@technomoron/agent-run 0.99.20 → 0.99.22

package/CHANGES

@@ -1,6 +1,19 @@
 CHANGES
 =======
 
+Version 0.99.22 (2026-06-27)
+----------------------------
+* Default generated Codex configs to `danger-full-access` while keeping `--sandboxed` as an explicit opt-in.
+* Search common global config-root locations on Windows and Unix, including both `agent-config` and `agent-configs`.
+* Fix release script package metadata reads under Git Bash on Windows.
+* Document the config-root discovery order and add regression coverage for the generated sandbox mode and search candidates.
+
+Version 0.99.21 (2026-06-27)
+----------------------------
+* Default project commands for `[code]/owner/repo` checkouts to `[code]/agent-config`.
+* Make `update --all` map profiles under a colocated `agent-config` root back to their matching project roots.
+* Expand integration coverage for the colocated config-root layout and Windows command/path behavior.
+
 Version 0.99.20 (2026-06-03)
 ----------------------------
 * Add systemd unit templates and install tooling for the global AI tools updater.

package/README.md

@@ -3,8 +3,8 @@
 Small wrapper for AI coding CLIs like Codex and Claude.
 
 It keeps agent files out of normal repos and stores them in a separate
-agent config tree. That tree can live anywhere; it does not need to sit
-inside the source tree.
+agent config tree. By default, that tree lives beside owner/repo checkouts
+under the same code root.
 
 ## Model
 
@@ -18,27 +18,26 @@ Example:
 
 ```text
 ~/source/
+  agent-config/
+    org/
+      my-api/
+        agent-run.jsonc
+        local.md.njk
+        overrides/
+        AGENTS.md
+        CLAUDE.md
+        config.toml
+        .agents/
+        .claude/
+        bin/
   org/
     my-api/
-
-~/.agent-config/
-  org/
-    my-api/
-      agent-run.jsonc
-      local.md.njk
-      overrides/
-      AGENTS.md
-      CLAUDE.md
-      config.toml
-      .agents/
-      .claude/
-      bin/
 ```
 
-If your source repo is `~/source/org/my-api`, `agent-run` can map it to:
+If your source repo is `~/source/org/my-api`, `agent-run` maps it to:
 
 ```text
-~/.agent-config/org/my-api
+~/source/agent-config/org/my-api
 ```
 
 The source repo stays clean. The agent files live in the matching path under
@@ -93,12 +92,21 @@ AGENT_RUN_PROFILE=org/my-api
 
 Config root:
 
-- default: `~/.agent-config`
+- default for a project at `[code]/owner/repo`: `[code]/agent-config`
 - override with `--config-root /path/to/agent-configs`
 - override with `AGENT_CONFIG_DIR=/path/to/agent-configs`
 - override with `AGENT_CONFIG_ROOT=/path/to/agent-configs`
 - or set `AGENT_CONFIG_DIR=/path/to/agent-configs` or `AGENT_CONFIG_ROOT=/path/to/agent-configs` in `.agent-run.env`
 
+For commands without a project root, `agent-run` looks for an existing config
+root in these locations:
+
+- Windows: `~/Documents/code/agent-config`, `~/Documents/code/agent-configs`,
+  `~/Desktop/code/agent-config`, `~/Desktop/code/agent-configs`,
+  `C:\code\agent-config`, `C:\code\agent-configs`
+- Unix: `~/code/agent-config`, `~/code/agent-configs`, `~/agent-config`,
+  `~/agent-configs`, `~/.agent-config`, `~/.agent-configs`
+
 ## Commands
 
 Global flag:
@@ -169,7 +177,8 @@ agent-run update --all ~/.agent-config
 ```
 
 If the config root argument is omitted, `update --all` uses the normal configured
-root such as `$HOME/.agent-config`.
+root. Without a project path, that falls back to `$HOME/.agent-config`; for
+project commands, the default is `[code]/agent-config`.
 
 You can also generate from a tool command and stop before launch:
 

package/dist/agent-run.js

@@ -7,6 +7,7 @@ exports.resolveAgentDir = resolveAgentDir;
 exports.findProjectRoot = findProjectRoot;
 exports.resolveProfile = resolveProfile;
 exports.defaultConfigRoot = defaultConfigRoot;
+exports.defaultConfigRootSearchCandidates = defaultConfigRootSearchCandidates;
 const childProcess = require("child_process");
 const fs = require("fs");
 const os = require("os");
@@ -23,7 +24,7 @@ const VERBOSE_ENV = 'AGENT_RUN_VERBOSE';
 const MANIFEST_FILE_NAME = 'agent-run.jsonc';
 const LOCAL_TEMPLATE_FILE_NAME = 'local.md.njk';
 const LIVE_DIR_NAME = 'live';
-const PACKAGE_VERSION = '0.99.16';
+const PACKAGE_VERSION = '0.99.22';
 const UNEXPANDED_TEMPLATE_RE = /\{\{[^}]+\}\}|\{%[^%]+%\}/;
 const agentRunEnvCache = new Map();
 const GENERATED_GITIGNORE_ENTRIES = [
@@ -524,15 +525,19 @@ function runTool(parsed) {
         fail(profileResult.reason);
     }
     const profile = profileResult.profile;
-    const configRoot = defaultConfigRoot(projectRoot);
-    const agentDir = resolveAgentDir(projectRoot);
     if (wrapperArgs.show) {
+        const configRoot = defaultConfigRoot(projectRoot);
+        const agentDir = path.join(configRoot, profile);
+        verbose(`profile=${profile} configRoot=${configRoot} agentPath=${agentDir}`);
         showToolProfile(command, projectRoot, agentDir);
         return;
     }
     if (wrapperArgs.create) {
         runInit({ command: 'init', targetPath: projectRoot });
     }
+    const configRoot = defaultConfigRoot(projectRoot);
+    const agentDir = path.join(configRoot, profile);
+    verbose(`profile=${profile} configRoot=${configRoot} agentPath=${agentDir}`);
     ensureRunnableProfile(configRoot, agentDir, profile);
     if (wrapperArgs.generate) {
         const rendered = syncAgentProfile(projectRoot, agentDir);
@@ -588,8 +593,9 @@ function runInit(parsed) {
         return;
     }
     const profile = resolveProfile(projectRoot);
-    const configRoot = defaultConfigRoot(projectRoot);
-    const agentDir = resolveAgentDir(projectRoot);
+    const configRoot = defaultConfigRoot(projectRoot, { preferProjectRoot: true });
+    const agentDir = path.join(configRoot, profile);
+    verbose(`profile=${profile} configRoot=${configRoot} agentPath=${agentDir}`);
     ensureConfigRootLayout(configRoot);
     ensureConfigRootGitignore(configRoot);
     ensureDefaultGlobalTemplates(configRoot);
@@ -675,7 +681,7 @@ function runUpdateAll(targetPath) {
     let updated = 0;
     for (const agentDir of profileDirs) {
         const profile = path.relative(configRoot, agentDir).replace(/\\/g, '/');
-        const projectRoot = projectRootForProfile(profile);
+        const projectRoot = projectRootForProfile(profile, configRoot);
         verbose(`update --all profile=${profile} syntheticProjectRoot=${projectRoot}`);
         ensureProfileOverridesDir(agentDir);
         convertLegacyProfileIfNeeded(configRoot, agentDir, profile);
@@ -2186,7 +2192,10 @@ function parseProfile(profile, source) {
     }
     return { profile: segments.join('/'), reason: '' };
 }
-function projectRootForProfile(profile) {
+function projectRootForProfile(profile, configRoot) {
+    if (configRoot && path.basename(configRoot) === 'agent-config') {
+        return path.join(path.dirname(configRoot), ...profile.split('/'));
+    }
     return path.join(os.homedir(), ...profile.split('/'));
 }
 function readAgentRunEnv(dir) {
@@ -2229,7 +2238,7 @@ function parseBooleanEnv(value) {
     const normalized = value.trim().toLowerCase();
     return normalized === '1' || normalized === 'true' || normalized === 'yes' || normalized === 'on';
 }
-function defaultConfigRoot(projectRoot) {
+function defaultConfigRoot(projectRoot, options = {}) {
     const overrideRoot = process.env[CONFIG_ROOT_OVERRIDE_ENV];
     if (overrideRoot) {
         return path.resolve(overrideRoot);
@@ -2251,7 +2260,58 @@ function defaultConfigRoot(projectRoot) {
             return path.resolve(projectRoot, localConfigRoot);
         }
     }
-    return path.join(os.homedir(), '.agent-config');
+    if (projectRoot) {
+        const projectConfigRoot = defaultCodeConfigRoot(projectRoot);
+        if (options.preferProjectRoot || fs.existsSync(projectConfigRoot)) {
+            return projectConfigRoot;
+        }
+        const discoveredConfigRoot = findExistingConfigRoot(defaultConfigRootSearchCandidates());
+        return discoveredConfigRoot ?? projectConfigRoot;
+    }
+    const discoveredConfigRoot = findExistingConfigRoot(defaultConfigRootSearchCandidates());
+    return discoveredConfigRoot ?? path.join(os.homedir(), '.agent-config');
+}
+function defaultCodeConfigRoot(projectRoot) {
+    const resolvedProjectRoot = path.resolve(projectRoot);
+    const ownerDir = path.dirname(resolvedProjectRoot);
+    const codeRoot = path.dirname(ownerDir);
+    if (ownerDir === resolvedProjectRoot || codeRoot === ownerDir) {
+        return path.join(os.homedir(), '.agent-config');
+    }
+    return path.join(codeRoot, 'agent-config');
+}
+function findExistingConfigRoot(candidates) {
+    for (const candidate of candidates) {
+        if (fs.existsSync(candidate)) {
+            return candidate;
+        }
+    }
+    return null;
+}
+function defaultConfigRootSearchCandidates(_projectRoot, options = {}) {
+    const platform = options.platform ?? process.platform;
+    const pathApi = platform === 'win32' ? path.win32 : path.posix;
+    const homeDir = options.homeDir ?? os.homedir();
+    const configNames = ['agent-config', 'agent-configs'];
+    const candidates = [];
+    if (platform === 'win32') {
+        for (const codeRoot of [pathApi.join(homeDir, 'Documents', 'code'), pathApi.join(homeDir, 'Desktop', 'code'), 'C:\\code']) {
+            for (const configName of configNames) {
+                candidates.push(pathApi.join(codeRoot, configName));
+            }
+        }
+        return candidates;
+    }
+    for (const configName of configNames) {
+        candidates.push(pathApi.join(homeDir, 'code', configName));
+    }
+    for (const configName of configNames) {
+        candidates.push(pathApi.join(homeDir, configName));
+    }
+    for (const configName of configNames) {
+        candidates.push(pathApi.join(homeDir, `.${configName}`));
+    }
+    return candidates;
 }
 function findRealBinary(tool) {
     const pathValue = process.env.PATH || '';
@@ -2725,7 +2785,7 @@ function defaultCodexConfigTemplate() {
         '# Generated by agent-run. Do not edit directly.',
         '',
         'project_doc_max_bytes = 65536',
-        'sandbox_mode = "workspace-write"',
+        'sandbox_mode = "danger-full-access"',
         '',
         '[sandbox_workspace_write]',
         'writable_roots = [',
@@ -2767,7 +2827,7 @@ function defaultCodexConfigContent(context) {
         '# Generated by agent-run. Do not edit directly.',
         '',
         'project_doc_max_bytes = 65536',
-        'sandbox_mode = "workspace-write"',
+        'sandbox_mode = "danger-full-access"',
         '',
         '[sandbox_workspace_write]',
         'writable_roots = [',

package/examples/basic-config/agent-config/global/tool-templates/codex-config.toml.njk

@@ -1,6 +1,6 @@
 # Starter global Codex config
 project_doc_max_bytes = 32768
-sandbox_mode = "workspace-write"
+sandbox_mode = "danger-full-access"
 
 [sandbox_workspace_write]
 writable_roots = [

package/examples/basic-config/agent-config/starter/basic-project/overrides/codex-config.toml.njk

@@ -1,6 +1,6 @@
 # Starter profile Codex override
 project_doc_max_bytes = 65536
-sandbox_mode = "workspace-write"
+sandbox_mode = "danger-full-access"
 
 [sandbox_workspace_write]
 writable_roots = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@technomoron/agent-run",
-  "version": "0.99.20",
+  "version": "0.99.22",
   "packageManager": "pnpm@10.28.1",
   "bin": {
     "agent-run": "dist/agent-run.js"