@excitedjs/agent-runtime-codex 0.2.0-alpha.g0ddd418597ca

package/dist/handshake.js

@@ -0,0 +1,85 @@
+/**
+ * Codex app-server LSP-style init handshake (required by codex 0.134+).
+ *
+ * Without this, every business RPC (`thread/start`, `turn/start`, …) is
+ * answered with `Not initialized` and the daemon never moves. The sequence
+ * is the canonical LSP one:
+ *
+ *   1. client → `initialize` request with ClientInfo + capabilities
+ *   2. server → InitializeResponse (userAgent, codexHome, platform info)
+ *   3. client → `initialized` notification (no params)
+ *
+ * Steps 1 + 3 are both required: codex's `Not initialized` guard is cleared
+ * only once the notification arrives. Capabilities can be omitted (the spec
+ * accepts `null`) — we pass an explicit default so the negotiation choices
+ * are visible in the source.
+ */
+/**
+ * Our default ClientInfo. Picked once at module load so the version doesn't
+ * have to be threaded through every call site. Keep in sync with package.json.
+ */
+const DREAMUX_CLIENT_INFO = {
+    name: 'dreamux',
+    title: 'dreamux Codex-host server',
+    version: '0.1.0',
+};
+const DEFAULT_CAPABILITIES = {
+    // We don't currently consume any experimental method, but turning this on
+    // is harmless — codex only widens the set of method/field shapes it'll
+    // emit. Keeping it true avoids a future surprise if we start consuming an
+    // experimental notification (e.g. turn/streaming) and the daemon was
+    // silently dropping it because of this flag.
+    experimentalApi: true,
+    // We do not handle attestation requests; do not invite them.
+    requestAttestation: false,
+};
+/**
+ * Default cap on the initialize round-trip. See HandshakeOptions.timeoutMs.
+ * 10s mirrors CodexProcess's spawn ready-probe so a hung handshake doesn't
+ * outlive the codex spawn that produced it.
+ */
+const DEFAULT_HANDSHAKE_TIMEOUT_MS = 10_000;
+/**
+ * Drive the full `initialize` + `initialized` exchange. Returns the
+ * server's InitializeResponse (userAgent, codexHome, platform) so callers
+ * can log it or surface it via admin.
+ *
+ * Times out (rejects) if the daemon does not reply within
+ * `options.timeoutMs`. The pending request stays in the client's `pending`
+ * map after timeout — callers that recover by tearing down the client
+ * (e.g. CodexRuntime's cleanupOnFailure) will then drop those
+ * pending entries when the WS connection closes.
+ */
+export async function performInitializeHandshake(client, options = {}) {
+    const params = {
+        clientInfo: options.clientInfo ?? DREAMUX_CLIENT_INFO,
+        capabilities: options.capabilities === undefined
+            ? DEFAULT_CAPABILITIES
+            : options.capabilities,
+    };
+    const timeoutMs = options.timeoutMs ?? DEFAULT_HANDSHAKE_TIMEOUT_MS;
+    const response = await withTimeout(client.request('initialize', params), timeoutMs, `codex initialize handshake did not respond within ${timeoutMs}ms — the daemon may be hung, crashed mid-response, or speaking an incompatible protocol`);
+    // Per LSP convention the `initialized` notification carries no params.
+    // codex's ClientNotification union accepts the bare `{ method: "initialized" }`
+    // envelope without a `params` field.
+    client.notify('initialized', undefined);
+    return response;
+}
+/**
+ * Race `p` against a timeout. Rejects with `Error(msg)` if the timeout wins.
+ * The timer is `unref`ed so it doesn't keep the event loop alive on its own.
+ */
+function withTimeout(p, ms, msg) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(msg)), ms);
+        timer.unref();
+        p.then((v) => {
+            clearTimeout(timer);
+            resolve(v);
+        }, (err) => {
+            clearTimeout(timer);
+            reject(err);
+        });
+    });
+}
+//# sourceMappingURL=handshake.js.map

package/dist/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH;;;GAGG;AACH,MAAM,mBAAmB,GAAe;IACtC,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,2BAA2B;IAClC,OAAO,EAAE,OAAO;CACjB,CAAC;AAEF,MAAM,oBAAoB,GAA2B;IACnD,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,6CAA6C;IAC7C,eAAe,EAAE,IAAI;IACrB,6DAA6D;IAC7D,kBAAkB,EAAE,KAAK;CAC1B,CAAC;AAgBF;;;;GAIG;AACH,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAqB,EACrB,UAA4B,EAAE;IAE9B,MAAM,MAAM,GAAqB;QAC/B,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB;QACrD,YAAY,EACV,OAAO,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,OAAO,CAAC,YAAY;KAC3B,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,4BAA4B,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,MAAM,CAAC,OAAO,CAAqB,YAAY,EAAE,MAAM,CAAC,EACxD,SAAS,EACT,qDAAqD,SAAS,yFAAyF,CACxJ,CAAC;IACF,uEAAuE;IACvE,gFAAgF;IAChF,qCAAqC;IACrC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,CAAa,EACb,EAAU,EACV,GAAW;IAEX,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `@excitedjs/agent-runtime-codex` — the built-in Codex Agent Runtime provider
+ * for Dreamux (alias `builtin:codex`). Implements the
+ * `@excitedjs/dreamux-types` `AgentRuntimeProvider` contract; never imports
+ * `@excitedjs/dreamux` core.
+ */
+export { default, createCodexAgentRuntimeProvider, codexRuntimeArgsForMcpServers, dispatcherCodexConfig, CODEX_AGENT_RUNTIME_CAPABILITIES, type CodexAgentRuntimeProviderOptions, type CodexProviderFactoryContext, } from './provider.js';
+export { resolveCodexBinPath } from './bin.js';
+export { CodexRuntime, type CodexRuntimeDeps, } from './runtime.js';
+export { CodexProcess, type CodexProcessOptions, type CodexProcessExit, type CodexProcessExitHandler, } from './supervisor.js';
+export { CodexWsClient, type CodexWsClientOptions, type NotificationHandler, } from './rpc.js';
+export type { ServerNotification, ServerRequest, ThreadStartResponse, TurnStartResponse, } from './types.js';
+export { performInitializeHandshake } from './handshake.js';
+export { codexMcpServerArgs } from './mcp-config.js';
+export { parseCodexArgs, codexArgsFromConfig, codexArgsToCli, type ParsedCodexArgs, } from './args.js';
+export { type DispatcherCodexConfig, readDispatcherCodexConfig, defaultDispatcherCodexConfig, DEFAULT_CODEX_BIN, DEFAULT_INITIALIZE_TIMEOUT_MS, DEFAULT_CODEX_TURN_TIMEOUT_MS, DEFAULT_APPROVAL_POLICY, DEFAULT_SANDBOX_MODE, ALLOWED_APPROVAL_POLICIES, ALLOWED_SANDBOX_MODES, } from './config.js';
+export { MIN_CODEX_VERSION, parseCodexVersion, codexVersionSatisfies, } from './version.js';
+export { BUILTIN_CODEX_PROVIDER_REF } from './provider-ref.js';
+export { codexAgentRuntimeDiagnostic } from './diagnostic.js';
+export { DISPATCHER_APP_SERVER_SOCKET_PATH_MAX_BYTES, dispatcherCodexHomeDoctorContext, validateDispatcherCodexHome, assertDispatcherCodexHomeReady, formatDispatcherCodexHomeErrors, type DispatcherCodexHomeDoctor, type DispatcherCodexHomeDoctorContext, type DispatcherCodexHomeDoctorResult, } from './codex-home.js';
+export { operatorCodexHome, dispatcherCodexHome, dispatcherCodexConfigPath, } from './paths.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,OAAO,EACP,+BAA+B,EAC/B,6BAA6B,EAC7B,qBAAqB,EACrB,gCAAgC,EAChC,KAAK,gCAAgC,EACrC,KAAK,2BAA2B,GACjC,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EACL,YAAY,EACZ,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,aAAa,EACb,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,KAAK,eAAe,GACrB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,KAAK,qBAAqB,EAC1B,yBAAyB,EACzB,4BAA4B,EAC5B,iBAAiB,EACjB,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAK/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EACL,2CAA2C,EAC3C,gCAAgC,EAChC,2BAA2B,EAC3B,8BAA8B,EAC9B,+BAA+B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,GACrC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,24 @@
+/**
+ * `@excitedjs/agent-runtime-codex` — the built-in Codex Agent Runtime provider
+ * for Dreamux (alias `builtin:codex`). Implements the
+ * `@excitedjs/dreamux-types` `AgentRuntimeProvider` contract; never imports
+ * `@excitedjs/dreamux` core.
+ */
+export { default, createCodexAgentRuntimeProvider, codexRuntimeArgsForMcpServers, dispatcherCodexConfig, CODEX_AGENT_RUNTIME_CAPABILITIES, } from './provider.js';
+export { resolveCodexBinPath } from './bin.js';
+export { CodexRuntime, } from './runtime.js';
+export { CodexProcess, } from './supervisor.js';
+export { CodexWsClient, } from './rpc.js';
+export { performInitializeHandshake } from './handshake.js';
+export { codexMcpServerArgs } from './mcp-config.js';
+export { parseCodexArgs, codexArgsFromConfig, codexArgsToCli, } from './args.js';
+export { readDispatcherCodexConfig, defaultDispatcherCodexConfig, DEFAULT_CODEX_BIN, DEFAULT_INITIALIZE_TIMEOUT_MS, DEFAULT_CODEX_TURN_TIMEOUT_MS, DEFAULT_APPROVAL_POLICY, DEFAULT_SANDBOX_MODE, ALLOWED_APPROVAL_POLICIES, ALLOWED_SANDBOX_MODES, } from './config.js';
+export { MIN_CODEX_VERSION, parseCodexVersion, codexVersionSatisfies, } from './version.js';
+export { BUILTIN_CODEX_PROVIDER_REF } from './provider-ref.js';
+// The codex doctor surface now lives in this package (issue #209 cleanup): the
+// neutral diagnostic, the Codex home/auth validation, and the Codex home/config
+// path resolvers. Core's doctor + onboard consume these directly.
+export { codexAgentRuntimeDiagnostic } from './diagnostic.js';
+export { DISPATCHER_APP_SERVER_SOCKET_PATH_MAX_BYTES, dispatcherCodexHomeDoctorContext, validateDispatcherCodexHome, assertDispatcherCodexHomeReady, formatDispatcherCodexHomeErrors, } from './codex-home.js';
+export { operatorCodexHome, dispatcherCodexHome, dispatcherCodexConfigPath, } from './paths.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,OAAO,EACP,+BAA+B,EAC/B,6BAA6B,EAC7B,qBAAqB,EACrB,gCAAgC,GAGjC,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,OAAO,EACL,YAAY,GAEb,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,YAAY,GAIb,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,aAAa,GAGd,MAAM,UAAU,CAAC;AASlB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,cAAc,GAEf,MAAM,WAAW,CAAC;AAEnB,OAAO,EAEL,yBAAyB,EACzB,4BAA4B,EAC5B,iBAAiB,EACjB,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,+EAA+E;AAC/E,gFAAgF;AAChF,kEAAkE;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EACL,2CAA2C,EAC3C,gCAAgC,EAChC,2BAA2B,EAC3B,8BAA8B,EAC9B,+BAA+B,GAIhC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,YAAY,CAAC"}

package/dist/internal/completion-body.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Neutral completion-body resolution for the Codex runtime.
+ *
+ * A teammate completion is delivered back to the dispatcher as turn text. When
+ * the result is short it is inlined verbatim; when it overflows the inline
+ * budget the full result is spilled to an owner-only 0600 file under the
+ * host-supplied spill directory and only the path is inlined, so a large result
+ * never floods the dispatcher's context window.
+ *
+ * Vendored from the host's neutral `agent-runtime/completion-body.ts` so this
+ * package never imports `@excitedjs/dreamux` core. The spill directory is
+ * supplied by the host through the create context's path context, so this
+ * module owns no Dreamux layout contract — only the safe filename shape inside
+ * that directory.
+ */
+import type { CompletionEnvelope } from '@excitedjs/dreamux-types';
+export declare const COMPLETION_INLINE_BUDGET_DEFAULT = 32000;
+export declare const COMPLETION_INLINE_BUDGET_MAX = 160000;
+export type ResolvedCompletionBody = {
+    kind: 'inline';
+    text: string;
+} | {
+    kind: 'spilled';
+    path: string;
+};
+/**
+ * Resolve the effective inline budget from the environment: unset/blank or
+ * non-positive falls back to the default; values above the upper bound are
+ * clamped; a non-integer value falls back to the default.
+ */
+export declare function completionInlineBudget(env?: NodeJS.ProcessEnv): number;
+/**
+ * Decide whether a completion result is inlined or spilled. Spilling writes the
+ * FULL result to a 0600 file (async fs only) under the host-supplied
+ * `spillDir`, then returns the path; the caller inlines only that path.
+ */
+export declare function resolveCompletionBody(completion: CompletionEnvelope, spillDir: string): Promise<ResolvedCompletionBody>;
+//# sourceMappingURL=completion-body.d.ts.map

package/dist/internal/completion-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion-body.d.ts","sourceRoot":"","sources":["../../src/internal/completion-body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAInE,eAAO,MAAM,gCAAgC,QAAS,CAAC;AACvD,eAAO,MAAM,4BAA4B,SAAU,CAAC;AAGpD,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAgBtC;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAmC,GAC9C,MAAM,CAUR;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,CAUjC"}

package/dist/internal/completion-body.js

@@ -0,0 +1,62 @@
+/**
+ * Neutral completion-body resolution for the Codex runtime.
+ *
+ * A teammate completion is delivered back to the dispatcher as turn text. When
+ * the result is short it is inlined verbatim; when it overflows the inline
+ * budget the full result is spilled to an owner-only 0600 file under the
+ * host-supplied spill directory and only the path is inlined, so a large result
+ * never floods the dispatcher's context window.
+ *
+ * Vendored from the host's neutral `agent-runtime/completion-body.ts` so this
+ * package never imports `@excitedjs/dreamux` core. The spill directory is
+ * supplied by the host through the create context's path context, so this
+ * module owns no Dreamux layout contract — only the safe filename shape inside
+ * that directory.
+ */
+import { chmod, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { ensureOwnerOnlyDir } from './os.js';
+export const COMPLETION_INLINE_BUDGET_DEFAULT = 32_000;
+export const COMPLETION_INLINE_BUDGET_MAX = 160_000;
+const COMPLETION_INLINE_BUDGET_ENV = 'TASK_MAX_OUTPUT_LENGTH';
+/** Sanitize a name into a safe single path segment. */
+function safeSegment(name) {
+    return name.replace(/[^A-Za-z0-9._-]/g, '_');
+}
+/** Spill file for an overflowing completion result, inside `spillDir`. */
+function completionOutputPath(spillDir, source, id) {
+    return join(spillDir, `teammate-${safeSegment(source)}-${safeSegment(id)}.output`);
+}
+/**
+ * Resolve the effective inline budget from the environment: unset/blank or
+ * non-positive falls back to the default; values above the upper bound are
+ * clamped; a non-integer value falls back to the default.
+ */
+export function completionInlineBudget(env = globalThis.process.env) {
+    const raw = env[COMPLETION_INLINE_BUDGET_ENV]?.trim();
+    if (raw === undefined || raw === '' || !/^\d+$/.test(raw)) {
+        return COMPLETION_INLINE_BUDGET_DEFAULT;
+    }
+    const parsed = Number(raw);
+    if (parsed <= 0) {
+        return COMPLETION_INLINE_BUDGET_DEFAULT;
+    }
+    return Math.min(parsed, COMPLETION_INLINE_BUDGET_MAX);
+}
+/**
+ * Decide whether a completion result is inlined or spilled. Spilling writes the
+ * FULL result to a 0600 file (async fs only) under the host-supplied
+ * `spillDir`, then returns the path; the caller inlines only that path.
+ */
+export async function resolveCompletionBody(completion, spillDir) {
+    const budget = completionInlineBudget();
+    if (completion.result.length <= budget) {
+        return { kind: 'inline', text: completion.result };
+    }
+    const path = completionOutputPath(spillDir, completion.source, completion.id);
+    await ensureOwnerOnlyDir(spillDir);
+    await writeFile(path, completion.result, { mode: 0o600 });
+    await chmod(path, 0o600);
+    return { kind: 'spilled', path };
+}
+//# sourceMappingURL=completion-body.js.map

package/dist/internal/completion-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion-body.js","sourceRoot":"","sources":["../../src/internal/completion-body.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAE7C,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAO,CAAC;AACpD,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAM9D,uDAAuD;AACvD,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,MAAc,EACd,EAAU;IAEV,OAAO,IAAI,CAAC,QAAQ,EAAE,YAAY,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAyB,UAAU,CAAC,OAAO,CAAC,GAAG;IAE/C,MAAM,GAAG,GAAG,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAA8B,EAC9B,QAAgB;IAEhB,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;IACxC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/internal/config-validate.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Neutral config validation primitives.
+ *
+ * Extracted from `config/config.ts` so that per-runtime config readers (each
+ * builtin's `agent-runtime/builtin/<name>/config.ts`) can validate their own
+ * config blocks without importing `config/config.ts` — importing the host
+ * config module from a builtin would re-form the builtin -> config import
+ * cycle. These helpers are runtime-agnostic: they only know about JSON shapes
+ * and produce `dreamux config error in <file>: ...` messages.
+ */
+export declare function isPlainObject(v: unknown): v is Record<string, unknown>;
+export declare function describeType(v: unknown): string;
+export declare function rejectUnknownKeys(obj: Record<string, unknown>, allowed: Set<string>, file: string, prefix: string): void;
+export declare function requireNonEmptyString(obj: Record<string, unknown>, key: string, file: string, prefix?: string): string;
+export declare function readOptionalString(obj: Record<string, unknown>, key: string, file: string, prefix?: string): string | null;
+export declare function readOptionalBoolean(obj: Record<string, unknown>, key: string, fallback: boolean, file: string, prefix?: string): boolean;
+export declare function requireStringArray(obj: Record<string, unknown>, key: string, fallback: string[], file: string, prefix?: string): string[];
+export declare function requireStringRecord(obj: Record<string, unknown>, key: string, fallback: Record<string, string>, file: string, prefix?: string): Record<string, string>;
+export declare function requirePositiveInt(obj: Record<string, unknown>, key: string, fallback: number, file: string, prefix?: string): number;
+export declare function readProviderConfigObject(rawConfig: unknown, file: string, name: string, options?: {
+    allowMissing?: boolean;
+}): Record<string, unknown>;
+//# sourceMappingURL=config-validate.d.ts.map

package/dist/internal/config-validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-validate.d.ts","sourceRoot":"","sources":["../../src/internal/config-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEtE;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAI/C;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,IAAI,CAgBN;AAuBD,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,MAAM,CAMR;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,MAAM,GAAG,IAAI,CAIf;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,OAAO,CAOT;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAAE,EAClB,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,MAAM,EAAE,CAgBV;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkBxB;AAgBD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,SAAK,GACV,MAAM,CASR;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,OAAO,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACvC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB"}

package/dist/internal/config-validate.js

@@ -0,0 +1,122 @@
+/**
+ * Neutral config validation primitives.
+ *
+ * Extracted from `config/config.ts` so that per-runtime config readers (each
+ * builtin's `agent-runtime/builtin/<name>/config.ts`) can validate their own
+ * config blocks without importing `config/config.ts` — importing the host
+ * config module from a builtin would re-form the builtin -> config import
+ * cycle. These helpers are runtime-agnostic: they only know about JSON shapes
+ * and produce `dreamux config error in <file>: ...` messages.
+ */
+export function isPlainObject(v) {
+    return v !== null && typeof v === 'object' && !Array.isArray(v);
+}
+export function describeType(v) {
+    if (v === null)
+        return 'null';
+    if (Array.isArray(v))
+        return 'array';
+    return typeof v;
+}
+export function rejectUnknownKeys(obj, allowed, file, prefix) {
+    for (const key of Object.keys(obj)) {
+        if (allowed.has(key))
+            continue;
+        const name = `${prefix}${key}`;
+        if (/^dispatchers\[\d+\]\.$/.test(prefix) && (key === 'feishu' || key === 'codex')) {
+            throw new Error(`dreamux config error in ${file}: ${name} is not supported by the providerized config v2 schema.\n` +
+                'Dreamux 0.x does not silently migrate operator-owned config. Rebuild this dispatcher with ' +
+                'dispatchers[].channels[] for the channel and a named agents[] entry referenced via ' +
+                'dispatchers[].agentRuntime for the runtime, then restart.');
+        }
+        throw new Error(`dreamux config error in ${file}: ${name} is not supported by the providerized config v2 schema`);
+    }
+}
+function ensureString(v, key, file) {
+    if (typeof v !== 'string') {
+        throw new Error(`dreamux config error in ${file}: ${key} must be a string (got ${describeType(v)})`);
+    }
+    return v;
+}
+function requireString(obj, key, fallback, file, prefix = '') {
+    const v = obj[key];
+    if (v === undefined)
+        return fallback;
+    return ensureString(v, `${prefix}${key}`, file);
+}
+export function requireNonEmptyString(obj, key, file, prefix = '') {
+    const value = requireString(obj, key, '', file, prefix);
+    if (value.trim() !== '')
+        return value;
+    throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be a non-empty string`);
+}
+export function readOptionalString(obj, key, file, prefix = '') {
+    const v = obj[key];
+    if (v === undefined || v === null)
+        return null;
+    return ensureString(v, `${prefix}${key}`, file);
+}
+export function readOptionalBoolean(obj, key, fallback, file, prefix = '') {
+    const v = obj[key];
+    if (v === undefined)
+        return fallback;
+    if (typeof v === 'boolean')
+        return v;
+    throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be a boolean (got ${describeType(v)})`);
+}
+export function requireStringArray(obj, key, fallback, file, prefix = '') {
+    const v = obj[key];
+    if (v === undefined)
+        return fallback;
+    if (!Array.isArray(v)) {
+        throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be an array of strings (got ${describeType(v)})`);
+    }
+    return v.map((item, i) => {
+        if (typeof item !== 'string') {
+            throw new Error(`dreamux config error in ${file}: ${prefix}${key}[${i}] must be a string (got ${describeType(item)})`);
+        }
+        return item;
+    });
+}
+export function requireStringRecord(obj, key, fallback, file, prefix = '') {
+    const v = obj[key];
+    if (v === undefined)
+        return { ...fallback };
+    if (!isPlainObject(v)) {
+        throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be an object of strings (got ${describeType(v)})`);
+    }
+    const out = {};
+    for (const [entryKey, entryValue] of Object.entries(v)) {
+        if (typeof entryValue !== 'string') {
+            throw new Error(`dreamux config error in ${file}: ${prefix}${key}.${entryKey} must be a string (got ${describeType(entryValue)})`);
+        }
+        out[entryKey] = entryValue;
+    }
+    return out;
+}
+function readInt(obj, key, file, prefix) {
+    const v = obj[key];
+    if (v === undefined)
+        return null;
+    if (typeof v === 'number' && Number.isInteger(v))
+        return v;
+    throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be an integer (got ${describeType(v)})`);
+}
+export function requirePositiveInt(obj, key, fallback, file, prefix = '') {
+    const n = readInt(obj, key, file, prefix);
+    if (n === null)
+        return fallback;
+    if (n <= 0) {
+        throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be > 0 (got ${n})`);
+    }
+    return n;
+}
+export function readProviderConfigObject(rawConfig, file, name, options = {}) {
+    if (rawConfig === undefined && options.allowMissing === true)
+        return {};
+    if (!isPlainObject(rawConfig)) {
+        throw new Error(`dreamux config error in ${file}: ${name} must be an object (got ${describeType(rawConfig)})`);
+    }
+    return rawConfig;
+}
+//# sourceMappingURL=config-validate.js.map

package/dist/internal/config-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-validate.js","sourceRoot":"","sources":["../../src/internal/config-validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAU;IACrC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAA4B,EAC5B,OAAoB,EACpB,IAAY,EACZ,MAAc;IAEd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;QAC/B,IAAI,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,IAAI,2DAA2D;gBACjG,4FAA4F;gBAC5F,qFAAqF;gBACrF,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,IAAI,wDAAwD,CACjG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAU,EAAE,GAAW,EAAE,IAAY;IACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,GAAG,0BAA0B,YAAY,CAAC,CAAC,CAAC,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CACpB,GAA4B,EAC5B,GAAW,EACX,QAAgB,EAChB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,YAAY,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAA4B,EAC5B,GAAW,EACX,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,6BAA6B,CAC9E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAA4B,EAC5B,GAAW,EACX,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,YAAY,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAA4B,EAC5B,GAAW,EACX,QAAiB,EACjB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,2BAA2B,YAAY,CAAC,CAAC,CAAC,GAAG,CAC9F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAA4B,EAC5B,GAAW,EACX,QAAkB,EAClB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,qCAAqC,YAAY,CAAC,CAAC,CAAC,GAAG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI,CAAC,2BAA2B,YAAY,CAAC,IAAI,CAAC,GAAG,CACtG,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAA4B,EAC5B,GAAW,EACX,QAAgC,EAChC,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC5C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,sCAAsC,YAAY,CAAC,CAAC,CAAC,GAAG,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI,QAAQ,0BAA0B,YAAY,CAAC,UAAU,CAAC,GAAG,CAClH,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CACd,GAA4B,EAC5B,GAAW,EACX,IAAY,EACZ,MAAc;IAEd,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,4BAA4B,YAAY,CAAC,CAAC,CAAC,GAAG,CAC/F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAA4B,EAC5B,GAAW,EACX,QAAgB,EAChB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAAkB,EAClB,IAAY,EACZ,IAAY,EACZ,UAAsC,EAAE;IAExC,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACxE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,IAAI,2BAA2B,YAAY,CAAC,SAAS,CAAC,GAAG,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/internal/os.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Generic OS/filesystem utilities the Codex runtime needs, vendored into this
+ * package so it depends on `@excitedjs/dreamux-types` only and never imports
+ * `@excitedjs/dreamux` core. These are platform primitives (process-group
+ * signalling, owner-only dir enforcement, empty-log cleanup, existence probe),
+ * NOT Dreamux host layout/path/socket/log contracts — those are supplied by the
+ * host through the create context and provider options.
+ */
+/** True when `pid` names a live process (EPERM counts as alive). */
+export declare function isProcessAlive(pid: number): boolean;
+/** Signal an entire process group; ESRCH/EPERM are swallowed. */
+export declare function killProcessGroup(pgid: number, signal: NodeJS.Signals | number): void;
+export interface EnsureOwnerOnlyDirOptions {
+    /** Current-user uid probe override (tests). */
+    getuid?: () => number;
+}
+/**
+ * Create/adopt a directory and guarantee the owner-only (0700) privacy
+ * invariant regardless of who created it: reject a symlink leaf, fail loud on a
+ * foreign-uid dir, and tighten any group/other permission bits.
+ */
+export declare function ensureOwnerOnlyDir(path: string, options?: EnsureOwnerOnlyDirOptions): Promise<void>;
+/**
+ * Remove `path` only if it exists and is zero bytes. Best-effort: a missing,
+ * non-empty, or busy file is left untouched and never throws.
+ */
+export declare function removeEmptyLogFile(path: string): Promise<void>;
+/** Best-effort existence probe — the async replacement for `existsSync`. */
+export declare function pathExists(path: string): Promise<boolean>;
+//# sourceMappingURL=os.d.ts.map

package/dist/internal/os.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"os.d.ts","sourceRoot":"","sources":["../../src/internal/os.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASnD;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,GAC9B,IAAI,CASN;AAED,MAAM,WAAW,yBAAyB;IACxC,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOpE;AAED,4EAA4E;AAC5E,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/D"}

package/dist/internal/os.js

@@ -0,0 +1,81 @@
+/**
+ * Generic OS/filesystem utilities the Codex runtime needs, vendored into this
+ * package so it depends on `@excitedjs/dreamux-types` only and never imports
+ * `@excitedjs/dreamux` core. These are platform primitives (process-group
+ * signalling, owner-only dir enforcement, empty-log cleanup, existence probe),
+ * NOT Dreamux host layout/path/socket/log contracts — those are supplied by the
+ * host through the create context and provider options.
+ */
+import { access, chmod, lstat, mkdir, stat, unlink } from 'node:fs/promises';
+/** True when `pid` names a live process (EPERM counts as alive). */
+export function isProcessAlive(pid) {
+    if (!Number.isFinite(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        const errno = e.code;
+        return errno === 'EPERM';
+    }
+}
+/** Signal an entire process group; ESRCH/EPERM are swallowed. */
+export function killProcessGroup(pgid, signal) {
+    if (!Number.isFinite(pgid) || pgid <= 0)
+        return;
+    try {
+        process.kill(-pgid, signal);
+    }
+    catch (e) {
+        const errno = e.code;
+        if (errno === 'ESRCH' || errno === 'EPERM')
+            return;
+        throw e;
+    }
+}
+/**
+ * Create/adopt a directory and guarantee the owner-only (0700) privacy
+ * invariant regardless of who created it: reject a symlink leaf, fail loud on a
+ * foreign-uid dir, and tighten any group/other permission bits.
+ */
+export async function ensureOwnerOnlyDir(path, options = {}) {
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    const info = await lstat(path);
+    if (info.isSymbolicLink()) {
+        throw new Error(`refusing to use Dreamux runtime directory ${path}: it is a symlink, not a real directory`);
+    }
+    const getuid = options.getuid ?? process.getuid?.bind(process);
+    if (getuid !== undefined && info.uid !== getuid()) {
+        throw new Error(`refusing to use Dreamux runtime directory ${path}: it is owned by uid ${info.uid}, ` +
+            `not the current user (uid ${getuid()})`);
+    }
+    if ((info.mode & 0o077) !== 0) {
+        await chmod(path, 0o700);
+    }
+}
+/**
+ * Remove `path` only if it exists and is zero bytes. Best-effort: a missing,
+ * non-empty, or busy file is left untouched and never throws.
+ */
+export async function removeEmptyLogFile(path) {
+    try {
+        const info = await stat(path);
+        if (info.size === 0)
+            await unlink(path);
+    }
+    catch {
+        /* best effort — missing/busy/non-empty files are left as-is */
+    }
+}
+/** Best-effort existence probe — the async replacement for `existsSync`. */
+export async function pathExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=os.js.map

package/dist/internal/os.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"os.js","sourceRoot":"","sources":["../../src/internal/os.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE7E,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAI,CAA2B,CAAC,IAAI,CAAC;QAChD,OAAO,KAAK,KAAK,OAAO,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,MAA+B;IAE/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO;IAChD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,KAAK,GAAI,CAA2B,CAAC,IAAI,CAAC;QAChD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO;YAAE,OAAO;QACnD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,UAAqC,EAAE;IAEvC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,6CAA6C,IAAI,yCAAyC,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,6CAA6C,IAAI,wBAAwB,IAAI,CAAC,GAAG,IAAI;YACnF,6BAA6B,MAAM,EAAE,GAAG,CAC3C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/internal/socket.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Standalone default for the volatile socket path, used when no host candidate
+ * directories are supplied (the bare generic-loader path or external standalone
+ * use). This is the PACKAGE's own fallback root — `$XDG_RUNTIME_DIR` when set,
+ * else the OS temp dir — deliberately NOT the Dreamux host socket contract. The
+ * path is random per call and never persisted.
+ */
+export declare function defaultVolatileSocketPath(id: string): string;
+/**
+ * Allocate a fresh Codex app-server socket path inside the first host candidate
+ * directory whose full path fits the socket budget. Fails loud (naming `id`)
+ * when even the last candidate is over budget. With no candidate directories it
+ * uses {@link defaultVolatileSocketPath}.
+ */
+export declare function allocateCodexSocketPath(socketDirs: readonly string[], id: string): string;
+/**
+ * A representative, NON-throwing socket sample for the doctor: the first
+ * candidate whose path fits, else the last candidate (which is then over budget,
+ * so the home doctor can REPORT it as an error rather than throwing here). With
+ * no candidate directories it uses {@link defaultVolatileSocketPath}.
+ */
+export declare function representativeCodexSocketPath(socketDirs: readonly string[], id: string): string;
+//# sourceMappingURL=socket.d.ts.map

package/dist/internal/socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket.d.ts","sourceRoot":"","sources":["../../src/internal/socket.ts"],"names":[],"mappings":"AA+BA;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,EAAE,MAAM,GACT,MAAM,CAYR;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,EAAE,MAAM,GACT,MAAM,CAQR"}