ var SettingsPatch = z11.object({
   view: ViewPreset,
   /** What the profile badge calls the owner. Empty clears it. */
   ownerName: z11.string().trim().max(40),
+  /** How much Friend asks before acting. Loosening it is a change that needs the PIN. */
+  approvals: z11.enum(["manual", "edits", "auto"]),
   look: z11.object({
     style: PresenceStyle,
     accent: z11.string().regex(/^#[0-9a-fA-F]{6}$/, "A colour like #3fd8ff"),
@@ -5490,6 +5506,7 @@ function settingsView(c) {
     apiKeySet: !!c.apiKey,
     view: c.view,
     ownerName: c.ownerName,
+    approvals: c.approvals,
     look: { ...c.look },
     ollama: { url: c.ollama.url, model: c.ollama.model, vision: !!c.ollama.vision, contextTokens: c.ollama.contextTokens },
     openai: { url: c.openai.url, model: c.openai.model, vision: !!c.openai.vision, apiKeySet: !!c.openai.apiKey },
@@ -5513,6 +5530,7 @@ function refuseForAgent(raw) {
   const r = raw && typeof raw === "object" ? raw : {};
   const cc = r.claudeCode && typeof r.claudeCode === "object" ? r.claudeCode : {};
   const oa = r.openai && typeof r.openai === "object" ? r.openai : {};
+  if ("approvals" in r) throw new SettingsError("How much Friend asks before acting can only be changed by the owner on the settings screen.");
   if ("apiKey" in r || "apiKey" in oa) throw new SettingsError("The API key can only be changed by the owner on the settings screen.");
   if ("command" in cc) throw new SettingsError("The Claude Code command can only be changed by the owner on the settings screen.");
 }
@@ -5565,6 +5583,7 @@ function applySettings(config, raw) {
   const restart = Object.keys(p.voice ?? {}).filter((k) => RESTART_VOICE.includes(k) && p.voice[k] !== config.voice[k]).map((k) => `voice.${k}`);
   config.provider = next.provider;
   if (p.view) config.view = p.view;
+  if (p.approvals) config.approvals = p.approvals;
   if (p.ownerName !== void 0) config.ownerName = p.ownerName.replace(/[\u0000-\u001f\u007f]/g, " ").trim();
   if (p.look) config.look = sanitizeLook({ ...config.look, ...p.look });
   if (p.model) config.model = p.model;
@@ -7404,6 +7423,10 @@ var PARSERS = {
     if (name.length > 40) throw new Error("The name can be at most 40 characters");
     return name;
   },
+  approvals: (v) => {
+    if (v !== "manual" && v !== "edits" && v !== "auto") throw new Error("approvals must be manual, edits or auto");
+    return v;
+  },
   https: bool,
   port: (v) => {
     const n = Number(v);
@@ -7485,6 +7508,7 @@ var KEY_HELP = {
   port: "the web port (easier: friend lan port N)",
   https: "true serves a secure https:// address (Friend makes its own certificate), so a phone may use the microphone (easier: friend lan https on)",
   publicUrl: "the address people use when Friend is behind your own domain, or empty",
+  approvals: "how much Friend asks before acting: manual (asks every time), edits (file work and sandboxed code go ahead) or auto (everything goes ahead except risky commands, the camera and changes to connectors/plugins). Easier: Esc \u2192 Settings \u2192 Approvals",
   ownerName: "your name, shown on the profile badge (the shield) in the corner of the screen; empty shows Owner",
   roots: "folders Friend may read and write freely, separated by commas",
   allowedOrigins: "extra web addresses allowed to connect, separated by commas",
@@ -9660,7 +9684,7 @@ async function daemonCommand(args, io2, deps = realDeps) {
 import crossSpawn5 from "cross-spawn";
 var PACKAGE = "friend-assistant";
 var real = {
-  current: () => true ? "0.1.15" : "development",
+  current: () => true ? "0.1.16" : "development",
   latest: () => new Promise((resolve10) => {
     const child = crossSpawn5("npm", ["view", PACKAGE, "version", "--prefer-online"], { stdio: ["ignore", "pipe", "ignore"] });
     let out = "";
@@ -9948,7 +9972,7 @@ async function run(argv, io2) {
       case "version":
       case "--version":
       case "-v":
-        io2.out(true ? "0.1.15" : "development");
+        io2.out(true ? "0.1.16" : "development");
         return 0;
       case "lan":
         return await lanCommand(rest, io2);