orquesta-agent 0.2.262 → 0.2.264
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/executor.d.ts +17 -0
- package/dist/executor.d.ts.map +1 -1
- package/dist/executor.js +109 -16
- package/dist/executor.js.map +1 -1
- package/dist/index.js +24 -3
- package/dist/index.js.map +1 -1
- package/dist/remote-desktop.d.ts +24 -2
- package/dist/remote-desktop.d.ts.map +1 -1
- package/dist/remote-desktop.js +51 -2
- package/dist/remote-desktop.js.map +1 -1
- package/dist/supabase.d.ts +2 -0
- package/dist/supabase.d.ts.map +1 -1
- package/dist/supabase.js.map +1 -1
- package/package.json +1 -1
package/dist/executor.d.ts
CHANGED
|
@@ -45,7 +45,24 @@ export interface ExecuteOptions {
|
|
|
45
45
|
itemId: string;
|
|
46
46
|
branch: string;
|
|
47
47
|
};
|
|
48
|
+
/**
|
|
49
|
+
* Read-only task (an outside agent holding only the `read` scope on the
|
|
50
|
+
* project). Runs on Claude CLI with no tool that can write or run code —
|
|
51
|
+
* see readOnlyCliArgs(). Any other CLI fails the prompt instead.
|
|
52
|
+
*/
|
|
53
|
+
readOnly?: boolean;
|
|
48
54
|
}
|
|
55
|
+
/**
|
|
56
|
+
* Claude CLI flags for a read-only task. Only the file-reading tools exist
|
|
57
|
+
* (--tools), the write/exec ones are denied on top (--disallowedTools, which
|
|
58
|
+
* beats any allow rule from a settings file), secrets are denied through a
|
|
59
|
+
* --settings file, project MCP servers are not loaded, and permissions are
|
|
60
|
+
* NOT skipped — anything else that would need approval is refused in -p mode.
|
|
61
|
+
* There is no Bash, so the agent hands the model a git snapshot itself
|
|
62
|
+
* (readOnlyRepoSnapshot). An older CLI that rejects one of these flags fails
|
|
63
|
+
* the run: closed, never open.
|
|
64
|
+
*/
|
|
65
|
+
export declare function readOnlyCliArgs(settingsPath: string): string[];
|
|
49
66
|
export interface AuthConfig {
|
|
50
67
|
anthropicApiKey?: string;
|
|
51
68
|
claudeCredentials?: {
|
package/dist/executor.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAqItD,OAAO,EAAmI,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAkRhL,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAOhF;AAGD,wBAAgB,sBAAsB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE/D;AAeD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,YAAY,CAAA;AAOlD,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAID,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAMtE;AAGD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAIlE;
|
|
1
|
+
{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../src/executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAqItD,OAAO,EAAmI,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAkRhL,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAOhF;AAGD,wBAAgB,sBAAsB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE/D;AAeD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,YAAY,CAAA;AAOlD,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAID,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAMtE;AAGD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAIlE;AA0ED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,gBAAgB,CAAA;IACzB,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,WAAW,CAAC,EAAE,UAAU,EAAE,CAAA;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAA;IACjC;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5D;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ9D;AA0CD,MAAM,WAAW,UAAU;IACzB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,iBAAiB,CAAC,EAAE;QAClB,WAAW,EAAE,MAAM,CAAA;QACnB,YAAY,EAAE,MAAM,CAAA;QACpB,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;CACF;AAGD,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAgBtD;AAGD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI,CAG5D;AAYD;uDACuD;AACvD,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,CAY3G;AACD,wBAAgB,gBAAgB,IAAI;IAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,IAAI,GAAG,KAAK,CAAA;CAAE,CAEzG;AAGD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,GAAE,MAAM,EAAO,EAAE,IAAI,GAAE,WAAwB,GAAG,IAAI,CAUlH;AA4CD,+EAA+E;AAC/E,wBAAgB,gBAAgB,IAAI,QAAQ,GAAG,aAAa,GAAG,KAAK,CAGnE;AAED;6DAC6D;AAC7D,wBAAgB,yBAAyB,IAAI;IAAE,aAAa,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,WAAW,CAAC;IAAC,aAAa,EAAE,QAAQ,GAAG,aAAa,GAAG,KAAK,CAAA;CAAE,CAiB9N;AAoID,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;AAIvF,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,IAAI,CAGhE;AAKD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAKrD;AACD,wBAAgB,cAAc,IAAI,MAAM,CAA6B;AAMrE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAKxD;AACD,wBAAgB,iBAAiB,IAAI,OAAO,CAAgC;AAsD5E;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CA6DhD;AAcD,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAmCnD;AAED,wBAAgB,oBAAoB,IAAI,OAAO,CAQ9C;AAOD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAkBjD;AAID,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAWD,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAiBnD;AAKD,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAiBD,wBAAgB,eAAe,IAAI;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAgCvG;AASD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAmBjD;AAKD,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AASD,wBAAgB,aAAa,IAAI;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA0BrG;AAYD,MAAM,MAAM,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;AAiBxE,wBAAgB,SAAS,IAAI;IAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqCnE;AAGD,wBAAgB,eAAe,IAAI;IAAE,aAAa,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAkDvG;AAgBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAOjG;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBtG;AAED,wBAAsB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAa9D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5B,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAgDlD;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAa1E;AAmnBD,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAA2B;AA4I7E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa9D;AAMD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAkBhE;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAsqCpE;AA0CD,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAQtG;AAED,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAwC1C;AAED,wBAAgB,SAAS,IAAI,IAAI,CAOhC;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAMD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,CAAA;IAC9D,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,EAAE,UAAU,GAAG,WAAW,CAAA;IACzC,aAAa,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,gBAAgB,CAAA;CAC1B;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAyLtE;AASD;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiBzD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiB1D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAenE;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAE5C;AAMD,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,gBAAgB,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8GxF;AAwED,wEAAwE;AACxE,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,EAAE,uBAAuB,CAAA;CACnC;AAiND,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,cAAc,KAAK,IAAI,GAAG,IAAI,CAE3E;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,OAAO,EAAE,gBAAgB,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,uBAAuB,CAAA;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAuCD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,EAC1B,KAAK,SAAK,GACT,gBAAgB,EAAE,CAuBpB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CA0gBjF;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAQ,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,OAAO,CA+CnH;AA2ED;;GAEG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAoDrD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAWpF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAMvE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAGlD;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAA;CAC7D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,WAAW,EAAE,CAe9C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAAC,QAAQ,EAAE,WAAW,EAAE,CAAA;CAAE,CAe/N;AAyCD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CA+BzD"}
|
package/dist/executor.js
CHANGED
|
@@ -413,7 +413,10 @@ export function setProjectSettings(settings) {
|
|
|
413
413
|
// machine will keep emitting the curl for months.
|
|
414
414
|
function generateSettingsHeader(opts = {}) {
|
|
415
415
|
const lines = ['## Active Orquesta Settings\n'];
|
|
416
|
-
if (opts.
|
|
416
|
+
if (opts.readOnly) {
|
|
417
|
+
lines.push(`- **READ-ONLY task.** You can only read files (Read, Grep, Glob); you cannot edit, run commands, commit, push or deploy. Answer the question from the code and the repository snapshot below. If it needs a change, say what you would change instead of trying.`);
|
|
418
|
+
}
|
|
419
|
+
else if (opts.assisted) {
|
|
417
420
|
lines.push(`- **Assisted run: deployment is DISABLED for this task.** Do NOT deploy, do NOT call the Orquesta Deploy API, and do NOT push to the main branch. Your changes stay on the QA branch and a reviewer decides whether they ship.`);
|
|
418
421
|
}
|
|
419
422
|
else if (projectSettings.autoDeploy && projectSettings.projectId) {
|
|
@@ -468,6 +471,56 @@ function generateSettingsHeader(opts = {}) {
|
|
|
468
471
|
}
|
|
469
472
|
// Pending supervision callbacks
|
|
470
473
|
const pendingSupervisionCallbacks = new Map();
|
|
474
|
+
/**
|
|
475
|
+
* Claude CLI flags for a read-only task. Only the file-reading tools exist
|
|
476
|
+
* (--tools), the write/exec ones are denied on top (--disallowedTools, which
|
|
477
|
+
* beats any allow rule from a settings file), secrets are denied through a
|
|
478
|
+
* --settings file, project MCP servers are not loaded, and permissions are
|
|
479
|
+
* NOT skipped — anything else that would need approval is refused in -p mode.
|
|
480
|
+
* There is no Bash, so the agent hands the model a git snapshot itself
|
|
481
|
+
* (readOnlyRepoSnapshot). An older CLI that rejects one of these flags fails
|
|
482
|
+
* the run: closed, never open.
|
|
483
|
+
*/
|
|
484
|
+
export function readOnlyCliArgs(settingsPath) {
|
|
485
|
+
return [
|
|
486
|
+
'--tools', 'Read,Grep,Glob',
|
|
487
|
+
'--disallowedTools', 'Bash,Edit,Write,NotebookEdit,WebFetch,WebSearch,Task',
|
|
488
|
+
'--permission-mode', 'default',
|
|
489
|
+
'--strict-mcp-config',
|
|
490
|
+
'--settings', settingsPath,
|
|
491
|
+
];
|
|
492
|
+
}
|
|
493
|
+
const READ_ONLY_SETTINGS = {
|
|
494
|
+
permissions: {
|
|
495
|
+
deny: [
|
|
496
|
+
'Read(**/.env)', 'Read(**/.env.*)', 'Read(**/*.pem)', 'Read(**/*.key)', 'Read(**/*.p8)',
|
|
497
|
+
'Read(**/id_rsa*)', 'Read(**/id_ed25519*)', 'Read(**/credentials*)', 'Read(**/*secret*)',
|
|
498
|
+
'Read(~/**)', 'Read(/etc/**)',
|
|
499
|
+
],
|
|
500
|
+
},
|
|
501
|
+
};
|
|
502
|
+
/** Recent history + working-tree state, gathered by the agent (the model has no Bash). */
|
|
503
|
+
function readOnlyRepoSnapshot(cwd) {
|
|
504
|
+
const run = (args) => {
|
|
505
|
+
try {
|
|
506
|
+
return execFileSync('git', args, { cwd, encoding: 'utf-8', timeout: 10_000, stdio: ['ignore', 'pipe', 'ignore'] }).trim();
|
|
507
|
+
}
|
|
508
|
+
catch {
|
|
509
|
+
return '';
|
|
510
|
+
}
|
|
511
|
+
};
|
|
512
|
+
if (!run(['rev-parse', '--is-inside-work-tree']))
|
|
513
|
+
return '';
|
|
514
|
+
const parts = [
|
|
515
|
+
['Branch and working tree (git status --short --branch)', run(['status', '--short', '--branch'])],
|
|
516
|
+
['Last 30 commits (git log)', run(['log', '-n', '30', '--date=iso', '--format=%h %ad %an%d %s'])],
|
|
517
|
+
['Branches (git branch -a)', run(['branch', '-a', '--no-color'])],
|
|
518
|
+
].filter(([, out]) => out);
|
|
519
|
+
return parts.length
|
|
520
|
+
? '\n\n## Repository snapshot (read-only, gathered by the agent)\n' +
|
|
521
|
+
parts.map(([title, out]) => `\n### ${title}\n\`\`\`\n${redactSecrets(out.slice(0, 20_000))}\n\`\`\``).join('\n')
|
|
522
|
+
: '';
|
|
523
|
+
}
|
|
471
524
|
// Claude CLI account/API failures surface on the final stream-json `result`
|
|
472
525
|
// event as is_error with an api_error_status, and/or the error string as the
|
|
473
526
|
// result text. These are NOT recoverable by retrying claude (the account is
|
|
@@ -2211,7 +2264,10 @@ export async function execute(options) {
|
|
|
2211
2264
|
// draft the reply, instead of making the model orchestrate curls turn-by-turn
|
|
2212
2265
|
// (slow + fragile on weak models). Falls through to the normal prompt path if
|
|
2213
2266
|
// the spec is absent or malformed.
|
|
2214
|
-
|
|
2267
|
+
// A read-only task never takes the trusted fast-paths below: they act on
|
|
2268
|
+
// the content itself (calls, installers), which an outside reader must not
|
|
2269
|
+
// be able to trigger.
|
|
2270
|
+
const coordSpec = options.readOnly ? null : parseCoordSpec(content);
|
|
2215
2271
|
if (coordSpec) {
|
|
2216
2272
|
const isCall = coordSpec.mode === 'call';
|
|
2217
2273
|
addLog(promptId, 'info', 'system', `Native ${isCall ? 'video call' : 'coordination'} (${coordSpec.reason}) — channel ${coordSpec.channelId}`);
|
|
@@ -2240,7 +2296,7 @@ export async function execute(options) {
|
|
|
2240
2296
|
// sudosudo install fast-path: run the OFFICIAL sudosudo installer as trusted
|
|
2241
2297
|
// agent code (NOT via the LLM). This is how the Orquesta dashboard activates
|
|
2242
2298
|
// sudosudo on a box already running this agent. See ./sudosudo.ts.
|
|
2243
|
-
const sudoSpec = parseSudosudoInstallSpec(content);
|
|
2299
|
+
const sudoSpec = options.readOnly ? null : parseSudosudoInstallSpec(content);
|
|
2244
2300
|
if (sudoSpec) {
|
|
2245
2301
|
addLog(promptId, 'info', 'system', `sudosudo install (trusted) — ${sudoSpec.installUrl.replace(/\/i\/stk_[^\s]*/, '/i/stk_<redacted>')}`);
|
|
2246
2302
|
try {
|
|
@@ -2285,16 +2341,20 @@ export async function execute(options) {
|
|
|
2285
2341
|
addLog(promptId, 'error', 'system', `Failed to process attachments: ${error}`);
|
|
2286
2342
|
}
|
|
2287
2343
|
}
|
|
2344
|
+
if (options.readOnly)
|
|
2345
|
+
attachmentContext += readOnlyRepoSnapshot(workingDirectory || process.cwd());
|
|
2288
2346
|
// Build full prompt with settings, agent instructions, and attachments
|
|
2289
2347
|
let fullContent = content + attachmentContext;
|
|
2290
|
-
const settingsHeader = generateSettingsHeader({ assisted: !!options.assisted });
|
|
2348
|
+
const settingsHeader = generateSettingsHeader({ assisted: !!options.assisted, readOnly: !!options.readOnly });
|
|
2291
2349
|
const browserBlock = globalBrowserEnabled ? BROWSER_TOOLS_PROMPT_BLOCK : '';
|
|
2292
2350
|
const coordinationBlock = await fetchCoordinationContextBlock();
|
|
2293
2351
|
const capabilitiesBlock = `${ORQUESTA_CAPABILITIES_PROMPT_BLOCK}${coordinationBlock}`;
|
|
2294
2352
|
// Auto-inject any rogerthat phone messages received since the last prompt /
|
|
2295
2353
|
// interactive turn. Shared state with the interactive path — see
|
|
2296
2354
|
// readNewApuchatMessages(). No-op when no listener is active.
|
|
2297
|
-
|
|
2355
|
+
// Not for a read-only task: it would consume the owner's phone messages
|
|
2356
|
+
// into an outsider's question.
|
|
2357
|
+
const phoneBlock = options.readOnly ? '' : readNewApuchatMessages();
|
|
2298
2358
|
if (phoneBlock) {
|
|
2299
2359
|
logger.info(`Injecting ${phoneBlock.length} chars of rogerthat phone messages into prompt`);
|
|
2300
2360
|
}
|
|
@@ -2362,9 +2422,22 @@ ${userRequestBody}`;
|
|
|
2362
2422
|
if (!selectedCli) {
|
|
2363
2423
|
throw new Error('No CLI available. Please install either orquesta-cli or claude CLI.');
|
|
2364
2424
|
}
|
|
2425
|
+
// Read-only enforcement lives in Claude CLI's tool flags; no other CLI has
|
|
2426
|
+
// an equivalent, so a read-only task runs on Claude or not at all.
|
|
2427
|
+
if (options.readOnly) {
|
|
2428
|
+
if (!isClaudeCliAvailable()) {
|
|
2429
|
+
const msg = 'Read-only tasks need Claude CLI on the agent machine (other CLIs cannot be restricted to read-only tools).';
|
|
2430
|
+
addLog(promptId, 'error', 'system', msg);
|
|
2431
|
+
await updatePromptStatus(promptId, 'failed', { text: msg, key_actions: [], files_modified: [] });
|
|
2432
|
+
await sendComplete(channel, commandId, 1, startTime);
|
|
2433
|
+
return;
|
|
2434
|
+
}
|
|
2435
|
+
selectedCli = 'claude';
|
|
2436
|
+
reason = 'Read-only task (Claude CLI tool restrictions)';
|
|
2437
|
+
}
|
|
2365
2438
|
// Preflight check: if orquesta CLI is selected, verify its LLM endpoint works
|
|
2366
2439
|
// This prevents wasting time on prompts that will fail with 404s
|
|
2367
|
-
if (selectedCli === 'orquesta') {
|
|
2440
|
+
if (selectedCli === 'orquesta' && !options.readOnly) {
|
|
2368
2441
|
try {
|
|
2369
2442
|
const testResult = execSync('orquesta --status 2>&1 || true', { encoding: 'utf-8', timeout: 5000, env });
|
|
2370
2443
|
// If orquesta-cli reports no endpoint or connection issues, fall back to claude
|
|
@@ -2462,15 +2535,25 @@ ${userRequestBody}`;
|
|
|
2462
2535
|
: '--verbose --output-format stream-json'; // Claude: stream-json format
|
|
2463
2536
|
// Kimi has no --dangerously-skip-permissions, and -p forbids -y. Cursor spells
|
|
2464
2537
|
// the same thing --force (alias --yolo); kiro spells it --trust-all-tools.
|
|
2465
|
-
|
|
2466
|
-
|
|
2467
|
-
:
|
|
2538
|
+
let readOnlySettingsPath = null;
|
|
2539
|
+
if (options.readOnly) {
|
|
2540
|
+
const dir = process.platform === 'win32' ? os.tmpdir() : path.join(os.homedir(), '.orquesta-agent', 'sysprompts');
|
|
2541
|
+
fs.mkdirSync(dir, { recursive: true });
|
|
2542
|
+
readOnlySettingsPath = path.join(dir, `readonly-settings-${commandId}.json`);
|
|
2543
|
+
fs.writeFileSync(readOnlySettingsPath, JSON.stringify(READ_ONLY_SETTINGS), { encoding: 'utf-8', mode: 0o600 });
|
|
2544
|
+
}
|
|
2545
|
+
const readOnlyArgs = readOnlySettingsPath ? readOnlyCliArgs(readOnlySettingsPath) : [];
|
|
2546
|
+
const permFlags = readOnlySettingsPath
|
|
2547
|
+
? readOnlyArgs.map(a => `'${a.replace(/'/g, "'\\''")}'`).join(' ')
|
|
2548
|
+
: cliCommand === 'kimi'
|
|
2468
2549
|
? ''
|
|
2469
|
-
:
|
|
2470
|
-
? '
|
|
2471
|
-
: cliCommand === '
|
|
2472
|
-
? '--
|
|
2473
|
-
: '
|
|
2550
|
+
: mode !== 'auto'
|
|
2551
|
+
? ''
|
|
2552
|
+
: cliCommand === 'cursor'
|
|
2553
|
+
? '--force'
|
|
2554
|
+
: cliCommand === 'kiro'
|
|
2555
|
+
? '--trust-all-tools'
|
|
2556
|
+
: '--dangerously-skip-permissions';
|
|
2474
2557
|
// Per-project endpoint override (orquesta CLI only). Single-quoted for the
|
|
2475
2558
|
// shell-wrapped (Linux) path; pushed as a separate arg on Win/macOS below.
|
|
2476
2559
|
const useEndpoint = cliCommand === 'orquesta' && !!globalCliEndpoint;
|
|
@@ -2507,7 +2590,11 @@ ${userRequestBody}`;
|
|
|
2507
2590
|
// limit (and spawns without a shell), so keep the prompt inline there.
|
|
2508
2591
|
if (!isWindows)
|
|
2509
2592
|
args.push(promptContent);
|
|
2510
|
-
|
|
2593
|
+
// shell:true on Windows joins args unquoted — quote the settings path
|
|
2594
|
+
// (a profile dir can contain spaces).
|
|
2595
|
+
if (readOnlyArgs.length)
|
|
2596
|
+
args.push(...readOnlyArgs.map(a => isWindows && /\s/.test(a) ? `"${a}"` : a));
|
|
2597
|
+
else if (permFlags)
|
|
2511
2598
|
args.push(...permFlags.split(/\s+/).filter(Boolean));
|
|
2512
2599
|
if (baseFlags)
|
|
2513
2600
|
args.push(...baseFlags.split(/\s+/).filter(Boolean));
|
|
@@ -3090,6 +3177,12 @@ ${userRequestBody}`;
|
|
|
3090
3177
|
}
|
|
3091
3178
|
catch { /* already gone */ }
|
|
3092
3179
|
}
|
|
3180
|
+
if (readOnlySettingsPath) {
|
|
3181
|
+
try {
|
|
3182
|
+
fs.unlinkSync(readOnlySettingsPath);
|
|
3183
|
+
}
|
|
3184
|
+
catch { /* already gone */ }
|
|
3185
|
+
}
|
|
3093
3186
|
if (promptId)
|
|
3094
3187
|
promptIdToCommandId.delete(promptId);
|
|
3095
3188
|
pendingSupervisionCallbacks.delete(commandId);
|
|
@@ -3104,7 +3197,7 @@ ${userRequestBody}`;
|
|
|
3104
3197
|
// with the error text. _forceCli guards against re-recursing. The
|
|
3105
3198
|
// recursive call owns final completion (sendComplete/flush), so we skip
|
|
3106
3199
|
// the rest of this handler and resolve once it returns.
|
|
3107
|
-
if (claudeApiError && selectedCli === 'claude' && !options._forceCli && isOrquestaCliAvailable()) {
|
|
3200
|
+
if (claudeApiError && selectedCli === 'claude' && !options._forceCli && !options.readOnly && isOrquestaCliAvailable()) {
|
|
3108
3201
|
logger.warn(`Claude CLI unavailable (${claudeApiError.slice(0, 80)}) — retrying via orquesta-cli`);
|
|
3109
3202
|
addLog(promptId, 'warning', 'system', 'Claude CLI unavailable — falling back to orquesta-cli');
|
|
3110
3203
|
try {
|