@crewx/cli 0.9.0-rc.148 → 0.9.0-rc.149

package/dist/bootstrap/codex-writable-roots.d.ts

@@ -49,7 +49,13 @@ export declare function composeAdditionalArgsProviders(...providers: AdditionalA
 /**
  * Create an `AdditionalArgsProvider` (SDK extension point, WI-20260703-001)
  * that injects CrewX home as a Codex writable root for `workspace-write`
- * equivalent modes (`agent`, `auto`, `undefined`).
+ * equivalent modes (`agent`, `auto`, `undefined`). Only explicit `agent`
+ * also receives a permission profile allowing localhost network access and
+ * writes to the same CrewX home. `auto`/`undefined` keep their existing policy.
+ *
+ * All overrides use `-c`, supported by both `exec` and `exec resume`. Keep
+ * writable_roots for older Codex versions that ignore permission profiles
+ * and fall back to the closed workspace-write sandbox. No version gate.
  *
  * No-ops for:
  *   - Non-codex providers.

package/dist/bootstrap/codex-writable-roots.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.resolveCrewxHome=o;exports.escapeTomlBasicString=t;exports.buildCodexWritableRootArgs=i;exports.createCodexSkipGitRepoCheckProvider=u;exports.composeAdditionalArgsProviders=l;exports.createCodexWritableRootsProvider=p;const s=require("os");const d=require("path");const a=new Set(["read-only","plan","agent-full-access","yolo","danger-full-access"]);function o(){return process.env.CREWX_HOME??(0,d.join)((0,s.homedir)(),".crewx")}function t(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\n/g,"\\n").replace(/\r/g,"\\r").replace(/\t/g,"\\t")}function i(e){const r=t(e);return["-c",`sandbox_workspace_write.writable_roots=["${r}"]`]}function n(e){return e.providerId==="codex"||e.providerStr==="cli/codex"}function u(e){return r=>{if(!n(r))return[];if(!e)return[];return["--skip-git-repo-check"]}}function l(...e){return r=>e.flatMap(c=>c(r))}function p(e=o()){return r=>{if(!n(r))return[];if(r.mode!==void 0&&a.has(r.mode))return[];return i(e)}}
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.resolveCrewxHome=i;exports.escapeTomlBasicString=t;exports.buildCodexWritableRootArgs=s;exports.createCodexSkipGitRepoCheckProvider=u;exports.composeAdditionalArgsProviders=p;exports.createCodexWritableRootsProvider=w;const a=require("os");const d=require("path");const l=new Set(["read-only","plan","agent-full-access","yolo","danger-full-access"]);function i(){return process.env.CREWX_HOME??(0,d.join)((0,a.homedir)(),".crewx")}function t(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\n/g,"\\n").replace(/\r/g,"\\r").replace(/\t/g,"\\t")}function s(e){const r=t(e);return["-c",`sandbox_workspace_write.writable_roots=["${r}"]`]}function n(e){return e.providerId==="codex"||e.providerStr==="cli/codex"}function u(e){return r=>{if(!n(r))return[];if(!e)return[];return["--skip-git-repo-check"]}}function p(...e){return r=>e.flatMap(o=>o(r))}function w(e=i()){return r=>{if(!n(r))return[];if(r.mode!==void 0&&l.has(r.mode))return[];const o=s(e);if(r.mode==="agent"){const c=t(e);o.push("-c","default_permissions=crewx","-c",'permissions.crewx.extends=":workspace"',"-c","features.network_proxy=true","-c","permissions.crewx.network.enabled=true","-c","permissions.crewx.network.allow_local_binding=true","-c",'permissions.crewx.network.domains={"localhost"="allow","127.0.0.1"="allow"}',"-c",`permissions.crewx.filesystem={"${c}"="write"}`)}return o}}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewx/cli",
-  "version": "0.9.0-rc.148",
+  "version": "0.9.0-rc.149",
   "license": "UNLICENSED",
   "engines": {
     "node": ">=20.19.0"
@@ -25,20 +25,20 @@
     "better-sqlite3": "*",
     "dotenv": "17.2.3",
     "isomorphic-git": "1.37.1",
-    "@crewx/sdk": "0.9.0-rc.148",
-    "@crewx/search": "0.1.10-rc.144",
-    "@crewx/cron": "0.1.10-rc.183",
-    "@crewx/knowledge-core": "0.1.17-rc.158",
-    "@crewx/memory": "0.1.23-rc.165",
-    "@crewx/workflow": "0.3.22-rc.194",
-    "@crewx/doc": "0.1.9-rc.141",
-    "@crewx/wbs": "0.1.10-rc.174",
-    "@crewx/chromex": "0.1.0-rc.181",
-    "@crewx/wi": "0.1.10-rc.168",
-    "@crewx/shared": "0.0.6-rc.63",
-    "@crewx/skill": "0.1.20-rc.42",
-    "@crewx/notify": "0.1.0-rc.119",
-    "@crewx/app": "0.1.0-rc.29"
+    "@crewx/sdk": "0.9.0-rc.149",
+    "@crewx/knowledge-core": "0.1.17-rc.159",
+    "@crewx/search": "0.1.10-rc.145",
+    "@crewx/wbs": "0.1.10-rc.175",
+    "@crewx/doc": "0.1.9-rc.142",
+    "@crewx/cron": "0.1.10-rc.184",
+    "@crewx/workflow": "0.3.22-rc.195",
+    "@crewx/wi": "0.1.10-rc.169",
+    "@crewx/chromex": "0.1.0-rc.182",
+    "@crewx/skill": "0.1.20-rc.43",
+    "@crewx/app": "0.1.0-rc.30",
+    "@crewx/memory": "0.1.23-rc.166",
+    "@crewx/shared": "0.0.6-rc.64",
+    "@crewx/notify": "0.1.0-rc.120"
   },
   "devDependencies": {
     "@types/better-sqlite3": "*",