nexrall-code 0.5.170 → 0.5.171

package/dist/index.js

@@ -104947,7 +104947,7 @@ var require_modePolicy = __commonJS({
         return "allow";
       if (exports2.BASH_TOOLS.has(tool) && isReadOnlyBash4(command) && !req.destructive)
         return "allow";
-      if (req.destructive)
+      if (req.destructive && mode !== "auto")
         return "confirm";
       if (mode === "plan")
         return "deny";
@@ -104970,7 +104970,7 @@ var require_modePolicy = __commonJS({
         case "edit":
           return "edit \u2014 edits files freely; asks before shell commands";
         case "auto":
-          return "auto \u2014 runs every tool on its own; still confirms irreversible actions";
+          return "auto \u2014 runs every tool on its own, including irreversible commands";
       }
     }
     function parseMode3(raw) {
@@ -105387,9 +105387,13 @@ var require_destructiveTokens = __commonJS({
           const r2 = /^>(?![>&])/.test(t2[0]) ? t2 : (t2[0] === ":" || t2[0] === "true") && /^>(?![>&])/.test(t2[1] ?? "") ? t2.slice(1) : null;
           if (r2) {
             const target = r2[0].length > 1 ? r2[0].slice(1) : r2[1] ?? "";
-            if (!target.startsWith("/dev/"))
-              return hit("filesystem", "a bare `>` redirect truncates the file (contents lost)");
-            return null;
+            if (target.startsWith("/dev/"))
+              return null;
+            const m2 = hit("filesystem", "a bare `>` redirect truncates the file (contents lost)");
+            const scratch = target !== "" && !/[$`~]|(^|\/)\.\.(\/|$)/.test(target) && (!target.startsWith("/") || /^\/(?:private\/)?(?:tmp|var\/folders)\//.test(target));
+            if (scratch)
+              m2.lowRisk = true;
+            return m2;
           }
         }
         const bin = base(t2[0]);
@@ -105670,12 +105674,15 @@ var require_destructive = __commonJS({
       const viaRegex = classifyRegex(command);
       if (viaRegex)
         return viaRegex;
+      let soft = null;
       for (const tokens of (0, destructiveTokens_1.tokenize)(stripHeredocs(command))) {
         const m2 = (0, destructiveTokens_1.classifyTokens)(tokens, (inner) => classify2(inner, depth + 1), classifyRawSql);
-        if (m2)
+        if (m2 && !m2.lowRisk)
           return m2;
+        if (m2 && !soft)
+          soft = m2;
       }
-      return null;
+      return soft;
     }
     function classifyDestructiveCommand(command) {
       if (!command || typeof command !== "string")
@@ -153193,7 +153200,7 @@ async function requestPermissionInner(req) {
     return false;
   }
   const destructive = (0, import_code_core6.isDestructiveBash)(tool, input);
-  if (destructive && process.env.NEXRALL_ALLOW_DESTRUCTIVE !== "1") {
+  if (destructive && process.env.NEXRALL_ALLOW_DESTRUCTIVE !== "1" && _mode !== "auto") {
     return serialisePrompt(async () => {
       announceAgent(req);
       const command = input.command ?? input.cmd ?? "";
@@ -154422,7 +154429,7 @@ async function runDoctor(p) {
     detail: `${p.workDir}${repo.inRepo ? ` (git${repo.branch ? `: ${repo.branch}` : ""})` : " (not a git repo)"}${proj.instructions ? ", has nexrall.md" : ", no nexrall.md"}`
   });
   if (p.yolo) {
-    out.push({ id: "permissions", label: "Permissions", status: "warn", detail: "yolo \u2014 every tool call is auto-approved", fix: "Restart without --yolo/`/yolo`; use `--mode auto` (still confirms irreversible actions) instead." });
+    out.push({ id: "permissions", label: "Permissions", status: "warn", detail: "yolo \u2014 every tool call is auto-approved", fix: "Restart without --yolo/`/yolo`; use `--mode auto`  instead." });
   } else if (p.modeLocked) {
     out.push({ id: "permissions", label: "Permissions", status: "ok", detail: "read-only (--readonly), locked" });
   } else {
@@ -169100,7 +169107,7 @@ function explainAction(rules, mode, workDir, action, opts = {}) {
   const rule = (0, import_code_core16.evaluatePermission)(rules, action.tool, action.input, workDir);
   if (rule === "deny")
     return { mark: "\u2717", reason: "denied by a permission rule" };
-  if ((0, import_code_core16.isDestructiveBash)(action.tool, action.input) && !opts.allowDestructive) {
+  if ((0, import_code_core16.isDestructiveBash)(action.tool, action.input) && !opts.allowDestructive && mode !== "auto") {
     return { mark: "\u26A0", reason: 'irreversible \u2014 always asks (type "yes")' };
   }
   if (rule === "allow")
@@ -171190,7 +171197,7 @@ async function runTurnHeadless(messages, modelAlias, workDir, _abortSignal, env4
         emit({ type: "permission_denied", tool, reason: "tools" });
         return false;
       }
-      const d = (0, import_code_core17.isDestructiveBash)(tool, input);
+      const d = (0, import_code_core19.parseMode)(mode) === "auto" ? null : (0, import_code_core17.isDestructiveBash)(tool, input);
       const policy = (0, import_code_core18.decide)({ tool, input, mode: (0, import_code_core19.parseMode)(mode), bypass: isYoloMode(), destructive: !!d });
       const v = headlessVerdict({
         rule: (0, import_code_core19.evaluatePermission)((0, import_code_core19.loadSettings)(workDir).permissions, tool, input, workDir),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexrall-code",
-  "version": "0.5.170",
+  "version": "0.5.171",
   "description": "Nexrall Code — AI coding assistant for your terminal (headless agent for scripts, CI and automation)",
   "keywords": [
     "ai",