@cabane/companion 0.6.46 → 0.6.48

package/dist/cli.js

@@ -149,6 +149,7 @@ var runPrepareHook = (hook, input) => {
           CABANE_AGENT_ID: input.agentId,
           CABANE_AGENT_USERNAME: input.agentUsername,
           CABANE_RUNTIME: input.runtime ?? "",
+          CABANE_HOST_ACCESS: input.hostAccess ? "1" : "0",
           // CT319: the conversation anchor is gone. These are kept as DEPRECATED
           // back-compat constants so an old user prepare script that still reads
           // them doesn't crash; a hook should key off CABANE_TRIGGER_ENTRY_PATHS.
@@ -823,6 +824,7 @@ var HARNESS_LABELS = {
 };
 var LABELS = HARNESS_LABELS;
 var OFFER_ORDER = ["claude-code", "codex", "opencode"];
+var DEFAULT_OPENCODE_SERVER_URL = "http://127.0.0.1:4096";
 function parseHarnessRuntime(raw) {
   const key = raw.trim().toLowerCase().replace(/[\s_]+/g, "-");
   if (key === "claude-code" || key === "claudecode" || key === "claude") return "claude-code";
@@ -941,6 +943,15 @@ function deriveOpencode(signals, manifestHas) {
       enable: null
     };
   }
+  if (signals.opencodeReachable && signals.opencodeDetectedUrl) {
+    return {
+      ...base,
+      state: "detected_not_exposed",
+      version: signals.opencodeVersion,
+      detail: signals.opencodeDetectedUrl,
+      enable: "opencode"
+    };
+  }
   return {
     ...base,
     state: "not_detected",
@@ -950,17 +961,32 @@ function deriveOpencode(signals, manifestHas) {
   };
 }
 var PROBE_TIMEOUT_MS = 4e3;
+var DEFAULT_OPENCODE_PROBE_TIMEOUT_MS = 1e3;
+function probeDefaultOpencodeVersion(probeOpencode = (url) => probeOpencodeVersion(url)) {
+  return withTimeout(
+    probeOpencode(DEFAULT_OPENCODE_SERVER_URL),
+    null,
+    DEFAULT_OPENCODE_PROBE_TIMEOUT_MS
+  );
+}
+async function resolveOpencodeServerUrl(configuredServerUrl, requestedServerUrl, probeDefault = probeDefaultOpencodeVersion) {
+  const requested = requestedServerUrl?.trim();
+  if (requested) return requested;
+  if (configuredServerUrl) return configuredServerUrl;
+  return await probeDefault() !== null ? DEFAULT_OPENCODE_SERVER_URL : null;
+}
 async function probeHarnessSignals(cfg, deps = {}) {
   const probeClaudePresence = deps.probeClaudePresence ?? claudeOnPath;
   const probeClaudeVersion = deps.probeClaudeVersion ?? (() => probeCliVersion("claude"));
   const probeCodexVersion = deps.probeCodexVersion ?? (() => probeCliVersion("codex"));
   const probeOpencode = deps.probeOpencode ?? ((url) => probeOpencodeVersion(url));
-  const serverUrl = cfg.opencode?.serverUrl;
+  const configuredServerUrl = cfg.opencode?.serverUrl;
+  const opencodeProbeUrl = configuredServerUrl ?? DEFAULT_OPENCODE_SERVER_URL;
   const [claudeOnPathResult, claudeVersion, codexVersion, opencodeVersion] = await Promise.all([
     withTimeout(probeClaudePresence(), false),
     withTimeout(probeClaudeVersion(), null),
     withTimeout(probeCodexVersion(), null),
-    serverUrl ? withTimeout(probeOpencode(serverUrl), null) : Promise.resolve(null)
+    configuredServerUrl ? withTimeout(probeOpencode(opencodeProbeUrl), null) : probeDefaultOpencodeVersion(probeOpencode)
   ]);
   return {
     claudeOnPath: claudeOnPathResult,
@@ -973,13 +999,14 @@ async function probeHarnessSignals(cfg, deps = {}) {
     codexOnPath: codexVersion !== null,
     codexVersion,
     codexEnabled: isCodexEnabled(cfg),
-    opencodeConfigured: !!serverUrl,
+    opencodeConfigured: !!configuredServerUrl,
     // A version came back ⟺ the serve answered its health endpoint (CT584).
     opencodeReachable: opencodeVersion !== null,
-    opencodeVersion
+    opencodeVersion,
+    opencodeDetectedUrl: opencodeVersion !== null ? opencodeProbeUrl : null
   };
 }
-function withTimeout(promise, fallback) {
+function withTimeout(promise, fallback, timeoutMs = PROBE_TIMEOUT_MS) {
   return new Promise((resolve) => {
     let settled = false;
     const done = (v) => {
@@ -988,7 +1015,7 @@ function withTimeout(promise, fallback) {
         resolve(v);
       }
     };
-    const timer = setTimeout(() => done(fallback), PROBE_TIMEOUT_MS);
+    const timer = setTimeout(() => done(fallback), timeoutMs);
     timer.unref?.();
     promise.then(
       (v) => {
@@ -1316,13 +1343,14 @@ async function connect2(raw, opts = {}) {
   if (runtime === "claude-code") next = { ...cfg, claudeCode: { enabled: true } };
   else if (runtime === "codex") next = { ...cfg, codex: { enabled: true } };
   else {
-    const serverUrl = opts.serverUrl?.trim();
+    const requestedServerUrl = opts.serverUrl?.trim();
+    const serverUrl = await resolveOpencodeServerUrl(void 0, requestedServerUrl);
     if (!serverUrl) {
       throw new CompanionError(
         "opencode is addressed by URL \u2014 pass it: `cabane-companion connect opencode --url http://127.0.0.1:4096`."
       );
     }
-    if (await probeOpencodeVersion(serverUrl) === null) {
+    if (requestedServerUrl && await probeOpencodeVersion(serverUrl) === null) {
       throw new CompanionError(
         `Couldn\u2019t reach an opencode server at ${serverUrl}. Start \`opencode serve\` and check the URL.`
       );
@@ -5750,7 +5778,8 @@ var ENV_ENVELOPE_KEYS = [
   "CABANE_PLAYGROUND_BIN",
   "CABANE_CONVERSATION_ID",
   "CABANE_AGENT_ID",
-  "CABANE_CONVERSATION_TITLE"
+  "CABANE_CONVERSATION_TITLE",
+  "CABANE_HOST_ACCESS"
 ];
 function buildRunSpec2(req, resumeThreadId, instructionsFile = null, threadPromptFingerprint = null) {
   const { policy, config } = req;
@@ -7834,6 +7863,7 @@ var Dispatcher = class {
               agentId: payload.agentId,
               agentUsername: this.opts.agentUsername,
               runtime: turnContext.runtime,
+              hostAccess: turnContext.policy.hostFs,
               triggerEntryPaths: turnContext.conversation.triggerEntryPaths ?? [],
               title: turnContext.conversation.title,
               messageBody: message.body,
@@ -7895,6 +7925,7 @@ ${reason}`,
             agentId: payload.agentId,
             agentUsername: this.opts.agentUsername,
             runtime: turnContext.runtime,
+            hostAccess: turnContext.policy.hostFs,
             // CT317/CT319: the trigger message's referenced-entry paths — what the
             // tasker prepare hook keys its per-task env off. Defaults to `[]` for
             // an older API. The conversation anchor is gone (CT319).
@@ -7938,7 +7969,10 @@ ${reason}`,
         }
       }
     }
-    const turnEnv = hookEnv;
+    const turnEnv = {
+      ...hookEnv,
+      CABANE_HOST_ACCESS: turnContext.policy.hostFs ? "1" : "0"
+    };
     const key = runKey(payload.conversationId, payload.agentId);
     const abortController = new AbortController();
     this.aborts.set(key, abortController);
@@ -8001,9 +8035,8 @@ ${reason}`,
       ...turnContext.turnToken ? { turnToken: turnContext.turnToken } : {},
       // SJ524: the hook-resolved cwd overrides the static local cwd.
       ...effectiveCwd ? { cwd: effectiveCwd } : {},
-      // CT804: `turnEnv` = the prepare-hook env plus the per-turn checkout-local
-      // TMPDIR (falls back to `hookEnv` when no cwd was resolved).
-      ...turnEnv ? { env: turnEnv } : {},
+      // CT1103: the prepare-hook env plus the authoritative host-access token.
+      env: turnEnv,
       mcpServers: resolvedMcpServers,
       summonServer,
       // CT238: this turn's conversation, forwarded as the active-conversation
@@ -10056,11 +10089,13 @@ async function createCompanionRuntime(opts = {}) {
   });
   await supervisor.start();
   const connectHarness = async (runtime, serverUrl) => {
-    const candidate = runtime === "opencode" ? { ...supervisor.currentConfig(), opencode: { serverUrl: serverUrl ?? "" } } : supervisor.currentConfig();
+    const currentConfig = supervisor.currentConfig();
+    const resolvedServerUrl = runtime === "opencode" ? await resolveOpencodeServerUrl(currentConfig.opencode?.serverUrl, serverUrl) : null;
+    const candidate = runtime === "opencode" ? { ...currentConfig, opencode: { serverUrl: resolvedServerUrl ?? "" } } : currentConfig;
     const verdict = await shakeOutHarness(runtime, candidate);
     if (verdict === "absent") return { ok: false, error: absentLine(runtime) };
     const result = await supervisor.enableHarness(
-      runtime === "opencode" ? { runtime: "opencode", serverUrl: serverUrl ?? "" } : { runtime }
+      runtime === "opencode" ? { runtime: "opencode", serverUrl: resolvedServerUrl ?? "" } : { runtime }
     );
     if (!result.ok) return { ok: false, error: result.error };
     return { ok: true, message: connectedLine(runtime, verdict) };
@@ -10330,17 +10365,22 @@ function reportAlreadyRunning(pid) {
   write("Connect a harness to the running companion: cabane-companion connect claude-code");
 }
 async function collectHarnessChoices(interactive) {
-  const opencodeUrl = "http://127.0.0.1:4096";
   const [claudePresent, claudeVersion, codexVersion, opencodeVersion] = await Promise.all([
     claudeOnPath().catch(() => false),
     probeCliVersion("claude").catch(() => null),
     probeCliVersion("codex").catch(() => null),
-    probeOpencodeVersion(opencodeUrl).catch(() => null)
+    probeDefaultOpencodeVersion()
   ]);
   const found = [
     ...claudePresent ? [{ runtime: "claude-code", version: claudeVersion }] : [],
     ...codexVersion ? [{ runtime: "codex", version: codexVersion }] : [],
-    ...opencodeVersion ? [{ runtime: "opencode", version: opencodeVersion, serverUrl: opencodeUrl }] : []
+    ...opencodeVersion ? [
+      {
+        runtime: "opencode",
+        version: opencodeVersion,
+        serverUrl: DEFAULT_OPENCODE_SERVER_URL
+      }
+    ] : []
   ].sort((a, b) => OFFER_ORDER.indexOf(a.runtime) - OFFER_ORDER.indexOf(b.runtime));
   if (found.length === 0) {
     write(

package/dist/runtime.js

@@ -141,6 +141,7 @@ var runPrepareHook = (hook, input) => {
           CABANE_AGENT_ID: input.agentId,
           CABANE_AGENT_USERNAME: input.agentUsername,
           CABANE_RUNTIME: input.runtime ?? "",
+          CABANE_HOST_ACCESS: input.hostAccess ? "1" : "0",
           // CT319: the conversation anchor is gone. These are kept as DEPRECATED
           // back-compat constants so an old user prepare script that still reads
           // them doesn't crash; a hook should key off CABANE_TRIGGER_ENTRY_PATHS.
@@ -1300,6 +1301,7 @@ var HARNESS_LABELS = {
   opencode: "OpenCode"
 };
 var LABELS = HARNESS_LABELS;
+var DEFAULT_OPENCODE_SERVER_URL = "http://127.0.0.1:4096";
 function deriveHarnessSnapshot(signals) {
   const advertised = new Set(
     buildCompanionManifest({
@@ -1411,6 +1413,15 @@ function deriveOpencode(signals, manifestHas) {
       enable: null
     };
   }
+  if (signals.opencodeReachable && signals.opencodeDetectedUrl) {
+    return {
+      ...base,
+      state: "detected_not_exposed",
+      version: signals.opencodeVersion,
+      detail: signals.opencodeDetectedUrl,
+      enable: "opencode"
+    };
+  }
   return {
     ...base,
     state: "not_detected",
@@ -1420,17 +1431,32 @@ function deriveOpencode(signals, manifestHas) {
   };
 }
 var PROBE_TIMEOUT_MS = 4e3;
+var DEFAULT_OPENCODE_PROBE_TIMEOUT_MS = 1e3;
+function probeDefaultOpencodeVersion(probeOpencode = (url) => probeOpencodeVersion(url)) {
+  return withTimeout(
+    probeOpencode(DEFAULT_OPENCODE_SERVER_URL),
+    null,
+    DEFAULT_OPENCODE_PROBE_TIMEOUT_MS
+  );
+}
+async function resolveOpencodeServerUrl(configuredServerUrl, requestedServerUrl, probeDefault = probeDefaultOpencodeVersion) {
+  const requested = requestedServerUrl?.trim();
+  if (requested) return requested;
+  if (configuredServerUrl) return configuredServerUrl;
+  return await probeDefault() !== null ? DEFAULT_OPENCODE_SERVER_URL : null;
+}
 async function probeHarnessSignals(cfg, deps = {}) {
   const probeClaudePresence = deps.probeClaudePresence ?? claudeOnPath;
   const probeClaudeVersion = deps.probeClaudeVersion ?? (() => probeCliVersion("claude"));
   const probeCodexVersion = deps.probeCodexVersion ?? (() => probeCliVersion("codex"));
   const probeOpencode = deps.probeOpencode ?? ((url) => probeOpencodeVersion(url));
-  const serverUrl = cfg.opencode?.serverUrl;
+  const configuredServerUrl = cfg.opencode?.serverUrl;
+  const opencodeProbeUrl = configuredServerUrl ?? DEFAULT_OPENCODE_SERVER_URL;
   const [claudeOnPathResult, claudeVersion, codexVersion, opencodeVersion] = await Promise.all([
     withTimeout(probeClaudePresence(), false),
     withTimeout(probeClaudeVersion(), null),
     withTimeout(probeCodexVersion(), null),
-    serverUrl ? withTimeout(probeOpencode(serverUrl), null) : Promise.resolve(null)
+    configuredServerUrl ? withTimeout(probeOpencode(opencodeProbeUrl), null) : probeDefaultOpencodeVersion(probeOpencode)
   ]);
   return {
     claudeOnPath: claudeOnPathResult,
@@ -1443,13 +1469,14 @@ async function probeHarnessSignals(cfg, deps = {}) {
     codexOnPath: codexVersion !== null,
     codexVersion,
     codexEnabled: isCodexEnabled(cfg),
-    opencodeConfigured: !!serverUrl,
+    opencodeConfigured: !!configuredServerUrl,
     // A version came back ⟺ the serve answered its health endpoint (CT584).
     opencodeReachable: opencodeVersion !== null,
-    opencodeVersion
+    opencodeVersion,
+    opencodeDetectedUrl: opencodeVersion !== null ? opencodeProbeUrl : null
   };
 }
-function withTimeout(promise, fallback) {
+function withTimeout(promise, fallback, timeoutMs = PROBE_TIMEOUT_MS) {
   return new Promise((resolve) => {
     let settled = false;
     const done = (v) => {
@@ -1458,7 +1485,7 @@ function withTimeout(promise, fallback) {
         resolve(v);
       }
     };
-    const timer = setTimeout(() => done(fallback), PROBE_TIMEOUT_MS);
+    const timer = setTimeout(() => done(fallback), timeoutMs);
     timer.unref?.();
     promise.then(
       (v) => {
@@ -5259,7 +5286,8 @@ var ENV_ENVELOPE_KEYS = [
   "CABANE_PLAYGROUND_BIN",
   "CABANE_CONVERSATION_ID",
   "CABANE_AGENT_ID",
-  "CABANE_CONVERSATION_TITLE"
+  "CABANE_CONVERSATION_TITLE",
+  "CABANE_HOST_ACCESS"
 ];
 function buildRunSpec2(req, resumeThreadId, instructionsFile = null, threadPromptFingerprint = null) {
   const { policy, config } = req;
@@ -7343,6 +7371,7 @@ var Dispatcher = class {
               agentId: payload.agentId,
               agentUsername: this.opts.agentUsername,
               runtime: turnContext.runtime,
+              hostAccess: turnContext.policy.hostFs,
               triggerEntryPaths: turnContext.conversation.triggerEntryPaths ?? [],
               title: turnContext.conversation.title,
               messageBody: message.body,
@@ -7404,6 +7433,7 @@ ${reason}`,
             agentId: payload.agentId,
             agentUsername: this.opts.agentUsername,
             runtime: turnContext.runtime,
+            hostAccess: turnContext.policy.hostFs,
             // CT317/CT319: the trigger message's referenced-entry paths — what the
             // tasker prepare hook keys its per-task env off. Defaults to `[]` for
             // an older API. The conversation anchor is gone (CT319).
@@ -7447,7 +7477,10 @@ ${reason}`,
         }
       }
     }
-    const turnEnv = hookEnv;
+    const turnEnv = {
+      ...hookEnv,
+      CABANE_HOST_ACCESS: turnContext.policy.hostFs ? "1" : "0"
+    };
     const key = runKey(payload.conversationId, payload.agentId);
     const abortController = new AbortController();
     this.aborts.set(key, abortController);
@@ -7510,9 +7543,8 @@ ${reason}`,
       ...turnContext.turnToken ? { turnToken: turnContext.turnToken } : {},
       // SJ524: the hook-resolved cwd overrides the static local cwd.
       ...effectiveCwd ? { cwd: effectiveCwd } : {},
-      // CT804: `turnEnv` = the prepare-hook env plus the per-turn checkout-local
-      // TMPDIR (falls back to `hookEnv` when no cwd was resolved).
-      ...turnEnv ? { env: turnEnv } : {},
+      // CT1103: the prepare-hook env plus the authoritative host-access token.
+      env: turnEnv,
       mcpServers: resolvedMcpServers,
       summonServer,
       // CT238: this turn's conversation, forwarded as the active-conversation
@@ -9565,11 +9597,13 @@ async function createCompanionRuntime(opts = {}) {
   });
   await supervisor.start();
   const connectHarness = async (runtime, serverUrl) => {
-    const candidate = runtime === "opencode" ? { ...supervisor.currentConfig(), opencode: { serverUrl: serverUrl ?? "" } } : supervisor.currentConfig();
+    const currentConfig = supervisor.currentConfig();
+    const resolvedServerUrl = runtime === "opencode" ? await resolveOpencodeServerUrl(currentConfig.opencode?.serverUrl, serverUrl) : null;
+    const candidate = runtime === "opencode" ? { ...currentConfig, opencode: { serverUrl: resolvedServerUrl ?? "" } } : currentConfig;
     const verdict = await shakeOutHarness(runtime, candidate);
     if (verdict === "absent") return { ok: false, error: absentLine(runtime) };
     const result = await supervisor.enableHarness(
-      runtime === "opencode" ? { runtime: "opencode", serverUrl: serverUrl ?? "" } : { runtime }
+      runtime === "opencode" ? { runtime: "opencode", serverUrl: resolvedServerUrl ?? "" } : { runtime }
     );
     if (!result.ok) return { ok: false, error: result.error };
     return { ok: true, message: connectedLine(runtime, verdict) };

package/dist/static/app.js

@@ -158,6 +158,7 @@ function renderHarnesses() {
       const input = el('input');
       input.type = 'text';
       input.placeholder = 'opencode serve URL (e.g. http://127.0.0.1:4096)';
+      if (h.state === 'detected_not_exposed') input.value = h.detail;
       const btn = el('button', 'primary small', 'Add opencode');
       const submit = () => {
         const url = input.value.trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.46",
+  "version": "0.6.48",
   "type": "module",
   "description": "The Cabane Companion (headless): connect a coding agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",