@ai-sdk/harness-codex 1.0.0-canary.3 → 1.0.0-canary.5

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @ai-sdk/harness-codex
 
+## 1.0.0-canary.5
+
+### Patch Changes
+
+- @ai-sdk/harness@1.0.0-canary.9
+
+## 1.0.0-canary.4
+
+### Patch Changes
+
+- aae0138: fix(harness): make listening for sandbox bridge readiness compatible with Bun
+- Updated dependencies [aae0138]
+  - @ai-sdk/harness@1.0.0-canary.8
+
 ## 1.0.0-canary.3
 
 ### Patch Changes

package/dist/index.js

@@ -8,10 +8,12 @@ import {
   HarnessCapabilityUnsupportedError,
   harnessV1DiagnosticFromBridgeFrame
 } from "@ai-sdk/harness";
-import { classifyDiskLog, SandboxChannel } from "@ai-sdk/harness/utils";
 import {
-  safeParseJSON
-} from "@ai-sdk/provider-utils";
+  classifyDiskLog,
+  markBridgeStarting,
+  SandboxChannel,
+  waitForBridgeReady
+} from "@ai-sdk/harness/utils";
 import { WebSocket } from "ws";
 import { z as z2 } from "zod";
 
@@ -92,7 +94,6 @@ var inboundMessageSchema = z.discriminatedUnion("type", [
   startMessageSchema,
   ...harnessV1BridgeInboundCommandSchemas
 ]);
-var bridgeReadySchema = harnessV1BridgeReadySchema;
 
 // src/codex-harness.ts
 var DEFAULT_CODEX_MODEL = "gpt-5.3-codex";
@@ -255,6 +256,12 @@ function createCodex(settings = {}) {
           abortSignal: startOpts.abortSignal
         });
       }
+      await markBridgeStarting({
+        sandbox: session,
+        bridgeStateDir,
+        bridgeType: "codex",
+        abortSignal: startOpts.abortSignal
+      });
       const proc = await session.spawn({
         command: `node ${BOOTSTRAP_DIR}/bridge.mjs --workdir ${workDir} --bridge-state-dir ${bridgeStateDir} --bootstrap-dir ${BOOTSTRAP_DIR}`,
         env,
@@ -262,9 +269,16 @@ function createCodex(settings = {}) {
       });
       const { port: boundPort } = await waitForBridgeReady({
         proc,
+        sandbox: session,
+        bridgeStateDir,
+        bridgeType: "codex",
         timeoutMs,
-        abortSignal: startOpts.abortSignal
+        abortSignal: startOpts.abortSignal,
+        createTimeoutError: () => new Error("codex bridge did not become ready in time."),
+        createExitError: () => new Error("codex bridge exited before becoming ready.")
       });
+      void drainRest(proc.stdout);
+      void forwardBridgeStderr(proc.stderr);
       const wsUrl = await sandboxSession.getPortUrl({
         port: boundPort,
         protocol: "ws"
@@ -419,69 +433,6 @@ function safeCodexSkillFilePath({
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
-async function waitForBridgeReady({
-  proc,
-  timeoutMs,
-  abortSignal
-}) {
-  const reader = proc.stdout.pipeThrough(new TextDecoderStream()).getReader();
-  const decoder = lineDecoder();
-  const deadline = Date.now() + timeoutMs;
-  try {
-    while (true) {
-      if (abortSignal?.aborted) {
-        await proc.kill();
-        throw abortSignal.reason ?? new DOMException("Aborted", "AbortError");
-      }
-      const remaining = deadline - Date.now();
-      if (remaining <= 0) {
-        await proc.kill();
-        throw new Error("codex bridge did not become ready in time.");
-      }
-      const { value, done } = await Promise.race([
-        reader.read(),
-        new Promise(
-          (resolve) => setTimeout(
-            () => resolve({ value: void 0, done: false }),
-            remaining
-          )
-        )
-      ]);
-      if (done) {
-        throw new Error("codex bridge exited before becoming ready.");
-      }
-      if (value === void 0) continue;
-      for (const line of decoder.push(value)) {
-        const parsed = await safeParseJSON({
-          text: line,
-          schema: bridgeReadySchema
-        });
-        if (parsed.success) return { port: parsed.value.port };
-      }
-    }
-  } finally {
-    reader.releaseLock();
-    void drainRest(proc.stdout);
-    void forwardBridgeStderr(proc.stderr);
-  }
-}
-function lineDecoder() {
-  let buffer = "";
-  return {
-    push(chunk) {
-      buffer += chunk;
-      const lines = [];
-      let nl;
-      while ((nl = buffer.indexOf("\n")) !== -1) {
-        const raw = buffer.slice(0, nl);
-        buffer = buffer.slice(nl + 1);
-        const line = raw.replace(/\r$/, "").trim();
-        if (line.length > 0) lines.push(line);
-      }
-      return lines;
-    }
-  };
-}
 async function forwardBridgeStderr(stream) {
   try {
     const reader = stream.pipeThrough(new TextDecoderStream()).getReader();

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/codex-harness.ts","../src/codex-auth.ts","../src/codex-bridge-protocol.ts","../src/index.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto';\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport {\n  commonTool,\n  HarnessCapabilityUnsupportedError,\n  harnessV1DiagnosticFromBridgeFrame,\n  type HarnessV1,\n  type HarnessV1Bootstrap,\n  type HarnessV1DebugConfig,\n  type HarnessV1BuiltinTool,\n  type HarnessV1ContinueTurnState,\n  type HarnessV1Prompt,\n  type HarnessV1PromptControl,\n  type HarnessV1ResumeSessionState,\n  type HarnessV1NetworkSandboxSession,\n  type HarnessV1PermissionMode,\n  type HarnessV1Session,\n  type HarnessV1Skill,\n  type HarnessV1StreamPart,\n} from '@ai-sdk/harness';\nimport { classifyDiskLog, SandboxChannel } from '@ai-sdk/harness/utils';\nimport {\n  safeParseJSON,\n  type Experimental_SandboxProcess,\n  type Experimental_SandboxSession,\n} from '@ai-sdk/provider-utils';\nimport { WebSocket } from 'ws';\nimport { z } from 'zod';\nimport { resolveCodexEnv, type CodexAuthOptions } from './codex-auth';\nimport {\n  bridgeReadySchema,\n  outboundMessageSchema,\n  type InboundMessage,\n  type OutboundMessage,\n} from './codex-bridge-protocol';\n\ntype CodexChannel = SandboxChannel<OutboundMessage, InboundMessage>;\ntype CodexRespawnStrategy = 'replay' | 'rerun';\n\ntype WriteSkillsResult = {\n  readonly homeDir: string;\n  readonly codexHomeDir: string;\n};\n\n/*\n * The model the adapter pins when the consumer configures none. The Codex SDK\n * does not report the model it resolves to at runtime (no model field on any\n * event), and exposes no default-model constant, so we pin the latest\n * codex-specialized model available for the bundled `@openai/codex@0.130.0`\n * (published 2026-05-08): `gpt-5.3-codex` (released 2026-02). Keep this in sync\n * when bumping the codex SDK/binary. Passing it explicitly makes the resolved\n * model deterministic and the telemetry (`gen_ai.request.model`) accurate.\n */\nconst DEFAULT_CODEX_MODEL = 'gpt-5.3-codex';\n\nexport type CodexHarnessSettings = {\n  readonly auth?: CodexAuthOptions;\n  /**\n   * OpenAI model id the underlying `codex` CLI should use. Leaving this unset\n   * pins the adapter default (`DEFAULT_CODEX_MODEL`).\n   */\n  readonly model?: string;\n  /**\n   * Reasoning effort for reasoning-capable models. Leaving this unset\n   * defers to the CLI's default.\n   */\n  readonly reasoningEffort?: 'low' | 'medium' | 'high';\n  /**\n   * When `true`, allow the underlying runtime to use live web search.\n   */\n  readonly webSearch?: boolean;\n  /**\n   * Override the port the bridge binds inside the sandbox. By default the\n   * adapter uses the first port the sandbox declares via `sandbox.ports`.\n   * Only set this if the sandbox declares multiple ports and the first one\n   * is reserved for something else.\n   */\n  readonly port?: number;\n  /** Maximum milliseconds to wait for the bridge to advertise its port. Defaults to 120000. */\n  readonly startupTimeoutMs?: number;\n};\n\n/*\n * Every native tool the Codex CLI can invoke as a model-callable tool,\n * declared as a `ToolSet` keyed by what the bridge emits as `toolName` on\n * the wire (`commonName ?? nativeName`). Schemas reflect the `ThreadItem`\n * union in `@openai/codex-sdk`'s `dist/index.d.ts`.\n *\n * Codex's other native operations (`apply_patch`, todo planning) surface\n * only as side-effect events (`file_change`, `todo_list`) and are not\n * model-callable tools — they don't appear here.\n */\nconst CODEX_BUILTIN_TOOLS = {\n  bash: commonTool('bash', {\n    nativeName: 'shell',\n    toolUseKind: 'bash',\n    description: 'Execute a shell command',\n    inputSchema: z.object({ command: z.string() }),\n  }),\n  webSearch: commonTool('webSearch', {\n    nativeName: 'web_search',\n    toolUseKind: 'readonly',\n    description: 'Search the web',\n    inputSchema: z.object({ query: z.string() }),\n  }),\n} as const satisfies Record<string, HarnessV1BuiltinTool<any, any>>;\n\n/*\n * Bootstrap lives in /tmp because it's pure derived state — the harness can\n * reinstall the CLI and bridge files on any fresh sandbox from the recipe.\n * Persistence comes from the sandbox provider's snapshot, not the path.\n *\n * The session work dir (`startOpts.sessionWorkDir`) and the bridge-state dir\n * derived from `sandboxSession.defaultWorkingDirectory` both live under the sandbox's\n * default working directory — the provider's persistent mount — so the\n * workdir's contents (the codex CLI shim and any files the agent edits) and\n * the bridge state files survive both detach -> attach and\n * stop -> snapshot -> resume cycles.\n */\nconst BOOTSTRAP_DIR = '/tmp/harness/codex';\n\n/**\n * Live bridge coordinates returned by `doDetach()` and `doSuspendTurn()`. A\n * future process uses them to reopen a socket to the still-running bridge\n * (`attach`) instead of re-spawning it. Absent on a `doStop()` payload.\n */\nconst bridgeCoordsSchema = z.object({\n  port: z.number(),\n  token: z.string(),\n  lastSeenEventId: z.number(),\n  sandboxId: z.string().optional(),\n});\n\n/**\n * Schema for the adapter-specific lifecycle `data` payload Codex produces.\n * `threadId` is what `codex.resumeThread(...)` requires for the replay/rerun\n * rungs; the sandbox lookup is handled separately via\n * `provider.resumeSession({ sessionId })`. `bridge` carries live coordinates\n * for cross-process `attach` (present on `doDetach()` and `doSuspendTurn()`\n * payloads).\n */\nconst codexResumeStateSchema = z.object({\n  threadId: z.string().optional(),\n  bridge: bridgeCoordsSchema.optional(),\n});\n\ntype CodexBridgeCoords = z.infer<typeof bridgeCoordsSchema>;\n\nexport function createCodex(\n  settings: CodexHarnessSettings = {},\n): HarnessV1<typeof CODEX_BUILTIN_TOOLS> {\n  let cachedBootstrap: HarnessV1Bootstrap | undefined;\n\n  return {\n    specificationVersion: 'harness-v1',\n    harnessId: 'codex',\n    builtinTools: CODEX_BUILTIN_TOOLS,\n    supportsBuiltinToolApprovals: false,\n    lifecycleStateSchema: codexResumeStateSchema,\n    getBootstrap: async () => {\n      if (cachedBootstrap != null) return cachedBootstrap;\n      const [pkg, lock, bridge, hostToolMcp] = await Promise.all([\n        readBridgeAsset('package.json'),\n        readBridgeAsset('pnpm-lock.yaml'),\n        readBridgeAsset('index.mjs'),\n        readBridgeAsset('host-tool-mcp.mjs'),\n      ]);\n      cachedBootstrap = {\n        harnessId: 'codex',\n        bootstrapDir: BOOTSTRAP_DIR,\n        files: [\n          { path: `${BOOTSTRAP_DIR}/package.json`, content: pkg },\n          { path: `${BOOTSTRAP_DIR}/pnpm-lock.yaml`, content: lock },\n          { path: `${BOOTSTRAP_DIR}/bridge.mjs`, content: bridge },\n          {\n            path: `${BOOTSTRAP_DIR}/host-tool-mcp.mjs`,\n            content: hostToolMcp,\n          },\n        ],\n        commands: [\n          { command: `mkdir -p ${BOOTSTRAP_DIR}` },\n          {\n            command: `pnpm --dir ${BOOTSTRAP_DIR} install --frozen-lockfile --store-dir ${BOOTSTRAP_DIR}/.pnpm-store`,\n          },\n        ],\n      };\n      return cachedBootstrap;\n    },\n    doStart: async startOpts => {\n      if (\n        startOpts.permissionMode != null &&\n        startOpts.permissionMode !== 'allow-all'\n      ) {\n        throw new HarnessCapabilityUnsupportedError({\n          message:\n            \"Harness 'codex' does not support built-in tool approval requests; use permissionMode: 'allow-all'.\",\n          harnessId: 'codex',\n        });\n      }\n      const sandboxSession = startOpts.sandboxSession;\n      const session = sandboxSession.restricted();\n      const sandboxId = sandboxSession.id;\n      const lifecycleState = startOpts.continueFrom ?? startOpts.resumeFrom;\n      const isResume = lifecycleState != null;\n      const isContinue = startOpts.continueFrom != null;\n      const resumeData =\n        isResume && typeof lifecycleState?.data === 'object'\n          ? (lifecycleState.data as {\n              threadId?: unknown;\n              bridge?: CodexBridgeCoords;\n            })\n          : undefined;\n      const resumeThreadId = resumeData?.threadId;\n      const resumeThreadIdString =\n        typeof resumeThreadId === 'string' && resumeThreadId.length > 0\n          ? resumeThreadId\n          : undefined;\n      const coords = resumeData?.bridge;\n\n      const workDir = startOpts.sessionWorkDir;\n      const sessionDataDir = `${sandboxSession.defaultWorkingDirectory}/.agent-runs/${startOpts.sessionId}`;\n      const bridgeStateDir = `${sessionDataDir}/bridge`;\n      const timeoutMs = settings.startupTimeoutMs ?? 120_000;\n\n      // Normalize each forwarded bridge diagnostics frame into the general\n      // `HarnessV1Diagnostic` and report it. The adapter does no telemetry work\n      // beyond this transport→emission mapping.\n      const report = startOpts.observability?.report;\n      const onDiagnostic = report\n        ? (frame: Parameters<typeof harnessV1DiagnosticFromBridgeFrame>[0]) =>\n            report(\n              harnessV1DiagnosticFromBridgeFrame(frame, {\n                sessionId: startOpts.sessionId,\n                timestamp: Date.now(),\n              }),\n            )\n        : undefined;\n\n      /*\n       * Rung 1 — ATTACH. With live coordinates, reopen a socket to the\n       * still-running bridge. Parked between-turn sessions just attach and wait\n       * for the next `start`; suspended in-flight turns request replay of\n       * everything past the persisted cursor. No spawn, no fresh token. If the\n       * bridge is gone the open throws and we fall through to a spawn-based\n       * recovery.\n       */\n      if (coords) {\n        try {\n          const attachUrl =\n            (await sandboxSession.getPortUrl({\n              port: coords.port,\n              protocol: 'ws',\n            })) + `?agent_bridge_token=${encodeURIComponent(coords.token)}`;\n          const attachChannel: CodexChannel = new SandboxChannel({\n            connect: () => openWebSocket(attachUrl),\n            outboundSchema: outboundMessageSchema,\n            initialLastSeenEventId: coords.lastSeenEventId,\n            onDiagnostic,\n          });\n          await attachChannel.open(isContinue ? { resume: true } : undefined);\n          return createSession({\n            sessionId: startOpts.sessionId,\n            channel: attachChannel,\n            // The live bridge was spawned by another process; no process handle.\n            proc: undefined,\n            model: settings.model ?? DEFAULT_CODEX_MODEL,\n            reasoningEffort: settings.reasoningEffort,\n            webSearch: settings.webSearch,\n            resumeThreadId: resumeThreadIdString,\n            isResume: true,\n            seedResumeThreadOnFirstPrompt: false,\n            rerunContinue: false,\n            bridgePort: coords.port,\n            bridgeToken: coords.token,\n            sandboxId,\n            debug: startOpts.observability?.debug,\n            permissionMode: startOpts.permissionMode,\n          });\n        } catch {\n          // Bridge no longer reachable — recover by respawning below.\n        }\n      }\n\n      /*\n       * Rungs 2/3 — REPLAY vs RERUN. Respawn the bridge. `replay` is only sound\n       * for `continueFrom`: those coordinates include the cursor the on-disk\n       * log is replayed *from*. `resumeFrom` is a between-turn resume; even when\n       * it carries bridge coordinates, replaying the previous turn would\n       * re-deliver stale events into the next turn. Those resumes always `rerun`\n       * via `codex.resumeThread(threadId)` when attach is unavailable.\n       */\n      let respawnStrategy: CodexRespawnStrategy | undefined = isResume\n        ? 'rerun'\n        : undefined;\n      if (coords && isContinue) {\n        const logRaw = await Promise.resolve(\n          session.readTextFile({\n            path: `${bridgeStateDir}/event-log.ndjson`,\n            abortSignal: startOpts.abortSignal,\n          }),\n        ).catch(() => null);\n        if ((await classifyDiskLog(logRaw)) === 'replay') {\n          respawnStrategy = 'replay';\n        }\n      }\n\n      const port = resolveBridgePort(sandboxSession, settings.port);\n      const token = randomBytes(32).toString('hex');\n      const codexSkillSetup =\n        startOpts.skills && startOpts.skills.length > 0\n          ? await writeSkills({\n              sandbox: session,\n              skills: startOpts.skills,\n              abortSignal: startOpts.abortSignal,\n            })\n          : undefined;\n      const env = {\n        ...resolveCodexEnv(settings.auth),\n        BRIDGE_CHANNEL_TOKEN: token,\n        BRIDGE_WS_PORT: String(port),\n        ...(codexSkillSetup\n          ? {\n              HOME: codexSkillSetup.homeDir,\n              CODEX_HOME: codexSkillSetup.codexHomeDir,\n            }\n          : {}),\n        ...(respawnStrategy === 'replay'\n          ? { BRIDGE_REPLAY_FROM_DISK: '1' }\n          : {}),\n      };\n\n      if (respawnStrategy === undefined) {\n        await session.run({\n          command: `mkdir -p ${workDir} ${bridgeStateDir}`,\n          abortSignal: startOpts.abortSignal,\n        });\n      }\n\n      const proc = await session.spawn({\n        command: `node ${BOOTSTRAP_DIR}/bridge.mjs --workdir ${workDir} --bridge-state-dir ${bridgeStateDir} --bootstrap-dir ${BOOTSTRAP_DIR}`,\n        env,\n        abortSignal: startOpts.abortSignal,\n      });\n\n      const { port: boundPort } = await waitForBridgeReady({\n        proc,\n        timeoutMs,\n        abortSignal: startOpts.abortSignal,\n      });\n\n      const wsUrl =\n        (await sandboxSession.getPortUrl({\n          port: boundPort,\n          protocol: 'ws',\n        })) + `?agent_bridge_token=${encodeURIComponent(token)}`;\n\n      const channel: CodexChannel = new SandboxChannel({\n        connect: () => openWebSocket(wsUrl),\n        outboundSchema: outboundMessageSchema,\n        onDiagnostic,\n        // In replay mode the respawned bridge reloaded the finished turn from\n        // disk; seed the cursor and resume so it streams the tail (incl.\n        // `finish`).\n        ...(respawnStrategy === 'replay'\n          ? { initialLastSeenEventId: coords?.lastSeenEventId ?? 0 }\n          : {}),\n      });\n      await channel.open(\n        respawnStrategy === 'replay' ? { resume: true } : undefined,\n      );\n\n      return createSession({\n        sessionId: startOpts.sessionId,\n        channel,\n        proc,\n        model: settings.model ?? DEFAULT_CODEX_MODEL,\n        reasoningEffort: settings.reasoningEffort,\n        webSearch: settings.webSearch,\n        resumeThreadId: resumeThreadIdString,\n        isResume: respawnStrategy !== undefined,\n        seedResumeThreadOnFirstPrompt: respawnStrategy !== undefined,\n        rerunContinue: respawnStrategy === 'rerun',\n        bridgePort: boundPort,\n        bridgeToken: token,\n        sandboxId,\n        debug: startOpts.observability?.debug,\n        permissionMode: startOpts.permissionMode,\n      });\n    },\n  };\n}\n\nfunction resolveBridgePort(\n  sandboxSession: HarnessV1NetworkSandboxSession,\n  override: number | undefined,\n): number {\n  if (override !== undefined) return override;\n  if (sandboxSession.ports.length > 0) return sandboxSession.ports[0];\n  throw new HarnessCapabilityUnsupportedError({\n    harnessId: 'codex',\n    message:\n      'The codex harness needs a TCP port exposed by the sandbox. ' +\n      'Create the sandbox with `ports: [<port>]` or pass `createCodex({ port })`.',\n  });\n}\n\nasync function readBridgeAsset(name: string): Promise<string> {\n  const candidates = [\n    new URL(`./bridge/${name}`, import.meta.url),\n    new URL(`../bridge/${name}`, import.meta.url),\n  ];\n  let lastErr: unknown;\n  for (const url of candidates) {\n    try {\n      return await readFile(fileURLToPath(url), 'utf8');\n    } catch (err) {\n      const code = (err as NodeJS.ErrnoException).code;\n      if (code !== 'ENOENT') throw err;\n      lastErr = err;\n    }\n  }\n  throw lastErr ?? new Error(`bridge asset not found: ${name}`);\n}\n\nasync function writeSkills({\n  sandbox,\n  skills,\n  abortSignal,\n}: {\n  sandbox: Experimental_SandboxSession;\n  skills: ReadonlyArray<HarnessV1Skill>;\n  abortSignal?: AbortSignal;\n}): Promise<WriteSkillsResult> {\n  for (const skill of skills) {\n    safeCodexSkillName(skill.name);\n    for (const file of skill.files ?? []) {\n      safeCodexSkillFilePath({\n        skillName: skill.name,\n        filePath: file.path,\n      });\n    }\n  }\n\n  const homeDir = await resolveSandboxHomeDir({ sandbox, abortSignal });\n  const codexHomeDir = path.posix.join(homeDir, '.codex');\n  await sandbox.run({\n    command: `mkdir -p ${shellQuote(codexHomeDir)}`,\n    abortSignal,\n  });\n\n  const rootDir = path.posix.join(homeDir, '.agents', 'skills');\n  await sandbox.run({\n    command: `mkdir -p ${shellQuote(rootDir)}`,\n    abortSignal,\n  });\n\n  for (const skill of skills) {\n    const name = safeCodexSkillName(skill.name);\n    const skillDir = path.posix.join(rootDir, name);\n    const content = `---\\nname: ${skill.name}\\ndescription: ${skill.description}\\n---\\n\\n${skill.content}`;\n\n    await sandbox.writeTextFile({\n      path: path.posix.join(skillDir, 'SKILL.md'),\n      content,\n      abortSignal,\n    });\n\n    for (const file of skill.files ?? []) {\n      const filePath = safeCodexSkillFilePath({\n        skillName: skill.name,\n        filePath: file.path,\n      });\n      await sandbox.writeTextFile({\n        path: path.posix.join(skillDir, filePath),\n        content: file.content,\n        abortSignal,\n      });\n    }\n  }\n\n  return {\n    homeDir,\n    codexHomeDir,\n  };\n}\n\nasync function resolveSandboxHomeDir({\n  sandbox,\n  abortSignal,\n}: {\n  sandbox: Experimental_SandboxSession;\n  abortSignal?: AbortSignal;\n}): Promise<string> {\n  const result = await sandbox.run({\n    command: 'printf \"%s\" \"$HOME\"',\n    abortSignal,\n  });\n  const homeDir = result.stdout.trim();\n  if (result.exitCode !== 0 || !homeDir || !path.posix.isAbsolute(homeDir)) {\n    throw new Error(\n      `Unable to resolve sandbox HOME directory: ${result.stderr || result.stdout}`,\n    );\n  }\n  return homeDir;\n}\n\nfunction safeCodexSkillName(name: string): string {\n  if (!/^[A-Za-z0-9._-]+$/.test(name) || name === '.' || name === '..') {\n    throw new Error(`Invalid Codex skill name: ${name}`);\n  }\n  return name;\n}\n\nfunction safeCodexSkillFilePath({\n  skillName,\n  filePath,\n}: {\n  skillName: string;\n  filePath: string;\n}): string {\n  const normalized = path.posix.normalize(filePath);\n  if (\n    normalized === '.' ||\n    normalized.startsWith('../') ||\n    path.posix.isAbsolute(normalized)\n  ) {\n    throw new Error(\n      `Invalid Codex skill file path for ${skillName}: ${filePath}`,\n    );\n  }\n  return normalized;\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nasync function waitForBridgeReady({\n  proc,\n  timeoutMs,\n  abortSignal,\n}: {\n  proc: Experimental_SandboxProcess;\n  timeoutMs: number;\n  abortSignal: AbortSignal | undefined;\n}): Promise<{ port: number }> {\n  const reader = proc.stdout.pipeThrough(new TextDecoderStream()).getReader();\n\n  const decoder = lineDecoder();\n\n  const deadline = Date.now() + timeoutMs;\n  try {\n    while (true) {\n      if (abortSignal?.aborted) {\n        await proc.kill();\n        throw abortSignal.reason ?? new DOMException('Aborted', 'AbortError');\n      }\n      const remaining = deadline - Date.now();\n      if (remaining <= 0) {\n        await proc.kill();\n        throw new Error('codex bridge did not become ready in time.');\n      }\n      const { value, done } = (await Promise.race([\n        reader.read(),\n        new Promise(resolve =>\n          setTimeout(\n            () => resolve({ value: undefined, done: false }),\n            remaining,\n          ),\n        ),\n      ])) as ReadableStreamReadResult<string>;\n      if (done) {\n        throw new Error('codex bridge exited before becoming ready.');\n      }\n      if (value === undefined) continue;\n      for (const line of decoder.push(value)) {\n        const parsed = await safeParseJSON({\n          text: line,\n          schema: bridgeReadySchema,\n        });\n        if (parsed.success) return { port: parsed.value.port };\n      }\n    }\n  } finally {\n    reader.releaseLock();\n    void drainRest(proc.stdout);\n    /*\n     * Bridge stderr is the only diagnostic channel for what happens\n     * inside the sandbox once the bridge is running (uncaught\n     * exceptions, Codex SDK errors, network failures). Forward it\n     * line-by-line to the host console so a mid-turn bridge crash can\n     * be inspected from `pnpm dev` logs without redeploying. The\n     * bridge itself writes nothing to stderr in steady state, so this\n     * is silent on the happy path.\n     */\n    void forwardBridgeStderr(proc.stderr);\n  }\n}\n\nfunction lineDecoder() {\n  let buffer = '';\n  return {\n    push(chunk: string): string[] {\n      buffer += chunk;\n      const lines: string[] = [];\n      let nl: number;\n      while ((nl = buffer.indexOf('\\n')) !== -1) {\n        const raw = buffer.slice(0, nl);\n        buffer = buffer.slice(nl + 1);\n        const line = raw.replace(/\\r$/, '').trim();\n        if (line.length > 0) lines.push(line);\n      }\n      return lines;\n    },\n  };\n}\n\nasync function forwardBridgeStderr(\n  stream: ReadableStream<Uint8Array>,\n): Promise<void> {\n  try {\n    const reader = stream.pipeThrough(new TextDecoderStream()).getReader();\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) return;\n      if (value) {\n        const trimmed = value.endsWith('\\n') ? value.slice(0, -1) : value;\n        if (trimmed.length > 0) {\n          // eslint-disable-next-line no-console\n          console.log(`[bridge stderr] ${trimmed}`);\n        }\n      }\n    }\n  } catch {\n    // Reader errors are non-fatal — best-effort diagnostic only.\n  }\n}\n\nasync function drainRest(stream: ReadableStream<Uint8Array>): Promise<void> {\n  try {\n    const reader = stream.pipeThrough(new TextDecoderStream()).getReader();\n    while (true) {\n      const { done } = await reader.read();\n      if (done) return;\n    }\n  } catch {}\n}\n\nfunction openWebSocket(url: string): Promise<WebSocket> {\n  return new Promise((resolve, reject) => {\n    const ws = new WebSocket(url);\n    const onOpen = () => {\n      ws.off('error', onError);\n      resolve(ws);\n    };\n    const onError = (err: Error) => {\n      ws.off('open', onOpen);\n      reject(err);\n    };\n    ws.once('open', onOpen);\n    ws.once('error', onError);\n  });\n}\n\nfunction createSession({\n  sessionId,\n  channel,\n  proc,\n  model,\n  reasoningEffort,\n  webSearch,\n  resumeThreadId,\n  isResume,\n  seedResumeThreadOnFirstPrompt,\n  rerunContinue,\n  bridgePort,\n  bridgeToken,\n  sandboxId,\n  debug,\n  permissionMode,\n}: {\n  sessionId: string;\n  channel: CodexChannel;\n  /** Undefined on `attach` — the live bridge was spawned by another process. */\n  proc: Experimental_SandboxProcess | undefined;\n  model: string | undefined;\n  reasoningEffort: 'low' | 'medium' | 'high' | undefined;\n  webSearch: boolean | undefined;\n  resumeThreadId: string | undefined;\n  isResume: boolean;\n  seedResumeThreadOnFirstPrompt: boolean;\n  rerunContinue: boolean;\n  bridgePort: number;\n  bridgeToken: string;\n  sandboxId: string;\n  debug: HarnessV1DebugConfig | undefined;\n  permissionMode: HarnessV1PermissionMode | undefined;\n}): HarnessV1Session {\n  let stopped = false;\n  let stopPromise: Promise<void> | undefined;\n  /*\n   * Send the persisted threadId on the first prompt only when the bridge was\n   * respawned (rerun/replay) so it takes the `codex.resumeThread(...)` branch.\n   * An `attach`ed bridge already holds its threadState in memory and continues\n   * on its own, so it needs no seed.\n   */\n  let pendingResumeThreadId = seedResumeThreadOnFirstPrompt\n    ? resumeThreadId\n    : undefined;\n  /*\n   * Instructions are prepended to the first user message of a fresh session\n   * only. A resumed session (attach/replay/rerun) already carried them in its\n   * original first message (preserved in the persisted thread), so it starts\n   * \"applied\".\n   */\n  let instructionsApplied = isResume;\n\n  /*\n   * Latest codex thread id, cached from the bridge's `bridge-thread`\n   * announcements. Seeded from lifecycle state so `doDetach()` and `doStop()`\n   * can include a thread id even before this process has run a turn.\n   */\n  let latestThreadId = resumeThreadId;\n  channel.on('bridge-thread', msg => {\n    latestThreadId = msg.threadId;\n  });\n\n  /*\n   * Wire the channel into one turn's worth of events and return the control\n   * surface. Shared by `doPromptTurn` (which sends a `start` afterwards) and\n   * `doContinueTurn` (which attaches to an already-running/replayed turn, or sends\n   * a rerun `start`). The only difference between the two entry points is the\n   * `start` message, not the listener/abort/settle plumbing.\n   */\n  const wireTurn = (turnOpts: {\n    emit: (event: HarnessV1StreamPart) => void;\n    abortSignal?: AbortSignal;\n  }): HarnessV1PromptControl => {\n    let pendingResolve: (() => void) | undefined;\n    let pendingReject: ((err: unknown) => void) | undefined;\n    const done = new Promise<void>((resolve, reject) => {\n      pendingResolve = resolve;\n      pendingReject = reject;\n    });\n\n    const unsubs: Array<() => void> = [];\n    const forward = (event: HarnessV1StreamPart) => {\n      try {\n        turnOpts.emit(event);\n      } catch {}\n    };\n\n    const eventTypes = [\n      'stream-start',\n      'text-start',\n      'text-delta',\n      'text-end',\n      'reasoning-start',\n      'reasoning-delta',\n      'reasoning-end',\n      'tool-call',\n      'tool-approval-request',\n      'tool-result',\n      'file-change',\n      'finish-step',\n      'raw',\n    ] as const;\n    let isSettled = false;\n    const settleSuccess = () => {\n      if (isSettled) return;\n      isSettled = true;\n      for (const u of unsubs) u();\n      pendingResolve!();\n    };\n    const settleError = (err: unknown) => {\n      if (isSettled) return;\n      isSettled = true;\n      for (const u of unsubs) u();\n      pendingReject!(err);\n    };\n\n    for (const type of eventTypes) {\n      unsubs.push(\n        channel.on(type, msg => {\n          forward(msg);\n        }),\n      );\n    }\n    unsubs.push(\n      channel.on('finish', msg => {\n        forward(msg);\n        settleSuccess();\n      }),\n    );\n    unsubs.push(\n      channel.on('error', msg => {\n        forward(msg);\n        settleError(msg.error);\n      }),\n    );\n\n    /*\n     * A `'suspended'` close is a graceful slice-boundary freeze the host\n     * initiated (`doSuspendTurn`): the turn keeps running in the bridge and its\n     * tail is replayed to the next process, so wind this turn down cleanly\n     * rather than failing it. Any other close mid-turn is an unexpected drop.\n     */\n    const onClose = (_code?: number, reason?: string) => {\n      if (isSettled) return;\n      if (reason === 'suspended') {\n        settleSuccess();\n        return;\n      }\n      settleError(new Error('codex bridge closed before the turn finished.'));\n    };\n    channel.onClose(onClose);\n\n    const onAbort = () => {\n      if (isSettled) return;\n      try {\n        channel.send({ type: 'abort' });\n      } catch {}\n      settleError(\n        turnOpts.abortSignal?.reason ??\n          new DOMException('Aborted', 'AbortError'),\n      );\n    };\n    if (turnOpts.abortSignal) {\n      if (turnOpts.abortSignal.aborted) {\n        onAbort();\n      } else {\n        turnOpts.abortSignal.addEventListener('abort', onAbort, {\n          once: true,\n        });\n      }\n    }\n\n    return {\n      submitToolResult: async input => {\n        channel.send({\n          type: 'tool-result',\n          toolCallId: input.toolCallId,\n          output: input.output,\n          isError: input.isError,\n        });\n      },\n      submitToolApproval: async input => {\n        channel.send({\n          type: 'tool-approval-response',\n          approvalId: input.approvalId,\n          approved: input.approved,\n          reason: input.reason,\n        });\n      },\n      submitUserMessage: async text => {\n        channel.send({ type: 'user-message', text });\n      },\n      done,\n    };\n  };\n\n  return {\n    sessionId,\n    isResume,\n    modelId: model,\n    doPromptTurn: async promptOpts => {\n      const control = wireTurn({\n        emit: promptOpts.emit,\n        abortSignal: promptOpts.abortSignal,\n      });\n\n      const applyInstructions =\n        !instructionsApplied && !!promptOpts.instructions;\n      instructionsApplied = true;\n\n      const startMessage = {\n        type: 'start' as const,\n        prompt: extractUserText(promptOpts.prompt),\n        ...(applyInstructions ? { instructions: promptOpts.instructions } : {}),\n        tools: (promptOpts.tools ?? []).map(t => ({\n          name: t.name,\n          description: t.description,\n          inputSchema: t.inputSchema,\n        })),\n        model,\n        reasoningEffort,\n        webSearch,\n        ...(permissionMode ? { permissionMode } : {}),\n        ...(pendingResumeThreadId\n          ? { resumeThreadId: pendingResumeThreadId }\n          : {}),\n        ...(debug ? { debug } : {}),\n      };\n      pendingResumeThreadId = undefined;\n      channel.send(startMessage);\n\n      return control;\n    },\n    doContinueTurn: async continueOpts => {\n      const control = wireTurn({\n        emit: continueOpts.emit,\n        abortSignal: continueOpts.abortSignal,\n      });\n\n      /*\n       * attach / replay: the still-running (or disk-replayed) turn streams into\n       * the wired listeners — `doStart` opened the channel with `{ resume: true }`\n       * so the bridge replays everything past the persisted cursor (including a\n       * `finish` if the turn ended during the gap). No `start` is sent: issuing\n       * one would clear the bridge's replay log and begin a new turn. Lossless.\n       *\n       * rerun: the bridge was respawned with no in-flight turn to attach to, so\n       * re-drive codex's own thread via `resumeThreadId`. Lossy — work in flight\n       * at the interruption is recomputed. This is the rare bridge-died\n       * fallback; the common slice path is `attach`.\n       */\n      if (rerunContinue) {\n        const threadId = pendingResumeThreadId ?? latestThreadId;\n        pendingResumeThreadId = undefined;\n        channel.send({\n          type: 'start' as const,\n          /*\n           * A continuation nudge rather than an empty prompt: `resumeThreadId`\n           * rehydrates the prior thread, and this is the new user turn that\n           * drives it forward. Keeping it non-empty avoids handing the runtime\n           * an empty user message (and mirrors the claude-code adapter, where an\n           * empty text block trips the Anthropic API's `cache_control` rule).\n           */\n          prompt: 'Continue.',\n          tools: (continueOpts.tools ?? []).map(t => ({\n            name: t.name,\n            description: t.description,\n            inputSchema: t.inputSchema,\n          })),\n          model,\n          reasoningEffort,\n          webSearch,\n          ...(permissionMode ? { permissionMode } : {}),\n          ...(threadId ? { resumeThreadId: threadId } : {}),\n          ...(debug ? { debug } : {}),\n        });\n      }\n\n      return control;\n    },\n    doCompact: async () => {\n      /*\n       * Codex compacts its context automatically inside the core turn loop\n       * (~90% of the model context window), but the `codex exec` transport this\n       * adapter drives exposes no manual compaction trigger and emits no\n       * compaction event. Manual `compact()` is therefore unsupported; Codex's\n       * own auto-compaction continues to run regardless.\n       */\n      throw new HarnessCapabilityUnsupportedError({\n        message:\n          \"Harness 'codex' does not support manual compaction; Codex auto-compacts its context internally.\",\n        harnessId: 'codex',\n      });\n    },\n    doDetach: async () => {\n      if (stopped) {\n        throw new Error(\n          `codex session ${sessionId} is already stopped; cannot detach.`,\n        );\n      }\n      stopped = true;\n      const lastSeenEventId = await channel.suspend();\n      const payload: HarnessV1ResumeSessionState = {\n        type: 'resume-session',\n        harnessId: 'codex',\n        specificationVersion: 'harness-v1',\n        data: {\n          ...(latestThreadId ? { threadId: latestThreadId } : {}),\n          bridge: {\n            port: bridgePort,\n            token: bridgeToken,\n            lastSeenEventId,\n            sandboxId,\n          },\n        },\n      };\n      return payload;\n    },\n    doDestroy: async () => {\n      if (stopped) return stopPromise;\n      stopped = true;\n      stopPromise = (async () => {\n        // Tell the channel we are tearing down so the bridge's post-shutdown\n        // socket close finalises instead of triggering a reconnect.\n        channel.beginClose();\n        try {\n          if (!channel.isClosed()) {\n            channel.send({ type: 'shutdown' });\n          }\n        } catch {}\n        let stopTimer: ReturnType<typeof setTimeout> | undefined;\n        try {\n          if (proc) {\n            await Promise.race([\n              proc.wait(),\n              new Promise<void>(resolve => {\n                stopTimer = setTimeout(resolve, 5000);\n                stopTimer.unref?.();\n              }),\n            ]);\n          }\n        } finally {\n          if (stopTimer) clearTimeout(stopTimer);\n          try {\n            await proc?.kill();\n          } catch {}\n          channel.close();\n        }\n      })();\n      return stopPromise;\n    },\n    doStop: async () => {\n      if (stopped) {\n        throw new Error(\n          `codex session ${sessionId} is already stopped; cannot stop.`,\n        );\n      }\n      stopped = true;\n      /*\n       * If the bridge's channel already closed (e.g. mid-turn WS drop)\n       * there is no one to ack a `detach` message. Synthesize an empty\n       * payload — the workdir is still captured by the sandbox snapshot\n       * during the subsequent `sandboxSession.stop()`, so the next turn can\n       * resume the filesystem state. The trade-off: we lose\n       * `threadId`, so the codex CLI starts a fresh thread on the\n       * preserved workdir rather than resuming the prior conversation\n       * inside Codex's runtime. Ability to continue beats throwing.\n       */\n      // Tell the channel we are tearing down so the bridge's post-detach\n      // socket close finalises instead of triggering a reconnect.\n      channel.beginClose();\n      const data: unknown = channel.isClosed()\n        ? {}\n        : await new Promise<unknown>((resolve, reject) => {\n            const timer = setTimeout(() => {\n              unsub();\n              reject(\n                new Error(\n                  `codex session ${sessionId} did not reply to detach within 5s.`,\n                ),\n              );\n            }, 5000);\n            timer.unref?.();\n            const unsub = channel.on('bridge-detach', msg => {\n              clearTimeout(timer);\n              unsub();\n              resolve(msg.data);\n            });\n            try {\n              channel.send({ type: 'detach' });\n            } catch (err) {\n              clearTimeout(timer);\n              unsub();\n              reject(err);\n            }\n          });\n\n      let stopTimer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        if (proc) {\n          await Promise.race([\n            proc.wait(),\n            new Promise<void>(resolve => {\n              stopTimer = setTimeout(resolve, 5000);\n              stopTimer.unref?.();\n            }),\n          ]);\n        }\n      } finally {\n        if (stopTimer) clearTimeout(stopTimer);\n        try {\n          await proc?.kill();\n        } catch {}\n        channel.close();\n      }\n\n      const payload: HarnessV1ResumeSessionState = {\n        type: 'resume-session',\n        harnessId: 'codex',\n        specificationVersion: 'harness-v1',\n        data: (data ?? {}) as HarnessV1ResumeSessionState['data'],\n      };\n      return payload;\n    },\n    doSuspendTurn: async () => {\n      if (stopped) {\n        throw new Error(\n          `codex session ${sessionId} is stopped; cannot suspend.`,\n        );\n      }\n      stopped = true;\n      /*\n       * Gracefully freeze the active turn at a precise cursor. `channel.suspend`\n       * stops processing inbound frames (the cursor stops advancing exactly at\n       * the last delivered event), drains what was already dispatched, then\n       * closes the host socket with reason `'suspended'` — which `wireTurn`'s\n       * `onClose` treats as a clean turn end. The bridge keeps the turn running\n       * and accumulates events past the cursor for the next slice to replay. The\n       * sandbox process is deliberately left alive (no `shutdown`/`detach`).\n       */\n      const lastSeenEventId = await channel.suspend();\n      const payload: HarnessV1ContinueTurnState = {\n        type: 'continue-turn',\n        harnessId: 'codex',\n        specificationVersion: 'harness-v1',\n        data: {\n          ...(latestThreadId ? { threadId: latestThreadId } : {}),\n          bridge: {\n            port: bridgePort,\n            token: bridgeToken,\n            lastSeenEventId,\n            sandboxId,\n          },\n        },\n      };\n      return payload;\n    },\n  };\n}\n\n/*\n * Reduce a `HarnessV1Prompt` to the plain user text the bridge forwards\n * to the Codex SDK. File and image parts on the message are not yet\n * supported by the underlying runtime — throw rather than silently drop\n * them so callers learn about the gap instead of seeing mysteriously\n * truncated prompts.\n */\nfunction extractUserText(prompt: HarnessV1Prompt): string {\n  if (typeof prompt === 'string') return prompt;\n  const { content } = prompt;\n  if (typeof content === 'string') return content;\n  const parts: string[] = [];\n  for (const part of content) {\n    if (part.type !== 'text') {\n      throw new HarnessCapabilityUnsupportedError({\n        harnessId: 'codex',\n        message: `The codex harness does not yet support user message parts of type '${part.type}'. Pass a string or a user message whose content contains only text parts.`,\n      });\n    }\n    parts.push(part.text);\n  }\n  return parts.join('\\n\\n');\n}\n","export type CodexAuthOptions = {\n  readonly openaiCompatible?: {\n    readonly apiKey?: string;\n    readonly baseUrl?: string;\n    readonly modelProviderName?: string;\n    readonly queryParamsJson?: string;\n  };\n  readonly openai?: {\n    readonly apiKey?: string;\n    readonly baseUrl?: string;\n    readonly organization?: string;\n    readonly project?: string;\n  };\n  readonly gateway?: {\n    readonly apiKey?: string;\n    readonly baseUrl?: string;\n  };\n};\n\n/**\n * Resolve the environment-variable blob the codex bridge needs. Precedence:\n *\n *   1. Explicit `auth.openaiCompatible` — pin to a custom OpenAI-compatible endpoint.\n *   2. Explicit `auth.openai` — pin to direct OpenAI auth.\n *   3. Explicit `auth.gateway` — pin to Vercel AI Gateway.\n *   4. Auto-detect from the host process env: gateway first\n *      (`AI_GATEWAY_API_KEY`), then `CODEX_API_KEY` / `OPENAI_API_KEY`.\n */\nexport function resolveCodexEnv(\n  auth: CodexAuthOptions | undefined,\n  processEnv: Record<string, string | undefined> = process.env,\n): Record<string, string> {\n  if (auth?.openaiCompatible) {\n    return pickOpenAICompatible(auth.openaiCompatible, processEnv);\n  }\n  if (auth?.openai) {\n    return pickOpenAI({ explicit: auth.openai, processEnv });\n  }\n  if (auth?.gateway) {\n    return pickGateway(auth.gateway, processEnv);\n  }\n  if (processEnv.AI_GATEWAY_API_KEY) {\n    return pickGateway({}, processEnv);\n  }\n  return pickOpenAI({ processEnv });\n}\n\nfunction pickOpenAICompatible(\n  explicit: NonNullable<CodexAuthOptions['openaiCompatible']>,\n  processEnv: Record<string, string | undefined>,\n): Record<string, string> {\n  const env: Record<string, string> = {};\n  const apiKey =\n    explicit.apiKey ?? processEnv.OPENAI_API_KEY ?? processEnv.CODEX_API_KEY;\n  if (apiKey) env.CODEX_API_KEY = apiKey;\n  if (explicit.baseUrl) env.OPENAI_BASE_URL = explicit.baseUrl;\n  if (explicit.modelProviderName)\n    env.CODEX_MODEL_PROVIDER_NAME = explicit.modelProviderName;\n  if (explicit.queryParamsJson)\n    env.OPENAI_QUERY_PARAMS_JSON = explicit.queryParamsJson;\n  return env;\n}\n\nfunction pickOpenAI({\n  explicit,\n  processEnv,\n}: {\n  explicit?: NonNullable<CodexAuthOptions['openai']>;\n  processEnv: Record<string, string | undefined>;\n}): Record<string, string> {\n  const env: Record<string, string> = {};\n  const apiKey =\n    explicit?.apiKey ?? processEnv.OPENAI_API_KEY ?? processEnv.CODEX_API_KEY;\n  if (apiKey) env.CODEX_API_KEY = apiKey;\n  const baseUrl = explicit?.baseUrl ?? processEnv.OPENAI_BASE_URL;\n  if (baseUrl) env.OPENAI_BASE_URL = baseUrl;\n  const organization = explicit?.organization ?? processEnv.OPENAI_ORGANIZATION;\n  if (organization) env.OPENAI_ORGANIZATION = organization;\n  const project = explicit?.project ?? processEnv.OPENAI_PROJECT;\n  if (project) env.OPENAI_PROJECT = project;\n  return env;\n}\n\nfunction pickGateway(\n  explicit: NonNullable<CodexAuthOptions['gateway']>,\n  processEnv: Record<string, string | undefined>,\n): Record<string, string> {\n  const apiKey = explicit.apiKey ?? processEnv.AI_GATEWAY_API_KEY;\n  const baseUrl =\n    explicit.baseUrl ??\n    processEnv.AI_GATEWAY_BASE_URL ??\n    'https://ai-gateway.vercel.sh/v1';\n  const env: Record<string, string> = {};\n  if (apiKey) {\n    env.AI_GATEWAY_API_KEY = apiKey;\n    env.CODEX_API_KEY = apiKey;\n  }\n  env.AI_GATEWAY_BASE_URL = baseUrl;\n  return env;\n}\n","import {\n  harnessV1BridgeInboundCommandSchemas,\n  harnessV1BridgeOutboundMessageSchema,\n  harnessV1BridgeReadySchema,\n  harnessV1BridgeStartBaseSchema,\n} from '@ai-sdk/harness';\nimport { z } from 'zod/v4';\n\n/*\n * Codex's bridge wire protocol. The outbound events (including `file-change`\n * and the `bridge-thread` resume coordinate), transport frames, shared inbound\n * commands, and `bridge-ready` line all come from the shared `@ai-sdk/harness`\n * protocol — the only Codex-specific piece is the `start` payload.\n */\n\nexport const outboundMessageSchema = harnessV1BridgeOutboundMessageSchema;\nexport type OutboundMessage = z.infer<typeof outboundMessageSchema>;\n\nexport const startMessageSchema = harnessV1BridgeStartBaseSchema.extend({\n  instructions: z.string().optional(),\n  reasoningEffort: z.enum(['low', 'medium', 'high']).optional(),\n  webSearch: z.boolean().optional(),\n  // Resume signal. When supplied, the bridge calls\n  // `codex.resumeThread(resumeThreadId, …)` instead of starting a fresh thread.\n  // The host sources the id from lifecycle state `data` cached from a prior\n  // `agent.detach`.\n  resumeThreadId: z.string().optional(),\n});\n\nexport type StartMessage = z.infer<typeof startMessageSchema>;\n\nexport const inboundMessageSchema = z.discriminatedUnion('type', [\n  startMessageSchema,\n  ...harnessV1BridgeInboundCommandSchemas,\n]);\nexport type InboundMessage = z.infer<typeof inboundMessageSchema>;\n\nexport const bridgeReadySchema = harnessV1BridgeReadySchema;\nexport type BridgeReady = z.infer<typeof bridgeReadySchema>;\n","import { createCodex } from './codex-harness';\n\n/**\n * Default `codex` harness instance with no overrides — suitable for the\n * common case where the underlying `codex` CLI's defaults are fine.\n * Equivalent to `createCodex()`.\n */\nexport const codex = createCodex();\n\nexport { createCodex } from './codex-harness';\nexport type { CodexHarnessSettings } from './codex-harness';\nexport type { CodexAuthOptions } from './codex-auth';\n"],"mappings":";AAAA,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAcK;AACP,SAAS,iBAAiB,sBAAsB;AAChD;AAAA,EACE;AAAA,OAGK;AACP,SAAS,iBAAiB;AAC1B,SAAS,KAAAA,UAAS;;;ACDX,SAAS,gBACd,MACA,aAAiD,QAAQ,KACjC;AACxB,MAAI,MAAM,kBAAkB;AAC1B,WAAO,qBAAqB,KAAK,kBAAkB,UAAU;AAAA,EAC/D;AACA,MAAI,MAAM,QAAQ;AAChB,WAAO,WAAW,EAAE,UAAU,KAAK,QAAQ,WAAW,CAAC;AAAA,EACzD;AACA,MAAI,MAAM,SAAS;AACjB,WAAO,YAAY,KAAK,SAAS,UAAU;AAAA,EAC7C;AACA,MAAI,WAAW,oBAAoB;AACjC,WAAO,YAAY,CAAC,GAAG,UAAU;AAAA,EACnC;AACA,SAAO,WAAW,EAAE,WAAW,CAAC;AAClC;AAEA,SAAS,qBACP,UACA,YACwB;AACxB,QAAM,MAA8B,CAAC;AACrC,QAAM,SACJ,SAAS,UAAU,WAAW,kBAAkB,WAAW;AAC7D,MAAI,OAAQ,KAAI,gBAAgB;AAChC,MAAI,SAAS,QAAS,KAAI,kBAAkB,SAAS;AACrD,MAAI,SAAS;AACX,QAAI,4BAA4B,SAAS;AAC3C,MAAI,SAAS;AACX,QAAI,2BAA2B,SAAS;AAC1C,SAAO;AACT;AAEA,SAAS,WAAW;AAAA,EAClB;AAAA,EACA;AACF,GAG2B;AACzB,QAAM,MAA8B,CAAC;AACrC,QAAM,SACJ,UAAU,UAAU,WAAW,kBAAkB,WAAW;AAC9D,MAAI,OAAQ,KAAI,gBAAgB;AAChC,QAAM,UAAU,UAAU,WAAW,WAAW;AAChD,MAAI,QAAS,KAAI,kBAAkB;AACnC,QAAM,eAAe,UAAU,gBAAgB,WAAW;AAC1D,MAAI,aAAc,KAAI,sBAAsB;AAC5C,QAAM,UAAU,UAAU,WAAW,WAAW;AAChD,MAAI,QAAS,KAAI,iBAAiB;AAClC,SAAO;AACT;AAEA,SAAS,YACP,UACA,YACwB;AACxB,QAAM,SAAS,SAAS,UAAU,WAAW;AAC7C,QAAM,UACJ,SAAS,WACT,WAAW,uBACX;AACF,QAAM,MAA8B,CAAC;AACrC,MAAI,QAAQ;AACV,QAAI,qBAAqB;AACzB,QAAI,gBAAgB;AAAA,EACtB;AACA,MAAI,sBAAsB;AAC1B,SAAO;AACT;;;ACnGA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AASX,IAAM,wBAAwB;AAG9B,IAAM,qBAAqB,+BAA+B,OAAO;AAAA,EACtE,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,iBAAiB,EAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5D,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAIM,IAAM,uBAAuB,EAAE,mBAAmB,QAAQ;AAAA,EAC/D;AAAA,EACA,GAAG;AACL,CAAC;AAGM,IAAM,oBAAoB;;;AFkBjC,IAAM,sBAAsB;AAuC5B,IAAM,sBAAsB;AAAA,EAC1B,MAAM,WAAW,QAAQ;AAAA,IACvB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,aAAaC,GAAE,OAAO,EAAE,SAASA,GAAE,OAAO,EAAE,CAAC;AAAA,EAC/C,CAAC;AAAA,EACD,WAAW,WAAW,aAAa;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,aAAaA,GAAE,OAAO,EAAE,OAAOA,GAAE,OAAO,EAAE,CAAC;AAAA,EAC7C,CAAC;AACH;AAcA,IAAM,gBAAgB;AAOtB,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EAClC,MAAMA,GAAE,OAAO;AAAA,EACf,OAAOA,GAAE,OAAO;AAAA,EAChB,iBAAiBA,GAAE,OAAO;AAAA,EAC1B,WAAWA,GAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAUD,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EACtC,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,QAAQ,mBAAmB,SAAS;AACtC,CAAC;AAIM,SAAS,YACd,WAAiC,CAAC,GACK;AACvC,MAAI;AAEJ,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,WAAW;AAAA,IACX,cAAc;AAAA,IACd,8BAA8B;AAAA,IAC9B,sBAAsB;AAAA,IACtB,cAAc,YAAY;AACxB,UAAI,mBAAmB,KAAM,QAAO;AACpC,YAAM,CAAC,KAAK,MAAM,QAAQ,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACzD,gBAAgB,cAAc;AAAA,QAC9B,gBAAgB,gBAAgB;AAAA,QAChC,gBAAgB,WAAW;AAAA,QAC3B,gBAAgB,mBAAmB;AAAA,MACrC,CAAC;AACD,wBAAkB;AAAA,QAChB,WAAW;AAAA,QACX,cAAc;AAAA,QACd,OAAO;AAAA,UACL,EAAE,MAAM,GAAG,aAAa,iBAAiB,SAAS,IAAI;AAAA,UACtD,EAAE,MAAM,GAAG,aAAa,mBAAmB,SAAS,KAAK;AAAA,UACzD,EAAE,MAAM,GAAG,aAAa,eAAe,SAAS,OAAO;AAAA,UACvD;AAAA,YACE,MAAM,GAAG,aAAa;AAAA,YACtB,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA,UAAU;AAAA,UACR,EAAE,SAAS,YAAY,aAAa,GAAG;AAAA,UACvC;AAAA,YACE,SAAS,cAAc,aAAa,0CAA0C,aAAa;AAAA,UAC7F;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,SAAS,OAAM,cAAa;AAC1B,UACE,UAAU,kBAAkB,QAC5B,UAAU,mBAAmB,aAC7B;AACA,cAAM,IAAI,kCAAkC;AAAA,UAC1C,SACE;AAAA,UACF,WAAW;AAAA,QACb,CAAC;AAAA,MACH;AACA,YAAM,iBAAiB,UAAU;AACjC,YAAM,UAAU,eAAe,WAAW;AAC1C,YAAM,YAAY,eAAe;AACjC,YAAM,iBAAiB,UAAU,gBAAgB,UAAU;AAC3D,YAAM,WAAW,kBAAkB;AACnC,YAAM,aAAa,UAAU,gBAAgB;AAC7C,YAAM,aACJ,YAAY,OAAO,gBAAgB,SAAS,WACvC,eAAe,OAIhB;AACN,YAAM,iBAAiB,YAAY;AACnC,YAAM,uBACJ,OAAO,mBAAmB,YAAY,eAAe,SAAS,IAC1D,iBACA;AACN,YAAM,SAAS,YAAY;AAE3B,YAAM,UAAU,UAAU;AAC1B,YAAM,iBAAiB,GAAG,eAAe,uBAAuB,gBAAgB,UAAU,SAAS;AACnG,YAAM,iBAAiB,GAAG,cAAc;AACxC,YAAM,YAAY,SAAS,oBAAoB;AAK/C,YAAM,SAAS,UAAU,eAAe;AACxC,YAAM,eAAe,SACjB,CAAC,UACC;AAAA,QACE,mCAAmC,OAAO;AAAA,UACxC,WAAW,UAAU;AAAA,UACrB,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AAAA,MACH,IACF;AAUJ,UAAI,QAAQ;AACV,YAAI;AACF,gBAAM,YACH,MAAM,eAAe,WAAW;AAAA,YAC/B,MAAM,OAAO;AAAA,YACb,UAAU;AAAA,UACZ,CAAC,IAAK,uBAAuB,mBAAmB,OAAO,KAAK,CAAC;AAC/D,gBAAM,gBAA8B,IAAI,eAAe;AAAA,YACrD,SAAS,MAAM,cAAc,SAAS;AAAA,YACtC,gBAAgB;AAAA,YAChB,wBAAwB,OAAO;AAAA,YAC/B;AAAA,UACF,CAAC;AACD,gBAAM,cAAc,KAAK,aAAa,EAAE,QAAQ,KAAK,IAAI,MAAS;AAClE,iBAAO,cAAc;AAAA,YACnB,WAAW,UAAU;AAAA,YACrB,SAAS;AAAA;AAAA,YAET,MAAM;AAAA,YACN,OAAO,SAAS,SAAS;AAAA,YACzB,iBAAiB,SAAS;AAAA,YAC1B,WAAW,SAAS;AAAA,YACpB,gBAAgB;AAAA,YAChB,UAAU;AAAA,YACV,+BAA+B;AAAA,YAC/B,eAAe;AAAA,YACf,YAAY,OAAO;AAAA,YACnB,aAAa,OAAO;AAAA,YACpB;AAAA,YACA,OAAO,UAAU,eAAe;AAAA,YAChC,gBAAgB,UAAU;AAAA,UAC5B,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF;AAUA,UAAI,kBAAoD,WACpD,UACA;AACJ,UAAI,UAAU,YAAY;AACxB,cAAM,SAAS,MAAM,QAAQ;AAAA,UAC3B,QAAQ,aAAa;AAAA,YACnB,MAAM,GAAG,cAAc;AAAA,YACvB,aAAa,UAAU;AAAA,UACzB,CAAC;AAAA,QACH,EAAE,MAAM,MAAM,IAAI;AAClB,YAAK,MAAM,gBAAgB,MAAM,MAAO,UAAU;AAChD,4BAAkB;AAAA,QACpB;AAAA,MACF;AAEA,YAAM,OAAO,kBAAkB,gBAAgB,SAAS,IAAI;AAC5D,YAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,KAAK;AAC5C,YAAM,kBACJ,UAAU,UAAU,UAAU,OAAO,SAAS,IAC1C,MAAM,YAAY;AAAA,QAChB,SAAS;AAAA,QACT,QAAQ,UAAU;AAAA,QAClB,aAAa,UAAU;AAAA,MACzB,CAAC,IACD;AACN,YAAM,MAAM;AAAA,QACV,GAAG,gBAAgB,SAAS,IAAI;AAAA,QAChC,sBAAsB;AAAA,QACtB,gBAAgB,OAAO,IAAI;AAAA,QAC3B,GAAI,kBACA;AAAA,UACE,MAAM,gBAAgB;AAAA,UACtB,YAAY,gBAAgB;AAAA,QAC9B,IACA,CAAC;AAAA,QACL,GAAI,oBAAoB,WACpB,EAAE,yBAAyB,IAAI,IAC/B,CAAC;AAAA,MACP;AAEA,UAAI,oBAAoB,QAAW;AACjC,cAAM,QAAQ,IAAI;AAAA,UAChB,SAAS,YAAY,OAAO,IAAI,cAAc;AAAA,UAC9C,aAAa,UAAU;AAAA,QACzB,CAAC;AAAA,MACH;AAEA,YAAM,OAAO,MAAM,QAAQ,MAAM;AAAA,QAC/B,SAAS,QAAQ,aAAa,yBAAyB,OAAO,uBAAuB,cAAc,oBAAoB,aAAa;AAAA,QACpI;AAAA,QACA,aAAa,UAAU;AAAA,MACzB,CAAC;AAED,YAAM,EAAE,MAAM,UAAU,IAAI,MAAM,mBAAmB;AAAA,QACnD;AAAA,QACA;AAAA,QACA,aAAa,UAAU;AAAA,MACzB,CAAC;AAED,YAAM,QACH,MAAM,eAAe,WAAW;AAAA,QAC/B,MAAM;AAAA,QACN,UAAU;AAAA,MACZ,CAAC,IAAK,uBAAuB,mBAAmB,KAAK,CAAC;AAExD,YAAM,UAAwB,IAAI,eAAe;AAAA,QAC/C,SAAS,MAAM,cAAc,KAAK;AAAA,QAClC,gBAAgB;AAAA,QAChB;AAAA;AAAA;AAAA;AAAA,QAIA,GAAI,oBAAoB,WACpB,EAAE,wBAAwB,QAAQ,mBAAmB,EAAE,IACvD,CAAC;AAAA,MACP,CAAC;AACD,YAAM,QAAQ;AAAA,QACZ,oBAAoB,WAAW,EAAE,QAAQ,KAAK,IAAI;AAAA,MACpD;AAEA,aAAO,cAAc;AAAA,QACnB,WAAW,UAAU;AAAA,QACrB;AAAA,QACA;AAAA,QACA,OAAO,SAAS,SAAS;AAAA,QACzB,iBAAiB,SAAS;AAAA,QAC1B,WAAW,SAAS;AAAA,QACpB,gBAAgB;AAAA,QAChB,UAAU,oBAAoB;AAAA,QAC9B,+BAA+B,oBAAoB;AAAA,QACnD,eAAe,oBAAoB;AAAA,QACnC,YAAY;AAAA,QACZ,aAAa;AAAA,QACb;AAAA,QACA,OAAO,UAAU,eAAe;AAAA,QAChC,gBAAgB,UAAU;AAAA,MAC5B,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,SAAS,kBACP,gBACA,UACQ;AACR,MAAI,aAAa,OAAW,QAAO;AACnC,MAAI,eAAe,MAAM,SAAS,EAAG,QAAO,eAAe,MAAM,CAAC;AAClE,QAAM,IAAI,kCAAkC;AAAA,IAC1C,WAAW;AAAA,IACX,SACE;AAAA,EAEJ,CAAC;AACH;AAEA,eAAe,gBAAgB,MAA+B;AAC5D,QAAM,aAAa;AAAA,IACjB,IAAI,IAAI,YAAY,IAAI,IAAI,YAAY,GAAG;AAAA,IAC3C,IAAI,IAAI,aAAa,IAAI,IAAI,YAAY,GAAG;AAAA,EAC9C;AACA,MAAI;AACJ,aAAW,OAAO,YAAY;AAC5B,QAAI;AACF,aAAO,MAAM,SAAS,cAAc,GAAG,GAAG,MAAM;AAAA,IAClD,SAAS,KAAK;AACZ,YAAM,OAAQ,IAA8B;AAC5C,UAAI,SAAS,SAAU,OAAM;AAC7B,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,WAAW,IAAI,MAAM,2BAA2B,IAAI,EAAE;AAC9D;AAEA,eAAe,YAAY;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AACF,GAI+B;AAC7B,aAAW,SAAS,QAAQ;AAC1B,uBAAmB,MAAM,IAAI;AAC7B,eAAW,QAAQ,MAAM,SAAS,CAAC,GAAG;AACpC,6BAAuB;AAAA,QACrB,WAAW,MAAM;AAAA,QACjB,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,sBAAsB,EAAE,SAAS,YAAY,CAAC;AACpE,QAAM,eAAe,KAAK,MAAM,KAAK,SAAS,QAAQ;AACtD,QAAM,QAAQ,IAAI;AAAA,IAChB,SAAS,YAAY,WAAW,YAAY,CAAC;AAAA,IAC7C;AAAA,EACF,CAAC;AAED,QAAM,UAAU,KAAK,MAAM,KAAK,SAAS,WAAW,QAAQ;AAC5D,QAAM,QAAQ,IAAI;AAAA,IAChB,SAAS,YAAY,WAAW,OAAO,CAAC;AAAA,IACxC;AAAA,EACF,CAAC;AAED,aAAW,SAAS,QAAQ;AAC1B,UAAM,OAAO,mBAAmB,MAAM,IAAI;AAC1C,UAAM,WAAW,KAAK,MAAM,KAAK,SAAS,IAAI;AAC9C,UAAM,UAAU;AAAA,QAAc,MAAM,IAAI;AAAA,eAAkB,MAAM,WAAW;AAAA;AAAA;AAAA,EAAY,MAAM,OAAO;AAEpG,UAAM,QAAQ,cAAc;AAAA,MAC1B,MAAM,KAAK,MAAM,KAAK,UAAU,UAAU;AAAA,MAC1C;AAAA,MACA;AAAA,IACF,CAAC;AAED,eAAW,QAAQ,MAAM,SAAS,CAAC,GAAG;AACpC,YAAM,WAAW,uBAAuB;AAAA,QACtC,WAAW,MAAM;AAAA,QACjB,UAAU,KAAK;AAAA,MACjB,CAAC;AACD,YAAM,QAAQ,cAAc;AAAA,QAC1B,MAAM,KAAK,MAAM,KAAK,UAAU,QAAQ;AAAA,QACxC,SAAS,KAAK;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB;AAAA,EACnC;AAAA,EACA;AACF,GAGoB;AAClB,QAAM,SAAS,MAAM,QAAQ,IAAI;AAAA,IAC/B,SAAS;AAAA,IACT;AAAA,EACF,CAAC;AACD,QAAM,UAAU,OAAO,OAAO,KAAK;AACnC,MAAI,OAAO,aAAa,KAAK,CAAC,WAAW,CAAC,KAAK,MAAM,WAAW,OAAO,GAAG;AACxE,UAAM,IAAI;AAAA,MACR,6CAA6C,OAAO,UAAU,OAAO,MAAM;AAAA,IAC7E;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAsB;AAChD,MAAI,CAAC,oBAAoB,KAAK,IAAI,KAAK,SAAS,OAAO,SAAS,MAAM;AACpE,UAAM,IAAI,MAAM,6BAA6B,IAAI,EAAE;AAAA,EACrD;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB;AAAA,EAC9B;AAAA,EACA;AACF,GAGW;AACT,QAAM,aAAa,KAAK,MAAM,UAAU,QAAQ;AAChD,MACE,eAAe,OACf,WAAW,WAAW,KAAK,KAC3B,KAAK,MAAM,WAAW,UAAU,GAChC;AACA,UAAM,IAAI;AAAA,MACR,qCAAqC,SAAS,KAAK,QAAQ;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AAEA,eAAe,mBAAmB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AACF,GAI8B;AAC5B,QAAM,SAAS,KAAK,OAAO,YAAY,IAAI,kBAAkB,CAAC,EAAE,UAAU;AAE1E,QAAM,UAAU,YAAY;AAE5B,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,MAAI;AACF,WAAO,MAAM;AACX,UAAI,aAAa,SAAS;AACxB,cAAM,KAAK,KAAK;AAChB,cAAM,YAAY,UAAU,IAAI,aAAa,WAAW,YAAY;AAAA,MACtE;AACA,YAAM,YAAY,WAAW,KAAK,IAAI;AACtC,UAAI,aAAa,GAAG;AAClB,cAAM,KAAK,KAAK;AAChB,cAAM,IAAI,MAAM,4CAA4C;AAAA,MAC9D;AACA,YAAM,EAAE,OAAO,KAAK,IAAK,MAAM,QAAQ,KAAK;AAAA,QAC1C,OAAO,KAAK;AAAA,QACZ,IAAI;AAAA,UAAQ,aACV;AAAA,YACE,MAAM,QAAQ,EAAE,OAAO,QAAW,MAAM,MAAM,CAAC;AAAA,YAC/C;AAAA,UACF;AAAA,QACF;AAAA,MACF,CAAC;AACD,UAAI,MAAM;AACR,cAAM,IAAI,MAAM,4CAA4C;AAAA,MAC9D;AACA,UAAI,UAAU,OAAW;AACzB,iBAAW,QAAQ,QAAQ,KAAK,KAAK,GAAG;AACtC,cAAM,SAAS,MAAM,cAAc;AAAA,UACjC,MAAM;AAAA,UACN,QAAQ;AAAA,QACV,CAAC;AACD,YAAI,OAAO,QAAS,QAAO,EAAE,MAAM,OAAO,MAAM,KAAK;AAAA,MACvD;AAAA,IACF;AAAA,EACF,UAAE;AACA,WAAO,YAAY;AACnB,SAAK,UAAU,KAAK,MAAM;AAU1B,SAAK,oBAAoB,KAAK,MAAM;AAAA,EACtC;AACF;AAEA,SAAS,cAAc;AACrB,MAAI,SAAS;AACb,SAAO;AAAA,IACL,KAAK,OAAyB;AAC5B,gBAAU;AACV,YAAM,QAAkB,CAAC;AACzB,UAAI;AACJ,cAAQ,KAAK,OAAO,QAAQ,IAAI,OAAO,IAAI;AACzC,cAAM,MAAM,OAAO,MAAM,GAAG,EAAE;AAC9B,iBAAS,OAAO,MAAM,KAAK,CAAC;AAC5B,cAAM,OAAO,IAAI,QAAQ,OAAO,EAAE,EAAE,KAAK;AACzC,YAAI,KAAK,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,MACtC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAe,oBACb,QACe;AACf,MAAI;AACF,UAAM,SAAS,OAAO,YAAY,IAAI,kBAAkB,CAAC,EAAE,UAAU;AACrE,WAAO,MAAM;AACX,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,UAAI,OAAO;AACT,cAAM,UAAU,MAAM,SAAS,IAAI,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI;AAC5D,YAAI,QAAQ,SAAS,GAAG;AAEtB,kBAAQ,IAAI,mBAAmB,OAAO,EAAE;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,eAAe,UAAU,QAAmD;AAC1E,MAAI;AACF,UAAM,SAAS,OAAO,YAAY,IAAI,kBAAkB,CAAC,EAAE,UAAU;AACrE,WAAO,MAAM;AACX,YAAM,EAAE,KAAK,IAAI,MAAM,OAAO,KAAK;AACnC,UAAI,KAAM;AAAA,IACZ;AAAA,EACF,QAAQ;AAAA,EAAC;AACX;AAEA,SAAS,cAAc,KAAiC;AACtD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,IAAI,UAAU,GAAG;AAC5B,UAAM,SAAS,MAAM;AACnB,SAAG,IAAI,SAAS,OAAO;AACvB,cAAQ,EAAE;AAAA,IACZ;AACA,UAAM,UAAU,CAAC,QAAe;AAC9B,SAAG,IAAI,QAAQ,MAAM;AACrB,aAAO,GAAG;AAAA,IACZ;AACA,OAAG,KAAK,QAAQ,MAAM;AACtB,OAAG,KAAK,SAAS,OAAO;AAAA,EAC1B,CAAC;AACH;AAEA,SAAS,cAAc;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAiBqB;AACnB,MAAI,UAAU;AACd,MAAI;AAOJ,MAAI,wBAAwB,gCACxB,iBACA;AAOJ,MAAI,sBAAsB;AAO1B,MAAI,iBAAiB;AACrB,UAAQ,GAAG,iBAAiB,SAAO;AACjC,qBAAiB,IAAI;AAAA,EACvB,CAAC;AASD,QAAM,WAAW,CAAC,aAGY;AAC5B,QAAI;AACJ,QAAI;AACJ,UAAM,OAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,uBAAiB;AACjB,sBAAgB;AAAA,IAClB,CAAC;AAED,UAAM,SAA4B,CAAC;AACnC,UAAM,UAAU,CAAC,UAA+B;AAC9C,UAAI;AACF,iBAAS,KAAK,KAAK;AAAA,MACrB,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,YAAY;AAChB,UAAM,gBAAgB,MAAM;AAC1B,UAAI,UAAW;AACf,kBAAY;AACZ,iBAAW,KAAK,OAAQ,GAAE;AAC1B,qBAAgB;AAAA,IAClB;AACA,UAAM,cAAc,CAAC,QAAiB;AACpC,UAAI,UAAW;AACf,kBAAY;AACZ,iBAAW,KAAK,OAAQ,GAAE;AAC1B,oBAAe,GAAG;AAAA,IACpB;AAEA,eAAW,QAAQ,YAAY;AAC7B,aAAO;AAAA,QACL,QAAQ,GAAG,MAAM,SAAO;AACtB,kBAAQ,GAAG;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,MACL,QAAQ,GAAG,UAAU,SAAO;AAC1B,gBAAQ,GAAG;AACX,sBAAc;AAAA,MAChB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,QAAQ,GAAG,SAAS,SAAO;AACzB,gBAAQ,GAAG;AACX,oBAAY,IAAI,KAAK;AAAA,MACvB,CAAC;AAAA,IACH;AAQA,UAAM,UAAU,CAAC,OAAgB,WAAoB;AACnD,UAAI,UAAW;AACf,UAAI,WAAW,aAAa;AAC1B,sBAAc;AACd;AAAA,MACF;AACA,kBAAY,IAAI,MAAM,+CAA+C,CAAC;AAAA,IACxE;AACA,YAAQ,QAAQ,OAAO;AAEvB,UAAM,UAAU,MAAM;AACpB,UAAI,UAAW;AACf,UAAI;AACF,gBAAQ,KAAK,EAAE,MAAM,QAAQ,CAAC;AAAA,MAChC,QAAQ;AAAA,MAAC;AACT;AAAA,QACE,SAAS,aAAa,UACpB,IAAI,aAAa,WAAW,YAAY;AAAA,MAC5C;AAAA,IACF;AACA,QAAI,SAAS,aAAa;AACxB,UAAI,SAAS,YAAY,SAAS;AAChC,gBAAQ;AAAA,MACV,OAAO;AACL,iBAAS,YAAY,iBAAiB,SAAS,SAAS;AAAA,UACtD,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,MACL,kBAAkB,OAAM,UAAS;AAC/B,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,YAAY,MAAM;AAAA,UAClB,QAAQ,MAAM;AAAA,UACd,SAAS,MAAM;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,MACA,oBAAoB,OAAM,UAAS;AACjC,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,YAAY,MAAM;AAAA,UAClB,UAAU,MAAM;AAAA,UAChB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAAA,MACA,mBAAmB,OAAM,SAAQ;AAC/B,gBAAQ,KAAK,EAAE,MAAM,gBAAgB,KAAK,CAAC;AAAA,MAC7C;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,cAAc,OAAM,eAAc;AAChC,YAAM,UAAU,SAAS;AAAA,QACvB,MAAM,WAAW;AAAA,QACjB,aAAa,WAAW;AAAA,MAC1B,CAAC;AAED,YAAM,oBACJ,CAAC,uBAAuB,CAAC,CAAC,WAAW;AACvC,4BAAsB;AAEtB,YAAM,eAAe;AAAA,QACnB,MAAM;AAAA,QACN,QAAQ,gBAAgB,WAAW,MAAM;AAAA,QACzC,GAAI,oBAAoB,EAAE,cAAc,WAAW,aAAa,IAAI,CAAC;AAAA,QACrE,QAAQ,WAAW,SAAS,CAAC,GAAG,IAAI,QAAM;AAAA,UACxC,MAAM,EAAE;AAAA,UACR,aAAa,EAAE;AAAA,UACf,aAAa,EAAE;AAAA,QACjB,EAAE;AAAA,QACF;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,QAC3C,GAAI,wBACA,EAAE,gBAAgB,sBAAsB,IACxC,CAAC;AAAA,QACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MAC3B;AACA,8BAAwB;AACxB,cAAQ,KAAK,YAAY;AAEzB,aAAO;AAAA,IACT;AAAA,IACA,gBAAgB,OAAM,iBAAgB;AACpC,YAAM,UAAU,SAAS;AAAA,QACvB,MAAM,aAAa;AAAA,QACnB,aAAa,aAAa;AAAA,MAC5B,CAAC;AAcD,UAAI,eAAe;AACjB,cAAM,WAAW,yBAAyB;AAC1C,gCAAwB;AACxB,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAQN,QAAQ;AAAA,UACR,QAAQ,aAAa,SAAS,CAAC,GAAG,IAAI,QAAM;AAAA,YAC1C,MAAM,EAAE;AAAA,YACR,aAAa,EAAE;AAAA,YACf,aAAa,EAAE;AAAA,UACjB,EAAE;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,UACA,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,UAC3C,GAAI,WAAW,EAAE,gBAAgB,SAAS,IAAI,CAAC;AAAA,UAC/C,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,QAC3B,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,YAAY;AAQrB,YAAM,IAAI,kCAAkC;AAAA,QAC1C,SACE;AAAA,QACF,WAAW;AAAA,MACb,CAAC;AAAA,IACH;AAAA,IACA,UAAU,YAAY;AACpB,UAAI,SAAS;AACX,cAAM,IAAI;AAAA,UACR,iBAAiB,SAAS;AAAA,QAC5B;AAAA,MACF;AACA,gBAAU;AACV,YAAM,kBAAkB,MAAM,QAAQ,QAAQ;AAC9C,YAAM,UAAuC;AAAA,QAC3C,MAAM;AAAA,QACN,WAAW;AAAA,QACX,sBAAsB;AAAA,QACtB,MAAM;AAAA,UACJ,GAAI,iBAAiB,EAAE,UAAU,eAAe,IAAI,CAAC;AAAA,UACrD,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,OAAO;AAAA,YACP;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,YAAY;AACrB,UAAI,QAAS,QAAO;AACpB,gBAAU;AACV,qBAAe,YAAY;AAGzB,gBAAQ,WAAW;AACnB,YAAI;AACF,cAAI,CAAC,QAAQ,SAAS,GAAG;AACvB,oBAAQ,KAAK,EAAE,MAAM,WAAW,CAAC;AAAA,UACnC;AAAA,QACF,QAAQ;AAAA,QAAC;AACT,YAAI;AACJ,YAAI;AACF,cAAI,MAAM;AACR,kBAAM,QAAQ,KAAK;AAAA,cACjB,KAAK,KAAK;AAAA,cACV,IAAI,QAAc,aAAW;AAC3B,4BAAY,WAAW,SAAS,GAAI;AACpC,0BAAU,QAAQ;AAAA,cACpB,CAAC;AAAA,YACH,CAAC;AAAA,UACH;AAAA,QACF,UAAE;AACA,cAAI,UAAW,cAAa,SAAS;AACrC,cAAI;AACF,kBAAM,MAAM,KAAK;AAAA,UACnB,QAAQ;AAAA,UAAC;AACT,kBAAQ,MAAM;AAAA,QAChB;AAAA,MACF,GAAG;AACH,aAAO;AAAA,IACT;AAAA,IACA,QAAQ,YAAY;AAClB,UAAI,SAAS;AACX,cAAM,IAAI;AAAA,UACR,iBAAiB,SAAS;AAAA,QAC5B;AAAA,MACF;AACA,gBAAU;AAaV,cAAQ,WAAW;AACnB,YAAM,OAAgB,QAAQ,SAAS,IACnC,CAAC,IACD,MAAM,IAAI,QAAiB,CAAC,SAAS,WAAW;AAC9C,cAAM,QAAQ,WAAW,MAAM;AAC7B,gBAAM;AACN;AAAA,YACE,IAAI;AAAA,cACF,iBAAiB,SAAS;AAAA,YAC5B;AAAA,UACF;AAAA,QACF,GAAG,GAAI;AACP,cAAM,QAAQ;AACd,cAAM,QAAQ,QAAQ,GAAG,iBAAiB,SAAO;AAC/C,uBAAa,KAAK;AAClB,gBAAM;AACN,kBAAQ,IAAI,IAAI;AAAA,QAClB,CAAC;AACD,YAAI;AACF,kBAAQ,KAAK,EAAE,MAAM,SAAS,CAAC;AAAA,QACjC,SAAS,KAAK;AACZ,uBAAa,KAAK;AAClB,gBAAM;AACN,iBAAO,GAAG;AAAA,QACZ;AAAA,MACF,CAAC;AAEL,UAAI;AACJ,UAAI;AACF,YAAI,MAAM;AACR,gBAAM,QAAQ,KAAK;AAAA,YACjB,KAAK,KAAK;AAAA,YACV,IAAI,QAAc,aAAW;AAC3B,0BAAY,WAAW,SAAS,GAAI;AACpC,wBAAU,QAAQ;AAAA,YACpB,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF,UAAE;AACA,YAAI,UAAW,cAAa,SAAS;AACrC,YAAI;AACF,gBAAM,MAAM,KAAK;AAAA,QACnB,QAAQ;AAAA,QAAC;AACT,gBAAQ,MAAM;AAAA,MAChB;AAEA,YAAM,UAAuC;AAAA,QAC3C,MAAM;AAAA,QACN,WAAW;AAAA,QACX,sBAAsB;AAAA,QACtB,MAAO,QAAQ,CAAC;AAAA,MAClB;AACA,aAAO;AAAA,IACT;AAAA,IACA,eAAe,YAAY;AACzB,UAAI,SAAS;AACX,cAAM,IAAI;AAAA,UACR,iBAAiB,SAAS;AAAA,QAC5B;AAAA,MACF;AACA,gBAAU;AAUV,YAAM,kBAAkB,MAAM,QAAQ,QAAQ;AAC9C,YAAM,UAAsC;AAAA,QAC1C,MAAM;AAAA,QACN,WAAW;AAAA,QACX,sBAAsB;AAAA,QACtB,MAAM;AAAA,UACJ,GAAI,iBAAiB,EAAE,UAAU,eAAe,IAAI,CAAC;AAAA,UACrD,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,OAAO;AAAA,YACP;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASA,SAAS,gBAAgB,QAAiC;AACxD,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,EAAE,QAAQ,IAAI;AACpB,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,SAAS;AAC1B,QAAI,KAAK,SAAS,QAAQ;AACxB,YAAM,IAAI,kCAAkC;AAAA,QAC1C,WAAW;AAAA,QACX,SAAS,sEAAsE,KAAK,IAAI;AAAA,MAC1F,CAAC;AAAA,IACH;AACA,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACA,SAAO,MAAM,KAAK,MAAM;AAC1B;;;AGtnCO,IAAM,QAAQ,YAAY;","names":["z","z"]}
+{"version":3,"sources":["../src/codex-harness.ts","../src/codex-auth.ts","../src/codex-bridge-protocol.ts","../src/index.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto';\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport {\n  commonTool,\n  HarnessCapabilityUnsupportedError,\n  harnessV1DiagnosticFromBridgeFrame,\n  type HarnessV1,\n  type HarnessV1Bootstrap,\n  type HarnessV1DebugConfig,\n  type HarnessV1BuiltinTool,\n  type HarnessV1ContinueTurnState,\n  type HarnessV1Prompt,\n  type HarnessV1PromptControl,\n  type HarnessV1ResumeSessionState,\n  type HarnessV1NetworkSandboxSession,\n  type HarnessV1PermissionMode,\n  type HarnessV1Session,\n  type HarnessV1Skill,\n  type HarnessV1StreamPart,\n} from '@ai-sdk/harness';\nimport {\n  classifyDiskLog,\n  markBridgeStarting,\n  SandboxChannel,\n  waitForBridgeReady,\n} from '@ai-sdk/harness/utils';\nimport {\n  type Experimental_SandboxProcess,\n  type Experimental_SandboxSession,\n} from '@ai-sdk/provider-utils';\nimport { WebSocket } from 'ws';\nimport { z } from 'zod';\nimport { resolveCodexEnv, type CodexAuthOptions } from './codex-auth';\nimport {\n  outboundMessageSchema,\n  type InboundMessage,\n  type OutboundMessage,\n} from './codex-bridge-protocol';\n\ntype CodexChannel = SandboxChannel<OutboundMessage, InboundMessage>;\ntype CodexRespawnStrategy = 'replay' | 'rerun';\n\ntype WriteSkillsResult = {\n  readonly homeDir: string;\n  readonly codexHomeDir: string;\n};\n\n/*\n * The model the adapter pins when the consumer configures none. The Codex SDK\n * does not report the model it resolves to at runtime (no model field on any\n * event), and exposes no default-model constant, so we pin the latest\n * codex-specialized model available for the bundled `@openai/codex@0.130.0`\n * (published 2026-05-08): `gpt-5.3-codex` (released 2026-02). Keep this in sync\n * when bumping the codex SDK/binary. Passing it explicitly makes the resolved\n * model deterministic and the telemetry (`gen_ai.request.model`) accurate.\n */\nconst DEFAULT_CODEX_MODEL = 'gpt-5.3-codex';\n\nexport type CodexHarnessSettings = {\n  readonly auth?: CodexAuthOptions;\n  /**\n   * OpenAI model id the underlying `codex` CLI should use. Leaving this unset\n   * pins the adapter default (`DEFAULT_CODEX_MODEL`).\n   */\n  readonly model?: string;\n  /**\n   * Reasoning effort for reasoning-capable models. Leaving this unset\n   * defers to the CLI's default.\n   */\n  readonly reasoningEffort?: 'low' | 'medium' | 'high';\n  /**\n   * When `true`, allow the underlying runtime to use live web search.\n   */\n  readonly webSearch?: boolean;\n  /**\n   * Override the port the bridge binds inside the sandbox. By default the\n   * adapter uses the first port the sandbox declares via `sandbox.ports`.\n   * Only set this if the sandbox declares multiple ports and the first one\n   * is reserved for something else.\n   */\n  readonly port?: number;\n  /** Maximum milliseconds to wait for the bridge to advertise its port. Defaults to 120000. */\n  readonly startupTimeoutMs?: number;\n};\n\n/*\n * Every native tool the Codex CLI can invoke as a model-callable tool,\n * declared as a `ToolSet` keyed by what the bridge emits as `toolName` on\n * the wire (`commonName ?? nativeName`). Schemas reflect the `ThreadItem`\n * union in `@openai/codex-sdk`'s `dist/index.d.ts`.\n *\n * Codex's other native operations (`apply_patch`, todo planning) surface\n * only as side-effect events (`file_change`, `todo_list`) and are not\n * model-callable tools — they don't appear here.\n */\nconst CODEX_BUILTIN_TOOLS = {\n  bash: commonTool('bash', {\n    nativeName: 'shell',\n    toolUseKind: 'bash',\n    description: 'Execute a shell command',\n    inputSchema: z.object({ command: z.string() }),\n  }),\n  webSearch: commonTool('webSearch', {\n    nativeName: 'web_search',\n    toolUseKind: 'readonly',\n    description: 'Search the web',\n    inputSchema: z.object({ query: z.string() }),\n  }),\n} as const satisfies Record<string, HarnessV1BuiltinTool<any, any>>;\n\n/*\n * Bootstrap lives in /tmp because it's pure derived state — the harness can\n * reinstall the CLI and bridge files on any fresh sandbox from the recipe.\n * Persistence comes from the sandbox provider's snapshot, not the path.\n *\n * The session work dir (`startOpts.sessionWorkDir`) and the bridge-state dir\n * derived from `sandboxSession.defaultWorkingDirectory` both live under the sandbox's\n * default working directory — the provider's persistent mount — so the\n * workdir's contents (the codex CLI shim and any files the agent edits) and\n * the bridge state files survive both detach -> attach and\n * stop -> snapshot -> resume cycles.\n */\nconst BOOTSTRAP_DIR = '/tmp/harness/codex';\n\n/**\n * Live bridge coordinates returned by `doDetach()` and `doSuspendTurn()`. A\n * future process uses them to reopen a socket to the still-running bridge\n * (`attach`) instead of re-spawning it. Absent on a `doStop()` payload.\n */\nconst bridgeCoordsSchema = z.object({\n  port: z.number(),\n  token: z.string(),\n  lastSeenEventId: z.number(),\n  sandboxId: z.string().optional(),\n});\n\n/**\n * Schema for the adapter-specific lifecycle `data` payload Codex produces.\n * `threadId` is what `codex.resumeThread(...)` requires for the replay/rerun\n * rungs; the sandbox lookup is handled separately via\n * `provider.resumeSession({ sessionId })`. `bridge` carries live coordinates\n * for cross-process `attach` (present on `doDetach()` and `doSuspendTurn()`\n * payloads).\n */\nconst codexResumeStateSchema = z.object({\n  threadId: z.string().optional(),\n  bridge: bridgeCoordsSchema.optional(),\n});\n\ntype CodexBridgeCoords = z.infer<typeof bridgeCoordsSchema>;\n\nexport function createCodex(\n  settings: CodexHarnessSettings = {},\n): HarnessV1<typeof CODEX_BUILTIN_TOOLS> {\n  let cachedBootstrap: HarnessV1Bootstrap | undefined;\n\n  return {\n    specificationVersion: 'harness-v1',\n    harnessId: 'codex',\n    builtinTools: CODEX_BUILTIN_TOOLS,\n    supportsBuiltinToolApprovals: false,\n    lifecycleStateSchema: codexResumeStateSchema,\n    getBootstrap: async () => {\n      if (cachedBootstrap != null) return cachedBootstrap;\n      const [pkg, lock, bridge, hostToolMcp] = await Promise.all([\n        readBridgeAsset('package.json'),\n        readBridgeAsset('pnpm-lock.yaml'),\n        readBridgeAsset('index.mjs'),\n        readBridgeAsset('host-tool-mcp.mjs'),\n      ]);\n      cachedBootstrap = {\n        harnessId: 'codex',\n        bootstrapDir: BOOTSTRAP_DIR,\n        files: [\n          { path: `${BOOTSTRAP_DIR}/package.json`, content: pkg },\n          { path: `${BOOTSTRAP_DIR}/pnpm-lock.yaml`, content: lock },\n          { path: `${BOOTSTRAP_DIR}/bridge.mjs`, content: bridge },\n          {\n            path: `${BOOTSTRAP_DIR}/host-tool-mcp.mjs`,\n            content: hostToolMcp,\n          },\n        ],\n        commands: [\n          { command: `mkdir -p ${BOOTSTRAP_DIR}` },\n          {\n            command: `pnpm --dir ${BOOTSTRAP_DIR} install --frozen-lockfile --store-dir ${BOOTSTRAP_DIR}/.pnpm-store`,\n          },\n        ],\n      };\n      return cachedBootstrap;\n    },\n    doStart: async startOpts => {\n      if (\n        startOpts.permissionMode != null &&\n        startOpts.permissionMode !== 'allow-all'\n      ) {\n        throw new HarnessCapabilityUnsupportedError({\n          message:\n            \"Harness 'codex' does not support built-in tool approval requests; use permissionMode: 'allow-all'.\",\n          harnessId: 'codex',\n        });\n      }\n      const sandboxSession = startOpts.sandboxSession;\n      const session = sandboxSession.restricted();\n      const sandboxId = sandboxSession.id;\n      const lifecycleState = startOpts.continueFrom ?? startOpts.resumeFrom;\n      const isResume = lifecycleState != null;\n      const isContinue = startOpts.continueFrom != null;\n      const resumeData =\n        isResume && typeof lifecycleState?.data === 'object'\n          ? (lifecycleState.data as {\n              threadId?: unknown;\n              bridge?: CodexBridgeCoords;\n            })\n          : undefined;\n      const resumeThreadId = resumeData?.threadId;\n      const resumeThreadIdString =\n        typeof resumeThreadId === 'string' && resumeThreadId.length > 0\n          ? resumeThreadId\n          : undefined;\n      const coords = resumeData?.bridge;\n\n      const workDir = startOpts.sessionWorkDir;\n      const sessionDataDir = `${sandboxSession.defaultWorkingDirectory}/.agent-runs/${startOpts.sessionId}`;\n      const bridgeStateDir = `${sessionDataDir}/bridge`;\n      const timeoutMs = settings.startupTimeoutMs ?? 120_000;\n\n      // Normalize each forwarded bridge diagnostics frame into the general\n      // `HarnessV1Diagnostic` and report it. The adapter does no telemetry work\n      // beyond this transport→emission mapping.\n      const report = startOpts.observability?.report;\n      const onDiagnostic = report\n        ? (frame: Parameters<typeof harnessV1DiagnosticFromBridgeFrame>[0]) =>\n            report(\n              harnessV1DiagnosticFromBridgeFrame(frame, {\n                sessionId: startOpts.sessionId,\n                timestamp: Date.now(),\n              }),\n            )\n        : undefined;\n\n      /*\n       * Rung 1 — ATTACH. With live coordinates, reopen a socket to the\n       * still-running bridge. Parked between-turn sessions just attach and wait\n       * for the next `start`; suspended in-flight turns request replay of\n       * everything past the persisted cursor. No spawn, no fresh token. If the\n       * bridge is gone the open throws and we fall through to a spawn-based\n       * recovery.\n       */\n      if (coords) {\n        try {\n          const attachUrl =\n            (await sandboxSession.getPortUrl({\n              port: coords.port,\n              protocol: 'ws',\n            })) + `?agent_bridge_token=${encodeURIComponent(coords.token)}`;\n          const attachChannel: CodexChannel = new SandboxChannel({\n            connect: () => openWebSocket(attachUrl),\n            outboundSchema: outboundMessageSchema,\n            initialLastSeenEventId: coords.lastSeenEventId,\n            onDiagnostic,\n          });\n          await attachChannel.open(isContinue ? { resume: true } : undefined);\n          return createSession({\n            sessionId: startOpts.sessionId,\n            channel: attachChannel,\n            // The live bridge was spawned by another process; no process handle.\n            proc: undefined,\n            model: settings.model ?? DEFAULT_CODEX_MODEL,\n            reasoningEffort: settings.reasoningEffort,\n            webSearch: settings.webSearch,\n            resumeThreadId: resumeThreadIdString,\n            isResume: true,\n            seedResumeThreadOnFirstPrompt: false,\n            rerunContinue: false,\n            bridgePort: coords.port,\n            bridgeToken: coords.token,\n            sandboxId,\n            debug: startOpts.observability?.debug,\n            permissionMode: startOpts.permissionMode,\n          });\n        } catch {\n          // Bridge no longer reachable — recover by respawning below.\n        }\n      }\n\n      /*\n       * Rungs 2/3 — REPLAY vs RERUN. Respawn the bridge. `replay` is only sound\n       * for `continueFrom`: those coordinates include the cursor the on-disk\n       * log is replayed *from*. `resumeFrom` is a between-turn resume; even when\n       * it carries bridge coordinates, replaying the previous turn would\n       * re-deliver stale events into the next turn. Those resumes always `rerun`\n       * via `codex.resumeThread(threadId)` when attach is unavailable.\n       */\n      let respawnStrategy: CodexRespawnStrategy | undefined = isResume\n        ? 'rerun'\n        : undefined;\n      if (coords && isContinue) {\n        const logRaw = await Promise.resolve(\n          session.readTextFile({\n            path: `${bridgeStateDir}/event-log.ndjson`,\n            abortSignal: startOpts.abortSignal,\n          }),\n        ).catch(() => null);\n        if ((await classifyDiskLog(logRaw)) === 'replay') {\n          respawnStrategy = 'replay';\n        }\n      }\n\n      const port = resolveBridgePort(sandboxSession, settings.port);\n      const token = randomBytes(32).toString('hex');\n      const codexSkillSetup =\n        startOpts.skills && startOpts.skills.length > 0\n          ? await writeSkills({\n              sandbox: session,\n              skills: startOpts.skills,\n              abortSignal: startOpts.abortSignal,\n            })\n          : undefined;\n      const env = {\n        ...resolveCodexEnv(settings.auth),\n        BRIDGE_CHANNEL_TOKEN: token,\n        BRIDGE_WS_PORT: String(port),\n        ...(codexSkillSetup\n          ? {\n              HOME: codexSkillSetup.homeDir,\n              CODEX_HOME: codexSkillSetup.codexHomeDir,\n            }\n          : {}),\n        ...(respawnStrategy === 'replay'\n          ? { BRIDGE_REPLAY_FROM_DISK: '1' }\n          : {}),\n      };\n\n      if (respawnStrategy === undefined) {\n        await session.run({\n          command: `mkdir -p ${workDir} ${bridgeStateDir}`,\n          abortSignal: startOpts.abortSignal,\n        });\n      }\n\n      await markBridgeStarting({\n        sandbox: session,\n        bridgeStateDir,\n        bridgeType: 'codex',\n        abortSignal: startOpts.abortSignal,\n      });\n\n      const proc = await session.spawn({\n        command: `node ${BOOTSTRAP_DIR}/bridge.mjs --workdir ${workDir} --bridge-state-dir ${bridgeStateDir} --bootstrap-dir ${BOOTSTRAP_DIR}`,\n        env,\n        abortSignal: startOpts.abortSignal,\n      });\n\n      const { port: boundPort } = await waitForBridgeReady({\n        proc,\n        sandbox: session,\n        bridgeStateDir,\n        bridgeType: 'codex',\n        timeoutMs,\n        abortSignal: startOpts.abortSignal,\n        createTimeoutError: () =>\n          new Error('codex bridge did not become ready in time.'),\n        createExitError: () =>\n          new Error('codex bridge exited before becoming ready.'),\n      });\n      void drainRest(proc.stdout);\n      /*\n       * Bridge stderr is the only diagnostic channel for what happens\n       * inside the sandbox once the bridge is running (uncaught\n       * exceptions, Codex SDK errors, network failures). Forward it\n       * line-by-line to the host console so a mid-turn bridge crash can\n       * be inspected from `pnpm dev` logs without redeploying. The\n       * bridge itself writes nothing to stderr in steady state, so this\n       * is silent on the happy path.\n       */\n      void forwardBridgeStderr(proc.stderr);\n\n      const wsUrl =\n        (await sandboxSession.getPortUrl({\n          port: boundPort,\n          protocol: 'ws',\n        })) + `?agent_bridge_token=${encodeURIComponent(token)}`;\n\n      const channel: CodexChannel = new SandboxChannel({\n        connect: () => openWebSocket(wsUrl),\n        outboundSchema: outboundMessageSchema,\n        onDiagnostic,\n        // In replay mode the respawned bridge reloaded the finished turn from\n        // disk; seed the cursor and resume so it streams the tail (incl.\n        // `finish`).\n        ...(respawnStrategy === 'replay'\n          ? { initialLastSeenEventId: coords?.lastSeenEventId ?? 0 }\n          : {}),\n      });\n      await channel.open(\n        respawnStrategy === 'replay' ? { resume: true } : undefined,\n      );\n\n      return createSession({\n        sessionId: startOpts.sessionId,\n        channel,\n        proc,\n        model: settings.model ?? DEFAULT_CODEX_MODEL,\n        reasoningEffort: settings.reasoningEffort,\n        webSearch: settings.webSearch,\n        resumeThreadId: resumeThreadIdString,\n        isResume: respawnStrategy !== undefined,\n        seedResumeThreadOnFirstPrompt: respawnStrategy !== undefined,\n        rerunContinue: respawnStrategy === 'rerun',\n        bridgePort: boundPort,\n        bridgeToken: token,\n        sandboxId,\n        debug: startOpts.observability?.debug,\n        permissionMode: startOpts.permissionMode,\n      });\n    },\n  };\n}\n\nfunction resolveBridgePort(\n  sandboxSession: HarnessV1NetworkSandboxSession,\n  override: number | undefined,\n): number {\n  if (override !== undefined) return override;\n  if (sandboxSession.ports.length > 0) return sandboxSession.ports[0];\n  throw new HarnessCapabilityUnsupportedError({\n    harnessId: 'codex',\n    message:\n      'The codex harness needs a TCP port exposed by the sandbox. ' +\n      'Create the sandbox with `ports: [<port>]` or pass `createCodex({ port })`.',\n  });\n}\n\nasync function readBridgeAsset(name: string): Promise<string> {\n  const candidates = [\n    new URL(`./bridge/${name}`, import.meta.url),\n    new URL(`../bridge/${name}`, import.meta.url),\n  ];\n  let lastErr: unknown;\n  for (const url of candidates) {\n    try {\n      return await readFile(fileURLToPath(url), 'utf8');\n    } catch (err) {\n      const code = (err as NodeJS.ErrnoException).code;\n      if (code !== 'ENOENT') throw err;\n      lastErr = err;\n    }\n  }\n  throw lastErr ?? new Error(`bridge asset not found: ${name}`);\n}\n\nasync function writeSkills({\n  sandbox,\n  skills,\n  abortSignal,\n}: {\n  sandbox: Experimental_SandboxSession;\n  skills: ReadonlyArray<HarnessV1Skill>;\n  abortSignal?: AbortSignal;\n}): Promise<WriteSkillsResult> {\n  for (const skill of skills) {\n    safeCodexSkillName(skill.name);\n    for (const file of skill.files ?? []) {\n      safeCodexSkillFilePath({\n        skillName: skill.name,\n        filePath: file.path,\n      });\n    }\n  }\n\n  const homeDir = await resolveSandboxHomeDir({ sandbox, abortSignal });\n  const codexHomeDir = path.posix.join(homeDir, '.codex');\n  await sandbox.run({\n    command: `mkdir -p ${shellQuote(codexHomeDir)}`,\n    abortSignal,\n  });\n\n  const rootDir = path.posix.join(homeDir, '.agents', 'skills');\n  await sandbox.run({\n    command: `mkdir -p ${shellQuote(rootDir)}`,\n    abortSignal,\n  });\n\n  for (const skill of skills) {\n    const name = safeCodexSkillName(skill.name);\n    const skillDir = path.posix.join(rootDir, name);\n    const content = `---\\nname: ${skill.name}\\ndescription: ${skill.description}\\n---\\n\\n${skill.content}`;\n\n    await sandbox.writeTextFile({\n      path: path.posix.join(skillDir, 'SKILL.md'),\n      content,\n      abortSignal,\n    });\n\n    for (const file of skill.files ?? []) {\n      const filePath = safeCodexSkillFilePath({\n        skillName: skill.name,\n        filePath: file.path,\n      });\n      await sandbox.writeTextFile({\n        path: path.posix.join(skillDir, filePath),\n        content: file.content,\n        abortSignal,\n      });\n    }\n  }\n\n  return {\n    homeDir,\n    codexHomeDir,\n  };\n}\n\nasync function resolveSandboxHomeDir({\n  sandbox,\n  abortSignal,\n}: {\n  sandbox: Experimental_SandboxSession;\n  abortSignal?: AbortSignal;\n}): Promise<string> {\n  const result = await sandbox.run({\n    command: 'printf \"%s\" \"$HOME\"',\n    abortSignal,\n  });\n  const homeDir = result.stdout.trim();\n  if (result.exitCode !== 0 || !homeDir || !path.posix.isAbsolute(homeDir)) {\n    throw new Error(\n      `Unable to resolve sandbox HOME directory: ${result.stderr || result.stdout}`,\n    );\n  }\n  return homeDir;\n}\n\nfunction safeCodexSkillName(name: string): string {\n  if (!/^[A-Za-z0-9._-]+$/.test(name) || name === '.' || name === '..') {\n    throw new Error(`Invalid Codex skill name: ${name}`);\n  }\n  return name;\n}\n\nfunction safeCodexSkillFilePath({\n  skillName,\n  filePath,\n}: {\n  skillName: string;\n  filePath: string;\n}): string {\n  const normalized = path.posix.normalize(filePath);\n  if (\n    normalized === '.' ||\n    normalized.startsWith('../') ||\n    path.posix.isAbsolute(normalized)\n  ) {\n    throw new Error(\n      `Invalid Codex skill file path for ${skillName}: ${filePath}`,\n    );\n  }\n  return normalized;\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replace(/'/g, `'\\\\''`)}'`;\n}\n\nasync function forwardBridgeStderr(\n  stream: ReadableStream<Uint8Array>,\n): Promise<void> {\n  try {\n    const reader = stream.pipeThrough(new TextDecoderStream()).getReader();\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) return;\n      if (value) {\n        const trimmed = value.endsWith('\\n') ? value.slice(0, -1) : value;\n        if (trimmed.length > 0) {\n          // eslint-disable-next-line no-console\n          console.log(`[bridge stderr] ${trimmed}`);\n        }\n      }\n    }\n  } catch {\n    // Reader errors are non-fatal — best-effort diagnostic only.\n  }\n}\n\nasync function drainRest(stream: ReadableStream<Uint8Array>): Promise<void> {\n  try {\n    const reader = stream.pipeThrough(new TextDecoderStream()).getReader();\n    while (true) {\n      const { done } = await reader.read();\n      if (done) return;\n    }\n  } catch {}\n}\n\nfunction openWebSocket(url: string): Promise<WebSocket> {\n  return new Promise((resolve, reject) => {\n    const ws = new WebSocket(url);\n    const onOpen = () => {\n      ws.off('error', onError);\n      resolve(ws);\n    };\n    const onError = (err: Error) => {\n      ws.off('open', onOpen);\n      reject(err);\n    };\n    ws.once('open', onOpen);\n    ws.once('error', onError);\n  });\n}\n\nfunction createSession({\n  sessionId,\n  channel,\n  proc,\n  model,\n  reasoningEffort,\n  webSearch,\n  resumeThreadId,\n  isResume,\n  seedResumeThreadOnFirstPrompt,\n  rerunContinue,\n  bridgePort,\n  bridgeToken,\n  sandboxId,\n  debug,\n  permissionMode,\n}: {\n  sessionId: string;\n  channel: CodexChannel;\n  /** Undefined on `attach` — the live bridge was spawned by another process. */\n  proc: Experimental_SandboxProcess | undefined;\n  model: string | undefined;\n  reasoningEffort: 'low' | 'medium' | 'high' | undefined;\n  webSearch: boolean | undefined;\n  resumeThreadId: string | undefined;\n  isResume: boolean;\n  seedResumeThreadOnFirstPrompt: boolean;\n  rerunContinue: boolean;\n  bridgePort: number;\n  bridgeToken: string;\n  sandboxId: string;\n  debug: HarnessV1DebugConfig | undefined;\n  permissionMode: HarnessV1PermissionMode | undefined;\n}): HarnessV1Session {\n  let stopped = false;\n  let stopPromise: Promise<void> | undefined;\n  /*\n   * Send the persisted threadId on the first prompt only when the bridge was\n   * respawned (rerun/replay) so it takes the `codex.resumeThread(...)` branch.\n   * An `attach`ed bridge already holds its threadState in memory and continues\n   * on its own, so it needs no seed.\n   */\n  let pendingResumeThreadId = seedResumeThreadOnFirstPrompt\n    ? resumeThreadId\n    : undefined;\n  /*\n   * Instructions are prepended to the first user message of a fresh session\n   * only. A resumed session (attach/replay/rerun) already carried them in its\n   * original first message (preserved in the persisted thread), so it starts\n   * \"applied\".\n   */\n  let instructionsApplied = isResume;\n\n  /*\n   * Latest codex thread id, cached from the bridge's `bridge-thread`\n   * announcements. Seeded from lifecycle state so `doDetach()` and `doStop()`\n   * can include a thread id even before this process has run a turn.\n   */\n  let latestThreadId = resumeThreadId;\n  channel.on('bridge-thread', msg => {\n    latestThreadId = msg.threadId;\n  });\n\n  /*\n   * Wire the channel into one turn's worth of events and return the control\n   * surface. Shared by `doPromptTurn` (which sends a `start` afterwards) and\n   * `doContinueTurn` (which attaches to an already-running/replayed turn, or sends\n   * a rerun `start`). The only difference between the two entry points is the\n   * `start` message, not the listener/abort/settle plumbing.\n   */\n  const wireTurn = (turnOpts: {\n    emit: (event: HarnessV1StreamPart) => void;\n    abortSignal?: AbortSignal;\n  }): HarnessV1PromptControl => {\n    let pendingResolve: (() => void) | undefined;\n    let pendingReject: ((err: unknown) => void) | undefined;\n    const done = new Promise<void>((resolve, reject) => {\n      pendingResolve = resolve;\n      pendingReject = reject;\n    });\n\n    const unsubs: Array<() => void> = [];\n    const forward = (event: HarnessV1StreamPart) => {\n      try {\n        turnOpts.emit(event);\n      } catch {}\n    };\n\n    const eventTypes = [\n      'stream-start',\n      'text-start',\n      'text-delta',\n      'text-end',\n      'reasoning-start',\n      'reasoning-delta',\n      'reasoning-end',\n      'tool-call',\n      'tool-approval-request',\n      'tool-result',\n      'file-change',\n      'finish-step',\n      'raw',\n    ] as const;\n    let isSettled = false;\n    const settleSuccess = () => {\n      if (isSettled) return;\n      isSettled = true;\n      for (const u of unsubs) u();\n      pendingResolve!();\n    };\n    const settleError = (err: unknown) => {\n      if (isSettled) return;\n      isSettled = true;\n      for (const u of unsubs) u();\n      pendingReject!(err);\n    };\n\n    for (const type of eventTypes) {\n      unsubs.push(\n        channel.on(type, msg => {\n          forward(msg);\n        }),\n      );\n    }\n    unsubs.push(\n      channel.on('finish', msg => {\n        forward(msg);\n        settleSuccess();\n      }),\n    );\n    unsubs.push(\n      channel.on('error', msg => {\n        forward(msg);\n        settleError(msg.error);\n      }),\n    );\n\n    /*\n     * A `'suspended'` close is a graceful slice-boundary freeze the host\n     * initiated (`doSuspendTurn`): the turn keeps running in the bridge and its\n     * tail is replayed to the next process, so wind this turn down cleanly\n     * rather than failing it. Any other close mid-turn is an unexpected drop.\n     */\n    const onClose = (_code?: number, reason?: string) => {\n      if (isSettled) return;\n      if (reason === 'suspended') {\n        settleSuccess();\n        return;\n      }\n      settleError(new Error('codex bridge closed before the turn finished.'));\n    };\n    channel.onClose(onClose);\n\n    const onAbort = () => {\n      if (isSettled) return;\n      try {\n        channel.send({ type: 'abort' });\n      } catch {}\n      settleError(\n        turnOpts.abortSignal?.reason ??\n          new DOMException('Aborted', 'AbortError'),\n      );\n    };\n    if (turnOpts.abortSignal) {\n      if (turnOpts.abortSignal.aborted) {\n        onAbort();\n      } else {\n        turnOpts.abortSignal.addEventListener('abort', onAbort, {\n          once: true,\n        });\n      }\n    }\n\n    return {\n      submitToolResult: async input => {\n        channel.send({\n          type: 'tool-result',\n          toolCallId: input.toolCallId,\n          output: input.output,\n          isError: input.isError,\n        });\n      },\n      submitToolApproval: async input => {\n        channel.send({\n          type: 'tool-approval-response',\n          approvalId: input.approvalId,\n          approved: input.approved,\n          reason: input.reason,\n        });\n      },\n      submitUserMessage: async text => {\n        channel.send({ type: 'user-message', text });\n      },\n      done,\n    };\n  };\n\n  return {\n    sessionId,\n    isResume,\n    modelId: model,\n    doPromptTurn: async promptOpts => {\n      const control = wireTurn({\n        emit: promptOpts.emit,\n        abortSignal: promptOpts.abortSignal,\n      });\n\n      const applyInstructions =\n        !instructionsApplied && !!promptOpts.instructions;\n      instructionsApplied = true;\n\n      const startMessage = {\n        type: 'start' as const,\n        prompt: extractUserText(promptOpts.prompt),\n        ...(applyInstructions ? { instructions: promptOpts.instructions } : {}),\n        tools: (promptOpts.tools ?? []).map(t => ({\n          name: t.name,\n          description: t.description,\n          inputSchema: t.inputSchema,\n        })),\n        model,\n        reasoningEffort,\n        webSearch,\n        ...(permissionMode ? { permissionMode } : {}),\n        ...(pendingResumeThreadId\n          ? { resumeThreadId: pendingResumeThreadId }\n          : {}),\n        ...(debug ? { debug } : {}),\n      };\n      pendingResumeThreadId = undefined;\n      channel.send(startMessage);\n\n      return control;\n    },\n    doContinueTurn: async continueOpts => {\n      const control = wireTurn({\n        emit: continueOpts.emit,\n        abortSignal: continueOpts.abortSignal,\n      });\n\n      /*\n       * attach / replay: the still-running (or disk-replayed) turn streams into\n       * the wired listeners — `doStart` opened the channel with `{ resume: true }`\n       * so the bridge replays everything past the persisted cursor (including a\n       * `finish` if the turn ended during the gap). No `start` is sent: issuing\n       * one would clear the bridge's replay log and begin a new turn. Lossless.\n       *\n       * rerun: the bridge was respawned with no in-flight turn to attach to, so\n       * re-drive codex's own thread via `resumeThreadId`. Lossy — work in flight\n       * at the interruption is recomputed. This is the rare bridge-died\n       * fallback; the common slice path is `attach`.\n       */\n      if (rerunContinue) {\n        const threadId = pendingResumeThreadId ?? latestThreadId;\n        pendingResumeThreadId = undefined;\n        channel.send({\n          type: 'start' as const,\n          /*\n           * A continuation nudge rather than an empty prompt: `resumeThreadId`\n           * rehydrates the prior thread, and this is the new user turn that\n           * drives it forward. Keeping it non-empty avoids handing the runtime\n           * an empty user message (and mirrors the claude-code adapter, where an\n           * empty text block trips the Anthropic API's `cache_control` rule).\n           */\n          prompt: 'Continue.',\n          tools: (continueOpts.tools ?? []).map(t => ({\n            name: t.name,\n            description: t.description,\n            inputSchema: t.inputSchema,\n          })),\n          model,\n          reasoningEffort,\n          webSearch,\n          ...(permissionMode ? { permissionMode } : {}),\n          ...(threadId ? { resumeThreadId: threadId } : {}),\n          ...(debug ? { debug } : {}),\n        });\n      }\n\n      return control;\n    },\n    doCompact: async () => {\n      /*\n       * Codex compacts its context automatically inside the core turn loop\n       * (~90% of the model context window), but the `codex exec` transport this\n       * adapter drives exposes no manual compaction trigger and emits no\n       * compaction event. Manual `compact()` is therefore unsupported; Codex's\n       * own auto-compaction continues to run regardless.\n       */\n      throw new HarnessCapabilityUnsupportedError({\n        message:\n          \"Harness 'codex' does not support manual compaction; Codex auto-compacts its context internally.\",\n        harnessId: 'codex',\n      });\n    },\n    doDetach: async () => {\n      if (stopped) {\n        throw new Error(\n          `codex session ${sessionId} is already stopped; cannot detach.`,\n        );\n      }\n      stopped = true;\n      const lastSeenEventId = await channel.suspend();\n      const payload: HarnessV1ResumeSessionState = {\n        type: 'resume-session',\n        harnessId: 'codex',\n        specificationVersion: 'harness-v1',\n        data: {\n          ...(latestThreadId ? { threadId: latestThreadId } : {}),\n          bridge: {\n            port: bridgePort,\n            token: bridgeToken,\n            lastSeenEventId,\n            sandboxId,\n          },\n        },\n      };\n      return payload;\n    },\n    doDestroy: async () => {\n      if (stopped) return stopPromise;\n      stopped = true;\n      stopPromise = (async () => {\n        // Tell the channel we are tearing down so the bridge's post-shutdown\n        // socket close finalises instead of triggering a reconnect.\n        channel.beginClose();\n        try {\n          if (!channel.isClosed()) {\n            channel.send({ type: 'shutdown' });\n          }\n        } catch {}\n        let stopTimer: ReturnType<typeof setTimeout> | undefined;\n        try {\n          if (proc) {\n            await Promise.race([\n              proc.wait(),\n              new Promise<void>(resolve => {\n                stopTimer = setTimeout(resolve, 5000);\n                stopTimer.unref?.();\n              }),\n            ]);\n          }\n        } finally {\n          if (stopTimer) clearTimeout(stopTimer);\n          try {\n            await proc?.kill();\n          } catch {}\n          channel.close();\n        }\n      })();\n      return stopPromise;\n    },\n    doStop: async () => {\n      if (stopped) {\n        throw new Error(\n          `codex session ${sessionId} is already stopped; cannot stop.`,\n        );\n      }\n      stopped = true;\n      /*\n       * If the bridge's channel already closed (e.g. mid-turn WS drop)\n       * there is no one to ack a `detach` message. Synthesize an empty\n       * payload — the workdir is still captured by the sandbox snapshot\n       * during the subsequent `sandboxSession.stop()`, so the next turn can\n       * resume the filesystem state. The trade-off: we lose\n       * `threadId`, so the codex CLI starts a fresh thread on the\n       * preserved workdir rather than resuming the prior conversation\n       * inside Codex's runtime. Ability to continue beats throwing.\n       */\n      // Tell the channel we are tearing down so the bridge's post-detach\n      // socket close finalises instead of triggering a reconnect.\n      channel.beginClose();\n      const data: unknown = channel.isClosed()\n        ? {}\n        : await new Promise<unknown>((resolve, reject) => {\n            const timer = setTimeout(() => {\n              unsub();\n              reject(\n                new Error(\n                  `codex session ${sessionId} did not reply to detach within 5s.`,\n                ),\n              );\n            }, 5000);\n            timer.unref?.();\n            const unsub = channel.on('bridge-detach', msg => {\n              clearTimeout(timer);\n              unsub();\n              resolve(msg.data);\n            });\n            try {\n              channel.send({ type: 'detach' });\n            } catch (err) {\n              clearTimeout(timer);\n              unsub();\n              reject(err);\n            }\n          });\n\n      let stopTimer: ReturnType<typeof setTimeout> | undefined;\n      try {\n        if (proc) {\n          await Promise.race([\n            proc.wait(),\n            new Promise<void>(resolve => {\n              stopTimer = setTimeout(resolve, 5000);\n              stopTimer.unref?.();\n            }),\n          ]);\n        }\n      } finally {\n        if (stopTimer) clearTimeout(stopTimer);\n        try {\n          await proc?.kill();\n        } catch {}\n        channel.close();\n      }\n\n      const payload: HarnessV1ResumeSessionState = {\n        type: 'resume-session',\n        harnessId: 'codex',\n        specificationVersion: 'harness-v1',\n        data: (data ?? {}) as HarnessV1ResumeSessionState['data'],\n      };\n      return payload;\n    },\n    doSuspendTurn: async () => {\n      if (stopped) {\n        throw new Error(\n          `codex session ${sessionId} is stopped; cannot suspend.`,\n        );\n      }\n      stopped = true;\n      /*\n       * Gracefully freeze the active turn at a precise cursor. `channel.suspend`\n       * stops processing inbound frames (the cursor stops advancing exactly at\n       * the last delivered event), drains what was already dispatched, then\n       * closes the host socket with reason `'suspended'` — which `wireTurn`'s\n       * `onClose` treats as a clean turn end. The bridge keeps the turn running\n       * and accumulates events past the cursor for the next slice to replay. The\n       * sandbox process is deliberately left alive (no `shutdown`/`detach`).\n       */\n      const lastSeenEventId = await channel.suspend();\n      const payload: HarnessV1ContinueTurnState = {\n        type: 'continue-turn',\n        harnessId: 'codex',\n        specificationVersion: 'harness-v1',\n        data: {\n          ...(latestThreadId ? { threadId: latestThreadId } : {}),\n          bridge: {\n            port: bridgePort,\n            token: bridgeToken,\n            lastSeenEventId,\n            sandboxId,\n          },\n        },\n      };\n      return payload;\n    },\n  };\n}\n\n/*\n * Reduce a `HarnessV1Prompt` to the plain user text the bridge forwards\n * to the Codex SDK. File and image parts on the message are not yet\n * supported by the underlying runtime — throw rather than silently drop\n * them so callers learn about the gap instead of seeing mysteriously\n * truncated prompts.\n */\nfunction extractUserText(prompt: HarnessV1Prompt): string {\n  if (typeof prompt === 'string') return prompt;\n  const { content } = prompt;\n  if (typeof content === 'string') return content;\n  const parts: string[] = [];\n  for (const part of content) {\n    if (part.type !== 'text') {\n      throw new HarnessCapabilityUnsupportedError({\n        harnessId: 'codex',\n        message: `The codex harness does not yet support user message parts of type '${part.type}'. Pass a string or a user message whose content contains only text parts.`,\n      });\n    }\n    parts.push(part.text);\n  }\n  return parts.join('\\n\\n');\n}\n","export type CodexAuthOptions = {\n  readonly openaiCompatible?: {\n    readonly apiKey?: string;\n    readonly baseUrl?: string;\n    readonly modelProviderName?: string;\n    readonly queryParamsJson?: string;\n  };\n  readonly openai?: {\n    readonly apiKey?: string;\n    readonly baseUrl?: string;\n    readonly organization?: string;\n    readonly project?: string;\n  };\n  readonly gateway?: {\n    readonly apiKey?: string;\n    readonly baseUrl?: string;\n  };\n};\n\n/**\n * Resolve the environment-variable blob the codex bridge needs. Precedence:\n *\n *   1. Explicit `auth.openaiCompatible` — pin to a custom OpenAI-compatible endpoint.\n *   2. Explicit `auth.openai` — pin to direct OpenAI auth.\n *   3. Explicit `auth.gateway` — pin to Vercel AI Gateway.\n *   4. Auto-detect from the host process env: gateway first\n *      (`AI_GATEWAY_API_KEY`), then `CODEX_API_KEY` / `OPENAI_API_KEY`.\n */\nexport function resolveCodexEnv(\n  auth: CodexAuthOptions | undefined,\n  processEnv: Record<string, string | undefined> = process.env,\n): Record<string, string> {\n  if (auth?.openaiCompatible) {\n    return pickOpenAICompatible(auth.openaiCompatible, processEnv);\n  }\n  if (auth?.openai) {\n    return pickOpenAI({ explicit: auth.openai, processEnv });\n  }\n  if (auth?.gateway) {\n    return pickGateway(auth.gateway, processEnv);\n  }\n  if (processEnv.AI_GATEWAY_API_KEY) {\n    return pickGateway({}, processEnv);\n  }\n  return pickOpenAI({ processEnv });\n}\n\nfunction pickOpenAICompatible(\n  explicit: NonNullable<CodexAuthOptions['openaiCompatible']>,\n  processEnv: Record<string, string | undefined>,\n): Record<string, string> {\n  const env: Record<string, string> = {};\n  const apiKey =\n    explicit.apiKey ?? processEnv.OPENAI_API_KEY ?? processEnv.CODEX_API_KEY;\n  if (apiKey) env.CODEX_API_KEY = apiKey;\n  if (explicit.baseUrl) env.OPENAI_BASE_URL = explicit.baseUrl;\n  if (explicit.modelProviderName)\n    env.CODEX_MODEL_PROVIDER_NAME = explicit.modelProviderName;\n  if (explicit.queryParamsJson)\n    env.OPENAI_QUERY_PARAMS_JSON = explicit.queryParamsJson;\n  return env;\n}\n\nfunction pickOpenAI({\n  explicit,\n  processEnv,\n}: {\n  explicit?: NonNullable<CodexAuthOptions['openai']>;\n  processEnv: Record<string, string | undefined>;\n}): Record<string, string> {\n  const env: Record<string, string> = {};\n  const apiKey =\n    explicit?.apiKey ?? processEnv.OPENAI_API_KEY ?? processEnv.CODEX_API_KEY;\n  if (apiKey) env.CODEX_API_KEY = apiKey;\n  const baseUrl = explicit?.baseUrl ?? processEnv.OPENAI_BASE_URL;\n  if (baseUrl) env.OPENAI_BASE_URL = baseUrl;\n  const organization = explicit?.organization ?? processEnv.OPENAI_ORGANIZATION;\n  if (organization) env.OPENAI_ORGANIZATION = organization;\n  const project = explicit?.project ?? processEnv.OPENAI_PROJECT;\n  if (project) env.OPENAI_PROJECT = project;\n  return env;\n}\n\nfunction pickGateway(\n  explicit: NonNullable<CodexAuthOptions['gateway']>,\n  processEnv: Record<string, string | undefined>,\n): Record<string, string> {\n  const apiKey = explicit.apiKey ?? processEnv.AI_GATEWAY_API_KEY;\n  const baseUrl =\n    explicit.baseUrl ??\n    processEnv.AI_GATEWAY_BASE_URL ??\n    'https://ai-gateway.vercel.sh/v1';\n  const env: Record<string, string> = {};\n  if (apiKey) {\n    env.AI_GATEWAY_API_KEY = apiKey;\n    env.CODEX_API_KEY = apiKey;\n  }\n  env.AI_GATEWAY_BASE_URL = baseUrl;\n  return env;\n}\n","import {\n  harnessV1BridgeInboundCommandSchemas,\n  harnessV1BridgeOutboundMessageSchema,\n  harnessV1BridgeReadySchema,\n  harnessV1BridgeStartBaseSchema,\n} from '@ai-sdk/harness';\nimport { z } from 'zod/v4';\n\n/*\n * Codex's bridge wire protocol. The outbound events (including `file-change`\n * and the `bridge-thread` resume coordinate), transport frames, shared inbound\n * commands, and `bridge-ready` line all come from the shared `@ai-sdk/harness`\n * protocol — the only Codex-specific piece is the `start` payload.\n */\n\nexport const outboundMessageSchema = harnessV1BridgeOutboundMessageSchema;\nexport type OutboundMessage = z.infer<typeof outboundMessageSchema>;\n\nexport const startMessageSchema = harnessV1BridgeStartBaseSchema.extend({\n  instructions: z.string().optional(),\n  reasoningEffort: z.enum(['low', 'medium', 'high']).optional(),\n  webSearch: z.boolean().optional(),\n  // Resume signal. When supplied, the bridge calls\n  // `codex.resumeThread(resumeThreadId, …)` instead of starting a fresh thread.\n  // The host sources the id from lifecycle state `data` cached from a prior\n  // `agent.detach`.\n  resumeThreadId: z.string().optional(),\n});\n\nexport type StartMessage = z.infer<typeof startMessageSchema>;\n\nexport const inboundMessageSchema = z.discriminatedUnion('type', [\n  startMessageSchema,\n  ...harnessV1BridgeInboundCommandSchemas,\n]);\nexport type InboundMessage = z.infer<typeof inboundMessageSchema>;\n\nexport const bridgeReadySchema = harnessV1BridgeReadySchema;\nexport type BridgeReady = z.infer<typeof bridgeReadySchema>;\n","import { createCodex } from './codex-harness';\n\n/**\n * Default `codex` harness instance with no overrides — suitable for the\n * common case where the underlying `codex` CLI's defaults are fine.\n * Equivalent to `createCodex()`.\n */\nexport const codex = createCodex();\n\nexport { createCodex } from './codex-harness';\nexport type { CodexHarnessSettings } from './codex-harness';\nexport type { CodexAuthOptions } from './codex-auth';\n"],"mappings":";AAAA,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAcK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAKP,SAAS,iBAAiB;AAC1B,SAAS,KAAAA,UAAS;;;ACLX,SAAS,gBACd,MACA,aAAiD,QAAQ,KACjC;AACxB,MAAI,MAAM,kBAAkB;AAC1B,WAAO,qBAAqB,KAAK,kBAAkB,UAAU;AAAA,EAC/D;AACA,MAAI,MAAM,QAAQ;AAChB,WAAO,WAAW,EAAE,UAAU,KAAK,QAAQ,WAAW,CAAC;AAAA,EACzD;AACA,MAAI,MAAM,SAAS;AACjB,WAAO,YAAY,KAAK,SAAS,UAAU;AAAA,EAC7C;AACA,MAAI,WAAW,oBAAoB;AACjC,WAAO,YAAY,CAAC,GAAG,UAAU;AAAA,EACnC;AACA,SAAO,WAAW,EAAE,WAAW,CAAC;AAClC;AAEA,SAAS,qBACP,UACA,YACwB;AACxB,QAAM,MAA8B,CAAC;AACrC,QAAM,SACJ,SAAS,UAAU,WAAW,kBAAkB,WAAW;AAC7D,MAAI,OAAQ,KAAI,gBAAgB;AAChC,MAAI,SAAS,QAAS,KAAI,kBAAkB,SAAS;AACrD,MAAI,SAAS;AACX,QAAI,4BAA4B,SAAS;AAC3C,MAAI,SAAS;AACX,QAAI,2BAA2B,SAAS;AAC1C,SAAO;AACT;AAEA,SAAS,WAAW;AAAA,EAClB;AAAA,EACA;AACF,GAG2B;AACzB,QAAM,MAA8B,CAAC;AACrC,QAAM,SACJ,UAAU,UAAU,WAAW,kBAAkB,WAAW;AAC9D,MAAI,OAAQ,KAAI,gBAAgB;AAChC,QAAM,UAAU,UAAU,WAAW,WAAW;AAChD,MAAI,QAAS,KAAI,kBAAkB;AACnC,QAAM,eAAe,UAAU,gBAAgB,WAAW;AAC1D,MAAI,aAAc,KAAI,sBAAsB;AAC5C,QAAM,UAAU,UAAU,WAAW,WAAW;AAChD,MAAI,QAAS,KAAI,iBAAiB;AAClC,SAAO;AACT;AAEA,SAAS,YACP,UACA,YACwB;AACxB,QAAM,SAAS,SAAS,UAAU,WAAW;AAC7C,QAAM,UACJ,SAAS,WACT,WAAW,uBACX;AACF,QAAM,MAA8B,CAAC;AACrC,MAAI,QAAQ;AACV,QAAI,qBAAqB;AACzB,QAAI,gBAAgB;AAAA,EACtB;AACA,MAAI,sBAAsB;AAC1B,SAAO;AACT;;;ACnGA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AASX,IAAM,wBAAwB;AAG9B,IAAM,qBAAqB,+BAA+B,OAAO;AAAA,EACtE,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,iBAAiB,EAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5D,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAIM,IAAM,uBAAuB,EAAE,mBAAmB,QAAQ;AAAA,EAC/D;AAAA,EACA,GAAG;AACL,CAAC;;;AFwBD,IAAM,sBAAsB;AAuC5B,IAAM,sBAAsB;AAAA,EAC1B,MAAM,WAAW,QAAQ;AAAA,IACvB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,aAAaC,GAAE,OAAO,EAAE,SAASA,GAAE,OAAO,EAAE,CAAC;AAAA,EAC/C,CAAC;AAAA,EACD,WAAW,WAAW,aAAa;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,aAAa;AAAA,IACb,aAAaA,GAAE,OAAO,EAAE,OAAOA,GAAE,OAAO,EAAE,CAAC;AAAA,EAC7C,CAAC;AACH;AAcA,IAAM,gBAAgB;AAOtB,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EAClC,MAAMA,GAAE,OAAO;AAAA,EACf,OAAOA,GAAE,OAAO;AAAA,EAChB,iBAAiBA,GAAE,OAAO;AAAA,EAC1B,WAAWA,GAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAUD,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EACtC,UAAUA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,QAAQ,mBAAmB,SAAS;AACtC,CAAC;AAIM,SAAS,YACd,WAAiC,CAAC,GACK;AACvC,MAAI;AAEJ,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,WAAW;AAAA,IACX,cAAc;AAAA,IACd,8BAA8B;AAAA,IAC9B,sBAAsB;AAAA,IACtB,cAAc,YAAY;AACxB,UAAI,mBAAmB,KAAM,QAAO;AACpC,YAAM,CAAC,KAAK,MAAM,QAAQ,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,QACzD,gBAAgB,cAAc;AAAA,QAC9B,gBAAgB,gBAAgB;AAAA,QAChC,gBAAgB,WAAW;AAAA,QAC3B,gBAAgB,mBAAmB;AAAA,MACrC,CAAC;AACD,wBAAkB;AAAA,QAChB,WAAW;AAAA,QACX,cAAc;AAAA,QACd,OAAO;AAAA,UACL,EAAE,MAAM,GAAG,aAAa,iBAAiB,SAAS,IAAI;AAAA,UACtD,EAAE,MAAM,GAAG,aAAa,mBAAmB,SAAS,KAAK;AAAA,UACzD,EAAE,MAAM,GAAG,aAAa,eAAe,SAAS,OAAO;AAAA,UACvD;AAAA,YACE,MAAM,GAAG,aAAa;AAAA,YACtB,SAAS;AAAA,UACX;AAAA,QACF;AAAA,QACA,UAAU;AAAA,UACR,EAAE,SAAS,YAAY,aAAa,GAAG;AAAA,UACvC;AAAA,YACE,SAAS,cAAc,aAAa,0CAA0C,aAAa;AAAA,UAC7F;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,SAAS,OAAM,cAAa;AAC1B,UACE,UAAU,kBAAkB,QAC5B,UAAU,mBAAmB,aAC7B;AACA,cAAM,IAAI,kCAAkC;AAAA,UAC1C,SACE;AAAA,UACF,WAAW;AAAA,QACb,CAAC;AAAA,MACH;AACA,YAAM,iBAAiB,UAAU;AACjC,YAAM,UAAU,eAAe,WAAW;AAC1C,YAAM,YAAY,eAAe;AACjC,YAAM,iBAAiB,UAAU,gBAAgB,UAAU;AAC3D,YAAM,WAAW,kBAAkB;AACnC,YAAM,aAAa,UAAU,gBAAgB;AAC7C,YAAM,aACJ,YAAY,OAAO,gBAAgB,SAAS,WACvC,eAAe,OAIhB;AACN,YAAM,iBAAiB,YAAY;AACnC,YAAM,uBACJ,OAAO,mBAAmB,YAAY,eAAe,SAAS,IAC1D,iBACA;AACN,YAAM,SAAS,YAAY;AAE3B,YAAM,UAAU,UAAU;AAC1B,YAAM,iBAAiB,GAAG,eAAe,uBAAuB,gBAAgB,UAAU,SAAS;AACnG,YAAM,iBAAiB,GAAG,cAAc;AACxC,YAAM,YAAY,SAAS,oBAAoB;AAK/C,YAAM,SAAS,UAAU,eAAe;AACxC,YAAM,eAAe,SACjB,CAAC,UACC;AAAA,QACE,mCAAmC,OAAO;AAAA,UACxC,WAAW,UAAU;AAAA,UACrB,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AAAA,MACH,IACF;AAUJ,UAAI,QAAQ;AACV,YAAI;AACF,gBAAM,YACH,MAAM,eAAe,WAAW;AAAA,YAC/B,MAAM,OAAO;AAAA,YACb,UAAU;AAAA,UACZ,CAAC,IAAK,uBAAuB,mBAAmB,OAAO,KAAK,CAAC;AAC/D,gBAAM,gBAA8B,IAAI,eAAe;AAAA,YACrD,SAAS,MAAM,cAAc,SAAS;AAAA,YACtC,gBAAgB;AAAA,YAChB,wBAAwB,OAAO;AAAA,YAC/B;AAAA,UACF,CAAC;AACD,gBAAM,cAAc,KAAK,aAAa,EAAE,QAAQ,KAAK,IAAI,MAAS;AAClE,iBAAO,cAAc;AAAA,YACnB,WAAW,UAAU;AAAA,YACrB,SAAS;AAAA;AAAA,YAET,MAAM;AAAA,YACN,OAAO,SAAS,SAAS;AAAA,YACzB,iBAAiB,SAAS;AAAA,YAC1B,WAAW,SAAS;AAAA,YACpB,gBAAgB;AAAA,YAChB,UAAU;AAAA,YACV,+BAA+B;AAAA,YAC/B,eAAe;AAAA,YACf,YAAY,OAAO;AAAA,YACnB,aAAa,OAAO;AAAA,YACpB;AAAA,YACA,OAAO,UAAU,eAAe;AAAA,YAChC,gBAAgB,UAAU;AAAA,UAC5B,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF;AAUA,UAAI,kBAAoD,WACpD,UACA;AACJ,UAAI,UAAU,YAAY;AACxB,cAAM,SAAS,MAAM,QAAQ;AAAA,UAC3B,QAAQ,aAAa;AAAA,YACnB,MAAM,GAAG,cAAc;AAAA,YACvB,aAAa,UAAU;AAAA,UACzB,CAAC;AAAA,QACH,EAAE,MAAM,MAAM,IAAI;AAClB,YAAK,MAAM,gBAAgB,MAAM,MAAO,UAAU;AAChD,4BAAkB;AAAA,QACpB;AAAA,MACF;AAEA,YAAM,OAAO,kBAAkB,gBAAgB,SAAS,IAAI;AAC5D,YAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,KAAK;AAC5C,YAAM,kBACJ,UAAU,UAAU,UAAU,OAAO,SAAS,IAC1C,MAAM,YAAY;AAAA,QAChB,SAAS;AAAA,QACT,QAAQ,UAAU;AAAA,QAClB,aAAa,UAAU;AAAA,MACzB,CAAC,IACD;AACN,YAAM,MAAM;AAAA,QACV,GAAG,gBAAgB,SAAS,IAAI;AAAA,QAChC,sBAAsB;AAAA,QACtB,gBAAgB,OAAO,IAAI;AAAA,QAC3B,GAAI,kBACA;AAAA,UACE,MAAM,gBAAgB;AAAA,UACtB,YAAY,gBAAgB;AAAA,QAC9B,IACA,CAAC;AAAA,QACL,GAAI,oBAAoB,WACpB,EAAE,yBAAyB,IAAI,IAC/B,CAAC;AAAA,MACP;AAEA,UAAI,oBAAoB,QAAW;AACjC,cAAM,QAAQ,IAAI;AAAA,UAChB,SAAS,YAAY,OAAO,IAAI,cAAc;AAAA,UAC9C,aAAa,UAAU;AAAA,QACzB,CAAC;AAAA,MACH;AAEA,YAAM,mBAAmB;AAAA,QACvB,SAAS;AAAA,QACT;AAAA,QACA,YAAY;AAAA,QACZ,aAAa,UAAU;AAAA,MACzB,CAAC;AAED,YAAM,OAAO,MAAM,QAAQ,MAAM;AAAA,QAC/B,SAAS,QAAQ,aAAa,yBAAyB,OAAO,uBAAuB,cAAc,oBAAoB,aAAa;AAAA,QACpI;AAAA,QACA,aAAa,UAAU;AAAA,MACzB,CAAC;AAED,YAAM,EAAE,MAAM,UAAU,IAAI,MAAM,mBAAmB;AAAA,QACnD;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA,YAAY;AAAA,QACZ;AAAA,QACA,aAAa,UAAU;AAAA,QACvB,oBAAoB,MAClB,IAAI,MAAM,4CAA4C;AAAA,QACxD,iBAAiB,MACf,IAAI,MAAM,4CAA4C;AAAA,MAC1D,CAAC;AACD,WAAK,UAAU,KAAK,MAAM;AAU1B,WAAK,oBAAoB,KAAK,MAAM;AAEpC,YAAM,QACH,MAAM,eAAe,WAAW;AAAA,QAC/B,MAAM;AAAA,QACN,UAAU;AAAA,MACZ,CAAC,IAAK,uBAAuB,mBAAmB,KAAK,CAAC;AAExD,YAAM,UAAwB,IAAI,eAAe;AAAA,QAC/C,SAAS,MAAM,cAAc,KAAK;AAAA,QAClC,gBAAgB;AAAA,QAChB;AAAA;AAAA;AAAA;AAAA,QAIA,GAAI,oBAAoB,WACpB,EAAE,wBAAwB,QAAQ,mBAAmB,EAAE,IACvD,CAAC;AAAA,MACP,CAAC;AACD,YAAM,QAAQ;AAAA,QACZ,oBAAoB,WAAW,EAAE,QAAQ,KAAK,IAAI;AAAA,MACpD;AAEA,aAAO,cAAc;AAAA,QACnB,WAAW,UAAU;AAAA,QACrB;AAAA,QACA;AAAA,QACA,OAAO,SAAS,SAAS;AAAA,QACzB,iBAAiB,SAAS;AAAA,QAC1B,WAAW,SAAS;AAAA,QACpB,gBAAgB;AAAA,QAChB,UAAU,oBAAoB;AAAA,QAC9B,+BAA+B,oBAAoB;AAAA,QACnD,eAAe,oBAAoB;AAAA,QACnC,YAAY;AAAA,QACZ,aAAa;AAAA,QACb;AAAA,QACA,OAAO,UAAU,eAAe;AAAA,QAChC,gBAAgB,UAAU;AAAA,MAC5B,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,SAAS,kBACP,gBACA,UACQ;AACR,MAAI,aAAa,OAAW,QAAO;AACnC,MAAI,eAAe,MAAM,SAAS,EAAG,QAAO,eAAe,MAAM,CAAC;AAClE,QAAM,IAAI,kCAAkC;AAAA,IAC1C,WAAW;AAAA,IACX,SACE;AAAA,EAEJ,CAAC;AACH;AAEA,eAAe,gBAAgB,MAA+B;AAC5D,QAAM,aAAa;AAAA,IACjB,IAAI,IAAI,YAAY,IAAI,IAAI,YAAY,GAAG;AAAA,IAC3C,IAAI,IAAI,aAAa,IAAI,IAAI,YAAY,GAAG;AAAA,EAC9C;AACA,MAAI;AACJ,aAAW,OAAO,YAAY;AAC5B,QAAI;AACF,aAAO,MAAM,SAAS,cAAc,GAAG,GAAG,MAAM;AAAA,IAClD,SAAS,KAAK;AACZ,YAAM,OAAQ,IAA8B;AAC5C,UAAI,SAAS,SAAU,OAAM;AAC7B,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,QAAM,WAAW,IAAI,MAAM,2BAA2B,IAAI,EAAE;AAC9D;AAEA,eAAe,YAAY;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AACF,GAI+B;AAC7B,aAAW,SAAS,QAAQ;AAC1B,uBAAmB,MAAM,IAAI;AAC7B,eAAW,QAAQ,MAAM,SAAS,CAAC,GAAG;AACpC,6BAAuB;AAAA,QACrB,WAAW,MAAM;AAAA,QACjB,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,sBAAsB,EAAE,SAAS,YAAY,CAAC;AACpE,QAAM,eAAe,KAAK,MAAM,KAAK,SAAS,QAAQ;AACtD,QAAM,QAAQ,IAAI;AAAA,IAChB,SAAS,YAAY,WAAW,YAAY,CAAC;AAAA,IAC7C;AAAA,EACF,CAAC;AAED,QAAM,UAAU,KAAK,MAAM,KAAK,SAAS,WAAW,QAAQ;AAC5D,QAAM,QAAQ,IAAI;AAAA,IAChB,SAAS,YAAY,WAAW,OAAO,CAAC;AAAA,IACxC;AAAA,EACF,CAAC;AAED,aAAW,SAAS,QAAQ;AAC1B,UAAM,OAAO,mBAAmB,MAAM,IAAI;AAC1C,UAAM,WAAW,KAAK,MAAM,KAAK,SAAS,IAAI;AAC9C,UAAM,UAAU;AAAA,QAAc,MAAM,IAAI;AAAA,eAAkB,MAAM,WAAW;AAAA;AAAA;AAAA,EAAY,MAAM,OAAO;AAEpG,UAAM,QAAQ,cAAc;AAAA,MAC1B,MAAM,KAAK,MAAM,KAAK,UAAU,UAAU;AAAA,MAC1C;AAAA,MACA;AAAA,IACF,CAAC;AAED,eAAW,QAAQ,MAAM,SAAS,CAAC,GAAG;AACpC,YAAM,WAAW,uBAAuB;AAAA,QACtC,WAAW,MAAM;AAAA,QACjB,UAAU,KAAK;AAAA,MACjB,CAAC;AACD,YAAM,QAAQ,cAAc;AAAA,QAC1B,MAAM,KAAK,MAAM,KAAK,UAAU,QAAQ;AAAA,QACxC,SAAS,KAAK;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB;AAAA,EACnC;AAAA,EACA;AACF,GAGoB;AAClB,QAAM,SAAS,MAAM,QAAQ,IAAI;AAAA,IAC/B,SAAS;AAAA,IACT;AAAA,EACF,CAAC;AACD,QAAM,UAAU,OAAO,OAAO,KAAK;AACnC,MAAI,OAAO,aAAa,KAAK,CAAC,WAAW,CAAC,KAAK,MAAM,WAAW,OAAO,GAAG;AACxE,UAAM,IAAI;AAAA,MACR,6CAA6C,OAAO,UAAU,OAAO,MAAM;AAAA,IAC7E;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAsB;AAChD,MAAI,CAAC,oBAAoB,KAAK,IAAI,KAAK,SAAS,OAAO,SAAS,MAAM;AACpE,UAAM,IAAI,MAAM,6BAA6B,IAAI,EAAE;AAAA,EACrD;AACA,SAAO;AACT;AAEA,SAAS,uBAAuB;AAAA,EAC9B;AAAA,EACA;AACF,GAGW;AACT,QAAM,aAAa,KAAK,MAAM,UAAU,QAAQ;AAChD,MACE,eAAe,OACf,WAAW,WAAW,KAAK,KAC3B,KAAK,MAAM,WAAW,UAAU,GAChC;AACA,UAAM,IAAI;AAAA,MACR,qCAAqC,SAAS,KAAK,QAAQ;AAAA,IAC7D;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AAEA,eAAe,oBACb,QACe;AACf,MAAI;AACF,UAAM,SAAS,OAAO,YAAY,IAAI,kBAAkB,CAAC,EAAE,UAAU;AACrE,WAAO,MAAM;AACX,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,UAAI,OAAO;AACT,cAAM,UAAU,MAAM,SAAS,IAAI,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI;AAC5D,YAAI,QAAQ,SAAS,GAAG;AAEtB,kBAAQ,IAAI,mBAAmB,OAAO,EAAE;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,eAAe,UAAU,QAAmD;AAC1E,MAAI;AACF,UAAM,SAAS,OAAO,YAAY,IAAI,kBAAkB,CAAC,EAAE,UAAU;AACrE,WAAO,MAAM;AACX,YAAM,EAAE,KAAK,IAAI,MAAM,OAAO,KAAK;AACnC,UAAI,KAAM;AAAA,IACZ;AAAA,EACF,QAAQ;AAAA,EAAC;AACX;AAEA,SAAS,cAAc,KAAiC;AACtD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,IAAI,UAAU,GAAG;AAC5B,UAAM,SAAS,MAAM;AACnB,SAAG,IAAI,SAAS,OAAO;AACvB,cAAQ,EAAE;AAAA,IACZ;AACA,UAAM,UAAU,CAAC,QAAe;AAC9B,SAAG,IAAI,QAAQ,MAAM;AACrB,aAAO,GAAG;AAAA,IACZ;AACA,OAAG,KAAK,QAAQ,MAAM;AACtB,OAAG,KAAK,SAAS,OAAO;AAAA,EAC1B,CAAC;AACH;AAEA,SAAS,cAAc;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAiBqB;AACnB,MAAI,UAAU;AACd,MAAI;AAOJ,MAAI,wBAAwB,gCACxB,iBACA;AAOJ,MAAI,sBAAsB;AAO1B,MAAI,iBAAiB;AACrB,UAAQ,GAAG,iBAAiB,SAAO;AACjC,qBAAiB,IAAI;AAAA,EACvB,CAAC;AASD,QAAM,WAAW,CAAC,aAGY;AAC5B,QAAI;AACJ,QAAI;AACJ,UAAM,OAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,uBAAiB;AACjB,sBAAgB;AAAA,IAClB,CAAC;AAED,UAAM,SAA4B,CAAC;AACnC,UAAM,UAAU,CAAC,UAA+B;AAC9C,UAAI;AACF,iBAAS,KAAK,KAAK;AAAA,MACrB,QAAQ;AAAA,MAAC;AAAA,IACX;AAEA,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,YAAY;AAChB,UAAM,gBAAgB,MAAM;AAC1B,UAAI,UAAW;AACf,kBAAY;AACZ,iBAAW,KAAK,OAAQ,GAAE;AAC1B,qBAAgB;AAAA,IAClB;AACA,UAAM,cAAc,CAAC,QAAiB;AACpC,UAAI,UAAW;AACf,kBAAY;AACZ,iBAAW,KAAK,OAAQ,GAAE;AAC1B,oBAAe,GAAG;AAAA,IACpB;AAEA,eAAW,QAAQ,YAAY;AAC7B,aAAO;AAAA,QACL,QAAQ,GAAG,MAAM,SAAO;AACtB,kBAAQ,GAAG;AAAA,QACb,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,MACL,QAAQ,GAAG,UAAU,SAAO;AAC1B,gBAAQ,GAAG;AACX,sBAAc;AAAA,MAChB,CAAC;AAAA,IACH;AACA,WAAO;AAAA,MACL,QAAQ,GAAG,SAAS,SAAO;AACzB,gBAAQ,GAAG;AACX,oBAAY,IAAI,KAAK;AAAA,MACvB,CAAC;AAAA,IACH;AAQA,UAAM,UAAU,CAAC,OAAgB,WAAoB;AACnD,UAAI,UAAW;AACf,UAAI,WAAW,aAAa;AAC1B,sBAAc;AACd;AAAA,MACF;AACA,kBAAY,IAAI,MAAM,+CAA+C,CAAC;AAAA,IACxE;AACA,YAAQ,QAAQ,OAAO;AAEvB,UAAM,UAAU,MAAM;AACpB,UAAI,UAAW;AACf,UAAI;AACF,gBAAQ,KAAK,EAAE,MAAM,QAAQ,CAAC;AAAA,MAChC,QAAQ;AAAA,MAAC;AACT;AAAA,QACE,SAAS,aAAa,UACpB,IAAI,aAAa,WAAW,YAAY;AAAA,MAC5C;AAAA,IACF;AACA,QAAI,SAAS,aAAa;AACxB,UAAI,SAAS,YAAY,SAAS;AAChC,gBAAQ;AAAA,MACV,OAAO;AACL,iBAAS,YAAY,iBAAiB,SAAS,SAAS;AAAA,UACtD,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO;AAAA,MACL,kBAAkB,OAAM,UAAS;AAC/B,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,YAAY,MAAM;AAAA,UAClB,QAAQ,MAAM;AAAA,UACd,SAAS,MAAM;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,MACA,oBAAoB,OAAM,UAAS;AACjC,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA,UACN,YAAY,MAAM;AAAA,UAClB,UAAU,MAAM;AAAA,UAChB,QAAQ,MAAM;AAAA,QAChB,CAAC;AAAA,MACH;AAAA,MACA,mBAAmB,OAAM,SAAQ;AAC/B,gBAAQ,KAAK,EAAE,MAAM,gBAAgB,KAAK,CAAC;AAAA,MAC7C;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,cAAc,OAAM,eAAc;AAChC,YAAM,UAAU,SAAS;AAAA,QACvB,MAAM,WAAW;AAAA,QACjB,aAAa,WAAW;AAAA,MAC1B,CAAC;AAED,YAAM,oBACJ,CAAC,uBAAuB,CAAC,CAAC,WAAW;AACvC,4BAAsB;AAEtB,YAAM,eAAe;AAAA,QACnB,MAAM;AAAA,QACN,QAAQ,gBAAgB,WAAW,MAAM;AAAA,QACzC,GAAI,oBAAoB,EAAE,cAAc,WAAW,aAAa,IAAI,CAAC;AAAA,QACrE,QAAQ,WAAW,SAAS,CAAC,GAAG,IAAI,QAAM;AAAA,UACxC,MAAM,EAAE;AAAA,UACR,aAAa,EAAE;AAAA,UACf,aAAa,EAAE;AAAA,QACjB,EAAE;AAAA,QACF;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,QAC3C,GAAI,wBACA,EAAE,gBAAgB,sBAAsB,IACxC,CAAC;AAAA,QACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,MAC3B;AACA,8BAAwB;AACxB,cAAQ,KAAK,YAAY;AAEzB,aAAO;AAAA,IACT;AAAA,IACA,gBAAgB,OAAM,iBAAgB;AACpC,YAAM,UAAU,SAAS;AAAA,QACvB,MAAM,aAAa;AAAA,QACnB,aAAa,aAAa;AAAA,MAC5B,CAAC;AAcD,UAAI,eAAe;AACjB,cAAM,WAAW,yBAAyB;AAC1C,gCAAwB;AACxB,gBAAQ,KAAK;AAAA,UACX,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAQN,QAAQ;AAAA,UACR,QAAQ,aAAa,SAAS,CAAC,GAAG,IAAI,QAAM;AAAA,YAC1C,MAAM,EAAE;AAAA,YACR,aAAa,EAAE;AAAA,YACf,aAAa,EAAE;AAAA,UACjB,EAAE;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,UACA,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;AAAA,UAC3C,GAAI,WAAW,EAAE,gBAAgB,SAAS,IAAI,CAAC;AAAA,UAC/C,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,QAC3B,CAAC;AAAA,MACH;AAEA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,YAAY;AAQrB,YAAM,IAAI,kCAAkC;AAAA,QAC1C,SACE;AAAA,QACF,WAAW;AAAA,MACb,CAAC;AAAA,IACH;AAAA,IACA,UAAU,YAAY;AACpB,UAAI,SAAS;AACX,cAAM,IAAI;AAAA,UACR,iBAAiB,SAAS;AAAA,QAC5B;AAAA,MACF;AACA,gBAAU;AACV,YAAM,kBAAkB,MAAM,QAAQ,QAAQ;AAC9C,YAAM,UAAuC;AAAA,QAC3C,MAAM;AAAA,QACN,WAAW;AAAA,QACX,sBAAsB;AAAA,QACtB,MAAM;AAAA,UACJ,GAAI,iBAAiB,EAAE,UAAU,eAAe,IAAI,CAAC;AAAA,UACrD,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,OAAO;AAAA,YACP;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,WAAW,YAAY;AACrB,UAAI,QAAS,QAAO;AACpB,gBAAU;AACV,qBAAe,YAAY;AAGzB,gBAAQ,WAAW;AACnB,YAAI;AACF,cAAI,CAAC,QAAQ,SAAS,GAAG;AACvB,oBAAQ,KAAK,EAAE,MAAM,WAAW,CAAC;AAAA,UACnC;AAAA,QACF,QAAQ;AAAA,QAAC;AACT,YAAI;AACJ,YAAI;AACF,cAAI,MAAM;AACR,kBAAM,QAAQ,KAAK;AAAA,cACjB,KAAK,KAAK;AAAA,cACV,IAAI,QAAc,aAAW;AAC3B,4BAAY,WAAW,SAAS,GAAI;AACpC,0BAAU,QAAQ;AAAA,cACpB,CAAC;AAAA,YACH,CAAC;AAAA,UACH;AAAA,QACF,UAAE;AACA,cAAI,UAAW,cAAa,SAAS;AACrC,cAAI;AACF,kBAAM,MAAM,KAAK;AAAA,UACnB,QAAQ;AAAA,UAAC;AACT,kBAAQ,MAAM;AAAA,QAChB;AAAA,MACF,GAAG;AACH,aAAO;AAAA,IACT;AAAA,IACA,QAAQ,YAAY;AAClB,UAAI,SAAS;AACX,cAAM,IAAI;AAAA,UACR,iBAAiB,SAAS;AAAA,QAC5B;AAAA,MACF;AACA,gBAAU;AAaV,cAAQ,WAAW;AACnB,YAAM,OAAgB,QAAQ,SAAS,IACnC,CAAC,IACD,MAAM,IAAI,QAAiB,CAAC,SAAS,WAAW;AAC9C,cAAM,QAAQ,WAAW,MAAM;AAC7B,gBAAM;AACN;AAAA,YACE,IAAI;AAAA,cACF,iBAAiB,SAAS;AAAA,YAC5B;AAAA,UACF;AAAA,QACF,GAAG,GAAI;AACP,cAAM,QAAQ;AACd,cAAM,QAAQ,QAAQ,GAAG,iBAAiB,SAAO;AAC/C,uBAAa,KAAK;AAClB,gBAAM;AACN,kBAAQ,IAAI,IAAI;AAAA,QAClB,CAAC;AACD,YAAI;AACF,kBAAQ,KAAK,EAAE,MAAM,SAAS,CAAC;AAAA,QACjC,SAAS,KAAK;AACZ,uBAAa,KAAK;AAClB,gBAAM;AACN,iBAAO,GAAG;AAAA,QACZ;AAAA,MACF,CAAC;AAEL,UAAI;AACJ,UAAI;AACF,YAAI,MAAM;AACR,gBAAM,QAAQ,KAAK;AAAA,YACjB,KAAK,KAAK;AAAA,YACV,IAAI,QAAc,aAAW;AAC3B,0BAAY,WAAW,SAAS,GAAI;AACpC,wBAAU,QAAQ;AAAA,YACpB,CAAC;AAAA,UACH,CAAC;AAAA,QACH;AAAA,MACF,UAAE;AACA,YAAI,UAAW,cAAa,SAAS;AACrC,YAAI;AACF,gBAAM,MAAM,KAAK;AAAA,QACnB,QAAQ;AAAA,QAAC;AACT,gBAAQ,MAAM;AAAA,MAChB;AAEA,YAAM,UAAuC;AAAA,QAC3C,MAAM;AAAA,QACN,WAAW;AAAA,QACX,sBAAsB;AAAA,QACtB,MAAO,QAAQ,CAAC;AAAA,MAClB;AACA,aAAO;AAAA,IACT;AAAA,IACA,eAAe,YAAY;AACzB,UAAI,SAAS;AACX,cAAM,IAAI;AAAA,UACR,iBAAiB,SAAS;AAAA,QAC5B;AAAA,MACF;AACA,gBAAU;AAUV,YAAM,kBAAkB,MAAM,QAAQ,QAAQ;AAC9C,YAAM,UAAsC;AAAA,QAC1C,MAAM;AAAA,QACN,WAAW;AAAA,QACX,sBAAsB;AAAA,QACtB,MAAM;AAAA,UACJ,GAAI,iBAAiB,EAAE,UAAU,eAAe,IAAI,CAAC;AAAA,UACrD,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,OAAO;AAAA,YACP;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASA,SAAS,gBAAgB,QAAiC;AACxD,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,EAAE,QAAQ,IAAI;AACpB,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,SAAS;AAC1B,QAAI,KAAK,SAAS,QAAQ;AACxB,YAAM,IAAI,kCAAkC;AAAA,QAC1C,WAAW;AAAA,QACX,SAAS,sEAAsE,KAAK,IAAI;AAAA,MAC1F,CAAC;AAAA,IACH;AACA,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACA,SAAO,MAAM,KAAK,MAAM;AAC1B;;;AGlkCO,IAAM,QAAQ,YAAY;","names":["z","z"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/harness-codex",
-  "version": "1.0.0-canary.3",
+  "version": "1.0.0-canary.5",
   "type": "module",
   "license": "Apache-2.0",
   "sideEffects": false,
@@ -28,7 +28,7 @@
   "dependencies": {
     "ws": "^8.20.1",
     "zod": "3.25.76",
-    "@ai-sdk/harness": "1.0.0-canary.7",
+    "@ai-sdk/harness": "1.0.0-canary.9",
     "@ai-sdk/provider-utils": "5.0.0-canary.48"
   },
   "devDependencies": {

package/src/codex-harness.ts

@@ -20,9 +20,13 @@ import {
   type HarnessV1Skill,
   type HarnessV1StreamPart,
 } from '@ai-sdk/harness';
-import { classifyDiskLog, SandboxChannel } from '@ai-sdk/harness/utils';
 import {
-  safeParseJSON,
+  classifyDiskLog,
+  markBridgeStarting,
+  SandboxChannel,
+  waitForBridgeReady,
+} from '@ai-sdk/harness/utils';
+import {
   type Experimental_SandboxProcess,
   type Experimental_SandboxSession,
 } from '@ai-sdk/provider-utils';
@@ -30,7 +34,6 @@ import { WebSocket } from 'ws';
 import { z } from 'zod';
 import { resolveCodexEnv, type CodexAuthOptions } from './codex-auth';
 import {
-  bridgeReadySchema,
   outboundMessageSchema,
   type InboundMessage,
   type OutboundMessage,
@@ -338,6 +341,13 @@ export function createCodex(
         });
       }
 
+      await markBridgeStarting({
+        sandbox: session,
+        bridgeStateDir,
+        bridgeType: 'codex',
+        abortSignal: startOpts.abortSignal,
+      });
+
       const proc = await session.spawn({
         command: `node ${BOOTSTRAP_DIR}/bridge.mjs --workdir ${workDir} --bridge-state-dir ${bridgeStateDir} --bootstrap-dir ${BOOTSTRAP_DIR}`,
         env,
@@ -346,9 +356,27 @@ export function createCodex(
 
       const { port: boundPort } = await waitForBridgeReady({
         proc,
+        sandbox: session,
+        bridgeStateDir,
+        bridgeType: 'codex',
         timeoutMs,
         abortSignal: startOpts.abortSignal,
+        createTimeoutError: () =>
+          new Error('codex bridge did not become ready in time.'),
+        createExitError: () =>
+          new Error('codex bridge exited before becoming ready.'),
       });
+      void drainRest(proc.stdout);
+      /*
+       * Bridge stderr is the only diagnostic channel for what happens
+       * inside the sandbox once the bridge is running (uncaught
+       * exceptions, Codex SDK errors, network failures). Forward it
+       * line-by-line to the host console so a mid-turn bridge crash can
+       * be inspected from `pnpm dev` logs without redeploying. The
+       * bridge itself writes nothing to stderr in steady state, so this
+       * is silent on the happy path.
+       */
+      void forwardBridgeStderr(proc.stderr);
 
       const wsUrl =
         (await sandboxSession.getPortUrl({
@@ -537,86 +565,6 @@ function shellQuote(value: string): string {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 
-async function waitForBridgeReady({
-  proc,
-  timeoutMs,
-  abortSignal,
-}: {
-  proc: Experimental_SandboxProcess;
-  timeoutMs: number;
-  abortSignal: AbortSignal | undefined;
-}): Promise<{ port: number }> {
-  const reader = proc.stdout.pipeThrough(new TextDecoderStream()).getReader();
-
-  const decoder = lineDecoder();
-
-  const deadline = Date.now() + timeoutMs;
-  try {
-    while (true) {
-      if (abortSignal?.aborted) {
-        await proc.kill();
-        throw abortSignal.reason ?? new DOMException('Aborted', 'AbortError');
-      }
-      const remaining = deadline - Date.now();
-      if (remaining <= 0) {
-        await proc.kill();
-        throw new Error('codex bridge did not become ready in time.');
-      }
-      const { value, done } = (await Promise.race([
-        reader.read(),
-        new Promise(resolve =>
-          setTimeout(
-            () => resolve({ value: undefined, done: false }),
-            remaining,
-          ),
-        ),
-      ])) as ReadableStreamReadResult<string>;
-      if (done) {
-        throw new Error('codex bridge exited before becoming ready.');
-      }
-      if (value === undefined) continue;
-      for (const line of decoder.push(value)) {
-        const parsed = await safeParseJSON({
-          text: line,
-          schema: bridgeReadySchema,
-        });
-        if (parsed.success) return { port: parsed.value.port };
-      }
-    }
-  } finally {
-    reader.releaseLock();
-    void drainRest(proc.stdout);
-    /*
-     * Bridge stderr is the only diagnostic channel for what happens
-     * inside the sandbox once the bridge is running (uncaught
-     * exceptions, Codex SDK errors, network failures). Forward it
-     * line-by-line to the host console so a mid-turn bridge crash can
-     * be inspected from `pnpm dev` logs without redeploying. The
-     * bridge itself writes nothing to stderr in steady state, so this
-     * is silent on the happy path.
-     */
-    void forwardBridgeStderr(proc.stderr);
-  }
-}
-
-function lineDecoder() {
-  let buffer = '';
-  return {
-    push(chunk: string): string[] {
-      buffer += chunk;
-      const lines: string[] = [];
-      let nl: number;
-      while ((nl = buffer.indexOf('\n')) !== -1) {
-        const raw = buffer.slice(0, nl);
-        buffer = buffer.slice(nl + 1);
-        const line = raw.replace(/\r$/, '').trim();
-        if (line.length > 0) lines.push(line);
-      }
-      return lines;
-    },
-  };
-}
-
 async function forwardBridgeStderr(
   stream: ReadableStream<Uint8Array>,
 ): Promise<void> {