@crewx/cli 0.9.0-rc.1 → 0.9.0-rc.100

package/dist/bootstrap/codex-writable-roots.d.ts

@@ -0,0 +1,58 @@
+/**
+ * CLI-layer policy: inject CrewX home as an extra writable root for Codex
+ * `workspace-write` sandbox invocations.
+ *
+ * Why this lives in packages/cli (not packages/sdk):
+ * CrewX home (`~/.crewx` by default) is a product-specific path. The SDK's
+ * `additionalArgsProvider` extension point (WI-20260703-001) exists precisely
+ * so that product layers like this CLI can inject such paths without the SDK
+ * knowing about them.
+ *
+ * Why `-c sandbox_workspace_write.writable_roots=[...]` instead of `--add-dir`:
+ * Verified against codex-cli 0.139.0 (`codex exec --help` / `codex exec resume --help`):
+ *   - `codex exec` supports `--add-dir <DIR>`.
+ *   - `codex exec resume` does NOT support `--add-dir` (only `-c/--config`).
+ * Using the `-c` config-override form works identically for both `exec` and
+ * `exec resume`, avoiding a resume-incompatible flag.
+ */
+import type { AdditionalArgsProvider } from '@crewx/sdk';
+/**
+ * Resolve CrewX home directory.
+ * Priority: `CREWX_HOME` env var → `~/.crewx`.
+ */
+export declare function resolveCrewxHome(): string;
+/**
+ * Escape a string for embedding inside a TOML basic string (`"..."`).
+ * Sufficient for filesystem paths: handles backslash (Windows paths),
+ * double-quote, and control characters that could otherwise break TOML
+ * parsing of the `-c key="value"` override.
+ */
+export declare function escapeTomlBasicString(value: string): string;
+/**
+ * Build the `-c sandbox_workspace_write.writable_roots=["<path>"]` arg pair.
+ * Works for both `codex exec` and `codex exec resume` (config-override form).
+ */
+export declare function buildCodexWritableRootArgs(crewxHome: string): string[];
+/**
+ * Create an `AdditionalArgsProvider` that skips Codex's git repository trust
+ * check for a resolved workspace.
+ *
+ * The workspace is resolved by the product layer, so an unavailable workspace
+ * must not fall back to the host cwd. The flag is independent of execution
+ * mode because it controls repository trust rather than filesystem access.
+ */
+export declare function createCodexSkipGitRepoCheckProvider(workspaceRoot: string | undefined): AdditionalArgsProvider;
+/**
+ * Compose product-layer argument providers while preserving their order.
+ */
+export declare function composeAdditionalArgsProviders(...providers: AdditionalArgsProvider[]): AdditionalArgsProvider;
+/**
+ * Create an `AdditionalArgsProvider` (SDK extension point, WI-20260703-001)
+ * that injects CrewX home as a Codex writable root for `workspace-write`
+ * equivalent modes (`agent`, `auto`, `undefined`).
+ *
+ * No-ops for:
+ *   - Non-codex providers.
+ *   - Modes in {@link NO_INJECT_MODES} (read-only/plan/agent-full-access/yolo/danger-full-access).
+ */
+export declare function createCodexWritableRootsProvider(crewxHome?: string): AdditionalArgsProvider;

package/dist/bootstrap/codex-writable-roots.js

@@ -0,0 +1,113 @@
+"use strict";
+/**
+ * CLI-layer policy: inject CrewX home as an extra writable root for Codex
+ * `workspace-write` sandbox invocations.
+ *
+ * Why this lives in packages/cli (not packages/sdk):
+ * CrewX home (`~/.crewx` by default) is a product-specific path. The SDK's
+ * `additionalArgsProvider` extension point (WI-20260703-001) exists precisely
+ * so that product layers like this CLI can inject such paths without the SDK
+ * knowing about them.
+ *
+ * Why `-c sandbox_workspace_write.writable_roots=[...]` instead of `--add-dir`:
+ * Verified against codex-cli 0.139.0 (`codex exec --help` / `codex exec resume --help`):
+ *   - `codex exec` supports `--add-dir <DIR>`.
+ *   - `codex exec resume` does NOT support `--add-dir` (only `-c/--config`).
+ * Using the `-c` config-override form works identically for both `exec` and
+ * `exec resume`, avoiding a resume-incompatible flag.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCrewxHome = resolveCrewxHome;
+exports.escapeTomlBasicString = escapeTomlBasicString;
+exports.buildCodexWritableRootArgs = buildCodexWritableRootArgs;
+exports.createCodexSkipGitRepoCheckProvider = createCodexSkipGitRepoCheckProvider;
+exports.composeAdditionalArgsProviders = composeAdditionalArgsProviders;
+exports.createCodexWritableRootsProvider = createCodexWritableRootsProvider;
+const os_1 = require("os");
+const path_1 = require("path");
+/**
+ * crewx.yaml / query-option `mode` values for which Codex is NOT running in
+ * (or being pushed into) a `workspace-write`-equivalent sandbox. Injecting an
+ * extra writable root is meaningless (read-only/plan) or redundant
+ * (full-access variants already allow writes everywhere) in these modes.
+ */
+const NO_INJECT_MODES = new Set([
+    'read-only',
+    'plan',
+    'agent-full-access',
+    'yolo',
+    'danger-full-access',
+]);
+/**
+ * Resolve CrewX home directory.
+ * Priority: `CREWX_HOME` env var → `~/.crewx`.
+ */
+function resolveCrewxHome() {
+    return process.env.CREWX_HOME ?? (0, path_1.join)((0, os_1.homedir)(), '.crewx');
+}
+/**
+ * Escape a string for embedding inside a TOML basic string (`"..."`).
+ * Sufficient for filesystem paths: handles backslash (Windows paths),
+ * double-quote, and control characters that could otherwise break TOML
+ * parsing of the `-c key="value"` override.
+ */
+function escapeTomlBasicString(value) {
+    return value
+        .replace(/\\/g, '\\\\')
+        .replace(/"/g, '\\"')
+        .replace(/\n/g, '\\n')
+        .replace(/\r/g, '\\r')
+        .replace(/\t/g, '\\t');
+}
+/**
+ * Build the `-c sandbox_workspace_write.writable_roots=["<path>"]` arg pair.
+ * Works for both `codex exec` and `codex exec resume` (config-override form).
+ */
+function buildCodexWritableRootArgs(crewxHome) {
+    const escaped = escapeTomlBasicString(crewxHome);
+    return ['-c', `sandbox_workspace_write.writable_roots=["${escaped}"]`];
+}
+function isCodexProvider(ctx) {
+    return ctx.providerId === 'codex' || ctx.providerStr === 'cli/codex';
+}
+/**
+ * Create an `AdditionalArgsProvider` that skips Codex's git repository trust
+ * check for a resolved workspace.
+ *
+ * The workspace is resolved by the product layer, so an unavailable workspace
+ * must not fall back to the host cwd. The flag is independent of execution
+ * mode because it controls repository trust rather than filesystem access.
+ */
+function createCodexSkipGitRepoCheckProvider(workspaceRoot) {
+    return (ctx) => {
+        if (!isCodexProvider(ctx))
+            return [];
+        if (!workspaceRoot)
+            return [];
+        return ['--skip-git-repo-check'];
+    };
+}
+/**
+ * Compose product-layer argument providers while preserving their order.
+ */
+function composeAdditionalArgsProviders(...providers) {
+    return (ctx) => providers.flatMap((provider) => provider(ctx));
+}
+/**
+ * Create an `AdditionalArgsProvider` (SDK extension point, WI-20260703-001)
+ * that injects CrewX home as a Codex writable root for `workspace-write`
+ * equivalent modes (`agent`, `auto`, `undefined`).
+ *
+ * No-ops for:
+ *   - Non-codex providers.
+ *   - Modes in {@link NO_INJECT_MODES} (read-only/plan/agent-full-access/yolo/danger-full-access).
+ */
+function createCodexWritableRootsProvider(crewxHome = resolveCrewxHome()) {
+    return (ctx) => {
+        if (!isCodexProvider(ctx))
+            return [];
+        if (ctx.mode !== undefined && NO_INJECT_MODES.has(ctx.mode))
+            return [];
+        return buildCodexWritableRootArgs(crewxHome);
+    };
+}

package/dist/bootstrap/crewx-cli.js

@@ -9,6 +9,8 @@ const plugins_1 = require("@crewx/sdk/plugins");
 const repository_1 = require("@crewx/sdk/repository");
 const register_builtin_tools_1 = require("../register-builtin-tools");
 const version_1 = require("../utils/version");
+const inherited_trace_1 = require("../utils/inherited-trace");
+const codex_writable_roots_1 = require("./codex-writable-roots");
 /**
  * Build a Crewx instance with CLI-standard plugins (FileLogger + SqliteTracing)
  * and built-in tools registered. Use this from any CLI command that needs a
@@ -39,6 +41,7 @@ async function createCliCrewx(configPath = process.env.CREWX_CONFIG ?? 'crewx.ya
     else {
         yamlPath = undefined;
     }
+    const skipRoot = yamlPath !== undefined ? (0, path_1.dirname)(absConfigPath) : undefined;
     // Run drizzle migrations once at bootstrap — plugin relies on this guarantee.
     const dbDir = (0, path_1.join)((0, os_1.homedir)(), '.crewx');
     (0, fs_1.mkdirSync)(dbDir, { recursive: true });
@@ -52,10 +55,14 @@ async function createCliCrewx(configPath = process.env.CREWX_CONFIG ?? 'crewx.ya
     }
     const crewx = await sdk_1.Crewx.loadYaml(yamlPath, {
         remoteFactory: createCliCrewx,
+        additionalArgsProvider: (0, codex_writable_roots_1.composeAdditionalArgsProviders)((0, codex_writable_roots_1.createCodexWritableRootsProvider)(), (0, codex_writable_roots_1.createCodexSkipGitRepoCheckProvider)(skipRoot)),
     });
     (0, register_builtin_tools_1.registerBuiltinToolsIfNeeded)(crewx);
     await crewx.use(new plugins_1.ConversationPlugin());
     await crewx.use(new plugins_1.FileLoggerPlugin({ version: version_1.CLI_VERSION, workspaceRoot }));
-    await crewx.use(new plugins_1.SqliteTracingPlugin({ version: version_1.CLI_VERSION }));
+    await crewx.use(new plugins_1.SqliteTracingPlugin({
+        version: version_1.CLI_VERSION,
+        runnerIdentity: (0, inherited_trace_1.consumeInheritedRunnerIdentity)(),
+    }));
     return crewx;
 }

package/dist/builtin.js

@@ -55,6 +55,7 @@ const BUILTIN_MAP = {
     dreaming: () => Promise.resolve().then(() => __importStar(require('@crewx/dreaming/cli'))),
     wi: () => Promise.resolve().then(() => __importStar(require('@crewx/wi/cli'))),
     chromex: () => Promise.resolve().then(() => __importStar(require('@crewx/chromex/cli'))),
+    notify: () => Promise.resolve().then(() => __importStar(require('@crewx/notify/cli'))),
 };
 exports.BUILTIN_COMMANDS = new Set(Object.keys(BUILTIN_MAP));
 // Load skill-tracer for observability (graceful degradation if unavailable)

package/dist/commands/agent.js

@@ -3,46 +3,11 @@
  * crewx agent handler.
  * Dispatches `crewx agent ls` and `crewx agent prompt` subcommands.
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleAgent = handleAgent;
-const path = __importStar(require("path"));
 const fs_1 = require("fs");
 const crewx_cli_1 = require("../bootstrap/crewx-cli");
 const sdk_1 = require("@crewx/sdk");
-const skill_1 = require("@crewx/skill");
 /**
  * Parse a flag from args array.
  * Supports both `--flag=value` and `--flag value` forms.
@@ -135,11 +100,9 @@ async function handleAgentPrompt(crewx, args) {
         process.exit(1);
     }
     try {
-        const skills = loadAgentSkills();
         const rendered = await crewx.renderAgentPromptFull(agentIdRaw, {
             env: process.env,
             session: { mode: 'query', platform: 'cli' },
-            skills,
         });
         const displayId = agentIdRaw.startsWith('@') ? agentIdRaw.slice(1) : agentIdRaw;
         console.log(`\n🤖 **Rendered Prompt for Agent: ${displayId}**\n`);
@@ -197,27 +160,6 @@ async function handleAgent(args) {
             process.exit(1);
     }
 }
-/**
- * Discover available skills and convert to SkillEntry format for template rendering.
- * Searches skills/ and node_modules/@crewx directories.
- */
-function loadAgentSkills() {
-    try {
-        const engine = new skill_1.SkillEngine(process.cwd());
-        const discovered = engine.discover();
-        return discovered.map(s => ({
-            metadata: {
-                name: s.name,
-                version: s.version ?? '0.0.0',
-                description: s.description ?? '',
-            },
-            filePath: s.skillMdPath ?? path.join(s.dir, 'SKILL.md'),
-        }));
-    }
-    catch {
-        return [];
-    }
-}
 function printAgentHelp() {
     console.log(`
 CrewX Agent Management

package/dist/commands/cal.d.ts

@@ -0,0 +1,15 @@
+import type { ActionContext } from '@crewx/knowledge-core';
+/** Suggested wait rungs in seconds. 540 is the safe caller-harness cap. */
+export declare const WAIT_LADDER_SECONDS: readonly [60, 300, 540];
+export interface SuggestWaitSecondsOptions {
+    startedAt?: string | number | Date | null;
+    lastWaitSeconds?: number;
+    now?: number;
+}
+/**
+ * Select the next safe result wait based on task runtime without stepping
+ * down from the wait value the caller just used.
+ */
+export declare function suggestWaitSeconds(options: SuggestWaitSecondsOptions): number;
+/** Write a human-only CAL footer without contaminating command stdout. */
+export declare function writeCalFooter(context: ActionContext): void;

package/dist/commands/cal.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WAIT_LADDER_SECONDS = void 0;
+exports.suggestWaitSeconds = suggestWaitSeconds;
+exports.writeCalFooter = writeCalFooter;
+const knowledge_core_1 = require("@crewx/knowledge-core");
+/** Suggested wait rungs in seconds. 540 is the safe caller-harness cap. */
+exports.WAIT_LADDER_SECONDS = [60, 300, 540];
+function toTimestamp(value) {
+    if (value instanceof Date) {
+        return Number.isFinite(value.getTime()) ? value.getTime() : undefined;
+    }
+    if (typeof value === 'number') {
+        return Number.isFinite(value) ? value : undefined;
+    }
+    if (typeof value === 'string') {
+        const timestamp = Date.parse(value);
+        return Number.isFinite(timestamp) ? timestamp : undefined;
+    }
+    return undefined;
+}
+/**
+ * Select the next safe result wait based on task runtime without stepping
+ * down from the wait value the caller just used.
+ */
+function suggestWaitSeconds(options) {
+    const now = Number.isFinite(options.now) ? options.now : Date.now();
+    const startedAt = toTimestamp(options.startedAt);
+    const elapsedSeconds = startedAt === undefined
+        ? 0
+        : Math.max(0, (now - startedAt) / 1000);
+    const rung = exports.WAIT_LADDER_SECONDS.find(seconds => seconds > elapsedSeconds)
+        ?? exports.WAIT_LADDER_SECONDS[exports.WAIT_LADDER_SECONDS.length - 1];
+    const lastWaitSeconds = Number.isFinite(options.lastWaitSeconds)
+        ? Math.max(0, options.lastWaitSeconds)
+        : 0;
+    return Math.min(exports.WAIT_LADDER_SECONDS[exports.WAIT_LADDER_SECONDS.length - 1], Math.max(rung, lastWaitSeconds));
+}
+/** Write a human-only CAL footer without contaminating command stdout. */
+function writeCalFooter(context) {
+    const block = (0, knowledge_core_1.formatActions)((0, knowledge_core_1.generateNextActions)(context));
+    if (block)
+        process.stderr.write(`${block}\n`);
+}

package/dist/commands/db.d.ts

@@ -6,4 +6,6 @@
  *   crewx db push --force        Apply without confirmation + reset migration history
  *   crewx db push --dry-run      Show preview only, no changes
  */
+export declare const TASK_LOG_MIGRATION_HELP = "Usage:\n  crewx db migrate-task-logs --dry-run [--db PATH]\n  crewx db migrate-task-logs --apply [--db PATH] [--batch-tasks N]\n  crewx db migrate-task-logs --verify [--db PATH]\n\nModes:\n  --dry-run  Read and validate legacy blobs without writing or creating a backup.\n  --apply    Create a consistent SQLite backup, then migrate one task per transaction.\n  --verify   Check source invariants, event sequences, counts, and orphan rows.\n\nApply policy:\n  Only blob tasks with status success, failed, or completed are migrated.\n  pending, running, paused, and unknown statuses are deferred for a later run.\n  There is no --force or --include-active option. Apply requires the estimated\n  database/event growth plus a 10 GiB free-space reserve.\n\nExit codes:\n  0  Completed with no malformed rows or invariant failures.\n  1  Safe tasks completed but a row/invariant failed, or apply was blocked.\n  2  Invalid command-line arguments.\n\nThe command never runs automatically at server startup and never runs VACUUM.";
+export declare const USAGE_BACKFILL_HELP = "Usage:\n  crewx db backfill-usage [--dry-run|--apply|--verify] [--db PATH] [--backup PATH]\n  crewx db backfill-usage --restore SNAPSHOT [--db PATH]\n\nModes:\n  --dry-run  Show provider/reason recovery plans without changing the database (default).\n  --apply    Create a row-level undo snapshot, then account one task per transaction.\n  --verify   Recheck remaining targets and usageAccounting markers without changing the database.\n  --restore  Restore rows from SNAPSHOT when their current values still match the snapshot after-state.\n\nApply policy:\n  Only success, failed, and completed tasks with zero recorded usage are considered.\n  Workflow/MCP anchors and plugin/mock rows are excluded. Rows completed within 24 hours\n  are not marked unavailable when their logs do not contain usage.\n\nExit codes:\n  0  Completed successfully.\n  1  Apply was blocked or one or more task updates failed.\n  2  Invalid command-line arguments.";
 export declare function handleDb(args: string[]): Promise<void>;