@deepseek-harness-tui/dsh-tui 0.13.0 → 0.14.0

package/lib/types/backends/codex/auth/status.js

@@ -0,0 +1,115 @@
+/** /login's three methods over the shared question UI. API-key answers go
+ * directly to auth; events contain only the secret question and settlement. */
+import { randomUUID } from 'node:crypto';
+import { t } from '../../../i18n.js';
+import { CODEX_OAUTH_PROVIDER } from './external-tokens.js';
+export function createCodexAuthCapability(runtime, emit) {
+    const pending = new Map();
+    let disposed = false;
+    let running;
+    const settle = (id, answers) => {
+        const resolve = pending.get(id);
+        if (resolve === undefined)
+            return false;
+        pending.delete(id);
+        emit([{ type: 'question.settled', requestId: id }]);
+        resolve(answers);
+        return true;
+    };
+    const ask = (question) => {
+        const id = 'codex-login:' + randomUUID();
+        const answer = disposed ? Promise.resolve(undefined) : new Promise(resolve => {
+            pending.set(id, resolve);
+            emit([{ type: 'question.request', request: { requestId: id, questions: [question] } }]);
+        });
+        return { answer, withdraw: () => { settle(id); } };
+    };
+    const notice = (level, text) => {
+        if (!disposed)
+            emit([{ type: 'notice', level, key: 'codex-login', text }]);
+    };
+    const login = async (loginOAuth) => {
+        if (disposed)
+            return;
+        if (runtime.source === 'channel') {
+            notice('warning', t('codex-auth-channel-active'));
+            return;
+        }
+        const methods = [
+            ...(loginOAuth === undefined ? [] : [{ id: 'oauth', label: t('codex-login-oauth'), description: t('codex-login-oauth-desc') }]),
+            { id: 'device', label: t('codex-login-device'), description: t('codex-login-device-desc') },
+            { id: 'api-key', label: t('codex-login-api-key'), description: t('codex-login-api-key-storage') },
+        ];
+        const selection = await ask({ header: 'Codex', question: t('codex-login-choose'), options: methods.map(({ label, description }) => ({ label, description })), hideCustomInput: true }).answer;
+        const label = selection?.answers[0]?.selected[0];
+        const method = methods.find(row => row.label === label)?.id;
+        if (disposed || method === undefined)
+            return;
+        try {
+            if (method === 'oauth') {
+                if (!runtime.route.firstParty) {
+                    notice('warning', t('codex-auth-route-blocked'));
+                    return;
+                }
+                if (await loginOAuth?.() !== true || disposed)
+                    return;
+                await runtime.reconnect();
+                notice(runtime.source === 'dsh-auth' ? 'info' : 'error', t(runtime.source === 'dsh-auth' ? 'codex-login-success' : 'codex-auth-login-failed'));
+                return;
+            }
+            if (method === 'api-key') {
+                const answers = await ask({ header: 'Codex', question: t('codex-login-api-key-prompt'), detail: t('codex-login-api-key-storage'), options: [], secret: true }).answer;
+                if (answers === undefined || disposed)
+                    return;
+                const apiKey = answers.answers[0]?.custom;
+                if (apiKey === undefined || apiKey.trim() === '') {
+                    notice('warning', t('codex-auth-api-key-required'));
+                    return;
+                }
+                await runtime.apiKeyLogin(apiKey);
+                notice('info', t('codex-login-success'));
+                return;
+            }
+            const device = await runtime.deviceLogin();
+            if (disposed) {
+                await device.cancel();
+                return;
+            }
+            const prompt = ask({ header: 'Codex', question: t('codex-login-device-code', { code: device.userCode }), detail: t('codex-login-device-wait'), link: device.verificationUrl, options: [{ label: t('codex-login-cancel') }], hideCustomInput: true });
+            const outcome = await Promise.race([
+                device.done.then(success => ({ kind: 'done', success })),
+                prompt.answer.then(() => ({ kind: 'cancel' })),
+            ]);
+            if (outcome.kind === 'cancel')
+                await device.cancel();
+            else {
+                prompt.withdraw();
+                notice(outcome.success ? 'info' : 'error', t(outcome.success ? 'codex-login-success' : 'codex-auth-login-failed'));
+            }
+        }
+        catch {
+            notice('error', t('codex-auth-login-failed'));
+        }
+    };
+    return {
+        capability: {
+            oauthProvider: CODEX_OAUTH_PROVIDER,
+            status: () => runtime.status(),
+            reconnect: () => runtime.reconnect(),
+            login: loginOAuth => {
+                if (running === undefined)
+                    running = login(loginOAuth).finally(() => { running = undefined; });
+                return running;
+            },
+        },
+        respondQuestion: (id, answers) => settle(id, answers),
+        cancelQuestion: id => settle(id),
+        withdrawAll() { for (const id of pending.keys())
+            settle(id); },
+        dispose() {
+            for (const id of pending.keys())
+                settle(id);
+            disposed = true;
+        },
+    };
+}

package/lib/types/backends/codex/backend.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The Codex backend (docs/codex-backend-design.md §5.5): detection, opening
+ * a thread (create or resume) on the process-wide app-server hub, and the
+ * launcher's per-backend session markers.
+ *
+ * The child runs the user's own `codex` with the user's own `CODEX_HOME`
+ * (D6): their config, instructions, MCP servers, provider and login apply
+ * as in the official client, and threads are shared with it. dsh-tui's
+ * choices (start mode, model, effort) travel per thread as request
+ * parameters; nothing is written into Codex's configuration.
+ */
+import type { AgentBackend, BackendHost, OpenTarget } from '../../agent/backend.js';
+import type { AgentSession } from '../../agent/session.js';
+import { type CodexAuthRuntime } from './auth/external-tokens.js';
+import { type CodexChannels, type CodexChannelsRuntime } from './channels.js';
+import type { ChannelTokenStore } from '../shared/channel-tokens.js';
+import { type Rec } from './narrow.js';
+import { type CodexPrefs } from './prefs.js';
+import { type CodexExecutable } from './rpc/binary.js';
+import { type CodexHub, type CodexHubDeps } from './rpc/hub.js';
+import { type RpcClock } from './rpc/client.js';
+/** Structural until the neutral BackendHost addition is merged; the shared
+ * ChannelTokenStore interface is the real host read/write/erase/declared seam. */
+export type CodexBackendHost = BackendHost & {
+    readonly tokenStore?: ChannelTokenStore;
+};
+export interface CodexRuntime {
+    readonly hub: CodexHub;
+    readonly release: () => void;
+    readonly cwd: string;
+    readonly executable: CodexExecutable & {
+        readonly version?: string;
+    };
+    readonly config?: Rec;
+    readonly auth: CodexAuthRuntime;
+    readonly channels: CodexChannelsRuntime;
+    readonly startNotices?: readonly string[];
+    /** Rejoin an idle native thread retained by the local daemon, if available. */
+    readonly rejoinNativeDaemon?: () => Promise<CodexRuntime | undefined>;
+}
+export interface CodexRuntimeOptions {
+    readonly executable?: CodexExecutable & {
+        readonly version?: string;
+    };
+    readonly channels?: CodexChannels;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly hubDeps?: CodexHubDeps;
+    readonly authClock?: RpcClock;
+}
+/** Acquire the same platform runtime for open/resume/catalog. Tests replace
+ * only the process, executable discovery and profile file, not the plumbing. */
+export declare function prepareCodexRuntime(target: OpenTarget, host: CodexBackendHost, options?: CodexRuntimeOptions): Promise<CodexRuntime>;
+/** Open a native thread, rejoining its idle daemon writer on conflict. */
+export declare function openCodexBackendSession(target: OpenTarget, host: CodexBackendHost, options?: CodexRuntimeOptions & {
+    readonly prefs?: CodexPrefs;
+}): Promise<AgentSession>;
+export declare const codexBackend: AgentBackend;
+//# sourceMappingURL=backend.d.ts.map

package/lib/types/backends/codex/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../../../src/backends/codex/backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAI1D,OAAO,EAA0C,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAEzG,OAAO,EAAiD,KAAK,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAC5H,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAGpE,OAAO,EAAuB,KAAK,GAAG,EAAE,MAAM,aAAa,CAAA;AAE3D,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAC5D,OAAO,EAAyC,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAC7F,OAAO,EAAmB,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAoB,MAAM,cAAc,CAAA;AAClG,OAAO,EAAsB,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAMnE;kFACkF;AAClF,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG;IAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;CAAE,CAAA;AAExF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,UAAU,EAAE,eAAe,GAAG;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAA;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,+EAA+E;IAC/E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAA;CACtE;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,GAAG;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAA;CAC9B;AAED;gFACgF;AAChF,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,CA8G9I;AAKD,0EAA0E;AAC1E,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,GAAE,mBAAmB,GAAG;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAA;CAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAiBpL;AAED,eAAO,MAAM,YAAY,EAAE,YA6B1B,CAAA"}

package/lib/types/backends/codex/backend.js

@@ -0,0 +1,201 @@
+import { t } from '../../i18n.js';
+import { installedTuiVersion } from '../../update.js';
+import { CODEX_BACKEND_ID, CODEX_BACKEND_LABEL, codexResumeCommand, codexVersionSupported, MIN_CODEX_VERSION } from './contract.js';
+import { acquireCodexAuth, CODEX_OAUTH_PROVIDER } from './auth/external-tokens.js';
+import { codexAuthRoute } from './auth/route.js';
+import { createCodexChannelsRuntime, fileCodexChannels } from './channels.js';
+import { createCodexCatalog } from './catalog.js';
+import { detectCodex } from './detect.js';
+import { errorText, rec, str } from './narrow.js';
+import { CLIENT } from './protocol/index.js';
+import { fileCodexPrefs } from './prefs.js';
+import { buildCodexEnv, resolveCodexExecutable } from './rpc/binary.js';
+import { acquireCodexHub } from './rpc/hub.js';
+import { rpcCode, RPC_ERROR } from './rpc/client.js';
+import { openCodexSession } from './session/session.js';
+/** Child stderr that is known start-up noise, reported by `/doctor` only. */
+const STDERR_NOISE = [/bubblewrap/iu, /could not create PATH aliases/iu];
+/** Acquire the same platform runtime for open/resume/catalog. Tests replace
+ * only the process, executable discovery and profile file, not the plumbing. */
+export async function prepareCodexRuntime(target, host, options = {}) {
+    const env = options.env ?? process.env;
+    const executable = options.executable ?? await resolveCodexExecutable(env);
+    if (executable === undefined)
+        throw new Error(t('codex-not-installed'));
+    if (!codexVersionSupported(executable.version))
+        throw new Error(t('codex-too-old', { version: executable.version ?? '', min: MIN_CODEX_VERSION }));
+    const channels = createCodexChannelsRuntime({ store: options.channels ?? fileCodexChannels(undefined, host.debug), tokens: host.tokenStore, env });
+    const launch = channels.launch();
+    const credential = launch.provider === undefined ? host.oauthCredential?.(CODEX_OAUTH_PROVIDER) : undefined;
+    let cwd = target.cwd ?? host.cwd;
+    let settings = {
+        executable: executable.path, args: ['app-server', ...launch.args], env: buildCodexEnv(env, launch.env), cwd,
+        credentialMode: launch.provider !== undefined ? 'channel' : credential === undefined ? 'codex' : 'external',
+        injectedEnvKeys: launch.injectedEnvKeys,
+    };
+    const deps = {
+        debug: host.debug,
+        stderr: line => { if (!STDERR_NOISE.some(pattern => pattern.test(line)))
+            host.stderr?.(line); },
+        clientVersion: installedTuiVersion() ?? 'dev',
+        ...options.hubDeps,
+    };
+    let hub = acquireCodexHub(settings, deps);
+    let release = hub.retain();
+    try {
+        await hub.ready;
+        let locationKnown = true;
+        if (target.kind === 'resume' && target.cwd === undefined) {
+            // Route/project configuration must be checked for the recorded thread
+            // directory, not the launcher's unrelated current directory.
+            try {
+                const answer = rec(await hub.call(CLIENT.threadRead, { threadId: target.sessionId, includeTurns: false }));
+                const recorded = str(rec(answer?.thread)?.cwd);
+                if (recorded === undefined || recorded === '')
+                    locationKnown = false;
+                else
+                    cwd = recorded;
+            }
+            catch {
+                locationKnown = false;
+            }
+        }
+        let config;
+        if (locationKnown) {
+            try {
+                config = rec(rec(await hub.call(CLIENT.configRead, { includeLayers: false, cwd }))?.config);
+            }
+            catch {
+                host.debug('codex: config/read failed; managed injection disabled');
+            }
+        }
+        const route = codexAuthRoute(config, env, launch.provider !== undefined);
+        const externalAllowed = settings.credentialMode === 'external' && route.firstParty;
+        if (settings.credentialMode === 'external' && !externalAllowed) {
+            // A native-only route must not reuse a hub whose other sessions loaded
+            // a managed token. Probing config does not issue any model request.
+            release();
+            settings = { ...settings, credentialMode: 'codex' };
+            hub = acquireCodexHub(settings, deps);
+            release = hub.retain();
+            await hub.ready;
+        }
+        channels.refreshConfig(config);
+        const profile = channels.active();
+        let auth = acquireCodexAuth({
+            hub, cwd, config, env, credential, externalAllowed,
+            ...(launch.provider === undefined || profile === undefined ? {} : { channel: { name: profile.name, baseUrl: profile.baseUrl } }),
+            ...(options.authClock === undefined ? {} : { clock: options.authClock }),
+            debug: host.debug,
+        });
+        await auth.start();
+        let startNotices;
+        if (auth.managedFailed) {
+            startNotices = [t('codex-auth-login-failed')];
+            // Only an already-observed startup failure takes this path. No logout:
+            // a different process starts clean on the user's native credentials.
+            release();
+            settings = { ...settings, credentialMode: 'native-fallback' };
+            hub = acquireCodexHub(settings, deps);
+            release = hub.retain();
+            await hub.ready;
+            auth = acquireCodexAuth({ hub, cwd, config, env, credential, externalAllowed: route.firstParty, skipStoredCredential: true, debug: host.debug });
+            await auth.start();
+        }
+        const rejoinNativeDaemon = target.kind !== 'resume' ? undefined : async () => {
+            // Managed credentials and channel overrides belong to our private
+            // child. Never install them in the user's shared background server.
+            if (launch.provider !== undefined || auth.source === 'dsh-auth' || auth.managedFailed || settings.credentialMode === 'native-fallback')
+                return undefined;
+            const daemon = acquireCodexHub({ ...settings, args: ['app-server', 'proxy'], credentialMode: 'codex' }, { ...deps, handshakeTimeoutMs: 5000 });
+            const releaseDaemon = daemon.retain();
+            let handedOff = false;
+            try {
+                await daemon.ready;
+                const loaded = rec(await daemon.call(CLIENT.threadLoadedList, {}, { timeoutMs: 5000 }));
+                if (!Array.isArray(loaded?.data) || !loaded.data.includes(target.sessionId))
+                    return undefined;
+                const thread = rec(rec(await daemon.call(CLIENT.threadRead, { threadId: target.sessionId, includeTurns: false }, { timeoutMs: 5000 }))?.thread);
+                if (str(rec(thread?.status)?.type) !== 'idle')
+                    return undefined;
+                const daemonCwd = target.cwd ?? str(thread?.cwd);
+                if (daemonCwd === undefined || daemonCwd === '')
+                    return undefined;
+                const daemonConfig = rec(rec(await daemon.call(CLIENT.configRead, { includeLayers: false, cwd: daemonCwd }, { timeoutMs: 5000 }))?.config);
+                const daemonAuth = acquireCodexAuth({ hub: daemon, cwd: daemonCwd, config: daemonConfig, env, externalAllowed: false, debug: host.debug });
+                await daemonAuth.start();
+                channels.refreshConfig(daemonConfig);
+                handedOff = true;
+                return { hub: daemon, release: releaseDaemon, cwd: daemonCwd, executable, config: daemonConfig, auth: daemonAuth, channels };
+            }
+            catch {
+                host.debug('codex: native daemon could not rejoin the retained thread');
+                return undefined;
+            }
+            finally {
+                if (!handedOff) {
+                    releaseDaemon();
+                    if (daemon.state === 'failed')
+                        await daemon.close();
+                }
+            }
+        };
+        return { hub, release, cwd, executable, config, auth, channels, ...(startNotices === undefined ? {} : { startNotices }), ...(rejoinNativeDaemon === undefined ? {} : { rejoinNativeDaemon }) };
+    }
+    catch (error) {
+        release();
+        host.debug(`codex: app-server start failed (${errorText(error)})`);
+        throw new Error(t('codex-start-failed', { err: errorText(error) }), { cause: error });
+    }
+}
+let catalogHost;
+const catalogPrefs = fileCodexPrefs();
+/** Open a native thread, rejoining its idle daemon writer on conflict. */
+export async function openCodexBackendSession(target, host, options = {}) {
+    catalogHost = host;
+    const runtime = await prepareCodexRuntime(target, host, options);
+    const open = (active) => openCodexSession({
+        ...active, target,
+        prefs: options.prefs ?? fileCodexPrefs(undefined, host.debug),
+        host: { debug: host.debug },
+        doctor: { get bubblewrapMissing() { return active.hub.bubblewrapMissing; } },
+    });
+    try {
+        return await open(runtime);
+    }
+    catch (error) {
+        const cause = error instanceof Error ? error.cause : undefined;
+        if (rpcCode(cause) !== RPC_ERROR.invalidRequest || !/already has an active writer/iu.test(errorText(cause)))
+            throw error;
+        const daemon = await runtime.rejoinNativeDaemon?.();
+        if (daemon === undefined)
+            throw error;
+        return open(daemon);
+    }
+}
+export const codexBackend = {
+    id: CODEX_BACKEND_ID,
+    descriptor: { label: CODEX_BACKEND_LABEL },
+    detect: (host) => { catalogHost = host; return detectCodex(host); },
+    catalog: createCodexCatalog({
+        acquire: cwd => {
+            const host = catalogHost ?? { cwd: process.cwd(), debug: () => undefined, warn: () => undefined };
+            return prepareCodexRuntime({ kind: 'create', cwd: cwd ?? host.cwd }, host);
+        },
+        cwd: () => catalogHost?.cwd ?? process.cwd(),
+        lastUsed: () => catalogPrefs.read().lastUsed ?? {},
+    }),
+    launch: {
+        sessionPrefs: debug => {
+            const prefs = fileCodexPrefs(undefined, debug);
+            return {
+                lastSession: () => prefs.read().lastSession,
+                setLastSession: threadId => { prefs.write({ lastSession: threadId }); },
+                touch: threadId => { prefs.touch(threadId); },
+                forget: threadId => { prefs.forget(threadId); },
+            };
+        },
+        resumeCommand: codexResumeCommand,
+    },
+    open: openCodexBackendSession,
+};

package/lib/types/backends/codex/catalog.d.ts

@@ -0,0 +1,17 @@
+import type { SessionCatalog } from '../../agent/backend.js';
+import type { PreviewEntry, SessionSummary } from '../../adapter/ports/channel-session.js';
+import type { CodexHub } from './rpc/hub.js';
+export interface CodexCatalogDeps {
+    acquire(cwd?: string): Promise<{
+        readonly hub: Pick<CodexHub, 'call'>;
+        readonly release: () => void;
+    }>;
+    cwd(): string;
+    lastUsed?(): Readonly<Record<string, number>>;
+}
+/** Metadata only. Absence of preview text is not proof of an empty thread. */
+export declare function codexSessionSummary(value: unknown, lastUsed?: Readonly<Record<string, number>>): SessionSummary | undefined;
+/** Summary items contain text and images, never needing a tool-body read. */
+export declare function codexPreviewEntries(turns: readonly unknown[], limit?: number): PreviewEntry[];
+export declare function createCodexCatalog(deps: CodexCatalogDeps): SessionCatalog;
+//# sourceMappingURL=catalog.d.ts.map

package/lib/types/backends/codex/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../../src/backends/codex/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAoB,MAAM,wBAAwB,CAAA;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAA;AAM1F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC,CAAA;IACtG,GAAG,IAAI,MAAM,CAAA;IACb,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC9C;AAKD,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,GAAG,cAAc,GAAG,SAAS,CAqB/H;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,KAAK,SAAgB,GAAG,YAAY,EAAE,CAkBpG;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,cAAc,CAwDzE"}

package/lib/types/backends/codex/catalog.js

@@ -0,0 +1,128 @@
+/** The native app-server catalog: no rollout/sqlite parsing or second index.
+ * Each bounded operation borrows the same hub and releases it in finally. */
+import { basename } from 'node:path';
+import { t } from '../../i18n.js';
+import { CODEX_BACKEND_ID } from './contract.js';
+import { arr, num, rec, str, text } from './narrow.js';
+import { CLIENT } from './protocol/index.js';
+import { rpcCode, RPC_ERROR } from './rpc/client.js';
+const LIST_LIMIT = 500;
+const LIST_PAGE = 200;
+const PREVIEW_LIMIT = 6;
+/** Metadata only. Absence of preview text is not proof of an empty thread. */
+export function codexSessionSummary(value, lastUsed = {}) {
+    const row = rec(value);
+    const id = text(row?.id);
+    if (id === undefined || row?.ephemeral === true)
+        return undefined;
+    const cwd = str(row?.cwd) ?? '';
+    const name = text(row?.name)?.trim();
+    const prompt = text(row?.preview)?.trim();
+    const parent = text(row?.parentThreadId);
+    const spawn = rec(rec(rec(row?.source)?.subAgent)?.thread_spawn);
+    const forkedFrom = text(row?.forkedFromId);
+    return {
+        id, backendId: CODEX_BACKEND_ID,
+        kind: parent !== undefined || rec(row?.source)?.subAgent !== undefined
+            ? { kind: 'subagent', parent: parent ?? text(spawn?.parent_thread_id), depth: num(spawn?.depth) ?? 1 }
+            : forkedFrom === undefined ? { kind: 'root' } : { kind: 'fork', parent: forkedFrom },
+        title: name ? { text: name, source: 'auto' } : prompt ? { text: prompt, source: 'prompt' } : { text: basename(cwd) || id, source: 'fallback' },
+        cwd, createdAt: (num(row?.createdAt) ?? 0) * 1000,
+        updatedAt: Math.max((num(row?.updatedAt) ?? num(row?.createdAt) ?? 0) * 1000, (num(row?.recencyAt) ?? 0) * 1000, lastUsed[id] ?? 0),
+        bytes: undefined, hasPrompt: true, agentPreset: undefined,
+        model: text(row?.model), label: text(row?.agentNickname), branch: text(rec(row?.gitInfo)?.branch), childCount: 0,
+    };
+}
+/** Summary items contain text and images, never needing a tool-body read. */
+export function codexPreviewEntries(turns, limit = PREVIEW_LIMIT) {
+    const entries = [];
+    for (const raw of turns) {
+        const turn = rec(raw);
+        const at = num(turn?.startedAt);
+        for (const rawItem of arr(turn?.items)) {
+            const item = rec(rawItem);
+            if (item?.type === 'userMessage') {
+                const content = arr(item.content).map(rec);
+                const first = content.find(block => block?.type === 'text');
+                const body = text(first?.text) ?? (content.some(block => block?.type === 'image' || block?.type === 'localImage') ? t('codex-preview-image') : undefined);
+                if (body !== undefined)
+                    entries.push({ role: 'user', text: body, at: at === undefined ? undefined : at * 1000 });
+            }
+            else if (item?.type === 'agentMessage' && text(item.text) !== undefined) {
+                entries.push({ role: 'assistant', text: str(item.text), at: at === undefined ? undefined : at * 1000 });
+            }
+        }
+    }
+    return limit <= 0 ? [] : entries.slice(-limit);
+}
+export function createCodexCatalog(deps) {
+    const borrow = async (cwd, use) => {
+        const runtime = await deps.acquire(cwd);
+        try {
+            return await use(runtime.hub);
+        }
+        finally {
+            runtime.release();
+        }
+    };
+    return {
+        deleteAction: 'archive',
+        list(scope = {}) {
+            const cwd = scope.allProjects === true ? undefined : scope.cwd ?? deps.cwd();
+            return borrow(cwd, async (hub) => {
+                const rows = new Map();
+                let cursor;
+                let scanned = 0;
+                const seen = new Set();
+                // The row budget also bounds the number of empty/malformed pages.
+                for (let page = 0; page < Math.ceil(LIST_LIMIT / LIST_PAGE) && scanned < LIST_LIMIT; page += 1) {
+                    const answer = rec(await hub.call(CLIENT.threadList, { limit: Math.min(LIST_PAGE, LIST_LIMIT - scanned), sortKey: 'recency_at', sortDirection: 'desc', archived: false, modelProviders: [], ...(cwd === undefined ? {} : { cwd }), ...(cursor === undefined ? {} : { cursor }) }));
+                    const data = arr(answer?.data);
+                    scanned += data.length;
+                    for (const raw of data.slice(0, LIST_LIMIT - rows.size)) {
+                        const row = codexSessionSummary(raw, deps.lastUsed?.());
+                        if (row !== undefined && row.kind.kind !== 'subagent')
+                            rows.set(row.id, row);
+                    }
+                    cursor = text(answer?.nextCursor);
+                    if (cursor === undefined || seen.has(cursor))
+                        break;
+                    seen.add(cursor);
+                }
+                return [...rows.values()].sort((a, b) => b.updatedAt - a.updatedAt).slice(0, LIST_LIMIT);
+            });
+        },
+        info(sessionId, cwd) {
+            return borrow(cwd, async (hub) => {
+                try {
+                    return codexSessionSummary(rec(await hub.call(CLIENT.threadRead, { threadId: sessionId, includeTurns: false }))?.thread, deps.lastUsed?.());
+                }
+                catch (error) {
+                    if (rpcCode(error) === RPC_ERROR.invalidRequest && /not found|does not exist/iu.test(error instanceof Error ? error.message : ''))
+                        return undefined;
+                    throw error;
+                }
+            });
+        },
+        preview(sessionId, options = {}) {
+            const limit = Math.max(0, Math.min(20, options.limit ?? PREVIEW_LIMIT));
+            if (limit === 0)
+                return Promise.resolve([]);
+            return borrow(options.cwd, async (hub) => {
+                const answer = rec(await hub.call(CLIENT.threadTurnsList, { threadId: sessionId, sortDirection: 'desc', limit, itemsView: 'summary' }));
+                return codexPreviewEntries([...arr(answer?.data)].reverse(), limit);
+            });
+        },
+        rename: (threadId, name, cwd) => borrow(cwd, async (hub) => { await hub.call(CLIENT.threadNameSet, { threadId, name }); }),
+        delete: (threadId, cwd) => borrow(cwd, async (hub) => {
+            try {
+                await hub.call(CLIENT.threadArchive, { threadId });
+            }
+            catch (error) {
+                if (rpcCode(error) === RPC_ERROR.invalidRequest && /active.*worker/iu.test(error instanceof Error ? error.message : ''))
+                    throw new Error(t('codex-archive-busy'));
+                throw error;
+            }
+        }),
+    };
+}

package/lib/types/backends/codex/channels.d.ts

@@ -0,0 +1,59 @@
+import type { SessionCapabilities } from '../../agent/capabilities.js';
+import { channelProfileSlug } from '../../channel/channel-slug.js';
+import { type ChannelTokenStore } from '../shared/channel-tokens.js';
+import { type Rec } from './narrow.js';
+export interface CodexChannelProfile {
+    readonly id: string;
+    readonly name: string;
+    readonly baseUrl?: string;
+    readonly tokenRef?: string;
+    /** File input is validated at save/start; only Responses is supported. */
+    readonly wireApi?: string;
+    readonly env?: Readonly<Record<string, string>>;
+    readonly models?: Readonly<Record<string, string>>;
+}
+export interface CodexChannelsData {
+    readonly active?: string;
+    readonly channels: readonly CodexChannelProfile[];
+}
+export interface CodexChannels {
+    read(): CodexChannelsData;
+    setActive(id: string): void;
+    save(profile: CodexChannelProfile): void;
+    remove(id: string): void;
+}
+export interface CodexChannelLaunch {
+    readonly args: readonly string[];
+    readonly env: Readonly<Record<string, string>>;
+    readonly injectedEnvKeys: readonly string[];
+    readonly provider?: string;
+}
+export interface CodexChannelsRuntime {
+    readonly capability: NonNullable<SessionCapabilities['channels']>;
+    active(): CodexChannelProfile | undefined;
+    refreshConfig(config?: Rec): void;
+    launch(): CodexChannelLaunch;
+}
+export declare const channelSlug: typeof channelProfileSlug;
+export declare const CODEX_CHANNEL_TOKEN_ENV = "DSH_TUI_CODEX_CHANNEL_TOKEN";
+/** Reject credential-bearing URLs before either persistence or spawn. */
+export declare function validateCodexBaseUrl(value: string): string;
+/** Invalid endpoint rows remain selected so launch refuses, never silently
+ * switching a hand-edited active connection to ambient OAuth credentials. */
+export declare function parseCodexChannels(value: unknown): CodexChannelsData;
+export declare const activeProfileOf: (data: CodexChannelsData) => CodexChannelProfile | undefined;
+export declare const hasChannelConnection: (profile: CodexChannelProfile | undefined) => boolean;
+/** Same atomic/upsert/damaged-file semantics as the mature Claude store. */
+export declare function fileCodexChannels(dir?: string, debug?: (message: string) => void): CodexChannels;
+export declare function memoryCodexChannels(initial?: CodexChannelsData): CodexChannels;
+/** The token only goes into the child environment, never an argv override. */
+export declare function codexChannelLaunch(profile: CodexChannelProfile | undefined, tokens?: ChannelTokenStore): CodexChannelLaunch;
+/** Synchronous channel capability over a config/read snapshot. The TUI's
+ * own dshtui-* provider is not re-imported as if it were user settings. */
+export declare function createCodexChannelsRuntime(deps: {
+    readonly store: CodexChannels;
+    readonly tokens?: ChannelTokenStore;
+    readonly config?: Rec;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+}): CodexChannelsRuntime;
+//# sourceMappingURL=channels.d.ts.map

package/lib/types/backends/codex/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../../../src/backends/codex/channels.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,mBAAmB,EAAsB,MAAM,6BAA6B,CAAA;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAIlE,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AACrF,OAAO,EAAY,KAAK,GAAG,EAAE,MAAM,aAAa,CAAA;AAEhD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACnD;AACD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAA;CAClD;AACD,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,iBAAiB,CAAA;IACzB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAA;IACxC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AACD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC9C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AACD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAA;IACjE,MAAM,IAAI,mBAAmB,GAAG,SAAS,CAAA;IACzC,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,IAAI,CAAA;IACjC,MAAM,IAAI,kBAAkB,CAAA;CAC7B;AAED,eAAO,MAAM,WAAW,2BAAqB,CAAA;AAC7C,eAAO,MAAM,uBAAuB,gCAAgC,CAAA;AAKpE,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiB1D;AAUD;6EAC6E;AAC7E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAkBpE;AAsBD,eAAO,MAAM,eAAe,GAAI,MAAM,iBAAiB,KAAG,mBAAmB,GAAG,SAA8D,CAAA;AAC9I,eAAO,MAAM,oBAAoB,GAAI,SAAS,mBAAmB,GAAG,SAAS,KAAG,OAAkJ,CAAA;AAElO,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,GAAG,SAAsC,EAAE,KAAK,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAsB,GAAG,aAAa,CAwB9I;AACD,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,iBAAoC,GAAG,aAAa,CAQhG;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,iBAAiB,GAAG,kBAAkB,CAiB3H;AAeD;2EAC2E;AAC3E,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;CAC5D,GAAG,oBAAoB,CA8DvB"}