@bolt-foundry/gambit 1.0.0-rc.1 → 1.0.0-rc.2

package/CHANGELOG.md

@@ -1,14 +1,43 @@
 +++
 [release]
-since = "b6ed5a3a8d6a9b272ce520d885d3953d27c2c0d4"
+since = "00872eb8b2190de2ba0904c0ac4f4cdbc611718b"
 +++
 
 # Changelog
 
-## Unreleased
+## Unreleased (v1.0.0)
 
 - TBD
 
+## v1.0.0-rc.2
+
+- fix(gambit): preserve structured text spacing
+- fix(gambit): pass codex runtime tools
+- feat(gambit): make provider execution responses-only
+- feat(gambit): expose structured responses runtime
+- fix(gambit): preserve responses continuation context
+- chore(gambit): remove dead chat provider adapters
+- test(gambit): remove legacy chat suites
+- chore(browser): move runtime out of Gambit
+- feat(gambit): add live browser pointer refs
+- feat(workloop): bridge runtime Codex refresh to host services
+- feat(gambit): add browser introspection live commands
+- fix(gambit): fall back without host service token
+- fix(workloop): preserve Codex auth refresh failures
+- fix(gambit): preserve whitespace in streamed assistant deltas
+- fix(workloop): disable Codex websockets in chief runtime
+- feat(gambit): add local deck chat repro server
+- feat(gambit): stream and control chat turns
+- feat(gambit): improve chat event observability
+- docs(gambit): use canonical graders frontmatter
+- fix(gambit): reject sandboxed chat runs
+- docs(gambit): reposition around scenarios and graders
+- docs(gambit): record agent file naming feedback
+- chore(gambit): record full precommit verification
+- fix(gambit): hydrate chat transcript from persisted state
+- chore(gambit): use generic runtime env names
+- docs(workloop): align Gambit brand hierarchy
+
 ## v1.0.0-rc.1
 
 - BREAKING: make Gambit runtime execution Responses-only.

package/README.md

@@ -1,9 +1,15 @@
 # <img src="./gambit_1color_bg.png" alt="Gambit logo" height="50" />
 
-Gambit is an open-source, developer-first framework that helps you build\
-reliable LLM workflows by composing small, typed “decks”\
-with clear inputs/outputs and guardrails. Run decks locally, stream traces, and\
-debug with a built-in UI.
+Agent frameworks help you build agents. Gambit helps you create the evidence
+that they work.
+
+Gambit is the synthetic scenario and evaluation layer for agent systems: create
+realistic scenarios, validate their quality, run agents against them, grade the
+behavior, capture trace evidence, and turn failures into regression suites.
+
+Native Gambit agents are still the fastest path to the fully integrated loop:
+typed inputs and outputs, local runs, scenarios, graders, traces, permission
+evidence, and the simulator's Build/Test/Grade/Verify workflow.
 
 [Watch the demo video](https://youtu.be/J_hQ2L_yy60).
 
@@ -19,8 +25,8 @@ export OPENROUTER_API_KEY=...
 npx @bolt-foundry/gambit demo
 ```
 
-Downloads example files (hello decks plus the `examples/` gallery) and sets
-environment variables.
+Downloads example files (hello agent definitions plus the `examples/` gallery)
+and sets environment variables.
 
 To start onboarding with the simulator, run:
 
@@ -29,7 +35,7 @@ npx @bolt-foundry/gambit-simulator serve gambit/hello.deck.md
 open http://localhost:8000/debug
 ```
 
-Use the Build tab to draft your own workspace decks and scenarios.
+Use the Build tab to draft your own workspace agents and scenarios.
 
 Run an example in the terminal (`repl`):
 
@@ -48,35 +54,102 @@ open http://localhost:8000/debug
 
 ---
 
+## Why Gambit
+
+Agent teams already have many ways to build and orchestrate agents: native
+Gambit, Mastra, LangGraph, OpenAI Agents SDK, CrewAI, Google ADK, LlamaIndex,
+Pydantic AI, and custom stacks. The harder product problem is creating the
+situations those agents need to survive, checking whether those situations are
+good tests, and preserving the evidence when behavior regresses.
+
+Gambit focuses on that reliability loop:
+
+- **Generate scenarios** for realistic user, tool, workflow, policy, and edge
+  case pressure.
+- **Evaluate the scenario data** for realism, coverage, difficulty, grounding,
+  duplication, and expected-outcome clarity.
+- **Run agent evals** against native Gambit, Mastra, LangGraph, OpenAI, or
+  custom agents.
+- **Grade behavior** from transcripts, artifacts, traces, and typed outputs.
+- **Diagnose failures** with trace evidence and permission evidence.
+- **Regenerate regression suites** from failures so the same behavior does not
+  quietly break again.
+
+For a native Gambit agent, the same system defines, runs, traces, tests, grades,
+and debugs the agent end to end. For a Mastra, LangGraph, OpenAI, or custom
+agent, Gambit sits on the other side of the framework: the test-data engine,
+grader loop, local reproduction harness, and CI behavior check.
+
+## Common workflows
+
+### Native Gambit path
+
+Define the agent in Gambit, run it locally, add scenarios for the behavior that
+must keep working, attach graders, inspect traces in the simulator, and reuse
+the same checks in CI. This is the most direct path when you want Gambit to own
+both the agent definition and the verification loop.
+
+### Bring your own agent
+
+Use Mastra to build the TypeScript agent application. Use Gambit to create and
+validate scenario suites around the important Mastra behaviors, then grade the
+transcripts and artifacts those runs produce. A thin wrapper can record run
+inputs, transcript turns, artifacts, state paths, and trace references so Gambit
+can grade them and keep failing cases reproducible.
+
+### Pull request gate
+
+Run important scenarios on every pull request, grade the resulting transcripts
+or artifacts, and fail the check when behavior drops below the expected
+standard. Failed checks should keep the trace, state, and reproduction inputs so
+the regression can be debugged locally.
+
+```yaml
+# Proposed workflow shape. This is positioning guidance, not a published
+# bolt-foundry/gambit-action release.
+name: Agent behavior checks
+
+on:
+  pull_request:
+
+jobs:
+  gambit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: npx @bolt-foundry/gambit scenario gambit/root.deck.md --test-deck gambit/scenarios/smoke.deck.md --grade gambit/graders/smoke.deck.md --state .gambit/ci-smoke.json --trace .gambit/ci-smoke.jsonl
+```
+
 ## Status quo
 
-- Most teams wire one long prompt to several tools and hope the model routes\
-  correctly.
-- Context often arrives as a single giant fetch or RAG blob, so costs climb and\
-  hallucinations slip in.
-- Input/outputs are rarely typed, which makes orchestration brittle and hard to\
-  test offline.
-- Debugging leans on provider logs instead of local traces, so reproducing\
-  failures is slow.
+- Teams have more ways than ever to build agents, but fewer ways to know whether
+  their eval data covers the behavior that will matter in production.
+- Synthetic scenarios can look plausible while duplicating each other, missing
+  policy edges, or failing to state the expected outcome clearly.
+- Agent failures often disappear into provider logs, so the team cannot replay
+  the exact inputs, transcript, tool calls, and artifacts that caused the
+  regression.
+- CI usually checks code shape more reliably than agent behavior.
 
 ## Our vision
 
-- Treat each step as a small deck with explicit inputs/outputs and guardrails;\
-  model calls are just one kind of action.
-- Mix LLM and compute tasks interchangeably and effortlessly inside the same\
-  deck tree.
-- Feed models only what they need per step; inject references and cards instead\
-  of dumping every document.
-- Keep orchestration logic local and testable; run decks offline with\
-  predictable traces.
-- Ship with built-in observability (streaming, REPL, debug UI) so debugging\
-  feels like regular software, not guesswork.
+- Generate the situations your agents need to survive: users, tasks, workflows,
+  tool pressure, policy edges, and hard failure modes.
+- Grade the scenario data itself before it becomes trusted eval data.
+- Run any target agent against the curated suite and preserve the transcript,
+  state, artifacts, trace events, and permission evidence.
+- Diagnose failures by capability gap, tool issue, prompt issue, policy
+  ambiguity, retrieval miss, or unsafe action.
+- Feed those failures back into sharper follow-up scenarios and regression
+  checks.
 
 ---
 
 ## Using the CLI
 
-Use the CLI to run decks locally, stream output, and capture traces/state.
+Use the CLI to run agent definitions locally, stream output, and capture
+traces/state. The current CLI and file format still use `deck` as the exact
+implementation term.
 
 Run with npx (no install):
 
@@ -84,7 +157,7 @@ Run with npx (no install):
 npx @bolt-foundry/gambit <command>
 ```
 
-Run a deck once:
+Run an agent definition once:
 
 ```
 npx @bolt-foundry/gambit run <deck> --context <json|string> --message <json|string>
@@ -99,7 +172,34 @@ Drop into a REPL (streams by default):
 npx @bolt-foundry/gambit repl <deck>
 ```
 
-Run a persona against a root deck (scenario):
+Start a focused browser chat for an agent definition:
+
+```
+npx @bolt-foundry/gambit chat <deck> --state .gambit/chat/workspace.sqlite --trace .gambit/chat/trace.jsonl
+```
+
+Use `chat` when you need a localhost transcript, saved state, trace output, and
+runtime-supplied tools without the full simulator workbench. Use `repl` for a
+terminal loop, `run` for one-shot automation, and `gambit-simulator serve` for
+Build/Test/Grade/Verify workflows.
+
+For repeatable repros, pass `--repro-message <text>` to attach the original user
+ask to the session payload without sending it automatically.
+
+Supply runtime tools with Markdown/TOML files:
+
+```
+npx @bolt-foundry/gambit chat MANAGER.md --runtime-tools ./workloop-runtime-tools.mock.md
+npx @bolt-foundry/gambit chat support.deck.md --runtime-tools ./taxo-runtime-tools.mock.md
+```
+
+The runtime-tool file uses `[[tools]]` entries with `name`, `description`,
+optional `inputSchema`, and optional `action`. Action bindings run Gambit agent
+definitions with the tool arguments as context, keeping product-specific tools
+outside the portable root agent. See `examples/local-chat/` for Workloop-style
+and Taxo-style mock tool fixtures.
+
+Run a scenario persona against a root agent:
 
 ```
 npx @bolt-foundry/gambit scenario <root-deck> --test-deck <persona-deck>
@@ -125,7 +225,7 @@ Tracing and state:
 
 ### Worker sandbox defaults
 
-- Deck-executing CLI surfaces default to worker sandbox execution.
+- CLI commands that execute decks default to worker sandbox execution.
 - Use `--no-worker-sandbox` (or `--legacy-exec`) to force legacy in-process
   execution.
 - `--worker-sandbox` explicitly forces worker execution on.
@@ -204,7 +304,9 @@ header (left of `New chat`).
 
 ## Using the Library
 
-Use the library when you want TypeScript decks/cards or custom compute steps.
+Use the library when you want TypeScript agent definitions, reusable instruction
+snippets, or custom compute steps. The exported helper names remain `defineDeck`
+and `defineCard` for compatibility.
 
 Import the helpers from JSR:
 
@@ -216,10 +318,10 @@ import { defineDeck, defineCard } from "jsr:@bolt-foundry/gambit";
 
 - `reviews/2026-04-15-AAR-raw-response-items.md`
 
-Define `contextSchema`/`responseSchema` with Zod to validate IO, and implement\
-`run`/`execute` for compute decks. To call a child deck from code, use\
-`ctx.spawnAndWait({ path, input })`. Emit structured trace events with\
-`ctx.log(...)`.
+Define `contextSchema`/`responseSchema` with Zod to validate IO, and implement
+`run`/`execute` for compute agent definitions. To call a child agent definition
+from code, use `ctx.spawnAndWait({ path, input })`. Emit structured trace events
+with `ctx.log(...)`.
 
 ### Runtime defaults for programmatic `runDeckResponses`
 
@@ -288,9 +390,9 @@ Replacement mapping:
 
 ---
 
-## Author your first deck
+## Author your first native Gambit agent
 
-### Minimal Markdown deck (model-powered): `hello_world.deck.md`
+### Minimal Markdown agent definition (model-powered): `hello_world.deck.md`
 
 ```
 +++
@@ -310,7 +412,7 @@ Run it:
 npx @bolt-foundry/gambit run ./hello_world.deck.md --context '"Gambit"' --stream
 ```
 
-### Compute deck in TypeScript (no model call): `echo.deck.ts`
+### Compute agent definition in TypeScript (no model call): `echo.deck.ts`
 
 ```typescript
 // echo.deck.ts
@@ -333,7 +435,7 @@ Run it:
 npx @bolt-foundry/gambit run ./echo.deck.ts --context '{"text":"ping"}'
 ```
 
-### Deck with a child action (calls a TypeScript tool): `agent_with_time.deck.md`
+### Agent definition with a child action (calls a TypeScript tool): `agent_with_time.deck.md`
 
 ```
 +++
@@ -374,8 +476,9 @@ npx @bolt-foundry/gambit run ./agent_with_time.deck.md --context '"hello"' --str
 ### Legacy respond-flow demo (historical compatibility)
 
 `packages/gambit/examples/respond_flow/` is kept as a legacy compatibility
-example for historical transcript/grader behavior. New decks should return
-schema-valid assistant output directly instead of calling `gambit_respond`.
+example for historical transcript/grader behavior. New agent definitions should
+return schema-valid assistant output directly instead of calling
+`gambit_respond`.
 
 ```
 cd packages/gambit

package/esm/src/codex_app_server_debug.d.ts

@@ -1,10 +1,9 @@
-declare const CODEX_APP_SERVER_DEBUG_ENV = "WORKLOOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
-declare const LEGACY_CODEX_APP_SERVER_DEBUG_ENV = "BOLT_FOUNDRY_DESKTOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
+declare const CODEX_APP_SERVER_DEBUG_ENV = "GAMBIT_CODEX_APP_SERVER_DEBUG";
 type DebugValue = null | boolean | number | string | Array<DebugValue> | {
     [key: string]: DebugValue;
 };
 export declare function shouldDebugCodexAppServer(): boolean;
 export declare function logCodexAppServerDebug(event: string, details?: Record<string, unknown>): void;
 export declare function summarizeCodexAppServerDebugValue(value: unknown): DebugValue;
-export { CODEX_APP_SERVER_DEBUG_ENV, LEGACY_CODEX_APP_SERVER_DEBUG_ENV };
+export { CODEX_APP_SERVER_DEBUG_ENV };
 //# sourceMappingURL=codex_app_server_debug.d.ts.map

package/esm/src/codex_app_server_debug.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex_app_server_debug.d.ts","sourceRoot":"","sources":["../../src/src/codex_app_server_debug.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,0BAA0B,kDACiB,CAAC;AAClD,QAAA,MAAM,iCAAiC,8DACsB,CAAC;AAe9D,KAAK,UAAU,GACX,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,KAAK,CAAC,UAAU,CAAC,GACjB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAC;AA+DlC,wBAAgB,yBAAyB,IAAI,OAAO,CAGnD;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAIN;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE5E;AAED,OAAO,EAAE,0BAA0B,EAAE,iCAAiC,EAAE,CAAC"}
+{"version":3,"file":"codex_app_server_debug.d.ts","sourceRoot":"","sources":["../../src/src/codex_app_server_debug.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,0BAA0B,kCAAkC,CAAC;AAenE,KAAK,UAAU,GACX,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,KAAK,CAAC,UAAU,CAAC,GACjB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAC;AA+DlC,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAIN;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE5E;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/esm/src/codex_app_server_debug.js

@@ -1,6 +1,5 @@
 import * as dntShim from "../_dnt.shims.js";
-const CODEX_APP_SERVER_DEBUG_ENV = "WORKLOOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
-const LEGACY_CODEX_APP_SERVER_DEBUG_ENV = "BOLT_FOUNDRY_DESKTOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
+const CODEX_APP_SERVER_DEBUG_ENV = "GAMBIT_CODEX_APP_SERVER_DEBUG";
 const STRUCTURAL_STRING_KEYS = new Set([
     "error",
     "method",
@@ -59,8 +58,7 @@ function summarizeDebugValue(value, key, depth = 0) {
     return summarized;
 }
 export function shouldDebugCodexAppServer() {
-    return parseTruthy(dntShim.Deno.env.get(CODEX_APP_SERVER_DEBUG_ENV)) ||
-        parseTruthy(dntShim.Deno.env.get(LEGACY_CODEX_APP_SERVER_DEBUG_ENV));
+    return parseTruthy(dntShim.Deno.env.get(CODEX_APP_SERVER_DEBUG_ENV));
 }
 export function logCodexAppServerDebug(event, details) {
     if (!shouldDebugCodexAppServer())
@@ -71,4 +69,4 @@ export function logCodexAppServerDebug(event, details) {
 export function summarizeCodexAppServerDebugValue(value) {
     return summarizeDebugValue(value);
 }
-export { CODEX_APP_SERVER_DEBUG_ENV, LEGACY_CODEX_APP_SERVER_DEBUG_ENV };
+export { CODEX_APP_SERVER_DEBUG_ENV };

package/esm/src/codex_auth.d.ts

@@ -1,5 +1,4 @@
-export declare const CODEX_HOST_AUTH_BUNDLE_ENV = "WORKLOOP_CODEX_AUTH_BUNDLE";
-export declare const LEGACY_CODEX_HOST_AUTH_BUNDLE_ENV = "BOLT_FOUNDRY_DESKTOP_CODEX_AUTH_BUNDLE";
+export declare const CODEX_HOST_AUTH_BUNDLE_ENV = "GAMBIT_CODEX_AUTH_BUNDLE";
 export type CodexChatgptAuthTokens = {
     accessToken: string;
     chatgptAccountId: string;

package/esm/src/codex_auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex_auth.d.ts","sourceRoot":"","sources":["../../src/src/codex_auth.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AACvE,eAAO,MAAM,iCAAiC,2CACJ,CAAC;AAE3C,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAkFF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD;IACD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CASA;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,uCAAuC,CACrD,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAER;AAED,wBAAgB,0BAA0B,IAAI,sBAAsB,GAAG,IAAI,CAK1E;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkDlC"}
+{"version":3,"file":"codex_auth.d.ts","sourceRoot":"","sources":["../../src/src/codex_auth.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AAErE,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAkFF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD;IACD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CASA;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,uCAAuC,CACrD,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAER;AAED,wBAAgB,0BAA0B,IAAI,sBAAsB,GAAG,IAAI,CAI1E;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkDlC"}

package/esm/src/codex_auth.js

@@ -1,8 +1,7 @@
 import * as dntShim from "../_dnt.shims.js";
 const CODEX_AUTH0_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 const CODEX_AUTH0_TOKEN_URL = "https://auth.openai.com/oauth/token";
-export const CODEX_HOST_AUTH_BUNDLE_ENV = "WORKLOOP_CODEX_AUTH_BUNDLE";
-export const LEGACY_CODEX_HOST_AUTH_BUNDLE_ENV = "BOLT_FOUNDRY_DESKTOP_CODEX_AUTH_BUNDLE";
+export const CODEX_HOST_AUTH_BUNDLE_ENV = "GAMBIT_CODEX_AUTH_BUNDLE";
 function normalizeNonEmptyString(value) {
     return typeof value === "string" && value.trim().length > 0
         ? value.trim()
@@ -123,8 +122,7 @@ export function serializeCodexAuthBundle(bundle) {
     return JSON.stringify(bundle);
 }
 export function readCodexAuthBundleFromEnv() {
-    const raw = dntShim.Deno.env.get(CODEX_HOST_AUTH_BUNDLE_ENV)?.trim() ||
-        dntShim.Deno.env.get(LEGACY_CODEX_HOST_AUTH_BUNDLE_ENV)?.trim();
+    const raw = dntShim.Deno.env.get(CODEX_HOST_AUTH_BUNDLE_ENV)?.trim();
     if (!raw)
         return null;
     return parseCodexAuthBundle(raw);

package/esm/src/providers/codex.d.ts

@@ -57,6 +57,16 @@ export declare function codexConfigArgsForTest(input: {
     instructions?: string;
 }): Array<string>;
 export declare function safeJsonForTest(text: string): Record<string, JSONValue>;
+export declare function appServerRequestResultForTest(input: {
+    method: string;
+    params: Record<string, unknown>;
+}): Promise<{
+    result?: Record<string, JSONValue>;
+    error?: {
+        code: number;
+        message: string;
+    };
+}>;
 export declare function sanitizeCodexSpawnArgsForTest(args: Array<string>): Array<string>;
 export declare function extractCodexConfigValuesForTest(args: Array<string>, flag: string, prefix?: string): Array<string>;
 export {};

package/esm/src/providers/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/src/providers/codex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGV,SAAS,EACT,YAAY,EACZ,aAAa,EAGb,YAAY,EAGZ,UAAU,EACV,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI/D,eAAO,MAAM,YAAY,eAAe,CAAC;AA0DzC,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,KAAK,mBAAmB,GAAG,CACzB,KAAK,EAAE,wBAAwB,KAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAExC,MAAM,MAAM,mBAAmB,GAAG;IAChC,cAAc,EAAE,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QACzB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvC,CAAC;AAmBF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,mBAAmB,GAAG,IAAI,GACjC,IAAI,CAEN;AAyiED,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IACzC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACxC,GAAG,aAAa,CAuShB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,GAC5B,MAAM,CAER;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAET;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,KAAK,CAAC,MAAM,CAAC,CAEhB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAEvE;AAED,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,GAClB,KAAK,CAAC,MAAM,CAAC,CAEf;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,KAAK,CAAC,MAAM,CAAC,CAEf"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/src/providers/codex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGV,SAAS,EACT,YAAY,EACZ,aAAa,EAGb,YAAY,EAGZ,UAAU,EACV,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI/D,eAAO,MAAM,YAAY,eAAe,CAAC;AA0DzC,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,KAAK,mBAAmB,GAAG,CACzB,KAAK,EAAE,wBAAwB,KAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAExC,MAAM,MAAM,mBAAmB,GAAG;IAChC,cAAc,EAAE,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QACzB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvC,CAAC;AAmBF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,mBAAmB,GAAG,IAAI,GACjC,IAAI,CAEN;AA6kED,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IACzC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACxC,GAAG,aAAa,CAuShB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,GAC5B,MAAM,CAER;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAET;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,KAAK,CAAC,MAAM,CAAC,CAEhB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAEvE;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC;IACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC,CAED;AAED,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,GAClB,KAAK,CAAC,MAAM,CAAC,CAEf;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,KAAK,CAAC,MAAM,CAAC,CAEf"}

package/esm/src/providers/codex.js

@@ -13,14 +13,14 @@ const CODEX_REASONING_SUMMARY_ENV = "GAMBIT_CODEX_REASONING_SUMMARY";
 const CODEX_VERBOSITY_ENV = "GAMBIT_CODEX_VERBOSITY";
 const CODEX_BIN_ENV = "GAMBIT_CODEX_BIN";
 const CODEX_SKIP_SANDBOX_CONFIG_ENV = "GAMBIT_CODEX_SKIP_SANDBOX_CONFIG";
+const CODEX_DISABLE_WEBSOCKETS_ENV = "GAMBIT_CODEX_DISABLE_WEBSOCKETS";
 const CODEX_DANGEROUS_BYPASS_ENV = "GAMBIT_CODEX_DANGEROUSLY_BYPASS_APPROVALS_AND_SANDBOX";
 const MCP_DENO_BIN_ENV = "GAMBIT_MCP_DENO_BIN";
 const MCP_ROOT_DECK_PATH_ENV = "GAMBIT_MCP_ROOT_DECK_PATH";
 const EXTERNAL_TOOL_BRIDGE_ENV = "GAMBIT_EXTERNAL_TOOL_BRIDGE";
 const MCP_DEBUG_LOG_PATH_ENV = "GAMBIT_MCP_DEBUG_LOG_PATH";
 const DENO_DIR_ENV = "DENO_DIR";
-const DEBUG_MCP_ENV = "WORKLOOP_CHIEF_RUNTIME_DEBUG_MCP";
-const LEGACY_DEBUG_MCP_ENV = "BOLT_FOUNDRY_DESKTOP_CHIEF_RUNTIME_DEBUG_MCP";
+const DEBUG_MCP_ENV = "GAMBIT_MCP_DEBUG";
 const MCP_SERVER_PATH = (() => {
     try {
         const moduleUrl = new URL(globalThis[Symbol.for("import-meta-ponyfill-esmodule")](import.meta).url);
@@ -111,10 +111,8 @@ function shouldEnableMcpBridge() {
     return normalized === "1" || normalized === "true" || normalized === "yes";
 }
 function shouldDebugMcpBridge() {
-    return [DEBUG_MCP_ENV, LEGACY_DEBUG_MCP_ENV].some((envName) => {
-        const raw = dntShim.Deno.env.get(envName)?.trim().toLowerCase();
-        return raw === "1" || raw === "true" || raw === "yes";
-    });
+    const raw = dntShim.Deno.env.get(DEBUG_MCP_ENV)?.trim().toLowerCase();
+    return raw === "1" || raw === "true" || raw === "yes";
 }
 function isCodexNativeOrGambitBuiltinTool(name) {
     return new Set([
@@ -133,7 +131,7 @@ function logCodexMcpDebug(event, details) {
     globalThis.console.error("[gambit-codex-mcp]", event, details ?? {});
 }
 function codexMcpDebugLogPath(cwd) {
-    return path.join(cwd, ".boltfoundry", "runtime", "chief-runtime", "gambit-mcp-debug.log");
+    return path.join(cwd, ".workloop", "runtime", "chief-runtime", "gambit-mcp-debug.log");
 }
 function mcpServerDenoBin() {
     return dntShim.Deno.env.get(MCP_DENO_BIN_ENV)?.trim() || "deno";
@@ -171,6 +169,14 @@ function shouldSkipCodexSandboxConfig(params) {
     const envRaw = dntShim.Deno.env.get(CODEX_SKIP_SANDBOX_CONFIG_ENV);
     return Boolean(envRaw && parseTruthy(envRaw));
 }
+function shouldDisableCodexWebsockets() {
+    // Newer Codex releases reserve built-in provider IDs, so overriding
+    // `model_providers.openai.supports_websockets` now prevents app-server
+    // startup. Keep the env var harmless while the old transport workaround ages
+    // out.
+    dntShim.Deno.env.get(CODEX_DISABLE_WEBSOCKETS_ENV);
+    return false;
+}
 function tomlString(value) {
     return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
 }
@@ -258,6 +264,9 @@ function codexAdditionalConfigArgs(params) {
 function codexConfigArgs(input) {
     const args = [];
     args.push(...codexAdditionalConfigArgs(input.params));
+    if (shouldDisableCodexWebsockets()) {
+        args.push("-c", "model_providers.openai.supports_websockets=false");
+    }
     args.push("-c", `approval_policy=${tomlString("never")}`);
     const pathEnv = dntShim.Deno.env.get("PATH")?.trim();
     if (pathEnv) {
@@ -478,14 +487,22 @@ async function appServerRequestResult(input) {
     }
     if (input.method === "account/chatgptAuthTokens/refresh") {
         const bridge = requireCodexHostAuthBridge();
-        const refreshed = await bridge.refreshAuthTokens({
-            previousAccountId: typeof input.params.previousAccountId === "string"
-                ? input.params.previousAccountId
-                : null,
-            reason: typeof input.params.reason === "string" && input.params.reason
-                ? input.params.reason
-                : "account/chatgptAuthTokens/refresh",
-        });
+        let refreshed;
+        try {
+            refreshed = await bridge.refreshAuthTokens({
+                previousAccountId: typeof input.params.previousAccountId === "string"
+                    ? input.params.previousAccountId
+                    : null,
+                reason: typeof input.params.reason === "string" && input.params.reason
+                    ? input.params.reason
+                    : "account/chatgptAuthTokens/refresh",
+            });
+        }
+        catch (error) {
+            return {
+                error: appServerHostRequestFailure(error),
+            };
+        }
         return {
             result: {
                 accessToken: refreshed.accessToken,
@@ -502,6 +519,14 @@ async function appServerRequestResult(input) {
         },
     };
 }
+function appServerHostRequestFailure(error) {
+    return {
+        code: -32000,
+        message: error instanceof Error && error.message
+            ? error.message
+            : String(error),
+    };
+}
 async function bootstrapCodexExternalAuth(input) {
     if (!codexHostAuthBridge) {
         return;
@@ -984,7 +1009,15 @@ async function defaultAppServerTurnRunner(input) {
                             method,
                             params: safeJsonObjectFromRecord(params),
                         });
-                        const response = await appServerRequestResult({ method, params });
+                        let response;
+                        try {
+                            response = await appServerRequestResult({ method, params });
+                        }
+                        catch (error) {
+                            response = {
+                                error: appServerHostRequestFailure(error),
+                            };
+                        }
                         logCodexAppServerDebug("message:host_response", {
                             method,
                             requestId,
@@ -2098,6 +2131,9 @@ export function codexConfigArgsForTest(input) {
 export function safeJsonForTest(text) {
     return safeJsonObject(text);
 }
+export async function appServerRequestResultForTest(input) {
+    return await appServerRequestResult(input);
+}
 export function sanitizeCodexSpawnArgsForTest(args) {
     return sanitizeCodexSpawnArgsForDebug(args);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bolt-foundry/gambit",
-  "version": "1.0.0-rc.1",
+  "version": "1.0.0-rc.2",
   "description": "Agent harness framework for building, running, and verifying LLM workflows in Markdown and code.",
   "homepage": "https://github.com/bolt-foundry/gambit",
   "repository": {

package/script/src/codex_app_server_debug.d.ts

@@ -1,10 +1,9 @@
-declare const CODEX_APP_SERVER_DEBUG_ENV = "WORKLOOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
-declare const LEGACY_CODEX_APP_SERVER_DEBUG_ENV = "BOLT_FOUNDRY_DESKTOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
+declare const CODEX_APP_SERVER_DEBUG_ENV = "GAMBIT_CODEX_APP_SERVER_DEBUG";
 type DebugValue = null | boolean | number | string | Array<DebugValue> | {
     [key: string]: DebugValue;
 };
 export declare function shouldDebugCodexAppServer(): boolean;
 export declare function logCodexAppServerDebug(event: string, details?: Record<string, unknown>): void;
 export declare function summarizeCodexAppServerDebugValue(value: unknown): DebugValue;
-export { CODEX_APP_SERVER_DEBUG_ENV, LEGACY_CODEX_APP_SERVER_DEBUG_ENV };
+export { CODEX_APP_SERVER_DEBUG_ENV };
 //# sourceMappingURL=codex_app_server_debug.d.ts.map

package/script/src/codex_app_server_debug.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex_app_server_debug.d.ts","sourceRoot":"","sources":["../../src/src/codex_app_server_debug.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,0BAA0B,kDACiB,CAAC;AAClD,QAAA,MAAM,iCAAiC,8DACsB,CAAC;AAe9D,KAAK,UAAU,GACX,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,KAAK,CAAC,UAAU,CAAC,GACjB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAC;AA+DlC,wBAAgB,yBAAyB,IAAI,OAAO,CAGnD;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAIN;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE5E;AAED,OAAO,EAAE,0BAA0B,EAAE,iCAAiC,EAAE,CAAC"}
+{"version":3,"file":"codex_app_server_debug.d.ts","sourceRoot":"","sources":["../../src/src/codex_app_server_debug.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,0BAA0B,kCAAkC,CAAC;AAenE,KAAK,UAAU,GACX,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,KAAK,CAAC,UAAU,CAAC,GACjB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAC;AA+DlC,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAIN;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE5E;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/script/src/codex_app_server_debug.js

@@ -33,15 +33,13 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LEGACY_CODEX_APP_SERVER_DEBUG_ENV = exports.CODEX_APP_SERVER_DEBUG_ENV = void 0;
+exports.CODEX_APP_SERVER_DEBUG_ENV = void 0;
 exports.shouldDebugCodexAppServer = shouldDebugCodexAppServer;
 exports.logCodexAppServerDebug = logCodexAppServerDebug;
 exports.summarizeCodexAppServerDebugValue = summarizeCodexAppServerDebugValue;
 const dntShim = __importStar(require("../_dnt.shims.js"));
-const CODEX_APP_SERVER_DEBUG_ENV = "WORKLOOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
+const CODEX_APP_SERVER_DEBUG_ENV = "GAMBIT_CODEX_APP_SERVER_DEBUG";
 exports.CODEX_APP_SERVER_DEBUG_ENV = CODEX_APP_SERVER_DEBUG_ENV;
-const LEGACY_CODEX_APP_SERVER_DEBUG_ENV = "BOLT_FOUNDRY_DESKTOP_CHIEF_RUNTIME_DEBUG_CODEX_APP_SERVER";
-exports.LEGACY_CODEX_APP_SERVER_DEBUG_ENV = LEGACY_CODEX_APP_SERVER_DEBUG_ENV;
 const STRUCTURAL_STRING_KEYS = new Set([
     "error",
     "method",
@@ -100,8 +98,7 @@ function summarizeDebugValue(value, key, depth = 0) {
     return summarized;
 }
 function shouldDebugCodexAppServer() {
-    return parseTruthy(dntShim.Deno.env.get(CODEX_APP_SERVER_DEBUG_ENV)) ||
-        parseTruthy(dntShim.Deno.env.get(LEGACY_CODEX_APP_SERVER_DEBUG_ENV));
+    return parseTruthy(dntShim.Deno.env.get(CODEX_APP_SERVER_DEBUG_ENV));
 }
 function logCodexAppServerDebug(event, details) {
     if (!shouldDebugCodexAppServer())

package/script/src/codex_auth.d.ts

@@ -1,5 +1,4 @@
-export declare const CODEX_HOST_AUTH_BUNDLE_ENV = "WORKLOOP_CODEX_AUTH_BUNDLE";
-export declare const LEGACY_CODEX_HOST_AUTH_BUNDLE_ENV = "BOLT_FOUNDRY_DESKTOP_CODEX_AUTH_BUNDLE";
+export declare const CODEX_HOST_AUTH_BUNDLE_ENV = "GAMBIT_CODEX_AUTH_BUNDLE";
 export type CodexChatgptAuthTokens = {
     accessToken: string;
     chatgptAccountId: string;

package/script/src/codex_auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex_auth.d.ts","sourceRoot":"","sources":["../../src/src/codex_auth.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,0BAA0B,+BAA+B,CAAC;AACvE,eAAO,MAAM,iCAAiC,2CACJ,CAAC;AAE3C,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAkFF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD;IACD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CASA;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,uCAAuC,CACrD,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAER;AAED,wBAAgB,0BAA0B,IAAI,sBAAsB,GAAG,IAAI,CAK1E;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkDlC"}
+{"version":3,"file":"codex_auth.d.ts","sourceRoot":"","sources":["../../src/src/codex_auth.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AAErE,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAkFF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD;IACD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CASA;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,uCAAuC,CACrD,GAAG,EAAE,MAAM,GACV,sBAAsB,CAuBxB;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAER;AAED,wBAAgB,0BAA0B,IAAI,sBAAsB,GAAG,IAAI,CAI1E;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkDlC"}

package/script/src/codex_auth.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LEGACY_CODEX_HOST_AUTH_BUNDLE_ENV = exports.CODEX_HOST_AUTH_BUNDLE_ENV = void 0;
+exports.CODEX_HOST_AUTH_BUNDLE_ENV = void 0;
 exports.summarizeCodexAuthBundle = summarizeCodexAuthBundle;
 exports.parseCodexAuthBundle = parseCodexAuthBundle;
 exports.parseCodexAuthBundleFromRuntimeAuthFile = parseCodexAuthBundleFromRuntimeAuthFile;
@@ -43,8 +43,7 @@ exports.refreshCodexChatgptAuthTokens = refreshCodexChatgptAuthTokens;
 const dntShim = __importStar(require("../_dnt.shims.js"));
 const CODEX_AUTH0_CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 const CODEX_AUTH0_TOKEN_URL = "https://auth.openai.com/oauth/token";
-exports.CODEX_HOST_AUTH_BUNDLE_ENV = "WORKLOOP_CODEX_AUTH_BUNDLE";
-exports.LEGACY_CODEX_HOST_AUTH_BUNDLE_ENV = "BOLT_FOUNDRY_DESKTOP_CODEX_AUTH_BUNDLE";
+exports.CODEX_HOST_AUTH_BUNDLE_ENV = "GAMBIT_CODEX_AUTH_BUNDLE";
 function normalizeNonEmptyString(value) {
     return typeof value === "string" && value.trim().length > 0
         ? value.trim()
@@ -165,8 +164,7 @@ function serializeCodexAuthBundle(bundle) {
     return JSON.stringify(bundle);
 }
 function readCodexAuthBundleFromEnv() {
-    const raw = dntShim.Deno.env.get(exports.CODEX_HOST_AUTH_BUNDLE_ENV)?.trim() ||
-        dntShim.Deno.env.get(exports.LEGACY_CODEX_HOST_AUTH_BUNDLE_ENV)?.trim();
+    const raw = dntShim.Deno.env.get(exports.CODEX_HOST_AUTH_BUNDLE_ENV)?.trim();
     if (!raw)
         return null;
     return parseCodexAuthBundle(raw);

package/script/src/providers/codex.d.ts

@@ -57,6 +57,16 @@ export declare function codexConfigArgsForTest(input: {
     instructions?: string;
 }): Array<string>;
 export declare function safeJsonForTest(text: string): Record<string, JSONValue>;
+export declare function appServerRequestResultForTest(input: {
+    method: string;
+    params: Record<string, unknown>;
+}): Promise<{
+    result?: Record<string, JSONValue>;
+    error?: {
+        code: number;
+        message: string;
+    };
+}>;
 export declare function sanitizeCodexSpawnArgsForTest(args: Array<string>): Array<string>;
 export declare function extractCodexConfigValuesForTest(args: Array<string>, flag: string, prefix?: string): Array<string>;
 export {};

package/script/src/providers/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/src/providers/codex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGV,SAAS,EACT,YAAY,EACZ,aAAa,EAGb,YAAY,EAGZ,UAAU,EACV,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI/D,eAAO,MAAM,YAAY,eAAe,CAAC;AA0DzC,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,KAAK,mBAAmB,GAAG,CACzB,KAAK,EAAE,wBAAwB,KAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAExC,MAAM,MAAM,mBAAmB,GAAG;IAChC,cAAc,EAAE,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QACzB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvC,CAAC;AAmBF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,mBAAmB,GAAG,IAAI,GACjC,IAAI,CAEN;AAyiED,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IACzC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACxC,GAAG,aAAa,CAuShB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,GAC5B,MAAM,CAER;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAET;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,KAAK,CAAC,MAAM,CAAC,CAEhB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAEvE;AAED,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,GAClB,KAAK,CAAC,MAAM,CAAC,CAEf;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,KAAK,CAAC,MAAM,CAAC,CAEf"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/src/providers/codex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGV,SAAS,EACT,YAAY,EACZ,aAAa,EAGb,YAAY,EAGZ,UAAU,EACV,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAI/D,eAAO,MAAM,YAAY,eAAe,CAAC;AA0DzC,KAAK,qBAAqB,GAAG;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,KAAK,wBAAwB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAEF,KAAK,mBAAmB,GAAG,CACzB,KAAK,EAAE,wBAAwB,KAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAExC,MAAM,MAAM,mBAAmB,GAAG;IAChC,cAAc,EAAE,CAAC,KAAK,EAAE;QACtB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QACzB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvC,CAAC;AAmBF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,mBAAmB,GAAG,IAAI,GACjC,IAAI,CAEN;AA6kED,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IACzC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;CACxC,GAAG,aAAa,CAuShB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,GAC5B,MAAM,CAER;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAET;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,KAAK,CAAC,MAAM,CAAC,CAEhB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAEvE;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC;IACV,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC,CAED;AAED,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,GAClB,KAAK,CAAC,MAAM,CAAC,CAEf;AAED,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,GACd,KAAK,CAAC,MAAM,CAAC,CAEf"}

package/script/src/providers/codex.js

@@ -41,6 +41,7 @@ exports.codexInstructionsForMessagesForTest = codexInstructionsForMessagesForTes
 exports.promptForCodexTurnForTest = promptForCodexTurnForTest;
 exports.codexConfigArgsForTest = codexConfigArgsForTest;
 exports.safeJsonForTest = safeJsonForTest;
+exports.appServerRequestResultForTest = appServerRequestResultForTest;
 exports.sanitizeCodexSpawnArgsForTest = sanitizeCodexSpawnArgsForTest;
 exports.extractCodexConfigValuesForTest = extractCodexConfigValuesForTest;
 const dntShim = __importStar(require("../../_dnt.shims.js"));
@@ -58,14 +59,14 @@ const CODEX_REASONING_SUMMARY_ENV = "GAMBIT_CODEX_REASONING_SUMMARY";
 const CODEX_VERBOSITY_ENV = "GAMBIT_CODEX_VERBOSITY";
 const CODEX_BIN_ENV = "GAMBIT_CODEX_BIN";
 const CODEX_SKIP_SANDBOX_CONFIG_ENV = "GAMBIT_CODEX_SKIP_SANDBOX_CONFIG";
+const CODEX_DISABLE_WEBSOCKETS_ENV = "GAMBIT_CODEX_DISABLE_WEBSOCKETS";
 const CODEX_DANGEROUS_BYPASS_ENV = "GAMBIT_CODEX_DANGEROUSLY_BYPASS_APPROVALS_AND_SANDBOX";
 const MCP_DENO_BIN_ENV = "GAMBIT_MCP_DENO_BIN";
 const MCP_ROOT_DECK_PATH_ENV = "GAMBIT_MCP_ROOT_DECK_PATH";
 const EXTERNAL_TOOL_BRIDGE_ENV = "GAMBIT_EXTERNAL_TOOL_BRIDGE";
 const MCP_DEBUG_LOG_PATH_ENV = "GAMBIT_MCP_DEBUG_LOG_PATH";
 const DENO_DIR_ENV = "DENO_DIR";
-const DEBUG_MCP_ENV = "WORKLOOP_CHIEF_RUNTIME_DEBUG_MCP";
-const LEGACY_DEBUG_MCP_ENV = "BOLT_FOUNDRY_DESKTOP_CHIEF_RUNTIME_DEBUG_MCP";
+const DEBUG_MCP_ENV = "GAMBIT_MCP_DEBUG";
 const MCP_SERVER_PATH = (() => {
     try {
         const moduleUrl = new URL(globalThis[Symbol.for("import-meta-ponyfill-commonjs")](require, module).url);
@@ -156,10 +157,8 @@ function shouldEnableMcpBridge() {
     return normalized === "1" || normalized === "true" || normalized === "yes";
 }
 function shouldDebugMcpBridge() {
-    return [DEBUG_MCP_ENV, LEGACY_DEBUG_MCP_ENV].some((envName) => {
-        const raw = dntShim.Deno.env.get(envName)?.trim().toLowerCase();
-        return raw === "1" || raw === "true" || raw === "yes";
-    });
+    const raw = dntShim.Deno.env.get(DEBUG_MCP_ENV)?.trim().toLowerCase();
+    return raw === "1" || raw === "true" || raw === "yes";
 }
 function isCodexNativeOrGambitBuiltinTool(name) {
     return new Set([
@@ -178,7 +177,7 @@ function logCodexMcpDebug(event, details) {
     globalThis.console.error("[gambit-codex-mcp]", event, details ?? {});
 }
 function codexMcpDebugLogPath(cwd) {
-    return path.join(cwd, ".boltfoundry", "runtime", "chief-runtime", "gambit-mcp-debug.log");
+    return path.join(cwd, ".workloop", "runtime", "chief-runtime", "gambit-mcp-debug.log");
 }
 function mcpServerDenoBin() {
     return dntShim.Deno.env.get(MCP_DENO_BIN_ENV)?.trim() || "deno";
@@ -216,6 +215,14 @@ function shouldSkipCodexSandboxConfig(params) {
     const envRaw = dntShim.Deno.env.get(CODEX_SKIP_SANDBOX_CONFIG_ENV);
     return Boolean(envRaw && parseTruthy(envRaw));
 }
+function shouldDisableCodexWebsockets() {
+    // Newer Codex releases reserve built-in provider IDs, so overriding
+    // `model_providers.openai.supports_websockets` now prevents app-server
+    // startup. Keep the env var harmless while the old transport workaround ages
+    // out.
+    dntShim.Deno.env.get(CODEX_DISABLE_WEBSOCKETS_ENV);
+    return false;
+}
 function tomlString(value) {
     return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
 }
@@ -303,6 +310,9 @@ function codexAdditionalConfigArgs(params) {
 function codexConfigArgs(input) {
     const args = [];
     args.push(...codexAdditionalConfigArgs(input.params));
+    if (shouldDisableCodexWebsockets()) {
+        args.push("-c", "model_providers.openai.supports_websockets=false");
+    }
     args.push("-c", `approval_policy=${tomlString("never")}`);
     const pathEnv = dntShim.Deno.env.get("PATH")?.trim();
     if (pathEnv) {
@@ -523,14 +533,22 @@ async function appServerRequestResult(input) {
     }
     if (input.method === "account/chatgptAuthTokens/refresh") {
         const bridge = requireCodexHostAuthBridge();
-        const refreshed = await bridge.refreshAuthTokens({
-            previousAccountId: typeof input.params.previousAccountId === "string"
-                ? input.params.previousAccountId
-                : null,
-            reason: typeof input.params.reason === "string" && input.params.reason
-                ? input.params.reason
-                : "account/chatgptAuthTokens/refresh",
-        });
+        let refreshed;
+        try {
+            refreshed = await bridge.refreshAuthTokens({
+                previousAccountId: typeof input.params.previousAccountId === "string"
+                    ? input.params.previousAccountId
+                    : null,
+                reason: typeof input.params.reason === "string" && input.params.reason
+                    ? input.params.reason
+                    : "account/chatgptAuthTokens/refresh",
+            });
+        }
+        catch (error) {
+            return {
+                error: appServerHostRequestFailure(error),
+            };
+        }
         return {
             result: {
                 accessToken: refreshed.accessToken,
@@ -547,6 +565,14 @@ async function appServerRequestResult(input) {
         },
     };
 }
+function appServerHostRequestFailure(error) {
+    return {
+        code: -32000,
+        message: error instanceof Error && error.message
+            ? error.message
+            : String(error),
+    };
+}
 async function bootstrapCodexExternalAuth(input) {
     if (!codexHostAuthBridge) {
         return;
@@ -1029,7 +1055,15 @@ async function defaultAppServerTurnRunner(input) {
                             method,
                             params: safeJsonObjectFromRecord(params),
                         });
-                        const response = await appServerRequestResult({ method, params });
+                        let response;
+                        try {
+                            response = await appServerRequestResult({ method, params });
+                        }
+                        catch (error) {
+                            response = {
+                                error: appServerHostRequestFailure(error),
+                            };
+                        }
                         (0, codex_app_server_debug_js_1.logCodexAppServerDebug)("message:host_response", {
                             method,
                             requestId,
@@ -2143,6 +2177,9 @@ function codexConfigArgsForTest(input) {
 function safeJsonForTest(text) {
     return safeJsonObject(text);
 }
+async function appServerRequestResultForTest(input) {
+    return await appServerRequestResult(input);
+}
 function sanitizeCodexSpawnArgsForTest(args) {
     return sanitizeCodexSpawnArgsForDebug(args);
 }