@askexenow/exe-os 0.9.372 → 0.9.374

package/dist/bin/exe-settings.js

@@ -1,14 +1,14 @@
 import {
   assertSecureEndpoint
-} from "../chunk-77JP3LK4.js";
-import "../chunk-WV3TOOL7.js";
+} from "../chunk-VKJGHAZT.js";
+import "../chunk-KQ6RJWRW.js";
 import "../chunk-NEHOQ3P2.js";
-import "../chunk-CW2UCKHS.js";
-import "../chunk-VV5EZZNT.js";
-import "../chunk-JTB5V6BV.js";
+import "../chunk-TADAO3HV.js";
+import "../chunk-HTBEVCO2.js";
+import "../chunk-3SXHEQ7X.js";
 import "../chunk-NUTZJZKW.js";
-import "../chunk-MBNIJXKI.js";
-import "../chunk-PGLPUP37.js";
+import "../chunk-WMEYJT4R.js";
+import "../chunk-XZ65ST2I.js";
 import "../chunk-QGGH7LOU.js";
 import "../chunk-VHJVD3MZ.js";
 import "../chunk-TWMWHDOY.js";
@@ -17,11 +17,11 @@ import {
   resolveEmbeddingsEnabled,
   setEmbeddingsEnabled
 } from "../chunk-KWOAM7TA.js";
-import "../chunk-OYQNNKNS.js";
-import "../chunk-7UTJA6HF.js";
+import "../chunk-MXPNVSXI.js";
+import "../chunk-VZAFWPAY.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-3F2UB4IQ.js";
+import "../chunk-DN4YVV4Z.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
@@ -32,40 +32,42 @@ import {
   clearAgentRuntime,
   loadAgentConfig,
   setAgentRuntime
-} from "../chunk-XTWHNLGD.js";
+} from "../chunk-GZOG2MAX.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-UQUUNGTP.js";
-import "../chunk-IVU3WN7S.js";
-import "../chunk-RIECV7SR.js";
-import "../chunk-LNOS24GV.js";
+import "../chunk-NUK7EEN5.js";
+import "../chunk-ZG62LIK3.js";
+import "../chunk-EKYYMIVT.js";
 import "../chunk-NLEW62VC.js";
+import "../chunk-SLLLOOEI.js";
+import "../chunk-V3WLC5TJ.js";
 import "../chunk-MP2AFCGL.js";
 import {
   loadEmployeesSync
-} from "../chunk-5DCCKHDY.js";
-import "../chunk-TKDITWDN.js";
+} from "../chunk-TAMDAOCU.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-UTDMTQNH.js";
+import "../chunk-DSJI76XL.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-HPXFKUGU.js";
 import {
   DEFAULT_RUNTIME
 } from "../chunk-WNBZJSQT.js";
-import "../chunk-DKBPCOU4.js";
+import "../chunk-HPXFKUGU.js";
+import "../chunk-L6RXG36J.js";
 import "../chunk-A7XLR3K7.js";
-import "../chunk-GB3AHV5F.js";
+import "../chunk-GQOEWNVM.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
 import {
   loadConfig,
   saveConfig
-} from "../chunk-QMSEL5YS.js";
+} from "../chunk-ZIG7VPJV.js";
 import "../chunk-HSGBZSCA.js";
+import "../chunk-RH4AH3YB.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";

package/dist/bin/exe-start-codex.js

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   exportBehaviorsForAgent
-} from "../chunk-PM6WSWVU.js";
-import "../chunk-ELXFSIIM.js";
-import "../chunk-MBNIJXKI.js";
-import "../chunk-PGLPUP37.js";
+} from "../chunk-UBK7HK3J.js";
+import "../chunk-32YV32VA.js";
+import "../chunk-WMEYJT4R.js";
+import "../chunk-XZ65ST2I.js";
 import "../chunk-QGGH7LOU.js";
 import {
   disposeStore,
   initStore
-} from "../chunk-OYQNNKNS.js";
-import "../chunk-7UTJA6HF.js";
+} from "../chunk-MXPNVSXI.js";
+import "../chunk-VZAFWPAY.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-3F2UB4IQ.js";
+import "../chunk-DN4YVV4Z.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
@@ -21,41 +21,43 @@ import {
   clearTerminalLauncherFailure,
   writeTerminalLauncherFailure
 } from "../chunk-AJIXH5JF.js";
-import "../chunk-L6ZNURWN.js";
+import "../chunk-7GE2EQ23.js";
 import {
   CODEX_CHATGPT_UNSUPPORTED_MODELS,
   assertCodexModelForAuth,
   detectCodexAuthType
 } from "../chunk-AM7S2TY6.js";
-import "../chunk-UQUUNGTP.js";
-import "../chunk-IVU3WN7S.js";
+import "../chunk-NUK7EEN5.js";
+import "../chunk-ZG62LIK3.js";
 import {
   AGENT_IDENTITY_TOKEN_HEADER
-} from "../chunk-RIECV7SR.js";
-import "../chunk-LNOS24GV.js";
+} from "../chunk-EKYYMIVT.js";
 import "../chunk-NLEW62VC.js";
+import "../chunk-SLLLOOEI.js";
+import "../chunk-V3WLC5TJ.js";
 import "../chunk-MP2AFCGL.js";
 import {
   baseAgentName,
   loadEmployeesSync
-} from "../chunk-5DCCKHDY.js";
-import "../chunk-TKDITWDN.js";
+} from "../chunk-TAMDAOCU.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-UTDMTQNH.js";
+import "../chunk-DSJI76XL.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-HPXFKUGU.js";
 import {
   RUNTIME_TABLE
 } from "../chunk-WNBZJSQT.js";
+import "../chunk-HPXFKUGU.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
-import "../chunk-QMSEL5YS.js";
+import "../chunk-ZIG7VPJV.js";
 import "../chunk-HSGBZSCA.js";
+import "../chunk-RH4AH3YB.js";
 import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 
@@ -67,7 +69,8 @@ import {
   readFileSync,
   writeFileSync,
   mkdirSync,
-  readdirSync
+  readdirSync,
+  chmodSync
 } from "fs";
 import { spawnSync } from "child_process";
 var CODEX = RUNTIME_TABLE.codex;
@@ -142,7 +145,10 @@ function resolveAgent(argv) {
   let passthrough;
   if (sessIdx !== -1 && withoutAgent[sessIdx + 1]) {
     sessionName = withoutAgent[sessIdx + 1];
-    passthrough = [...withoutAgent.slice(0, sessIdx), ...withoutAgent.slice(sessIdx + 2)];
+    passthrough = [
+      ...withoutAgent.slice(0, sessIdx),
+      ...withoutAgent.slice(sessIdx + 2)
+    ];
   } else {
     passthrough = withoutAgent;
   }
@@ -169,7 +175,9 @@ function buildCodexMcpProfileContent(input) {
     `"X-Project-Name" = ${JSON.stringify(input.projectName)}`
   ];
   if (input.agentIdentityToken) {
-    headerPairs.push(`${JSON.stringify(AGENT_IDENTITY_TOKEN_HEADER)} = ${JSON.stringify(input.agentIdentityToken)}`);
+    headerPairs.push(
+      `${JSON.stringify(AGENT_IDENTITY_TOKEN_HEADER)} = ${JSON.stringify(input.agentIdentityToken)}`
+    );
   }
   return [
     `# Auto-generated per-session MCP config for ${input.agentId} in ${input.workerSessionName || input.coordinatorSession}`,
@@ -190,7 +198,9 @@ function loadIdentity(agent) {
   }
   try {
     const files = readdirSync(dir);
-    const match = files.find((f) => f.toLowerCase() === `${agent.toLowerCase()}.md`);
+    const match = files.find(
+      (f) => f.toLowerCase() === `${agent.toLowerCase()}.md`
+    );
     if (match) {
       const content = readFileSync(path.join(dir, match), "utf-8").trim();
       if (content) return content;
@@ -200,7 +210,9 @@ function loadIdentity(agent) {
   try {
     const rosterPath = path.join(os.homedir(), ".exe-os", "exe-employees.json");
     const roster = JSON.parse(readFileSync(rosterPath, "utf8"));
-    const emp = roster.find((e) => e.name.toLowerCase() === agent.toLowerCase());
+    const emp = roster.find(
+      (e) => e.name.toLowerCase() === agent.toLowerCase()
+    );
     if (emp?.systemPrompt && emp.systemPrompt.trim().length > 20) {
       return emp.systemPrompt;
     }
@@ -231,7 +243,10 @@ function writePromptFile(agent, identity, behaviorsPath, globalProcedures) {
 `
     );
     const marker = "\n\n[...identity/procedures/behaviors truncated to fit the model instruction size limit...]\n";
-    const head = prompt.slice(0, Math.max(0, MAX_PROMPT_CHARS - boot.length - marker.length));
+    const head = prompt.slice(
+      0,
+      Math.max(0, MAX_PROMPT_CHARS - boot.length - marker.length)
+    );
     prompt = head + marker + boot;
   }
   const outPath = path.join(promptDir, `${agent}.md`);
@@ -240,7 +255,10 @@ function writePromptFile(agent, identity, behaviorsPath, globalProcedures) {
 }
 var CODEX_PINNED_SANDBOX_MODE = "workspace-write";
 var CODEX_PINNED_APPROVAL_POLICY = "never";
-var CODEX_APPROVAL_FLAG_PREFERENCE = ["--ask-for-approval", "--approval-policy"];
+var CODEX_APPROVAL_FLAG_PREFERENCE = [
+  "--ask-for-approval",
+  "--approval-policy"
+];
 var CODEX_SANDBOX_FLAG_PREFERENCE = ["--sandbox"];
 function parseCodexSupportedFlags(helpText) {
   const flags = /* @__PURE__ */ new Set();
@@ -319,13 +337,19 @@ function buildCodexLaunchArgs(input) {
     ...sanitizeCodexPassthroughArgs(input.passthrough)
   ];
   if (input.reasoningEffort) {
-    args.push("-c", `model_reasoning_effort=${JSON.stringify(input.reasoningEffort)}`);
+    args.push(
+      "-c",
+      `model_reasoning_effort=${JSON.stringify(input.reasoningEffort)}`
+    );
   }
   if (input.worktreePath) {
     args.push("-C", input.worktreePath);
   }
   if (input.promptPath) {
-    args.push("-c", `model_instructions_file=${JSON.stringify(input.promptPath)}`);
+    args.push(
+      "-c",
+      `model_instructions_file=${JSON.stringify(input.promptPath)}`
+    );
   }
   if (input.codexProfileName) {
     args.push("--profile", input.codexProfileName);
@@ -378,7 +402,9 @@ function parseTomlStringValue(rawValue) {
   return void 0;
 }
 function parseTopLevelTomlStringSetting(raw, key) {
-  const keyRe = new RegExp(`^${key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\s*=\\s*(.+)$`);
+  const keyRe = new RegExp(
+    `^${key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\s*=\\s*(.+)$`
+  );
   for (const line of raw.split(/\r?\n/)) {
     const trimmed = stripTomlLineComment(line).trim();
     if (!trimmed) continue;
@@ -396,7 +422,10 @@ function readCodexUserConfig(homeDir = os.homedir()) {
     const raw = readFileSync(configPath, "utf8");
     return {
       model: parseTopLevelTomlStringSetting(raw, "model"),
-      reasoningEffort: parseTopLevelTomlStringSetting(raw, "model_reasoning_effort")
+      reasoningEffort: parseTopLevelTomlStringSetting(
+        raw,
+        "model_reasoning_effort"
+      )
     };
   } catch {
     return {};
@@ -430,12 +459,19 @@ function detectCodexModelNotSupported(...texts) {
   return null;
 }
 function codexModelUnavailableHint(model, authType, available) {
-  const usable = available.filter((m) => !CODEX_CHATGPT_UNSUPPORTED_MODELS.has(m));
+  const usable = available.filter(
+    (m) => !CODEX_CHATGPT_UNSUPPORTED_MODELS.has(m)
+  );
   const usableStr = usable.length > 0 ? usable.join(", ") : "gpt-5.5, gpt-5.4";
   const authStr = authType === "chatgpt-account" ? "ChatGPT account" : authType === "api-key" ? "OpenAI API key" : "unknown";
   return `Model "${model}" is not usable with your Codex auth (detected: ${authStr}). Use one of: ${usableStr} \u2014 or authenticate Codex with an OpenAI API key (set OPENAI_API_KEY) if you need "${model}".`;
 }
-var PERMANENT_SPAWN_ERRNOS = /* @__PURE__ */ new Set(["ENOENT", "EACCES", "EPERM", "ENOEXEC"]);
+var PERMANENT_SPAWN_ERRNOS = /* @__PURE__ */ new Set([
+  "ENOENT",
+  "EACCES",
+  "EPERM",
+  "ENOEXEC"
+]);
 function launchCodex(input) {
   const { binary, args, agent, effectiveModel, authType, availableModels } = input;
   const spawn = input.spawn ?? spawnSync;
@@ -458,7 +494,11 @@ function launchCodex(input) {
       runtime: "codex"
     });
   };
-  const preflight = assertCodexModelForAuth(effectiveModel, authType, availableModels);
+  const preflight = assertCodexModelForAuth(
+    effectiveModel,
+    authType,
+    availableModels
+  );
   if (!preflight.ok) {
     process.stderr.write(
       `
@@ -467,7 +507,9 @@ function launchCodex(input) {
 
 `
     );
-    emitTerminalFailure(preflight.error ?? `Model "${effectiveModel}" rejected by auth preflight`);
+    emitTerminalFailure(
+      preflight.error ?? `Model "${effectiveModel}" rejected by auth preflight`
+    );
     return { exitCode: 3, spawned: false, failureReason: preflight.error };
   }
   const child = spawn(binary, args, {
@@ -484,19 +526,32 @@ function launchCodex(input) {
         `exe-start-codex: \`${binary}\` not found in PATH. Install Codex CLI (npm i -g @openai/codex) and try again.
 `
       );
-      emitTerminalFailure(`codex binary not found (ENOENT): \`${binary}\` is not in PATH`);
+      emitTerminalFailure(
+        `codex binary not found (ENOENT): \`${binary}\` is not in PATH`
+      );
       return { exitCode: 127, spawned: true };
     }
-    process.stderr.write(`exe-start-codex: failed to spawn ${binary}: ${err.message}
-`);
+    process.stderr.write(
+      `exe-start-codex: failed to spawn ${binary}: ${err.message}
+`
+    );
     if (permanent) {
-      emitTerminalFailure(`codex binary/config permanently unusable (${err.code}): ${err.message}`);
+      emitTerminalFailure(
+        `codex binary/config permanently unusable (${err.code}): ${err.message}`
+      );
     }
     return { exitCode: 1, spawned: true };
   }
-  const backstopLine = detectCodexModelNotSupported(childStderr, decodeStdio(child.stdout));
+  const backstopLine = detectCodexModelNotSupported(
+    childStderr,
+    decodeStdio(child.stdout)
+  );
   if (backstopLine) {
-    const hint = codexModelUnavailableHint(effectiveModel, authType, availableModels);
+    const hint = codexModelUnavailableHint(
+      effectiveModel,
+      authType,
+      availableModels
+    );
     process.stderr.write(
       `
 \u274C exe-start-codex: ${agent} hit a provider 400 on model "${effectiveModel}" \u2014 ${backstopLine}
@@ -516,6 +571,21 @@ function launchCodex(input) {
   }
   return { exitCode: child.status ?? 0, spawned: true };
 }
+function writeCodexSessionProfile(codexHome, profilePath, profileContent) {
+  mkdirSync(codexHome, { recursive: true, mode: 448 });
+  try {
+    chmodSync(codexHome, 448);
+  } catch {
+  }
+  writeFileSync(profilePath, profileContent, {
+    encoding: "utf-8",
+    mode: 384
+  });
+  try {
+    chmodSync(profilePath, 384);
+  } catch {
+  }
+}
 async function main() {
   let agent;
   let passthrough;
@@ -542,7 +612,10 @@ async function main() {
   if (!process.env[CODEX.apiKeyEnv]) {
     try {
       const { execSync } = await import("child_process");
-      const status = execSync("codex login status 2>&1", { encoding: "utf8", timeout: 5e3 }).trim();
+      const status = execSync("codex login status 2>&1", {
+        encoding: "utf8",
+        timeout: 5e3
+      }).trim();
       if (!status.toLowerCase().includes("logged in")) {
         process.stderr.write(
           `exe-start-codex: not authenticated. Run \`codex login\` or set ${CODEX.apiKeyEnv}.
@@ -575,7 +648,7 @@ async function main() {
     await initStore();
     behaviorsPath = await exportBehaviorsForAgent(baseAgent, "");
     try {
-      const { loadGlobalProcedures, getGlobalProceduresBlock } = await import("../global-procedures-YAR7G4C6.js");
+      const { loadGlobalProcedures, getGlobalProceduresBlock } = await import("../global-procedures-YFDEIOG7.js");
       await loadGlobalProcedures();
       const block = getGlobalProceduresBlock();
       if (block) globalProcedures = block;
@@ -618,15 +691,15 @@ async function main() {
     }
   })();
   process.env.AGENT_ROLE = empRole;
-  const { getProjectName } = await import("../project-name-ILJTETUE.js");
+  const { getProjectName } = await import("../project-name-LJVFMYTQ.js");
   const detectedProject = getProjectName(process.cwd());
   const codexIdentity = resolveCodexMcpIdentity({ agent, sessionName });
   const exeSessionName = codexIdentity.workerSessionName || codexIdentity.coordinatorSession;
   let codexProfileName = null;
   if (exeSessionName) {
     try {
-      const { readOrCreateDaemonToken } = await import("../mcp-http-config-6K6IKH5F.js");
-      const { mcpHttpUrl } = await import("../mcp-http-config-6K6IKH5F.js");
+      const { readOrCreateDaemonToken } = await import("../mcp-http-config-DQWL7U2Z.js");
+      const { mcpHttpUrl } = await import("../mcp-http-config-DQWL7U2Z.js");
       const token = readOrCreateDaemonToken();
       const profileContent = buildCodexMcpProfileContent({
         agentId: codexIdentity.memoryAgent,
@@ -640,9 +713,11 @@ async function main() {
       });
       const codexHome = path.join(os.homedir(), ".codex");
       codexProfileName = `${memoryAgent}-${exeSessionName}`;
-      const profilePath = path.join(codexHome, `${codexProfileName}.config.toml`);
-      mkdirSync(codexHome, { recursive: true });
-      writeFileSync(profilePath, profileContent, "utf-8");
+      const profilePath = path.join(
+        codexHome,
+        `${codexProfileName}.config.toml`
+      );
+      writeCodexSessionProfile(codexHome, profilePath, profileContent);
       process.stderr.write(
         `[exe-start-codex] session profile: ${profilePath} (agent=${memoryAgent}, session=${exeSessionName})
 `
@@ -656,14 +731,16 @@ async function main() {
     }
   }
   try {
-    const { writeActiveAgent } = await import("../active-agent-GRT5MKD5.js");
+    const { writeActiveAgent } = await import("../active-agent-ONPPEWQV.js");
     writeActiveAgent(memoryAgent, empRole);
   } catch {
   }
   try {
-    const { verifyCodexHooks, runCodexInstaller } = await import("../installer-OC5VXNC7.js");
+    const { verifyCodexHooks, runCodexInstaller } = await import("../installer-LK35OX6R.js");
     if (!verifyCodexHooks()) {
-      process.stderr.write("[exe-start-codex] hooks missing \u2014 registering now\n");
+      process.stderr.write(
+        "[exe-start-codex] hooks missing \u2014 registering now\n"
+      );
       await runCodexInstaller();
     }
   } catch (err) {
@@ -675,16 +752,20 @@ async function main() {
   const WORKTREE_ROLES = /* @__PURE__ */ new Set(["Principal Engineer", "Staff Code Reviewer"]);
   let worktreePath = null;
   const worktreeName = sessionName ? sessionName.split("-")[0] : agent;
-  process.stderr.write(`[exe-start-codex] agent=${agent} session=${sessionName ?? "none"} worktree=${worktreeName} role="${empRole}" worktree-eligible=${WORKTREE_ROLES.has(empRole)}
-`);
+  process.stderr.write(
+    `[exe-start-codex] agent=${agent} session=${sessionName ?? "none"} worktree=${worktreeName} role="${empRole}" worktree-eligible=${WORKTREE_ROLES.has(empRole)}
+`
+  );
   if (WORKTREE_ROLES.has(empRole)) {
     try {
-      const { ensureWorktree, parseInstanceLabel } = await import("../worktree-GOGT2LZP.js");
+      const { ensureWorktree, parseInstanceLabel } = await import("../worktree-W47CIMJ6.js");
       const { base, instance } = parseInstanceLabel(worktreeName);
       worktreePath = ensureWorktree(process.cwd(), base, instance);
       if (worktreePath) {
-        process.stderr.write(`[exe-start-codex] worktree isolation: ${worktreeName} \u2192 ${worktreePath}
-`);
+        process.stderr.write(
+          `[exe-start-codex] worktree isolation: ${worktreeName} \u2192 ${worktreePath}
+`
+        );
       } else {
         process.stderr.write(
           `[exe-start-codex] Worktree creation returned null for ${agent}. Falling back to main checkout.
@@ -771,5 +852,6 @@ export {
   readCodexUserConfig,
   resolveCodexMcpIdentity,
   resolveEffectiveCodexModel,
-  sanitizeCodexPassthroughArgs
+  sanitizeCodexPassthroughArgs,
+  writeCodexSessionProfile
 };