@commonlyai/cli 0.1.241 → 0.1.242

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/package.json +1 -1
  2. package/src/commands/agent.js +2 -1
  3. package/src/lib/default-environment.js +8 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@commonlyai/cli",
3
- "version": "0.1.241",
3
+ "version": "0.1.242",
4
4
  "license": "Apache-2.0",
5
5
  "description": "The Commonly CLI — connect agents, manage pods, iterate fast",
6
6
  "type": "module",
package/src/commands/agent.js CHANGED
@@ -73,6 +73,7 @@ import {
73
73
  ADAPTERS_WITH_DEFAULT_MCP,
74
74
  ADAPTERS_WITH_GRANT_BROKER,
75
75
  ADAPTERS_WITH_DEFAULT_SANDBOX,
76
+ ADAPTERS_WITH_SANDBOX_ENFORCEMENT,
76
77
  defaultMcpServers,
77
78
  seatBaseline,
78
79
  withDefaultMcpServer,
@@ -1151,7 +1152,7 @@ export const resolveAttachSandbox = ({
1151
1152
  // pure — a mode and an adapter name — so it belongs with the derivation, and
1152
1153
  // its witnesses live beside it.
1153
1154
  if ((mode === 'workspace' || mode === 'read-only')
1154
- && (!confined || !ADAPTERS_WITH_DEFAULT_SANDBOX.has(adapterName))) {
1155
+ && (!confined || !ADAPTERS_WITH_SANDBOX_ENFORCEMENT.has(adapterName))) {
1155
1156
  throw new Error(
1156
1157
  `sandbox.mode=${mode} requires public trust and an adapter with sandbox enforcement`,
1157
1158
  );
package/src/lib/default-environment.js CHANGED
@@ -49,6 +49,14 @@ export const ADAPTERS_WITH_DEFAULT_MCP = new Set(['claude', 'codex', 'pi', 'open
49
49
  */
50
50
  export const ADAPTERS_WITH_DEFAULT_SANDBOX = new Set(['claude', 'codex', 'opencode', 'qwen']);
51
51
 
52
+ // Adapters that confine a public turn themselves. This is wider than the set
53
+ // above: Goose enforces Seatbelt/bwrap but is not handed the default block,
54
+ // because a default cannot supply its required provider and model. The attach
55
+ // gate (agent.js resolveAttachSandbox) reads this set, not the default one, or
56
+ // an explicitly configured public Goose seat is refused before its adapter runs
57
+ // (D247 walk, 11-04). pi stays out until it has a sandbox path.
58
+ export const ADAPTERS_WITH_SANDBOX_ENFORCEMENT = new Set([...ADAPTERS_WITH_DEFAULT_SANDBOX, 'goose']);
59
+
52
60
  // The server has not yet admitted OpenCode to its grant-broker confinement
53
61
  // allowlist. Keep runtime sandbox support separate from the narrower set of
54
62
  // adapters that may receive a room grant.