@corenel/cli 0.9.5 → 0.10.0

package/dist/main.js

@@ -28983,6 +28983,14 @@ var init_approvalsStore = __esm({
 });
 
 // ../tools-node/deviceLogin.ts
+function verificationLink(dc) {
+  const base = dc.verification_uri;
+  const complete = dc.verification_uri_complete;
+  if (typeof complete === "string" && complete.startsWith(base) && (complete[base.length] === "?" || complete[base.length] === "&")) {
+    return complete;
+  }
+  return `${base}${base.includes("?") ? "&" : "?"}code=${encodeURIComponent(dc.user_code)}`;
+}
 function deadlineSignal(ms, outer) {
   const ac = new AbortController();
   const onOuter = () => ac.abort();
@@ -29050,7 +29058,7 @@ async function deviceLogin(opts) {
   };
   const dc = await post("/oauth/device/code", { client_id: "corenel-cli", scope: "agent pair" });
   if (!dc.device_code) throw new Error("device authorization failed");
-  (opts.open ?? defaultOpen)(dc.verification_uri, dc.user_code);
+  (opts.open ?? defaultOpen)(verificationLink(dc), dc.user_code);
   let interval = opts.pollMs ?? Math.max(MIN_POLL_MS, (dc.interval ?? 5) * 1e3);
   const lifetimeMs = (typeof dc.expires_in === "number" && dc.expires_in > 0 ? dc.expires_in : DEFAULT_LIFETIME_S) * 1e3;
   const deadline = Date.now() + lifetimeMs;
@@ -32846,7 +32854,7 @@ function configWorkspaceRoot(base) {
 import { FileRecallStore, UNATTACHED_SESSION } from "@corenel/harness/sessions/fileRecallStore";
 import { makeSessionFoldStorage } from "@corenel/harness/sessions/foldStorage";
 import { makeSummarizer } from "@corenel/harness/core/summarize";
-import { stateDirName as stateDirName7, sessionsRoot, isSourceRun } from "@corenel/protocol";
+import { stateDirName as stateDirName6, sessionsRoot, isSourceRun } from "@corenel/protocol";
 import { PermissionService as PermissionService6 } from "@corenel/harness/guardrail/permission-service";
 
 // src/nodeContext.ts
@@ -32948,6 +32956,7 @@ var crew_exports = {};
 __export(crew_exports, {
   AUTONOMY_TOOLS: () => AUTONOMY_TOOLS,
   CHECK_IN_BLOCK: () => CHECK_IN_BLOCK,
+  COMMAND_CAPABILITIES: () => COMMAND_CAPABILITIES,
   CREW_EXCLUDED_TOOLS: () => CREW_EXCLUDED_TOOLS,
   CREW_SEG: () => CREW_SEG,
   DEPLOYMENT_FILE: () => DEPLOYMENT_FILE,
@@ -33002,6 +33011,7 @@ __export(crew_exports, {
   foldRoom: () => foldRoom,
   globMatch: () => globMatch,
   grantOfferedTools: () => grantOfferedTools,
+  grantsCommandTools: () => grantsCommandTools,
   interjectHuman: () => interjectHuman,
   isAutonomyPreset: () => isAutonomyPreset,
   isOrchestrator: () => isOrchestrator,
@@ -33024,6 +33034,7 @@ __export(crew_exports, {
   newCrewDraft: () => newCrewDraft,
   nextCronAfter: () => nextCronAfter,
   normalizeRunStatus: () => normalizeRunStatus,
+  offersCommandTools: () => offersCommandTools,
   openLineOf: () => openLineOf,
   openRoom: () => openRoom,
   parseCron: () => parseCron,
@@ -33057,6 +33068,7 @@ __export(crew_exports, {
   takeTurn: () => takeTurn,
   tightenAutonomy: () => tightenAutonomy,
   turnCosts: () => turnCosts,
+  unsandboxedCommandsFact: () => unsandboxedCommandsFact,
   userMemoryRoot: () => userMemoryRoot,
   validateRoomRequest: () => validateRoomRequest,
   writeCrewAgentAt: () => writeCrewAgentAt
@@ -33250,6 +33262,24 @@ function enforcedLevel(policy, cap) {
   });
 }
 
+// ../crew/commandTools.ts
+var COMMAND_CAPABILITIES = [
+  { tool: "sidecar_shell_exec", label: "Run shell commands", mutating: true, address: "sidecar:shell_exec", permission: "ask" },
+  { tool: "sidecar_run_check", label: "Run confirmed checks", mutating: true, address: "sidecar:run_check", permission: "ask" },
+  { tool: "proc_start", label: "Start long-running processes", mutating: true, address: "shell:spawn", permission: "ask" }
+];
+function offersCommandTools(toolNames) {
+  const names = new Set(toolNames);
+  return COMMAND_CAPABILITIES.some((c) => names.has(c.tool));
+}
+function grantsCommandTools(policy) {
+  return COMMAND_CAPABILITIES.some((c) => enforcedLevel(policy, c) !== "deny");
+}
+function unsandboxedCommandsFact(policy, offeredToolNames) {
+  const offered = new Set(offeredToolNames);
+  return COMMAND_CAPABILITIES.some((c) => offered.has(c.tool) && enforcedLevel(policy, c) !== "deny") ? { unsandboxedCommands: true } : {};
+}
+
 // ../crew/autonomy.ts
 import { SIDECAR_GIT_PUSH, SIDECAR_OPEN_PR } from "@corenel/protocol";
 import { toolAddress, resolveNamespace } from "@corenel/harness/tools/namespaces";
@@ -35106,7 +35136,7 @@ import { createChatClient, setGatewayBase } from "@corenel/harness/providers/gat
 // src/apiBase.ts
 init_tools_node();
 import { DEFAULT_API_BASE as DEFAULT_API_BASE2 } from "@corenel/protocol";
-import { DEV_PROFILE } from "@corenel/protocol";
+import { DEV_PROFILE, SANDBOX_GATEWAY_BASE_ENV } from "@corenel/protocol";
 var InvalidApiBaseError = class extends Error {
   constructor(value, why) {
     super(`invalid API base ${JSON.stringify(value)} -- ${why}`);
@@ -35160,7 +35190,10 @@ async function resolveCliApiBase(explicit, opts = {}) {
   if (url.protocol !== "https:" && url.protocol !== "http:") {
     throw new InvalidApiBaseError(value, `the scheme must be https or http, not ${url.protocol.replace(/:$/, "")}`);
   }
-  if (url.protocol === "http:" && !isLoopback(url.hostname) && !warnedCleartext) {
+  const trim2 = (s) => s.trim().replace(/\/+$/, "");
+  const marker = env[SANDBOX_GATEWAY_BASE_ENV];
+  const sanctioned = typeof marker === "string" && marker.trim() !== "" && trim2(marker) === trim2(value);
+  if (url.protocol === "http:" && !isLoopback(url.hostname) && !sanctioned && !warnedCleartext) {
     warnedCleartext = true;
     process.stderr.write(
       `corenel: warning: ${url.host} is plain http, so your access token is sent in cleartext. Use https unless this host is on a private network you trust.
@@ -35341,10 +35374,10 @@ var EXTENSIONS = [
     }
   },
   {
-    command: "sessions",
+    command: "sandboxes",
     ...SIDECAR,
-    summary: "list and inspect local sandbox sessions",
-    argv: (rest) => ["sessions", ...rest]
+    summary: "create, list and run in local sandboxes",
+    argv: (rest) => ["sandboxes", ...rest]
   },
   {
     command: "crew",
@@ -35448,14 +35481,13 @@ async function runExtension(ext, rest, look = {}) {
 }
 
 // src/commands.ts
-import { stateDirName as stateDirName4 } from "@corenel/protocol";
 var COMMANDS = [
   { name: "", args: "", summary: "with no command: an interactive agent in this directory" },
-  { name: "run", args: '"<prompt>" [--allow-mutations] | --session ID "<prompt>"', summary: "one-shot turn, then exit -- refuses writes/shell unless --allow-mutations; --session runs the bare prompt in a sandbox instead and ignores every other flag" },
+  { name: "run", args: '"<prompt>" [--allow-mutations] | --sandbox ID "<prompt>"', summary: "one-shot turn, then exit -- refuses writes/shell unless --allow-mutations; --sandbox runs the bare prompt in a sandbox instead and ignores every other flag" },
   { name: "run-agent", args: '<name> --input "<text>" [--allow-mutations]', summary: "run a crew agent (same refuse-by-default gate as run); events as JSON Lines on stdout" },
   { name: "sidecar", args: "[start] [flags]", summary: "run the sidecar on this machine" },
   { name: "acp", args: "<agent> [flags]", summary: "proxy an external coding agent under Corenel policy" },
-  { name: "sessions", args: "[list|show|create|run]", summary: "create, list and run in local sandbox sessions" },
+  { name: "sandboxes", args: "[list|show|create|run|pause|resume|destroy]", summary: "create, list and run in local sandboxes" },
   { name: "crew", args: "deployments | deploy|undeploy|resume <agent> | pause <agent> --reason R", summary: "deploy, undeploy, pause and resume crew agents on this machine" },
   { name: "login", args: "[--base URL]", summary: "sign in through your browser (device flow)" },
   { name: "auth", summary: "show whether you are signed in, and as what" },
@@ -35508,12 +35540,7 @@ function helpText(version2) {
     "  --version, -v      print the version",
     "  --help, -h         print this",
     "",
-    "--resume reopens a CONVERSATION (this face's own chat log, saved under",
-    `${stateDirName4()}/sessions/) -- not the same thing as \`run --session ID\` or the`,
-    "`sessions` command below, which forward into a sandbox on the sidecar.",
-    "Same word, two different nouns.",
-    "",
-    "sidecar, acp, sessions and crew are provided by @corenel/sidecar, installed separately.",
+    "sidecar, acp, sandboxes and crew are provided by @corenel/sidecar, installed separately.",
     "Each takes its own flags: `corenel sidecar --help`.",
     "",
     "Exit codes (corenel run, corenel run-agent):",
@@ -36626,7 +36653,7 @@ function shellTool(cwd) {
 import { procTools } from "@corenel/harness/tools/procs";
 
 // src/sidecarConnect.ts
-import { stateDirName as stateDirName5 } from "@corenel/protocol";
+import { stateDirName as stateDirName4 } from "@corenel/protocol";
 import { SidecarHost, isSidecarKeyMismatch, isSidecarAccountRefusal } from "@corenel/harness/sidecar/host";
 
 // ../../node_modules/.pnpm/ws@8.21.0/node_modules/ws/wrapper.mjs
@@ -37018,7 +37045,7 @@ async function connectSidecarProcs(env = process.env, store = cliDeviceStore(),
   const host = new SidecarHost({
     channel,
     ...credential,
-    stateDir: stateDirName5(),
+    stateDir: stateDirName4(),
     clientId: `corenel-cli-${process.pid}`,
     clientName: cliDeviceName(),
     onIdentityChallenge: identity2.answer,
@@ -37063,7 +37090,7 @@ async function connectMcpAdmin(env = process.env, store = cliDeviceStore(), iden
   const host = new SidecarHost({
     channel,
     ...credential,
-    stateDir: stateDirName5(),
+    stateDir: stateDirName4(),
     clientId: `corenel-cli-${process.pid}`,
     clientName: cliDeviceName(),
     onIdentityChallenge: identity2.answer,
@@ -37331,7 +37358,7 @@ async function resolveStrategyPrompt(files, id) {
 init_tools_node();
 import { readFile as readFile2, stat } from "node:fs/promises";
 import { join as join11 } from "node:path";
-import { stateDirName as stateDirName6 } from "@corenel/protocol";
+import { stateDirName as stateDirName5 } from "@corenel/protocol";
 import { BUILTIN_POLICIES, STANDARD_POLICY as STANDARD_POLICY3, policyFromYaml } from "@corenel/harness/guardrail";
 var PolicyResolutionError = class extends Error {
   detail;
@@ -37416,7 +37443,7 @@ async function resolvePolicy(opts) {
     }
     return { policy: STANDARD_POLICY3, source: { kind: "default" }, warnings };
   }
-  const workspacePath = join11(cwd, stateDirName6(), "policy.yaml");
+  const workspacePath = join11(cwd, stateDirName5(), "policy.yaml");
   if (await fileExists(workspacePath)) {
     warnings.push(
       `corenel: ${workspacePath} ignored -- a policy inside the workspace can be written by the agent or arrive in a cloned repo. To use it for this folder, move it to ${projectPath}, or pass --policy ${workspacePath} explicitly.`
@@ -38958,7 +38985,7 @@ async function agentSetup(argv, chosenModel) {
   try {
     const migrated = await migrateHomeLayout();
     if (migrated.moved.length) {
-      console.error(`layout: moved ${migrated.moved.length} item(s) into the current ~/${stateDirName7()} layout`);
+      console.error(`layout: moved ${migrated.moved.length} item(s) into the current ~/${stateDirName6()} layout`);
     }
     for (const left of migrated.skipped) console.error(`layout: left ${left.path} alone (${left.reason})`);
   } catch (e) {
@@ -39026,19 +39053,23 @@ async function buildRunPermission(opts) {
   }) };
 }
 async function run(argv) {
+  if (hasValueFlag(argv, "session")) {
+    process.stderr.write("corenel: --session is not a flag of `run`. To run inside a sandbox use --sandbox ID.\n");
+    process.exit(2);
+  }
   const prompt = promptOf(argv);
   if (!prompt) {
-    process.stderr.write('usage: corenel run "<prompt>" [--model M] [--base URL] [--session ID] [--allow-mutations]\n                  [--max-usd N] [--max-tokens N] [--max-ms N] [--on-budget stop|warn]\n');
+    process.stderr.write('usage: corenel run "<prompt>" [--model M] [--base URL] [--sandbox ID] [--allow-mutations]\n                  [--max-usd N] [--max-tokens N] [--max-ms N] [--on-budget stop|warn]\n');
     process.exit(2);
   }
   const budget = budgetConstraintsFrom(argv);
-  const session = flag(argv, "session", "");
-  if (session) {
+  const sandbox = flag(argv, "sandbox", "");
+  if (sandbox) {
     if (hasAllowMutationsFlag(argv) || hasValueFlag(argv, "model") || hasValueFlag(argv, "base") || budget) {
-      process.stderr.write("corenel: note: --session ignores every other flag on this line -- the sandboxed run uses its own defaults.\n");
+      process.stderr.write("corenel: note: --sandbox ignores every other flag on this line -- the sandboxed run uses its own defaults.\n");
     }
-    const ext = findExtension("sessions");
-    process.exitCode = ext ? await runExtension(ext, ["run", session, prompt]) : 2;
+    const ext = findExtension("sandboxes");
+    process.exitCode = ext ? await runExtension(ext, ["run", sandbox, prompt]) : 2;
     return;
   }
   const { client, model, system, tools, policy, memory, disconnect } = await agentSetup(argv);
@@ -39395,7 +39426,7 @@ async function main() {
       }
       case "sidecar":
       case "acp":
-      case "sessions":
+      case "sandboxes":
       case "crew": {
         const ext = findExtension(cmd);
         process.exitCode = ext ? await runExtension(ext, rest) : 2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/cli",
-  "version": "0.9.5",
+  "version": "0.10.0",
   "type": "module",
   "description": "Corenel CLI — runs the harness in node, in-proc, no transport. The headless proof the kernel is host-agnostic. (corenel run/ask/chat/login + start --sidecar to follow.)",
   "bin": {
@@ -9,11 +9,11 @@
   "dependencies": {
     "openai": "^4.77.0",
     "ws": "^8.18.0",
-    "@corenel/mcp": "0.6.3",
-    "@corenel/term": "0.8.4",
-    "@corenel/harness": "0.18.0",
-    "@corenel/config": "0.7.3",
-    "@corenel/protocol": "0.16.0"
+    "@corenel/config": "0.7.4",
+    "@corenel/protocol": "0.17.0",
+    "@corenel/harness": "0.19.0",
+    "@corenel/mcp": "0.6.4",
+    "@corenel/term": "0.8.5"
   },
   "devDependencies": {
     "esbuild": "^0.21.5",
@@ -22,7 +22,7 @@
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
     "@corenel/crew": "0.0.0",
-    "@corenel/tools-node": "0.8.3"
+    "@corenel/tools-node": "0.9.0"
   },
   "publishConfig": {
     "access": "public"