bit-office 0.1.7 → 0.1.9

package/dist/index.js

@@ -4287,7 +4287,8 @@ function buildConfig() {
     webDir: resolveWebDir(),
     telegramBotTokens: process.env.TELEGRAM_BOT_TOKENS ? process.env.TELEGRAM_BOT_TOKENS.split(",").map((t) => t.trim() || void 0) : (saved.telegramBotTokens ?? []).map((t) => t || void 0),
     detectedBackends: saved.detectedBackends ?? [],
-    defaultBackend: saved.defaultBackend ?? "claude"
+    defaultBackend: saved.defaultBackend ?? "claude",
+    sandboxMode: saved.sandboxMode ?? "full"
   };
 }
 var config = buildConfig();
@@ -4331,7 +4332,7 @@ var wsChannel = {
   async init(commandHandler) {
     onCommand = commandHandler;
     return new Promise((resolve2) => {
-      const httpServer = createServer(async (req, res) => {
+      const requestHandler = async (req, res) => {
         res.setHeader("Access-Control-Allow-Origin", "*");
         res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
         res.setHeader("Access-Control-Allow-Headers", "Content-Type");
@@ -4423,10 +4424,11 @@ var wsChannel = {
           return;
         }
         await serveStatic(req, res);
-      });
+      };
       const maxRetries = 10;
       let port = config.wsPort;
       const tryListen = () => {
+        const httpServer = createServer(requestHandler);
         httpServer.listen(port, () => {
           config.wsPort = port;
           wss = new WebSocketServer({ server: httpServer });
@@ -4455,7 +4457,6 @@ var wsChannel = {
             const oldPort = port;
             port++;
             console.log(`[WS] Port ${oldPort} in use, trying ${port}...`);
-            httpServer.close();
             tryListen();
           } else {
             console.error(`[WS] Failed to start server:`, err.message);
@@ -4588,7 +4589,10 @@ var backends = [
     id: "codex",
     name: "Codex CLI",
     command: "codex",
-    buildArgs(prompt) {
+    buildArgs(prompt, opts) {
+      if (opts.fullAccess) {
+        return ["exec", prompt, "--dangerously-bypass-approvals-and-sandbox"];
+      }
       return ["exec", prompt, "--full-auto"];
     }
   },
@@ -4669,7 +4673,7 @@ var AgentSession = class {
         type: "TASK_FAILED",
         agentId: this.agentId,
         taskId,
-        error: "Agent is already running a task"
+        error: "Agent is working hard, please wait..."
       });
       return;
     }
@@ -4695,7 +4699,8 @@ var AgentSession = class {
 ` : "";
       const delegationHint = "To delegate a task to another agent, output on its own line: @AgentName: <task description>\n\n";
       const identityPrompt = `Your name is ${this.name}, your role is ${this.role}. ${personalityClause}${delegationHint}${prompt}`;
-      const args = this.backend.buildArgs(identityPrompt, { continue: this.hasHistory });
+      const fullAccess = config.sandboxMode === "full";
+      const args = this.backend.buildArgs(identityPrompt, { continue: this.hasHistory, fullAccess });
       this.process = spawn(this.backend.command, args, {
         cwd,
         env: cleanEnv,
@@ -5069,7 +5074,7 @@ async function runSetup() {
   const detectedNames = detected.map((id) => getBackend(id)?.name ?? id).join(", ");
   console.log(`[Setup] Found: ${detectedNames || "none"}`);
   if (!process.stdin.isTTY) {
-    saveConfig({ detectedBackends: detected, defaultBackend: detected[0] ?? "claude" });
+    saveConfig({ detectedBackends: detected, defaultBackend: detected[0] ?? "claude", sandboxMode: "full" });
     console.log("\u2713 Default config saved to ~/.bit-office/config.json");
     console.log("  Run with --setup in a terminal to configure.\n");
     return;
@@ -5099,15 +5104,22 @@ async function runSetup() {
       defaultBackend = detected[idx];
     }
   }
+  console.log("\n\u2500\u2500 Agent Permissions \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  console.log("1 = Full access (agents can access entire machine)");
+  console.log("2 = Sandbox (agents restricted to working directory)");
+  const sandboxPick = await ask(rl, "Permission mode (1/2, default=1): ");
+  const sandboxMode = sandboxPick === "2" ? "safe" : "full";
   rl.close();
   saveConfig({
     ablyApiKey: ablyApiKey || void 0,
     detectedBackends: detected,
-    defaultBackend
+    defaultBackend,
+    sandboxMode
   });
   console.log("\n\u2713 Config saved to ~/.bit-office/config.json");
   if (ablyApiKey) console.log("  \u2022 Ably: enabled");
   console.log(`  \u2022 Default AI: ${getBackend(defaultBackend)?.name ?? defaultBackend}`);
+  console.log(`  \u2022 Permissions: ${sandboxMode === "full" ? "Full access" : "Sandbox"}`);
   console.log("  \u2022 Run with --setup to reconfigure\n");
 }
 
@@ -5270,6 +5282,7 @@ async function main() {
   }
   const backendNames = config.detectedBackends.map((id) => getBackend(id)?.name ?? id).join(", ");
   console.log(`[Gateway] AI backends: ${backendNames || "none detected"} (default: ${getBackend(config.defaultBackend)?.name ?? config.defaultBackend})`);
+  console.log(`[Gateway] Permissions: ${config.sandboxMode === "full" ? "Full access" : "Sandbox"}`);
   console.log(`[Gateway] Starting for machine: ${config.machineId}`);
   showPairCode();
   await initTransports(handleCommand);