moflo 4.8.59 → 4.8.61

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moflo",
-  "version": "4.8.59",
+  "version": "4.8.61",
   "description": "MoFlo — AI agent orchestration for Claude Code. Forked from ruflo/claude-flow with patches applied to source, plus feature-level orchestration.",
   "main": "dist/index.js",
   "type": "module",
@@ -111,7 +111,7 @@
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.19.37",
     "eslint": "^8.0.0",
-    "moflo": "^4.8.58",
+    "moflo": "^4.8.60",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.0"

package/src/modules/cli/dist/src/version.js

@@ -2,5 +2,5 @@
  * Auto-generated by build. Do not edit manually.
  * Source of truth: root package.json → scripts/sync-version.mjs
  */
-export const VERSION = '4.8.59';
+export const VERSION = '4.8.61';
 //# sourceMappingURL=version.js.map

package/src/modules/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moflo/cli",
-  "version": "4.8.59",
+  "version": "4.8.61",
   "type": "module",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",

package/src/modules/spells/dist/core/bwrap-sandbox.js

@@ -58,9 +58,12 @@ function needsToolHomeAccess(level) {
  *   - fs:write unscoped -> --bind (read-write) for projectRoot
  *   - net              -> omit --unshare-net
  *
- * When `options.permissionLevel` is `elevated` or `autonomous`, also bind a
- * narrow allowlist of CLI-tool home paths writable via `--bind-try` so that
- * spawned subcommands (claude, gh, git, npm) can persist their state.
+ * When `options.permissionLevel` is `elevated` or `autonomous`, also:
+ *   - Bind a narrow allowlist of CLI-tool home paths writable via `--bind-try`
+ *     so spawned subcommands (claude, gh, git, npm) can persist state.
+ *   - Share the host network (omit `--unshare-net`) so those tools can reach
+ *     their APIs (api.anthropic.com, api.github.com, etc.). Without this,
+ *     `claude -p` and similar commands fail with DNS/connection errors.
  */
 export function buildBwrapArgs(command, capabilities, projectRoot, options = {}) {
     const args = [];
@@ -117,12 +120,23 @@ export function buildBwrapArgs(command, capabilities, projectRoot, options = {})
         }
     }
     // ── Network isolation ───────────────────────────────────────────────
+    // Elevated/autonomous steps spawn CLI tools (claude, gh, git, npm) that
+    // need network to reach their APIs. Keep the host network for those,
+    // mirroring the tool-home-paths policy.
     const hasNet = capabilities.some(c => c.type === 'net');
-    if (!hasNet) {
+    if (!hasNet && !needsToolHomeAccess(options.permissionLevel)) {
         args.push('--unshare-net');
     }
     // ── PID isolation (always) ──────────────────────────────────────────
     args.push('--unshare-pid');
+    // ── Lifetime bound to parent ────────────────────────────────────────
+    // Without this, child processes spawned by the sandboxed command (e.g.
+    // node workers from `claude -p`) keep the PID namespace alive past the
+    // entry script's exit — bwrap waits for the namespace to drain even
+    // though the user-visible work is done. --die-with-parent makes bwrap
+    // and everything inside terminate when the spawning runner exits or
+    // sends a signal, guaranteeing cleanup on success and on timeout.
+    args.push('--die-with-parent');
     // ── Command ─────────────────────────────────────────────────────────
     args.push('bash', '-c', command);
     return args;

package/src/modules/spells/dist/core/platform-sandbox.js

@@ -12,8 +12,9 @@
  * @see https://github.com/eric-cielo/moflo/issues/409
  */
 import { execSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { platform } from 'node:os';
+import { join } from 'node:path';
 export const DEFAULT_SANDBOX_CONFIG = {
     enabled: false,
     tier: 'auto',
@@ -129,6 +130,25 @@ export function resolveSandboxConfig(raw) {
 function isValidTier(value) {
     return value === 'auto' || value === 'denylist-only' || value === 'full';
 }
+/**
+ * Load sandbox config from a project's moflo.yaml.
+ * Returns DEFAULT_SANDBOX_CONFIG on any failure (missing file, parse error, etc.).
+ *
+ * Lets the spell engine auto-discover sandbox settings from the project root
+ * without forcing every caller (MCP tools, CLI adapters) to load moflo.yaml.
+ */
+export async function loadSandboxConfigFromProject(projectRoot) {
+    try {
+        const content = readFileSync(join(projectRoot, 'moflo.yaml'), 'utf-8');
+        const mod = await import('js-yaml');
+        const yaml = mod.default ?? mod;
+        const raw = yaml.load(content);
+        return resolveSandboxConfig(raw?.sandbox);
+    }
+    catch {
+        return DEFAULT_SANDBOX_CONFIG;
+    }
+}
 /**
  * Combine detected capability with user config to determine effective sandbox behavior.
  *

package/src/modules/spells/dist/factory/runner-bridge.js

@@ -8,7 +8,20 @@
  * This module is the integration point between MCP spell tools
  * and the SpellCaster engine.
  */
+import { loadSandboxConfigFromProject } from '../core/platform-sandbox.js';
 import { createRunner, runSpellFromContent } from './runner-factory.js';
+/**
+ * Resolve sandbox config: prefer caller-supplied; fall back to auto-loading
+ * from moflo.yaml at projectRoot. Returns undefined when neither is available
+ * (runner falls back to DEFAULT_SANDBOX_CONFIG with denylist-only).
+ */
+async function resolveSandbox(explicit, projectRoot) {
+    if (explicit)
+        return explicit;
+    if (!projectRoot)
+        return undefined;
+    return loadSandboxConfigFromProject(projectRoot);
+}
 // Track active spells for cancellation
 const activeSpells = new Map();
 // ============================================================================
@@ -22,6 +35,7 @@ export async function bridgeRunSpell(content, sourceFile, args, options = {}) {
     const controller = new AbortController();
     activeSpells.set(spellId, controller);
     try {
+        const sandboxConfig = await resolveSandbox(options.sandboxConfig, options.projectRoot);
         const result = await runSpellFromContent(content, sourceFile, {
             spellId,
             args,
@@ -30,6 +44,7 @@ export async function bridgeRunSpell(content, sourceFile, args, options = {}) {
             memory: options.memory,
             credentials: options.credentials,
             ...(options.projectRoot ? { projectRoot: options.projectRoot } : {}),
+            ...(sandboxConfig ? { sandboxConfig } : {}),
         });
         return result;
     }
@@ -45,11 +60,13 @@ export async function bridgeExecuteSpell(definition, args, options = {}) {
     const controller = new AbortController();
     activeSpells.set(spellId, controller);
     try {
+        const sandboxConfig = await resolveSandbox(options.sandboxConfig, options.projectRoot);
         const runner = createRunner({ memory: options.memory, credentials: options.credentials });
         return await runner.run(definition, args, {
             spellId,
             signal: controller.signal,
             ...(options.projectRoot ? { projectRoot: options.projectRoot } : {}),
+            ...(sandboxConfig ? { sandboxConfig } : {}),
         });
     }
     finally {

package/src/modules/spells/dist/index.js

@@ -19,7 +19,7 @@ export { GatedConnectorAccessor } from './core/gated-connector-accessor.js';
 export { checkCapabilities, } from './core/capability-validator.js';
 export { CapabilityGateway, CapabilityDeniedError, DenyAllGateway, DENY_ALL_GATEWAY, discloseStep, discloseSpell, formatStepDisclosure, formatSpellDisclosure, } from './core/capability-gateway.js';
 export { collectPrerequisites, checkPrerequisites, formatPrerequisiteErrors, commandExists, } from './core/prerequisite-checker.js';
-export { detectSandboxCapability, resetSandboxCache, resolveSandboxConfig, resolveEffectiveSandbox, formatSandboxLog, DEFAULT_SANDBOX_CONFIG, } from './core/platform-sandbox.js';
+export { detectSandboxCapability, resetSandboxCache, resolveSandboxConfig, resolveEffectiveSandbox, formatSandboxLog, loadSandboxConfigFromProject, DEFAULT_SANDBOX_CONFIG, } from './core/platform-sandbox.js';
 export { resolveScopePath, } from './core/sandbox-utils.js';
 export { generateSandboxProfile, wrapWithSandboxExec, } from './core/sandbox-profile.js';
 export { buildBwrapArgs, wrapWithBwrap, } from './core/bwrap-sandbox.js';