@kylecheng3146/agent-ops 0.8.4 → 0.8.6

package/dist/packages/cli/src/args.js

@@ -637,8 +637,8 @@ export function parseArgs(argv) {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--target-version may be used only with update.");
     }
     if (base !== undefined && command !== "verify" && command !== "review" &&
-        command !== "batch" && !(command === "task" && action === "complete")) {
-        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--base may be used only with verify, review, batch or task complete.");
+        command !== "batch" && !(command === "task" && (action === "complete" || action === "debug"))) {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--base may be used only with verify, review, batch, task complete or task debug.");
     }
     if ((parentBase !== undefined || width !== undefined) && command !== "batch") {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", `${parentBase !== undefined ? "--parent-base" : "--width"} may be used only with batch.`);

package/dist/packages/cli/src/cli.js

@@ -196,7 +196,7 @@ Options:
   --task <id>                           status, attach, revise, replan, pin-finding, complete, archive, export, advance
   --session <id>                        create, attach, status, advance, debug
   --evidence <criterion-id=reference>   complete, repeatable
-  --base <git-ref>                      complete: a clean committed range
+  --base <git-ref>                      complete, debug: a clean committed range
   --yes                                 advance: authorize the two review sessions
   --json
 

package/dist/packages/cli/src/hook-process.js

@@ -9,7 +9,7 @@ import { resolveContainedPath } from "../../../runtime/src/fs/paths.js";
 import { redactSecrets } from "../../../runtime/src/security/redact.js";
 import { claudeStopRecursionMarker } from "../../../runtime/src/adapters/claude/input.js";
 import { HARNESS_IDS, harnessDescriptor } from "../../../runtime/src/install/harness.js";
-import { officePhaseHint } from "./office-entry.js";
+import { officePhaseHint, officeLoopPhaseHint } from "./office-entry.js";
 import { evaluateWorktreeEnter } from "../../../runtime/src/parallel/enter.js";
 import { evaluateWorktreeWrite, resolveMainRoot } from "../../../runtime/src/parallel/guard.js";
 import { ensureSessionWorktree, recordSessionOrigin } from "../../../runtime/src/parallel/service.js";
@@ -461,7 +461,7 @@ export async function runHookProcess(argv, io, cliVersion, dependencies = {}) {
             await startDebugSession(root, normalized.sessionId, harnessId).catch(() => undefined);
         if (dependencies.office !== undefined && config.features.office?.enabled === true) {
             if (normalized !== null) {
-                const phase = officePhaseHint(normalized);
+                const phase = officePhaseHint(normalized) ?? (harnessId === "codex" ? officeLoopPhaseHint(parsedInput, root) : undefined);
                 void dependencies.office({
                     root,
                     harness: harnessId,
@@ -472,6 +472,9 @@ export async function runHookProcess(argv, io, cliVersion, dependencies = {}) {
                     ...(normalized.agentId === undefined ? {} : { agentId: normalized.agentId }),
                     ...(phase === undefined ? {} : { phase })
                 }).catch(() => undefined);
+                // Native patch hooks added for Office must not emit unsupported-policy messages.
+                if (harnessId === "codex" && normalized.event === "unsupported" && phase === "implementing")
+                    return 0;
             }
         }
         const gitRunner = dependencies.gitRunner ?? defaultGitRunner(root);

package/dist/packages/cli/src/office-entry.js

@@ -1,5 +1,5 @@
 import { fileURLToPath } from "node:url";
-import { basename, join } from "node:path";
+import { basename, join, resolve } from "node:path";
 import { homedir } from "node:os";
 import { rm } from "node:fs/promises";
 import { createHash } from "node:crypto";
@@ -64,17 +64,46 @@ export function officePhaseHint(event) {
             : [];
     let phase;
     for (const command of commands) {
-        if (basename(command.command) !== "agent-ops")
+        let argv = [command.command, ...command.args];
+        // Unwrap display hints here; command-policy normalization stays unchanged.
+        while (basename(argv[0] ?? "") === "env") {
+            argv = argv.slice(1);
+            while (argv.length > 0) {
+                if (argv[0] === "-u" || argv[0] === "--unset") {
+                    if (argv[1] === undefined || !/^[A-Za-z_][A-Za-z0-9_]*$/u.test(argv[1]))
+                        break;
+                    argv = argv.slice(2);
+                }
+                else if (/^--unset=[A-Za-z_][A-Za-z0-9_]*$/u.test(argv[0] ?? ""))
+                    argv = argv.slice(1);
+                else
+                    break;
+            }
+            if (argv[0] === "--")
+                argv = argv.slice(1);
+            while (/^[A-Za-z_][A-Za-z0-9_]*=/u.test(argv[0] ?? ""))
+                argv = argv.slice(1);
+        }
+        if (basename(argv[0] ?? "") === "node" || basename(argv[0] ?? "") === "node.exe") {
+            const script = argv[1];
+            if (script === undefined || ![
+                fileURLToPath(new URL("./bin.js", import.meta.url)),
+                resolve(event.projectRoot, "dist/packages/cli/src/bin.js")
+            ].includes(resolve(event.projectRoot, script)))
+                continue;
+            argv = ["agent-ops", ...argv.slice(2)];
+        }
+        if (basename(argv[0] ?? "") !== "agent-ops")
             continue;
-        const action = command.args[0];
+        const action = argv[1];
         // batch and advance report their later steps themselves; this is their first.
         const next = action === "verify" || action === "batch"
             ? "verifying"
             : action === "review"
                 ? "reviewing"
-                : action === "worktree" && command.args[1] === "finish"
+                : action === "worktree" && argv[2] === "finish"
                     ? "integrating"
-                    : action === "task" && (command.args[1] === "complete" || command.args[1] === "advance")
+                    : action === "task" && (argv[2] === "complete" || argv[2] === "advance")
                         ? "integrating"
                         : action === "task"
                             ? "planning"
@@ -93,10 +122,12 @@ export function officeLoopPhaseHint(input, root) {
     const tool = input.tool_name;
     if (tool === "Edit" || tool === "Write" || tool === "NotebookEdit" || tool === "FileWrite")
         return "implementing";
+    const toolInput = recordValue(input, "tool_input");
+    const command = recordValue(toolInput, "command") ?? recordValue(toolInput, "cmd");
+    if (tool === "apply_patch")
+        return typeof command === "string" && command.length > 0 ? "implementing" : undefined;
     if (tool !== "Bash")
         return undefined;
-    const toolInput = recordValue(input, "tool_input");
-    const command = recordValue(toolInput, "command");
     return typeof command === "string" ? officePhaseHint(normalizeShellHookEvent(command, root)) : undefined;
 }
 /** Records hook presence and starts Office at the production process boundary. */

package/dist/runtime/src/adapters/codex/config.js

@@ -96,6 +96,9 @@ export function buildCodexHookConfig(capabilities, runtimePath) {
     if (capabilities.includes("task-debug")) {
         hooks.Interrupt = [{ hooks: [{ ...commandHook("Interrupt", runtimePath), timeout: 3 }] }];
     }
+    if (capabilities.includes("office-presence") && hooks.PreToolUse !== undefined) {
+        hooks.PreToolUse = hooks.PreToolUse.map(group => ({ ...group, matcher: "^(Bash|apply_patch)$" }));
+    }
     return {
         description: "agent-ops lifecycle hooks.",
         hooks

package/dist/runtime/src/run/authorization.js

@@ -3,6 +3,10 @@ import { sha256 } from "../fs/hash.js";
 import { AgentOpsError } from "../fs/paths.js";
 import { RunControlService } from "./controls.js";
 const plain = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const MAX_SCOPE = 32 * 1024;
+/** A large Write or patch is still one observation: keep its identity by digest, never block the run on its size. */
+const bounded = (scope) => scope.length <= MAX_SCOPE ? scope :
+    canonicalJson({ truncated: true, length: scope.length, sha256: sha256(scope), head: scope.slice(0, 4096) });
 /** Provider decisions are observations, never an alternate permission executor. */
 export async function recordNativeRunAuthorization(repository, event) {
     if (!plain(event.payload))
@@ -51,10 +55,10 @@ export async function recordNativeRunAuthorization(repository, event) {
     if (event.host === "codex" && payload.threadId !== worker.nativeJobId)
         throw new AgentOpsError("RUN_AUTHORIZATION_STALE", "Native approval belongs to another thread.");
     const service = new RunControlService(repository);
-    for (const decision of decisions)
+    for (const { command, resource, ...decision } of decisions)
         await service.recordAuthorization(event.runId, { ...decision,
-            authorizationId: decision.id, workerId: worker.workerId, generation: worker.generation, nativeSessionId: worker.nativeSessionId,
-            source: event.host === "codex" ? "codex-auto-review" : "claude-auto-mode", commandDigest: sha256(decision.command),
-            resourceDigest: sha256(decision.resource), policyConfigHash: state.policyBinding.configHash,
+            command: bounded(command), resource: bounded(resource), authorizationId: decision.id, workerId: worker.workerId, generation: worker.generation, nativeSessionId: worker.nativeSessionId,
+            source: event.host === "codex" ? "codex-auto-review" : "claude-auto-mode", commandDigest: sha256(bounded(command)),
+            resourceDigest: sha256(bounded(resource)), policyConfigHash: state.policyBinding.configHash,
             runtimeHash: state.policyBinding.runtimeHash, policyArtifactDigest: state.policyBinding.artifactDigest, expiresAt: state.policyBinding.expiresAt });
 }

package/dist/runtime/src/task/debug-intake.js

@@ -2,6 +2,9 @@
 export function isDebugIssue(prompt) {
     if (prompt.length === 0 || prompt.length > 64 * 1024 || prompt.includes("\0"))
         return false;
+    // Harness-injected turns (subagent hand-backs, task notifications) are not a human report.
+    if (/^\s*<(?:agent-message|task-notification|teammate-message)\b/u.test(prompt))
+        return false;
     const value = prompt.normalize("NFKC").toLowerCase();
     if (/\b(?:explain|describe|what is|how does|refactor|feature|implement|design)\b|說明|解释|解釋|重構|新增功能|設計|實作功能/u.test(value))
         return false;

package/dist/runtime/src/task/debug-user-event.js

@@ -38,7 +38,8 @@ function codexUserText(row) {
     return undefined;
 }
 /** Host transcripts are the user-event authority; CLI actor/text fields are never accepted. */
-export async function readDebugUserEvent(root, sessionId, home = homedir(), kind = "latest") {
+/** `worktreeRoot` is the session's owned worktree: Claude stamps each row with the shell's cwd, which moves there after `cd`. */
+export async function readDebugUserEvent(root, sessionId, home = homedir(), kind = "latest", worktreeRoot) {
     if (!/^[a-f0-9-]{36}$/u.test(sessionId))
         throw new AgentOpsError("TASK_DEBUG_GRANT_UNSUPPORTED", "This host has no identifiable native user-event source.");
     const canonicalHome = await realpath(home).catch(() => home);
@@ -77,7 +78,8 @@ export async function readDebugUserEvent(root, sessionId, home = homedir(), kind
             for (let index = rows.length - 1; index >= 0; index--) {
                 const row = rows[index];
                 const text = codexSource ? codexUserText(row) :
-                    row?.type === "user" && row.sessionId === sessionId && row.cwd === root && row.message?.role === "user" ? row.message.content : undefined;
+                    row?.type === "user" && row.sessionId === sessionId && (row.cwd === root || (worktreeRoot !== undefined && row.cwd === worktreeRoot)) && row.message?.role === "user" &&
+                        row.isMeta !== true && (row.origin === undefined || row.origin?.kind === "human") ? row.message.content : undefined;
                 if (typeof text !== "string" || text.length > 64 * 1024 || (kind === "control" && debugUserControl(text) === null))
                     continue;
                 const timestamp = Date.parse(row.timestamp);

package/dist/runtime/src/task/debug.js

@@ -248,7 +248,7 @@ export class DebugService {
         const record = await readWorktreeRecord(this.options.root);
         const origin = record?.mainRoot ?? this.options.root;
         try {
-            return await readDebugUserEvent(origin, sessionId, home, kind);
+            return await readDebugUserEvent(origin, sessionId, home, kind, origin === this.options.root ? undefined : this.options.root);
         }
         catch (error) {
             if (origin === this.options.root || !(error instanceof AgentOpsError) || error.code !== "TASK_DEBUG_GRANT_UNSUPPORTED")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kylecheng3146/agent-ops",
-  "version": "0.8.4",
+  "version": "0.8.6",
   "description": "Evidence-driven development loops for agy, Codex, Claude Code, and opencode",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",