holycodex 0.9.5 → 0.10.0

package/dist/cli.js

@@ -4252,7 +4252,7 @@ function superRefine(fn, params) {
 }
 //#endregion
 //#region packages/cli/src/catalog.ts
-var VERSION = "0.9.5";
+var VERSION = "0.10.0";
 var SKILLS = [
 	"ast-grep",
 	"caveman",
@@ -4965,6 +4965,7 @@ var ORIGINAL_ROOT = "# holycodex original root: ";
 var ORIGINAL_TABLE_KEY = "# holycodex original table key: ";
 var PLAN_PREFIX = "# holycodex plan: ";
 var MAX_SUBAGENTS_PREFIX = "# holycodex max-subagents: ";
+var MANAGED_PERMISSION_PROFILE = "holycodex-config";
 var OLD_NAMESPACES = [
 	"marketplaces.sisyphuslabs",
 	"plugins.\"omo@sisyphuslabs\"",
@@ -5116,6 +5117,7 @@ function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents
 	const controlled = [
 		"approval_policy",
 		"sandbox_mode",
+		"default_permissions",
 		"max_concurrent_threads_per_session",
 		"status_line",
 		"model_verbosity",
@@ -5124,6 +5126,7 @@ function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents
 	const preservedRoot = [
 		"approval_policy",
 		"sandbox_mode",
+		"default_permissions",
 		"max_concurrent_threads_per_session",
 		"status_line",
 		"model_verbosity",
@@ -5139,8 +5142,10 @@ function installConfig(input, mode, _platform, plan = DEFAULT_PLAN, maxSubagents
 	const approval = mode === "default" ? "on-request" : "never";
 	const sandbox = mode === "dangerous" ? "danger-full-access" : "workspace-write";
 	const original = originalControlled ? `${ORIGINAL_ROOT}${Buffer.from(originalControlled).toString("base64")}\n` : "";
-	const rootBlock = `${START}\n${PLAN_PREFIX}${plan}\n${maxSubagents === void 0 ? "" : `${MAX_SUBAGENTS_PREFIX}${maxSubagents}\n`}${original}${model}${effort}model_verbosity = "low"\nservice_tier = "${fast ? "fast" : "default"}"\napproval_policy = "${approval}"\nsandbox_mode = "${sandbox}"\nstatus_line = ${mergedStatusLine(controlled[3])}\n${END}`;
+	const rootBlock = `${START}\n${PLAN_PREFIX}${plan}\n${maxSubagents === void 0 ? "" : `${MAX_SUBAGENTS_PREFIX}${maxSubagents}\n`}${original}${model}${effort}model_verbosity = "low"\nservice_tier = "${fast ? "fast" : "default"}"\napproval_policy = "${approval}"\nsandbox_mode = "${sandbox}"\ndefault_permissions = "${MANAGED_PERMISSION_PROFILE}"\nstatus_line = ${mergedStatusLine(rootValue(root, "status_line"))}\n${END}`;
 	let configured = `${preservedRoot ? `${preservedRoot}\n` : ""}${rootBlock}${tables ? `\n\n${tables}` : ""}`;
+	configured = injectTableKeys(configured, `permissions.${MANAGED_PERMISSION_PROFILE}`, [["description", "\"HolyCodex config.toml permissions.\""], ["extends", "\":workspace\""]]);
+	configured = injectTableKeys(configured, `permissions.${MANAGED_PERMISSION_PROFILE}.network`, [["enabled", "true"]]);
 	configured = injectTableKeys(configured, "features", [
 		["default_mode_request_user_input", "true"],
 		["multi_agent", "true"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "holycodex",
-  "version": "0.9.5",
+  "version": "0.10.0",
   "description": "Lean Codex-only agent toolkit installer and doctor",
   "keywords": [
     "agents",
@@ -39,7 +39,7 @@
     "prepack": "vp run --workspace-root build"
   },
   "dependencies": {
-    "@holycodex/plugin": "0.9.5",
+    "@holycodex/plugin": "0.10.0",
     "zod": "^4.4.3"
   },
   "engines": {