@volter/supercode-teams 0.2.116 → 0.2.117

package/codex-startup.mjs

@@ -1,8 +1,36 @@
 // Codex can still show hook review on resume despite its invocation trust flag.
 // Act only on this exact startup menu, and never submit without reading selection.
 import { composerText } from '@volter/supercode-terminal';
+import { realpathSync } from 'node:fs';
 const pause = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 
+// CLI and portable SDK callers can name a directory through a filesystem alias.
+// Resolve only on the executing machine, before the native seed/server is built.
+export function canonicalCodexFolderTrust(cwd, args = []) {
+  if (typeof cwd !== 'string' || !cwd) return args;
+  const grant = `projects={${JSON.stringify(cwd)}={trust_level="trusted"}}`;
+  const projects = [];
+  for (let i = 0; i < args.length && args[i] !== '--'; i += 1) {
+    const arg = args[i];
+    if (arg === '-c' || arg === '--config') {
+      const value = args[++i];
+      if (value?.startsWith('projects')) projects.push({ index: i, value, prefix: '' });
+    } else if (arg.startsWith('--config=')) {
+      const value = arg.slice('--config='.length);
+      if (value.startsWith('projects')) projects.push({ index: i, value, prefix: '--config=' });
+    }
+  }
+  // A custom table, an untrusted grant or multiple overrides belongs to the caller.
+  if (projects.length !== 1 || projects[0].value !== grant) return args;
+  let effective;
+  try { effective = realpathSync(cwd); } catch { return args; }
+  if (effective === cwd) return args;
+  const out = [...args];
+  const { index, prefix } = projects[0];
+  out[index] = `${prefix}projects={${JSON.stringify(effective)}={trust_level="trusted"}}`;
+  return out;
+}
+
 function hookReview(screen) {
   const lines = String(screen).split('\n').map((line) => line.trim()).filter(Boolean);
   const start = lines.lastIndexOf('Hooks need review');

package/machine.mjs

@@ -50,7 +50,7 @@ import { DEFAULT_RANK, normalizeRank, judge } from './attention.mjs';
 import { popupTerminal, openPopup } from './popup-terminals.mjs';
 import { JobOwner, executionCapabilities, streamProgram, serveWorkspace } from './execution.mjs';
 import { confirmNativeInitialInput } from './native-initial-input.mjs';
-import { settleCodexHookReview } from './codex-startup.mjs';
+import { canonicalCodexFolderTrust, settleCodexHookReview } from './codex-startup.mjs';
 
 /** The preload every launched pane carries: it announces the ports a pane's node processes listen on. */
 const PORTHOLE_HOOK = fileURLToPath(new URL('./porthole-hook.cjs', import.meta.url));
@@ -1326,6 +1326,7 @@ export class TeamsMachine extends MachineCore {
         let session;
         let nativeInput;
         try {
+          if (params.kind === 'codex') params = { ...params, arguments: canonicalCodexFolderTrust(params.cwd, params.arguments) };
           session = await this.host.createSession({
             command: this.#nativeQuestionCommand(params, contextKey, by, (value) => { nativeInput = value; }),
             contextKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-teams",
-  "version": "0.2.116",
+  "version": "0.2.117",
   "type": "module",
   "description": "A machine daemon serving this machine's doors, and a local or remote Teams server for shared session discovery, OpenTelemetry ingestion and access to enrolled machines.",
   "license": "MIT",