@hasna/loops 0.4.8 → 0.4.9

package/dist/index.js

@@ -579,7 +579,7 @@ import { isAbsolute, resolve } from "path";
 
 // src/lib/agent-adapter.ts
 import { spawn } from "child_process";
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -628,12 +628,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -716,7 +716,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -724,11 +727,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -781,7 +780,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })
@@ -4217,7 +4216,7 @@ class Store {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.8",
+  version: "0.4.9",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -5009,11 +5008,6 @@ var TRANSPORT_ENV_KEYS = new Set([
   "USER",
   "XDG_RUNTIME_DIR"
 ]);
-function boundedText(text, maxBytes) {
-  const buffer = new BoundedOutputBuffer(maxBytes);
-  buffer.append(text);
-  return buffer.value();
-}
 function buildResult(status, startedAt, fields = {}) {
   const finishedAt = fields.finishedAt ?? nowIso();
   return {
@@ -5077,21 +5071,6 @@ function metadataEnv(metadata) {
     env.LOOPS_GOAL_NODE_KEY = metadata.goalNodeKey;
   return env;
 }
-function codewithAgentIdempotencyKey(metadata) {
-  const parts = [
-    "openloops",
-    metadata.workflowRunId ? `workflow-run:${metadata.workflowRunId}` : undefined,
-    metadata.workflowStepId ? `step:${metadata.workflowStepId}` : undefined,
-    metadata.runId ? `loop-run:${metadata.runId}` : undefined,
-    metadata.loopId ? `loop:${metadata.loopId}` : undefined,
-    metadata.scheduledFor ? `scheduled:${metadata.scheduledFor}` : undefined,
-    metadata.goalId ? `goal:${metadata.goalId}` : undefined,
-    metadata.goalNodeKey ? `node:${metadata.goalNodeKey}` : undefined
-  ].filter(Boolean);
-  if (parts.length > 1)
-    return parts.join(":");
-  return `openloops:adhoc:${randomBytes2(16).toString("hex")}`;
-}
 function allowlistEnv(allowlist) {
   const env = {};
   if (allowlist?.tools?.length)
@@ -5146,8 +5125,7 @@ function commandSpec(target, opts) {
     preflightAnyOf: invocation.preflightAnyOf,
     stdin: invocation.stdin,
     allowlist: agentTarget.allowlist,
-    worktree: agentTarget.worktree,
-    codewithDurableAgent: adapter.capabilities.durable ? { target: agentTarget } : undefined
+    worktree: agentTarget.worktree
   };
 }
 function composeExecutionEnv(spec, metadata, opts, accountEnv) {
@@ -5357,266 +5335,6 @@ async function preflightNativeAuthProfile(spec, env) {
   const result = await spawnCapture(spec.command, ["profile", "list"], { env, timeoutMs: 15000 });
   assertCodewithProfileListed(spec.nativeAuthProfile.profile, result);
 }
-function codewithAgentStartArgs(target, idempotencyKey) {
-  const args = providerAdapter(target.provider).buildInvocation(target).args;
-  const startIndex = args.findIndex((arg, index) => arg === "start" && args[index - 1] === "agent");
-  if (startIndex === -1)
-    throw new Error("internal error: codewith durable agent args missing agent start");
-  args.splice(startIndex + 1, 0, "--idempotency-key", idempotencyKey);
-  return args;
-}
-function codewithAgentControlArgs(target, command, agentId) {
-  return [
-    ...target.authProfile ? ["--auth-profile", target.authProfile] : [],
-    "agent",
-    command,
-    ...command === "logs" ? ["--limit", "20"] : [],
-    "--json",
-    agentId
-  ];
-}
-function extractFirstJsonObject(text) {
-  let depth = 0;
-  let start = -1;
-  let inString = false;
-  let escaped = false;
-  for (let i = 0;i < text.length; i += 1) {
-    const ch = text[i];
-    if (inString) {
-      if (escaped)
-        escaped = false;
-      else if (ch === "\\")
-        escaped = true;
-      else if (ch === '"')
-        inString = false;
-      continue;
-    }
-    if (ch === '"') {
-      inString = true;
-    } else if (ch === "{") {
-      if (depth === 0)
-        start = i;
-      depth += 1;
-    } else if (ch === "}") {
-      if (depth > 0) {
-        depth -= 1;
-        if (depth === 0 && start !== -1)
-          return text.slice(start, i + 1);
-      }
-    }
-  }
-  return;
-}
-function parseJsonOutput(stdout, label) {
-  const raw = stdout || "{}";
-  const candidates = [raw.trim()];
-  const scanned = extractFirstJsonObject(raw);
-  if (scanned && scanned !== raw.trim())
-    candidates.push(scanned);
-  let lastError;
-  for (const candidate of candidates) {
-    try {
-      const value = JSON.parse(candidate);
-      if (!value || typeof value !== "object" || Array.isArray(value))
-        throw new Error("not an object");
-      return value;
-    } catch (error) {
-      lastError = error;
-    }
-  }
-  throw new Error(`${label} did not return JSON${lastError instanceof Error ? `: ${lastError.message}` : ""}`);
-}
-function recordField(value, key) {
-  if (!value || typeof value !== "object" || Array.isArray(value))
-    return;
-  const field = value[key];
-  return field && typeof field === "object" && !Array.isArray(field) ? field : undefined;
-}
-function stringField(value, key) {
-  const field = value?.[key];
-  return typeof field === "string" ? field : undefined;
-}
-function numberField(value, key) {
-  const field = value?.[key];
-  return typeof field === "number" && Number.isFinite(field) ? field : undefined;
-}
-function codewithAgentStatus(readJson) {
-  return stringField(recordField(readJson, "agent"), "status") ?? stringField(recordField(readJson, "statusSnapshot"), "status");
-}
-function codewithAgentLastEventSeq(readJson) {
-  const agentSeq = numberField(recordField(readJson, "agent"), "lastEventSeq");
-  const snapshotSeq = numberField(recordField(readJson, "statusSnapshot"), "lastEventSeq");
-  if (agentSeq !== undefined && snapshotSeq !== undefined)
-    return Math.max(agentSeq, snapshotSeq);
-  return agentSeq ?? snapshotSeq;
-}
-function codewithAgentEvidence(startJson, readJson, logsJson) {
-  const agent = recordField(readJson, "agent") ?? recordField(startJson, "agent");
-  const statusSnapshot = recordField(readJson, "statusSnapshot");
-  const events = Array.isArray(logsJson?.data) ? logsJson.data.filter((event) => Boolean(event) && typeof event === "object" && !Array.isArray(event)).map((event) => ({
-    seq: numberField(event, "seq"),
-    eventType: stringField(event, "eventType"),
-    createdAt: numberField(event, "createdAt")
-  })) : undefined;
-  return JSON.stringify({
-    codewithAgent: {
-      agentId: stringField(agent, "agentId"),
-      status: stringField(agent, "status"),
-      desiredState: stringField(agent, "desiredState"),
-      statusReason: stringField(agent, "statusReason"),
-      threadId: stringField(agent, "threadId"),
-      rolloutPath: stringField(agent, "rolloutPath"),
-      pid: numberField(agent, "pid"),
-      exitCode: numberField(agent, "exitCode"),
-      created: typeof startJson.created === "boolean" ? startJson.created : undefined
-    },
-    statusSnapshot: statusSnapshot ? {
-      seq: numberField(statusSnapshot, "seq"),
-      status: stringField(statusSnapshot, "status"),
-      summary: stringField(statusSnapshot, "summary"),
-      pendingInteractionCount: numberField(statusSnapshot, "pendingInteractionCount"),
-      lastEventSeq: numberField(statusSnapshot, "lastEventSeq")
-    } : undefined,
-    events
-  }, null, 2);
-}
-function codewithAgentProgress(readJson) {
-  const agent = recordField(readJson, "agent");
-  const statusSnapshot = recordField(readJson, "statusSnapshot");
-  return {
-    provider: "codewith",
-    agentId: stringField(agent, "agentId"),
-    status: stringField(agent, "status") ?? stringField(statusSnapshot, "status"),
-    summary: stringField(statusSnapshot, "summary"),
-    statusReason: stringField(agent, "statusReason"),
-    threadId: stringField(agent, "threadId"),
-    rolloutPath: stringField(agent, "rolloutPath"),
-    pid: numberField(agent, "pid"),
-    lastEventSeq: codewithAgentLastEventSeq(readJson)
-  };
-}
-function sleep(ms) {
-  return new Promise((resolve3) => setTimeout(resolve3, ms));
-}
-async function executeCodewithDurableAgent(spec, metadata, opts, env, startedAt) {
-  const target = spec.codewithDurableAgent?.target;
-  if (!target)
-    throw new Error("internal error: missing codewith durable target");
-  const maxOutputBytes = opts.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
-  const idempotencyKey = codewithAgentIdempotencyKey(metadata);
-  const start = await spawnCapture(spec.command, codewithAgentStartArgs(target, idempotencyKey), {
-    cwd: spec.cwd,
-    env,
-    timeoutMs: 30000,
-    maxOutputBytes
-  });
-  const stderr = new BoundedOutputBuffer(maxOutputBytes);
-  stderr.append(start.stderr);
-  if (start.error || (start.status ?? 1) !== 0) {
-    return failureResult(startedAt, start.error ?? `codewith agent start exited with code ${start.status ?? "unknown"}`, {
-      exitCode: start.status ?? undefined,
-      stdout: start.stdout,
-      stderr: stderr.value()
-    });
-  }
-  let startJson;
-  try {
-    startJson = parseJsonOutput(start.stdout || "{}", "codewith agent start");
-  } catch (error) {
-    return failureResult(startedAt, error instanceof Error ? error.message : String(error), { stdout: start.stdout, stderr: stderr.value() });
-  }
-  const agentId = stringField(recordField(startJson, "agent"), "agentId");
-  if (!agentId) {
-    return failureResult(startedAt, "codewith agent start did not return agent.agentId", { stdout: start.stdout, stderr: stderr.value() });
-  }
-  opts.onAgentProgress?.(codewithAgentProgress(startJson));
-  const stopAgent = async () => {
-    await spawnCapture(spec.command, codewithAgentControlArgs(target, "stop", agentId), {
-      cwd: spec.cwd,
-      env,
-      timeoutMs: 15000,
-      maxOutputBytes
-    });
-  };
-  const pollMs = Math.max(100, Number(opts.env?.LOOPS_CODEWITH_AGENT_POLL_MS ?? process.env.LOOPS_CODEWITH_AGENT_POLL_MS ?? 2000) || 2000);
-  let lastReadJson = startJson;
-  let lastLogsJson;
-  let lastFingerprint;
-  let lastProgressAt = Date.now();
-  const evidence = () => boundedText(codewithAgentEvidence(startJson, lastReadJson, lastLogsJson), maxOutputBytes);
-  while (true) {
-    if (opts.signal?.aborted) {
-      await stopAgent();
-      return failureResult(startedAt, "cancelled", { stdout: evidence(), stderr: stderr.value() });
-    }
-    const read = await spawnCapture(spec.command, codewithAgentControlArgs(target, "read", agentId), {
-      cwd: spec.cwd,
-      env,
-      timeoutMs: 30000,
-      maxOutputBytes
-    });
-    stderr.append(read.stderr);
-    if (read.error || (read.status ?? 1) !== 0) {
-      return failureResult(startedAt, read.error ?? `codewith agent read exited with code ${read.status ?? "unknown"}`, {
-        exitCode: read.status ?? undefined,
-        stdout: evidence(),
-        stderr: stderr.value()
-      });
-    }
-    try {
-      lastReadJson = parseJsonOutput(read.stdout || "{}", "codewith agent read");
-    } catch (error) {
-      return failureResult(startedAt, error instanceof Error ? error.message : String(error), {
-        stdout: boundedText(read.stdout, maxOutputBytes),
-        stderr: stderr.value()
-      });
-    }
-    const status = codewithAgentStatus(lastReadJson);
-    const fingerprint = JSON.stringify({
-      status,
-      agentLastEventSeq: numberField(recordField(lastReadJson, "agent"), "lastEventSeq"),
-      snapshot: recordField(lastReadJson, "statusSnapshot") ?? null
-    });
-    if (fingerprint !== lastFingerprint) {
-      lastFingerprint = fingerprint;
-      lastProgressAt = Date.now();
-      opts.onAgentProgress?.(codewithAgentProgress(lastReadJson));
-    }
-    if (status === "completed" || status === "failed" || status === "cancelled") {
-      const logs = await spawnCapture(spec.command, codewithAgentControlArgs(target, "logs", agentId), {
-        cwd: spec.cwd,
-        env,
-        timeoutMs: 30000,
-        maxOutputBytes
-      });
-      if (!logs.error && (logs.status ?? 1) === 0) {
-        try {
-          lastLogsJson = parseJsonOutput(logs.stdout || "{}", "codewith agent logs");
-        } catch {
-          lastLogsJson = undefined;
-        }
-      } else {
-        stderr.append(logs.stderr || logs.error || "");
-      }
-      if (status === "completed") {
-        return successResult(startedAt, { exitCode: 0, stdout: evidence(), stderr: stderr.value() });
-      }
-      return failureResult(startedAt, stringField(recordField(lastReadJson, "agent"), "statusReason") ?? `codewith agent ${status}`, { exitCode: 1, stdout: evidence(), stderr: stderr.value() });
-    }
-    if (typeof spec.timeoutMs === "number" && new Date(nowIso()).getTime() - new Date(startedAt).getTime() >= spec.timeoutMs) {
-      await stopAgent();
-      return timeoutResult(startedAt, `timed out after ${spec.timeoutMs}ms`, { stdout: evidence(), stderr: stderr.value() });
-    }
-    if (typeof spec.idleTimeoutMs === "number" && Date.now() - lastProgressAt >= spec.idleTimeoutMs) {
-      await stopAgent();
-      return timeoutResult(startedAt, `idle timed out after ${spec.idleTimeoutMs}ms without agent progress`, {
-        stdout: evidence(),
-        stderr: stderr.value()
-      });
-    }
-    await sleep(pollMs);
-  }
-}
 function resolvedDirEquals(left, right) {
   try {
     return realpathSync(left) === realpathSync(right);
@@ -5850,9 +5568,6 @@ function preflightTarget(target, metadata = {}, opts = {}) {
 async function executeTarget(target, metadata = {}, opts = {}) {
   let spec = commandSpec(target, opts);
   const machine = resolvedMachine(opts);
-  if (machine && !machine.local && spec.codewithDurableAgent) {
-    return failureResult(nowIso(), "remote Codewith durable background-agent steps require remote status polling support; run this Codewith step locally or add remote durable readback before dispatch");
-  }
   if (machine && !machine.local) {
     const remoteFallbackSpec = spec.worktree?.enabled && spec.worktree.mode === "auto" ? worktreeFallbackSpec(target, opts, spec.worktree.originalCwd) : undefined;
     return executeRemoteSpec(spec, machine, metadata, opts, remoteFallbackSpec);
@@ -5883,9 +5598,6 @@ async function executeTarget(target, metadata = {}, opts = {}) {
   if (worktreeEntry?.fallbackCwd) {
     spec = worktreeFallbackSpec(target, opts, worktreeEntry.fallbackCwd) ?? spec;
   }
-  if (spec.codewithDurableAgent) {
-    return executeCodewithDurableAgent(spec, metadata, opts, env, startedAt);
-  }
   const child = spawn2(spec.command, spec.args, {
     cwd: spec.cwd,
     env,

package/dist/lib/agent-adapter.d.ts

@@ -24,7 +24,7 @@ export interface ProviderAdapter {
     validate(target: AgentTarget, label?: string): void;
     buildInvocation(target: AgentTarget): AgentInvocation;
 }
-export declare const UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS: Set<string>;
+export declare const UNSAFE_CODEWITH_EXEC_EXTRA_ARGS: Set<string>;
 export declare const PROVIDER_ADAPTERS: Record<AgentProvider, ProviderAdapter>;
 export declare const AGENT_PROVIDERS: AgentProvider[];
 export declare function providerAdapter(provider: AgentProvider): ProviderAdapter;

package/dist/lib/mode.js

@@ -2,7 +2,7 @@
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.8",
+  version: "0.4.9",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",

package/dist/lib/route/pr-review.d.ts

@@ -8,4 +8,14 @@ export interface PrReviewRoutingDecision {
     selectedReviewer?: string;
     signals: string[];
 }
-export declare function prReviewRoutingDecision(data: Record<string, unknown>, metadata: Record<string, unknown>, opts: TodosTaskRouteOptions): PrReviewRoutingDecision;
+/** A GitHub PR reference resolvable to `owner/repo#number`. */
+export interface PrReference {
+    owner: string;
+    repo: string;
+    number: number;
+}
+/** Resolves a PR author login from a concrete `owner/repo#number` reference. */
+export type PrAuthorResolver = (ref: PrReference) => string | undefined;
+/** Extracts a concrete owner/repo/number PR reference from route evidence text. */
+export declare function prReferenceFrom(text: string): PrReference | undefined;
+export declare function prReviewRoutingDecision(data: Record<string, unknown>, metadata: Record<string, unknown>, opts: TodosTaskRouteOptions, resolveAuthor?: PrAuthorResolver): PrReviewRoutingDecision;

package/dist/lib/storage/index.js

@@ -579,7 +579,7 @@ import { isAbsolute, resolve } from "path";
 
 // src/lib/agent-adapter.ts
 import { spawn } from "child_process";
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -628,12 +628,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -716,7 +716,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -724,11 +727,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -781,7 +780,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })

package/dist/lib/storage/sqlite.js

@@ -579,7 +579,7 @@ import { isAbsolute, resolve } from "path";
 
 // src/lib/agent-adapter.ts
 import { spawn } from "child_process";
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -628,12 +628,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -716,7 +716,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -724,11 +727,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -781,7 +780,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })

package/dist/lib/store.js

@@ -579,7 +579,7 @@ import { isAbsolute, resolve } from "path";
 
 // src/lib/agent-adapter.ts
 import { spawn } from "child_process";
-var UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS = new Set([
+var UNSAFE_CODEWITH_EXEC_EXTRA_ARGS = new Set([
   "e",
   "exec",
   "agent",
@@ -628,12 +628,12 @@ function validateAgentOptions(target, label, capabilities) {
     throw new Error(`${label}.agent is not supported for provider codex`);
   }
   if (provider === "codewith" && target.agent !== undefined) {
-    throw new Error(`${label}.agent is not supported for provider codewith durable background-agent execution`);
+    throw new Error(`${label}.agent is not supported for provider codewith`);
   }
   if (provider === "codewith") {
-    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_DURABLE_EXTRA_ARGS.has(arg));
+    const unsafe = target.extraArgs?.find((arg) => UNSAFE_CODEWITH_EXEC_EXTRA_ARGS.has(arg));
     if (unsafe) {
-      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith agent steps use durable agent start, not exec/ephemeral flags`);
+      throw new Error(`${label}.extraArgs cannot include ${unsafe}; codewith exec launch flags are managed by the adapter`);
     }
   }
   if (target.addDirs?.length && !["codewith", "codex"].includes(provider)) {
@@ -716,7 +716,10 @@ function buildAgentInvocation(target) {
       args.push(...target.authProfile ? ["--auth-profile", target.authProfile] : []);
       if (target.variant)
         args.push("-c", `model_reasoning_effort=${configStringValue(target.variant)}`);
-      args.push("--ask-for-approval", "never", "--sandbox", codewithLikeSandbox(target));
+      const sandbox = codewithLikeSandbox(target);
+      if (sandbox === "workspace-write")
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+      args.push("--ask-for-approval", "never", "exec", "--json", "--ephemeral", "--sandbox", sandbox, "--skip-git-repo-check");
       if (target.cwd)
         args.push("--cd", target.cwd);
       for (const dir of target.addDirs ?? [])
@@ -724,11 +727,7 @@ function buildAgentInvocation(target) {
       if (target.model)
         args.push("--model", target.model);
       args.push(...target.extraArgs ?? []);
-      args.push("agent", "start", "--json");
-      if (target.cwd)
-        args.push("--cwd", target.cwd);
-      args.push(target.prompt);
-      return { command: "codewith", args };
+      return { command: "codewith", args, stdin: target.prompt };
     }
     case "codex": {
       if (target.variant)
@@ -781,7 +780,7 @@ function adapterFor(provider, capabilities) {
 var PROVIDER_ADAPTERS = {
   claude: adapterFor("claude", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   cursor: adapterFor("cursor", { sandbox: CURSOR_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
-  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: true, remote: false, promptChannel: "argv" }),
+  codewith: adapterFor("codewith", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   codex: adapterFor("codex", { sandbox: CODEX_LIKE_SANDBOXES, durable: false, remote: true, promptChannel: "stdin" }),
   aicopilot: adapterFor("aicopilot", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" }),
   opencode: adapterFor("opencode", { sandbox: [], durable: false, remote: true, promptChannel: "stdin" })