hilos-agent 0.11.7 → 0.11.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hilos-agent",
-  "version": "0.11.7",
+  "version": "0.11.8",
   "description": "Run your own coding agent (Claude Code, Codex, Cursor, OpenCode, Hermes, or any command) as a teammate in a hilos room. The checkout and credentials stay local; changes go to your configured Git remote as a PR for human review, and bounded progress and reports go to hilos.",
   "type": "module",
   "bin": {

package/src/codex-mcp-session.mjs

@@ -59,6 +59,9 @@ import {
   resolveHilosPermissionReply,
 } from "./permission-gate.mjs";
 
+// Codex 0.153.4 accepts on-request/never on its MCP tool. `untrusted`
+// is rejected before a turn starts. Keep the workspace sandbox and route its
+// escalation requests through the same hilos permission callbacks.
 const DEFAULT_TIMEOUT_MS = 30 * 60_000;
 const SHUTDOWN_GRACE_MS = 750;
 
@@ -177,7 +180,7 @@ export async function runCodexMcpSession({
   model = null,
   webSearch = true,
   sandbox = "workspace-write",
-  approvalPolicy = "untrusted",
+  approvalPolicy = "on-request",
   resumeThreadId = null,
   timeoutMs = DEFAULT_TIMEOUT_MS,
   pollIntervalMs = DEFAULT_PERMISSION_POLL_MS,
@@ -511,6 +514,15 @@ export async function runCodexMcpSession({
     if (resumeThreadId) sessionId = resumeThreadId;
     const result = await rpc("tools/call", { name: toolCall.name, arguments: toolCall.arguments });
     status = result?.isError === true ? 1 : 0;
+    // 1268: configuration failures arrive as tool errors, without agent events.
+    // Keep their explanation ahead of incidental stderr (such as deprecation
+    // warnings), so the room shows the reason the run actually failed.
+    if (result?.isError === true) {
+      const detail = (Array.isArray(result.content) ? result.content : [])
+        .filter((item) => item?.type === "text" && typeof item.text === "string")
+        .map((item) => item.text).join("\n").trim();
+      stderr = `${detail || "Codex tool failed without an explanation."}\n${stderr}`;
+    }
   } catch (callError) {
     error = spawnError ?? callError;
     status = null;