@memfork/cli 0.1.44 → 0.1.45

package/dist/branch.d.ts

@@ -48,9 +48,13 @@ export declare function pickBranch(sources: BranchSources): string;
 /**
  * Resolve the branch a command should operate on, applying the full
  * precedence chain (reads MEMFORK_BRANCH and the current git branch).
+ *
+ * Prints a warning when no git branch is detected and no fallback is
+ * configured — the caller will operate on "main" which may be unintended.
  */
 export declare function resolveBranch(opts?: {
     explicit?: string;
     configDefault?: string;
     cwd?: string;
+    silent?: boolean;
 }): string;

package/dist/branch.js

@@ -18,6 +18,7 @@
  * the core guarantees those integrations are unaffected by this logic.
  */
 import { execSync } from "node:child_process";
+import chalk from "chalk";
 /**
  * Read the current git branch, or undefined when there is no usable answer.
  *
@@ -63,12 +64,32 @@ export function pickBranch(sources) {
 /**
  * Resolve the branch a command should operate on, applying the full
  * precedence chain (reads MEMFORK_BRANCH and the current git branch).
+ *
+ * Prints a warning when no git branch is detected and no fallback is
+ * configured — the caller will operate on "main" which may be unintended.
  */
 export function resolveBranch(opts = {}) {
-    return pickBranch({
+    const git = gitBranch(opts.cwd);
+    const branch = pickBranch({
         explicit: opts.explicit,
         env: process.env["MEMFORK_BRANCH"],
-        git: gitBranch(opts.cwd),
+        git,
         configDefault: opts.configDefault,
     });
+    // Warn when we fell all the way through to "main" because there is no git
+    // repo and no other source — this is almost always unintended.
+    if (!opts.silent &&
+        branch === "main" &&
+        !opts.explicit &&
+        !process.env["MEMFORK_BRANCH"] &&
+        !git &&
+        !opts.configDefault) {
+        process.stderr.write(chalk.yellow("⚠") +
+            " No git branch detected — committing to " +
+            chalk.bold("main") +
+            ". Run " +
+            chalk.dim("git init && git checkout -b <branch>") +
+            " to use branch-scoped memory.\n");
+    }
+    return branch;
 }

package/dist/commands/install.js

@@ -163,9 +163,41 @@ function installCodex(cwd) {
             console.log(dim(`    Run manually: codex plugin add memforks@memforks`));
         }
     }
-    // ── Summary ────────────────────────────────────────────────────────────────
-    console.log("");
-    console.log(chalk.bold("Done.") + " Restart Codex to pick up the plugin and MCP server.");
+    // ── 3. Project-scoped Codex config (.codex/config.toml) ──────────────────
+    //
+    // Codex defaults to read-only sandbox, which blocks `memfork commit` (it
+    // needs to write ~/.memfork/ and hit the network). A project-level override
+    // turns on workspace-write + network without touching the user's global
+    // Codex config or any other project.
+    const projectCodexDir = path.join(cwd, ".codex");
+    const projectCodexCfg = path.join(projectCodexDir, "config.toml");
+    fs.mkdirSync(projectCodexDir, { recursive: true });
+    const sandboxBlock = `# Written by memfork install codex
+# workspace-write + network_access lets the agent run \`memfork commit\`
+# without escalation prompts, scoped to this project only.
+sandbox_mode = "workspace-write"
+
+[sandbox_workspace_write]
+network_access = true
+`;
+    if (!fs.existsSync(projectCodexCfg)) {
+        fs.writeFileSync(projectCodexCfg, sandboxBlock, "utf8");
+        console.log(ok(`Sandbox:    ${dim(projectCodexCfg)}  (workspace-write + network)`));
+    }
+    else {
+        // File already exists — only patch if the keys are missing.
+        const existing = fs.readFileSync(projectCodexCfg, "utf8");
+        let patched = existing;
+        if (!existing.includes("sandbox_mode")) {
+            patched += "\n" + sandboxBlock;
+            fs.writeFileSync(projectCodexCfg, patched, "utf8");
+            console.log(ok(`Sandbox:    ${dim(projectCodexCfg)}  (patched workspace-write + network)`));
+        }
+        else {
+            console.log(ok(`Sandbox:    ${dim(projectCodexCfg)}  (already configured)`));
+        }
+    }
+    // ── Summary (Codex) ────────────────────────────────────────────────────────
     console.log("");
     console.log(tip("The agent now has:"));
     console.log(dim("    memwal_recall / memwal_remember  — memory storage via MemWal MCP"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memfork/cli",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "MemForks CLI — init, commit, recall, merge, install plugins",
   "repository": {
     "type": "git",