@claudexor/harness-codex 1.0.1 → 2.1.2

package/dist/attachments.d.ts

@@ -0,0 +1,4 @@
+import type { HarnessRunSpec } from "@claudexor/schema";
+/** Convert verified image resources to Codex's repeatable file-path arguments. */
+export declare function codexImageArgs(attachments: HarnessRunSpec["attachments"] | undefined): string[];
+//# sourceMappingURL=attachments.d.ts.map

package/dist/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,WAAW,EAAE,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CAM/F"}

package/dist/attachments.js

@@ -0,0 +1,11 @@
+import { readVerifiedAttachmentBytes } from "@claudexor/core";
+/** Convert verified image resources to Codex's repeatable file-path arguments. */
+export function codexImageArgs(attachments) {
+    return (attachments ?? []).flatMap((attachment) => {
+        if (attachment.kind !== "image")
+            return [];
+        readVerifiedAttachmentBytes(attachment);
+        return ["-i", attachment.path];
+    });
+}
+//# sourceMappingURL=attachments.js.map

package/dist/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAG9D,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,WAAsD;IACnF,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAChD,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,CAAC;QAC3C,2BAA2B,CAAC,UAAU,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,59 @@
+import { runCapture } from "@claudexor/core";
+export declare const CODEX_FILE_AUTH_OVERRIDE = "cli_auth_credentials_store=\"file\"";
+export declare const CODEX_FILE_AUTH_ARGS: readonly ["-c", "cli_auth_credentials_store=\"file\""];
+/**
+ * Resolve an OpenAI API key for codex from the environment. Claudexor-managed
+ * `api_key` auth mirrors the harness's own variable (`OPENAI_API_KEY`); a
+ * dedicated `CLAUDEXOR_CODEX_API_KEY` can override it for multi-key setups.
+ */
+export declare function codexApiKey(): string | undefined;
+/**
+ * Seed `api_key` auth into an isolated CODEX_HOME. Codex does not read
+ * `OPENAI_API_KEY` from the environment when run against an empty config dir
+ * (it requires `auth.json`), so an envelope-scoped CODEX_HOME would otherwise
+ * fail with 401 even though a key is available. We write the same file
+ * `codex login --with-api-key` produces. No-op when not isolated (use codex's
+ * native auth), when no key is available, or when auth already exists.
+ */
+export declare function ensureCodexApiAuth(env?: Record<string, string>, allowApiKey?: boolean, apiKeyOverride?: string | null): void;
+/** Claudexor's independent Codex profile; never the operator's ordinary ~/.codex. */
+export declare function defaultNativeCodexHome(): string;
+export type CodexLoginMethod = "chatgpt" | "api_key" | "access_token" | "logged_out" | "unknown";
+export interface CodexLoginProbe {
+    /** True for any typed authenticated status; native readiness additionally requires method=chatgpt. */
+    authed: boolean;
+    method: CodexLoginMethod;
+    probeError: string | null;
+}
+export interface CodexLoginProbeOptions {
+    /** Exact environment the eventual Codex child will use. */
+    env?: Record<string, string | null | undefined>;
+    /** Explicit CODEX_HOME for the probe (INV-135, release wave round-17
+     * BLOCK): without it the probe re-normalizes onto the DEFAULT native home —
+     * a credential-profile probe must inspect ITS OWN store, never the
+     * default's. Callers without a profile omit it and keep the default. */
+    codexHome?: string;
+    abortSignal?: AbortSignal;
+    runCapture?: typeof runCapture;
+}
+/**
+ * Native-session probe with a distinct PROBE-FAILURE state. `codex login
+ * status` exits non-zero both when logged out AND when the CLI cannot even
+ * load `~/.codex/config.toml` (e.g. the config uses a newer option enum than
+ * the resolved binary understands — the stale-shim case). Collapsing those
+ * into "not logged in" hid a real subscription behind a config error; doctor
+ * must fail loudly with the CLI's own message instead.
+ */
+export declare function probeLogin(bin?: string, options?: CodexLoginProbeOptions): Promise<CodexLoginProbe>;
+export declare function hasApiKey(): boolean;
+/**
+ * Auth route the codex child will ACTUALLY run under, read from the same
+ * `auth.json` codex itself loads in a Claudexor-created scoped CODEX_HOME.
+ * The vendor-owned native home is deliberately not a fallback and must remain
+ * opaque. The file's own `auth_mode` field is the typed source of truth:
+ * "chatgpt" = subscription session, "apikey" = API key. Null when the file is
+ * absent/unreadable or carries an unknown mode — callers must treat that as
+ * undisclosed, never guess.
+ */
+export declare function codexAuthModeAt(home: string): "local_session" | "api_key" | null;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAK7E,eAAO,MAAM,wBAAwB,wCAAsC,CAAC;AAC5E,eAAO,MAAM,oBAAoB,wDAA4C,CAAC;AAE9E;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAUhD;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,UAAO,EAClB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,GAC7B,IAAI,CAiBN;AAED,qFAAqF;AACrF,wBAAgB,sBAAsB,IAAI,MAAM,CAI/C;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,SAAS,CAAC;AACjG,MAAM,WAAW,eAAe;IAC9B,sGAAsG;IACtG,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAChD;;;4EAGwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,GAAG,GAAE,MAAY,EACjB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,CAkE1B;AAED,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,GAAG,IAAI,CAYhF"}

package/dist/auth.js

@@ -0,0 +1,154 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { labelStreams, providerScrubEnv, runCapture } from "@claudexor/core";
+import { resolveSecret } from "@claudexor/secrets";
+import { ensureDir, redactSecrets, userConfigDir } from "@claudexor/util";
+const BIN = process.env.CLAUDEXOR_CODEX_BIN || "codex";
+export const CODEX_FILE_AUTH_OVERRIDE = 'cli_auth_credentials_store="file"';
+export const CODEX_FILE_AUTH_ARGS = ["-c", CODEX_FILE_AUTH_OVERRIDE];
+/**
+ * Resolve an OpenAI API key for codex from the environment. Claudexor-managed
+ * `api_key` auth mirrors the harness's own variable (`OPENAI_API_KEY`); a
+ * dedicated `CLAUDEXOR_CODEX_API_KEY` can override it for multi-key setups.
+ */
+export function codexApiKey() {
+    // The hermetic kill switch is honored inside resolveSecret (single owner).
+    const stored = resolveSecret("openai");
+    return (process.env.CLAUDEXOR_CODEX_API_KEY ||
+        process.env.CODEX_API_KEY ||
+        process.env.OPENAI_API_KEY ||
+        stored ||
+        undefined);
+}
+/**
+ * Seed `api_key` auth into an isolated CODEX_HOME. Codex does not read
+ * `OPENAI_API_KEY` from the environment when run against an empty config dir
+ * (it requires `auth.json`), so an envelope-scoped CODEX_HOME would otherwise
+ * fail with 401 even though a key is available. We write the same file
+ * `codex login --with-api-key` produces. No-op when not isolated (use codex's
+ * native auth), when no key is available, or when auth already exists.
+ */
+export function ensureCodexApiAuth(env, allowApiKey = true, apiKeyOverride) {
+    if (!allowApiKey)
+        return;
+    const home = env?.["CODEX_HOME"];
+    if (!home)
+        return;
+    if (resolve(home) === resolve(defaultNativeCodexHome())) {
+        throw new Error("refusing to read or write the vendor-owned native Codex auth store");
+    }
+    // A profile's namespaced key (INV-135) beats the engine-default slot; the
+    // override is exact — a missing profile secret never falls back.
+    const apiKey = apiKeyOverride !== undefined ? apiKeyOverride : codexApiKey();
+    if (!apiKey)
+        return;
+    const authPath = join(home, "auth.json");
+    if (existsSync(authPath))
+        return;
+    mkdirSync(home, { recursive: true });
+    writeFileSync(authPath, JSON.stringify({ auth_mode: "apikey", OPENAI_API_KEY: apiKey }) + "\n", {
+        mode: 0o600,
+    });
+}
+/** Claudexor's independent Codex profile; never the operator's ordinary ~/.codex. */
+export function defaultNativeCodexHome() {
+    const override = process.env.CLAUDEXOR_CODEX_NATIVE_HOME;
+    if (override && override.trim())
+        return override;
+    return join(userConfigDir(), "native", "codex");
+}
+/**
+ * Native-session probe with a distinct PROBE-FAILURE state. `codex login
+ * status` exits non-zero both when logged out AND when the CLI cannot even
+ * load `~/.codex/config.toml` (e.g. the config uses a newer option enum than
+ * the resolved binary understands — the stale-shim case). Collapsing those
+ * into "not logged in" hid a real subscription behind a config error; doctor
+ * must fail loudly with the CLI's own message instead.
+ */
+export async function probeLogin(bin = BIN, options = {}) {
+    try {
+        const home = options.codexHome ?? defaultNativeCodexHome();
+        ensureDir(home);
+        const env = {
+            ...(options.env ?? {}),
+            ...providerScrubEnv(),
+            CODEX_HOME: home,
+        };
+        const r = await (options.runCapture ?? runCapture)(bin, [...CODEX_FILE_AUTH_ARGS, "login", "status"], {
+            env,
+            timeoutMs: 10_000,
+            abortSignal: options.abortSignal,
+            cancelSignal: "SIGTERM",
+            cancelKillDelayMs: 0,
+        });
+        const text = `${r.stdout}\n${r.stderr}`;
+        const statusLines = text
+            .replaceAll("\r", "")
+            .split("\n")
+            .map((line) => line.trim())
+            .filter(Boolean);
+        // "Not logged in" is codex's NORMAL logged-out answer (exit 1, no error
+        // prefix). Anything else on a failing probe is a probe error, not an auth
+        // verdict (adapter-local knowledge of the native CLI's output is allowed).
+        if (statusLines.some((line) => /^not logged in[.!]?$/i.test(line))) {
+            return { authed: false, method: "logged_out", probeError: null };
+        }
+        if (r.code === 0 && statusLines.some((line) => /^logged in using chatgpt[.!]?$/i.test(line))) {
+            return { authed: true, method: "chatgpt", probeError: null };
+        }
+        if (r.code === 0 &&
+            statusLines.some((line) => /^logged in using (?:an? )?api key[.!]?$/i.test(line))) {
+            return { authed: true, method: "api_key", probeError: null };
+        }
+        if (r.code === 0 &&
+            statusLines.some((line) => /^logged in using (?:an? )?access token[.!]?$/i.test(line))) {
+            return { authed: true, method: "access_token", probeError: null };
+        }
+        // Redact BEFORE labelStreams truncates: truncation could split a token
+        // into a prefix the redactor no longer recognizes.
+        const detail = labelStreams(r.stderr, r.stdout, { transform: redactSecrets });
+        const reason = detail ?? `codex login status exited with ${r.code ?? r.signal ?? "unknown result"}`;
+        return {
+            authed: false,
+            method: "unknown",
+            probeError: r.code === 0 ? `unrecognized login status: ${reason}` : reason,
+        };
+    }
+    catch (err) {
+        return {
+            authed: false,
+            method: "unknown",
+            probeError: [...redactSecrets(err instanceof Error ? err.message : String(err))]
+                .slice(0, 300)
+                .join(""),
+        };
+    }
+}
+export function hasApiKey() {
+    return Boolean(codexApiKey());
+}
+/**
+ * Auth route the codex child will ACTUALLY run under, read from the same
+ * `auth.json` codex itself loads in a Claudexor-created scoped CODEX_HOME.
+ * The vendor-owned native home is deliberately not a fallback and must remain
+ * opaque. The file's own `auth_mode` field is the typed source of truth:
+ * "chatgpt" = subscription session, "apikey" = API key. Null when the file is
+ * absent/unreadable or carries an unknown mode — callers must treat that as
+ * undisclosed, never guess.
+ */
+export function codexAuthModeAt(home) {
+    if (!home.trim() || resolve(home) === resolve(defaultNativeCodexHome()))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(join(home, "auth.json"), "utf8"));
+        if (parsed.auth_mode === "chatgpt")
+            return "local_session";
+        if (parsed.auth_mode === "apikey")
+            return "api_key";
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC;AACvD,MAAM,CAAC,MAAM,wBAAwB,GAAG,mCAAmC,CAAC;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,wBAAwB,CAAU,CAAC;AAE9E;;;;GAIG;AACH,MAAM,UAAU,WAAW;IACzB,2EAA2E;IAC3E,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACnC,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1B,MAAM;QACN,SAAS,CACV,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAA4B,EAC5B,WAAW,GAAG,IAAI,EAClB,cAA8B;IAE9B,IAAI,CAAC,WAAW;QAAE,OAAO;IACzB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,sBAAsB,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,MAAM,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IACjC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE;QAC9F,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACzD,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAsBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,GAAG,EACjB,UAAkC,EAAE;IAEpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,sBAAsB,EAAE,CAAC;QAC3D,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,GAAG,GAA8C;YACrD,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;YACtB,GAAG,gBAAgB,EAAE;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,CAChD,GAAG,EACH,CAAC,GAAG,oBAAoB,EAAE,OAAO,EAAE,QAAQ,CAAC,EAC5C;YACE,GAAG;YACH,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY,EAAE,SAAS;YACvB,iBAAiB,EAAE,CAAC;SACrB,CACF,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI;aACrB,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;aACpB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC/D,CAAC;QACD,IACE,CAAC,CAAC,IAAI,KAAK,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACjF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC/D,CAAC;QACD,IACE,CAAC,CAAC,IAAI,KAAK,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EACtF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC;QACD,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GACV,MAAM,IAAI,kCAAkC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACvF,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM;SAC3E,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,CAAC,GAAG,aAAa,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;iBAC7E,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACb,IAAI,CAAC,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,sBAAsB,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAEtE,CAAC;QACF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC;QAC3D,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,28 +1,16 @@
 import type { HarnessRunSpec } from "@claudexor/schema";
 import type { HarnessAdapter } from "@claudexor/core";
-/**
- * Seed `api_key` auth into an isolated CODEX_HOME. Codex does not read
- * `OPENAI_API_KEY` from the environment when run against an empty config dir
- * (it requires `auth.json`), so an envelope-scoped CODEX_HOME would otherwise
- * fail with 401 even though a key is available. We write the same file
- * `codex login --with-api-key` produces. No-op when not isolated (use codex's
- * native auth), when no key is available, or when auth already exists.
- */
-export declare function ensureCodexApiAuth(env?: Record<string, string>, allowApiKey?: boolean): void;
-/** The user's real codex home (native ChatGPT/subscription session lives here). */
-export declare function defaultNativeCodexHome(): string;
-/**
- * Seed the user's NATIVE codex session (`auth.json`, ChatGPT/subscription mode)
- * into an isolated CODEX_HOME so a Max/Pro subscriber with NO API key can run
- * inside a Claudexor envelope. This is the "subscription-first must actually
- * work" fix: previously the scoped empty CODEX_HOME hid the native session and
- * the run failed demanding an API key.
- *
- * Copies ONLY if the scoped auth is absent and a native `auth.json` exists; never
- * overwrites (codex refreshes the token in place). Returns true when scoped auth
- * is present afterwards. No-op when not isolated or no native session exists.
- */
-export declare function ensureCodexNativeAuth(env?: Record<string, string>, nativeHome?: string): boolean;
+import { runCliHarness, selectStrictAuthRoute } from "@claudexor/core";
+import { smokeIsolatedApiKey } from "./smoke.js";
+export { canonicalCodexProfileHome } from "./profile.js";
+export declare const BIN: string;
+/** Exported for focused route-policy tests; runtime uses this exact selector. */
+export declare const selectCodexRunAuthRoute: typeof selectStrictAuthRoute;
+export { CODEX_FILE_AUTH_ARGS, CODEX_FILE_AUTH_OVERRIDE, codexApiKey, codexAuthModeAt, defaultNativeCodexHome, ensureCodexApiAuth, probeLogin, } from "./auth.js";
+import { codexApiKey, hasApiKey, probeLogin } from "./auth.js";
+declare function detectVersion(abortSignal?: AbortSignal): Promise<string | null>;
+export declare function redactCodexDoctorDetail(text: string): string;
+export declare function codexNativeEnv(base?: Record<string, string | null | undefined>, codexHome?: string): Record<string, string | null | undefined>;
 /**
  * Inject the Playwright browser MCP as stateless `-c mcp_servers.browser.*`
  * config overrides (live-verified: codex accepts array-valued `-c` overrides and
@@ -42,11 +30,24 @@ export declare function codexBrowserArgs(browser: HarnessRunSpec["browser"], ext
  * mcp_servers.node_repl"), which broke every scoped-home / api_key / MCP run.
  */
 export declare function codexConfigHasNodeRepl(codexHome: string | null | undefined): boolean;
-export declare function codexExecArgs(spec: Pick<HarnessRunSpec, "access" | "model_hint" | "effort_hint" | "external_context_policy" | "prompt" | "attachments" | "browser"> & {
+export declare function codexExecArgs(spec: Pick<HarnessRunSpec, "access" | "model_hint" | "effort_hint" | "external_context_policy" | "prompt" | "instructions" | "attachments" | "browser"> & {
     resume_session_id?: string | null;
 }, opts?: {
     suppressNodeRepl?: boolean;
     outputSchemaPath?: string | null;
 }): string[];
-export declare function createCodexAdapter(): HarnessAdapter;
+/** The runtime surface the profile module needs (test-stubbable). */
+export type CodexProfileRuntimeDeps = Pick<CodexRuntimeDeps, "probeLogin" | "resolveProfileSecret">;
+type CodexRuntimeDeps = {
+    detectVersion: typeof detectVersion;
+    probeLogin: typeof probeLogin;
+    hasApiKey: typeof hasApiKey;
+    codexApiKey: typeof codexApiKey;
+    /** Profile-scoped secret resolution (INV-135): reads exactly the profile's
+     * namespaced ref, never the engine-default ladder. */
+    resolveProfileSecret: (ref: string) => string | null;
+    smokeIsolatedApiKey: typeof smokeIsolatedApiKey;
+    runCliHarness: typeof runCliHarness;
+};
+export declare function createCodexAdapter(deps?: Partial<CodexRuntimeDeps>): HarnessAdapter;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAA+E,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAErI,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,iBAAiB,CAAC;AA4BlE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,UAAO,GAAG,IAAI,CAczF;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,IAAI,MAAM,CAI/C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,UAAU,GAAE,MAAiC,GAC5C,OAAO,CAmBT;AAuGD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,EAClC,qBAAqB,CAAC,EAAE,cAAc,CAAC,yBAAyB,CAAC,GAChE,MAAM,EAAE,CAYV;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAOpF;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,YAAY,GAAG,aAAa,GAAG,yBAAyB,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAC,GAAG;IACvI,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,EACD,IAAI,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAC1E,MAAM,EAAE,CAoDV;AA6BD,wBAAgB,kBAAkB,IAAI,cAAc,CA0HnD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EASV,cAAc,EACf,MAAM,mBAAmB,CAAC;AAK3B,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAQL,aAAa,EACb,qBAAqB,EAItB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAIzD,eAAO,MAAM,GAAG,QAA6C,CAAC;AAU9D,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,8BAAwB,CAAC;AAE7D,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EAEL,WAAW,EAIX,SAAS,EACT,UAAU,EAEX,MAAM,WAAW,CAAC;AA0CnB,iBAAe,aAAa,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAY9E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,cAAc,CAC5B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAChD,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAM3C;AAmCD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,EAClC,qBAAqB,CAAC,EAAE,cAAc,CAAC,yBAAyB,CAAC,GAChE,MAAM,EAAE,CAaV;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAOpF;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,IAAI,CACR,cAAc,EACZ,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,yBAAyB,GACzB,QAAQ,GACR,cAAc,GACd,aAAa,GACb,SAAS,CACZ,GAAG;IACF,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,EACD,IAAI,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAC1E,MAAM,EAAE,CA8DV;AA6BD,qEAAqE;AACrE,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,sBAAsB,CAAC,CAAC;AAEpG,KAAK,gBAAgB,GAAG;IACtB,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,WAAW,EAAE,OAAO,WAAW,CAAC;IAChC;0DACsD;IACtD,oBAAoB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,mBAAmB,EAAE,OAAO,mBAAmB,CAAC;IAChD,aAAa,EAAE,OAAO,aAAa,CAAC;CACrC,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,OAAO,CAAC,gBAAgB,CAAM,GAAG,cAAc,CAqQvF"}