@fitlab-ai/agent-infra 0.12.0 → 0.12.2

package/lib/agent-clients/adapters/codex-lifecycle/evidence.ts

@@ -1,385 +0,0 @@
-import type { CodexLifecycleTaskBinding } from './binding.ts';
-
-type CodexEvidenceSource =
-  | 'codex-hook'
-  | 'codex-app-server-thread'
-  | 'codex-app-server-settings'
-  | 'codex-app-server-turn'
-  | 'codex-app-server-reroute';
-
-type CodexLifecycleEvent =
-  | Readonly<{
-      type: 'hook-spawn';
-      sessionId: string;
-      turnId: string;
-      toolUseId: string;
-      nativeAgent: string;
-      requestedModel?: string;
-      requestedReasoningEffort?: string;
-      hookDefinitionHash: string;
-      taskBinding?: CodexLifecycleTaskBinding;
-    }>
-  | Readonly<{
-      type: 'hook-child';
-      sessionId: string;
-      turnId: string;
-      childThreadId: string;
-      parentThreadId: string;
-      nativeAgent: string;
-      source?: 'hook' | 'parent-rollout';
-    }>
-  | Readonly<{
-      type: 'app-thread';
-      childThreadId: string;
-      parentThreadId: string;
-      forkedFromId: string | null;
-      sourceParentThreadId: string;
-      nativeAgent: string;
-    }>
-  | Readonly<{
-      type: 'app-settings';
-      childThreadId: string;
-      model: string;
-      reasoningEffort: string;
-    }>
-  | Readonly<{
-      type: 'app-reroute';
-      childThreadId: string;
-      turnId: string;
-      fromModel: string;
-      toModel: string;
-      reason: string;
-    }>
-  | Readonly<{
-      type: 'app-terminal';
-      childThreadId: string;
-      turnId: string;
-      status: 'completed' | 'interrupted' | 'failed';
-    }>
-  | Readonly<{
-      type: 'hook-stop';
-      sessionId: string;
-      turnId: string;
-      childThreadId: string;
-      nativeAgent: string;
-      source?: 'hook' | 'parent-rollout';
-    }>;
-
-type CodexStartEvidence = Readonly<{
-  schemaVersion: 1;
-  cliVersion: string;
-  parentThreadId: string;
-  parentTurnId: string;
-  spawnToolUseId: string;
-  childThreadId: string;
-  nativeAgent: string;
-  spawnMode: 'fresh';
-  actualModel: Readonly<{ value: string; source: CodexEvidenceSource }>;
-  actualReasoningEffort: Readonly<{ value: string; source: CodexEvidenceSource }>;
-  modelFallbackReason: string | null;
-  reasoningEffortFallbackReason: string | null;
-  hookDefinitionHash: string;
-}>;
-
-type CodexStopEvidence = Readonly<{
-  schemaVersion: 1;
-  childThreadId: string;
-  turnId: string;
-  terminalStatus: 'completed';
-  hookStopObserved: boolean;
-}>;
-
-type CodexLifecycleStatus =
-  | 'empty'
-  | 'observed-spawn'
-  | 'observed-child'
-  | 'start-ready'
-  | 'observed-terminal'
-  | 'stop-ready'
-  | 'invalid'
-  | 'expired';
-
-type CodexEvidenceError = Readonly<{ code: string; message: string }>;
-
-function isCodexLifecycleActivationEvidence(value: unknown, parentId: string): boolean {
-  if (!value || typeof value !== 'object' || Array.isArray(value)) return false;
-  const state = value as Record<string, unknown>;
-  const evidence = state.activationEvidence;
-  if (!evidence || typeof evidence !== 'object' || Array.isArray(evidence)) return false;
-  const activation = evidence as Record<string, unknown>;
-  return activation.kind === 'codex-lifecycle-v2'
-    && typeof activation.hookDefinitionHash === 'string'
-    && activation.hookDefinitionHash.trim() !== ''
-    && Number.isSafeInteger(activation.startRevision)
-    && (activation.startRevision as number) >= 1
-    && activation.capabilitySessionId === parentId;
-}
-
-function isCodexDelegationReceiptEvidence(value: unknown): boolean {
-  if (!value || typeof value !== 'object' || Array.isArray(value)) return false;
-  const receipt = value as Record<string, unknown>;
-  if (receipt.client !== 'codex' || typeof receipt.id !== 'string') return false;
-  const status = receipt.status;
-  if (!['activated', 'stage-completed', 'sealed', 'consumed', 'aborted'].includes(status as string)) return true;
-  const adapterEvidence = receipt.adapterEvidence;
-  if (!adapterEvidence || typeof adapterEvidence !== 'object' || Array.isArray(adapterEvidence)) return false;
-  const codex = (adapterEvidence as Record<string, unknown>).codex;
-  if (!codex || typeof codex !== 'object' || Array.isArray(codex)) return false;
-  const state = codex as Record<string, unknown>;
-  if (!isCodexLifecycleActivationEvidence(state, String(receipt.parentId ?? ''))) return false;
-  if (!['sealed', 'consumed', 'aborted'].includes(status as string)) return true;
-  const records = state.records;
-  if (!records || typeof records !== 'object' || Array.isArray(records)) return false;
-  return Object.values(records as Record<string, unknown>).some((record) => {
-    if (!record || typeof record !== 'object' || Array.isArray(record)) return false;
-    const evidence = record as Record<string, unknown>;
-    return evidence.consumer === receipt.id
-      && typeof evidence.consumedAt === 'string'
-      && evidence.consumedAt.trim() !== '';
-  });
-}
-
-type CodexLifecycleState = Readonly<{
-  schemaVersion: 1;
-  cliVersion: string;
-  status: CodexLifecycleStatus;
-  spawn: Extract<CodexLifecycleEvent, { type: 'hook-spawn' }> | null;
-  child: Extract<CodexLifecycleEvent, { type: 'hook-child' }> | null;
-  thread: Extract<CodexLifecycleEvent, { type: 'app-thread' }> | null;
-  settings: Extract<CodexLifecycleEvent, { type: 'app-settings' }> | null;
-  reroute: Extract<CodexLifecycleEvent, { type: 'app-reroute' }> | null;
-  terminal: Extract<CodexLifecycleEvent, { type: 'app-terminal' }> | null;
-  stop: Extract<CodexLifecycleEvent, { type: 'hook-stop' }> | null;
-  startEvidence: CodexStartEvidence | null;
-  stopEvidence: CodexStopEvidence | null;
-  error: CodexEvidenceError | null;
-}>;
-
-function createCodexLifecycleState(cliVersion: string): CodexLifecycleState {
-  if (!cliVersion.trim()) throw new Error('Codex CLI version is required');
-  return Object.freeze({
-    schemaVersion: 1,
-    cliVersion,
-    status: 'empty',
-    spawn: null,
-    child: null,
-    thread: null,
-    settings: null,
-    reroute: null,
-    terminal: null,
-    stop: null,
-    startEvidence: null,
-    stopEvidence: null,
-    error: null
-  });
-}
-
-function invalid(state: CodexLifecycleState, code: string, message: string): CodexLifecycleState {
-  return Object.freeze({
-    ...state,
-    status: 'invalid',
-    startEvidence: null,
-    stopEvidence: null,
-    error: Object.freeze({ code, message })
-  });
-}
-
-function same(left: unknown, right: unknown): boolean {
-  return JSON.stringify(left) === JSON.stringify(right);
-}
-
-function sameChildCorrelation(
-  left: Extract<CodexLifecycleEvent, { type: 'hook-child' }>,
-  right: Extract<CodexLifecycleEvent, { type: 'hook-child' }>
-): boolean {
-  return left.sessionId === right.sessionId
-    && left.childThreadId === right.childThreadId
-    && left.parentThreadId === right.parentThreadId
-    && left.nativeAgent === right.nativeAgent;
-}
-
-function requiredStrings(event: CodexLifecycleEvent): boolean {
-  return Object.entries(event).every(([key, value]) =>
-    key === 'forkedFromId'
-    || (typeof value !== 'string' || value.trim() !== '')
-  );
-}
-
-function derive(state: CodexLifecycleState): CodexLifecycleState {
-  const { spawn, child, thread, settings, reroute, terminal, stop } = state;
-  if (spawn && child && (
-    spawn.sessionId !== child.parentThreadId
-    || spawn.nativeAgent !== child.nativeAgent
-  )) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'hook spawn and child identity do not match');
-  }
-  if (child && child.sessionId !== child.parentThreadId) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'child event session does not match the parent thread');
-  }
-  if (child && thread && child.childThreadId !== thread.childThreadId) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'hook and App Server child identity do not match');
-  }
-  if (child && thread && child.nativeAgent !== thread.nativeAgent) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'hook and App Server agent roles do not match');
-  }
-  if (child && thread && child.parentThreadId !== thread.parentThreadId) {
-    return invalid(state, 'CODEX_EVIDENCE_PARENT_MISMATCH', 'hook and App Server parent identity do not match');
-  }
-  if (spawn && thread && (
-    thread.parentThreadId !== spawn.sessionId
-    || thread.sourceParentThreadId !== spawn.sessionId
-  )) {
-    return invalid(state, 'CODEX_EVIDENCE_PARENT_MISMATCH', 'App Server parent identity does not match the spawning session');
-  }
-  if (spawn && thread && spawn.nativeAgent !== thread.nativeAgent) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'spawn and App Server agent roles do not match');
-  }
-  if (thread?.forkedFromId !== null && thread?.forkedFromId !== undefined) {
-    return invalid(state, 'CODEX_EVIDENCE_FORK_FORBIDDEN', 'forked child threads are not fresh lifecycle evidence');
-  }
-  if (settings && child && settings.childThreadId !== child.childThreadId) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'resolved settings belong to a different child');
-  }
-  if (reroute && child && reroute.childThreadId !== child.childThreadId) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'model reroute belongs to a different child');
-  }
-  if (spawn?.requestedModel && settings && spawn.requestedModel !== settings.model) {
-    if (
-      !reroute
-      || reroute.fromModel !== spawn.requestedModel
-      || reroute.toModel !== settings.model
-      || !reroute.reason.trim()
-    ) {
-      return invalid(state, 'CODEX_EVIDENCE_MODEL_UNEXPLAINED', 'resolved model differs without a matching host reroute');
-    }
-  }
-  if (
-    spawn?.requestedReasoningEffort
-    && settings
-    && spawn.requestedReasoningEffort !== settings.reasoningEffort
-  ) {
-    return invalid(state, 'CODEX_EVIDENCE_EFFORT_UNEXPLAINED', 'resolved reasoning effort differs without structured host evidence');
-  }
-  if (terminal && terminal.status !== 'completed') {
-    return invalid(state, 'CODEX_EVIDENCE_TERMINAL_INVALID', `child turn ended as '${terminal.status}'`);
-  }
-  if (terminal && child && terminal.childThreadId !== child.childThreadId) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'terminal event belongs to a different child');
-  }
-  if (stop && child && (
-    stop.sessionId !== child.sessionId
-    || stop.turnId !== child.turnId
-    || stop.childThreadId !== child.childThreadId
-    || stop.nativeAgent !== child.nativeAgent
-  )) {
-    return invalid(state, 'CODEX_EVIDENCE_IDENTITY_MISMATCH', 'hook stop identity does not match the child');
-  }
-
-  let startEvidence: CodexStartEvidence | null = null;
-  if (spawn && child && thread && settings) {
-    startEvidence = Object.freeze({
-      schemaVersion: 1,
-      cliVersion: state.cliVersion,
-      parentThreadId: spawn.sessionId,
-      parentTurnId: spawn.turnId,
-      spawnToolUseId: spawn.toolUseId,
-      childThreadId: child.childThreadId,
-      nativeAgent: child.nativeAgent,
-      spawnMode: 'fresh',
-      actualModel: Object.freeze({ value: settings.model, source: 'codex-app-server-settings' }),
-      actualReasoningEffort: Object.freeze({ value: settings.reasoningEffort, source: 'codex-app-server-settings' }),
-      modelFallbackReason: reroute?.reason ?? null,
-      reasoningEffortFallbackReason: null,
-      hookDefinitionHash: spawn.hookDefinitionHash
-    });
-  }
-  let stopEvidence: CodexStopEvidence | null = null;
-  if (startEvidence && terminal?.status === 'completed' && stop) {
-    stopEvidence = Object.freeze({
-      schemaVersion: 1,
-      childThreadId: startEvidence.childThreadId,
-      turnId: terminal.turnId,
-      terminalStatus: 'completed',
-      hookStopObserved: stop.source !== 'parent-rollout'
-    });
-  }
-  const status: CodexLifecycleStatus = stopEvidence
-    ? 'stop-ready'
-    : terminal
-      ? 'observed-terminal'
-      : startEvidence
-        ? 'start-ready'
-        : child
-          ? 'observed-child'
-          : spawn
-            ? 'observed-spawn'
-            : 'empty';
-  return Object.freeze({ ...state, status, startEvidence, stopEvidence, error: null });
-}
-
-function reduceCodexLifecycleEvent(
-  state: CodexLifecycleState,
-  event: CodexLifecycleEvent
-): CodexLifecycleState {
-  if (state.status === 'invalid' || state.status === 'expired') return state;
-  if (!requiredStrings(event)) {
-    return invalid(state, 'CODEX_EVIDENCE_FIELD_MISSING', 'lifecycle event contains an empty required field');
-  }
-  const key = ({
-    'hook-spawn': 'spawn',
-    'hook-child': 'child',
-    'app-thread': 'thread',
-    'app-settings': 'settings',
-    'app-reroute': 'reroute',
-    'app-terminal': 'terminal',
-    'hook-stop': 'stop'
-  } as const)[event.type];
-  const existing = state[key];
-  if (existing) {
-    if (same(existing, event)) return state;
-    if (
-      existing.type === 'hook-child'
-      && event.type === 'hook-child'
-      && sameChildCorrelation(existing, event)
-      && (existing.source === 'parent-rollout') !== (event.source === 'parent-rollout')
-    ) {
-      if (existing.source !== 'parent-rollout') return state;
-      return derive(Object.freeze({ ...state, child: Object.freeze({ ...event }) }));
-    }
-    return invalid(state, 'CODEX_EVIDENCE_REPLAY_CONFLICT', `conflicting '${event.type}' event`);
-  }
-  return derive(Object.freeze({ ...state, [key]: Object.freeze({ ...event }) }));
-}
-
-function expireCodexLifecycleState(state: CodexLifecycleState): CodexLifecycleState {
-  if (!['observed-spawn', 'observed-child', 'start-ready', 'observed-terminal'].includes(state.status)) {
-    return state;
-  }
-  return Object.freeze({
-    ...state,
-    status: 'expired',
-    startEvidence: null,
-    stopEvidence: null,
-    error: Object.freeze({
-      code: 'CODEX_EVIDENCE_EXPIRED',
-      message: 'Codex lifecycle evidence expired before completion'
-    })
-  });
-}
-
-export {
-  createCodexLifecycleState,
-  expireCodexLifecycleState,
-  isCodexLifecycleActivationEvidence,
-  isCodexDelegationReceiptEvidence,
-  reduceCodexLifecycleEvent
-};
-export type {
-  CodexEvidenceError,
-  CodexEvidenceSource,
-  CodexLifecycleEvent,
-  CodexLifecycleState,
-  CodexLifecycleStatus,
-  CodexStartEvidence,
-  CodexStopEvidence
-};

package/lib/agent-clients/adapters/codex-lifecycle/manifest-files.json

@@ -1,41 +0,0 @@
-{
-  "executableFiles": [
-    "bin/internal-cli.ts",
-    "lib/agent-clients/adapters/codex-lifecycle/cli.ts",
-    "lib/internal/sandbox-control.ts",
-    "lib/internal/task-orchestration.ts",
-    "lib/agent-clients/adapters/codex-orchestration.ts",
-    "lib/task/delegation-receipts.ts",
-    "lib/task/orchestration.ts",
-    "lib/agent-clients/adapters/codex-lifecycle/build-identity.ts",
-    "lib/agent-clients/adapters/codex-lifecycle/app-server.ts",
-    "lib/agent-clients/adapters/codex-lifecycle/binding.ts",
-    "lib/agent-clients/adapters/codex-lifecycle/evidence.ts",
-    "lib/agent-clients/adapters/codex-lifecycle/store.ts",
-    "lib/agent-clients/adapters/codex-lifecycle/manifest-files.json",
-    "lib/sandbox/control/protocol.ts",
-    "lib/sandbox/control/client.ts",
-    "lib/sandbox/control/executor.ts",
-    "lib/server/process-state.ts",
-    "lib/sandbox/shell.ts"
-  ],
-  "contractFiles": [
-    ".codex/hooks.json",
-    ".codex/agents/agent-infra-lifecycle-executor.toml",
-    ".codex/agents/agent-infra-lifecycle-reviewer.toml",
-    ".agents/hooks/lifecycle-delegation.js",
-    ".agents/skills/run-task/SKILL.md",
-    ".agents/rules/lifecycle-orchestration.md"
-  ],
-  "launcherShebang": {
-    "sourceFile": "bin/internal-cli.ts",
-    "compiledFile": "dist/bin/internal-cli.js",
-    "canonicalLine": "#!/usr/bin/env node\n",
-    "acceptedLines": [
-      "#!/usr/bin/env node\n",
-      "#!/opt/homebrew/opt/node/bin/node\n",
-      "#!/usr/local/opt/node/bin/node\n",
-      "#!/home/linuxbrew/.linuxbrew/opt/node/bin/node\n"
-    ]
-  }
-}