@claudexor/harness-codex 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @claudexor/harness-codex
+
+Internal package of [Claudexor](https://github.com/razzant/claudexor) — Codex CLI adapter (codex exec --json).
+
+Published as part of the Claudexor toolchain; it follows the monorepo's
+lockstep version and has no separate semver contract. Use the `claudexor`
+CLI (or `@claudexor/cli`) as the supported entry point.

package/dist/index.d.ts

@@ -0,0 +1,52 @@
+import type { HarnessRunSpec } from "@claudexor/schema";
+import type { HarnessAdapter } from "@claudexor/core";
+/**
+ * Seed `api_key` auth into an isolated CODEX_HOME. Codex does not read
+ * `OPENAI_API_KEY` from the environment when run against an empty config dir
+ * (it requires `auth.json`), so an envelope-scoped CODEX_HOME would otherwise
+ * fail with 401 even though a key is available. We write the same file
+ * `codex login --with-api-key` produces. No-op when not isolated (use codex's
+ * native auth), when no key is available, or when auth already exists.
+ */
+export declare function ensureCodexApiAuth(env?: Record<string, string>, allowApiKey?: boolean): void;
+/** The user's real codex home (native ChatGPT/subscription session lives here). */
+export declare function defaultNativeCodexHome(): string;
+/**
+ * Seed the user's NATIVE codex session (`auth.json`, ChatGPT/subscription mode)
+ * into an isolated CODEX_HOME so a Max/Pro subscriber with NO API key can run
+ * inside a Claudexor envelope. This is the "subscription-first must actually
+ * work" fix: previously the scoped empty CODEX_HOME hid the native session and
+ * the run failed demanding an API key.
+ *
+ * Copies ONLY if the scoped auth is absent and a native `auth.json` exists; never
+ * overwrites (codex refreshes the token in place). Returns true when scoped auth
+ * is present afterwards. No-op when not isolated or no native session exists.
+ */
+export declare function ensureCodexNativeAuth(env?: Record<string, string>, nativeHome?: string): boolean;
+/**
+ * Inject the Playwright browser MCP as stateless `-c mcp_servers.browser.*`
+ * config overrides (live-verified: codex accepts array-valued `-c` overrides and
+ * surfaces the tools as `mcp_tool_call` events the parser already maps). Stateless
+ * means NO scoped config.toml write — the user's `~/.codex/config.toml` is never
+ * touched. Empty when no browser this run, and ALWAYS empty under
+ * `external_context_policy: off` (adapter-level defense-in-depth mirroring the
+ * claude adapter; the orchestrator already nulls the browser under off).
+ */
+export declare function codexBrowserArgs(browser: HarnessRunSpec["browser"], externalContextPolicy?: HarnessRunSpec["external_context_policy"]): string[];
+/**
+ * True only when the config codex WILL load (the scoped `CODEX_HOME` if set,
+ * else `~/.codex`) actually defines `[mcp_servers.node_repl]`. We only ever
+ * disable node_repl when it already exists — a `-c mcp_servers.node_repl.*`
+ * override against a config that has NO node_repl creates a partial entry with
+ * no transport and codex refuses to load it ("invalid transport in
+ * mcp_servers.node_repl"), which broke every scoped-home / api_key / MCP run.
+ */
+export declare function codexConfigHasNodeRepl(codexHome: string | null | undefined): boolean;
+export declare function codexExecArgs(spec: Pick<HarnessRunSpec, "access" | "model_hint" | "effort_hint" | "external_context_policy" | "prompt" | "attachments" | "browser"> & {
+    resume_session_id?: string | null;
+}, opts?: {
+    suppressNodeRepl?: boolean;
+    outputSchemaPath?: string | null;
+}): string[];
+export declare function createCodexAdapter(): HarnessAdapter;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAA+E,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAErI,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,iBAAiB,CAAC;AA4BlE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,UAAO,GAAG,IAAI,CAczF;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,IAAI,MAAM,CAI/C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,UAAU,GAAE,MAAiC,GAC5C,OAAO,CAmBT;AAuGD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,EAClC,qBAAqB,CAAC,EAAE,cAAc,CAAC,yBAAyB,CAAC,GAChE,MAAM,EAAE,CAYV;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAOpF;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,YAAY,GAAG,aAAa,GAAG,yBAAyB,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAC,GAAG;IACvI,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,EACD,IAAI,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAC1E,MAAM,EAAE,CAoDV;AA6BD,wBAAgB,kBAAkB,IAAI,cAAc,CA0HnD"}