@hasna/loops 0.3.42 → 0.3.44

package/dist/cli/index.js

@@ -3,7 +3,7 @@
 
 // src/lib/store.ts
 import { Database } from "bun:sqlite";
-import { mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
+import { chmodSync, existsSync, mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { dirname, join as join3 } from "path";
 
@@ -824,6 +824,20 @@ function workItemStatusForLoopRun(status, attempt, maxAttempts) {
   }
   return;
 }
+function chmodIfExists(path, mode) {
+  try {
+    if (existsSync(path))
+      chmodSync(path, mode);
+  } catch {}
+}
+function ensurePrivateStorePath(file) {
+  const dir = dirname(file);
+  mkdirSync3(dir, { recursive: true, mode: 448 });
+  chmodIfExists(dir, 448);
+  chmodIfExists(file, 384);
+  chmodIfExists(`${file}-wal`, 384);
+  chmodIfExists(`${file}-shm`, 384);
+}
 
 class Store {
   db;
@@ -831,11 +845,13 @@ class Store {
   constructor(path) {
     const file = path ?? dbPath();
     if (file !== ":memory:")
-      mkdirSync3(dirname(file), { recursive: true, mode: 448 });
+      ensurePrivateStorePath(file);
     this.rootDir = file === ":memory:" ? mkdtempSync(join3(tmpdir(), "open-loops-store-")) : dirname(file);
     this.db = new Database(file);
     this.db.exec("PRAGMA busy_timeout = 5000;");
     this.db.exec("PRAGMA journal_mode = WAL;");
+    if (file !== ":memory:")
+      ensurePrivateStorePath(file);
     this.migrate();
   }
   migrate() {
@@ -2661,7 +2677,7 @@ class Store {
 
 // src/cli/index.ts
 import { createHash as createHash3, randomUUID } from "crypto";
-import { closeSync, existsSync as existsSync4, mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync2, openSync as openSync2, readFileSync as readFileSync2, realpathSync, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
+import { closeSync, existsSync as existsSync5, mkdirSync as mkdirSync6, mkdtempSync as mkdtempSync2, openSync as openSync2, readFileSync as readFileSync2, realpathSync, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
 import { spawnSync as spawnSync5 } from "child_process";
 import { join as join6, resolve as resolve2 } from "path";
 import { tmpdir as tmpdir2 } from "os";
@@ -2791,7 +2807,7 @@ import { resolveMachineCommand } from "@hasna/machines/consumer";
 
 // src/lib/accounts.ts
 import { spawnSync } from "child_process";
-import { existsSync } from "fs";
+import { existsSync as existsSync2 } from "fs";
 var EXPORT_RE = /^export\s+([A-Za-z_][A-Za-z0-9_]*)=(.*)$/;
 function accountToolForProvider(provider) {
   switch (provider) {
@@ -2876,7 +2892,7 @@ function resolveAccountEnv(account, toolHint, env) {
   const profileDir = (accountDirEnvVar(tool) ? accountEnv[accountDirEnvVar(tool)] : undefined) ?? primaryAccountDir(result.stdout);
   if (!profileDir)
     throw new Error(`accounts env returned no profile directory for ${account.profile}/${tool}`);
-  if (!existsSync(profileDir))
+  if (!existsSync2(profileDir))
     throw new Error(`account profile directory does not exist for ${account.profile}/${tool}: ${profileDir}`);
   return {
     ...accountEnv,
@@ -3240,7 +3256,7 @@ function agentArgs(target) {
     case "codex":
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("exec", "--json", "--ephemeral", "--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      args.push("exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)
@@ -4762,7 +4778,7 @@ async function tick(deps) {
 }
 
 // src/daemon/control.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
 import { hostname } from "os";
 import { dirname as dirname2 } from "path";
 
@@ -4790,7 +4806,7 @@ async function runLoop(opts) {
 
 // src/daemon/control.ts
 function readPid(path = pidFilePath()) {
-  if (!existsSync2(path))
+  if (!existsSync3(path))
     return;
   try {
     const pid = Number(readFileSync(path, "utf8").trim());
@@ -5063,7 +5079,7 @@ async function startDaemon(opts) {
 }
 
 // src/daemon/install.ts
-import { chmodSync, mkdirSync as mkdirSync5, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync5, writeFileSync as writeFileSync3 } from "fs";
 import { spawnSync as spawnSync3 } from "child_process";
 import { dirname as dirname3 } from "path";
 function installStartup(cliEntry, execPath = process.execPath, args = ["daemon", "run"]) {
@@ -5122,7 +5138,7 @@ ${args.map((arg) => `    <string>${arg}</string>`).join(`
 </dict>
 </plist>
 `);
-    chmodSync(path, 384);
+    chmodSync2(path, 384);
     return {
       platform: process.platform,
       path,
@@ -5716,7 +5732,7 @@ function buildScriptInventoryReport(store, opts = {}) {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.3.42",
+  version: "0.3.44",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -5806,7 +5822,7 @@ function packageVersion() {
 
 // src/lib/templates.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { homedir as homedir3 } from "os";
 import { basename as basename3, isAbsolute, join as join5, relative, resolve } from "path";
 var TODOS_TASK_WORKER_VERIFIER_TEMPLATE_ID = "todos-task-worker-verifier";
@@ -6066,7 +6082,7 @@ function defaultWorktreeRoot(root) {
   return join5(homedir3(), ".hasna", "loops", "worktrees");
 }
 function gitRootFor(path) {
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return;
   try {
     return execFileSync("git", ["-C", path, "rev-parse", "--show-toplevel"], {
@@ -6526,7 +6542,7 @@ function renderLifecycleBoundedTemplate(id, values) {
     variant: values.variant,
     agent: values.agent,
     permissionMode: values.permissionMode,
-    sandbox: values.sandbox,
+    sandbox: values.sandbox ?? (id === REPORT_ONLY_TEMPLATE_ID ? "read-only" : undefined),
     manualBreakGlass: booleanVar(values.manualBreakGlass),
     worktreeMode: values.worktreeMode ?? (id === REPORT_ONLY_TEMPLATE_ID ? "main" : "required"),
     worktreeRoot: values.worktreeRoot,
@@ -7026,7 +7042,7 @@ function routeCursorsPath() {
 }
 function readRouteCursors() {
   const path = routeCursorsPath();
-  if (!existsSync4(path))
+  if (!existsSync5(path))
     return {};
   try {
     const parsed = JSON.parse(readFileSync2(path, "utf8"));
@@ -7329,6 +7345,31 @@ function generatedRouteSandboxPreflight(workflow) {
   }
   return checks;
 }
+function generatedRouteWorkflowSignature(workflow) {
+  return JSON.stringify({
+    version: workflow.version ?? 1,
+    goal: workflow.goal ?? null,
+    steps: workflow.steps
+  });
+}
+function canReuseGeneratedRouteWorkflow(existing, generated) {
+  if (generatedRouteWorkflowSignature(existing) !== generatedRouteWorkflowSignature(generated))
+    return false;
+  try {
+    generatedRouteSandboxPreflight(existing);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function routeWorkflowForStorage(store, workflowBody) {
+  const existingWorkflow = store.findWorkflowByName(workflowBody.name);
+  if (existingWorkflow && canReuseGeneratedRouteWorkflow(existingWorkflow, workflowBody))
+    return existingWorkflow;
+  if (existingWorkflow)
+    store.archiveWorkflow(existingWorkflow.id);
+  return store.createWorkflow(workflowBody);
+}
 function routeThrottleLimitsFromOpts(opts) {
   return {
     maxActive: positiveInteger(opts.maxActive, "--max-active"),
@@ -7578,8 +7619,7 @@ function routeTodosTaskEvent(event, opts) {
   }
   const store = new Store;
   try {
-    const existingWorkflowForPreflight = store.findWorkflowByName(workflowBody.name);
-    const workflowPreflightSpec = existingWorkflowForPreflight ?? workflowSpecForPreflight(workflowBody, "event-preflight");
+    const workflowPreflightSpec = workflowSpecForPreflight(workflowBody, "event-preflight");
     generatedRouteSandboxPreflight(workflowPreflightSpec);
     const preflight = opts.preflight ? preflightStoredWorkflow(workflowPreflightSpec, {
       name: workflowBody.name,
@@ -7591,8 +7631,8 @@ function routeTodosTaskEvent(event, opts) {
       const existingItem = store.findWorkflowWorkItem("todos-task", idempotencyKey);
       if (existingItem?.loopId && ["admitted", "running", "succeeded"].includes(existingItem.status)) {
         const existingLoop = store.getLoop(existingItem.loopId);
-        const existingWorkflow2 = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
-        return { kind: "deduped", existingItem, existingLoop, existingWorkflow: existingWorkflow2, invocation };
+        const existingWorkflow = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
+        return { kind: "deduped", existingItem, existingLoop, existingWorkflow, invocation };
       }
       const throttle = hasThrottleLimits(throttleLimits) ? routeThrottleDecision(store, { projectPath: routeProjectPath, projectGroup, limits: throttleLimits }) : undefined;
       const workItem = store.upsertWorkflowWorkItem({
@@ -7603,8 +7643,7 @@ function routeTodosTaskEvent(event, opts) {
       });
       if (throttle && !throttle.allowed)
         return { kind: "throttled", invocation, workItem, throttle };
-      const existingWorkflow = store.findWorkflowByName(workflowBody.name);
-      const workflow = existingWorkflow ?? store.createWorkflow(workflowBody);
+      const workflow = routeWorkflowForStorage(store, workflowBody);
       const loop = store.createLoop({
         ...loopInput,
         target: {
@@ -7790,8 +7829,7 @@ function routeGenericEvent(event, opts) {
   }
   const store = new Store;
   try {
-    const existingWorkflowForPreflight = store.findWorkflowByName(workflowBody.name);
-    const workflowPreflightSpec = existingWorkflowForPreflight ?? workflowSpecForPreflight(workflowBody, "event-preflight");
+    const workflowPreflightSpec = workflowSpecForPreflight(workflowBody, "event-preflight");
     generatedRouteSandboxPreflight(workflowPreflightSpec);
     const preflight = opts.preflight ? preflightStoredWorkflow(workflowPreflightSpec, {
       name: workflowBody.name,
@@ -7803,8 +7841,8 @@ function routeGenericEvent(event, opts) {
       const existingItem = store.findWorkflowWorkItem("generic-event", idempotencyKey);
       if (existingItem?.loopId && ["admitted", "running", "succeeded"].includes(existingItem.status)) {
         const existingLoop = store.getLoop(existingItem.loopId);
-        const existingWorkflow2 = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
-        return { kind: "deduped", existingItem, existingLoop, existingWorkflow: existingWorkflow2, invocation };
+        const existingWorkflow = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
+        return { kind: "deduped", existingItem, existingLoop, existingWorkflow, invocation };
       }
       const throttle = hasThrottleLimits(throttleLimits) ? routeThrottleDecision(store, { projectPath: routeProjectPath, projectGroup, limits: throttleLimits }) : undefined;
       const workItem = store.upsertWorkflowWorkItem({
@@ -7815,8 +7853,7 @@ function routeGenericEvent(event, opts) {
       });
       if (throttle && !throttle.allowed)
         return { kind: "throttled", invocation, workItem, throttle };
-      const existingWorkflow = store.findWorkflowByName(workflowBody.name);
-      const workflow = existingWorkflow ?? store.createWorkflow(workflowBody);
+      const workflow = routeWorkflowForStorage(store, workflowBody);
       const loop = store.createLoop({
         ...loopInput,
         target: {
@@ -8605,8 +8642,7 @@ eventsHandle.command("generic").description("create a one-shot worker/verifier w
   }
   const store = new Store;
   try {
-    const existingWorkflowForPreflight = store.findWorkflowByName(workflowBody.name);
-    const workflowPreflightSpec = existingWorkflowForPreflight ?? workflowSpecForPreflight(workflowBody, "event-preflight");
+    const workflowPreflightSpec = workflowSpecForPreflight(workflowBody, "event-preflight");
     generatedRouteSandboxPreflight(workflowPreflightSpec);
     const preflight = opts.preflight ? preflightStoredWorkflow(workflowPreflightSpec, {
       name: workflowBody.name,
@@ -8618,8 +8654,8 @@ eventsHandle.command("generic").description("create a one-shot worker/verifier w
       const existingItem = store.findWorkflowWorkItem("generic-event", idempotencyKey);
       if (existingItem?.loopId && ["admitted", "running", "succeeded"].includes(existingItem.status)) {
         const existingLoop = store.getLoop(existingItem.loopId);
-        const existingWorkflow2 = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
-        return { kind: "deduped", existingItem, existingLoop, existingWorkflow: existingWorkflow2, invocation };
+        const existingWorkflow = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
+        return { kind: "deduped", existingItem, existingLoop, existingWorkflow, invocation };
       }
       const throttle = hasThrottleLimits(throttleLimits) ? routeThrottleDecision(store, { projectPath: routeProjectPath, projectGroup, limits: throttleLimits }) : undefined;
       const workItem = store.upsertWorkflowWorkItem({
@@ -8630,8 +8666,7 @@ eventsHandle.command("generic").description("create a one-shot worker/verifier w
       });
       if (throttle && !throttle.allowed)
         return { kind: "throttled", invocation, workItem, throttle };
-      const existingWorkflow = store.findWorkflowByName(workflowBody.name);
-      const workflow = existingWorkflow ?? store.createWorkflow(workflowBody);
+      const workflow = routeWorkflowForStorage(store, workflowBody);
       const loop = store.createLoop({
         ...loopInput,
         target: {
@@ -9519,7 +9554,7 @@ ${result.instructions.join(`
 });
 daemon.command("logs").option("-n, --lines <n>", "lines", "80").action((opts) => {
   const path = daemonLogPath();
-  if (!existsSync4(path)) {
+  if (!existsSync5(path)) {
     console.log("");
     return;
   }

package/dist/daemon/index.js

@@ -3,7 +3,7 @@
 
 // src/lib/store.ts
 import { Database } from "bun:sqlite";
-import { mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
+import { chmodSync, existsSync, mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { dirname, join as join3 } from "path";
 
@@ -824,6 +824,20 @@ function workItemStatusForLoopRun(status, attempt, maxAttempts) {
   }
   return;
 }
+function chmodIfExists(path, mode) {
+  try {
+    if (existsSync(path))
+      chmodSync(path, mode);
+  } catch {}
+}
+function ensurePrivateStorePath(file) {
+  const dir = dirname(file);
+  mkdirSync3(dir, { recursive: true, mode: 448 });
+  chmodIfExists(dir, 448);
+  chmodIfExists(file, 384);
+  chmodIfExists(`${file}-wal`, 384);
+  chmodIfExists(`${file}-shm`, 384);
+}
 
 class Store {
   db;
@@ -831,11 +845,13 @@ class Store {
   constructor(path) {
     const file = path ?? dbPath();
     if (file !== ":memory:")
-      mkdirSync3(dirname(file), { recursive: true, mode: 448 });
+      ensurePrivateStorePath(file);
     this.rootDir = file === ":memory:" ? mkdtempSync(join3(tmpdir(), "open-loops-store-")) : dirname(file);
     this.db = new Database(file);
     this.db.exec("PRAGMA busy_timeout = 5000;");
     this.db.exec("PRAGMA journal_mode = WAL;");
+    if (file !== ":memory:")
+      ensurePrivateStorePath(file);
     this.migrate();
   }
   migrate() {
@@ -2675,7 +2691,7 @@ import { resolveMachineCommand } from "@hasna/machines/consumer";
 
 // src/lib/accounts.ts
 import { spawnSync } from "child_process";
-import { existsSync } from "fs";
+import { existsSync as existsSync2 } from "fs";
 var EXPORT_RE = /^export\s+([A-Za-z_][A-Za-z0-9_]*)=(.*)$/;
 function accountToolForProvider(provider) {
   switch (provider) {
@@ -2760,7 +2776,7 @@ function resolveAccountEnv(account, toolHint, env) {
   const profileDir = (accountDirEnvVar(tool) ? accountEnv[accountDirEnvVar(tool)] : undefined) ?? primaryAccountDir(result.stdout);
   if (!profileDir)
     throw new Error(`accounts env returned no profile directory for ${account.profile}/${tool}`);
-  if (!existsSync(profileDir))
+  if (!existsSync2(profileDir))
     throw new Error(`account profile directory does not exist for ${account.profile}/${tool}: ${profileDir}`);
   return {
     ...accountEnv,
@@ -3124,7 +3140,7 @@ function agentArgs(target) {
     case "codex":
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("exec", "--json", "--ephemeral", "--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      args.push("exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)
@@ -4646,7 +4662,7 @@ async function tick(deps) {
 }
 
 // src/daemon/control.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
 import { hostname } from "os";
 import { dirname as dirname2 } from "path";
 
@@ -4674,7 +4690,7 @@ async function runLoop(opts) {
 
 // src/daemon/control.ts
 function readPid(path = pidFilePath()) {
-  if (!existsSync2(path))
+  if (!existsSync3(path))
     return;
   try {
     const pid = Number(readFileSync(path, "utf8").trim());
@@ -4944,7 +4960,7 @@ async function startDaemon(opts) {
 }
 
 // src/daemon/install.ts
-import { chmodSync, mkdirSync as mkdirSync5, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync5, writeFileSync as writeFileSync3 } from "fs";
 import { spawnSync as spawnSync3 } from "child_process";
 import { dirname as dirname3 } from "path";
 function installStartup(cliEntry, execPath = process.execPath, args = ["daemon", "run"]) {
@@ -5003,7 +5019,7 @@ ${args.map((arg) => `    <string>${arg}</string>`).join(`
 </dict>
 </plist>
 `);
-    chmodSync(path, 384);
+    chmodSync2(path, 384);
     return {
       platform: process.platform,
       path,
@@ -5030,7 +5046,7 @@ function enableStartup(result) {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.3.42",
+  version: "0.3.44",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",

package/dist/index.js

@@ -1,7 +1,7 @@
 // @bun
 // src/lib/store.ts
 import { Database } from "bun:sqlite";
-import { mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
+import { chmodSync, existsSync, mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { dirname, join as join3 } from "path";
 
@@ -822,6 +822,20 @@ function workItemStatusForLoopRun(status, attempt, maxAttempts) {
   }
   return;
 }
+function chmodIfExists(path, mode) {
+  try {
+    if (existsSync(path))
+      chmodSync(path, mode);
+  } catch {}
+}
+function ensurePrivateStorePath(file) {
+  const dir = dirname(file);
+  mkdirSync3(dir, { recursive: true, mode: 448 });
+  chmodIfExists(dir, 448);
+  chmodIfExists(file, 384);
+  chmodIfExists(`${file}-wal`, 384);
+  chmodIfExists(`${file}-shm`, 384);
+}
 
 class Store {
   db;
@@ -829,11 +843,13 @@ class Store {
   constructor(path) {
     const file = path ?? dbPath();
     if (file !== ":memory:")
-      mkdirSync3(dirname(file), { recursive: true, mode: 448 });
+      ensurePrivateStorePath(file);
     this.rootDir = file === ":memory:" ? mkdtempSync(join3(tmpdir(), "open-loops-store-")) : dirname(file);
     this.db = new Database(file);
     this.db.exec("PRAGMA busy_timeout = 5000;");
     this.db.exec("PRAGMA journal_mode = WAL;");
+    if (file !== ":memory:")
+      ensurePrivateStorePath(file);
     this.migrate();
   }
   migrate() {
@@ -2665,7 +2681,7 @@ import { resolveMachineCommand } from "@hasna/machines/consumer";
 
 // src/lib/accounts.ts
 import { spawnSync } from "child_process";
-import { existsSync } from "fs";
+import { existsSync as existsSync2 } from "fs";
 var EXPORT_RE = /^export\s+([A-Za-z_][A-Za-z0-9_]*)=(.*)$/;
 function accountToolForProvider(provider) {
   switch (provider) {
@@ -2750,7 +2766,7 @@ function resolveAccountEnv(account, toolHint, env) {
   const profileDir = (accountDirEnvVar(tool) ? accountEnv[accountDirEnvVar(tool)] : undefined) ?? primaryAccountDir(result.stdout);
   if (!profileDir)
     throw new Error(`accounts env returned no profile directory for ${account.profile}/${tool}`);
-  if (!existsSync(profileDir))
+  if (!existsSync2(profileDir))
     throw new Error(`account profile directory does not exist for ${account.profile}/${tool}: ${profileDir}`);
   return {
     ...accountEnv,
@@ -3114,7 +3130,7 @@ function agentArgs(target) {
     case "codex":
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("exec", "--json", "--ephemeral", "--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      args.push("exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)
@@ -4767,7 +4783,7 @@ function openAutomationsRuntimeBinding(overrides = {}) {
 }
 // src/lib/templates.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import { homedir as homedir3 } from "os";
 import { basename as basename2, isAbsolute, join as join5, relative, resolve } from "path";
 var TODOS_TASK_WORKER_VERIFIER_TEMPLATE_ID = "todos-task-worker-verifier";
@@ -5027,7 +5043,7 @@ function defaultWorktreeRoot(root) {
   return join5(homedir3(), ".hasna", "loops", "worktrees");
 }
 function gitRootFor(path) {
-  if (!existsSync2(path))
+  if (!existsSync3(path))
     return;
   try {
     return execFileSync("git", ["-C", path, "rev-parse", "--show-toplevel"], {
@@ -5487,7 +5503,7 @@ function renderLifecycleBoundedTemplate(id, values) {
     variant: values.variant,
     agent: values.agent,
     permissionMode: values.permissionMode,
-    sandbox: values.sandbox,
+    sandbox: values.sandbox ?? (id === REPORT_ONLY_TEMPLATE_ID ? "read-only" : undefined),
     manualBreakGlass: booleanVar(values.manualBreakGlass),
     worktreeMode: values.worktreeMode ?? (id === REPORT_ONLY_TEMPLATE_ID ? "main" : "required"),
     worktreeRoot: values.worktreeRoot,
@@ -5704,7 +5720,7 @@ import { spawnSync as spawnSync3 } from "child_process";
 import { accessSync as accessSync2, constants as constants2 } from "fs";
 
 // src/daemon/control.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
 import { hostname } from "os";
 import { dirname as dirname2 } from "path";
 
@@ -5732,7 +5748,7 @@ async function runLoop(opts) {
 
 // src/daemon/control.ts
 function readPid(path = pidFilePath()) {
-  if (!existsSync3(path))
+  if (!existsSync4(path))
     return;
   try {
     const pid = Number(readFileSync(path, "utf8").trim());

package/dist/lib/store.js

@@ -1,7 +1,7 @@
 // @bun
 // src/lib/store.ts
 import { Database } from "bun:sqlite";
-import { mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
+import { chmodSync, existsSync, mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { dirname, join as join3 } from "path";
 
@@ -822,6 +822,20 @@ function workItemStatusForLoopRun(status, attempt, maxAttempts) {
   }
   return;
 }
+function chmodIfExists(path, mode) {
+  try {
+    if (existsSync(path))
+      chmodSync(path, mode);
+  } catch {}
+}
+function ensurePrivateStorePath(file) {
+  const dir = dirname(file);
+  mkdirSync3(dir, { recursive: true, mode: 448 });
+  chmodIfExists(dir, 448);
+  chmodIfExists(file, 384);
+  chmodIfExists(`${file}-wal`, 384);
+  chmodIfExists(`${file}-shm`, 384);
+}
 
 class Store {
   db;
@@ -829,11 +843,13 @@ class Store {
   constructor(path) {
     const file = path ?? dbPath();
     if (file !== ":memory:")
-      mkdirSync3(dirname(file), { recursive: true, mode: 448 });
+      ensurePrivateStorePath(file);
     this.rootDir = file === ":memory:" ? mkdtempSync(join3(tmpdir(), "open-loops-store-")) : dirname(file);
     this.db = new Database(file);
     this.db.exec("PRAGMA busy_timeout = 5000;");
     this.db.exec("PRAGMA journal_mode = WAL;");
+    if (file !== ":memory:")
+      ensurePrivateStorePath(file);
     this.migrate();
   }
   migrate() {

package/dist/sdk/index.js

@@ -1,7 +1,7 @@
 // @bun
 // src/lib/store.ts
 import { Database } from "bun:sqlite";
-import { mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
+import { chmodSync, existsSync, mkdirSync as mkdirSync3, mkdtempSync, rmSync } from "fs";
 import { tmpdir } from "os";
 import { dirname, join as join3 } from "path";
 
@@ -822,6 +822,20 @@ function workItemStatusForLoopRun(status, attempt, maxAttempts) {
   }
   return;
 }
+function chmodIfExists(path, mode) {
+  try {
+    if (existsSync(path))
+      chmodSync(path, mode);
+  } catch {}
+}
+function ensurePrivateStorePath(file) {
+  const dir = dirname(file);
+  mkdirSync3(dir, { recursive: true, mode: 448 });
+  chmodIfExists(dir, 448);
+  chmodIfExists(file, 384);
+  chmodIfExists(`${file}-wal`, 384);
+  chmodIfExists(`${file}-shm`, 384);
+}
 
 class Store {
   db;
@@ -829,11 +843,13 @@ class Store {
   constructor(path) {
     const file = path ?? dbPath();
     if (file !== ":memory:")
-      mkdirSync3(dirname(file), { recursive: true, mode: 448 });
+      ensurePrivateStorePath(file);
     this.rootDir = file === ":memory:" ? mkdtempSync(join3(tmpdir(), "open-loops-store-")) : dirname(file);
     this.db = new Database(file);
     this.db.exec("PRAGMA busy_timeout = 5000;");
     this.db.exec("PRAGMA journal_mode = WAL;");
+    if (file !== ":memory:")
+      ensurePrivateStorePath(file);
     this.migrate();
   }
   migrate() {
@@ -2665,7 +2681,7 @@ import { resolveMachineCommand } from "@hasna/machines/consumer";
 
 // src/lib/accounts.ts
 import { spawnSync } from "child_process";
-import { existsSync } from "fs";
+import { existsSync as existsSync2 } from "fs";
 var EXPORT_RE = /^export\s+([A-Za-z_][A-Za-z0-9_]*)=(.*)$/;
 function accountToolForProvider(provider) {
   switch (provider) {
@@ -2750,7 +2766,7 @@ function resolveAccountEnv(account, toolHint, env) {
   const profileDir = (accountDirEnvVar(tool) ? accountEnv[accountDirEnvVar(tool)] : undefined) ?? primaryAccountDir(result.stdout);
   if (!profileDir)
     throw new Error(`accounts env returned no profile directory for ${account.profile}/${tool}`);
-  if (!existsSync(profileDir))
+  if (!existsSync2(profileDir))
     throw new Error(`account profile directory does not exist for ${account.profile}/${tool}: ${profileDir}`);
   return {
     ...accountEnv,
@@ -3114,7 +3130,7 @@ function agentArgs(target) {
     case "codex":
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("exec", "--json", "--ephemeral", "--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      args.push("exec", "--json", "--ephemeral", "--sandbox", codewithLikeSandbox(target), "--skip-git-repo-check");
       if (isolation === "safe")
         args.push("--ignore-rules");
       if (target.cwd)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/loops",
-  "version": "0.3.42",
+  "version": "0.3.44",
   "description": "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   "type": "module",
   "main": "dist/index.js",