@alpacakit/agents 0.1.0-beta.39 → 0.2.0-beta.3

package/dist/agents/codex/session.js

@@ -0,0 +1,390 @@
+/**
+ * Codex session adapter: one `codex app-server` process holding one thread.
+ *
+ * Protocol facts (codex 0.153.4, T53 / T57 / T61 lab runs):
+ * - `thread/start {cwd, sandbox, approvalPolicy, approvalsReviewer}` creates
+ *   the thread and takes its writer lock; with a writable sandbox Codex also
+ *   appends a `trust_level` entry for `cwd` to `~/.codex/config.toml`;
+ * - `thread/resume` must repeat the permissions — without `sandbox` the
+ *   resumed turns ran as danger-full-access; it answers -32600 "already has
+ *   an active writer" while another process holds the thread and -32600
+ *   "… is archived" for an archived one (`thread/unarchive` first, opt-in);
+ * - `turn/start` answers the turn id at once; `turn/steer {expectedTurnId}`
+ *   appends to it; `turn/interrupt` ends it with `turn/completed`
+ *   status `interrupted` (the command's own `item/completed` may trail by ~36 s);
+ * - `item/commandExecution/requestApproval` is a server request answered by
+ *   `{"decision": "accept" | "decline"}`; closing stdin releases the lock.
+ */
+import path from "node:path";
+import { CODEX_INCOMING_KIND, createCodexAppServer, } from "../../codex/app-server.js";
+import { CODEX_APP_SERVER_INCOMING, CODEX_APP_SERVER_METHOD, CODEX_SANDBOX_MODE, encodeCodexThreadPermissions, } from "../../codex/protocol.js";
+import { isAgentError } from "../../core/error.js";
+import { readArray, readBoolean, readRecord, readString, } from "../../core/json.js";
+import { APPROVAL_DECISION, SESSION_OWNER_KIND, TURN_OUTCOME, } from "../../core/session.js";
+import { fileExists, readDirectoryNames, scanJsonlFirstLast, } from "../../host/session-files.js";
+import { assertHostSessionId, driveSession, } from "../../kernel/session.js";
+import { CODEX, CODEX_APPROVAL_POLICY, CODEX_APPROVALS_REVIEWER, } from "./cli.js";
+const USER_INPUT_TEXT = "text";
+const APPROVAL_METHODS = [
+    CODEX_APP_SERVER_INCOMING.commandExecutionRequestApproval,
+    CODEX_APP_SERVER_INCOMING.fileChangeRequestApproval,
+];
+const NON_TOOL_ITEM_TYPES = [
+    CODEX.notification.agentMessage,
+    CODEX.notification.userMessage,
+    CODEX.notification.reasoning,
+];
+function wirePermissions(permissions) {
+    const sandbox = permissions.sandbox;
+    return encodeCodexThreadPermissions({
+        sandbox: sandbox.type,
+        approvalPolicy: permissions.approvalPolicy,
+        approvalsReviewer: permissions.approvalsReviewer,
+        workspaceWrite: sandbox.type === CODEX_SANDBOX_MODE.workspaceWrite
+            ? {
+                writableRoots: sandbox.writableRoots,
+                networkAccess: sandbox.networkAccess,
+                excludeTmpdirEnvVar: sandbox.excludeTmpdirEnvVar,
+                excludeSlashTmp: sandbox.excludeSlashTmp,
+            }
+            : null,
+    });
+}
+function turnOutcomeFrom(status) {
+    if (status === CODEX.turnStatus.interrupted) {
+        return TURN_OUTCOME.interrupted;
+    }
+    if (status === CODEX.turnStatus.completed) {
+        return TURN_OUTCOME.completed;
+    }
+    return TURN_OUTCOME.failed;
+}
+/** The last `agentMessage` with phase `final_answer` among a completed turn's items. */
+function finalAnswerOf(turn) {
+    let text = null;
+    for (const value of readArray(turn, CODEX.notification.items) ?? []) {
+        const item = value !== null && typeof value === "object"
+            ? value
+            : null;
+        if (item !== null &&
+            readString(item, CODEX.notification.type) ===
+                CODEX.notification.agentMessage &&
+            readString(item, CODEX.notification.phase) ===
+                CODEX.notification.finalAnswer) {
+            text = readString(item, CODEX.notification.text) ?? text;
+        }
+    }
+    return text;
+}
+/**
+ * Codex accepts `decline` for every approval request even when its
+ * `availableDecisions` lists only `accept` plus amendment / `cancel`
+ * variants (T53 h2), so the caller is always offered both answers.
+ */
+/**
+ * The Codex side of a Session: JSON-RPC requests out, notifications and
+ * server requests in. Turn ids are the host's own (`turn/start` answers
+ * one), so `steer` and `interrupt` name them.
+ */
+class CodexProtocol {
+    threadId;
+    client;
+    incoming;
+    ctx;
+    constructor(threadId, client, incoming, ctx) {
+        this.threadId = threadId;
+        this.client = client;
+        this.incoming = incoming;
+        this.ctx = ctx;
+    }
+    get exit() {
+        return this.client.exit;
+    }
+    get stderrTail() {
+        return this.client.stderrTail;
+    }
+    async startTurn(text) {
+        const { turnId } = await this.client.request(CODEX_APP_SERVER_METHOD.turnStart, {
+            threadId: this.threadId,
+            input: [{ type: USER_INPUT_TEXT, text }],
+        });
+        return turnId;
+    }
+    async steer(turnId, text) {
+        await this.client.request(CODEX_APP_SERVER_METHOD.turnSteer, {
+            threadId: this.threadId,
+            expectedTurnId: turnId,
+            input: [{ type: USER_INPUT_TEXT, text }],
+        });
+    }
+    async interrupt(turnId) {
+        await this.client.request(CODEX_APP_SERVER_METHOD.turnInterrupt, {
+            threadId: this.threadId,
+            turnId,
+        });
+    }
+    respond(id, decision) {
+        this.client.respond(id, {
+            result: {
+                decision: decision === APPROVAL_DECISION.accept
+                    ? CODEX.decision.accept
+                    : CODEX.decision.decline,
+            },
+        });
+    }
+    close() {
+        return this.client.close();
+    }
+    decode(item, sink) {
+        if (item.kind === CODEX_INCOMING_KIND.request) {
+            this.decodeServerRequest(item, sink);
+        }
+        else {
+            this.decodeNotification(item.method, item.params, sink);
+        }
+    }
+    forThread(params) {
+        if (params === null ||
+            readString(params, CODEX.notification.threadId) !== this.threadId) {
+            return null;
+        }
+        return params;
+    }
+    decodeNotification(method, raw, sink) {
+        const params = this.forThread(raw);
+        if (params === null) {
+            return;
+        }
+        const active = sink.activeTurnId;
+        if (method === CODEX_APP_SERVER_INCOMING.turnCompleted) {
+            const turn = readRecord(params, CODEX.notification.turn);
+            if (turn === null || readString(turn, CODEX.notification.id) !== active) {
+                return;
+            }
+            sink.endTurn(turnOutcomeFrom(readString(turn, CODEX.notification.status)), finalAnswerOf(turn));
+            return;
+        }
+        if (readString(params, CODEX.notification.turnId) !== active) {
+            return;
+        }
+        const item = readRecord(params, CODEX.notification.item);
+        const itemType = item === null ? null : readString(item, CODEX.notification.type);
+        if (item === null || itemType === null) {
+            return;
+        }
+        if (method === CODEX_APP_SERVER_INCOMING.itemStarted &&
+            !NON_TOOL_ITEM_TYPES.includes(itemType)) {
+            sink.tool(itemType);
+            return;
+        }
+        if (method === CODEX_APP_SERVER_INCOMING.itemCompleted &&
+            itemType === CODEX.notification.agentMessage) {
+            const text = readString(item, CODEX.notification.text);
+            if (text !== null && text !== "") {
+                sink.message(text);
+            }
+        }
+    }
+    decodeServerRequest(request, sink) {
+        const params = this.forThread(request.params);
+        if (params === null || !APPROVAL_METHODS.includes(request.method)) {
+            // An unanswered server request would hang the turn; refusing it lets
+            // the model see the failure and go on.
+            this.ctx.logger.log("warn", `refusing unsupported codex server request "${request.method}"`);
+            this.client.respond(request.id, {
+                error: {
+                    code: CODEX.error.methodNotFound,
+                    message: CODEX.error.unsupported,
+                },
+            });
+            return;
+        }
+        sink.approvalRequested(String(request.id), readString(params, CODEX.notification.command) ??
+            readString(params, CODEX.notification.reason) ??
+            request.method, request.id);
+    }
+}
+/** Subscribe before the first request so no server traffic is missed; single-use. */
+function subscribe(client) {
+    const iterator = client.incoming[Symbol.asyncIterator]();
+    return { [Symbol.asyncIterator]: () => iterator };
+}
+function codexSession(threadId, client, incoming, ctx) {
+    return driveSession({
+        id: threadId,
+        agentId: CODEX.id,
+        protocol: new CodexProtocol(threadId, client, incoming, ctx),
+        logger: ctx.logger,
+    });
+}
+async function openCodexSession(options, ctx) {
+    const client = createCodexAppServer({
+        exec: ctx.exec,
+        clock: ctx.clock,
+        env: ctx.env,
+        cwd: options.workspace,
+        command: CODEX.command,
+    });
+    const incoming = subscribe(client);
+    try {
+        const { threadId } = await client.request(CODEX_APP_SERVER_METHOD.threadStart, {
+            cwd: options.workspace,
+            ...wirePermissions(options.permissions),
+        });
+        return codexSession(threadId, client, incoming, ctx);
+    }
+    catch (error) {
+        await client.close();
+        throw error;
+    }
+}
+async function resumeCodexSession(id, options, ctx) {
+    assertHostSessionId(id, CODEX.id);
+    const client = createCodexAppServer({
+        exec: ctx.exec,
+        clock: ctx.clock,
+        env: ctx.env,
+        cwd: options.workspace,
+        command: CODEX.command,
+    });
+    const incoming = subscribe(client);
+    const params = {
+        threadId: id,
+        excludeTurns: true,
+        ...wirePermissions(options.permissions),
+    };
+    try {
+        let resumed;
+        try {
+            resumed = await client.request(CODEX_APP_SERVER_METHOD.threadResume, params);
+        }
+        catch (error) {
+            // Unarchiving is a visible side effect (the thread returns to the
+            // ChatGPT app's active list), so it happens only on request.
+            if (!options.unarchive || !isArchivedError(error)) {
+                throw error;
+            }
+            await client.request(CODEX_APP_SERVER_METHOD.threadUnarchive, {
+                threadId: id,
+            });
+            resumed = await client.request(CODEX_APP_SERVER_METHOD.threadResume, params);
+        }
+        return codexSession(resumed.threadId, client, incoming, ctx);
+    }
+    catch (error) {
+        await client.close();
+        throw error;
+    }
+}
+function isArchivedError(error) {
+    return (isAgentError(error, "failed") &&
+        error.message.includes(CODEX.error.archived));
+}
+function codexRoot(ctx, ...segments) {
+    return path.join(ctx.location.homeDir, CODEX.files.root, ...segments);
+}
+/** `rollout-<time>-<id>.jsonl` under `sessions/YYYY/MM/DD/` (live) or `archived_sessions/` (archived). */
+async function findCodexRollout(ctx, id) {
+    const suffix = `-${id.toLowerCase()}${CODEX.files.rolloutExtension}`;
+    const matches = (name) => name.toLowerCase().endsWith(suffix);
+    const root = codexRoot(ctx, CODEX.files.sessions);
+    for (const year of (await readDirectoryNames(root)).sort().reverse()) {
+        for (const month of (await readDirectoryNames(path.join(root, year)))
+            .sort()
+            .reverse()) {
+            const monthDir = path.join(root, year, month);
+            for (const day of (await readDirectoryNames(monthDir)).sort().reverse()) {
+                const dayDir = path.join(monthDir, day);
+                const file = (await readDirectoryNames(dayDir)).find(matches);
+                if (file !== undefined) {
+                    return { file: path.join(dayDir, file), archived: false };
+                }
+            }
+        }
+    }
+    const archivedRoot = codexRoot(ctx, CODEX.files.archivedSessions);
+    const archived = (await readDirectoryNames(archivedRoot)).find(matches);
+    return archived === undefined
+        ? null
+        : { file: path.join(archivedRoot, archived), archived: true };
+}
+function oneOf(values, value) {
+    return value !== null && values.includes(value)
+        ? value
+        : null;
+}
+/** Only shapes seen in rollouts decode; anything unfamiliar is `null`, never a guess. */
+function sandboxPolicyFrom(policy) {
+    const type = policy === null ? null : readString(policy, CODEX.files.type);
+    if (type === CODEX_SANDBOX_MODE.readOnly ||
+        type === CODEX_SANDBOX_MODE.dangerFullAccess) {
+        return { type };
+    }
+    if (policy === null || type !== CODEX_SANDBOX_MODE.workspaceWrite) {
+        return null;
+    }
+    const roots = readArray(policy, CODEX.files.writableRoots) ?? [];
+    const networkAccess = readBoolean(policy, CODEX.files.networkAccess);
+    const excludeTmpdirEnvVar = readBoolean(policy, CODEX.files.excludeTmpdirEnvVar);
+    const excludeSlashTmp = readBoolean(policy, CODEX.files.excludeSlashTmp);
+    if (!roots.every((root) => typeof root === "string") ||
+        networkAccess === null ||
+        excludeTmpdirEnvVar === null ||
+        excludeSlashTmp === null) {
+        return null;
+    }
+    return {
+        type,
+        writableRoots: roots,
+        networkAccess,
+        excludeTmpdirEnvVar,
+        excludeSlashTmp,
+    };
+}
+function permissionsFrom(context) {
+    const approvalPolicy = oneOf(Object.values(CODEX_APPROVAL_POLICY), readString(context, CODEX.files.approvalPolicy));
+    const approvalsReviewer = oneOf(Object.values(CODEX_APPROVALS_REVIEWER), readString(context, CODEX.files.approvalsReviewer));
+    const sandbox = sandboxPolicyFrom(readRecord(context, CODEX.files.sandboxPolicy));
+    if (approvalPolicy === null ||
+        approvalsReviewer === null ||
+        sandbox === null) {
+        return null;
+    }
+    return { approvalPolicy, approvalsReviewer, sandbox };
+}
+function payloadOfType(record, type) {
+    return readString(record, CODEX.files.type) === type
+        ? readRecord(record, CODEX.files.payload)
+        : null;
+}
+async function inspectCodexSession(id, ctx) {
+    assertHostSessionId(id, CODEX.id);
+    const rollout = await findCodexRollout(ctx, id);
+    if (rollout === null) {
+        return null;
+    }
+    const cwd = await scanJsonlFirstLast(rollout.file, (record) => {
+        const meta = payloadOfType(record, CODEX.files.sessionMeta);
+        return meta === null ? null : readString(meta, CODEX.files.cwd);
+    });
+    if (cwd.first === null) {
+        return null;
+    }
+    const contexts = await scanJsonlFirstLast(rollout.file, (record) => payloadOfType(record, CODEX.files.turnContext));
+    const locked = await fileExists(codexRoot(ctx, CODEX.files.writerLocks, `${id}${CODEX.files.lockExtension}`));
+    return {
+        workspace: cwd.first,
+        lastPermissions: contexts.last === null ? null : permissionsFrom(contexts.last),
+        owner: locked
+            ? { kind: SESSION_OWNER_KIND.process, pid: null, entrypoint: null }
+            : { kind: SESSION_OWNER_KIND.none },
+        archived: rollout.archived,
+    };
+}
+export function codexSessions() {
+    return {
+        open: openCodexSession,
+        resume: resumeCodexSession,
+        inspect: inspectCodexSession,
+    };
+}

package/dist/agents/openai-compatible/fetch-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-engine.d.ts","sourceRoot":"","sources":["../../../src/agents/openai-compatible/fetch-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EAIX,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAa,8BAA8B,EAAE,MAAM,YAAY,CAAC;AA+C5E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,MAAM,uCAAuC,GAAG;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,iCAAiC,CAAC;CAC5D,CAAC;AAEF,qBAAa,2BAA4B,YAAW,sBAAsB;IACxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;gBAEtD,YAAY,GAAE,uCAA4C;IAUhE,YAAY,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAI9C,GAAG,CACR,MAAM,EAAE,8BAA8B,EACtC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,UAAU,GACd,QAAQ;IA+CX,OAAO,CAAC,UAAU;CAenB;AAED,qBAAa,kCACX,YAAW,2BAA2B;IAEtC,QAAQ,CAAC,WAAW,KAAwB;IAE5C,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;CAGzD;AAED,qBAAa,wCACX,YAAW,iCAAiC;IAE5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAIvB;IAEI,QAAQ,CACZ,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;CAM9B;AAmJD,eAAO,MAAM,6BAA6B,6BAAoC,CAAC"}
+{"version":3,"file":"fetch-engine.d.ts","sourceRoot":"","sources":["../../../src/agents/openai-compatible/fetch-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,UAAU,EAIX,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAa,8BAA8B,EAAE,MAAM,YAAY,CAAC;AA+C5E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC3E;AAED,MAAM,MAAM,uCAAuC,GAAG;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,iCAAiC,CAAC;CAC5D,CAAC;AAEF,qBAAa,2BAA4B,YAAW,sBAAsB;IACxE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;gBAEtD,YAAY,GAAE,uCAA4C;IAUhE,YAAY,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAI9C,GAAG,CACR,MAAM,EAAE,8BAA8B,EACtC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,EAAE,UAAU,GACd,QAAQ;IA+CX,OAAO,CAAC,UAAU;CAenB;AAED,qBAAa,kCACX,YAAW,2BAA2B;IAEtC,QAAQ,CAAC,WAAW,KAAwB;IAE5C,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;CAGzD;AAED,qBAAa,wCACX,YAAW,iCAAiC;IAE5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAIvB;IAEI,QAAQ,CACZ,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;CAM9B;AAmJD,eAAO,MAAM,6BAA6B,6BAAoC,CAAC"}

package/dist/agents/openai-compatible/fetch-engine.js

@@ -1,3 +1,4 @@
+import { NO_FAILURE_EVIDENCE } from "../../core/cli-child.js";
 import { AGENT_ERROR_CODE, AgentError, AUTH_FAILURE_REASON, isAgentError, NOT_AVAILABLE_CAUSE, } from "../../core/error.js";
 import { redactSecrets } from "../../core/redact.js";
 import { parseCooldownHint } from "../../kernel/classify.js";
@@ -94,7 +95,7 @@ export class FetchOpenAiCompatibleEngine {
                 code: AGENT_ERROR_CODE.failed,
                 classification: AgentError.agentFailure(AGENT_ERROR_CODE.failed),
                 message: "OpenAI-compatible endpoint returned an unsupported response",
-                data: { exitCode: null, stdoutTail: null, stderrTail: null },
+                data: NO_FAILURE_EVIDENCE,
             });
         }
         return decoder;
@@ -216,7 +217,7 @@ function unreachableError() {
         code: AGENT_ERROR_CODE.failed,
         classification: AgentError.agentFailure(AGENT_ERROR_CODE.failed),
         message: "OpenAI-compatible endpoint failed without an error",
-        data: { exitCode: null, stdoutTail: null, stderrTail: null },
+        data: NO_FAILURE_EVIDENCE,
     });
 }
 export const defaultOpenAiCompatibleEngine = new FetchOpenAiCompatibleEngine();

package/dist/agents/openai-compatible/pi/engine.js

@@ -1,7 +1,7 @@
 import { AGENT_ERROR_CODE, isAgentError } from "../../../core/error.js";
 import { DOCTOR_CHECK_STATUS, } from "../../../host/capabilities.js";
 import { defaultPiModuleLoader, loadPiModule, } from "./module.js";
-import { runPiSession } from "./session.js";
+import { runPiSession } from "./run.js";
 /**
  * Placeholder model capabilities: the resolved config has no metadata to
  * derive them from, so these defaults assume a large-context model. Callers

package/dist/agents/openai-compatible/pi/{session.d.ts → run.d.ts}

@@ -14,4 +14,4 @@ type PiSessionRunInput = {
 };
 export declare function runPiSession(input: PiSessionRunInput): AgentRun;
 export {};
-//# sourceMappingURL=session.d.ts.map
+//# sourceMappingURL=run.d.ts.map

package/dist/agents/openai-compatible/pi/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../../src/agents/openai-compatible/pi/run.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAkB,QAAQ,EAAE,MAAM,aAAa,CAAC;AA8E5D,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B,CAAC;AAWF,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,QAAQ,CAE/D"}

package/dist/agents/openai-compatible/pi/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../../src/agents/openai-compatible/pi/sandbox.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,QAAQ,EAAoB,aAAa,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,WAAW,IAAI,CAC1D,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,EAC9C,KAAK,EAAE,oBAAoB,KACxB,YAAY,CAAC;AAWlB,eAAO,MAAM,qBAAqB;;;;;;;;CAMjC,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,oBAAoB,GAC1B,YAAY,CASd"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../../src/agents/openai-compatible/pi/sandbox.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,WAAW,EACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAoB,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE7E,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,WAAW,IAAI,CAC1D,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,EAC9C,KAAK,EAAE,oBAAoB,KACxB,YAAY,CAAC;AAWlB,eAAO,MAAM,qBAAqB;;;;;;;;CAMjC,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,oBAAoB,GAC1B,YAAY,CASd"}

package/dist/auth/login-probe.d.ts

@@ -3,14 +3,15 @@
  * under the candidate's auth env and map its exit code to an `AuthStatus`.
  * Only the exit code matters — output is drained and discarded. A hung probe
  * is killed after the timeout and reported as "unknown"; a hang proves
- * nothing about the credential (probe-owned time mechanics, mirroring the run
- * plane's kill escalation). Home-dir material handlers reuse this so the two
- * built-in agents do not each carry a copy of the probe loop.
+ * nothing about the credential. A probe that cannot start (no binary, PATH or
+ * spawn fault) proves nothing either and is `unknown`, never a thrown fault —
+ * the same policy as the availability probe. Home-dir material handlers reuse
+ * this so the built-in agents do not each carry a copy of the probe loop.
  */
 import type { EnvPatch } from "../core/env.js";
 import type { HostContext } from "../host/context.js";
 import { type AuthStatus } from "./material.js";
-export type CliLoginProbeOptions = {
+type CliLoginProbeOptions = {
     readonly command: string;
     readonly args: readonly string[];
     readonly envPatch: EnvPatch;
@@ -18,4 +19,5 @@ export type CliLoginProbeOptions = {
     readonly timeoutMs?: number;
 };
 export declare function cliLoginProbe(options: CliLoginProbeOptions): Promise<AuthStatus>;
+export {};
 //# sourceMappingURL=login-probe.d.ts.map

package/dist/auth/login-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-probe.d.ts","sourceRoot":"","sources":["../../src/auth/login-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAI7D,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAgCrB"}
+{"version":3,"file":"login-probe.d.ts","sourceRoot":"","sources":["../../src/auth/login-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAI7D,KAAK,oBAAoB,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAoCrB"}

package/dist/auth/login-probe.js

@@ -3,9 +3,10 @@
  * under the candidate's auth env and map its exit code to an `AuthStatus`.
  * Only the exit code matters — output is drained and discarded. A hung probe
  * is killed after the timeout and reported as "unknown"; a hang proves
- * nothing about the credential (probe-owned time mechanics, mirroring the run
- * plane's kill escalation). Home-dir material handlers reuse this so the two
- * built-in agents do not each carry a copy of the probe loop.
+ * nothing about the credential. A probe that cannot start (no binary, PATH or
+ * spawn fault) proves nothing either and is `unknown`, never a thrown fault —
+ * the same policy as the availability probe. Home-dir material handlers reuse
+ * this so the built-in agents do not each carry a copy of the probe loop.
  */
 import { applyEnvPatch } from "../core/env.js";
 import { PROCESS_SIGNAL } from "../core/values.js";
@@ -14,18 +15,23 @@ const DEFAULT_LOGIN_PROBE_TIMEOUT_MS = 30_000;
 export async function cliLoginProbe(options) {
     const timeoutMs = options.timeoutMs ?? DEFAULT_LOGIN_PROBE_TIMEOUT_MS;
     const env = applyEnvPatch(options.ctx.env, options.envPatch);
-    const command = await options.ctx.exec.which(options.command, env);
-    if (command === null) {
-        // No binary on PATH: the probe cannot run, so it proves nothing.
+    let probe;
+    try {
+        const command = await options.ctx.exec.which(options.command, env);
+        if (command === null) {
+            return AUTH_STATUS.unknown;
+        }
+        probe = options.ctx.exec.spawn({
+            command,
+            args: [...options.args],
+            cwd: options.ctx.location.homeDir,
+            env,
+            stdin: null,
+        });
+    }
+    catch {
         return AUTH_STATUS.unknown;
     }
-    const probe = options.ctx.exec.spawn({
-        command,
-        args: [...options.args],
-        cwd: options.ctx.location.homeDir,
-        env,
-        stdin: null,
-    });
     let timedOut = false;
     const cancelTimeout = options.ctx.clock.setTimeout(() => {
         timedOut = true;

package/dist/auth/material.d.ts

@@ -64,7 +64,7 @@ export type MaterialHandler<K extends AuthMaterialKind> = {
         kind: K;
     }>, ctx: HostContext): Promise<AuthStatus>;
 };
-export type EnvVarAuthMaterialOptions<K extends AuthMaterialKind> = {
+type EnvVarAuthMaterialOptions<K extends AuthMaterialKind> = {
     readonly set: (material: Extract<AuthMaterial, {
         kind: K;
     }>, secrets: SecretResolvers) => Promise<Record<string, string>> | Record<string, string>;

package/dist/auth/material.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"material.d.ts","sourceRoot":"","sources":["../../src/auth/material.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,OAAO,kBAAkB,CAAC,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAElE,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAYpD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAE1E;AAED;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC7D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAC1D,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC,GACjC,WAAW,CAAC,EAAE,CAAC,CASjB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EACzD,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC,GAChC,WAAW,CAAC,EAAE,CAAC,CASjB;AAED,eAAO,MAAM,WAAW;;;;CAId,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAExE,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,gBAAgB,IAAI;IACxD,KAAK,CACH,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,CACJ,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,gBAAgB,IAAI;IAClE,QAAQ,CAAC,GAAG,EAAE,CACZ,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,OAAO,EAAE,eAAe,KACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACf,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,UAAU,CAAC,CAAC;CAC1B,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,gBAAgB,EAC3D,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,GACpC,eAAe,CAAC,CAAC,CAAC,CAWpB;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;KAC5B,CAAC,IAAI,gBAAgB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;CAC7B"}
+{"version":3,"file":"material.d.ts","sourceRoot":"","sources":["../../src/auth/material.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,OAAO,kBAAkB,CAAC,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAElE,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAYpD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAE1E;AAED;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC7D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAC1D,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC,GACjC,WAAW,CAAC,EAAE,CAAC,CASjB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EACzD,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC,GAChC,WAAW,CAAC,EAAE,CAAC,CASjB;AAED,eAAO,MAAM,WAAW;;;;CAId,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAExE,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,gBAAgB,IAAI;IACxD,KAAK,CACH,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,CACJ,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB,CAAC;AAEF,KAAK,yBAAyB,CAAC,CAAC,SAAS,gBAAgB,IAAI;IAC3D,QAAQ,CAAC,GAAG,EAAE,CACZ,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,OAAO,EAAE,eAAe,KACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACf,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,UAAU,CAAC,CAAC;CAC1B,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,gBAAgB,EAC3D,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,GACpC,eAAe,CAAC,CAAC,CAAC,CAWpB;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;KAC5B,CAAC,IAAI,gBAAgB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;CAC7B"}

package/dist/codex/app-server.d.ts

@@ -1,4 +1,15 @@
-import type { Clock, Exec } from "../core/ports.js";
+/**
+ * Codex app-server client over stdio JSON-RPC. One client is one child
+ * process, held as long as the caller wants: host-plane calls create one
+ * per call (`withCodexAppServer`), a Session keeps one for the thread's
+ * whole life. Both directions are modeled — client requests get typed,
+ * decoded results; server notifications and server-initiated requests
+ * (approval prompts) arrive on `incoming`, and `respond` answers the latter.
+ * A request timeout fails that request only; it never kills the process,
+ * because a Session's other traffic shares it.
+ */
+import { type UnknownRecord } from "../core/json.js";
+import type { Clock, Exec, ExecExit } from "../core/ports.js";
 import type { CodexAppServerMethods, CodexMcpServerStatus } from "./protocol.js";
 /**
  * How the client identifies itself to the codex app-server `initialize`
@@ -20,8 +31,46 @@ export type CodexAppServerOptions = {
     readonly requestTimeoutMs?: number;
     readonly clientInfo?: AppServerClientInfo;
 };
+export declare const CODEX_INCOMING_KIND: {
+    readonly notification: "notification";
+    readonly request: "request";
+};
+/** JSON-RPC ids the server chooses for its own requests. */
+export type CodexServerRequestId = number | string;
+/** What the server sends on its own: notifications, or requests it awaits an answer to. */
+export type CodexIncoming = {
+    readonly kind: typeof CODEX_INCOMING_KIND.notification;
+    readonly method: string;
+    readonly params: UnknownRecord | null;
+} | {
+    readonly kind: typeof CODEX_INCOMING_KIND.request;
+    readonly id: CodexServerRequestId;
+    readonly method: string;
+    readonly params: UnknownRecord | null;
+};
+export type CodexServerRequestAnswer = {
+    readonly result: unknown;
+} | {
+    readonly error: {
+        readonly code: number;
+        readonly message: string;
+    };
+};
 export interface CodexAppServer {
     request<M extends keyof CodexAppServerMethods>(method: M, params: CodexAppServerMethods[M]["params"]): Promise<CodexAppServerMethods[M]["result"]>;
+    /**
+     * Server-originated traffic in arrival order. Each iteration is its own
+     * subscription that starts at the moment of subscribing; nothing is
+     * buffered for consumers that never subscribe.
+     */
+    readonly incoming: AsyncIterable<CodexIncoming>;
+    /** Answer a server-initiated request by its id. */
+    respond(id: CodexServerRequestId, answer: CodexServerRequestAnswer): void;
+    /** Resolves when the child has exited (after `close()`, or on its own). */
+    readonly exit: Promise<ExecExit>;
+    /** The last ~2 KB of the server's stderr, for failure evidence. */
+    readonly stderrTail: string;
+    /** End stdin (the server exits on EOF), escalate to SIGTERM then SIGKILL after graces, wait for exit. */
     close(): Promise<void>;
 }
 export declare function createCodexAppServer(options: CodexAppServerOptions): CodexAppServer;

package/dist/codex/app-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-server.d.ts","sourceRoot":"","sources":["../../src/codex/app-server.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAA0B,MAAM,kBAAkB,CAAC;AAG5E,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAErB,MAAM,eAAe,CAAC;AAOvB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,CAAC,SAAS,MAAM,qBAAqB,EAC3C,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAwED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,qBAAqB,GAC7B,cAAc,CAEhB;AAED,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAgBjC"}
+{"version":3,"file":"app-server.d.ts","sourceRoot":"","sources":["../../src/codex/app-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,KAAK,EACV,KAAK,EACL,IAAI,EACJ,QAAQ,EAET,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAErB,MAAM,eAAe,CAAC;AAOvB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;CAGtB,CAAC;AAEX,4DAA4D;AAC5D,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,2FAA2F;AAC3F,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,mBAAmB,CAAC,YAAY,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;CACvC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC;IAClD,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;CACvC,CAAC;AAEN,MAAM,MAAM,wBAAwB,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,CAAC,SAAS,MAAM,qBAAqB,EAC3C,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IAChD,mDAAmD;IACnD,OAAO,CAAC,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC1E,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yGAAyG;IACzG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAuED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,qBAAqB,GAC7B,cAAc,CAEhB;AAED,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAgBjC"}