@madarco/agentbox 0.7.0 → 0.8.0

package/runtime/docker/packages/sandbox-docker/scripts/opencode-agentbox-plugin.js

@@ -0,0 +1,76 @@
+// AgentBox state-reporting plugin for OpenCode (sst/opencode).
+//
+// Subscribes to OpenCode's plugin event bus and reports each lifecycle
+// transition to `agentbox-ctl opencode-state <state>`. The ctl daemon then
+// publishes the state to the host relay's status.json, which is what
+// `agentbox agent state` / `agent wait-for` consume on the host side.
+//
+// Fire-and-forget — a missing/late `agentbox-ctl` must never disturb the
+// OpenCode session. The spawned process is detached + unrefed so a slow
+// ctl response never blocks an event handler.
+//
+// Seeded by `seedOpencodePlugin` (packages/sandbox-docker/src/opencode.ts)
+// from the image-baked copy at /usr/local/share/agentbox/opencode-plugin/
+// into the box's `$OPENCODE_CONFIG_DIR/plugins/agentbox-state.js` on every
+// create / start. Idempotent overwrite.
+//
+// Event coverage (mirrors the Claude / Codex state machine):
+//   working   — agent is generating. Driven by `message.part.delta` (streamed
+//               tokens) — these fire only DURING active generation, never after
+//               the turn ends, so they don't fight the `session.idle` end
+//               signal. (Empirically `tool.execute.before` does NOT reach the
+//               plugin event bus in opencode 1.15, and `message.updated` fires
+//               once AFTER `session.idle` — so neither is safe to map to
+//               working.)
+//   idle      — turn complete / ready for input (`session.idle`, plus
+//               `session.created` as a baseline at session start).
+//   waiting   — user input required (`permission.asked`).
+//   error     — `session.error`.
+//   compacting — opencode has no PreCompact event; `session.compacted` fires
+//                AFTER compaction completes, so it maps to `working` (the next
+//                event supersedes) rather than `compacting`.
+//
+// The plugin shape comes from https://opencode.ai/docs/plugins/ — `event` is
+// a single handler that receives `{ event }` with a `type` field. Multiple
+// exports = multiple plugin functions; we ship one.
+
+import { spawn } from 'node:child_process';
+
+const EVENT_TO_STATE = {
+  'session.created': 'idle',
+  'session.idle': 'idle',
+  'session.error': 'error',
+  'session.compacted': 'working',
+  'permission.asked': 'waiting',
+  'permission.replied': 'working',
+  'message.part.delta': 'working',
+  // tool.execute.before kept as a defensive mapping — harmless if a future
+  // opencode build starts surfacing it (it doesn't today).
+  'tool.execute.before': 'working',
+};
+
+// Dedupe: `message.part.delta` fires dozens of times per streamed turn. Only
+// spawn agentbox-ctl when the mapped state actually changes, so a turn costs
+// ~2 spawns (working on the first delta, idle on session.idle) instead of ~50.
+let lastState = null;
+
+function pushState(state) {
+  if (!state || state === lastState) return;
+  lastState = state;
+  try {
+    const p = spawn('agentbox-ctl', ['opencode-state', state], {
+      stdio: 'ignore',
+      detached: true,
+    });
+    p.unref();
+  } catch {
+    // Fire-and-forget. A missing agentbox-ctl bin (test env, older box image)
+    // must not throw out of this handler.
+  }
+}
+
+export const AgentboxStatePlugin = async () => ({
+  event: async ({ event }) => {
+    pushState(EVENT_TO_STATE[event?.type]);
+  },
+});

package/runtime/hetzner/agentbox-codex-hooks.json

@@ -1,37 +1,68 @@
 {
-  "SessionStart": [
-    {
-      "hooks": [
-        { "type": "command", "command": "agentbox-ctl codex-state idle >/dev/null 2>&1 &", "timeout": 3 }
-      ]
-    }
-  ],
-  "UserPromptSubmit": [
-    {
-      "hooks": [
-        { "type": "command", "command": "agentbox-ctl codex-state working >/dev/null 2>&1 &", "timeout": 3 }
-      ]
-    }
-  ],
-  "PreToolUse": [
-    {
-      "hooks": [
-        { "type": "command", "command": "agentbox-ctl codex-state working >/dev/null 2>&1 &", "timeout": 3 }
-      ]
-    }
-  ],
-  "PermissionRequest": [
-    {
-      "hooks": [
-        { "type": "command", "command": "agentbox-ctl codex-state waiting >/dev/null 2>&1 &", "timeout": 3 }
-      ]
-    }
-  ],
-  "Stop": [
-    {
-      "hooks": [
-        { "type": "command", "command": "agentbox-ctl codex-state idle >/dev/null 2>&1 &", "timeout": 3 }
-      ]
-    }
-  ]
+  "$comment": "Codex 0.134.0 expects `~/.codex/hooks.json` to be `{ hooks: { Event: [...] } }` (matching the `HooksFile` Rust struct), NOT a top-level event map. The `hooks` feature flag must also be enabled (`codex --enable hooks`) and hook trust must be either persisted via the in-TUI dialog or bypassed at launch (`--dangerously-bypass-hook-trust`). startCodexSession() does both. In practice the hook firing on the JSON-config path is still unreliable in 0.134.0 (TUI mode skips them on at least some startup paths) — the real mechanism that lights up state in production is the tmux-pane scraper in packages/ctl/src/codex-scraper.ts. These hooks remain as a defense-in-depth seed so any future codex build that fixes the firing also lights up state without further work.",
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state idle >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PermissionRequest": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state waiting >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PreCompact": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state compacting >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PostCompact": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SubagentStart": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl codex-state idle >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ]
+  }
 }

package/runtime/hetzner/agentbox-setup-skill.md

@@ -14,7 +14,7 @@ Run `agentbox checkpoint --set-default` (similar to `docker commit`) to save any
 
 Some special folders:
 
-- **Host main repo's `.git/`** — If the box bind-mounted RW at its identical absolute host path. In-box commits land on the host's branch refs (visible to `git log` on the host immediately); the box itself carries no SSH/git creds, so `git push` goes through the host relay (`agentbox-ctl git push`). The host's **working tree is never written to** — only refs/objects under `.git/`.
+- **Host main repo's `.git/`** — If the box bind-mounted RW at its identical absolute host path. In-box commits land on the host's branch refs (visible to `git log` on the host immediately); the box itself carries no SSH/git creds, so `git push` goes through the host relay (`agentbox-ctl git push`). The host's **working tree is never written to** — only refs/objects under `.git/`. GitHub PR ops (`agentbox-ctl git pr create|view|list|comment|review|merge|close|reopen|checkout`) flow the same way through host `gh`; write ops require host confirmation (deny → exit 10), `merge` and `checkout` have additional opt-in guards.
 - **`~/.claude`** — and similar home folders for coding agents are seeded from the host's `~/.claude` on each create so auth, skills, and plugins persist without leaking the host's home dir.
 - **`agentbox.yaml`** — read by `agentbox-ctl` from `/workspace`. Tasks and services declared here are what the supervisor will run.
 

package/runtime/hetzner/claude-managed-settings.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "AgentBox enterprise-managed Claude Code settings, baked into the box image at /etc/claude-code/managed-settings.json. Highest precedence and NOT synced from the host ~/.claude, so claude-hooks-filter.ts never touches it; per Claude Code, hook arrays MERGE across settings sources, so the user's own hooks still run. These hooks report Claude's activity to the box supervisor (agentbox-ctl claude-state -> ctl socket -> relay -> ~/.agentbox/boxes/<id>/status.json) so `agentbox status/list/inspect` can show it even when the box is paused. Each command is exit-0 fast and shell-backgrounded so a hook can never block or fail a Claude turn.",
+  "$comment": "AgentBox enterprise-managed Claude Code settings, baked into the box image at /etc/claude-code/managed-settings.json. Highest precedence and NOT synced from the host ~/.claude, so claude-hooks-filter.ts never touches it; per Claude Code, hook arrays MERGE across settings sources, so the user's own hooks still run. These hooks report Claude's activity to the box supervisor (agentbox-ctl claude-state -> ctl socket -> relay -> ~/.agentbox/boxes/<id>/status.json) so `agentbox status/list/inspect` can show it even when the box is paused. Each command is exit-0 fast and shell-backgrounded so a hook can never block or fail a Claude turn. The ExitPlanMode / AskUserQuestion entries run SYNCHRONOUSLY (no &) because they consume the hook's stdin payload; the catchall PreToolUse 'working' hook races with them, but the supervisor's sticky-state semantics swallow that race (a 'working' set while in end-plan/question is ignored unless --clear-pending is set, which only the matching PostToolUse hook passes).",
   "hooks": {
     "UserPromptSubmit": [
       {
@@ -13,6 +13,32 @@
         "hooks": [
           { "type": "command", "command": "agentbox-ctl claude-state working >/dev/null 2>&1 &", "timeout": 3 }
         ]
+      },
+      {
+        "matcher": "ExitPlanMode",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state end-plan --payload-stdin >/dev/null 2>&1", "timeout": 3 }
+        ]
+      },
+      {
+        "matcher": "AskUserQuestion",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state question --payload-stdin >/dev/null 2>&1", "timeout": 3 }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "ExitPlanMode",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working --clear-pending >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      },
+      {
+        "matcher": "AskUserQuestion",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working --clear-pending >/dev/null 2>&1 &", "timeout": 3 }
+        ]
       }
     ],
     "Stop": [
@@ -22,6 +48,41 @@
         ]
       }
     ],
+    "StopFailure": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state error >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PreCompact": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state compacting >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PostCompact": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working --clear-pending >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SubagentStart": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
     "Notification": [
       {
         "matcher": "permission_prompt",