@getforgeai/cli 0.1.0-beta.2 → 0.1.0-beta.4

package/dist/orchestrator/agent-profiles.js

@@ -0,0 +1,253 @@
+/**
+ * Per-engine agent profiles: everything that differs between Claude Code,
+ * Codex CLI and OpenCode when running headless inside a ForgeAI Docker
+ * session. The rest of the pipeline (connector lifecycle, MCP bridge,
+ * StreamBatcher, Socket.io contract, snapshot transport) is engine-agnostic.
+ *
+ * | Engine      | Binary     | Config file                              | Resume       |
+ * |-------------|------------|------------------------------------------|--------------|
+ * | CLAUDE_CODE | claude     | /session/workspace/.claude/mcp_config.json (via --mcp-config) | --continue |
+ * | CODEX       | codex      | /home/agent/.codex/config.toml           | exec resume --last |
+ * | OPENCODE    | opencode   | /home/agent/.config/opencode/opencode.json | run --continue |
+ */
+import { DEFAULT_AGENT_TYPE, isAgentType } from "@getforgeai/protocol";
+import { CodexJsonlExtractor } from "./codex-jsonl-extractor.js";
+import { OpenCodeJsonlExtractor } from "./opencode-jsonl-extractor.js";
+import { StreamJsonExtractor } from "./stream-json-extractor.js";
+/** Narrow an arbitrary config/dispatch string to a supported AgentType. */
+export function resolveAgentType(value) {
+    if (value && isAgentType(value))
+        return value;
+    return DEFAULT_AGENT_TYPE;
+}
+/**
+ * Make sure a cloud-provided prompt still leads the agent to the deposited
+ * skill. Cloud task/step commands (e.g. "forge_merge_back") replace the
+ * default prompt that pointed at the SKILL.md; engines with native skill
+ * discovery find the skill anyway, but Codex would otherwise never learn the
+ * skill exists. No-op when the engine discovers skills natively or when no
+ * skill was deposited.
+ */
+export function appendSkillPointer(prompt, profile, skillName) {
+    if (profile.nativeSkillDiscovery || !skillName)
+        return prompt;
+    return `${prompt}\n\nThe "${skillName}" skill at .claude/skills/${skillName}/SKILL.md describes the procedure to follow — read it before starting.`;
+}
+// ---------------------------------------------------------------------------
+// Claude Code
+// ---------------------------------------------------------------------------
+const CLAUDE_MCP_CONFIG_PATH = "/session/workspace/.claude/mcp_config.json";
+const claudeProfile = {
+    type: "CLAUDE_CODE",
+    binary: "claude",
+    configTargetPath: CLAUDE_MCP_CONFIG_PATH,
+    buildConfig(mcp) {
+        return JSON.stringify({
+            mcpServers: {
+                forgeai: {
+                    command: "node",
+                    args: ["/session/forge-mcp-relay.mjs"],
+                    env: {
+                        FORGEAI_MCP_HOST: mcp.host,
+                        FORGEAI_MCP_PORT: String(mcp.port),
+                        FORGEAI_MCP_TOKEN: mcp.token,
+                    },
+                },
+            },
+        }, null, 2);
+    },
+    buildArgs(prompt) {
+        return [
+            "--dangerously-skip-permissions",
+            "--mcp-config",
+            CLAUDE_MCP_CONFIG_PATH,
+            "-p",
+            prompt,
+            "--output-format",
+            "stream-json",
+            "--verbose",
+            "--include-partial-messages",
+        ];
+    },
+    buildContinueArgs(prompt) {
+        return ["--continue", ...this.buildArgs(prompt)];
+    },
+    spawnEnv: {},
+    nativeSkillDiscovery: true,
+    stateDir: "/home/agent/.claude",
+    snapshotExcludes: [
+        "settings.json",
+        // Claude Code writes ".credentials.json" (dot-prefixed) on Linux; keep
+        // both spellings excluded — tar --exclude needs an exact name match.
+        "credentials.json",
+        ".credentials.json",
+        "statsig",
+        "commands",
+        "todos",
+    ],
+    authErrorPatterns: {
+        stderr: [
+            "Not logged in",
+            "Invalid or expired token",
+            "CLAUDE_CODE_OAUTH_TOKEN",
+        ],
+        combined: ['"authentication_error"', "Failed to authenticate"],
+    },
+    authSetupHint: "forge auth setup-claude",
+};
+// ---------------------------------------------------------------------------
+// Codex CLI
+// ---------------------------------------------------------------------------
+/** TOML basic strings share JSON's escape syntax for our value charset. */
+function tomlString(value) {
+    return JSON.stringify(value);
+}
+const codexProfile = {
+    type: "CODEX",
+    binary: "codex",
+    configTargetPath: "/home/agent/.codex/config.toml",
+    buildConfig(mcp) {
+        return [
+            "# Generated by ForgeAI — do not edit",
+            "# The Docker container is the security boundary; Codex's own sandbox is disabled.",
+            'approval_policy = "never"',
+            'sandbox_mode = "danger-full-access"',
+            "",
+            "[mcp_servers.forgeai]",
+            'command = "node"',
+            'args = ["/session/forge-mcp-relay.mjs"]',
+            "startup_timeout_sec = 30",
+            "",
+            "[mcp_servers.forgeai.env]",
+            `FORGEAI_MCP_HOST = ${tomlString(mcp.host)}`,
+            `FORGEAI_MCP_PORT = ${tomlString(String(mcp.port))}`,
+            `FORGEAI_MCP_TOKEN = ${tomlString(mcp.token)}`,
+            "",
+        ].join("\n");
+    },
+    buildArgs(prompt) {
+        return [
+            "exec",
+            "--json",
+            "--dangerously-bypass-approvals-and-sandbox",
+            "--skip-git-repo-check",
+            prompt,
+        ];
+    },
+    buildContinueArgs(prompt) {
+        return [
+            "exec",
+            "resume",
+            "--last",
+            "--json",
+            "--dangerously-bypass-approvals-and-sandbox",
+            "--skip-git-repo-check",
+            prompt,
+        ];
+    },
+    spawnEnv: {},
+    nativeSkillDiscovery: false,
+    stateDir: "/home/agent/.codex",
+    snapshotExcludes: ["auth.json", "config.toml", "log"],
+    authErrorPatterns: {
+        stderr: ["Not logged in", "codex login", "OPENAI_API_KEY", "CODEX_API_KEY"],
+        combined: [
+            '"authentication_error"',
+            "invalid_api_key",
+            "Incorrect API key",
+            "401 Unauthorized",
+        ],
+    },
+    authSetupHint: "forge auth setup-codex",
+};
+// ---------------------------------------------------------------------------
+// OpenCode
+// ---------------------------------------------------------------------------
+/**
+ * Permission override merged over any project-level opencode.json, so a
+ * repo's own config can never re-introduce interactive "ask" prompts that
+ * would hang a headless container.
+ */
+const OPENCODE_PERMISSION_JSON = JSON.stringify({
+    "*": "allow",
+    external_directory: { "**": "allow" },
+    doom_loop: "allow",
+});
+const openCodeProfile = {
+    type: "OPENCODE",
+    binary: "opencode",
+    configTargetPath: "/home/agent/.config/opencode/opencode.json",
+    buildConfig(mcp, opts) {
+        return JSON.stringify({
+            $schema: "https://opencode.ai/config.json",
+            ...(opts?.model ? { model: opts.model } : {}),
+            permission: {
+                "*": "allow",
+                external_directory: { "**": "allow" },
+                doom_loop: "allow",
+            },
+            mcp: {
+                forgeai: {
+                    type: "local",
+                    command: ["node", "/session/forge-mcp-relay.mjs"],
+                    environment: {
+                        FORGEAI_MCP_HOST: mcp.host,
+                        FORGEAI_MCP_PORT: String(mcp.port),
+                        FORGEAI_MCP_TOKEN: mcp.token,
+                    },
+                    enabled: true,
+                },
+            },
+        }, null, 2);
+    },
+    buildArgs(prompt) {
+        return ["run", "--format", "json", prompt];
+    },
+    buildContinueArgs(prompt) {
+        return ["run", "--continue", "--format", "json", prompt];
+    },
+    spawnEnv: { OPENCODE_PERMISSION: OPENCODE_PERMISSION_JSON },
+    // OpenCode reads .claude/skills natively (OPENCODE_DISABLE_CLAUDE_CODE_SKILLS opts out)
+    nativeSkillDiscovery: true,
+    stateDir: "/home/agent/.local/share/opencode",
+    snapshotExcludes: ["auth.json", "log", "bin", "cache"],
+    authErrorPatterns: {
+        stderr: [],
+        combined: [
+            '"authentication_error"',
+            "invalid_api_key",
+            "Incorrect API key",
+            "AuthenticationError",
+            "invalid x-api-key",
+        ],
+    },
+    authSetupHint: "forge auth setup-opencode",
+};
+// ---------------------------------------------------------------------------
+// Registry
+// ---------------------------------------------------------------------------
+const PROFILES = {
+    CLAUDE_CODE: claudeProfile,
+    CODEX: codexProfile,
+    OPENCODE: openCodeProfile,
+};
+export function getAgentProfile(agentType) {
+    return PROFILES[resolveAgentType(agentType)];
+}
+/**
+ * Instantiate the stream extractor matching the agent engine.
+ * All three classes share the AgentStreamExtractor surface and an identical
+ * constructor signature, so spawn call sites stay engine-agnostic.
+ */
+export function createStreamExtractor(agentType, onText, onQuestion, onToolActivity, onTokenUsage, sessionId) {
+    const resolved = resolveAgentType(agentType);
+    switch (resolved) {
+        case "CODEX":
+            return new CodexJsonlExtractor(onText, onQuestion, onToolActivity, onTokenUsage, sessionId);
+        case "OPENCODE":
+            return new OpenCodeJsonlExtractor(onText, onQuestion, onToolActivity, onTokenUsage, sessionId);
+        default:
+            return new StreamJsonExtractor(onText, onQuestion, onToolActivity, onTokenUsage, sessionId);
+    }
+}
+//# sourceMappingURL=agent-profiles.js.map

package/dist/orchestrator/agent-spawner.d.ts

@@ -57,6 +57,8 @@ type ProcessHandlerArgs = {
     agentSlots: number;
     /** Session/container ID for log context */
     sessionId?: string;
+    /** Agent engine that produced the stream (extractor + snapshot selection) */
+    agentType?: string;
 };
 /**
  * Attach exit and error handlers to an agent process.

package/dist/orchestrator/agent-spawner.js

@@ -3,7 +3,7 @@ import { z } from "zod";
 import { TaskResumePayloadSchema, WorkflowStepDispatchPayloadSchema, } from "@getforgeai/protocol";
 import { dockerConnector } from "./connectors/docker-connector.js";
 import { StreamBatcher } from "./stream-batcher.js";
-import { StreamJsonExtractor } from "./stream-json-extractor.js";
+import { createStreamExtractor, getAgentProfile } from "./agent-profiles.js";
 import { AgentRegistry } from "./agent-registry.js";
 import { handleResume } from "./resume-handler.js";
 import { pullSkill } from "../lib/skill-manager.js";
@@ -103,8 +103,8 @@ export function attachProcessHandlers(process, args) {
                 turnIndex: jsonExtractorTask?.turnIndex ?? 0,
             });
         });
-        // Parse stream-json output: extract text deltas + tool activity
-        jsonExtractorTask = new StreamJsonExtractor((textDelta) => {
+        // Parse the engine's JSON output: extract text deltas + tool activity
+        jsonExtractorTask = createStreamExtractor(args.agentType, (textDelta) => {
             stdoutBatcher.write(textDelta);
         }, undefined, // onQuestion — not needed for task agents
         (activity) => {
@@ -167,7 +167,9 @@ export function attachProcessHandlers(process, args) {
                     if (session) {
                         const { autoSaveCode, createSessionSnapshot } = await import("../vm/session-snapshot.js");
                         await autoSaveCode(session.containerId, session.id, session.gitCredentials);
-                        const snapshot = await createSessionSnapshot(session);
+                        // Snapshot the engine the session was provisioned for (recorded
+                        // on SessionState at spawn) rather than the current config value.
+                        const snapshot = await createSessionSnapshot(session, getAgentProfile(session.agentType ?? args.agentType));
                         if (snapshot) {
                             socketClient.socket.emit("workflow:step:snapshot", {
                                 orgId: savedOrgId,
@@ -289,18 +291,19 @@ export function attachProcessHandlers(process, args) {
             queue.clear();
             vmLog.error(label, "Auth error — queue cleared. Attempting token refresh from Keychain...");
             void (async () => {
+                const setupHint = getAgentProfile(args.agentType).authSetupHint;
                 try {
                     const { getVmManager } = await import("../vm/vm-manager-facade.js");
-                    const refreshed = await getVmManager().refreshToken();
+                    const refreshed = await getVmManager().refreshToken(args.agentType);
                     if (refreshed) {
-                        vmLog.cyan(label, "Token refreshed — next dispatch will use the new token");
+                        vmLog.cyan(label, "Credentials refreshed — next dispatch will use them");
                     }
                     else {
-                        vmLog.error(label, "No new token in Keychain. Run: forge auth setup-claude");
+                        vmLog.error(label, `No new credentials found. Run: ${setupHint}`);
                     }
                 }
                 catch {
-                    vmLog.error(label, "Token refresh failed. Run: forge auth setup-claude");
+                    vmLog.error(label, `Credential refresh failed. Run: ${setupHint}`);
                 }
             })();
         }
@@ -354,7 +357,7 @@ export function attachWorkflowProcessHandlers(process, args) {
     let chunkIndex = 0;
     let accumulatedContent = "";
     let contentTruncated = false;
-    // Parse stream-json output from Claude Code: extract only text deltas
+    // Parse the engine's JSON output: extract only text deltas
     let jsonExtractor;
     if (childProcess.stdout) {
         const stdoutBatcher = new StreamBatcher((chunk) => {
@@ -384,10 +387,10 @@ export function attachWorkflowProcessHandlers(process, args) {
                 }
             }
         });
-        // StreamJsonExtractor parses newline-delimited JSON from --output-format stream-json
-        // and emits only text_delta content to the batcher (no thinking, tool_use, system events)
-        // When AskUserQuestion is detected, emit structured questions via workflow:question
-        jsonExtractor = new StreamJsonExtractor((textDelta) => {
+        // The extractor parses the engine's newline-delimited JSON output and
+        // emits only chat text to the batcher (no thinking, tool_use, system events).
+        // When a structured question is detected, it is emitted via workflow:question.
+        jsonExtractor = createStreamExtractor(args.agentType, (textDelta) => {
             stdoutBatcher.write(textDelta);
         }, (questions) => {
             socketClient.emitWorkflowQuestion({
@@ -637,6 +640,7 @@ export async function spawnAgent(params, ctx) {
             mcpConfigPath: "/workspace/.claude/mcp_config.json",
             skillName: skill?.name ?? skillName,
             prompt: params.taskCommand,
+            agentType: ctx.agentType,
             repoUrl: params.repoUrl,
             taskBranch,
             workflowBaseBranch: params.workflowBaseBranch,
@@ -693,6 +697,7 @@ export async function spawnAgent(params, ctx) {
             label: "spawner",
             agentSlots: ctx.agentSlots,
             sessionId: result.vmId,
+            agentType: ctx.agentType,
         });
     }
     catch (err) {
@@ -940,7 +945,9 @@ function setupIdleWindowTimeout(agentId, messageHandler, idleState, params, reg,
                 if (session) {
                     const { autoSaveCode, createSessionSnapshot } = await import("../vm/session-snapshot.js");
                     await autoSaveCode(session.containerId, session.id, session.gitCredentials);
-                    const snapshot = await createSessionSnapshot(session);
+                    // Snapshot the engine the session was provisioned for — ctx.agentType
+                    // may have changed (cloud push / config set) during the idle window.
+                    const snapshot = await createSessionSnapshot(session, getAgentProfile(session.agentType));
                     if (snapshot) {
                         ctx.socketClient.socket.emit("workflow:step:snapshot", {
                             orgId: params.orgId,
@@ -1002,6 +1009,7 @@ async function spawnWorkflowStepAgent(params, ctx) {
             mcpConfigPath: "/workspace/.claude/mcp_config.json",
             skillName: skill?.name ?? skillName,
             prompt,
+            agentType: ctx.agentType,
             repoUrl: params.repoUrl,
             taskBranch: params.baseBranch,
             workflowBaseBranch: params.sourceBranch,
@@ -1146,6 +1154,7 @@ async function spawnWorkflowStepAgent(params, ctx) {
             label: "workflow-dispatch",
             agentSlots: ctx.agentSlots,
             sessionId: result.vmId,
+            agentType: ctx.agentType,
             workflowId: params.workflowId,
             stepId: params.stepId,
             conversationId: params.conversationId ?? agentId,
@@ -1268,6 +1277,7 @@ async function resumeWorkflowStepAgent(agentId, userMessage, lastAssistantConten
             mcpConfigPath: "/workspace/.claude/mcp_config.json",
             skillName: DEFAULT_SKILL_NAME,
             prompt: userMessage,
+            agentType: ctx.agentType,
             repoUrl: originalParams.repoUrl,
             taskBranch: originalParams.baseBranch,
             workflowBaseBranch: originalParams.sourceBranch,
@@ -1338,6 +1348,7 @@ async function resumeWorkflowStepAgent(agentId, userMessage, lastAssistantConten
             label: "workflow-dispatch",
             agentSlots: ctx.agentSlots,
             sessionId: result.vmId,
+            agentType: ctx.agentType,
             workflowId: originalParams.workflowId,
             stepId: originalParams.stepId,
             conversationId: originalParams.conversationId ?? agentId,

package/dist/orchestrator/billing-detect.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Billing / usage-limit error detection shared by all agent stream extractors.
+ *
+ * The patterns are generic English phrasings that cover Anthropic ("credit
+ * balance", "limit will reset"), OpenAI ("insufficient_quota", "exceeded your
+ * current quota") and OpenRouter-style wording, so the same detector works for
+ * Claude Code, Codex and OpenCode output.
+ */
+/** True when any of the given texts matches a billing/quota-exhaustion pattern. */
+export declare function matchesBillingPatterns(texts: Array<string | null | undefined>): boolean;
+/**
+ * Extract the usage-limit reset timestamp from error text.
+ * Handles multiple formats:
+ *   - "reset at 2026-03-08T15:00:00+00:00" (ISO datetime)
+ *   - "resets 7pm (Europe/Paris)" (time + timezone)
+ *   - "resets in 2 hours" (relative duration)
+ * Returns an ISO string if a valid future timestamp is found, otherwise null.
+ */
+export declare function extractResetTimestampFromTexts(texts: Array<string | null | undefined>): string | null;
+//# sourceMappingURL=billing-detect.d.ts.map

package/dist/orchestrator/billing-detect.js

@@ -0,0 +1,120 @@
+/**
+ * Billing / usage-limit error detection shared by all agent stream extractors.
+ *
+ * The patterns are generic English phrasings that cover Anthropic ("credit
+ * balance", "limit will reset"), OpenAI ("insufficient_quota", "exceeded your
+ * current quota") and OpenRouter-style wording, so the same detector works for
+ * Claude Code, Codex and OpenCode output.
+ */
+const BILLING_PATTERNS = [
+    /credit.{0,20}balance/i,
+    /insufficient.{0,20}(?:credit|fund|balance|quota)/i,
+    /exceed.{0,20}(?:quota|budget|limit)/i,
+    /usage.{0,20}limit.{0,20}reached/i,
+    /limit.{0,20}(?:will )?reset/i,
+    /(?:hit|reached).{0,10}(?:your )?limit/i,
+    /billing/i,
+    /payment.{0,20}(?:required|failed|method)/i,
+    /account.{0,20}(?:suspended|deactivated)/i,
+    /out of (?:credit|token)/i,
+];
+/** True when any of the given texts matches a billing/quota-exhaustion pattern. */
+export function matchesBillingPatterns(texts) {
+    const candidates = texts.filter(Boolean);
+    return candidates.some((text) => BILLING_PATTERNS.some((re) => re.test(text)));
+}
+/**
+ * Extract the usage-limit reset timestamp from error text.
+ * Handles multiple formats:
+ *   - "reset at 2026-03-08T15:00:00+00:00" (ISO datetime)
+ *   - "resets 7pm (Europe/Paris)" (time + timezone)
+ *   - "resets in 2 hours" (relative duration)
+ * Returns an ISO string if a valid future timestamp is found, otherwise null.
+ */
+export function extractResetTimestampFromTexts(texts) {
+    const candidates = texts.filter(Boolean);
+    for (const text of candidates) {
+        // Pattern 1: "reset at <ISO datetime>"
+        const isoMatch = /reset\s+at\s+(.+?)(?:\.|$)/i.exec(text);
+        if (isoMatch) {
+            const dateStr = isoMatch[1].trim();
+            const parsed = new Date(dateStr);
+            if (!Number.isNaN(parsed.getTime()) && parsed.getTime() > Date.now()) {
+                return parsed.toISOString();
+            }
+        }
+        // Pattern 2: "resets 7pm (Europe/Paris)" or "resets 19:00 (Europe/Paris)"
+        const tzMatch = /resets?\s+(\d{1,2})(?::(\d{2}))?\s*(am|pm)?\s*\(([^)]+)\)/i.exec(text);
+        if (tzMatch) {
+            const result = resolveTimeInTimezone(tzMatch[1], tzMatch[2], tzMatch[3], tzMatch[4]);
+            if (result)
+                return result;
+        }
+        // Pattern 3: "resets in 2 hours" or "resets in 30 minutes"
+        const relMatch = /resets?\s+in\s+(\d+)\s*(hour|hr|minute|min)s?/i.exec(text);
+        if (relMatch) {
+            const amount = parseInt(relMatch[1], 10);
+            const unit = relMatch[2].toLowerCase();
+            const ms = unit.startsWith("hour") || unit === "hr"
+                ? amount * 3600_000
+                : amount * 60_000;
+            const future = new Date(Date.now() + ms);
+            return future.toISOString();
+        }
+    }
+    return null;
+}
+/**
+ * Resolve a time-of-day (e.g. "7pm") in a named timezone to an ISO string.
+ * Uses Intl.DateTimeFormat to avoid external dependencies.
+ */
+function resolveTimeInTimezone(hourStr, minuteStr, ampm, timezone) {
+    try {
+        let hour = parseInt(hourStr, 10);
+        const minute = minuteStr ? parseInt(minuteStr, 10) : 0;
+        if (ampm) {
+            const isPm = ampm.toLowerCase() === "pm";
+            if (isPm && hour < 12)
+                hour += 12;
+            if (!isPm && hour === 12)
+                hour = 0;
+        }
+        // Get current date in the target timezone
+        const now = new Date();
+        const formatter = new Intl.DateTimeFormat("en-US", {
+            timeZone: timezone,
+            year: "numeric",
+            month: "2-digit",
+            day: "2-digit",
+            hour: "2-digit",
+            minute: "2-digit",
+            hour12: false,
+        });
+        const parts = formatter.formatToParts(now);
+        const get = (type) => parseInt(parts.find((p) => p.type === type)?.value ?? "0", 10);
+        const tzYear = get("year");
+        const tzMonth = get("month");
+        const tzDay = get("day");
+        const tzHour = get("hour");
+        const tzMinute = get("minute");
+        // Build target time in the timezone's "local" frame
+        // Then compute the UTC offset to convert to absolute time
+        const localNowMs = Date.UTC(tzYear, tzMonth - 1, tzDay, tzHour, tzMinute);
+        const offsetMs = localNowMs - now.getTime();
+        // Target time today in timezone-local frame
+        let targetLocalMs = Date.UTC(tzYear, tzMonth - 1, tzDay, hour, minute);
+        // If already past, try tomorrow
+        if (targetLocalMs - offsetMs <= now.getTime()) {
+            targetLocalMs += 86_400_000;
+        }
+        const result = new Date(targetLocalMs - offsetMs);
+        if (result.getTime() > Date.now()) {
+            return result.toISOString();
+        }
+    }
+    catch {
+        // Invalid timezone or parse error — fall through
+    }
+    return null;
+}
+//# sourceMappingURL=billing-detect.js.map

package/dist/orchestrator/codex-jsonl-extractor.d.ts

@@ -0,0 +1,52 @@
+import type { AgentStreamExtractor, QuestionData, ToolActivityData, TokenUsageData } from "./stream-json-extractor.js";
+/**
+ * Extracts normalized events from Codex CLI's `codex exec --json` output.
+ *
+ * Codex emits newline-delimited JSON "thread events":
+ *   {"type":"thread.started","thread_id":"..."}
+ *   {"type":"turn.started"}
+ *   {"type":"item.started"|"item.updated"|"item.completed","item":{...}}
+ *   {"type":"turn.completed","usage":{"input_tokens":N,"cached_input_tokens":N,"output_tokens":N}}
+ *   {"type":"turn.failed","error":{...}} / {"type":"error","message":"..."}
+ *
+ * Item types: agent_message (text), reasoning, command_execution,
+ * file_change, mcp_tool_call, web_search, todo_list.
+ *
+ * Exposes the same callback surface as StreamJsonExtractor so the spawn
+ * pipeline (StreamBatcher → Socket.io) is unchanged. Codex has no equivalent
+ * of Claude's AskUserQuestion tool — structured questions reach the Cloud via
+ * the forge_ask_human MCP tool instead, so onQuestion is never called here.
+ */
+export declare class CodexJsonlExtractor implements AgentStreamExtractor {
+    private readonly onText;
+    private lineBuf;
+    /** Emitted text length per agent_message item id (suffix dedup). */
+    private readonly emittedTextLengths;
+    /** Item ids already reported as tool activity. */
+    private readonly emittedActivityIds;
+    /** Whether any text was emitted (to separate consecutive messages). */
+    private hasEmittedText;
+    turnIndex: number;
+    lastError: string | null;
+    /** Codex thread id from thread.started — usable with `codex exec resume`. */
+    threadId: string | null;
+    private inputTokens;
+    private outputTokens;
+    private readonly onToolActivity?;
+    private readonly onTokenUsage?;
+    private readonly sessionId?;
+    constructor(onText: (delta: string) => void, _onQuestion?: (questions: QuestionData[]) => void, onToolActivity?: (activity: ToolActivityData) => void, onTokenUsage?: (usage: TokenUsageData) => void, sessionId?: string);
+    write(data: string): void;
+    flush(): void;
+    private parseLine;
+    private handleUsage;
+    private captureError;
+    private handleItem;
+    /** Emit only the not-yet-emitted suffix of an item's text. */
+    private emitTextDelta;
+    private emitActivityOnce;
+    private emitMcpToolCall;
+    isBillingError(extraText?: string): boolean;
+    extractResetTimestamp(extraText?: string): string | null;
+}
+//# sourceMappingURL=codex-jsonl-extractor.d.ts.map