@bridge4dev/runner 0.61.0 → 0.63.0

package/dist/protocol.d.ts

@@ -113,6 +113,18 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         agentProtectedBranches: z.ZodCatch<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
         agentAllowForcePush: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
         agentAllowDestructiveGit: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+        /**
+         * #418: may the agent read and write OUTSIDE the project folder?
+         *
+         * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above, and
+         * safe here for the same reason as `agentPushBan` — though the polarity
+         * runs the other way. `policy.ts` resolves this one with `=== true`, so a
+         * value this schema throws away leaves the session confined to its folder:
+         * strictly more restricted, never less. Rubbish in this field therefore
+         * costs a project its permission, which is the direction a dropped value is
+         * allowed to fail in.
+         */
+        agentAllowOutsideFolder: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
         budgetUsd: z.ZodNullable<z.ZodNumber>;
         budgetMinutes: z.ZodNullable<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
@@ -128,6 +140,7 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         agentProtectedBranches?: string[] | undefined;
         agentAllowForcePush?: boolean | undefined;
         agentAllowDestructiveGit?: boolean | undefined;
+        agentAllowOutsideFolder?: boolean | undefined;
     }, {
         path: string;
         id: string;
@@ -141,6 +154,7 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         agentProtectedBranches?: unknown;
         agentAllowForcePush?: unknown;
         agentAllowDestructiveGit?: unknown;
+        agentAllowOutsideFolder?: unknown;
     }>;
     /**
      * «Run this one without the project's agent prompt.» Absent means no — both
@@ -248,6 +262,7 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         agentProtectedBranches?: string[] | undefined;
         agentAllowForcePush?: boolean | undefined;
         agentAllowDestructiveGit?: boolean | undefined;
+        agentAllowOutsideFolder?: boolean | undefined;
     };
     tickets: {
         number: number;
@@ -290,6 +305,7 @@ export declare const SessionDescriptorSchema: z.ZodObject<{
         agentProtectedBranches?: unknown;
         agentAllowForcePush?: unknown;
         agentAllowDestructiveGit?: unknown;
+        agentAllowOutsideFolder?: unknown;
     };
     tickets: {
         number: number;
@@ -547,6 +563,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches: z.ZodCatch<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
             agentAllowForcePush: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
             agentAllowDestructiveGit: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+            /**
+             * #418: may the agent read and write OUTSIDE the project folder?
+             *
+             * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above, and
+             * safe here for the same reason as `agentPushBan` — though the polarity
+             * runs the other way. `policy.ts` resolves this one with `=== true`, so a
+             * value this schema throws away leaves the session confined to its folder:
+             * strictly more restricted, never less. Rubbish in this field therefore
+             * costs a project its permission, which is the direction a dropped value is
+             * allowed to fail in.
+             */
+            agentAllowOutsideFolder: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
             budgetUsd: z.ZodNullable<z.ZodNumber>;
             budgetMinutes: z.ZodNullable<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
@@ -562,6 +590,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: string[] | undefined;
             agentAllowForcePush?: boolean | undefined;
             agentAllowDestructiveGit?: boolean | undefined;
+            agentAllowOutsideFolder?: boolean | undefined;
         }, {
             path: string;
             id: string;
@@ -575,6 +604,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: unknown;
             agentAllowForcePush?: unknown;
             agentAllowDestructiveGit?: unknown;
+            agentAllowOutsideFolder?: unknown;
         }>;
         /**
          * «Run this one without the project's agent prompt.» Absent means no — both
@@ -682,6 +712,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: string[] | undefined;
             agentAllowForcePush?: boolean | undefined;
             agentAllowDestructiveGit?: boolean | undefined;
+            agentAllowOutsideFolder?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -724,6 +755,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: unknown;
             agentAllowForcePush?: unknown;
             agentAllowDestructiveGit?: unknown;
+            agentAllowOutsideFolder?: unknown;
         };
         tickets: {
             number: number;
@@ -751,6 +783,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         branchPlan?: unknown;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
+    type: "hello_ack";
     sessions: {
         mode: "ask" | "plan" | "auto" | "full";
         agent: "CLAUDE" | "CODEX";
@@ -779,6 +812,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: string[] | undefined;
             agentAllowForcePush?: boolean | undefined;
             agentAllowDestructiveGit?: boolean | undefined;
+            agentAllowOutsideFolder?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -802,11 +836,11 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             baseSha?: string | undefined;
         } | undefined;
     }[];
-    type: "hello_ack";
     serverName: string;
     serverId: string;
     maxSessions?: number | undefined;
 }, {
+    type: "hello_ack";
     sessions: {
         agent: "CLAUDE" | "CODEX";
         status: "RUNNING" | "FAILED" | "STARTING" | "WAITING_INPUT" | "WAITING_PERMISSION" | "REVIEW" | "DONE" | "STOPPED";
@@ -827,6 +861,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: unknown;
             agentAllowForcePush?: unknown;
             agentAllowDestructiveGit?: unknown;
+            agentAllowOutsideFolder?: unknown;
         };
         tickets: {
             number: number;
@@ -853,7 +888,6 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
         branchHint?: unknown;
         branchPlan?: unknown;
     }[];
-    type: "hello_ack";
     serverName: string;
     serverId: string;
     maxSessions?: unknown;
@@ -998,6 +1032,18 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches: z.ZodCatch<z.ZodOptional<z.ZodArray<z.ZodString, "many">>>;
             agentAllowForcePush: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
             agentAllowDestructiveGit: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
+            /**
+             * #418: may the agent read and write OUTSIDE the project folder?
+             *
+             * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above, and
+             * safe here for the same reason as `agentPushBan` — though the polarity
+             * runs the other way. `policy.ts` resolves this one with `=== true`, so a
+             * value this schema throws away leaves the session confined to its folder:
+             * strictly more restricted, never less. Rubbish in this field therefore
+             * costs a project its permission, which is the direction a dropped value is
+             * allowed to fail in.
+             */
+            agentAllowOutsideFolder: z.ZodCatch<z.ZodOptional<z.ZodBoolean>>;
             budgetUsd: z.ZodNullable<z.ZodNumber>;
             budgetMinutes: z.ZodNullable<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
@@ -1013,6 +1059,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: string[] | undefined;
             agentAllowForcePush?: boolean | undefined;
             agentAllowDestructiveGit?: boolean | undefined;
+            agentAllowOutsideFolder?: boolean | undefined;
         }, {
             path: string;
             id: string;
@@ -1026,6 +1073,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: unknown;
             agentAllowForcePush?: unknown;
             agentAllowDestructiveGit?: unknown;
+            agentAllowOutsideFolder?: unknown;
         }>;
         /**
          * «Run this one without the project's agent prompt.» Absent means no — both
@@ -1133,6 +1181,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: string[] | undefined;
             agentAllowForcePush?: boolean | undefined;
             agentAllowDestructiveGit?: boolean | undefined;
+            agentAllowOutsideFolder?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -1175,6 +1224,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: unknown;
             agentAllowForcePush?: unknown;
             agentAllowDestructiveGit?: unknown;
+            agentAllowOutsideFolder?: unknown;
         };
         tickets: {
             number: number;
@@ -1230,6 +1280,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: string[] | undefined;
             agentAllowForcePush?: boolean | undefined;
             agentAllowDestructiveGit?: boolean | undefined;
+            agentAllowOutsideFolder?: boolean | undefined;
         };
         tickets: {
             number: number;
@@ -1275,6 +1326,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
             agentProtectedBranches?: unknown;
             agentAllowForcePush?: unknown;
             agentAllowDestructiveGit?: unknown;
+            agentAllowOutsideFolder?: unknown;
         };
         tickets: {
             number: number;
@@ -1457,6 +1509,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     agentProtectedBranches: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     agentAllowForcePush: z.ZodOptional<z.ZodBoolean>;
     agentAllowDestructiveGit: z.ZodOptional<z.ZodBoolean>;
+    agentAllowOutsideFolder: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     type: "workspace_settings";
     workspaceId: string;
@@ -1466,6 +1519,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     agentProtectedBranches?: string[] | undefined;
     agentAllowForcePush?: boolean | undefined;
     agentAllowDestructiveGit?: boolean | undefined;
+    agentAllowOutsideFolder?: boolean | undefined;
 }, {
     type: "workspace_settings";
     workspaceId: string;
@@ -1475,6 +1529,7 @@ export declare const GatewayFrameSchema: z.ZodDiscriminatedUnion<"type", [z.ZodO
     agentProtectedBranches?: string[] | undefined;
     agentAllowForcePush?: boolean | undefined;
     agentAllowDestructiveGit?: boolean | undefined;
+    agentAllowOutsideFolder?: boolean | undefined;
 }>, z.ZodObject<{
     type: z.ZodLiteral<"session_settings">;
     sessionId: z.ZodString;

package/dist/protocol.js

@@ -151,6 +151,18 @@ export const SessionDescriptorSchema = z.object({
             .catch(undefined),
         agentAllowForcePush: z.boolean().optional().catch(undefined),
         agentAllowDestructiveGit: z.boolean().optional().catch(undefined),
+        /**
+         * #418: may the agent read and write OUTSIDE the project folder?
+         *
+         * `.optional().catch(undefined)` for the QA-100 MAJOR-1 reason above, and
+         * safe here for the same reason as `agentPushBan` — though the polarity
+         * runs the other way. `policy.ts` resolves this one with `=== true`, so a
+         * value this schema throws away leaves the session confined to its folder:
+         * strictly more restricted, never less. Rubbish in this field therefore
+         * costs a project its permission, which is the direction a dropped value is
+         * allowed to fail in.
+         */
+        agentAllowOutsideFolder: z.boolean().optional().catch(undefined),
         budgetUsd: z.number().nullable(),
         budgetMinutes: z.number().nullable(),
     }),
@@ -391,6 +403,9 @@ export const GatewayFrameSchema = z.discriminatedUnion('type', [
             .optional(),
         agentAllowForcePush: z.boolean().optional(),
         agentAllowDestructiveGit: z.boolean().optional(),
+        // #418 — read on every file tool call, so it belongs in the live frame with
+        // its neighbours: switching it back off must not mean stopping the agent.
+        agentAllowOutsideFolder: z.boolean().optional(),
     }),
     z.object({
         type: z.literal('session_settings'),

package/dist/supervisor.js

@@ -67,6 +67,12 @@ function gitPolicyOf(descriptor) {
         ...(w.agentAllowDestructiveGit !== undefined
             ? { agentAllowDestructiveGit: w.agentAllowDestructiveGit }
             : {}),
+        // #418 — «may the agent work outside the project folder». Not a git
+        // question; it rides in this object because the object is the pipe (plan
+        // R8, and the comment on `AgentGitPolicy` in `policy.ts`).
+        ...(w.agentAllowOutsideFolder !== undefined
+            ? { agentAllowOutsideFolder: w.agentAllowOutsideFolder }
+            : {}),
     };
 }
 function freshLevels() {
@@ -1759,7 +1765,11 @@ export class Supervisor {
                     const policyChanged = frame.agentPushBan !== undefined ||
                         frame.agentProtectedBranches !== undefined ||
                         frame.agentAllowForcePush !== undefined ||
-                        frame.agentAllowDestructiveGit !== undefined;
+                        frame.agentAllowDestructiveGit !== undefined ||
+                        // #418 travels in the same frame and the same object: it is read on
+                        // every file tool call, so taking the permission away has to reach
+                        // a running agent without stopping it.
+                        frame.agentAllowOutsideFolder !== undefined;
                     if (policyChanged) {
                         const next = {
                             ...(frame.agentPushBan !== undefined ? { agentPushBan: frame.agentPushBan } : {}),
@@ -1772,6 +1782,9 @@ export class Supervisor {
                             ...(frame.agentAllowDestructiveGit !== undefined
                                 ? { agentAllowDestructiveGit: frame.agentAllowDestructiveGit }
                                 : {}),
+                            ...(frame.agentAllowOutsideFolder !== undefined
+                                ? { agentAllowOutsideFolder: frame.agentAllowOutsideFolder }
+                                : {}),
                         };
                         Object.assign(running.descriptor.workspace, next);
                     }

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const RUNNER_VERSION = "0.61.0";
+export declare const RUNNER_VERSION = "0.63.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,3 +1,3 @@
 // Kept in sync with package.json by the release script (manual for now).
-export const RUNNER_VERSION = '0.61.0';
+export const RUNNER_VERSION = '0.63.0';
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bridge4dev/runner",
-  "version": "0.61.0",
+  "version": "0.63.0",
   "description": "DevBridge dev runner — connects a dev server to DevBridge and runs agent sessions (Claude Code / Codex)",
   "homepage": "https://bridge4.dev",
   "license": "MIT",