@ordewell/core 0.4.3 → 0.4.4

package/dist/{ITerminalRunner-Bbpe8uts.d.ts → ITerminalRunner-D7DwHYSg.d.ts}

@@ -439,8 +439,22 @@ interface ResolveContext {
     /** All variant ids the assigned model offers — lets {{opencodeVariantConfig}} disable the non-chosen ones. */
     modelVariants?: string[];
     mode: string;
-    /** When true, resolve {{if headless}} blocks and the {{feature:headless}} token. */
+    /**
+     * Autonomy axis: when true, resolve {{if headless}} blocks and the
+     * {{feature:headless}} token so the agent never stops to ask for permission.
+     * True for every orchestrated task run — nobody is watching the terminal on
+     * Ordewell's behalf — independently of the session *shape* below.
+     */
     headless?: boolean;
+    /**
+     * Session-shape axis: true when the runner is launched onto a real TTY the
+     * user can attach to (a tmux window, a VS Code pseudoterminal), so the
+     * runner's own TUI should come up rather than its non-interactive
+     * subcommand. Defaults to `!headless` for callers that predate the split.
+     */
+    interactive?: boolean;
+    /** The task's working directory — needed by runners whose autonomy flags name a path. */
+    cwd?: string;
 }
 interface RunnerInvocation {
     command: string;

package/dist/{ITerminalRunner-D8Bf-HD4.d.mts → ITerminalRunner-YMVsbfem.d.mts}

@@ -439,8 +439,22 @@ interface ResolveContext {
     /** All variant ids the assigned model offers — lets {{opencodeVariantConfig}} disable the non-chosen ones. */
     modelVariants?: string[];
     mode: string;
-    /** When true, resolve {{if headless}} blocks and the {{feature:headless}} token. */
+    /**
+     * Autonomy axis: when true, resolve {{if headless}} blocks and the
+     * {{feature:headless}} token so the agent never stops to ask for permission.
+     * True for every orchestrated task run — nobody is watching the terminal on
+     * Ordewell's behalf — independently of the session *shape* below.
+     */
     headless?: boolean;
+    /**
+     * Session-shape axis: true when the runner is launched onto a real TTY the
+     * user can attach to (a tmux window, a VS Code pseudoterminal), so the
+     * runner's own TUI should come up rather than its non-interactive
+     * subcommand. Defaults to `!headless` for callers that predate the split.
+     */
+    interactive?: boolean;
+    /** The task's working directory — needed by runners whose autonomy flags name a path. */
+    cwd?: string;
 }
 interface RunnerInvocation {
     command: string;

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { h as RunnerId, c as PlanStatus, L as LegacyPlanState, d as ResearchProgress, a as DiscoveredModel, T as Task, R as ResearchLogEntry, C as ConversationMessage, n as TaskSnapshot, Q as QueuedMessage, A as ActiveTaskSession, g as ResearchToolType, u as Verdict, e as ResearchStep, b as PlanState } from './Task-1NwmUImI.mjs';
 export { D as DiscoveredMode, M as Message, P as PlanModificationWarnings, f as ResearchStepOutcome, S as StreamEvent, i as StreamStepEvent, j as StreamThinkingEvent, k as TaskMode, l as TaskModelAssignment, m as TaskOutputSummary, o as TaskStatus, p as TaskType, q as ThinkingBlock, U as UserPromptEntry, r as UserStep, V as ValidationCheck, s as ValidationContext, t as ValidationResult, v as VerificationCheck, w as addTaskToPlan, x as createEmptyPlan, y as createTask, z as emptyWarnings, B as flattenTasks, E as migrateLegacyPlan, F as migratePlanState, G as migrateTask, H as removeTaskFromPlan, I as renumberTasks, J as updateTaskInPlan, K as validateModifiedPlan, N as warningsText } from './Task-1NwmUImI.mjs';
-import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-D8Bf-HD4.mjs';
-export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-D8Bf-HD4.mjs';
+import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-YMVsbfem.mjs';
+export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-YMVsbfem.mjs';
 import { R as RunnerModeInfo, b as PlanParseError } from './parsing-xpozY5ac.mjs';
 export { M as ManifestLookup, P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as buildModeGuide, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as filteredBuildModes, n as looksLikePlanAttempt, p as parsePartialPlan, o as parsePlanJson, r as resolveDefaultMode, q as resolveTaskMode, s as runnerModesFrom, t as stripModelNoise, u as stripTrailingCommas, v as validatePlanModification } from './parsing-xpozY5ac.mjs';
 import { T as TaskOp } from './plan-utils-nfHKSbd3.mjs';
@@ -789,8 +789,14 @@ declare class HeadlessRunner extends AbstractRunner<HeadlessSession> {
     private hasScriptCmd;
     private resolvePath;
     private launchDeps;
-    /** Session shape when the caller names none; the VS Code runner overrides it to interactive. */
-    protected readonly defaultHeadless: boolean;
+    /**
+     * Session shape: a piped subprocess is not a terminal, so runners get their
+     * non-interactive subcommand. The VS Code runner owns a pseudoterminal and
+     * overrides this to true. Autonomy is a separate axis (see `ResolveContext`)
+     * and stays on either way — no surface has a human answering permission
+     * prompts on the orchestrator's behalf.
+     */
+    protected readonly defaultInteractive: boolean;
     constructor(deps?: HeadlessRunnerDeps);
     protected createSession(id: string, taskId: string): HeadlessSession;
     /** Everything up to, but not including, spawning — so a surface that owns its own child reaches the same decisions. */
@@ -2706,6 +2712,8 @@ declare function buildRunnerInvocation(opts: {
     modelVariants?: string[];
     mode?: RunnerMode;
     headless?: boolean;
+    interactive?: boolean;
+    cwd?: string;
     registry: RunnerRegistry;
 }): RunnerInvocation;
 

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { h as RunnerId, c as PlanStatus, L as LegacyPlanState, d as ResearchProgress, a as DiscoveredModel, T as Task, R as ResearchLogEntry, C as ConversationMessage, n as TaskSnapshot, Q as QueuedMessage, A as ActiveTaskSession, g as ResearchToolType, u as Verdict, e as ResearchStep, b as PlanState } from './Task-1NwmUImI.js';
 export { D as DiscoveredMode, M as Message, P as PlanModificationWarnings, f as ResearchStepOutcome, S as StreamEvent, i as StreamStepEvent, j as StreamThinkingEvent, k as TaskMode, l as TaskModelAssignment, m as TaskOutputSummary, o as TaskStatus, p as TaskType, q as ThinkingBlock, U as UserPromptEntry, r as UserStep, V as ValidationCheck, s as ValidationContext, t as ValidationResult, v as VerificationCheck, w as addTaskToPlan, x as createEmptyPlan, y as createTask, z as emptyWarnings, B as flattenTasks, E as migrateLegacyPlan, F as migratePlanState, G as migrateTask, H as removeTaskFromPlan, I as renumberTasks, J as updateTaskInPlan, K as validateModifiedPlan, N as warningsText } from './Task-1NwmUImI.js';
-import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-Bbpe8uts.js';
-export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-Bbpe8uts.js';
+import { n as IFileSystem, I as IApproval, R as ReadFileOpts, T as ToolOutcome, k as GrepOptions, j as GlobOptions, i as FindSymbolOptions, f as ApprovalRequest, m as IConfig, A as AiProvider, y as ProviderModelLists, c as ApprovalMode, q as ITerminalSession, p as ITerminalRunner, J as RunnerRegistry, s as OrchestratorOption, b as ApprovalKind, g as ApprovalSource, E as RunnerInvocation, o as IPluginStore, H as RunnerPluginManifest, B as ResolveContext } from './ITerminalRunner-D7DwHYSg.js';
+export { a as AllProviderModels, d as ApprovalPolicy, e as ApprovalPolicyOptions, C as CatalogModel, D as DENY_ALL, h as DiscoveryCommand, F as FetchAllProviderModelsOptions, G as GREP_DEFAULT_HEAD_LIMIT, l as GrepOutputMode, M as ModelCatalog, r as ModelShortcut, O as ORCHESTRATOR_SHORTCUTS, P as PluginEntry, t as PluginFeatures, u as PluginMode, v as PluginModelDiscovery, w as PluginRunnerDef, x as ProviderCredentialSource, z as ProviderModelsResult, S as SEARCH_EXCLUSIONS, K as collectProviderCredentials, L as enabledRunners, N as fetchAllProviderModels, Q as knownModelId, U as resolveModelShortcut, V as resolveProvider, W as toOrchestratorOptions } from './ITerminalRunner-D7DwHYSg.js';
 import { R as RunnerModeInfo, b as PlanParseError } from './parsing-RjN9JbyG.js';
 export { M as ManifestLookup, P as PLAN_ENVELOPE_KEY, a as PartialPlanTask, T as TASK_OPS_ENVELOPE_KEY, c as buildModeGuide, d as checkDepsResolve, e as checkImmutableLog, f as checkInProgress, g as checkNoCycles, h as checkUniqueIds, i as escapeControlCharsInStrings, j as extractJsonObject, k as extractObjectWithBalance, l as extractObjectsWithKey, m as filteredBuildModes, n as looksLikePlanAttempt, p as parsePartialPlan, o as parsePlanJson, r as resolveDefaultMode, q as resolveTaskMode, s as runnerModesFrom, t as stripModelNoise, u as stripTrailingCommas, v as validatePlanModification } from './parsing-RjN9JbyG.js';
 import { T as TaskOp } from './plan-utils-Cgc0cCH1.js';
@@ -789,8 +789,14 @@ declare class HeadlessRunner extends AbstractRunner<HeadlessSession> {
     private hasScriptCmd;
     private resolvePath;
     private launchDeps;
-    /** Session shape when the caller names none; the VS Code runner overrides it to interactive. */
-    protected readonly defaultHeadless: boolean;
+    /**
+     * Session shape: a piped subprocess is not a terminal, so runners get their
+     * non-interactive subcommand. The VS Code runner owns a pseudoterminal and
+     * overrides this to true. Autonomy is a separate axis (see `ResolveContext`)
+     * and stays on either way — no surface has a human answering permission
+     * prompts on the orchestrator's behalf.
+     */
+    protected readonly defaultInteractive: boolean;
     constructor(deps?: HeadlessRunnerDeps);
     protected createSession(id: string, taskId: string): HeadlessSession;
     /** Everything up to, but not including, spawning — so a surface that owns its own child reaches the same decisions. */
@@ -2706,6 +2712,8 @@ declare function buildRunnerInvocation(opts: {
     modelVariants?: string[];
     mode?: RunnerMode;
     headless?: boolean;
+    interactive?: boolean;
+    cwd?: string;
     registry: RunnerRegistry;
 }): RunnerInvocation;
 

package/dist/index.js

@@ -11374,8 +11374,12 @@ var Block = /* @__PURE__ */ ((Block2) => {
   Block2[Block2["IfInteractive"] = 7] = "IfInteractive";
   Block2[Block2["IfHeadlessSession"] = 8] = "IfHeadlessSession";
   Block2[Block2["IfInteractiveVariant"] = 9] = "IfInteractiveVariant";
+  Block2[Block2["IfProjectTrust"] = 10] = "IfProjectTrust";
   return Block2;
 })(Block || {});
+function isInteractive(ctx) {
+  return ctx.interactive ?? !ctx.headless;
+}
 function resolveArgs(manifest, ctx) {
   const args = [];
   const env = {};
@@ -11444,6 +11448,8 @@ function parseBlockOpen(raw) {
       return 8 /* IfHeadlessSession */;
     case "{{if interactiveVariant}}":
       return 9 /* IfInteractiveVariant */;
+    case "{{if projectTrust}}":
+      return 10 /* IfProjectTrust */;
     default:
       return null;
   }
@@ -11465,19 +11471,24 @@ function shouldIncludeBlock(block, ctx) {
     // `--variant` is a headless-only flag: it exists on `opencode run` but not
     // on the interactive TUI, which exits immediately if handed an unknown flag.
     case 6 /* IfVariant */:
-      return !!ctx.thinkingEffort && !!ctx.headless;
+      return !!ctx.thinkingEffort && !isInteractive(ctx);
     // Session-shape blocks: unlike IfHeadless (a permission-flag gate with a
     // plan-mode carve-out), these pick the CLI invocation shape — e.g.
     // opencode's `run` subcommand vs its interactive TUI — so no mode carve-out.
     case 7 /* IfInteractive */:
-      return !ctx.headless;
+      return isInteractive(ctx);
     case 8 /* IfHeadlessSession */:
-      return !!ctx.headless;
+      return !isInteractive(ctx);
     // Interactive counterpart of IfVariant, for runners whose TUI has no
     // variant flag and must receive the variant via env config instead.
     // Requires a provider-prefixed model: the config pins variant per model.
     case 9 /* IfInteractiveVariant */:
-      return !!ctx.thinkingEffort && !!ctx.model?.includes("/") && !ctx.headless;
+      return !!ctx.thinkingEffort && !!ctx.model?.includes("/") && isInteractive(ctx);
+    // Guards the flag/value pair that pre-trusts the workspace directory. The
+    // condition, not the token, is what keeps a bare `-c` out of the args when
+    // there is no cwd to name.
+    case 10 /* IfProjectTrust */:
+      return isInteractive(ctx) && !!ctx.cwd;
     default:
       return true;
   }
@@ -11498,6 +11509,10 @@ function resolveToken(token, manifest, ctx) {
   if (token === "{{model}}") return ctx.model || "";
   if (token === "{{thinkingEffort}}") return ctx.thinkingEffort || "";
   if (token === "{{mode}}") return ctx.mode || "build";
+  if (token === "{{projectTrust}}") {
+    if (!ctx.cwd) return "";
+    return `projects.${JSON.stringify(ctx.cwd)}.trust_level="trusted"`;
+  }
   if (token === "{{feature:thinking}}") {
     return manifest.features.thinkingFlag || "";
   }
@@ -11584,7 +11599,9 @@ function buildRunnerInvocation(opts) {
     thinkingEffort: opts.thinkingEffort,
     modelVariants: opts.modelVariants,
     mode: opts.mode ?? "build",
-    headless: opts.headless
+    headless: opts.headless,
+    interactive: opts.interactive,
+    cwd: opts.cwd
   });
 }
 
@@ -11705,8 +11722,14 @@ var HeadlessRunner = class extends AbstractRunner {
   hasScriptCmd;
   resolvePath;
   launchDeps;
-  /** Session shape when the caller names none; the VS Code runner overrides it to interactive. */
-  defaultHeadless = true;
+  /**
+   * Session shape: a piped subprocess is not a terminal, so runners get their
+   * non-interactive subcommand. The VS Code runner owns a pseudoterminal and
+   * overrides this to true. Autonomy is a separate axis (see `ResolveContext`)
+   * and stays on either way — no surface has a human answering permission
+   * prompts on the orchestrator's behalf.
+   */
+  defaultInteractive = false;
   constructor(deps = {}) {
     super();
     this.spawnImpl = deps.spawnImpl ?? import_child_process6.spawn;
@@ -11719,7 +11742,7 @@ var HeadlessRunner = class extends AbstractRunner {
   }
   /** Everything up to, but not including, spawning — so a surface that owns its own child reaches the same decisions. */
   async prepareLaunch(opts) {
-    const headless = opts.headless ?? this.defaultHeadless;
+    const interactive = this.defaultInteractive;
     const invocation = buildRunnerInvocation({
       runner: opts.runner,
       prompt: opts.prompt,
@@ -11727,11 +11750,13 @@ var HeadlessRunner = class extends AbstractRunner {
       thinkingEffort: opts.thinkingEffort,
       modelVariants: opts.modelVariants,
       mode: opts.mode,
-      headless,
+      headless: opts.headless ?? true,
+      interactive,
+      cwd: opts.cwd,
       registry: opts.registry
     });
     const manifest = opts.registry?.get(opts.runner)?.manifest;
-    const pty = (manifest?.runner.requiresTty === true || !headless) && this.hasScriptCmd();
+    const pty = (manifest?.runner.requiresTty === true || interactive) && this.hasScriptCmd();
     const resolvedPath = await this.resolvePath();
     const { command, args } = pty ? wrapWithPty(invocation.command, invocation.args) : { command: invocation.command, args: invocation.args };
     return {
@@ -11975,7 +12000,14 @@ var TmuxRunner = class extends AbstractRunner {
       thinkingEffort: opts.thinkingEffort,
       modelVariants: opts.modelVariants,
       mode: opts.mode,
+      // A tmux window is a real TTY the user can attach to (ADR-0007), so the
+      // runner's own TUI is the point — `interactive`. It is still an
+      // unattended run, so autonomy stays on: the two are separate axes, and
+      // conflating them is what made Codex tasks stream `codex exec` output
+      // into a window that was supposed to show its TUI.
       headless: opts.headless ?? true,
+      interactive: true,
+      cwd: opts.cwd,
       registry: opts.registry
     });
     await this.ensureSession();
@@ -12213,18 +12245,33 @@ var CODEX_MANIFEST = {
   version: "1.0.0",
   runner: {
     command: "codex",
-    // Headless surfaces (CLI/web) use the non-interactive `exec` subcommand
-    // (`--skip-git-repo-check`: task workspaces aren't always git repos, and
-    // exec hard-fails outside one by default); interactive surfaces (VS Code
-    // terminal) launch the TUI with the prompt as its positional argument.
-    // Reasoning effort has no dedicated flag — it travels as a `-c` config
-    // override (see {{feature:reasoningEffortConfig}}). Both `exec` and the
-    // TUI accept `-m`, `-c`, and `--sandbox`.
+    // Headless surfaces (a piped subprocess) use the non-interactive `exec`
+    // subcommand (`--skip-git-repo-check`: task workspaces aren't always git
+    // repos, and exec hard-fails outside one by default); interactive surfaces
+    // (a tmux window, the VS Code terminal) launch the TUI with the prompt as
+    // its positional argument. Reasoning effort has no dedicated flag — it
+    // travels as a `-c` config override (see {{feature:reasoningEffortConfig}}).
+    // Both `exec` and the TUI accept `-m`, `-c`, and `--sandbox`.
+    //
+    // The two interactive-only entries restore what `exec` gives implicitly and
+    // the TUI does not: `exec` is non-interactive, so it can neither ask for
+    // command approval nor ask whether the directory is trusted. The TUI asks
+    // for both by default, and an orchestrated task has nobody to answer —
+    // without these it stalls on a menu instead of working. `-a` does not exist
+    // on `exec`, hence the shape gate rather than a `{{if headless}}` one.
     argsTemplate: [
       "{{if headlessSession}}",
       "exec",
       "--skip-git-repo-check",
       "{{/if}}",
+      "{{if interactive}}",
+      "-a",
+      "never",
+      "{{/if}}",
+      "{{if projectTrust}}",
+      "-c",
+      "{{projectTrust}}",
+      "{{/if}}",
       "{{if model}}",
       "-m",
       "{{model}}",
@@ -12244,9 +12291,9 @@ var CODEX_MANIFEST = {
     planMode: true,
     planModeFlag: "--sandbox",
     permissionModeValues: {
-      // Map mode IDs to --sandbox CLI values. `codex exec` is non-interactive
-      // and has no approval flag, so the sandbox axis is the whole permission
-      // story for headless runs.
+      // Map mode IDs to --sandbox CLI values. Approvals are off on both shapes
+      // (implicitly under `exec`, via `-a never` in the TUI), so the sandbox
+      // axis is the whole permission story for a Codex task.
       "agent": "workspace-write",
       "plan": "read-only",
       "fullAccess": "danger-full-access",