@gkorepanov/ccodex 0.4.13 → 0.4.15

package/dist/handoff/service.js

@@ -89,7 +89,7 @@ function explicitPermissionParams(params, permissions) {
     const { sandbox: _sandbox, sandboxPolicy: _sandboxPolicy, ...rest } = params;
     return { ...rest, ...permissions };
 }
-function permissionSandbox(permissions, cwd, fallback) {
+function permissionSandbox(permissions, cwd, fallback, runtimeWorkspaceRoots = [cwd]) {
     if (permissions === ":danger-full-access")
         return { type: "dangerFullAccess" };
     if (permissions === ":read-only")
@@ -97,7 +97,7 @@ function permissionSandbox(permissions, cwd, fallback) {
     if (permissions === ":workspace") {
         return {
             type: "workspaceWrite",
-            writableRoots: [cwd],
+            writableRoots: [...new Set([cwd, ...runtimeWorkspaceRoots])],
             networkAccess: false,
             excludeTmpdirEnvVar: false,
             excludeSlashTmp: false,
@@ -105,13 +105,15 @@ function permissionSandbox(permissions, cwd, fallback) {
     }
     return fallback;
 }
-function canonicalSettings(source, staged, turn, cwd) {
+function canonicalSettings(source, staged, turn, cwd, runtimeWorkspaceRoots) {
     const permissions = explicitPermissions(source, staged, turn);
     const { threadId: _threadId, ...merged } = { ...source, ...staged };
-    const sandbox = permissionSandbox(permissions.permissions, cwd, turn.sandboxPolicy ?? staged.sandboxPolicy ?? source.sandboxPolicy ?? source.sandbox);
+    const sandbox = permissionSandbox(permissions.permissions, cwd, turn.sandboxPolicy ?? staged.sandboxPolicy ?? source.sandboxPolicy ?? source.sandbox, runtimeWorkspaceRoots);
     return {
         ...merged,
         ...permissions,
+        cwd,
+        runtimeWorkspaceRoots,
         sandbox,
         sandboxPolicy: sandbox,
         activePermissionProfile: { id: permissions.permissions, extends: null },
@@ -400,6 +402,18 @@ export class CrossProviderForks {
                 const result = await this.withAdminLock(publicThreadId, () => stock.request(method, params));
                 return { provider: "stock", result: projectRpcToPublicThread({ result }, owner).result };
             }
+            if (method === "thread/metadata/update") {
+                const metadata = publicParams;
+                const result = await this.withAdminLock(publicThreadId, async () => {
+                    const response = await stock.request(method, params);
+                    if (metadata.isPinned !== undefined && metadata.isPinned !== null
+                        && !this.lineage.updateTaskPinned(publicThreadId, metadata.isPinned)) {
+                        throw new Error(`Unknown logical thread '${publicThreadId}'.`);
+                    }
+                    return response;
+                });
+                return { provider: "stock", result: projectRpcToPublicThread({ result }, owner).result };
+            }
             if (method === "thread/read" || method === "thread/resume") {
                 const result = await stock.request(method, params);
                 const resume = method === "thread/resume" ? params : undefined;
@@ -518,9 +532,17 @@ export class CrossProviderForks {
             }
         }
         if (method === "thread/metadata/update") {
+            const metadata = publicParams;
             return {
                 provider: "claude",
-                result: await this.claude.updateThreadMetadata(params),
+                result: await this.withAdminLock(publicThreadId, async () => {
+                    const result = await this.claude.updateThreadMetadata(params);
+                    if (metadata.isPinned !== undefined && metadata.isPinned !== null
+                        && !this.lineage.updateTaskPinned(publicThreadId, metadata.isPinned)) {
+                        throw new Error(`Unknown logical thread '${publicThreadId}'.`);
+                    }
+                    return result;
+                }),
             };
         }
         if (method === "thread/archive") {
@@ -992,7 +1014,7 @@ export class CrossProviderForks {
                 : connectionId;
             const { source, summary, sourceTurns, developerInstructions, targetSettings, permissionSettings } = await this.providerSwitchMaterial(job, stock, workerConnectionId);
             if (job.targetProvider === "claude") {
-                const started = await this.claude.startHiddenThread(this.targetThreadStart(job, source.thread, developerInstructions, permissionSettings));
+                const started = await this.claude.startHiddenThread(this.targetThreadStart(job, source.thread, developerInstructions, permissionSettings, targetSettings));
                 target = { provider: "claude", threadId: started.thread.id };
                 if (!this.store.checkpointProviderSwitchTarget(job.id, {
                     backendThreadId: started.thread.id,
@@ -1030,7 +1052,7 @@ export class CrossProviderForks {
             };
             this.stockTargetBuilds.set(workerConnectionId, build);
             const started = await stock.request("thread/start", {
-                ...this.targetThreadStart(job, source.thread, developerInstructions, permissionSettings),
+                ...this.targetThreadStart(job, source.thread, developerInstructions, permissionSettings, targetSettings),
                 threadSource: build.expectedThreadSource,
             });
             target = { provider: "stock", threadId: started.thread.id };
@@ -1223,7 +1245,7 @@ export class CrossProviderForks {
             model: params.model,
             modelProvider: params.modelProvider ?? "openai",
             cwd: params.cwd ?? source.thread.cwd,
-            ...(params.runtimeWorkspaceRoots !== undefined ? { runtimeWorkspaceRoots: params.runtimeWorkspaceRoots } : {}),
+            runtimeWorkspaceRoots: [...(params.runtimeWorkspaceRoots ?? source.runtimeWorkspaceRoots)],
             ...(params.serviceTier !== undefined ? { serviceTier: params.serviceTier } : {}),
             ...(params.approvalPolicy !== undefined ? { approvalPolicy: params.approvalPolicy } : {}),
             ...(params.approvalsReviewer !== undefined ? { approvalsReviewer: params.approvalsReviewer } : {}),
@@ -1770,7 +1792,10 @@ export class CrossProviderForks {
                 thread: source.thread,
                 backendTurns: source.turns,
                 turns: await this.visibleTurns(job.publicThreadId, source.turns, stock),
-                settings: source.settings,
+                settings: {
+                    ...source.settings,
+                    runtimeWorkspaceRoots: source.runtimeWorkspaceRoots,
+                },
             };
         }
         const [read, resume] = await Promise.all([
@@ -1795,6 +1820,13 @@ export class CrossProviderForks {
         const summary = job.summary
             ?? await this.providerSwitchSummary(job, source.turns, stock, connectionId);
         const cwd = job.turnParams.cwd ?? job.settings.cwd ?? source.thread.cwd;
+        const sourceRoots = Array.isArray(source.settings.runtimeWorkspaceRoots)
+            ? source.settings.runtimeWorkspaceRoots
+            : [source.thread.cwd];
+        const runtimeWorkspaceRoots = job.turnParams.runtimeWorkspaceRoots !== undefined
+            && job.turnParams.runtimeWorkspaceRoots !== null
+            ? [...new Set(job.turnParams.runtimeWorkspaceRoots)]
+            : [...new Set(sourceRoots.map((root) => root === source.thread.cwd ? cwd : root))];
         const permissionSettings = explicitPermissions(source.settings, job.settings, job.turnParams);
         const completedAt = Math.floor(Date.now() / 1_000);
         const compactTurn = {
@@ -1814,7 +1846,7 @@ export class CrossProviderForks {
             ],
             developerInstructions: handoffInstructions(source.developerInstructions, summary),
             targetSettings: {
-                ...canonicalSettings(source.settings, job.settings, job.turnParams, cwd),
+                ...canonicalSettings(source.settings, job.settings, job.turnParams, cwd, runtimeWorkspaceRoots),
                 model: job.targetModel,
                 modelProvider: job.targetProvider === "claude" ? "claude" : "openai",
             },
@@ -1849,13 +1881,18 @@ export class CrossProviderForks {
         }
         return (await this.summarizeStock({ threadId: resolved.epoch.backendThreadId }, turns, resolved.epoch.model, stock, connectionId)).summary;
     }
-    targetThreadStart(job, source, developerInstructions, permissionSettings) {
+    targetThreadStart(job, source, developerInstructions, permissionSettings, targetSettings) {
         const turn = job.turnParams;
         const settings = job.settings;
         return {
             model: job.targetModel,
             modelProvider: job.targetProvider === "claude" ? "claude" : "openai",
-            cwd: turn.cwd ?? settings.cwd ?? source.cwd,
+            cwd: typeof targetSettings.cwd === "string"
+                ? targetSettings.cwd
+                : turn.cwd ?? settings.cwd ?? source.cwd,
+            runtimeWorkspaceRoots: Array.isArray(targetSettings.runtimeWorkspaceRoots)
+                ? targetSettings.runtimeWorkspaceRoots
+                : [source.cwd],
             developerInstructions,
             ...permissionSettings,
             ...(turn.serviceTier !== undefined