autodev-cli 1.4.202 → 1.4.204

package/out/taskLoop.js

@@ -841,6 +841,7 @@ class TaskLoopRunner {
             this._webhookPoller.setOnCommand((cmd) => this._handleCommand(cmd));
             this._webhookPoller.setOnMcpUpdate((entries) => this._handleMcpUpdate(entries));
             this._webhookPoller.setOnSkillUpdate((skills) => this._handleSkillUpdate(skills));
+            this._webhookPoller.setOnSettingsUpdate((s) => this._handleSettingsUpdate(s));
             this._webhookPoller.setOnExportRequest((agentId) => void this._handleExportRequest(agentId));
             this._webhookPoller.setOnRestoreRequest((agentId, downloadUrl) => void this._handleRestoreRequest(agentId, downloadUrl));
             this._webhookPoller.setOnExportConfig((exportEnabled, exportDailyBackup, agentId) => this._handleExportConfig(exportEnabled, exportDailyBackup, agentId));
@@ -1102,6 +1103,43 @@ class TaskLoopRunner {
             this._cb?.log(`⚠️ skill update failed: ${err instanceof Error ? err.message : String(err)}`);
         }
     }
+    /**
+     * Handle settings_update pushed from pixel-office: live-flip the opt-in gates
+     * that control mcp_update / skill_update, so the office can enable them
+     * WITHOUT the user hand-editing .autodev/settings.json or restarting the loop.
+     *
+     * SECURITY — this frame is intentionally NOT gated by any opt-in setting: it
+     * IS the mechanism that flips those opt-ins on. Its trust boundary is the
+     * authenticated office WS channel — the very same channel that already
+     * delivers mcp_update, tasks and steering to this agent. A STRICT whitelist
+     * (whitelistRemoteSettingsUpdate) means a frame can only ever set the two
+     * booleans { mcpUpdateEnabled, skillUpdateEnabled } — never arbitrary
+     * settings such as serverApiKey, provider, wsUrl or filesystem paths.
+     */
+    _handleSettingsUpdate(settings) {
+        const root = this._workspaceRoot;
+        if (!root)
+            return;
+        try {
+            const whitelisted = (0, settingsLoader_1.whitelistRemoteSettingsUpdate)(settings);
+            if (Object.keys(whitelisted).length === 0) {
+                this._cb?.log('⚙ settings_update ignored — no recognized keys (only mcpUpdateEnabled/skillUpdateEnabled are accepted)');
+                return;
+            }
+            // Persist so the flip survives a restart…
+            (0, settingsLoader_1.mergeSettingsForRoot)(root, whitelisted);
+            // …and apply live so a subsequent mcp_update/skill_update frame is honored
+            // immediately, with no restart. Only the whitelisted keys are copied.
+            if (this._settings) {
+                Object.assign(this._settings, whitelisted);
+            }
+            const parts = Object.entries(whitelisted).map(([k, v]) => `${k}=${v}`).join(', ');
+            this._cb?.log(`⚙ settings_update applied: ${parts}`);
+        }
+        catch (err) {
+            this._cb?.log(`⚠️ settings_update failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
     /** Handle export_request from pixel-office: create backup zip and upload. */
     async _handleExportRequest(agentId) {
         const root = this._workspaceRoot;
@@ -1384,10 +1422,15 @@ class TaskLoopRunner {
                 return;
             }
         }
-        // Persistent-process grok (ACP `grok agent stdio`, grok-cli AND grok-tui):
-        // a mid-run steer is a QUEUED session/prompt delivered to the LIVE process —
-        // it never exits, so the steer reaches the same long-lived agent.
-        if (root && turnInFlight && (provider === 'grok-cli' || provider === 'grok-tui') && (0, grokTuiProvider_1.isGrokAcpBusy)(root)) {
+        // Persistent-process grok (ACP `grok agent stdio`): grok-acp directly, plus
+        // grok-cli/grok-tui when routed over the persistent ACP session. A mid-run
+        // steer is a QUEUED session/prompt delivered to the LIVE process — it never
+        // exits, so the steer reaches the same long-lived agent IMMEDIATELY instead
+        // of being buffered to the turn boundary below. (grok-acp — the explicit
+        // provider added after this branch was first written — was omitted from the
+        // literal grok-cli/grok-tui check, so its steers wrongly fell through to the
+        // boundary buffer; usesGrokAcpSession() covers all three uniformly.)
+        if (root && turnInFlight && usesGrokAcpSession(provider, root) && (0, grokTuiProvider_1.isGrokAcpBusy)(root)) {
             if ((0, grokTuiProvider_1.steerGrokAcp)(root, clean, msg => this._cb?.log(msg))) {
                 this._cb?.log(`⚡ Steered mid-turn (grok ACP): "${clean.slice(0, 80)}"`);
                 onDelivered?.();