subagent-extension-for-codex 0.1.0 → 0.2.0

package/dist/bundle/chunks/{chunk-LZFYKJ4Y.js → chunk-DGCGXY3T.js}

@@ -3,11 +3,14 @@ import {
   JsonlWriter,
   approvalDeciderSchema,
   approvalModeSchema,
+  assertPlainFolderAllowed,
   budgetRaiseSchema,
   dataDirectory,
   deliveries,
   errorCategory,
   gitRepositoryRoot,
+  gitState,
+  gitWorkTreeRoot,
   installRoot,
   logCorrelation,
   logError,
@@ -19,8 +22,9 @@ import {
   reasoningSchema,
   roles,
   startSchema,
-  withLogContext
-} from "./chunk-L3PORPD3.js";
+  withLogContext,
+  within
+} from "./chunk-MOWBM7MZ.js";
 import {
   $ZodObject,
   $ZodType,
@@ -63,6 +67,7 @@ import {
 } from "./chunk-5TX3SEV2.js";
 
 // src/service/platform/panel/host-context.ts
+import { realpath } from "node:fs/promises";
 import { isAbsolute } from "node:path";
 import { fileURLToPath } from "node:url";
 var codexContextCapability = {
@@ -74,21 +79,45 @@ async function withHostRepository(c, args, meta2) {
   const directory = args.host_directory ?? state?.sandboxCwd;
   if (typeof directory !== "string" || directory.length > 4096) return args;
   try {
-    const cwd = fileURLToPath(directory);
-    if (!isAbsolute(cwd)) return args;
-    const root = await gitRepositoryRoot(cwd);
-    const repository = c.projects ? await c.projects.resolve(root) : await c.workspaces.repository(root);
+    const candidate = await hostProjectCandidate(c, directory);
+    if (!candidate) return args;
+    const repository = c.projects ? await c.projects.resolve(candidate.repository) : await c.workspaces.repository(candidate.repository);
     return { ...args, repository };
   } catch {
     return args;
   }
 }
-async function hostProjectCandidate(directory) {
+var isGitRoot = (candidate) => candidate.git === "ready" || candidate.git === "no_commits";
+var permissionDenied = (error) => /Operation not permitted|Permission denied/.test(
+  String(error.stderr)
+);
+async function hostProjectCandidate(c, directory) {
   if (!directory) return void 0;
   try {
     const cwd = fileURLToPath(directory);
     if (!isAbsolute(cwd)) return void 0;
-    return await gitRepositoryRoot(cwd);
+    let root;
+    try {
+      root = await gitWorkTreeRoot(cwd);
+    } catch (error) {
+      if (permissionDenied(error)) return { repository: cwd };
+      throw error;
+    }
+    if (root) {
+      return {
+        repository: root,
+        ...await gitState(root).then(
+          (git) => ({ git }),
+          () => ({})
+        )
+      };
+    }
+    const actual = await realpath(cwd);
+    const registered = c.projects?.list().filter(
+      (project) => project.kind === "repository" && within(project.repository, actual)
+    ).map((project) => project.repository).sort((a, b) => b.length - a.length)[0];
+    if (!registered) await assertPlainFolderAllowed(actual);
+    return { repository: registered ?? actual, git: "none" };
   } catch {
     return void 0;
   }
@@ -8160,6 +8189,7 @@ var panelOutputSchema = external_exports.object({
   }),
   panel_project_candidate: external_exports.object({
     repository: external_exports.string(),
+    git: external_exports.union([external_exports.literal("ready"), external_exports.literal("no_commits"), external_exports.literal("none")]).optional(),
     auto_register: external_exports.boolean()
   }).optional(),
   panel_selection: external_exports.object({
@@ -8684,13 +8714,13 @@ async function resolvePanelContext(c, owner, args) {
   if (target && args.revision && args.revision !== target.revision) {
     throw new Error("Task uses a different revision");
   }
-  const candidate = !args.repository && !target && args.conversation_id !== null ? await hostProjectCandidate(args.host_directory) : void 0;
+  const candidate = !args.repository && !target && args.conversation_id !== null ? await hostProjectCandidate(c, args.host_directory) : void 0;
   return {
-    ...candidate && candidate !== repository ? {
+    ...candidate && candidate.repository !== repository ? {
       panel_project_candidate: {
-        repository: candidate,
+        ...candidate,
         // New task may offer it; starting that task adds it with the user's choice.
-        auto_register: !!c.projects && c.settings.values(owner).projects.auto_register_chat
+        auto_register: isGitRoot(candidate) && !!c.projects && c.settings.values(owner).projects.auto_register_chat
       }
     } : {},
     panel_scope: {
@@ -8847,7 +8877,7 @@ function delegationPanel(htmlPath, initialTasks, context) {
 var SERVER_INSTRUCTIONS = `Delegate work to background workers.
 1. Resolve the repository with get_current_project or list_projects and pass it to start_task as an explicit absolute path. Never guess a path. Tool arguments never grant access. For an unregistered project, follow next_step.
 2. Call list_workers. If a provider is not ready, report readiness.message to the user instead of retrying. Use the reviewer profile for review requests.
-3. Call start_task with the user's full request in description. Tasks use the current checkout by default, including uncommitted changes. Use workspace_strategy worktree for isolated or parallel edits from a committed revision.
+3. Call start_task with the user's full request in description. Tasks use the current checkout by default, including uncommitted changes. Use workspace_strategy worktree for isolated or parallel edits from a committed revision, only on a project whose git is ready.
 4. Supervise with list_messages as its description explains. Read what the worker changed with get_changes, never from its own reply.
 5. A finished task stays open. Continue it with send_message. Reopen its panel with open_subagent_extension_for_codex(task_id), never another start_task.`;
 
@@ -9967,8 +9997,12 @@ async function autoRegisterChatProject(c, owner, meta2, repository) {
     if (!c.projects || !c.settings.values(owner).projects.auto_register_chat) {
       return void 0;
     }
-    const root = await hostProjectCandidate(hostDirectoryFromMeta(meta2));
-    if (!root) return void 0;
+    const candidate = await hostProjectCandidate(
+      c,
+      hostDirectoryFromMeta(meta2)
+    );
+    if (!candidate || !isGitRoot(candidate)) return void 0;
+    const root = candidate.repository;
     if (repository !== void 0 && (!isAbsolute2(repository) || await gitRoot(repository) !== root)) {
       return void 0;
     }
@@ -9979,21 +10013,23 @@ async function autoRegisterChatProject(c, owner, meta2, repository) {
   }
 }
 async function currentChatProject(c, owner, meta2) {
-  const root = await hostProjectCandidate(hostDirectoryFromMeta(meta2));
-  if (!root) {
+  const candidate = await hostProjectCandidate(c, hostDirectoryFromMeta(meta2));
+  if (!candidate) {
     throw new Error(
       "The host supplied no usable local project directory. Use the actual absolute repository from the task context, and ask the user to use Add project in the panel if it is not registered."
     );
   }
+  const { repository: root, git } = candidate;
   const registered = await isApproved(c, root);
-  const auto = !!c.projects && c.settings.values(owner).projects.auto_register_chat;
+  const auto = isGitRoot(candidate) && !!c.projects && c.settings.values(owner).projects.auto_register_chat;
   return {
     repository: root,
+    ...git ? { git } : {},
     registered,
     auto_register_on_task_start: auto,
     // Read-only callers never register; they hand the decision to the user.
     ...registered ? {} : {
-      next_step: auto ? "Starting a task for this repository from this chat adds it automatically. Otherwise ask the user to use Add project in the panel." : "Ask the user to use Add project in the panel before delegating to this project."
+      next_step: auto ? "Starting a task for this repository from this chat adds it automatically. Otherwise ask the user to use Allow tasks here in the panel." : "Ask the user to use Allow tasks here in the panel before delegating to this project."
     }
   };
 }
@@ -10468,7 +10504,10 @@ var settingsSchema = external_exports.strictObject({
     // enabled provider, and reads replace one that's no longer enabled.
     provider: external_exports.string().meta({ title: "Provider" }),
     worker_profile: external_exports.enum(roles).meta({ title: "Worker profile" }).default("reviewer"),
-    workspace_strategy: external_exports.enum(["worktree", "current_repo"]).meta({ title: "Workspace" }).default("current_repo"),
+    workspace_strategy: external_exports.enum(["worktree", "current_repo"]).meta({
+      title: "Workspace",
+      description: "A project with no Git commit always uses the project folder, because worktrees need a commit."
+    }).default("current_repo"),
     // Git checks the whole name when a worktree is created.
     worktree_branch_prefix: external_exports.string().max(100).regex(
       new RegExp(`^${branchPrefixPattern}$`),
@@ -10723,7 +10762,7 @@ function settingsSections(input) {
           kind: "select",
           ...described("task.workspace_strategy"),
           options: options2({
-            current_repo: "Current repository",
+            current_repo: "Project folder",
             worktree: "Isolated worktree"
           })
         },
@@ -10910,19 +10949,19 @@ function agentTools({ c, owner, authority, hostMeta }) {
     get_panel_context: tool({
       readOnly: true,
       conversation: "panel",
-      description: "Resolve panel defaults for repository, revision and conversation from explicit arguments, host_directory or this conversation's latest task. task_id selects an owned task. null conversation_id means all conversations. Never registers a project or starts work. For a returned panel_project_candidate, ask the user to use Add project in the panel.",
+      description: "Resolve panel defaults for repository, revision and conversation from explicit arguments, host_directory or this conversation's latest task. task_id selects an owned task. null conversation_id means all conversations. Never registers a project or starts work. For a returned panel_project_candidate, ask the user to use Allow tasks here in the panel.",
       schema: panelContextInput,
       run: (a) => resolvePanelContext(c, owner, a)
     }),
     list_projects: tool({
       readOnly: true,
-      description: "List registered project roots. Pass one to start_task as the explicit absolute repository. Never registers. If the chat's project is missing, ask the user to use Add project in the panel.",
+      description: "List registered project roots. Pass one to start_task as the explicit absolute repository. git is ready, no_commits or none when known, and only ready supports worktrees. Never registers. If the chat's project is missing, ask the user to use Allow tasks here or Add project in the panel.",
       schema: external_exports.strictObject({}),
-      run: () => c.projects?.list() ?? []
+      run: () => c.projects?.listWithGit() ?? []
     }),
     get_current_project: tool({
       readOnly: true,
-      description: "Find the current chat's local Git root from host directory metadata and report whether it is registered. Never registers. For an unregistered project, follow next_step.",
+      description: "Find the current chat's project from host directory metadata: its Git root, a registered folder containing it, or the directory itself. Reports whether it is registered and its Git state. Never registers. For an unregistered project, follow next_step.",
       schema: external_exports.strictObject({}),
       run: () => currentChatProject(c, owner, hostMeta)
     }),
@@ -10943,7 +10982,7 @@ function agentTools({ c, owner, authority, hostMeta }) {
       openWorld: true,
       panel: true,
       conversation: "chat",
-      description: "Start asynchronous work on the full request in description. The service generates the title. Work runs in the current checkout by default, including uncommitted changes. Reopen existing work with open_subagent_extension_for_codex(task_id), never another start_task.",
+      description: "Start asynchronous work on the full request in description. The service generates the title. Work runs in the current checkout by default, including uncommitted changes. If the result has workspace_fallback, tell the user the task isn't isolated in a worktree and edits apply directly to the project folder. Reopen existing work with open_subagent_extension_for_codex(task_id), never another start_task.",
       schema: startSchema.extend({
         conversation_id: startSchema.shape.conversation_id.nullable(),
         provider: startSchema.shape.provider.unwrap().optional(),
@@ -11091,7 +11130,7 @@ function agentTools({ c, owner, authority, hostMeta }) {
     }),
     get_changes: tool({
       readOnly: true,
-      description: "Read the worker's recorded edits for the whole task or the latest turn as a unified diff with per-file stats. Prefer this to the worker's own account of its changes. Every page lists every file. Pass next_cursor to read more diffs. Incomplete files have no diff, and unrecorded_commands means a command changed files without recorded edits. Inspect those files directly. Commits and worktree removal leave these diffs unchanged. Worktree commits are on task.branch.",
+      description: "Read the worker's recorded edits for the whole task or the latest turn as a unified diff with per-file stats. Prefer this to the worker's own account of its changes. Every page lists every file. Pass next_cursor to read more diffs. Incomplete files have no diff, and unrecorded_commands means a command changed or, in a folder without Git, may have changed files without recorded edits. Inspect those files directly. Commits and worktree removal leave these diffs unchanged. Worktree commits are on task.branch.",
       schema: taskId.extend({
         scope: external_exports.enum(["task", "turn"]).default("task"),
         cursor: external_exports.string().max(300).optional()
@@ -11561,7 +11600,7 @@ import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 var execute = promisify(execFile);
 var script = `try
-  set selectedFolder to choose folder with prompt "Choose a Git repository to add to Delegated Work"
+  set selectedFolder to choose folder with prompt "Choose a folder to add to Delegated Work"
   return POSIX path of selectedFolder
 on error number -128
   return ""
@@ -11570,7 +11609,7 @@ var pending = false;
 async function browseProject(options3 = { platform: process.platform, execute }) {
   if (options3.platform !== "darwin") {
     throw new Error(
-      "Folder browsing is available on macOS. Enter an absolute repository path instead."
+      "Folder browsing is available on macOS. Enter an absolute folder path instead."
     );
   }
   if (pending) {
@@ -11597,7 +11636,7 @@ async function browseProject(options3 = { platform: process.platform, execute })
 function projectTools(c, owner) {
   return {
     app_register_project: tool({
-      description: "User interface only: approve and persist a Git repository selected by the user. Does not approve its parent or nested repositories.",
+      description: "User interface only: approve and persist a folder selected by the user, with or without Git. Does not approve its parent or nested repositories.",
       schema: external_exports.strictObject({ repository: external_exports.string().min(1).max(4096) }),
       run: async (a) => {
         if (!c.projects) {
@@ -11695,127 +11734,9 @@ function queueTools(c, owner) {
 }
 
 // src/service/features/settings/settings-file.ts
-import { randomUUID } from "node:crypto";
-import { mkdir as mkdir2, writeFile } from "node:fs/promises";
-import { join as join3 } from "node:path";
-
-// src/service/features/settings/downloads-directory.ts
-import { execFile as execFile2 } from "node:child_process";
-import { readFile as readFile2 } from "node:fs/promises";
+import { writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
-import { isAbsolute as isAbsolute3, join as join2, win32 } from "node:path";
-import { promisify as promisify2 } from "node:util";
-var executeFile = promisify2(execFile2);
-var windowsDownloads = `
-$ErrorActionPreference = 'Stop'
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding
-Add-Type @'
-using System;
-using System.Runtime.InteropServices;
-public static class DownloadsFolder {
-  [DllImport("shell32.dll")]
-  public static extern int SHGetKnownFolderPath(
-    [MarshalAs(UnmanagedType.LPStruct)] Guid id, uint flags,
-    IntPtr token, out IntPtr path);
-}
-'@
-$path = [IntPtr]::Zero
-try {
-  # KF_FLAG_DONT_VERIFY returns the configured path even before the folder exists.
-  $result = [DownloadsFolder]::SHGetKnownFolderPath(
-    [Guid]'374DE290-123F-4565-9164-39C4925E467B', 0x4000, [IntPtr]::Zero, [ref]$path)
-  [Runtime.InteropServices.Marshal]::ThrowExceptionForHR($result)
-  [Runtime.InteropServices.Marshal]::PtrToStringUni($path)
-} finally {
-  [Runtime.InteropServices.Marshal]::FreeCoTaskMem($path)
-}
-`;
-async function execute2(command, args) {
-  try {
-    const { stdout } = await executeFile(command, args, {
-      encoding: "utf8",
-      timeout: 1e4,
-      maxBuffer: 16384,
-      windowsHide: true
-    });
-    return stdout;
-  } catch (error) {
-    throw new Error("The system couldn't locate the Downloads folder.", {
-      cause: error
-    });
-  }
-}
-function xdgDownloadPath(text, home) {
-  const entry = text.split(/\r?\n/).findLast((line) => /^\s*XDG_DOWNLOAD_DIR\s*=/.test(line));
-  if (entry === void 0) return join2(home, "Downloads");
-  const match = /^\s*XDG_DOWNLOAD_DIR="((?:\\.|[^"\\])*)"\s*(?:#.*)?$/.exec(
-    entry
-  );
-  if (!match) throw new Error("The Downloads folder setting is invalid.");
-  let raw = match[1], path = "";
-  if (raw === "$HOME" || raw.startsWith("$HOME/")) {
-    path = home;
-    raw = raw.slice(5);
-  }
-  for (let index = 0; index < raw.length; index++) {
-    const character = raw[index];
-    if (character === "\\" && /[\\"$`]/.test(raw[index + 1] ?? "")) {
-      path += raw[++index];
-    } else if (character === "$" || character === "`") {
-      throw new Error(
-        "The Downloads folder setting uses an unsupported variable or command."
-      );
-    } else {
-      path += character;
-    }
-  }
-  return path;
-}
-async function downloadsDirectory(options3 = {}) {
-  const {
-    platform = process.platform,
-    home = homedir(),
-    env = process.env,
-    execute: run2 = execute2
-  } = options3;
-  let path;
-  if (platform === "darwin") {
-    path = await run2("/usr/bin/osascript", [
-      "-e",
-      "POSIX path of (path to downloads folder)"
-    ]);
-  } else if (platform === "win32") {
-    path = await run2(
-      win32.join(
-        env.SystemRoot ?? "C:\\Windows",
-        "System32",
-        "WindowsPowerShell",
-        "v1.0",
-        "powershell.exe"
-      ),
-      ["-NoProfile", "-NonInteractive", "-Command", windowsDownloads]
-    );
-  } else if (platform === "linux") {
-    const config = env.XDG_CONFIG_HOME && isAbsolute3(env.XDG_CONFIG_HOME) ? env.XDG_CONFIG_HOME : join2(home, ".config");
-    let text = "";
-    try {
-      text = await readFile2(join2(config, "user-dirs.dirs"), "utf8");
-    } catch (error) {
-      if (error.code !== "ENOENT") throw error;
-    }
-    path = xdgDownloadPath(text, home);
-  } else {
-    throw new Error(
-      "Saving settings files is unavailable on this operating system."
-    );
-  }
-  if (platform !== "linux") path = path.replace(/\r?\n$/, "");
-  const absolute = platform === "win32" ? /^(?:[a-z]:[\\/]|[\\/]{2}[^\\/]+[\\/][^\\/]+)/i.test(path) : isAbsolute3(path);
-  if (!absolute) {
-    throw new Error("Downloads must be an absolute folder path.");
-  }
-  return path;
-}
+import { join as join2 } from "node:path";
 
 // src/service/features/settings/settings-transfer.ts
 var SETTINGS_FORMAT = 2;
@@ -11883,15 +11804,10 @@ function importSettings(settings, owner, input) {
 
 // src/service/features/settings/settings-file.ts
 var settingsFileOutputSchema = external_exports.object({ path: external_exports.string() });
-async function saveSettingsFile(settings, owner, directory = downloadsDirectory) {
+async function saveSettingsFile(settings, owner) {
   const { document: document2 } = exportSettings(settings, owner);
-  const folder = await directory();
-  await mkdir2(folder, { recursive: true, mode: 448 });
-  const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-  const path = join3(
-    folder,
-    `delegated-work-settings-${timestamp}-${randomUUID()}.json`
-  );
+  const timestamp = (/* @__PURE__ */ new Date()).toISOString().slice(0, 19).replace(/:/g, "-");
+  const path = join2(homedir(), `delegated-work-settings-${timestamp}Z.json`);
   await writeFile(path, `${document2}
 `, {
     encoding: "utf8",
@@ -11918,7 +11834,7 @@ function settingsTransferTools(settings, owner) {
       run: (a) => importSettings(settings, owner, a)
     }),
     app_save_settings_file: tool({
-      description: "User interface only: save the user's defaults as a new JSON file in Downloads on the service computer and return its path.",
+      description: "User interface only: save the user's defaults as a new JSON file in the home folder on the service computer and return its path.",
       schema: external_exports.strictObject({}),
       outputSchema: settingsFileOutputSchema,
       run: () => saveSettingsFile(settings, owner)
@@ -12189,7 +12105,7 @@ async function callTool(c, owner, name, args, authority = "parent", hostMeta) {
 // src/service/platform/service/process-info.ts
 import { execFileSync } from "node:child_process";
 import { readFileSync as readFileSync2, readlinkSync } from "node:fs";
-import { basename, dirname, join as join4 } from "node:path";
+import { basename, dirname, join as join3 } from "node:path";
 function inspectProcess(pid) {
   try {
     if (process.platform === "linux") return inspectLinuxProcess(pid);
@@ -12219,13 +12135,13 @@ function inspectProcessIdentity(pid) {
   return void 0;
 }
 function isProcessRunning(pid) {
-  let permissionDenied = false;
+  let permissionDenied2 = false;
   try {
     process.kill(pid, 0);
   } catch (error) {
     const code = error.code;
     if (code === "ESRCH") return false;
-    if (code === "EPERM") permissionDenied = true;
+    if (code === "EPERM") permissionDenied2 = true;
     else return true;
   }
   if (process.platform === "linux") {
@@ -12234,7 +12150,7 @@ function isProcessRunning(pid) {
       return state !== "Z" && state !== "X";
     } catch (error) {
       if (error.code === "ENOENT") {
-        return permissionDenied;
+        return permissionDenied2;
       }
     }
   }
@@ -12250,7 +12166,7 @@ function isExtensionService(owner, lockFile) {
   let metadata;
   try {
     metadata = JSON.parse(
-      readFileSync2(join4(dirname(lockFile), "service.json"), "utf8")
+      readFileSync2(join3(dirname(lockFile), "service.json"), "utf8")
     );
   } catch {
     return false;
@@ -12777,4 +12693,4 @@ export {
   toolStructuredContent,
   callTool
 };
-//# sourceMappingURL=chunk-LZFYKJ4Y.js.map
+//# sourceMappingURL=chunk-DGCGXY3T.js.map