genaicode 2.11.0 → 2.13.0

package/CHANGELOG.md

@@ -1,6 +1,49 @@
 # Changelog
 
-## 2.10.0 — 2026-10-06
+## 2.12.0 — 2026-10-08
+
+### Added
+
+- `task.permissions`: `{ approval: 'ask' | 'auto-approve' | 'deny', sandbox: 'workspace-write' |
+'read-only' | 'unrestricted' }`, or the `'yolo'` preset (auto-approve, unrestricted). Each
+  driver translates it into the agent's own options and declares what it accepts in
+  `capabilities.permissions`; an unsupported value or combination fails the run with an error
+  instead of starting it in another mode. The sandbox bounds approvals, and `auto-approve`
+  grants exactly the scope the agent asked for. Prompts decided by the policy keep their
+  `approval-request` / `approval-resolved` events, marked `automatic: true`, and show as
+  "Auto-approved" in `createAgentSession`, `<AgentChat>` and `genaicode chat`.
+- For apps with their own argument lists: `applyPermissionArgs`, the per-agent
+  `*PermissionFlags` functions, `codexThreadPolicy`, `decideApproval`, `claudeSandboxRefuses`
+  and a `sandbox` option for `claudeApprovalTool`.
+
+- `claude()` answers permission prompts: with `task.onApproval`, it serves Claude Code's
+  `--permission-prompt-tool` from a private loopback MCP endpoint (random port and bearer
+  token) next to the task's own `mcpServers`, and raises `MCP_TOOL_TIMEOUT` so Claude waits
+  for a person. The permission mode (`acceptEdits` by default) still applies first. Approving
+  allows exactly the input Claude asked about; `capabilities.approvals` is now true.
+- `codexLive()` answers Codex permission profile requests (`item/permissions/requestApproval`):
+  approving grants the requested categories for the current turn, denying grants none.
+- `ApprovalRequest.scope`: `once` (also when absent) or `turn`, what approving grants.
+- `onApproval(request, signal)`: `signal` aborts when the request is withdrawn, the turn ends,
+  the process exits or the task is stopped, so an app can close the question. Late answers,
+  like errors and a missing handler, deny. `createAgentSession` drops withdrawn requests from
+  `approvals`; `<AgentChat>` and `genaicode chat` label turn-scoped approvals.
+- The vendor protocols for apps with their own driver or MCP server: `codexApprovals`,
+  `museApprovals` (for a `LiveSession`), `claudeApprovalTool`, `claudeApprovalArgs`,
+  `claudeApprovalEnv`, `claudeApprovalRequest` and `startClaudeApprovalServer`.
+- `LiveSession.signal`, `LiveSession.approve(request, signal?)`, the request context
+  (`id`, `signal`) passed to `onRequest` handlers, `RpcPeer.cancel(id)`, and a `prepare`
+  for `cliAgent` that can be async and gets a `PrepareContext` (`emit`, `signal`).
+
+### Fixed
+
+- `codexLive()` rejects approval requests from another thread or turn, and declines an answer
+  given after the turn ended or after the server withdrew the request.
+- `museLive()` no longer falls back to an approve-for-session choice when Muse offers no
+  one-time approval; it denies instead. Requests of another session or turn are ignored, and an
+  approval resolved elsewhere (`approval/resolved`, `alreadyTerminal`) closes its question.
+
+## 2.11.0 — 2026-10-06
 
 ### Added
 

package/README.md

@@ -106,23 +106,25 @@ for await (const event of run) {
 const result = await run.result; // { status, ok, text, sessionId, usage, error, ... }
 ```
 
-| Agent            | Driver                        | Extras                                     |
-| ---------------- | ----------------------------- | ------------------------------------------ |
-| Claude Code      | `claude()`                    | MCP servers, max turns, effort, cost       |
-| Codex            | `codex()`, `codexLive()`      | MCP servers; live: `steer()`, approvals    |
-| GitHub Copilot   | `copilot()`                   | MCP servers, allow/deny tool patterns      |
-| Cursor           | `cursor()`                    | streamed text deltas                       |
-| Gemini CLI       | `gemini()`                    | approval mode                              |
-| opencode         | `opencode()`                  | `provider/model` ids, variants             |
-| Mistral Vibe     | `vibe()`                      | agent profile, max turns, max price        |
-| Antigravity CLI  | `antigravity()`               | sandbox, effort, usage                     |
-| Muse             | `muse()`, `museLive()`        | max turns; live: `steer()`, approvals      |
-| Your own CLI/API | `cliAgent()`, `hostedAgent()` | plug in any JSON-lines CLI or hosted agent |
+| Agent            | Driver                        | Extras                                          |
+| ---------------- | ----------------------------- | ----------------------------------------------- |
+| Claude Code      | `claude()`                    | MCP servers, approvals, max turns, effort, cost |
+| Codex            | `codex()`, `codexLive()`      | MCP servers; live: `steer()`, approvals         |
+| GitHub Copilot   | `copilot()`                   | MCP servers, allow/deny tool patterns           |
+| Cursor           | `cursor()`                    | streamed text deltas                            |
+| Gemini CLI       | `gemini()`                    | approval mode                                   |
+| opencode         | `opencode()`                  | `provider/model` ids, variants                  |
+| Mistral Vibe     | `vibe()`                      | agent profile, max turns, max price             |
+| Antigravity CLI  | `antigravity()`               | sandbox, effort, usage                          |
+| Muse             | `muse()`, `museLive()`        | max turns; live: `steer()`, approvals           |
+| Your own CLI/API | `cliAgent()`, `hostedAgent()` | plug in any JSON-lines CLI or hosted agent      |
 
 On top of the drivers:
 
-- **Steer a running task** with `run.steer(text)`, and answer permission prompts with
-  `onApproval` (live drivers).
+- **Steer a running task** with `run.steer(text)` (live drivers), and answer permission
+  prompts with `onApproval` (Claude, live Codex and Muse).
+- **Pick approval and sandbox policy** with `permissions: { approval, sandbox }` (or
+  `'yolo'`); each driver maps it to the agent's own flags and refuses what it cannot honor.
 - **Attach MCP servers per task** with `mcpServers`. Header secrets stay out of argv.
 - **Verify and repair**: `runWithVerify` runs your check (tests, lint) after the agent and
   sends failures back for another attempt.
@@ -130,8 +132,8 @@ On top of the drivers:
   from the agent's environment, so it bills its own login.
 
 Importing `genaicode` never spawns anything; only `genaicode/agents` does. The agent uses
-its own credentials, billing, and permission settings. GenAIcode does not sandbox it,
-choose a model, or retry it. See [docs/agents.md](docs/agents.md) for events, options per
+its own credentials and billing, and its own permission settings unless `permissions` sets
+them; any sandbox is the agent's own. GenAIcode does not choose a model or retry it. See [docs/agents.md](docs/agents.md) for events, options per
 driver, and writing your own driver.
 
 ### From the command line

package/dist/agents/cli-agent.d.ts

@@ -1,4 +1,4 @@
-import { type PreparedRun } from './prepare.js';
+import { type PrepareContext, type PreparedRun } from './prepare.js';
 import { type AgentOutcome } from './runtime.js';
 import type { AgentCapabilities, AgentEvent, AgentTask, CodingAgent } from './types.js';
 export type { AgentOutcome } from './runtime.js';
@@ -15,8 +15,11 @@ export interface CliAgentDefinition {
     capabilities?: AgentCapabilities;
     /** Full argument list for a task, prompt included. */
     args(task: AgentTask): string[];
-    /** Replaces `args` when a task needs setup: extra env, temp files to clean up. */
-    prepare?(task: AgentTask): PreparedRun;
+    /**
+     * Replaces `args` when a task needs setup: extra env, temp files to clean up, a local
+     * server to start first. The process starts once it resolves.
+     */
+    prepare?(task: AgentTask, context: PrepareContext): PreparedRun | Promise<PreparedRun>;
     createParser(): AgentOutputParser;
     /** Adjust the child environment (the caller's `task.env` or `process.env`). */
     env?(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/agents/cli-agent.js

@@ -1,6 +1,6 @@
-import { planSpawn } from './prepare.js';
+import { planSpawnAsync } from './prepare.js';
 import { startProcess } from './process.js';
-import { invalidCwd, RunRecorder } from './runtime.js';
+import { invalidCwd, linkAbort, RunRecorder } from './runtime.js';
 /**
  * Build a `CodingAgent` from a headless CLI: spawn, decode its JSON lines, and
  * fold them into an `AgentResult`. Drivers such as `claude()` are thin definitions.
@@ -16,41 +16,63 @@ export function cliAgent(definition) {
 function runCliAgent(definition, task) {
     const recorder = new RunRecorder(definition.name, definition.command);
     const iterate = () => recorder.events.iterate();
-    const plan = planSpawn(definition, task, invalidCwd(task.cwd));
-    if (!plan.ok) {
-        const result = recorder.finish({ exitCode: null, signal: null, reason: 'spawn-error', error: new Error(plan.error) }, undefined);
-        return { result: Promise.resolve(result), abort() { }, [Symbol.asyncIterator]: iterate };
-    }
-    const parser = definition.createParser();
-    const handle = startProcess({
-        command: definition.command,
-        args: plan.args,
-        cwd: task.cwd,
-        env: plan.env,
-        timeoutMs: task.timeoutMs,
-        signal: task.signal,
-        onLine(line) {
-            let value;
-            try {
-                value = JSON.parse(line);
-            }
-            catch {
-                recorder.emit({ type: 'raw', line });
-                return;
-            }
-            for (const event of parser.event(value))
-                recorder.emit(event);
-        },
-        onStderr: (text) => recorder.emit({ type: 'stderr', text }),
-    });
-    // A consumer that falls behind pauses the agent instead of buffering its output without bound.
-    recorder.events.onPressure = (paused) => (paused ? handle.pause() : handle.resume());
-    return {
-        result: handle.exit.then((exit) => {
+    const lifetime = new AbortController();
+    linkAbort(task.signal, lifetime);
+    let handle;
+    let stopped = false;
+    const context = { emit: (event) => recorder.emit(event), signal: lifetime.signal };
+    const start = (plan) => {
+        const parser = definition.createParser();
+        const started = startProcess({
+            command: definition.command,
+            args: plan.args,
+            cwd: task.cwd,
+            env: plan.env,
+            timeoutMs: task.timeoutMs,
+            signal: task.signal,
+            onLine(line) {
+                let value;
+                try {
+                    value = JSON.parse(line);
+                }
+                catch {
+                    recorder.emit({ type: 'raw', line });
+                    return;
+                }
+                for (const event of parser.event(value))
+                    recorder.emit(event);
+            },
+            onStderr: (text) => recorder.emit({ type: 'stderr', text }),
+        });
+        handle = started;
+        // A consumer that falls behind pauses the agent instead of buffering its output without bound.
+        recorder.events.onPressure = (paused) => (paused ? started.pause() : started.resume());
+        return started.exit.then((exit) => {
+            lifetime.abort();
             plan.cleanup();
             return recorder.finish(exit, parser.outcome?.());
-        }),
-        abort: handle.kill,
+        });
+    };
+    const result = planSpawnAsync(definition, task, invalidCwd(task.cwd), context).then((plan) => {
+        if (!plan.ok) {
+            lifetime.abort();
+            return recorder.finish({ exitCode: null, signal: null, reason: 'spawn-error', error: new Error(plan.error) }, undefined);
+        }
+        // Stopped while `prepare` was still running.
+        if (stopped || task.signal?.aborted) {
+            lifetime.abort();
+            plan.cleanup();
+            return recorder.finish({ exitCode: null, signal: null, reason: 'aborted' }, undefined);
+        }
+        return start(plan);
+    });
+    return {
+        result,
+        abort() {
+            stopped = true;
+            lifetime.abort();
+            handle?.kill();
+        },
         [Symbol.asyncIterator]: iterate,
     };
 }

package/dist/agents/cli-agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-agent.js","sourceRoot":"","sources":["../../src/agents/cli-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAC;AA0B1E;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA8B;IACrD,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,EAAE;QAC3C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAA8B,EAAE,IAAe;IAClE,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAEhD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAC5B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACrF,SAAS,CACV,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,CAAC,IAAI;YACT,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;QACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KAC5D,CAAC,CAAC;IAEH,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAErF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,IAAI;QAClB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cli-agent.js","sourceRoot":"","sources":["../../src/agents/cli-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAyD,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAC;AA6BrF;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA8B;IACrD,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,EAAE;QAC3C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAA8B,EAAE,IAAe;IAClE,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjC,IAAI,MAAiC,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,OAAO,GAAmB,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnG,MAAM,KAAK,GAAG,CAAC,IAAsC,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC;YAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,CAAC,IAAI;gBACT,IAAI,KAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChE,CAAC;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,GAAG,OAAO,CAAC;QACjB,+FAA+F;QAC/F,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3F,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,QAAQ,CAAC,MAAM,CACpB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACrF,SAAS,CACV,CAAC;QACJ,CAAC;QACD,6CAA6C;QAC7C,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACpC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,KAAK;YACH,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,EAAE,IAAI,EAAE,CAAC;QACjB,CAAC;QACD,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO;KAChC,CAAC;AACJ,CAAC"}

package/dist/agents/drivers/antigravity.d.ts

@@ -1,5 +1,6 @@
 import { type AgentOutputParser } from '../cli-agent.js';
-import type { AgentTask, CodingAgent } from '../types.js';
+import { type PermissionFlags } from '../permissions.js';
+import type { AgentPermissions, AgentTask, CodingAgent } from '../types.js';
 export interface AntigravityAgentOptions {
     /** Executable name or path. Default `agy`. */
     command?: string;
@@ -10,6 +11,11 @@ export interface AntigravityAgentOptions {
 }
 /** Antigravity CLI in print mode (`agy --output-format stream-json --print ...`). */
 export declare function antigravity(options?: AntigravityAgentOptions): CodingAgent;
+/**
+ * Antigravity flags for `permissions`: `workspace-write` runs terminal commands in its sandbox
+ * (`--sandbox`), `unrestricted` leaves it off. Approval policies are not offered.
+ */
+export declare function antigravityPermissionFlags(permissions: AgentPermissions): PermissionFlags;
 export declare function antigravityArgs(task: AgentTask, options?: AntigravityAgentOptions): string[];
 /** Decodes `--output-format stream-json`: `init`, `step_update` and `result` events. */
 export declare function createAntigravityParser(): AgentOutputParser;

package/dist/agents/drivers/antigravity.js

@@ -1,18 +1,43 @@
 import { cliAgent } from '../cli-agent.js';
+import { exclusiveOption, resolvePermissions } from '../permissions.js';
 import { isObject, numberField, stringField } from './json.js';
 /** Antigravity CLI in print mode (`agy --output-format stream-json --print ...`). */
 export function antigravity(options = {}) {
     return cliAgent({
         name: 'antigravity',
         command: options.command ?? 'agy',
-        capabilities: { effort: ['low', 'medium', 'high'], usage: true },
+        capabilities: {
+            effort: ['low', 'medium', 'high'],
+            usage: true,
+            permissions: { sandbox: ['workspace-write', 'unrestricted'] },
+        },
         args: (task) => antigravityArgs(task, options),
         createParser: createAntigravityParser,
     });
 }
+/**
+ * Antigravity flags for `permissions`: `workspace-write` runs terminal commands in its sandbox
+ * (`--sandbox`), `unrestricted` leaves it off. Approval policies are not offered.
+ */
+export function antigravityPermissionFlags(permissions) {
+    const { approval, sandbox } = permissions;
+    if (approval)
+        throw new Error(`antigravity cannot run with permissions.approval '${approval}'.`);
+    if (sandbox === 'read-only')
+        throw new Error("antigravity cannot run with permissions.sandbox 'read-only'.");
+    return {
+        args: sandbox === 'workspace-write' ? ['--sandbox'] : [],
+        replaces: sandbox ? { '--sandbox': 'flag' } : {},
+    };
+}
 export function antigravityArgs(task, options = {}) {
     const args = ['--mode', options.mode ?? 'accept-edits'];
-    if (options.sandbox ?? true)
+    const permissions = resolvePermissions(task.permissions);
+    exclusiveOption('antigravity', 'sandbox', options.sandbox !== undefined, 'sandbox', !!permissions.sandbox);
+    const flags = antigravityPermissionFlags(permissions);
+    if (permissions.sandbox)
+        args.push(...flags.args);
+    else if (options.sandbox ?? true)
         args.push('--sandbox');
     args.push('--output-format', 'stream-json');
     if (task.model)

package/dist/agents/drivers/antigravity.js.map

@@ -1 +1 @@
-{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../../src/agents/drivers/antigravity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA6C,MAAM,iBAAiB,CAAC;AAEtF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAW/D,qFAAqF;AACrF,MAAM,UAAU,WAAW,CAAC,UAAmC,EAAE;IAC/D,OAAO,QAAQ,CAAC;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QAChE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;QAC9C,YAAY,EAAE,uBAAuB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,UAAmC,EAAE;IACpF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB;IACrC,IAAI,OAAiC,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;QACtB,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;oBACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC/C,IAAI,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC9B,WAAW,GAAG,IAAI,CAAC;wBACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC3E,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;oBACzE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACzC,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;wBAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;wBAC9C,IAAI,KAAK,EAAE,CAAC;4BACV,QAAQ,IAAI,KAAK,CAAC;4BAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACnD,CAAC;wBACD,MAAM;oBACR,CAAC;oBACD,IAAI,IAAI,KAAK,MAAM;wBAAE,MAAM;oBAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;oBACrE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC;oBACnF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBAC9C,MAAM,EAAE,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC;oBACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACjB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY;4BAClB,GAAG,MAAM;4BACT,IAAI;4BACJ,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACtE,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC1C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBACpB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;wBAClD,MAAM,MAAM,GAAG,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;wBACpD,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,UAAU;4BAChB,GAAG,MAAM;4BACT,IAAI;4BACJ,OAAO,EAAE,KAAK,KAAK,OAAO,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;4BACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC5C,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;oBACjE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC3C,OAAO;wBACL,MAAM,KAAK,SAAS;4BAClB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;4BACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,qCAAqC,MAAM,IAAI,SAAS,GAAG,EAAE,CAAC;oBACjG,IAAI,CAAC,OAAO,CAAC,EAAE;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAM,EAAE,CAAC,CAAC;oBACzE,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3C,IAAI,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,QAAQ,GAAG,EAAE,CAAC;oBACd,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;oBAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;oBACzD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAClE,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAC5D,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE;gCACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACvD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BACpD;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../../src/agents/drivers/antigravity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA6C,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAwB,MAAM,mBAAmB,CAAC;AAE9F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAW/D,qFAAqF;AACrF,MAAM,UAAU,WAAW,CAAC,UAAmC,EAAE;IAC/D,OAAO,QAAQ,CAAC;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,YAAY,EAAE;YACZ,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;YACjC,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC,EAAE;SAC9D;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;QAC9C,YAAY,EAAE,uBAAuB;KACtC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAA6B;IACtE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAC1C,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,IAAI,CAAC,CAAC;IACjG,IAAI,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC7G,OAAO;QACL,IAAI,EAAE,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACxD,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,UAAmC,EAAE;IACpF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,eAAe,CAAC,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,WAAW,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;SAC7C,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB;IACrC,IAAI,OAAiC,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;QACtB,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;oBACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC/C,IAAI,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC9B,WAAW,GAAG,IAAI,CAAC;wBACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC3E,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;oBACzE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACzC,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;wBAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;wBAC9C,IAAI,KAAK,EAAE,CAAC;4BACV,QAAQ,IAAI,KAAK,CAAC;4BAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACnD,CAAC;wBACD,MAAM;oBACR,CAAC;oBACD,IAAI,IAAI,KAAK,MAAM;wBAAE,MAAM;oBAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;oBACrE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC;oBACnF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBAC9C,MAAM,EAAE,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC;oBACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACjB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY;4BAClB,GAAG,MAAM;4BACT,IAAI;4BACJ,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACtE,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC1C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBACpB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;wBAClD,MAAM,MAAM,GAAG,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;wBACpD,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,UAAU;4BAChB,GAAG,MAAM;4BACT,IAAI;4BACJ,OAAO,EAAE,KAAK,KAAK,OAAO,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;4BACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC5C,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;oBACjE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC3C,OAAO;wBACL,MAAM,KAAK,SAAS;4BAClB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;4BACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,qCAAqC,MAAM,IAAI,SAAS,GAAG,EAAE,CAAC;oBACjG,IAAI,CAAC,OAAO,CAAC,EAAE;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAM,EAAE,CAAC,CAAC;oBACzE,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3C,IAAI,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,QAAQ,GAAG,EAAE,CAAC;oBACd,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;oBAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;oBACzD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAClE,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAC5D,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE;gCACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACvD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BACpD;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agents/drivers/claude-approvals.d.ts

@@ -0,0 +1,86 @@
+import type { PermissionFlags } from '../permissions.js';
+import type { AgentPermissions, ApprovalHandler, ApprovalRequest, SandboxPolicy } from '../types.js';
+import { type JsonObject } from './json.js';
+/** Name of the permission prompt tool `claudeApprovalTool` serves. */
+export declare const CLAUDE_APPROVAL_TOOL = "approve";
+/** An MCP `tools/call` result. */
+export interface McpToolResult {
+    content: {
+        type: 'text';
+        text: string;
+    }[];
+    isError?: boolean;
+}
+/**
+ * Claude Code's permission prompt tool (`--permission-prompt-tool`) as an MCP tool an app
+ * can serve from its own MCP server. Claude calls it with the tool name and input it wants
+ * to use; the answer allows exactly that input, or denies.
+ */
+export interface ClaudeApprovalTool {
+    name: string;
+    description: string;
+    inputSchema: JsonObject;
+    /**
+     * Answer one call: ask `onApproval`, then reply in Claude's format. Malformed arguments,
+     * a missing or throwing handler, and `signal` aborting (the caller disconnected) all deny.
+     */
+    call(args: unknown, signal?: AbortSignal): Promise<McpToolResult>;
+}
+export interface ClaudeApprovalToolOptions {
+    /** Tool name. Default `approve`. */
+    name?: string;
+    /**
+     * The run's `permissions.sandbox`: requests that would step outside it are denied without
+     * asking (see `claudeSandboxRefuses`). Needs `cwd`.
+     */
+    sandbox?: SandboxPolicy;
+    /** The run's working directory. */
+    cwd?: string;
+}
+/** Build the permission prompt tool around an approval handler. */
+export declare function claudeApprovalTool(onApproval: ApprovalHandler | undefined, options?: ClaudeApprovalToolOptions): ClaudeApprovalTool;
+/** The approval request for one permission prompt tool call, or undefined when the call is malformed. */
+export declare function claudeApprovalRequest(args: unknown): ApprovalRequest | undefined;
+/**
+ * Whether a permission prompt asks for something outside `sandbox`, so neither a person nor
+ * `auto-approve` may grant it. `read-only`: anything but a reading tool, `ExitPlanMode`
+ * included. `workspace-write`: an edit outside `cwd`, and any `Bash` prompt (Claude's sandbox
+ * runs sandboxed commands without asking, so a prompt means an unsandboxed one).
+ */
+export declare function claudeSandboxRefuses(args: unknown, sandbox: SandboxPolicy, cwd: string): boolean;
+/**
+ * Claude Code flags for `permissions`. `read-only` is plan mode; `workspace-write` turns on
+ * Claude's sandbox for Bash (writes limited to `cwd` and temp, see `--settings`), with edits in
+ * `cwd` accepted; `unrestricted` turns the sandbox off. `ask` and `auto-approve` need the
+ * permission prompt tool (`claudeApprovalTool` with the same sandbox); `deny` runs without it,
+ * so Claude refuses what it would have asked about.
+ */
+export declare function claudePermissionFlags(permissions: AgentPermissions): PermissionFlags;
+/**
+ * Environment for a Claude process whose permission prompts wait on a person. Claude gives up
+ * on an MCP tool call after 60 s by default (`MCP_TOOL_TIMEOUT`), which would fail the tool
+ * call while the question is still open. Empty when `env` already sets a timeout.
+ */
+export declare function claudeApprovalEnv(env?: NodeJS.ProcessEnv): Record<string, string>;
+/** Claude Code arguments that route its permission prompts to `tool` on MCP server `server`. */
+export declare function claudeApprovalArgs(server: string, tool?: string): string[];
+export interface ClaudeApprovalServer {
+    /** The MCP server to add to Claude's `--mcp-config`. Its bearer token is in `headers`. */
+    server: {
+        name: string;
+        url: string;
+        headers: Record<string, string>;
+    };
+    /** `--permission-prompt-tool` for that server. */
+    args: string[];
+    /** Stop serving. Open questions are withdrawn (their signals abort) and denied. */
+    close(): Promise<void>;
+}
+/**
+ * Serve `claudeApprovalTool` alone over MCP (streamable HTTP, JSON responses) on a random
+ * loopback port, behind a random bearer token. `name` is the MCP server name. For apps that
+ * have no MCP server of their own to mount the tool on; `claude()` uses it for `task.onApproval`.
+ */
+export declare function startClaudeApprovalServer(onApproval: ApprovalHandler | undefined, options?: {
+    name?: string;
+} & Pick<ClaudeApprovalToolOptions, 'sandbox' | 'cwd'>): Promise<ClaudeApprovalServer>;