@clipboard-health/groundcrew 4.47.6 → 4.48.1

package/README.md

@@ -159,6 +159,7 @@ There is no `linear` config block. Groundcrew reads `GROUNDCREW_LINEAR_API_KEY`
 - [Runners](./docs/runners.md): Safehouse, Docker Sandboxes, and the `none` escape hatch.
 - [Credentials](./docs/credentials.md): Linear API keys, 1Password, build secrets, and `preLaunch`.
 - [Prepare worktree hooks](./docs/setup-hooks.md): `.groundcrew/config.json` `hooks.prepareWorktree` for per-repo dependency setup.
+- [Operator host setup](./docs/setup-hooks.md#unsandboxedhooks-operator-only-host-setup): `crew.config.ts` `knownRepositories[].unsandboxedHooks.prepareWorktree` runs trusted, per-repo setup on the host outside the sandbox.
 - [Task sources](./docs/task-sources.md): custom shell/Jira/local-plan adapters.
 - [Development](./docs/development.md): local source workflow and README/demo asset regeneration.
 - [Troubleshooting](./docs/troubleshooting.md): common operational pitfalls and fixes.

package/crew.config.example.ts

@@ -131,7 +131,7 @@ export default {
   //     // Install via task-sources/jira (see task-sources/jira/README.md):
   //     //   cp task-sources/jira/jira.sh ~/.config/groundcrew/jira.sh
   //     // Open local task-store directories for read/write inside the
-  //     // safehouse/srt sandbox when this source owns the launched task.
+  //     // safehouse sandbox when this source owns the launched task.
   //     sandboxWritePaths: ["~/plans"],
   //     commands: {
   //       verify: "~/.config/groundcrew/jira.sh verify",
@@ -179,7 +179,7 @@ export default {
   // // deny-by-default policy. Examples: `agent-browser` so the
   // // chrome-devtools MCP server can drive a headless Chrome;
   // // `browser-native-messaging` for `claude --chrome`. Ignored by the
-  // // srt/sdx/none runners.
+  // // sdx/none runners.
   // local: { safehouse: { enable: ["agent-browser"] } },
   //
   // // Groundcrew does not create or authenticate sdx sandboxes. For an sdx

package/dist/commands/doctor.js

@@ -343,22 +343,6 @@ function localCapabilityCheck(host, resolved) {
                 : "sdx runner requires `sbx` (Docker Sandboxes) on PATH (install from https://docs.docker.com/ai/sandboxes/)",
         };
     }
-    if (resolved === "srt") {
-        const missingLinuxDeps = host.isLinux
-            ? [
-                host.hasBubblewrap ? undefined : "bubblewrap",
-                host.hasSocat ? undefined : "socat",
-                host.hasRipgrep ? undefined : "ripgrep (rg)",
-            ].filter((name) => name !== undefined)
-            : [];
-        const ok = host.isSrtSupported && missingLinuxDeps.length === 0;
-        return {
-            name: "local runner (srt)",
-            ok,
-            required: false,
-            hint: srtRunnerHint(ok, host.isSrtSupported, missingLinuxDeps),
-        };
-    }
     // resolved === "none"
     return {
         name: "local runner (none)",
@@ -367,15 +351,6 @@ function localCapabilityCheck(host, resolved) {
         hint: "WARNING: local.runner='none' — agent runs unsandboxed on the host. Only use this when you understand the implications.",
     };
 }
-function srtRunnerHint(ok, isSrtSupported, missingLinuxDeps) {
-    if (ok) {
-        return "ready (beta: @anthropic-ai/sandbox-runtime is a research preview)";
-    }
-    if (!isSrtSupported) {
-        return "srt runner requires macOS or Linux/WSL";
-    }
-    return `srt runner on Linux requires ${missingLinuxDeps.join(", ")} on PATH (Debian/Ubuntu: \`apt install bubblewrap socat ripgrep\`; on Ubuntu 24.04+ also \`sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0\`)`;
-}
 function reportLocalCapability(arguments_) {
     writeOutput();
     writeOutput("Local runner");

package/dist/commands/openWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/openWorkspace.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiC,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAetF,UAAU,gBAAgB;IACxB,IAAI,EAAE,IAAI,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,gBAAgB,GAAG,WAAW,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AA6JD,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA8Gf;AA4ID,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAE3E;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAIpE"}
+{"version":3,"file":"openWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/openWorkspace.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiC,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgBtF,UAAU,gBAAgB;IACxB,IAAI,EAAE,IAAI,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,gBAAgB,GAAG,WAAW,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAwJD,wBAAsB,aAAa,CACjC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA2Hf;AA4ID,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAE3E;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAIpE"}

package/dist/commands/openWorkspace.js

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync, rmSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { composeAgentLaunch, openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
 import { inferAgentCommandName } from "../lib/launchCommand.js";
@@ -7,7 +7,7 @@ import { resolvePullRequest } from "../lib/pullRequests.js";
 import { resolvePrepareWorktreeCommand } from "../lib/repositoryHooks.js";
 import { recordRunState, readRunState } from "../lib/runState.js";
 import { seedLaunchWorkspaceTrust } from "../lib/seedLaunchWorkspaceTrust.js";
-import { stageBuildSecrets, stagePromptText, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
+import { removeStagedPrompt, stageBuildSecrets, stagePromptText, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
 import { normalizePlainTaskId } from "../lib/taskId.js";
 import { debug, errorMessage, log, okMark } from "../lib/util.js";
 import { failIfWorkspaceAlreadyLive } from "../lib/workspaceLiveness.js";
@@ -106,15 +106,11 @@ async function rollback(arguments_) {
     catch (error) {
         log(`Worktree teardown failed during rollback: ${errorMessage(error)}`);
     }
-    for (const dir of [arguments_.promptDir, arguments_.srtSettingsDir]) {
-        if (dir !== undefined) {
-            try {
-                rmSync(dir, { recursive: true, force: true });
-            }
-            catch {
-                // already gone
-            }
-        }
+    try {
+        removeStagedPrompt(arguments_.promptDir);
+    }
+    catch {
+        // already gone
     }
 }
 export async function openWorkspace(config, options) {
@@ -154,19 +150,27 @@ export async function openWorkspace(config, options) {
         task: target.task,
         text: options.promptText ?? "",
     });
-    let srtSettingsDir;
+    let cleanupAgentLaunch;
     try {
+        const repositoryEntry = config.workspace.repositories.find((entry) => entry.name === repository);
         const prepareWorktreeCommand = resolvePrepareWorktreeCommand({
             worktreeDir: launchDir,
+            // Spread-conditional: exactOptionalPropertyTypes forbids an explicit
+            // `undefined` for an optional field, and the lookup yields undefined for
+            // repos with no hooks. Mirrors setupWorkspace so `crew open` honors the
+            // same per-repo operator hooks as `crew setup`.
+            ...(repositoryEntry?.hooks === undefined ? {} : { perRepoHooks: repositoryEntry.hooks }),
             defaultHooks: config.defaults.hooks,
         });
-        const secretsFile = prepareWorktreeCommand === undefined ? undefined : stageBuildSecrets(stagedPrompt.directory);
+        const prepareWorktreeUnsandboxedCommand = repositoryEntry?.unsandboxedHooks?.prepareWorktree;
+        const secretsFile = prepareWorktreeCommand === undefined && prepareWorktreeUnsandboxedCommand === undefined
+            ? undefined
+            : stageBuildSecrets(stagedPrompt.directory);
         seedLaunchWorkspaceTrust({
             agentCommandName: inferAgentCommandName(definition.cmd),
             launchDir,
         });
-        let launchCommand;
-        ({ launchCommand, srtSettingsDir } = composeAgentLaunch({
+        const launch = composeAgentLaunch({
             runner,
             networkEgress,
             task: target.task,
@@ -176,12 +180,14 @@ export async function openWorkspace(config, options) {
             workingDir: launchDir,
             secretsFile,
             prepareWorktreeCommand,
+            prepareWorktreeUnsandboxedCommand,
             sandboxName,
             workspaceKind,
             readOnlyDirs: config.local.readOnlyDirs,
             omitPromptArgument,
-        }));
-        const launchCmd = stageWorkspaceLaunchCommand(stagedPrompt.directory, launchCommand);
+        });
+        cleanupAgentLaunch = launch.cleanup;
+        const launchCmd = stageWorkspaceLaunchCommand(stagedPrompt.directory, launch.command);
         await openAgentWorkspace({
             config,
             name: target.task,
@@ -193,7 +199,8 @@ export async function openWorkspace(config, options) {
         });
     }
     catch (error) {
-        await rollback({ config, entry: created, promptDir: stagedPrompt.directory, srtSettingsDir });
+        cleanupAgentLaunch?.();
+        await rollback({ config, entry: created, promptDir: stagedPrompt.directory });
         throw error;
     }
     recordRunState({

package/dist/commands/resumeWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoC,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAsBzF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAyKD,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAyGf;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}
+{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAoC,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAsBzF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAyKD,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAiGf;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}

package/dist/commands/resumeWorkspace.js

@@ -170,14 +170,9 @@ export async function resumeWorkspace(config, options) {
         text: renderResumePrompt(context),
     });
     const secretsFile = stageBuildSecrets(stagedPrompt.directory);
-    // Resume stages srt settings exactly like setup (a relocating agent such as
-    // codex needs its config home re-seeded to authenticate on the resumed launch).
-    // Composition runs inside the try so a pre-launch failure still cleans up the
-    // staged prompt (and any srt settings) dir.
-    let srtSettingsDir;
+    let cleanupAgentLaunch;
     try {
-        let launchCommand;
-        const taskSourceWritePaths = runner === "safehouse" || runner === "srt"
+        const taskSourceWritePaths = runner === "safehouse"
             ? taskSourceWritePathsForCompletion({
                 config,
                 taskId: context.completionTaskId,
@@ -188,7 +183,7 @@ export async function resumeWorkspace(config, options) {
             agentCommandName: inferAgentCommandName(launchDefinition.cmd),
             launchDir,
         });
-        ({ launchCommand, srtSettingsDir } = composeAgentLaunch({
+        const launch = composeAgentLaunch({
             runner,
             networkEgress,
             task,
@@ -206,8 +201,9 @@ export async function resumeWorkspace(config, options) {
             }),
             taskSourceWritePaths,
             safehouseEnableFeatures: config.local.safehouse.enable,
-        }));
-        const launchCmd = stageWorkspaceLaunchCommand(stagedPrompt.directory, launchCommand);
+        });
+        cleanupAgentLaunch = launch.cleanup;
+        const launchCmd = stageWorkspaceLaunchCommand(stagedPrompt.directory, launch.command);
         await openAgentWorkspace({
             config,
             name: task,
@@ -219,12 +215,8 @@ export async function resumeWorkspace(config, options) {
         });
     }
     catch (error) {
+        cleanupAgentLaunch?.();
         removeStagedPrompt(stagedPrompt.directory);
-        // The launch command tears down the settings dir after srt exits; on the
-        // pre-launch failure path it never ran, so clean it up here.
-        if (srtSettingsDir !== undefined) {
-            removeStagedPrompt(srtSettingsDir);
-        }
         throw error;
     }
     recordRunState({

package/dist/commands/setupWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AA0BnE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6FAA6F;IAC7F,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAuBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CAsJf;AA8MD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CAkDf"}
+{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AA2BnE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6FAA6F;IAC7F,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAuBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CA4Jf;AA2MD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/commands/setupWorkspace.js

@@ -1,4 +1,3 @@
-import { rmSync } from "node:fs";
 import { loadConfig } from "../lib/config.js";
 import { composeAgentLaunch, openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
 import { inferAgentCommandName, workerEnvironmentForTask } from "../lib/launchCommand.js";
@@ -8,7 +7,7 @@ import { resolvePrepareWorktreeCommand } from "../lib/repositoryHooks.js";
 import { recordRunState } from "../lib/runState.js";
 import { seedLaunchWorkspaceTrust } from "../lib/seedLaunchWorkspaceTrust.js";
 import { sourceSupportsMarkDone } from "../lib/sourceCapabilities.js";
-import { stageBuildSecrets, stagePromptFromTemplate, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
+import { removeStagedPrompt, stageBuildSecrets, stagePromptFromTemplate, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
 import { taskSourceWritePathsForCompletion } from "../lib/taskSourceFilesystem.js";
 import { naturalIdFromCanonical } from "../lib/taskSource.js";
 import { debug, errorMessage, log, okMark } from "../lib/util.js";
@@ -72,7 +71,7 @@ export async function setupWorkspace(config, options, runOptions = {}) {
     // Without rollback the next tick hits "Worktree already exists" and
     // the task strands forever.
     let promptDir;
-    let srtSettingsDir;
+    let cleanupAgentLaunch;
     try {
         await assertLaunchReady(readinessPromise);
         const taskDetails = options.details;
@@ -85,7 +84,9 @@ export async function setupWorkspace(config, options, runOptions = {}) {
             workspaceContinuationInstruction: renderWorkspaceContinuationInstruction(accessHint),
         });
         promptDir = stagedPrompt.directory;
-        const perRepoHooks = config.workspace.repositories.find((entry) => entry.name === repository)?.hooks;
+        const repositoryEntry = config.workspace.repositories.find((entry) => entry.name === repository);
+        const perRepoHooks = repositoryEntry?.hooks;
+        const prepareWorktreeUnsandboxedCommand = repositoryEntry?.unsandboxedHooks?.prepareWorktree;
         const prepareWorktreeCommand = resolvePrepareWorktreeCommand({
             worktreeDir: launchDir,
             // Spread-conditional rather than a direct assignment: under
@@ -94,10 +95,12 @@ export async function setupWorkspace(config, options, runOptions = {}) {
             ...(perRepoHooks === undefined ? {} : { perRepoHooks }),
             defaultHooks: config.defaults.hooks,
         });
-        const secretsFile = prepareWorktreeCommand === undefined ? undefined : stageBuildSecrets(promptDir);
+        const secretsFile = prepareWorktreeCommand === undefined && prepareWorktreeUnsandboxedCommand === undefined
+            ? undefined
+            : stageBuildSecrets(promptDir);
         const completionTaskId = options.completionTaskId ?? task;
         const completionMarkDoneSupported = options.completionMarkDoneSupported ?? true;
-        const taskSourceWritePaths = runner === "safehouse" || runner === "srt"
+        const taskSourceWritePaths = runner === "safehouse"
             ? taskSourceWritePathsForCompletion({
                 config,
                 taskId: completionTaskId,
@@ -108,7 +111,7 @@ export async function setupWorkspace(config, options, runOptions = {}) {
             agentCommandName: inferAgentCommandName(definition.cmd),
             launchDir,
         });
-        const { launchCommand, srtSettingsDir: stagedSrtSettingsDir } = composeAgentLaunch({
+        const launch = composeAgentLaunch({
             runner,
             networkEgress,
             task,
@@ -118,6 +121,7 @@ export async function setupWorkspace(config, options, runOptions = {}) {
             workingDir: launchDir,
             secretsFile,
             prepareWorktreeCommand,
+            prepareWorktreeUnsandboxedCommand,
             sandboxName,
             workspaceKind,
             readOnlyDirs: config.local.readOnlyDirs,
@@ -128,8 +132,8 @@ export async function setupWorkspace(config, options, runOptions = {}) {
             taskSourceWritePaths,
             safehouseEnableFeatures: config.local.safehouse.enable,
         });
-        srtSettingsDir = stagedSrtSettingsDir;
-        const launchCmd = stageWorkspaceLaunchCommand(promptDir, launchCommand);
+        cleanupAgentLaunch = launch.cleanup;
+        const launchCmd = stageWorkspaceLaunchCommand(promptDir, launch.command);
         debug("Opening workspace...");
         await openAgentWorkspace({
             config,
@@ -162,7 +166,8 @@ export async function setupWorkspace(config, options, runOptions = {}) {
         }
     }
     catch (error) {
-        await rollbackWorktree({ config, entry: created, promptDir, srtSettingsDir });
+        cleanupAgentLaunch?.();
+        await rollbackWorktree({ config, entry: created, promptDir });
         recordFailedToLaunch({ config, options, paths: { worktreeDir, branchName }, error });
         throw error;
     }
@@ -295,16 +300,14 @@ async function rollbackWorktree(arguments_) {
         log(`Worktree teardown failed during rollback: ${errorMessage(error)}`);
     }
     finally {
-        // Both temp dirs are normally removed by the launch command; clean them
-        // here for the pre-launch failure path. Silent on retry races.
-        for (const dir of [arguments_.promptDir, arguments_.srtSettingsDir]) {
-            if (dir !== undefined) {
-                try {
-                    rmSync(dir, { recursive: true, force: true });
-                }
-                catch {
-                    // already gone
-                }
+        // The prompt dir is normally removed by the launch command; clean it here
+        // for the pre-launch failure path. Silent on retry races.
+        if (arguments_.promptDir !== undefined) {
+            try {
+                removeStagedPrompt(arguments_.promptDir);
+            }
+            catch {
+                // already gone
             }
         }
     }

package/dist/lib/agentLaunch.d.ts

@@ -1,13 +1,11 @@
 import { type LocalRunner, type AgentDefinition, type NetworkEgressSetting, type ResolvedConfig } from "./config.ts";
 import { type WorkerEnvironment } from "./launchCommand.ts";
 import type { WorkspaceKind } from "./workspaceAdapter.ts";
-/**
- * Stage any srt settings and build the workspace launch command — the assembly
- * shared verbatim by `setupWorkspace` (fresh runs) and `resumeWorkspace`
- * (resumes). `worktreeDir` is the checkout root (srt grants + `{{worktree}}`);
- * `workingDir` is the agent cwd (the worktree root, or its `workdir` subproject).
- * Returns `srtSettingsDir` so callers can tear it down on a pre-launch failure.
- */
+export interface ComposedAgentLaunch {
+    command: string;
+    cleanup: () => void;
+}
+/** Build the workspace launch command shared by fresh runs and resumes. */
 export declare function composeAgentLaunch(input: {
     runner: LocalRunner;
     networkEgress: NetworkEgressSetting;
@@ -18,6 +16,7 @@ export declare function composeAgentLaunch(input: {
     workingDir: string;
     secretsFile?: string | undefined;
     prepareWorktreeCommand?: string | undefined;
+    prepareWorktreeUnsandboxedCommand?: string | undefined;
     sandboxName?: string | undefined;
     workspaceKind: WorkspaceKind;
     workerEnvironment?: WorkerEnvironment | undefined;
@@ -25,10 +24,14 @@ export declare function composeAgentLaunch(input: {
     taskSourceWritePaths?: readonly string[] | undefined;
     safehouseEnableFeatures?: readonly string[] | undefined;
     readOnlyDirs?: readonly string[] | undefined;
-}): {
-    launchCommand: string;
-    srtSettingsDir: string | undefined;
-};
+    /**
+     * Test-only seam: overrides `os.homedir()` when staging a relocated agent
+     * config home (codex's `CODEX_HOME` under safehouse). Production callers
+     * must omit this so specs can seed a fixture home instead of touching the
+     * real `~/.codex`.
+     */
+    homeDir?: string;
+}): ComposedAgentLaunch;
 interface PreparedAgentLaunch {
     runner: LocalRunner;
     /** Resolved `config.local.networkEgress`, threaded into `composeAgentLaunch`. */

package/dist/lib/agentLaunch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAWA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,oBAAoB,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAClD,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACrD,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxD,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAC9C,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CA2ChE;AA4DD,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,iFAAiF;IACjF,aAAa,EAAE,oBAAoB,CAAC;IACpC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsD/B;AAwBD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAahB"}
+{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAcA,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAW5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,oBAAoB,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,iCAAiC,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAClD,kBAAkB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACrD,uBAAuB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxD,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,mBAAmB,CAgDtB;AAkHD,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,iFAAiF;IACjF,aAAa,EAAE,oBAAoB,CAAC;IACpC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsD/B;AAwBD,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAahB"}

package/dist/lib/agentLaunch.js

@@ -1,60 +1,65 @@
-import { existsSync } from "node:fs";
+import { existsSync, mkdtempSync, rmSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
 import { ensureClearance, resolveSafehouseCmuxIntegration, safehouseCmuxIntegrationWarningLines, } from "@clipboard-health/clearance";
 import { clearanceAllowHostsFilesFromEnvironment } from "./clearanceAllowlist.js";
+import { installCmuxAgentHooks } from "./cmuxAgentHookInstall.js";
 import { cmuxAgentHookSettingsJson } from "./cmuxAgentHooks.js";
 import { shellSingleQuote } from "./shell.js";
 import { hasPreLaunchEnv, } from "./config.js";
 import { detectHostCapabilities } from "./host.js";
 import { buildLaunchCommand, inferAgentCommandName, } from "./launchCommand.js";
+import { agentConfigRelocation, stageRelocatedAgentConfigHome, } from "./codexConfigRelocation.js";
+import { resolveGitCommonDir } from "./gitCommonDir.js";
 import { assertLocalRunnerRequirements, resolveLocalRunner } from "./localRunner.js";
 import { sandboxNameFor } from "./sandboxName.js";
-import { buildAndStageSrtLaunch, resolveGitCommonDir } from "./srtLaunch.js";
-import { debug, sleep, writeError } from "./util.js";
+import { debug, readEnvironmentVariable, sleep, writeError } from "./util.js";
 import { resolveWorkspaceKind, workspaces } from "./workspaces.js";
-/**
- * Stage any srt settings and build the workspace launch command — the assembly
- * shared verbatim by `setupWorkspace` (fresh runs) and `resumeWorkspace`
- * (resumes). `worktreeDir` is the checkout root (srt grants + `{{worktree}}`);
- * `workingDir` is the agent cwd (the worktree root, or its `workdir` subproject).
- * Returns `srtSettingsDir` so callers can tear it down on a pre-launch failure.
- */
+/** Build the workspace launch command shared by fresh runs and resumes. */
 export function composeAgentLaunch(input) {
-    const staged = input.runner === "srt"
-        ? buildAndStageSrtLaunch({
-            task: input.task,
-            worktreeDir: input.worktreeDir,
+    const homeDir = input.homeDir ?? os.homedir();
+    const safehouseAgentIntegration = input.runner === "safehouse"
+        ? safehouseAgentIntegrationFor({
+            workspaceKind: input.workspaceKind,
             definition: input.definition,
-            taskSourceWritePaths: input.taskSourceWritePaths,
-            readOnlyDirs: input.readOnlyDirs,
+            task: input.task,
+            homeDir,
         })
         : undefined;
-    const safehouseAgentIntegration = input.runner === "safehouse"
-        ? safehouseAgentIntegrationFor(input.workspaceKind, input.definition)
-        : undefined;
-    const launchCommand = buildLaunchCommand({
-        definition: input.definition,
-        promptFile: input.promptFile,
-        worktreeDir: input.worktreeDir,
-        workingDir: input.workingDir,
-        secretsFile: input.secretsFile,
-        prepareWorktreeCommand: input.prepareWorktreeCommand,
-        runner: input.runner,
-        networkEgress: input.networkEgress,
-        sandboxName: input.sandboxName,
-        srtPrepareSettingsFile: staged?.prepareFile,
-        srtAgentSettingsFile: staged?.agentFile,
-        srtSettingsDir: staged?.directory,
-        srtAgentConfigDirEnv: staged?.agentConfigDirEnv,
-        workerEnvironment: input.workerEnvironment,
-        omitPromptArgument: input.omitPromptArgument,
-        safehouseAddDirs: input.runner === "safehouse" ? resolveSafehouseAddDirs(input.worktreeDir) : undefined,
-        safehouseAgentAddDirs: input.runner === "safehouse" ? (input.taskSourceWritePaths ?? []) : undefined,
-        safehouseEnableFeatures: input.runner === "safehouse" ? input.safehouseEnableFeatures : undefined,
-        // Safehouse rejects nonexistent --add-dirs-ro paths, so drop absent ones.
-        safehouseAgentAddDirsReadOnly: input.runner === "safehouse" ? (input.readOnlyDirs ?? []).filter(existsSync) : undefined,
-        safehouseAgentIntegration,
-    });
-    return { launchCommand, srtSettingsDir: staged?.directory };
+    function cleanup() {
+        for (const teardownPath of safehouseAgentIntegration?.teardownPaths ?? []) {
+            rmSync(teardownPath, { recursive: true, force: true });
+        }
+    }
+    try {
+        return {
+            command: buildLaunchCommand({
+                definition: input.definition,
+                promptFile: input.promptFile,
+                worktreeDir: input.worktreeDir,
+                workingDir: input.workingDir,
+                secretsFile: input.secretsFile,
+                prepareWorktreeCommand: input.prepareWorktreeCommand,
+                prepareWorktreeUnsandboxedCommand: input.prepareWorktreeUnsandboxedCommand,
+                runner: input.runner,
+                networkEgress: input.networkEgress,
+                sandboxName: input.sandboxName,
+                workerEnvironment: input.workerEnvironment,
+                omitPromptArgument: input.omitPromptArgument,
+                safehouseAddDirs: input.runner === "safehouse" ? resolveSafehouseAddDirs(input.worktreeDir) : undefined,
+                safehouseAgentAddDirs: input.runner === "safehouse" ? (input.taskSourceWritePaths ?? []) : undefined,
+                safehouseEnableFeatures: input.runner === "safehouse" ? input.safehouseEnableFeatures : undefined,
+                // Safehouse rejects nonexistent --add-dirs-ro paths, so drop absent ones.
+                safehouseAgentAddDirsReadOnly: input.runner === "safehouse" ? (input.readOnlyDirs ?? []).filter(existsSync) : undefined,
+                safehouseAgentIntegration,
+            }),
+            cleanup,
+        };
+    }
+    catch (error) {
+        cleanup();
+        throw error;
+    }
 }
 /**
  * Filesystem paths the safehouse sandbox must be granted (read/write) beyond
@@ -67,28 +72,38 @@ export function composeAgentLaunch(input) {
  *   whose store lives outside the worktree tree (e.g. graft's `~/carrot/.git`)
  *   gets git access. This is the path the bare cwd grant fundamentally cannot
  *   cover, and the reason this resolution exists.
- * Gated to the safehouse runner at the call site (srt fences its own equivalent
- * surface — worktree root + git common dir — through its settings file; sdx/none
- * don't use it). Deduped defensively in case git resolves either path to the
- * same directory in an unusual checkout shape.
+ * Gated to the safehouse runner at the call site. Deduped defensively in case
+ * git resolves either path to the same directory in an unusual checkout shape.
  */
 function resolveSafehouseAddDirs(worktreeDir) {
     return [...new Set([worktreeDir, resolveGitCommonDir(worktreeDir)])];
 }
-function safehouseAgentIntegrationFor(workspaceKind, definition) {
-    if (workspaceKind !== "cmux") {
+function safehouseAgentIntegrationFor(input) {
+    if (input.workspaceKind !== "cmux") {
         return undefined;
     }
-    const agentCommandName = inferAgentCommandName(definition.cmd);
+    const agentCommandName = inferAgentCommandName(input.definition.cmd);
     const isClaudeAgent = agentCommandName === "claude";
     const cmuxIntegration = resolveSafehouseCmuxIntegration();
     if (isClaudeAgent) {
         warnOnCmuxIntegrationDrift({ unreviewedEnvNames: cmuxIntegration.unreviewedEnvNames });
     }
+    const relocatedCmuxHooksHome = stageSafehouseCmuxHooksHome({
+        agent: agentCommandName,
+        task: input.task,
+        homeDir: input.homeDir,
+    });
     return {
         addDirsReadOnly: cmuxIntegration.addDirsReadOnly,
         envPass: cmuxIntegration.envPass,
-        commandPreludes: isClaudeAgent ? [cmuxIntegration.claudeCommandPrelude] : [],
+        commandPreludes: [
+            ...(isClaudeAgent ? [cmuxIntegration.claudeCommandPrelude] : []),
+            ...(relocatedCmuxHooksHome === undefined
+                ? []
+                : [
+                    `export ${relocatedCmuxHooksHome.configDirEnv.name}=${shellSingleQuote(relocatedCmuxHooksHome.configDirEnv.value)}`,
+                ]),
+        ],
         ...(isClaudeAgent
             ? {
                 agentArgs: [
@@ -97,8 +112,44 @@ function safehouseAgentIntegrationFor(workspaceKind, definition) {
                 ],
             }
             : {}),
+        ...(relocatedCmuxHooksHome === undefined
+            ? {}
+            : {
+                addDirs: [relocatedCmuxHooksHome.configDir],
+                writeBackFiles: relocatedCmuxHooksHome.writeBackFiles,
+                teardownPaths: [relocatedCmuxHooksHome.parentDir],
+            }),
     };
 }
+/**
+ * Relocate + seed a writable config home for a cmux-hosted agent whose hook
+ * activation is file-driven (codex reads `$CODEX_HOME/config.toml` +
+ * `hooks.json`, unlike Claude's `--settings` flag) and best-effort install
+ * cmux's lifecycle hooks into it. Undefined for agents with no registered
+ * relocation (claude), which keep reporting status via `--settings` instead.
+ */
+function stageSafehouseCmuxHooksHome(input) {
+    const relocation = agentConfigRelocation(input.agent);
+    if (relocation === undefined) {
+        return undefined;
+    }
+    const parentDir = mkdtempSync(path.join(os.tmpdir(), `groundcrew-safehouse-${input.task}-`));
+    try {
+        const staged = stageRelocatedAgentConfigHome({
+            agent: input.agent,
+            relocation,
+            parentDir,
+            sourceConfigDir: readEnvironmentVariable(relocation.configDirEnv) ??
+                path.join(input.homeDir, relocation.sourceHomeRelativeDir),
+        });
+        installCmuxAgentHooks({ agent: input.agent, configDir: staged.configDir });
+        return { ...staged, parentDir };
+    }
+    catch (error) {
+        rmSync(parentDir, { recursive: true, force: true });
+        throw error;
+    }
+}
 function warnOnCmuxIntegrationDrift(input) {
     for (const warningLine of safehouseCmuxIntegrationWarningLines({
         commandName: "groundcrew",

package/dist/lib/cmuxAgentHookInstall.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Best-effort `cmux hooks <agent> install --yes` against a relocated,
+ * writable config home (e.g. codex's `CODEX_HOME`) so a file-driven agent —
+ * whose hook activation reads `$CODEX_HOME/config.toml` + `hooks.json` rather
+ * than an `agentArgs` flag — reports its lifecycle to the cmux sidebar the
+ * same way Claude already does via `--settings`.
+ *
+ * Never throws: an agent with no registered config relocation, a missing
+ * `cmux` CLI, or a non-zero install exit all degrade to that agent simply
+ * emitting no live status — never to a failed launch. A short timeout keeps a
+ * hung `cmux` binary from stalling every launch on this agent.
+ */
+export declare function installCmuxAgentHooks(input: {
+    agent: string;
+    configDir: string;
+}): void;
+//# sourceMappingURL=cmuxAgentHookInstall.d.ts.map

package/dist/lib/cmuxAgentHookInstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmuxAgentHookInstall.d.ts","sourceRoot":"","sources":["../../src/lib/cmuxAgentHookInstall.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA0BvF"}