@ai-devkit/agent-manager 0.28.1 → 0.30.0

package/dist/__tests__/capacity/codex.test.js

@@ -0,0 +1,343 @@
+import { describe, expect, it, vi } from 'vitest';
+import { CODEX_APP_SERVER_ARGS, parseUsage, probeCodexCapacity, resolveCodexAuthPath, toRateWindow } from '../../capacity/codex.js';
+const checkedAt = '2026-08-20T10:00:00.000Z';
+const context = {
+    installed: true,
+    checkedAt
+};
+function apiUsage(overrides = {}) {
+    return {
+        rate_limit: {
+            primary_window: {
+                used_percent: 20,
+                limit_window_seconds: 18_000,
+                reset_at: 1_787_220_000
+            },
+            secondary_window: {
+                used_percent: 60,
+                limit_window_seconds: 604_800,
+                reset_at: 1_787_824_800
+            },
+            ...overrides
+        },
+        credits: {
+            balance: 12.5
+        },
+        additional_rate_limits: [
+            {
+                limit_name: 'reviews',
+                rate_limit: {
+                    primary_window: {
+                        used_percent: 10,
+                        limit_window_seconds: 3_600,
+                        reset_at: 1_787_220_000
+                    }
+                }
+            }
+        ]
+    };
+}
+describe('Codex auth resolution', ()=>{
+    it('uses CODEX_HOME before HOME', ()=>{
+        expect(resolveCodexAuthPath({
+            CODEX_HOME: '/custom/codex',
+            HOME: '/users/test'
+        })).toBe('/custom/codex/auth.json');
+    });
+    it('falls back to ~/.codex/auth.json', ()=>{
+        expect(resolveCodexAuthPath({
+            HOME: '/users/test'
+        })).toBe('/users/test/.codex/auth.json');
+    });
+});
+describe('Codex API usage mapping', ()=>{
+    it('converts an API window without treating missing data as zero', ()=>{
+        expect(toRateWindow({
+            used_percent: 25,
+            limit_window_seconds: 18_000,
+            reset_at: 1_787_220_000
+        }, 'session', 'Session')).toEqual({
+            id: 'session',
+            label: 'Session',
+            durationMinutes: 300,
+            usedPercent: 25,
+            resetsAt: '2026-08-20T10:00:00.000Z'
+        });
+        expect(toRateWindow({}, 'session', 'Session')).toMatchObject({
+            usedPercent: null
+        });
+    });
+    it('maps session, weekly, credits, and extra limits', ()=>{
+        const snapshot = parseUsage(apiUsage(), 'pat');
+        expect(snapshot).toMatchObject({
+            source: 'pat',
+            creditsRemaining: 12.5
+        });
+        expect(snapshot.windows).toEqual([
+            expect.objectContaining({
+                id: 'session',
+                durationMinutes: 300
+            }),
+            expect.objectContaining({
+                id: 'weekly',
+                durationMinutes: 10080
+            }),
+            expect.objectContaining({
+                id: 'reviews:primary',
+                durationMinutes: 60
+            })
+        ]);
+    });
+    it('represents missing limits as unavailable rather than zero', ()=>{
+        const snapshot = parseUsage({
+            credits: {}
+        }, 'oauth');
+        expect(snapshot.windows).toEqual([]);
+        expect(snapshot.creditsRemaining).toBeNull();
+    });
+});
+describe('tiered Codex probing', ()=>{
+    it('selects PAT, calls whoami then usage, and never invokes the CLI', async ()=>{
+        const fetch = vi.fn().mockResolvedValueOnce(new Response(JSON.stringify({
+            chatgpt_account_id: 'acct-1'
+        }), {
+            status: 200
+        })).mockResolvedValueOnce(new Response(JSON.stringify(apiUsage()), {
+            status: 200
+        }));
+        const rpc = vi.fn();
+        const result = await probeCodexCapacity({
+            ...context,
+            readFile: async ()=>JSON.stringify({
+                    personal_access_token: 'pat-secret',
+                    tokens: {
+                        access_token: 'ignored-oauth',
+                        account_id: 'ignored-account'
+                    }
+                }),
+            fetch,
+            rpc
+        });
+        expect(fetch).toHaveBeenCalledTimes(2);
+        expect(fetch.mock.calls[0][0]).toBe('https://auth.openai.com/api/accounts/v1/user-auth-credential/whoami');
+        expect(fetch.mock.calls[1][0]).toBe('https://chatgpt.com/backend-api/wham/usage');
+        expect(fetch.mock.calls[1][1].headers).toMatchObject({
+            Authorization: 'Bearer pat-secret',
+            'ChatGPT-Account-Id': 'acct-1'
+        });
+        expect(rpc).not.toHaveBeenCalled();
+        expect(result).toMatchObject({
+            provider: 'codex',
+            available: 'yes',
+            creditsRemaining: 12.5,
+            authenticated: true
+        });
+        expect(result.windows.map((window)=>window.id)).toEqual([
+            'session',
+            'weekly',
+            'reviews:primary'
+        ]);
+    });
+    it('selects a fresh OAuth token without calling whoami', async ()=>{
+        const fetch = vi.fn().mockResolvedValue(new Response(JSON.stringify(apiUsage()), {
+            status: 200
+        }));
+        const result = await probeCodexCapacity({
+            ...context,
+            readFile: async ()=>JSON.stringify({
+                    tokens: {
+                        access_token: 'oauth-secret',
+                        account_id: 'acct-2',
+                        expires_at: 1_800_000_000
+                    }
+                }),
+            fetch,
+            now: ()=>new Date('2026-08-20T10:00:00.000Z')
+        });
+        expect(fetch).toHaveBeenCalledOnce();
+        expect(fetch.mock.calls[0][1].headers).toMatchObject({
+            Authorization: 'Bearer oauth-secret',
+            'ChatGPT-Account-Id': 'acct-2'
+        });
+        expect(result.available).toBe('yes');
+    });
+    it.each([
+        [
+            'missing auth file',
+            async ()=>{
+                throw Object.assign(new Error('missing'), {
+                    code: 'ENOENT'
+                });
+            }
+        ],
+        [
+            'stale OAuth token',
+            async ()=>JSON.stringify({
+                    tokens: {
+                        access_token: 'stale-secret',
+                        account_id: 'acct',
+                        expires_at: 1
+                    }
+                })
+        ],
+        [
+            'OAuth 401',
+            async ()=>JSON.stringify({
+                    tokens: {
+                        access_token: 'oauth-secret',
+                        account_id: 'acct',
+                        expires_at: 1_800_000_000
+                    }
+                })
+        ]
+    ])('falls back to the CLI for %s', async (name, readFile)=>{
+        const fetch = vi.fn().mockResolvedValue(new Response('', {
+            status: name === 'OAuth 401' ? 401 : 200
+        }));
+        const rpc = vi.fn(async ()=>({
+                rateLimits: {
+                    rateLimits: {
+                        primary: {
+                            usedPercent: 5,
+                            windowDurationMins: 300,
+                            resetsAt: null
+                        }
+                    }
+                },
+                account: {
+                    account: {
+                        type: 'chatgpt'
+                    }
+                }
+            }));
+        const result = await probeCodexCapacity({
+            ...context,
+            readFile,
+            fetch,
+            rpc,
+            now: ()=>new Date(checkedAt)
+        });
+        expect(rpc).toHaveBeenCalledOnce();
+        expect(result.windows).toHaveLength(1);
+    });
+    it('falls back to CLI if PAT requests fail', async ()=>{
+        const rpc = vi.fn(async ()=>({
+                rateLimits: {},
+                account: {
+                    account: null
+                }
+            }));
+        const result = await probeCodexCapacity({
+            ...context,
+            readFile: async ()=>JSON.stringify({
+                    personal_access_token: 'pat-secret'
+                }),
+            fetch: vi.fn().mockRejectedValue(new Error('network failure pat-secret')),
+            rpc
+        });
+        expect(rpc).toHaveBeenCalledOnce();
+        expect(result.available).toBe('unknown');
+    });
+    it('tries fresh OAuth after a PAT request fails', async ()=>{
+        const fetch = vi.fn().mockRejectedValueOnce(new Error('PAT failed')).mockResolvedValueOnce(new Response(JSON.stringify(apiUsage()), {
+            status: 200
+        }));
+        const rpc = vi.fn();
+        const result = await probeCodexCapacity({
+            ...context,
+            readFile: async ()=>JSON.stringify({
+                    personal_access_token: 'pat-secret',
+                    tokens: {
+                        access_token: 'oauth-secret',
+                        account_id: 'acct',
+                        expires_at: 1_800_000_000
+                    }
+                }),
+            fetch,
+            rpc,
+            now: ()=>new Date(checkedAt)
+        });
+        expect(fetch).toHaveBeenCalledTimes(2);
+        expect(result.available).toBe('yes');
+        expect(rpc).not.toHaveBeenCalled();
+    });
+    it('uses hardened read-only app-server arguments and both account methods', async ()=>{
+        const rpc = vi.fn(async ()=>({
+                rateLimits: {
+                    rateLimits: {
+                        primary: {
+                            usedPercent: 5,
+                            windowDurationMins: 300,
+                            resetsAt: null
+                        }
+                    }
+                },
+                account: {
+                    account: {
+                        type: 'chatgpt'
+                    }
+                }
+            }));
+        await probeCodexCapacity({
+            ...context,
+            readFile: async ()=>'{}',
+            rpc
+        });
+        const messages = rpc.mock.calls[0][0];
+        expect(messages.map((message)=>message.method)).toEqual([
+            'initialize',
+            'initialized',
+            'account/rateLimits/read',
+            'account/read'
+        ]);
+        expect(JSON.stringify(messages)).not.toMatch(/prompt|turn\/start/);
+        expect(CODEX_APP_SERVER_ARGS).toEqual([
+            '-s',
+            'read-only',
+            '-a',
+            'untrusted',
+            'app-server'
+        ]);
+    });
+    it('uses account/read to distinguish logged-out CLI state', async ()=>{
+        const result = await probeCodexCapacity({
+            ...context,
+            readFile: async ()=>'{}',
+            rpc: async ()=>({
+                    rateLimits: {},
+                    account: {
+                        account: null
+                    }
+                })
+        });
+        expect(result).toMatchObject({
+            authenticated: false,
+            available: 'unknown'
+        });
+    });
+    it('never exposes tokens or raw auth content through failures', async ()=>{
+        const secrets = [
+            'pat-secret-value',
+            'oauth-secret-value',
+            'refresh-secret-value'
+        ];
+        const result = await probeCodexCapacity({
+            ...context,
+            readFile: async ()=>JSON.stringify({
+                    personal_access_token: secrets[0],
+                    tokens: {
+                        access_token: secrets[1],
+                        refresh_token: secrets[2]
+                    }
+                }),
+            fetch: vi.fn().mockRejectedValue(new Error(secrets.join(' '))),
+            rpc: async ()=>{
+                throw new Error(secrets.join(' '));
+            }
+        });
+        const output = JSON.stringify(result);
+        for (const secret of secrets)expect(output).not.toContain(secret);
+    });
+});
+
+//# sourceMappingURL=codex.test.js.map

package/dist/__tests__/capacity/codex.test.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/__tests__/capacity/codex.test.ts"],"sourcesContent":["import { describe, expect, it, vi } from 'vitest';\nimport {\n  CODEX_APP_SERVER_ARGS,\n  parseUsage,\n  probeCodexCapacity,\n  resolveCodexAuthPath,\n  toRateWindow\n} from '../../capacity/codex.js';\n\nconst checkedAt = '2026-08-20T10:00:00.000Z';\nconst context = { installed: true, checkedAt };\n\nfunction apiUsage(overrides: Record<string, unknown> = {}) {\n  return {\n    rate_limit: {\n      primary_window: { used_percent: 20, limit_window_seconds: 18_000, reset_at: 1_787_220_000 },\n      secondary_window: { used_percent: 60, limit_window_seconds: 604_800, reset_at: 1_787_824_800 },\n      ...overrides\n    },\n    credits: { balance: 12.5 },\n    additional_rate_limits: [{\n      limit_name: 'reviews',\n      rate_limit: {\n        primary_window: { used_percent: 10, limit_window_seconds: 3_600, reset_at: 1_787_220_000 }\n      }\n    }]\n  };\n}\n\ndescribe('Codex auth resolution', () => {\n  it('uses CODEX_HOME before HOME', () => {\n    expect(resolveCodexAuthPath({ CODEX_HOME: '/custom/codex', HOME: '/users/test' })).toBe('/custom/codex/auth.json');\n  });\n\n  it('falls back to ~/.codex/auth.json', () => {\n    expect(resolveCodexAuthPath({ HOME: '/users/test' })).toBe('/users/test/.codex/auth.json');\n  });\n});\n\ndescribe('Codex API usage mapping', () => {\n  it('converts an API window without treating missing data as zero', () => {\n    expect(toRateWindow({ used_percent: 25, limit_window_seconds: 18_000, reset_at: 1_787_220_000 }, 'session', 'Session')).toEqual({\n      id: 'session', label: 'Session', durationMinutes: 300, usedPercent: 25,\n      resetsAt: '2026-08-20T10:00:00.000Z'\n    });\n    expect(toRateWindow({}, 'session', 'Session')).toMatchObject({ usedPercent: null });\n  });\n\n  it('maps session, weekly, credits, and extra limits', () => {\n    const snapshot = parseUsage(apiUsage(), 'pat');\n    expect(snapshot).toMatchObject({ source: 'pat', creditsRemaining: 12.5 });\n    expect(snapshot.windows).toEqual([\n      expect.objectContaining({ id: 'session', durationMinutes: 300 }),\n      expect.objectContaining({ id: 'weekly', durationMinutes: 10080 }),\n      expect.objectContaining({ id: 'reviews:primary', durationMinutes: 60 })\n    ]);\n  });\n\n  it('represents missing limits as unavailable rather than zero', () => {\n    const snapshot = parseUsage({ credits: {} }, 'oauth');\n    expect(snapshot.windows).toEqual([]);\n    expect(snapshot.creditsRemaining).toBeNull();\n  });\n});\n\ndescribe('tiered Codex probing', () => {\n  it('selects PAT, calls whoami then usage, and never invokes the CLI', async () => {\n    const fetch = vi.fn()\n      .mockResolvedValueOnce(new Response(JSON.stringify({ chatgpt_account_id: 'acct-1' }), { status: 200 }))\n      .mockResolvedValueOnce(new Response(JSON.stringify(apiUsage()), { status: 200 }));\n    const rpc = vi.fn();\n    const result = await probeCodexCapacity({\n      ...context, readFile: async () => JSON.stringify({\n        personal_access_token: 'pat-secret',\n        tokens: { access_token: 'ignored-oauth', account_id: 'ignored-account' }\n      }), fetch, rpc\n    });\n    expect(fetch).toHaveBeenCalledTimes(2);\n    expect(fetch.mock.calls[0][0]).toBe('https://auth.openai.com/api/accounts/v1/user-auth-credential/whoami');\n    expect(fetch.mock.calls[1][0]).toBe('https://chatgpt.com/backend-api/wham/usage');\n    expect(fetch.mock.calls[1][1].headers).toMatchObject({ Authorization: 'Bearer pat-secret', 'ChatGPT-Account-Id': 'acct-1' });\n    expect(rpc).not.toHaveBeenCalled();\n    expect(result).toMatchObject({ provider: 'codex', available: 'yes', creditsRemaining: 12.5, authenticated: true });\n    expect(result.windows.map(window => window.id)).toEqual(['session', 'weekly', 'reviews:primary']);\n  });\n\n  it('selects a fresh OAuth token without calling whoami', async () => {\n    const fetch = vi.fn().mockResolvedValue(new Response(JSON.stringify(apiUsage()), { status: 200 }));\n    const result = await probeCodexCapacity({\n      ...context,\n      readFile: async () => JSON.stringify({ tokens: { access_token: 'oauth-secret', account_id: 'acct-2', expires_at: 1_800_000_000 } }),\n      fetch,\n      now: () => new Date('2026-08-20T10:00:00.000Z')\n    });\n    expect(fetch).toHaveBeenCalledOnce();\n    expect(fetch.mock.calls[0][1].headers).toMatchObject({ Authorization: 'Bearer oauth-secret', 'ChatGPT-Account-Id': 'acct-2' });\n    expect(result.available).toBe('yes');\n  });\n\n  it.each([\n    ['missing auth file', async () => { throw Object.assign(new Error('missing'), { code: 'ENOENT' }); }],\n    ['stale OAuth token', async () => JSON.stringify({ tokens: { access_token: 'stale-secret', account_id: 'acct', expires_at: 1 } })],\n    ['OAuth 401', async () => JSON.stringify({ tokens: { access_token: 'oauth-secret', account_id: 'acct', expires_at: 1_800_000_000 } })]\n  ])('falls back to the CLI for %s', async (name, readFile) => {\n    const fetch = vi.fn().mockResolvedValue(new Response('', { status: name === 'OAuth 401' ? 401 : 200 }));\n    const rpc = vi.fn(async () => ({\n      rateLimits: { rateLimits: { primary: { usedPercent: 5, windowDurationMins: 300, resetsAt: null } } },\n      account: { account: { type: 'chatgpt' } }\n    }));\n    const result = await probeCodexCapacity({ ...context, readFile, fetch, rpc, now: () => new Date(checkedAt) });\n    expect(rpc).toHaveBeenCalledOnce();\n    expect(result.windows).toHaveLength(1);\n  });\n\n  it('falls back to CLI if PAT requests fail', async () => {\n    const rpc = vi.fn(async () => ({ rateLimits: {}, account: { account: null } }));\n    const result = await probeCodexCapacity({\n      ...context,\n      readFile: async () => JSON.stringify({ personal_access_token: 'pat-secret' }),\n      fetch: vi.fn().mockRejectedValue(new Error('network failure pat-secret')),\n      rpc\n    });\n    expect(rpc).toHaveBeenCalledOnce();\n    expect(result.available).toBe('unknown');\n  });\n\n  it('tries fresh OAuth after a PAT request fails', async () => {\n    const fetch = vi.fn()\n      .mockRejectedValueOnce(new Error('PAT failed'))\n      .mockResolvedValueOnce(new Response(JSON.stringify(apiUsage()), { status: 200 }));\n    const rpc = vi.fn();\n    const result = await probeCodexCapacity({\n      ...context,\n      readFile: async () => JSON.stringify({\n        personal_access_token: 'pat-secret',\n        tokens: { access_token: 'oauth-secret', account_id: 'acct', expires_at: 1_800_000_000 }\n      }),\n      fetch,\n      rpc,\n      now: () => new Date(checkedAt)\n    });\n    expect(fetch).toHaveBeenCalledTimes(2);\n    expect(result.available).toBe('yes');\n    expect(rpc).not.toHaveBeenCalled();\n  });\n\n  it('uses hardened read-only app-server arguments and both account methods', async () => {\n    const rpc = vi.fn(async () => ({\n      rateLimits: { rateLimits: { primary: { usedPercent: 5, windowDurationMins: 300, resetsAt: null } } },\n      account: { account: { type: 'chatgpt' } }\n    }));\n    await probeCodexCapacity({ ...context, readFile: async () => '{}', rpc });\n    const messages = rpc.mock.calls[0][0];\n    expect(messages.map(message => message.method)).toEqual([\n      'initialize', 'initialized', 'account/rateLimits/read', 'account/read'\n    ]);\n    expect(JSON.stringify(messages)).not.toMatch(/prompt|turn\\/start/);\n    expect(CODEX_APP_SERVER_ARGS).toEqual(['-s', 'read-only', '-a', 'untrusted', 'app-server']);\n  });\n\n  it('uses account/read to distinguish logged-out CLI state', async () => {\n    const result = await probeCodexCapacity({\n      ...context,\n      readFile: async () => '{}',\n      rpc: async () => ({ rateLimits: {}, account: { account: null } })\n    });\n    expect(result).toMatchObject({ authenticated: false, available: 'unknown' });\n  });\n\n  it('never exposes tokens or raw auth content through failures', async () => {\n    const secrets = ['pat-secret-value', 'oauth-secret-value', 'refresh-secret-value'];\n    const result = await probeCodexCapacity({\n      ...context,\n      readFile: async () => JSON.stringify({\n        personal_access_token: secrets[0],\n        tokens: { access_token: secrets[1], refresh_token: secrets[2] }\n      }),\n      fetch: vi.fn().mockRejectedValue(new Error(secrets.join(' '))),\n      rpc: async () => { throw new Error(secrets.join(' ')); }\n    });\n    const output = JSON.stringify(result);\n    for (const secret of secrets) expect(output).not.toContain(secret);\n  });\n});\n"],"names":["describe","expect","it","vi","CODEX_APP_SERVER_ARGS","parseUsage","probeCodexCapacity","resolveCodexAuthPath","toRateWindow","checkedAt","context","installed","apiUsage","overrides","rate_limit","primary_window","used_percent","limit_window_seconds","reset_at","secondary_window","credits","balance","additional_rate_limits","limit_name","CODEX_HOME","HOME","toBe","toEqual","id","label","durationMinutes","usedPercent","resetsAt","toMatchObject","snapshot","source","creditsRemaining","windows","objectContaining","toBeNull","fetch","fn","mockResolvedValueOnce","Response","JSON","stringify","chatgpt_account_id","status","rpc","result","readFile","personal_access_token","tokens","access_token","account_id","toHaveBeenCalledTimes","mock","calls","headers","Authorization","not","toHaveBeenCalled","provider","available","authenticated","map","window","mockResolvedValue","expires_at","now","Date","toHaveBeenCalledOnce","each","Object","assign","Error","code","name","rateLimits","primary","windowDurationMins","account","type","toHaveLength","mockRejectedValue","mockRejectedValueOnce","messages","message","method","toMatch","secrets","refresh_token","join","output","secret","toContain"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAS;AAClD,SACEC,qBAAqB,EACrBC,UAAU,EACVC,kBAAkB,EAClBC,oBAAoB,EACpBC,YAAY,QACP,0BAA0B;AAEjC,MAAMC,YAAY;AAClB,MAAMC,UAAU;IAAEC,WAAW;IAAMF;AAAU;AAE7C,SAASG,SAASC,YAAqC,CAAC,CAAC;IACvD,OAAO;QACLC,YAAY;YACVC,gBAAgB;gBAAEC,cAAc;gBAAIC,sBAAsB;gBAAQC,UAAU;YAAc;YAC1FC,kBAAkB;gBAAEH,cAAc;gBAAIC,sBAAsB;gBAASC,UAAU;YAAc;YAC7F,GAAGL,SAAS;QACd;QACAO,SAAS;YAAEC,SAAS;QAAK;QACzBC,wBAAwB;YAAC;gBACvBC,YAAY;gBACZT,YAAY;oBACVC,gBAAgB;wBAAEC,cAAc;wBAAIC,sBAAsB;wBAAOC,UAAU;oBAAc;gBAC3F;YACF;SAAE;IACJ;AACF;AAEAlB,SAAS,yBAAyB;IAChCE,GAAG,+BAA+B;QAChCD,OAAOM,qBAAqB;YAAEiB,YAAY;YAAiBC,MAAM;QAAc,IAAIC,IAAI,CAAC;IAC1F;IAEAxB,GAAG,oCAAoC;QACrCD,OAAOM,qBAAqB;YAAEkB,MAAM;QAAc,IAAIC,IAAI,CAAC;IAC7D;AACF;AAEA1B,SAAS,2BAA2B;IAClCE,GAAG,gEAAgE;QACjED,OAAOO,aAAa;YAAEQ,cAAc;YAAIC,sBAAsB;YAAQC,UAAU;QAAc,GAAG,WAAW,YAAYS,OAAO,CAAC;YAC9HC,IAAI;YAAWC,OAAO;YAAWC,iBAAiB;YAAKC,aAAa;YACpEC,UAAU;QACZ;QACA/B,OAAOO,aAAa,CAAC,GAAG,WAAW,YAAYyB,aAAa,CAAC;YAAEF,aAAa;QAAK;IACnF;IAEA7B,GAAG,mDAAmD;QACpD,MAAMgC,WAAW7B,WAAWO,YAAY;QACxCX,OAAOiC,UAAUD,aAAa,CAAC;YAAEE,QAAQ;YAAOC,kBAAkB;QAAK;QACvEnC,OAAOiC,SAASG,OAAO,EAAEV,OAAO,CAAC;YAC/B1B,OAAOqC,gBAAgB,CAAC;gBAAEV,IAAI;gBAAWE,iBAAiB;YAAI;YAC9D7B,OAAOqC,gBAAgB,CAAC;gBAAEV,IAAI;gBAAUE,iBAAiB;YAAM;YAC/D7B,OAAOqC,gBAAgB,CAAC;gBAAEV,IAAI;gBAAmBE,iBAAiB;YAAG;SACtE;IACH;IAEA5B,GAAG,6DAA6D;QAC9D,MAAMgC,WAAW7B,WAAW;YAAEe,SAAS,CAAC;QAAE,GAAG;QAC7CnB,OAAOiC,SAASG,OAAO,EAAEV,OAAO,CAAC,EAAE;QACnC1B,OAAOiC,SAASE,gBAAgB,EAAEG,QAAQ;IAC5C;AACF;AAEAvC,SAAS,wBAAwB;IAC/BE,GAAG,mEAAmE;QACpE,MAAMsC,QAAQrC,GAAGsC,EAAE,GAChBC,qBAAqB,CAAC,IAAIC,SAASC,KAAKC,SAAS,CAAC;YAAEC,oBAAoB;QAAS,IAAI;YAAEC,QAAQ;QAAI,IACnGL,qBAAqB,CAAC,IAAIC,SAASC,KAAKC,SAAS,CAACjC,aAAa;YAAEmC,QAAQ;QAAI;QAChF,MAAMC,MAAM7C,GAAGsC,EAAE;QACjB,MAAMQ,SAAS,MAAM3C,mBAAmB;YACtC,GAAGI,OAAO;YAAEwC,UAAU,UAAYN,KAAKC,SAAS,CAAC;oBAC/CM,uBAAuB;oBACvBC,QAAQ;wBAAEC,cAAc;wBAAiBC,YAAY;oBAAkB;gBACzE;YAAId;YAAOQ;QACb;QACA/C,OAAOuC,OAAOe,qBAAqB,CAAC;QACpCtD,OAAOuC,MAAMgB,IAAI,CAACC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE/B,IAAI,CAAC;QACpCzB,OAAOuC,MAAMgB,IAAI,CAACC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE/B,IAAI,CAAC;QACpCzB,OAAOuC,MAAMgB,IAAI,CAACC,KAAK,CAAC,EAAE,CAAC,EAAE,CAACC,OAAO,EAAEzB,aAAa,CAAC;YAAE0B,eAAe;YAAqB,sBAAsB;QAAS;QAC1H1D,OAAO+C,KAAKY,GAAG,CAACC,gBAAgB;QAChC5D,OAAOgD,QAAQhB,aAAa,CAAC;YAAE6B,UAAU;YAASC,WAAW;YAAO3B,kBAAkB;YAAM4B,eAAe;QAAK;QAChH/D,OAAOgD,OAAOZ,OAAO,CAAC4B,GAAG,CAACC,CAAAA,SAAUA,OAAOtC,EAAE,GAAGD,OAAO,CAAC;YAAC;YAAW;YAAU;SAAkB;IAClG;IAEAzB,GAAG,sDAAsD;QACvD,MAAMsC,QAAQrC,GAAGsC,EAAE,GAAG0B,iBAAiB,CAAC,IAAIxB,SAASC,KAAKC,SAAS,CAACjC,aAAa;YAAEmC,QAAQ;QAAI;QAC/F,MAAME,SAAS,MAAM3C,mBAAmB;YACtC,GAAGI,OAAO;YACVwC,UAAU,UAAYN,KAAKC,SAAS,CAAC;oBAAEO,QAAQ;wBAAEC,cAAc;wBAAgBC,YAAY;wBAAUc,YAAY;oBAAc;gBAAE;YACjI5B;YACA6B,KAAK,IAAM,IAAIC,KAAK;QACtB;QACArE,OAAOuC,OAAO+B,oBAAoB;QAClCtE,OAAOuC,MAAMgB,IAAI,CAACC,KAAK,CAAC,EAAE,CAAC,EAAE,CAACC,OAAO,EAAEzB,aAAa,CAAC;YAAE0B,eAAe;YAAuB,sBAAsB;QAAS;QAC5H1D,OAAOgD,OAAOc,SAAS,EAAErC,IAAI,CAAC;IAChC;IAEAxB,GAAGsE,IAAI,CAAC;QACN;YAAC;YAAqB;gBAAc,MAAMC,OAAOC,MAAM,CAAC,IAAIC,MAAM,YAAY;oBAAEC,MAAM;gBAAS;YAAI;SAAE;QACrG;YAAC;YAAqB,UAAYhC,KAAKC,SAAS,CAAC;oBAAEO,QAAQ;wBAAEC,cAAc;wBAAgBC,YAAY;wBAAQc,YAAY;oBAAE;gBAAE;SAAG;QAClI;YAAC;YAAa,UAAYxB,KAAKC,SAAS,CAAC;oBAAEO,QAAQ;wBAAEC,cAAc;wBAAgBC,YAAY;wBAAQc,YAAY;oBAAc;gBAAE;SAAG;KACvI,EAAE,gCAAgC,OAAOS,MAAM3B;QAC9C,MAAMV,QAAQrC,GAAGsC,EAAE,GAAG0B,iBAAiB,CAAC,IAAIxB,SAAS,IAAI;YAAEI,QAAQ8B,SAAS,cAAc,MAAM;QAAI;QACpG,MAAM7B,MAAM7C,GAAGsC,EAAE,CAAC,UAAa,CAAA;gBAC7BqC,YAAY;oBAAEA,YAAY;wBAAEC,SAAS;4BAAEhD,aAAa;4BAAGiD,oBAAoB;4BAAKhD,UAAU;wBAAK;oBAAE;gBAAE;gBACnGiD,SAAS;oBAAEA,SAAS;wBAAEC,MAAM;oBAAU;gBAAE;YAC1C,CAAA;QACA,MAAMjC,SAAS,MAAM3C,mBAAmB;YAAE,GAAGI,OAAO;YAAEwC;YAAUV;YAAOQ;YAAKqB,KAAK,IAAM,IAAIC,KAAK7D;QAAW;QAC3GR,OAAO+C,KAAKuB,oBAAoB;QAChCtE,OAAOgD,OAAOZ,OAAO,EAAE8C,YAAY,CAAC;IACtC;IAEAjF,GAAG,0CAA0C;QAC3C,MAAM8C,MAAM7C,GAAGsC,EAAE,CAAC,UAAa,CAAA;gBAAEqC,YAAY,CAAC;gBAAGG,SAAS;oBAAEA,SAAS;gBAAK;YAAE,CAAA;QAC5E,MAAMhC,SAAS,MAAM3C,mBAAmB;YACtC,GAAGI,OAAO;YACVwC,UAAU,UAAYN,KAAKC,SAAS,CAAC;oBAAEM,uBAAuB;gBAAa;YAC3EX,OAAOrC,GAAGsC,EAAE,GAAG2C,iBAAiB,CAAC,IAAIT,MAAM;YAC3C3B;QACF;QACA/C,OAAO+C,KAAKuB,oBAAoB;QAChCtE,OAAOgD,OAAOc,SAAS,EAAErC,IAAI,CAAC;IAChC;IAEAxB,GAAG,+CAA+C;QAChD,MAAMsC,QAAQrC,GAAGsC,EAAE,GAChB4C,qBAAqB,CAAC,IAAIV,MAAM,eAChCjC,qBAAqB,CAAC,IAAIC,SAASC,KAAKC,SAAS,CAACjC,aAAa;YAAEmC,QAAQ;QAAI;QAChF,MAAMC,MAAM7C,GAAGsC,EAAE;QACjB,MAAMQ,SAAS,MAAM3C,mBAAmB;YACtC,GAAGI,OAAO;YACVwC,UAAU,UAAYN,KAAKC,SAAS,CAAC;oBACnCM,uBAAuB;oBACvBC,QAAQ;wBAAEC,cAAc;wBAAgBC,YAAY;wBAAQc,YAAY;oBAAc;gBACxF;YACA5B;YACAQ;YACAqB,KAAK,IAAM,IAAIC,KAAK7D;QACtB;QACAR,OAAOuC,OAAOe,qBAAqB,CAAC;QACpCtD,OAAOgD,OAAOc,SAAS,EAAErC,IAAI,CAAC;QAC9BzB,OAAO+C,KAAKY,GAAG,CAACC,gBAAgB;IAClC;IAEA3D,GAAG,yEAAyE;QAC1E,MAAM8C,MAAM7C,GAAGsC,EAAE,CAAC,UAAa,CAAA;gBAC7BqC,YAAY;oBAAEA,YAAY;wBAAEC,SAAS;4BAAEhD,aAAa;4BAAGiD,oBAAoB;4BAAKhD,UAAU;wBAAK;oBAAE;gBAAE;gBACnGiD,SAAS;oBAAEA,SAAS;wBAAEC,MAAM;oBAAU;gBAAE;YAC1C,CAAA;QACA,MAAM5E,mBAAmB;YAAE,GAAGI,OAAO;YAAEwC,UAAU,UAAY;YAAMF;QAAI;QACvE,MAAMsC,WAAWtC,IAAIQ,IAAI,CAACC,KAAK,CAAC,EAAE,CAAC,EAAE;QACrCxD,OAAOqF,SAASrB,GAAG,CAACsB,CAAAA,UAAWA,QAAQC,MAAM,GAAG7D,OAAO,CAAC;YACtD;YAAc;YAAe;YAA2B;SACzD;QACD1B,OAAO2C,KAAKC,SAAS,CAACyC,WAAW1B,GAAG,CAAC6B,OAAO,CAAC;QAC7CxF,OAAOG,uBAAuBuB,OAAO,CAAC;YAAC;YAAM;YAAa;YAAM;YAAa;SAAa;IAC5F;IAEAzB,GAAG,yDAAyD;QAC1D,MAAM+C,SAAS,MAAM3C,mBAAmB;YACtC,GAAGI,OAAO;YACVwC,UAAU,UAAY;YACtBF,KAAK,UAAa,CAAA;oBAAE8B,YAAY,CAAC;oBAAGG,SAAS;wBAAEA,SAAS;oBAAK;gBAAE,CAAA;QACjE;QACAhF,OAAOgD,QAAQhB,aAAa,CAAC;YAAE+B,eAAe;YAAOD,WAAW;QAAU;IAC5E;IAEA7D,GAAG,6DAA6D;QAC9D,MAAMwF,UAAU;YAAC;YAAoB;YAAsB;SAAuB;QAClF,MAAMzC,SAAS,MAAM3C,mBAAmB;YACtC,GAAGI,OAAO;YACVwC,UAAU,UAAYN,KAAKC,SAAS,CAAC;oBACnCM,uBAAuBuC,OAAO,CAAC,EAAE;oBACjCtC,QAAQ;wBAAEC,cAAcqC,OAAO,CAAC,EAAE;wBAAEC,eAAeD,OAAO,CAAC,EAAE;oBAAC;gBAChE;YACAlD,OAAOrC,GAAGsC,EAAE,GAAG2C,iBAAiB,CAAC,IAAIT,MAAMe,QAAQE,IAAI,CAAC;YACxD5C,KAAK;gBAAc,MAAM,IAAI2B,MAAMe,QAAQE,IAAI,CAAC;YAAO;QACzD;QACA,MAAMC,SAASjD,KAAKC,SAAS,CAACI;QAC9B,KAAK,MAAM6C,UAAUJ,QAASzF,OAAO4F,QAAQjC,GAAG,CAACmC,SAAS,CAACD;IAC7D;AACF"}

package/dist/__tests__/capacity/index.test.js

@@ -0,0 +1,50 @@
+import { describe, expect, it, vi } from 'vitest';
+import { getCodexCapacityReport } from '../../capacity/index.js';
+const checkedAt = '2026-08-09T10:00:00.000Z';
+describe('getCodexCapacityReport', ()=>{
+    it('checks Codex installation before probing', async ()=>{
+        const probe = vi.fn(async (context)=>({
+                provider: 'codex',
+                generatedAt: context.checkedAt,
+                authenticated: true,
+                available: 'yes',
+                windows: [],
+                creditsRemaining: null
+            }));
+        const report = await getCodexCapacityReport({
+            now: ()=>new Date(checkedAt),
+            path: '/usr/bin:/opt/bin',
+            access: async (target)=>{
+                if (target !== '/opt/bin/codex') throw new Error('missing');
+            },
+            probe
+        });
+        expect(probe).toHaveBeenCalledWith({
+            installed: true,
+            checkedAt
+        });
+        expect(report).toMatchObject({
+            provider: 'codex',
+            generatedAt: checkedAt,
+            available: 'yes'
+        });
+    });
+    it('redacts unexpected probe failures into a stable unknown result', async ()=>{
+        const report = await getCodexCapacityReport({
+            now: ()=>new Date(checkedAt),
+            path: '',
+            probe: async ()=>{
+                throw new Error('private provider response');
+            }
+        });
+        expect(report).toMatchObject({
+            provider: 'codex',
+            available: 'unknown',
+            authenticated: null,
+            windows: []
+        });
+        expect(JSON.stringify(report)).not.toContain('private provider response');
+    });
+});
+
+//# sourceMappingURL=index.test.js.map

package/dist/__tests__/capacity/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/__tests__/capacity/index.test.ts"],"sourcesContent":["import { describe, expect, it, vi } from 'vitest';\nimport { getCodexCapacityReport } from '../../capacity/index.js';\n\nconst checkedAt = '2026-08-09T10:00:00.000Z';\n\ndescribe('getCodexCapacityReport', () => {\n  it('checks Codex installation before probing', async () => {\n    const probe = vi.fn(async context => ({\n      provider: 'codex', generatedAt: context.checkedAt,\n      authenticated: true, available: 'yes' as const, windows: [], creditsRemaining: null\n    }));\n\n    const report = await getCodexCapacityReport({\n      now: () => new Date(checkedAt),\n      path: '/usr/bin:/opt/bin',\n      access: async target => {\n        if (target !== '/opt/bin/codex') throw new Error('missing');\n      },\n      probe\n    });\n\n    expect(probe).toHaveBeenCalledWith({ installed: true, checkedAt });\n    expect(report).toMatchObject({ provider: 'codex', generatedAt: checkedAt, available: 'yes' });\n  });\n\n  it('redacts unexpected probe failures into a stable unknown result', async () => {\n    const report = await getCodexCapacityReport({\n      now: () => new Date(checkedAt),\n      path: '',\n      probe: async () => { throw new Error('private provider response'); }\n    });\n\n    expect(report).toMatchObject({\n      provider: 'codex', available: 'unknown', authenticated: null, windows: []\n    });\n    expect(JSON.stringify(report)).not.toContain('private provider response');\n  });\n});\n"],"names":["describe","expect","it","vi","getCodexCapacityReport","checkedAt","probe","fn","context","provider","generatedAt","authenticated","available","windows","creditsRemaining","report","now","Date","path","access","target","Error","toHaveBeenCalledWith","installed","toMatchObject","JSON","stringify","not","toContain"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAS;AAClD,SAASC,sBAAsB,QAAQ,0BAA0B;AAEjE,MAAMC,YAAY;AAElBL,SAAS,0BAA0B;IACjCE,GAAG,4CAA4C;QAC7C,MAAMI,QAAQH,GAAGI,EAAE,CAAC,OAAMC,UAAY,CAAA;gBACpCC,UAAU;gBAASC,aAAaF,QAAQH,SAAS;gBACjDM,eAAe;gBAAMC,WAAW;gBAAgBC,SAAS,EAAE;gBAAEC,kBAAkB;YACjF,CAAA;QAEA,MAAMC,SAAS,MAAMX,uBAAuB;YAC1CY,KAAK,IAAM,IAAIC,KAAKZ;YACpBa,MAAM;YACNC,QAAQ,OAAMC;gBACZ,IAAIA,WAAW,kBAAkB,MAAM,IAAIC,MAAM;YACnD;YACAf;QACF;QAEAL,OAAOK,OAAOgB,oBAAoB,CAAC;YAAEC,WAAW;YAAMlB;QAAU;QAChEJ,OAAOc,QAAQS,aAAa,CAAC;YAAEf,UAAU;YAASC,aAAaL;YAAWO,WAAW;QAAM;IAC7F;IAEAV,GAAG,kEAAkE;QACnE,MAAMa,SAAS,MAAMX,uBAAuB;YAC1CY,KAAK,IAAM,IAAIC,KAAKZ;YACpBa,MAAM;YACNZ,OAAO;gBAAc,MAAM,IAAIe,MAAM;YAA8B;QACrE;QAEApB,OAAOc,QAAQS,aAAa,CAAC;YAC3Bf,UAAU;YAASG,WAAW;YAAWD,eAAe;YAAME,SAAS,EAAE;QAC3E;QACAZ,OAAOwB,KAAKC,SAAS,CAACX,SAASY,GAAG,CAACC,SAAS,CAAC;IAC/C;AACF"}

package/dist/__tests__/database/DurableAgentsDatabase.test.js

@@ -18,11 +18,11 @@ function dbPath() {
     return path.join(root, 'state', 'agents.db');
 }
 describe('durable agents schema', ()=>{
-    it('migrates to version 3 with durable constraints and indexes', ()=>{
+    it('migrates to version 4 with durable constraints and indexes', ()=>{
         const connection = new DatabaseConnection({
             dbPath: dbPath()
         });
-        expect(getSchemaVersion(connection)).toBe(3);
+        expect(getSchemaVersion(connection)).toBe(4);
         const table = connection.queryOne("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'durable_agents'");
         expect(table?.sql).toContain("DEFAULT 'durable'");
         expect(table?.sql).toContain("state IN ('ready','running','degraded')");
@@ -32,6 +32,34 @@ describe('durable agents schema', ()=>{
         ]));
         connection.close();
     });
+    it('upgrades a version 3 database to nullable, unique provider sessions', ()=>{
+        const file = dbPath();
+        fs.mkdirSync(path.dirname(file), {
+            recursive: true
+        });
+        const raw = new Database(file);
+        raw.exec(`
+            CREATE TABLE durable_agents (
+                id TEXT PRIMARY KEY,
+                provider_session_id TEXT NOT NULL UNIQUE
+            );
+            INSERT INTO durable_agents (id, provider_session_id) VALUES ('existing', 'existing-session');
+            PRAGMA user_version = 3;
+        `);
+        raw.close();
+        const connection = new DatabaseConnection({
+            dbPath: file
+        });
+        expect(getSchemaVersion(connection)).toBe(4);
+        expect(()=>connection.execute('INSERT INTO durable_agents (id, provider_session_id) VALUES (?, NULL)', [
+                'codex'
+            ])).not.toThrow();
+        expect(()=>connection.execute('INSERT INTO durable_agents (id, provider_session_id) VALUES (?, ?)', [
+                'duplicate',
+                'existing-session'
+            ])).toThrow(/UNIQUE/i);
+        connection.close();
+    });
     it('enforces case-insensitive names and active-run consistency but permits new providers', ()=>{
         const connection = new DatabaseConnection({
             dbPath: dbPath()
@@ -68,7 +96,7 @@ describe('readonly DatabaseConnection', ()=>{
             dbPath: file,
             readonly: true
         });
-        expect(readonly.queryOne('PRAGMA user_version')?.user_version).toBe(3);
+        expect(readonly.queryOne('PRAGMA user_version')?.user_version).toBe(4);
         readonly.close();
         expect(fs.statSync(file).mtimeMs).toBe(before);
     });

package/dist/__tests__/database/DurableAgentsDatabase.test.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/__tests__/database/DurableAgentsDatabase.test.ts"],"sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport Database from 'better-sqlite3';\nimport { afterEach, describe, expect, it } from 'vitest';\nimport { DatabaseConnection } from '../../database/connection.js';\nimport { getSchemaVersion } from '../../database/schema.js';\n\nconst roots: string[] = [];\n\nafterEach(() => {\n    for (const root of roots.splice(0)) fs.rmSync(root, { recursive: true, force: true });\n});\n\nfunction dbPath(): string {\n    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'durable-agent-db-'));\n    roots.push(root);\n    return path.join(root, 'state', 'agents.db');\n}\n\ndescribe('durable agents schema', () => {\n    it('migrates to version 3 with durable constraints and indexes', () => {\n        const connection = new DatabaseConnection({ dbPath: dbPath() });\n        expect(getSchemaVersion(connection)).toBe(3);\n        const table = connection.queryOne<{ sql: string }>(\n            \"SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'durable_agents'\",\n        );\n        expect(table?.sql).toContain(\"DEFAULT 'durable'\");\n        expect(table?.sql).toContain(\"state IN ('ready','running','degraded')\");\n        expect(connection.query<{ name: string }>(\n            \"SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = 'durable_agents'\",\n        ).map(({ name }) => name)).toEqual(expect.arrayContaining([\n            'idx_durable_agents_state', 'idx_durable_agents_list',\n        ]));\n        connection.close();\n    });\n\n    it('enforces case-insensitive names and active-run consistency but permits new providers', () => {\n        const connection = new DatabaseConnection({ dbPath: dbPath() });\n        const insert = (name: string, provider: string, state = 'ready') => connection.execute(`\n            INSERT INTO durable_agents (\n                id, name, provider, mode, cwd, provider_session_id, state, session_health,\n                created_at, updated_at\n            ) VALUES (?, ?, ?, 'durable', '/tmp', ?, ?, 'uninitialized', ?, ?)\n        `, [crypto.randomUUID(), name, provider, crypto.randomUUID(), state, new Date().toISOString(), new Date().toISOString()]);\n        expect(() => insert('Alpha', 'future-provider')).not.toThrow();\n        expect(() => insert('alpha', 'claude')).toThrow(/UNIQUE/i);\n        expect(() => insert('Broken', 'claude', 'running')).toThrow(/CHECK/i);\n        connection.close();\n    });\n});\n\ndescribe('readonly DatabaseConnection', () => {\n    it('opens an already migrated database without changing it', () => {\n        const file = dbPath();\n        const writable = new DatabaseConnection({ dbPath: file });\n        writable.close();\n        const before = fs.statSync(file).mtimeMs;\n        const readonly = new DatabaseConnection({ dbPath: file, readonly: true });\n        expect(readonly.queryOne<{ user_version: number }>('PRAGMA user_version')?.user_version).toBe(3);\n        readonly.close();\n        expect(fs.statSync(file).mtimeMs).toBe(before);\n    });\n\n    it('does not create a missing database or migrate an old one', () => {\n        const missing = dbPath();\n        expect(() => new DatabaseConnection({ dbPath: missing, readonly: true })).toThrow(/readonly.*exist/i);\n        expect(fs.existsSync(missing)).toBe(false);\n\n        fs.mkdirSync(path.dirname(missing), { recursive: true });\n        const raw = new Database(missing);\n        raw.pragma('user_version = 2');\n        raw.close();\n        expect(() => new DatabaseConnection({ dbPath: missing, readonly: true })).toThrow(/schema version 3/i);\n        expect(new Database(missing, { readonly: true }).pragma('user_version', { simple: true })).toBe(2);\n    });\n});\n"],"names":["fs","os","path","Database","afterEach","describe","expect","it","DatabaseConnection","getSchemaVersion","roots","root","splice","rmSync","recursive","force","dbPath","mkdtempSync","join","tmpdir","push","connection","toBe","table","queryOne","sql","toContain","query","map","name","toEqual","arrayContaining","close","insert","provider","state","execute","crypto","randomUUID","Date","toISOString","not","toThrow","file","writable","before","statSync","mtimeMs","readonly","user_version","missing","existsSync","mkdirSync","dirname","raw","pragma","simple"],"mappings":"AAAA,OAAOA,QAAQ,KAAK;AACpB,OAAOC,QAAQ,KAAK;AACpB,OAAOC,UAAU,OAAO;AACxB,OAAOC,cAAc,iBAAiB;AACtC,SAASC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAS;AACzD,SAASC,kBAAkB,QAAQ,+BAA+B;AAClE,SAASC,gBAAgB,QAAQ,2BAA2B;AAE5D,MAAMC,QAAkB,EAAE;AAE1BN,UAAU;IACN,KAAK,MAAMO,QAAQD,MAAME,MAAM,CAAC,GAAIZ,GAAGa,MAAM,CAACF,MAAM;QAAEG,WAAW;QAAMC,OAAO;IAAK;AACvF;AAEA,SAASC;IACL,MAAML,OAAOX,GAAGiB,WAAW,CAACf,KAAKgB,IAAI,CAACjB,GAAGkB,MAAM,IAAI;IACnDT,MAAMU,IAAI,CAACT;IACX,OAAOT,KAAKgB,IAAI,CAACP,MAAM,SAAS;AACpC;AAEAN,SAAS,yBAAyB;IAC9BE,GAAG,8DAA8D;QAC7D,MAAMc,aAAa,IAAIb,mBAAmB;YAAEQ,QAAQA;QAAS;QAC7DV,OAAOG,iBAAiBY,aAAaC,IAAI,CAAC;QAC1C,MAAMC,QAAQF,WAAWG,QAAQ,CAC7B;QAEJlB,OAAOiB,OAAOE,KAAKC,SAAS,CAAC;QAC7BpB,OAAOiB,OAAOE,KAAKC,SAAS,CAAC;QAC7BpB,OAAOe,WAAWM,KAAK,CACnB,uFACFC,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKA,OAAOC,OAAO,CAACxB,OAAOyB,eAAe,CAAC;YACtD;YAA4B;SAC/B;QACDV,WAAWW,KAAK;IACpB;IAEAzB,GAAG,wFAAwF;QACvF,MAAMc,aAAa,IAAIb,mBAAmB;YAAEQ,QAAQA;QAAS;QAC7D,MAAMiB,SAAS,CAACJ,MAAcK,UAAkBC,QAAQ,OAAO,GAAKd,WAAWe,OAAO,CAAC,CAAC;;;;;QAKxF,CAAC,EAAE;gBAACC,OAAOC,UAAU;gBAAIT;gBAAMK;gBAAUG,OAAOC,UAAU;gBAAIH;gBAAO,IAAII,OAAOC,WAAW;gBAAI,IAAID,OAAOC,WAAW;aAAG;QACxHlC,OAAO,IAAM2B,OAAO,SAAS,oBAAoBQ,GAAG,CAACC,OAAO;QAC5DpC,OAAO,IAAM2B,OAAO,SAAS,WAAWS,OAAO,CAAC;QAChDpC,OAAO,IAAM2B,OAAO,UAAU,UAAU,YAAYS,OAAO,CAAC;QAC5DrB,WAAWW,KAAK;IACpB;AACJ;AAEA3B,SAAS,+BAA+B;IACpCE,GAAG,0DAA0D;QACzD,MAAMoC,OAAO3B;QACb,MAAM4B,WAAW,IAAIpC,mBAAmB;YAAEQ,QAAQ2B;QAAK;QACvDC,SAASZ,KAAK;QACd,MAAMa,SAAS7C,GAAG8C,QAAQ,CAACH,MAAMI,OAAO;QACxC,MAAMC,WAAW,IAAIxC,mBAAmB;YAAEQ,QAAQ2B;YAAMK,UAAU;QAAK;QACvE1C,OAAO0C,SAASxB,QAAQ,CAA2B,wBAAwByB,cAAc3B,IAAI,CAAC;QAC9F0B,SAAShB,KAAK;QACd1B,OAAON,GAAG8C,QAAQ,CAACH,MAAMI,OAAO,EAAEzB,IAAI,CAACuB;IAC3C;IAEAtC,GAAG,4DAA4D;QAC3D,MAAM2C,UAAUlC;QAChBV,OAAO,IAAM,IAAIE,mBAAmB;gBAAEQ,QAAQkC;gBAASF,UAAU;YAAK,IAAIN,OAAO,CAAC;QAClFpC,OAAON,GAAGmD,UAAU,CAACD,UAAU5B,IAAI,CAAC;QAEpCtB,GAAGoD,SAAS,CAAClD,KAAKmD,OAAO,CAACH,UAAU;YAAEpC,WAAW;QAAK;QACtD,MAAMwC,MAAM,IAAInD,SAAS+C;QACzBI,IAAIC,MAAM,CAAC;QACXD,IAAItB,KAAK;QACT1B,OAAO,IAAM,IAAIE,mBAAmB;gBAAEQ,QAAQkC;gBAASF,UAAU;YAAK,IAAIN,OAAO,CAAC;QAClFpC,OAAO,IAAIH,SAAS+C,SAAS;YAAEF,UAAU;QAAK,GAAGO,MAAM,CAAC,gBAAgB;YAAEC,QAAQ;QAAK,IAAIlC,IAAI,CAAC;IACpG;AACJ"}
+{"version":3,"sources":["../../../src/__tests__/database/DurableAgentsDatabase.test.ts"],"sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport Database from 'better-sqlite3';\nimport { afterEach, describe, expect, it } from 'vitest';\nimport { DatabaseConnection } from '../../database/connection.js';\nimport { getSchemaVersion } from '../../database/schema.js';\n\nconst roots: string[] = [];\n\nafterEach(() => {\n    for (const root of roots.splice(0)) fs.rmSync(root, { recursive: true, force: true });\n});\n\nfunction dbPath(): string {\n    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'durable-agent-db-'));\n    roots.push(root);\n    return path.join(root, 'state', 'agents.db');\n}\n\ndescribe('durable agents schema', () => {\n    it('migrates to version 4 with durable constraints and indexes', () => {\n        const connection = new DatabaseConnection({ dbPath: dbPath() });\n        expect(getSchemaVersion(connection)).toBe(4);\n        const table = connection.queryOne<{ sql: string }>(\n            \"SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'durable_agents'\",\n        );\n        expect(table?.sql).toContain(\"DEFAULT 'durable'\");\n        expect(table?.sql).toContain(\"state IN ('ready','running','degraded')\");\n        expect(connection.query<{ name: string }>(\n            \"SELECT name FROM sqlite_master WHERE type = 'index' AND tbl_name = 'durable_agents'\",\n        ).map(({ name }) => name)).toEqual(expect.arrayContaining([\n            'idx_durable_agents_state', 'idx_durable_agents_list',\n        ]));\n        connection.close();\n    });\n\n    it('upgrades a version 3 database to nullable, unique provider sessions', () => {\n        const file = dbPath();\n        fs.mkdirSync(path.dirname(file), { recursive: true });\n        const raw = new Database(file);\n        raw.exec(`\n            CREATE TABLE durable_agents (\n                id TEXT PRIMARY KEY,\n                provider_session_id TEXT NOT NULL UNIQUE\n            );\n            INSERT INTO durable_agents (id, provider_session_id) VALUES ('existing', 'existing-session');\n            PRAGMA user_version = 3;\n        `);\n        raw.close();\n\n        const connection = new DatabaseConnection({ dbPath: file });\n        expect(getSchemaVersion(connection)).toBe(4);\n        expect(() => connection.execute(\n            'INSERT INTO durable_agents (id, provider_session_id) VALUES (?, NULL)', ['codex'],\n        )).not.toThrow();\n        expect(() => connection.execute(\n            'INSERT INTO durable_agents (id, provider_session_id) VALUES (?, ?)', ['duplicate', 'existing-session'],\n        )).toThrow(/UNIQUE/i);\n        connection.close();\n    });\n\n    it('enforces case-insensitive names and active-run consistency but permits new providers', () => {\n        const connection = new DatabaseConnection({ dbPath: dbPath() });\n        const insert = (name: string, provider: string, state = 'ready') => connection.execute(`\n            INSERT INTO durable_agents (\n                id, name, provider, mode, cwd, provider_session_id, state, session_health,\n                created_at, updated_at\n            ) VALUES (?, ?, ?, 'durable', '/tmp', ?, ?, 'uninitialized', ?, ?)\n        `, [crypto.randomUUID(), name, provider, crypto.randomUUID(), state, new Date().toISOString(), new Date().toISOString()]);\n        expect(() => insert('Alpha', 'future-provider')).not.toThrow();\n        expect(() => insert('alpha', 'claude')).toThrow(/UNIQUE/i);\n        expect(() => insert('Broken', 'claude', 'running')).toThrow(/CHECK/i);\n        connection.close();\n    });\n});\n\ndescribe('readonly DatabaseConnection', () => {\n    it('opens an already migrated database without changing it', () => {\n        const file = dbPath();\n        const writable = new DatabaseConnection({ dbPath: file });\n        writable.close();\n        const before = fs.statSync(file).mtimeMs;\n        const readonly = new DatabaseConnection({ dbPath: file, readonly: true });\n        expect(readonly.queryOne<{ user_version: number }>('PRAGMA user_version')?.user_version).toBe(4);\n        readonly.close();\n        expect(fs.statSync(file).mtimeMs).toBe(before);\n    });\n\n    it('does not create a missing database or migrate an old one', () => {\n        const missing = dbPath();\n        expect(() => new DatabaseConnection({ dbPath: missing, readonly: true })).toThrow(/readonly.*exist/i);\n        expect(fs.existsSync(missing)).toBe(false);\n\n        fs.mkdirSync(path.dirname(missing), { recursive: true });\n        const raw = new Database(missing);\n        raw.pragma('user_version = 2');\n        raw.close();\n        expect(() => new DatabaseConnection({ dbPath: missing, readonly: true })).toThrow(/schema version 3/i);\n        expect(new Database(missing, { readonly: true }).pragma('user_version', { simple: true })).toBe(2);\n    });\n});\n"],"names":["fs","os","path","Database","afterEach","describe","expect","it","DatabaseConnection","getSchemaVersion","roots","root","splice","rmSync","recursive","force","dbPath","mkdtempSync","join","tmpdir","push","connection","toBe","table","queryOne","sql","toContain","query","map","name","toEqual","arrayContaining","close","file","mkdirSync","dirname","raw","exec","execute","not","toThrow","insert","provider","state","crypto","randomUUID","Date","toISOString","writable","before","statSync","mtimeMs","readonly","user_version","missing","existsSync","pragma","simple"],"mappings":"AAAA,OAAOA,QAAQ,KAAK;AACpB,OAAOC,QAAQ,KAAK;AACpB,OAAOC,UAAU,OAAO;AACxB,OAAOC,cAAc,iBAAiB;AACtC,SAASC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAS;AACzD,SAASC,kBAAkB,QAAQ,+BAA+B;AAClE,SAASC,gBAAgB,QAAQ,2BAA2B;AAE5D,MAAMC,QAAkB,EAAE;AAE1BN,UAAU;IACN,KAAK,MAAMO,QAAQD,MAAME,MAAM,CAAC,GAAIZ,GAAGa,MAAM,CAACF,MAAM;QAAEG,WAAW;QAAMC,OAAO;IAAK;AACvF;AAEA,SAASC;IACL,MAAML,OAAOX,GAAGiB,WAAW,CAACf,KAAKgB,IAAI,CAACjB,GAAGkB,MAAM,IAAI;IACnDT,MAAMU,IAAI,CAACT;IACX,OAAOT,KAAKgB,IAAI,CAACP,MAAM,SAAS;AACpC;AAEAN,SAAS,yBAAyB;IAC9BE,GAAG,8DAA8D;QAC7D,MAAMc,aAAa,IAAIb,mBAAmB;YAAEQ,QAAQA;QAAS;QAC7DV,OAAOG,iBAAiBY,aAAaC,IAAI,CAAC;QAC1C,MAAMC,QAAQF,WAAWG,QAAQ,CAC7B;QAEJlB,OAAOiB,OAAOE,KAAKC,SAAS,CAAC;QAC7BpB,OAAOiB,OAAOE,KAAKC,SAAS,CAAC;QAC7BpB,OAAOe,WAAWM,KAAK,CACnB,uFACFC,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKA,OAAOC,OAAO,CAACxB,OAAOyB,eAAe,CAAC;YACtD;YAA4B;SAC/B;QACDV,WAAWW,KAAK;IACpB;IAEAzB,GAAG,uEAAuE;QACtE,MAAM0B,OAAOjB;QACbhB,GAAGkC,SAAS,CAAChC,KAAKiC,OAAO,CAACF,OAAO;YAAEnB,WAAW;QAAK;QACnD,MAAMsB,MAAM,IAAIjC,SAAS8B;QACzBG,IAAIC,IAAI,CAAC,CAAC;;;;;;;QAOV,CAAC;QACDD,IAAIJ,KAAK;QAET,MAAMX,aAAa,IAAIb,mBAAmB;YAAEQ,QAAQiB;QAAK;QACzD3B,OAAOG,iBAAiBY,aAAaC,IAAI,CAAC;QAC1ChB,OAAO,IAAMe,WAAWiB,OAAO,CAC3B,yEAAyE;gBAAC;aAAQ,GACnFC,GAAG,CAACC,OAAO;QACdlC,OAAO,IAAMe,WAAWiB,OAAO,CAC3B,sEAAsE;gBAAC;gBAAa;aAAmB,GACxGE,OAAO,CAAC;QACXnB,WAAWW,KAAK;IACpB;IAEAzB,GAAG,wFAAwF;QACvF,MAAMc,aAAa,IAAIb,mBAAmB;YAAEQ,QAAQA;QAAS;QAC7D,MAAMyB,SAAS,CAACZ,MAAca,UAAkBC,QAAQ,OAAO,GAAKtB,WAAWiB,OAAO,CAAC,CAAC;;;;;QAKxF,CAAC,EAAE;gBAACM,OAAOC,UAAU;gBAAIhB;gBAAMa;gBAAUE,OAAOC,UAAU;gBAAIF;gBAAO,IAAIG,OAAOC,WAAW;gBAAI,IAAID,OAAOC,WAAW;aAAG;QACxHzC,OAAO,IAAMmC,OAAO,SAAS,oBAAoBF,GAAG,CAACC,OAAO;QAC5DlC,OAAO,IAAMmC,OAAO,SAAS,WAAWD,OAAO,CAAC;QAChDlC,OAAO,IAAMmC,OAAO,UAAU,UAAU,YAAYD,OAAO,CAAC;QAC5DnB,WAAWW,KAAK;IACpB;AACJ;AAEA3B,SAAS,+BAA+B;IACpCE,GAAG,0DAA0D;QACzD,MAAM0B,OAAOjB;QACb,MAAMgC,WAAW,IAAIxC,mBAAmB;YAAEQ,QAAQiB;QAAK;QACvDe,SAAShB,KAAK;QACd,MAAMiB,SAASjD,GAAGkD,QAAQ,CAACjB,MAAMkB,OAAO;QACxC,MAAMC,WAAW,IAAI5C,mBAAmB;YAAEQ,QAAQiB;YAAMmB,UAAU;QAAK;QACvE9C,OAAO8C,SAAS5B,QAAQ,CAA2B,wBAAwB6B,cAAc/B,IAAI,CAAC;QAC9F8B,SAASpB,KAAK;QACd1B,OAAON,GAAGkD,QAAQ,CAACjB,MAAMkB,OAAO,EAAE7B,IAAI,CAAC2B;IAC3C;IAEA1C,GAAG,4DAA4D;QAC3D,MAAM+C,UAAUtC;QAChBV,OAAO,IAAM,IAAIE,mBAAmB;gBAAEQ,QAAQsC;gBAASF,UAAU;YAAK,IAAIZ,OAAO,CAAC;QAClFlC,OAAON,GAAGuD,UAAU,CAACD,UAAUhC,IAAI,CAAC;QAEpCtB,GAAGkC,SAAS,CAAChC,KAAKiC,OAAO,CAACmB,UAAU;YAAExC,WAAW;QAAK;QACtD,MAAMsB,MAAM,IAAIjC,SAASmD;QACzBlB,IAAIoB,MAAM,CAAC;QACXpB,IAAIJ,KAAK;QACT1B,OAAO,IAAM,IAAIE,mBAAmB;gBAAEQ,QAAQsC;gBAASF,UAAU;YAAK,IAAIZ,OAAO,CAAC;QAClFlC,OAAO,IAAIH,SAASmD,SAAS;YAAEF,UAAU;QAAK,GAAGI,MAAM,CAAC,gBAAgB;YAAEC,QAAQ;QAAK,IAAInC,IAAI,CAAC;IACpG;AACJ"}