@canonmsg/codex-plugin 0.11.4 → 0.11.6

package/dist/host.js

@@ -4,7 +4,7 @@ import { randomUUID } from 'node:crypto';
 import { dirname } from 'node:path';
 import { parseArgs } from 'node:util';
 import { getCodexImagePath, materializeMessageMedia, materializeReplyContextMedia, } from '@canonmsg/agent-sdk';
-import { RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildCanonHostPrompt, buildConfiguredWorkspaceOptionsWithRoots, buildFirstPartyCodingRuntimeDescriptor, buildHydratedInboundContext, diffCanonMemberIds, buildPublicWorkspaceRoots, buildPublicWorkspaceOptions, createConversationMetadataLoader, createRuntimeStatePublisher, EXECUTION_ENVIRONMENT_MODES, ExecutionEnvironmentError, CanonClient, CanonStream, DEFAULT_PARTICIPATION_HISTORY_FETCH_LIMIT, DEFAULT_RUNTIME_CAPABILITIES, FINAL_MESSAGE_HANDOFF_MS, getActiveProfileLock, initRTDBAuth, buildLocalRuntimeId, heartbeatLocalRuntimeEntry, loadRuntimeSessionState, markLocalRuntimeStopped, normalizeTurnMetadata, normalizeTurnState, prepareConversationEnvironment, loadHostSessionConfig, releaseConversationEnvironment, resolveCanonAgent, rtdbRead, rtdbWrite, shouldTriggerAgentTurn, saveRuntimeSessionState, publishHostAgentRuntime, publishHostSessionSnapshots, renderCanonHostInboundContent, resolveHostWorkspaceCwd, upsertLocalRuntimeEntry, } from '@canonmsg/core';
+import { RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildCanonHostPrompt, buildConfiguredWorkspaceOptionsWithRoots, buildFirstPartyCodingRuntimeDescriptor, buildHydratedInboundContext, diffCanonMemberIds, buildPublicWorkspaceRoots, buildPublicWorkspaceOptions, buildRuntimePresentationPolicy, DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, createConversationMetadataLoader, createRuntimeStatePublisher, EXECUTION_ENVIRONMENT_MODES, ExecutionEnvironmentError, CanonClient, CanonStream, DEFAULT_PARTICIPATION_HISTORY_FETCH_LIMIT, DEFAULT_RUNTIME_CAPABILITIES, FINAL_MESSAGE_HANDOFF_MS, getActiveProfileLock, initRTDBAuth, buildLocalRuntimeId, heartbeatLocalRuntimeEntry, loadRuntimeSessionState, markLocalRuntimeStopped, normalizeTurnMetadata, normalizeTurnState, prepareConversationEnvironment, loadHostSessionConfig, releaseConversationEnvironment, resolveCanonAgent, rtdbRead, rtdbWrite, shouldTriggerAgentTurn, saveRuntimeSessionState, publishHostAgentRuntime, publishHostSessionSnapshots, renderCanonHostInboundContent, resolveHostWorkspaceCwd, upsertLocalRuntimeEntry, } from '@canonmsg/core';
 import { buildInboundContextLines, decideAutoReply, } from './inbound-policy.js';
 import { CodexConversationAdapter, } from './adapter.js';
 import { clearStoredThreadId, buildCodexThreadPolicyFingerprint, loadStoredThreadId, saveStoredThreadId, } from './session-store.js';
@@ -27,6 +27,10 @@ COMMON FLAGS
   --full-auto                          Allow non-interactive write access
   --codex-bin <path>                   Codex CLI binary to run
   --config <key=value>                 Forward config to Codex CLI
+  --runtime-visibility <normal|minimal|full>
+                                      Detail visibility preset
+  --show-runtime-detail <field>        Override a hidden detail field
+  --hide-runtime-detail <field>        Hide a runtime detail field
   --help, -h                           Show this help
   --version, -V                        Show package version
 
@@ -83,6 +87,7 @@ function buildCodexRuntimeDescriptor(input) {
         executionModes: input.executionModes,
         permissionModes: input.permissionModes,
         defaultPermissionMode: input.defaultPermissionMode,
+        presentation: input.presentation,
         streamingTextMode: 'snapshot',
         commands,
         actions: [
@@ -230,6 +235,14 @@ function sleep(ms) {
 function uniqueStrings(values) {
     return Array.from(new Set(values.filter((value) => value.trim().length > 0)));
 }
+function parseRuntimeVisibilityPreset(value) {
+    return value === 'normal' || value === 'minimal' || value === 'full' ? value : undefined;
+}
+function stringArgs(value) {
+    return Array.isArray(value)
+        ? value.filter((item) => typeof item === 'string' && item.trim().length > 0)
+        : undefined;
+}
 export async function main() {
     setDefaultResultOrder('ipv4first');
     const { values: args } = parseArgs({
@@ -244,6 +257,9 @@ export async function main() {
             'workspace-root': { type: 'string', multiple: true },
             config: { type: 'string', multiple: true },
             'codex-bin': { type: 'string' },
+            'runtime-visibility': { type: 'string' },
+            'show-runtime-detail': { type: 'string', multiple: true },
+            'hide-runtime-detail': { type: 'string', multiple: true },
             'full-auto': { type: 'boolean' },
             'dangerously-bypass-approvals-and-sandbox': { type: 'boolean' },
         },
@@ -939,6 +955,12 @@ export async function main() {
     ];
     const codexPermissionEnvelope = deriveCodexPermissionEnvelope(args);
     const codexModelOptions = buildCodexModelOptions(args.model);
+    const runtimePresentation = buildRuntimePresentationPolicy({
+        base: DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION,
+        preset: parseRuntimeVisibilityPreset(args['runtime-visibility']),
+        show: stringArgs(args['show-runtime-detail']),
+        hide: stringArgs(args['hide-runtime-detail']),
+    });
     let runtimeDescriptor = {
         defaultWorkspaceId: workspaceOptions[0]?.id,
         ...(typeof args.model === 'string' ? { defaultModel: args.model } : {}),
@@ -955,6 +977,7 @@ export async function main() {
             executionModes: hostAvailableExecutionModes,
             permissionModes: [...codexPermissionEnvelope.availablePermissionModes],
             defaultPermissionMode: codexPermissionEnvelope.defaultPermissionMode,
+            presentation: runtimePresentation,
         }),
     };
     async function baselineControlSignal(conversationId) {
@@ -1142,6 +1165,7 @@ export async function main() {
                 executionModes: hostAvailableExecutionModes,
                 permissionModes: [...codexPermissionEnvelope.availablePermissionModes],
                 defaultPermissionMode: codexPermissionEnvelope.defaultPermissionMode,
+                presentation: runtimePresentation,
             }),
         };
     }
@@ -1161,6 +1185,7 @@ export async function main() {
                 executionModes: hostAvailableExecutionModes,
                 permissionModes: [...codexPermissionEnvelope.availablePermissionModes],
                 defaultPermissionMode: codexPermissionEnvelope.defaultPermissionMode,
+                presentation: runtimePresentation,
             }),
         };
     }

package/dist/permission-mode.d.ts

@@ -11,10 +11,12 @@ export declare const CODEX_PERMISSION_OPTIONS: readonly [{
     readonly value: "full-auto";
     readonly label: "Full auto";
     readonly description: "Automatically run workspace-write actions with lower-friction approvals.";
+    readonly ownerOnly: true;
 }, {
     readonly value: "bypass";
     readonly label: "Bypass (dangerous)";
     readonly description: "Skip Codex approval and sandbox protection. Use only in an externally sandboxed environment.";
+    readonly ownerOnly: true;
 }];
 export type CodexPermissionMode = (typeof CODEX_PERMISSION_OPTIONS)[number]['value'];
 export type CodexApprovalShape = {

package/dist/permission-mode.js

@@ -1,8 +1,8 @@
 export const CODEX_PERMISSION_OPTIONS = [
     { value: 'readonly', label: 'Read-only', description: 'Inspect files and project state without making changes.' },
     { value: 'workspace', label: 'Workspace-write', description: 'Edit inside the selected workspace using Codex CLI sandboxing.' },
-    { value: 'full-auto', label: 'Full auto', description: 'Automatically run workspace-write actions with lower-friction approvals.' },
-    { value: 'bypass', label: 'Bypass (dangerous)', description: 'Skip Codex approval and sandbox protection. Use only in an externally sandboxed environment.' },
+    { value: 'full-auto', label: 'Full auto', description: 'Automatically run workspace-write actions with lower-friction approvals.', ownerOnly: true },
+    { value: 'bypass', label: 'Bypass (dangerous)', description: 'Skip Codex approval and sandbox protection. Use only in an externally sandboxed environment.', ownerOnly: true },
 ];
 export function mapCanonPermissionToCodex(mode) {
     switch (mode) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/codex-plugin",
-  "version": "0.11.4",
+  "version": "0.11.6",
   "description": "Canon host integration for Codex CLI",
   "type": "module",
   "main": "dist/index.js",
@@ -29,8 +29,8 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@canonmsg/agent-sdk": "^1.5.0",
-    "@canonmsg/core": "^0.19.0"
+    "@canonmsg/agent-sdk": "^1.5.1",
+    "@canonmsg/core": "^0.19.2"
   },
   "engines": {
     "node": ">=18.0.0"