very-happy-cli 0.2.88 → 0.2.90

package/dist/{index-j2LYx2KW.mjs → index-an09rejO.mjs}

@@ -1,7 +1,7 @@
 import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import chalk from 'chalk';
 import os, { homedir } from 'node:os';
 import { randomUUID, randomBytes, createHash as createHash$1, timingSafeEqual } from 'node:crypto';
-import { n as readDaemonState, l as logger, c as configuration, o as clearDaemonState, q as getProjectPath, p as projectPath, s as initializeSandbox, t as wrapCommand, d as contentLogMetadata, I as InvalidateSync, R as RawJSONLinesSchema, g as delay, u as AsyncLock, v as ensurePrivateDirectory, M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES, x as hardenPrivateFile, f as packageJson, i as readSettings, y as readCredentials, z as credentialRelayProblem, B as deriveLocalCliUpdateSummary, j as encodeBase64, C as updateSettings, D as encodeBase64Url, E as decodeBase64, F as writeCredentialsLegacy, G as writeCredentialsDataKey, H as readCredentialsForConfiguredRelay, J as encrypt, r as readPersistedSessions, K as getLocalHappyAgentCredentialPath, L as readLocalHappyAgentCredentials, N as decryptWithDataKey, O as decryptLegacy, P as extractCompleteLines, Q as decideBackfill, S as parseTerminalHookPayload, T as decideMirrorBinding, U as persistSession, V as MIRROR_BACKFILL_LINES_DEFAULT, W as mirrorLineKey, X as mirrorLocalId, Y as detectResumeSupport, Z as detectCLIAvailability, _ as acquireDaemonLock, $ as summarizeSpawnSessionForLog, a0 as deletePersistedSessions, a1 as decrypt, a2 as writeDaemonState, A as ApiClient, a3 as fetchCliUpdateState, a4 as resolveCliUpdateCheckInterval, a5 as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS, a6 as releaseDaemonLock, a7 as isValidSessionId, a8 as listVhTerminals, a9 as isValidTerminalId, aa as readVhTerminal, ab as sendToVhTerminal, h as connectionState, ac as startOfflineReconnection, ad as clearCredentials, ae as clearMachineId, k as ensurePrivateDirectorySync, w as writePrivateFileSync, af as SandboxConfigSchema, b as createEnvelope, ag as CodexAppServerClient, ah as getLatestDaemonLog } from './types-AO-TVSTa.mjs';
+import { n as readDaemonState, l as logger, c as configuration, o as clearDaemonState, q as getProjectPath, p as projectPath, s as initializeSandbox, t as wrapCommand, d as contentLogMetadata, I as InvalidateSync, R as RawJSONLinesSchema, g as delay, u as AsyncLock, v as ensurePrivateDirectory, M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES, x as hardenPrivateFile, f as packageJson, i as readSettings, y as readCredentials, z as credentialRelayProblem, B as deriveLocalCliUpdateSummary, j as encodeBase64, C as updateSettings, D as encodeBase64Url, E as decodeBase64, F as writeCredentialsLegacy, G as writeCredentialsDataKey, H as readCredentialsForConfiguredRelay, J as encrypt, r as readPersistedSessions, K as getLocalHappyAgentCredentialPath, L as readLocalHappyAgentCredentials, N as decryptWithDataKey, O as decryptLegacy, P as extractCompleteLines, Q as decideBackfill, S as parseTerminalHookPayload, T as tmuxArgs, U as scrubTmuxClientEnv, V as decideMirrorBinding, W as persistSession, X as MIRROR_BACKFILL_LINES_DEFAULT, Y as mirrorLineKey, Z as mirrorLocalId, _ as detectResumeSupport, $ as detectCLIAvailability, a0 as acquireDaemonLock, a1 as summarizeSpawnSessionForLog, a2 as deletePersistedSessions, a3 as decrypt, a4 as writeDaemonState, A as ApiClient, a5 as fetchCliUpdateState, a6 as resolveCliUpdateCheckInterval, a7 as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS, a8 as releaseDaemonLock, a9 as isValidSessionId, aa as listVhTerminals, ab as isValidTerminalId, ac as readVhTerminal, ad as sendToVhTerminal, h as connectionState, ae as startOfflineReconnection, af as clearCredentials, ag as clearMachineId, k as ensurePrivateDirectorySync, w as writePrivateFileSync, ah as SandboxConfigSchema, b as createEnvelope, ai as CodexAppServerClient, aj as getLatestDaemonLog } from './types-DS3i_5LV.mjs';
 import spawn$1, { spawn } from 'cross-spawn';
 import path, { join, resolve, basename, isAbsolute, normalize, sep, dirname } from 'node:path';
 import { createInterface } from 'node:readline';
@@ -1506,7 +1506,7 @@ function query(params) {
     fallbackModel: opts?.fallbackModel,
     maxTurns: opts?.maxTurns,
     permissionMode: opts?.permissionMode,
-    allowDangerouslySkipPermissions: opts?.permissionMode === "bypassPermissions",
+    allowDangerouslySkipPermissions: opts?.allowDangerouslySkipPermissions ?? opts?.permissionMode === "bypassPermissions",
     allowedTools: opts?.allowedTools,
     disallowedTools: opts?.disallowedTools,
     mcpServers: opts?.mcpServers,
@@ -1581,6 +1581,9 @@ const VALID_PERMISSION_MODES = [
 function isPermissionMode(value) {
   return !!value && VALID_PERMISSION_MODES.includes(value);
 }
+function parseClaudePermissionMode(value) {
+  return typeof value === "string" && isPermissionMode(value) ? mapToClaudeMode(value) : null;
+}
 function extractPermissionModeFromClaudeArgs(claudeArgs) {
   if (!claudeArgs || claudeArgs.length === 0) {
     return void 0;
@@ -1881,6 +1884,10 @@ async function claudeRemote(opts) {
     resume: startFrom ?? void 0,
     mcpServers: opts.mcpServers,
     permissionMode: mapToClaudeMode(initial.mode.permissionMode),
+    // This is only the SDK safety opt-in; permissionMode/canUseTool still
+    // enforce the selected policy. It must be enabled at Query creation so
+    // a later explicit live switch to bypassPermissions can succeed.
+    allowDangerouslySkipPermissions: true,
     model: initial.mode.model,
     fallbackModel: initial.mode.fallbackModel,
     customSystemPrompt: initial.mode.customSystemPrompt ? initial.mode.customSystemPrompt + "\n\n" + systemPrompt : void 0,
@@ -2056,6 +2063,10 @@ class PermissionHandler {
   onPermissionRequestCallback;
   /** Callback to change permission mode on the active query (set by claudeRemote) */
   setPermissionModeCallback;
+  modeChangeQueue = Promise.resolve();
+  deferredPermissionMode;
+  /** Fired when an approval response (plan approval / approve-with-mode) moved the mode. */
+  onModeChangedCallback;
   constructor(session) {
     this.session = session;
     this.setupClientHandler();
@@ -2067,7 +2078,19 @@ class PermissionHandler {
     this.onPermissionRequestCallback = callback;
   }
   handleModeChange(mode) {
-    this.permissionMode = mode;
+    this.permissionMode = mapToClaudeMode(mode);
+  }
+  /** Current locally enforced mode (what canUseTool applies right now). */
+  getPermissionMode() {
+    return this.permissionMode;
+  }
+  /**
+   * Observe mode transitions that originate inside the approval flow
+   * (ExitPlanMode approval, approve-with-mode). Live/idle RPC changes and
+   * queue-driven changes are owned by the launcher and do not fire this.
+   */
+  setOnModeChanged(callback) {
+    this.onModeChangedCallback = callback;
   }
   /**
    * Set callback to dynamically change permission mode on the active query.
@@ -2076,6 +2099,74 @@ class PermissionHandler {
   setPermissionModeUpdater(callback) {
     this.setPermissionModeCallback = callback;
   }
+  /**
+   * Apply a user-requested mode to the active SDK Query. Mode changes are
+   * serialized so rapid menu selections cannot finish out of order.
+   *
+   * A live Query can be blocked inside canUseTool. When the requested mode
+   * would have auto-allowed that ordinary tool, finish the callback first;
+   * interactive prompts and ExitPlanMode deliberately remain pending.
+   */
+  setLivePermissionMode(mode) {
+    const task = this.modeChangeQueue.then(() => this.applyLivePermissionMode(mode));
+    this.modeChangeQueue = task.catch(() => void 0);
+    return task;
+  }
+  async applyLivePermissionMode(mode) {
+    if (!this.setPermissionModeCallback) {
+      throw new Error("active Claude query is not ready");
+    }
+    const previousMode = this.permissionMode;
+    this.permissionMode = mode;
+    this.deferredPermissionMode = void 0;
+    try {
+      const autoApproved = [...this.pendingRequests.entries()].filter(([, pending]) => pending.kind === "tool" && this.modeAutoAllowsTool(mode, pending.toolName));
+      for (const [id, pending] of autoApproved) {
+        if (pending.kind !== "tool" || !this.pendingRequests.delete(id)) continue;
+        const response = {
+          id,
+          approved: true,
+          decision: "approved",
+          reason: `Approved by live permission mode ${mode}`
+        };
+        const effectiveResponse = await this.handlePermissionResponse(response, pending);
+        this.responses.set(id, { ...effectiveResponse, receivedAt: Date.now() });
+        this.recordCompletedRequest(id, effectiveResponse);
+      }
+      if (this.pendingRequests.size > 0) {
+        this.deferredPermissionMode = mode;
+        return;
+      }
+      await new Promise((resolve) => setImmediate(resolve));
+      await this.setPermissionModeCallback(mode);
+    } catch (error) {
+      this.permissionMode = previousMode;
+      if (this.deferredPermissionMode === mode) this.deferredPermissionMode = void 0;
+      throw error;
+    }
+  }
+  scheduleDeferredPermissionModeUpdate() {
+    const mode = this.deferredPermissionMode;
+    if (!mode || this.pendingRequests.size > 0) return;
+    this.deferredPermissionMode = void 0;
+    setImmediate(() => {
+      const task = this.modeChangeQueue.then(async () => {
+        if (!this.setPermissionModeCallback || this.permissionMode !== mode) return;
+        await this.setPermissionModeCallback(mode);
+      });
+      this.modeChangeQueue = task.catch((error) => {
+        logger.debug("[PermissionHandler] Deferred SDK permission mode update failed", error);
+      });
+    });
+  }
+  modeAutoAllowsTool(mode, toolName) {
+    if (toolName === "AskUserQuestion") return false;
+    const descriptor = getToolDescriptor(toolName);
+    if (descriptor.exitPlan) return false;
+    if (mode === "bypassPermissions") return true;
+    if (mode === "acceptEdits") return descriptor.edit;
+    return mode === "plan" && !descriptor.dangerous;
+  }
   /**
    * Handler response
    */
@@ -2089,9 +2180,10 @@ class PermissionHandler {
         updatedInput: contentLogMetadata(response.updatedInput)
       });
       if (response.approved) {
-        const newMode = response.mode && ["default", "acceptEdits", "bypassPermissions"].includes(response.mode) ? response.mode : "default";
+        const newMode = response.mode && ["default", "acceptEdits", "bypassPermissions"].includes(response.mode) ? response.mode : "bypassPermissions";
         logger.debug(`Plan approved - allowing ExitPlanMode with ${newMode} as the local follow-up mode`);
         this.permissionMode = newMode;
+        this.onModeChangedCallback?.(newMode);
         pending.resolve({ behavior: "allow", updatedInput: pending.input || {} });
       } else {
         pending.resolve({ behavior: "deny", message: response.reason || "Plan rejected" });
@@ -2102,6 +2194,7 @@ class PermissionHandler {
           if (!this.setPermissionModeCallback) throw new Error("permission mode updater unavailable");
           await this.setPermissionModeCallback(response.mode);
           this.permissionMode = response.mode;
+          this.onModeChangedCallback?.(response.mode);
         } catch (err) {
           const reason = `Failed to switch permission mode: ${err instanceof Error ? err.message : String(err)}`;
           pending.resolve({ behavior: "deny", message: reason });
@@ -2320,6 +2413,30 @@ class PermissionHandler {
       };
     });
   }
+  recordCompletedRequest(id, response) {
+    this.session.client.updateAgentState((currentState) => {
+      const request = currentState.requests?.[id];
+      if (!request) return currentState;
+      const requests = { ...currentState.requests };
+      delete requests[id];
+      return {
+        ...currentState,
+        requests,
+        completedRequests: {
+          ...currentState.completedRequests,
+          [id]: {
+            ...request,
+            completedAt: Date.now(),
+            status: response.approved ? "approved" : "denied",
+            reason: response.reason,
+            mode: response.mode,
+            decision: response.decision,
+            allowedTools: response.allowTools
+          }
+        }
+      };
+    });
+  }
   /**
    * Parses Bash permission strings into literal and prefix sets
    */
@@ -2358,6 +2475,7 @@ class PermissionHandler {
     this.allowedBashLiterals.clear();
     this.allowedBashPrefixes.clear();
     this.permissionMode = "default";
+    this.deferredPermissionMode = void 0;
     for (const [, pending] of this.pendingRequests.entries()) {
       pending.reject(new Error("Session reset"));
     }
@@ -2410,28 +2528,8 @@ class PermissionHandler {
       } else {
         pending.resolve(message.approved ? { behavior: "completed", result: message.updatedInput?.result ?? "retry_fallback" } : { behavior: "cancelled" });
       }
-      this.session.client.updateAgentState((currentState) => {
-        const request = currentState.requests?.[id];
-        if (!request) return currentState;
-        let r = { ...currentState.requests };
-        delete r[id];
-        return {
-          ...currentState,
-          requests: r,
-          completedRequests: {
-            ...currentState.completedRequests,
-            [id]: {
-              ...request,
-              completedAt: Date.now(),
-              status: effectiveResponse.approved ? "approved" : "denied",
-              reason: effectiveResponse.reason,
-              mode: effectiveResponse.mode,
-              decision: effectiveResponse.decision,
-              allowedTools: effectiveResponse.allowTools
-            }
-          }
-        };
-      });
+      this.recordCompletedRequest(id, effectiveResponse);
+      this.scheduleDeferredPermissionModeUpdate();
     });
   }
   /**
@@ -3207,7 +3305,7 @@ function createTurnSteeringController() {
   };
 }
 
-async function claudeRemoteLauncher(session) {
+async function claudeRemoteLauncher(session, onPermissionModeChange) {
   logger.debug("[claudeRemoteLauncher] Starting remote launcher");
   const hasTTY = process.stdout.isTTY && process.stdin.isTTY;
   logger.debug(`[claudeRemoteLauncher] TTY available: ${hasTTY}`);
@@ -3268,7 +3366,24 @@ async function claudeRemoteLauncher(session) {
     await turnSteering.steer();
   });
   session.client.rpcHandlerManager.registerHandler("switch", doSwitch);
+  let livePermissionModeHandler = null;
+  let idlePermissionModeHandler = null;
+  session.client.rpcHandlerManager.registerHandler(
+    "set-permission-mode",
+    async (request) => {
+      const requestedMode = parseClaudePermissionMode(request?.mode);
+      if (!requestedMode) throw new Error("Invalid Claude permission mode");
+      if (livePermissionModeHandler) return { mode: await livePermissionModeHandler(requestedMode) };
+      if (idlePermissionModeHandler) return { mode: idlePermissionModeHandler(requestedMode) };
+      throw new Error("No active Claude query");
+    }
+  );
   const permissionHandler = new PermissionHandler(session);
+  idlePermissionModeHandler = (nextMode) => {
+    permissionHandler.handleModeChange(nextMode);
+    onPermissionModeChange?.(nextMode);
+    return nextMode;
+  };
   permissionHandler.reset("Previous CLI process exited before responding");
   const messageQueue = new OutgoingMessageQueue(
     (logMessage) => session.client.sendClaudeSessionMessage(logMessage)
@@ -3418,6 +3533,19 @@ async function claudeRemoteLauncher(session) {
       abortFuture = new Future();
       let modeHash = null;
       let mode = null;
+      const commitPermissionMode = (nextMode) => {
+        permissionHandler.handleModeChange(nextMode);
+        if (mode) {
+          mode = { ...mode, permissionMode: nextMode };
+          modeHash = session.queue.modeHasher(mode);
+        }
+        onPermissionModeChange?.(nextMode);
+        return nextMode;
+      };
+      idlePermissionModeHandler = commitPermissionMode;
+      permissionHandler.setOnModeChanged((nextMode) => {
+        commitPermissionMode(nextMode);
+      });
       try {
         const attachmentDirectory = chatAttachmentDirectory(configuration.happyHomeDir, session.client.sessionId);
         await ensurePrivateDirectory(attachmentDirectory);
@@ -3504,6 +3632,15 @@ async function claudeRemoteLauncher(session) {
             permissionHandler.setPermissionModeUpdater(async (mode2) => {
               await q.setPermissionMode(mode2);
             });
+            livePermissionModeHandler = async (nextMode) => {
+              await permissionHandler.setLivePermissionMode(nextMode);
+              if (mode) {
+                mode = { ...mode, permissionMode: nextMode };
+                modeHash = session.queue.modeHasher(mode);
+              }
+              onPermissionModeChange?.(nextMode);
+              return nextMode;
+            };
           },
           onThinkingChange: session.onThinkingChange,
           claudeEnvVars: session.claudeEnvVars,
@@ -3565,6 +3702,8 @@ async function claudeRemoteLauncher(session) {
       } finally {
         turnSteering.reset();
         session.setSteerHandler(null);
+        livePermissionModeHandler = null;
+        permissionHandler.setPermissionModeUpdater(void 0);
         sdkToLogConverter.resetTransientState();
         logger.debug("[remote]: launch finally");
         for (let [toolCallId, { parentToolCallId }] of ongoingToolCalls) {
@@ -3649,7 +3788,7 @@ async function loop(opts) {
         break;
       }
       case "remote": {
-        const reason = await claudeRemoteLauncher(session);
+        const reason = await claudeRemoteLauncher(session, opts.onPermissionModeChange);
         switch (reason) {
           case "exit":
             return 0;
@@ -6511,7 +6650,7 @@ function createMirrorManager(deps) {
   let chain = Promise.resolve();
   const isTerminalAlive = deps.isTerminalAlive ?? ((terminalId) => {
     try {
-      return spawnSync("tmux", ["has-session", "-t", `=vh-${terminalId}:`], { stdio: "ignore", timeout: 3e3 }).status === 0;
+      return spawnSync("tmux", tmuxArgs(["has-session", "-t", `=vh-${terminalId}:`]), { stdio: "ignore", timeout: 3e3, env: scrubTmuxClientEnv({ ...process.env }) }).status === 0;
     } catch {
       return false;
     }
@@ -9139,7 +9278,10 @@ async function runClaude(credentials, options = {}) {
     // a brand-new session cannot pick a PDF until after sending once.
     attachmentKinds: [...CLAUDE_ATTACHMENT_KINDS],
     queueCancellation: true,
-    capabilities: ["claude-steer-v1"],
+    capabilities: ["claude-steer-v1", "claude-live-permission-v1", "claude-live-permission-v2"],
+    // Effective mode this process enforces. Kept current by
+    // publishPermissionMode below; the web renders it instead of guessing.
+    permissionMode: mapToClaudeMode(initialPermissionMode ?? "default"),
     sandbox: sandboxConfig?.enabled ? sandboxConfig : null,
     dangerouslySkipPermissions,
     ...forkedFromSessionId ? { parentSessionId: forkedFromSessionId } : {},
@@ -9376,6 +9518,14 @@ async function runClaude(credentials, options = {}) {
     )
   }));
   let currentPermissionMode = initialPermissionMode;
+  let publishedPermissionMode = mapToClaudeMode(initialPermissionMode ?? "default");
+  const publishPermissionMode = (mode) => {
+    currentPermissionMode = mode;
+    const published = mapToClaudeMode(mode ?? "default");
+    if (published === publishedPermissionMode) return;
+    publishedPermissionMode = published;
+    session.updateMetadata((meta) => ({ ...meta, permissionMode: published }));
+  };
   let currentModel = options.model ?? DEFAULT_CLAUDE_MODEL;
   let currentFallbackModel = void 0;
   let currentCustomSystemPrompt = void 0;
@@ -9384,7 +9534,6 @@ async function runClaude(credentials, options = {}) {
   let currentDisallowedTools = withAssistantDenylist(void 0, isAssistantVariant);
   let currentEffort = DEFAULT_CLAUDE_EFFORT;
   const resetCurrentModeDefaults = () => {
-    currentPermissionMode = initialPermissionMode;
     currentModel = options.model ?? DEFAULT_CLAUDE_MODEL;
     currentFallbackModel = void 0;
     currentCustomSystemPrompt = void 0;
@@ -9428,7 +9577,7 @@ async function runClaude(credentials, options = {}) {
         message.meta.permissionMode,
         sandboxEnabled
       );
-      currentPermissionMode = messagePermissionMode;
+      publishPermissionMode(messagePermissionMode);
       const ignoredDefaultDowngrade = (previousPermissionMode === "bypassPermissions" || previousPermissionMode === "yolo") && message.meta.permissionMode === "default" && currentPermissionMode === previousPermissionMode;
       if (ignoredDefaultDowngrade) {
         logger.debug(`[loop] Ignoring permission mode downgrade from ${previousPermissionMode} to default`);
@@ -9684,6 +9833,10 @@ async function runClaude(credentials, options = {}) {
       currentSession = sessionInstance;
     },
     onAbort: resetCurrentModeDefaults,
+    onPermissionModeChange: (mode) => {
+      publishPermissionMode(mode);
+      logger.debug(`[loop] Permission mode updated from session RPC / approval to: ${mode}`);
+    },
     mcpServers: {
       "happy": {
         type: "http",
@@ -13440,7 +13593,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     process.exit(0);
   } else if (subcommand === "install-terminal-hooks") {
     try {
-      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await import('./installTerminalHooks-DsqU3Dxc.mjs');
+      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await import('./installTerminalHooks-C-OgZr5k.mjs');
       const command = parseTerminalHooksArgs(args.slice(1));
       if (command.action === "help") {
         console.log(TERMINAL_HOOKS_HELP);
@@ -13457,7 +13610,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
   } else if (subcommand === "spawn") {
     try {
-      const { handleSpawnCommand } = await import('./spawn-DkG_GIXM.mjs');
+      const { handleSpawnCommand } = await import('./spawn-JxaPHAoP.mjs');
       await handleSpawnCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -13469,7 +13622,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "send") {
     try {
-      const { handleSendCommand } = await import('./send-ifKBw-7j.mjs');
+      const { handleSendCommand } = await import('./send-BHliX59m.mjs');
       await handleSendCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -13575,9 +13728,9 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     if (geminiSubcommand === "project" && args[2] === "set" && args[3]) {
       const projectId = args[3];
       try {
-        const { saveGoogleCloudProjectToConfig } = await import('./config-CFSdirvc.mjs');
-        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await import('./types-AO-TVSTa.mjs').then(function (n) { return n.ai; });
-        const { ApiClient: ApiClient2 } = await import('./types-AO-TVSTa.mjs').then(function (n) { return n.aj; });
+        const { saveGoogleCloudProjectToConfig } = await import('./config-BEdyyciP.mjs');
+        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await import('./types-DS3i_5LV.mjs').then(function (n) { return n.ak; });
+        const { ApiClient: ApiClient2 } = await import('./types-DS3i_5LV.mjs').then(function (n) { return n.al; });
         let userEmail = void 0;
         try {
           const credentials = await readCredentialsForConfiguredRelay2();
@@ -13608,7 +13761,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
     if (geminiSubcommand === "project" && args[2] === "get") {
       try {
-        const { readGeminiLocalConfig } = await import('./config-CFSdirvc.mjs');
+        const { readGeminiLocalConfig } = await import('./config-BEdyyciP.mjs');
         const config = readGeminiLocalConfig();
         if (config.googleCloudProject) {
           console.log(`Current Google Cloud Project: ${config.googleCloudProject}`);
@@ -13648,7 +13801,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
       process.exit(0);
     }
     try {
-      const { runGemini } = await import('./runGemini-cm1mKuxv.mjs');
+      const { runGemini } = await import('./runGemini-DBr_TiTL.mjs');
       let startedBy = void 0;
       for (let i = 1; i < args.length; i++) {
         if (args[i] === "--started-by") {
@@ -13670,7 +13823,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "acp") {
     try {
-      const { runAcp, resolveAcpAgentConfig } = await import('./index-Cn3VqAah.mjs');
+      const { runAcp, resolveAcpAgentConfig } = await import('./index-Dfu5uvjk.mjs');
       let startedBy = void 0;
       let verbose = false;
       const acpArgs = [];
@@ -13710,7 +13863,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "openclaw") {
     try {
-      const { runOpenClaw } = await import('./runOpenClaw-CCwYAKyZ.mjs');
+      const { runOpenClaw } = await import('./runOpenClaw-Cbde8t92.mjs');
       let startedBy = void 0;
       let verbose = false;
       let gatewayUrl;
@@ -13761,7 +13914,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "mcp" && args.length === 1) {
     try {
-      const { handleMcpCommand } = await import('./mcp-DV49L5g2.mjs');
+      const { handleMcpCommand } = await import('./mcp-Du-N0qlK.mjs');
       await handleMcpCommand();
     } catch (error) {
       process.stderr.write(`[very-happy mcp] Fatal: ${error instanceof Error ? error.message : String(error)}

package/dist/index.cjs

@@ -1,8 +1,8 @@
 'use strict';
 
 require('chalk');
-require('./index-FxD6Abgx.cjs');
-require('./types-DE03map-.cjs');
+require('./index-4YmVbx7j.cjs');
+require('./types-BNGeiP1C.cjs');
 require('zod');
 require('node:child_process');
 require('node:os');

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import 'chalk';
-import './index-j2LYx2KW.mjs';
-import './types-AO-TVSTa.mjs';
+import './index-an09rejO.mjs';
+import './types-DS3i_5LV.mjs';
 import 'zod';
 import 'node:child_process';
 import 'node:os';

package/dist/{installTerminalHooks-DsqU3Dxc.mjs → installTerminalHooks-C-OgZr5k.mjs}

@@ -3,8 +3,8 @@ import { join, resolve } from 'node:path';
 import { homedir } from 'node:os';
 import { spawnSync } from 'node:child_process';
 import chalk from 'chalk';
-import { p as projectPath } from './types-AO-TVSTa.mjs';
-import { t as tmuxSupportsSessionEnv } from './index-j2LYx2KW.mjs';
+import { p as projectPath } from './types-DS3i_5LV.mjs';
+import { t as tmuxSupportsSessionEnv } from './index-an09rejO.mjs';
 import 'axios';
 import 'node:util';
 import 'node:fs/promises';

package/dist/{installTerminalHooks-BL25f9BN.cjs → installTerminalHooks-DDpVxk8-.cjs}

@@ -5,8 +5,8 @@ var path = require('node:path');
 var os = require('node:os');
 var node_child_process = require('node:child_process');
 var chalk = require('chalk');
-var persistence = require('./types-DE03map-.cjs');
-var index = require('./index-FxD6Abgx.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 require('axios');
 require('node:util');
 require('node:fs/promises');

package/dist/lib.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var persistence = require('./types-DE03map-.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 require('axios');
 require('chalk');
 require('node:util');

package/dist/lib.d.cts

@@ -451,6 +451,14 @@ type Metadata = {
     flavor?: string;
     sandbox?: SandboxConfig | null;
     dangerouslySkipPermissions?: boolean | null;
+    /**
+     * Effective permission mode the running Claude process enforces right now
+     * (SDK vocabulary: default | acceptEdits | bypassPermissions | plan). The
+     * CLI is the single source of truth: it writes this at start, on every
+     * message/RPC/plan-approval change. Web displays it verbatim; old clients
+     * ignore it and old CLIs never write it (capability claude-live-permission-v2).
+     */
+    permissionMode?: string;
     /** Lineage for sessions created via the fork / duplicate flow. */
     parentSessionId?: string;
     forkedFromMessageId?: string;

package/dist/lib.d.mts

@@ -451,6 +451,14 @@ type Metadata = {
     flavor?: string;
     sandbox?: SandboxConfig | null;
     dangerouslySkipPermissions?: boolean | null;
+    /**
+     * Effective permission mode the running Claude process enforces right now
+     * (SDK vocabulary: default | acceptEdits | bypassPermissions | plan). The
+     * CLI is the single source of truth: it writes this at start, on every
+     * message/RPC/plan-approval change. Web displays it verbatim; old clients
+     * ignore it and old CLIs never write it (capability claude-live-permission-v2).
+     */
+    permissionMode?: string;
     /** Lineage for sessions created via the fork / duplicate flow. */
     parentSessionId?: string;
     forkedFromMessageId?: string;

package/dist/lib.mjs

@@ -1,4 +1,4 @@
-export { A as ApiClient, a as ApiSessionClient, R as RawJSONLinesSchema, c as configuration, l as logger } from './types-AO-TVSTa.mjs';
+export { A as ApiClient, a as ApiSessionClient, R as RawJSONLinesSchema, c as configuration, l as logger } from './types-DS3i_5LV.mjs';
 import 'axios';
 import 'chalk';
 import 'node:util';

package/dist/{mcp-BVoo0PQS.cjs → mcp-B6Nq-RUL.cjs}

@@ -3,9 +3,9 @@
 var mcp_js = require('@modelcontextprotocol/sdk/server/mcp.js');
 var stdio_js = require('@modelcontextprotocol/sdk/server/stdio.js');
 var z = require('zod');
-var index = require('./index-FxD6Abgx.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 var limits = require('./limits-KdWKmwtH.cjs');
-var persistence = require('./types-DE03map-.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 require('chalk');
 require('node:os');
 require('node:crypto');

package/dist/{mcp-DV49L5g2.mjs → mcp-Du-N0qlK.mjs}

@@ -1,9 +1,9 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { z } from 'zod';
-import { p as pushClipboardViaDaemon } from './index-j2LYx2KW.mjs';
+import { p as pushClipboardViaDaemon } from './index-an09rejO.mjs';
 import { C as CLIPBOARD_TOOL_NAME, a as CLIPBOARD_TOOL_TITLE, b as CLIPBOARD_TOOL_DESCRIPTION, c as CLIPBOARD_MAX_BYTES } from './limits-CwFb5S2b.mjs';
-import { l as logger } from './types-AO-TVSTa.mjs';
+import { l as logger } from './types-DS3i_5LV.mjs';
 import 'chalk';
 import 'node:os';
 import 'node:crypto';

package/dist/{runGemini-t_Oikq3z.cjs → runGemini-ChG7cGMC.cjs}

@@ -4,10 +4,10 @@ var ink = require('ink');
 var React = require('react');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
-var persistence = require('./types-DE03map-.cjs');
-var index = require('./index-FxD6Abgx.cjs');
-var AcpBackend = require('./AcpBackend-CBZNjcYO.cjs');
-var config = require('./config-BPPY98U1.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var index = require('./index-4YmVbx7j.cjs');
+var AcpBackend = require('./AcpBackend-CnYZFdd0.cjs');
+var config = require('./config-CgXitj0f.cjs');
 require('axios');
 require('chalk');
 require('node:util');

package/dist/{runGemini-cm1mKuxv.mjs → runGemini-DBr_TiTL.mjs}

@@ -2,10 +2,10 @@ import { useStdout, useInput, Box, Text, render } from 'ink';
 import React, { useState, useRef, useEffect, useCallback } from 'react';
 import { randomUUID } from 'node:crypto';
 import { join } from 'node:path';
-import { l as logger, h as connectionState, A as ApiClient, i as readSettings, e as errorLogMetadata, j as encodeBase64, p as projectPath, d as contentLogMetadata } from './types-AO-TVSTa.mjs';
-import { g as GEMINI_API_KEY_ENV, j as GOOGLE_API_KEY_ENV, G as GEMINI_MODEL_ENV, B as BasePermissionHandler, k as BaseReasoningProcessor, i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, h as hashObject, l as MessageBuffer, C as CHANGE_TITLE_INSTRUCTION, r as registerKillSessionHandler, f as startHappyServer } from './index-j2LYx2KW.mjs';
-import { A as AcpBackend } from './AcpBackend-C_simUP7.mjs';
-import { readGeminiLocalConfig, determineGeminiModel, getGeminiModelSource, getInitialGeminiModel, saveGeminiModelToConfig } from './config-CFSdirvc.mjs';
+import { l as logger, h as connectionState, A as ApiClient, i as readSettings, e as errorLogMetadata, j as encodeBase64, p as projectPath, d as contentLogMetadata } from './types-DS3i_5LV.mjs';
+import { g as GEMINI_API_KEY_ENV, j as GOOGLE_API_KEY_ENV, G as GEMINI_MODEL_ENV, B as BasePermissionHandler, k as BaseReasoningProcessor, i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, h as hashObject, l as MessageBuffer, C as CHANGE_TITLE_INSTRUCTION, r as registerKillSessionHandler, f as startHappyServer } from './index-an09rejO.mjs';
+import { A as AcpBackend } from './AcpBackend-BV4wSnJ3.mjs';
+import { readGeminiLocalConfig, determineGeminiModel, getGeminiModelSource, getInitialGeminiModel, saveGeminiModelToConfig } from './config-BEdyyciP.mjs';
 import 'axios';
 import 'chalk';
 import 'node:util';

package/dist/{runOpenClaw-CCwYAKyZ.mjs → runOpenClaw-Cbde8t92.mjs}

@@ -3,9 +3,9 @@ import { execFileSync } from 'node:child_process';
 import os from 'node:os';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { k as ensurePrivateDirectorySync, m as hardenPrivateFileSync, w as writePrivateFileSync, e as errorLogMetadata, d as contentLogMetadata, h as connectionState, A as ApiClient, i as readSettings, j as encodeBase64, l as logger, c as configuration } from './types-AO-TVSTa.mjs';
-import { A as AcpSessionManager } from './AcpSessionManager-G8w8Q6tt.mjs';
-import { i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, r as registerKillSessionHandler } from './index-j2LYx2KW.mjs';
+import { k as ensurePrivateDirectorySync, m as hardenPrivateFileSync, w as writePrivateFileSync, e as errorLogMetadata, d as contentLogMetadata, h as connectionState, A as ApiClient, i as readSettings, j as encodeBase64, l as logger, c as configuration } from './types-DS3i_5LV.mjs';
+import { A as AcpSessionManager } from './AcpSessionManager-Cyne6Rmg.mjs';
+import { i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, r as registerKillSessionHandler } from './index-an09rejO.mjs';
 import WebSocket from 'ws';
 import * as ed from '@noble/ed25519';
 import { sha512 } from '@noble/hashes/sha2.js';

package/dist/{runOpenClaw-CCGywWGD.cjs → runOpenClaw-D2jtVgpC.cjs}

@@ -5,9 +5,9 @@ var node_child_process = require('node:child_process');
 var os = require('node:os');
 var node_fs = require('node:fs');
 var path = require('node:path');
-var persistence = require('./types-DE03map-.cjs');
-var AcpSessionManager = require('./AcpSessionManager-B9mJWEzL.cjs');
-var index = require('./index-FxD6Abgx.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var AcpSessionManager = require('./AcpSessionManager-BPBdrrME.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 var WebSocket = require('ws');
 var ed = require('@noble/ed25519');
 var sha2_js = require('@noble/hashes/sha2.js');