@volter/supercode-teams 0.3.5 → 0.3.6

package/board-process-guard.mjs

@@ -31,9 +31,9 @@ export function boardGuardArguments(kind, args, { cwd, enabled, node = process.e
     // Its synchronous Bash hook can deny the entire command before execution.
     // This invocation enables and trusts the board-vetted command policy.
     const handler = `{ matcher = "^Bash$", hooks = [{ type = "command", command = ${JSON.stringify(command)}, timeout = 10 }] }`;
-    const next = [...args], at = next.indexOf('--');
-    next.splice(at < 0 ? next.length : at, 0, ...(next.includes('--dangerously-bypass-hook-trust') ? [] : ['--dangerously-bypass-hook-trust']), '-c', 'features.hooks=true', '-c', `hooks.PreToolUse=[${handler}]`);
-    return next;
+    // Codex's own flags go before any subcommand (`app-server`, `resume`) or prompt: after `app-server`, Codex
+    // 0.159 refuses --dangerously-bypass-hook-trust and the worker never starts.
+    return [...(args.includes('--dangerously-bypass-hook-trust') ? [] : ['--dangerously-bypass-hook-trust']), '-c', 'features.hooks=true', '-c', `hooks.PreToolUse=[${handler}]`, ...args];
   }
   throw new Error(`board process guard is unavailable for ${kind}; no unguarded session was launched`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-teams",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "type": "module",
   "description": "A machine daemon serving this machine's doors, and a local or remote Teams server for shared session discovery, OpenTelemetry ingestion and access to enrolled machines.",
   "license": "MIT",