@12ui/design 0.2.74 → 0.2.75

package/dist/workspace-draw-store.js

@@ -0,0 +1,65 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { resolveCliInstallLayout } from './cli-persistence.js';
+import { acquireLock, RUNNER_HEARTBEAT_INTERVAL_MS, staleWhenHeartbeatLapsed } from './slate-lock.js';
+import { RECORD_SCHEMA } from './workspace-draw-types.js';
+/**
+ * Where one request's draws live on this machine: `<data root>/workspace-draw/<opId>/`, holding the op lock, the
+ * codex call store (`calls/`) and the run record (`run.json`). Nothing here is created before the sandbox gate has
+ * passed and the command is about to draw.
+ */
+export const opRootOf = (dataRoot, opId) => path.join(dataRoot, 'workspace-draw', opId);
+export const defaultDataRoot = (env) => resolveCliInstallLayout(env).dataRoot;
+/**
+ * The op lock: one live run per op on this machine. A holder is alive while its process is and its heartbeat (the
+ * lock file's mtime, touched every few seconds) is fresh; a dead or silent holder's lock is taken over. Null when a
+ * live run holds it.
+ */
+export const takeOpLock = async (opRoot) => {
+    await mkdir(opRoot, { recursive: true });
+    let lock;
+    try {
+        lock = await acquireLock({ file: path.join(opRoot, 'lock'), policy: staleWhenHeartbeatLapsed, waitMs: 0 });
+    }
+    catch (error) {
+        if (error.code === 'workspace_busy')
+            return null;
+        throw error;
+    }
+    const heartbeat = setInterval(() => { void lock.touch().catch(() => undefined); }, RUNNER_HEARTBEAT_INTERVAL_MS);
+    heartbeat.unref();
+    return {
+        release: async () => {
+            clearInterval(heartbeat);
+            await lock.release();
+        },
+    };
+};
+export const recordPathOf = (opRoot) => path.join(opRoot, 'run.json');
+/** The record an earlier run left, if it is one this command wrote. */
+export const readPreviousRecord = async (opRoot) => {
+    try {
+        const parsed = JSON.parse(await readFile(recordPathOf(opRoot), 'utf8'));
+        return parsed?.schema === RECORD_SCHEMA ? parsed : null;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT' || error instanceof SyntaxError)
+            return null;
+        throw error;
+    }
+};
+/** Replace the record atomically: a reader never sees half a file. */
+export const writeRecord = async (opRoot, record) => {
+    const file = recordPathOf(opRoot);
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    try {
+        await writeFile(temporary, `${JSON.stringify(record, null, 2)}\n`, { flag: 'wx' });
+        await rename(temporary, file);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+    return file;
+};
+//# sourceMappingURL=workspace-draw-store.js.map

package/dist/workspace-draw-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-draw-store.js","sourceRoot":"","sources":["../src/workspace-draw-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AACtG,OAAO,EAAE,aAAa,EAAmB,MAAM,2BAA2B,CAAC;AAE3E;;;;GAIG;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;AAEhH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAsB,EAAU,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;AAIzG;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,MAAc,EAA0B,EAAE;IACzE,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA4B,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACjH,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAEtF,uEAAuE;AACvE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,MAAc,EAA8B,EAAE;IACrF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAe,CAAC;QACtF,OAAO,MAAM,EAAE,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,YAAY,WAAW;YAAE,OAAO,IAAI,CAAC;QACpG,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,MAAc,EAAE,MAAkB,EAAmB,EAAE;IACvF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/workspace-draw-types.d.ts

@@ -0,0 +1,121 @@
+/**
+ * The shapes `12ui workspace draw` reads and writes: the frozen draw plan design.12ui.com serves (interface I1,
+ * `GET /api/v1/slate/ops/{opId}/plan`), and the command's own outcome codes and run record (interface I2).
+ */
+export type PlanImageName = 'parent' | 'annotated' | `ref-${number}`;
+export type SlatePlanImage = {
+    name: PlanImageName;
+    role: 'parent' | 'annotated' | 'reference';
+    referenceId: string | null;
+    versionId: string | null;
+};
+export type SlatePlanOption = {
+    key: string;
+    callId: string;
+    prompt: string;
+    promptSha256: string;
+    images: SlatePlanImage[];
+    frame: {
+        width: number;
+        height: number;
+    };
+    noReferenceReason: 'search_rate_limited' | 'search_unavailable' | 'too_few_fresh' | 'no_query' | null;
+    state: 'pending' | 'filled' | 'failed';
+    versionId: string | null;
+    label: string | null;
+    failure: string | null;
+};
+export type SlateDrawPlan = {
+    schema: '12ui.slate.plan/1';
+    workspace: string;
+    opId: string;
+    kind: 'round' | 'edit';
+    mode: 'root' | 'new' | 'like' | 'edit';
+    promptRevision: string;
+    planDigest: string;
+    state: 'running' | 'succeeded' | 'failed' | 'interrupted';
+    options: SlatePlanOption[];
+};
+export declare const PLAN_SCHEMA = "12ui.slate.plan/1";
+/** The `code` field of the command's JSON line, and the exit code each one carries (I2). */
+export declare const DRAW_EXIT_CODES: {
+    readonly done: 0;
+    readonly replayed: 0;
+    readonly partial: 1;
+    readonly failed: 1;
+    readonly token_invalid: 2;
+    readonly unknown_op: 2;
+    readonly op_in_progress: 2;
+    readonly usage: 2;
+    readonly needs_escalation: 3;
+    readonly no_engine: 4;
+    readonly cli_outdated: 5;
+};
+export type DrawCode = keyof typeof DRAW_EXIT_CODES;
+/** The one engine of this release (decision D2-B): drawing on 12ui needs a 12ui sign-in and is not part of the command. */
+export type DrawEngine = 'codex';
+export type DrawImageRecord = {
+    name: string;
+    referenceId: string | null;
+    versionId: string | null;
+    sha256: string;
+    mimeType: string;
+};
+export type DrawOptionCodex = {
+    callDir: string;
+    tempHome: string;
+    tempHomeRemoved: boolean;
+    rollouts: string[];
+    imageGenCalls: number;
+    promptVerbatim: boolean | null;
+    revisedPrompt: string | null;
+};
+export type DrawOptionRecord = {
+    key: string;
+    callId: string;
+    /** Null when Codex could not draw and nothing was drawn (the option's failure was pushed). */
+    engine: DrawEngine | null;
+    prompt: string;
+    promptSha256: string;
+    images: DrawImageRecord[];
+    frame: {
+        width: number;
+        height: number;
+    };
+    startedAt: string;
+    finishedAt: string;
+    state: 'filled' | 'failed' | 'replayed';
+    failure: string | null;
+    versionId: string | null;
+    label: string | null;
+    codex?: DrawOptionCodex;
+};
+export type DrawRecordCodex = {
+    binary: string;
+    version: string;
+    home: string;
+    threadId: string | null;
+    sameHomeRollout: string | null;
+};
+export type DrawRecord = {
+    schema: '12ui.workspace.draw-record/1';
+    opId: string;
+    origin: string;
+    cliVersion: string;
+    /** Null when Codex could not draw here: the run spent nothing and pushed each pending option's failure. */
+    engine: DrawEngine | null;
+    engineReason: string;
+    codex: DrawRecordCodex | null;
+    plan: {
+        planDigest: string;
+        promptRevision: string;
+        kind: string;
+        mode: string;
+    };
+    startedAt: string;
+    finishedAt: string;
+    wallMs: number;
+    options: DrawOptionRecord[];
+};
+export declare const RECORD_SCHEMA = "12ui.workspace.draw-record/1";
+//# sourceMappingURL=workspace-draw-types.d.ts.map

package/dist/workspace-draw-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-draw-types.d.ts","sourceRoot":"","sources":["../src/workspace-draw-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,MAAM,EAAE,CAAC;AAErE,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAC3C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,iBAAiB,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,eAAe,GAAG,UAAU,GAAG,IAAI,CAAC;IACtG,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC1D,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B,CAAC;AAEF,eAAO,MAAM,WAAW,sBAAsB,CAAC;AAE/C,4FAA4F;AAC5F,eAAO,MAAM,eAAe;;;;;;;;;;;;CAYlB,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,eAAe,CAAC;AACpD,2HAA2H;AAC3H,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC;AAEjC,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvI,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEzI,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,8BAA8B,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,2GAA2G;IAC3G,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,aAAa,iCAAiC,CAAC"}

package/dist/workspace-draw-types.js

@@ -0,0 +1,21 @@
+/**
+ * The shapes `12ui workspace draw` reads and writes: the frozen draw plan design.12ui.com serves (interface I1,
+ * `GET /api/v1/slate/ops/{opId}/plan`), and the command's own outcome codes and run record (interface I2).
+ */
+export const PLAN_SCHEMA = '12ui.slate.plan/1';
+/** The `code` field of the command's JSON line, and the exit code each one carries (I2). */
+export const DRAW_EXIT_CODES = {
+    done: 0,
+    replayed: 0,
+    partial: 1,
+    failed: 1,
+    token_invalid: 2,
+    unknown_op: 2,
+    op_in_progress: 2,
+    usage: 2,
+    needs_escalation: 3,
+    no_engine: 4,
+    cli_outdated: 5,
+};
+export const RECORD_SCHEMA = '12ui.workspace.draw-record/1';
+//# sourceMappingURL=workspace-draw-types.js.map

package/dist/workspace-draw-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-draw-types.js","sourceRoot":"","sources":["../src/workspace-draw-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqCH,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAE/C,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,CAAC;IAChB,UAAU,EAAE,CAAC;IACb,cAAc,EAAE,CAAC;IACjB,KAAK,EAAE,CAAC;IACR,gBAAgB,EAAE,CAAC;IACnB,SAAS,EAAE,CAAC;IACZ,YAAY,EAAE,CAAC;CACP,CAAC;AAsDX,MAAM,CAAC,MAAM,aAAa,GAAG,8BAA8B,CAAC"}

package/open-design.json

@@ -3,7 +3,7 @@
   "specVersion": "1.0.0",
   "name": "12ui-design",
   "title": "12UI Design",
-  "version": "0.2.74",
+  "version": "0.2.75",
   "description": "Explore corpus-grounded interface directions, choose one, and convert it into production-ready responsive or native artifacts with 12UI.",
   "author": {
     "name": "Just Every",
@@ -49,7 +49,7 @@
           "command": "npx",
           "args": [
             "-y",
-            "@12ui/design@0.2.74",
+            "@12ui/design@0.2.75",
             "mcp"
           ]
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@12ui/design",
-  "version": "0.2.74",
+  "version": "0.2.75",
   "type": "module",
   "description": "The canonical 12ui CLI, SDK, MCP server, and visual interface design skills",
   "main": "dist/index.js",

package/runtime/codex-conversion/src/codex/home.mjs

@@ -1,7 +1,9 @@
-import { mkdtemp, symlink, copyFile, readFile, realpath, chmod } from 'node:fs/promises';
+import { mkdtemp, symlink, copyFile, readFile, realpath, chmod, rm } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
-import { spawnSync } from 'node:child_process';
+import { execFile } from 'node:child_process';
+
+const TEMP_HOME_PREFIX = '12ui-codex-';
 
 /** The planner receives an allowlisted environment, never provider credentials. @param {string} home */
 export function subscriptionEnv(home) {
@@ -20,18 +22,45 @@ export async function prepareHome({ authHome, binary, runDir, reasoning = 'low'
   if (authRoot === runRoot || authRoot.startsWith(runRoot + path.sep)) throw new Error('authHome must be outside runDir');
   const authPath = await realpath(path.join(authRoot, 'auth.json'));
   if (authPath === runRoot || authPath.startsWith(runRoot + path.sep)) throw new Error('Credentials must be outside runDir');
-  const home = await mkdtemp(path.join(tmpdir(), '12ui-codex-'));
-  await chmod(home, 0o700);
-  await symlink(authPath, path.join(home, 'auth.json'));
-  try { await copyFile(path.join(authRoot, 'models_cache.json'), path.join(home, 'models_cache.json')); }
-  catch (error) { throw new Error('Explicit authHome must contain models_cache.json', { cause: error }); }
-  const cache = JSON.parse(await readFile(path.join(home, 'models_cache.json'), 'utf8'));
-  if (!cache.models?.some(model => model.slug === 'gpt-6-astra' && model.supported_reasoning_levels?.some(level => level.effort === reasoning))) {
-    throw new Error(`Auth model cache does not support gpt-6-astra ${reasoning}`);
-  }
-  const login = spawnSync(binary, ['login', 'status'], { env: subscriptionEnv(home), encoding: 'utf8', timeout: 30000 });
-  if (login.status !== 0 || !`${login.stdout ?? ''}${login.stderr ?? ''}`.includes('Logged in using ChatGPT')) {
-    throw new Error('ChatGPT authentication unavailable; API authentication is not supported for the planner');
+  const home = await mkdtemp(path.join(tmpdir(), TEMP_HOME_PREFIX));
+  try {
+    await chmod(home, 0o700);
+    await symlink(authPath, path.join(home, 'auth.json'));
+    try { await copyFile(path.join(authRoot, 'models_cache.json'), path.join(home, 'models_cache.json')); }
+    catch (error) { throw new Error('Explicit authHome must contain models_cache.json', { cause: error }); }
+    const cache = JSON.parse(await readFile(path.join(home, 'models_cache.json'), 'utf8'));
+    if (!cache.models?.some(model => model.slug === 'gpt-6-astra' && model.supported_reasoning_levels?.some(level => level.effort === reasoning))) {
+      throw new Error(`Auth model cache does not support gpt-6-astra ${reasoning}`);
+    }
+    // Asynchronous, so parallel calls prepare their homes side by side instead of queueing on a blocked event loop.
+    const login = await new Promise(resolve => {
+      execFile(binary, ['login', 'status'], { env: subscriptionEnv(home), encoding: 'utf8', timeout: 30000 },
+        (error, stdout, stderr) => resolve({ ok: !error, output: `${stdout ?? ''}${stderr ?? ''}` }));
+    });
+    if (!login.ok || !login.output.includes('Logged in using ChatGPT')) {
+      throw new Error('ChatGPT authentication unavailable; API authentication is not supported for the planner');
+    }
+  } catch (error) {
+    // Nothing was dispatched from this home, so nothing will ever read it.
+    await removeTempHome(home);
+    throw error;
   }
   return { home, authentication: 'chatgpt' };
 }
+
+
+/**
+ * Remove one temp home this module made. Only a directory directly under the temp root whose name
+ * carries the temp-home prefix is ever removed, so a corrupted record cannot point this at a real home.
+ * @param {string | null | undefined} home
+ */
+export async function removeTempHome(home) {
+  if (!home) return;
+  const resolved = path.resolve(home);
+  const roots = new Set([path.resolve(tmpdir())]);
+  try { roots.add(await realpath(tmpdir())); } catch { /* the temp root itself is gone: nothing to match */ }
+  if (!roots.has(path.dirname(resolved)) || !path.basename(resolved).startsWith(TEMP_HOME_PREFIX)) {
+    throw new Error(`Refusing to remove ${resolved}: not a 12ui temp Codex home`);
+  }
+  await rm(resolved, { recursive: true, force: true });
+}

package/runtime/codex-conversion/src/images/native-files.mjs

@@ -9,3 +9,23 @@ export async function filesUnder(directory) {
  }
  return result.sort();
 }
+
+/**
+ * The file extension the bytes really are, so an attached input is named by its type
+ * (`reference.webp`, `reference-2.png`). Bytes of no recognised image type keep the
+ * historical `.png` name: they are not an image under any name, and the call reports that.
+ * @param {Uint8Array} bytes
+ */
+export function sniffImageExtension(bytes) {
+ const b=Buffer.from(bytes.buffer,bytes.byteOffset,bytes.byteLength);
+ if(b.length>=8&&b.subarray(0,8).equals(Buffer.from('89504e470d0a1a0a','hex')))return 'png';
+ if(b.length>=3&&b[0]===0xff&&b[1]===0xd8&&b[2]===0xff)return 'jpg';
+ if(b.length>=12&&b.toString('latin1',0,4)==='RIFF'&&b.toString('latin1',8,12)==='WEBP')return 'webp';
+ if(b.length>=6&&/^GIF8[79]a$/.test(b.toString('latin1',0,6)))return 'gif';
+ return 'png';
+}
+
+/** Attach-order input names: the first is `reference.<ext>`, the rest `reference-<n>.<ext>`. @param {Uint8Array[]} inputs */
+export function inputFileNames(inputs) {
+ return inputs.map((bytes,index)=>`${index===0?'reference':`reference-${index+1}`}.${sniffImageExtension(bytes)}`);
+}

package/runtime/codex-conversion/src/images/native-invoke.mjs

@@ -3,7 +3,7 @@ import path from 'node:path';
 import {spawn} from 'node:child_process';
 import {createWriteStream} from 'node:fs';
 import {finished} from 'node:stream/promises';
-import {subscriptionEnv} from '../codex/home.mjs';
+import {subscriptionEnv,removeTempHome} from '../codex/home.mjs';
 import {filesUnder} from './native-files.mjs';
 import {collectNative,packNativeReceipt} from './native-collect.mjs';
 
@@ -45,5 +45,8 @@ export async function invokeNative(spec, {callDir, persistMetadata}) {
   await fs.writeFile(path.join(callDir, 'completion.json'), JSON.stringify(completed, null, 2) + '\n', {flag: 'wx'});
   const rolloutPaths = (await filesUnder(path.join(auth.home, 'sessions')).catch(error => error.code === 'ENOENT' ? [] : Promise.reject(error))).filter(file => file.endsWith('.jsonl'));
   const receipt = await collectNative({rolloutPaths, outputDir: path.join(callDir, 'native-custody'), expected: spec.expected});
-  return {bytes: await packNativeReceipt(receipt), metadata: {...completed,nativeToolMs:receipt.toolMs,quotaBefore:receipt.quotaBefore,quotaAfter:receipt.quotaAfter,tokenUsage:receipt.tokenUsage}};
+  // The rollouts now live in the call's native-custody; the temp home (~66 MB) is removed. A call that dies
+  // before this line keeps its home, because recovery collects from it.
+  await removeTempHome(auth.home);
+  return {bytes: await packNativeReceipt(receipt), metadata: {...completed,nativeToolMs:receipt.toolMs,quotaBefore:receipt.quotaBefore,quotaAfter:receipt.quotaAfter,tokenUsage:receipt.tokenUsage,tempHomeRemoved:true}};
 }

package/runtime/codex-conversion/src/images/native-records.mjs

@@ -20,10 +20,10 @@ export function parseNativeRecords(text) {
     if(['error','turn_aborted'].includes(p.type)) diagnostics.push({timestamp:record.timestamp,...p});
     if (p.rate_limits) quota.push({line: index + 1, timestamp: record.timestamp, ...p.rate_limits});
     if (p.type === 'custom_tool_call' && p.name === 'exec') {
-      const count = (p.input?.match(/tools\.image_gen__imagegen\s*\(/g) ?? []).length;
-      if (count) calls.set(p.call_id, {callId: p.call_id, count, line: index + 1, timestamp: record.timestamp});
+      const prompts = imagegenPromptLiterals(p.input ?? '');
+      if (prompts.length) calls.set(p.call_id, {callId: p.call_id, count: prompts.length, prompts, line: index + 1, timestamp: record.timestamp});
     }
-    if (p.type === 'function_call' && /^(image_gen[._]imagegen|image_gen__imagegen)$/.test(p.name ?? '')) calls.set(p.call_id, {callId: p.call_id, count: 1, line: index + 1, timestamp: record.timestamp});
+    if (p.type === 'function_call' && /^(image_gen[._]imagegen|image_gen__imagegen)$/.test(p.name ?? '')) calls.set(p.call_id, {callId: p.call_id, count: 1, prompts: [functionCallPrompt(p.arguments)], line: index + 1, timestamp: record.timestamp});
     if (item?.kind === 'image_gen.generation' && p.type === 'item_completed') {
       const bytes = typeof item.result === 'string' ? Buffer.from(item.result, 'base64') : null;
       const entry = {id: item.id, status: item.status, failure: item.failure ?? null, savedPath: item.savedPath ?? null,
@@ -55,3 +55,75 @@ export function geometryTreatments(actual, expected) {
     selection: 'unselected-pending-multiple-case-registration-review',
   };
 }
+
+const ESCAPES = {n: '\n', t: '\t', r: '\r', b: '\b', f: '\f', v: '\v', 0: '\0'};
+
+/**
+ * Decode the JavaScript string literal that opens at `start` (a ', " or ` quote). Returns the value and the index
+ * after the closing quote, or null when it is not one plain literal (a template with ${...}, or unterminated).
+ * @param {string} source @param {number} start
+ */
+function readStringLiteral(source, start) {
+  const quote = source[start];
+  if (!['"', "'", '`'].includes(quote)) return null;
+  let value = '';
+  for (let index = start + 1; index < source.length; index += 1) {
+    const char = source[index];
+    if (char === quote) return {value, end: index + 1};
+    if (quote === '`' && char === '$' && source[index + 1] === '{') return null;
+    if (char !== '\\') { value += char; continue; }
+    const next = source[index + 1];
+    if (next === undefined) return null;
+    if (next === 'u') {
+      const braced = source[index + 2] === '{' ? /^\{([0-9a-fA-F]+)\}/.exec(source.slice(index + 2)) : null;
+      const hex = braced ? braced[1] : /^[0-9a-fA-F]{4}/.exec(source.slice(index + 2))?.[0];
+      if (!hex) return null;
+      value += String.fromCodePoint(Number.parseInt(hex, 16));
+      index += 1 + (braced ? braced[0].length : 4);
+    } else if (next === 'x') {
+      const hex = /^[0-9a-fA-F]{2}/.exec(source.slice(index + 2))?.[0];
+      if (!hex) return null;
+      value += String.fromCharCode(Number.parseInt(hex, 16));
+      index += 3;
+    } else if (next === '\r' || next === '\n') {
+      // A line continuation adds nothing.
+      index += next === '\r' && source[index + 2] === '\n' ? 2 : 1;
+    } else {
+      value += Object.hasOwn(ESCAPES, next) ? ESCAPES[next] : next;
+      index += 1;
+    }
+  }
+  return null;
+}
+
+/**
+ * The `prompt` the nested driver passed to each `tools.image_gen__imagegen({...})` call in an exec input, one entry
+ * per call: the literal's value when it is one plain string literal, null when it is built some other way (a
+ * variable, a concatenation, a template with substitutions), which is then unknown rather than assumed.
+ * @param {string} input
+ * @returns {(string | null)[]}
+ */
+export function imagegenPromptLiterals(input) {
+  const prompts = [];
+  const call = /tools\.image_gen__imagegen\s*\(/g;
+  let match;
+  while ((match = call.exec(input))) {
+    const after = input.slice(match.index + match[0].length);
+    const next = /tools\.image_gen__imagegen\s*\(/.exec(after);
+    const scope = next ? after.slice(0, next.index) : after;
+    const key = /(?:^|[{,\s])(?:prompt|"prompt"|'prompt')\s*:\s*/.exec(scope);
+    if (!key) { prompts.push(null); continue; }
+    const literal = readStringLiteral(scope, key.index + key[0].length);
+    const following = literal ? scope.slice(literal.end).trimStart()[0] : undefined;
+    prompts.push(literal && (following === ',' || following === '}') ? literal.value : null);
+  }
+  return prompts;
+}
+
+/** @param {unknown} argumentsText */
+function functionCallPrompt(argumentsText) {
+  try {
+    const parsed = JSON.parse(String(argumentsText));
+    return typeof parsed?.prompt === 'string' ? parsed.prompt : null;
+  } catch { return null; }
+}

package/runtime/codex-conversion/src/images/native.mjs

@@ -2,10 +2,10 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import os from 'node:os';
 import sharp from 'sharp';
-import {prepareHome} from '../codex/home.mjs';
+import {prepareHome,removeTempHome} from '../codex/home.mjs';
 import {invokeNative} from './native-invoke.mjs';
 import {collectNative,packNativeReceipt} from './native-collect.mjs';
-import {filesUnder} from './native-files.mjs';
+import {filesUnder,inputFileNames} from './native-files.mjs';
 import {sha256,pngDimensions,parseNativeRecords} from './native-records.mjs';
 
 export async function decodeNativeResponse(bytes) {
@@ -23,7 +23,8 @@ export async function executeNativeCall({request,input,callId,store,codexBinary=
   return store.runCall(callId,request,async({callDir,persistMetadata})=>{
     // One reference is the conversion case; a list attaches every image in order (design workspace edits and variations).
     const inputs=Array.isArray(input)?input:[input];
-    const referencePaths=inputs.map((_bytes,index)=>path.join(callDir,index===0?'reference.png':`reference-${index+1}.png`));
+    // Each input is named by its sniffed type (reference.webp, reference-2.png), never a blanket .png.
+    const referencePaths=inputFileNames(inputs).map(name=>path.join(callDir,name));
     for(const [index,bytes] of inputs.entries())await fs.writeFile(referencePaths[index],bytes,{flag:'wx'});
     const referencePath=referencePaths[0];
     const inspect=referencePaths.length===1?`Use tools.view_image once to inspect ${referencePath}.`:`Use tools.view_image once for each of these files, in this order: ${referencePaths.join(', ')}.`;
@@ -40,6 +41,8 @@ export async function executeNativeCall({request,input,callId,store,codexBinary=
     if(audit.state!=='completed-awaiting-dimensions')return null;
     const receipt=await collectNative({rolloutPaths,outputDir:path.join(callDir,'native-custody'),expected:request.expected});
     if(!['exact-size-pass','size-mismatch'].includes(receipt.state))return null;
-    return {bytes:await packNativeReceipt(receipt),metadata:{...metadata,nativeToolMs:receipt.toolMs,quotaBefore:receipt.quotaBefore,quotaAfter:receipt.quotaAfter,tokenUsage:receipt.tokenUsage,collectionRecovery:true}};
+    // Recovered and in custody: the temp home has nothing left that anything will read.
+    await removeTempHome(metadata.home);
+    return {bytes:await packNativeReceipt(receipt),metadata:{...metadata,nativeToolMs:receipt.toolMs,quotaBefore:receipt.quotaBefore,quotaAfter:receipt.quotaAfter,tokenUsage:receipt.tokenUsage,collectionRecovery:true,tempHomeRemoved:true}};
   }});
 }