daily-focus 1.1.1-dev.3 → 1.2.0-dev.4

package/README.md

@@ -131,11 +131,13 @@ notes live too; the reply streams in there, and you can follow up in the same
 conversation. The panel stays on the item it was opened for while you move through
 the list.
 
-It reads and drafts, and that is all. An email reply is created as a Gmail draft on
-the thread, so it is waiting there when you open the mail; a reply to a reviewer is
-handed back as text for you to post. It never sends, posts, or edits a file, and it
-has no checkout: fixing conflicts or a build is work for a real coding session, and
-this is for the questions you would otherwise answer by opening six tabs.
+It is told to read and draft, and nothing more. An email reply is created as a Gmail
+draft on the thread, so it is waiting there when you open the mail; a reply to a
+reviewer is handed back as text for you to post. It is told never to send, post, or
+edit a file, and it has no checkout: fixing conflicts or a build is work for a real
+coding session, and this is for the questions you would otherwise answer by opening
+six tabs. How much of that the CLI itself enforces differs between Claude Code and
+Codex; see [What the assistant can do](SETUP.md#what-the-assistant-can-do).
 
 ## The morning agent
 

package/SETUP.md

@@ -126,14 +126,23 @@ it finishes, and a chat where you can ask it why it did what it did. See
 The agent reaches your sources the way the CLI does:
 
 - **Codex** runs in its workspace-write sandbox with network access, confined to the
-  store. Connectors from the Codex app are found through its plugin catalogue. There
-  is nobody to approve a command outside the sandbox, so the agent reports that
-  restriction for any `gh` command that needs it, such as switching accounts.
+  store. Connectors from the Codex app are found through its plugin catalogue, and
+  every write through one is refused: a connector tool counts as a write unless it
+  is marked read-only. A command that needs to leave the sandbox, such as `gh`
+  switching accounts, is decided by your own Codex approval settings, as it would be
+  in your Codex. With nobody set to approve, the agent reports that restriction; with
+  Codex's automatic reviewer, the reviewer decides. The dashboard won't start a run
+  on a Codex older than 0.144.0, which would ignore the refusal of connector writes;
+  update Codex if a run fails saying so.
 - **Claude Code** may write `items.json` and nothing else in the store, and reach
   its sources with only what `DAILY_FOCUS_AGENT_TOOLS` allows. The default covers
   GitHub, Jira, web pages and the claude.ai Gmail connector. Add your calendar, chat
   and document connectors to the list by name, or the brief will report them as
-  unreachable.
+  unreachable. The default allows every Gmail tool, sending included, and `gh` and
+  `acli` can write as well as read; the agent's instructions forbid changing
+  anything. To narrow Gmail to reading, name its tools instead of the connector, as
+  [What the assistant can do](#what-the-assistant-can-do) shows, without the two
+  draft tools.
 
 Set `DAILY_FOCUS_AGENT_MODEL` and `DAILY_FOCUS_AGENT_EFFORT` if the CLI's own
 defaults are not what you want for a brief; a brief is worth a high effort. If the
@@ -277,14 +286,53 @@ the CLI is configured with; `DAILY_FOCUS_ASSISTANT_MODEL` and
 `DAILY_FOCUS_ASSISTANT_EFFORT` override them. If the server can't find the CLI,
 set `DAILY_FOCUS_ASSISTANT_BIN` to its path.
 
-The assistant reads and drafts; it never sends, posts or edits anything, and it has
-no checkout to work in. That is deliberate. Fixing merge conflicts or a failing build
-belongs in a real coding session; this panel is for the questions you'd otherwise
-answer by opening six tabs. The Gmail draft is the one thing it creates, through the
-Gmail tool the CLI has: with Claude Code that is the claude.ai Gmail connector, which
-`DAILY_FOCUS_ASSISTANT_TOOLS` allows by default; with Codex it is the Gmail plugin
-from the Codex app, which the CLI finds through its plugin catalogue. Without either,
-the assistant hands you the text instead and says so.
+The assistant is told to read and draft, and never to send, post or edit anything,
+and it has no checkout to work in. That is deliberate. Fixing merge conflicts or a
+failing build belongs in a real coding session; this panel is for the questions you'd
+otherwise answer by opening six tabs. The Gmail draft is the one thing it creates,
+and revises when you ask, through the Gmail tool the CLI has: with Claude Code that
+is the claude.ai Gmail connector, which `DAILY_FOCUS_ASSISTANT_TOOLS` allows by
+default; with Codex it is the Gmail app linked to your ChatGPT account, which the CLI
+finds through its plugin catalogue. Without either, the assistant hands you the text
+instead and says so.
+
+### What the assistant can do
+
+The assistant runs the CLI you already use, with the access that CLI already has.
+The dashboard narrows some of that, and leaves the rest to the assistant's
+instructions. What the CLI itself enforces:
+
+- **Claude Code** may use only the tools in `DAILY_FOCUS_ASSISTANT_TOOLS`, and never
+  its file-editing tools, whatever the list says; anything else is refused rather
+  than asked about. Rules in your own Claude Code settings that allow a tool still
+  apply. The default list is broader than the assistant needs:
+  `mcp__claude_ai_Gmail` allows every tool on the Gmail connector, sending and
+  deleting included, and `gh` and `acli` can comment, merge and move tickets as well
+  as read. Only the instructions keep it from doing those. To hold it to reading
+  mail and drafting replies, name the Gmail tools instead of the connector:
+
+  ```dotenv
+  DAILY_FOCUS_ASSISTANT_TOOLS=Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail__search_threads,mcp__claude_ai_Gmail__get_thread,mcp__claude_ai_Gmail__get_message,mcp__claude_ai_Gmail__list_labels,mcp__claude_ai_Gmail__list_drafts,mcp__claude_ai_Gmail__get_draft,mcp__claude_ai_Gmail__create_draft,mcp__claude_ai_Gmail__update_draft
+  ```
+
+  A tool left off the list is refused, so if the connector renames one, the
+  assistant reports that it can't reach your mail rather than working around it.
+- **Codex** refuses every write through a connector (Gmail, Calendar, Drive, GitHub
+  and the other apps your ChatGPT account links) except creating and revising a
+  Gmail draft. A connector tool counts as a write unless it is marked read-only. A
+  tool you have told Codex to always allow, or an app given approval settings of its
+  own in your Codex config, keeps them. Computer use, the plugins that act in your
+  apps and browser with your sign-ins, is off unless you turn on
+  `DAILY_FOCUS_ASSISTANT_COMPUTER_USE`; the dashboard checks with Codex that it is
+  off before each session, and refuses to start one it can't confirm. Shell
+  commands follow your own Codex config: the sandbox keeps writes in the
+  assistant's working directory, and a command that needs to leave it is decided
+  by your Codex approval settings, as it would be in your own Codex. That keeps
+  `gh` working, and means it can write. All of this needs Codex 0.149.0 or
+  newer, and the page warns when yours is older. Before 0.144.0 Codex silently
+  ignores the refusal of connector writes, so the dashboard won't start the
+  assistant or the morning agent on it at all; before 0.149.0 it can't switch
+  computer use off, so the assistant won't answer while that setting is off.
 
 Its instructions live in `prompts/assistant.md`, linked into the store as
 `assistant.md` each time the dashboard starts. What it says stays in the chat in the panel: it
@@ -493,13 +541,14 @@ matters when `DAILY_FOCUS_FREE_WINDOWS` is off.
 | `DAILY_FOCUS_ASSISTANT_BIN` | *the CLI's name* | Path to the assistant's CLI, for when the server's PATH lacks it. `~` is expanded |
 | `DAILY_FOCUS_ASSISTANT_MODEL` | *the CLI's own* | Model passed to the CLI untouched: an alias like `opus`, or a full id. Unset passes no flag |
 | `DAILY_FOCUS_ASSISTANT_EFFORT` | *the CLI's own* | Effort passed to the CLI untouched: `low`, `medium`, `high`, `xhigh` or `max`. Unset passes no flag |
-| `DAILY_FOCUS_ASSISTANT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use without asking, in its permission syntax, comma-separated. Editing tools are denied regardless. Ignored by Codex |
+| `DAILY_FOCUS_ASSISTANT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use without asking, in its permission syntax, comma-separated. Editing tools are denied regardless. The default allows every Gmail tool, sending included; see [What the assistant can do](#what-the-assistant-can-do) to narrow it. Ignored by Codex |
+| `DAILY_FOCUS_ASSISTANT_COMPUTER_USE` | `off` | `on` lets the assistant use Codex's computer-use and browser plugins, which act in your apps and browser with your sign-ins. `off` switches them off for its runs. Ignored by Claude Code, which uses only the tools in its list |
 | `DAILY_FOCUS_AGENT` | `off` | `codex` or `claude` lets the dashboard run the morning agent through that CLI: each scheduled morning, and from the refresh icon beside the brief's age. `off` hides it |
 | `DAILY_FOCUS_AGENT_AT` | `07:00` | Local time, `HH:MM`, at which the dashboard starts the agent on each scheduled day, or as soon as it is running after that. `off` means it never starts one on its own; the refresh icon still does. Needs `DAILY_FOCUS_AGENT` |
 | `DAILY_FOCUS_AGENT_BIN` | *the CLI's name* | Path to that CLI, for when the server's PATH lacks it. `~` is expanded |
 | `DAILY_FOCUS_AGENT_MODEL` | *the CLI's own* | Model passed to the CLI untouched. Unset passes no flag |
 | `DAILY_FOCUS_AGENT_EFFORT` | *the CLI's own* | Effort passed to the CLI untouched. Unset passes no flag |
-| `DAILY_FOCUS_AGENT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use to reach your sources, in its permission syntax, comma-separated. Writing `items.json`, and nothing else in the store, is allowed regardless. Ignored by Codex |
+| `DAILY_FOCUS_AGENT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use to reach your sources, in its permission syntax, comma-separated. Writing `items.json`, and nothing else in the store, is allowed regardless. The default allows every Gmail tool, sending included. Ignored by Codex |
 
 ## If something looks wrong
 

package/dist/{audit-B5GKGH2P.js → audit-ITRXIX6T.js}

@@ -1,7 +1,7 @@
 import {
   readSystemZone,
   startingZone
-} from "./chunk-AUBJ2IDQ.js";
+} from "./chunk-AIQO2YAI.js";
 import {
   linkState
 } from "./chunk-QKT2FAB5.js";
@@ -12,7 +12,7 @@ import {
   readArchiveIndex,
   resolveItems,
   runContractChecks
-} from "./chunk-C6FXWHGT.js";
+} from "./chunk-26JG3D5C.js";
 import {
   BRIEF_REFRESH_GRACE_HOURS,
   describeSchedule,
@@ -22,7 +22,7 @@ import {
   resolveSchedule,
   runsOn,
   workingMsBetween
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 import {
   command
 } from "./chunk-BC2W7NND.js";

package/dist/{chunk-C6FXWHGT.js → chunk-26JG3D5C.js}

@@ -14,7 +14,7 @@ import {
   startOfLocalDay,
   workingDaysSince,
   workingMsBetween
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 
 // src/fs.ts
 import { mkdir, rename, writeFile } from "node:fs/promises";

package/dist/{chunk-AUBJ2IDQ.js → chunk-AIQO2YAI.js}

@@ -1,9 +1,9 @@
 import {
   writeJsonAtomic
-} from "./chunk-C6FXWHGT.js";
+} from "./chunk-26JG3D5C.js";
 import {
   localTimeZone
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 
 // src/zone.ts
 import { readFile, readlink } from "node:fs/promises";

package/dist/{chunk-NWYOCDUU.js → chunk-RNE27FQY.js}

@@ -353,7 +353,8 @@ function envAssistant(env) {
     binPath: expandHome((env.DAILY_FOCUS_ASSISTANT_BIN ?? "").trim() || (agent ?? "claude")),
     model: envString("DAILY_FOCUS_ASSISTANT_MODEL", "", env) || null,
     effort: envString("DAILY_FOCUS_ASSISTANT_EFFORT", "", env) || null,
-    tools: tools.length > 0 ? tools : DEFAULT_ASSISTANT_TOOLS
+    tools: tools.length > 0 ? tools : DEFAULT_ASSISTANT_TOOLS,
+    computerUse: envFlag("DAILY_FOCUS_ASSISTANT_COMPUTER_USE", false, env)
   };
 }
 var DEFAULT_ASSISTANT_TOOLS = ["Bash(gh *)", "Bash(acli *)", "WebFetch", "mcp__claude_ai_Gmail"];

package/dist/{chunk-GFCWPYEI.js → chunk-SX5FPS3A.js}

@@ -1,3 +1,105 @@
+// src/codex.ts
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+var GMAIL_CONNECTOR = "connector_2128aebfecb84f64a069897515042a44";
+var CONNECTOR_POLICY = [
+  'apps._default.default_tools_approval_mode="writes"',
+  'apps._default.approvals_reviewer="user"'
+];
+var GMAIL_DRAFTS = ["create_draft", "update_draft"].map(
+  (tool) => `apps.${GMAIL_CONNECTOR}.tools.${tool}.approval_mode="approve"`
+);
+var COMPUTER_USE_PLUGINS = [
+  "unified-computer-use@openai-bundled",
+  "computer-use@openai-bundled",
+  "browser@openai-bundled",
+  "chrome@openai-bundled"
+];
+var COMPUTER_USE_SERVERS = ["node_repl", "cua_repl", "computer-use"];
+var LIST_TIMEOUT_MS = 3e4;
+var exec = promisify(execFile);
+var defaultExec = async (file, args, { timeout }) => {
+  try {
+    const { stdout } = await exec(file, args, { timeout, maxBuffer: 16 * 1024 * 1024 });
+    return stdout;
+  } catch (err) {
+    const stderr = String(err.stderr ?? "").trim();
+    if (!stderr) throw err;
+    throw new Error(stderr.split("\n").slice(0, 2).join(" "));
+  }
+};
+function configArgs(overrides) {
+  return overrides.flatMap((override) => ["-c", override]);
+}
+async function enabledServers(bin, overrides, run) {
+  const output = await run(bin, ["mcp", "list", "--json", ...configArgs(overrides)], { timeout: LIST_TIMEOUT_MS });
+  let servers;
+  try {
+    servers = JSON.parse(output);
+  } catch {
+    throw new Error("codex mcp list --json printed something other than JSON");
+  }
+  if (!Array.isArray(servers)) throw new Error("codex mcp list --json printed something other than a list");
+  return servers.filter((server) => typeof server?.name === "string").filter((server) => server.enabled !== false).map((server) => server.name);
+}
+async function computerUseOff(bin, run = defaultExec) {
+  const overrides = COMPUTER_USE_PLUGINS.map((plugin) => `plugins.${plugin}.enabled=false`);
+  const left = (await enabledServers(bin, overrides, run)).filter((name) => COMPUTER_USE_SERVERS.includes(name));
+  if (left.length === 0) return overrides;
+  overrides.push(...left.map((name) => `mcp_servers.${name}.enabled=false`));
+  const still = (await enabledServers(bin, overrides, run)).filter((name) => COMPUTER_USE_SERVERS.includes(name));
+  if (still.length > 0) throw new Error(`Codex still starts ${still.join(", ")}`);
+  return overrides;
+}
+var CODEX_CONNECTOR_POLICY = "0.144.0";
+var CODEX_MINIMUM = "0.149.0";
+function versionParts(text) {
+  const match = /(\d+)\.(\d+)\.(\d+)/.exec(text);
+  return match ? match.slice(1, 4).map(Number) : null;
+}
+function olderThan(version, than) {
+  const a = versionParts(version);
+  const b = versionParts(than);
+  if (!a || !b) return false;
+  for (let i = 0; i < 3; i++) {
+    if (a[i] !== b[i]) return a[i] < b[i];
+  }
+  return false;
+}
+async function codexVersion(bin, run = defaultExec) {
+  try {
+    return versionParts(await run(bin, ["--version"], { timeout: LIST_TIMEOUT_MS }))?.join(".") ?? null;
+  } catch {
+    return null;
+  }
+}
+function refusalFor(version) {
+  if (!version || !olderThan(version, CODEX_CONNECTOR_POLICY)) return null;
+  return `Codex ${version} is older than ${CODEX_CONNECTOR_POLICY}, which ignores the dashboard's refusal of connector writes without saying so, so the dashboard won't run it. Update Codex`;
+}
+var CodexGate = class {
+  #bin;
+  #run;
+  #cleared = false;
+  constructor(bin, run = defaultExec) {
+    this.#bin = bin;
+    this.#run = run;
+  }
+  async refusal() {
+    if (this.#cleared) return null;
+    const version = await codexVersion(this.#bin, this.#run);
+    const refusal = refusalFor(version);
+    if (version && !refusal) this.#cleared = true;
+    return refusal;
+  }
+};
+async function codexVersionWarning(bin, run = defaultExec) {
+  const version = await codexVersion(bin, run);
+  if (!version || !olderThan(version, CODEX_MINIMUM)) return null;
+  const consequence = olderThan(version, CODEX_CONNECTOR_POLICY) ? `Before ${CODEX_CONNECTOR_POLICY} Codex ignores the dashboard's refusal of connector writes without saying so, so the dashboard won't start the agent or the assistant on it.` : `Before ${CODEX_MINIMUM} Codex can't switch computer use off, so the assistant won't answer while computer use is off in its settings.`;
+  return `Codex ${version} is older than ${CODEX_MINIMUM}, the oldest the dashboard's limits on Codex work with. ${consequence} Update Codex.`;
+}
+
 // src/assistant.ts
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
@@ -166,13 +268,20 @@ var claudeAdapter = {
   }
 };
 var codexAdapter = {
-  args({ prompt, sessionId, model, effort }) {
+  args({ prompt, sessionId, model, effort, drafts, codexConfig }) {
     const args = ["exec"];
     if (sessionId) args.push("resume");
     args.push("--json", "--skip-git-repo-check");
-    args.push("-c", 'sandbox_mode="workspace-write"', "-c", "sandbox_workspace_write.network_access=true");
-    if (model) args.push("-c", `model=${JSON.stringify(model)}`);
-    if (effort) args.push("-c", `model_reasoning_effort=${JSON.stringify(effort)}`);
+    const config = [
+      'sandbox_mode="workspace-write"',
+      "sandbox_workspace_write.network_access=true",
+      ...CONNECTOR_POLICY,
+      ...drafts ? GMAIL_DRAFTS : [],
+      ...codexConfig
+    ];
+    if (model) config.push(`model=${JSON.stringify(model)}`);
+    if (effort) config.push(`model_reasoning_effort=${JSON.stringify(effort)}`);
+    args.push(...configArgs(config));
     if (sessionId) args.push(sessionId);
     args.push(prompt);
     return args;
@@ -219,10 +328,17 @@ var Assistant = class _Assistant {
   config;
   hooks;
   spawnFn;
-  constructor(config, hooks, spawnFn = spawn) {
+  execFn;
+  /** Refuses a Codex too old to hold to the connector rules; see `codex.ts`. */
+  codexGate;
+  /** What switches computer use off, once Codex has said; see `computerUseConfig`. */
+  codexOff = null;
+  constructor(config, hooks, spawnFn = spawn, execFn) {
     this.config = config;
     this.hooks = hooks;
     this.spawnFn = spawnFn;
+    this.execFn = execFn;
+    this.codexGate = new CodexGate(config.assistant.binPath, execFn);
   }
   get enabled() {
     return this.config.assistant.agent !== null;
@@ -329,6 +445,19 @@ ${typed}` : action.request : typed;
     });
     const prompt = previous ? resolved.request : composePrompt(await this.instructions(), context, resolved.request, this.config.profile);
     await mkdir(this.config.assistantDir, { recursive: true });
+    const refusal = agent === "codex" ? await this.codexGate.refusal() : null;
+    if (refusal) {
+      await this.finish(turn, { ok: false, error: refusal });
+      return turn;
+    }
+    let codexConfig;
+    try {
+      codexConfig = await this.computerUseConfig();
+    } catch (err) {
+      const error = err.code === "ENOENT" ? this.spawnError(err) : `computer use is off in the settings, and Codex could not confirm it: ${err.message}. Update Codex, or turn computer use on for the assistant`;
+      await this.finish(turn, { ok: false, error });
+      return turn;
+    }
     const adapter = ADAPTERS[agent];
     const args = adapter.args({
       prompt,
@@ -336,7 +465,9 @@ ${typed}` : action.request : typed;
       model: this.config.assistant.model,
       effort: this.config.assistant.effort,
       tools: this.config.assistant.tools,
-      denyEdits: true
+      denyEdits: true,
+      drafts: true,
+      codexConfig
     });
     let child;
     try {
@@ -421,6 +552,20 @@ ${event.text}` : event.text;
     }
     this.hooks.onChange();
   }
+  /**
+   * What switches computer use off, when the assistant runs Codex and the user
+   * hasn't turned it on. Asked of Codex once and kept for the life of the
+   * process; settings that change it restart the dashboard anyway. A failure
+   * isn't kept, so the next turn asks again.
+   */
+  computerUseConfig() {
+    if (this.config.assistant.agent !== "codex" || this.config.assistant.computerUse) return Promise.resolve([]);
+    this.codexOff ??= computerUseOff(this.config.assistant.binPath, this.execFn).catch((err) => {
+      this.codexOff = null;
+      throw err;
+    });
+    return this.codexOff;
+  }
   spawnError(err) {
     const code = err.code;
     const bin = this.config.assistant.binPath;
@@ -450,6 +595,8 @@ ${event.text}` : event.text;
 };
 
 export {
+  CodexGate,
+  codexVersionWarning,
   QUICK_ACTIONS,
   ADAPTERS,
   Assistant

package/dist/{chunk-YWHADSKR.js → chunk-UY6HQLGE.js}

@@ -1,6 +1,6 @@
 import {
   localDateKey
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 
 // src/sample.ts
 function timeOn(now, hour, minute = 0) {

package/dist/cli.js

@@ -49,7 +49,7 @@ function shouldOpen(flag) {
   return flag && process.stdout.isTTY === true && !process.env.CI;
 }
 async function demo(open, profile) {
-  const { demoEnv, demoIntegrations, demoProfile, writeDemoStore } = await import("./demo-AMK3Y4JZ.js");
+  const { demoEnv, demoIntegrations, demoProfile, writeDemoStore } = await import("./demo-KVFAVGO7.js");
   const chosen = demoProfile(profile);
   const store = await mkdtemp(join(tmpdir(), "daily-focus-demo-"));
   process.on("exit", () => rmSync(store, { recursive: true, force: true }));
@@ -65,7 +65,7 @@ async function demo(open, profile) {
   );
 }
 async function start(open, onStarted, options = {}) {
-  const { runServer } = await import("./server-5HCA62YY.js");
+  const { runServer } = await import("./server-SOCS3SZJ.js");
   await runServer({
     ...options,
     onStarted: (url) => {
@@ -162,20 +162,20 @@ async function main(argv) {
       }
       return start(open);
     case "service": {
-      const { main: service } = await import("./service-63U4WBUH.js");
+      const { main: service } = await import("./service-NAAAV67B.js");
       process.exitCode = await service(values.remove ? ["--remove"] : []);
       return;
     }
     // These three are scripts that do their work as they load, and read their
     // own flags from the command line.
     case "init":
-      await import("./init-YGOPPELJ.js");
+      await import("./init-57WHZZNG.js");
       return;
     case "audit":
-      await import("./audit-B5GKGH2P.js");
+      await import("./audit-ITRXIX6T.js");
       return;
     case "seed":
-      await import("./seed-57RJGU4Y.js");
+      await import("./seed-VALN2TCQ.js");
       return;
     case "build-calendar":
       return buildCalendar();

package/dist/{demo-AMK3Y4JZ.js → demo-KVFAVGO7.js}

@@ -1,15 +1,15 @@
 import {
   QUICK_ACTIONS
-} from "./chunk-GFCWPYEI.js";
+} from "./chunk-SX5FPS3A.js";
 import {
   dateFromNow,
   sampleBrief,
   sampleGeneratedAt
-} from "./chunk-YWHADSKR.js";
+} from "./chunk-UY6HQLGE.js";
 import {
   PROFILES,
   localDateKey
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 import "./chunk-BC2W7NND.js";
 
 // src/demo.ts

package/dist/{init-YGOPPELJ.js → init-57WHZZNG.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-QKT2FAB5.js";
 import {
   loadConfig
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 import {
   PACKAGED,
   command

package/dist/{seed-57RJGU4Y.js → seed-VALN2TCQ.js}

@@ -1,12 +1,12 @@
 import {
   sampleBrief
-} from "./chunk-YWHADSKR.js";
+} from "./chunk-UY6HQLGE.js";
 import {
   Store
-} from "./chunk-C6FXWHGT.js";
+} from "./chunk-26JG3D5C.js";
 import {
   loadConfig
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 import {
   command
 } from "./chunk-BC2W7NND.js";

package/dist/{server-5HCA62YY.js → server-SOCS3SZJ.js}

@@ -1,7 +1,9 @@
 import {
   ADAPTERS,
-  Assistant
-} from "./chunk-GFCWPYEI.js";
+  Assistant,
+  CodexGate,
+  codexVersionWarning
+} from "./chunk-SX5FPS3A.js";
 import {
   FOCUS_TEMPLATE,
   sourcesTemplate
@@ -9,7 +11,7 @@ import {
 import {
   TimeZoneKeeper,
   validZone
-} from "./chunk-AUBJ2IDQ.js";
+} from "./chunk-AIQO2YAI.js";
 import {
   describeLink,
   linkStore,
@@ -24,7 +26,7 @@ import {
   stopSession,
   tempPathFor,
   writeJsonAtomic
-} from "./chunk-C6FXWHGT.js";
+} from "./chunk-26JG3D5C.js";
 import {
   CLI_NAMES,
   LAUNCH_SETTINGS,
@@ -40,7 +42,7 @@ import {
   readDotEnv,
   resolveSchedule,
   scheduledRunDue
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 import {
   PACKAGED,
   command,
@@ -2506,10 +2508,13 @@ var AgentRunner = class {
   config;
   hooks;
   spawnFn;
-  constructor(config, hooks, spawnFn = spawn) {
+  /** Refuses a Codex too old to hold to the connector rules; see `codex.ts`. */
+  codexGate;
+  constructor(config, hooks, spawnFn = spawn, execFn) {
     this.config = config;
     this.hooks = hooks;
     this.spawnFn = spawnFn;
+    this.codexGate = new CodexGate(config.agent.binPath, execFn);
   }
   get enabled() {
     return this.config.agent.cli !== null;
@@ -2632,7 +2637,9 @@ var AgentRunner = class {
       model: this.config.agent.model,
       effort: this.config.agent.effort,
       tools: [...briefWritingTools(), ...this.config.agent.tools],
-      denyEdits: false
+      denyEdits: false,
+      drafts: false,
+      codexConfig: []
     });
     await this.spawnInto(run6, null, args, RUN_TIMEOUT_MS, "gave up after an hour");
     return run6;
@@ -2678,7 +2685,9 @@ var AgentRunner = class {
       effort: this.config.agent.effort,
       // The sources, and not the brief: a chat is given nothing to write.
       tools: this.config.agent.tools,
-      denyEdits: true
+      denyEdits: true,
+      drafts: false,
+      codexConfig: []
     });
     await this.spawnInto(run6, turn, args, TURN_TIMEOUT_MS, "gave up after ten minutes");
     return turn;
@@ -2692,6 +2701,11 @@ var AgentRunner = class {
     const cli = run6.cli;
     const adapter = ADAPTERS[cli];
     await mkdir(this.config.dataDir, { recursive: true });
+    const refusal2 = cli === "codex" ? await this.codexGate.refusal() : null;
+    if (refusal2) {
+      await this.finish(run6, turn, { ok: false, error: refusal2 });
+      return;
+    }
     let child;
     try {
       child = this.spawnFn(this.config.agent.binPath, args, {
@@ -3015,7 +3029,7 @@ var SETTINGS = [
     key: "DAILY_FOCUS_AGENT_TOOLS",
     group: "agent",
     label: "Tools Claude Code may use",
-    help: "In Claude Code's permission syntax, comma-separated. Add your calendar, chat and document connectors by name, or the brief reports them as unreachable. Ignored by Codex.",
+    help: "In Claude Code's permission syntax, comma-separated. Add your calendar, chat and document connectors by name, or the brief reports them as unreachable. The default allows every Gmail tool, sending included; name the tools you want instead to narrow it. Ignored by Codex.",
     kind: "list",
     fallback: always("Bash(gh *), Bash(acli *), WebFetch, mcp__claude_ai_Gmail"),
     advanced: true
@@ -3042,7 +3056,7 @@ var SETTINGS = [
     key: "DAILY_FOCUS_ASSISTANT",
     group: "assistant",
     label: "Answer questions with",
-    help: "Puts an assistant in every item's panel. It reads and drafts, and never sends, posts or edits.",
+    help: "Puts an assistant in every item's panel, told to read and draft and never to send, post or edit. Under Codex, every connector write but a Gmail draft is refused.",
     kind: "choice",
     choices: OFF_OR_CLI,
     fallback: always("Off")
@@ -3068,11 +3082,19 @@ var SETTINGS = [
     key: "DAILY_FOCUS_ASSISTANT_TOOLS",
     group: "assistant",
     label: "Tools Claude Code may use",
-    help: "In Claude Code's permission syntax, comma-separated. Editing tools are denied whatever this says. Ignored by Codex.",
+    help: "In Claude Code's permission syntax, comma-separated. Editing tools are denied whatever this says. The default allows every Gmail tool, sending included; name the tools you want instead to narrow it. Ignored by Codex.",
     kind: "list",
     fallback: always("Bash(gh *), Bash(acli *), WebFetch, mcp__claude_ai_Gmail"),
     advanced: true
   },
+  {
+    key: "DAILY_FOCUS_ASSISTANT_COMPUTER_USE",
+    group: "assistant",
+    label: "Computer use",
+    help: "Codex only. On lets the assistant use Codex's computer-use and browser plugins, which act in your apps and browser with your sign-ins. Off switches them off for its runs. Claude Code uses only the tools in its list.",
+    kind: "flag",
+    fallback: always("Off")
+  },
   {
     key: "DAILY_FOCUS_ASSISTANT_BIN",
     group: "assistant",
@@ -3722,6 +3744,15 @@ async function startServer(env, options = {}) {
       restartWhenIdle();
     }
   });
+  let codexWarnings = [];
+  const codexBins = /* @__PURE__ */ new Set();
+  if (config.agent.cli === "codex") codexBins.add(config.agent.binPath);
+  if (config.assistant.agent === "codex") codexBins.add(config.assistant.binPath);
+  void Promise.all([...codexBins].map((bin) => codexVersionWarning(bin))).then((found) => {
+    codexWarnings = [...new Set(found.filter((warning) => warning !== null))];
+    for (const warning of codexWarnings) console.warn(`[daily-focus] ${warning}`);
+    if (codexWarnings.length > 0) void broadcast();
+  });
   function requestRestart() {
     restart = options.onRestart ? "waiting" : "manual";
     restartWhenIdle();
@@ -3749,7 +3780,7 @@ async function startServer(env, options = {}) {
       tickets: tickets.view(actions, now),
       assistant: assistant.view(),
       agentRun: agent.view(now),
-      setupWarnings: [...configWarnings, ...linkWarning ? [linkWarning] : []],
+      setupWarnings: [...configWarnings, ...codexWarnings, ...linkWarning ? [linkWarning] : []],
       restart,
       setup,
       assetVersion,

package/dist/{service-63U4WBUH.js → service-NAAAV67B.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-NWYOCDUU.js";
+} from "./chunk-RNE27FQY.js";
 import {
   IN_NPX_CACHE,
   PACKAGED,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "daily-focus",
-  "version": "1.1.1-dev.3",
+  "version": "1.2.0-dev.4",
   "description": "An interactive dashboard of what you should focus on today at work",
   "keywords": [
     "dashboard",

package/public/app.js

@@ -3777,7 +3777,7 @@ function HelpDialog(_props) {
     el(
       "p",
       { class: "help__note" },
-      `Done, snoozed and dismissed all tell the morning agent to leave an item out of tomorrow's brief. A note is sent along with it as free text. On both boards only snooze and note apply: a pull request stays until it's merged or closed, and a ticket whose status looks wrong is put right in Jira rather than here. Click a card to open its panel, where its notes and the assistant live; the panel stays on the item it was opened for. The assistant is a CLI run on your machine; it reads and drafts, never sends or posts. Click "updated \u2026 ago" in the header to open the morning agent's latest run: its report, earlier runs, and a place to ask it why it did what it did.`
+      `Done, snoozed and dismissed all tell the morning agent to leave an item out of tomorrow's brief. A note is sent along with it as free text. On both boards only snooze and note apply: a pull request stays until it's merged or closed, and a ticket whose status looks wrong is put right in Jira rather than here. Click a card to open its panel, where its notes and the assistant live; the panel stays on the item it was opened for. The assistant is a CLI run on your machine, told to read and draft, never to send or post. Click "updated \u2026 ago" in the header to open the morning agent's latest run: its report, earlier runs, and a place to ask it why it did what it did.`
     ),
     el("form", { method: "dialog" }, el("button", { type: "submit", class: "button" }, "Close"))
   );