moa-cli 0.3.2__tar.gz → 0.3.3__tar.gz

{moa_cli-0.3.2 → moa_cli-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: moa-cli
-Version: 0.3.2
+Version: 0.3.3
 Summary: Ask one question to multiple local AI coding CLIs in parallel and collect their answers.
 Keywords: llm,agents,cli,claude,codex,agy,opencode,peer-review
 Author: Paul-Louis Pröve
@@ -50,7 +50,7 @@ A single model gives you one perspective. Asking three frontier models the same
 
 ```text
 $ moa ask "Is Postgres or SQLite better for a desktop app?"
-Asking claude, codex, agy (timeout 600s, read-only)
+Asking claude, codex, agy (timeout 900s, read-only)
 
 ──────────────── claude (opus) · OK · 3.2s ────────────────
 
@@ -103,11 +103,16 @@ is enforced by spawning each CLI with its own read-only flags:
 
 | Provider   | Read-only (default)        | Reads files | Web research              |
 | ---------- | -------------------------- | ----------- | ------------------------- |
-| `claude`   | `--permission-mode plan`   | yes         | yes                       |
+| `claude`   | `--permission-mode default` | yes        | yes                       |
 | `codex`    | `-s read-only`             | yes         | **no** (sandbox blocks network) |
 | `opencode` | `--agent plan`             | yes         | yes                       |
 | `agy`      | `--sandbox` (partial: shell only - can still edit files) | yes | yes |
 
+`claude`'s `--permission-mode default` is read-only in moa's non-interactive use: it reads
+files and researches online with the full toolset, but any write or edit needs an interactive
+approval that never comes under `-p`, so all mutations are denied. (`plan` mode is **not**
+usable headless - it emits a plan and waits for approval instead of answering.)
+
 `codex`'s read-only mode is a kernel sandbox that also blocks network, so codex does no
 web research in the default mode (it still reads local files). `agy` has **no true
 read-only mode**: its `--sandbox` flag restricts agy's terminal/shell but does **not** stop

{moa_cli-0.3.2 → moa_cli-0.3.3}/README.md

@@ -39,7 +39,7 @@ A single model gives you one perspective. Asking three frontier models the same
 
 ```text
 $ moa ask "Is Postgres or SQLite better for a desktop app?"
-Asking claude, codex, agy (timeout 600s, read-only)
+Asking claude, codex, agy (timeout 900s, read-only)
 
 ──────────────── claude (opus) · OK · 3.2s ────────────────
 
@@ -92,11 +92,16 @@ is enforced by spawning each CLI with its own read-only flags:
 
 | Provider   | Read-only (default)        | Reads files | Web research              |
 | ---------- | -------------------------- | ----------- | ------------------------- |
-| `claude`   | `--permission-mode plan`   | yes         | yes                       |
+| `claude`   | `--permission-mode default` | yes        | yes                       |
 | `codex`    | `-s read-only`             | yes         | **no** (sandbox blocks network) |
 | `opencode` | `--agent plan`             | yes         | yes                       |
 | `agy`      | `--sandbox` (partial: shell only - can still edit files) | yes | yes |
 
+`claude`'s `--permission-mode default` is read-only in moa's non-interactive use: it reads
+files and researches online with the full toolset, but any write or edit needs an interactive
+approval that never comes under `-p`, so all mutations are denied. (`plan` mode is **not**
+usable headless - it emits a plan and waits for approval instead of answering.)
+
 `codex`'s read-only mode is a kernel sandbox that also blocks network, so codex does no
 web research in the default mode (it still reads local files). `agy` has **no true
 read-only mode**: its `--sandbox` flag restricts agy's terminal/shell but does **not** stop

{moa_cli-0.3.2 → moa_cli-0.3.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "moa-cli"
-version = "0.3.2"
+version = "0.3.3"
 description = "Ask one question to multiple local AI coding CLIs in parallel and collect their answers."
 readme = "README.md"
 authors = [

{moa_cli-0.3.2 → moa_cli-0.3.3}/src/moa_cli/__init__.py

@@ -1,3 +1,3 @@
 """MOA CLI package."""
 
-__version__ = "0.3.2"
+__version__ = "0.3.3"

{moa_cli-0.3.2 → moa_cli-0.3.3}/src/moa_cli/cli.py

@@ -143,7 +143,11 @@ def _opencode(
 PROVIDERS: dict[str, Provider] = {
     "claude": Provider(
         "claude", "claude", "opus", _claude,
-        readonly=("--permission-mode", "plan"),
+        # In headless `-p`, `default` keeps the full toolset (Read, read-only Bash
+        # like git/grep, WebFetch) but has no way to approve a write/edit, so
+        # mutations are denied: effectively read-only with all tools. (`plan` mode
+        # instead emits a plan-approval stub and never answers under `-p`.)
+        readonly=("--permission-mode", "default"),
         yolo=("--permission-mode", "bypassPermissions"),
         unset_env=("CLAUDECODE",),
     ),
@@ -170,7 +174,10 @@ PROVIDERS: dict[str, Provider] = {
     "opencode": Provider(
         "opencode", "opencode", "", _opencode,
         readonly=("--agent", "plan"),
-        yolo=(),  # default = build agent (full access)
+        # Bare `build` (the default agent) still gates doom_loop/external_directory
+        # as `ask`, which auto-rejects headless - so true full access needs the
+        # explicit skip-permissions flag. (Verified on opencode 1.17.8.)
+        yolo=("--dangerously-skip-permissions",),
         # Verified against installed opencode: `--variant <value>` is the
         # "model variant (provider-specific reasoning effort, e.g., high)" flag
         # (`opencode run --help`). The value is pasted verbatim.
@@ -754,7 +761,7 @@ _MODERATOR_MODES: tuple[str, ...] = ("auto",)
 # serialize_config renders them back as `[providers.<name>]` blocks.
 _CONFIG_DEFAULTS: dict = {
     "num": 3,
-    "timeout": 600.0,
+    "timeout": 900.0,
     "synthesizer": "auto",
     "moderator": "auto",
     "exclude": [],
@@ -1144,7 +1151,7 @@ def resolve_run(
         raise typer.BadParameter(f"{config_path()}: {exc}") from exc
 
     num = resolve_option(num, "num", config, default_num)
-    timeout = resolve_option(timeout, "timeout", config, 600.0)
+    timeout = resolve_option(timeout, "timeout", config, 900.0)
     # Repeatable flags are an empty list when omitted, not None, so treat empty
     # as "fall back to config" for exclude.
     exclude_names = tuple(exclude) if exclude else tuple(config.get("exclude", ()))