code-context-control 2.146.0__py3-none-any.whl → 2.149.1__py3-none-any.whl

cli/c3.py

@@ -91,7 +91,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.146.0"
+__version__ = "2.149.1"
 
 # The PreToolUse matcher for native subagent calls (installer and hub migration).
 AGENT_MATCHER = "Agent|Task"

cli/hook_access_guard.py

@@ -447,6 +447,7 @@ def run(payload: dict, project_path: Path | None = None,
     tool_input = payload.get("tool_input", {}) or {}
     base = str(project_path if project_path is not None else Path.cwd())
     session_id = str(payload.get("session_id") or "")
+    ag.bind_session(session_id)
 
     if tool in _WRITE_TOOLS or tool in _READ_TOOLS:
         fp = _target(tool_input)

cli/hub_server.py

@@ -72,6 +72,10 @@ _HUB_CONFIG_DEFAULTS = {
     "projects_view": "list",
     "main_view": "projects",
     "oracle_url": "",
+    # Per-IDE launch command overrides, e.g. {"claude-code": "yep"} when the
+    # agent is started through a wrapper script instead of the stock binary.
+    # A project's own `ide_cmd` (projects.json) wins over this.
+    "ide_cmds": {},
     # Minutes of project silence, with no session heartbeat left, before a UI
     # server that an IDE session launched is stopped. 0 = never reap.
     "ui_reap_minutes": 30,
@@ -81,6 +85,48 @@ _HUB_CONFIG_DEFAULTS = {
 _MAIN_VIEWS = {"projects", "board", "ci", "creds", "tokens", "locks", "access",
                "enforce", "sessions"}
 
+# Stock command per IDE id, and whether it takes the project path as an
+# argument (GUI) instead of being run inside a terminal at that path.
+_IDE_DEFAULT_CMDS = {
+    "claude-code":  ("claude",      False),
+    "claude-app":   ("claude-app",  True),
+    "codex":        ("codex",       False),
+    "grok":         ("grok",        False),
+    "gemini":       ("gemini",      False),
+    "antigravity":  ("antigravity", False),
+    "vscode":       ("code",        True),
+    "cursor":       ("cursor",      True),
+}
+
+
+def _resolve_ide_cmd(ide: str, path: str, custom_cmd: str = "") -> tuple:
+    """Resolve the command to launch for `ide` in `path`.
+
+    Precedence: explicit custom_cmd (this launch) → the project's stored
+    `ide_cmd` → hub config `ide_cmds[ide]` → the stock command.
+    Returns (cmd, is_gui, error) — error is a message when nothing resolves.
+    """
+    default_cmd, is_gui = _IDE_DEFAULT_CMDS.get(ide, ("", False))
+    if ide != "custom" and not default_cmd:
+        return "", False, f"Unknown IDE: {ide}"
+    cmd = (custom_cmd or "").strip()
+    if not cmd:
+        try:
+            cmd = _pm().get_ide_cmd(path)
+        except Exception:
+            cmd = ""
+    if not cmd:
+        overrides = _read_hub_config().get("ide_cmds") or {}
+        if isinstance(overrides, dict):
+            cmd = str(overrides.get(ide) or "").strip()
+    if not cmd:
+        cmd = default_cmd
+    if not cmd:
+        return "", False, "custom_cmd is required for custom IDE"
+    # An overridden command replaces the binary, not the launch style: a
+    # wrapper for a terminal CLI is still a terminal CLI.
+    return cmd, is_gui, ""
+
 # How often the hub reaps orphaned UI servers and chases autostart projects.
 _UI_SWEEP_INTERVAL_S = 60
 
@@ -460,6 +506,15 @@ def api_hub_config_set():
         cfg["main_view"] = main_view
     if "oracle_url" in data:
         cfg["oracle_url"] = str(data["oracle_url"]).strip()
+    if "ide_cmds" in data:
+        raw = data["ide_cmds"]
+        if not isinstance(raw, dict):
+            return jsonify({"error": "ide_cmds must be an object"}), 400
+        # Empty string = "back to the stock command", so the key is dropped
+        # rather than stored blank.
+        cfg["ide_cmds"] = {
+            str(k): str(v).strip() for k, v in raw.items() if str(v or "").strip()
+        }
     if "sidebar_group" in data:
         cfg["sidebar_group"] = str(data["sidebar_group"]).strip()
     if "sidebar_collapsed" in data:
@@ -718,17 +773,11 @@ def api_projects_open():
 
 @app.route("/api/projects/launch-ide", methods=["POST"])
 def api_launch_ide():
-    """Launch an IDE or CLI tool in the project directory. Body: {path, ide, custom_cmd?}"""
-    _IDE_CMDS = {
-        "claude-code":  ("claude",      False),
-        "claude-app":   ("claude-app",  True),
-        "codex":        ("codex",       False),
-        "grok":         ("grok",        False),
-        "gemini":       ("gemini",      False),
-        "antigravity":  ("antigravity", False),
-        "vscode":       ("code",        True),
-        "cursor":       ("cursor",      True),
-    }
+    """Launch an IDE or CLI tool in the project directory. Body: {path, ide, custom_cmd?}
+
+    The command itself is resolved by _resolve_ide_cmd, so a project or the
+    hub can point `claude-code` at a wrapper such as `yep`.
+    """
     try:
         data = request.get_json(force=True) or {}
         path_str   = (data.get("path")       or "").strip()
@@ -744,14 +793,9 @@ def api_launch_ide():
         if not path.exists():
             return jsonify({"error": f"Path does not exist: {path_str}"}), 404
 
-        if ide == "custom":
-            if not custom_cmd:
-                return jsonify({"error": "custom_cmd is required for custom IDE"}), 400
-            cmd, is_gui = custom_cmd, False
-        elif ide in _IDE_CMDS:
-            cmd, is_gui = _IDE_CMDS[ide]
-        else:
-            return jsonify({"error": f"Unknown IDE: {ide}"}), 400
+        cmd, is_gui, err = _resolve_ide_cmd(ide, str(path), custom_cmd)
+        if err:
+            return jsonify({"error": err}), 400
 
         if is_gui:
             # GUI IDEs (VS Code, Cursor) accept a path argument directly
@@ -795,7 +839,7 @@ def api_launch_ide():
 
 @app.route("/api/projects/update", methods=["POST"])
 def api_projects_update():
-    """Update editable project fields (name, tags, notes). Body: {path, name?, tags?, notes?}"""
+    """Update editable project fields. Body: {path, name?, tags?, notes?, ide_cmd?}"""
     data = request.get_json(force=True) or {}
     path = (data.get("path") or "").strip()
     if not path:
@@ -812,6 +856,9 @@ def api_projects_update():
             fields["tags"] = [t.strip() for t in str(raw).split(",") if t.strip()]
     if "notes" in data:
         fields["notes"] = str(data["notes"])
+    if "ide_cmd" in data:
+        # Blank clears the override and falls back to the stock command.
+        fields["ide_cmd"] = str(data["ide_cmd"] or "").strip()
     try:
         ok = _pm().update_project(path, **fields)
         return jsonify({"updated": ok})
@@ -3839,6 +3886,170 @@ def api_hub_access_rule_remove():
     return jsonify(result)
 
 
+# ── Builtin guard modes (v2.147.0) ─────────────────────────────────────────
+
+def _hub_human():
+    """The Desk client behind ``Authorization: Bearer``, else ``None``.
+
+    Loopback and the CSRF guard stop a browser, not a process on this
+    machine: an agent can POST here as easily as a person. A Desk client
+    token is minted only with ``bootstrap.key``, which Access Guard denies
+    to agents, and is stored as a hash, so presenting one is the proof a
+    loosening builtin change needs. A phone token does not count: builtin
+    guards are not loosened from a device that leaves the building.
+    """
+    from oracle.services import client_tokens
+    scheme, _, token = (request.headers.get("Authorization") or "").partition(" ")
+    if scheme.lower() != "bearer" or not token.strip():
+        return None
+    who = client_tokens.principal_for(token.strip())
+    return who if who and who.get("kind") == "desk" else None
+
+
+@app.route("/api/hub/access/builtin", methods=["GET"])
+def api_hub_access_builtin():
+    """Every Tier-1 builtin with its live global mode, and each project's own.
+
+    Modes are read through the keyring (config and attestation must agree),
+    so a mode listed here is one evaluation honours. ``projects`` holds only
+    projects that set a mode of their own, or could not be read.
+    ``strictness`` ranks each mode 0 (allow) to 3 (full deny), so a client
+    can tell loosening from tightening without knowing the tiers.
+    """
+    try:
+        global_modes = access_guard._scope_modes("global")
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+    home = access_guard._global_base()
+    guards = []
+    for glob in access_guard.DISABLEABLE_BUILTINS:
+        canon = access_guard._norm_builtin(glob)
+        guards.append({
+            "glob": canon,
+            "global": global_modes.get(canon, "default"),
+            "strictness": {m: access_guard.builtin_strictness(canon, m)
+                           for m in (*access_guard.BUILTIN_MODES, "default")},
+        })
+    projects = []
+    for p in _pm().list_registered():
+        ppath = str(p.get("path") or "")
+        row = {"name": p.get("name") or Path(ppath).name, "path": ppath,
+               "modes": {}, "error": None}
+        try:
+            base = Path(ppath).resolve()
+            if (base / ".c3").is_dir() and base != home:
+                row["modes"] = access_guard._scope_modes("project", ppath)
+        except Exception as e:
+            row["error"] = str(e)
+        if row["modes"] or row["error"]:
+            projects.append(row)
+    from services import builtin_leases
+    return jsonify({"guards": guards, "projects": projects,
+                    "leases": builtin_leases.active()})
+
+
+@app.route("/api/hub/access/builtin/mode", methods=["POST"])
+def api_hub_access_builtin_mode():
+    """Set a Tier-1 builtin's mode in the global realm or one project's.
+
+    Body: ``{scope, path?, glob, mode, confirm?}``. A mode at least as strict
+    as the live one needs nothing more. A looser one needs a Desk client
+    token (403 ``needs_human`` without it) and ``confirm`` equal to the glob
+    (400 ``needs_confirmation``). A project is judged against what its
+    agents see today, which is the global mode unless it set its own.
+    """
+    data = request.get_json(silent=True) or {}
+    scope, project, err = _hub_access_target(data)
+    if err:
+        return err
+    glob = str(data.get("glob") or "")
+    mode = str(data.get("mode") or "").strip()
+    canon = access_guard._norm_builtin(glob)
+    try:
+        new = access_guard.builtin_strictness(canon, mode)
+        live = (access_guard._scope_modes("global") if scope == "global"
+                else access_guard.effective_builtin_modes(project))
+        old = access_guard.builtin_strictness(canon, live.get(canon, "default"))
+    except ValueError as exc:
+        return jsonify({"error": str(exc)}), 400
+    if new < old:
+        if _hub_human() is None:
+            return jsonify({
+                "error": "loosening a built-in guard needs C3 Desk",
+                "needs_human": True,
+                "command": f'c3 access builtin mode "{canon}" {mode}'
+                           + (f' --project --path "{project}"'
+                              if scope == "project" else ""),
+            }), 403
+        if access_guard._norm_builtin(data.get("confirm")) != canon:
+            return jsonify({
+                "error": "loosening a built-in guard weakens protection",
+                "needs_confirmation": True, "confirm_with": canon,
+            }), 400
+    try:
+        result = access_guard.set_builtin_mode(canon, mode, scope,
+                                               project or ".")
+    except ValueError as exc:
+        return jsonify({"error": str(exc)}), 400
+    if result["changed"]:
+        _hub_access_audit(f"builtin_mode_{result['mode']}", result["glob"],
+                          "builtin", scope, project)
+    return jsonify({**result, "loosened": new < old})
+
+
+@app.route("/api/hub/access/builtin/lease", methods=["POST"])
+def api_hub_access_builtin_lease():
+    """Loosen a builtin for a while: every session, or one.
+
+    Body: ``{scope, path?, glob, mode, ttl_s, session_id?, confirm}``. A
+    lease only ever loosens, so it always needs a Desk client token and the
+    glob typed back, and a lease no looser than the live mode is a 400
+    rather than a row that would never apply. ``ttl_s`` is 60 s to 8 h.
+    """
+    from services import builtin_leases
+    data = request.get_json(silent=True) or {}
+    scope, project, err = _hub_access_target(data)
+    if err:
+        return err
+    who = _hub_human()
+    if who is None:
+        return jsonify({"error": "a temporary built-in change needs C3 Desk",
+                        "needs_human": True}), 403
+    canon = access_guard._norm_builtin(data.get("glob"))
+    mode = str(data.get("mode") or "").strip()
+    if access_guard._norm_builtin(data.get("confirm")) != canon or not canon:
+        return jsonify({"error": "a temporary change weakens protection",
+                        "needs_confirmation": True, "confirm_with": canon}), 400
+    try:
+        live = access_guard.effective_builtin_modes(project or ".") \
+            if scope == "project" else access_guard._scope_modes("global")
+        if access_guard.builtin_strictness(canon, mode) >= \
+                access_guard.builtin_strictness(canon, live.get(canon, "default")):
+            return jsonify({"error": f"{canon} is already {live.get(canon, 'default')}"
+                            f" — a {mode} lease would change nothing"}), 400
+        row = builtin_leases.mint(
+            canon, mode, scope=scope, project_path=project or ".",
+            session_id=str(data.get("session_id") or ""),
+            ttl_s=data.get("ttl_s"), created_by=who["client_id"])
+    except ValueError as exc:
+        return jsonify({"error": str(exc)}), 400
+    _hub_access_audit(f"builtin_lease_{mode}", canon, "builtin", scope, project)
+    return jsonify({"lease": row})
+
+
+@app.route("/api/hub/access/builtin/lease/revoke", methods=["POST"])
+def api_hub_access_builtin_lease_revoke():
+    """End a lease now. Tightening, so no token. Body: ``{id}``."""
+    from services import builtin_leases
+    lease_id = str((request.get_json(silent=True) or {}).get("id") or "")
+    gone = builtin_leases.revoke(lease_id) if lease_id else None
+    if gone is None:
+        return jsonify({"error": "unknown or already-expired lease"}), 404
+    _hub_access_audit("builtin_lease_revoke", gone["glob"], "builtin",
+                      gone["scope"], gone.get("project_path") or None)
+    return jsonify({"revoked": lease_id})
+
+
 # ── Project management: tasks / milestones / notes (v2.45.0) ──────────────
 # Direct TaskStore per request (reload-per-op store — no runtime build needed
 # for mutations); every write audited to the target project's activity log.

cli/hub_ui/components/hub_access.js

@@ -19,8 +19,9 @@
 //     hand — the server enforces that regardless of what this UI believes);
 //   - a request that lapsed while the page showed it refreshes to its real
 //     status (the decide route answers 409), never silently mints a grant;
-//   - rule MUTATION stays on the per-project server and `c3 access` — this
-//     tab approves and reads, it does not edit policy.
+//   - path-rule MUTATION stays on the per-project server and `c3 access`.
+//     Builtin guards may be TIGHTENED here; loosening one needs C3 Desk or
+//     the CLI, because this page holds no proof that a person clicked.
 
 const ACC_KIND_COLOR = (kind) => (
   kind === 'deny' ? T.error : kind === 'mask' ? T.blue
@@ -387,6 +388,121 @@ function AccRulesPanel({ projects, focus }) {
   );
 }
 
+// ── Builtin guards ─────────────────────────────────────────────────────────
+// The global mode of every Tier-1 builtin. Picking a stricter mode applies
+// it; picking a looser one is refused by the server without a Desk token,
+// and the panel shows the CLI command instead.
+const ACC_BUILTIN_MODES = ['default', 'deny', 'confirm', 'allow'];
+
+function AccBuiltinPanel() {
+  const [data, setData] = useState(null);
+  const [err, setErr] = useState('');
+  const [busy, setBusy] = useState('');
+  const [needs, setNeeds] = useState(null);
+
+  const load = useCallback(async () => {
+    try { setData(await api.get('/api/hub/access/builtin')); setErr(''); }
+    catch (e) { setErr(apiErr(e)); }
+  }, []);
+  useEffect(() => { load(); }, [load]);
+  usePoll(load, 15000);
+
+  const setMode = async (g, mode) => {
+    setBusy(g.glob); setNeeds(null);
+    try {
+      await api.post('/api/hub/access/builtin/mode', { scope: 'global', glob: g.glob, mode });
+      notify(`${g.glob} is now ${mode} everywhere`, 'ok');
+    } catch (e) {
+      const body = e && e.payload;
+      if (body && body.needs_human) setNeeds({ glob: g.glob, command: body.command });
+      else notify(apiErr(e), 'err');
+    }
+    setBusy('');
+    load();
+  };
+
+  const revoke = async (l) => {
+    setBusy(l.id);
+    try {
+      await api.post('/api/hub/access/builtin/lease/revoke', { id: l.id });
+      notify(`Ended the ${l.mode} lease on ${l.glob}`, 'ok');
+    } catch (e) { notify(apiErr(e), 'err'); }
+    setBusy('');
+    load();
+  };
+
+  const projects = (data && data.projects) || [];
+  const leases = (data && data.leases) || [];
+  return (
+    <div style={{
+      background: T.surface, border: `1px solid ${T.border}`, borderRadius: 10,
+      padding: '12px 16px',
+    }}>
+      <div style={{ display: 'flex', alignItems: 'center', gap: 10, flexWrap: 'wrap' }}>
+        <div style={{ fontSize: 12.5, fontWeight: 700, color: T.text }}>Built-in guards</div>
+        <span style={{ fontSize: 10.5, color: T.textDim }}>
+          global mode — a stricter mode applies here; loosening one needs C3 Desk or the CLI
+        </span>
+      </div>
+      {err && <div style={{ marginTop: 8, fontSize: 11.5, color: T.error }}>{err}</div>}
+      {needs && (
+        <div style={{ marginTop: 8, fontSize: 11.5, color: T.warn }}>
+          Loosening <span className="mono">{needs.glob}</span> needs C3 Desk, or run:{' '}
+          <span className="mono" style={{ color: T.text }}>{needs.command}</span>
+        </div>
+      )}
+      {data && (
+        <div style={{ marginTop: 10, display: 'grid', gridTemplateColumns: 'minmax(0,1fr) auto', gap: '4px 12px', alignItems: 'center' }}>
+          {data.guards.map(g => (
+            <React.Fragment key={g.glob}>
+              <span className="mono" style={{ fontSize: 11.5, color: T.text, overflow: 'hidden', textOverflow: 'ellipsis' }}>{g.glob}</span>
+              <select value={g.global} disabled={busy === g.glob}
+                onChange={e => setMode(g, e.target.value)}
+                style={{
+                  background: T.surfaceAlt, color: g.global === 'default' ? T.textMuted : T.warn,
+                  border: `1px solid ${T.border}`, borderRadius: 6, fontSize: 11.5, padding: '2px 6px',
+                }}>
+                {ACC_BUILTIN_MODES.map(m => <option key={m} value={m}>{m}</option>)}
+              </select>
+            </React.Fragment>
+          ))}
+        </div>
+      )}
+      {leases.length > 0 && (
+        <div style={{ marginTop: 10, display: 'flex', flexDirection: 'column', gap: 4 }}>
+          <div style={{ fontSize: 10.5, fontWeight: 700, letterSpacing: 1, textTransform: 'uppercase', color: T.warn }}>
+            temporary changes
+          </div>
+          {leases.map(l => (
+            <div key={l.id} style={{ display: 'flex', alignItems: 'center', gap: 8, fontSize: 11.5 }}>
+              <span className="mono" style={{ color: T.text }}>{l.glob}</span>
+              <span style={{ color: T.warn }}>{l.mode}</span>
+              <span style={{ color: T.textMuted }}>
+                {l.scope === 'project' ? l.project_path : 'all projects'}
+                {' · '}{l.session_id ? <>session <span className="mono">{l.session_id.slice(0, 8)}</span></> : 'all sessions'}
+                {' · '}ends in {accExpiresIn(l.expires_at) || '—'}
+              </span>
+              <div style={{ flex: 1 }} />
+              <Btn variant="ghost" disabled={busy === l.id} onClick={() => revoke(l)}>Revoke</Btn>
+            </div>
+          ))}
+        </div>
+      )}
+      {projects.length > 0 && (
+        <div style={{ marginTop: 8, fontSize: 11, color: T.textDim }}>
+          Set per project:{' '}
+          {projects.map(p => (
+            <span key={p.path} className="mono" style={{ marginRight: 10 }}>
+              {p.name}: {p.error ? `unreadable (${p.error})`
+                : Object.entries(p.modes).map(([g, m]) => `${g}=${m}`).join(', ')}
+            </span>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
 // ── Active grants ──────────────────────────────────────────────────────────
 // A rule grant can authorise many calls over hours. The only other place it
 // shows up is a line in the agent's own transcript, which is the wrong place
@@ -762,6 +878,7 @@ function HubAccess({ projects }) {
       )}
 
       <AccGrantsPanel projects={projects} />
+      <AccBuiltinPanel />
       <AccRulesPanel projects={projects} focus={ruleFocus} />
       {confirmSpec && (
         <CredConfirm spec={confirmSpec} onClose={() => setConfirmSpec(null)} />

cli/hub_ui/components/modals.js

@@ -528,24 +528,41 @@ function ReparentModal({ project, projects, onClose, onChanged }) {
 
 // ── IDE picker ─────────────────────────────────────────────────
 // POST /api/projects/launch-ide {path, ide, custom_cmd?}
+// The command is editable per project (stored as ide_cmd via
+// /api/projects/update) so an agent started through a wrapper — `yep` rather
+// than `claude` — launches from the card too, not just from here.
 function IdePickerModal({ project, onClose, onChanged }) {
   const known = IDE_OPTIONS.some(o => o.id === (project && project.ide));
   const [selected, setSelected] = useState(known ? project.ide : 'claude-code');
-  const [customCmd, setCustomCmd] = useState('');
+  const savedCmd = ((project && project.ide_cmd) || '').trim();
+  const [customCmd, setCustomCmd] = useState(savedCmd);
+  const [remember, setRemember] = useState(!!savedCmd);
   const [busy, setBusy] = useState(false);
 
+  const stockCmd = (id) => {
+    const opt = IDE_OPTIONS.find(o => o.id === id);
+    return opt && opt.cmd !== '...' ? opt.cmd : '';
+  };
+  const effectiveCmd = customCmd.trim() || stockCmd(selected);
+
   const launch = async () => {
-    if (selected === 'custom' && !customCmd.trim()) {
+    const cmd = customCmd.trim();
+    if (selected === 'custom' && !cmd) {
       notify('Enter a custom command first.', 'err');
       return;
     }
     setBusy(true);
     try {
+      // Persist first: the project card launches with no command of its own.
+      const wanted = remember ? cmd : '';
+      if (wanted !== savedCmd) {
+        await api.post('/api/projects/update', { path: project.path, ide_cmd: wanted });
+      }
       await api.post('/api/projects/launch-ide', {
-        path: project.path, ide: selected,
-        custom_cmd: selected === 'custom' ? customCmd.trim() : '',
+        path: project.path, ide: selected, custom_cmd: cmd,
       });
-      notify(`Launched ${ideLabel(selected)} in ${project.name || project.path}`);
+      notify(`Launched ${ideLabel(selected)} (${effectiveCmd}) in ${project.name || project.path}`);
+      if (onChanged) onChanged();
       onClose();
     } catch (e) {
       notify(`Launch failed: ${e.message}`, 'err');
@@ -575,13 +592,18 @@ function IdePickerModal({ project, onClose, onChanged }) {
           );
         })}
       </div>
-      {selected === 'custom' && (
-        <div>
-          <MdlLabel>Custom command</MdlLabel>
-          <input value={customCmd} onChange={e => setCustomCmd(e.target.value)}
-            placeholder="e.g. nvim ." className="mono" style={mdlInputStyle()} />
-        </div>
-      )}
+      <div>
+        <MdlLabel>Command{selected === 'custom' ? '' : ' (leave blank for the default)'}</MdlLabel>
+        <input value={customCmd} onChange={e => setCustomCmd(e.target.value)}
+          placeholder={selected === 'custom' ? 'e.g. nvim .' : `${stockCmd(selected)} — override with e.g. yep`}
+          className="mono" style={mdlInputStyle()} />
+        <label style={{ display: 'flex', alignItems: 'center', gap: 6, marginTop: 6,
+          fontSize: 11, color: T.textMuted, cursor: 'pointer' }}>
+          <input type="checkbox" checked={remember}
+            onChange={e => setRemember(e.target.checked)} />
+          Remember for this project (used by the card's launch button too)
+        </label>
+      </div>
       <MdlFooter>
         <Btn variant="ghost" onClick={onClose}>Cancel</Btn>
         <Btn onClick={launch} disabled={busy}>

cli/hub_ui/components/settings_modal.js

@@ -14,6 +14,7 @@ function SettingsModal({ onClose, onChanged }) {
   const [port, setPort] = useState('');
   const [autoBrowser, setAutoBrowser] = useState(true);
   const [oracleUrl, setOracleUrl] = useState('');
+  const [agentCmd, setAgentCmd] = useState('');   // ide_cmds['claude-code']
   const [cacheSize, setCacheSize] = useState(8);
   const [saving, setSaving] = useState(false);
   const [svc, setSvc] = useState(null);            // hub: {installed, running, method, port, log_path} | {error}
@@ -51,6 +52,7 @@ function SettingsModal({ onClose, onChanged }) {
         setPort(d.port || 3330);
         setAutoBrowser(!!d.auto_open_browser);
         setOracleUrl(d.oracle_url || '');
+        setAgentCmd(((d.ide_cmds || {})['claude-code']) || '');
         setCacheSize(d.runtime_cache_size || 8);
       } catch {
         notify('Could not load hub config', 'err');
@@ -70,9 +72,14 @@ function SettingsModal({ onClose, onChanged }) {
     const cache = Math.max(1, parseInt(cacheSize, 10) || 8);
     setSaving(true);
     try {
+      // Blank restores the stock `claude`; other IDE overrides are left alone.
+      const ideCmds = { ...((cfg && cfg.ide_cmds) || {}) };
+      if (agentCmd.trim()) ideCmds['claude-code'] = agentCmd.trim();
+      else delete ideCmds['claude-code'];
       await api.post('/api/hub/config', {
         port: portVal, auto_open_browser: autoBrowser,
         oracle_url: oracleUrl.trim(), runtime_cache_size: cache,
+        ide_cmds: ideCmds,
       });
       const portChanged = cfg && portVal !== cfg.port;
       notify(portChanged
@@ -222,6 +229,10 @@ function SettingsModal({ onClose, onChanged }) {
         <input type="number" value={cacheSize} onChange={e => setCacheSize(e.target.value)}
           min={1} className="mono" style={inputStyle(110)} />
       ), 'Max project runtimes kept warm for drill-in and global search.')}
+      {fieldRow('Agent command', (
+        <input value={agentCmd} onChange={e => setAgentCmd(e.target.value)}
+          placeholder="claude" className="mono" style={inputStyle(220)} />
+      ), 'Default command for "Claude Code CLI" launches — e.g. yep for a wrapper script. A project can override it in Open in IDE.')}
       {fieldRow('Oracle URL', (
         <input value={oracleUrl} onChange={e => setOracleUrl(e.target.value)}
           placeholder="http://localhost:3331" className="mono" style={inputStyle(220)} />

cli/mcp_server.py

@@ -23,9 +23,10 @@ sys.path.insert(0, str(Path(__file__).parent.parent))
 
 from fastmcp import Context, FastMCP
 
+from cli.tools import _grants
 from core.host import resolve_host
 from core.ide import get_profile
-from services import delegate_hints
+from services import access_guard, delegate_hints
 from services.auto_memory import AutoMemory
 from services.context_snapshot import ContextSnapshot
 from services.runtime import C3Runtime, build_runtime, start_runtime, stop_runtime
@@ -191,6 +192,14 @@ def _notify_mcp_ready(svc) -> None:
 async def lifespan(server):
     """Initialize all services, auto-start session, start file watcher."""
     project = PROJECT_PATH
+    # numpy's native module must load before any background thread exists: on
+    # Windows, loading it from c3-initial-index (via chromadb) while this
+    # process starts other threads deadlocks both, and the first tool call
+    # never answers. Absent numpy, nothing here needs it.
+    try:
+        import numpy  # noqa: F401, PLC0415
+    except ImportError:
+        pass
     services = build_runtime(project, ide_name=_IDE_NAME)
     if getattr(services, "time_tracker", None) is not None:
         try:
@@ -508,6 +517,7 @@ def _ensure_repo_map_once(rt) -> None:
 def _svc(ctx: Context) -> C3Runtime:
     rt = ctx.request_context.lifespan_context
     _ensure_repo_map_once(rt)
+    access_guard.bind_session(_grants.session_id(rt))
     return rt
 
 

{code_context_control-2.146.0.dist-info → code_context_control-2.149.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.146.0
+Version: 2.149.1
 Summary: Local MCP code-intelligence for AI coding tools: surgical search/read/edit, agent-config version history, path-level access + masking guards, and a multi-project hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0

{code_context_control-2.146.0.dist-info → code_context_control-2.149.1.dist-info}/RECORD

@@ -1,10 +1,10 @@
 cli/__init__.py,sha256=ec66drCZGNMRU4V6ov0zVhYZph1us12Vn8OvG_LJyRY,22
 cli/_hook_utils.py,sha256=RhfS2WS5VMSi2w2Jxcts1wg5WC-UFp89JOQvcO5Jjb8,23002
 cli/_shell_writes.py,sha256=XzUNlUDljmg-wZxK03xHnRe36WeQxe4tpO9HKVFwP5o,5090
-cli/c3.py,sha256=AashzO8-7Jfq2V61RXFh2z5KfF5Oux5INUY-2s6IQVk,431810
+cli/c3.py,sha256=P-UUPaigu00WNQgtYuyOrpG9UQGfhKQl1uicUsT6Qgk,431810
 cli/docs.html,sha256=pPxcP5ieY0DcfEDvegwIcRxbz1woLZoKLVSF-4JVy0Q,146784
 cli/edits.html,sha256=UjAhoCmBmQ89cklGvJqzC6eyNP2tc8H6T-e01DVkLvE,43418
-cli/hook_access_guard.py,sha256=Mjrrt3agYCWPqSjdzk_Sw4ooMrizO8Um-nQjgGfXck4,27896
+cli/hook_access_guard.py,sha256=tzK3pQBGehDDZi6fECcYk8nRhy0QkmUtTF2TuJG7nbY,27928
 cli/hook_agent_model.py,sha256=NzetPAuzl7eiWgr6tGzWUY24qiT717FD-QqeFOudGrg,2784
 cli/hook_artifact.py,sha256=Se1CNBfoBFyvJQlRmYdNtdRXIkQp9zaF0O6ndRMo7ts,2198
 cli/hook_auto_snapshot.py,sha256=yGFqRANtw8qNqRNr-oCgpuyaUyTkSzIOFxXt5kauq4I,5271
@@ -23,10 +23,10 @@ cli/hook_session_end.py,sha256=toFEPDKRoutDuVOmuOgHmQ8CM0o7tF7yALhMxJz7VEM,3482
 cli/hook_session_open.py,sha256=Badeikv37D7b6inSHbVjAxtfdH4xiJKFT1O52fgreGs,7443
 cli/hook_session_stats.py,sha256=I-2NeLlV1NxeqKtTM2JH9haSpFU7r4qG0u8pfCJ80YU,8725
 cli/hook_terse_advisor.py,sha256=W_zaTfX2akgX-ifuUTsLu2H1atM8XmWt6jpPoeU7Pm0,6252
-cli/hub_server.py,sha256=of3Auy9HFPSa1gDqrRITOfv29wz6uqi62Afb0iFW7uE,218145
+cli/hub_server.py,sha256=VgDAlVmWgvh57KUbMgL2PT4303fmlr578QLk6ehe2pA,227863
 cli/hub_ui.html,sha256=v41R_JAH4Jwodpy3tbeBUel-80FbNmffBrey-QH5Q64,2963
 cli/mcp_proxy.py,sha256=r-Qhlie7gCtotex8yQUudCyBLRUK-IW6cNIW5RhBW0o,17648
-cli/mcp_server.py,sha256=5y_oaJvvGq6p1C4L-4MamudyAhpJYeIjDJcXSeB9dsM,73775
+cli/mcp_server.py,sha256=Omsjg01JePjMrbJwXBMAmJ6zX0MNjTbREJ6BhfuVlI4,74248
 cli/progress.py,sha256=qTkNy0howOD3hXraMo4ok3dYTpBW5yG_tenKfF4UDM0,1470
 cli/server.py,sha256=dJOOXYU1zmN-UBuMmHhv8XlnknSyO8xj7mXWSDAGIBY,173188
 cli/ui.html,sha256=uuPwIJNKDQH_fsaR3xNB2AKky9WzKfaXnKr_k3aTtxo,5715
@@ -60,7 +60,7 @@ cli/hub_ui/components/drill_subprojects.js,sha256=wdPNTIMrrLLQI5Qxi3xk-rZFMDO8pF
 cli/hub_ui/components/drill_tasks.js,sha256=1iG8Kx9vCoCIHFDXCVtGiw_HwYff3SuScM90tj0cFRQ,14245
 cli/hub_ui/components/drill_views.js,sha256=HyYPcpl9VXAcrmYRNEodHl9cNcFJMrF8XwTvCR3vdsc,15480
 cli/hub_ui/components/global_search.js,sha256=GPfq1EsZa73vXBNCVn4VhT3a7gYkaUblbcXOFCe7PJQ,11395
-cli/hub_ui/components/hub_access.js,sha256=AF00OgOGak4ASPE2OvxOsBqjS_KKd5QKCZZ6Kp3zGXw,34339
+cli/hub_ui/components/hub_access.js,sha256=dllDqBIGdUWTJVxmdfv2OYM_d2f-K1TShqtPqH_dju0,39551
 cli/hub_ui/components/hub_ci.js,sha256=KrdzALpgFTFcPEMN1R-OU0tyl8irsj91HECRlGsQLjQ,17873
 cli/hub_ui/components/hub_cred_audit.js,sha256=fUmAPTOa75gdxAsw6cNHPYenu7jDTljSbFX9GYJnW14,11662
 cli/hub_ui/components/hub_credentials.js,sha256=xDqxDb0a0yaJQgTE-hEtx0PTOo4x9j__5GhdlxGd9mo,119643
@@ -69,11 +69,11 @@ cli/hub_ui/components/hub_locks.js,sha256=v1yv7JH5anfC_kZo26I1Dyt1_ytamGOaBpCIWG
 cli/hub_ui/components/hub_sessions.js,sha256=Uo-U3T9ZIqSgiBkfNIWB3K2c-J-WBJApUU2IPSi5BZk,21401
 cli/hub_ui/components/hub_tokens.js,sha256=oBFTvW5zJShpBaqIqmJPK_g7SpEiulurMRjlfO34T2c,18565
 cli/hub_ui/components/mcp_manager.js,sha256=Bqd74xuHVyADpILJZbFHTlM2gcUpG1nH_ngZhMlobaU,17405
-cli/hub_ui/components/modals.js,sha256=jt5om8xvUJjieftfgWoWHGVGKxkt14FArYS-WLazwA0,65731
+cli/hub_ui/components/modals.js,sha256=-vV55ENULEeovjDcse-wvIotbDxJKlFrUf2sv_crqok,66991
 cli/hub_ui/components/project_card.js,sha256=V_g5LUUj99IPdjw5f98ViZ-mbBGTXt_RKqq_0g-tPMs,30722
 cli/hub_ui/components/project_tree.js,sha256=jPgkHZwgBM9iNT4pxXPTMgV4dtZpOX5EQsGvzcL4PP0,3829
 cli/hub_ui/components/session_drawer.js,sha256=OEBvdF3PqRji9CEntolDMVplXF2NTG2xwmXCqkcb0Nw,7553
-cli/hub_ui/components/settings_modal.js,sha256=r7JGRlnYEA4l1L7rSfCpXbeKg5DxNFFNj9aT5QuP4bI,13761
+cli/hub_ui/components/settings_modal.js,sha256=gz2G8gpA5yZ4q0KS3GKlDqrJxvSx_kkbLXYxpGm8g0g,14503
 cli/hub_ui/components/sidebar.js,sha256=RH0OlqCINFNCIXgns-wgge5gG8vkn5wyfRT87qdmo1I,4585
 cli/hub_ui/components/summary_bar.js,sha256=JnMq01Oum8DwwUOhFnX5mr8K7I-ERdPlbaBOR8QT72o,2993
 cli/hub_ui/components/task_board.js,sha256=QiWKmj1NkhkloGlfzZj_tWd7Sgz3xSxwVLp8I5OfIiM,15952
@@ -131,7 +131,7 @@ cli/ui/components/sessions.js,sha256=FIKtil76B8tCkAmcFV7hlj6GQ_DCJK2jCzvEmdK7NBE
 cli/ui/components/settings.js,sha256=FXcn-UQE2mXC6HFsLeEas-wAUFKt0OJaLySroZQMhGA,84095
 cli/ui/components/sidebar.js,sha256=K2ym2kUgpbyG-EBA_wBIIiqQY8qTatsiBZwzseMWuIQ,9939
 cli/ui/components/tasks.js,sha256=vyKQ3uwoppMwvdEaHlhWXW4oWcAisx4NveqzMhsYqHo,38438
-code_context_control-2.146.0.dist-info/licenses/LICENSE,sha256=l8Kh5QCNWNvR6kIt8L0BUZvc2LAFiHv2c-FnsGnUZf4,11301
+code_context_control-2.149.1.dist-info/licenses/LICENSE,sha256=l8Kh5QCNWNvR6kIt8L0BUZvc2LAFiHv2c-FnsGnUZf4,11301
 core/__init__.py,sha256=TSDCEcM4V7gcZVM3w2ykJaqEUch4Dkon-rivV17T73s,2501
 core/codex_patch.py,sha256=CxvT_rQIwPNTRJZj9EHJmx0ZdOeSLxjiixuLI3Z7lPc,2107
 core/config.py,sha256=wCjrZKXRywUbR6WRcO7optyOirAQ2DeRNdPCU0X5zIY,23762
@@ -188,7 +188,7 @@ oracle/ui/chat/send.js,sha256=X_Uc6EuuIxkUTlRWGGYOq6gQkJCQeCE3p5NMyxx7RzQ,11911
 oracle/ui/chat/stream_renderer.js,sha256=RZndI2mu5xbzZF-4NG9jeOqXTcmIqfZqxgkrBvTzWmk,29861
 oracle/ui/chat/toolbar.js,sha256=ZDexIIpGwsQ6XsY4Tyo082rJoofdD_JBTV97-mLQUVM,12027
 services/__init__.py,sha256=3Kn4cZweLm7at8wFdBdZ-Zwo8hHcnVIsmY5f29nzi2Y,116
-services/access_guard.py,sha256=tj-rWVlEzLIviIEXMRAYCWRlcgLPUwJ1qqQfmIA5t7Q,79074
+services/access_guard.py,sha256=Qr9jl3DPINytvgXzuZJtnA2yyXq0GnQguGQwXinK7XE,81458
 services/access_telemetry.py,sha256=9pOCLS9LgDtM7Z4cCEyl7osxhj-m3wsPubcXolBKuV4,9568
 services/activity_log.py,sha256=c_jTOsR-d1d5B3u67eg8mRA7LZhtP6H1-6leeGa0Go4,7990
 services/agent_base.py,sha256=a-gdSd_jtZtbjXo1WS8CnWCagXgKaGZd5ShcG6s0kT4,4809
@@ -204,6 +204,7 @@ services/background_service.py,sha256=Hn-vjAUq_wPm0cUiwwzyr-D7Xxkygjuy7s3_9XuLaO
 services/benchmark_dashboard.py,sha256=iR-DnqnoKbqHMJ4d-ZkIvJBYfzwTa7r-jzO6j2BYDfQ,27711
 services/bitbucket_client.py,sha256=2RehoyVP4vc52zjQi3Gdlt2WRAUpFv8zVMn12xx1yHE,22338
 services/bitbucket_credentials.py,sha256=2qLA9pQMol4y95y4DJMNBsBBPUsJQCKbLFo2iiCnfvI,7364
+services/builtin_leases.py,sha256=WRYBQRMckz2GZ80Zw2QtgY0WwnbxF1ULDrFp5B07qlk,6298
 services/ci_act.py,sha256=82i5aa1wgQvc8Xq_pQ9-k1_57LBQ0-mWSUT9xV-q7Tk,24070
 services/ci_cache.py,sha256=Too3XyeE-oeiqQm4IJ10giFvhIEr29YfDLUpZDl8SBU,13256
 services/ci_expr.py,sha256=BsCUoL4ZN1Q8KjYJ07xWsPynV04Q8dg-ryIIKNOYk70,15641
@@ -274,7 +275,7 @@ services/override_policy.py,sha256=TehVPxfQ8LZWIOUzCnnioIdMUPZZ7JZa1ja77smpW2c,3
 services/override_requests.py,sha256=H9lSUbfOjkjE1muztaQ58InqqsqhtnKIT-pF2VzvWkg,31148
 services/override_wake.py,sha256=HjSOXQTDi0irgeMyrTqngL7xLcSOOIgYsVW9yxod4ps,10363
 services/parser.py,sha256=S_YoKLS3r1xCUVHApXb3BTEfoRAzFhuo1_8XsG0qxVE,63505
-services/project_manager.py,sha256=ibgNOqmNQBjdr_dXkbcsUdsnOriroYKW87wMnGZCovk,48376
+services/project_manager.py,sha256=7NvQau5x0PCVagQsXpuXZ4VtXCkCfy9es_v1oEHmzgs,48718
 services/project_runtime.py,sha256=yyftX48BFjq4B2KcR4KGszDAAa4xR6gn6j0SgTyro1s,11603
 services/protocol.py,sha256=CWZ0BWWd-jPui-11hZlvGgkNk18gMFhhLWbp-BP35Kk,12861
 services/proxy_state.py,sha256=u5rd0k6CrOsywZA8FpRu_hMLwhR0TAJhZjy5MdWbCGc,6107
@@ -333,8 +334,8 @@ tui/screens/search_view.py,sha256=MMHjVdlk3HZSuDBSvq8IGrqv_Mh5Us6YqXQ80bcWSMk,19
 tui/screens/session_view.py,sha256=eZ1eDwHTvPOck1wCCviixtOaCxIkBT_95ytNNNriGNA,5991
 tui/screens/stats.py,sha256=p81PjzdaIv7hllb8f45-rlVe4lJZwSdIMqu7e86_u5s,6223
 tui/screens/ui_view.py,sha256=1QJCgLh2YfgWIpvzRG1KOGXYEaOYX6ojN61Azjf2oX0,2125
-code_context_control-2.146.0.dist-info/METADATA,sha256=qMaA5mgjHH8SPwuUFvut1k-KVaWK3DuHawvK8axeKNs,28902
-code_context_control-2.146.0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-code_context_control-2.146.0.dist-info/entry_points.txt,sha256=7kX_WUsDCF2hbXzvbNyscyaBb9AeA-DJY5v_5hN0DlU,93
-code_context_control-2.146.0.dist-info/top_level.txt,sha256=wRt41zBybVF3qAiNXHz9BURbkKvUvfhmWWtKMhaw6eE,29
-code_context_control-2.146.0.dist-info/RECORD,,
+code_context_control-2.149.1.dist-info/METADATA,sha256=OPwBuyGX5nRTAGhNLG_qcwpq9LFLYT_k2CsnN46Jk3A,28902
+code_context_control-2.149.1.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+code_context_control-2.149.1.dist-info/entry_points.txt,sha256=7kX_WUsDCF2hbXzvbNyscyaBb9AeA-DJY5v_5hN0DlU,93
+code_context_control-2.149.1.dist-info/top_level.txt,sha256=wRt41zBybVF3qAiNXHz9BURbkKvUvfhmWWtKMhaw6eE,29
+code_context_control-2.149.1.dist-info/RECORD,,

services/access_guard.py

@@ -60,6 +60,14 @@ BUILTIN_MODES = ("deny", "confirm", "allow")
 # (or, worse, silently disable one).
 _ACCESS_KEYRING_SERVICE = "c3-access"
 
+# Temporary and per-session builtin modes (services/builtin_leases.py), in
+# ~/.c3. Named here so the hot path can skip the lease module when no file
+# exists.
+LEASES_FILE = "builtin_leases.json"
+
+# The agent session this process evaluates for; see bind_session().
+_SESSION_ID = ""
+
 # Mask presets (docs/mask-guard.md §4). Names + param schema live here so the
 # hook subprocess can validate config without importing the transform engines;
 # the engines themselves are in services/mask_presets.py.
@@ -600,10 +608,33 @@ def effective_builtin_modes(project_path: str = ".") -> dict:
     """
     out = _scope_modes("global")
     proj_base = _scope_base("project", project_path)
-    if proj_base is None or proj_base == _global_base():
-        return out  # the home directory IS the project; one scope, not two
-    out.update(_scope_modes("project", project_path))
-    return out
+    # When the home directory IS the project there is one scope, not two.
+    if proj_base is not None and proj_base != _global_base():
+        out.update(_scope_modes("project", project_path))
+    return _lease_overlay(out, project_path)
+
+
+def bind_session(session_id: str) -> None:
+    """Name the agent session this process evaluates for, so leases bound to
+    that session apply. The hook binds per call from its payload; the MCP
+    server binds before each tool call. Unbound, only all-session leases
+    apply."""
+    global _SESSION_ID
+    _SESSION_ID = str(session_id or "")
+
+
+def _lease_overlay(modes: dict, project_path: str) -> dict:
+    """*modes* with live leases applied. A lease only loosens: one that is
+    stricter than the standing mode is ignored."""
+    home = _global_base()
+    if home is None or not (home / ".c3" / LEASES_FILE).is_file():
+        return modes
+    from services import builtin_leases  # noqa: PLC0415 — only when leases exist
+    for glob, mode in builtin_leases.live_modes(project_path, _SESSION_ID).items():
+        if builtin_strictness(glob, mode) < builtin_strictness(
+                glob, modes.get(glob, "default")):
+            modes[glob] = mode
+    return modes
 
 
 def builtin_mode_realms(project_path: str = ".") -> dict:
@@ -621,6 +652,31 @@ def builtin_mode_realms(project_path: str = ".") -> dict:
     return out
 
 
+_KIND_RANK = {_KIND_CONFIRM: 1, _KIND_READ_ONLY: 2, _KIND_DENY: 3}
+
+
+def builtin_strictness(glob, mode: str) -> int:
+    """How strict *mode* makes a Tier-1 builtin: 0 (allow) to 3 (full deny).
+
+    The same mode word means different rules per tier — ``default`` is a full
+    deny on ``**/.env*`` and read-only on ``**/.git/**`` — so loosening is
+    only comparable through this. Raises ValueError for a glob that is not
+    Tier 1 or an unknown mode.
+    """
+    canon = _norm_builtin(glob)
+    variants = _BUILTIN_VARIANTS.get(canon)
+    if variants is None:
+        raise ValueError(f"'{_norm_glob(glob)}' is not a disableable builtin "
+                         f"— expected one of: {', '.join(DISABLEABLE_BUILTINS)}")
+    if mode not in BUILTIN_MODES + ("default",):
+        raise ValueError(f"unknown mode '{mode}' — expected one of: "
+                         f"{', '.join(BUILTIN_MODES + ('default',))}")
+    if mode == "allow":
+        return 0
+    return _KIND_RANK[variants[mode if mode in ("deny", "confirm")
+                               else "default"].kind]
+
+
 def disabled_builtins(project_path: str = ".") -> frozenset:
     """Canonical globs of builtins that are genuinely OFF right now — the
     legacy two-key opt-out plus mode="allow" entries. Callers that only ask

services/builtin_leases.py

@@ -0,0 +1,182 @@
+"""Temporary and per-session modes for Tier-1 builtin guards.
+
+A lease loosens one builtin to ``confirm`` or ``allow`` until it expires, for
+every session (``session_id`` empty) or for one agent session. It never
+touches the permanent two-key mode: when a lease lapses the guard is back
+where it was, with nothing to undo.
+
+Leases are two-key like modes. A row in ``~/.c3/builtin_leases.json`` counts
+only while the keyring (service ``c3-access``, account ``lease|<id>``) holds
+the sha256 of that exact row, so a row written, copied or extended by hand
+has no matching attestation and is ignored. Every failure path ignores the
+lease, which leaves the guard on.
+"""
+from __future__ import annotations
+
+import hashlib
+import json
+import secrets
+from datetime import datetime, timedelta, timezone
+
+from services import access_guard as ag
+from services.atomic_json import write_json_atomic
+
+LEASE_MODES = ("confirm", "allow")
+MIN_TTL_S = 60
+MAX_TTL_S = 8 * 3600
+_LOCK_FILE = ".c3/builtin_leases.lock"
+
+
+def _now() -> datetime:
+    return datetime.now(timezone.utc)
+
+
+def _parse(value) -> datetime | None:
+    try:
+        dt = datetime.fromisoformat(str(value))
+    except ValueError:
+        return None
+    return dt if dt.tzinfo else None
+
+
+def _store():
+    base = ag._global_base()
+    return base / ".c3" / ag.LEASES_FILE if base is not None else None
+
+
+def _account(lease_id: str) -> str:
+    return f"lease|{lease_id}"
+
+
+def _digest(row: dict) -> str:
+    blob = json.dumps(row, sort_keys=True, separators=(",", ":"))
+    return hashlib.sha256(blob.encode("utf-8")).hexdigest()
+
+
+def _attested(row: dict) -> bool:
+    try:
+        import keyring  # noqa: PLC0415 — lazy, as in access_guard
+        return keyring.get_password(ag._ACCESS_KEYRING_SERVICE,
+                                    _account(str(row.get("id")))) == _digest(row)
+    except Exception:
+        return False
+
+
+def _load() -> list:
+    path = _store()
+    if path is None or not path.is_file():
+        return []
+    try:
+        rows = json.loads(path.read_text(encoding="utf-8")).get("leases")
+    except (OSError, ValueError, AttributeError):
+        return []
+    return [r for r in rows if isinstance(r, dict)] if isinstance(rows, list) else []
+
+
+def _live(row: dict, at: datetime) -> bool:
+    exp = _parse(row.get("expires_at"))
+    return exp is not None and at < exp
+
+
+def active() -> list:
+    """Live, attested leases, soonest to expire first."""
+    at = _now()
+    return sorted((r for r in _load() if _live(r, at) and _attested(r)),
+                  key=lambda r: str(r.get("expires_at")))
+
+
+def live_modes(project_path: str, session_id: str) -> dict:
+    """``{canonical_glob: mode}`` from the leases that reach this project and
+    session. ``allow`` wins over ``confirm`` when two leases cover one glob."""
+    rows = _load()
+    if not rows:
+        return {}
+    realms = {"global", ag.realm("project", project_path)}
+    at = _now()
+    out = {}
+    for r in rows:
+        if (r.get("realm") in realms and r.get("mode") in LEASE_MODES
+                and r.get("session_id", "") in ("", session_id)
+                and _live(r, at) and _attested(r)):
+            if out.get(r["glob"]) != "allow":
+                out[r["glob"]] = r["mode"]
+    return out
+
+
+def _save(rows: list) -> None:
+    write_json_atomic(_store(), {"leases": rows})
+
+
+def _lock():
+    from services.override_grants import _Lock  # noqa: PLC0415 — off the hot path
+    return _Lock(ag._global_base(), _LOCK_FILE)
+
+
+def mint(glob, mode: str, *, scope: str, project_path: str = ".",
+         session_id: str = "", ttl_s: int, created_by: str) -> dict:
+    """Create a lease and return its row.
+
+    Raises ValueError for a glob that is not Tier 1, a mode other than
+    confirm/allow, a TTL outside 60 s–8 h, a scope without a realm, or a
+    keyring that will not attest (attestation is written first, so a lease
+    that could never count is never stored).
+    """
+    if mode not in LEASE_MODES:
+        raise ValueError(f"a lease mode must be one of: {', '.join(LEASE_MODES)}")
+    ag.builtin_strictness(glob, mode)
+    try:
+        ttl = int(ttl_s)
+    except (TypeError, ValueError):
+        raise ValueError("ttl_s must be a whole number of seconds") from None
+    if not MIN_TTL_S <= ttl <= MAX_TTL_S:
+        raise ValueError(f"ttl_s must be between {MIN_TTL_S} and {MAX_TTL_S}")
+    if scope not in ("global", "project"):
+        raise ValueError("scope must be 'global' or 'project'")
+    realm = ag.realm(scope, project_path)
+    if not realm or _store() is None:
+        raise ValueError("no home directory to hold the lease")
+    at = _now()
+    row = {
+        "id": "bls_" + secrets.token_hex(6),
+        "glob": ag._norm_builtin(glob),
+        "mode": mode,
+        "scope": scope,
+        "realm": realm,
+        "project_path": str(project_path) if scope == "project" else "",
+        "session_id": str(session_id or ""),
+        "created_at": at.isoformat(),
+        "expires_at": (at + timedelta(seconds=ttl)).isoformat(),
+        "created_by": str(created_by),
+    }
+    try:
+        import keyring  # noqa: PLC0415
+        keyring.set_password(ag._ACCESS_KEYRING_SERVICE, _account(row["id"]),
+                             _digest(row))
+    except Exception:
+        raise ValueError("keyring unavailable, so the lease cannot be attested "
+                         "and would not take effect") from None
+    with _lock():
+        rows = [r for r in _load() if _live(r, at)]
+        rows.append(row)
+        _save(rows)
+    return row
+
+
+def revoke(lease_id: str) -> dict | None:
+    """Remove a lease; returns the removed row, or None if it was not live.
+    Expired rows are swept on the way."""
+    if _store() is None:
+        return None
+    at = _now()
+    with _lock():
+        rows = _load()
+        gone = next((r for r in rows if r.get("id") == lease_id), None)
+        _save([r for r in rows if r is not gone and _live(r, at)])
+    if gone is None:
+        return None
+    try:
+        import keyring  # noqa: PLC0415
+        keyring.set_password(ag._ACCESS_KEYRING_SERVICE, _account(lease_id), "")
+    except Exception:  # a keyring that cannot be written cannot be read either
+        pass           # so a re-added copy of the row stays unattested
+    return gone if _live(gone, at) else None

services/project_manager.py

@@ -794,11 +794,19 @@ class ProjectManager:
             "initialized": bool(cfg),
         }
 
+    def get_ide_cmd(self, path: str) -> str:
+        """Per-project launch command override (e.g. `yep` instead of `claude`)."""
+        path = str(Path(path).resolve())
+        for p in self._read_projects():
+            if p["path"] == path:
+                return str(p.get("ide_cmd") or "").strip()
+        return ""
+
     def update_project(self, path: str, **fields) -> bool:
-        """Update editable project fields: name, tags, notes."""
+        """Update editable project fields: name, tags, notes, ide_cmd."""
         path = str(Path(path).resolve())
         projects = self._read_projects()
-        allowed = {"name", "tags", "notes", "autostart_ui"}
+        allowed = {"name", "tags", "notes", "autostart_ui", "ide_cmd"}
         for p in projects:
             if p["path"] == path:
                 for k, v in fields.items():