@autohq/cli 0.1.540 → 0.1.542

package/dist/agent-bridge.js

@@ -30870,7 +30870,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.540",
+  version: "0.1.542",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -75798,12 +75798,10 @@ import {
   readFileSync as readFileSync7,
   realpathSync as realpathSync3,
   rmSync as rmSync2,
-  symlinkSync as symlinkSync2,
-  unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync4
 } from "fs";
 import { tmpdir } from "os";
-import { delimiter, dirname as dirname5, join as join3 } from "path";
+import { basename as basename2, delimiter, dirname as dirname5, isAbsolute as isAbsolute2, join as join3 } from "path";
 
 // src/commands/agent-bridge/harness/codex/options.ts
 import { join as join2 } from "path";
@@ -75987,6 +75985,7 @@ var CODEX_EDIT_PROBE = {
   ].join("\n")
 };
 var PROBE_TIMEOUT_MS = 15e3;
+var MAX_CODEX_SHIM_BYTES = 4096;
 var MAX_EVIDENCE_LENGTH = 300;
 var CODEX_PLATFORM_VENDOR_TARGETS = {
   linux: {
@@ -76007,15 +76006,11 @@ function ensureCodexEditCapability(input) {
   }
   const startedAt = Date.now();
   const layout = runStep(input, "resolve", () => resolveCodexVendorLayout());
-  const status = runStep(
-    input,
-    "provision",
-    () => provisionApplyPatchAlias(layout)
-  );
+  runStep(input, "validate", () => validateApplyPatchAlias(layout));
   const alias = join3(layout.codexPathDir, CODEX_APPLY_PATCH_ALIAS);
   runStep(input, "verify", () => verifyApplyPatchAlias(alias));
   input.writeOutput?.(
-    `agent_bridge_codex_edit_capability status=${status} alias=${alias} duration_ms=${Date.now() - startedAt}`
+    `agent_bridge_codex_edit_capability status=ready alias=${alias} duration_ms=${Date.now() - startedAt}`
   );
 }
 function codexEditFallthroughMarker(item) {
@@ -76029,7 +76024,7 @@ function codexEditFallthroughMarker(item) {
   return `agent_bridge_codex_edit_fallthrough item_id=${item.id} exit_code=127`;
 }
 function resolveCodexVendorLayout() {
-  const wrappers = executableCandidatesOnPath(CODEX_EXECUTABLE_PATH);
+  const wrappers = executableCodexCandidates(CODEX_EXECUTABLE_PATH);
   if (wrappers.length === 0) {
     throw new Error("codex executable not found on PATH");
   }
@@ -76079,6 +76074,45 @@ function executableCandidatesOnPath(command) {
   }
   return candidates;
 }
+function executableCodexCandidates(command) {
+  const candidates = executableCandidatesOnPath(command);
+  const seen = new Set(candidates);
+  for (let index = 0; index < candidates.length; index += 1) {
+    const candidate = candidates[index];
+    if (!candidate) {
+      continue;
+    }
+    const target = directCodexShimTarget(candidate);
+    if (target && !seen.has(target)) {
+      seen.add(target);
+      candidates.push(target);
+    }
+  }
+  return candidates;
+}
+function directCodexShimTarget(candidate) {
+  try {
+    const resolved = realpathSync3(candidate);
+    const metadata = lstatSync3(resolved);
+    if (!metadata.isFile() || metadata.size > MAX_CODEX_SHIM_BYTES) {
+      return null;
+    }
+    const script = readFileSync7(resolved, "utf8");
+    if (!/^#!\/(?:bin\/|usr\/bin\/env )(?:ba)?sh\r?\n/.test(script)) {
+      return null;
+    }
+    const targets = script.split(/\r?\n/).map(
+      (line) => line.match(/^\s*exec\s+(?:"([^"]+)"|'([^']+)'|([^\s]+))\s+"\$@"\s*$/)
+    ).filter((match) => match !== null).map((match) => match[1] ?? match[2] ?? match[3] ?? "");
+    const [target] = targets;
+    if (!target || targets.length !== 1) {
+      return null;
+    }
+    return isAbsolute2(target) && basename2(target) === CODEX_EXECUTABLE_PATH && isExecutable(target) ? target : null;
+  } catch {
+    return null;
+  }
+}
 function isExecutable(path2) {
   try {
     accessSync(path2, constants.X_OK);
@@ -76087,16 +76121,23 @@ function isExecutable(path2) {
     return false;
   }
 }
-function provisionApplyPatchAlias(layout) {
+function validateApplyPatchAlias(layout) {
   const alias = join3(layout.codexPathDir, CODEX_APPLY_PATCH_ALIAS);
-  if (aliasResolvesToBinary(alias, layout.binary)) {
-    return "present";
+  if (!lstatExists(alias)) {
+    throw new Error(
+      `required preinstalled apply_patch alias is missing: ${alias}`
+    );
+  }
+  if (!lstatSync3(alias).isSymbolicLink()) {
+    throw new Error(
+      `preinstalled apply_patch alias is not a symbolic link: ${alias}`
+    );
   }
-  if (lstatExists(alias)) {
-    unlinkSync2(alias);
+  if (!aliasResolvesToBinary(alias, layout.binary)) {
+    throw new Error(
+      `preinstalled apply_patch alias does not resolve to the vendored Codex binary: ${alias}`
+    );
   }
-  symlinkSync2(layout.binary, alias);
-  return "provisioned";
 }
 function aliasResolvesToBinary(alias, binary) {
   try {

package/dist/index.js

@@ -81644,7 +81644,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.540",
+      version: "0.1.542",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -81769,10 +81769,10 @@ var init_project_apply_filesystem_source = __esm({
 // src/commands/agents/authoring.ts
 import { readFileSync as readFileSync8, readdirSync as readdirSync3, statSync as statSync3 } from "fs";
 import {
-  basename as basename3,
+  basename as basename4,
   dirname as dirname8,
   extname,
-  isAbsolute as isAbsolute2,
+  isAbsolute as isAbsolute3,
   join as join7,
   resolve as resolve3
 } from "path";
@@ -81831,7 +81831,7 @@ function readLocalAgentAuthoringStatuses(input) {
   );
   const paths = agentAuthoringFiles(agentsDirectory);
   return paths.map((path2) => {
-    const fallbackName = basename3(path2, extname(path2));
+    const fallbackName = basename4(path2, extname(path2));
     try {
       const result = compileAgentFile(path2);
       return {
@@ -81970,7 +81970,7 @@ function importPaths(document) {
   });
 }
 function resolveImportPath(importPath, importerPath) {
-  if (isAbsolute2(importPath) || /^[A-Za-z]+:\/\//.test(importPath)) {
+  if (isAbsolute3(importPath) || /^[A-Za-z]+:\/\//.test(importPath)) {
     throw new Error(`Agent import must be a relative path: ${importPath}`);
   }
   const resolved = resolve3(dirname8(importerPath), importPath);
@@ -82143,7 +82143,7 @@ function resolveFileBackedString(value, input) {
     );
   }
   const filePath = file2.trim();
-  if (isAbsolute2(filePath) || /^[A-Za-z]+:\/\//.test(filePath)) {
+  if (isAbsolute3(filePath) || /^[A-Za-z]+:\/\//.test(filePath)) {
     throw new Error(
       `Invalid agent authoring file ${input.path}: ${input.field}.file must be a relative path`
     );
@@ -84966,7 +84966,7 @@ var init_project_apply_files2 = __esm({
 
 // src/commands/apply/files.ts
 import { existsSync as existsSync6, readFileSync as readFileSync9, realpathSync as realpathSync3, statSync as statSync4 } from "fs";
-import { basename as basename4, dirname as dirname9, extname as extname3, isAbsolute as isAbsolute3, resolve as resolve4 } from "path";
+import { basename as basename5, dirname as dirname9, extname as extname3, isAbsolute as isAbsolute4, resolve as resolve4 } from "path";
 function readProjectApplyBundleInput(options) {
   if (options.file && options.directory) {
     throw new Error("Cannot use --file with --directory.");
@@ -85071,7 +85071,7 @@ function filesystemAssetReader(projectRoot) {
 function applyFileProjectRoot(file2) {
   let dir = dirname9(resolve4(file2));
   while (true) {
-    if (basename4(dir) === ".auto") {
+    if (basename5(dir) === ".auto") {
       return dirname9(dir);
     }
     if (directoryHasAutoRoot(dir)) {
@@ -85099,7 +85099,7 @@ function isInside(path2, parent) {
   return path2.startsWith(`${parent}/`);
 }
 function validateAgentAvatarAsset(input) {
-  if (isAbsolute3(input.asset)) {
+  if (isAbsolute4(input.asset)) {
     throw new Error(
       `Invalid identity avatar asset for "${input.resourceName}": asset path must be relative`
     );
@@ -98832,12 +98832,10 @@ import {
   readFileSync as readFileSync7,
   realpathSync as realpathSync2,
   rmSync as rmSync2,
-  symlinkSync,
-  unlinkSync,
   writeFileSync as writeFileSync5
 } from "fs";
 import { tmpdir } from "os";
-import { delimiter, dirname as dirname7, join as join5 } from "path";
+import { basename as basename3, delimiter, dirname as dirname7, isAbsolute as isAbsolute2, join as join5 } from "path";
 
 // src/commands/agent-bridge/harness/codex/options.ts
 import { join as join4 } from "path";
@@ -99021,6 +99019,7 @@ var CODEX_EDIT_PROBE = {
   ].join("\n")
 };
 var PROBE_TIMEOUT_MS = 15e3;
+var MAX_CODEX_SHIM_BYTES = 4096;
 var MAX_EVIDENCE_LENGTH = 300;
 var CODEX_PLATFORM_VENDOR_TARGETS = {
   linux: {
@@ -99041,15 +99040,11 @@ function ensureCodexEditCapability(input) {
   }
   const startedAt = Date.now();
   const layout = runStep(input, "resolve", () => resolveCodexVendorLayout());
-  const status = runStep(
-    input,
-    "provision",
-    () => provisionApplyPatchAlias(layout)
-  );
+  runStep(input, "validate", () => validateApplyPatchAlias(layout));
   const alias = join5(layout.codexPathDir, CODEX_APPLY_PATCH_ALIAS);
   runStep(input, "verify", () => verifyApplyPatchAlias(alias));
   input.writeOutput?.(
-    `agent_bridge_codex_edit_capability status=${status} alias=${alias} duration_ms=${Date.now() - startedAt}`
+    `agent_bridge_codex_edit_capability status=ready alias=${alias} duration_ms=${Date.now() - startedAt}`
   );
 }
 function codexEditFallthroughMarker(item) {
@@ -99063,7 +99058,7 @@ function codexEditFallthroughMarker(item) {
   return `agent_bridge_codex_edit_fallthrough item_id=${item.id} exit_code=127`;
 }
 function resolveCodexVendorLayout() {
-  const wrappers = executableCandidatesOnPath(CODEX_EXECUTABLE_PATH);
+  const wrappers = executableCodexCandidates(CODEX_EXECUTABLE_PATH);
   if (wrappers.length === 0) {
     throw new Error("codex executable not found on PATH");
   }
@@ -99113,6 +99108,45 @@ function executableCandidatesOnPath(command) {
   }
   return candidates;
 }
+function executableCodexCandidates(command) {
+  const candidates = executableCandidatesOnPath(command);
+  const seen = new Set(candidates);
+  for (let index = 0; index < candidates.length; index += 1) {
+    const candidate = candidates[index];
+    if (!candidate) {
+      continue;
+    }
+    const target = directCodexShimTarget(candidate);
+    if (target && !seen.has(target)) {
+      seen.add(target);
+      candidates.push(target);
+    }
+  }
+  return candidates;
+}
+function directCodexShimTarget(candidate) {
+  try {
+    const resolved = realpathSync2(candidate);
+    const metadata = lstatSync2(resolved);
+    if (!metadata.isFile() || metadata.size > MAX_CODEX_SHIM_BYTES) {
+      return null;
+    }
+    const script = readFileSync7(resolved, "utf8");
+    if (!/^#!\/(?:bin\/|usr\/bin\/env )(?:ba)?sh\r?\n/.test(script)) {
+      return null;
+    }
+    const targets = script.split(/\r?\n/).map(
+      (line) => line.match(/^\s*exec\s+(?:"([^"]+)"|'([^']+)'|([^\s]+))\s+"\$@"\s*$/)
+    ).filter((match) => match !== null).map((match) => match[1] ?? match[2] ?? match[3] ?? "");
+    const [target] = targets;
+    if (!target || targets.length !== 1) {
+      return null;
+    }
+    return isAbsolute2(target) && basename3(target) === CODEX_EXECUTABLE_PATH && isExecutable(target) ? target : null;
+  } catch {
+    return null;
+  }
+}
 function isExecutable(path2) {
   try {
     accessSync(path2, constants.X_OK);
@@ -99121,16 +99155,23 @@ function isExecutable(path2) {
     return false;
   }
 }
-function provisionApplyPatchAlias(layout) {
+function validateApplyPatchAlias(layout) {
   const alias = join5(layout.codexPathDir, CODEX_APPLY_PATCH_ALIAS);
-  if (aliasResolvesToBinary(alias, layout.binary)) {
-    return "present";
+  if (!lstatExists(alias)) {
+    throw new Error(
+      `required preinstalled apply_patch alias is missing: ${alias}`
+    );
+  }
+  if (!lstatSync2(alias).isSymbolicLink()) {
+    throw new Error(
+      `preinstalled apply_patch alias is not a symbolic link: ${alias}`
+    );
   }
-  if (lstatExists(alias)) {
-    unlinkSync(alias);
+  if (!aliasResolvesToBinary(alias, layout.binary)) {
+    throw new Error(
+      `preinstalled apply_patch alias does not resolve to the vendored Codex binary: ${alias}`
+    );
   }
-  symlinkSync(layout.binary, alias);
-  return "provisioned";
 }
 function aliasResolvesToBinary(alias, binary) {
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.540",
+  "version": "0.1.542",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"