@zixt/host 0.0.12 → 0.0.14

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.12",
+  version: "0.0.14",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -15334,13 +15334,19 @@ var CreateOrgRequest = external_exports.object({
 });
 var DESKTOP_SIDEBAR_MIN_WIDTH_PX = 240;
 var DESKTOP_SIDEBAR_MAX_WIDTH_PX = 420;
+var TASK_SIDEBAR_MIN_WIDTH_PX = 240;
+var TASK_SIDEBAR_MAX_WIDTH_PX = 480;
 var DesktopSidebarPreference = external_exports.object({
   collapsed: external_exports.boolean(),
   /** Last expanded width; collapsing never discards the user's chosen width. */
   expandedWidthPx: external_exports.number().int().min(DESKTOP_SIDEBAR_MIN_WIDTH_PX).max(DESKTOP_SIDEBAR_MAX_WIDTH_PX)
 });
+var TaskSidebarPreference = external_exports.object({
+  expandedWidthPx: external_exports.number().int().min(TASK_SIDEBAR_MIN_WIDTH_PX).max(TASK_SIDEBAR_MAX_WIDTH_PX)
+});
 var OrgUiPreferences = external_exports.object({
   desktopSidebar: DesktopSidebarPreference,
+  taskSidebar: TaskSidebarPreference,
   /** Missing legacy storage is revision zero. */
   revision: external_exports.number().int().min(0),
   updatedAt: IsoDate2.nullable()
@@ -15349,9 +15355,16 @@ var DesktopSidebarPreferencePatch = DesktopSidebarPreference.partial().refine(
   (value) => Object.keys(value).length > 0,
   "empty desktop sidebar update"
 );
+var TaskSidebarPreferencePatch = TaskSidebarPreference.partial().refine(
+  (value) => Object.keys(value).length > 0,
+  "empty task sidebar update"
+);
 var UpdateOrgUiPreferencesRequest = external_exports.object({
   expectedRevision: external_exports.number().int().min(0),
-  desktopSidebar: DesktopSidebarPreferencePatch
+  desktopSidebar: DesktopSidebarPreferencePatch.optional(),
+  taskSidebar: TaskSidebarPreferencePatch.optional()
+}).refine((value) => value.desktopSidebar !== void 0 || value.taskSidebar !== void 0, {
+  message: "at least one layout preference is required"
 });
 var ListOrgsResponse = external_exports.object({
   orgs: external_exports.array(Org.extend({ role: OrgRole, uiPreferences: OrgUiPreferences }))
@@ -15884,7 +15897,34 @@ var MemberTaskOriginProjection = TaskOrigin.pick({
 var MemberTaskCancellationProjection = TaskCancellation.omit({ hostId: true }).extend({
   hostId: external_exports.null()
 });
-var AdminTaskProjection = Task.extend({ metadataRedacted: external_exports.literal(false) });
+var taskGitSummaryLabel = (maxLength, label) => external_exports.string().min(1).max(maxLength).refine(
+  isSafeSingleLineDisplayText,
+  `${label} must not contain control, line-separator, or bidirectional formatting characters`
+);
+var TaskGitSummary = external_exports.object({
+  repositories: external_exports.array(
+    external_exports.object({
+      githubRepository: external_exports.string().regex(/^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/).optional(),
+      branch: taskGitSummaryLabel(512, "branch").nullable(),
+      ahead: external_exports.number().int().min(0),
+      behind: external_exports.number().int().min(0),
+      changedFiles: external_exports.number().int().min(0),
+      pullRequest: external_exports.object({
+        number: external_exports.number().int().min(1),
+        url: external_exports.string().max(2e3).regex(
+          /^https:\/\/github\.com\/[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}\/pull\/[1-9][0-9]*$/
+        ),
+        state: external_exports.enum(["open", "closed", "merged"]),
+        draft: external_exports.boolean()
+      }).strict().optional()
+    }).strict()
+  ).min(1).max(20),
+  observedAt: IsoDate
+}).strict();
+var AdminTaskProjection = Task.extend({
+  metadataRedacted: external_exports.literal(false),
+  gitSummary: TaskGitSummary.nullable().optional()
+});
 var MemberTaskProjection = Task.omit({
   origin: true,
   hostId: true,
@@ -15893,7 +15933,8 @@ var MemberTaskProjection = Task.omit({
   metadataRedacted: external_exports.literal(true),
   origin: MemberTaskOriginProjection,
   hostId: external_exports.null(),
-  cancellation: MemberTaskCancellationProjection.nullable().default(null)
+  cancellation: MemberTaskCancellationProjection.nullable().default(null),
+  gitSummary: external_exports.null().optional()
 });
 var TaskProjection = external_exports.discriminatedUnion("metadataRedacted", [
   AdminTaskProjection,
@@ -17232,6 +17273,9 @@ var SecretMeta = external_exports.object({
   /** Absent on legacy rows/clients means `env`. */
   kind: SecretKind.default("env"),
   scope: SecretScope,
+  /** Canonical availability set for teammate-scoped credentials. */
+  agentIds: external_exports.array(AgentId).min(1).nullable().default(null),
+  /** Legacy single-teammate projection, retained while older clients migrate. */
   agentId: AgentId.nullable(),
   /**
    * What this credential is for — rendered into the agent's system prompt
@@ -17279,7 +17323,23 @@ var requireKindMatchingValue = (request, ctx) => {
 };
 var PutSecretRequest = external_exports.discriminatedUnion("scope", [
   external_exports.object({ ...PutSecretFields, scope: external_exports.literal("org") }).strict().superRefine(requireKindMatchingValue),
-  external_exports.object({ ...PutSecretFields, scope: external_exports.literal("agent"), agentId: AgentId }).strict().superRefine(requireKindMatchingValue)
+  external_exports.object({
+    ...PutSecretFields,
+    scope: external_exports.literal("agent"),
+    agentIds: external_exports.array(AgentId).min(1).max(100).optional(),
+    agentId: AgentId.optional()
+  }).strict().superRefine((request, ctx) => {
+    if (request.agentIds === void 0 === (request.agentId === void 0)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["agentIds"],
+        message: "teammate credentials require exactly one of agentIds or legacy agentId"
+      });
+    }
+    if (request.agentIds && new Set(request.agentIds).size !== request.agentIds.length) {
+      ctx.addIssue({ code: "custom", path: ["agentIds"], message: "duplicate AI teammate" });
+    }
+  }).superRefine(requireKindMatchingValue)
 ]);
 var AdminSecretsProjection = external_exports.object({
   metadataRedacted: external_exports.literal(false),
@@ -33248,12 +33308,8 @@ function createCliRunner(adapter, opts = {}) {
       try {
         cwd = await requireRealDirectory4(configuredWorkspace, "configured workspace");
       } catch (error52) {
-        return {
-          outcome: "failed",
-          summary: error52 instanceof Error ? error52.message : "configured workspace is unusable",
-          summaryEvidence: "host_observed",
-          usage: { inputTokens: 0, outputTokens: 0 }
-        };
+        const reason = error52 instanceof Error ? error52.message : "configured workspace is unusable";
+        task.event("status", `${reason}. Continuing in the teammate folder instead.`);
       }
     }
     if (task.cancelledNow()) return cancelledBeforeRun();
@@ -33407,6 +33463,18 @@ function createCliRunner(adapter, opts = {}) {
           ];
         })
       });
+      const workingContextEnvironments = buildWorkingContextCommandEnvironments({
+        inherited: process.env,
+        runnerEnv: env,
+        ...githubShell ? { githubShellBrokerEnv: githubShell.environment } : {}
+      });
+      const gitDetected = preparedWorkspace !== null || await collectWorkingContext({
+        workingDirectory: cwd,
+        preparedWorkspace,
+        git,
+        env: workingContextEnvironments.git,
+        signal: task.authoritySignal
+      }).then((context) => Boolean(context.repositories?.length)).catch(() => false);
       const prepared = await adapter.prepareRun({
         task,
         runner,
@@ -33417,6 +33485,7 @@ function createCliRunner(adapter, opts = {}) {
           connections: attachedConnections
         },
         preparedWorkspace,
+        gitDetected,
         // The trusted workspace facts describe where Zixt put provider clones,
         // which is always the Zixt-owned root — never a configured workspace.
         taskRoot,
@@ -33448,11 +33517,6 @@ ${attachmentSection}` : prepared.prompt;
       const abortWorkingContext = () => workingContextAbort.abort();
       task.authoritySignal.addEventListener("abort", abortWorkingContext, { once: true });
       const pullRequests = new WorkingContextPullRequestCache();
-      const workingContextEnvironments = buildWorkingContextCommandEnvironments({
-        inherited: process.env,
-        runnerEnv: env,
-        ...githubShell ? { githubShellBrokerEnv: githubShell.environment } : {}
-      });
       const ghContextCommand = githubShell?.ghCommand ? { ...githubShell.ghCommand, env: workingContextEnvironments.github } : void 0;
       const gitContextCommand = git.available && git.executablePath ? { executablePath: git.executablePath, env: workingContextEnvironments.git } : void 0;
       const reportWorkingContext = (options = {}) => {
@@ -33759,6 +33823,20 @@ function workspaceSystemPrompt(existing, workspacePath, siblings, gitDetected =
     "",
     "Your session ends the moment you finish a reply, and nothing wakes it: no background notification, watcher, or timer will ever re-invoke you. Run long commands (test gates, builds) synchronously and wait for their result inside the tool call. Never end a reply with work still in flight or a promise to report later: whatever you were waiting for dies with the turn. Your final reply is the report of record, written only when the work is actually complete."
   ];
+  if (gitDetected) {
+    lines.push(
+      "",
+      "# Finishing work in Git",
+      "",
+      "This folder is positively detected as a Git repository. Use installed `git` for local source control and, when the remote is GitHub, installed `gh` for pull requests, checks, and merges.",
+      "",
+      "Before editing, inspect the repository and call `list_tasks` to check whether another live Task overlaps this work. Never disturb another Task\u2019s checkout; use an isolated branch and worktree when work may be concurrent.",
+      "",
+      "Unless the human explicitly asked you to stop for review before merging, Git work is not complete merely because files, a branch, or a pull request exist. Update from the latest default branch, resolve ordinary conflicts yourself, run the relevant validation, commit, push, open or update the pull request when the repository uses them, wait for required checks, merge it, and verify the merged state. Clean up temporary worktrees after integration. Do not strand finished work on an unmerged branch.",
+      "",
+      "If repository policy, unavailable authority, an ambiguous product decision, or a conflict you cannot safely resolve prevents completion, use `ask_user` with the exact blocker and required decision. Do not report the Task as done while integration is still pending."
+    );
+  }
   if (siblings.length > 0) {
     const siblingData = promptDescriptiveJson(
       siblings.slice(0, 100).map((sibling) => ({
@@ -34297,7 +34375,8 @@ var claudeCodeAdapter = {
       input.mcp,
       input.preparedWorkspace,
       input.taskRoot,
-      input.cwd
+      input.cwd,
+      input.gitDetected
     );
     const sessionId = input.task.spec.sessionKey ?? randomUUID11();
     const observeRuntime = createRuntimeReporter(input, sessionId);
@@ -34348,7 +34427,7 @@ function delay2(ms) {
     timer.unref?.();
   });
 }
-async function buildArgs(task, runner, artifacts, mcp, preparedWorkspace, taskRoot, workspacePath = taskRoot ?? "") {
+async function buildArgs(task, runner, artifacts, mcp, preparedWorkspace, taskRoot, workspacePath = taskRoot ?? "", gitDetected = false) {
   const args = [
     // Hermetic, non-interactive run — no local slash commands or global state.
     "--disable-slash-commands",
@@ -34368,7 +34447,7 @@ async function buildArgs(task, runner, artifacts, mcp, preparedWorkspace, taskRo
     trustedWorkspaceSystemPrompt(task.spec.system, preparedWorkspace, taskRoot),
     workspacePath,
     task.siblingTasks(),
-    preparedWorkspace !== null
+    gitDetected
   );
   if (systemPrompt) {
     const promptPath = await artifacts.writeSystemPrompt(systemPrompt);
@@ -34622,7 +34701,7 @@ function createCodexAdapter(threadIndexRoot) {
         trustedWorkspaceSystemPrompt(task.spec.system, input.preparedWorkspace, input.taskRoot),
         input.cwd,
         task.siblingTasks(),
-        input.preparedWorkspace !== null
+        input.gitDetected
       );
       const prompt = platformInstructions ? `<zixt_platform_instructions>
 ${platformInstructions}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.12",
+  "version": "0.0.14",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",