@0xmaxma/claude-gateway 2.0.6 → 2.0.7

package/dist/session/codex-auth.js

@@ -0,0 +1,266 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CodexReadinessError = void 0;
+exports.inspectCodexAccount = inspectCodexAccount;
+exports.resolveCodexCredentials = resolveCodexCredentials;
+exports.codexSafemodeEnvironment = codexSafemodeEnvironment;
+const codex_policy_1 = require("./codex-policy");
+const child_process_1 = require("child_process");
+const promises_1 = require("fs/promises");
+const smol_toml_1 = require("smol-toml");
+const path_1 = require("path");
+const os_1 = require("os");
+const crypto_1 = require("crypto");
+class CodexReadinessError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+exports.CodexReadinessError = CodexReadinessError;
+const unavailable = (code, message) => { throw new CodexReadinessError(code, message); };
+/** Native config/account discovery only: no thread, tool server or model request. */
+function inspectCodexAccount(bin, env = process.env, exportToken = false, refreshToken = false) {
+    return new Promise((resolve, reject) => {
+        const child = (0, child_process_1.spawn)(bin, [...(0, codex_policy_1.codexPolicyArgs)(), 'app-server', '--listen', 'stdio://'], {
+            cwd: env.HOME || (0, os_1.homedir)(), env, stdio: 'pipe',
+        });
+        let buffer = '', config, accountResult, settled = false;
+        const finish = (error, account, auth) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.stdin.destroy();
+            child.stdout.destroy();
+            child.stderr.destroy();
+            child.kill('SIGTERM');
+            const kill = setTimeout(() => { child.kill('SIGKILL'); child.unref(); }, 1000);
+            kill.unref();
+            child.once('close', () => clearTimeout(kill));
+            if (error)
+                reject(error);
+            else
+                resolve({ config, account, ...(auth ? { auth } : {}) });
+        };
+        const timer = setTimeout(() => finish(new CodexReadinessError('CODEX_PROBE_TIMEOUT', 'Codex native configuration/auth check timed out. Check Codex under the gateway service user.')), refreshToken ? 8500 : 10000);
+        const send = (id, method, params) => child.stdin.write(JSON.stringify({ id, method, params }) + '\n');
+        child.on('error', () => finish(new CodexReadinessError('CODEX_UNAVAILABLE', 'Codex cannot start. Install it separately and check the gateway service PATH.')));
+        child.on('close', () => finish(new CodexReadinessError('CODEX_CONFIG_UNAVAILABLE', 'Codex could not read its native configuration. Run codex login status as the gateway service user.')));
+        child.stdin.on('error', () => finish(new CodexReadinessError('CODEX_CONFIG_UNAVAILABLE', 'Codex configuration probe closed unexpectedly.')));
+        child.stderr.resume(); // Native diagnostics may contain account/credential information.
+        child.stdout.setEncoding('utf8');
+        child.stdout.on('data', (chunk) => {
+            buffer += chunk;
+            if (buffer.length > 2 * 1024 * 1024)
+                return finish(new CodexReadinessError('CODEX_CONFIG_UNAVAILABLE', 'Codex configuration exceeded the inspection limit.'));
+            let newline;
+            while ((newline = buffer.indexOf('\n')) >= 0) {
+                const line = buffer.slice(0, newline);
+                buffer = buffer.slice(newline + 1);
+                let event;
+                try {
+                    event = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                if (event.error)
+                    return finish(new CodexReadinessError('CODEX_CONFIG_UNAVAILABLE', 'Codex rejected the native configuration/auth probe. Update Codex or check its native configuration.'));
+                if (event.id === 1) {
+                    child.stdin.write(JSON.stringify({ method: 'initialized', params: {} }) + '\n');
+                    send(2, 'config/read', { includeLayers: false });
+                }
+                else if (event.id === 2) {
+                    config = event.result?.config;
+                    if (!config)
+                        return finish(new CodexReadinessError('CODEX_CONFIG_UNAVAILABLE', 'Codex omitted effective configuration.'));
+                    send(3, 'account/read', { refreshToken: false });
+                }
+                else if (event.id === 3) {
+                    accountResult = event.result;
+                    if (exportToken)
+                        send(4, 'getAuthStatus', { includeToken: true, refreshToken });
+                    else
+                        finish(undefined, accountResult);
+                }
+                else if (event.id === 4)
+                    finish(undefined, accountResult, event.result);
+            }
+        });
+        send(1, 'initialize', { clientInfo: { name: 'gateway_readiness', version: '1.0.0' } });
+    });
+}
+function credentials(baseUrl, key, allowDockerHost = false) {
+    let url;
+    try {
+        url = new URL(baseUrl);
+    }
+    catch {
+        return unavailable('CODEX_PROVIDER_INVALID', 'Codex Responses provider URL is invalid.');
+    }
+    if (url.username || url.password || url.search || url.hash ||
+        !(url.protocol === 'https:' || url.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]', ...(allowDockerHost ? ['host.docker.internal'] : [])].includes(url.hostname))) {
+        return unavailable('CODEX_PROVIDER_INVALID', 'Codex requires an HTTPS Responses provider (local HTTP is allowed).');
+    }
+    if (typeof key !== 'string' || !key.trim() || /[\r\n\0]/.test(key))
+        return unavailable('CODEX_AUTH_REQUIRED', 'Codex has no usable native API key. Run codex login under the gateway service user, or use Claude workers.');
+    return { baseUrl, key, fingerprint: (0, crypto_1.createHash)('sha256').update(JSON.stringify([baseUrl, key])).digest('hex') };
+}
+// Coalesce concurrent native probes/refreshes. The CLI owns native refresh/storage;
+// the gateway retains no refresh token and does not write the user's auth files.
+const nativeProbes = new Map();
+function nativeCredentials(bin, env, refresh) {
+    const key = (0, crypto_1.createHash)('sha256').update(JSON.stringify([bin, Object.entries(env).sort(), refresh])).digest('hex');
+    const existing = nativeProbes.get(key);
+    if (existing)
+        return existing;
+    const pending = inspectCodexAccount(bin, env, true, refresh).finally(() => nativeProbes.delete(key));
+    nativeProbes.set(key, pending);
+    return pending;
+}
+/** Resolve only the selected native provider. Never inspect Claude credentials. */
+async function resolveCodexCredentials(options) {
+    const env = options.env ?? process.env;
+    // Existing explicit worker overrides remain explicit, not silently replaced by native login.
+    if (options.baseUrl !== undefined || options.apiKeyEnv !== undefined) {
+        const name = options.apiKeyEnv ?? 'OPENAI_API_KEY';
+        if (!/^[A-Z_][A-Z0-9_]*$/.test(name) || /^(ANTHROPIC_|CLAUDE_)/.test(name))
+            return unavailable('CODEX_PROVIDER_INVALID', 'Codex requires its own API-key environment variable.');
+        return credentials(options.baseUrl ?? 'https://api.openai.com/v1', env[name], options.allowDockerHost);
+    }
+    const { config, account, auth } = await nativeCredentials(options.bin, env, options.refreshToken ?? false);
+    const id = config.model_provider ?? 'openai';
+    const provider = config.model_providers?.[id] ?? (id === 'openai' ? { requires_openai_auth: true } : undefined);
+    if (!provider || provider.wire_api && provider.wire_api !== 'responses' || provider.auth ||
+        Object.keys(provider.http_headers ?? {}).length || Object.keys(provider.env_http_headers ?? {}).length || Object.keys(provider.query_params ?? {}).length || provider.experimental_bearer_token) {
+        return unavailable('CODEX_PROVIDER_UNSUPPORTED', 'This native Codex provider needs settings that isolated workers cannot safely transfer. Use native Codex safemode or Claude workers.');
+    }
+    const base = provider.base_url ?? (id === 'openai' ? env.OPENAI_BASE_URL || 'https://api.openai.com/v1' : '');
+    if (!provider.requires_openai_auth && provider.env_key)
+        return credentials(base, env[provider.env_key], options.allowDockerHost);
+    if (account?.account?.type === 'chatgpt' || auth?.authMethod === 'chatgpt' || auth?.authMethod === 'chatgptAuthTokens') {
+        // Native account export handles file/keyring/auto storage. Never copy auth.json,
+        // refresh tokens, or the native home into a worker (especially a container).
+        if (id !== 'openai' || provider.base_url || env.OPENAI_BASE_URL)
+            return unavailable('CODEX_PROVIDER_UNSUPPORTED', 'ChatGPT workers require the native OpenAI provider endpoint. Remove a conflicting native endpoint override.');
+        let claims;
+        try {
+            claims = JSON.parse(Buffer.from(auth.authToken.split('.')[1], 'base64url').toString('utf8'));
+        }
+        catch {
+            return unavailable('CODEX_AUTH_REQUIRED', 'Codex could not export a usable ChatGPT access token. Run codex login as the gateway service user.');
+        }
+        const identity = claims?.['https://api.openai.com/auth'];
+        const accountId = identity?.chatgpt_account_id;
+        if (typeof accountId !== 'string' || !accountId || typeof claims.sub !== 'string' || !claims.sub || typeof auth.authToken !== 'string' || /[\r\n\0]/.test(auth.authToken))
+            return unavailable('CODEX_AUTH_REQUIRED', 'Codex ChatGPT authentication is missing its account identity. Run codex login again.');
+        return { baseUrl: 'https://chatgpt.com/backend-api/codex', key: '',
+            fingerprint: (0, crypto_1.createHash)('sha256').update(JSON.stringify(['chatgpt', accountId, claims.sub])).digest('hex'),
+            chatgpt: { accessToken: auth.authToken, chatgptAccountId: accountId,
+                ...(typeof identity.chatgpt_plan_type === 'string' ? { chatgptPlanType: identity.chatgpt_plan_type } : {}) } };
+    }
+    if (auth?.authMethod && !['apikey', 'apiKey'].includes(auth.authMethod))
+        return unavailable('CODEX_PROVIDER_UNSUPPORTED', 'The installed Codex cannot export this native authentication mode to an isolated worker. Update Codex or use the Claude Code harness.');
+    return credentials(base, auth?.authToken, options.allowDockerHost);
+}
+/** Overlay native config data without inheriting object prototypes. */
+function overlayConfig(base, next) {
+    const result = Object.assign(Object.create(null), base);
+    for (const [name, value] of Object.entries(next ?? {})) {
+        if (['__proto__', 'prototype', 'constructor'].includes(name))
+            continue;
+        result[name] = value && typeof value === 'object' && !Array.isArray(value)
+            ? overlayConfig(result[name], value) : value;
+    }
+    return result;
+}
+/** Select auth using the same profile then CLI-override precedence as native Codex.
+ * Only configuration is read; interactive permission flags are never used by the probe. */
+async function safemodeProviderConfig(config, args, source) {
+    let profile;
+    const overrides = [];
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === '--')
+            break;
+        if (arg === '-p' || arg === '--profile')
+            profile = args[++i];
+        else if (arg.startsWith('--profile='))
+            profile = arg.slice(10);
+        else if (/^-p.+/.test(arg))
+            profile = arg.slice(2).replace(/^=/, '');
+        else if (arg === '-c' || arg === '--config')
+            overrides.push(args[++i]);
+        else if (arg.startsWith('--config='))
+            overrides.push(arg.slice(9));
+        else if (/^-c.+/.test(arg))
+            overrides.push(arg.slice(2).replace(/^=/, ''));
+    }
+    if (profile) {
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}$/.test(profile))
+            return unavailable('CODEX_PROVIDER_INVALID', 'Invalid native Codex profile name.');
+        const home = source.CODEX_HOME || (0, path_1.join)(source.HOME || (0, os_1.homedir)(), '.codex');
+        const file = (0, path_1.join)(home, `${profile}.config.toml`);
+        try {
+            const info = await (0, promises_1.stat)(file);
+            if (!info.isFile() || info.size > 1024 * 1024)
+                throw new Error('Invalid profile');
+            config = overlayConfig(config, (0, smol_toml_1.parse)(await (0, promises_1.readFile)(file, 'utf8')));
+        }
+        catch (error) {
+            // Older native CLIs store named profiles inside config.toml.
+            if (error.code === 'ENOENT' && config.profiles?.[profile])
+                config = overlayConfig(config, config.profiles[profile]);
+            else
+                return unavailable('CODEX_CONFIG_UNAVAILABLE', 'Cannot inspect the selected native Codex profile safely. Check its configuration file.');
+        }
+    }
+    for (const override of overrides) {
+        if (typeof override !== 'string' || !override.includes('='))
+            return unavailable('CODEX_PROVIDER_INVALID', 'Invalid native Codex configuration override.');
+        let parsed;
+        try {
+            parsed = (0, smol_toml_1.parse)(override);
+        }
+        catch {
+            // Native -c treats non-TOML values as literal strings.
+            const at = override.indexOf('=');
+            try {
+                parsed = (0, smol_toml_1.parse)(`${override.slice(0, at)} = ${JSON.stringify(override.slice(at + 1))}`);
+            }
+            catch {
+                return unavailable('CODEX_PROVIDER_INVALID', 'Invalid native Codex configuration override.');
+            }
+        }
+        config = overlayConfig(config, parsed);
+    }
+    return config;
+}
+/** Safemode stays in the native HOME, so OAuth/keyring refresh remains CLI-owned.
+ * Explicit params delegate login validation, but never drop selected provider credentials. */
+async function codexSafemodeEnvironment(bin, env, options = {}) {
+    const source = options.source ?? process.env;
+    const inspected = await inspectCodexAccount(bin, source);
+    const config = await safemodeProviderConfig(inspected.config, options.nativeArgs ?? [], source);
+    const id = config.model_provider ?? 'openai';
+    const provider = config.model_providers?.[id];
+    const result = { ...env };
+    const names = new Set(Object.values(provider?.env_http_headers ?? {}));
+    if (provider?.env_key && !provider.requires_openai_auth)
+        names.add(provider.env_key);
+    for (const name of names) {
+        if (typeof name !== 'string' || !/^[A-Z_][A-Z0-9_]*$/.test(name) || /^(GH_|GITHUB_|GATEWAY_|ANTHROPIC_|CLAUDE_|LD_|DYLD_)/.test(name) || ['NODE_OPTIONS', 'BASH_ENV', 'ENV', 'SHELLOPTS'].includes(name)) {
+            return unavailable('CODEX_AUTH_REQUIRED', 'The selected native Codex credential variable is not permitted in safemode.');
+        }
+        if (source[name])
+            result[name] = source[name];
+        else if (options.nativeArgs === undefined)
+            return unavailable('CODEX_AUTH_REQUIRED', 'The native Codex provider credential is unavailable to safemode. Check its env_key under the gateway service user.');
+    }
+    if (options.nativeArgs === undefined && !(provider?.env_key && !provider.requires_openai_auth) && !inspected.account?.account) {
+        return unavailable('CODEX_AUTH_REQUIRED', 'Codex is not logged in. Run codex login first, or start safemode --cli claude. An existing session will not switch harnesses.');
+    }
+    return result;
+}
+//# sourceMappingURL=codex-auth.js.map

package/dist/session/codex-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth.js","sourceRoot":"","sources":["../../src/session/codex-auth.ts"],"names":[],"mappings":";;;AAmBA,kDA+CC;AA0BD,0DAkCC;AA2DD,4DAqBC;AA9MD,iDAAiD;AACjD,iDAAsC;AACtC,0CAA6C;AAC7C,yCAA+C;AAC/C,+BAA4B;AAC5B,2BAA6B;AAC7B,mCAAoC;AAOpC,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAqB,IAAY,EAAE,OAAe;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAhD,SAAI,GAAJ,IAAI,CAAQ;IAAqC,CAAC;CACxE;AAFD,kDAEC;AACD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhH,qFAAqF;AACrF,SAAgB,mBAAmB,CAAC,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,KAAK,EAAE,YAAY,GAAG,KAAK;IAC9H,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,CAAC,GAAG,IAAA,8BAAe,GAAE,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE;YACrF,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,IAAA,YAAO,GAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM;SAC/C,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,EAAE,MAAW,EAAE,aAAkB,EAAE,OAAO,GAAG,KAAK,CAAC;QAClE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAAa,EAAE,IAAU,EAAE,EAAE;YAC1D,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5D,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,8FAA8F,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpN,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,MAAe,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/H,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,+EAA+E,CAAC,CAAC,CAAC,CAAC;QAC/J,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,oGAAoG,CAAC,CAAC,CAAC,CAAC;QAC3L,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,gDAAgD,CAAC,CAAC,CAAC,CAAC;QAC7I,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,iEAAiE;QACxF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAAE,OAAO,MAAM,CAAC,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,oDAAoD,CAAC,CAAC,CAAC;YAC9J,IAAI,OAAe,CAAC;YACpB,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBAC1E,IAAI,KAAU,CAAC;gBACf,IAAI,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACrD,IAAI,KAAK,CAAC,KAAK;oBAAE,OAAO,MAAM,CAAC,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,qGAAqG,CAAC,CAAC,CAAC;gBAC3L,IAAI,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBACnB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;oBAChF,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,CAAC;qBAAM,IAAI,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC1B,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;oBAC9B,IAAI,CAAC,MAAM;wBAAE,OAAO,MAAM,CAAC,IAAI,mBAAmB,CAAC,0BAA0B,EAAE,wCAAwC,CAAC,CAAC,CAAC;oBAC1H,IAAI,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,CAAC;qBAAM,IAAI,KAAK,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC1B,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;oBAC7B,IAAI,WAAW;wBAAE,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;;wBAC3E,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,KAAK,CAAC,EAAE,KAAK,CAAC;oBAAE,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,GAAY,EAAE,eAAe,GAAG,KAAK;IACzE,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,WAAW,CAAC,wBAAwB,EAAE,0CAA0C,CAAC,CAAC;IAAC,CAAC;IACnI,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QACxD,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC/K,OAAO,WAAW,CAAC,wBAAwB,EAAE,qEAAqE,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,qBAAqB,EAAE,4GAA4G,CAAC,CAAC;IAC5N,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClH,CAAC;AAED,oFAAoF;AACpF,iFAAiF;AACjF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkD,CAAC;AAC/E,SAAS,iBAAiB,CAAC,GAAW,EAAE,GAAsB,EAAE,OAAgB;IAC9E,MAAM,GAAG,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClH,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrG,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AAC5E,KAAK,UAAU,uBAAuB,CAAC,OAA0I;IACtL,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,6FAA6F;IAC7F,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;QACnD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC,wBAAwB,EAAE,sDAAsD,CAAC,CAAC;QACjL,OAAO,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,2BAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC;IAC3G,MAAM,EAAE,GAAG,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChH,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,IAAI;QACpF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,yBAAyB,EAAE,CAAC;QACpM,OAAO,WAAW,CAAC,4BAA4B,EAAE,sIAAsI,CAAC,CAAC;IAC3L,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9G,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACjI,IAAI,OAAO,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,IAAI,EAAE,UAAU,KAAK,mBAAmB,EAAE,CAAC;QACvH,iFAAiF;QACjF,6EAA6E;QAC7E,IAAI,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,eAAe;YAAE,OAAO,WAAW,CAAC,4BAA4B,EAAE,6GAA6G,CAAC,CAAC;QACjO,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QACrG,MAAM,CAAC;YAAC,OAAO,WAAW,CAAC,qBAAqB,EAAE,oGAAoG,CAAC,CAAC;QAAC,CAAC;QAC1J,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,6BAA6B,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,QAAQ,EAAE,kBAAkB,CAAC;QAC/C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,WAAW,CAAC,qBAAqB,EAAE,sFAAsF,CAAC,CAAC;QAC7S,OAAO,EAAE,OAAO,EAAE,uCAAuC,EAAE,GAAG,EAAE,EAAE;YAChE,WAAW,EAAE,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1G,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS;gBACjE,GAAG,CAAC,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IACrH,CAAC;IACD,IAAI,IAAI,EAAE,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,WAAW,CAAC,4BAA4B,EAAE,uIAAuI,CAAC,CAAC;IAClQ,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;AACrE,CAAC;AAED,uEAAuE;AACvE,SAAS,aAAa,CAAC,IAAS,EAAE,IAAS;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACxE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;2FAC2F;AAC3F,KAAK,UAAU,sBAAsB,CAAC,MAAW,EAAE,IAAc,EAAE,MAAyB;IAC1F,IAAI,OAA2B,CAAC;IAChC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM;QACxB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW;YAAE,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACxD,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;aAChE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,UAAU;YAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAClE,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aAC9D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,WAAW,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;QAC5I,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,IAAA,WAAI,EAAC,MAAM,CAAC,IAAI,IAAI,IAAA,YAAO,GAAE,EAAE,QAAQ,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,GAAG,OAAO,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAClF,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,IAAA,iBAAS,EAAC,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;gBAAE,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;;gBAC1I,OAAO,WAAW,CAAC,0BAA0B,EAAE,wFAAwF,CAAC,CAAC;QAChJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC,wBAAwB,EAAE,8CAA8C,CAAC,CAAC;QAC1J,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAA,iBAAS,EAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QACrC,MAAM,CAAC;YACL,uDAAuD;YACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAA,iBAAS,EAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACnG,MAAM,CAAC;gBAAC,OAAO,WAAW,CAAC,wBAAwB,EAAE,8CAA8C,CAAC,CAAC;YAAC,CAAC;QACzG,CAAC;QACD,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;8FAC8F;AACvF,KAAK,UAAU,wBAAwB,CAAC,GAAW,EAAE,GAAsB,EAChF,UAAiE,EAAE;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAChG,MAAM,EAAE,GAAG,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAa,CAAC,CAAC;IAC3F,IAAI,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAC,UAAU,EAAC,KAAK,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtM,OAAO,WAAW,CAAC,qBAAqB,EAAE,6EAA6E,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;aACzC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,qBAAqB,EAAE,oHAAoH,CAAC,CAAC;IAC7M,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9H,OAAO,WAAW,CAAC,qBAAqB,EAAE,+HAA+H,CAAC,CAAC;IAC7K,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/session/codex-container-runtime.d.ts

@@ -0,0 +1,15 @@
+import type { AgentConfig } from '../types';
+import { CodexRuntime } from './codex-runtime';
+export declare const CODEX_RUNTIME_LABEL = "ai.claude-gateway.codex-runtime";
+export declare const CODEX_CONTAINER_BIN = "/opt/gateway-codex/bin/codex";
+export declare const CODEX_RUNTIME_MAINTENANCE = "Drain work and stop only the app agent service, then run claude-gateway app refresh-runtime APP_NAME. All agents sharing this container must select the same host Codex runtime.";
+/** Bind sources belong to this host, never a remote Docker machine. */
+export declare function assertLocalCodexDocker(): Promise<void>;
+/** Derive the narrow runtime allowlist from the native executable, never from labels.
+ * Only validated executable/resource mounts qualify, not an arbitrary parent directory.
+ * Task startup separately matches these against the operator-selected runtime. */
+export declare function inspectedCodexRuntime(c: any): CodexRuntime | undefined;
+export declare function assertCodexRuntimeInspection(c: any, runtime: CodexRuntime): void;
+/** Read-only preflight. Never refresh a container underneath active work. */
+export declare function inspectSelectedCodexRuntime(agent: AgentConfig, runtime: CodexRuntime): Promise<string>;
+//# sourceMappingURL=codex-container-runtime.d.ts.map

package/dist/session/codex-container-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-container-runtime.d.ts","sourceRoot":"","sources":["../../src/session/codex-container-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAuB,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpE,eAAO,MAAM,mBAAmB,oCAAoC,CAAC;AACrE,eAAO,MAAM,mBAAmB,iCAAiC,CAAC;AAClE,eAAO,MAAM,yBAAyB,qLAAqL,CAAC;AAY5N,uEAAuE;AACvE,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAc5D;AAED;;kFAEkF;AAClF,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,GAAG,GAAG,YAAY,GAAG,SAAS,CAOtE;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAUhF;AAED,6EAA6E;AAC7E,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAU5G"}

package/dist/session/codex-container-runtime.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CODEX_RUNTIME_MAINTENANCE = exports.CODEX_CONTAINER_BIN = exports.CODEX_RUNTIME_LABEL = void 0;
+exports.assertLocalCodexDocker = assertLocalCodexDocker;
+exports.inspectedCodexRuntime = inspectedCodexRuntime;
+exports.assertCodexRuntimeInspection = assertCodexRuntimeInspection;
+exports.inspectSelectedCodexRuntime = inspectSelectedCodexRuntime;
+const child_process_1 = require("child_process");
+const codex_runtime_1 = require("./codex-runtime");
+exports.CODEX_RUNTIME_LABEL = 'ai.claude-gateway.codex-runtime';
+exports.CODEX_CONTAINER_BIN = '/opt/gateway-codex/bin/codex';
+exports.CODEX_RUNTIME_MAINTENANCE = 'Drain work and stop only the app agent service, then run claude-gateway app refresh-runtime APP_NAME. All agents sharing this container must select the same host Codex runtime.';
+/** Bound each Docker read without blocking gateway HTTP, voice or timers. */
+function readDocker(args, timeout, maxBuffer) {
+    return new Promise((resolve, reject) => {
+        (0, child_process_1.execFile)('docker', args, { encoding: 'utf8', timeout, maxBuffer }, (error, stdout) => {
+            if (error)
+                reject(error);
+            else
+                resolve(stdout);
+        });
+    });
+}
+/** Bind sources belong to this host, never a remote Docker machine. */
+async function assertLocalCodexDocker() {
+    let endpoint = process.env.DOCKER_CONTEXT ? undefined : process.env.DOCKER_HOST;
+    try {
+        if (!endpoint) {
+            const contexts = JSON.parse(await readDocker(['context', 'inspect'], 5000, 256 * 1024));
+            endpoint = contexts[0]?.Endpoints?.docker?.Host;
+        }
+        if (!endpoint?.startsWith('unix://'))
+            throw new Error('remote');
+        const info = JSON.parse(await readDocker(['info', '--format', '{{json .}}'], 5000, 256 * 1024));
+        const arch = info.Architecture === 'x86_64' ? 'x64' : info.Architecture === 'aarch64' ? 'arm64' : info.Architecture;
+        if (/docker desktop/i.test(info.OperatingSystem ?? '') || /desktop-linux/i.test(process.env.DOCKER_CONTEXT ?? '') || process.platform !== 'linux' || info.OSType !== 'linux' || arch !== process.arch)
+            throw new Error('incompatible');
+    }
+    catch {
+        throw new Error('CODEX_CONTAINER_RUNTIME_UNAVAILABLE: host runtime mounts require a local Linux Docker daemon with the same CPU architecture. Remote Docker and Docker Desktop are unsupported.');
+    }
+}
+/** Derive the narrow runtime allowlist from the native executable, never from labels.
+ * Only validated executable/resource mounts qualify, not an arbitrary parent directory.
+ * Task startup separately matches these against the operator-selected runtime. */
+function inspectedCodexRuntime(c) {
+    const native = (c.Mounts ?? []).filter((m) => m.Destination === exports.CODEX_CONTAINER_BIN);
+    if (!native.length)
+        return undefined;
+    if (native.length !== 1 || native[0].Type !== 'bind' || native[0].RW)
+        throw new Error('CODEX_CONTAINER_RUNTIME_MOUNT_DENIED');
+    const runtime = (0, codex_runtime_1.resolveCodexRuntime)(native[0].Source);
+    if (runtime.containerError)
+        throw new Error('CODEX_CONTAINER_RUNTIME_MOUNT_DENIED');
+    return runtime;
+}
+function assertCodexRuntimeInspection(c, runtime) {
+    if (c.Config?.Labels?.[exports.CODEX_RUNTIME_LABEL] !== runtime.fingerprint) {
+        throw new Error(`CODEX_CONTAINER_RUNTIME_STALE: missing or changed host runtime. ${exports.CODEX_RUNTIME_MAINTENANCE}`);
+    }
+    for (const mount of runtime.mounts) {
+        const actual = (c.Mounts ?? []).filter((m) => m.Destination === mount.target);
+        if (actual.length !== 1 || actual[0].Type !== 'bind' || actual[0].RW || actual[0].Source !== mount.source) {
+            throw new Error(`CODEX_CONTAINER_RUNTIME_STALE: runtime mounts do not match the selected executable. ${exports.CODEX_RUNTIME_MAINTENANCE}`);
+        }
+    }
+}
+/** Read-only preflight. Never refresh a container underneath active work. */
+async function inspectSelectedCodexRuntime(agent, runtime) {
+    if (runtime.containerError)
+        throw new Error(`CODEX_CONTAINER_RUNTIME_UNAVAILABLE: ${runtime.containerError}`);
+    await assertLocalCodexDocker();
+    let inspection;
+    try {
+        inspection = JSON.parse(await readDocker(['inspect', agent.container], 10000, 1024 * 1024))[0];
+        if (typeof inspection?.Id !== 'string' || !inspection.Id.trim())
+            throw new Error('Missing container ID');
+    }
+    catch {
+        throw new Error('CODEX_CONTAINER_RUNTIME_UNAVAILABLE: cannot inspect the app agent container.');
+    }
+    assertCodexRuntimeInspection(inspection, runtime);
+    return inspection.Id;
+}
+//# sourceMappingURL=codex-container-runtime.js.map

package/dist/session/codex-container-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-container-runtime.js","sourceRoot":"","sources":["../../src/session/codex-container-runtime.ts"],"names":[],"mappings":";;;AAmBA,wDAcC;AAKD,sDAOC;AAED,oEAUC;AAGD,kEAUC;AAtED,iDAAyC;AAEzC,mDAAoE;AAEvD,QAAA,mBAAmB,GAAG,iCAAiC,CAAC;AACxD,QAAA,mBAAmB,GAAG,8BAA8B,CAAC;AACrD,QAAA,yBAAyB,GAAG,kLAAkL,CAAC;AAE5N,6EAA6E;AAC7E,SAAS,UAAU,CAAC,IAAc,EAAE,OAAe,EAAE,SAAiB;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAA,wBAAQ,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACnF,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AAChE,KAAK,UAAU,sBAAsB;IAC1C,IAAI,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAChF,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;YACxF,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QACpH,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACzO,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gLAAgL,CAAC,CAAC;IACpM,CAAC;AACH,CAAC;AAED;;kFAEkF;AAClF,SAAgB,qBAAqB,CAAC,CAAM;IAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,2BAAmB,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9H,MAAM,OAAO,GAAG,IAAA,mCAAmB,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,4BAA4B,CAAC,CAAM,EAAE,OAAqB;IACxE,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,2BAAmB,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,mEAAmE,iCAAyB,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1G,MAAM,IAAI,KAAK,CAAC,uFAAuF,iCAAyB,EAAE,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;AACH,CAAC;AAED,6EAA6E;AACtE,KAAK,UAAU,2BAA2B,CAAC,KAAkB,EAAE,OAAqB;IACzF,IAAI,OAAO,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9G,MAAM,sBAAsB,EAAE,CAAC;IAC/B,IAAI,UAAe,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,SAAU,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,OAAO,UAAU,EAAE,EAAE,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC3G,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAAC,CAAC;IAC5G,4BAA4B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO,UAAU,CAAC,EAAE,CAAC;AACvB,CAAC"}

package/dist/session/codex-context-defaults.json

@@ -0,0 +1,5 @@
+{
+    "source": "https://developers.openai.com/api/docs/models/gpt-5.4-mini",
+    "verifiedAt": "2026-09-21",
+    "limits": { "gpt-5.4-mini": 400000, "openai/gpt-5.4-mini": 400000, "chatgpt/gpt-5.4-mini": 400000 }
+}

package/dist/session/codex-context.d.ts

@@ -0,0 +1,13 @@
+/** Never a promise of upstream capacity. The native runtime may impose a lower limit. */
+export interface CodexContextMeasurement {
+    requested: number | null;
+    configured: number | null;
+    providerLimit: number | null;
+    limitSource: 'documented-model' | 'unknown';
+    observed: number | null;
+    used: number | null;
+    status: 'unverified' | 'observed';
+}
+export declare function codexContextPolicy(model: string, requested?: number): CodexContextMeasurement;
+export declare function observeCodexContext(policy: CodexContextMeasurement, usage: any): CodexContextMeasurement;
+//# sourceMappingURL=codex-context.d.ts.map

package/dist/session/codex-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-context.d.ts","sourceRoot":"","sources":["../../src/session/codex-context.ts"],"names":[],"mappings":"AAEA,yFAAyF;AACzF,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC5C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,YAAY,GAAG,UAAU,CAAC;CACnC;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAQ7F;AACD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,GAAG,GAAG,uBAAuB,CAMxG"}

package/dist/session/codex-context.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.codexContextPolicy = codexContextPolicy;
+exports.observeCodexContext = observeCodexContext;
+const codex_context_defaults_json_1 = __importDefault(require("./codex-context-defaults.json"));
+const positive = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v > 0;
+function codexContextPolicy(model, requested) {
+    if (requested !== undefined && !positive(requested))
+        throw new Error('Invalid Codex context window');
+    // Versioned model data lives in one place. Never perform prefix matching or
+    // assume a dated/custom model has its family's capacity. No user setup required.
+    const limit = Object.hasOwnProperty.call(codex_context_defaults_json_1.default.limits, model) ? codex_context_defaults_json_1.default.limits[model] : undefined;
+    return { requested: requested ?? null, configured: limit === undefined ? requested ?? null : Math.min(requested ?? limit, limit),
+        providerLimit: limit ?? null, limitSource: limit !== undefined ? 'documented-model' : 'unknown',
+        observed: null, used: null, status: 'unverified' };
+}
+function observeCodexContext(policy, usage) {
+    const observed = positive(usage?.modelContextWindow) ? usage.modelContextWindow : null;
+    const used = typeof usage?.last?.totalTokens === 'number' && Number.isSafeInteger(usage.last.totalTokens) && usage.last.totalTokens >= 0 ? usage.last.totalTokens : null;
+    // A missing native measurement remains unknown. Never substitute cumulative usage
+    // (many requests) or the requested window as a measurement of the current context.
+    return { ...policy, observed, used, status: observed === null ? 'unverified' : 'observed' };
+}
+//# sourceMappingURL=codex-context.js.map

package/dist/session/codex-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-context.js","sourceRoot":"","sources":["../../src/session/codex-context.ts"],"names":[],"mappings":";;;;;AAaA,gDAQC;AACD,kDAMC;AA5BD,gGAAqD;AAYrD,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxG,SAAgB,kBAAkB,CAAC,KAAa,EAAE,SAAkB;IAClE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrG,4EAA4E;IAC5E,iFAAiF;IACjF,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,qCAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,qCAAQ,CAAC,MAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClI,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,UAAU,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,EAAE,KAAK,CAAC;QAC9H,aAAa,EAAE,KAAK,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;QAC/F,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACvD,CAAC;AACD,SAAgB,mBAAmB,CAAC,MAA+B,EAAE,KAAU;IAC7E,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,MAAM,IAAI,GAAG,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACzK,kFAAkF;IAClF,mFAAmF;IACnF,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AAC9F,CAAC"}

package/dist/session/codex-extension-discovery.d.ts

@@ -0,0 +1,21 @@
+export interface NativeCodexSkill {
+    name: string;
+    description: string;
+    path: string;
+    enabled: boolean;
+    pluginId?: string | null;
+}
+export interface NativeCodexExtensions {
+    skills: NativeCodexSkill[];
+    config: Record<string, any>;
+    plugins?: {
+        name: string;
+        root: string;
+    }[];
+    pluginIds?: string[];
+    notices?: string[];
+}
+/** Ask the installed CLI, rather than guessing cache versions or enabling every
+ * directory in its cache. No thread is created and no model request is sent. */
+export declare function inspectCodexExtensions(bin: string, cwd: string, env?: NodeJS.ProcessEnv, container?: string): Promise<NativeCodexExtensions>;
+//# sourceMappingURL=codex-extension-discovery.d.ts.map

package/dist/session/codex-extension-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-extension-discovery.d.ts","sourceRoot":"","sources":["../../src/session/codex-extension-discovery.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAAE;AAClI,MAAM,WAAW,qBAAqB;IAAG,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CAAE;AAEzL;gFACgF;AAChF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,oBAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA4FtI"}

package/dist/session/codex-extension-discovery.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectCodexExtensions = inspectCodexExtensions;
+const child_process_1 = require("child_process");
+const codex_policy_1 = require("./codex-policy");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+/** Ask the installed CLI, rather than guessing cache versions or enabling every
+ * directory in its cache. No thread is created and no model request is sent. */
+function inspectCodexExtensions(bin, cwd, env = process.env, container) {
+    return new Promise((resolve, reject) => {
+        const args = (0, codex_policy_1.codexPolicyArgs)();
+        const index = args.indexOf('features.plugins=false');
+        if (index >= 1)
+            args.splice(index - 1, 2);
+        const nativeArgs = [...args, 'app-server', '--listen', 'stdio://'];
+        const child = container ? (0, child_process_1.spawn)('docker', ['exec', '-i', '--workdir', '/workspace', '--user', String((0, os_1.userInfo)().uid), '-e', `HOME=${(0, os_1.homedir)()}`, container, bin, ...nativeArgs], { env, stdio: 'pipe' })
+            : (0, child_process_1.spawn)(bin, nativeArgs, { cwd, env, stdio: 'pipe' });
+        let sequence = 0, buffer = '', bytes = 0, settled = false;
+        const pending = new Map();
+        const finish = (error, result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            child.stdin.destroy();
+            child.stdout.destroy();
+            child.stderr.destroy();
+            child.kill('SIGTERM');
+            const kill = setTimeout(() => { child.kill('SIGKILL'); child.unref(); }, 1000);
+            kill.unref();
+            child.once('close', () => clearTimeout(kill));
+            for (const request of pending.values())
+                request.reject(new Error('CODEX_EXTENSION_DISCOVERY_CLOSED'));
+            pending.clear();
+            if (error)
+                reject(error);
+            else
+                resolve(result);
+        };
+        const timer = setTimeout(() => finish(new Error('CODEX_EXTENSION_DISCOVERY_TIMEOUT')), 15000);
+        child.on('error', () => finish(new Error('CODEX_EXTENSION_DISCOVERY_UNAVAILABLE')));
+        child.on('close', () => finish(new Error('CODEX_EXTENSION_DISCOVERY_CLOSED')));
+        child.stdin.on('error', () => finish(new Error('CODEX_EXTENSION_DISCOVERY_CLOSED')));
+        child.stderr.resume();
+        child.stdout.setEncoding('utf8');
+        child.stdout.on('data', (chunk) => {
+            bytes += Buffer.byteLength(chunk);
+            buffer += chunk;
+            if (bytes > 8 * 1024 * 1024)
+                return finish(new Error('CODEX_EXTENSION_DISCOVERY_TOO_LARGE'));
+            let newline;
+            while ((newline = buffer.indexOf('\n')) >= 0) {
+                const line = buffer.slice(0, newline);
+                buffer = buffer.slice(newline + 1);
+                let event;
+                try {
+                    event = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                const request = pending.get(event.id);
+                if (!request || event.method)
+                    continue;
+                pending.delete(event.id);
+                // Native diagnostics can contain credentials. Never propagate their text.
+                if (event.error)
+                    request.reject(new Error('CODEX_EXTENSION_DISCOVERY_REJECTED'));
+                else
+                    request.resolve(event.result);
+            }
+        });
+        const rpc = (method, params) => new Promise((resolve, reject) => {
+            const id = ++sequence;
+            pending.set(id, { resolve, reject });
+            child.stdin.write(JSON.stringify({ id, method, params }) + '\n');
+        });
+        void (async () => {
+            await rpc('initialize', { clientInfo: { name: 'gateway_extensions', version: '1' }, capabilities: { experimentalApi: true } });
+            child.stdin.write(JSON.stringify({ method: 'initialized', params: {} }) + '\n');
+            const config = (await rpc('config/read', { cwd, includeLayers: false })).config;
+            if (!config)
+                throw new Error('CODEX_EXTENSION_CONFIG_UNAVAILABLE');
+            const listing = await rpc('skills/list', { cwds: [cwd], forceReload: true });
+            const skills = (listing.data ?? []).flatMap((entry) => entry.skills ?? []).filter((skill) => skill.enabled === true && typeof skill.path === 'string');
+            // Remote installed plugins can be omitted from skills/list until explicitly
+            // selected. plugin/read gives their installed paths without a model call.
+            const notices = [];
+            const plugins = await rpc('plugin/installed', { cwds: [cwd] }).catch(() => {
+                notices.push('Codex plugin inventory is unavailable; native skills and configured MCP remain available.');
+                return { marketplaces: [] };
+            });
+            const installed = [];
+            const pluginIds = [];
+            for (const marketplace of plugins.marketplaces ?? []) {
+                for (const plugin of marketplace.plugins ?? []) {
+                    if (!plugin.installed || !plugin.enabled || plugin.disabledReason)
+                        continue;
+                    let detail;
+                    try {
+                        detail = await rpc('plugin/read', { pluginName: plugin.name, marketplacePath: marketplace.path ?? null, remoteMarketplaceName: marketplace.path ? null : marketplace.name });
+                        if (!detail?.plugin || typeof detail.plugin !== 'object')
+                            throw new Error('CODEX_PLUGIN_METADATA_INVALID');
+                    }
+                    catch {
+                        // Do not discard healthy skills/MCP or expose native diagnostics.
+                        notices.push('A Codex plugin could not be read; other native extensions remain available.');
+                        continue;
+                    }
+                    pluginIds.push(plugin.id);
+                    // A remote catalog may return null skill paths even after its exact
+                    // published version has been materialized locally. Never choose an
+                    // arbitrary cached version or scan disabled/uninstalled packages.
+                    const version = plugin.localVersion ?? plugin.version;
+                    const parts = [marketplace.name, plugin.name, version];
+                    const root = plugin.source?.type === 'local' ? plugin.source.path : parts.every(part => typeof part === 'string' && /^[\w.-]+$/.test(part) && part !== '.' && part !== '..')
+                        ? (0, path_1.join)(env.CODEX_HOME ?? (0, path_1.join)(env.HOME ?? (0, os_1.homedir)(), '.codex'), 'plugins', 'cache', ...parts) : undefined;
+                    if (root && (container || (0, fs_1.existsSync)((0, path_1.join)(root, '.codex-plugin', 'plugin.json'))))
+                        installed.push({ name: plugin.name, root });
+                    for (const skill of detail.plugin?.skills ?? []) {
+                        if (skill.enabled === true && typeof skill.path === 'string' && !skills.some(entry => entry.path === skill.path))
+                            skills.push({ ...skill, pluginId: plugin.id });
+                    }
+                }
+            }
+            finish(undefined, { config, skills, plugins: installed, pluginIds, notices });
+        })().catch(() => finish(new Error('CODEX_EXTENSION_DISCOVERY_UNAVAILABLE')));
+    });
+}
+//# sourceMappingURL=codex-extension-discovery.js.map