@hasna/loops 0.4.7 → 0.4.9

package/dist/index.js

@@ -579,7 +579,7 @@ import { isAbsolute, resolve } from "path";
 
 // src/lib/agent-adapter.ts
 import { spawn } from "child_process";
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -628,12 +628,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -716,7 +716,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -724,11 +727,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -781,7 +780,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })
@@ -4217,7 +4216,7 @@ class Store {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.7",
+  version: "0.4.9",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -5009,11 +5008,6 @@ var TRANSPORT_ENV_KEYS = new Set([
   "USER",
   "XDG_RUNTIME_DIR"
 ]);
-function boundedText(text, maxBytes) {
-  const buffer = new BoundedOutputBuffer(maxBytes);
-  buffer.append(text);
-  return buffer.value();
-}
 function buildResult(status, startedAt, fields = {}) {
   const finishedAt = fields.finishedAt ?? nowIso();
   return {
@@ -5077,21 +5071,6 @@ function metadataEnv(metadata) {
     env.LOOPS_GOAL_NODE_KEY = metadata.goalNodeKey;
   return env;
 }
-function codewithAgentIdempotencyKey(metadata) {
-  const parts = [
-    "openloops",
-    metadata.workflowRunId ? `workflow-run:${metadata.workflowRunId}` : undefined,
-    metadata.workflowStepId ? `step:${metadata.workflowStepId}` : undefined,
-    metadata.runId ? `loop-run:${metadata.runId}` : undefined,
-    metadata.loopId ? `loop:${metadata.loopId}` : undefined,
-    metadata.scheduledFor ? `scheduled:${metadata.scheduledFor}` : undefined,
-    metadata.goalId ? `goal:${metadata.goalId}` : undefined,
-    metadata.goalNodeKey ? `node:${metadata.goalNodeKey}` : undefined
-  ].filter(Boolean);
-  if (parts.length > 1)
-    return parts.join(":");
-  return `openloops:adhoc:${randomBytes2(16).toString("hex")}`;
-}
 function allowlistEnv(allowlist) {
   const env = {};
   if (allowlist?.tools?.length)
@@ -5146,8 +5125,7 @@ function commandSpec(target, opts) {
     preflightAnyOf: invocation.preflightAnyOf,
     stdin: invocation.stdin,
     allowlist: agentTarget.allowlist,
-    worktree: agentTarget.worktree,
-    codewithDurableAgent: adapter.capabilities.durable ? { target: agentTarget } : undefined
+    worktree: agentTarget.worktree
   };
 }
 function composeExecutionEnv(spec, metadata, opts, accountEnv) {
@@ -5357,266 +5335,6 @@ async function preflightNativeAuthProfile(spec, env) {
   const result = await spawnCapture(spec.command, ["profile", "list"], { env, timeoutMs: 15000 });
   assertCodewithProfileListed(spec.nativeAuthProfile.profile, result);
 }
-function codewithAgentStartArgs(target, idempotencyKey) {
-  const args = providerAdapter(target.provider).buildInvocation(target).args;
-  const startIndex = args.findIndex((arg, index) => arg === "start" && args[index - 1] === "agent");
-  if (startIndex === -1)
-    throw new Error("internal error: codewith durable agent args missing agent start");
-  args.splice(startIndex + 1, 0, "--idempotency-key", idempotencyKey);
-  return args;
-}
-function codewithAgentControlArgs(target, command, agentId) {
-  return [
-    ...target.authProfile ? ["--auth-profile", target.authProfile] : [],
-    "agent",
-    command,
-    ...command === "logs" ? ["--limit", "20"] : [],
-    "--json",
-    agentId
-  ];
-}
-function extractFirstJsonObject(text) {
-  let depth = 0;
-  let start = -1;
-  let inString = false;
-  let escaped = false;
-  for (let i = 0;i < text.length; i += 1) {
-    const ch = text[i];
-    if (inString) {
-      if (escaped)
-        escaped = false;
-      else if (ch === "\\")
-        escaped = true;
-      else if (ch === '"')
-        inString = false;
-      continue;
-    }
-    if (ch === '"') {
-      inString = true;
-    } else if (ch === "{") {
-      if (depth === 0)
-        start = i;
-      depth += 1;
-    } else if (ch === "}") {
-      if (depth > 0) {
-        depth -= 1;
-        if (depth === 0 && start !== -1)
-          return text.slice(start, i + 1);
-      }
-    }
-  }
-  return;
-}
-function parseJsonOutput(stdout, label) {
-  const raw = stdout || "{}";
-  const candidates = [raw.trim()];
-  const scanned = extractFirstJsonObject(raw);
-  if (scanned && scanned !== raw.trim())
-    candidates.push(scanned);
-  let lastError;
-  for (const candidate of candidates) {
-    try {
-      const value = JSON.parse(candidate);
-      if (!value || typeof value !== "object" || Array.isArray(value))
-        throw new Error("not an object");
-      return value;
-    } catch (error) {
-      lastError = error;
-    }
-  }
-  throw new Error(`${label} did not return JSON${lastError instanceof Error ? `: ${lastError.message}` : ""}`);
-}
-function recordField(value, key) {
-  if (!value || typeof value !== "object" || Array.isArray(value))
-    return;
-  const field = value[key];
-  return field && typeof field === "object" && !Array.isArray(field) ? field : undefined;
-}
-function stringField(value, key) {
-  const field = value?.[key];
-  return typeof field === "string" ? field : undefined;
-}
-function numberField(value, key) {
-  const field = value?.[key];
-  return typeof field === "number" && Number.isFinite(field) ? field : undefined;
-}
-function codewithAgentStatus(readJson) {
-  return stringField(recordField(readJson, "agent"), "status") ?? stringField(recordField(readJson, "statusSnapshot"), "status");
-}
-function codewithAgentLastEventSeq(readJson) {
-  const agentSeq = numberField(recordField(readJson, "agent"), "lastEventSeq");
-  const snapshotSeq = numberField(recordField(readJson, "statusSnapshot"), "lastEventSeq");
-  if (agentSeq !== undefined && snapshotSeq !== undefined)
-    return Math.max(agentSeq, snapshotSeq);
-  return agentSeq ?? snapshotSeq;
-}
-function codewithAgentEvidence(startJson, readJson, logsJson) {
-  const agent = recordField(readJson, "agent") ?? recordField(startJson, "agent");
-  const statusSnapshot = recordField(readJson, "statusSnapshot");
-  const events = Array.isArray(logsJson?.data) ? logsJson.data.filter((event) => Boolean(event) && typeof event === "object" && !Array.isArray(event)).map((event) => ({
-    seq: numberField(event, "seq"),
-    eventType: stringField(event, "eventType"),
-    createdAt: numberField(event, "createdAt")
-  })) : undefined;
-  return JSON.stringify({
-    codewithAgent: {
-      agentId: stringField(agent, "agentId"),
-      status: stringField(agent, "status"),
-      desiredState: stringField(agent, "desiredState"),
-      statusReason: stringField(agent, "statusReason"),
-      threadId: stringField(agent, "threadId"),
-      rolloutPath: stringField(agent, "rolloutPath"),
-      pid: numberField(agent, "pid"),
-      exitCode: numberField(agent, "exitCode"),
-      created: typeof startJson.created === "boolean" ? startJson.created : undefined
-    },
-    statusSnapshot: statusSnapshot ? {
-      seq: numberField(statusSnapshot, "seq"),
-      status: stringField(statusSnapshot, "status"),
-      summary: stringField(statusSnapshot, "summary"),
-      pendingInteractionCount: numberField(statusSnapshot, "pendingInteractionCount"),
-      lastEventSeq: numberField(statusSnapshot, "lastEventSeq")
-    } : undefined,
-    events
-  }, null, 2);
-}
-function codewithAgentProgress(readJson) {
-  const agent = recordField(readJson, "agent");
-  const statusSnapshot = recordField(readJson, "statusSnapshot");
-  return {
-    provider: "codewith",
-    agentId: stringField(agent, "agentId"),
-    status: stringField(agent, "status") ?? stringField(statusSnapshot, "status"),
-    summary: stringField(statusSnapshot, "summary"),
-    statusReason: stringField(agent, "statusReason"),
-    threadId: stringField(agent, "threadId"),
-    rolloutPath: stringField(agent, "rolloutPath"),
-    pid: numberField(agent, "pid"),
-    lastEventSeq: codewithAgentLastEventSeq(readJson)
-  };
-}
-function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
-}
-async function executeCodewithDurableAgent(spec, metadata, opts, env, startedAt) {
-  const target = spec.codewithDurableAgent?.target;
-  if (!target)
-    throw new Error("internal error: missing codewith durable target");
-  const maxOutputBytes = opts.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
-  const idempotencyKey = codewithAgentIdempotencyKey(metadata);
-  const start = await spawnCapture(spec.command, codewithAgentStartArgs(target, idempotencyKey), {
-    cwd: spec.cwd,
-    env,
-    timeoutMs: 30000,
-    maxOutputBytes
-  });
-  const stderr = new BoundedOutputBuffer(maxOutputBytes);
-  stderr.append(start.stderr);
-  if (start.error || (start.status ?? 1) !== 0) {
-    return failureResult(startedAt, start.error ?? `codewith agent start exited with code ${start.status ?? "unknown"}`, {
-      exitCode: start.status ?? undefined,
-      stdout: start.stdout,
-      stderr: stderr.value()
-    });
-  }
-  let startJson;
-  try {
-    startJson = parseJsonOutput(start.stdout || "{}", "codewith agent start");
-  } catch (error) {
-    return failureResult(startedAt, error instanceof Error ? error.message : String(error), { stdout: start.stdout, stderr: stderr.value() });
-  }
-  const agentId = stringField(recordField(startJson, "agent"), "agentId");
-  if (!agentId) {
-    return failureResult(startedAt, "codewith agent start did not return agent.agentId", { stdout: start.stdout, stderr: stderr.value() });
-  }
-  opts.onAgentProgress?.(codewithAgentProgress(startJson));
-  const stopAgent = async () => {
-    await spawnCapture(spec.command, codewithAgentControlArgs(target, "stop", agentId), {
-      cwd: spec.cwd,
-      env,
-      timeoutMs: 15000,
-      maxOutputBytes
-    });
-  };
-  const pollMs = Math.max(100, Number(opts.env?.LOOPS_CODEWITH_AGENT_POLL_MS ?? process.env.LOOPS_CODEWITH_AGENT_POLL_MS ?? 2000) || 2000);
-  let lastReadJson = startJson;
-  let lastLogsJson;
-  let lastFingerprint;
-  let lastProgressAt = Date.now();
-  const evidence = () => boundedText(codewithAgentEvidence(startJson, lastReadJson, lastLogsJson), maxOutputBytes);
-  while (true) {
-    if (opts.signal?.aborted) {
-      await stopAgent();
-      return failureResult(startedAt, "cancelled", { stdout: evidence(), stderr: stderr.value() });
-    }
-    const read = await spawnCapture(spec.command, codewithAgentControlArgs(target, "read", agentId), {
-      cwd: spec.cwd,
-      env,
-      timeoutMs: 30000,
-      maxOutputBytes
-    });
-    stderr.append(read.stderr);
-    if (read.error || (read.status ?? 1) !== 0) {
-      return failureResult(startedAt, read.error ?? `codewith agent read exited with code ${read.status ?? "unknown"}`, {
-        exitCode: read.status ?? undefined,
-        stdout: evidence(),
-        stderr: stderr.value()
-      });
-    }
-    try {
-      lastReadJson = parseJsonOutput(read.stdout || "{}", "codewith agent read");
-    } catch (error) {
-      return failureResult(startedAt, error instanceof Error ? error.message : String(error), {
-        stdout: boundedText(read.stdout, maxOutputBytes),
-        stderr: stderr.value()
-      });
-    }
-    const status = codewithAgentStatus(lastReadJson);
-    const fingerprint = JSON.stringify({
-      status,
-      agentLastEventSeq: numberField(recordField(lastReadJson, "agent"), "lastEventSeq"),
-      snapshot: recordField(lastReadJson, "statusSnapshot") ?? null
-    });
-    if (fingerprint !== lastFingerprint) {
-      lastFingerprint = fingerprint;
-      lastProgressAt = Date.now();
-      opts.onAgentProgress?.(codewithAgentProgress(lastReadJson));
-    }
-    if (status === "completed" || status === "failed" || status === "cancelled") {
-      const logs = await spawnCapture(spec.command, codewithAgentControlArgs(target, "logs", agentId), {
-        cwd: spec.cwd,
-        env,
-        timeoutMs: 30000,
-        maxOutputBytes
-      });
-      if (!logs.error && (logs.status ?? 1) === 0) {
-        try {
-          lastLogsJson = parseJsonOutput(logs.stdout || "{}", "codewith agent logs");
-        } catch {
-          lastLogsJson = undefined;
-        }
-      } else {
-        stderr.append(logs.stderr || logs.error || "");
-      }
-      if (status === "completed") {
-        return successResult(startedAt, { exitCode: 0, stdout: evidence(), stderr: stderr.value() });
-      }
-      return failureResult(startedAt, stringField(recordField(lastReadJson, "agent"), "statusReason") ?? `codewith agent ${status}`, { exitCode: 1, stdout: evidence(), stderr: stderr.value() });
-    }
-    if (typeof spec.timeoutMs === "number" && new Date(nowIso()).getTime() - new Date(startedAt).getTime() >= spec.timeoutMs) {
-      await stopAgent();
-      return timeoutResult(startedAt, `timed out after ${spec.timeoutMs}ms`, { stdout: evidence(), stderr: stderr.value() });
-    }
-    if (typeof spec.idleTimeoutMs === "number" && Date.now() - lastProgressAt >= spec.idleTimeoutMs) {
-      await stopAgent();
-      return timeoutResult(startedAt, `idle timed out after ${spec.idleTimeoutMs}ms without agent progress`, {
-        stdout: evidence(),
-        stderr: stderr.value()
-      });
-    }
-    await sleep(pollMs);
-  }
-}
 function resolvedDirEquals(left, right) {
   try {
     return realpathSync(left) === realpathSync(right);
@@ -5850,9 +5568,6 @@ function preflightTarget(target, metadata = {}, opts = {}) {
 async function executeTarget(target, metadata = {}, opts = {}) {
   let spec = commandSpec(target, opts);
   const machine = resolvedMachine(opts);
-  if (machine && !machine.local && spec.codewithDurableAgent) {
-    return failureResult(nowIso(), "remote Codewith durable background-agent steps require remote status polling support; run this Codewith step locally or add remote durable readback before dispatch");
-  }
   if (machine && !machine.local) {
     const remoteFallbackSpec = spec.worktree?.enabled && spec.worktree.mode === "auto" ? worktreeFallbackSpec(target, opts, spec.worktree.originalCwd) : undefined;
     return executeRemoteSpec(spec, machine, metadata, opts, remoteFallbackSpec);
@@ -5883,9 +5598,6 @@ async function executeTarget(target, metadata = {}, opts = {}) {
   if (worktreeEntry?.fallbackCwd) {
     spec = worktreeFallbackSpec(target, opts, worktreeEntry.fallbackCwd) ?? spec;
   }
-  if (spec.codewithDurableAgent) {
-    return executeCodewithDurableAgent(spec, metadata, opts, env, startedAt);
-  }
   const child = spawn2(spec.command, spec.args, {
     cwd: spec.cwd,
     env,
@@ -11261,9 +10973,8 @@ function renderTaskLifecycleWorkflow(input) {
 `) : "";
   const shared = [
     worktreePrompt(plan),
-    ...todosExactCommandsFragment(todosProjectPath, input.taskId, [
-      todosEvidenceLine(todosProjectPath, input.taskId, "concise evidence, decision, or blocker")
-    ]),
+    ...todosExactCommandsFragment(todosProjectPath, input.taskId, []),
+    "Use concrete task-specific text in lifecycle comments. Do not copy placeholder text into lifecycle comments; triage and planner comments must start with the exact stage marker when advancing or blocking the workflow.",
     NO_TMUX_DISPATCH_FRAGMENT,
     "Preserve unrelated user changes and keep scope tied to the task acceptance criteria.",
     prReviewFollowUpFragment(input),
@@ -11274,6 +10985,8 @@ function renderTaskLifecycleWorkflow(input) {
 `);
   const gateMarker = (stage, state) => `openloops:${stage}=${state} task=${input.taskId}${input.eventId ? ` event=${input.eventId}` : ""}`;
   const blockTaskCommand = `todos --project ${todosProjectPath} update ${input.taskId} --status blocked`;
+  const markerCommentCommand = (stage, state, evidencePlaceholder) => `todos --project ${todosProjectPath} comment ${input.taskId} "${gateMarker(stage, state)}
+<${evidencePlaceholder}>"`;
   const gateStopFragment = (stage, stops) => `The deterministic ${stage} gate will stop ${stops} unless the latest ${stage} marker is the exact go marker and the task has no blocked/completed/done/cancelled/failed/archived/no-auto/manual/approval-required state.`;
   const triagePrompt = [
     ...boundedStepHeaderFragment(`Triage todos task ${input.taskId} for safe automated execution.`, "triage", "lifecycle"),
@@ -11281,9 +10994,12 @@ function renderTaskLifecycleWorkflow(input) {
     "Decide whether the task is eligible for loop execution. Check status, dependencies, duplicate tasks, no-auto/manual/approval metadata, project path, acceptance criteria, and whether the requested work should be split before implementation.",
     "Do not implement repo changes in this step.",
     `If the task is eligible for automated planning, add a task comment whose first line is exactly: ${gateMarker("triage", "go")}`,
-    "Include the triage decision, duplicates/dependencies found, and any follow-up tasks created in that same comment.",
+    `Use this copy-safe marker comment command for triage go: ${markerCommentCommand("triage", "go", "task-specific triage evidence")}`,
+    "Do not run a separate generic evidence comment before the marker; include the triage decision, duplicates/dependencies found, and any follow-up tasks created in that same marker comment.",
     `If the task should not proceed automatically, run: ${blockTaskCommand}`,
     `Then add a task comment whose first line is exactly: ${gateMarker("triage", "blocked")}`,
+    `Use this copy-safe marker comment command for triage blocked: ${markerCommentCommand("triage", "blocked", "task-specific triage evidence")}`,
+    "Do not run a separate generic blocker comment before the marker; include the blocker evidence in that same marker comment.",
     gateStopFragment("triage", "later steps")
   ].join(`
 `);
@@ -11292,17 +11008,19 @@ function renderTaskLifecycleWorkflow(input) {
     shared,
     "Read the triage comment and current task details.",
     `If the task is ready for implementation, add a task comment whose first line is exactly: ${gateMarker("planner", "go")}`,
-    "In that same comment, include a concise implementation plan: files/areas to inspect, validation commands, risk checks, expected commit/PR behavior, and any cross-repo tasks that should be created separately.",
+    `Use this copy-safe marker comment command for planner go: ${markerCommentCommand("planner", "go", "task-specific plan/evidence")}`,
+    "Do not run a separate generic evidence comment before the marker; in that same marker comment, include a concise implementation plan: files/areas to inspect, validation commands, risk checks, expected commit/PR behavior, and any cross-repo tasks that should be created separately.",
     `Do not implement repo changes in this step. If the task is too broad or unsafe for automation, run: ${blockTaskCommand}`,
     `Then add a task comment whose first line is exactly: ${gateMarker("planner", "blocked")}`,
-    `Create smaller deduped tasks and record evidence. ${gateStopFragment("planner", "the worker")}`
+    `Use this copy-safe marker comment command for planner blocked: ${markerCommentCommand("planner", "blocked", "task-specific plan/evidence")}`,
+    `Do not run a separate generic blocker comment before the marker; create smaller deduped tasks and record blocker evidence in that same marker comment. ${gateStopFragment("planner", "the worker")}`
   ].join(`
 `);
   const workerPrompt = [
     ...boundedStepHeaderFragment(`Complete todos task ${input.taskId} according to the planner evidence.`, "worker", "lifecycle"),
     shared,
     todosStartLine(todosProjectPath, input.taskId),
-    "Read the triage and planner comments first. Implement only the scoped task, run focused validation, and record changed files, commits, evidence, blockers, and residual risks.",
+    "Read the triage and planner comments first. Implement only the scoped task, run focused validation, and record concrete worker evidence in todos: changed files, commits, validation results, blockers, and residual risks.",
     input.prHandoff ? `When only GitHub network access is blocked after a successful commit/validation, record the handoff artifact at ${handoffArtifactPath} instead of repeatedly retrying push/PR creation.` : undefined,
     WORKER_LEAVES_COMPLETION_FRAGMENT
   ].filter(Boolean).join(`
@@ -11310,7 +11028,7 @@ function renderTaskLifecycleWorkflow(input) {
   const verifierPrompt = [
     ...boundedStepHeaderFragment(`Verify todos task ${input.taskId} after the full lifecycle worker step.`, "verifier", "lifecycle"),
     shared,
-    todosVerificationLine(todosProjectPath, input.taskId),
+    "Before completion, record concrete verification evidence in todos with changed files, validation results, findings, and the task decision.",
     todosDoneLine(todosProjectPath, input.taskId),
     adversarialReviewFragment("triage, plan, worker evidence, repo state, commits, tests, and acceptance criteria", TASK_REVIEW_FOCUS),
     verifierRuntimeGuidance(input),

package/dist/lib/agent-adapter.d.ts

@@ -24,7 +24,7 @@ export interface ProviderAdapter {
     validate(target: AgentTarget, label?: string): void;
     buildInvocation(target: AgentTarget): AgentInvocation;
 }
-export declare const UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS: Set<string>;
+export declare const UNSAFE_CODEWITH_EXEC_EXTRA_ARGS: Set<string>;
 export declare const PROVIDER_ADAPTERS: Record<AgentProvider, ProviderAdapter>;
 export declare const AGENT_PROVIDERS: AgentProvider[];
 export declare function providerAdapter(provider: AgentProvider): ProviderAdapter;

package/dist/lib/mode.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.7",
+  version: "0.4.9",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",

package/dist/lib/route/pr-review.d.ts

@@ -8,4 +8,14 @@ export interface PrReviewRoutingDecision {
     selectedReviewer?: string;
     signals: string[];
 }
-export declare function prReviewRoutingDecision(data: Record<string, unknown>, metadata: Record<string, unknown>, opts: TodosTaskRouteOptions): PrReviewRoutingDecision;
+/** A GitHub PR reference resolvable to `owner/repo#number`. */
+export interface PrReference {
+    owner: string;
+    repo: string;
+    number: number;
+}
+/** Resolves a PR author login from a concrete `owner/repo#number` reference. */
+export type PrAuthorResolver = (ref: PrReference) => string | undefined;
+/** Extracts a concrete owner/repo/number PR reference from route evidence text. */
+export declare function prReferenceFrom(text: string): PrReference | undefined;
+export declare function prReviewRoutingDecision(data: Record<string, unknown>, metadata: Record<string, unknown>, opts: TodosTaskRouteOptions, resolveAuthor?: PrAuthorResolver): PrReviewRoutingDecision;

package/dist/lib/storage/index.js

@@ -579,7 +579,7 @@ import { isAbsolute, resolve } from "path";
 
 // src/lib/agent-adapter.ts
 import { spawn } from "child_process";
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -628,12 +628,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -716,7 +716,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -724,11 +727,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -781,7 +780,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })

package/dist/lib/storage/sqlite.js

@@ -579,7 +579,7 @@ import { isAbsolute, resolve } from "path";
 
 // src/lib/agent-adapter.ts
 import { spawn } from "child_process";
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -628,12 +628,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -716,7 +716,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -724,11 +727,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -781,7 +780,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })