@fieldwangai/agentflow 0.1.106 → 0.1.107

package/bin/lib/agent-runners.mjs

@@ -1667,6 +1667,10 @@ export function runClaudeCodeAgentWithPrompt(cliWorkspace, promptText, options =
     process.env.AGENTFLOW_CLAUDE_CODE_BYPASS_PERMISSIONS !== "0" &&
     process.env.AGENTFLOW_CLAUDE_CODE_BYPASS_PERMISSIONS !== "false";
   const args = ["-p", "--output-format", "stream-json", "--verbose", "--add-dir", ws];
+  for (const dir of Array.isArray(options.addDirs) ? options.addDirs : []) {
+    const abs = path.resolve(dir);
+    if (abs && abs !== ws) args.push("--add-dir", abs);
+  }
   if (bypassPermissions) args.push("--dangerously-skip-permissions");
   if (model) args.push("--model", model);
   args.push(promptText);
@@ -1848,6 +1852,7 @@ export function runCodexAgentWithPrompt(cliWorkspace, promptText, options = {})
   const outputLastMessagePath = path.join(tmpDir, `codex-last-message-${process.pid}-${Date.now()}.txt`);
   const args = buildCodexExecArgs({
     workspace: ws,
+    addDirs: options.addDirs,
     model,
     outputLastMessagePath,
     promptText,

package/bin/lib/composer-agent.mjs

@@ -421,6 +421,9 @@ export function startComposerAgent(opts) {
     detached: Boolean(opts.detached),
     force: Boolean(opts.force),
     env,
+    addDirs: Array.isArray(opts.writableDirs)
+      ? opts.writableDirs.map((dir) => String(dir || "").trim()).filter(Boolean)
+      : [],
   };
 
   if (cli === "opencode") {

package/bin/lib/prd-workflow-collaboration.mjs

@@ -44,6 +44,10 @@ function normalizeTapdId(value) {
   return String(value || "").trim();
 }
 
+function normalizeShareToken(value) {
+  return String(value || "").trim();
+}
+
 function publicWorkflow(record, userId = "") {
   if (!record) return null;
   const actorId = normalizeUserId(userId);
@@ -55,6 +59,8 @@ function publicWorkflow(record, userId = "") {
     role: actorId === record.ownerId ? "owner" : String(members[actorId] || ""),
     memberCount: Object.keys(members).length,
     members: Object.entries(members).map(([id, role]) => ({ userId: id, role })),
+    shareActive: Boolean(record.shareToken),
+    shareCreatedAt: record.shareCreatedAt || "",
     createdAt: record.createdAt || "",
     updatedAt: record.updatedAt || "",
   };
@@ -75,6 +81,17 @@ export function getPrdWorkflowCollaborationById(workflowId) {
   return readRegistry().workflows[String(workflowId || "").trim()] || null;
 }
 
+export function getPrdWorkflowCollaborationByShareToken(shareToken) {
+  const token = normalizeShareToken(shareToken);
+  if (!token) return null;
+  const incoming = Buffer.from(token);
+  return Object.values(readRegistry().workflows).find((record) => {
+    if (!record?.shareToken) return false;
+    const stored = Buffer.from(String(record.shareToken));
+    return stored.length === incoming.length && crypto.timingSafeEqual(stored, incoming);
+  }) || null;
+}
+
 export function getPrdWorkflowCollaborationForUser(tapdId, userId) {
   const normalizedTapdId = normalizeTapdId(tapdId);
   const actorId = normalizeUserId(userId);
@@ -117,6 +134,58 @@ export function prdWorkflowCollaborationSummary(record, userId) {
   return publicWorkflow(record, userId);
 }
 
+export function ensurePrdWorkflowShareLink({ tapdId, userId }) {
+  const ensured = ensurePrdWorkflowCollaboration({ tapdId, userId });
+  if (ensured.error) return ensured;
+  const actorId = normalizeUserId(userId);
+  if (prdWorkflowCollaborationAccess(ensured.record, actorId).role !== "owner") {
+    return { error: "Only the Workflow owner can create a share link", status: 403 };
+  }
+  if (ensured.record.shareToken) {
+    return {
+      record: ensured.record,
+      workflow: publicWorkflow(ensured.record, actorId),
+      shareToken: ensured.record.shareToken,
+      created: false,
+    };
+  }
+  const registry = readRegistry();
+  const record = registry.workflows[ensured.record.id];
+  if (!record) return { error: "PRD Workflow collaboration not found", status: 404 };
+  const now = new Date().toISOString();
+  record.shareToken = crypto.randomBytes(24).toString("base64url");
+  record.shareCreatedAt = now;
+  record.updatedAt = now;
+  writeRegistry(registry);
+  return {
+    record,
+    workflow: publicWorkflow(record, actorId),
+    shareToken: record.shareToken,
+    created: true,
+  };
+}
+
+export function revokePrdWorkflowShareLink({ tapdId, userId }) {
+  const record = getPrdWorkflowCollaborationForUser(tapdId, userId);
+  if (!record) return { error: "PRD Workflow collaboration not found", status: 404 };
+  const actorId = normalizeUserId(userId);
+  if (prdWorkflowCollaborationAccess(record, actorId).role !== "owner") {
+    return { error: "Only the Workflow owner can revoke a share link", status: 403 };
+  }
+  const registry = readRegistry();
+  const stored = registry.workflows[record.id];
+  if (!stored) return { error: "PRD Workflow collaboration not found", status: 404 };
+  const revoked = Boolean(stored.shareToken);
+  delete stored.shareToken;
+  delete stored.shareCreatedAt;
+  stored.updatedAt = new Date().toISOString();
+  writeRegistry(registry);
+  return {
+    workflow: publicWorkflow(stored, actorId),
+    revoked,
+  };
+}
+
 export function addPrdWorkflowCollaborationMember({
   workflowId,
   userId,