@hasna/loops 0.3.45 → 0.3.47

package/README.md

@@ -299,7 +299,9 @@ worktree, pass those stores explicitly with `--add-dir` or template `addDirs`.
 For task-created routes, pass `--todos-project` so worker/verifier prompts use
 the actual todos storage project while repo routing and worktree isolation still
 use the repository path. This avoids `danger-full-access` for normal todos
-comments, completion state, and loop evidence writes.
+comments, completion state, and loop evidence writes. `addDirs` is intentionally
+accepted only for Codewith/Codex until other providers expose equivalent
+directory-scoped write controls.
 
 Inspect route state with:
 
@@ -497,7 +499,7 @@ The adapters intentionally use provider command surfaces instead of pretending e
 - Claude uses `claude -p --output-format json` and safe-mode/local setting sources by default.
 - Codewith uses `codewith --ask-for-approval never exec --json --ephemeral --skip-git-repo-check`, with `--add-dir` for explicit extra writable directories.
 - AI Copilot and OpenCode use `run --format json --pure`.
-- Cursor is CLI-first for now via `cursor agent -p`, with `agent -p` as the fallback launcher on machines that expose the standalone Cursor Agent binary; treat output as less stable until a stronger public SDK contract is selected.
+- Cursor is CLI-first for now via standalone `agent -p` when available, with `cursor agent -p` as a compatibility fallback; treat output as less stable until a stronger public SDK contract is selected.
 - Codex uses `codex exec --json --ephemeral --skip-git-repo-check`, with `--add-dir` for explicit extra writable directories where supported.
 - Agent prompts are sent through child stdin instead of argv so prompt bodies do not appear in process listings.
 - When `--account` or a step `account` is set, OpenLoops resolves `accounts env <profile> --tool <tool>` before spawning the target, strips inherited tool home/API-key variables, and applies the selected profile only to that process. Missing account profiles fail before the provider binary receives the prompt.

package/dist/cli/index.js

@@ -389,6 +389,9 @@ function validateTarget(value, label) {
     if (value.variant !== undefined)
       assertString(value.variant, `${label}.variant`);
     optionalStringArray(value.addDirs, `${label}.addDirs`);
+    if (Array.isArray(value.addDirs) && value.addDirs.length > 0 && !["codewith", "codex"].includes(value.provider)) {
+      throw new Error(`${label}.addDirs is currently supported only for provider codewith or codex`);
+    }
     if (value.permissionMode !== undefined) {
       assertString(value.permissionMode, `${label}.permissionMode`);
       const permissionModes = ["default", "plan", "auto", "bypass"];
@@ -3154,6 +3157,9 @@ function assertSupportedAgentOptions(target) {
   if (target.authProfile !== undefined && target.provider !== "codewith") {
     throw new Error(`${target.provider}.authProfile is supported only for codewith`);
   }
+  if (target.addDirs?.length && !["codewith", "codex"].includes(target.provider)) {
+    throw new Error(`${target.provider}.addDirs is currently supported only for codewith or codex`);
+  }
   if (target.permissionMode && !["default", "plan", "auto", "bypass"].includes(target.permissionMode)) {
     throw new Error(`${target.provider}.permissionMode must be default, plan, auto, or bypass`);
   }
@@ -3213,10 +3219,10 @@ function agentArgs(target) {
     case "cursor":
       args.push("-c", [
         "set -eu",
-        "if command -v cursor >/dev/null 2>&1; then",
-        '  exec cursor agent "$@"',
-        "elif command -v agent >/dev/null 2>&1; then",
+        "if command -v agent >/dev/null 2>&1; then",
         '  exec agent "$@"',
+        "elif command -v cursor >/dev/null 2>&1; then",
+        '  exec cursor agent "$@"',
         "else",
         "  echo 'Executable not found in PATH: cursor agent or agent' >&2",
         "  exit 127",
@@ -5737,7 +5743,7 @@ function buildScriptInventoryReport(store, opts = {}) {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.3.45",
+  version: "0.3.47",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -6803,6 +6809,31 @@ function preflightFailed(error, context) {
   });
   process.exit(1);
 }
+function validationFailed(error, context) {
+  if (!isJson())
+    throw error;
+  const message = error instanceof Error ? error.message : String(error);
+  print({
+    ok: false,
+    created: false,
+    validation: {
+      ok: false,
+      error: redact(message, 320)
+    },
+    ...context
+  });
+  process.exit(1);
+}
+function validateLoopTargetForStorage(target, context) {
+  try {
+    workflowBodyFromJson({
+      name: "loop-target-validation",
+      steps: [{ id: "target", target }]
+    });
+  } catch (error) {
+    validationFailed(error, context);
+  }
+}
 function preflightLoopTarget(target, context, metadata, opts) {
   try {
     return preflightTarget(target, metadata, opts);
@@ -8165,6 +8196,7 @@ addGoalOptions(addAccountOptions(addMachineOptions(addScheduleOptions(create.com
       preflight: runtimePreflightFromOpts(opts)
     };
     const input = baseCreateInput(name, opts, target);
+    validateLoopTargetForStorage(input.target, { name, type: "agent", provider });
     const preflight = opts.preflight ? preflightLoopTarget(input.target, { name, type: "agent", provider }, { loopName: name }, { machine: input.machine }) : undefined;
     const loop = store.createLoop(input);
     printCreatedLoop(loop, `created loop ${loop.id} (${loop.name}) next=${loop.nextRunAt}`, preflight);
@@ -8593,6 +8625,7 @@ eventsHandle.command("generic").description("create a one-shot worker/verifier w
     model: opts.model,
     variant: opts.variant,
     agent: opts.agent,
+    addDirs: listFromRepeatedOpts(opts.addDir),
     permissionMode,
     sandbox,
     manualBreakGlass: Boolean(opts.manualBreakGlass),

package/dist/daemon/index.js

@@ -389,6 +389,9 @@ function validateTarget(value, label) {
     if (value.variant !== undefined)
       assertString(value.variant, `${label}.variant`);
     optionalStringArray(value.addDirs, `${label}.addDirs`);
+    if (Array.isArray(value.addDirs) && value.addDirs.length > 0 && !["codewith", "codex"].includes(value.provider)) {
+      throw new Error(`${label}.addDirs is currently supported only for provider codewith or codex`);
+    }
     if (value.permissionMode !== undefined) {
       assertString(value.permissionMode, `${label}.permissionMode`);
       const permissionModes = ["default", "plan", "auto", "bypass"];
@@ -3038,6 +3041,9 @@ function assertSupportedAgentOptions(target) {
   if (target.authProfile !== undefined && target.provider !== "codewith") {
     throw new Error(`${target.provider}.authProfile is supported only for codewith`);
   }
+  if (target.addDirs?.length && !["codewith", "codex"].includes(target.provider)) {
+    throw new Error(`${target.provider}.addDirs is currently supported only for codewith or codex`);
+  }
   if (target.permissionMode && !["default", "plan", "auto", "bypass"].includes(target.permissionMode)) {
     throw new Error(`${target.provider}.permissionMode must be default, plan, auto, or bypass`);
   }
@@ -3097,10 +3103,10 @@ function agentArgs(target) {
     case "cursor":
       args.push("-c", [
         "set -eu",
-        "if command -v cursor >/dev/null 2>&1; then",
-        '  exec cursor agent "$@"',
-        "elif command -v agent >/dev/null 2>&1; then",
+        "if command -v agent >/dev/null 2>&1; then",
         '  exec agent "$@"',
+        "elif command -v cursor >/dev/null 2>&1; then",
+        '  exec cursor agent "$@"',
         "else",
         "  echo 'Executable not found in PATH: cursor agent or agent' >&2",
         "  exit 127",
@@ -5051,7 +5057,7 @@ function enableStartup(result) {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.3.45",
+  version: "0.3.47",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",

package/dist/index.js

@@ -387,6 +387,9 @@ function validateTarget(value, label) {
     if (value.variant !== undefined)
       assertString(value.variant, `${label}.variant`);
     optionalStringArray(value.addDirs, `${label}.addDirs`);
+    if (Array.isArray(value.addDirs) && value.addDirs.length > 0 && !["codewith", "codex"].includes(value.provider)) {
+      throw new Error(`${label}.addDirs is currently supported only for provider codewith or codex`);
+    }
     if (value.permissionMode !== undefined) {
       assertString(value.permissionMode, `${label}.permissionMode`);
       const permissionModes = ["default", "plan", "auto", "bypass"];
@@ -3028,6 +3031,9 @@ function assertSupportedAgentOptions(target) {
   if (target.authProfile !== undefined && target.provider !== "codewith") {
     throw new Error(`${target.provider}.authProfile is supported only for codewith`);
   }
+  if (target.addDirs?.length && !["codewith", "codex"].includes(target.provider)) {
+    throw new Error(`${target.provider}.addDirs is currently supported only for codewith or codex`);
+  }
   if (target.permissionMode && !["default", "plan", "auto", "bypass"].includes(target.permissionMode)) {
     throw new Error(`${target.provider}.permissionMode must be default, plan, auto, or bypass`);
   }
@@ -3087,10 +3093,10 @@ function agentArgs(target) {
     case "cursor":
       args.push("-c", [
         "set -eu",
-        "if command -v cursor >/dev/null 2>&1; then",
-        '  exec cursor agent "$@"',
-        "elif command -v agent >/dev/null 2>&1; then",
+        "if command -v agent >/dev/null 2>&1; then",
         '  exec agent "$@"',
+        "elif command -v cursor >/dev/null 2>&1; then",
+        '  exec cursor agent "$@"',
         "else",
         "  echo 'Executable not found in PATH: cursor agent or agent' >&2",
         "  exit 127",

package/dist/lib/store.js

@@ -387,6 +387,9 @@ function validateTarget(value, label) {
     if (value.variant !== undefined)
       assertString(value.variant, `${label}.variant`);
     optionalStringArray(value.addDirs, `${label}.addDirs`);
+    if (Array.isArray(value.addDirs) && value.addDirs.length > 0 && !["codewith", "codex"].includes(value.provider)) {
+      throw new Error(`${label}.addDirs is currently supported only for provider codewith or codex`);
+    }
     if (value.permissionMode !== undefined) {
       assertString(value.permissionMode, `${label}.permissionMode`);
       const permissionModes = ["default", "plan", "auto", "bypass"];

package/dist/sdk/index.js

@@ -387,6 +387,9 @@ function validateTarget(value, label) {
     if (value.variant !== undefined)
       assertString(value.variant, `${label}.variant`);
     optionalStringArray(value.addDirs, `${label}.addDirs`);
+    if (Array.isArray(value.addDirs) && value.addDirs.length > 0 && !["codewith", "codex"].includes(value.provider)) {
+      throw new Error(`${label}.addDirs is currently supported only for provider codewith or codex`);
+    }
     if (value.permissionMode !== undefined) {
       assertString(value.permissionMode, `${label}.permissionMode`);
       const permissionModes = ["default", "plan", "auto", "bypass"];
@@ -3028,6 +3031,9 @@ function assertSupportedAgentOptions(target) {
   if (target.authProfile !== undefined && target.provider !== "codewith") {
     throw new Error(`${target.provider}.authProfile is supported only for codewith`);
   }
+  if (target.addDirs?.length && !["codewith", "codex"].includes(target.provider)) {
+    throw new Error(`${target.provider}.addDirs is currently supported only for codewith or codex`);
+  }
   if (target.permissionMode && !["default", "plan", "auto", "bypass"].includes(target.permissionMode)) {
     throw new Error(`${target.provider}.permissionMode must be default, plan, auto, or bypass`);
   }
@@ -3087,10 +3093,10 @@ function agentArgs(target) {
     case "cursor":
       args.push("-c", [
         "set -eu",
-        "if command -v cursor >/dev/null 2>&1; then",
-        '  exec cursor agent "$@"',
-        "elif command -v agent >/dev/null 2>&1; then",
+        "if command -v agent >/dev/null 2>&1; then",
         '  exec agent "$@"',
+        "elif command -v cursor >/dev/null 2>&1; then",
+        '  exec cursor agent "$@"',
         "else",
         "  echo 'Executable not found in PATH: cursor agent or agent' >&2",
         "  exit 127",

package/docs/USAGE.md

@@ -331,7 +331,9 @@ worktree, pass those stores explicitly with `--add-dir` or template `addDirs`.
 For task-created routes, pass `--todos-project` so worker/verifier prompts use
 the actual todos storage project while route concurrency and worktree isolation
 still use the repository path. This avoids `danger-full-access` for normal
-todos comments, completion state, and loop evidence writes.
+todos comments, completion state, and loop evidence writes. `addDirs` is
+intentionally accepted only for Codewith/Codex until other providers expose
+equivalent directory-scoped write controls.
 
 Inspect route state with:
 
@@ -576,7 +578,7 @@ The adapters intentionally use provider command surfaces instead of pretending e
 - Claude uses `claude -p --output-format json` and safe-mode/local setting sources by default.
 - Codewith uses `codewith --ask-for-approval never exec --json --ephemeral --skip-git-repo-check`, with `--add-dir` for explicit extra writable directories.
 - AI Copilot and OpenCode use `run --format json --pure`.
-- Cursor is CLI-first for now via `cursor agent -p`, with `agent -p` as the fallback launcher on machines that expose the standalone Cursor Agent binary; treat output as less stable until a stronger public SDK contract is selected.
+- Cursor is CLI-first for now via standalone `agent -p` when available, with `cursor agent -p` as a compatibility fallback; treat output as less stable until a stronger public SDK contract is selected.
 - Codex uses `codex exec --json --ephemeral --skip-git-repo-check`, with `--add-dir` for explicit extra writable directories where supported.
 - Agent prompts are sent through child stdin instead of argv so prompt bodies do not appear in process listings.
 - When `--account` or a step `account` is set, OpenLoops resolves `accounts env <profile> --tool <tool>` before spawning the target, strips inherited tool home/API-key variables, and applies the selected profile only to that process. Missing account profiles fail before the provider binary receives the prompt.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/loops",
-  "version": "0.3.45",
+  "version": "0.3.47",
   "description": "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   "type": "module",
   "main": "dist/index.js",