moflo 4.8.65 → 4.8.67

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moflo",
-  "version": "4.8.65",
+  "version": "4.8.67",
   "description": "MoFlo — AI agent orchestration for Claude Code. Forked from ruflo/claude-flow with patches applied to source, plus feature-level orchestration.",
   "main": "dist/index.js",
   "type": "module",
@@ -112,7 +112,7 @@
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.19.37",
     "eslint": "^8.0.0",
-    "moflo": "^4.8.64",
+    "moflo": "^4.8.66",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.0"

package/src/modules/cli/dist/src/mcp-tools/spell-tools.js

@@ -60,7 +60,8 @@ async function executeAndTrack(engine, definition, args) {
     const spellId = `sp-${Date.now()}`;
     const tracked = trackStart(spellId, definition.name, definition.description);
     try {
-        const result = await engine.bridgeExecuteSpell(definition, args, { spellId });
+        const sandboxConfig = await engine.loadSandboxConfigFromProject(findProjectRoot());
+        const result = await engine.bridgeExecuteSpell(definition, args, { spellId, sandboxConfig });
         trackResult(tracked, result);
         return serializeResult(result);
     }
@@ -202,7 +203,8 @@ export const spellTools = [
             }
             // Run from raw content via bridge
             const engine = await loadSpellEngine();
-            const result = await engine.bridgeRunSpell(content, sourceFile, args, { dryRun });
+            const sandboxConfig = await engine.loadSandboxConfigFromProject(findProjectRoot());
+            const result = await engine.bridgeRunSpell(content, sourceFile, args, { dryRun, sandboxConfig });
             const tracked = trackStart(result.spellId, spellName);
             trackResult(tracked, result);
             return serializeResult(result);

package/src/modules/cli/dist/src/version.js

@@ -2,5 +2,5 @@
  * Auto-generated by build. Do not edit manually.
  * Source of truth: root package.json → scripts/sync-version.mjs
  */
-export const VERSION = '4.8.65';
+export const VERSION = '4.8.67';
 //# sourceMappingURL=version.js.map

package/src/modules/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moflo/cli",
-  "version": "4.8.65",
+  "version": "4.8.67",
   "type": "module",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",

package/src/modules/spells/dist/factory/runner-factory.js

@@ -12,6 +12,7 @@ import { builtinConnectors } from '../connectors/index.js';
 import { parseSpell } from '../schema/parser.js';
 import { validateSpellDefinition } from '../schema/validator.js';
 import { SpellConnectorRegistry } from '../registry/connector-registry.js';
+import { loadSandboxConfigFromProject } from '../core/platform-sandbox.js';
 // ============================================================================
 // Factory
 // ============================================================================
@@ -78,6 +79,13 @@ export async function runSpellFromContent(content, sourceFile, options = {}) {
     const runner = createRunner(options);
     // Strip factory-only fields; keep RunSpellOptions (extends RunnerOptions) for runner.run()
     const { args = {}, stepDirs: _s, credentials: _c, memory: _m, connectorRegistry: _cr, ...runnerOptions } = options;
+    // Auto-load sandbox config from moflo.yaml when caller supplied projectRoot
+    // but not an explicit sandboxConfig. Keeps CLI/epic callers from having to
+    // thread config themselves; MCP tools still pass explicitly.
+    if (!runnerOptions.sandboxConfig && runnerOptions.projectRoot) {
+        const autoCfg = await loadSandboxConfigFromProject(runnerOptions.projectRoot);
+        runnerOptions.sandboxConfig = autoCfg;
+    }
     return runner.run(definition, args, runnerOptions);
 }
 // ============================================================================