hostwares-cli 2.4.4 → 2.4.5

package/dist/index.js

@@ -2031,14 +2031,14 @@ async function executePending(calls, opts, emit, checkpoint) {
     let oldContent = null;
     if (WRITE_TOOLS.has(call.name) && typeof call.input?.path === "string" && call.input.path) {
       try {
-        const { readFileSync: readFileSync9, existsSync: existsSync8 } = await import("fs");
-        const { resolve: pathResolve2, join: join9 } = await import("path");
-        const { homedir: homedir5 } = await import("os");
+        const { readFileSync: readFileSync10, existsSync: existsSync9 } = await import("fs");
+        const { resolve: pathResolve2, join: join10 } = await import("path");
+        const { homedir: homedir6 } = await import("os");
         const raw = String(call.input.path);
-        const expanded = raw === "~" ? homedir5() : raw.startsWith("~/") ? join9(homedir5(), raw.slice(2)) : raw;
+        const expanded = raw === "~" ? homedir6() : raw.startsWith("~/") ? join10(homedir6(), raw.slice(2)) : raw;
         const abs = pathResolve2(expanded);
-        if (existsSync8(abs))
-          oldContent = readFileSync9(abs, "utf8");
+        if (existsSync9(abs))
+          oldContent = readFileSync10(abs, "utf8");
         else
           oldContent = "";
       } catch {
@@ -2721,9 +2721,9 @@ var init_device = __esm({
 });
 
 // src/index.ts
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync9 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname4, join as join8 } from "path";
+import { dirname as dirname4, join as join9 } from "path";
 
 // src/agent/run.ts
 init_esm();
@@ -2883,6 +2883,9 @@ async function pickScope(options) {
 init_theme();
 init_render();
 init_esm();
+import { existsSync as existsSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync5, renameSync as renameSync2, chmodSync as chmodSync2 } from "fs";
+import { join as join7 } from "path";
+import { homedir as homedir5 } from "os";
 var READ_ONLY = /* @__PURE__ */ new Set([
   "read_file",
   "list_directory",
@@ -2923,6 +2926,40 @@ function permissionRules() {
   }
   return cachedRules;
 }
+function reloadPermissionRules() {
+  cachedRules = null;
+}
+function saveGlobalPermissionRule(rule) {
+  const { HW_DIR: HW_DIR2 } = getHwDir();
+  const file = join7(HW_DIR2, "permissions.json");
+  let rules = [];
+  try {
+    if (existsSync7(file)) {
+      const parsed = JSON.parse(readFileSync7(file, "utf8"));
+      const arr = Array.isArray(parsed) ? parsed : Array.isArray(parsed?.rules) ? parsed.rules : [];
+      rules = arr.filter((r) => !!r && typeof r.tool === "string" && ["allow", "ask", "deny"].includes(r.effect));
+    }
+  } catch {
+    rules = [];
+  }
+  const exists = rules.some((r) => r.tool === rule.tool && (r.match ?? "") === (rule.match ?? "") && r.effect === rule.effect);
+  if (!exists) rules.push(rule);
+  try {
+    if (!existsSync7(HW_DIR2)) mkdirSync5(HW_DIR2, { recursive: true, mode: 448 });
+    const tmp = join7(HW_DIR2, `permissions.json.tmp-${process.pid}`);
+    writeFileSync5(tmp, JSON.stringify(rules, null, 2) + "\n", { mode: 384 });
+    renameSync2(tmp, file);
+    try {
+      chmodSync2(file, 384);
+    } catch {
+    }
+  } catch {
+  }
+  reloadPermissionRules();
+}
+function getHwDir() {
+  return { HW_DIR: join7(homedir5(), ".hostwares") };
+}
 function isProjectTrusted(cwd = process.cwd()) {
   return (getConfig().trustedProjects ?? []).includes(cwd);
 }
@@ -2967,15 +3004,11 @@ ${c.yellow(glyph.caret)} ${describe(tool)}
       const toolPath = String(tool.input.path ?? tool.input.localPath ?? "");
       const rel = toolPath ? shortRel(toolPath) : "";
       const dir = rel ? rel.split("/").slice(0, -1).join("/") || "." : "";
-      const scopeOpts = [
-        `Specific paths      \u2192 ${rel || tool.name}  ${c.dim("(this file only)")}`,
-        `Complete directory  \u2192 ${dir || "."}  ${c.dim("(all files here)")}`,
-        `Entire Tool         \u2192 *  ${c.dim(`(always allow '${tool.name}')`)}`
-      ];
       const displayOpts = [
         `Specific paths      \u2192 ${rel || tool.name}`,
         `Complete directory  \u2192 ${dir || "."}`,
-        `Entire Tool         \u2192 *`
+        `Entire Tool         \u2192 *  (this session)`,
+        `Always, everywhere  \u2192 ${tool.name} (never ask again \u2014 saved)`
       ];
       const choice = await pickScope(displayOpts);
       if (choice === -1) return "abort";
@@ -2989,9 +3022,14 @@ ${c.yellow(glyph.caret)} ${describe(tool)}
         addSessionRule({ tool: tool.name, match, effect: "allow" });
         process.stdout.write(`  ${c.dim(`Trusted '${tool.name}' for ${match} this session.`)}
 `);
-      } else {
+      } else if (choice === 2) {
         addSessionRule({ tool: tool.name, match: "*", effect: "allow" });
         process.stdout.write(`  ${c.dim(`Trusted '${tool.name}' (*) this session.`)}
+`);
+      } else {
+        addSessionRule({ tool: tool.name, match: "*", effect: "allow" });
+        saveGlobalPermissionRule({ tool: tool.name, match: "*", effect: "allow" });
+        process.stdout.write(`  ${c.green(glyph.tick)} ${c.dim(`Always allowing '${tool.name}' everywhere \u2014 saved to ~/.hostwares/permissions.json. You won't be asked again.`)}
 `);
       }
       return "allow";
@@ -3289,13 +3327,13 @@ init_config();
 // src/session/store.ts
 init_config();
 import { createHash } from "crypto";
-import { join as join7 } from "path";
-import { existsSync as existsSync7, readFileSync as readFileSync7, readdirSync as readdirSync5, unlinkSync as unlinkSync2, mkdirSync as mkdirSync5 } from "fs";
-var SESSION_DIR = join7(HW_DIR, "sessions");
+import { join as join8 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync8, readdirSync as readdirSync5, unlinkSync as unlinkSync2, mkdirSync as mkdirSync6 } from "fs";
+var SESSION_DIR = join8(HW_DIR, "sessions");
 var SCHEMA_VERSION = 2;
 function sessionPath(cwd) {
   const hash = createHash("sha256").update(cwd).digest("hex").slice(0, 24);
-  return join7(SESSION_DIR, `${hash}.json`);
+  return join8(SESSION_DIR, `${hash}.json`);
 }
 function newSession(cwd = process.cwd()) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -3311,9 +3349,9 @@ function newSession(cwd = process.cwd()) {
 }
 function loadSession(cwd = process.cwd()) {
   const file = sessionPath(cwd);
-  if (!existsSync7(file)) return null;
+  if (!existsSync8(file)) return null;
   try {
-    const data = JSON.parse(readFileSync7(file, "utf8"));
+    const data = JSON.parse(readFileSync8(file, "utf8"));
     if (data.version !== SCHEMA_VERSION) return null;
     if (data.cwd !== cwd) return null;
     if (!Array.isArray(data.turns)) return null;
@@ -3335,7 +3373,7 @@ function isTurn(t) {
 }
 var MAX_LOCAL_TURNS = 200;
 function saveSession(session) {
-  mkdirSync5(SESSION_DIR, { recursive: true, mode: 448 });
+  mkdirSync6(SESSION_DIR, { recursive: true, mode: 448 });
   session.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
   if (session.turns.length > MAX_LOCAL_TURNS) {
     session.turns = session.turns.slice(-MAX_LOCAL_TURNS);
@@ -3346,12 +3384,12 @@ function appendTurn(session, role, content) {
   session.turns.push({ role, content, at: (/* @__PURE__ */ new Date()).toISOString() });
 }
 function listSessions() {
-  if (!existsSync7(SESSION_DIR)) return [];
+  if (!existsSync8(SESSION_DIR)) return [];
   const out = [];
   for (const name of readdirSync5(SESSION_DIR)) {
     if (!name.endsWith(".json")) continue;
     try {
-      const data = JSON.parse(readFileSync7(join7(SESSION_DIR, name), "utf8"));
+      const data = JSON.parse(readFileSync8(join8(SESSION_DIR, name), "utf8"));
       if (data.version !== SCHEMA_VERSION || !data.cwd) continue;
       out.push({
         cwd: data.cwd,
@@ -3894,7 +3932,7 @@ async function listSites() {
 function readVersion() {
   try {
     const here = dirname4(fileURLToPath(import.meta.url));
-    const pkg = JSON.parse(readFileSync8(join8(here, "..", "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync9(join9(here, "..", "package.json"), "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hostwares-cli",
-  "version": "2.4.4",
+  "version": "2.4.5",
   "description": "Hostwares CLI - AI DevOps in your terminal",
   "type": "module",
   "main": "dist/index.js",