@sagentlab/navarch-runtime 0.1.89 → 0.1.91

package/dist/browser-probe.cjs

@@ -192,7 +192,17 @@ async function probeCodexSandbox(config, deps) {
             readRoots: [node_path_1.default.dirname(await node_fs_1.promises.realpath(process.execPath)), node_path_1.default.dirname(playwrightDir)],
         });
         const env = { NAVARCH_PROBE_PLAYWRIGHT: playwrightDir };
-        for (const key of ["HOME", "PATH", "TMPDIR", "CODEX_HOME", "PLAYWRIGHT_BROWSERS_PATH", "XDG_CACHE_HOME"]) {
+        for (const key of [
+            "HOME",
+            "PATH",
+            "TMPDIR",
+            "CODEX_HOME",
+            "PLAYWRIGHT_BROWSERS_PATH",
+            "XDG_CACHE_HOME",
+            // Agent sessions inherit it; without it Node falls back to the default
+            // config path, which can disagree with what sessions actually load.
+            "OPENSSL_CONF",
+        ]) {
             if (process.env[key])
                 env[key] = process.env[key];
         }
@@ -204,12 +214,16 @@ async function probeCodexSandbox(config, deps) {
             // bwrap could not find the program it was asked to start inside the
             // sandbox view: a path outside the granted read roots, not an old CLI.
             const hidden = /bwrap: execvp .*No such file or directory/.test(output);
+            const opensslConfig = /OpenSSL configuration error/.test(output);
             return ("Could not verify a browser inside the Codex sandbox: `codex sandbox` did not run the probe " +
                 `(${result.timedOut ? "timed out" : output.trim() ? summarizeLaunchFailure(output) : `exit ${result.code}`}). ` +
                 (hidden
                     ? "The sandbox cannot see that executable; add its install directory to NAVARCH_GUARD_EXTRA_ROOTS, " +
                         "or run browser tasks with another agent."
-                    : "Update the Codex CLI, or run browser tasks with another agent."));
+                    : opensslConfig
+                        ? "Node cannot read its OpenSSL config inside the sandbox, so Codex sessions cannot run node either; " +
+                            "update the Navarch runtime, or add that file's directory to NAVARCH_GUARD_EXTRA_ROOTS."
+                        : "Update the Codex CLI, or run browser tasks with another agent."));
         }
         const detail = result.timedOut ? "the launch timed out." : summarizeLaunchFailure(output);
         const machPort = /bootstrap_check_in|MachPortRendezvous|mach_port_rendezvous/i.test(output);
@@ -236,6 +250,15 @@ function summarizeLaunchFailure(output) {
         // "[pid=1][err] [1001/210406.593317:FATAL:base/apple/mach_port_rendezvous_mac.cc:159] Check failed: ..."
         return fatal.replace(/^.*FATAL:[^\]]*\]\s*/, "");
     }
+    const opensslIndex = lines.findIndex((line) => /OpenSSL configuration error/.test(line));
+    if (opensslIndex >= 0) {
+        // "<node>: OpenSSL configuration error:" with the reason on the next line:
+        // "...:error:80000001:system library:BIO_new_file:Operation not permitted:...:calling fopen(<path>, rb)"
+        const reason = lines[opensslIndex + 1] ?? "";
+        const cause = /:system library:[^:]*:([^:]+):/.exec(reason)?.[1];
+        const file = /fopen\(([^,]+),/.exec(reason)?.[1];
+        return `OpenSSL configuration error${cause ? `: ${cause}` : ""}${file ? ` reading ${node_path_1.default.normalize(file)}` : ""}`;
+    }
     const missing = lines.find((line) => /Executable doesn't exist/.test(line));
     if (missing)
         return "Chromium is not installed for the runtime's Playwright.";

package/dist/git-worktree.cjs

@@ -40,6 +40,7 @@ class GitWorktree {
     checkpointRoot;
     cloneUrl;
     githubToken;
+    workingBranch;
     repoLocalGithubToken;
     prContinuation;
     taskBranchSuffix;
@@ -78,6 +79,7 @@ class GitWorktree {
         this.sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
         this.cloneUrl = options.cloneUrl;
         this.githubToken = options.githubToken;
+        this.workingBranch = options.workingBranch?.trim() || null;
         this.repoLocalGithubToken = options.repoLocalGithubToken;
         this.prContinuation = options.prContinuation ?? false;
         this.hostedCheckpointRef = options.restoreHostedCheckpoint ? hostedCheckpointRef(options.taskId) : null;
@@ -517,6 +519,16 @@ class GitWorktree {
      * when the remote has no branches at all (a freshly provisioned empty repo).
      */
     async resolveStartRef() {
+        // The claim already merged the integration branch into the working branch,
+        // so it is the start (and delivery) base. A missing ref falls through to
+        // the default branch rather than starting the task on nothing.
+        if (this.workingBranch) {
+            const ref = `refs/remotes/origin/${this.workingBranch}`;
+            const found = await this.runGit(["--git-dir", this.repositoryPath, "rev-parse", "--verify", "--quiet", ref], false)
+                .then(() => true, () => false);
+            if (found)
+                return ref;
+        }
         const remoteHead = await this.runGit(["--git-dir", this.repositoryPath, "ls-remote", "--symref", "origin", "HEAD"], true);
         const defaultBranch = parseRemoteHead(remoteHead.stdout);
         if (defaultBranch)

package/dist/prompt.cjs

@@ -5,6 +5,12 @@ exports.renderGuidanceCorrectionPrompt = renderGuidanceCorrectionPrompt;
 exports.renderHostedCheckpointNote = renderHostedCheckpointNote;
 const CODE_GRAPH_GUIDANCE = "For JS/TS dependency inspection, the runtime provides `navarch-runtime code-graph --query <symbol-or-file> --mode search|callers|callees|impact --commit HEAD`. If the runtime is not on PATH, use its installed entry point; do not install another copy mid-task. Results describe committed source and include commit/freshness warnings; inspect current files for uncommitted changes and unresolved dependencies.";
 const PROCESS_GUIDANCE = "Process management: this host may run other agent sessions. Keep the PID or tool handle of each preview server you start and stop only that owned process. Never use broad process-name or command-line matching (pkill, killall) to clean up servers: the agent launcher carries the task prompt in its arguments and can match those patterns, terminating your own session. Use a different port when a port is occupied by a process you do not own. Keep scratch files in the current worktree; paths in previous transcripts belong to earlier sessions.";
+/** Overrides the playbooks' "default branch" PR base when the project sets a working branch. */
+function workingBranchNote(workingBranch) {
+    if (!workingBranch)
+        return "";
+    return `\nWorking branch: \`${workingBranch}\`. Your branch already starts from it. Open the pull request with \`--base ${workingBranch}\` instead of the default branch, and rebase onto \`origin/${workingBranch}\` when you need the latest base.`;
+}
 /**
  * Renders the four-layer context bundle (project-plan.md §3.8: steering docs,
  * task itself, task-type playbook, depends_on reports) into the single prompt
@@ -15,7 +21,8 @@ const PROCESS_GUIDANCE = "Process management: this host may run other agent sess
 function renderPrompt(task, bundle) {
     if (bundle.task_context) {
         const repositoryContext = bundle.repository
-            ? `Repository: ${bundle.repository.full_name} (${bundle.repository.url})\nLocal checkout: this session's isolated git worktree (current working directory).`
+            ? `Repository: ${bundle.repository.full_name} (${bundle.repository.url})\nLocal checkout: this session's isolated git worktree (current working directory).` +
+                workingBranchNote(bundle.repository.working_branch)
             : null;
         return [repositoryContext, PROCESS_GUIDANCE, bundle.task_context.trim(), CODE_GRAPH_GUIDANCE, bundle.retry_context?.trim()]
             .filter((section) => Boolean(section))
@@ -26,7 +33,8 @@ function renderPrompt(task, bundle) {
     sections.push(`Type: ${task.task_type} | Repo: ${task.repo} | Environment: ${task.environment_scope}`);
     sections.push(PROCESS_GUIDANCE);
     if (bundle.repository) {
-        sections.push(`Repository URL: ${bundle.repository.url}\nLocal checkout: this session's isolated git worktree (current working directory).`);
+        sections.push(`Repository URL: ${bundle.repository.url}\nLocal checkout: this session's isolated git worktree (current working directory).` +
+            workingBranchNote(bundle.repository.working_branch));
     }
     if (task.github_issue_url) {
         sections.push(`GitHub issue: ${task.github_issue_url}`);

package/dist/session.cjs

@@ -208,6 +208,7 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
         sessionId,
         cloneUrl,
         githubToken,
+        workingBranch: bundle.repository?.working_branch,
         repoLocalGithubToken: secrets["github-pat"],
         // Hosted runs skip checkpoints for verify tasks, which deliver a verdict.
         restoreHostedCheckpoint: !allowBranchRename && task.task_type !== "verify",

package/dist/worktree-guard.cjs

@@ -138,6 +138,9 @@ function codexToolReadRoots(env = process.env, platform = process.platform) {
         node_path_1.default.join(miseDataDir(env, homeDir), "installs"),
         node_path_1.default.join(env.NVM_DIR?.trim() || node_path_1.default.join(homeDir, ".nvm"), "versions"),
         ...(platform === "darwin" ? MACOS_TOOLCHAIN_READ_ROOTS : []),
+        // An operator-chosen OpenSSL config is read by every Node (and OpenSSL
+        // CLI) start; the agent inherits OPENSSL_CONF, so the file must be too.
+        ...(env.OPENSSL_CONF?.trim() ? [env.OPENSSL_CONF.trim()] : []),
     ];
 }
 function miseDataDir(env, homeDir) {
@@ -209,7 +212,16 @@ function resolveExecutable(bin, env) {
  * system prefixes for the Claude hook (bin/worktree-guard-hook.cjs), so this
  * only brings the Codex profile level with it.
  */
-const MACOS_TOOLCHAIN_READ_ROOTS = ["/Library/Developer", "/Applications"];
+const MACOS_TOOLCHAIN_READ_ROOTS = [
+    "/Library/Developer",
+    "/Applications",
+    // Official nodejs.org macOS builds (nvm, fnm, volta, the .pkg installer)
+    // load OPENSSLDIR/openssl.cnf on every start and exit with "OpenSSL
+    // configuration error: ... Operation not permitted" when seatbelt denies
+    // the read, so no `node` or `npm` runs. Grant only the file: the directory
+    // also holds private/.
+    "/System/Library/OpenSSL/openssl.cnf",
+];
 /**
  * Per-user macOS build state that Xcode and SwiftPM write during a build or
  * test run: simulator devices and DerivedData under `~/Library/Developer`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.89",
+  "version": "0.1.91",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through local coding agents.",
   "type": "commonjs",
   "license": "MIT",