@cabane/companion 0.6.47 → 0.6.48

package/dist/cli.js

@@ -149,6 +149,7 @@ var runPrepareHook = (hook, input) => {
           CABANE_AGENT_ID: input.agentId,
           CABANE_AGENT_USERNAME: input.agentUsername,
           CABANE_RUNTIME: input.runtime ?? "",
+          CABANE_HOST_ACCESS: input.hostAccess ? "1" : "0",
           // CT319: the conversation anchor is gone. These are kept as DEPRECATED
           // back-compat constants so an old user prepare script that still reads
           // them doesn't crash; a hook should key off CABANE_TRIGGER_ENTRY_PATHS.
@@ -5777,7 +5778,8 @@ var ENV_ENVELOPE_KEYS = [
   "CABANE_PLAYGROUND_BIN",
   "CABANE_CONVERSATION_ID",
   "CABANE_AGENT_ID",
-  "CABANE_CONVERSATION_TITLE"
+  "CABANE_CONVERSATION_TITLE",
+  "CABANE_HOST_ACCESS"
 ];
 function buildRunSpec2(req, resumeThreadId, instructionsFile = null, threadPromptFingerprint = null) {
   const { policy, config } = req;
@@ -7861,6 +7863,7 @@ var Dispatcher = class {
               agentId: payload.agentId,
               agentUsername: this.opts.agentUsername,
               runtime: turnContext.runtime,
+              hostAccess: turnContext.policy.hostFs,
               triggerEntryPaths: turnContext.conversation.triggerEntryPaths ?? [],
               title: turnContext.conversation.title,
               messageBody: message.body,
@@ -7922,6 +7925,7 @@ ${reason}`,
             agentId: payload.agentId,
             agentUsername: this.opts.agentUsername,
             runtime: turnContext.runtime,
+            hostAccess: turnContext.policy.hostFs,
             // CT317/CT319: the trigger message's referenced-entry paths — what the
             // tasker prepare hook keys its per-task env off. Defaults to `[]` for
             // an older API. The conversation anchor is gone (CT319).
@@ -7965,7 +7969,10 @@ ${reason}`,
         }
       }
     }
-    const turnEnv = hookEnv;
+    const turnEnv = {
+      ...hookEnv,
+      CABANE_HOST_ACCESS: turnContext.policy.hostFs ? "1" : "0"
+    };
     const key = runKey(payload.conversationId, payload.agentId);
     const abortController = new AbortController();
     this.aborts.set(key, abortController);
@@ -8028,9 +8035,8 @@ ${reason}`,
       ...turnContext.turnToken ? { turnToken: turnContext.turnToken } : {},
       // SJ524: the hook-resolved cwd overrides the static local cwd.
       ...effectiveCwd ? { cwd: effectiveCwd } : {},
-      // CT804: `turnEnv` = the prepare-hook env plus the per-turn checkout-local
-      // TMPDIR (falls back to `hookEnv` when no cwd was resolved).
-      ...turnEnv ? { env: turnEnv } : {},
+      // CT1103: the prepare-hook env plus the authoritative host-access token.
+      env: turnEnv,
       mcpServers: resolvedMcpServers,
       summonServer,
       // CT238: this turn's conversation, forwarded as the active-conversation

package/dist/runtime.js

@@ -141,6 +141,7 @@ var runPrepareHook = (hook, input) => {
           CABANE_AGENT_ID: input.agentId,
           CABANE_AGENT_USERNAME: input.agentUsername,
           CABANE_RUNTIME: input.runtime ?? "",
+          CABANE_HOST_ACCESS: input.hostAccess ? "1" : "0",
           // CT319: the conversation anchor is gone. These are kept as DEPRECATED
           // back-compat constants so an old user prepare script that still reads
           // them doesn't crash; a hook should key off CABANE_TRIGGER_ENTRY_PATHS.
@@ -5285,7 +5286,8 @@ var ENV_ENVELOPE_KEYS = [
   "CABANE_PLAYGROUND_BIN",
   "CABANE_CONVERSATION_ID",
   "CABANE_AGENT_ID",
-  "CABANE_CONVERSATION_TITLE"
+  "CABANE_CONVERSATION_TITLE",
+  "CABANE_HOST_ACCESS"
 ];
 function buildRunSpec2(req, resumeThreadId, instructionsFile = null, threadPromptFingerprint = null) {
   const { policy, config } = req;
@@ -7369,6 +7371,7 @@ var Dispatcher = class {
               agentId: payload.agentId,
               agentUsername: this.opts.agentUsername,
               runtime: turnContext.runtime,
+              hostAccess: turnContext.policy.hostFs,
               triggerEntryPaths: turnContext.conversation.triggerEntryPaths ?? [],
               title: turnContext.conversation.title,
               messageBody: message.body,
@@ -7430,6 +7433,7 @@ ${reason}`,
             agentId: payload.agentId,
             agentUsername: this.opts.agentUsername,
             runtime: turnContext.runtime,
+            hostAccess: turnContext.policy.hostFs,
             // CT317/CT319: the trigger message's referenced-entry paths — what the
             // tasker prepare hook keys its per-task env off. Defaults to `[]` for
             // an older API. The conversation anchor is gone (CT319).
@@ -7473,7 +7477,10 @@ ${reason}`,
         }
       }
     }
-    const turnEnv = hookEnv;
+    const turnEnv = {
+      ...hookEnv,
+      CABANE_HOST_ACCESS: turnContext.policy.hostFs ? "1" : "0"
+    };
     const key = runKey(payload.conversationId, payload.agentId);
     const abortController = new AbortController();
     this.aborts.set(key, abortController);
@@ -7536,9 +7543,8 @@ ${reason}`,
       ...turnContext.turnToken ? { turnToken: turnContext.turnToken } : {},
       // SJ524: the hook-resolved cwd overrides the static local cwd.
       ...effectiveCwd ? { cwd: effectiveCwd } : {},
-      // CT804: `turnEnv` = the prepare-hook env plus the per-turn checkout-local
-      // TMPDIR (falls back to `hookEnv` when no cwd was resolved).
-      ...turnEnv ? { env: turnEnv } : {},
+      // CT1103: the prepare-hook env plus the authoritative host-access token.
+      env: turnEnv,
       mcpServers: resolvedMcpServers,
       summonServer,
       // CT238: this turn's conversation, forwarded as the active-conversation

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cabane/companion",
-  "version": "0.6.47",
+  "version": "0.6.48",
   "type": "module",
   "description": "The Cabane Companion (headless): connect a coding agent on your machine to your Cabane workspace as a responder — drive work against your own codebase, files, and MCP servers without putting any of it in Cabane.",
   "license": "UNLICENSED",