very-happy-cli 0.2.89 → 0.2.90

package/dist/{AcpBackend-DuxcHPyn.mjs → AcpBackend-BV4wSnJ3.mjs}

@@ -1,7 +1,7 @@
 import { spawn } from 'node:child_process';
 import { ndJsonStream, ClientSideConnection } from '@agentclientprotocol/sdk';
 import { randomUUID } from 'node:crypto';
-import { l as logger, d as contentLogMetadata, e as errorLogMetadata, f as packageJson, g as delay } from './types-d_104eQF.mjs';
+import { l as logger, d as contentLogMetadata, e as errorLogMetadata, f as packageJson, g as delay } from './types-DS3i_5LV.mjs';
 
 const DEFAULT_TIMEOUTS = {
   /** Default initialization timeout: 60 seconds */

package/dist/{AcpBackend-ClEvE-A-.cjs → AcpBackend-CnYZFdd0.cjs}

@@ -3,7 +3,7 @@
 var node_child_process = require('node:child_process');
 var sdk = require('@agentclientprotocol/sdk');
 var node_crypto = require('node:crypto');
-var persistence = require('./types-DLI6sss2.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 
 const DEFAULT_TIMEOUTS = {
   /** Default initialization timeout: 60 seconds */

package/dist/{AcpSessionManager-DgbEf8FX.cjs → AcpSessionManager-BPBdrrME.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var cuid2 = require('@paralleldrive/cuid2');
-var persistence = require('./types-DLI6sss2.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 
 function turnOptions(turnId, time) {
   return turnId ? { turn: turnId, time } : { time };

package/dist/{AcpSessionManager-CGrA8bTm.mjs → AcpSessionManager-Cyne6Rmg.mjs}

@@ -1,5 +1,5 @@
 import { createId } from '@paralleldrive/cuid2';
-import { b as createEnvelope } from './types-d_104eQF.mjs';
+import { b as createEnvelope } from './types-DS3i_5LV.mjs';
 
 function turnOptions(turnId, time) {
   return turnId ? { turn: turnId, time } : { time };

package/dist/{config-CdoGLla8.mjs → config-BEdyyciP.mjs}

@@ -2,8 +2,8 @@ import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
 import { execSync } from 'child_process';
-import { l as logger } from './types-d_104eQF.mjs';
-import { D as DEFAULT_GEMINI_MODEL, G as GEMINI_MODEL_ENV } from './index-vCgb7QnZ.mjs';
+import { l as logger } from './types-DS3i_5LV.mjs';
+import { D as DEFAULT_GEMINI_MODEL, G as GEMINI_MODEL_ENV } from './index-an09rejO.mjs';
 import 'axios';
 import 'chalk';
 import 'node:util';

package/dist/{config-BZNnPK1L.cjs → config-CgXitj0f.cjs}

@@ -4,8 +4,8 @@ var fs = require('fs');
 var path = require('path');
 var os = require('os');
 var child_process = require('child_process');
-var persistence = require('./types-DLI6sss2.cjs');
-var index = require('./index-DYDAFqAN.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 require('axios');
 require('chalk');
 require('node:util');

package/dist/{index-DYDAFqAN.cjs → index-4YmVbx7j.cjs}

@@ -3,7 +3,7 @@
 var chalk = require('chalk');
 var os = require('node:os');
 var node_crypto = require('node:crypto');
-var persistence = require('./types-DLI6sss2.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
 var spawn = require('cross-spawn');
 var path = require('node:path');
 var node_readline = require('node:readline');
@@ -2087,6 +2087,8 @@ class PermissionHandler {
   setPermissionModeCallback;
   modeChangeQueue = Promise.resolve();
   deferredPermissionMode;
+  /** Fired when an approval response (plan approval / approve-with-mode) moved the mode. */
+  onModeChangedCallback;
   constructor(session) {
     this.session = session;
     this.setupClientHandler();
@@ -2100,6 +2102,18 @@ class PermissionHandler {
   handleModeChange(mode) {
     this.permissionMode = mapToClaudeMode(mode);
   }
+  /** Current locally enforced mode (what canUseTool applies right now). */
+  getPermissionMode() {
+    return this.permissionMode;
+  }
+  /**
+   * Observe mode transitions that originate inside the approval flow
+   * (ExitPlanMode approval, approve-with-mode). Live/idle RPC changes and
+   * queue-driven changes are owned by the launcher and do not fire this.
+   */
+  setOnModeChanged(callback) {
+    this.onModeChangedCallback = callback;
+  }
   /**
    * Set callback to dynamically change permission mode on the active query.
    * Called by claudeRemote after the Query object is created.
@@ -2188,9 +2202,10 @@ class PermissionHandler {
         updatedInput: persistence.contentLogMetadata(response.updatedInput)
       });
       if (response.approved) {
-        const newMode = response.mode && ["default", "acceptEdits", "bypassPermissions"].includes(response.mode) ? response.mode : "default";
+        const newMode = response.mode && ["default", "acceptEdits", "bypassPermissions"].includes(response.mode) ? response.mode : "bypassPermissions";
         persistence.logger.debug(`Plan approved - allowing ExitPlanMode with ${newMode} as the local follow-up mode`);
         this.permissionMode = newMode;
+        this.onModeChangedCallback?.(newMode);
         pending.resolve({ behavior: "allow", updatedInput: pending.input || {} });
       } else {
         pending.resolve({ behavior: "deny", message: response.reason || "Plan rejected" });
@@ -2201,6 +2216,7 @@ class PermissionHandler {
           if (!this.setPermissionModeCallback) throw new Error("permission mode updater unavailable");
           await this.setPermissionModeCallback(response.mode);
           this.permissionMode = response.mode;
+          this.onModeChangedCallback?.(response.mode);
         } catch (err) {
           const reason = `Failed to switch permission mode: ${err instanceof Error ? err.message : String(err)}`;
           pending.resolve({ behavior: "deny", message: reason });
@@ -3373,16 +3389,23 @@ async function claudeRemoteLauncher(session, onPermissionModeChange) {
   });
   session.client.rpcHandlerManager.registerHandler("switch", doSwitch);
   let livePermissionModeHandler = null;
+  let idlePermissionModeHandler = null;
   session.client.rpcHandlerManager.registerHandler(
     "set-permission-mode",
     async (request) => {
       const requestedMode = parseClaudePermissionMode(request?.mode);
       if (!requestedMode) throw new Error("Invalid Claude permission mode");
-      if (!livePermissionModeHandler) throw new Error("No active Claude query");
-      return { mode: await livePermissionModeHandler(requestedMode) };
+      if (livePermissionModeHandler) return { mode: await livePermissionModeHandler(requestedMode) };
+      if (idlePermissionModeHandler) return { mode: idlePermissionModeHandler(requestedMode) };
+      throw new Error("No active Claude query");
     }
   );
   const permissionHandler = new PermissionHandler(session);
+  idlePermissionModeHandler = (nextMode) => {
+    permissionHandler.handleModeChange(nextMode);
+    onPermissionModeChange?.(nextMode);
+    return nextMode;
+  };
   permissionHandler.reset("Previous CLI process exited before responding");
   const messageQueue = new OutgoingMessageQueue(
     (logMessage) => session.client.sendClaudeSessionMessage(logMessage)
@@ -3532,6 +3555,19 @@ async function claudeRemoteLauncher(session, onPermissionModeChange) {
       abortFuture = new Future();
       let modeHash = null;
       let mode = null;
+      const commitPermissionMode = (nextMode) => {
+        permissionHandler.handleModeChange(nextMode);
+        if (mode) {
+          mode = { ...mode, permissionMode: nextMode };
+          modeHash = session.queue.modeHasher(mode);
+        }
+        onPermissionModeChange?.(nextMode);
+        return nextMode;
+      };
+      idlePermissionModeHandler = commitPermissionMode;
+      permissionHandler.setOnModeChanged((nextMode) => {
+        commitPermissionMode(nextMode);
+      });
       try {
         const attachmentDirectory = chatAttachmentDirectory(persistence.configuration.happyHomeDir, session.client.sessionId);
         await persistence.ensurePrivateDirectory(attachmentDirectory);
@@ -6636,7 +6672,7 @@ function createMirrorManager(deps) {
   let chain = Promise.resolve();
   const isTerminalAlive = deps.isTerminalAlive ?? ((terminalId) => {
     try {
-      return node_child_process.spawnSync("tmux", ["has-session", "-t", `=vh-${terminalId}:`], { stdio: "ignore", timeout: 3e3 }).status === 0;
+      return node_child_process.spawnSync("tmux", persistence.tmuxArgs(["has-session", "-t", `=vh-${terminalId}:`]), { stdio: "ignore", timeout: 3e3, env: persistence.scrubTmuxClientEnv({ ...process.env }) }).status === 0;
     } catch {
       return false;
     }
@@ -8807,7 +8843,7 @@ const MAX_TITLE_CHARS = 60;
 const GENERATION_TIMEOUT_MS = 3e4;
 function resolveClaudeBinary() {
   try {
-    const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index-DYDAFqAN.cjs', document.baseURI).href)));
+    const require$1 = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index-4YmVbx7j.cjs', document.baseURI).href)));
     const utilsPath = path.resolve(path.join(persistence.projectPath(), "scripts", "claude_version_utils.cjs"));
     const { getClaudeCliPath } = require$1(utilsPath);
     const path$1 = getClaudeCliPath();
@@ -9264,7 +9300,10 @@ async function runClaude(credentials, options = {}) {
     // a brand-new session cannot pick a PDF until after sending once.
     attachmentKinds: [...CLAUDE_ATTACHMENT_KINDS],
     queueCancellation: true,
-    capabilities: ["claude-steer-v1", "claude-live-permission-v1"],
+    capabilities: ["claude-steer-v1", "claude-live-permission-v1", "claude-live-permission-v2"],
+    // Effective mode this process enforces. Kept current by
+    // publishPermissionMode below; the web renders it instead of guessing.
+    permissionMode: mapToClaudeMode(initialPermissionMode ?? "default"),
     sandbox: sandboxConfig?.enabled ? sandboxConfig : null,
     dangerouslySkipPermissions,
     ...forkedFromSessionId ? { parentSessionId: forkedFromSessionId } : {},
@@ -9501,6 +9540,14 @@ async function runClaude(credentials, options = {}) {
     )
   }));
   let currentPermissionMode = initialPermissionMode;
+  let publishedPermissionMode = mapToClaudeMode(initialPermissionMode ?? "default");
+  const publishPermissionMode = (mode) => {
+    currentPermissionMode = mode;
+    const published = mapToClaudeMode(mode ?? "default");
+    if (published === publishedPermissionMode) return;
+    publishedPermissionMode = published;
+    session.updateMetadata((meta) => ({ ...meta, permissionMode: published }));
+  };
   let currentModel = options.model ?? DEFAULT_CLAUDE_MODEL;
   let currentFallbackModel = void 0;
   let currentCustomSystemPrompt = void 0;
@@ -9509,7 +9556,6 @@ async function runClaude(credentials, options = {}) {
   let currentDisallowedTools = withAssistantDenylist(void 0, isAssistantVariant);
   let currentEffort = DEFAULT_CLAUDE_EFFORT;
   const resetCurrentModeDefaults = () => {
-    currentPermissionMode = initialPermissionMode;
     currentModel = options.model ?? DEFAULT_CLAUDE_MODEL;
     currentFallbackModel = void 0;
     currentCustomSystemPrompt = void 0;
@@ -9553,7 +9599,7 @@ async function runClaude(credentials, options = {}) {
         message.meta.permissionMode,
         sandboxEnabled
       );
-      currentPermissionMode = messagePermissionMode;
+      publishPermissionMode(messagePermissionMode);
       const ignoredDefaultDowngrade = (previousPermissionMode === "bypassPermissions" || previousPermissionMode === "yolo") && message.meta.permissionMode === "default" && currentPermissionMode === previousPermissionMode;
       if (ignoredDefaultDowngrade) {
         persistence.logger.debug(`[loop] Ignoring permission mode downgrade from ${previousPermissionMode} to default`);
@@ -9810,8 +9856,8 @@ async function runClaude(credentials, options = {}) {
     },
     onAbort: resetCurrentModeDefaults,
     onPermissionModeChange: (mode) => {
-      currentPermissionMode = mode;
-      persistence.logger.debug(`[loop] Permission mode updated from live session RPC to: ${mode}`);
+      publishPermissionMode(mode);
+      persistence.logger.debug(`[loop] Permission mode updated from session RPC / approval to: ${mode}`);
     },
     mcpServers: {
       "happy": {
@@ -10955,9 +11001,9 @@ function resolveLocalSignupBootstrap(configuredMode, configuredInviteCodes, gene
   };
 }
 
-const __filename$1 = node_url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index-DYDAFqAN.cjs', document.baseURI).href)));
+const __filename$1 = node_url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index-4YmVbx7j.cjs', document.baseURI).href)));
 const __dirname$1 = path.dirname(__filename$1);
-const require_ = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index-DYDAFqAN.cjs', document.baseURI).href)));
+const require_ = node_module.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index-4YmVbx7j.cjs', document.baseURI).href)));
 const PRISMA_QUERY_ENGINE_FILES = {
   "arm64-darwin": "libquery_engine-darwin-arm64.dylib.node",
   "x64-darwin": "libquery_engine-darwin.dylib.node",
@@ -13569,7 +13615,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     process.exit(0);
   } else if (subcommand === "install-terminal-hooks") {
     try {
-      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await Promise.resolve().then(function () { return require('./installTerminalHooks-T4NE5fmC.cjs'); });
+      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await Promise.resolve().then(function () { return require('./installTerminalHooks-DDpVxk8-.cjs'); });
       const command = parseTerminalHooksArgs(args.slice(1));
       if (command.action === "help") {
         console.log(TERMINAL_HOOKS_HELP);
@@ -13586,7 +13632,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
   } else if (subcommand === "spawn") {
     try {
-      const { handleSpawnCommand } = await Promise.resolve().then(function () { return require('./spawn-ie_kfwQe.cjs'); });
+      const { handleSpawnCommand } = await Promise.resolve().then(function () { return require('./spawn-CH1Rq-LW.cjs'); });
       await handleSpawnCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -13598,7 +13644,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "send") {
     try {
-      const { handleSendCommand } = await Promise.resolve().then(function () { return require('./send-S9ibMiAt.cjs'); });
+      const { handleSendCommand } = await Promise.resolve().then(function () { return require('./send-Bjen1TUE.cjs'); });
       await handleSendCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -13704,9 +13750,9 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     if (geminiSubcommand === "project" && args[2] === "set" && args[3]) {
       const projectId = args[3];
       try {
-        const { saveGoogleCloudProjectToConfig } = await Promise.resolve().then(function () { return require('./config-BZNnPK1L.cjs'); });
-        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await Promise.resolve().then(function () { return require('./types-DLI6sss2.cjs'); }).then(function (n) { return n.persistence; });
-        const { ApiClient: ApiClient2 } = await Promise.resolve().then(function () { return require('./types-DLI6sss2.cjs'); }).then(function (n) { return n.api; });
+        const { saveGoogleCloudProjectToConfig } = await Promise.resolve().then(function () { return require('./config-CgXitj0f.cjs'); });
+        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await Promise.resolve().then(function () { return require('./types-BNGeiP1C.cjs'); }).then(function (n) { return n.persistence; });
+        const { ApiClient: ApiClient2 } = await Promise.resolve().then(function () { return require('./types-BNGeiP1C.cjs'); }).then(function (n) { return n.api; });
         let userEmail = void 0;
         try {
           const credentials = await readCredentialsForConfiguredRelay2();
@@ -13737,7 +13783,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
     if (geminiSubcommand === "project" && args[2] === "get") {
       try {
-        const { readGeminiLocalConfig } = await Promise.resolve().then(function () { return require('./config-BZNnPK1L.cjs'); });
+        const { readGeminiLocalConfig } = await Promise.resolve().then(function () { return require('./config-CgXitj0f.cjs'); });
         const config = readGeminiLocalConfig();
         if (config.googleCloudProject) {
           console.log(`Current Google Cloud Project: ${config.googleCloudProject}`);
@@ -13777,7 +13823,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
       process.exit(0);
     }
     try {
-      const { runGemini } = await Promise.resolve().then(function () { return require('./runGemini-xZnGj7jx.cjs'); });
+      const { runGemini } = await Promise.resolve().then(function () { return require('./runGemini-ChG7cGMC.cjs'); });
       let startedBy = void 0;
       for (let i = 1; i < args.length; i++) {
         if (args[i] === "--started-by") {
@@ -13799,7 +13845,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "acp") {
     try {
-      const { runAcp, resolveAcpAgentConfig } = await Promise.resolve().then(function () { return require('./index-Bx-UTV3I.cjs'); });
+      const { runAcp, resolveAcpAgentConfig } = await Promise.resolve().then(function () { return require('./index-B1wTVXjt.cjs'); });
       let startedBy = void 0;
       let verbose = false;
       const acpArgs = [];
@@ -13839,7 +13885,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "openclaw") {
     try {
-      const { runOpenClaw } = await Promise.resolve().then(function () { return require('./runOpenClaw-6ZLPeYYZ.cjs'); });
+      const { runOpenClaw } = await Promise.resolve().then(function () { return require('./runOpenClaw-D2jtVgpC.cjs'); });
       let startedBy = void 0;
       let verbose = false;
       let gatewayUrl;
@@ -13890,7 +13936,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "mcp" && args.length === 1) {
     try {
-      const { handleMcpCommand } = await Promise.resolve().then(function () { return require('./mcp-DgPg5mKa.cjs'); });
+      const { handleMcpCommand } = await Promise.resolve().then(function () { return require('./mcp-B6Nq-RUL.cjs'); });
       await handleMcpCommand();
     } catch (error) {
       process.stderr.write(`[very-happy mcp] Fatal: ${error instanceof Error ? error.message : String(error)}

package/dist/{index-Bx-UTV3I.cjs → index-B1wTVXjt.cjs}

@@ -1,11 +1,11 @@
 'use strict';
 
-var AcpBackend = require('./AcpBackend-ClEvE-A-.cjs');
-var persistence = require('./types-DLI6sss2.cjs');
-var AcpSessionManager = require('./AcpSessionManager-DgbEf8FX.cjs');
+var AcpBackend = require('./AcpBackend-CnYZFdd0.cjs');
+var persistence = require('./types-BNGeiP1C.cjs');
+var AcpSessionManager = require('./AcpSessionManager-BPBdrrME.cjs');
 var node_crypto = require('node:crypto');
 var path = require('node:path');
-var index = require('./index-DYDAFqAN.cjs');
+var index = require('./index-4YmVbx7j.cjs');
 require('node:child_process');
 require('@agentclientprotocol/sdk');
 require('axios');

package/dist/{index-BP2wylez.mjs → index-Dfu5uvjk.mjs}

@@ -1,10 +1,10 @@
-import { D as DefaultTransport, A as AcpBackend } from './AcpBackend-DuxcHPyn.mjs';
-export { a as DEFAULT_IDLE_TIMEOUT_MS, b as DEFAULT_TOOL_CALL_TIMEOUT_MS, e as extractErrorDetail, f as formatDuration, c as formatDurationMinutes, h as handleAgentMessageChunk, d as handleAgentThoughtChunk, g as handleLegacyMessageChunk, i as handlePlanUpdate, j as handleThinkingUpdate, k as handleToolCall, l as handleToolCallUpdate, p as parseArgsFromContent } from './AcpBackend-DuxcHPyn.mjs';
-import { h as connectionState, A as ApiClient, i as readSettings, j as encodeBase64, l as logger, p as projectPath } from './types-d_104eQF.mjs';
-import { A as AcpSessionManager } from './AcpSessionManager-CGrA8bTm.mjs';
+import { D as DefaultTransport, A as AcpBackend } from './AcpBackend-BV4wSnJ3.mjs';
+export { a as DEFAULT_IDLE_TIMEOUT_MS, b as DEFAULT_TOOL_CALL_TIMEOUT_MS, e as extractErrorDetail, f as formatDuration, c as formatDurationMinutes, h as handleAgentMessageChunk, d as handleAgentThoughtChunk, g as handleLegacyMessageChunk, i as handlePlanUpdate, j as handleThinkingUpdate, k as handleToolCall, l as handleToolCallUpdate, p as parseArgsFromContent } from './AcpBackend-BV4wSnJ3.mjs';
+import { h as connectionState, A as ApiClient, i as readSettings, j as encodeBase64, l as logger, p as projectPath } from './types-DS3i_5LV.mjs';
+import { A as AcpSessionManager } from './AcpSessionManager-Cyne6Rmg.mjs';
 import { randomUUID } from 'node:crypto';
 import { join } from 'node:path';
-import { i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, h as hashObject, f as startHappyServer, r as registerKillSessionHandler, B as BasePermissionHandler } from './index-vCgb7QnZ.mjs';
+import { i as initialMachineMetadata, d as createSessionMetadata, e as setupOfflineReconnection, n as notifyDaemonSessionStarted, M as MessageQueue2, h as hashObject, f as startHappyServer, r as registerKillSessionHandler, B as BasePermissionHandler } from './index-an09rejO.mjs';
 import 'node:child_process';
 import '@agentclientprotocol/sdk';
 import 'axios';

package/dist/{index-vCgb7QnZ.mjs → index-an09rejO.mjs}

@@ -1,7 +1,7 @@
 import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import chalk from 'chalk';
 import os, { homedir } from 'node:os';
 import { randomUUID, randomBytes, createHash as createHash$1, timingSafeEqual } from 'node:crypto';
-import { n as readDaemonState, l as logger, c as configuration, o as clearDaemonState, q as getProjectPath, p as projectPath, s as initializeSandbox, t as wrapCommand, d as contentLogMetadata, I as InvalidateSync, R as RawJSONLinesSchema, g as delay, u as AsyncLock, v as ensurePrivateDirectory, M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES, x as hardenPrivateFile, f as packageJson, i as readSettings, y as readCredentials, z as credentialRelayProblem, B as deriveLocalCliUpdateSummary, j as encodeBase64, C as updateSettings, D as encodeBase64Url, E as decodeBase64, F as writeCredentialsLegacy, G as writeCredentialsDataKey, H as readCredentialsForConfiguredRelay, J as encrypt, r as readPersistedSessions, K as getLocalHappyAgentCredentialPath, L as readLocalHappyAgentCredentials, N as decryptWithDataKey, O as decryptLegacy, P as extractCompleteLines, Q as decideBackfill, S as parseTerminalHookPayload, T as decideMirrorBinding, U as persistSession, V as MIRROR_BACKFILL_LINES_DEFAULT, W as mirrorLineKey, X as mirrorLocalId, Y as detectResumeSupport, Z as detectCLIAvailability, _ as acquireDaemonLock, $ as summarizeSpawnSessionForLog, a0 as deletePersistedSessions, a1 as decrypt, a2 as writeDaemonState, A as ApiClient, a3 as fetchCliUpdateState, a4 as resolveCliUpdateCheckInterval, a5 as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS, a6 as releaseDaemonLock, a7 as isValidSessionId, a8 as listVhTerminals, a9 as isValidTerminalId, aa as readVhTerminal, ab as sendToVhTerminal, h as connectionState, ac as startOfflineReconnection, ad as clearCredentials, ae as clearMachineId, k as ensurePrivateDirectorySync, w as writePrivateFileSync, af as SandboxConfigSchema, b as createEnvelope, ag as CodexAppServerClient, ah as getLatestDaemonLog } from './types-d_104eQF.mjs';
+import { n as readDaemonState, l as logger, c as configuration, o as clearDaemonState, q as getProjectPath, p as projectPath, s as initializeSandbox, t as wrapCommand, d as contentLogMetadata, I as InvalidateSync, R as RawJSONLinesSchema, g as delay, u as AsyncLock, v as ensurePrivateDirectory, M as MAX_CHAT_ATTACHMENT_SOURCE_BYTES, x as hardenPrivateFile, f as packageJson, i as readSettings, y as readCredentials, z as credentialRelayProblem, B as deriveLocalCliUpdateSummary, j as encodeBase64, C as updateSettings, D as encodeBase64Url, E as decodeBase64, F as writeCredentialsLegacy, G as writeCredentialsDataKey, H as readCredentialsForConfiguredRelay, J as encrypt, r as readPersistedSessions, K as getLocalHappyAgentCredentialPath, L as readLocalHappyAgentCredentials, N as decryptWithDataKey, O as decryptLegacy, P as extractCompleteLines, Q as decideBackfill, S as parseTerminalHookPayload, T as tmuxArgs, U as scrubTmuxClientEnv, V as decideMirrorBinding, W as persistSession, X as MIRROR_BACKFILL_LINES_DEFAULT, Y as mirrorLineKey, Z as mirrorLocalId, _ as detectResumeSupport, $ as detectCLIAvailability, a0 as acquireDaemonLock, a1 as summarizeSpawnSessionForLog, a2 as deletePersistedSessions, a3 as decrypt, a4 as writeDaemonState, A as ApiClient, a5 as fetchCliUpdateState, a6 as resolveCliUpdateCheckInterval, a7 as DEFAULT_CLI_UPDATE_CHECK_INTERVAL_MS, a8 as releaseDaemonLock, a9 as isValidSessionId, aa as listVhTerminals, ab as isValidTerminalId, ac as readVhTerminal, ad as sendToVhTerminal, h as connectionState, ae as startOfflineReconnection, af as clearCredentials, ag as clearMachineId, k as ensurePrivateDirectorySync, w as writePrivateFileSync, ah as SandboxConfigSchema, b as createEnvelope, ai as CodexAppServerClient, aj as getLatestDaemonLog } from './types-DS3i_5LV.mjs';
 import spawn$1, { spawn } from 'cross-spawn';
 import path, { join, resolve, basename, isAbsolute, normalize, sep, dirname } from 'node:path';
 import { createInterface } from 'node:readline';
@@ -2065,6 +2065,8 @@ class PermissionHandler {
   setPermissionModeCallback;
   modeChangeQueue = Promise.resolve();
   deferredPermissionMode;
+  /** Fired when an approval response (plan approval / approve-with-mode) moved the mode. */
+  onModeChangedCallback;
   constructor(session) {
     this.session = session;
     this.setupClientHandler();
@@ -2078,6 +2080,18 @@ class PermissionHandler {
   handleModeChange(mode) {
     this.permissionMode = mapToClaudeMode(mode);
   }
+  /** Current locally enforced mode (what canUseTool applies right now). */
+  getPermissionMode() {
+    return this.permissionMode;
+  }
+  /**
+   * Observe mode transitions that originate inside the approval flow
+   * (ExitPlanMode approval, approve-with-mode). Live/idle RPC changes and
+   * queue-driven changes are owned by the launcher and do not fire this.
+   */
+  setOnModeChanged(callback) {
+    this.onModeChangedCallback = callback;
+  }
   /**
    * Set callback to dynamically change permission mode on the active query.
    * Called by claudeRemote after the Query object is created.
@@ -2166,9 +2180,10 @@ class PermissionHandler {
         updatedInput: contentLogMetadata(response.updatedInput)
       });
       if (response.approved) {
-        const newMode = response.mode && ["default", "acceptEdits", "bypassPermissions"].includes(response.mode) ? response.mode : "default";
+        const newMode = response.mode && ["default", "acceptEdits", "bypassPermissions"].includes(response.mode) ? response.mode : "bypassPermissions";
         logger.debug(`Plan approved - allowing ExitPlanMode with ${newMode} as the local follow-up mode`);
         this.permissionMode = newMode;
+        this.onModeChangedCallback?.(newMode);
         pending.resolve({ behavior: "allow", updatedInput: pending.input || {} });
       } else {
         pending.resolve({ behavior: "deny", message: response.reason || "Plan rejected" });
@@ -2179,6 +2194,7 @@ class PermissionHandler {
           if (!this.setPermissionModeCallback) throw new Error("permission mode updater unavailable");
           await this.setPermissionModeCallback(response.mode);
           this.permissionMode = response.mode;
+          this.onModeChangedCallback?.(response.mode);
         } catch (err) {
           const reason = `Failed to switch permission mode: ${err instanceof Error ? err.message : String(err)}`;
           pending.resolve({ behavior: "deny", message: reason });
@@ -3351,16 +3367,23 @@ async function claudeRemoteLauncher(session, onPermissionModeChange) {
   });
   session.client.rpcHandlerManager.registerHandler("switch", doSwitch);
   let livePermissionModeHandler = null;
+  let idlePermissionModeHandler = null;
   session.client.rpcHandlerManager.registerHandler(
     "set-permission-mode",
     async (request) => {
       const requestedMode = parseClaudePermissionMode(request?.mode);
       if (!requestedMode) throw new Error("Invalid Claude permission mode");
-      if (!livePermissionModeHandler) throw new Error("No active Claude query");
-      return { mode: await livePermissionModeHandler(requestedMode) };
+      if (livePermissionModeHandler) return { mode: await livePermissionModeHandler(requestedMode) };
+      if (idlePermissionModeHandler) return { mode: idlePermissionModeHandler(requestedMode) };
+      throw new Error("No active Claude query");
     }
   );
   const permissionHandler = new PermissionHandler(session);
+  idlePermissionModeHandler = (nextMode) => {
+    permissionHandler.handleModeChange(nextMode);
+    onPermissionModeChange?.(nextMode);
+    return nextMode;
+  };
   permissionHandler.reset("Previous CLI process exited before responding");
   const messageQueue = new OutgoingMessageQueue(
     (logMessage) => session.client.sendClaudeSessionMessage(logMessage)
@@ -3510,6 +3533,19 @@ async function claudeRemoteLauncher(session, onPermissionModeChange) {
       abortFuture = new Future();
       let modeHash = null;
       let mode = null;
+      const commitPermissionMode = (nextMode) => {
+        permissionHandler.handleModeChange(nextMode);
+        if (mode) {
+          mode = { ...mode, permissionMode: nextMode };
+          modeHash = session.queue.modeHasher(mode);
+        }
+        onPermissionModeChange?.(nextMode);
+        return nextMode;
+      };
+      idlePermissionModeHandler = commitPermissionMode;
+      permissionHandler.setOnModeChanged((nextMode) => {
+        commitPermissionMode(nextMode);
+      });
       try {
         const attachmentDirectory = chatAttachmentDirectory(configuration.happyHomeDir, session.client.sessionId);
         await ensurePrivateDirectory(attachmentDirectory);
@@ -6614,7 +6650,7 @@ function createMirrorManager(deps) {
   let chain = Promise.resolve();
   const isTerminalAlive = deps.isTerminalAlive ?? ((terminalId) => {
     try {
-      return spawnSync("tmux", ["has-session", "-t", `=vh-${terminalId}:`], { stdio: "ignore", timeout: 3e3 }).status === 0;
+      return spawnSync("tmux", tmuxArgs(["has-session", "-t", `=vh-${terminalId}:`]), { stdio: "ignore", timeout: 3e3, env: scrubTmuxClientEnv({ ...process.env }) }).status === 0;
     } catch {
       return false;
     }
@@ -9242,7 +9278,10 @@ async function runClaude(credentials, options = {}) {
     // a brand-new session cannot pick a PDF until after sending once.
     attachmentKinds: [...CLAUDE_ATTACHMENT_KINDS],
     queueCancellation: true,
-    capabilities: ["claude-steer-v1", "claude-live-permission-v1"],
+    capabilities: ["claude-steer-v1", "claude-live-permission-v1", "claude-live-permission-v2"],
+    // Effective mode this process enforces. Kept current by
+    // publishPermissionMode below; the web renders it instead of guessing.
+    permissionMode: mapToClaudeMode(initialPermissionMode ?? "default"),
     sandbox: sandboxConfig?.enabled ? sandboxConfig : null,
     dangerouslySkipPermissions,
     ...forkedFromSessionId ? { parentSessionId: forkedFromSessionId } : {},
@@ -9479,6 +9518,14 @@ async function runClaude(credentials, options = {}) {
     )
   }));
   let currentPermissionMode = initialPermissionMode;
+  let publishedPermissionMode = mapToClaudeMode(initialPermissionMode ?? "default");
+  const publishPermissionMode = (mode) => {
+    currentPermissionMode = mode;
+    const published = mapToClaudeMode(mode ?? "default");
+    if (published === publishedPermissionMode) return;
+    publishedPermissionMode = published;
+    session.updateMetadata((meta) => ({ ...meta, permissionMode: published }));
+  };
   let currentModel = options.model ?? DEFAULT_CLAUDE_MODEL;
   let currentFallbackModel = void 0;
   let currentCustomSystemPrompt = void 0;
@@ -9487,7 +9534,6 @@ async function runClaude(credentials, options = {}) {
   let currentDisallowedTools = withAssistantDenylist(void 0, isAssistantVariant);
   let currentEffort = DEFAULT_CLAUDE_EFFORT;
   const resetCurrentModeDefaults = () => {
-    currentPermissionMode = initialPermissionMode;
     currentModel = options.model ?? DEFAULT_CLAUDE_MODEL;
     currentFallbackModel = void 0;
     currentCustomSystemPrompt = void 0;
@@ -9531,7 +9577,7 @@ async function runClaude(credentials, options = {}) {
         message.meta.permissionMode,
         sandboxEnabled
       );
-      currentPermissionMode = messagePermissionMode;
+      publishPermissionMode(messagePermissionMode);
       const ignoredDefaultDowngrade = (previousPermissionMode === "bypassPermissions" || previousPermissionMode === "yolo") && message.meta.permissionMode === "default" && currentPermissionMode === previousPermissionMode;
       if (ignoredDefaultDowngrade) {
         logger.debug(`[loop] Ignoring permission mode downgrade from ${previousPermissionMode} to default`);
@@ -9788,8 +9834,8 @@ async function runClaude(credentials, options = {}) {
     },
     onAbort: resetCurrentModeDefaults,
     onPermissionModeChange: (mode) => {
-      currentPermissionMode = mode;
-      logger.debug(`[loop] Permission mode updated from live session RPC to: ${mode}`);
+      publishPermissionMode(mode);
+      logger.debug(`[loop] Permission mode updated from session RPC / approval to: ${mode}`);
     },
     mcpServers: {
       "happy": {
@@ -13547,7 +13593,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     process.exit(0);
   } else if (subcommand === "install-terminal-hooks") {
     try {
-      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await import('./installTerminalHooks-C7JS6CBM.mjs');
+      const { installTerminalHooks, parseTerminalHooksArgs, TERMINAL_HOOKS_HELP } = await import('./installTerminalHooks-C-OgZr5k.mjs');
       const command = parseTerminalHooksArgs(args.slice(1));
       if (command.action === "help") {
         console.log(TERMINAL_HOOKS_HELP);
@@ -13564,7 +13610,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
   } else if (subcommand === "spawn") {
     try {
-      const { handleSpawnCommand } = await import('./spawn-Dx_xnLlg.mjs');
+      const { handleSpawnCommand } = await import('./spawn-JxaPHAoP.mjs');
       await handleSpawnCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -13576,7 +13622,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "send") {
     try {
-      const { handleSendCommand } = await import('./send-M2ax7UGy.mjs');
+      const { handleSendCommand } = await import('./send-BHliX59m.mjs');
       await handleSendCommand(args.slice(1));
     } catch (error) {
       console.error(chalk.red("Error:"), error instanceof Error ? error.message : "Unknown error");
@@ -13682,9 +13728,9 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     if (geminiSubcommand === "project" && args[2] === "set" && args[3]) {
       const projectId = args[3];
       try {
-        const { saveGoogleCloudProjectToConfig } = await import('./config-CdoGLla8.mjs');
-        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await import('./types-d_104eQF.mjs').then(function (n) { return n.ai; });
-        const { ApiClient: ApiClient2 } = await import('./types-d_104eQF.mjs').then(function (n) { return n.aj; });
+        const { saveGoogleCloudProjectToConfig } = await import('./config-BEdyyciP.mjs');
+        const { readCredentialsForConfiguredRelay: readCredentialsForConfiguredRelay2 } = await import('./types-DS3i_5LV.mjs').then(function (n) { return n.ak; });
+        const { ApiClient: ApiClient2 } = await import('./types-DS3i_5LV.mjs').then(function (n) { return n.al; });
         let userEmail = void 0;
         try {
           const credentials = await readCredentialsForConfiguredRelay2();
@@ -13715,7 +13761,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     }
     if (geminiSubcommand === "project" && args[2] === "get") {
       try {
-        const { readGeminiLocalConfig } = await import('./config-CdoGLla8.mjs');
+        const { readGeminiLocalConfig } = await import('./config-BEdyyciP.mjs');
         const config = readGeminiLocalConfig();
         if (config.googleCloudProject) {
           console.log(`Current Google Cloud Project: ${config.googleCloudProject}`);
@@ -13755,7 +13801,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
       process.exit(0);
     }
     try {
-      const { runGemini } = await import('./runGemini-B3iv1QRL.mjs');
+      const { runGemini } = await import('./runGemini-DBr_TiTL.mjs');
       let startedBy = void 0;
       for (let i = 1; i < args.length; i++) {
         if (args[i] === "--started-by") {
@@ -13777,7 +13823,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "acp") {
     try {
-      const { runAcp, resolveAcpAgentConfig } = await import('./index-BP2wylez.mjs');
+      const { runAcp, resolveAcpAgentConfig } = await import('./index-Dfu5uvjk.mjs');
       let startedBy = void 0;
       let verbose = false;
       const acpArgs = [];
@@ -13817,7 +13863,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "openclaw") {
     try {
-      const { runOpenClaw } = await import('./runOpenClaw-CmM4ZLYi.mjs');
+      const { runOpenClaw } = await import('./runOpenClaw-Cbde8t92.mjs');
       let startedBy = void 0;
       let verbose = false;
       let gatewayUrl;
@@ -13868,7 +13914,7 @@ Conversation history is preserved on the server, but in-flight tool calls are in
     return;
   } else if (subcommand === "mcp" && args.length === 1) {
     try {
-      const { handleMcpCommand } = await import('./mcp-B3EgenZh.mjs');
+      const { handleMcpCommand } = await import('./mcp-Du-N0qlK.mjs');
       await handleMcpCommand();
     } catch (error) {
       process.stderr.write(`[very-happy mcp] Fatal: ${error instanceof Error ? error.message : String(error)}

package/dist/index.cjs

@@ -1,8 +1,8 @@
 'use strict';
 
 require('chalk');
-require('./index-DYDAFqAN.cjs');
-require('./types-DLI6sss2.cjs');
+require('./index-4YmVbx7j.cjs');
+require('./types-BNGeiP1C.cjs');
 require('zod');
 require('node:child_process');
 require('node:os');

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import 'chalk';
-import './index-vCgb7QnZ.mjs';
-import './types-d_104eQF.mjs';
+import './index-an09rejO.mjs';
+import './types-DS3i_5LV.mjs';
 import 'zod';
 import 'node:child_process';
 import 'node:os';