@wardby/cli 0.4.0 → 0.4.1

package/dist/env.js

@@ -17,4 +17,9 @@ const projectDir = resolve(process.env.WARDBY_PROJECT_DIR || process.cwd());
 // process variable, preserving explicit shell/container configuration as the
 // highest-priority source in either mode.
 dotenvFlow.config({ path: join(projectDir, ".wardby"), silent: true });
-dotenvFlow.config({ path: projectDir });
+// The application's own .env files are optional: dotenv-flow reports "no .env*
+// files" as a failure, so only load when some exist. Not `silent: true`, which
+// would also hide parse errors in a real .env.
+if (dotenvFlow.listFiles({ path: projectDir, node_env: process.env.NODE_ENV }).length > 0) {
+    dotenvFlow.config({ path: projectDir });
+}

package/dist/quickstart/index.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Arguments for `<client> mcp add`. The server name comes right after `add`:
+ * Claude Code's `-e/--env <env...>` is variadic and would otherwise read the
+ * name as another KEY=value ("Invalid environment variable format: wardby").
+ */
+export declare function mcpAddArgs(client: "codex" | "claude", projectDir: string, packageSpec: string): string[];
 export declare function quickstartCommand(args: string[]): Promise<void>;
 /** The closing "build your first agent" hint; the assistant prompts only make sense once an MCP client is configured. */
 export declare function nextStepLines(mcpConfigured: boolean): string[];

package/dist/quickstart/index.js

@@ -263,6 +263,16 @@ function runDemo(paths) {
 function clientInstalled(command) {
     return runCommand(command, ["--version"]).status === 0;
 }
+/**
+ * Arguments for `<client> mcp add`. The server name comes right after `add`:
+ * Claude Code's `-e/--env <env...>` is variadic and would otherwise read the
+ * name as another KEY=value ("Invalid environment variable format: wardby").
+ */
+export function mcpAddArgs(client, projectDir, packageSpec) {
+    const env = `WARDBY_PROJECT_DIR=${projectDir}`;
+    const options = client === "codex" ? ["--env", env] : ["--scope", "local", "-e", env];
+    return ["mcp", "add", "wardby", ...options, "--", "npx", "--yes", packageSpec, "mcp"];
+}
 function configureOneMcpClient(client, paths) {
     if (!clientInstalled(client)) {
         console.warn(`! ${client} is not installed; skipped its MCP configuration.`);
@@ -273,34 +283,7 @@ function configureOneMcpClient(client, paths) {
         console.log(`✓ ${client} already has an MCP server named wardby.`);
         return true;
     }
-    const packageSpec = `@wardby/cli@${packageJson.version}`;
-    const args = client === "codex"
-        ? [
-            "mcp",
-            "add",
-            "--env",
-            `WARDBY_PROJECT_DIR=${paths.projectDir}`,
-            "wardby",
-            "--",
-            "npx",
-            "--yes",
-            packageSpec,
-            "mcp",
-        ]
-        : [
-            "mcp",
-            "add",
-            "--scope",
-            "local",
-            "-e",
-            `WARDBY_PROJECT_DIR=${paths.projectDir}`,
-            "wardby",
-            "--",
-            "npx",
-            "--yes",
-            packageSpec,
-            "mcp",
-        ];
+    const args = mcpAddArgs(client, paths.projectDir, `@wardby/cli@${packageJson.version}`);
     const result = runCommand(client, args, { cwd: paths.projectDir });
     if (result.status !== 0)
         commandFailure(`${client} MCP configuration`, result);

package/docs/coding-worker-isolation.md

@@ -168,10 +168,37 @@ deeply to process is refused with `request_nesting_too_deep`.
     forces `store: false` and `background: false` and adds a
     `max_output_tokens` ceiling when Codex omits it.
 
-Upgrading the pinned `@openai/codex-sdk` means re-recording that fixture
-against a local fake upstream and rerunning the compatibility test. A Codex
-release that sends a new key or item type fails closed at the proxy rather
-than silently widening what reaches OpenAI.
+A Codex release that sends a new key or item type fails closed at the proxy
+rather than silently widening what reaches OpenAI. Upgrading the pinned
+`@openai/codex-sdk` is therefore one command plus a review:
+
+1. Change the pin in `src/coding-worker/package.json` (a dependency bot's
+   pull request does this). Until the fixture is re-recorded, the "pinned
+   Codex version" test fails with `Codex SDK bump detected (...)`.
+2. On that branch, run `npm run codex:rerecord` on a machine where npm
+   installs the host's Codex binary. It sets the root devDependency
+   `@openai/codex-sdk` to the worker's pin and installs it, drives the pinned
+   Codex CLI through a fixed set of scenarios (responses-lite and classic tool
+   layouts, code-mode `exec` with `view_image` and `apply_patch`, namespaced
+   tool calls, a spawned sub-agent, local context compaction) against a local
+   fake of the proxy's `/v1/responses` endpoint — nothing is sent to OpenAI —
+   and writes `codex-<version>-responses-requests.json`, replacing the
+   previous version's fixture. Paths, ids, timestamps and long prompt texts
+   are normalized so a re-record of the same version is byte-identical. It
+   then runs the compatibility test (the real Codex through the real proxy)
+   and the proxy's fixture-replay tests, and prints a request-shape diff
+   against the previous fixture: new or removed top-level keys, input item
+   and content types, tool types, `include`/`reasoning`/`text`/`tool_choice`/
+   `service_tier` values and `client_metadata` keys.
+3. Review that diff. If the tests pass and the diff is empty or shows only
+   shapes the allowlist already accepts, commit the new fixture with
+   `package.json` and `package-lock.json`. If the proxy refuses a request
+   (an `openai_*_not_allowed` code in the test output), do not widen the
+   allowlist to make it pass: first find out what the new key, item, tool
+   type or value does (Codex's changelog and source) and whether it can
+   reach anything outside the worker or bill outside the metered tokens,
+   then widen `parseOpenAiRequest` only for what that review accepts, and
+   document it in the list above.
 
 The proxy also binds a second listener, the **deny port** (`8788`,
 `CODING_PROXY_DENY_PORT`), which serves nothing: it accepts a connection,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wardby/cli",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Self-hosted control plane for budget-guarded AI agents.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/wardby/wardby#readme",
@@ -60,6 +60,7 @@
     "prepare": "npm run build:vendor && PRISMA_HIDE_UPDATE_MESSAGE=1 prisma generate",
     "prepack": "npm run build",
     "cli": "tsx --conditions=wardby-source src/cli.ts",
+    "codex:rerecord": "tsx --conditions=wardby-source src/tools/codex-rerecord.ts",
     "capture:autopilot": "tsx --conditions=wardby-source src/tools/capture-autopilot-dry-run.ts",
     "test": "npm run build:vendor && vitest run",
     "test:package": "node scripts/npm-package-acceptance.mjs",
@@ -122,7 +123,7 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@openai/codex-sdk": "0.153.4",
+    "@openai/codex-sdk": "0.159.2",
     "@types/node": "^24.0.0",
     "@types/papaparse": "^5.5.2",
     "@types/pg": "8.23.1",