@hasna/loops 0.4.8 → 0.4.10

package/dist/runner/index.js

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.8",
+  version: "0.4.10",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -365,7 +365,7 @@ function scrubSecretsDeep(value) {
 }
 
 // src/lib/agent-adapter.ts
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -414,12 +414,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -502,7 +502,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -510,11 +513,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -567,7 +566,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })
@@ -1041,11 +1040,6 @@ var TRANSPORT_ENV_KEYS = new Set([
   "USER",
   "XDG_RUNTIME_DIR"
 ]);
-function boundedText(text, maxBytes) {
-  const buffer = new BoundedOutputBuffer(maxBytes);
-  buffer.append(text);
-  return buffer.value();
-}
 function buildResult(status, startedAt, fields = {}) {
   const finishedAt = fields.finishedAt ?? nowIso();
   return {
@@ -1083,6 +1077,20 @@ function notifySpawn(pid, opts) {
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+function codewithProfileCandidateFromLine(line) {
+  const cols = line.trim().split(/\s+/);
+  if (cols[0] === "*")
+    return cols[1];
+  return cols[0];
+}
+function codewithProfileForError(profile) {
+  return /[\u0000-\u001F\u007F]/.test(profile) ? JSON.stringify(profile) ?? profile : profile;
+}
+function assertCodewithAuthProfileSupported(profile) {
+  if (profile.includes("\x00")) {
+    throw new Error(`codewith auth profile contains unsupported NUL byte: ${codewithProfileForError(profile)}`);
+  }
+}
 function metadataEnv(metadata) {
   const env = {};
   if (metadata.loopId)
@@ -1109,21 +1117,6 @@ function metadataEnv(metadata) {
     env.LOOPS_GOAL_NODE_KEY = metadata.goalNodeKey;
   return env;
 }
-function codewithAgentIdempotencyKey(metadata) {
-  const parts = [
-    "openloops",
-    metadata.workflowRunId ? `workflow-run:${metadata.workflowRunId}` : undefined,
-    metadata.workflowStepId ? `step:${metadata.workflowStepId}` : undefined,
-    metadata.runId ? `loop-run:${metadata.runId}` : undefined,
-    metadata.loopId ? `loop:${metadata.loopId}` : undefined,
-    metadata.scheduledFor ? `scheduled:${metadata.scheduledFor}` : undefined,
-    metadata.goalId ? `goal:${metadata.goalId}` : undefined,
-    metadata.goalNodeKey ? `node:${metadata.goalNodeKey}` : undefined
-  ].filter(Boolean);
-  if (parts.length > 1)
-    return parts.join(":");
-  return `openloops:adhoc:${randomBytes2(16).toString("hex")}`;
-}
 function allowlistEnv(allowlist) {
   const env = {};
   if (allowlist?.tools?.length)
@@ -1164,6 +1157,9 @@ function commandSpec(target, opts) {
     };
   }
   const agentTarget = target;
+  if (agentTarget.provider === "codewith" && agentTarget.authProfile) {
+    assertCodewithAuthProfileSupported(agentTarget.authProfile);
+  }
   const adapter = providerAdapter(agentTarget.provider);
   const invocation = adapter.buildInvocation(agentTarget);
   return {
@@ -1178,8 +1174,7 @@ function commandSpec(target, opts) {
     preflightAnyOf: invocation.preflightAnyOf,
     stdin: invocation.stdin,
     allowlist: agentTarget.allowlist,
-    worktree: agentTarget.worktree,
-    codewithDurableAgent: adapter.capabilities.durable ? { target: agentTarget } : undefined
+    worktree: agentTarget.worktree
   };
 }
 function composeExecutionEnv(spec, metadata, opts, accountEnv) {
@@ -1337,7 +1332,8 @@ function remotePreflightScript(spec, metadata) {
     lines.push(`if ! ${spec.preflightAnyOf.map((command) => `command -v ${shellQuote(command)} >/dev/null 2>&1`).join(" && ! ")}; then`, `  echo 'none of required executables found: ${spec.preflightAnyOf.join(", ")}' >&2`, "  exit 127", "fi");
   }
   if (spec.nativeAuthProfile?.provider === "codewith") {
-    lines.push(`__OPENLOOPS_CODEWITH_PROFILES="$(${shellQuote(spec.command)} profile list)" || {`, `  printf '%s\\n' ${shellQuote("codewith auth profile preflight failed")} >&2`, "  exit 1", "}", `if ! printf '%s\\n' "$__OPENLOOPS_CODEWITH_PROFILES" | awk 'NR > 1 { print $1 }' | grep -Fx ${shellQuote(spec.nativeAuthProfile.profile)} >/dev/null; then`, `  printf '%s\\n' ${shellQuote(`codewith auth profile not found: ${spec.nativeAuthProfile.profile}`)} >&2`, "  exit 1", "fi");
+    const profileForError = codewithProfileForError(spec.nativeAuthProfile.profile);
+    lines.push(`__OPENLOOPS_CODEWITH_PROFILE=${shellQuote(spec.nativeAuthProfile.profile)}`, "export __OPENLOOPS_CODEWITH_PROFILE", `__OPENLOOPS_CODEWITH_PROFILES="$(${shellQuote(spec.command)} profile list)" || {`, `  printf '%s\\n' ${shellQuote("codewith auth profile preflight failed")} >&2`, "  exit 1", "}", `if ! printf '%s\\n' "$__OPENLOOPS_CODEWITH_PROFILES" | awk 'NR > 1 { candidate = ($1 == "*" ? $2 : $1); if (candidate == ENVIRON["__OPENLOOPS_CODEWITH_PROFILE"]) found = 1 } END { exit(found ? 0 : 1) }'; then`, `  printf '%s\\n' ${shellQuote(`codewith auth profile not found: ${profileForError}`)} >&2`, "  exit 1", "fi");
   }
   return lines.join(`
 `);
@@ -1362,9 +1358,9 @@ function assertCodewithProfileListed(profile, result) {
     const detail = (result.stderr || result.stdout || `exit ${result.status ?? "unknown"}`).trim();
     throw new Error(`codewith auth profile preflight failed${detail ? `: ${detail}` : ""}`);
   }
-  const profiles = new Set((result.stdout || "").split(/\r?\n/).slice(1).map((line) => line.trim().split(/\s+/)[0]).filter(Boolean));
+  const profiles = new Set((result.stdout || "").split(/\r?\n/).slice(1).map(codewithProfileCandidateFromLine).filter(Boolean));
   if (!profiles.has(profile)) {
-    throw new Error(`codewith auth profile not found: ${profile}`);
+    throw new Error(`codewith auth profile not found: ${codewithProfileForError(profile)}`);
   }
 }
 function preflightNativeAuthProfileSync(spec, env) {
@@ -1389,266 +1385,6 @@ async function preflightNativeAuthProfile(spec, env) {
   const result = await spawnCapture(spec.command, ["profile", "list"], { env, timeoutMs: 15000 });
   assertCodewithProfileListed(spec.nativeAuthProfile.profile, result);
 }
-function codewithAgentStartArgs(target, idempotencyKey) {
-  const args = providerAdapter(target.provider).buildInvocation(target).args;
-  const startIndex = args.findIndex((arg, index) => arg === "start" && args[index - 1] === "agent");
-  if (startIndex === -1)
-    throw new Error("internal error: codewith durable agent args missing agent start");
-  args.splice(startIndex + 1, 0, "--idempotency-key", idempotencyKey);
-  return args;
-}
-function codewithAgentControlArgs(target, command, agentId) {
-  return [
-    ...target.authProfile ? ["--auth-profile", target.authProfile] : [],
-    "agent",
-    command,
-    ...command === "logs" ? ["--limit", "20"] : [],
-    "--json",
-    agentId
-  ];
-}
-function extractFirstJsonObject(text) {
-  let depth = 0;
-  let start = -1;
-  let inString = false;
-  let escaped = false;
-  for (let i = 0;i < text.length; i += 1) {
-    const ch = text[i];
-    if (inString) {
-      if (escaped)
-        escaped = false;
-      else if (ch === "\\")
-        escaped = true;
-      else if (ch === '"')
-        inString = false;
-      continue;
-    }
-    if (ch === '"') {
-      inString = true;
-    } else if (ch === "{") {
-      if (depth === 0)
-        start = i;
-      depth += 1;
-    } else if (ch === "}") {
-      if (depth > 0) {
-        depth -= 1;
-        if (depth === 0 && start !== -1)
-          return text.slice(start, i + 1);
-      }
-    }
-  }
-  return;
-}
-function parseJsonOutput(stdout, label) {
-  const raw = stdout || "{}";
-  const candidates = [raw.trim()];
-  const scanned = extractFirstJsonObject(raw);
-  if (scanned && scanned !== raw.trim())
-    candidates.push(scanned);
-  let lastError;
-  for (const candidate of candidates) {
-    try {
-      const value = JSON.parse(candidate);
-      if (!value || typeof value !== "object" || Array.isArray(value))
-        throw new Error("not an object");
-      return value;
-    } catch (error) {
-      lastError = error;
-    }
-  }
-  throw new Error(`${label} did not return JSON${lastError instanceof Error ? `: ${lastError.message}` : ""}`);
-}
-function recordField(value, key) {
-  if (!value || typeof value !== "object" || Array.isArray(value))
-    return;
-  const field = value[key];
-  return field && typeof field === "object" && !Array.isArray(field) ? field : undefined;
-}
-function stringField(value, key) {
-  const field = value?.[key];
-  return typeof field === "string" ? field : undefined;
-}
-function numberField(value, key) {
-  const field = value?.[key];
-  return typeof field === "number" && Number.isFinite(field) ? field : undefined;
-}
-function codewithAgentStatus(readJson) {
-  return stringField(recordField(readJson, "agent"), "status") ?? stringField(recordField(readJson, "statusSnapshot"), "status");
-}
-function codewithAgentLastEventSeq(readJson) {
-  const agentSeq = numberField(recordField(readJson, "agent"), "lastEventSeq");
-  const snapshotSeq = numberField(recordField(readJson, "statusSnapshot"), "lastEventSeq");
-  if (agentSeq !== undefined && snapshotSeq !== undefined)
-    return Math.max(agentSeq, snapshotSeq);
-  return agentSeq ?? snapshotSeq;
-}
-function codewithAgentEvidence(startJson, readJson, logsJson) {
-  const agent = recordField(readJson, "agent") ?? recordField(startJson, "agent");
-  const statusSnapshot = recordField(readJson, "statusSnapshot");
-  const events = Array.isArray(logsJson?.data) ? logsJson.data.filter((event) => Boolean(event) && typeof event === "object" && !Array.isArray(event)).map((event) => ({
-    seq: numberField(event, "seq"),
-    eventType: stringField(event, "eventType"),
-    createdAt: numberField(event, "createdAt")
-  })) : undefined;
-  return JSON.stringify({
-    codewithAgent: {
-      agentId: stringField(agent, "agentId"),
-      status: stringField(agent, "status"),
-      desiredState: stringField(agent, "desiredState"),
-      statusReason: stringField(agent, "statusReason"),
-      threadId: stringField(agent, "threadId"),
-      rolloutPath: stringField(agent, "rolloutPath"),
-      pid: numberField(agent, "pid"),
-      exitCode: numberField(agent, "exitCode"),
-      created: typeof startJson.created === "boolean" ? startJson.created : undefined
-    },
-    statusSnapshot: statusSnapshot ? {
-      seq: numberField(statusSnapshot, "seq"),
-      status: stringField(statusSnapshot, "status"),
-      summary: stringField(statusSnapshot, "summary"),
-      pendingInteractionCount: numberField(statusSnapshot, "pendingInteractionCount"),
-      lastEventSeq: numberField(statusSnapshot, "lastEventSeq")
-    } : undefined,
-    events
-  }, null, 2);
-}
-function codewithAgentProgress(readJson) {
-  const agent = recordField(readJson, "agent");
-  const statusSnapshot = recordField(readJson, "statusSnapshot");
-  return {
-    provider: "codewith",
-    agentId: stringField(agent, "agentId"),
-    status: stringField(agent, "status") ?? stringField(statusSnapshot, "status"),
-    summary: stringField(statusSnapshot, "summary"),
-    statusReason: stringField(agent, "statusReason"),
-    threadId: stringField(agent, "threadId"),
-    rolloutPath: stringField(agent, "rolloutPath"),
-    pid: numberField(agent, "pid"),
-    lastEventSeq: codewithAgentLastEventSeq(readJson)
-  };
-}
-function sleep(ms) {
-  return new Promise((resolve2) => setTimeout(resolve2, ms));
-}
-async function executeCodewithDurableAgent(spec, metadata, opts, env, startedAt) {
-  const target = spec.codewithDurableAgent?.target;
-  if (!target)
-    throw new Error("internal error: missing codewith durable target");
-  const maxOutputBytes = opts.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
-  const idempotencyKey = codewithAgentIdempotencyKey(metadata);
-  const start = await spawnCapture(spec.command, codewithAgentStartArgs(target, idempotencyKey), {
-    cwd: spec.cwd,
-    env,
-    timeoutMs: 30000,
-    maxOutputBytes
-  });
-  const stderr = new BoundedOutputBuffer(maxOutputBytes);
-  stderr.append(start.stderr);
-  if (start.error || (start.status ?? 1) !== 0) {
-    return failureResult(startedAt, start.error ?? `codewith agent start exited with code ${start.status ?? "unknown"}`, {
-      exitCode: start.status ?? undefined,
-      stdout: start.stdout,
-      stderr: stderr.value()
-    });
-  }
-  let startJson;
-  try {
-    startJson = parseJsonOutput(start.stdout || "{}", "codewith agent start");
-  } catch (error) {
-    return failureResult(startedAt, error instanceof Error ? error.message : String(error), { stdout: start.stdout, stderr: stderr.value() });
-  }
-  const agentId = stringField(recordField(startJson, "agent"), "agentId");
-  if (!agentId) {
-    return failureResult(startedAt, "codewith agent start did not return agent.agentId", { stdout: start.stdout, stderr: stderr.value() });
-  }
-  opts.onAgentProgress?.(codewithAgentProgress(startJson));
-  const stopAgent = async () => {
-    await spawnCapture(spec.command, codewithAgentControlArgs(target, "stop", agentId), {
-      cwd: spec.cwd,
-      env,
-      timeoutMs: 15000,
-      maxOutputBytes
-    });
-  };
-  const pollMs = Math.max(100, Number(opts.env?.LOOPS_CODEWITH_AGENT_POLL_MS ?? process.env.LOOPS_CODEWITH_AGENT_POLL_MS ?? 2000) || 2000);
-  let lastReadJson = startJson;
-  let lastLogsJson;
-  let lastFingerprint;
-  let lastProgressAt = Date.now();
-  const evidence = () => boundedText(codewithAgentEvidence(startJson, lastReadJson, lastLogsJson), maxOutputBytes);
-  while (true) {
-    if (opts.signal?.aborted) {
-      await stopAgent();
-      return failureResult(startedAt, "cancelled", { stdout: evidence(), stderr: stderr.value() });
-    }
-    const read = await spawnCapture(spec.command, codewithAgentControlArgs(target, "read", agentId), {
-      cwd: spec.cwd,
-      env,
-      timeoutMs: 30000,
-      maxOutputBytes
-    });
-    stderr.append(read.stderr);
-    if (read.error || (read.status ?? 1) !== 0) {
-      return failureResult(startedAt, read.error ?? `codewith agent read exited with code ${read.status ?? "unknown"}`, {
-        exitCode: read.status ?? undefined,
-        stdout: evidence(),
-        stderr: stderr.value()
-      });
-    }
-    try {
-      lastReadJson = parseJsonOutput(read.stdout || "{}", "codewith agent read");
-    } catch (error) {
-      return failureResult(startedAt, error instanceof Error ? error.message : String(error), {
-        stdout: boundedText(read.stdout, maxOutputBytes),
-        stderr: stderr.value()
-      });
-    }
-    const status = codewithAgentStatus(lastReadJson);
-    const fingerprint = JSON.stringify({
-      status,
-      agentLastEventSeq: numberField(recordField(lastReadJson, "agent"), "lastEventSeq"),
-      snapshot: recordField(lastReadJson, "statusSnapshot") ?? null
-    });
-    if (fingerprint !== lastFingerprint) {
-      lastFingerprint = fingerprint;
-      lastProgressAt = Date.now();
-      opts.onAgentProgress?.(codewithAgentProgress(lastReadJson));
-    }
-    if (status === "completed" || status === "failed" || status === "cancelled") {
-      const logs = await spawnCapture(spec.command, codewithAgentControlArgs(target, "logs", agentId), {
-        cwd: spec.cwd,
-        env,
-        timeoutMs: 30000,
-        maxOutputBytes
-      });
-      if (!logs.error && (logs.status ?? 1) === 0) {
-        try {
-          lastLogsJson = parseJsonOutput(logs.stdout || "{}", "codewith agent logs");
-        } catch {
-          lastLogsJson = undefined;
-        }
-      } else {
-        stderr.append(logs.stderr || logs.error || "");
-      }
-      if (status === "completed") {
-        return successResult(startedAt, { exitCode: 0, stdout: evidence(), stderr: stderr.value() });
-      }
-      return failureResult(startedAt, stringField(recordField(lastReadJson, "agent"), "statusReason") ?? `codewith agent ${status}`, { exitCode: 1, stdout: evidence(), stderr: stderr.value() });
-    }
-    if (typeof spec.timeoutMs === "number" && new Date(nowIso()).getTime() - new Date(startedAt).getTime() >= spec.timeoutMs) {
-      await stopAgent();
-      return timeoutResult(startedAt, `timed out after ${spec.timeoutMs}ms`, { stdout: evidence(), stderr: stderr.value() });
-    }
-    if (typeof spec.idleTimeoutMs === "number" && Date.now() - lastProgressAt >= spec.idleTimeoutMs) {
-      await stopAgent();
-      return timeoutResult(startedAt, `idle timed out after ${spec.idleTimeoutMs}ms without agent progress`, {
-        stdout: evidence(),
-        stderr: stderr.value()
-      });
-    }
-    await sleep(pollMs);
-  }
-}
 function resolvedDirEquals(left, right) {
   try {
     return realpathSync(left) === realpathSync(right);
@@ -1882,9 +1618,6 @@ function preflightTarget(target, metadata = {}, opts = {}) {
 async function executeTarget(target, metadata = {}, opts = {}) {
   let spec = commandSpec(target, opts);
   const machine = resolvedMachine(opts);
-  if (machine && !machine.local && spec.codewithDurableAgent) {
-    return failureResult(nowIso(), "remote Codewith durable background-agent steps require remote status polling support; run this Codewith step locally or add remote durable readback before dispatch");
-  }
   if (machine && !machine.local) {
     const remoteFallbackSpec = spec.worktree?.enabled && spec.worktree.mode === "auto" ? worktreeFallbackSpec(target, opts, spec.worktree.originalCwd) : undefined;
     return executeRemoteSpec(spec, machine, metadata, opts, remoteFallbackSpec);
@@ -1915,9 +1648,6 @@ async function executeTarget(target, metadata = {}, opts = {}) {
   if (worktreeEntry?.fallbackCwd) {
     spec = worktreeFallbackSpec(target, opts, worktreeEntry.fallbackCwd) ?? spec;
   }
-  if (spec.codewithDurableAgent) {
-    return executeCodewithDurableAgent(spec, metadata, opts, env, startedAt);
-  }
   const child = spawn2(spec.command, spec.args, {
     cwd: spec.cwd,
     env,