genaicode 2.9.1 → 2.13.0

package/CHANGELOG.md

@@ -1,5 +1,71 @@
 # Changelog
 
+## 2.12.0 — 2026-10-08
+
+### Added
+
+- `task.permissions`: `{ approval: 'ask' | 'auto-approve' | 'deny', sandbox: 'workspace-write' |
+'read-only' | 'unrestricted' }`, or the `'yolo'` preset (auto-approve, unrestricted). Each
+  driver translates it into the agent's own options and declares what it accepts in
+  `capabilities.permissions`; an unsupported value or combination fails the run with an error
+  instead of starting it in another mode. The sandbox bounds approvals, and `auto-approve`
+  grants exactly the scope the agent asked for. Prompts decided by the policy keep their
+  `approval-request` / `approval-resolved` events, marked `automatic: true`, and show as
+  "Auto-approved" in `createAgentSession`, `<AgentChat>` and `genaicode chat`.
+- For apps with their own argument lists: `applyPermissionArgs`, the per-agent
+  `*PermissionFlags` functions, `codexThreadPolicy`, `decideApproval`, `claudeSandboxRefuses`
+  and a `sandbox` option for `claudeApprovalTool`.
+
+- `claude()` answers permission prompts: with `task.onApproval`, it serves Claude Code's
+  `--permission-prompt-tool` from a private loopback MCP endpoint (random port and bearer
+  token) next to the task's own `mcpServers`, and raises `MCP_TOOL_TIMEOUT` so Claude waits
+  for a person. The permission mode (`acceptEdits` by default) still applies first. Approving
+  allows exactly the input Claude asked about; `capabilities.approvals` is now true.
+- `codexLive()` answers Codex permission profile requests (`item/permissions/requestApproval`):
+  approving grants the requested categories for the current turn, denying grants none.
+- `ApprovalRequest.scope`: `once` (also when absent) or `turn`, what approving grants.
+- `onApproval(request, signal)`: `signal` aborts when the request is withdrawn, the turn ends,
+  the process exits or the task is stopped, so an app can close the question. Late answers,
+  like errors and a missing handler, deny. `createAgentSession` drops withdrawn requests from
+  `approvals`; `<AgentChat>` and `genaicode chat` label turn-scoped approvals.
+- The vendor protocols for apps with their own driver or MCP server: `codexApprovals`,
+  `museApprovals` (for a `LiveSession`), `claudeApprovalTool`, `claudeApprovalArgs`,
+  `claudeApprovalEnv`, `claudeApprovalRequest` and `startClaudeApprovalServer`.
+- `LiveSession.signal`, `LiveSession.approve(request, signal?)`, the request context
+  (`id`, `signal`) passed to `onRequest` handlers, `RpcPeer.cancel(id)`, and a `prepare`
+  for `cliAgent` that can be async and gets a `PrepareContext` (`emit`, `signal`).
+
+### Fixed
+
+- `codexLive()` rejects approval requests from another thread or turn, and declines an answer
+  given after the turn ended or after the server withdrew the request.
+- `museLive()` no longer falls back to an approve-for-session choice when Muse offers no
+  one-time approval; it denies instead. Requests of another session or turn are ignored, and an
+  approval resolved elsewhere (`approval/resolved`, `alreadyTerminal`) closes its question.
+
+## 2.11.0 — 2026-10-06
+
+### Added
+
+- `genaicode/react`: `<AgentChat>`, the `genaicode ui` chat as a presentational React
+  component for apps that run their own `createAgentSession` and stream its `SessionState`
+  to the page. It renders turns, streaming Markdown (no raw HTML; links open in a new tab),
+  collapsible tool calls, edited files, errors, approvals, queued prompts and the busy
+  state, and reports `onSend`, `onStop` and `onApprove`. Slots for host content:
+  `renderPrompt`, `renderAfterTurn`, `renderFooter`, `notices`, `header`, `headerExtras`,
+  `emptyState`, `formatToolName`. Themed with `--gc-*` CSS custom properties; styles in
+  `genaicode/react/styles.css`. React (18+) comes from the app and is not a declared
+  dependency. `Markdown` and the display helpers are exported too.
+- `genaicode ui` and the `genaicode/vite` panel are now drawn by `<AgentChat>`.
+- `genaicode/ui`: `startEmbeddedWeb` for hosts that frame the whole `genaicode ui` page,
+  typed with `task` (`mcpServers`, `timeoutMs`...), `env`, `transformPrompt` and
+  `frameAncestors`. The UI bundle loads only when it is called.
+- `createAgentSession({ transformPrompt })` rewrites each prompt (and steered input) before
+  it reaches the agent; the transcript keeps the text given to `send()`.
+
+- The `genaicode/vite` panel can be resized: drag its left or top edge (or focus an edge and use
+  the arrow keys), double-click an edge to reset it. The size is remembered across reloads.
+
 ## 2.9.1 — 2026-09-29
 
 ### Fixed

package/README.md

@@ -106,23 +106,25 @@ for await (const event of run) {
 const result = await run.result; // { status, ok, text, sessionId, usage, error, ... }
 ```
 
-| Agent            | Driver                        | Extras                                     |
-| ---------------- | ----------------------------- | ------------------------------------------ |
-| Claude Code      | `claude()`                    | MCP servers, max turns, effort, cost       |
-| Codex            | `codex()`, `codexLive()`      | MCP servers; live: `steer()`, approvals    |
-| GitHub Copilot   | `copilot()`                   | MCP servers, allow/deny tool patterns      |
-| Cursor           | `cursor()`                    | streamed text deltas                       |
-| Gemini CLI       | `gemini()`                    | approval mode                              |
-| opencode         | `opencode()`                  | `provider/model` ids, variants             |
-| Mistral Vibe     | `vibe()`                      | agent profile, max turns, max price        |
-| Antigravity CLI  | `antigravity()`               | sandbox, effort, usage                     |
-| Muse             | `muse()`, `museLive()`        | max turns; live: `steer()`, approvals      |
-| Your own CLI/API | `cliAgent()`, `hostedAgent()` | plug in any JSON-lines CLI or hosted agent |
+| Agent            | Driver                        | Extras                                          |
+| ---------------- | ----------------------------- | ----------------------------------------------- |
+| Claude Code      | `claude()`                    | MCP servers, approvals, max turns, effort, cost |
+| Codex            | `codex()`, `codexLive()`      | MCP servers; live: `steer()`, approvals         |
+| GitHub Copilot   | `copilot()`                   | MCP servers, allow/deny tool patterns           |
+| Cursor           | `cursor()`                    | streamed text deltas                            |
+| Gemini CLI       | `gemini()`                    | approval mode                                   |
+| opencode         | `opencode()`                  | `provider/model` ids, variants                  |
+| Mistral Vibe     | `vibe()`                      | agent profile, max turns, max price             |
+| Antigravity CLI  | `antigravity()`               | sandbox, effort, usage                          |
+| Muse             | `muse()`, `museLive()`        | max turns; live: `steer()`, approvals           |
+| Your own CLI/API | `cliAgent()`, `hostedAgent()` | plug in any JSON-lines CLI or hosted agent      |
 
 On top of the drivers:
 
-- **Steer a running task** with `run.steer(text)`, and answer permission prompts with
-  `onApproval` (live drivers).
+- **Steer a running task** with `run.steer(text)` (live drivers), and answer permission
+  prompts with `onApproval` (Claude, live Codex and Muse).
+- **Pick approval and sandbox policy** with `permissions: { approval, sandbox }` (or
+  `'yolo'`); each driver maps it to the agent's own flags and refuses what it cannot honor.
 - **Attach MCP servers per task** with `mcpServers`. Header secrets stay out of argv.
 - **Verify and repair**: `runWithVerify` runs your check (tests, lint) after the agent and
   sends failures back for another attempt.
@@ -130,8 +132,8 @@ On top of the drivers:
   from the agent's environment, so it bills its own login.
 
 Importing `genaicode` never spawns anything; only `genaicode/agents` does. The agent uses
-its own credentials, billing, and permission settings. GenAIcode does not sandbox it,
-choose a model, or retry it. See [docs/agents.md](docs/agents.md) for events, options per
+its own credentials and billing, and its own permission settings unless `permissions` sets
+them; any sandbox is the agent's own. GenAIcode does not choose a model or retry it. See [docs/agents.md](docs/agents.md) for events, options per
 driver, and writing your own driver.
 
 ### From the command line
@@ -164,10 +166,32 @@ can say "now add a test for that". Prompts sent while the agent works wait in a
 run next; Esc stops the agent. `/agent`, `/model` and `/new` switch agent, model and
 session; `/help` lists the rest.
 
+<p align="center">
+  <picture>
+    <source media="(prefers-reduced-motion: reduce)" srcset="media/screenshots/chat-terminal.png">
+    <img alt="genaicode chat in a terminal: the agent fixes a failing test, then takes queued follow-ups." src="media/screenshots/chat-terminal.gif" width="49%">
+  </picture>
+  <picture>
+    <source media="(prefers-reduced-motion: reduce) and (prefers-color-scheme: dark)" srcset="media/screenshots/wolf-dark.png">
+    <source media="(prefers-reduced-motion: reduce)" srcset="media/screenshots/wolf-light.png">
+    <source media="(prefers-color-scheme: dark)" srcset="media/screenshots/chat-browser-dark.gif">
+    <source media="(prefers-color-scheme: light)" srcset="media/screenshots/chat-browser-light.gif">
+    <img alt="genaicode ui in a browser: the same fix and a follow-up." src="media/screenshots/chat-browser-light.gif" width="49%">
+  </picture>
+</p>
+
 The wolf from genaicode 1.0 is back. When the agent asks for approval or finishes, the
 browser UI barks if its tab is in the background and counts those events in the tab title.
 The terminal UI rings the terminal bell instead. `/bark off` (or the Bark button) quiets it.
 
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="media/screenshots/wolf-dark.png">
+    <source media="(prefers-color-scheme: light)" srcset="media/screenshots/wolf-light.png">
+    <img alt="The browser UI with the wolf behind a finished turn." src="media/screenshots/wolf-light.png" width="80%">
+  </picture>
+</p>
+
 `genaicode ui` listens on the loopback address and prints a link with a random access
 token. The page, the event stream and every command need that token; only the bundled
 script and the four mascot files (`/app.js`, `/assets/…`) are served without it, since they
@@ -187,6 +211,14 @@ import genaicode from 'genaicode/vite';
 export default defineConfig({ plugins: [genaicode()] });
 ```
 
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="media/screenshots/vite-dark.png">
+    <source media="(prefers-color-scheme: light)" srcset="media/screenshots/vite-light.png">
+    <img alt="The genaicode panel over a Vite app: the agent fixed the page's two errors." src="media/screenshots/vite-light.png" width="80%">
+  </picture>
+</p>
+
 In `vite dev`, the app gets the wolf in its corner. It opens the same chat as `genaicode ui`
 in a panel, with the agent working in the project root. The wolf counts the page's errors
 (build errors, uncaught exceptions, unhandled rejections, `console.error`), and "Fix N
@@ -196,6 +228,100 @@ Builds are untouched. The chat runs on its own port on 127.0.0.1 even when Vite
 `--host`, lets only the app's origins frame it, and hands its token (and takes "fix" requests)
 only from the app's own pages on this machine.
 
+### In your own React app
+
+`genaicode/react` is the same chat as a component. It draws a `SessionState` your app gives
+it and calls you back; it runs, fetches and stores nothing, so your server owns the session,
+its MCP servers and its prompts. React 18 or newer comes from your app: genaicode does not
+declare or install it.
+
+```ts
+// server (Node): one session, streamed to the page
+import { createAgentSession, claude } from 'genaicode/agents';
+
+const session = createAgentSession({
+  agent: claude(),
+  cwd: process.cwd(),
+  task: { mcpServers: [{ name: 'ops', url: 'http://127.0.0.1:4000/mcp' }] },
+  // The agent gets the context; the transcript keeps what the user typed.
+  transformPrompt: (text) => `${briefing}\n\nOperator message:\n${text}`,
+});
+
+app.get('/api/agent/events', (req, res) => {
+  res.writeHead(200, { 'content-type': 'text/event-stream', 'cache-control': 'no-store' });
+  const push = (state) => res.write(`data: ${JSON.stringify(state)}\n\n`);
+  push(session.get());
+  res.on('close', session.subscribe(push));
+});
+app.post('/api/agent/send', (req, res) => {
+  session.send(req.body.text);
+  res.json({ ok: true });
+});
+app.post('/api/agent/stop', (req, res) => {
+  session.stop();
+  res.json({ ok: true });
+});
+app.post('/api/agent/approve', (req, res) => res.json({ ok: session.approve(req.body.id, req.body.decision) }));
+```
+
+```tsx
+// page
+import { useEffect, useState } from 'react';
+import { AgentChat, type SessionState } from 'genaicode/react';
+import 'genaicode/react/styles.css';
+
+const post = (path: string, body: object = {}) =>
+  fetch(path, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body) });
+
+export function AgentDrawer() {
+  const [state, setState] = useState<SessionState | null>(null);
+  useEffect(() => {
+    const events = new EventSource('/api/agent/events');
+    events.onmessage = (event) => setState(JSON.parse(event.data));
+    return () => events.close();
+  }, []);
+  return (
+    <AgentChat
+      state={state}
+      onSend={(text) => post('/api/agent/send', { text })}
+      onStop={() => post('/api/agent/stop')}
+      onApprove={(id, decision) => post('/api/agent/approve', { id, decision })}
+      formatToolName={(name) => name.replace(/^mcp__ops__/, '')}
+      renderFooter={() => <MyApprovalCards />}
+      headerExtras={<button onClick={() => post('/api/agent/reset')}>New</button>}
+    />
+  );
+}
+```
+
+`<AgentChat>` fills its container's height. It shows turns with streaming Markdown (no raw
+HTML; links open in a new tab), collapsible tool calls, edited files, errors, the agent's
+own approval requests, queued prompts and a working indicator, and an input where Enter
+sends, Shift+Enter adds a line and Esc stops. Props:
+
+| Prop                                                                           |                                                                  |
+| ------------------------------------------------------------------------------ | ---------------------------------------------------------------- |
+| `state`                                                                        | `SessionState`, or null before there is a session                |
+| `onSend(text)`, `onStop()`                                                     | Enter or Send; Stop or Esc. No `onStop`, no Stop button          |
+| `onApprove(id, decision)`                                                      | answers `state.approvals`; without it they show as waiting       |
+| `renderPrompt(text, turn?)`                                                    | how a sent prompt shows (return null to hide it)                 |
+| `renderAfterTurn(turn, i)`, `renderFooter()`                                   | your content after a turn, or at the end                         |
+| `notices`                                                                      | `{ id, afterTurn, text, tone? }[]`: your own lines between turns |
+| `header`, `headerExtras`                                                       | replace the header (null for none), or add to its right end      |
+| `emptyState`, `placeholder`, `hint`                                            | text before the first turn, in and under the input               |
+| `formatToolName(name)`, `disabled`, `autoFocus`, `theme`, `className`, `style` |                                                                  |
+
+Theme it with CSS custom properties on the component or any ancestor: `--gc-bg`,
+`--gc-panel`, `--gc-border`, `--gc-text`, `--gc-muted`, `--gc-accent`, `--gc-accent-text`,
+`--gc-error`, `--gc-font`, `--gc-mono`, `--gc-font-size`, `--gc-radius`, `--gc-max-width`
+(and `--gc-ok`, `--gc-warn`, plus soft shades mixed from these unless set). Unset ones keep
+the `genaicode ui` look, light or dark by `prefers-color-scheme`, or by `theme="light"` /
+`"dark"`. `genaicode ui` and the Vite panel draw this same component.
+
+To show the whole `genaicode ui` page in a frame instead, `startEmbeddedWeb` from
+`genaicode/ui` serves it on 127.0.0.1 with your `task` (`mcpServers`, `timeoutMs`...), `env`
+and `transformPrompt`, and returns its tokenized `url` and a `controller` to send prompts.
+
 ## Chaining prompts
 
 A chain remembers successful user and assistant turns. Each new prompt sees the complete

package/dist/agents/cli-agent.d.ts

@@ -1,4 +1,4 @@
-import { type PreparedRun } from './prepare.js';
+import { type PrepareContext, type PreparedRun } from './prepare.js';
 import { type AgentOutcome } from './runtime.js';
 import type { AgentCapabilities, AgentEvent, AgentTask, CodingAgent } from './types.js';
 export type { AgentOutcome } from './runtime.js';
@@ -15,8 +15,11 @@ export interface CliAgentDefinition {
     capabilities?: AgentCapabilities;
     /** Full argument list for a task, prompt included. */
     args(task: AgentTask): string[];
-    /** Replaces `args` when a task needs setup: extra env, temp files to clean up. */
-    prepare?(task: AgentTask): PreparedRun;
+    /**
+     * Replaces `args` when a task needs setup: extra env, temp files to clean up, a local
+     * server to start first. The process starts once it resolves.
+     */
+    prepare?(task: AgentTask, context: PrepareContext): PreparedRun | Promise<PreparedRun>;
     createParser(): AgentOutputParser;
     /** Adjust the child environment (the caller's `task.env` or `process.env`). */
     env?(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/agents/cli-agent.js

@@ -1,6 +1,6 @@
-import { planSpawn } from './prepare.js';
+import { planSpawnAsync } from './prepare.js';
 import { startProcess } from './process.js';
-import { invalidCwd, RunRecorder } from './runtime.js';
+import { invalidCwd, linkAbort, RunRecorder } from './runtime.js';
 /**
  * Build a `CodingAgent` from a headless CLI: spawn, decode its JSON lines, and
  * fold them into an `AgentResult`. Drivers such as `claude()` are thin definitions.
@@ -16,41 +16,63 @@ export function cliAgent(definition) {
 function runCliAgent(definition, task) {
     const recorder = new RunRecorder(definition.name, definition.command);
     const iterate = () => recorder.events.iterate();
-    const plan = planSpawn(definition, task, invalidCwd(task.cwd));
-    if (!plan.ok) {
-        const result = recorder.finish({ exitCode: null, signal: null, reason: 'spawn-error', error: new Error(plan.error) }, undefined);
-        return { result: Promise.resolve(result), abort() { }, [Symbol.asyncIterator]: iterate };
-    }
-    const parser = definition.createParser();
-    const handle = startProcess({
-        command: definition.command,
-        args: plan.args,
-        cwd: task.cwd,
-        env: plan.env,
-        timeoutMs: task.timeoutMs,
-        signal: task.signal,
-        onLine(line) {
-            let value;
-            try {
-                value = JSON.parse(line);
-            }
-            catch {
-                recorder.emit({ type: 'raw', line });
-                return;
-            }
-            for (const event of parser.event(value))
-                recorder.emit(event);
-        },
-        onStderr: (text) => recorder.emit({ type: 'stderr', text }),
-    });
-    // A consumer that falls behind pauses the agent instead of buffering its output without bound.
-    recorder.events.onPressure = (paused) => (paused ? handle.pause() : handle.resume());
-    return {
-        result: handle.exit.then((exit) => {
+    const lifetime = new AbortController();
+    linkAbort(task.signal, lifetime);
+    let handle;
+    let stopped = false;
+    const context = { emit: (event) => recorder.emit(event), signal: lifetime.signal };
+    const start = (plan) => {
+        const parser = definition.createParser();
+        const started = startProcess({
+            command: definition.command,
+            args: plan.args,
+            cwd: task.cwd,
+            env: plan.env,
+            timeoutMs: task.timeoutMs,
+            signal: task.signal,
+            onLine(line) {
+                let value;
+                try {
+                    value = JSON.parse(line);
+                }
+                catch {
+                    recorder.emit({ type: 'raw', line });
+                    return;
+                }
+                for (const event of parser.event(value))
+                    recorder.emit(event);
+            },
+            onStderr: (text) => recorder.emit({ type: 'stderr', text }),
+        });
+        handle = started;
+        // A consumer that falls behind pauses the agent instead of buffering its output without bound.
+        recorder.events.onPressure = (paused) => (paused ? started.pause() : started.resume());
+        return started.exit.then((exit) => {
+            lifetime.abort();
             plan.cleanup();
             return recorder.finish(exit, parser.outcome?.());
-        }),
-        abort: handle.kill,
+        });
+    };
+    const result = planSpawnAsync(definition, task, invalidCwd(task.cwd), context).then((plan) => {
+        if (!plan.ok) {
+            lifetime.abort();
+            return recorder.finish({ exitCode: null, signal: null, reason: 'spawn-error', error: new Error(plan.error) }, undefined);
+        }
+        // Stopped while `prepare` was still running.
+        if (stopped || task.signal?.aborted) {
+            lifetime.abort();
+            plan.cleanup();
+            return recorder.finish({ exitCode: null, signal: null, reason: 'aborted' }, undefined);
+        }
+        return start(plan);
+    });
+    return {
+        result,
+        abort() {
+            stopped = true;
+            lifetime.abort();
+            handle?.kill();
+        },
         [Symbol.asyncIterator]: iterate,
     };
 }

package/dist/agents/cli-agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-agent.js","sourceRoot":"","sources":["../../src/agents/cli-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoB,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAC;AA0B1E;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA8B;IACrD,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,EAAE;QAC3C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAA8B,EAAE,IAAe;IAClE,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAEhD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAC5B,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACrF,SAAS,CACV,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,CAAC,IAAI;YACT,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;QACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KAC5D,CAAC,CAAC;IAEH,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAErF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,IAAI;QAClB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cli-agent.js","sourceRoot":"","sources":["../../src/agents/cli-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAyD,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,YAAY,EAAsB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAC;AA6BrF;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,UAA8B;IACrD,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,EAAE;QAC3C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,UAA8B,EAAE,IAAe;IAClE,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjC,IAAI,MAAiC,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,OAAO,GAAmB,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnG,MAAM,KAAK,GAAG,CAAC,IAAsC,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC;YAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,CAAC,IAAI;gBACT,IAAI,KAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrC,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChE,CAAC;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,GAAG,OAAO,CAAC;QACjB,+FAA+F;QAC/F,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAChC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3F,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,QAAQ,CAAC,MAAM,CACpB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACrF,SAAS,CACV,CAAC;QACJ,CAAC;QACD,6CAA6C;QAC7C,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACpC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,KAAK;YACH,OAAO,GAAG,IAAI,CAAC;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,EAAE,IAAI,EAAE,CAAC;QACjB,CAAC;QACD,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO;KAChC,CAAC;AACJ,CAAC"}

package/dist/agents/drivers/antigravity.d.ts

@@ -1,5 +1,6 @@
 import { type AgentOutputParser } from '../cli-agent.js';
-import type { AgentTask, CodingAgent } from '../types.js';
+import { type PermissionFlags } from '../permissions.js';
+import type { AgentPermissions, AgentTask, CodingAgent } from '../types.js';
 export interface AntigravityAgentOptions {
     /** Executable name or path. Default `agy`. */
     command?: string;
@@ -10,6 +11,11 @@ export interface AntigravityAgentOptions {
 }
 /** Antigravity CLI in print mode (`agy --output-format stream-json --print ...`). */
 export declare function antigravity(options?: AntigravityAgentOptions): CodingAgent;
+/**
+ * Antigravity flags for `permissions`: `workspace-write` runs terminal commands in its sandbox
+ * (`--sandbox`), `unrestricted` leaves it off. Approval policies are not offered.
+ */
+export declare function antigravityPermissionFlags(permissions: AgentPermissions): PermissionFlags;
 export declare function antigravityArgs(task: AgentTask, options?: AntigravityAgentOptions): string[];
 /** Decodes `--output-format stream-json`: `init`, `step_update` and `result` events. */
 export declare function createAntigravityParser(): AgentOutputParser;

package/dist/agents/drivers/antigravity.js

@@ -1,18 +1,43 @@
 import { cliAgent } from '../cli-agent.js';
+import { exclusiveOption, resolvePermissions } from '../permissions.js';
 import { isObject, numberField, stringField } from './json.js';
 /** Antigravity CLI in print mode (`agy --output-format stream-json --print ...`). */
 export function antigravity(options = {}) {
     return cliAgent({
         name: 'antigravity',
         command: options.command ?? 'agy',
-        capabilities: { effort: ['low', 'medium', 'high'], usage: true },
+        capabilities: {
+            effort: ['low', 'medium', 'high'],
+            usage: true,
+            permissions: { sandbox: ['workspace-write', 'unrestricted'] },
+        },
         args: (task) => antigravityArgs(task, options),
         createParser: createAntigravityParser,
     });
 }
+/**
+ * Antigravity flags for `permissions`: `workspace-write` runs terminal commands in its sandbox
+ * (`--sandbox`), `unrestricted` leaves it off. Approval policies are not offered.
+ */
+export function antigravityPermissionFlags(permissions) {
+    const { approval, sandbox } = permissions;
+    if (approval)
+        throw new Error(`antigravity cannot run with permissions.approval '${approval}'.`);
+    if (sandbox === 'read-only')
+        throw new Error("antigravity cannot run with permissions.sandbox 'read-only'.");
+    return {
+        args: sandbox === 'workspace-write' ? ['--sandbox'] : [],
+        replaces: sandbox ? { '--sandbox': 'flag' } : {},
+    };
+}
 export function antigravityArgs(task, options = {}) {
     const args = ['--mode', options.mode ?? 'accept-edits'];
-    if (options.sandbox ?? true)
+    const permissions = resolvePermissions(task.permissions);
+    exclusiveOption('antigravity', 'sandbox', options.sandbox !== undefined, 'sandbox', !!permissions.sandbox);
+    const flags = antigravityPermissionFlags(permissions);
+    if (permissions.sandbox)
+        args.push(...flags.args);
+    else if (options.sandbox ?? true)
         args.push('--sandbox');
     args.push('--output-format', 'stream-json');
     if (task.model)

package/dist/agents/drivers/antigravity.js.map

@@ -1 +1 @@
-{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../../src/agents/drivers/antigravity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA6C,MAAM,iBAAiB,CAAC;AAEtF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAW/D,qFAAqF;AACrF,MAAM,UAAU,WAAW,CAAC,UAAmC,EAAE;IAC/D,OAAO,QAAQ,CAAC;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QAChE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;QAC9C,YAAY,EAAE,uBAAuB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,UAAmC,EAAE;IACpF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB;IACrC,IAAI,OAAiC,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;QACtB,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;oBACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC/C,IAAI,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC9B,WAAW,GAAG,IAAI,CAAC;wBACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC3E,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;oBACzE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACzC,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;wBAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;wBAC9C,IAAI,KAAK,EAAE,CAAC;4BACV,QAAQ,IAAI,KAAK,CAAC;4BAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACnD,CAAC;wBACD,MAAM;oBACR,CAAC;oBACD,IAAI,IAAI,KAAK,MAAM;wBAAE,MAAM;oBAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;oBACrE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC;oBACnF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBAC9C,MAAM,EAAE,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC;oBACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACjB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY;4BAClB,GAAG,MAAM;4BACT,IAAI;4BACJ,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACtE,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC1C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBACpB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;wBAClD,MAAM,MAAM,GAAG,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;wBACpD,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,UAAU;4BAChB,GAAG,MAAM;4BACT,IAAI;4BACJ,OAAO,EAAE,KAAK,KAAK,OAAO,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;4BACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC5C,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;oBACjE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC3C,OAAO;wBACL,MAAM,KAAK,SAAS;4BAClB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;4BACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,qCAAqC,MAAM,IAAI,SAAS,GAAG,EAAE,CAAC;oBACjG,IAAI,CAAC,OAAO,CAAC,EAAE;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAM,EAAE,CAAC,CAAC;oBACzE,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3C,IAAI,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,QAAQ,GAAG,EAAE,CAAC;oBACd,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;oBAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;oBACzD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAClE,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAC5D,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE;gCACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACvD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BACpD;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"antigravity.js","sourceRoot":"","sources":["../../../src/agents/drivers/antigravity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA6C,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAwB,MAAM,mBAAmB,CAAC;AAE9F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAW/D,qFAAqF;AACrF,MAAM,UAAU,WAAW,CAAC,UAAmC,EAAE;IAC/D,OAAO,QAAQ,CAAC;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;QACjC,YAAY,EAAE;YACZ,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;YACjC,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC,EAAE;SAC9D;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC;QAC9C,YAAY,EAAE,uBAAuB;KACtC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAA6B;IACtE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;IAC1C,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,IAAI,CAAC,CAAC;IACjG,IAAI,OAAO,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC7G,OAAO;QACL,IAAI,EAAE,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACxD,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAe,EAAE,UAAmC,EAAE;IACpF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,eAAe,CAAC,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,WAAW,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;SAC7C,IAAI,OAAO,CAAC,OAAO,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB;IACrC,IAAI,OAAiC,CAAC;IACtC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;QACtB,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;YAChC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;oBACxD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC/C,IAAI,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC9B,WAAW,GAAG,IAAI,CAAC;wBACnB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC3E,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;oBACzE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACzC,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;wBAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;wBAC9C,IAAI,KAAK,EAAE,CAAC;4BACV,QAAQ,IAAI,KAAK,CAAC;4BAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACnD,CAAC;wBACD,MAAM;oBACR,CAAC;oBACD,IAAI,IAAI,KAAK,MAAM;wBAAE,MAAM;oBAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;oBACrE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC;oBACnF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBAC9C,MAAM,EAAE,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChC,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC;oBACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACjB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY;4BAClB,GAAG,MAAM;4BACT,IAAI;4BACJ,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACtE,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC1C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBACpB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;wBAClD,MAAM,MAAM,GAAG,KAAK,IAAI,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;wBACpD,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,UAAU;4BAChB,GAAG,MAAM;4BACT,IAAI;4BACJ,OAAO,EAAE,KAAK,KAAK,OAAO,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;4BACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC5C,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;oBACjE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBACjD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC3C,OAAO;wBACL,MAAM,KAAK,SAAS;4BAClB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;4BACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,qCAAqC,MAAM,IAAI,SAAS,GAAG,EAAE,CAAC;oBACjG,IAAI,CAAC,OAAO,CAAC,EAAE;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAM,EAAE,CAAC,CAAC;oBACzE,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3C,IAAI,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjD,QAAQ,GAAG,EAAE,CAAC;oBACd,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;oBAC5B,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;oBACzD,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;oBACvD,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAClE,IAAI,WAAW,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAC5D,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE;gCACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACvD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BACpD;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agents/drivers/claude-approvals.d.ts

@@ -0,0 +1,86 @@
+import type { PermissionFlags } from '../permissions.js';
+import type { AgentPermissions, ApprovalHandler, ApprovalRequest, SandboxPolicy } from '../types.js';
+import { type JsonObject } from './json.js';
+/** Name of the permission prompt tool `claudeApprovalTool` serves. */
+export declare const CLAUDE_APPROVAL_TOOL = "approve";
+/** An MCP `tools/call` result. */
+export interface McpToolResult {
+    content: {
+        type: 'text';
+        text: string;
+    }[];
+    isError?: boolean;
+}
+/**
+ * Claude Code's permission prompt tool (`--permission-prompt-tool`) as an MCP tool an app
+ * can serve from its own MCP server. Claude calls it with the tool name and input it wants
+ * to use; the answer allows exactly that input, or denies.
+ */
+export interface ClaudeApprovalTool {
+    name: string;
+    description: string;
+    inputSchema: JsonObject;
+    /**
+     * Answer one call: ask `onApproval`, then reply in Claude's format. Malformed arguments,
+     * a missing or throwing handler, and `signal` aborting (the caller disconnected) all deny.
+     */
+    call(args: unknown, signal?: AbortSignal): Promise<McpToolResult>;
+}
+export interface ClaudeApprovalToolOptions {
+    /** Tool name. Default `approve`. */
+    name?: string;
+    /**
+     * The run's `permissions.sandbox`: requests that would step outside it are denied without
+     * asking (see `claudeSandboxRefuses`). Needs `cwd`.
+     */
+    sandbox?: SandboxPolicy;
+    /** The run's working directory. */
+    cwd?: string;
+}
+/** Build the permission prompt tool around an approval handler. */
+export declare function claudeApprovalTool(onApproval: ApprovalHandler | undefined, options?: ClaudeApprovalToolOptions): ClaudeApprovalTool;
+/** The approval request for one permission prompt tool call, or undefined when the call is malformed. */
+export declare function claudeApprovalRequest(args: unknown): ApprovalRequest | undefined;
+/**
+ * Whether a permission prompt asks for something outside `sandbox`, so neither a person nor
+ * `auto-approve` may grant it. `read-only`: anything but a reading tool, `ExitPlanMode`
+ * included. `workspace-write`: an edit outside `cwd`, and any `Bash` prompt (Claude's sandbox
+ * runs sandboxed commands without asking, so a prompt means an unsandboxed one).
+ */
+export declare function claudeSandboxRefuses(args: unknown, sandbox: SandboxPolicy, cwd: string): boolean;
+/**
+ * Claude Code flags for `permissions`. `read-only` is plan mode; `workspace-write` turns on
+ * Claude's sandbox for Bash (writes limited to `cwd` and temp, see `--settings`), with edits in
+ * `cwd` accepted; `unrestricted` turns the sandbox off. `ask` and `auto-approve` need the
+ * permission prompt tool (`claudeApprovalTool` with the same sandbox); `deny` runs without it,
+ * so Claude refuses what it would have asked about.
+ */
+export declare function claudePermissionFlags(permissions: AgentPermissions): PermissionFlags;
+/**
+ * Environment for a Claude process whose permission prompts wait on a person. Claude gives up
+ * on an MCP tool call after 60 s by default (`MCP_TOOL_TIMEOUT`), which would fail the tool
+ * call while the question is still open. Empty when `env` already sets a timeout.
+ */
+export declare function claudeApprovalEnv(env?: NodeJS.ProcessEnv): Record<string, string>;
+/** Claude Code arguments that route its permission prompts to `tool` on MCP server `server`. */
+export declare function claudeApprovalArgs(server: string, tool?: string): string[];
+export interface ClaudeApprovalServer {
+    /** The MCP server to add to Claude's `--mcp-config`. Its bearer token is in `headers`. */
+    server: {
+        name: string;
+        url: string;
+        headers: Record<string, string>;
+    };
+    /** `--permission-prompt-tool` for that server. */
+    args: string[];
+    /** Stop serving. Open questions are withdrawn (their signals abort) and denied. */
+    close(): Promise<void>;
+}
+/**
+ * Serve `claudeApprovalTool` alone over MCP (streamable HTTP, JSON responses) on a random
+ * loopback port, behind a random bearer token. `name` is the MCP server name. For apps that
+ * have no MCP server of their own to mount the tool on; `claude()` uses it for `task.onApproval`.
+ */
+export declare function startClaudeApprovalServer(onApproval: ApprovalHandler | undefined, options?: {
+    name?: string;
+} & Pick<ClaudeApprovalToolOptions, 'sandbox' | 'cwd'>): Promise<ClaudeApprovalServer>;