@ai21/gateway 1.3.0 → 1.4.0

package/dist/agents/codex/index.js

@@ -0,0 +1,79 @@
+/**
+ * Codex: a provider block in `~/.codex/config.toml`, checked with `codex login status`,
+ * verified with `codex exec`. User-level only: Codex ignores `model_provider` and
+ * `model_providers` in a project's `.codex/config.toml`.
+ */
+import { findOnPath } from "../../process.js";
+import { codexHome, resolveCodexPaths, revertCodexConfig, writeCodexConfig } from "./config.js";
+import { codexPlacementExample, codexTables, ROOT_LINE } from "./snippets.js";
+import { CODEX_COMMAND, checkCodexLogin } from "./status.js";
+import { verifyCodex } from "./verify.js";
+const text = {
+    noSubscriptionOutcome: "no-codex-login",
+    noSubscription: {
+        "logged-out": {
+            headline: "No ChatGPT login detected for Codex.",
+            nextStep: "Run `codex login` and sign in with ChatGPT, then re-run this command.",
+            jsonReason: "no_chatgpt_login",
+            telemetryReason: "agent not logged in",
+        },
+        "api-key-login": {
+            headline: "Codex is signed in with an API key, not a ChatGPT login.",
+            nextStep: "The gateway forwards your ChatGPT login. Run `codex logout`, then `codex login` with ChatGPT, then re-run this command.",
+            jsonReason: "chatgpt_login_required",
+            telemetryReason: "agent logged in with an api key",
+        },
+    },
+    verifiedVia: { "codex-exec": "`codex exec`" },
+    skippedBecause: "the Codex CLI was not found to verify with",
+    notInstalled: {
+        message: "The Codex CLI was not found. Install it, sign in with `codex login`, then re-run this command.",
+        jsonOutcome: "no-codex-cli",
+        jsonReason: "codex_cli_not_installed",
+        telemetryReason: "agent cli not installed",
+    },
+    checkingLogin: "Checking your Codex login…",
+    loginFound: "Codex login found",
+};
+export const codex = {
+    id: "codex",
+    kind: "codex",
+    displayName: "Codex",
+    configLabel: "config.toml",
+    targets: ["user"],
+    verifyFlags: [],
+    checkInstalled(_ctx, deps) {
+        // No stand-in: only the Codex CLI can send the ChatGPT login the gateway forwards.
+        return findOnPath(CODEX_COMMAND, deps.lookup) === undefined ? { kind: "missing" } : { kind: "present" };
+    },
+    resolvePaths(_target, env) {
+        return { ...resolveCodexPaths(codexHome(env)), verifyCwd: env.home };
+    },
+    preview(inputs) {
+        return {
+            text: codexPlacementExample(inputs),
+            json: { config: [ROOT_LINE, "", ...codexTables(inputs)].join("\n") },
+        };
+    },
+    write: writeCodexConfig,
+    revert: revertCodexConfig,
+    // The writer already masks the key in each conflict (see `want` in config.ts); a
+    // conflict value here is one key's value, with no header syntax left to match on.
+    redact: (value) => value,
+    warnings(_paths, processEnv) {
+        const found = [];
+        if (processEnv.OPENAI_BASE_URL !== undefined && processEnv.OPENAI_BASE_URL !== "") {
+            found.push({
+                code: "openai-base-url-set",
+                message: "OPENAI_BASE_URL is set in your environment. Codex has deprecated it, and it can send requests past the gateway — unset it if they do not show up.",
+            });
+        }
+        return found;
+    },
+    checkSubscription(paths, deps) {
+        return checkCodexLogin(paths.verifyCwd, deps);
+    },
+    verify: verifyCodex,
+    text,
+};
+//# sourceMappingURL=index.js.map

package/dist/agents/codex/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agents/codex/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,IAAI,GAAc;IACtB,qBAAqB,EAAE,gBAAgB;IACvC,cAAc,EAAE;QACd,YAAY,EAAE;YACZ,QAAQ,EAAE,sCAAsC;YAChD,QAAQ,EAAE,uEAAuE;YACjF,UAAU,EAAE,kBAAkB;YAC9B,eAAe,EAAE,qBAAqB;SACvC;QACD,eAAe,EAAE;YACf,QAAQ,EAAE,0DAA0D;YACpE,QAAQ,EACN,yHAAyH;YAC3H,UAAU,EAAE,wBAAwB;YACpC,eAAe,EAAE,iCAAiC;SACnD;KACF;IACD,WAAW,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE;IAC7C,cAAc,EAAE,4CAA4C;IAC5D,YAAY,EAAE;QACZ,OAAO,EAAE,gGAAgG;QACzG,WAAW,EAAE,cAAc;QAC3B,UAAU,EAAE,yBAAyB;QACrC,eAAe,EAAE,yBAAyB;KAC3C;IACD,aAAa,EAAE,4BAA4B;IAC3C,UAAU,EAAE,mBAAmB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,KAAK,GAAgB;IAChC,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,aAAa;IAC1B,OAAO,EAAE,CAAC,MAAM,CAAC;IACjB,WAAW,EAAE,EAAE;IAEf,cAAc,CAAC,IAAI,EAAE,IAAI;QACvB,mFAAmF;QACnF,OAAO,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1G,CAAC;IAED,YAAY,CAAC,OAAO,EAAE,GAAG;QACvB,OAAO,EAAE,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,OAAO,CAAC,MAAM;QACZ,OAAO;YACL,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,iBAAiB;IAEzB,iFAAiF;IACjF,kFAAkF;IAClF,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IAExB,QAAQ,CAAC,MAAM,EAAE,UAAU;QACzB,MAAM,KAAK,GAAc,EAAE,CAAC;QAC5B,IAAI,UAAU,CAAC,eAAe,KAAK,SAAS,IAAI,UAAU,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;YAClF,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EACL,mJAAmJ;aACtJ,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB,CAAC,KAAK,EAAE,IAAI;QAC3B,OAAO,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,EAAE,WAAW;IAEnB,IAAI;CACL,CAAC"}

package/dist/agents/codex/snippets.d.ts

@@ -0,0 +1,23 @@
+/**
+ * What `install --client codex` writes into `~/.codex/config.toml`, built to match the
+ * webapp snippet byte for byte (AI21Labs/ai21-intelligent-gateway-webapp,
+ * `src/pages/docs/integrations.tsx:codexPlacementExample`). `test/fixtures` pins the
+ * two together; re-capture it when the webapp's snippet changes.
+ *
+ * Two parts, because they go to different places: the root `model_provider` line must
+ * sit above every `[table]` (TOML would otherwise read it as a key of the table before
+ * it), while the provider tables can go anywhere.
+ *
+ * One deliberate divergence, as for Claude Code: the webapp always emits
+ * `x-ai21-user-id`, having a signed-in user; here that line is absent unless
+ * `--user-id` supplies one. `x-ai21-client` is added on what the CLI writes only.
+ */
+import { type SnippetInputs } from "../types.js";
+/** The root key that selects our provider. */
+export declare const ROOT_LINE: string;
+/** The header lines in contract order, as `[key, value]`. */
+export declare function codexHeaders({ agentId, ai21Key, userId, client }: SnippetInputs): [string, string][];
+/** The two provider tables, as lines. */
+export declare function codexTables(inputs: SnippetInputs): string[];
+/** The webapp's paste-in example, comments included. Also what `--print` shows. */
+export declare function codexPlacementExample(inputs: SnippetInputs): string;

package/dist/agents/codex/snippets.js

@@ -0,0 +1,39 @@
+import { HEADERS_TABLE, PROVIDER_ID, PROVIDER_TABLE, tomlKey, tomlString } from "./toml.js";
+/** The root key that selects our provider. */
+export const ROOT_LINE = `model_provider = ${tomlString(PROVIDER_ID)}`;
+/** The header lines in contract order, as `[key, value]`. */
+export function codexHeaders({ agentId, ai21Key, userId, client }) {
+    const headers = [
+        ["x-upstream", "openai-codex"],
+        ["x-ai21-key", ai21Key],
+        ["x-agent-id", agentId],
+    ];
+    if (userId !== undefined)
+        headers.push(["x-ai21-user-id", userId]);
+    if (client !== undefined)
+        headers.push(["x-ai21-client", client]);
+    return headers;
+}
+/** The two provider tables, as lines. */
+export function codexTables(inputs) {
+    return [
+        `[${PROVIDER_TABLE}]`,
+        `name = ${tomlString("AI21 Gateway")}`,
+        `base_url = ${tomlString(`${inputs.gatewayUrl}/v1`)}`,
+        `wire_api = "responses"`,
+        `requires_openai_auth = true`,
+        `[${HEADERS_TABLE}]`,
+        ...codexHeaders(inputs).map(([key, value]) => `${tomlKey(key)} = ${tomlString(value)}`),
+    ];
+}
+/** The webapp's paste-in example, comments included. Also what `--print` shows. */
+export function codexPlacementExample(inputs) {
+    return [
+        "# Adds to your existing ~/.codex/config.toml — nothing else changes.",
+        "# Keep model_provider above every [section]: it is a root key.",
+        ROOT_LINE,
+        "",
+        ...codexTables(inputs),
+    ].join("\n");
+}
+//# sourceMappingURL=snippets.js.map

package/dist/agents/codex/snippets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snippets.js","sourceRoot":"","sources":["../../../src/agents/codex/snippets.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5F,8CAA8C;AAC9C,MAAM,CAAC,MAAM,SAAS,GAAG,oBAAoB,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;AAEvE,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAiB;IAC9E,MAAM,OAAO,GAAuB;QAClC,CAAC,YAAY,EAAE,cAAc,CAAC;QAC9B,CAAC,YAAY,EAAE,OAAO,CAAC;QACvB,CAAC,YAAY,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IAEnE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAElE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,OAAO;QACL,IAAI,cAAc,GAAG;QACrB,UAAU,UAAU,CAAC,cAAc,CAAC,EAAE;QACtC,cAAc,UAAU,CAAC,GAAG,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE;QACrD,wBAAwB;QACxB,6BAA6B;QAC7B,IAAI,aAAa,GAAG;QACpB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;KACxF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,MAAqB;IACzD,OAAO;QACL,sEAAsE;QACtE,gEAAgE;QAChE,SAAS;QACT,EAAE;QACF,GAAG,WAAW,CAAC,MAAM,CAAC;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/agents/codex/status.d.ts

@@ -0,0 +1,8 @@
+import type { AgentDeps, SubscriptionStatus } from "../types.js";
+export declare const CODEX_COMMAND = "codex";
+/**
+ * Runs `codex login status` and reads stderr. Only "Logged in using ChatGPT" counts
+ * as present; "Logged in using an API key" or "Not logged in" count as missing.
+ * An unrecognisable output, a missing binary or a timeout are all inconclusive.
+ */
+export declare function checkCodexLogin(cwd: string, deps: AgentDeps): Promise<SubscriptionStatus>;

package/dist/agents/codex/status.js

@@ -0,0 +1,36 @@
+/**
+ * Codex login check with `codex login status`.
+ */
+import { findOnPath } from "../../process.js";
+export const CODEX_COMMAND = "codex";
+const STATUS_TIMEOUT_MS = 5_000;
+/**
+ * Runs `codex login status` and reads stderr. Only "Logged in using ChatGPT" counts
+ * as present; "Logged in using an API key" or "Not logged in" count as missing.
+ * An unrecognisable output, a missing binary or a timeout are all inconclusive.
+ */
+export async function checkCodexLogin(cwd, deps) {
+    const executable = findOnPath(CODEX_COMMAND, deps.lookup);
+    if (executable === undefined)
+        return { kind: "inconclusive" };
+    const result = await deps.runCommand(executable, ["login", "status"], { cwd, timeoutMs: STATUS_TIMEOUT_MS });
+    if (result.timedOut || result.code === null)
+        return { kind: "inconclusive" };
+    // A broken config or missing CODEX_HOME makes the CLI exit 1 and print an error.
+    // That is not "definitely signed out"; it is "could not tell".
+    if (result.code === 1 && !/^(Not logged in|Logged in using an API key)/.test(result.output.trim())) {
+        return { kind: "inconclusive" };
+    }
+    if (result.code === 0 && /^Logged in using ChatGPT/.test(result.output.trim())) {
+        return { kind: "present" };
+    }
+    // "Logged in using an API key" without ChatGPT → not usable through the gateway.
+    if (result.code === 0 && /^Logged in using an API key/.test(result.output.trim())) {
+        return { kind: "missing", reason: "api-key-login" };
+    }
+    if (result.output.trim() === "Not logged in") {
+        return { kind: "missing", reason: "logged-out" };
+    }
+    return { kind: "inconclusive" };
+}
+//# sourceMappingURL=status.js.map

package/dist/agents/codex/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/agents/codex/status.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AAErC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,IAAe;IAChE,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAE7E,iFAAiF;IACjF,+DAA+D;IAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACnG,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,iFAAiF;IACjF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,eAAe,EAAE,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAClC,CAAC"}

package/dist/agents/codex/toml.d.ts

@@ -0,0 +1,57 @@
+/**
+ * A targeted edit of `~/.codex/config.toml`: find the few things this tool owns, and
+ * replace or remove exactly those lines. Everything else — comments, ordering, blank
+ * lines, CRLF endings, tables we have never heard of — is carried through byte for byte.
+ *
+ * Not a TOML parser. It reads lines, and understands only what it must to stay safe:
+ * where a table starts, which root key a line assigns, and whether a line is inside a
+ * multi-line string (where a `[` is text, not a header). Anything it owns but cannot
+ * edit safely — our provider as dotted keys or an inline table — is reported as
+ * `unsupported`, and the caller refuses rather than guess.
+ */
+/** The provider id this tool writes. The webapp snippet uses the same one. */
+export declare const PROVIDER_ID = "ai21";
+/** The tables we own, in the order we write them. */
+export declare const PROVIDER_TABLE = "model_providers.ai21";
+export declare const HEADERS_TABLE = "model_providers.ai21.http_headers";
+export interface Line {
+    /** Without its line ending. */
+    readonly text: string;
+    /** "\n", "\r\n", or "" for a last line with no newline. */
+    readonly eol: string;
+}
+export declare function splitLines(raw: string): Line[];
+export declare function joinLines(lines: readonly Line[]): string;
+/** The file's own newline, so lines we add match the ones around them. */
+export declare function newlineOf(lines: readonly Line[]): string;
+export interface Region {
+    /** Index of the header line. */
+    readonly start: number;
+    /** One past the last line that belongs to the table (its header and its keys). */
+    readonly end: number;
+}
+export interface Scan {
+    readonly lines: Line[];
+    /** The root `model_provider = …` line, if any. */
+    readonly rootModelProvider?: number | undefined;
+    /** Index of the first table header; root keys live before it. */
+    readonly firstHeader: number;
+    readonly provider?: Region | undefined;
+    readonly headers?: Region | undefined;
+    /** Why we refuse to edit, when our provider is present in a form we do not handle. */
+    readonly unsupported?: string | undefined;
+}
+export declare function scan(raw: string): Scan;
+/** A basic-string value's contents, or undefined when the line holds anything else. */
+export declare function stringValue(text: string): string | undefined;
+/** The `key = value` lines of a region, keyed by their normalised key. */
+export declare function entries(scanned: Scan, region: Region | undefined): Map<string, string>;
+/** Escapes a value for a TOML basic string. Control characters never reach here: args refuses them. */
+export declare function tomlString(value: string): string;
+/**
+ * Header keys need quoting in TOML only if they are not bare keys. Ours are all bare
+ * (`x-ai21-key`), but the rule is written down once rather than assumed at each site.
+ */
+export declare function tomlKey(key: string): string;
+/** Drops the lines at `[start, end)` and any blank lines left directly above them. */
+export declare function removeRange(lines: Line[], start: number, end: number): Line[];

package/dist/agents/codex/toml.js

@@ -0,0 +1,196 @@
+/**
+ * A targeted edit of `~/.codex/config.toml`: find the few things this tool owns, and
+ * replace or remove exactly those lines. Everything else — comments, ordering, blank
+ * lines, CRLF endings, tables we have never heard of — is carried through byte for byte.
+ *
+ * Not a TOML parser. It reads lines, and understands only what it must to stay safe:
+ * where a table starts, which root key a line assigns, and whether a line is inside a
+ * multi-line string (where a `[` is text, not a header). Anything it owns but cannot
+ * edit safely — our provider as dotted keys or an inline table — is reported as
+ * `unsupported`, and the caller refuses rather than guess.
+ */
+/** The provider id this tool writes. The webapp snippet uses the same one. */
+export const PROVIDER_ID = "ai21";
+/** The tables we own, in the order we write them. */
+export const PROVIDER_TABLE = `model_providers.${PROVIDER_ID}`;
+export const HEADERS_TABLE = `model_providers.${PROVIDER_ID}.http_headers`;
+export function splitLines(raw) {
+    const lines = [];
+    const pattern = /([^\r\n]*)(\r\n|\n|$)/g;
+    let match;
+    while ((match = pattern.exec(raw)) !== null) {
+        const [, text = "", eol = ""] = match;
+        if (text === "" && eol === "")
+            break;
+        lines.push({ text, eol });
+    }
+    return lines;
+}
+export function joinLines(lines) {
+    return lines.map((line) => line.text + line.eol).join("");
+}
+/** The file's own newline, so lines we add match the ones around them. */
+export function newlineOf(lines) {
+    return lines.find((line) => line.eol !== "")?.eol ?? "\n";
+}
+/** A table header's dotted name with quoting and spaces normalised: `[ a . "b" ]` → `a.b`. */
+function headerName(text) {
+    const match = /^\s*\[\s*([^[\]]+?)\s*\]\s*(#.*)?$/.exec(text);
+    if (match === null)
+        return undefined;
+    return match[1]
+        .split(".")
+        .map((part) => part
+        .trim()
+        .replace(/^"(.*)"$/, "$1")
+        .replace(/^'(.*)'$/, "$1"))
+        .join(".");
+}
+/** `[[array.of.tables]]` headers also end the table before them. */
+function isArrayHeader(text) {
+    return /^\s*\[\[/.test(text);
+}
+/** The key a `key = value` line assigns, normalised like a header name. */
+function assignedKey(text) {
+    const match = /^\s*((?:"[^"]*"|'[^']*'|[A-Za-z0-9_-]+)(?:\s*\.\s*(?:"[^"]*"|'[^']*'|[A-Za-z0-9_-]+))*)\s*=/.exec(text);
+    if (match === null)
+        return undefined;
+    return match[1]
+        .split(/\s*\.\s*/)
+        .map((part) => part.replace(/^"(.*)"$/, "$1").replace(/^'(.*)'$/, "$1"))
+        .join(".");
+}
+/**
+ * Tracks whether a line leaves us inside a multi-line string, so a `[` or `key =` in
+ * the middle of one is not mistaken for structure.
+ */
+function multilineStateAfter(text, open) {
+    let state = open;
+    let rest = text;
+    for (;;) {
+        if (state !== undefined) {
+            const close = rest.indexOf(state);
+            if (close === -1)
+                return state;
+            rest = rest.slice(close + 3);
+            state = undefined;
+            continue;
+        }
+        const basic = rest.indexOf('"""');
+        const literal = rest.indexOf("'''");
+        const hash = rest.indexOf("#");
+        const candidates = [basic, literal].filter((index) => index !== -1);
+        if (candidates.length === 0)
+            return undefined;
+        const first = Math.min(...candidates);
+        if (hash !== -1 && hash < first)
+            return undefined;
+        state = first === basic ? '"""' : "'''";
+        rest = rest.slice(first + 3);
+    }
+}
+export function scan(raw) {
+    const lines = splitLines(raw);
+    let table; // undefined = root
+    let multiline;
+    let rootModelProvider;
+    let firstHeader = lines.length;
+    let unsupported;
+    const regions = {};
+    let current;
+    const close = (at) => {
+        if (current !== undefined && (current.name === PROVIDER_TABLE || current.name === HEADERS_TABLE)) {
+            regions[current.name] = { start: current.start, end: at };
+        }
+        current = undefined;
+    };
+    lines.forEach((line, index) => {
+        const inString = multiline !== undefined;
+        multiline = multilineStateAfter(line.text, multiline);
+        if (inString)
+            return;
+        const name = isArrayHeader(line.text) ? "[[array]]" : headerName(line.text);
+        if (name !== undefined) {
+            close(index);
+            if (firstHeader === lines.length)
+                firstHeader = index;
+            table = name;
+            if (name === PROVIDER_TABLE || name === HEADERS_TABLE) {
+                if (regions[name] !== undefined)
+                    unsupported = `it defines [${name}] twice`;
+                current = { name, start: index };
+            }
+            else if (name.startsWith(`${PROVIDER_TABLE}.`)) {
+                unsupported = `it has a [${name}] table this tool does not manage`;
+            }
+            return;
+        }
+        const key = assignedKey(line.text);
+        if (key === undefined)
+            return;
+        // A dotted or inline form of our provider, from any table that could reach it. A
+        // child table of ours (`[model_providers.ai21.x]`) was already refused at its header.
+        const full = table === undefined ? key : `${table}.${key}`;
+        const inOurs = table === PROVIDER_TABLE || table === HEADERS_TABLE || table?.startsWith(`${PROVIDER_TABLE}.`);
+        if ((full === PROVIDER_TABLE || full.startsWith(`${PROVIDER_TABLE}.`)) && inOurs !== true) {
+            unsupported = `it sets ${full} outside a [${PROVIDER_TABLE}] table`;
+        }
+        if (table === PROVIDER_TABLE && key.startsWith("http_headers")) {
+            unsupported = `it sets ${PROVIDER_TABLE}.${key} as a dotted key`;
+        }
+        if (table === undefined && key === "model_provider")
+            rootModelProvider = index;
+    });
+    close(lines.length);
+    return {
+        lines,
+        rootModelProvider,
+        firstHeader,
+        provider: regions[PROVIDER_TABLE],
+        headers: regions[HEADERS_TABLE],
+        unsupported,
+    };
+}
+/** A basic-string value's contents, or undefined when the line holds anything else. */
+export function stringValue(text) {
+    const match = /=\s*"((?:[^"\\]|\\.)*)"\s*(#.*)?$/.exec(text);
+    if (match === null)
+        return undefined;
+    return match[1].replace(/\\(["\\nt])/g, (_, c) => (c === "n" ? "\n" : c === "t" ? "\t" : c));
+}
+/** The `key = value` lines of a region, keyed by their normalised key. */
+export function entries(scanned, region) {
+    const found = new Map();
+    if (region === undefined)
+        return found;
+    for (let index = region.start + 1; index < region.end; index += 1) {
+        const text = scanned.lines[index].text;
+        const key = assignedKey(text);
+        if (key === undefined)
+            continue;
+        found.set(key, text.slice(text.indexOf("=") + 1).trim());
+    }
+    return found;
+}
+/** Escapes a value for a TOML basic string. Control characters never reach here: args refuses them. */
+export function tomlString(value) {
+    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+/**
+ * Header keys need quoting in TOML only if they are not bare keys. Ours are all bare
+ * (`x-ai21-key`), but the rule is written down once rather than assumed at each site.
+ */
+export function tomlKey(key) {
+    return /^[A-Za-z0-9_-]+$/.test(key) ? key : tomlString(key);
+}
+/** Drops the lines at `[start, end)` and any blank lines left directly above them. */
+export function removeRange(lines, start, end) {
+    let from = start;
+    while (from > 0 && lines[from - 1].text.trim() === "")
+        from -= 1;
+    // Keep one blank line between what remains above and below, if both exist.
+    const keepBlank = from > 0 && end < lines.length && from < start;
+    const result = [...lines.slice(0, from), ...(keepBlank ? [lines[from]] : []), ...lines.slice(end)];
+    return result;
+}
+//# sourceMappingURL=toml.js.map

package/dist/agents/codex/toml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toml.js","sourceRoot":"","sources":["../../../src/agents/codex/toml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AAElC,qDAAqD;AACrD,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,WAAW,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,WAAW,eAAe,CAAC;AAS3E,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,wBAAwB,CAAC;IACzC,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QACtC,IAAI,IAAI,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE;YAAE,MAAM;QAErC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;AAC5D,CAAC;AAED,8FAA8F;AAC9F,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAErC,OAAO,KAAK,CAAC,CAAC,CAAE;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI;SACD,IAAI,EAAE;SACN,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;SACzB,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAC7B;SACA,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,2EAA2E;AAC3E,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,6FAA6F,CAAC,IAAI,CAC9G,IAAI,CACL,CAAC;IACF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAErC,OAAO,KAAK,CAAC,CAAC,CAAE;SACb,KAAK,CAAC,UAAU,CAAC;SACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;SACvE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,IAA+B;IACxE,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,SAAS,CAAC;QACR,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAE/B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7B,KAAK,GAAG,SAAS,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,KAAK;YAAE,OAAO,SAAS,CAAC;QAElD,KAAK,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACxC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAqBD,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAyB,CAAC,CAAC,mBAAmB;IAClD,IAAI,SAAoC,CAAC;IACzC,IAAI,iBAAqC,CAAC;IAC1C,IAAI,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/B,IAAI,WAA+B,CAAC;IACpC,MAAM,OAAO,GAAmD,EAAE,CAAC;IACnE,IAAI,OAAoD,CAAC;IAEzD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAQ,EAAE;QACjC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC5D,CAAC;QAED,OAAO,GAAG,SAAS,CAAC;IACtB,CAAC,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,SAAS,KAAK,SAAS,CAAC;QACzC,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ;YAAE,OAAO;QAErB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,KAAK,CAAC,CAAC;YACb,IAAI,WAAW,KAAK,KAAK,CAAC,MAAM;gBAAE,WAAW,GAAG,KAAK,CAAC;YAEtD,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBACtD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,SAAS;oBAAE,WAAW,GAAG,eAAe,IAAI,SAAS,CAAC;gBAE5E,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACnC,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC;gBACjD,WAAW,GAAG,aAAa,IAAI,mCAAmC,CAAC;YACrE,CAAC;YAED,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO;QAE9B,iFAAiF;QACjF,sFAAsF;QACtF,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,EAAE,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC;QAC9G,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAC1F,WAAW,GAAG,WAAW,IAAI,eAAe,cAAc,SAAS,CAAC;QACtE,CAAC;QAED,IAAI,KAAK,KAAK,cAAc,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/D,WAAW,GAAG,WAAW,cAAc,IAAI,GAAG,kBAAkB,CAAC;QACnE,CAAC;QAED,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,KAAK,gBAAgB;YAAE,iBAAiB,GAAG,KAAK,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEpB,OAAO;QACL,KAAK;QACL,iBAAiB;QACjB,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC;QACjC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC;QAC/B,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAErC,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,OAAO,CAAC,OAAa,EAAE,MAA0B;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEvC,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC;QACxC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAEhC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW;IACnE,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,CAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC;IAClE,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,KAAK,CAAC;IACjE,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/agents/codex/verify.d.ts

@@ -0,0 +1,2 @@
+import type { AgentDeps, VerifyContext, VerifyOutcome } from "../types.js";
+export declare function verifyCodex(ctx: VerifyContext, deps: AgentDeps): Promise<VerifyOutcome>;

package/dist/agents/codex/verify.js

@@ -0,0 +1,43 @@
+/**
+ * Verification for Codex: `codex exec --skip-git-repo-check --ephemeral --sandbox read-only`
+ * with retries disabled on the command line. No direct-ping tier: only the Codex CLI can
+ * send the ChatGPT credential, and there is no way to make a stand-alone request.
+ */
+import { findOnPath } from "../../process.js";
+import { CODEX_COMMAND } from "./status.js";
+const VERIFY_TIMEOUT_MS = 30_000;
+const PROMPT = "ai21-gateway CLI connectivity check — reply with OK and nothing else.";
+/** `codex exec` with retries off so a bad call fails fast. */
+const EXEC_ARGS = [
+    "exec",
+    "--skip-git-repo-check",
+    "--ephemeral",
+    "--sandbox",
+    "read-only",
+    "-c",
+    "model_providers.ai21.request_max_retries=0",
+    "-c",
+    "model_providers.ai21.stream_max_retries=0",
+    PROMPT,
+];
+function manualHint(cwd) {
+    return `Run \`${CODEX_COMMAND} exec --skip-git-repo-check --ephemeral "${PROMPT}"\` in ${cwd} to verify by hand`;
+}
+export async function verifyCodex(ctx, deps) {
+    const executable = findOnPath(CODEX_COMMAND, deps.lookup);
+    if (executable === undefined) {
+        return { kind: "skipped", hint: `${manualHint(ctx.cwd)}.` };
+    }
+    const result = await deps.runCommand(executable, EXEC_ARGS, { cwd: ctx.cwd, timeoutMs: VERIFY_TIMEOUT_MS });
+    if (result.timedOut) {
+        return {
+            kind: "failed",
+            via: "codex-exec",
+            reason: `\`${CODEX_COMMAND} exec\` did not answer within ${VERIFY_TIMEOUT_MS / 1_000}s`,
+        };
+    }
+    if (result.code === 0)
+        return { kind: "passed", via: "codex-exec" };
+    return { kind: "failed", via: "codex-exec", reason: `\`${CODEX_COMMAND} exec\` exited ${result.code}` };
+}
+//# sourceMappingURL=verify.js.map

package/dist/agents/codex/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/agents/codex/verify.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,MAAM,MAAM,GAAG,uEAAuE,CAAC;AAEvF,8DAA8D;AAC9D,MAAM,SAAS,GAAG;IAChB,MAAM;IACN,uBAAuB;IACvB,aAAa;IACb,WAAW;IACX,WAAW;IACX,IAAI;IACJ,4CAA4C;IAC5C,IAAI;IACJ,2CAA2C;IAC3C,MAAM;CACP,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,SAAS,aAAa,4CAA4C,MAAM,UAAU,GAAG,oBAAoB,CAAC;AACnH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAkB,EAAE,IAAe;IACnE,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAE5G,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,YAAY;YACjB,MAAM,EAAE,KAAK,aAAa,iCAAiC,iBAAiB,GAAG,KAAK,GAAG;SACxF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IAEpE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,aAAa,kBAAkB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC1G,CAAC"}

package/dist/agents/deps.d.ts

@@ -0,0 +1,3 @@
+import type { AgentDeps } from "./types.js";
+/** The real-world adapters, kept here so `cli.ts` stays a thin edge. */
+export declare function nodeAgentDeps(processEnv: Record<string, string | undefined>): AgentDeps;

package/dist/agents/deps.js

@@ -0,0 +1,10 @@
+import { isExecutableFile, runCommand } from "../process.js";
+/** The real-world adapters, kept here so `cli.ts` stays a thin edge. */
+export function nodeAgentDeps(processEnv) {
+    return {
+        lookup: { platform: process.platform, processEnv, isExecutableFile },
+        runCommand,
+        fetchImpl: fetch,
+    };
+}
+//# sourceMappingURL=deps.js.map

package/dist/agents/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/agents/deps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG7D,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,UAA8C;IAC1E,OAAO;QACL,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE;QACpE,UAAU;QACV,SAAS,EAAE,KAA6B;KACzC,CAAC;AACJ,CAAC"}

package/dist/agents/registry.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Every coding agent the CLI can configure, keyed by its `--client` value. Typed as a
+ * full `Record<Client, …>`, so adding an id to `CLIENTS` without an agent here does
+ * not compile.
+ */
+import type { Client } from "../args.js";
+import type { CodingAgent } from "./types.js";
+export declare function agentFor(client: Client): CodingAgent;
+/** The agent the gateway's `kind` belongs to, if the CLI can configure that kind at all. */
+export declare function agentOfKind(kind: string): CodingAgent | undefined;

package/dist/agents/registry.js

@@ -0,0 +1,14 @@
+import { claudeCode } from "./claude-code/index.js";
+import { codex } from "./codex/index.js";
+const AGENTS = {
+    "claude-code": claudeCode,
+    codex,
+};
+export function agentFor(client) {
+    return AGENTS[client];
+}
+/** The agent the gateway's `kind` belongs to, if the CLI can configure that kind at all. */
+export function agentOfKind(kind) {
+    return Object.values(AGENTS).find((agent) => agent.kind === kind);
+}
+//# sourceMappingURL=registry.js.map

package/dist/agents/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/agents/registry.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC,MAAM,MAAM,GAA0C;IACpD,aAAa,EAAE,UAAU;IACzB,KAAK;CACN,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACpE,CAAC"}