thaddeus 1.0.18 → 1.0.27

package/src/components/permissions/PermissionRequest.js

@@ -0,0 +1,159 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { c as _c } from "react/compiler-runtime";
+import { feature } from 'bun:bundle';
+import * as React from 'react';
+import { EnterPlanModeTool } from 'src/tools/EnterPlanModeTool/EnterPlanModeTool.js';
+import { ExitPlanModeV2Tool } from 'src/tools/ExitPlanModeTool/ExitPlanModeV2Tool.js';
+import { useNotifyAfterTimeout } from '../../hooks/useNotifyAfterTimeout.js';
+import { useKeybinding } from '../../keybindings/useKeybinding.js';
+import { AskUserQuestionTool } from '../../tools/AskUserQuestionTool/AskUserQuestionTool.js';
+import { BashTool } from '../../tools/BashTool/BashTool.js';
+import { FileEditTool } from '../../tools/FileEditTool/FileEditTool.js';
+import { FileReadTool } from '../../tools/FileReadTool/FileReadTool.js';
+import { FileWriteTool } from '../../tools/FileWriteTool/FileWriteTool.js';
+import { GlobTool } from '../../tools/GlobTool/GlobTool.js';
+import { GrepTool } from '../../tools/GrepTool/GrepTool.js';
+import { NotebookEditTool } from '../../tools/NotebookEditTool/NotebookEditTool.js';
+import { PowerShellTool } from '../../tools/PowerShellTool/PowerShellTool.js';
+import { SkillTool } from '../../tools/SkillTool/SkillTool.js';
+import { WebFetchTool } from '../../tools/WebFetchTool/WebFetchTool.js';
+import { AskUserQuestionPermissionRequest } from './AskUserQuestionPermissionRequest/AskUserQuestionPermissionRequest.js';
+import { BashPermissionRequest } from './BashPermissionRequest/BashPermissionRequest.js';
+import { EnterPlanModePermissionRequest } from './EnterPlanModePermissionRequest/EnterPlanModePermissionRequest.js';
+import { ExitPlanModePermissionRequest } from './ExitPlanModePermissionRequest/ExitPlanModePermissionRequest.js';
+import { FallbackPermissionRequest } from './FallbackPermissionRequest.js';
+import { FileEditPermissionRequest } from './FileEditPermissionRequest/FileEditPermissionRequest.js';
+import { FilesystemPermissionRequest } from './FilesystemPermissionRequest/FilesystemPermissionRequest.js';
+import { FileWritePermissionRequest } from './FileWritePermissionRequest/FileWritePermissionRequest.js';
+import { NotebookEditPermissionRequest } from './NotebookEditPermissionRequest/NotebookEditPermissionRequest.js';
+import { PowerShellPermissionRequest } from './PowerShellPermissionRequest/PowerShellPermissionRequest.js';
+import { SkillPermissionRequest } from './SkillPermissionRequest/SkillPermissionRequest.js';
+import { WebFetchPermissionRequest } from './WebFetchPermissionRequest/WebFetchPermissionRequest.js';
+/* eslint-disable @typescript-eslint/no-require-imports */
+const ReviewArtifactTool = feature('REVIEW_ARTIFACT') ? require('../../tools/ReviewArtifactTool/ReviewArtifactTool.js').ReviewArtifactTool : null;
+const ReviewArtifactPermissionRequest = feature('REVIEW_ARTIFACT') ? require('./ReviewArtifactPermissionRequest/ReviewArtifactPermissionRequest.js').ReviewArtifactPermissionRequest : null;
+const WorkflowTool = feature('WORKFLOW_SCRIPTS') ? require('../../tools/WorkflowTool/WorkflowTool.js').WorkflowTool : null;
+const WorkflowPermissionRequest = feature('WORKFLOW_SCRIPTS') ? require('../../tools/WorkflowTool/WorkflowPermissionRequest.js').WorkflowPermissionRequest : null;
+const MonitorTool = feature('MONITOR_TOOL') ? require('../../tools/MonitorTool/MonitorTool.js').MonitorTool : null;
+const MonitorPermissionRequest = feature('MONITOR_TOOL') ? require('./MonitorPermissionRequest/MonitorPermissionRequest.js').MonitorPermissionRequest : null;
+function permissionComponentForTool(tool) {
+    switch (tool) {
+        case FileEditTool:
+            return FileEditPermissionRequest;
+        case FileWriteTool:
+            return FileWritePermissionRequest;
+        case BashTool:
+            return BashPermissionRequest;
+        case PowerShellTool:
+            return PowerShellPermissionRequest;
+        case ReviewArtifactTool:
+            return ReviewArtifactPermissionRequest ?? FallbackPermissionRequest;
+        case WebFetchTool:
+            return WebFetchPermissionRequest;
+        case NotebookEditTool:
+            return NotebookEditPermissionRequest;
+        case ExitPlanModeV2Tool:
+            return ExitPlanModePermissionRequest;
+        case EnterPlanModeTool:
+            return EnterPlanModePermissionRequest;
+        case SkillTool:
+            return SkillPermissionRequest;
+        case AskUserQuestionTool:
+            return AskUserQuestionPermissionRequest;
+        case WorkflowTool:
+            return WorkflowPermissionRequest ?? FallbackPermissionRequest;
+        case MonitorTool:
+            return MonitorPermissionRequest ?? FallbackPermissionRequest;
+        case GlobTool:
+        case GrepTool:
+        case FileReadTool:
+            return FilesystemPermissionRequest;
+        default:
+            return FallbackPermissionRequest;
+    }
+}
+function getNotificationMessage(toolUseConfirm) {
+    const toolName = toolUseConfirm.tool.userFacingName(toolUseConfirm.input);
+    if (toolUseConfirm.tool === ExitPlanModeV2Tool) {
+        return 'Thaddeus needs your approval for the plan';
+    }
+    if (toolUseConfirm.tool === EnterPlanModeTool) {
+        return 'Thaddeus wants to enter plan mode';
+    }
+    if (feature('REVIEW_ARTIFACT') && toolUseConfirm.tool === ReviewArtifactTool) {
+        return 'Thaddeus needs your approval for a review artifact';
+    }
+    if (!toolName || toolName.trim() === '') {
+        return 'Thaddeus needs your attention';
+    }
+    return `Thaddeus needs your permission to use ${toolName}`;
+}
+// TODO: Move this to Tool.renderPermissionRequest
+export function PermissionRequest(t0) {
+    const $ = _c(18);
+    const { toolUseConfirm, toolUseContext, onDone, onReject, verbose, workerBadge, setStickyFooter } = t0;
+    let t1;
+    if ($[0] !== onDone || $[1] !== onReject || $[2] !== toolUseConfirm) {
+        t1 = () => {
+            onDone();
+            onReject();
+            toolUseConfirm.onReject();
+        };
+        $[0] = onDone;
+        $[1] = onReject;
+        $[2] = toolUseConfirm;
+        $[3] = t1;
+    }
+    else {
+        t1 = $[3];
+    }
+    let t2;
+    if ($[4] === Symbol.for("react.memo_cache_sentinel")) {
+        t2 = {
+            context: "Confirmation"
+        };
+        $[4] = t2;
+    }
+    else {
+        t2 = $[4];
+    }
+    useKeybinding("app:interrupt", t1, t2);
+    let t3;
+    if ($[5] !== toolUseConfirm) {
+        t3 = getNotificationMessage(toolUseConfirm);
+        $[5] = toolUseConfirm;
+        $[6] = t3;
+    }
+    else {
+        t3 = $[6];
+    }
+    const notificationMessage = t3;
+    useNotifyAfterTimeout(notificationMessage, "permission_prompt");
+    let t4;
+    if ($[7] !== toolUseConfirm.tool) {
+        t4 = permissionComponentForTool(toolUseConfirm.tool);
+        $[7] = toolUseConfirm.tool;
+        $[8] = t4;
+    }
+    else {
+        t4 = $[8];
+    }
+    const PermissionComponent = t4;
+    let t5;
+    if ($[9] !== PermissionComponent || $[10] !== onDone || $[11] !== onReject || $[12] !== setStickyFooter || $[13] !== toolUseConfirm || $[14] !== toolUseContext || $[15] !== verbose || $[16] !== workerBadge) {
+        t5 = _jsx(PermissionComponent, { toolUseContext: toolUseContext, toolUseConfirm: toolUseConfirm, onDone: onDone, onReject: onReject, verbose: verbose, workerBadge: workerBadge, setStickyFooter: setStickyFooter });
+        $[9] = PermissionComponent;
+        $[10] = onDone;
+        $[11] = onReject;
+        $[12] = setStickyFooter;
+        $[13] = toolUseConfirm;
+        $[14] = toolUseContext;
+        $[15] = verbose;
+        $[16] = workerBadge;
+        $[17] = t5;
+    }
+    else {
+        t5 = $[17];
+    }
+    return t5;
+}

package/src/components/permissions/PermissionRequestTitle.js

@@ -0,0 +1,58 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { c as _c } from "react/compiler-runtime";
+import * as React from 'react';
+import { Box, Text } from '../../ink.js';
+export function PermissionRequestTitle(t0) {
+    const $ = _c(13);
+    const { title, subtitle, color: t1, workerBadge } = t0;
+    const color = t1 === undefined ? "permission" : t1;
+    let t2;
+    if ($[0] !== color || $[1] !== title) {
+        t2 = _jsx(Text, { bold: true, color: color, children: title });
+        $[0] = color;
+        $[1] = title;
+        $[2] = t2;
+    }
+    else {
+        t2 = $[2];
+    }
+    let t3;
+    if ($[3] !== workerBadge) {
+        t3 = workerBadge && _jsxs(Text, { dimColor: true, children: ["\xB7 ", "@", workerBadge.name] });
+        $[3] = workerBadge;
+        $[4] = t3;
+    }
+    else {
+        t3 = $[4];
+    }
+    let t4;
+    if ($[5] !== t2 || $[6] !== t3) {
+        t4 = _jsxs(Box, { flexDirection: "row", gap: 1, children: [t2, t3] });
+        $[5] = t2;
+        $[6] = t3;
+        $[7] = t4;
+    }
+    else {
+        t4 = $[7];
+    }
+    let t5;
+    if ($[8] !== subtitle) {
+        t5 = subtitle != null && (typeof subtitle === "string" ? _jsx(Text, { dimColor: true, wrap: "truncate-start", children: subtitle }) : subtitle);
+        $[8] = subtitle;
+        $[9] = t5;
+    }
+    else {
+        t5 = $[9];
+    }
+    let t6;
+    if ($[10] !== t4 || $[11] !== t5) {
+        t6 = _jsxs(Box, { flexDirection: "column", children: [t4, t5] });
+        $[10] = t4;
+        $[11] = t5;
+        $[12] = t6;
+    }
+    else {
+        t6 = $[12];
+    }
+    return t6;
+}

package/src/components/permissions/PermissionRuleExplanation.js

@@ -0,0 +1,110 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { c as _c } from "react/compiler-runtime";
+import { feature } from 'bun:bundle';
+import chalk from 'chalk';
+import React from 'react';
+import { Ansi, Box, Text } from '../../ink.js';
+import { useAppState } from '../../state/AppState.js';
+import { permissionRuleValueToString } from '../../utils/permissions/permissionRuleParser.js';
+import ThemedText from '../design-system/ThemedText.js';
+function stringsForDecisionReason(reason, toolType) {
+    if (!reason) {
+        return null;
+    }
+    if ((feature('BASH_CLASSIFIER') || feature('TRANSCRIPT_CLASSIFIER')) && reason.type === 'classifier') {
+        if (reason.classifier === 'auto-mode') {
+            return {
+                reasonString: `Auto mode classifier requires confirmation for this ${toolType}.\n${reason.reason}`,
+                configString: undefined,
+                themeColor: 'error'
+            };
+        }
+        return {
+            reasonString: `Classifier ${chalk.bold(reason.classifier)} requires confirmation for this ${toolType}.\n${reason.reason}`,
+            configString: undefined
+        };
+    }
+    switch (reason.type) {
+        case 'rule':
+            return {
+                reasonString: `Permission rule ${chalk.bold(permissionRuleValueToString(reason.rule.ruleValue))} requires confirmation for this ${toolType}.`,
+                configString: reason.rule.source === 'policySettings' ? undefined : '/permissions to update rules'
+            };
+        case 'hook':
+            {
+                const hookReasonString = reason.reason ? `:\n${reason.reason}` : '.';
+                const sourceLabel = reason.hookSource ? ` ${chalk.dim(`[${reason.hookSource}]`)}` : '';
+                return {
+                    reasonString: `Hook ${chalk.bold(reason.hookName)} requires confirmation for this ${toolType}${hookReasonString}${sourceLabel}`,
+                    configString: '/hooks to update'
+                };
+            }
+        case 'safetyCheck':
+        case 'other':
+            return {
+                reasonString: reason.reason,
+                configString: undefined
+            };
+        case 'workingDir':
+            return {
+                reasonString: reason.reason,
+                configString: '/permissions to update rules'
+            };
+        default:
+            return null;
+    }
+}
+export function PermissionRuleExplanation(t0) {
+    const $ = _c(11);
+    const { permissionResult, toolType } = t0;
+    const permissionMode = useAppState(_temp);
+    const t1 = permissionResult?.decisionReason;
+    let t2;
+    if ($[0] !== t1 || $[1] !== toolType) {
+        t2 = stringsForDecisionReason(t1, toolType);
+        $[0] = t1;
+        $[1] = toolType;
+        $[2] = t2;
+    }
+    else {
+        t2 = $[2];
+    }
+    const strings = t2;
+    if (!strings) {
+        return null;
+    }
+    const themeColor = strings.themeColor ?? (permissionResult?.decisionReason?.type === "hook" && permissionMode === "auto" ? "warning" : undefined);
+    let t3;
+    if ($[3] !== strings.reasonString || $[4] !== themeColor) {
+        t3 = themeColor ? _jsx(ThemedText, { color: themeColor, children: strings.reasonString }) : _jsx(Text, { children: _jsx(Ansi, { children: strings.reasonString }) });
+        $[3] = strings.reasonString;
+        $[4] = themeColor;
+        $[5] = t3;
+    }
+    else {
+        t3 = $[5];
+    }
+    let t4;
+    if ($[6] !== strings.configString) {
+        t4 = strings.configString && _jsx(Text, { dimColor: true, children: strings.configString });
+        $[6] = strings.configString;
+        $[7] = t4;
+    }
+    else {
+        t4 = $[7];
+    }
+    let t5;
+    if ($[8] !== t3 || $[9] !== t4) {
+        t5 = _jsxs(Box, { marginBottom: 1, flexDirection: "column", children: [t3, t4] });
+        $[8] = t3;
+        $[9] = t4;
+        $[10] = t5;
+    }
+    else {
+        t5 = $[10];
+    }
+    return t5;
+}
+function _temp(s) {
+    return s.toolPermissionContext.mode;
+}

package/src/components/permissions/PowerShellPermissionRequest/PowerShellPermissionRequest.js

@@ -0,0 +1,178 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import React, { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { Box, Text, useTheme } from '../../../ink.js';
+import { useKeybinding } from '../../../keybindings/useKeybinding.js';
+import { getFeatureValue_CACHED_MAY_BE_STALE } from '../../../services/analytics/growthbook.js';
+import { logEvent } from '../../../services/analytics/index.js';
+import { sanitizeToolNameForAnalytics } from '../../../services/analytics/metadata.js';
+import { getDestructiveCommandWarning } from '../../../tools/PowerShellTool/destructiveCommandWarning.js';
+import { PowerShellTool } from '../../../tools/PowerShellTool/PowerShellTool.js';
+import { isAllowlistedCommand } from '../../../tools/PowerShellTool/readOnlyValidation.js';
+import { getCompoundCommandPrefixesStatic } from '../../../utils/powershell/staticPrefix.js';
+import { Select } from '../../CustomSelect/select.js';
+import { usePermissionRequestLogging } from '../hooks.js';
+import { PermissionDecisionDebugInfo } from '../PermissionDecisionDebugInfo.js';
+import { PermissionDialog } from '../PermissionDialog.js';
+import { PermissionExplainerContent, usePermissionExplainerUI } from '../PermissionExplanation.js';
+import { PermissionRuleExplanation } from '../PermissionRuleExplanation.js';
+import { useShellPermissionFeedback } from '../useShellPermissionFeedback.js';
+import { logUnaryPermissionEvent } from '../utils.js';
+import { powershellToolUseOptions } from './powershellToolUseOptions.js';
+export function PowerShellPermissionRequest(props) {
+    const { toolUseConfirm, toolUseContext, onDone, onReject, workerBadge } = props;
+    const { command, description } = PowerShellTool.inputSchema.parse(toolUseConfirm.input);
+    const [theme] = useTheme();
+    const explainerState = usePermissionExplainerUI({
+        toolName: toolUseConfirm.tool.name,
+        toolInput: toolUseConfirm.input,
+        toolDescription: toolUseConfirm.description,
+        messages: toolUseContext.messages
+    });
+    const { yesInputMode, noInputMode, yesFeedbackModeEntered, noFeedbackModeEntered, acceptFeedback, rejectFeedback, setAcceptFeedback, setRejectFeedback, focusedOption, handleInputModeToggle, handleReject, handleFocus } = useShellPermissionFeedback({
+        toolUseConfirm,
+        onDone,
+        onReject,
+        explainerVisible: explainerState.visible
+    });
+    const destructiveWarning = getFeatureValue_CACHED_MAY_BE_STALE('thaddeus_destructive_command_warning', false) ? getDestructiveCommandWarning(command) : null;
+    const [showPermissionDebug, setShowPermissionDebug] = useState(false);
+    // Editable prefix — compute static prefix locally (no LLM call).
+    // Initialize synchronously to the raw command for single-line commands so
+    // the editable input renders immediately, then refine to the extracted prefix
+    // once the AST parser resolves. Multiline commands (`# comment\n...`,
+    // foreach loops) get undefined → powershellToolUseOptions:64 hides the
+    // "don't ask again" option — those literals are one-time-use (settings
+    // corpus shows 14 multiline rules, zero match twice). For compound commands,
+    // computes a prefix per subcommand, excluding subcommands that are already
+    // auto-allowed (read-only).
+    const [editablePrefix, setEditablePrefix] = useState(command.includes('\n') ? undefined : command);
+    const hasUserEditedPrefix = useRef(false);
+    useEffect(() => {
+        let cancelled = false;
+        // Filter receives ParsedCommandElement — isAllowlistedCommand works from
+        // element.name/nameType/args directly. isReadOnlyCommand(text) would need
+        // to reparse (pwsh.exe spawn per subcommand) and returns false without the
+        // full parsed AST, making the filter a no-op.
+        getCompoundCommandPrefixesStatic(command, element => isAllowlistedCommand(element, element.text)).then(prefixes => {
+            if (cancelled || hasUserEditedPrefix.current)
+                return;
+            if (prefixes.length > 0) {
+                setEditablePrefix(`${prefixes[0]}:*`);
+            }
+        }).catch(() => { });
+        return () => {
+            cancelled = true;
+        };
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [command]);
+    const onEditablePrefixChange = useCallback((value) => {
+        hasUserEditedPrefix.current = true;
+        setEditablePrefix(value);
+    }, []);
+    const unaryEvent = useMemo(() => ({
+        completion_type: 'tool_use_single',
+        language_name: 'none'
+    }), []);
+    usePermissionRequestLogging(toolUseConfirm, unaryEvent);
+    const options = useMemo(() => powershellToolUseOptions({
+        suggestions: toolUseConfirm.permissionResult.behavior === 'ask' ? toolUseConfirm.permissionResult.suggestions : undefined,
+        onRejectFeedbackChange: setRejectFeedback,
+        onAcceptFeedbackChange: setAcceptFeedback,
+        yesInputMode,
+        noInputMode,
+        editablePrefix,
+        onEditablePrefixChange
+    }), [toolUseConfirm, yesInputMode, noInputMode, editablePrefix, onEditablePrefixChange]);
+    // Toggle permission debug info with keybinding
+    const handleToggleDebug = useCallback(() => {
+        setShowPermissionDebug(prev => !prev);
+    }, []);
+    useKeybinding('permission:toggleDebug', handleToggleDebug, {
+        context: 'Confirmation'
+    });
+    function onSelect(value) {
+        // Map options to numeric values for analytics (strings not allowed in logEvent)
+        const optionIndex = {
+            yes: 1,
+            'yes-apply-suggestions': 2,
+            'yes-prefix-edited': 2,
+            no: 3
+        };
+        logEvent('thaddeus_permission_request_option_selected', {
+            option_index: optionIndex[value],
+            explainer_visible: explainerState.visible
+        });
+        const toolNameForAnalytics = sanitizeToolNameForAnalytics(toolUseConfirm.tool.name);
+        if (value === 'yes-prefix-edited') {
+            const trimmedPrefix = (editablePrefix ?? '').trim();
+            logUnaryPermissionEvent('tool_use_single', toolUseConfirm, 'accept');
+            if (!trimmedPrefix) {
+                toolUseConfirm.onAllow(toolUseConfirm.input, []);
+            }
+            else {
+                const prefixUpdates = [{
+                        type: 'addRules',
+                        rules: [{
+                                toolName: PowerShellTool.name,
+                                ruleContent: trimmedPrefix
+                            }],
+                        behavior: 'allow',
+                        destination: 'localSettings'
+                    }];
+                toolUseConfirm.onAllow(toolUseConfirm.input, prefixUpdates);
+            }
+            onDone();
+            return;
+        }
+        switch (value) {
+            case 'yes':
+                {
+                    const trimmedFeedback = acceptFeedback.trim();
+                    logUnaryPermissionEvent('tool_use_single', toolUseConfirm, 'accept');
+                    // Log accept submission with feedback context
+                    logEvent('thaddeus_accept_submitted', {
+                        toolName: toolNameForAnalytics,
+                        isMcp: toolUseConfirm.tool.isMcp ?? false,
+                        has_instructions: !!trimmedFeedback,
+                        instructions_length: trimmedFeedback.length,
+                        entered_feedback_mode: yesFeedbackModeEntered
+                    });
+                    toolUseConfirm.onAllow(toolUseConfirm.input, [], trimmedFeedback || undefined);
+                    onDone();
+                    break;
+                }
+            case 'yes-apply-suggestions':
+                {
+                    logUnaryPermissionEvent('tool_use_single', toolUseConfirm, 'accept');
+                    // Extract suggestions if present (works for both 'ask' and 'passthrough' behaviors)
+                    const permissionUpdates = 'suggestions' in toolUseConfirm.permissionResult ? toolUseConfirm.permissionResult.suggestions || [] : [];
+                    toolUseConfirm.onAllow(toolUseConfirm.input, permissionUpdates);
+                    onDone();
+                    break;
+                }
+            case 'no':
+                {
+                    const trimmedFeedback = rejectFeedback.trim();
+                    // Log reject submission with feedback context
+                    logEvent('thaddeus_reject_submitted', {
+                        toolName: toolNameForAnalytics,
+                        isMcp: toolUseConfirm.tool.isMcp ?? false,
+                        has_instructions: !!trimmedFeedback,
+                        instructions_length: trimmedFeedback.length,
+                        entered_feedback_mode: noFeedbackModeEntered
+                    });
+                    // Process rejection (with or without feedback)
+                    handleReject(trimmedFeedback || undefined);
+                    break;
+                }
+        }
+    }
+    return _jsxs(PermissionDialog, { workerBadge: workerBadge, title: "PowerShell command", children: [_jsxs(Box, { flexDirection: "column", paddingX: 2, paddingY: 1, children: [_jsx(Text, { dimColor: explainerState.visible, children: PowerShellTool.renderToolUseMessage({
+                            command,
+                            description
+                        }, {
+                            theme,
+                            verbose: true
+                        } // always show the full command
+                        ) }), !explainerState.visible && _jsx(Text, { dimColor: true, children: toolUseConfirm.description }), _jsx(PermissionExplainerContent, { visible: explainerState.visible, promise: explainerState.promise })] }), showPermissionDebug ? _jsxs(_Fragment, { children: [_jsx(PermissionDecisionDebugInfo, { permissionResult: toolUseConfirm.permissionResult, toolName: "PowerShell" }), toolUseContext.options.debug && _jsx(Box, { justifyContent: "flex-end", marginTop: 1, children: _jsx(Text, { dimColor: true, children: "Ctrl-D to hide debug info" }) })] }) : _jsxs(_Fragment, { children: [_jsxs(Box, { flexDirection: "column", children: [_jsx(PermissionRuleExplanation, { permissionResult: toolUseConfirm.permissionResult, toolType: "command" }), destructiveWarning && _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "warning", children: destructiveWarning }) }), _jsx(Text, { children: "Do you want to proceed?" }), _jsx(Select, { options: options, inlineDescriptions: true, onChange: onSelect, onCancel: () => handleReject(), onFocus: handleFocus, onInputModeToggle: handleInputModeToggle })] }), _jsxs(Box, { justifyContent: "space-between", marginTop: 1, children: [_jsxs(Text, { dimColor: true, children: ["Esc to cancel", (focusedOption === 'yes' && !yesInputMode || focusedOption === 'no' && !noInputMode) && ' · Tab to amend', explainerState.enabled && ` · ctrl+e to ${explainerState.visible ? 'hide' : 'explain'}`] }), toolUseContext.options.debug && _jsx(Text, { dimColor: true, children: "Ctrl+d to show debug info" })] })] })] });
+}

package/src/components/permissions/PowerShellPermissionRequest/powershellToolUseOptions.js

@@ -0,0 +1,73 @@
+import { POWERSHELL_TOOL_NAME } from '../../../tools/PowerShellTool/toolName.js';
+import { shouldShowAlwaysAllowOptions } from '../../../utils/permissions/permissionsLoader.js';
+import { generateShellSuggestionsLabel } from '../shellPermissionHelpers.js';
+export function powershellToolUseOptions({ suggestions = [], onRejectFeedbackChange, onAcceptFeedbackChange, yesInputMode = false, noInputMode = false, editablePrefix, onEditablePrefixChange }) {
+    const options = [];
+    if (yesInputMode) {
+        options.push({
+            type: 'input',
+            label: 'Yes',
+            value: 'yes',
+            placeholder: 'and tell Thaddeus what to do next',
+            onChange: onAcceptFeedbackChange,
+            allowEmptySubmitToCancel: true
+        });
+    }
+    else {
+        options.push({
+            label: 'Yes',
+            value: 'yes'
+        });
+    }
+    // Note: No sandbox toggle for PowerShell - sandbox is not supported on Windows
+    // Note: No classifier-reviewed option for PowerShell (ANT-ONLY feature for Bash)
+    // Only show "always allow" options when not restricted by allowManagedPermissionRulesOnly.
+    // Prefer the editable prefix input (static extractor + user edits) over the
+    // non-editable suggestions label. The editable input can't represent
+    // directory permissions or Read-tool rules, so fall back to the label when
+    // those are present.
+    if (shouldShowAlwaysAllowOptions() && suggestions.length > 0) {
+        const hasNonPowerShellSuggestions = suggestions.some(s => s.type === 'addDirectories' || s.type === 'addRules' && s.rules?.some(r => r.toolName !== POWERSHELL_TOOL_NAME));
+        if (editablePrefix !== undefined && onEditablePrefixChange && !hasNonPowerShellSuggestions) {
+            options.push({
+                type: 'input',
+                label: 'Yes, and don\u2019t ask again for',
+                value: 'yes-prefix-edited',
+                placeholder: 'command prefix (e.g., Get-Process:*)',
+                initialValue: editablePrefix,
+                onChange: onEditablePrefixChange,
+                allowEmptySubmitToCancel: true,
+                showLabelWithValue: true,
+                labelValueSeparator: ': ',
+                resetCursorOnUpdate: true
+            });
+        }
+        else {
+            const label = generateShellSuggestionsLabel(suggestions, POWERSHELL_TOOL_NAME);
+            if (label) {
+                options.push({
+                    label,
+                    value: 'yes-apply-suggestions'
+                });
+            }
+        }
+    }
+    if (noInputMode) {
+        options.push({
+            type: 'input',
+            label: 'No',
+            value: 'no',
+            placeholder: 'and tell Thaddeus what to do differently',
+            onChange: onRejectFeedbackChange,
+            allowEmptySubmitToCancel: true
+        });
+    }
+    else {
+        options.push({
+            label: 'No',
+            value: 'no'
+        });
+    }
+    return options;
+}
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/src/components/permissions/ReviewArtifactPermissionRequest/ReviewArtifactPermissionRequest.js

@@ -0,0 +1,7 @@
+// ReviewArtifactPermissionRequest — permission UI for ReviewArtifact tool
+// Stub: renders the standard permission request.
+import React from 'react';
+import { Text } from 'ink';
+export function ReviewArtifactPermissionRequest({ filePath, }) {
+    return React.createElement(Text, null, `Review artifact: ${filePath ?? 'unknown file'}`);
+}