@hasna/loops 0.3.1 → 0.3.2

package/README.md

@@ -76,6 +76,17 @@ loops create agent supply-chain-watch \
   --prompt "Check for suspicious dependency or supply-chain changes. Report only concrete findings."
 ```
 
+Run a Codewith loop with a Codewith-native auth profile:
+
+```bash
+loops create agent supply-chain-watch \
+  --provider codewith \
+  --auth-profile account001 \
+  --every 15m \
+  --cwd /path/to/repo \
+  --prompt "Check for suspicious dependency or supply-chain changes. Report only concrete findings."
+```
+
 For `codewith` and `aicopilot` account isolation, register matching OpenAccounts tools first if they are not built in on the machine:
 
 ```bash
@@ -157,7 +168,7 @@ loops remove <id-or-name>
 loops run-now <id-or-name>
 ```
 
-Use `--json` for machine-readable output. Prompt bodies and run stdout/stderr are redacted by default in status output.
+Use `--json` for machine-readable output. Prompt bodies and run stdout/stderr are redacted by default in status output. `loops run-now` exits non-zero when the recorded run fails or times out.
 
 ## Daemon
 
@@ -208,6 +219,7 @@ The adapters intentionally use provider command surfaces instead of pretending e
 - Cursor is CLI-first for now via `cursor-agent -p`; treat output as less stable until a stronger public SDK contract is selected.
 - Codex uses `codex exec --json --ephemeral --ask-for-approval never`.
 - When `--account` or a step `account` is set, OpenLoops resolves `accounts env <profile> --tool <tool>` before spawning the target, strips inherited tool home/API-key variables, and applies the selected profile only to that process. Missing account profiles fail before the provider binary receives the prompt.
+- `--auth-profile` and step `authProfile` are provider-native auth selectors. They currently apply to Codewith and are passed to Codewith as `--auth-profile <name>` before `exec`; they do not call OpenAccounts.
 - Daemon and scheduled runs prepend common user executable directories such as `~/.local/bin` and `~/.bun/bin` before resolving provider CLIs.
 
 For production loops that can mutate repos, prefer disposable worktrees and explicit prompts that name allowed write scope.

package/dist/cli/index.js

@@ -260,6 +260,11 @@ function validateTarget(value, label) {
     const providers = ["claude", "cursor", "codewith", "aicopilot", "opencode", "codex"];
     if (!providers.includes(value.provider))
       throw new Error(`${label}.provider must be one of ${providers.join(", ")}`);
+    if (value.authProfile !== undefined) {
+      assertString(value.authProfile, `${label}.authProfile`);
+      if (value.provider !== "codewith")
+        throw new Error(`${label}.authProfile is currently supported only for provider codewith`);
+    }
     return value;
   }
   throw new Error(`${label}.type must be command or agent`);
@@ -1621,7 +1626,7 @@ function agentArgs(target) {
       args.push(...target.extraArgs ?? [], target.prompt);
       return args;
     case "codewith":
-      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
+      args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : [], "--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)
@@ -2610,7 +2615,7 @@ function runDoctor(store) {
 
 // src/cli/index.ts
 var program = new Command;
-program.name("loops").description("Persistent local loops for commands and headless coding agents").version("0.3.1");
+program.name("loops").description("Persistent local loops for commands and headless coding agents").version("0.3.2");
 program.option("-j, --json", "print JSON");
 function isJson() {
   return Boolean(program.opts().json);
@@ -2704,6 +2709,13 @@ function accountFromOpts(opts) {
     throw new Error("--account-tool requires --account");
   return opts.account ? { profile: opts.account, tool: opts.accountTool } : undefined;
 }
+function providerAuthProfileFromOpts(opts, provider) {
+  if (!opts.authProfile)
+    return;
+  if (provider !== "codewith")
+    throw new Error("--auth-profile is currently supported only for --provider codewith");
+  return opts.authProfile;
+}
 var create = program.command("create").description("create loops");
 addAccountOptions(addScheduleOptions(create.command("command <name>").description("create a deterministic shell command loop").requiredOption("--cmd <command>", "command string to execute").option("--cwd <dir>", "working directory").option("--timeout <duration>", "run timeout").option("--no-shell", "execute without a shell"))).action((name, opts) => {
   const store = new Store;
@@ -2722,7 +2734,7 @@ addAccountOptions(addScheduleOptions(create.command("command <name>").descriptio
     store.close();
   }
 });
-addAccountOptions(addScheduleOptions(create.command("agent <name>").description("create a headless coding-agent loop").requiredOption("--provider <provider>", "claude, cursor, codewith, aicopilot, opencode, or codex").requiredOption("--prompt <prompt>", "agent prompt").option("--cwd <dir>", "working directory").option("--model <model>", "model").option("--agent <agent>", "provider-specific agent").option("--timeout <duration>", "run timeout").option("--config-isolation <mode>", "safe or none", "safe"))).action((name, opts) => {
+addAccountOptions(addScheduleOptions(create.command("agent <name>").description("create a headless coding-agent loop").requiredOption("--provider <provider>", "claude, cursor, codewith, aicopilot, opencode, or codex").requiredOption("--prompt <prompt>", "agent prompt").option("--cwd <dir>", "working directory").option("--model <model>", "model").option("--agent <agent>", "provider-specific agent").option("--auth-profile <profile>", "provider-native auth profile; currently supported for codewith").option("--timeout <duration>", "run timeout").option("--config-isolation <mode>", "safe or none", "safe"))).action((name, opts) => {
   const provider = opts.provider;
   if (!["claude", "cursor", "codewith", "aicopilot", "opencode", "codex"].includes(provider)) {
     throw new Error("unsupported provider");
@@ -2739,6 +2751,7 @@ addAccountOptions(addScheduleOptions(create.command("agent <name>").description(
       cwd: opts.cwd,
       model: opts.model,
       agent: opts.agent,
+      authProfile: providerAuthProfileFromOpts(opts, provider),
       timeoutMs: opts.timeout ? parseDuration(opts.timeout) : undefined,
       configIsolation: opts.configIsolation,
       account: accountFromOpts(opts)
@@ -3005,6 +3018,8 @@ program.command("run-now <idOrName>").option("--show-output", "show stdout/stder
     print(publicRun(run, opts.showOutput), `${run.id} ${run.status}`);
     if (!isJson() && opts.showOutput)
       printTextOutput(run);
+    if (run.status !== "succeeded")
+      process.exitCode = 1;
   } finally {
     store.close();
   }

package/dist/daemon/index.js

@@ -260,6 +260,11 @@ function validateTarget(value, label) {
     const providers = ["claude", "cursor", "codewith", "aicopilot", "opencode", "codex"];
     if (!providers.includes(value.provider))
       throw new Error(`${label}.provider must be one of ${providers.join(", ")}`);
+    if (value.authProfile !== undefined) {
+      assertString(value.authProfile, `${label}.authProfile`);
+      if (value.provider !== "codewith")
+        throw new Error(`${label}.authProfile is currently supported only for provider codewith`);
+    }
     return value;
   }
   throw new Error(`${label}.type must be command or agent`);
@@ -1556,7 +1561,7 @@ function agentArgs(target) {
       args.push(...target.extraArgs ?? [], target.prompt);
       return args;
     case "codewith":
-      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
+      args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : [], "--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)
@@ -2467,7 +2472,7 @@ function enableStartup(result) {
 
 // src/daemon/index.ts
 var program = new Command;
-program.name("loops-daemon").description("OpenLoops daemon helper").version("0.3.1");
+program.name("loops-daemon").description("OpenLoops daemon helper").version("0.3.2");
 program.command("run").option("--interval-ms <ms>", "tick interval", (value) => Number(value)).action(async (opts) => runDaemon({ intervalMs: opts.intervalMs }));
 program.command("start").action(async () => {
   const result = await startDaemon({ cliEntry: process.argv[1] ?? "loops-daemon", args: ["run"] });

package/dist/index.js

@@ -258,6 +258,11 @@ function validateTarget(value, label) {
     const providers = ["claude", "cursor", "codewith", "aicopilot", "opencode", "codex"];
     if (!providers.includes(value.provider))
       throw new Error(`${label}.provider must be one of ${providers.join(", ")}`);
+    if (value.authProfile !== undefined) {
+      assertString(value.authProfile, `${label}.authProfile`);
+      if (value.provider !== "codewith")
+        throw new Error(`${label}.authProfile is currently supported only for provider codewith`);
+    }
     return value;
   }
   throw new Error(`${label}.type must be command or agent`);
@@ -1546,7 +1551,7 @@ function agentArgs(target) {
       args.push(...target.extraArgs ?? [], target.prompt);
       return args;
     case "codewith":
-      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
+      args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : [], "--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)

package/dist/lib/store.js

@@ -258,6 +258,11 @@ function validateTarget(value, label) {
     const providers = ["claude", "cursor", "codewith", "aicopilot", "opencode", "codex"];
     if (!providers.includes(value.provider))
       throw new Error(`${label}.provider must be one of ${providers.join(", ")}`);
+    if (value.authProfile !== undefined) {
+      assertString(value.authProfile, `${label}.authProfile`);
+      if (value.provider !== "codewith")
+        throw new Error(`${label}.authProfile is currently supported only for provider codewith`);
+    }
     return value;
   }
   throw new Error(`${label}.type must be command or agent`);

package/dist/sdk/index.js

@@ -258,6 +258,11 @@ function validateTarget(value, label) {
     const providers = ["claude", "cursor", "codewith", "aicopilot", "opencode", "codex"];
     if (!providers.includes(value.provider))
       throw new Error(`${label}.provider must be one of ${providers.join(", ")}`);
+    if (value.authProfile !== undefined) {
+      assertString(value.authProfile, `${label}.authProfile`);
+      if (value.provider !== "codewith")
+        throw new Error(`${label}.authProfile is currently supported only for provider codewith`);
+    }
     return value;
   }
   throw new Error(`${label}.type must be command or agent`);
@@ -1546,7 +1551,7 @@ function agentArgs(target) {
       args.push(...target.extraArgs ?? [], target.prompt);
       return args;
     case "codewith":
-      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
+      args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : [], "--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", "workspace-write", "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)

package/dist/types.d.ts

@@ -44,6 +44,7 @@ export interface AgentTarget {
     cwd?: string;
     model?: string;
     agent?: string;
+    authProfile?: string;
     extraArgs?: string[];
     timeoutMs?: number;
     configIsolation?: AgentConfigIsolation;

package/docs/USAGE.md

@@ -76,6 +76,17 @@ loops create agent supply-chain-watch \
   --prompt "Check for suspicious dependency or supply-chain changes. Report only concrete findings."
 ```
 
+Run a Codewith loop with a Codewith-native auth profile:
+
+```bash
+loops create agent supply-chain-watch \
+  --provider codewith \
+  --auth-profile account001 \
+  --every 15m \
+  --cwd /path/to/repo \
+  --prompt "Check for suspicious dependency or supply-chain changes. Report only concrete findings."
+```
+
 For `codewith` and `aicopilot` account isolation, register matching OpenAccounts tools first if they are not built in on the machine:
 
 ```bash
@@ -157,7 +168,7 @@ loops remove <id-or-name>
 loops run-now <id-or-name>
 ```
 
-Use `--json` for machine-readable output. Prompt bodies and run stdout/stderr are redacted by default in status output.
+Use `--json` for machine-readable output. Prompt bodies and run stdout/stderr are redacted by default in status output. `loops run-now` exits non-zero when the recorded run fails or times out.
 
 ## Daemon
 
@@ -208,6 +219,7 @@ The adapters intentionally use provider command surfaces instead of pretending e
 - Cursor is CLI-first for now via `cursor-agent -p`; treat output as less stable until a stronger public SDK contract is selected.
 - Codex uses `codex exec --json --ephemeral --ask-for-approval never`.
 - When `--account` or a step `account` is set, OpenLoops resolves `accounts env <profile> --tool <tool>` before spawning the target, strips inherited tool home/API-key variables, and applies the selected profile only to that process. Missing account profiles fail before the provider binary receives the prompt.
+- `--auth-profile` and step `authProfile` are provider-native auth selectors. They currently apply to Codewith and are passed to Codewith as `--auth-profile <name>` before `exec`; they do not call OpenAccounts.
 - Daemon and scheduled runs prepend common user executable directories such as `~/.local/bin` and `~/.bun/bin` before resolving provider CLIs.
 
 For production loops that can mutate repos, prefer disposable worktrees and explicit prompts that name allowed write scope.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/loops",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   "type": "module",
   "main": "dist/index.js",