larkway 0.3.17 → 0.3.18

package/README.md

@@ -8,7 +8,7 @@
 
 You @ the bot in a Feishu thread. It runs on your machine — reading your real codebase, executing commands, opening MRs — and posts the result back. You define what the agent knows and what it can do. Larkway just carries the messages.
 
-**Current release: v0.3.17**
+**Current release: v0.3.18**
 
 ---
 

package/README.zh.md

@@ -8,7 +8,7 @@
 
 你在飞书话题里 @ bot，它在你的机器上运行——读真实代码库、执行命令、开 MR——把结果贴回飞书。你定义 agent 知道什么、能做什么。Larkway 只负责传递消息。
 
-**当前版本：v0.3.17**
+**当前版本：v0.3.18**
 
 ---
 

package/dist/cli/index.js

@@ -124788,7 +124788,16 @@ var PermissionsConfig = external_exports.object({
    * curl, wget, python3, basic POSIX tools); add things like
    * "Bash(pnpm *)" / "Bash(NEXT_PUBLIC_PORT=* *)" here.
    */
-  allowExtra: external_exports.array(external_exports.string()).default([])
+  allowExtra: external_exports.array(external_exports.string()).default([]),
+  /**
+   * Permission posture for the Claude backend (and the bypass flag for Codex).
+   * Unset (undefined) = the bridge default `bypassPermissions`, which aligns
+   * the Claude backend with Codex's existing full-host posture and avoids
+   * acceptEdits gating necessary Bash (e.g. lark-cli) in headless `-p` mode.
+   * Set to `acceptEdits` / `ask` to TIGHTEN: Claude Code then routes Bash
+   * through its allow-list gate (the stricter, future "real allow-list" path).
+   */
+  mode: external_exports.enum(["acceptEdits", "ask", "bypassPermissions"]).optional()
 }).default({ allowExtra: [] });
 var ChatEntry = external_exports.object({
   label: external_exports.string().min(1, "chats[].label is required (human-readable name)"),

package/dist/main.js

@@ -115918,7 +115918,16 @@ var PermissionsConfig = external_exports.object({
    * curl, wget, python3, basic POSIX tools); add things like
    * "Bash(pnpm *)" / "Bash(NEXT_PUBLIC_PORT=* *)" here.
    */
-  allowExtra: external_exports.array(external_exports.string()).default([])
+  allowExtra: external_exports.array(external_exports.string()).default([]),
+  /**
+   * Permission posture for the Claude backend (and the bypass flag for Codex).
+   * Unset (undefined) = the bridge default `bypassPermissions`, which aligns
+   * the Claude backend with Codex's existing full-host posture and avoids
+   * acceptEdits gating necessary Bash (e.g. lark-cli) in headless `-p` mode.
+   * Set to `acceptEdits` / `ask` to TIGHTEN: Claude Code then routes Bash
+   * through its allow-list gate (the stricter, future "real allow-list" path).
+   */
+  mode: external_exports.enum(["acceptEdits", "ask", "bypassPermissions"]).optional()
 }).default({ allowExtra: [] });
 var ChatEntry = external_exports.object({
   label: external_exports.string().min(1, "chats[].label is required (human-readable name)"),
@@ -119771,7 +119780,7 @@ var BridgeHandler = class {
             runtimeWarnings: this.runtimeWarnings()
           });
           const backend = this.deps.botConfig?.backend ?? "claude";
-          const permissionMode = this.deps.permissionMode ?? (isAgentWorkspace ? "acceptEdits" : "bypassPermissions");
+          const permissionMode = this.deps.permissionMode ?? "bypassPermissions";
           const timeoutMs = this.deps.subprocessTimeoutMs ?? 60 * 60 * 1e3;
           const handle = createRunner(backend).run({
             prompt,
@@ -124330,6 +124339,9 @@ async function runV2Mode({
       sessionStore,
       conventions,
       permissionsAllowExtra: configJson.permissions.allowExtra,
+      // Unset → handler defaults to bypassPermissions (aligns Claude with Codex
+      // full-host posture); set to acceptEdits/ask to tighten via config.
+      permissionMode: configJson.permissions.mode,
       peers: resolvedPeers,
       botConfig: {
         id: bot.id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "larkway",
-  "version": "0.3.17",
+  "version": "0.3.18",
   "description": "Thin bridge: Feishu thread to local Claude Code CLI",
   "license": "MIT",
   "author": "Chuck Wu (chuckwu0)",