@ai-devkit/agent-manager 0.37.0 → 0.38.0

package/dist/capacity/types.js

@@ -1,3 +1,3 @@
-export { };
+/** Provider quota data before a harness/source identity is attached. */ export { };
 
 //# sourceMappingURL=types.js.map

package/dist/capacity/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/capacity/types.ts"],"sourcesContent":["export type Availability = \"yes\" | \"no\" | \"unknown\";\nexport type CapacityLimitType = \"TOKENS_LIMIT\" | \"CREDIT_LIMIT\" | \"TIME_LIMIT\";\n\nexport interface CapacityWindow {\n  id: string;\n  label: string;\n  durationMinutes: number | null;\n  usedPercent: number | null;\n  resetsAt: string | null;\n  limitType?: CapacityLimitType;\n  total?: number | null;\n  current?: number | null;\n  remaining?: number | null;\n}\n\nexport interface CapacityReport {\n  /** Harness whose quota pool is measured, e.g. \"pi\" or \"codex\". */\n  harness: string;\n  /** Model provider backing the harness, e.g. \"zai\" or \"openai\". */\n  provider: string;\n  generatedAt: string;\n  authenticated: boolean | null;\n  available: Availability;\n  windows: CapacityWindow[];\n  creditsRemaining: number | null;\n}\n"],"names":[],"mappings":"AAeA,WAUC"}
+{"version":3,"sources":["../../src/capacity/types.ts"],"sourcesContent":["export type Availability = \"yes\" | \"no\" | \"unknown\";\nexport type CapacityLimitType = \"TOKENS_LIMIT\" | \"CREDIT_LIMIT\" | \"TIME_LIMIT\";\n\nexport interface CapacityWindow {\n  id: string;\n  label: string;\n  durationMinutes: number | null;\n  usedPercent: number | null;\n  resetsAt: string | null;\n  limitType?: CapacityLimitType;\n  total?: number | null;\n  current?: number | null;\n  remaining?: number | null;\n}\n\nexport interface CapacityReport {\n  /** Harness whose quota pool is measured, e.g. \"pi\" or \"codex\". */\n  harness: string;\n  /** Model provider backing the harness, e.g. \"zai\" or \"openai\". */\n  provider: string;\n  generatedAt: string;\n  authenticated: boolean | null;\n  available: Availability;\n  windows: CapacityWindow[];\n  creditsRemaining: number | null;\n}\n\n/** Provider quota data before a harness/source identity is attached. */\nexport type ProviderCapacitySnapshot = Omit<CapacityReport, \"harness\" | \"provider\" | \"generatedAt\">;\n"],"names":[],"mappings":"AA2BA,sEAAsE,GACtE,WAAoG"}

package/dist/harnesses/claude/credentials.d.ts

@@ -0,0 +1,10 @@
+export type ClaudeCredentialOptions = {
+    env?: NodeJS.ProcessEnv;
+    readFile?: (path: string, encoding: BufferEncoding) => Promise<string>;
+    now?: () => Date;
+    cwd?: string;
+    platform?: NodeJS.Platform;
+    keychainRead?: (service: string) => Promise<string | null>;
+};
+export declare function resolveClaudeAnthropicToken(options?: ClaudeCredentialOptions): Promise<string>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/harnesses/claude/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/harnesses/claude/credentials.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC5D,CAAC;AAwFF,wBAAsB,2BAA2B,CAC/C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,MAAM,CAAC,CAejB"}

package/dist/harnesses/claude/credentials.js

@@ -0,0 +1,112 @@
+import { execFile } from "node:child_process";
+import { readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const CLAUDE_KEYCHAIN_SERVICE = "Claude Code-credentials";
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function nonEmptyText(value) {
+    return typeof value === "string" && value.trim() ? value.trim() : null;
+}
+function credentialsPath(options) {
+    const env = options.env ?? process.env;
+    const configured = nonEmptyText(env.CLAUDE_CONFIG_DIR);
+    if (configured) {
+        const profileRoot = isAbsolute(configured) ? configured : resolve(options.cwd ?? process.cwd(), configured);
+        return join(profileRoot, ".credentials.json");
+    }
+    return join(env.HOME || homedir(), ".claude", ".credentials.json");
+}
+function credentialFromRoot(root, now) {
+    const oauth = record(root?.claudeAiOauth);
+    const token = nonEmptyText(oauth?.accessToken);
+    if (!token) return {
+        token: null,
+        expired: false
+    };
+    const expired = typeof oauth?.expiresAt === "number" && Number.isFinite(oauth.expiresAt) && oauth.expiresAt <= now.getTime();
+    return {
+        token: expired ? null : token,
+        expired
+    };
+}
+function credentialFromPayload(payload, now) {
+    if (!payload) return {
+        token: null,
+        expired: false
+    };
+    try {
+        return credentialFromRoot(record(JSON.parse(payload)), now);
+    } catch  {
+        return {
+            token: null,
+            expired: false
+        };
+    }
+}
+async function readProfileCredential(options, now) {
+    try {
+        const payload = await (options.readFile ?? readFile)(credentialsPath(options), "utf8");
+        return credentialFromPayload(payload, now);
+    } catch  {
+        return {
+            token: null,
+            expired: false
+        };
+    }
+}
+async function readClaudeKeychain(service) {
+    try {
+        const { stdout } = await execFileAsync("/usr/bin/security", [
+            "find-generic-password",
+            "-s",
+            service,
+            "-w"
+        ], {
+            encoding: "utf8",
+            timeout: 1500,
+            maxBuffer: 1024 * 1024
+        });
+        return nonEmptyText(stdout);
+    } catch  {
+        return null;
+    }
+}
+async function readKeychainCredential(options, now) {
+    const env = options.env ?? process.env;
+    const usesDefaultProfile = !nonEmptyText(env.CLAUDE_CONFIG_DIR);
+    if (!usesDefaultProfile || (options.platform ?? process.platform) !== "darwin") {
+        return {
+            token: null,
+            expired: false
+        };
+    }
+    try {
+        const payload = await (options.keychainRead ?? readClaudeKeychain)(CLAUDE_KEYCHAIN_SERVICE);
+        return credentialFromPayload(payload, now);
+    } catch  {
+        return {
+            token: null,
+            expired: false
+        };
+    }
+}
+export async function resolveClaudeAnthropicToken(options = {}) {
+    const env = options.env ?? process.env;
+    const environmentToken = nonEmptyText(env.CLAUDE_CODE_OAUTH_TOKEN);
+    if (environmentToken) return environmentToken;
+    const now = options.now?.() ?? new Date();
+    const profileCredential = await readProfileCredential(options, now);
+    if (profileCredential.token) return profileCredential.token;
+    const keychainCredential = await readKeychainCredential(options, now);
+    if (keychainCredential.token) return keychainCredential.token;
+    if (profileCredential.expired || keychainCredential.expired) {
+        throw new Error("Claude OAuth credentials expired");
+    }
+    throw new Error("Claude OAuth credentials not found or malformed");
+}
+
+//# sourceMappingURL=credentials.js.map

package/dist/harnesses/claude/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/harnesses/claude/credentials.ts"],"sourcesContent":["import { execFile } from \"node:child_process\";\nimport { readFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { isAbsolute, join, resolve } from \"node:path\";\nimport { promisify } from \"node:util\";\n\nconst execFileAsync = promisify(execFile);\nconst CLAUDE_KEYCHAIN_SERVICE = \"Claude Code-credentials\";\n\nexport type ClaudeCredentialOptions = {\n  env?: NodeJS.ProcessEnv;\n  readFile?: (path: string, encoding: BufferEncoding) => Promise<string>;\n  now?: () => Date;\n  cwd?: string;\n  platform?: NodeJS.Platform;\n  keychainRead?: (service: string) => Promise<string | null>;\n};\n\ntype Credential = { token: string | null; expired: boolean };\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\nfunction nonEmptyText(value: unknown): string | null {\n  return typeof value === \"string\" && value.trim() ? value.trim() : null;\n}\n\nfunction credentialsPath(options: ClaudeCredentialOptions): string {\n  const env = options.env ?? process.env;\n  const configured = nonEmptyText(env.CLAUDE_CONFIG_DIR);\n  if (configured) {\n    const profileRoot = isAbsolute(configured)\n      ? configured\n      : resolve(options.cwd ?? process.cwd(), configured);\n    return join(profileRoot, \".credentials.json\");\n  }\n  return join(env.HOME || homedir(), \".claude\", \".credentials.json\");\n}\n\nfunction credentialFromRoot(root: Record<string, unknown> | null, now: Date): Credential {\n  const oauth = record(root?.claudeAiOauth);\n  const token = nonEmptyText(oauth?.accessToken);\n  if (!token) return { token: null, expired: false };\n  const expired =\n    typeof oauth?.expiresAt === \"number\" &&\n    Number.isFinite(oauth.expiresAt) &&\n    oauth.expiresAt <= now.getTime();\n  return { token: expired ? null : token, expired };\n}\n\nfunction credentialFromPayload(payload: string | null, now: Date): Credential {\n  if (!payload) return { token: null, expired: false };\n  try {\n    return credentialFromRoot(record(JSON.parse(payload)), now);\n  } catch {\n    return { token: null, expired: false };\n  }\n}\n\nasync function readProfileCredential(\n  options: ClaudeCredentialOptions,\n  now: Date,\n): Promise<Credential> {\n  try {\n    const payload = await (options.readFile ?? readFile)(credentialsPath(options), \"utf8\");\n    return credentialFromPayload(payload, now);\n  } catch {\n    return { token: null, expired: false };\n  }\n}\n\nasync function readClaudeKeychain(service: string): Promise<string | null> {\n  try {\n    const { stdout } = await execFileAsync(\n      \"/usr/bin/security\",\n      [\"find-generic-password\", \"-s\", service, \"-w\"],\n      { encoding: \"utf8\", timeout: 1500, maxBuffer: 1024 * 1024 },\n    );\n    return nonEmptyText(stdout);\n  } catch {\n    return null;\n  }\n}\n\nasync function readKeychainCredential(\n  options: ClaudeCredentialOptions,\n  now: Date,\n): Promise<Credential> {\n  const env = options.env ?? process.env;\n  const usesDefaultProfile = !nonEmptyText(env.CLAUDE_CONFIG_DIR);\n  if (!usesDefaultProfile || (options.platform ?? process.platform) !== \"darwin\") {\n    return { token: null, expired: false };\n  }\n  try {\n    const payload = await (options.keychainRead ?? readClaudeKeychain)(CLAUDE_KEYCHAIN_SERVICE);\n    return credentialFromPayload(payload, now);\n  } catch {\n    return { token: null, expired: false };\n  }\n}\n\nexport async function resolveClaudeAnthropicToken(\n  options: ClaudeCredentialOptions = {},\n): Promise<string> {\n  const env = options.env ?? process.env;\n  const environmentToken = nonEmptyText(env.CLAUDE_CODE_OAUTH_TOKEN);\n  if (environmentToken) return environmentToken;\n\n  const now = options.now?.() ?? new Date();\n  const profileCredential = await readProfileCredential(options, now);\n  if (profileCredential.token) return profileCredential.token;\n\n  const keychainCredential = await readKeychainCredential(options, now);\n  if (keychainCredential.token) return keychainCredential.token;\n  if (profileCredential.expired || keychainCredential.expired) {\n    throw new Error(\"Claude OAuth credentials expired\");\n  }\n  throw new Error(\"Claude OAuth credentials not found or malformed\");\n}\n"],"names":["execFile","readFile","homedir","isAbsolute","join","resolve","promisify","execFileAsync","CLAUDE_KEYCHAIN_SERVICE","record","value","Array","isArray","nonEmptyText","trim","credentialsPath","options","env","process","configured","CLAUDE_CONFIG_DIR","profileRoot","cwd","HOME","credentialFromRoot","root","now","oauth","claudeAiOauth","token","accessToken","expired","expiresAt","Number","isFinite","getTime","credentialFromPayload","payload","JSON","parse","readProfileCredential","readClaudeKeychain","service","stdout","encoding","timeout","maxBuffer","readKeychainCredential","usesDefaultProfile","platform","keychainRead","resolveClaudeAnthropicToken","environmentToken","CLAUDE_CODE_OAUTH_TOKEN","Date","profileCredential","keychainCredential","Error"],"mappings":"AAAA,SAASA,QAAQ,QAAQ,qBAAqB;AAC9C,SAASC,QAAQ,QAAQ,mBAAmB;AAC5C,SAASC,OAAO,QAAQ,UAAU;AAClC,SAASC,UAAU,EAAEC,IAAI,EAAEC,OAAO,QAAQ,YAAY;AACtD,SAASC,SAAS,QAAQ,YAAY;AAEtC,MAAMC,gBAAgBD,UAAUN;AAChC,MAAMQ,0BAA0B;AAahC,SAASC,OAAOC,KAAc;IAC5B,OAAOA,UAAU,QAAQ,OAAOA,UAAU,YAAY,CAACC,MAAMC,OAAO,CAACF,SAChEA,QACD;AACN;AAEA,SAASG,aAAaH,KAAc;IAClC,OAAO,OAAOA,UAAU,YAAYA,MAAMI,IAAI,KAAKJ,MAAMI,IAAI,KAAK;AACpE;AAEA,SAASC,gBAAgBC,OAAgC;IACvD,MAAMC,MAAMD,QAAQC,GAAG,IAAIC,QAAQD,GAAG;IACtC,MAAME,aAAaN,aAAaI,IAAIG,iBAAiB;IACrD,IAAID,YAAY;QACd,MAAME,cAAclB,WAAWgB,cAC3BA,aACAd,QAAQW,QAAQM,GAAG,IAAIJ,QAAQI,GAAG,IAAIH;QAC1C,OAAOf,KAAKiB,aAAa;IAC3B;IACA,OAAOjB,KAAKa,IAAIM,IAAI,IAAIrB,WAAW,WAAW;AAChD;AAEA,SAASsB,mBAAmBC,IAAoC,EAAEC,GAAS;IACzE,MAAMC,QAAQlB,OAAOgB,MAAMG;IAC3B,MAAMC,QAAQhB,aAAac,OAAOG;IAClC,IAAI,CAACD,OAAO,OAAO;QAAEA,OAAO;QAAME,SAAS;IAAM;IACjD,MAAMA,UACJ,OAAOJ,OAAOK,cAAc,YAC5BC,OAAOC,QAAQ,CAACP,MAAMK,SAAS,KAC/BL,MAAMK,SAAS,IAAIN,IAAIS,OAAO;IAChC,OAAO;QAAEN,OAAOE,UAAU,OAAOF;QAAOE;IAAQ;AAClD;AAEA,SAASK,sBAAsBC,OAAsB,EAAEX,GAAS;IAC9D,IAAI,CAACW,SAAS,OAAO;QAAER,OAAO;QAAME,SAAS;IAAM;IACnD,IAAI;QACF,OAAOP,mBAAmBf,OAAO6B,KAAKC,KAAK,CAACF,WAAWX;IACzD,EAAE,OAAM;QACN,OAAO;YAAEG,OAAO;YAAME,SAAS;QAAM;IACvC;AACF;AAEA,eAAeS,sBACbxB,OAAgC,EAChCU,GAAS;IAET,IAAI;QACF,MAAMW,UAAU,MAAM,AAACrB,CAAAA,QAAQf,QAAQ,IAAIA,QAAO,EAAGc,gBAAgBC,UAAU;QAC/E,OAAOoB,sBAAsBC,SAASX;IACxC,EAAE,OAAM;QACN,OAAO;YAAEG,OAAO;YAAME,SAAS;QAAM;IACvC;AACF;AAEA,eAAeU,mBAAmBC,OAAe;IAC/C,IAAI;QACF,MAAM,EAAEC,MAAM,EAAE,GAAG,MAAMpC,cACvB,qBACA;YAAC;YAAyB;YAAMmC;YAAS;SAAK,EAC9C;YAAEE,UAAU;YAAQC,SAAS;YAAMC,WAAW,OAAO;QAAK;QAE5D,OAAOjC,aAAa8B;IACtB,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,eAAeI,uBACb/B,OAAgC,EAChCU,GAAS;IAET,MAAMT,MAAMD,QAAQC,GAAG,IAAIC,QAAQD,GAAG;IACtC,MAAM+B,qBAAqB,CAACnC,aAAaI,IAAIG,iBAAiB;IAC9D,IAAI,CAAC4B,sBAAsB,AAAChC,CAAAA,QAAQiC,QAAQ,IAAI/B,QAAQ+B,QAAQ,AAAD,MAAO,UAAU;QAC9E,OAAO;YAAEpB,OAAO;YAAME,SAAS;QAAM;IACvC;IACA,IAAI;QACF,MAAMM,UAAU,MAAM,AAACrB,CAAAA,QAAQkC,YAAY,IAAIT,kBAAiB,EAAGjC;QACnE,OAAO4B,sBAAsBC,SAASX;IACxC,EAAE,OAAM;QACN,OAAO;YAAEG,OAAO;YAAME,SAAS;QAAM;IACvC;AACF;AAEA,OAAO,eAAeoB,4BACpBnC,UAAmC,CAAC,CAAC;IAErC,MAAMC,MAAMD,QAAQC,GAAG,IAAIC,QAAQD,GAAG;IACtC,MAAMmC,mBAAmBvC,aAAaI,IAAIoC,uBAAuB;IACjE,IAAID,kBAAkB,OAAOA;IAE7B,MAAM1B,MAAMV,QAAQU,GAAG,QAAQ,IAAI4B;IACnC,MAAMC,oBAAoB,MAAMf,sBAAsBxB,SAASU;IAC/D,IAAI6B,kBAAkB1B,KAAK,EAAE,OAAO0B,kBAAkB1B,KAAK;IAE3D,MAAM2B,qBAAqB,MAAMT,uBAAuB/B,SAASU;IACjE,IAAI8B,mBAAmB3B,KAAK,EAAE,OAAO2B,mBAAmB3B,KAAK;IAC7D,IAAI0B,kBAAkBxB,OAAO,IAAIyB,mBAAmBzB,OAAO,EAAE;QAC3D,MAAM,IAAI0B,MAAM;IAClB;IACA,MAAM,IAAIA,MAAM;AAClB"}

package/dist/harnesses/claude/readiness.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessReadinessProfile } from "../readiness/types.js";
+export declare const claudeReadiness: HarnessReadinessProfile;
+//# sourceMappingURL=readiness.d.ts.map

package/dist/harnesses/claude/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/harnesses/claude/readiness.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,uBAAuB,EAGxB,MAAM,uBAAuB,CAAC;AAoD/B,eAAO,MAAM,eAAe,EAAE,uBAI7B,CAAC"}

package/dist/harnesses/claude/readiness.js

@@ -0,0 +1,63 @@
+import { join } from "node:path";
+import { record, registrationCheck, scriptCheck, worstReadinessStatus } from "../readiness/checks.js";
+async function authCheck(runtime) {
+    try {
+        const result = await runtime.runCommand("claude", [
+            "auth",
+            "status",
+            "--json"
+        ]);
+        const parsed = record(JSON.parse(result.stdout));
+        const authenticated = parsed?.loggedIn === true || parsed?.authenticated === true;
+        const unauthenticated = parsed?.loggedIn === false || parsed?.authenticated === false;
+        return {
+            state: authenticated ? "authenticated" : unauthenticated ? "unauthenticated" : "unknown",
+            source: "claude auth status --json",
+            provider: null,
+            availableProviders: [],
+            status: authenticated ? "pass" : unauthenticated ? "fail" : "warn",
+            errors: authenticated ? [] : [
+                unauthenticated ? "Claude is not authenticated" : "Claude authentication is unknown"
+            ]
+        };
+    } catch  {
+        return {
+            state: "unknown",
+            source: "claude auth status --json",
+            provider: null,
+            availableProviders: [],
+            status: "warn",
+            errors: [
+                "Claude authentication probe failed"
+            ]
+        };
+    }
+}
+async function integrationCheck(runtime) {
+    const script = await scriptCheck(join(runtime.homeDir, ".claude", "hooks", "claude-prompt-hook.js"), join(runtime.assetRoot ?? "", "claude", "claude-prompt-hook.js"), runtime);
+    const registration = await registrationCheck(join(runtime.homeDir, ".claude", "settings.json"), "PreToolUse", "node ~/.claude/hooks/claude-prompt-hook.js", runtime);
+    const installed = script.status === "pass" && registration.status === "pass";
+    return {
+        label: "ai-devkit hook",
+        installed,
+        status: worstReadinessStatus([
+            script.status,
+            registration.status
+        ]),
+        errors: [
+            ...script.errors,
+            ...registration.errors
+        ],
+        details: {
+            promptScript: script,
+            registration
+        }
+    };
+}
+export const claudeReadiness = {
+    configDir: ".claude",
+    auth: authCheck,
+    integration: integrationCheck
+};
+
+//# sourceMappingURL=readiness.js.map

package/dist/harnesses/claude/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/harnesses/claude/readiness.ts"],"sourcesContent":["import { join } from \"node:path\";\nimport {\n  record,\n  registrationCheck,\n  scriptCheck,\n  worstReadinessStatus,\n} from \"../readiness/checks.js\";\nimport type {\n  AuthReadinessCheck,\n  HarnessReadinessProfile,\n  IntegrationReadinessCheck,\n  ReadinessRuntime,\n} from \"../readiness/types.js\";\n\nasync function authCheck(runtime: ReadinessRuntime): Promise<AuthReadinessCheck> {\n  try {\n    const result = await runtime.runCommand(\"claude\", [\"auth\", \"status\", \"--json\"]);\n    const parsed = record(JSON.parse(result.stdout));\n    const authenticated = parsed?.loggedIn === true || parsed?.authenticated === true;\n    const unauthenticated = parsed?.loggedIn === false || parsed?.authenticated === false;\n    return {\n      state: authenticated ? \"authenticated\" : unauthenticated ? \"unauthenticated\" : \"unknown\",\n      source: \"claude auth status --json\",\n      provider: null,\n      availableProviders: [],\n      status: authenticated ? \"pass\" : unauthenticated ? \"fail\" : \"warn\",\n      errors: authenticated\n        ? []\n        : [unauthenticated ? \"Claude is not authenticated\" : \"Claude authentication is unknown\"],\n    };\n  } catch {\n    return {\n      state: \"unknown\",\n      source: \"claude auth status --json\",\n      provider: null,\n      availableProviders: [],\n      status: \"warn\",\n      errors: [\"Claude authentication probe failed\"],\n    };\n  }\n}\n\nasync function integrationCheck(runtime: ReadinessRuntime): Promise<IntegrationReadinessCheck> {\n  const script = await scriptCheck(\n    join(runtime.homeDir, \".claude\", \"hooks\", \"claude-prompt-hook.js\"),\n    join(runtime.assetRoot ?? \"\", \"claude\", \"claude-prompt-hook.js\"),\n    runtime,\n  );\n  const registration = await registrationCheck(\n    join(runtime.homeDir, \".claude\", \"settings.json\"),\n    \"PreToolUse\",\n    \"node ~/.claude/hooks/claude-prompt-hook.js\",\n    runtime,\n  );\n  const installed = script.status === \"pass\" && registration.status === \"pass\";\n  return {\n    label: \"ai-devkit hook\",\n    installed,\n    status: worstReadinessStatus([script.status, registration.status]),\n    errors: [...script.errors, ...registration.errors],\n    details: { promptScript: script, registration },\n  };\n}\n\nexport const claudeReadiness: HarnessReadinessProfile = {\n  configDir: \".claude\",\n  auth: authCheck,\n  integration: integrationCheck,\n};\n"],"names":["join","record","registrationCheck","scriptCheck","worstReadinessStatus","authCheck","runtime","result","runCommand","parsed","JSON","parse","stdout","authenticated","loggedIn","unauthenticated","state","source","provider","availableProviders","status","errors","integrationCheck","script","homeDir","assetRoot","registration","installed","label","details","promptScript","claudeReadiness","configDir","auth","integration"],"mappings":"AAAA,SAASA,IAAI,QAAQ,YAAY;AACjC,SACEC,MAAM,EACNC,iBAAiB,EACjBC,WAAW,EACXC,oBAAoB,QACf,yBAAyB;AAQhC,eAAeC,UAAUC,OAAyB;IAChD,IAAI;QACF,MAAMC,SAAS,MAAMD,QAAQE,UAAU,CAAC,UAAU;YAAC;YAAQ;YAAU;SAAS;QAC9E,MAAMC,SAASR,OAAOS,KAAKC,KAAK,CAACJ,OAAOK,MAAM;QAC9C,MAAMC,gBAAgBJ,QAAQK,aAAa,QAAQL,QAAQI,kBAAkB;QAC7E,MAAME,kBAAkBN,QAAQK,aAAa,SAASL,QAAQI,kBAAkB;QAChF,OAAO;YACLG,OAAOH,gBAAgB,kBAAkBE,kBAAkB,oBAAoB;YAC/EE,QAAQ;YACRC,UAAU;YACVC,oBAAoB,EAAE;YACtBC,QAAQP,gBAAgB,SAASE,kBAAkB,SAAS;YAC5DM,QAAQR,gBACJ,EAAE,GACF;gBAACE,kBAAkB,gCAAgC;aAAmC;QAC5F;IACF,EAAE,OAAM;QACN,OAAO;YACLC,OAAO;YACPC,QAAQ;YACRC,UAAU;YACVC,oBAAoB,EAAE;YACtBC,QAAQ;YACRC,QAAQ;gBAAC;aAAqC;QAChD;IACF;AACF;AAEA,eAAeC,iBAAiBhB,OAAyB;IACvD,MAAMiB,SAAS,MAAMpB,YACnBH,KAAKM,QAAQkB,OAAO,EAAE,WAAW,SAAS,0BAC1CxB,KAAKM,QAAQmB,SAAS,IAAI,IAAI,UAAU,0BACxCnB;IAEF,MAAMoB,eAAe,MAAMxB,kBACzBF,KAAKM,QAAQkB,OAAO,EAAE,WAAW,kBACjC,cACA,8CACAlB;IAEF,MAAMqB,YAAYJ,OAAOH,MAAM,KAAK,UAAUM,aAAaN,MAAM,KAAK;IACtE,OAAO;QACLQ,OAAO;QACPD;QACAP,QAAQhB,qBAAqB;YAACmB,OAAOH,MAAM;YAAEM,aAAaN,MAAM;SAAC;QACjEC,QAAQ;eAAIE,OAAOF,MAAM;eAAKK,aAAaL,MAAM;SAAC;QAClDQ,SAAS;YAAEC,cAAcP;YAAQG;QAAa;IAChD;AACF;AAEA,OAAO,MAAMK,kBAA2C;IACtDC,WAAW;IACXC,MAAM5B;IACN6B,aAAaZ;AACf,EAAE"}

package/dist/harnesses/codex/credentials.d.ts

@@ -0,0 +1,15 @@
+export type CodexCredentialOptions = {
+    env?: NodeJS.ProcessEnv;
+    readFile?: (path: string, encoding: BufferEncoding) => Promise<string>;
+    now?: () => Date;
+};
+export type CodexCredentials = {
+    personalAccessToken: string | null;
+    oauth: {
+        access: string;
+        accountId: string;
+    } | null;
+};
+export declare function resolveCodexAuthPath(env?: NodeJS.ProcessEnv): string;
+export declare function resolveCodexCredentials(options?: CodexCredentialOptions): Promise<CodexCredentials | null>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/harnesses/codex/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/harnesses/codex/credentials.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,sBAAsB,GAAG;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrD,CAAC;AAgBF,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAGjF;AAuBD,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAsBlC"}

package/dist/harnesses/codex/credentials.js

@@ -0,0 +1,58 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function finiteNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function nonEmptyText(value) {
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+export function resolveCodexAuthPath(env = process.env) {
+    const root = env.CODEX_HOME || join(env.HOME || "", ".codex");
+    return join(root, "auth.json");
+}
+function jwtExpiry(token) {
+    const part = token.split(".")[1];
+    if (!part) return null;
+    try {
+        return finiteNumber(record(JSON.parse(Buffer.from(part, "base64url").toString("utf8")))?.exp);
+    } catch  {
+        return null;
+    }
+}
+function staleOAuth(tokens, token, now) {
+    const metadata = tokens.expires_at ?? tokens.expiresAt ?? tokens.expiry;
+    let expiry = finiteNumber(metadata);
+    if (typeof metadata === "string") {
+        const parsed = Date.parse(metadata);
+        expiry = Number.isNaN(parsed) ? null : parsed / 1000;
+    }
+    expiry ??= jwtExpiry(token);
+    return expiry !== null && expiry <= now.getTime() / 1000;
+}
+export async function resolveCodexCredentials(options = {}) {
+    let auth;
+    try {
+        const contents = await (options.readFile ?? readFile)(resolveCodexAuthPath(options.env), "utf8");
+        auth = record(JSON.parse(contents)) ?? {};
+    } catch  {
+        return null;
+    }
+    const personalAccessToken = nonEmptyText(auth.personal_access_token);
+    const tokens = record(auth.tokens);
+    const access = nonEmptyText(tokens?.access_token);
+    const accountId = nonEmptyText(tokens?.account_id);
+    const now = options.now?.() ?? new Date();
+    const oauth = tokens && access && accountId && !staleOAuth(tokens, access, now) ? {
+        access,
+        accountId
+    } : null;
+    return {
+        personalAccessToken,
+        oauth
+    };
+}
+
+//# sourceMappingURL=credentials.js.map

package/dist/harnesses/codex/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/harnesses/codex/credentials.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\ntype UnknownRecord = Record<string, unknown>;\n\nexport type CodexCredentialOptions = {\n  env?: NodeJS.ProcessEnv;\n  readFile?: (path: string, encoding: BufferEncoding) => Promise<string>;\n  now?: () => Date;\n};\n\nexport type CodexCredentials = {\n  personalAccessToken: string | null;\n  oauth: { access: string; accountId: string } | null;\n};\n\nfunction record(value: unknown): UnknownRecord | null {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as UnknownRecord)\n    : null;\n}\n\nfunction finiteNumber(value: unknown): number | null {\n  return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction nonEmptyText(value: unknown): string | null {\n  return typeof value === \"string\" && value.length > 0 ? value : null;\n}\n\nexport function resolveCodexAuthPath(env: NodeJS.ProcessEnv = process.env): string {\n  const root = env.CODEX_HOME || join(env.HOME || \"\", \".codex\");\n  return join(root, \"auth.json\");\n}\n\nfunction jwtExpiry(token: string): number | null {\n  const part = token.split(\".\")[1];\n  if (!part) return null;\n  try {\n    return finiteNumber(record(JSON.parse(Buffer.from(part, \"base64url\").toString(\"utf8\")))?.exp);\n  } catch {\n    return null;\n  }\n}\n\nfunction staleOAuth(tokens: UnknownRecord, token: string, now: Date): boolean {\n  const metadata = tokens.expires_at ?? tokens.expiresAt ?? tokens.expiry;\n  let expiry: number | null = finiteNumber(metadata);\n  if (typeof metadata === \"string\") {\n    const parsed = Date.parse(metadata);\n    expiry = Number.isNaN(parsed) ? null : parsed / 1000;\n  }\n  expiry ??= jwtExpiry(token);\n  return expiry !== null && expiry <= now.getTime() / 1000;\n}\n\nexport async function resolveCodexCredentials(\n  options: CodexCredentialOptions = {},\n): Promise<CodexCredentials | null> {\n  let auth: UnknownRecord;\n  try {\n    const contents = await (options.readFile ?? readFile)(\n      resolveCodexAuthPath(options.env),\n      \"utf8\",\n    );\n    auth = record(JSON.parse(contents)) ?? {};\n  } catch {\n    return null;\n  }\n\n  const personalAccessToken = nonEmptyText(auth.personal_access_token);\n  const tokens = record(auth.tokens);\n  const access = nonEmptyText(tokens?.access_token);\n  const accountId = nonEmptyText(tokens?.account_id);\n  const now = options.now?.() ?? new Date();\n  const oauth =\n    tokens && access && accountId && !staleOAuth(tokens, access, now)\n      ? { access, accountId }\n      : null;\n  return { personalAccessToken, oauth };\n}\n"],"names":["readFile","join","record","value","Array","isArray","finiteNumber","Number","isFinite","nonEmptyText","length","resolveCodexAuthPath","env","process","root","CODEX_HOME","HOME","jwtExpiry","token","part","split","JSON","parse","Buffer","from","toString","exp","staleOAuth","tokens","now","metadata","expires_at","expiresAt","expiry","parsed","Date","isNaN","getTime","resolveCodexCredentials","options","auth","contents","personalAccessToken","personal_access_token","access","access_token","accountId","account_id","oauth"],"mappings":"AAAA,SAASA,QAAQ,QAAQ,mBAAmB;AAC5C,SAASC,IAAI,QAAQ,YAAY;AAejC,SAASC,OAAOC,KAAc;IAC5B,OAAOA,UAAU,QAAQ,OAAOA,UAAU,YAAY,CAACC,MAAMC,OAAO,CAACF,SAChEA,QACD;AACN;AAEA,SAASG,aAAaH,KAAc;IAClC,OAAO,OAAOA,UAAU,YAAYI,OAAOC,QAAQ,CAACL,SAASA,QAAQ;AACvE;AAEA,SAASM,aAAaN,KAAc;IAClC,OAAO,OAAOA,UAAU,YAAYA,MAAMO,MAAM,GAAG,IAAIP,QAAQ;AACjE;AAEA,OAAO,SAASQ,qBAAqBC,MAAyBC,QAAQD,GAAG;IACvE,MAAME,OAAOF,IAAIG,UAAU,IAAId,KAAKW,IAAII,IAAI,IAAI,IAAI;IACpD,OAAOf,KAAKa,MAAM;AACpB;AAEA,SAASG,UAAUC,KAAa;IAC9B,MAAMC,OAAOD,MAAME,KAAK,CAAC,IAAI,CAAC,EAAE;IAChC,IAAI,CAACD,MAAM,OAAO;IAClB,IAAI;QACF,OAAOb,aAAaJ,OAAOmB,KAAKC,KAAK,CAACC,OAAOC,IAAI,CAACL,MAAM,aAAaM,QAAQ,CAAC,WAAWC;IAC3F,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,SAASC,WAAWC,MAAqB,EAAEV,KAAa,EAAEW,GAAS;IACjE,MAAMC,WAAWF,OAAOG,UAAU,IAAIH,OAAOI,SAAS,IAAIJ,OAAOK,MAAM;IACvE,IAAIA,SAAwB3B,aAAawB;IACzC,IAAI,OAAOA,aAAa,UAAU;QAChC,MAAMI,SAASC,KAAKb,KAAK,CAACQ;QAC1BG,SAAS1B,OAAO6B,KAAK,CAACF,UAAU,OAAOA,SAAS;IAClD;IACAD,WAAWhB,UAAUC;IACrB,OAAOe,WAAW,QAAQA,UAAUJ,IAAIQ,OAAO,KAAK;AACtD;AAEA,OAAO,eAAeC,wBACpBC,UAAkC,CAAC,CAAC;IAEpC,IAAIC;IACJ,IAAI;QACF,MAAMC,WAAW,MAAM,AAACF,CAAAA,QAAQvC,QAAQ,IAAIA,QAAO,EACjDW,qBAAqB4B,QAAQ3B,GAAG,GAChC;QAEF4B,OAAOtC,OAAOmB,KAAKC,KAAK,CAACmB,cAAc,CAAC;IAC1C,EAAE,OAAM;QACN,OAAO;IACT;IAEA,MAAMC,sBAAsBjC,aAAa+B,KAAKG,qBAAqB;IACnE,MAAMf,SAAS1B,OAAOsC,KAAKZ,MAAM;IACjC,MAAMgB,SAASnC,aAAamB,QAAQiB;IACpC,MAAMC,YAAYrC,aAAamB,QAAQmB;IACvC,MAAMlB,MAAMU,QAAQV,GAAG,QAAQ,IAAIM;IACnC,MAAMa,QACJpB,UAAUgB,UAAUE,aAAa,CAACnB,WAAWC,QAAQgB,QAAQf,OACzD;QAAEe;QAAQE;IAAU,IACpB;IACN,OAAO;QAAEJ;QAAqBM;IAAM;AACtC"}

package/dist/harnesses/codex/readiness.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessReadinessProfile } from "../readiness/types.js";
+export declare const codexReadiness: HarnessReadinessProfile;
+//# sourceMappingURL=readiness.d.ts.map

package/dist/harnesses/codex/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/harnesses/codex/readiness.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAEV,uBAAuB,EAGxB,MAAM,uBAAuB,CAAC;AAsD/B,eAAO,MAAM,cAAc,EAAE,uBAI5B,CAAC"}

package/dist/harnesses/codex/readiness.js

@@ -0,0 +1,60 @@
+import { join } from "node:path";
+import { displayHome, mappingCheck, registrationCheck, scriptCheck, worstReadinessStatus } from "../readiness/checks.js";
+async function authCheck(runtime) {
+    try {
+        const value = await runtime.codexAuth();
+        return {
+            state: value === true ? "authenticated" : value === false ? "unauthenticated" : "unknown",
+            source: displayHome(join(runtime.homeDir, ".codex", "auth.json"), runtime.homeDir),
+            provider: null,
+            availableProviders: [],
+            status: value === true ? "pass" : value === false ? "fail" : "warn",
+            errors: value === true ? [] : [
+                value === false ? "Codex is not authenticated" : "Codex authentication is unknown"
+            ]
+        };
+    } catch  {
+        return {
+            state: "unknown",
+            source: "~/.codex/auth.json",
+            provider: null,
+            availableProviders: [],
+            status: "warn",
+            errors: [
+                "Codex authentication probe failed"
+            ]
+        };
+    }
+}
+async function integrationCheck(runtime) {
+    const script = await scriptCheck(join(runtime.homeDir, ".codex", "hooks", "codex-session-mapping.cjs"), join(runtime.assetRoot ?? "", "codex", "codex-session-mapping.cjs"), runtime);
+    const registration = await registrationCheck(join(runtime.homeDir, ".codex", "hooks.json"), "SessionStart", "node ~/.codex/hooks/codex-session-mapping.cjs", runtime);
+    const mappingFile = await mappingCheck(join(runtime.homeDir, ".codex", "ai-devkit", "sessions.json"), runtime);
+    const installed = script.status === "pass" && registration.status === "pass";
+    return {
+        label: "ai-devkit hook",
+        installed,
+        status: worstReadinessStatus([
+            script.status,
+            registration.status,
+            mappingFile.status
+        ]),
+        errors: [
+            ...script.errors,
+            ...registration.errors,
+            ...mappingFile.errors
+        ],
+        details: {
+            sessionMappingScript: script,
+            registration,
+            mappingFile
+        }
+    };
+}
+export const codexReadiness = {
+    configDir: ".codex",
+    auth: authCheck,
+    integration: integrationCheck
+};
+
+//# sourceMappingURL=readiness.js.map

package/dist/harnesses/codex/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/harnesses/codex/readiness.ts"],"sourcesContent":["import { join } from \"node:path\";\nimport {\n  displayHome,\n  mappingCheck,\n  registrationCheck,\n  scriptCheck,\n  worstReadinessStatus,\n} from \"../readiness/checks.js\";\nimport type {\n  AuthReadinessCheck,\n  HarnessReadinessProfile,\n  IntegrationReadinessCheck,\n  ReadinessRuntime,\n} from \"../readiness/types.js\";\n\nasync function authCheck(runtime: ReadinessRuntime): Promise<AuthReadinessCheck> {\n  try {\n    const value = await runtime.codexAuth();\n    return {\n      state: value === true ? \"authenticated\" : value === false ? \"unauthenticated\" : \"unknown\",\n      source: displayHome(join(runtime.homeDir, \".codex\", \"auth.json\"), runtime.homeDir),\n      provider: null,\n      availableProviders: [],\n      status: value === true ? \"pass\" : value === false ? \"fail\" : \"warn\",\n      errors:\n        value === true\n          ? []\n          : [value === false ? \"Codex is not authenticated\" : \"Codex authentication is unknown\"],\n    };\n  } catch {\n    return {\n      state: \"unknown\",\n      source: \"~/.codex/auth.json\",\n      provider: null,\n      availableProviders: [],\n      status: \"warn\",\n      errors: [\"Codex authentication probe failed\"],\n    };\n  }\n}\n\nasync function integrationCheck(runtime: ReadinessRuntime): Promise<IntegrationReadinessCheck> {\n  const script = await scriptCheck(\n    join(runtime.homeDir, \".codex\", \"hooks\", \"codex-session-mapping.cjs\"),\n    join(runtime.assetRoot ?? \"\", \"codex\", \"codex-session-mapping.cjs\"),\n    runtime,\n  );\n  const registration = await registrationCheck(\n    join(runtime.homeDir, \".codex\", \"hooks.json\"),\n    \"SessionStart\",\n    \"node ~/.codex/hooks/codex-session-mapping.cjs\",\n    runtime,\n  );\n  const mappingFile = await mappingCheck(\n    join(runtime.homeDir, \".codex\", \"ai-devkit\", \"sessions.json\"),\n    runtime,\n  );\n  const installed = script.status === \"pass\" && registration.status === \"pass\";\n  return {\n    label: \"ai-devkit hook\",\n    installed,\n    status: worstReadinessStatus([script.status, registration.status, mappingFile.status]),\n    errors: [...script.errors, ...registration.errors, ...mappingFile.errors],\n    details: { sessionMappingScript: script, registration, mappingFile },\n  };\n}\n\nexport const codexReadiness: HarnessReadinessProfile = {\n  configDir: \".codex\",\n  auth: authCheck,\n  integration: integrationCheck,\n};\n"],"names":["join","displayHome","mappingCheck","registrationCheck","scriptCheck","worstReadinessStatus","authCheck","runtime","value","codexAuth","state","source","homeDir","provider","availableProviders","status","errors","integrationCheck","script","assetRoot","registration","mappingFile","installed","label","details","sessionMappingScript","codexReadiness","configDir","auth","integration"],"mappings":"AAAA,SAASA,IAAI,QAAQ,YAAY;AACjC,SACEC,WAAW,EACXC,YAAY,EACZC,iBAAiB,EACjBC,WAAW,EACXC,oBAAoB,QACf,yBAAyB;AAQhC,eAAeC,UAAUC,OAAyB;IAChD,IAAI;QACF,MAAMC,QAAQ,MAAMD,QAAQE,SAAS;QACrC,OAAO;YACLC,OAAOF,UAAU,OAAO,kBAAkBA,UAAU,QAAQ,oBAAoB;YAChFG,QAAQV,YAAYD,KAAKO,QAAQK,OAAO,EAAE,UAAU,cAAcL,QAAQK,OAAO;YACjFC,UAAU;YACVC,oBAAoB,EAAE;YACtBC,QAAQP,UAAU,OAAO,SAASA,UAAU,QAAQ,SAAS;YAC7DQ,QACER,UAAU,OACN,EAAE,GACF;gBAACA,UAAU,QAAQ,+BAA+B;aAAkC;QAC5F;IACF,EAAE,OAAM;QACN,OAAO;YACLE,OAAO;YACPC,QAAQ;YACRE,UAAU;YACVC,oBAAoB,EAAE;YACtBC,QAAQ;YACRC,QAAQ;gBAAC;aAAoC;QAC/C;IACF;AACF;AAEA,eAAeC,iBAAiBV,OAAyB;IACvD,MAAMW,SAAS,MAAMd,YACnBJ,KAAKO,QAAQK,OAAO,EAAE,UAAU,SAAS,8BACzCZ,KAAKO,QAAQY,SAAS,IAAI,IAAI,SAAS,8BACvCZ;IAEF,MAAMa,eAAe,MAAMjB,kBACzBH,KAAKO,QAAQK,OAAO,EAAE,UAAU,eAChC,gBACA,iDACAL;IAEF,MAAMc,cAAc,MAAMnB,aACxBF,KAAKO,QAAQK,OAAO,EAAE,UAAU,aAAa,kBAC7CL;IAEF,MAAMe,YAAYJ,OAAOH,MAAM,KAAK,UAAUK,aAAaL,MAAM,KAAK;IACtE,OAAO;QACLQ,OAAO;QACPD;QACAP,QAAQV,qBAAqB;YAACa,OAAOH,MAAM;YAAEK,aAAaL,MAAM;YAAEM,YAAYN,MAAM;SAAC;QACrFC,QAAQ;eAAIE,OAAOF,MAAM;eAAKI,aAAaJ,MAAM;eAAKK,YAAYL,MAAM;SAAC;QACzEQ,SAAS;YAAEC,sBAAsBP;YAAQE;YAAcC;QAAY;IACrE;AACF;AAEA,OAAO,MAAMK,iBAA0C;IACrDC,WAAW;IACXC,MAAMtB;IACNuB,aAAaZ;AACf,EAAE"}

package/dist/harnesses/copilot/readiness.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessReadinessProfile } from "../readiness/types.js";
+export declare const copilotReadiness: HarnessReadinessProfile;
+//# sourceMappingURL=readiness.d.ts.map

package/dist/harnesses/copilot/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/harnesses/copilot/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,uBAAuB,EAExB,MAAM,uBAAuB,CAAC;AAyB/B,eAAO,MAAM,gBAAgB,EAAE,uBAG9B,CAAC"}

package/dist/harnesses/copilot/readiness.js

@@ -0,0 +1,39 @@
+async function authCheck(runtime) {
+    try {
+        await runtime.runCommand("gh", [
+            "auth",
+            "status",
+            "--hostname",
+            "github.com"
+        ]);
+        return {
+            state: "authenticated",
+            source: "gh auth status --hostname github.com",
+            provider: "github",
+            availableProviders: [
+                "GitHub"
+            ],
+            status: "pass",
+            errors: []
+        };
+    } catch  {
+        return {
+            state: "unknown",
+            source: "gh auth status --hostname github.com",
+            provider: null,
+            availableProviders: [
+                "GitHub"
+            ],
+            status: "warn",
+            errors: [
+                "Copilot authentication could not be verified through GitHub CLI"
+            ]
+        };
+    }
+}
+export const copilotReadiness = {
+    configDir: ".copilot",
+    auth: authCheck
+};
+
+//# sourceMappingURL=readiness.js.map

package/dist/harnesses/copilot/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/harnesses/copilot/readiness.ts"],"sourcesContent":["import type {\n  AuthReadinessCheck,\n  HarnessReadinessProfile,\n  ReadinessRuntime,\n} from \"../readiness/types.js\";\n\nasync function authCheck(runtime: ReadinessRuntime): Promise<AuthReadinessCheck> {\n  try {\n    await runtime.runCommand(\"gh\", [\"auth\", \"status\", \"--hostname\", \"github.com\"]);\n    return {\n      state: \"authenticated\",\n      source: \"gh auth status --hostname github.com\",\n      provider: \"github\",\n      availableProviders: [\"GitHub\"],\n      status: \"pass\",\n      errors: [],\n    };\n  } catch {\n    return {\n      state: \"unknown\",\n      source: \"gh auth status --hostname github.com\",\n      provider: null,\n      availableProviders: [\"GitHub\"],\n      status: \"warn\",\n      errors: [\"Copilot authentication could not be verified through GitHub CLI\"],\n    };\n  }\n}\n\nexport const copilotReadiness: HarnessReadinessProfile = {\n  configDir: \".copilot\",\n  auth: authCheck,\n};\n"],"names":["authCheck","runtime","runCommand","state","source","provider","availableProviders","status","errors","copilotReadiness","configDir","auth"],"mappings":"AAMA,eAAeA,UAAUC,OAAyB;IAChD,IAAI;QACF,MAAMA,QAAQC,UAAU,CAAC,MAAM;YAAC;YAAQ;YAAU;YAAc;SAAa;QAC7E,OAAO;YACLC,OAAO;YACPC,QAAQ;YACRC,UAAU;YACVC,oBAAoB;gBAAC;aAAS;YAC9BC,QAAQ;YACRC,QAAQ,EAAE;QACZ;IACF,EAAE,OAAM;QACN,OAAO;YACLL,OAAO;YACPC,QAAQ;YACRC,UAAU;YACVC,oBAAoB;gBAAC;aAAS;YAC9BC,QAAQ;YACRC,QAAQ;gBAAC;aAAkE;QAC7E;IACF;AACF;AAEA,OAAO,MAAMC,mBAA4C;IACvDC,WAAW;IACXC,MAAMX;AACR,EAAE"}

package/dist/harnesses/opencode/readiness.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessReadinessProfile } from "../readiness/types.js";
+export declare const openCodeReadiness: HarnessReadinessProfile;
+//# sourceMappingURL=readiness.d.ts.map

package/dist/harnesses/opencode/readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/harnesses/opencode/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,uBAAuB,EAExB,MAAM,uBAAuB,CAAC;AAwC/B,eAAO,MAAM,iBAAiB,EAAE,uBAG/B,CAAC"}

package/dist/harnesses/opencode/readiness.js

@@ -0,0 +1,50 @@
+const ANSI_ESCAPE_PATTERN = new RegExp(`${String.fromCharCode(27)}\\[[0-?]*[ -/]*[@-~]`, "g");
+function authProviderNames(output) {
+    const names = new Set();
+    for (const line of output.replace(ANSI_ESCAPE_PATTERN, "").split(/\r?\n/)){
+        const match = /^\s*[●*+-]\s+(.+?)\s*$/.exec(line);
+        if (!match) continue;
+        const name = match[1].replace(/\s+(?:api|oauth|[\w-]*token|[A-Z][A-Z0-9_]+)$/i, "").trim();
+        if (name && !/^\d+\s+(?:credentials?|environment variables?)$/i.test(name)) names.add(name);
+    }
+    return [
+        ...names
+    ].sort();
+}
+async function authCheck(runtime) {
+    try {
+        const result = await runtime.runCommand("opencode", [
+            "auth",
+            "list"
+        ]);
+        const availableProviders = authProviderNames(result.stdout);
+        const authenticated = availableProviders.length > 0;
+        return {
+            state: authenticated ? "authenticated" : "unauthenticated",
+            source: "opencode auth list",
+            provider: null,
+            availableProviders,
+            status: authenticated ? "pass" : "fail",
+            errors: authenticated ? [] : [
+                "OpenCode has no configured credentials"
+            ]
+        };
+    } catch  {
+        return {
+            state: "unknown",
+            source: "opencode auth list",
+            provider: null,
+            availableProviders: [],
+            status: "warn",
+            errors: [
+                "OpenCode authentication probe failed"
+            ]
+        };
+    }
+}
+export const openCodeReadiness = {
+    configDir: ".config/opencode",
+    auth: authCheck
+};
+
+//# sourceMappingURL=readiness.js.map

package/dist/harnesses/opencode/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/harnesses/opencode/readiness.ts"],"sourcesContent":["import type {\n  AuthReadinessCheck,\n  HarnessReadinessProfile,\n  ReadinessRuntime,\n} from \"../readiness/types.js\";\n\nconst ANSI_ESCAPE_PATTERN = new RegExp(`${String.fromCharCode(27)}\\\\[[0-?]*[ -/]*[@-~]`, \"g\");\n\nfunction authProviderNames(output: string): string[] {\n  const names = new Set<string>();\n  for (const line of output.replace(ANSI_ESCAPE_PATTERN, \"\").split(/\\r?\\n/)) {\n    const match = /^\\s*[●*+-]\\s+(.+?)\\s*$/.exec(line);\n    if (!match) continue;\n    const name = match[1].replace(/\\s+(?:api|oauth|[\\w-]*token|[A-Z][A-Z0-9_]+)$/i, \"\").trim();\n    if (name && !/^\\d+\\s+(?:credentials?|environment variables?)$/i.test(name)) names.add(name);\n  }\n  return [...names].sort();\n}\n\nasync function authCheck(runtime: ReadinessRuntime): Promise<AuthReadinessCheck> {\n  try {\n    const result = await runtime.runCommand(\"opencode\", [\"auth\", \"list\"]);\n    const availableProviders = authProviderNames(result.stdout);\n    const authenticated = availableProviders.length > 0;\n    return {\n      state: authenticated ? \"authenticated\" : \"unauthenticated\",\n      source: \"opencode auth list\",\n      provider: null,\n      availableProviders,\n      status: authenticated ? \"pass\" : \"fail\",\n      errors: authenticated ? [] : [\"OpenCode has no configured credentials\"],\n    };\n  } catch {\n    return {\n      state: \"unknown\",\n      source: \"opencode auth list\",\n      provider: null,\n      availableProviders: [],\n      status: \"warn\",\n      errors: [\"OpenCode authentication probe failed\"],\n    };\n  }\n}\n\nexport const openCodeReadiness: HarnessReadinessProfile = {\n  configDir: \".config/opencode\",\n  auth: authCheck,\n};\n"],"names":["ANSI_ESCAPE_PATTERN","RegExp","String","fromCharCode","authProviderNames","output","names","Set","line","replace","split","match","exec","name","trim","test","add","sort","authCheck","runtime","result","runCommand","availableProviders","stdout","authenticated","length","state","source","provider","status","errors","openCodeReadiness","configDir","auth"],"mappings":"AAMA,MAAMA,sBAAsB,IAAIC,OAAO,GAAGC,OAAOC,YAAY,CAAC,IAAI,oBAAoB,CAAC,EAAE;AAEzF,SAASC,kBAAkBC,MAAc;IACvC,MAAMC,QAAQ,IAAIC;IAClB,KAAK,MAAMC,QAAQH,OAAOI,OAAO,CAACT,qBAAqB,IAAIU,KAAK,CAAC,SAAU;QACzE,MAAMC,QAAQ,yBAAyBC,IAAI,CAACJ;QAC5C,IAAI,CAACG,OAAO;QACZ,MAAME,OAAOF,KAAK,CAAC,EAAE,CAACF,OAAO,CAAC,kDAAkD,IAAIK,IAAI;QACxF,IAAID,QAAQ,CAAC,mDAAmDE,IAAI,CAACF,OAAOP,MAAMU,GAAG,CAACH;IACxF;IACA,OAAO;WAAIP;KAAM,CAACW,IAAI;AACxB;AAEA,eAAeC,UAAUC,OAAyB;IAChD,IAAI;QACF,MAAMC,SAAS,MAAMD,QAAQE,UAAU,CAAC,YAAY;YAAC;YAAQ;SAAO;QACpE,MAAMC,qBAAqBlB,kBAAkBgB,OAAOG,MAAM;QAC1D,MAAMC,gBAAgBF,mBAAmBG,MAAM,GAAG;QAClD,OAAO;YACLC,OAAOF,gBAAgB,kBAAkB;YACzCG,QAAQ;YACRC,UAAU;YACVN;YACAO,QAAQL,gBAAgB,SAAS;YACjCM,QAAQN,gBAAgB,EAAE,GAAG;gBAAC;aAAyC;QACzE;IACF,EAAE,OAAM;QACN,OAAO;YACLE,OAAO;YACPC,QAAQ;YACRC,UAAU;YACVN,oBAAoB,EAAE;YACtBO,QAAQ;YACRC,QAAQ;gBAAC;aAAuC;QAClD;IACF;AACF;AAEA,OAAO,MAAMC,oBAA6C;IACxDC,WAAW;IACXC,MAAMf;AACR,EAAE"}

package/dist/harnesses/pi/credentials.d.ts

@@ -0,0 +1,22 @@
+export type PiCredentialOptions = {
+    env?: NodeJS.ProcessEnv;
+    readFile?: (path: string, encoding: BufferEncoding) => Promise<string>;
+};
+export type PiAnthropicCredential = {
+    kind: "oauth";
+    access: string;
+    expiresMs: number | null;
+};
+export type PiOpenAiCredential = {
+    kind: "platform";
+    key: string;
+} | {
+    kind: "oauth";
+    access: string;
+    accountId: string;
+    expiresMs: number | null;
+};
+export declare function resolvePiAnthropicCredential(options?: PiCredentialOptions): Promise<PiAnthropicCredential>;
+export declare function resolvePiOpenAiCredential(options?: PiCredentialOptions): Promise<PiOpenAiCredential>;
+export declare function resolvePiZaiApiKey(options?: PiCredentialOptions): Promise<string>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/harnesses/pi/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../src/harnesses/pi/credentials.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AA+BnF,wBAAsB,4BAA4B,CAChD,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,qBAAqB,CAAC,CAoBhC;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAgC7B;AAED,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB3F"}