bit-office 0.1.8 → 0.2.0

package/dist/index.js

@@ -4287,7 +4287,8 @@ function buildConfig() {
     webDir: resolveWebDir(),
     telegramBotTokens: process.env.TELEGRAM_BOT_TOKENS ? process.env.TELEGRAM_BOT_TOKENS.split(",").map((t) => t.trim() || void 0) : (saved.telegramBotTokens ?? []).map((t) => t || void 0),
     detectedBackends: saved.detectedBackends ?? [],
-    defaultBackend: saved.defaultBackend ?? "claude"
+    defaultBackend: saved.defaultBackend ?? "claude",
+    sandboxMode: saved.sandboxMode ?? "full"
   };
 }
 var config = buildConfig();
@@ -4588,8 +4589,11 @@ var backends = [
     id: "codex",
     name: "Codex CLI",
     command: "codex",
-    buildArgs(prompt) {
-      return ["exec", prompt, "--full-auto"];
+    buildArgs(prompt, opts) {
+      if (opts.fullAccess) {
+        return ["exec", prompt, "--dangerously-bypass-approvals-and-sandbox", "--skip-git-repo-check"];
+      }
+      return ["exec", prompt, "--full-auto", "--skip-git-repo-check"];
     }
   },
   {
@@ -4605,7 +4609,7 @@ var backends = [
     name: "Aider",
     command: "aider",
     buildArgs(prompt) {
-      return ["--message", prompt, "--yes", "--no-pretty"];
+      return ["--message", prompt, "--yes", "--no-pretty", "--no-git"];
     }
   },
   {
@@ -4669,7 +4673,7 @@ var AgentSession = class {
         type: "TASK_FAILED",
         agentId: this.agentId,
         taskId,
-        error: "Agent is already running a task"
+        error: "Agent is working hard, please wait..."
       });
       return;
     }
@@ -4695,7 +4699,8 @@ var AgentSession = class {
 ` : "";
       const delegationHint = "To delegate a task to another agent, output on its own line: @AgentName: <task description>\n\n";
       const identityPrompt = `Your name is ${this.name}, your role is ${this.role}. ${personalityClause}${delegationHint}${prompt}`;
-      const args = this.backend.buildArgs(identityPrompt, { continue: this.hasHistory });
+      const fullAccess = config.sandboxMode === "full";
+      const args = this.backend.buildArgs(identityPrompt, { continue: this.hasHistory, fullAccess });
       this.process = spawn(this.backend.command, args, {
         cwd,
         env: cleanEnv,
@@ -5069,7 +5074,7 @@ async function runSetup() {
   const detectedNames = detected.map((id) => getBackend(id)?.name ?? id).join(", ");
   console.log(`[Setup] Found: ${detectedNames || "none"}`);
   if (!process.stdin.isTTY) {
-    saveConfig({ detectedBackends: detected, defaultBackend: detected[0] ?? "claude" });
+    saveConfig({ detectedBackends: detected, defaultBackend: detected[0] ?? "claude", sandboxMode: "full" });
     console.log("\u2713 Default config saved to ~/.bit-office/config.json");
     console.log("  Run with --setup in a terminal to configure.\n");
     return;
@@ -5099,15 +5104,22 @@ async function runSetup() {
       defaultBackend = detected[idx];
     }
   }
+  console.log("\n\u2500\u2500 Agent Permissions \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500");
+  console.log("1 = Full access (agents can access entire machine)");
+  console.log("2 = Sandbox (agents restricted to working directory)");
+  const sandboxPick = await ask(rl, "Permission mode (1/2, default=1): ");
+  const sandboxMode = sandboxPick === "2" ? "safe" : "full";
   rl.close();
   saveConfig({
     ablyApiKey: ablyApiKey || void 0,
     detectedBackends: detected,
-    defaultBackend
+    defaultBackend,
+    sandboxMode
   });
   console.log("\n\u2713 Config saved to ~/.bit-office/config.json");
   if (ablyApiKey) console.log("  \u2022 Ably: enabled");
   console.log(`  \u2022 Default AI: ${getBackend(defaultBackend)?.name ?? defaultBackend}`);
+  console.log(`  \u2022 Permissions: ${sandboxMode === "full" ? "Full access" : "Sandbox"}`);
   console.log("  \u2022 Run with --setup to reconfigure\n");
 }
 
@@ -5270,6 +5282,7 @@ async function main() {
   }
   const backendNames = config.detectedBackends.map((id) => getBackend(id)?.name ?? id).join(", ");
   console.log(`[Gateway] AI backends: ${backendNames || "none detected"} (default: ${getBackend(config.defaultBackend)?.name ?? config.defaultBackend})`);
+  console.log(`[Gateway] Permissions: ${config.sandboxMode === "full" ? "Full access" : "Sandbox"}`);
   console.log(`[Gateway] Starting for machine: ${config.machineId}`);
   showPairCode();
   await initTransports(handleCommand);