@technomoron/agent-run 0.99.21 → 0.99.22

package/CHANGES

@@ -1,6 +1,13 @@
 CHANGES
 =======
 
+Version 0.99.22 (2026-06-27)
+----------------------------
+* Default generated Codex configs to `danger-full-access` while keeping `--sandboxed` as an explicit opt-in.
+* Search common global config-root locations on Windows and Unix, including both `agent-config` and `agent-configs`.
+* Fix release script package metadata reads under Git Bash on Windows.
+* Document the config-root discovery order and add regression coverage for the generated sandbox mode and search candidates.
+
 Version 0.99.21 (2026-06-27)
 ----------------------------
 * Default project commands for `[code]/owner/repo` checkouts to `[code]/agent-config`.

package/README.md

@@ -98,6 +98,15 @@ Config root:
 - override with `AGENT_CONFIG_ROOT=/path/to/agent-configs`
 - or set `AGENT_CONFIG_DIR=/path/to/agent-configs` or `AGENT_CONFIG_ROOT=/path/to/agent-configs` in `.agent-run.env`
 
+For commands without a project root, `agent-run` looks for an existing config
+root in these locations:
+
+- Windows: `~/Documents/code/agent-config`, `~/Documents/code/agent-configs`,
+  `~/Desktop/code/agent-config`, `~/Desktop/code/agent-configs`,
+  `C:\code\agent-config`, `C:\code\agent-configs`
+- Unix: `~/code/agent-config`, `~/code/agent-configs`, `~/agent-config`,
+  `~/agent-configs`, `~/.agent-config`, `~/.agent-configs`
+
 ## Commands
 
 Global flag:

package/dist/agent-run.js

@@ -7,6 +7,7 @@ exports.resolveAgentDir = resolveAgentDir;
 exports.findProjectRoot = findProjectRoot;
 exports.resolveProfile = resolveProfile;
 exports.defaultConfigRoot = defaultConfigRoot;
+exports.defaultConfigRootSearchCandidates = defaultConfigRootSearchCandidates;
 const childProcess = require("child_process");
 const fs = require("fs");
 const os = require("os");
@@ -23,7 +24,7 @@ const VERBOSE_ENV = 'AGENT_RUN_VERBOSE';
 const MANIFEST_FILE_NAME = 'agent-run.jsonc';
 const LOCAL_TEMPLATE_FILE_NAME = 'local.md.njk';
 const LIVE_DIR_NAME = 'live';
-const PACKAGE_VERSION = '0.99.16';
+const PACKAGE_VERSION = '0.99.22';
 const UNEXPANDED_TEMPLATE_RE = /\{\{[^}]+\}\}|\{%[^%]+%\}/;
 const agentRunEnvCache = new Map();
 const GENERATED_GITIGNORE_ENTRIES = [
@@ -524,15 +525,19 @@ function runTool(parsed) {
         fail(profileResult.reason);
     }
     const profile = profileResult.profile;
-    const configRoot = defaultConfigRoot(projectRoot);
-    const agentDir = resolveAgentDir(projectRoot);
     if (wrapperArgs.show) {
+        const configRoot = defaultConfigRoot(projectRoot);
+        const agentDir = path.join(configRoot, profile);
+        verbose(`profile=${profile} configRoot=${configRoot} agentPath=${agentDir}`);
         showToolProfile(command, projectRoot, agentDir);
         return;
     }
     if (wrapperArgs.create) {
         runInit({ command: 'init', targetPath: projectRoot });
     }
+    const configRoot = defaultConfigRoot(projectRoot);
+    const agentDir = path.join(configRoot, profile);
+    verbose(`profile=${profile} configRoot=${configRoot} agentPath=${agentDir}`);
     ensureRunnableProfile(configRoot, agentDir, profile);
     if (wrapperArgs.generate) {
         const rendered = syncAgentProfile(projectRoot, agentDir);
@@ -588,8 +593,9 @@ function runInit(parsed) {
         return;
     }
     const profile = resolveProfile(projectRoot);
-    const configRoot = defaultConfigRoot(projectRoot);
-    const agentDir = resolveAgentDir(projectRoot);
+    const configRoot = defaultConfigRoot(projectRoot, { preferProjectRoot: true });
+    const agentDir = path.join(configRoot, profile);
+    verbose(`profile=${profile} configRoot=${configRoot} agentPath=${agentDir}`);
     ensureConfigRootLayout(configRoot);
     ensureConfigRootGitignore(configRoot);
     ensureDefaultGlobalTemplates(configRoot);
@@ -2232,7 +2238,7 @@ function parseBooleanEnv(value) {
     const normalized = value.trim().toLowerCase();
     return normalized === '1' || normalized === 'true' || normalized === 'yes' || normalized === 'on';
 }
-function defaultConfigRoot(projectRoot) {
+function defaultConfigRoot(projectRoot, options = {}) {
     const overrideRoot = process.env[CONFIG_ROOT_OVERRIDE_ENV];
     if (overrideRoot) {
         return path.resolve(overrideRoot);
@@ -2255,9 +2261,15 @@ function defaultConfigRoot(projectRoot) {
         }
     }
     if (projectRoot) {
-        return defaultCodeConfigRoot(projectRoot);
+        const projectConfigRoot = defaultCodeConfigRoot(projectRoot);
+        if (options.preferProjectRoot || fs.existsSync(projectConfigRoot)) {
+            return projectConfigRoot;
+        }
+        const discoveredConfigRoot = findExistingConfigRoot(defaultConfigRootSearchCandidates());
+        return discoveredConfigRoot ?? projectConfigRoot;
     }
-    return path.join(os.homedir(), '.agent-config');
+    const discoveredConfigRoot = findExistingConfigRoot(defaultConfigRootSearchCandidates());
+    return discoveredConfigRoot ?? path.join(os.homedir(), '.agent-config');
 }
 function defaultCodeConfigRoot(projectRoot) {
     const resolvedProjectRoot = path.resolve(projectRoot);
@@ -2268,6 +2280,39 @@ function defaultCodeConfigRoot(projectRoot) {
     }
     return path.join(codeRoot, 'agent-config');
 }
+function findExistingConfigRoot(candidates) {
+    for (const candidate of candidates) {
+        if (fs.existsSync(candidate)) {
+            return candidate;
+        }
+    }
+    return null;
+}
+function defaultConfigRootSearchCandidates(_projectRoot, options = {}) {
+    const platform = options.platform ?? process.platform;
+    const pathApi = platform === 'win32' ? path.win32 : path.posix;
+    const homeDir = options.homeDir ?? os.homedir();
+    const configNames = ['agent-config', 'agent-configs'];
+    const candidates = [];
+    if (platform === 'win32') {
+        for (const codeRoot of [pathApi.join(homeDir, 'Documents', 'code'), pathApi.join(homeDir, 'Desktop', 'code'), 'C:\\code']) {
+            for (const configName of configNames) {
+                candidates.push(pathApi.join(codeRoot, configName));
+            }
+        }
+        return candidates;
+    }
+    for (const configName of configNames) {
+        candidates.push(pathApi.join(homeDir, 'code', configName));
+    }
+    for (const configName of configNames) {
+        candidates.push(pathApi.join(homeDir, configName));
+    }
+    for (const configName of configNames) {
+        candidates.push(pathApi.join(homeDir, `.${configName}`));
+    }
+    return candidates;
+}
 function findRealBinary(tool) {
     const pathValue = process.env.PATH || '';
     const pathDirs = pathValue.split(path.delimiter).filter((entry) => entry.length > 0);
@@ -2740,7 +2785,7 @@ function defaultCodexConfigTemplate() {
         '# Generated by agent-run. Do not edit directly.',
         '',
         'project_doc_max_bytes = 65536',
-        'sandbox_mode = "workspace-write"',
+        'sandbox_mode = "danger-full-access"',
         '',
         '[sandbox_workspace_write]',
         'writable_roots = [',
@@ -2782,7 +2827,7 @@ function defaultCodexConfigContent(context) {
         '# Generated by agent-run. Do not edit directly.',
         '',
         'project_doc_max_bytes = 65536',
-        'sandbox_mode = "workspace-write"',
+        'sandbox_mode = "danger-full-access"',
         '',
         '[sandbox_workspace_write]',
         'writable_roots = [',

package/examples/basic-config/agent-config/global/tool-templates/codex-config.toml.njk

@@ -1,6 +1,6 @@
 # Starter global Codex config
 project_doc_max_bytes = 32768
-sandbox_mode = "workspace-write"
+sandbox_mode = "danger-full-access"
 
 [sandbox_workspace_write]
 writable_roots = [

package/examples/basic-config/agent-config/starter/basic-project/overrides/codex-config.toml.njk

@@ -1,6 +1,6 @@
 # Starter profile Codex override
 project_doc_max_bytes = 65536
-sandbox_mode = "workspace-write"
+sandbox_mode = "danger-full-access"
 
 [sandbox_workspace_write]
 writable_roots = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@technomoron/agent-run",
-  "version": "0.99.21",
+  "version": "0.99.22",
   "packageManager": "pnpm@10.28.1",
   "bin": {
     "agent-run": "dist/agent-run.js"