@agent-native/core 0.111.4 → 0.113.0

package/dist/cli/codex-cli-participant.js

@@ -0,0 +1,354 @@
+import { execFile as execFileCallback, spawn } from "node:child_process";
+import { isAbsolute } from "node:path";
+import { StringDecoder } from "node:string_decoder";
+import { promisify } from "node:util";
+const execFile = promisify(execFileCallback);
+const CODEX_CLI_VERSION = "0.144.3";
+const DEFAULT_MAX_EVENTS = 2_000;
+const DEFAULT_MAX_STREAM_BYTES = 8 * 1024 * 1024;
+const DEFAULT_MAX_STDERR_BYTES = 128 * 1024;
+const DEFAULT_TIMEOUT_MS = 30 * 60 * 1_000;
+const DEFAULT_TERMINATION_GRACE_MS = 2_000;
+const DEFAULT_FORCE_SETTLE_MS = 250;
+const MAX_ERROR_MESSAGE_LENGTH = 200;
+const SAFE_ENVIRONMENT_KEYS = [
+    "PATH",
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "LC_CTYPE",
+    "TMPDIR",
+    "TMP",
+    "TEMP",
+    "TERM",
+    "NO_COLOR",
+    "FORCE_COLOR",
+    "USER",
+    "LOGNAME",
+    "SHELL",
+    // Codex reads its subscription session from this config root (or HOME/.codex).
+    "CODEX_HOME",
+];
+export class CodexCliSubscriptionRequiredError extends Error {
+    constructor() {
+        super("Codex CLI must be signed in with a ChatGPT subscription. API-key fallback is disabled.");
+        this.name = "CodexCliSubscriptionRequiredError";
+    }
+}
+export async function readCodexCliSubscriptionStatus(options = {}) {
+    try {
+        const execute = options.execute ?? execFile;
+        const { stdout, stderr } = await execute(resolveCommand(options.command, "codex"), ["login", "status"], {
+            encoding: "utf8",
+            maxBuffer: 128 * 1024,
+            timeout: 3_000,
+            windowsHide: true,
+            env: safeEnvironment(options.env ?? process.env),
+        });
+        const output = `${stdout}\n${stderr}`;
+        return {
+            loggedIn: /logged in using/i.test(output),
+            authMode: /logged in using\s+chatgpt/i.test(output)
+                ? "ChatGPT"
+                : /logged in using\s+(?:an?\s+)?api key/i.test(output)
+                    ? "API key"
+                    : "unknown",
+        };
+    }
+    catch {
+        return { loggedIn: false };
+    }
+}
+export async function runCodexCliParticipant(options) {
+    validateInput(options);
+    const env = safeEnvironment(options.env ?? process.env);
+    const command = resolveCommand(options.command, "codex");
+    const subscription = await (options.preflight
+        ? options.preflight({ command, env })
+        : readCodexCliSubscriptionStatus({ command, env }));
+    if (!subscription.loggedIn || subscription.authMode !== "ChatGPT") {
+        throw new CodexCliSubscriptionRequiredError();
+    }
+    if (options.signal?.aborted)
+        throw createAbortError();
+    const args = buildCodexCliParticipantArgs(options);
+    const spawnProcess = options.spawnProcess ??
+        ((command, commandArgs, spawnOptions) => spawn(command, commandArgs, spawnOptions));
+    const child = spawnProcess(command, args, {
+        cwd: options.cwd,
+        env,
+        shell: false,
+        stdio: ["pipe", "pipe", "pipe"],
+    });
+    return collectCodexCliParticipantResult(child, options);
+}
+export function buildCodexCliParticipantArgs(options) {
+    const sandbox = options.role === "driver" && options.allowWorkspaceWrite === true
+        ? "workspace-write"
+        : "read-only";
+    const args = [
+        "--ask-for-approval",
+        "never",
+        "--sandbox",
+        sandbox,
+        "--cd",
+        options.cwd,
+        "exec",
+    ];
+    const resumeSessionId = readString(options.session?.resumeSessionId);
+    if (resumeSessionId)
+        args.push("resume");
+    args.push("--json", "--skip-git-repo-check", "--ignore-user-config");
+    const model = readString(options.model);
+    if (model)
+        args.push("--model", model);
+    if (resumeSessionId)
+        args.push("--", resumeSessionId, "-");
+    else
+        args.push("-");
+    return args;
+}
+function collectCodexCliParticipantResult(child, options) {
+    const maxEvents = boundedLimit(options.maxEvents, DEFAULT_MAX_EVENTS);
+    const maxStreamBytes = boundedLimit(options.maxStreamBytes, DEFAULT_MAX_STREAM_BYTES);
+    const maxStderrBytes = boundedLimit(options.maxStderrBytes, DEFAULT_MAX_STDERR_BYTES);
+    const timeoutMs = boundedDuration(options.timeoutMs, DEFAULT_TIMEOUT_MS);
+    const terminationGraceMs = boundedDuration(options.terminationGraceMs, DEFAULT_TERMINATION_GRACE_MS);
+    const forceSettleMs = boundedDuration(options.forceSettleMs, DEFAULT_FORCE_SETTLE_MS);
+    const decoder = new StringDecoder("utf8");
+    const stderrDecoder = new StringDecoder("utf8");
+    const events = [];
+    let pending = "";
+    let streamBytes = 0;
+    let stderr = "";
+    let stderrBytes = 0;
+    let stderrTruncated = false;
+    let fatalError;
+    let resumeSessionId;
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let terminationTimer;
+        let forceSettleTimer;
+        const timeoutTimer = setTimeout(() => {
+            stopWithError(new Error(`Codex CLI timed out after ${timeoutMs}ms.`));
+        }, timeoutMs);
+        timeoutTimer.unref?.();
+        const cleanup = () => {
+            options.signal?.removeEventListener("abort", abort);
+            clearTimeout(timeoutTimer);
+            if (terminationTimer)
+                clearTimeout(terminationTimer);
+            if (forceSettleTimer)
+                clearTimeout(forceSettleTimer);
+        };
+        const finishError = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(safeError(error));
+        };
+        const stopWithError = (error) => {
+            if (fatalError)
+                return;
+            fatalError = error;
+            terminationTimer = setTimeout(() => {
+                if (settled)
+                    return;
+                forceSettleTimer = setTimeout(() => {
+                    finishError(fatalError ?? error);
+                }, forceSettleMs);
+                forceSettleTimer.unref?.();
+                child.kill("SIGKILL");
+            }, terminationGraceMs);
+            terminationTimer.unref?.();
+            child.kill("SIGTERM");
+        };
+        const abort = () => stopWithError(createAbortError());
+        const streamError = (error) => {
+            if (!settled)
+                stopWithError(error);
+        };
+        const consume = (line) => {
+            const event = consumeJsonLine(line, events, maxEvents, options.onEvent);
+            const threadId = readString(event?.thread_id);
+            if (event?.type === "thread.started" && threadId) {
+                resumeSessionId = threadId;
+            }
+        };
+        child.stdin.on("error", streamError);
+        child.stdout.on("error", streamError);
+        child.stderr.on("error", streamError);
+        if (options.signal) {
+            if (options.signal.aborted)
+                abort();
+            else
+                options.signal.addEventListener("abort", abort, { once: true });
+        }
+        child.stdout.on("data", (chunk) => {
+            if (fatalError)
+                return;
+            const bytes = Buffer.isBuffer(chunk)
+                ? chunk.length
+                : Buffer.byteLength(chunk);
+            streamBytes += bytes;
+            if (streamBytes > maxStreamBytes) {
+                stopWithError(new Error(`Codex CLI stream exceeded ${maxStreamBytes} bytes.`));
+                return;
+            }
+            pending += decoder.write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+            try {
+                let newline = pending.indexOf("\n");
+                while (newline !== -1) {
+                    consume(pending.slice(0, newline));
+                    pending = pending.slice(newline + 1);
+                    newline = pending.indexOf("\n");
+                }
+            }
+            catch (error) {
+                stopWithError(toError(error));
+            }
+        });
+        child.stderr.on("data", (chunk) => {
+            const encoded = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            const remaining = Math.max(0, maxStderrBytes - stderrBytes);
+            if (remaining === 0) {
+                stderrTruncated = true;
+                return;
+            }
+            stderr += stderrDecoder.write(encoded.subarray(0, remaining));
+            stderrBytes += Math.min(encoded.length, remaining);
+            if (encoded.length > remaining)
+                stderrTruncated = true;
+        });
+        child.once("error", finishError);
+        child.once("close", (exitCode, exitSignal) => {
+            if (settled)
+                return;
+            try {
+                pending += decoder.end();
+                stderr += stderrDecoder.end();
+                if (pending.trim())
+                    consume(pending);
+            }
+            catch (error) {
+                fatalError ??= toError(error);
+            }
+            if (fatalError) {
+                finishError(fatalError);
+                return;
+            }
+            if (exitCode !== 0) {
+                finishError(new Error(`Codex CLI exited with ${exitSignal ?? exitCode ?? "unknown"}${stderr ? `: ${summarizeStderr(stderr)}` : ""}`));
+                return;
+            }
+            settled = true;
+            cleanup();
+            resolve({
+                exitCode: 0,
+                events,
+                stderr: sanitizeStderr(stderr),
+                stderrTruncated,
+                ...(resumeSessionId ? { resumeSessionId } : {}),
+            });
+        });
+        try {
+            child.stdin.end(options.prompt);
+        }
+        catch (error) {
+            stopWithError(toError(error));
+        }
+    });
+}
+function consumeJsonLine(line, events, maxEvents, onEvent) {
+    const trimmed = line.trim();
+    if (!trimmed)
+        return undefined;
+    if (events.length >= maxEvents) {
+        throw new Error(`Codex CLI stream exceeded ${maxEvents} events.`);
+    }
+    const parsed = JSON.parse(trimmed);
+    const event = asRecord(parsed);
+    if (!event)
+        throw new Error("Codex CLI emitted a non-object JSON event.");
+    events.push(event);
+    onEvent?.(event);
+    return event;
+}
+function safeEnvironment(input) {
+    return Object.fromEntries(SAFE_ENVIRONMENT_KEYS.flatMap((key) => typeof input[key] === "string" ? [[key, input[key]]] : []));
+}
+function validateInput(options) {
+    if (!readString(options.prompt))
+        throw new Error("Codex CLI prompt is required.");
+    if (!readString(options.cwd))
+        throw new Error("Codex CLI cwd is required.");
+    if (options.allowWorkspaceWrite && options.role !== "driver") {
+        throw new Error("Only a Codex driver can receive workspace-write access.");
+    }
+    const model = readString(options.model);
+    if (model?.startsWith("-"))
+        throw new Error("Codex CLI model is invalid.");
+    const resumeSessionId = readString(options.session?.resumeSessionId);
+    if (resumeSessionId?.includes("\0")) {
+        throw new Error("Codex CLI resume state is invalid.");
+    }
+    resolveCommand(options.command, "codex");
+}
+function boundedLimit(value, maximum) {
+    return Number.isSafeInteger(value) && (value ?? 0) > 0
+        ? Math.min(value, maximum)
+        : maximum;
+}
+function boundedDuration(value, fallback) {
+    return Number.isSafeInteger(value) && (value ?? 0) > 0
+        ? Math.min(value, DEFAULT_TIMEOUT_MS)
+        : fallback;
+}
+function resolveCommand(command, defaultCommand) {
+    const value = readString(command) ?? defaultCommand;
+    if (value === defaultCommand)
+        return value;
+    if (value.includes("\0") || !isAbsolute(value)) {
+        throw new Error("Codex CLI command must be an absolute executable path.");
+    }
+    return value;
+}
+function createAbortError() {
+    const error = new Error("Codex CLI participant was canceled.");
+    error.name = "AbortError";
+    return error;
+}
+function toError(value) {
+    return value instanceof Error ? value : new Error(String(value));
+}
+function safeError(error) {
+    const safe = new Error(summarizeStderr(error.message));
+    safe.name = error.name;
+    return safe;
+}
+function summarizeStderr(value) {
+    return sanitizeStderr(value)
+        .replace(/\s+/g, " ")
+        .trim()
+        .slice(0, MAX_ERROR_MESSAGE_LENGTH);
+}
+function sanitizeStderr(value) {
+    return value
+        .replace(/\bBearer\s+\S+/gi, "Bearer <redacted>")
+        .replace(/(["']?)([A-Za-z_]*(?:token|key|secret|password)[A-Za-z_]*)\1\s*([=:])\s*(?:"[^"]*"|'[^']*'|[^\s,;}\]]+)/gi, '$1$2$1$3"<redacted>"')
+        .replace(/\b(?:sk|rk)-[A-Za-z0-9_-]{8,}\b/g, "<redacted>");
+}
+function readString(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed || undefined;
+}
+function asRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+export const CODEX_CLI_PARTICIPANT_TESTED_VERSION = CODEX_CLI_VERSION;
+//# sourceMappingURL=codex-cli-participant.js.map

package/dist/cli/codex-cli-participant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-participant.js","sourceRoot":"","sources":["../../src/cli/codex-cli-participant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAE7C,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5C,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC3C,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAC3C,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC,MAAM,qBAAqB,GAAG;IAC5B,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,UAAU;IACV,aAAa;IACb,MAAM;IACN,SAAS;IACT,OAAO;IACP,+EAA+E;IAC/E,YAAY;CACJ,CAAC;AAiFX,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC1D;QACE,KAAK,CACH,wFAAwF,CACzF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AAQD,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAO,GAAsC,EAAE;IAE/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CACtC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,EACxC,CAAC,OAAO,EAAE,QAAQ,CAAC,EACnB;YACE,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,GAAG,GAAG,IAAI;YACrB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;SACjD,CACF,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC;QACtC,OAAO;YACL,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YACzC,QAAQ,EAAE,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;gBACjD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,uCAAuC,CAAC,IAAI,CAAC,MAAM,CAAC;oBACpD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAsC;IAEtC,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS;QAC3C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACrC,CAAC,CAAC,8BAA8B,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,IAAI,iCAAiC,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,gBAAgB,EAAE,CAAC;IAEtD,MAAM,IAAI,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,YAAY,GAChB,OAAO,CAAC,YAAY;QACpB,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,CACtC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE;QACxC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG;QACH,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,OAAO,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAGC;IAED,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI;QAC/D,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,WAAW,CAAC;IAClB,MAAM,IAAI,GAAG;QACX,oBAAoB;QACpB,OAAO;QACP,WAAW;QACX,OAAO;QACP,MAAM;QACN,OAAO,CAAC,GAAG;QACX,MAAM;KACP,CAAC;IACF,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,eAAe;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;IAErE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,eAAe;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;;QACtD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gCAAgC,CACvC,KAA+B,EAC/B,OAAsC;IAEtC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,cAAc,EACtB,wBAAwB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,YAAY,CACjC,OAAO,CAAC,cAAc,EACtB,wBAAwB,CACzB,CAAC;IACF,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,eAAe,CACxC,OAAO,CAAC,kBAAkB,EAC1B,4BAA4B,CAC7B,CAAC;IACF,MAAM,aAAa,GAAG,eAAe,CACnC,OAAO,CAAC,aAAa,EACrB,uBAAuB,CACxB,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,UAA6B,CAAC;IAClC,IAAI,eAAmC,CAAC;IAExC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAA4C,CAAC;QACjD,IAAI,gBAA4C,CAAC;QACjD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,aAAa,CAAC,IAAI,KAAK,CAAC,6BAA6B,SAAS,KAAK,CAAC,CAAC,CAAC;QACxE,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,IAAI,gBAAgB;gBAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACrD,IAAI,gBAAgB;gBAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACvD,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE;YACnC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,CAAC,KAAY,EAAE,EAAE;YACrC,IAAI,UAAU;gBAAE,OAAO;YACvB,UAAU,GAAG,KAAK,CAAC;YACnB,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACjC,IAAI,OAAO;oBAAE,OAAO;gBACpB,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;oBACjC,WAAW,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC;gBACnC,CAAC,EAAE,aAAa,CAAC,CAAC;gBAClB,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACvB,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,EAAE;YACnC,IAAI,CAAC,OAAO;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;YAC/B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,QAAQ,EAAE,CAAC;gBACjD,eAAe,GAAG,QAAQ,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACrC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACtC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAEtC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,KAAK,EAAE,CAAC;;gBAC/B,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,IAAI,UAAU;gBAAE,OAAO;YACvB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAClC,CAAC,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC7B,WAAW,IAAI,KAAK,CAAC;YACrB,IAAI,WAAW,GAAG,cAAc,EAAE,CAAC;gBACjC,aAAa,CACX,IAAI,KAAK,CAAC,6BAA6B,cAAc,SAAS,CAAC,CAChE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,KAAK,CACtB,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CACpD,CAAC;YACF,IAAI,CAAC;gBACH,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpC,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;oBACnC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;oBACrC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,CAAC;YAC5D,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,eAAe,GAAG,IAAI,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9D,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACnD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;gBAAE,eAAe,GAAG,IAAI,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE;YAC3C,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,CAAC;gBACH,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBACzB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC9B,IAAI,OAAO,CAAC,IAAI,EAAE;oBAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,UAAU,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,WAAW,CACT,IAAI,KAAK,CACP,yBAAyB,UAAU,IAAI,QAAQ,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9G,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC;gBACN,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;gBAC9B,eAAe;gBACf,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,MAAkC,EAClC,SAAiB,EACjB,OAAmD;IAEnD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,UAAU,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB;IAC/C,OAAO,MAAM,CAAC,WAAW,CACvB,qBAAqB,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACpC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1D,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAsC;IAC3D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,mBAAmB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACrE,IAAI,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,OAAe;IAC9D,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAe,EAAE,OAAO,CAAC;QACpC,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB,EAAE,QAAgB;IAClE,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAe,EAAE,kBAAkB,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,OAA2B,EAC3B,cAAsB;IAEtB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC;IACpD,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,KAAY;IAC7B,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,cAAc,CAAC,KAAK,CAAC;SACzB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,KAAK;SACT,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;SAChD,OAAO,CACN,2GAA2G,EAC3G,sBAAsB,CACvB;SACA,OAAO,CAAC,kCAAkC,EAAE,YAAY,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAkC;QACrC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,oCAAoC,GAAG,iBAAiB,CAAC","sourcesContent":["import { execFile as execFileCallback, spawn } from \"node:child_process\";\nimport { isAbsolute } from \"node:path\";\nimport type { Readable, Writable } from \"node:stream\";\nimport { StringDecoder } from \"node:string_decoder\";\nimport { promisify } from \"node:util\";\n\nconst execFile = promisify(execFileCallback);\n\nconst CODEX_CLI_VERSION = \"0.144.3\";\nconst DEFAULT_MAX_EVENTS = 2_000;\nconst DEFAULT_MAX_STREAM_BYTES = 8 * 1024 * 1024;\nconst DEFAULT_MAX_STDERR_BYTES = 128 * 1024;\nconst DEFAULT_TIMEOUT_MS = 30 * 60 * 1_000;\nconst DEFAULT_TERMINATION_GRACE_MS = 2_000;\nconst DEFAULT_FORCE_SETTLE_MS = 250;\nconst MAX_ERROR_MESSAGE_LENGTH = 200;\n\nconst SAFE_ENVIRONMENT_KEYS = [\n  \"PATH\",\n  \"HOME\",\n  \"LANG\",\n  \"LC_ALL\",\n  \"LC_CTYPE\",\n  \"TMPDIR\",\n  \"TMP\",\n  \"TEMP\",\n  \"TERM\",\n  \"NO_COLOR\",\n  \"FORCE_COLOR\",\n  \"USER\",\n  \"LOGNAME\",\n  \"SHELL\",\n  // Codex reads its subscription session from this config root (or HOME/.codex).\n  \"CODEX_HOME\",\n] as const;\n\nexport type CodexCliParticipantRole = \"planning\" | \"watchdog\" | \"driver\";\n\nexport interface CodexCliSubscriptionStatus {\n  loggedIn: boolean;\n  authMode?: \"ChatGPT\" | \"API key\" | \"unknown\";\n}\n\nexport interface CodexCliParticipantSession {\n  /** Codex owns and interprets this value; Agent Native only persists it. */\n  resumeSessionId?: string;\n}\n\nexport interface CodexCliParticipantEvent {\n  [key: string]: unknown;\n}\n\nexport interface CodexCliParticipantResult {\n  exitCode: number;\n  events: CodexCliParticipantEvent[];\n  stderr: string;\n  stderrTruncated: boolean;\n  resumeSessionId?: string;\n}\n\nexport interface CodexCliParticipantChild {\n  stdin: Writable;\n  stdout: Readable;\n  stderr: Readable;\n  kill(signal?: NodeJS.Signals): boolean;\n  once(event: \"error\", listener: (error: Error) => void): unknown;\n  once(\n    event: \"close\",\n    listener: (code: number | null, signal: NodeJS.Signals | null) => void,\n  ): unknown;\n}\n\nexport interface CodexCliParticipantSpawnOptions {\n  cwd: string;\n  env: NodeJS.ProcessEnv;\n  shell: false;\n  stdio: [\"pipe\", \"pipe\", \"pipe\"];\n}\n\nexport type CodexCliParticipantSpawn = (\n  command: string,\n  args: string[],\n  options: CodexCliParticipantSpawnOptions,\n) => CodexCliParticipantChild;\n\nexport interface RunCodexCliParticipantOptions {\n  role: CodexCliParticipantRole;\n  prompt: string;\n  cwd: string;\n  model?: string;\n  session?: CodexCliParticipantSession;\n  /** Drivers remain read-only unless this explicit capability is true. */\n  allowWorkspaceWrite?: boolean;\n  /** Either the fixed CLI name or an absolute executable path for packaged apps. */\n  command?: string;\n  signal?: AbortSignal;\n  env?: NodeJS.ProcessEnv;\n  maxEvents?: number;\n  maxStreamBytes?: number;\n  maxStderrBytes?: number;\n  timeoutMs?: number;\n  terminationGraceMs?: number;\n  forceSettleMs?: number;\n  onEvent?: (event: CodexCliParticipantEvent) => void;\n  preflight?: (\n    context: CodexCliParticipantPreflightContext,\n  ) => Promise<CodexCliSubscriptionStatus>;\n  spawnProcess?: CodexCliParticipantSpawn;\n}\n\nexport interface CodexCliParticipantPreflightContext {\n  command: string;\n  env: NodeJS.ProcessEnv;\n}\n\nexport class CodexCliSubscriptionRequiredError extends Error {\n  constructor() {\n    super(\n      \"Codex CLI must be signed in with a ChatGPT subscription. API-key fallback is disabled.\",\n    );\n    this.name = \"CodexCliSubscriptionRequiredError\";\n  }\n}\n\nexport interface CodexCliSubscriptionStatusOptions {\n  command?: string;\n  env?: NodeJS.ProcessEnv;\n  execute?: typeof execFile;\n}\n\nexport async function readCodexCliSubscriptionStatus(\n  options: CodexCliSubscriptionStatusOptions = {},\n): Promise<CodexCliSubscriptionStatus> {\n  try {\n    const execute = options.execute ?? execFile;\n    const { stdout, stderr } = await execute(\n      resolveCommand(options.command, \"codex\"),\n      [\"login\", \"status\"],\n      {\n        encoding: \"utf8\",\n        maxBuffer: 128 * 1024,\n        timeout: 3_000,\n        windowsHide: true,\n        env: safeEnvironment(options.env ?? process.env),\n      },\n    );\n    const output = `${stdout}\\n${stderr}`;\n    return {\n      loggedIn: /logged in using/i.test(output),\n      authMode: /logged in using\\s+chatgpt/i.test(output)\n        ? \"ChatGPT\"\n        : /logged in using\\s+(?:an?\\s+)?api key/i.test(output)\n          ? \"API key\"\n          : \"unknown\",\n    };\n  } catch {\n    return { loggedIn: false };\n  }\n}\n\nexport async function runCodexCliParticipant(\n  options: RunCodexCliParticipantOptions,\n): Promise<CodexCliParticipantResult> {\n  validateInput(options);\n  const env = safeEnvironment(options.env ?? process.env);\n  const command = resolveCommand(options.command, \"codex\");\n  const subscription = await (options.preflight\n    ? options.preflight({ command, env })\n    : readCodexCliSubscriptionStatus({ command, env }));\n  if (!subscription.loggedIn || subscription.authMode !== \"ChatGPT\") {\n    throw new CodexCliSubscriptionRequiredError();\n  }\n  if (options.signal?.aborted) throw createAbortError();\n\n  const args = buildCodexCliParticipantArgs(options);\n  const spawnProcess =\n    options.spawnProcess ??\n    ((command, commandArgs, spawnOptions) =>\n      spawn(command, commandArgs, spawnOptions));\n  const child = spawnProcess(command, args, {\n    cwd: options.cwd,\n    env,\n    shell: false,\n    stdio: [\"pipe\", \"pipe\", \"pipe\"],\n  });\n  return collectCodexCliParticipantResult(child, options);\n}\n\nexport function buildCodexCliParticipantArgs(\n  options: Pick<\n    RunCodexCliParticipantOptions,\n    \"role\" | \"cwd\" | \"model\" | \"session\" | \"allowWorkspaceWrite\"\n  >,\n): string[] {\n  const sandbox =\n    options.role === \"driver\" && options.allowWorkspaceWrite === true\n      ? \"workspace-write\"\n      : \"read-only\";\n  const args = [\n    \"--ask-for-approval\",\n    \"never\",\n    \"--sandbox\",\n    sandbox,\n    \"--cd\",\n    options.cwd,\n    \"exec\",\n  ];\n  const resumeSessionId = readString(options.session?.resumeSessionId);\n  if (resumeSessionId) args.push(\"resume\");\n  args.push(\"--json\", \"--skip-git-repo-check\", \"--ignore-user-config\");\n\n  const model = readString(options.model);\n  if (model) args.push(\"--model\", model);\n  if (resumeSessionId) args.push(\"--\", resumeSessionId, \"-\");\n  else args.push(\"-\");\n  return args;\n}\n\nfunction collectCodexCliParticipantResult(\n  child: CodexCliParticipantChild,\n  options: RunCodexCliParticipantOptions,\n): Promise<CodexCliParticipantResult> {\n  const maxEvents = boundedLimit(options.maxEvents, DEFAULT_MAX_EVENTS);\n  const maxStreamBytes = boundedLimit(\n    options.maxStreamBytes,\n    DEFAULT_MAX_STREAM_BYTES,\n  );\n  const maxStderrBytes = boundedLimit(\n    options.maxStderrBytes,\n    DEFAULT_MAX_STDERR_BYTES,\n  );\n  const timeoutMs = boundedDuration(options.timeoutMs, DEFAULT_TIMEOUT_MS);\n  const terminationGraceMs = boundedDuration(\n    options.terminationGraceMs,\n    DEFAULT_TERMINATION_GRACE_MS,\n  );\n  const forceSettleMs = boundedDuration(\n    options.forceSettleMs,\n    DEFAULT_FORCE_SETTLE_MS,\n  );\n  const decoder = new StringDecoder(\"utf8\");\n  const stderrDecoder = new StringDecoder(\"utf8\");\n  const events: CodexCliParticipantEvent[] = [];\n  let pending = \"\";\n  let streamBytes = 0;\n  let stderr = \"\";\n  let stderrBytes = 0;\n  let stderrTruncated = false;\n  let fatalError: Error | undefined;\n  let resumeSessionId: string | undefined;\n\n  return new Promise((resolve, reject) => {\n    let settled = false;\n    let terminationTimer: NodeJS.Timeout | undefined;\n    let forceSettleTimer: NodeJS.Timeout | undefined;\n    const timeoutTimer = setTimeout(() => {\n      stopWithError(new Error(`Codex CLI timed out after ${timeoutMs}ms.`));\n    }, timeoutMs);\n    timeoutTimer.unref?.();\n    const cleanup = () => {\n      options.signal?.removeEventListener(\"abort\", abort);\n      clearTimeout(timeoutTimer);\n      if (terminationTimer) clearTimeout(terminationTimer);\n      if (forceSettleTimer) clearTimeout(forceSettleTimer);\n    };\n    const finishError = (error: Error) => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      reject(safeError(error));\n    };\n    const stopWithError = (error: Error) => {\n      if (fatalError) return;\n      fatalError = error;\n      terminationTimer = setTimeout(() => {\n        if (settled) return;\n        forceSettleTimer = setTimeout(() => {\n          finishError(fatalError ?? error);\n        }, forceSettleMs);\n        forceSettleTimer.unref?.();\n        child.kill(\"SIGKILL\");\n      }, terminationGraceMs);\n      terminationTimer.unref?.();\n      child.kill(\"SIGTERM\");\n    };\n    const abort = () => stopWithError(createAbortError());\n    const streamError = (error: Error) => {\n      if (!settled) stopWithError(error);\n    };\n    const consume = (line: string) => {\n      const event = consumeJsonLine(line, events, maxEvents, options.onEvent);\n      const threadId = readString(event?.thread_id);\n      if (event?.type === \"thread.started\" && threadId) {\n        resumeSessionId = threadId;\n      }\n    };\n\n    child.stdin.on(\"error\", streamError);\n    child.stdout.on(\"error\", streamError);\n    child.stderr.on(\"error\", streamError);\n\n    if (options.signal) {\n      if (options.signal.aborted) abort();\n      else options.signal.addEventListener(\"abort\", abort, { once: true });\n    }\n\n    child.stdout.on(\"data\", (chunk: Buffer | string) => {\n      if (fatalError) return;\n      const bytes = Buffer.isBuffer(chunk)\n        ? chunk.length\n        : Buffer.byteLength(chunk);\n      streamBytes += bytes;\n      if (streamBytes > maxStreamBytes) {\n        stopWithError(\n          new Error(`Codex CLI stream exceeded ${maxStreamBytes} bytes.`),\n        );\n        return;\n      }\n      pending += decoder.write(\n        Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk),\n      );\n      try {\n        let newline = pending.indexOf(\"\\n\");\n        while (newline !== -1) {\n          consume(pending.slice(0, newline));\n          pending = pending.slice(newline + 1);\n          newline = pending.indexOf(\"\\n\");\n        }\n      } catch (error) {\n        stopWithError(toError(error));\n      }\n    });\n    child.stderr.on(\"data\", (chunk: Buffer | string) => {\n      const encoded = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      const remaining = Math.max(0, maxStderrBytes - stderrBytes);\n      if (remaining === 0) {\n        stderrTruncated = true;\n        return;\n      }\n      stderr += stderrDecoder.write(encoded.subarray(0, remaining));\n      stderrBytes += Math.min(encoded.length, remaining);\n      if (encoded.length > remaining) stderrTruncated = true;\n    });\n    child.once(\"error\", finishError);\n    child.once(\"close\", (exitCode, exitSignal) => {\n      if (settled) return;\n      try {\n        pending += decoder.end();\n        stderr += stderrDecoder.end();\n        if (pending.trim()) consume(pending);\n      } catch (error) {\n        fatalError ??= toError(error);\n      }\n      if (fatalError) {\n        finishError(fatalError);\n        return;\n      }\n      if (exitCode !== 0) {\n        finishError(\n          new Error(\n            `Codex CLI exited with ${exitSignal ?? exitCode ?? \"unknown\"}${stderr ? `: ${summarizeStderr(stderr)}` : \"\"}`,\n          ),\n        );\n        return;\n      }\n      settled = true;\n      cleanup();\n      resolve({\n        exitCode: 0,\n        events,\n        stderr: sanitizeStderr(stderr),\n        stderrTruncated,\n        ...(resumeSessionId ? { resumeSessionId } : {}),\n      });\n    });\n    try {\n      child.stdin.end(options.prompt);\n    } catch (error) {\n      stopWithError(toError(error));\n    }\n  });\n}\n\nfunction consumeJsonLine(\n  line: string,\n  events: CodexCliParticipantEvent[],\n  maxEvents: number,\n  onEvent?: (event: CodexCliParticipantEvent) => void,\n): CodexCliParticipantEvent | undefined {\n  const trimmed = line.trim();\n  if (!trimmed) return undefined;\n  if (events.length >= maxEvents) {\n    throw new Error(`Codex CLI stream exceeded ${maxEvents} events.`);\n  }\n  const parsed = JSON.parse(trimmed) as unknown;\n  const event = asRecord(parsed);\n  if (!event) throw new Error(\"Codex CLI emitted a non-object JSON event.\");\n  events.push(event);\n  onEvent?.(event);\n  return event;\n}\n\nfunction safeEnvironment(input: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\n  return Object.fromEntries(\n    SAFE_ENVIRONMENT_KEYS.flatMap((key) =>\n      typeof input[key] === \"string\" ? [[key, input[key]]] : [],\n    ),\n  );\n}\n\nfunction validateInput(options: RunCodexCliParticipantOptions): void {\n  if (!readString(options.prompt))\n    throw new Error(\"Codex CLI prompt is required.\");\n  if (!readString(options.cwd)) throw new Error(\"Codex CLI cwd is required.\");\n  if (options.allowWorkspaceWrite && options.role !== \"driver\") {\n    throw new Error(\"Only a Codex driver can receive workspace-write access.\");\n  }\n  const model = readString(options.model);\n  if (model?.startsWith(\"-\")) throw new Error(\"Codex CLI model is invalid.\");\n  const resumeSessionId = readString(options.session?.resumeSessionId);\n  if (resumeSessionId?.includes(\"\\0\")) {\n    throw new Error(\"Codex CLI resume state is invalid.\");\n  }\n  resolveCommand(options.command, \"codex\");\n}\n\nfunction boundedLimit(value: number | undefined, maximum: number): number {\n  return Number.isSafeInteger(value) && (value ?? 0) > 0\n    ? Math.min(value as number, maximum)\n    : maximum;\n}\n\nfunction boundedDuration(value: number | undefined, fallback: number): number {\n  return Number.isSafeInteger(value) && (value ?? 0) > 0\n    ? Math.min(value as number, DEFAULT_TIMEOUT_MS)\n    : fallback;\n}\n\nfunction resolveCommand(\n  command: string | undefined,\n  defaultCommand: string,\n): string {\n  const value = readString(command) ?? defaultCommand;\n  if (value === defaultCommand) return value;\n  if (value.includes(\"\\0\") || !isAbsolute(value)) {\n    throw new Error(\"Codex CLI command must be an absolute executable path.\");\n  }\n  return value;\n}\n\nfunction createAbortError(): Error {\n  const error = new Error(\"Codex CLI participant was canceled.\");\n  error.name = \"AbortError\";\n  return error;\n}\n\nfunction toError(value: unknown): Error {\n  return value instanceof Error ? value : new Error(String(value));\n}\n\nfunction safeError(error: Error): Error {\n  const safe = new Error(summarizeStderr(error.message));\n  safe.name = error.name;\n  return safe;\n}\n\nfunction summarizeStderr(value: string): string {\n  return sanitizeStderr(value)\n    .replace(/\\s+/g, \" \")\n    .trim()\n    .slice(0, MAX_ERROR_MESSAGE_LENGTH);\n}\n\nfunction sanitizeStderr(value: string): string {\n  return value\n    .replace(/\\bBearer\\s+\\S+/gi, \"Bearer <redacted>\")\n    .replace(\n      /([\"']?)([A-Za-z_]*(?:token|key|secret|password)[A-Za-z_]*)\\1\\s*([=:])\\s*(?:\"[^\"]*\"|'[^']*'|[^\\s,;}\\]]+)/gi,\n      '$1$2$1$3\"<redacted>\"',\n    )\n    .replace(/\\b(?:sk|rk)-[A-Za-z0-9_-]{8,}\\b/g, \"<redacted>\");\n}\n\nfunction readString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed || undefined;\n}\n\nfunction asRecord(value: unknown): CodexCliParticipantEvent | undefined {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as CodexCliParticipantEvent)\n    : undefined;\n}\n\nexport const CODEX_CLI_PARTICIPANT_TESTED_VERSION = CODEX_CLI_VERSION;\n"]}

package/dist/cli/multi-frontier-runs.d.ts

@@ -0,0 +1,246 @@
+export type MultiFrontierPhase = "proposing" | "cross_review" | "converging" | "awaiting_go" | "implementing" | "checkpoint_review" | "paused" | "completed" | "failed" | "canceled";
+export type MultiFrontierParticipantRole = "driver" | "watchdog";
+export type MultiFrontierParticipantPermission = "read_only" | "workspace_write";
+export type MultiFrontierParticipantStatus = "idle" | "running" | "waiting" | "failed" | "completed";
+export type MultiFrontierApprovalState = "not_required" | "pending" | "approved" | "rejected";
+export type MultiFrontierRecoveryReason = "main_process_restarted" | "driver_crashed" | "watchdog_crashed" | "app_quit" | "canceled";
+export interface MultiFrontierParticipantState {
+    participantId: string;
+    provider: string;
+    runtime: string;
+    model?: string;
+    capabilities?: string[];
+    sessionRef?: string;
+    role: MultiFrontierParticipantRole;
+    permission: MultiFrontierParticipantPermission;
+    status: MultiFrontierParticipantStatus;
+}
+export interface MultiFrontierDriverLease {
+    participantId: string;
+    generation: number;
+    leaseState: "inactive" | "active" | "revoked";
+}
+export interface MultiFrontierApproval {
+    state: MultiFrontierApprovalState;
+    proposalId?: string;
+    reviewPacketId?: string;
+}
+export interface MultiFrontierRecovery {
+    reason: MultiFrontierRecoveryReason;
+    recoveredAt: string;
+    resumablePhase: MultiFrontierPhase;
+    checkpointId?: string;
+}
+/**
+ * The durable state contract shared by the main process and every participant.
+ * Only the main-process coordinator writes it through this module.
+ */
+export interface MultiFrontierRunState {
+    schemaVersion: 1;
+    collaborationId: string;
+    /** Opaque local workspace handle; never a filesystem path. */
+    workspaceId?: string;
+    phase: MultiFrontierPhase;
+    participants: MultiFrontierParticipantState[];
+    driver: MultiFrontierDriverLease | null;
+    approval: MultiFrontierApproval;
+    checkpointIds: string[];
+    round: number;
+    proposalIds: string[];
+    reviewIds: string[];
+    /** Opt-in policy; explicit GO remains the durable default. */
+    autoContinueAfterAgreement: boolean;
+    recovery?: MultiFrontierRecovery;
+}
+export interface CreateMultiFrontierRunInput {
+    collaborationId: string;
+    workspaceId?: string;
+    phase?: MultiFrontierPhase;
+    participants: MultiFrontierParticipantState[];
+    approval?: MultiFrontierApproval;
+    checkpointIds?: string[];
+    autoContinueAfterAgreement?: boolean;
+}
+export interface RecoverMultiFrontierRunInput {
+    now: string;
+    reason: MultiFrontierRecoveryReason;
+}
+export interface MultiFrontierParticipantEvent {
+    participantId: string;
+    generation?: number;
+    permission: MultiFrontierParticipantPermission;
+}
+export interface PersistedMultiFrontierParticipantEvent extends MultiFrontierParticipantEvent {
+    schemaVersion: 1;
+    id: string;
+    collaborationId: string;
+    createdAt: string;
+    status?: MultiFrontierParticipantStatus;
+}
+export type MultiFrontierArtifactKind = "proposal" | "review" | "checkpoint";
+export interface MultiFrontierArtifactTestSummary {
+    name: string;
+    status: "passed" | "failed" | "skipped";
+    summary?: string;
+}
+/** A bounded, redacted projection used only for Desktop orchestrator recovery. */
+export interface MultiFrontierOrchestrationArtifact {
+    id: string;
+    kind: "proposal" | "cross_review" | "revision" | "synthesis" | "checkpoint" | "watchdog_review" | "finding_disposition" | "completion";
+    round: number;
+    participantId?: string;
+    text: string;
+    attribution: {
+        participantIds: string[];
+        sourceArtifactIds: string[];
+    };
+    supersedesArtifactId?: string;
+    metadata?: Record<string, unknown>;
+}
+/**
+ * A deliberately narrow coordination record. Full diffs, transcripts, and
+ * provider payloads stay in their owning runtime rather than this durable
+ * cross-provider index.
+ */
+export interface PersistedMultiFrontierArtifact {
+    schemaVersion: 1;
+    id: string;
+    collaborationId: string;
+    kind: MultiFrontierArtifactKind;
+    createdAt: string;
+    participantId?: string;
+    title: string;
+    summary: string;
+    supersedesArtifactId?: string;
+    contentHash?: string;
+    fileRefs?: string[];
+    testSummary?: MultiFrontierArtifactTestSummary[];
+    orchestration?: MultiFrontierOrchestrationArtifact;
+}
+export interface AppendMultiFrontierArtifactInput {
+    id: string;
+    collaborationId: string;
+    kind: MultiFrontierArtifactKind;
+    createdAt?: string;
+    participantId?: string;
+    title: string;
+    summary: string;
+    supersedesArtifactId?: string;
+    contentHash?: string;
+    fileRefs?: string[];
+    testSummary?: MultiFrontierArtifactTestSummary[];
+    orchestration?: MultiFrontierOrchestrationArtifact;
+}
+export interface MultiFrontierParticipantEventRetention {
+    schemaVersion: 1;
+    retainedEventCount: number;
+    retainedByteCount: number;
+    droppedEventCount: number;
+    droppedByteCount: number;
+    truncated: boolean;
+    replay: {
+        requiresSnapshot: boolean;
+        firstRetainedEventId?: string;
+    };
+}
+export interface MultiFrontierParticipantEventRetentionLimits {
+    maxEventCount: number;
+    maxBytes: number;
+}
+export interface AppendMultiFrontierParticipantEventInput extends MultiFrontierParticipantEvent {
+    id: string;
+    collaborationId: string;
+    createdAt?: string;
+    status?: MultiFrontierParticipantStatus;
+}
+export interface MultiFrontierStoredRun extends MultiFrontierRunState {
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * The desktop main-process coordinator is the sole caller of this transition
+ * boundary. Its callback receives a detached snapshot, never renderer input.
+ */
+export type MultiFrontierCoordinatorTransition = (current: MultiFrontierStoredRun) => MultiFrontierRunState | MultiFrontierStoredRun | null;
+export type AppendMultiFrontierParticipantEventResult = {
+    accepted: true;
+    deduplicated: boolean;
+    event: PersistedMultiFrontierParticipantEvent;
+    run: MultiFrontierStoredRun;
+} | {
+    accepted: false;
+    reason: "missing-run" | "stale-driver" | "missing-participant" | "event-conflict" | "terminal-participant";
+    run: MultiFrontierStoredRun | null;
+};
+export type AppendMultiFrontierArtifactResult = {
+    accepted: true;
+    deduplicated: boolean;
+    artifact: PersistedMultiFrontierArtifact;
+    run: MultiFrontierStoredRun;
+} | {
+    accepted: false;
+    reason: "missing-run" | "artifact-conflict" | "missing-participant" | "missing-superseded-artifact" | "artifact-limit-reached";
+    run: MultiFrontierStoredRun | null;
+};
+export declare const MAX_MULTI_FRONTIER_ARTIFACTS_PER_RUN = 200;
+export declare const DEFAULT_MULTI_FRONTIER_PARTICIPANT_EVENT_RETENTION: MultiFrontierParticipantEventRetentionLimits;
+/** All multi-frontier state stays alongside the existing local Code store. */
+export declare function multiFrontierRunsStoreRoot(): string;
+export declare function multiFrontierRunsDir(): string;
+export declare function multiFrontierParticipantEventsDir(): string;
+export declare function multiFrontierArtifactsDir(): string;
+export declare function createMultiFrontierRun(input: CreateMultiFrontierRunInput): MultiFrontierStoredRun;
+export declare function getMultiFrontierRun(collaborationId: string): MultiFrontierStoredRun | null;
+export declare function listMultiFrontierRuns(): MultiFrontierStoredRun[];
+/**
+ * Recovery never resumes a native participant automatically. Any in-flight
+ * driver lease is revoked and requires an explicit, newly fenced activation.
+ */
+export declare function recoverMultiFrontierRun(state: MultiFrontierRunState, input: RecoverMultiFrontierRunInput): MultiFrontierRunState;
+/** Persist the recovery decision made by the main-process coordinator. */
+export declare function recoverStoredMultiFrontierRun(collaborationId: string, input: RecoverMultiFrontierRunInput): MultiFrontierStoredRun | null;
+/**
+ * Applies one durable coordinator-owned state transition under the run lock.
+ * A state-shaped result retains proposal and review references by default;
+ * returning a full stored record is the explicit escape hatch for a
+ * coordinator operation that intentionally changes those references.
+ */
+export declare function transitionStoredMultiFrontierRun(collaborationId: string, updatedAt: string, transition: MultiFrontierCoordinatorTransition): MultiFrontierStoredRun | null;
+/**
+ * Coordinators must call this before applying a participant event. Write
+ * events are accepted only from the active driver generation.
+ */
+export declare function canApplyMultiFrontierParticipantEvent(state: MultiFrontierRunState, event: MultiFrontierParticipantEvent): boolean;
+/**
+ * Explicitly restores a write lease after recovery. The generation increments
+ * so an event from the interrupted process can never regain write authority.
+ */
+export declare function reactivateMultiFrontierDriver(state: MultiFrontierRunState, participantId: string): MultiFrontierRunState | null;
+/** Assign the first explicit write lease for an implementing run. */
+export declare function activateMultiFrontierDriver(state: MultiFrontierRunState, participantId: string): MultiFrontierRunState | null;
+/** Persist the first explicit driver activation from the main-process coordinator. */
+export declare function activateStoredMultiFrontierDriver(collaborationId: string, participantId: string, now?: string): MultiFrontierStoredRun | null;
+/** Persist an explicit driver reactivation after the human-approved resume. */
+export declare function reactivateStoredMultiFrontierDriver(collaborationId: string, participantId: string, now?: string): MultiFrontierStoredRun | null;
+/**
+ * Appends an idempotent participant event after the coordinator has fenced it.
+ * The event journal is diagnostic; state is mutated only through this guarded
+ * coordinator entry point.
+ */
+export declare function appendMultiFrontierParticipantEvent(input: AppendMultiFrontierParticipantEventInput): AppendMultiFrontierParticipantEventResult;
+/**
+ * Appends a bounded proposal, review, or checkpoint index record. The
+ * coordinator owns both the artifact and its run-state reference under one
+ * run lock, so a reader never observes a durable reference without its record.
+ */
+export declare function appendMultiFrontierArtifact(input: AppendMultiFrontierArtifactInput): AppendMultiFrontierArtifactResult;
+export declare function getMultiFrontierArtifact(collaborationId: string, artifactId: string): PersistedMultiFrontierArtifact | null;
+export declare function listMultiFrontierArtifacts(collaborationId: string): PersistedMultiFrontierArtifact[];
+export declare function listMultiFrontierParticipantEvents(collaborationId: string): PersistedMultiFrontierParticipantEvent[];
+export declare function getMultiFrontierParticipantEventRetention(collaborationId: string): MultiFrontierParticipantEventRetention | null;
+/**
+ * Coordinator maintenance for a bounded event journal. It deliberately keeps
+ * the newest contiguous tail and a replay marker instead of deleting run state.
+ */
+export declare function compactMultiFrontierParticipantEvents(collaborationId: string, limits?: MultiFrontierParticipantEventRetentionLimits): MultiFrontierParticipantEventRetention | null;
+//# sourceMappingURL=multi-frontier-runs.d.ts.map