helixmind 0.1.0

package/dist/cli/agent/loop.js

@@ -0,0 +1,333 @@
+import { getTool, getAllToolDefinitions } from './tools/registry.js';
+import { renderToolCall, renderToolResult, renderToolDenied, resetToolCounter, renderToolBlockStart, renderToolBlockEnd } from '../ui/tool-output.js';
+import { renderAssistantEnd } from '../ui/chat-view.js';
+import { captureFileSnapshots, fillSnapshotAfter } from '../checkpoints/revert.js';
+import { isRateLimitError, handleRateLimitError, detectCreditsExhausted } from '../providers/rate-limiter.js';
+export class AgentAbortError extends Error {
+    constructor(message = 'Agent aborted') {
+        super(message);
+        this.name = 'AgentAbortError';
+    }
+}
+/**
+ * The agent loop: sends messages to the LLM, executes tool calls,
+ * feeds results back, and repeats until the model is done.
+ *
+ * Supports pause/resume/abort via the AgentController.
+ * AbortController cancels in-flight HTTP requests on emergency stop.
+ */
+export async function runAgentLoop(userMessage, conversationHistory, options, controller) {
+    const { provider, systemPrompt, permissions, toolContext, checkpointStore, sessionBuffer, onTokensUsed, onToolCall, onStepStart, onStepEnd, onThinking, onBeforeAnswer, maxIterations = 200, } = options;
+    const tools = getAllToolDefinitions();
+    resetToolCounter();
+    const messages = [...conversationHistory];
+    // Add user message
+    messages.push({ role: 'user', content: userMessage });
+    let totalText = '';
+    let totalToolCalls = 0;
+    let totalInputTokens = 0;
+    let totalOutputTokens = 0;
+    let iterations = 0;
+    const steps = [];
+    const errors = [];
+    let consecutiveErrors = 0;
+    let toolBlockStarted = false;
+    let toolBlockStartTime = 0;
+    while (iterations < maxIterations) {
+        iterations++;
+        // Check for abort before LLM call
+        if (controller?.isAborted) {
+            throw new AgentAbortError();
+        }
+        // Signal activity indicator: we're about to call the LLM
+        onThinking?.();
+        // Call the LLM with tools — pass abort signal for hard cancellation
+        let response;
+        try {
+            const signal = controller?.signal;
+            response = await provider.chatWithTools(messages, systemPrompt, tools, signal);
+        }
+        catch (apiErr) {
+            // If aborted, throw clean error
+            if (controller?.isAborted) {
+                throw new AgentAbortError();
+            }
+            // Check if it's an abort error from the SDK
+            if (apiErr instanceof Error && apiErr.name === 'AbortError') {
+                throw new AgentAbortError();
+            }
+            const errMsg = apiErr instanceof Error ? apiErr.message : String(apiErr);
+            // Credits exhausted — don't retry, give clear message with free model hint
+            const creditsReason = detectCreditsExhausted(apiErr);
+            if (creditsReason) {
+                sessionBuffer?.addToolError('credits_exhausted', creditsReason);
+                const freeHint = provider.name === 'zai'
+                    ? ' Switch to a free model: /model → glm-4.7-flash or glm-4.5-flash'
+                    : '';
+                throw new Error(`\u274C ${creditsReason}.${freeHint}`);
+            }
+            // Rate limit errors — smart backoff (provider already retried, but handle edge cases)
+            if (isRateLimitError(apiErr) && iterations < maxIterations && consecutiveErrors < 4) {
+                const waitMs = handleRateLimitError(apiErr);
+                consecutiveErrors++;
+                errors.push(`Rate limited (waiting ${Math.ceil(waitMs / 1000)}s)`);
+                sessionBuffer?.addToolError('rate_limit', errMsg);
+                process.stdout.write(`\r\x1b[K  \u23F3 Rate limited \u2014 waiting ${Math.ceil(waitMs / 1000)}s...\n`);
+                await new Promise(r => setTimeout(r, waitMs));
+                continue;
+            }
+            // Other API errors — brief retry
+            if (iterations < maxIterations && consecutiveErrors < 2) {
+                consecutiveErrors++;
+                errors.push(`API error (retrying): ${errMsg}`);
+                sessionBuffer?.addToolError('api_call', errMsg);
+                await new Promise(r => setTimeout(r, 2000));
+                continue;
+            }
+            throw apiErr;
+        }
+        consecutiveErrors = 0;
+        if (response.usage) {
+            totalInputTokens += response.usage.input_tokens;
+            totalOutputTokens += response.usage.output_tokens;
+            onTokensUsed?.(response.usage.input_tokens, response.usage.output_tokens);
+        }
+        // Process response content blocks
+        // IMPORTANT: Collect ALL tool_use blocks first, execute them, then push
+        // ONE assistant message + ONE user message with ALL tool_results.
+        // This is required by the Anthropic API format.
+        const assistantContent = [...response.content];
+        let hasToolUse = false;
+        const toolUseBlocks = [];
+        // Buffer all text — rendered formatted at the end (no inline streaming)
+        for (const block of response.content) {
+            if (block.type === 'text' && block.text) {
+                totalText += block.text;
+            }
+            if (block.type === 'tool_use') {
+                hasToolUse = true;
+                toolUseBlocks.push(block);
+            }
+        }
+        // Execute all tool calls and collect results
+        if (toolUseBlocks.length > 0) {
+            // Start visual tool block on first tool execution
+            if (!toolBlockStarted) {
+                renderToolBlockStart();
+                toolBlockStarted = true;
+                toolBlockStartTime = Date.now();
+            }
+            const toolResults = [];
+            for (const block of toolUseBlocks) {
+                // Check abort between tools
+                if (controller?.isAborted) {
+                    throw new AgentAbortError();
+                }
+                totalToolCalls++;
+                const stepNum = totalToolCalls;
+                const stepLabel = summarizeToolForStep(block.name, block.input);
+                onToolCall?.(block.name);
+                onStepStart?.(stepNum, block.name, stepLabel);
+                sessionBuffer?.addToolCall(block.name, block.input);
+                renderToolCall(block.name, block.input);
+                // Check permission
+                const allowed = await permissions.check(block.name, block.input, (msg) => process.stdout.write(msg));
+                if (allowed) {
+                    const snapshots = checkpointStore
+                        ? captureFileSnapshots(block.name, block.input, toolContext.projectRoot)
+                        : undefined;
+                    const tool = getTool(block.name);
+                    let result;
+                    let stepStatus = 'done';
+                    let stepError;
+                    if (tool) {
+                        try {
+                            result = await tool.execute(block.input, toolContext);
+                        }
+                        catch (err) {
+                            const errMsg = err instanceof Error ? err.message : String(err);
+                            result = `Error: ${errMsg}`;
+                            stepStatus = 'error';
+                            stepError = errMsg;
+                            errors.push(`${block.name}: ${errMsg}`);
+                            consecutiveErrors++;
+                            sessionBuffer?.addToolError(block.name, errMsg);
+                        }
+                    }
+                    else {
+                        result = `Error: Unknown tool "${block.name}"`;
+                        stepStatus = 'error';
+                        stepError = `Unknown tool "${block.name}"`;
+                    }
+                    steps.push({ num: stepNum, tool: block.name, label: stepLabel, status: stepStatus, error: stepError });
+                    onStepEnd?.(stepNum, block.name, stepStatus, stepError);
+                    if (snapshots)
+                        fillSnapshotAfter(snapshots);
+                    if (checkpointStore) {
+                        checkpointStore.createForTool(block.name, block.input, result, messages.length, snapshots);
+                    }
+                    renderToolResult(block.name, result);
+                    // Build tool_result entry
+                    if (stepStatus === 'error' && consecutiveErrors < 3) {
+                        toolResults.push({
+                            type: 'tool_result',
+                            tool_use_id: block.id,
+                            content: `${result}\n\n[Auto-recovery hint: The above tool call failed. Analyze the error, adjust your approach, and try again. Do not repeat the exact same failing call.]`,
+                            is_error: true,
+                        });
+                    }
+                    else {
+                        toolResults.push({
+                            type: 'tool_result',
+                            tool_use_id: block.id,
+                            content: result,
+                            is_error: stepStatus === 'error',
+                        });
+                    }
+                    if (stepStatus === 'done')
+                        consecutiveErrors = 0;
+                    // Store in spiral (fire-and-forget)
+                    if (toolContext.spiralEngine) {
+                        const insight = `Tool ${block.name}: ${JSON.stringify(block.input).slice(0, 200)}`;
+                        toolContext.spiralEngine.store(insight, 'code', { tags: ['tool_use', block.name] }).catch(() => { });
+                    }
+                }
+                else {
+                    // User denied
+                    renderToolDenied(block.name);
+                    steps.push({ num: stepNum, tool: block.name, label: stepLabel, status: 'error', error: 'denied' });
+                    onStepEnd?.(stepNum, block.name, 'error', 'denied by user');
+                    toolResults.push({
+                        type: 'tool_result',
+                        tool_use_id: block.id,
+                        content: 'User denied this action.',
+                        is_error: true,
+                    });
+                }
+            }
+            // Push ONE assistant message with ALL content blocks,
+            // then ONE user message with ALL tool_results
+            messages.push({ role: 'assistant', content: assistantContent });
+            messages.push({ role: 'user', content: toolResults });
+        }
+        // If no tool use, the model is done
+        if (!hasToolUse || response.stop_reason !== 'tool_use') {
+            // Stop activity indicator (writes colorful "Done" line)
+            onBeforeAnswer?.();
+            // Close tool block if open
+            if (toolBlockStarted) {
+                renderToolBlockEnd(totalToolCalls, Date.now() - toolBlockStartTime);
+                toolBlockStarted = false;
+            }
+            // Render final formatted answer
+            if (totalText) {
+                renderAssistantEnd(totalText);
+            }
+            break;
+        }
+    }
+    if (iterations >= maxIterations) {
+        process.stdout.write(`\n  [Agent reached maximum iterations (${maxIterations}). Use --max-iterations to increase.]\n`);
+    }
+    return {
+        text: totalText,
+        toolCalls: totalToolCalls,
+        tokensUsed: { input: totalInputTokens, output: totalOutputTokens },
+        aborted: false,
+        steps,
+        errors,
+        updatedHistory: messages,
+    };
+}
+/** Summarize a tool call for the step display */
+function summarizeToolForStep(name, input) {
+    switch (name) {
+        case 'read_file': return `reading ${basename(String(input.path || ''))}`;
+        case 'write_file': return `writing ${basename(String(input.path || ''))}`;
+        case 'edit_file': return `editing ${basename(String(input.path || ''))}`;
+        case 'list_directory': return `listing ${input.path || '.'}`;
+        case 'search_files': return `searching "${input.pattern}"`;
+        case 'find_files': return `finding "${input.pattern}"`;
+        case 'run_command': return `running command`;
+        case 'git_status': return 'git status';
+        case 'git_diff': return 'git diff';
+        case 'git_commit': return 'git commit';
+        case 'git_log': return 'git log';
+        case 'spiral_query': return 'querying spiral';
+        case 'spiral_store': return 'storing in spiral';
+        default: return name;
+    }
+}
+function basename(path) {
+    const parts = path.replace(/\\/g, '/').split('/');
+    return parts[parts.length - 1] || path;
+}
+/**
+ * Controller for pausing/resuming/aborting the agent loop.
+ *
+ * Uses an AbortController for hard cancellation of in-flight HTTP requests.
+ * ESC → abort() → AbortController.abort() → HTTP request cancelled immediately.
+ */
+export class AgentController {
+    _paused = false;
+    _aborted = false;
+    _abortController = new AbortController();
+    pauseResolve = null;
+    get isPaused() {
+        return this._paused;
+    }
+    get isAborted() {
+        return this._aborted;
+    }
+    /** AbortSignal to pass to HTTP requests for hard cancellation */
+    get signal() {
+        return this._abortController.signal;
+    }
+    pause() {
+        this._paused = true;
+    }
+    resume() {
+        this._paused = false;
+        this._aborted = false;
+        if (this.pauseResolve) {
+            this.pauseResolve();
+            this.pauseResolve = null;
+        }
+    }
+    /**
+     * EMERGENCY STOP — aborts immediately:
+     * 1. Sets abort flag (checked between steps)
+     * 2. Cancels AbortController (kills in-flight HTTP requests)
+     * 3. Resolves any pending pause promise
+     */
+    abort() {
+        this._aborted = true;
+        this._paused = false;
+        this._abortController.abort();
+        if (this.pauseResolve) {
+            this.pauseResolve();
+            this.pauseResolve = null;
+        }
+    }
+    async checkPause() {
+        if (this._aborted) {
+            throw new AgentAbortError();
+        }
+        if (this._paused) {
+            await new Promise((resolve) => {
+                this.pauseResolve = resolve;
+            });
+            if (this._aborted) {
+                throw new AgentAbortError();
+            }
+        }
+    }
+    /** Reset state for a new round — creates fresh AbortController */
+    reset() {
+        this._paused = false;
+        this._aborted = false;
+        this._abortController = new AbortController();
+        this.pauseResolve = null;
+    }
+}
+//# sourceMappingURL=loop.js.map

package/dist/cli/agent/loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.js","sourceRoot":"","sources":["../../../src/cli/agent/loop.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAoB,MAAM,qBAAqB,CAAC;AAEvF,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACtJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAGnF,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE9G,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,UAAkB,eAAe;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AA+BD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,mBAAkC,EAClC,OAAyB,EACzB,UAA4B;IAE5B,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,WAAW,EACX,eAAe,EACf,aAAa,EACb,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,cAAc,EACd,aAAa,GAAG,GAAG,GACpB,GAAG,OAAO,CAAC;IAEZ,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;IACtC,gBAAgB,EAAE,CAAC;IACnB,MAAM,QAAQ,GAAkB,CAAC,GAAG,mBAAmB,CAAC,CAAC;IAEzD,mBAAmB;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAEtD,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAE3B,OAAO,UAAU,GAAG,aAAa,EAAE,CAAC;QAClC,UAAU,EAAE,CAAC;QAEb,kCAAkC;QAClC,IAAI,UAAU,EAAE,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;QAED,yDAAyD;QACzD,UAAU,EAAE,EAAE,CAAC;QAEf,oEAAoE;QACpE,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,CAAC;YAClC,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,gCAAgC;YAChC,IAAI,UAAU,EAAE,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YACD,4CAA4C;YAC5C,IAAI,MAAM,YAAY,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC5D,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAEzE,2EAA2E;YAC3E,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,aAAa,EAAE,CAAC;gBAClB,aAAa,EAAE,YAAY,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,KAAK,KAAK;oBACtC,CAAC,CAAC,kEAAkE;oBACpE,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,UAAU,aAAa,IAAI,QAAQ,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,sFAAsF;YACtF,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,UAAU,GAAG,aAAa,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBACpF,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBAC5C,iBAAiB,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnE,aAAa,EAAE,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAElD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,iCAAiC;YACjC,IAAI,UAAU,GAAG,aAAa,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;gBACxD,iBAAiB,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;gBAC/C,aAAa,EAAE,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAEhD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC5C,SAAS;YACX,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;QAED,iBAAiB,GAAG,CAAC,CAAC;QAEtB,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,gBAAgB,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;YAChD,iBAAiB,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;YAClD,YAAY,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5E,CAAC;QAED,kCAAkC;QAClC,wEAAwE;QACxE,kEAAkE;QAClE,gDAAgD;QAChD,MAAM,gBAAgB,GAAmB,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,aAAa,GAAmB,EAAE,CAAC;QAEzC,wEAAwE;QACxE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACxC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC;YAC1B,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,UAAU,GAAG,IAAI,CAAC;gBAClB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,kDAAkD;YAClD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,oBAAoB,EAAE,CAAC;gBACvB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,CAAC;YACD,MAAM,WAAW,GAKZ,EAAE,CAAC;YAER,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;gBAClC,4BAA4B;gBAC5B,IAAI,UAAU,EAAE,SAAS,EAAE,CAAC;oBAC1B,MAAM,IAAI,eAAe,EAAE,CAAC;gBAC9B,CAAC;gBAED,cAAc,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,cAAc,CAAC;gBAC/B,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEhE,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,WAAW,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9C,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAEpD,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAExC,mBAAmB;gBACnB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CACrC,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,KAAK,EACX,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CACnC,CAAC;gBAEF,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,SAAS,GAAG,eAAe;wBAC/B,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC;wBACxE,CAAC,CAAC,SAAS,CAAC;oBAEd,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,IAAI,MAAc,CAAC;oBACnB,IAAI,UAAU,GAAqB,MAAM,CAAC;oBAC1C,IAAI,SAA6B,CAAC;oBAElC,IAAI,IAAI,EAAE,CAAC;wBACT,IAAI,CAAC;4BACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;wBACxD,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChE,MAAM,GAAG,UAAU,MAAM,EAAE,CAAC;4BAC5B,UAAU,GAAG,OAAO,CAAC;4BACrB,SAAS,GAAG,MAAM,CAAC;4BACnB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;4BACxC,iBAAiB,EAAE,CAAC;4BACpB,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAClD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,wBAAwB,KAAK,CAAC,IAAI,GAAG,CAAC;wBAC/C,UAAU,GAAG,OAAO,CAAC;wBACrB,SAAS,GAAG,iBAAiB,KAAK,CAAC,IAAI,GAAG,CAAC;oBAC7C,CAAC;oBAED,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;oBACvG,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;oBAExD,IAAI,SAAS;wBAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;oBAE5C,IAAI,eAAe,EAAE,CAAC;wBACpB,eAAe,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC7F,CAAC;oBAED,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAErC,0BAA0B;oBAC1B,IAAI,UAAU,KAAK,OAAO,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;wBACpD,WAAW,CAAC,IAAI,CAAC;4BACf,IAAI,EAAE,aAAa;4BACnB,WAAW,EAAE,KAAK,CAAC,EAAE;4BACrB,OAAO,EAAE,GAAG,MAAM,0JAA0J;4BAC5K,QAAQ,EAAE,IAAI;yBACf,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,WAAW,CAAC,IAAI,CAAC;4BACf,IAAI,EAAE,aAAa;4BACnB,WAAW,EAAE,KAAK,CAAC,EAAE;4BACrB,OAAO,EAAE,MAAM;4BACf,QAAQ,EAAE,UAAU,KAAK,OAAO;yBACjC,CAAC,CAAC;oBACL,CAAC;oBAED,IAAI,UAAU,KAAK,MAAM;wBAAE,iBAAiB,GAAG,CAAC,CAAC;oBAEjD,oCAAoC;oBACpC,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;wBAC7B,MAAM,OAAO,GAAG,QAAQ,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;wBACnF,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACtG,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,cAAc;oBACd,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACnG,SAAS,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;oBAE5D,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,aAAa;wBACnB,WAAW,EAAE,KAAK,CAAC,EAAE;wBACrB,OAAO,EAAE,0BAA0B;wBACnC,QAAQ,EAAE,IAAI;qBACf,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,sDAAsD;YACtD,8CAA8C;YAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,oCAAoC;QACpC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;YACvD,wDAAwD;YACxD,cAAc,EAAE,EAAE,CAAC;YACnB,2BAA2B;YAC3B,IAAI,gBAAgB,EAAE,CAAC;gBACrB,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC;gBACpE,gBAAgB,GAAG,KAAK,CAAC;YAC3B,CAAC;YACD,gCAAgC;YAChC,IAAI,SAAS,EAAE,CAAC;gBACd,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAChC,CAAC;YACD,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,aAAa,yCAAyC,CAAC,CAAC;IACzH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,iBAAiB,EAAE;QAClE,OAAO,EAAE,KAAK;QACd,KAAK;QACL,MAAM;QACN,cAAc,EAAE,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAA8B;IACxE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACzE,KAAK,YAAY,CAAC,CAAC,OAAO,WAAW,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1E,KAAK,WAAW,CAAC,CAAC,OAAO,WAAW,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACzE,KAAK,gBAAgB,CAAC,CAAC,OAAO,WAAW,KAAK,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAC7D,KAAK,cAAc,CAAC,CAAC,OAAO,cAAc,KAAK,CAAC,OAAO,GAAG,CAAC;QAC3D,KAAK,YAAY,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,OAAO,GAAG,CAAC;QACvD,KAAK,aAAa,CAAC,CAAC,OAAO,iBAAiB,CAAC;QAC7C,KAAK,YAAY,CAAC,CAAC,OAAO,YAAY,CAAC;QACvC,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,YAAY,CAAC,CAAC,OAAO,YAAY,CAAC;QACvC,KAAK,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC;QACjC,KAAK,cAAc,CAAC,CAAC,OAAO,iBAAiB,CAAC;QAC9C,KAAK,cAAc,CAAC,CAAC,OAAO,mBAAmB,CAAC;QAChD,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,KAAK,CAAC;IACjB,gBAAgB,GAAoB,IAAI,eAAe,EAAE,CAAC;IAC1D,YAAY,GAAwB,IAAI,CAAC;IAEjD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,iEAAiE;IACjE,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACtC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/cli/agent/permissions.d.ts

@@ -0,0 +1,28 @@
+import * as readline from 'node:readline';
+export type PermissionLevel = 'auto' | 'ask' | 'dangerous';
+export declare class PermissionManager {
+    private yoloMode;
+    private skipPermissionsMode;
+    private rl;
+    private onPromptActive?;
+    setReadline(rl: readline.Interface): void;
+    /** Callback to suppress statusbar while permission prompt is active */
+    setPromptCallback(cb: (active: boolean) => void): void;
+    setYolo(enabled: boolean): void;
+    isYolo(): boolean;
+    setSkipPermissions(enabled: boolean): void;
+    isSkipPermissions(): boolean;
+    /** Get the current mode label for display */
+    getModeLabel(): 'safe' | 'skip' | 'yolo';
+    /**
+     * Check if a tool call is allowed.
+     * Returns true if allowed, false if denied.
+     */
+    check(toolName: string, input: Record<string, unknown>, displayFn: (msg: string) => void): Promise<boolean>;
+    private promptUser;
+    /** Ask a single question via readline, suppressing statusbar during input */
+    private ask;
+    /** Format a human-readable description of what a tool call does */
+    private formatToolDetail;
+}
+//# sourceMappingURL=permissions.d.ts.map

package/dist/cli/agent/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/cli/agent/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAG1C,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,CAAC;AAwB3D,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,mBAAmB,CAAS;IACpC,OAAO,CAAC,EAAE,CAAmC;IAC7C,OAAO,CAAC,cAAc,CAAC,CAA4B;IAEnD,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,SAAS,GAAG,IAAI;IAIzC,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI;IAItD,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAI/B,MAAM,IAAI,OAAO;IAIjB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAI1C,iBAAiB,IAAI,OAAO;IAI5B,6CAA6C;IAC7C,YAAY,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM;IAMxC;;;OAGG;IACG,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAC/B,OAAO,CAAC,OAAO,CAAC;YAuBL,UAAU;IAoExB,6EAA6E;IAC7E,OAAO,CAAC,GAAG;IAUX,mEAAmE;IACnE,OAAO,CAAC,gBAAgB;CA8BzB"}

package/dist/cli/agent/permissions.js

@@ -0,0 +1,180 @@
+import { classifyCommand } from './sandbox.js';
+/** Map tools to their default permission level */
+const TOOL_PERMISSIONS = {
+    // Auto-allow (read-only operations)
+    read_file: 'auto',
+    list_directory: 'auto',
+    search_files: 'auto',
+    find_files: 'auto',
+    git_status: 'auto',
+    git_log: 'auto',
+    git_diff: 'auto',
+    spiral_query: 'auto',
+    // Ask user (write operations)
+    edit_file: 'ask',
+    write_file: 'ask',
+    git_commit: 'ask',
+    spiral_store: 'auto', // Auto — spiral stores are low-risk
+    // Dangerous (shell execution)
+    run_command: 'ask', // Upgraded to 'dangerous' based on command content
+};
+export class PermissionManager {
+    yoloMode = false;
+    skipPermissionsMode = false;
+    rl = null;
+    onPromptActive;
+    setReadline(rl) {
+        this.rl = rl;
+    }
+    /** Callback to suppress statusbar while permission prompt is active */
+    setPromptCallback(cb) {
+        this.onPromptActive = cb;
+    }
+    setYolo(enabled) {
+        this.yoloMode = enabled;
+    }
+    isYolo() {
+        return this.yoloMode;
+    }
+    setSkipPermissions(enabled) {
+        this.skipPermissionsMode = enabled;
+    }
+    isSkipPermissions() {
+        return this.skipPermissionsMode;
+    }
+    /** Get the current mode label for display */
+    getModeLabel() {
+        if (this.yoloMode)
+            return 'yolo';
+        if (this.skipPermissionsMode)
+            return 'skip';
+        return 'safe';
+    }
+    /**
+     * Check if a tool call is allowed.
+     * Returns true if allowed, false if denied.
+     */
+    async check(toolName, input, displayFn) {
+        let level = TOOL_PERMISSIONS[toolName] ?? 'ask';
+        // Upgrade run_command based on command content
+        if (toolName === 'run_command' && typeof input.command === 'string') {
+            const cmdLevel = classifyCommand(input.command);
+            if (cmdLevel === 'dangerous')
+                level = 'dangerous';
+            else if (cmdLevel === 'ask')
+                level = 'ask';
+        }
+        // Auto-allow
+        if (level === 'auto')
+            return true;
+        // YOLO mode: auto-allow everything, even dangerous
+        if (this.yoloMode)
+            return true;
+        // Skip-permissions mode: auto-allow 'ask' level, still prompt for 'dangerous'
+        if (this.skipPermissionsMode && level !== 'dangerous')
+            return true;
+        // Ask user with full context about what's being done
+        return this.promptUser(toolName, input, level, displayFn);
+    }
+    async promptUser(toolName, input, level, displayFn) {
+        if (!this.rl)
+            return true; // No readline = non-interactive, allow
+        const defaultYes = level !== 'dangerous';
+        // Build detailed context about what the tool wants to do
+        const detail = this.formatToolDetail(toolName, input);
+        const levelTag = level === 'dangerous' ? '\x1b[31m\u26A0 DANGEROUS\x1b[0m' : '\x1b[33m\u270F\uFE0F  WRITE\x1b[0m';
+        process.stdout.write('\n');
+        process.stdout.write(`  \x1b[2m\u250C\u2500 ${levelTag} \x1b[2m\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\x1b[0m\n`);
+        process.stdout.write(`  \x1b[2m\u2502\x1b[0m ${detail}\n`);
+        process.stdout.write(`  \x1b[2m\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\x1b[0m\n`);
+        // Show options
+        const yKey = defaultYes ? 'Y' : 'y';
+        const nKey = defaultYes ? 'n' : 'N';
+        process.stdout.write(`  [${yKey}] Allow  [${nKey}] Deny  \x1b[2m[s] Skip once  [a] Always skip\x1b[0m\n`);
+        process.stdout.write(`  \x1b[2m[!s] --skip-permissions  [!y] --yolo mode\x1b[0m\n`);
+        const answer = await this.ask('  > ');
+        const trimmed = answer.trim().toLowerCase();
+        switch (trimmed) {
+            case '':
+                return defaultYes;
+            case 'y':
+            case 'yes':
+                return true;
+            case 'n':
+            case 'no':
+                return false;
+            case 's':
+                // Skip once — allow just this one
+                return true;
+            case 'a':
+                // Always skip — enable skip-permissions for this session
+                this.skipPermissionsMode = true;
+                process.stdout.write('  \x1b[33m\u26A1 Skip-permissions enabled for this session\x1b[0m\n');
+                return true;
+            case '!s': {
+                // Double confirmation for skip-permissions mode
+                const confirm = await this.ask('  \x1b[33m\u26A0 Enable --skip-permissions? (y/N)\x1b[0m > ');
+                if (confirm.trim().toLowerCase() === 'y') {
+                    this.skipPermissionsMode = true;
+                    process.stdout.write('  \x1b[33m\u26A1 --skip-permissions mode enabled\x1b[0m\n');
+                    return true;
+                }
+                return false;
+            }
+            case '!y': {
+                // Double confirmation for YOLO mode
+                const confirm = await this.ask('  \x1b[31m\u26A0 Enable --yolo (ALL permissions skipped)? (y/N)\x1b[0m > ');
+                if (confirm.trim().toLowerCase() === 'y') {
+                    this.yoloMode = true;
+                    process.stdout.write('  \x1b[31m\u{1F525} YOLO mode enabled \u2014 no more confirmations\x1b[0m\n');
+                    return true;
+                }
+                return false;
+            }
+            default:
+                return defaultYes;
+        }
+    }
+    /** Ask a single question via readline, suppressing statusbar during input */
+    ask(prompt) {
+        return new Promise((resolve) => {
+            this.onPromptActive?.(true);
+            this.rl.question(prompt, (answer) => {
+                this.onPromptActive?.(false);
+                resolve(answer);
+            });
+        });
+    }
+    /** Format a human-readable description of what a tool call does */
+    formatToolDetail(name, input) {
+        switch (name) {
+            case 'write_file': {
+                const path = String(input.path || '');
+                const content = String(input.content || '');
+                const lines = content.split('\n').length;
+                return `\x1b[1mWrite file\x1b[0m \x1b[36m${path}\x1b[0m \x1b[2m(${lines} lines)\x1b[0m`;
+            }
+            case 'edit_file': {
+                const path = String(input.path || '');
+                const oldStr = String(input.old_string || '').slice(0, 60).replace(/\n/g, '\\n');
+                const newStr = String(input.new_string || '').slice(0, 60).replace(/\n/g, '\\n');
+                return `\x1b[1mEdit file\x1b[0m \x1b[36m${path}\x1b[0m\n  \x1b[2m\u2502\x1b[0m  \x1b[31m- ${oldStr}${String(input.old_string || '').length > 60 ? '\u2026' : ''}\x1b[0m\n  \x1b[2m\u2502\x1b[0m  \x1b[32m+ ${newStr}${String(input.new_string || '').length > 60 ? '\u2026' : ''}\x1b[0m`;
+            }
+            case 'run_command': {
+                const cmd = String(input.command || '');
+                return `\x1b[1mRun command\x1b[0m \x1b[33m$ ${cmd}\x1b[0m`;
+            }
+            case 'git_commit': {
+                const msg = String(input.message || '');
+                return `\x1b[1mGit commit\x1b[0m \x1b[36m"${msg}"\x1b[0m`;
+            }
+            default: {
+                const summary = Object.entries(input)
+                    .map(([k, v]) => `${k}: ${String(v).slice(0, 50)}`)
+                    .join(', ');
+                return `\x1b[1m${name}\x1b[0m \x1b[2m${summary.slice(0, 100)}\x1b[0m`;
+            }
+        }
+    }
+}
+//# sourceMappingURL=permissions.js.map

package/dist/cli/agent/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/cli/agent/permissions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAI/C,kDAAkD;AAClD,MAAM,gBAAgB,GAAoC;IACxD,oCAAoC;IACpC,SAAS,EAAE,MAAM;IACjB,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,MAAM;IAClB,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,MAAM;IACf,QAAQ,EAAE,MAAM;IAChB,YAAY,EAAE,MAAM;IAEpB,8BAA8B;IAC9B,SAAS,EAAE,KAAK;IAChB,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,KAAK;IACjB,YAAY,EAAE,MAAM,EAAE,oCAAoC;IAE1D,8BAA8B;IAC9B,WAAW,EAAE,KAAK,EAAE,mDAAmD;CACxE,CAAC;AAEF,MAAM,OAAO,iBAAiB;IACpB,QAAQ,GAAG,KAAK,CAAC;IACjB,mBAAmB,GAAG,KAAK,CAAC;IAC5B,EAAE,GAA8B,IAAI,CAAC;IACrC,cAAc,CAA6B;IAEnD,WAAW,CAAC,EAAsB;QAChC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,uEAAuE;IACvE,iBAAiB,CAAC,EAA6B;QAC7C,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,OAAgB;QACtB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,kBAAkB,CAAC,OAAgB;QACjC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,6CAA6C;IAC7C,YAAY;QACV,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC;QACjC,IAAI,IAAI,CAAC,mBAAmB;YAAE,OAAO,MAAM,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACT,QAAgB,EAChB,KAA8B,EAC9B,SAAgC;QAEhC,IAAI,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;QAEhD,+CAA+C;QAC/C,IAAI,QAAQ,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,QAAQ,KAAK,WAAW;gBAAE,KAAK,GAAG,WAAW,CAAC;iBAC7C,IAAI,QAAQ,KAAK,KAAK;gBAAE,KAAK,GAAG,KAAK,CAAC;QAC7C,CAAC;QAED,aAAa;QACb,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAElC,mDAAmD;QACnD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE/B,8EAA8E;QAC9E,IAAI,IAAI,CAAC,mBAAmB,IAAI,KAAK,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAEnE,qDAAqD;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,QAAgB,EAChB,KAA8B,EAC9B,KAAsB,EACtB,SAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,uCAAuC;QAElE,MAAM,UAAU,GAAG,KAAK,KAAK,WAAW,CAAC;QAEzC,yDAAyD;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,oCAAoC,CAAC;QAElH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,QAAQ,2IAA2I,CAAC,CAAC;QACnM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8MAA8M,CAAC,CAAC;QAErO,eAAe;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACpC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,aAAa,IAAI,wDAAwD,CAAC,CAAC;QAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,EAAE;gBACL,OAAO,UAAU,CAAC;YACpB,KAAK,GAAG,CAAC;YAAC,KAAK,KAAK;gBAClB,OAAO,IAAI,CAAC;YACd,KAAK,GAAG,CAAC;YAAC,KAAK,IAAI;gBACjB,OAAO,KAAK,CAAC;YACf,KAAK,GAAG;gBACN,kCAAkC;gBAClC,OAAO,IAAI,CAAC;YACd,KAAK,GAAG;gBACN,yDAAyD;gBACzD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;gBAC5F,OAAO,IAAI,CAAC;YACd,KAAK,IAAI,CAAC,CAAC,CAAC;gBACV,gDAAgD;gBAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;gBAC9F,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;oBACzC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;oBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;oBAClF,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,IAAI,CAAC,CAAC,CAAC;gBACV,oCAAoC;gBACpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;gBAC5G,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;oBACzC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;oBACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;oBACpG,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD;gBACE,OAAO,UAAU,CAAC;QACtB,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,GAAG,CAAC,MAAc;QACxB,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACrC,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,EAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;gBACnC,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IAC3D,gBAAgB,CAAC,IAAY,EAAE,KAA8B;QACnE,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;gBACzC,OAAO,oCAAoC,IAAI,mBAAmB,KAAK,gBAAgB,CAAC;YAC1F,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACjF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACjF,OAAO,mCAAmC,IAAI,8CAA8C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,8CAA8C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;YAC5R,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,OAAO,uCAAuC,GAAG,SAAS,CAAC;YAC7D,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACxC,OAAO,qCAAqC,GAAG,UAAU,CAAC;YAC5D,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;qBAClC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;qBAClD,IAAI,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO,UAAU,IAAI,kBAAkB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/cli/agent/sandbox.d.ts

@@ -0,0 +1,17 @@
+export declare class SecurityError extends Error {
+    constructor(message: string);
+}
+/**
+ * Validate that a requested path is within the project root
+ * and not a sensitive file. Returns the resolved absolute path.
+ */
+export declare function validatePath(requestedPath: string, projectRoot: string): string;
+/**
+ * Classify a shell command's danger level.
+ */
+export declare function classifyCommand(cmd: string): 'safe' | 'ask' | 'dangerous';
+/**
+ * Check if a command is blocked entirely (should never run).
+ */
+export declare function isBlockedCommand(cmd: string): boolean;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/cli/agent/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/cli/agent/sandbox.ts"],"names":[],"mappings":"AAmCA,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAkD/E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,WAAW,CA2BzE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMrD"}