@pulsehub/runner 0.1.8 → 0.1.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pulsehub/runner",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "Local, credential-safe Pulse Runner",
   "repository": {
     "type": "git",

package/src/process.js

@@ -57,7 +57,7 @@ export async function executable(name) { try { return (await command(resolveExec
 
 export function agentPermissionArgs(kind, mode) {
   if (mode === 'review') {
-    if (kind === 'codex') return ['--sandbox', 'read-only', '--ask-for-approval', 'never'];
+    if (kind === 'codex') return ['--sandbox', 'read-only'];
     if (kind === 'claude') return ['--permission-mode', 'plan'];
   }
   if (kind === 'codex') return ['--approve-for-me'];
@@ -85,7 +85,7 @@ async function mcpConfig(dir, credential, endpoint) {
 export function providerInvocation(kind, worktree, additionalDirs, config, mcp, prompt, mode = 'task') {
   if (kind === 'codex') return {
     executable: resolveExecutable('codex'),
-    args: ['exec', '--ephemeral', ...agentPermissionArgs(kind, mode), '--cd', worktree, ...additionalDirs, '-c', `mcp_servers.pulse.url=${JSON.stringify(mcpEndpoint(config.endpoint))}`, '-c', 'mcp_servers.pulse.env_http_headers={Authorization="PULSE_RUNNER_MCP_CREDENTIAL"}', prompt],
+    args: ['exec', '--ephemeral', ...agentPermissionArgs(kind, mode), ...(mode === 'review' ? ['--skip-git-repo-check'] : []), '--cd', worktree, ...additionalDirs, '-c', `mcp_servers.pulse.url=${JSON.stringify(mcpEndpoint(config.endpoint))}`, '-c', 'mcp_servers.pulse.env_http_headers={Authorization="PULSE_RUNNER_MCP_CREDENTIAL"}', prompt],
   };
   if (kind === 'claude') return {
     executable: resolveExecutable('claude'),

package/test/process.test.js

@@ -1,12 +1,19 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
-import { agentPermissionArgs, mcpEndpoint } from '../src/process.js';
+import { agentPermissionArgs, mcpEndpoint, providerInvocation } from '../src/process.js';
 
 test('QA Runner sessions use read-only filesystem permissions', () => {
-  assert.deepEqual(agentPermissionArgs('codex', 'review'), ['--sandbox', 'read-only', '--ask-for-approval', 'never']);
+  assert.deepEqual(agentPermissionArgs('codex', 'review'), ['--sandbox', 'read-only']);
   assert.deepEqual(agentPermissionArgs('claude', 'review'), ['--permission-mode', 'plan']);
 });
 
+test('Codex QA starts outside the snapshots without trusting the repository or widening sandbox access', () => {
+  const invocation = providerInvocation('codex', '/tmp/pulse-review', ['/tmp/snapshot'], { endpoint: 'https://example.cloudfunctions.net/pulseRunnerPoll' }, '/tmp/pulse-mcp.json', 'Review', 'review');
+  assert(invocation.args.includes('--skip-git-repo-check'));
+  assert.deepEqual(agentPermissionArgs('codex', 'review'), ['--sandbox', 'read-only']);
+  assert(!invocation.args.includes('--ask-for-approval'));
+});
+
 test('development jobs retain their configured write permissions', () => {
   assert.deepEqual(agentPermissionArgs('codex', 'task'), ['--approve-for-me']);
   assert.deepEqual(agentPermissionArgs('claude', 'task'), ['--permission-mode', 'bypassPermissions', '--dangerously-skip-permissions']);