@adhdev/daemon-standalone 1.0.29-rc.4 → 1.0.29-rc.5

package/dist/index.js

@@ -33311,10 +33311,10 @@ var require_dist3 = __commonJS({
     }
     function getDaemonBuildInfo() {
       if (cached2) return cached2;
-      const commit = readInjected(true ? "df91f2d3a3bded96267f00003d1ee8e27dda0512" : void 0) ?? "unknown";
-      const commitShort = readInjected(true ? "df91f2d3" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
-      const version2 = readInjected(true ? "1.0.29-rc.4" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
-      const builtAt = readInjected(true ? "2026-08-02T00:25:39.936Z" : void 0);
+      const commit = readInjected(true ? "f4bab0079a473c45327927eb9481c5b4c2d48aa7" : void 0) ?? "unknown";
+      const commitShort = readInjected(true ? "f4bab007" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
+      const version2 = readInjected(true ? "1.0.29-rc.5" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
+      const builtAt = readInjected(true ? "2026-08-02T04:13:46.304Z" : void 0);
       cached2 = builtAt ? { commit, commitShort, version: version2, builtAt } : { commit, commitShort, version: version2 };
       return cached2;
     }
@@ -54422,11 +54422,34 @@ The mesh has no work in flight. For each mission, decide its outcome: continue i
       if (!workspace) return null;
       try {
         const result = loadRepoMeshJsonConfig(workspace);
-        return result.sourceType === "repo_file" && result.config ? result.config : null;
+        if (result.sourceType !== "repo_file" || !result.config) return null;
+        if (!isConfigPathInsideWorkspace(result.path, workspace)) return null;
+        return result.config;
       } catch {
         return null;
       }
     }
+    function isConfigPathInsideWorkspace(configPath, workspace) {
+      if (typeof configPath !== "string" || !configPath) return false;
+      const toPosix = (value) => value.replace(/\\/g, "/").replace(/\/+$/, "");
+      const ws = toPosix(workspace);
+      const target = toPosix(configPath);
+      return !!ws && (target === ws || target.startsWith(`${ws}/`));
+    }
+    function warnUnreadableRepoConfigForNode(node, providerType) {
+      const workspace = typeof node?.workspace === "string" && node.workspace.trim() ? node.workspace.trim() : "";
+      if (!workspace) return;
+      const nodeId = readNonEmptyString(node?.id) || readNonEmptyString(node?.nodeId) || "unknown-node";
+      LOG2.warn(
+        "MeshQueue",
+        `repo mesh.json unreadable from this daemon for node=${nodeId} workspace=${workspace} provider=${providerType || "unknown"} \u2014 delegated auto-approve MODE falls back to the provider default here; the worker daemon re-resolves it from its own checkout at launch`
+      );
+    }
+    function delegatedWorkerAutoApproveSettingsForNode(mesh, node, provider, providerType) {
+      const repoConfig = loadRepoConfigForNode(node);
+      if (!repoConfig) warnUnreadableRepoConfigForNode(node, providerType);
+      return delegatedWorkerAutoApproveSettings(mesh?.policy, node?.policy, provider, repoConfig, providerType);
+    }
     function getMeshWithCache(components, meshId) {
       const localMesh = getMesh(meshId);
       const cachedMesh = components.router?.getCachedInlineMesh(meshId);
@@ -54843,11 +54866,10 @@ The mesh has no work in flight. For each mission, decide its outcome: continue i
             meshNodeFor: meshId,
             meshNodeId: nodeId,
             launchedByCoordinator: true,
-            ...delegatedWorkerAutoApproveSettings(
-              mesh?.policy,
-              node?.policy,
+            ...delegatedWorkerAutoApproveSettingsForNode(
+              mesh,
+              node,
               components.providerLoader?.getMeta(providerType),
-              loadRepoConfigForNode(node),
               providerType
             ),
             ...localDaemonId ? { meshCoordinatorDaemonId: localDaemonId } : {},
@@ -55706,11 +55728,10 @@ The mesh has no work in flight. For each mission, decide its outcome: continue i
               // Coordinator-dispatched worker: auto-approve unless mesh/node policy
               // opts out (default true). Lands in settingsOverride and beats the
               // global per-provider-type boolean/mode through explicit opposite-key clearing.
-              ...delegatedWorkerAutoApproveSettings(
-                mesh?.policy,
-                node?.policy,
+              ...delegatedWorkerAutoApproveSettingsForNode(
+                mesh,
+                node,
                 components.providerLoader?.getMeta(resolved.providerType),
-                loadRepoConfigForNode(node),
                 resolved.providerType
               ),
               launchedByCoordinator: true,
@@ -85846,6 +85867,84 @@ ${body}
     init_hash();
     init_coordinator_registry();
     init_mesh_duplicate_dispatch();
+    init_mesh_json_config();
+    init_logger();
+    init_repo_mesh_types();
+    function resolveDelegatedWorkerAutoApproveModeForLaunch(input) {
+      const settings = input.settings;
+      const envelopeMode = typeof settings?.autoApproveMode === "string" && settings.autoApproveMode.trim() ? settings.autoApproveMode.trim() : void 0;
+      if (settings?.launchedByCoordinator !== true) {
+        return { autoApproveMode: envelopeMode, changed: false, source: "not_delegated" };
+      }
+      if (settings.autoApprove === false) {
+        return { autoApproveMode: void 0, changed: false, source: "enable_gate_off" };
+      }
+      const providerType = typeof input.providerType === "string" ? input.providerType.trim() : "";
+      if (!providerType || !input.provider?.autoApproveModes) {
+        return { autoApproveMode: envelopeMode, changed: false, source: "no_provider_modes" };
+      }
+      const workspace = typeof input.workspace === "string" ? input.workspace.trim() : "";
+      if (!workspace) {
+        return { autoApproveMode: envelopeMode, changed: false, source: "no_repo_config" };
+      }
+      let repoConfig = null;
+      try {
+        const result = loadRepoMeshJsonConfig(workspace);
+        const fromThisWorkspace = result.sourceType === "repo_file" && typeof result.path === "string" && isPathInsideWorkspace(result.path, workspace);
+        repoConfig = fromThisWorkspace && result.config ? result.config : null;
+      } catch {
+        repoConfig = null;
+      }
+      const requestedMode = repoConfig?.providerDefaults?.autoApproveModes?.[providerType];
+      const requestedModeId = typeof requestedMode === "string" && requestedMode.trim() ? requestedMode.trim() : "";
+      if (!requestedModeId) {
+        return { autoApproveMode: envelopeMode, changed: false, source: "no_repo_config" };
+      }
+      const dangerousAllowed = settings.delegatedWorkerDangerousModeAllow === true;
+      const resolved = resolveDelegatedWorkerAutoApprove(
+        { delegatedWorkerAutoApprove: true, delegatedWorkerDangerousModeAllow: dangerousAllowed },
+        void 0,
+        input.provider,
+        repoConfig,
+        providerType
+      );
+      if (typeof resolved !== "string") {
+        return { autoApproveMode: envelopeMode, changed: false, source: "no_repo_config" };
+      }
+      return {
+        autoApproveMode: resolved,
+        changed: resolved !== envelopeMode,
+        source: "worker_repo_file"
+      };
+    }
+    function isPathInsideWorkspace(configPath, workspace) {
+      const normalize4 = (value) => value.replace(/[\\/]+$/, "");
+      const ws = normalize4(workspace);
+      if (!ws) return false;
+      const separatorAgnostic = (value) => value.replace(/\\/g, "/");
+      const normalizedPath = separatorAgnostic(configPath);
+      const normalizedWs = separatorAgnostic(ws);
+      return normalizedPath === normalizedWs || normalizedPath.startsWith(`${normalizedWs}/`);
+    }
+    function logDelegatedWorkerModeDelivery(resolution, context) {
+      if (resolution.source !== "worker_repo_file" && resolution.source !== "no_repo_config") return;
+      const node = context.meshNodeId || "unknown-node";
+      const workspace = context.workspace || "unknown-workspace";
+      const provider = context.providerType || "unknown-provider";
+      if (resolution.source === "worker_repo_file" && resolution.changed) {
+        LOG2.info(
+          "MeshWorker",
+          `auto-approve mode re-resolved from worker repo config: node=${node} workspace=${workspace} provider=${provider} coordinatorMode=${context.envelopeMode ?? "(none)"} workerMode=${resolution.autoApproveMode}`
+        );
+        return;
+      }
+      if (resolution.source === "no_repo_config" && context.envelopeMode) {
+        LOG2.warn(
+          "MeshWorker",
+          `auto-approve mode NOT confirmed by worker repo config (keeping coordinator value): node=${node} workspace=${workspace} provider=${provider} mode=${context.envelopeMode} \u2014 no readable .adhdev/mesh.json in this workspace`
+        );
+      }
+    }
     init_summary_metadata();
     var os19 = __toESM2(require("os"));
     var crypto5 = __toESM2(require("crypto"));
@@ -95198,7 +95297,29 @@ Run 'adhdev doctor' for detailed diagnostics.`
             if (!cliType) throw new Error("cliType required");
             const providerType = this.providerLoader.resolveAlias(cliType);
             const provLookup = this.providerLoader.getMeta(providerType);
-            const settingsOverride = args?.settings && typeof args.settings === "object" ? args.settings : void 0;
+            let settingsOverride = args?.settings && typeof args.settings === "object" ? args.settings : void 0;
+            if (settingsOverride?.launchedByCoordinator === true) {
+              const envelopeMode = typeof settingsOverride.autoApproveMode === "string" ? settingsOverride.autoApproveMode : void 0;
+              const modeResolution = resolveDelegatedWorkerAutoApproveModeForLaunch({
+                workspace: dir,
+                providerType,
+                provider: provLookup,
+                settings: settingsOverride
+              });
+              logDelegatedWorkerModeDelivery(modeResolution, {
+                workspace: dir,
+                providerType,
+                meshNodeId: typeof settingsOverride.meshNodeId === "string" ? settingsOverride.meshNodeId : void 0,
+                envelopeMode
+              });
+              if (modeResolution.changed && modeResolution.autoApproveMode) {
+                settingsOverride = {
+                  ...settingsOverride,
+                  autoApproveMode: modeResolution.autoApproveMode,
+                  autoApprove: void 0
+                };
+              }
+            }
             const delegatedLaunch = settingsOverride?.launchedByCoordinator === true ? buildCoordinatorDelegatedCliLaunchOptions({
               cliType,
               workspace: dir,