browsentic 0.6.0 → 0.6.2

package/dist/cli.js

@@ -30079,7 +30079,7 @@ var AGENTS = {
     bin: "codex",
     install: "npm i -g @openai/codex",
     docs: "https://developers.openai.com/codex/cli",
-    models: ["gpt-5.6-terra", "gpt-5.1-codex-max", "gpt-5.1-codex", "gpt-5.1-codex-mini"]
+    models: ["gpt-5.6-terra", "gpt-5.6-luna", "gpt-5.5"]
   },
   antigravity: {
     kind: "antigravity",
@@ -30721,12 +30721,12 @@ var ownTool = (name) => /browsentic|^mcp/i.test(name);
 import { randomUUID as randomUUID3 } from "crypto";
 import { homedir as homedir4 } from "os";
 import { join as join7 } from "path";
-var SANDBOX = ["--sandbox", "read-only", "--ask-for-approval", "never", "--skip-git-repo-check"];
+var SANDBOX = ["-c", 'sandbox_mode="read-only"', "-c", 'approval_policy="never"', "--skip-git-repo-check"];
 var WEB_TOOL = "web_search";
 var codexRunner = {
   kind: "codex",
   versionArgs: ["--version"],
-  efforts: ["minimal", "low", "medium", "high"],
+  efforts: ["low", "medium", "high", "xhigh"],
   workspace: () => stateDir,
   skillDirs: () => [join7(homedir4(), ".codex", "skills"), join7(homedir4(), ".codex", "prompts")],
   stream(context) {
@@ -30749,6 +30749,9 @@ var codexRunner = {
         `${server}.env=${tomlTable(mcp.env)}`,
         "-c",
         `${server}.required=true`,
+        // Headless Codex refuses an MCP call it would have asked about; the daemon gates these tools itself.
+        "-c",
+        `${server}.default_tools_approval_mode="approve"`,
         "-c",
         `developer_instructions=${tomlString(context.systemPrompt)}`,
         "-c",
@@ -30801,7 +30804,7 @@ var codexRunner = {
           case "task_complete":
             return sink.done("end_turn");
           case "error":
-            return sink.fail("AGENT_FAILED", msg.error || msg.message || "Codex reported an error");
+            return sink.fail("AGENT_FAILED", explain(msg.error || msg.message) || "Codex reported an error");
           default:
             return;
         }
@@ -30832,9 +30835,9 @@ var codexRunner = {
           return sink.done("end_turn");
         }
         case "turn.failed":
-          return sink.fail("AGENT_FAILED", frame.error?.message || "Codex could not finish the turn");
+          return sink.fail("AGENT_FAILED", explain(frame.error?.message) || "Codex could not finish the turn");
         case "error":
-          return sink.fail("AGENT_FAILED", frame.message || frame.error?.message || "Codex reported an error");
+          return sink.fail("AGENT_FAILED", explain(frame.message || frame.error?.message) || "Codex reported an error");
         default:
           return;
       }
@@ -30890,6 +30893,11 @@ var codexRunner = {
     return null;
   }
 };
+function explain(raw) {
+  if (!raw) return raw;
+  const message = parseJsonLine(raw)?.error?.message ?? raw;
+  return /model .*(not supported|does not exist|not found)/i.test(message) ? `${message} Pick another model for Codex in the Browsentic popup, then try again.` : message;
+}
 function kindOf(item) {
   return item?.type ?? item?.item_type;
 }
@@ -31629,19 +31637,13 @@ var CONTAINMENT = {
     keepsEnv: ["OPENAI_", "CODEX_", "AZURE_OPENAI_"],
     note: "no per-run tool list; the read-only sandbox is the whole containment, so the agent can still read any file the user can",
     run: {
-      required: [],
-      pairs: [
-        ["--sandbox", "read-only"],
-        ["--ask-for-approval", "never"]
-      ],
+      required: ['sandbox_mode="read-only"', 'approval_policy="never"'],
+      pairs: [],
       files: []
     },
     task: {
-      required: ["mcp_servers={}"],
-      pairs: [
-        ["--sandbox", "read-only"],
-        ["--ask-for-approval", "never"]
-      ],
+      required: ['sandbox_mode="read-only"', 'approval_policy="never"', "mcp_servers={}"],
+      pairs: [],
       files: []
     }
   },
@@ -34270,7 +34272,7 @@ function purgeNpxCache(entries) {
 // package.json
 var package_default = {
   name: "browsentic",
-  version: "0.6.0",
+  version: "0.6.2",
   description: "A browser extension with an AI side panel that hands your real, logged-in browser to the AI agent you already run. Installs the extension, runs the local daemon, and optionally speaks MCP.",
   type: "module",
   license: "MIT",

package/dist/daemon-main.js

@@ -21685,7 +21685,7 @@ var AGENTS = {
     bin: "codex",
     install: "npm i -g @openai/codex",
     docs: "https://developers.openai.com/codex/cli",
-    models: ["gpt-5.6-terra", "gpt-5.1-codex-max", "gpt-5.1-codex", "gpt-5.1-codex-mini"]
+    models: ["gpt-5.6-terra", "gpt-5.6-luna", "gpt-5.5"]
   },
   antigravity: {
     kind: "antigravity",
@@ -23092,6 +23092,8 @@ var FORBIDDEN = [
   /^--allow-all/i,
   /danger-full-access/i,
   /^--sandbox=?(workspace-write|danger-full-access)$/i,
+  /^sandbox_mode=(?!"read-only"$)/i,
+  /^approval_policy=(?!"never"$)/i,
   /^--permission-mode=?(bypassPermissions|acceptEdits)$/i
 ];
 var NEVER2 = ["Bash", "Edit", "Write", "NotebookEdit", "Glob", "Grep", "Task"];
@@ -23126,19 +23128,13 @@ var CONTAINMENT = {
     keepsEnv: ["OPENAI_", "CODEX_", "AZURE_OPENAI_"],
     note: "no per-run tool list; the read-only sandbox is the whole containment, so the agent can still read any file the user can",
     run: {
-      required: [],
-      pairs: [
-        ["--sandbox", "read-only"],
-        ["--ask-for-approval", "never"]
-      ],
+      required: ['sandbox_mode="read-only"', 'approval_policy="never"'],
+      pairs: [],
       files: []
     },
     task: {
-      required: ["mcp_servers={}"],
-      pairs: [
-        ["--sandbox", "read-only"],
-        ["--ask-for-approval", "never"]
-      ],
+      required: ['sandbox_mode="read-only"', 'approval_policy="never"', "mcp_servers={}"],
+      pairs: [],
       files: []
     }
   },
@@ -24194,12 +24190,12 @@ var ownTool = (name) => /browsentic|^mcp/i.test(name);
 import { randomUUID as randomUUID4 } from "crypto";
 import { homedir as homedir7 } from "os";
 import { join as join12 } from "path";
-var SANDBOX = ["--sandbox", "read-only", "--ask-for-approval", "never", "--skip-git-repo-check"];
+var SANDBOX = ["-c", 'sandbox_mode="read-only"', "-c", 'approval_policy="never"', "--skip-git-repo-check"];
 var WEB_TOOL = "web_search";
 var codexRunner = {
   kind: "codex",
   versionArgs: ["--version"],
-  efforts: ["minimal", "low", "medium", "high"],
+  efforts: ["low", "medium", "high", "xhigh"],
   workspace: () => stateDir,
   skillDirs: () => [join12(homedir7(), ".codex", "skills"), join12(homedir7(), ".codex", "prompts")],
   stream(context) {
@@ -24222,6 +24218,9 @@ var codexRunner = {
         `${server}.env=${tomlTable(mcp.env)}`,
         "-c",
         `${server}.required=true`,
+        // Headless Codex refuses an MCP call it would have asked about; the daemon gates these tools itself.
+        "-c",
+        `${server}.default_tools_approval_mode="approve"`,
         "-c",
         `developer_instructions=${tomlString(context.systemPrompt)}`,
         "-c",
@@ -24274,7 +24273,7 @@ var codexRunner = {
           case "task_complete":
             return sink.done("end_turn");
           case "error":
-            return sink.fail("AGENT_FAILED", msg.error || msg.message || "Codex reported an error");
+            return sink.fail("AGENT_FAILED", explain(msg.error || msg.message) || "Codex reported an error");
           default:
             return;
         }
@@ -24305,9 +24304,9 @@ var codexRunner = {
           return sink.done("end_turn");
         }
         case "turn.failed":
-          return sink.fail("AGENT_FAILED", frame.error?.message || "Codex could not finish the turn");
+          return sink.fail("AGENT_FAILED", explain(frame.error?.message) || "Codex could not finish the turn");
         case "error":
-          return sink.fail("AGENT_FAILED", frame.message || frame.error?.message || "Codex reported an error");
+          return sink.fail("AGENT_FAILED", explain(frame.message || frame.error?.message) || "Codex reported an error");
         default:
           return;
       }
@@ -24363,6 +24362,11 @@ var codexRunner = {
     return null;
   }
 };
+function explain(raw) {
+  if (!raw) return raw;
+  const message = parseJsonLine(raw)?.error?.message ?? raw;
+  return /model .*(not supported|does not exist|not found)/i.test(message) ? `${message} Pick another model for Codex in the Browsentic popup, then try again.` : message;
+}
 function kindOf(item) {
   return item?.type ?? item?.item_type;
 }
@@ -27244,7 +27248,7 @@ X-Browsentic-Reason: ${reason}\r
 // package.json
 var package_default = {
   name: "browsentic",
-  version: "0.6.0",
+  version: "0.6.2",
   description: "A browser extension with an AI side panel that hands your real, logged-in browser to the AI agent you already run. Installs the extension, runs the local daemon, and optionally speaks MCP.",
   type: "module",
   license: "MIT",