@hearsay-tools/squawk 0.0.0-stage → 0.17.0-pr3058.5683

package/dist/core/codex-hook-mapper.js

@@ -0,0 +1,73 @@
+/**
+ * `hook/completed` → the hook item (hearsay-tools/cezarion#961): the entry
+ * list, the joined status message, the optional source/duration fields, and
+ * the subagent nesting via `collabParentItemId`.
+ */
+import { hookEventName, isVisibleHookItem } from './hook-items.js';
+import { isRecord, number as num } from './pi-rpc-wire.js';
+export const HOOK_STATUS = {
+    completed: 'completed',
+    failed: 'failed',
+    blocked: 'blocked',
+    stopped: 'cancelled',
+};
+const HOOK_ENTRY_KINDS = new Set(['context', 'feedback', 'warning', 'error', 'stop']);
+/** `hook/completed` → one hook item
+ *  (hearsay-tools/cezarion#961). `run.entries` already are what the agent
+ *  received; `statusMessage` joins them unless an entry already says it. */
+function mapHookCompleted(params, state) {
+    const run = isRecord(params.run) ? params.run : undefined;
+    const id = str(run?.id);
+    const eventName = str(run?.eventName);
+    const status = typeof run?.status === 'string' ? HOOK_STATUS[run.status] : undefined;
+    if (!run || id === undefined || eventName === undefined || status === undefined)
+        return [];
+    const entries = hookEntries(run, status);
+    const item = hookItem(run, id, eventName, status, entries, params, state);
+    return isVisibleHookItem(item) ? [{ type: 'item.completed', item }] : [];
+}
+/** The agent-visible entry list: the run's own entries, then `statusMessage`
+ *  joined as a warning/error unless an entry already says it. */
+function hookEntries(run, status) {
+    const entries = [];
+    for (const raw of Array.isArray(run.entries) ? run.entries : []) {
+        if (!isRecord(raw) || typeof raw.text !== 'string' || raw.text.trim() === '')
+            continue;
+        const kind = raw.kind;
+        if (HOOK_ENTRY_KINDS.has(kind))
+            entries.push({ kind, text: raw.text });
+    }
+    const message = str(run.statusMessage)?.trim();
+    if (message && !entries.some((entry) => entry.text.trim() === message)) {
+        entries.push({ kind: status === 'completed' ? 'warning' : 'error', text: message });
+    }
+    return entries;
+}
+/** Assemble the hook item with its optional source, duration and subagent
+ *  nesting. */
+function hookItem(run, id, eventName, status, entries, params, state) {
+    const item = { kind: 'hook', id: `hook_${id}`, event: hookEventName(eventName), status, entries };
+    const source = str(run.sourcePath);
+    if (source !== undefined)
+        item.source = source;
+    const durationMs = num(run.durationMs);
+    if (durationMs !== undefined)
+        item.durationMs = durationMs;
+    const parentItemId = collabParentItemId(params, state);
+    if (parentItemId !== undefined)
+        item.parentItemId = parentItemId;
+    return item;
+}
+function collabParentItemId(params, state) {
+    const threadId = threadIdOf(params);
+    return threadId ? state.collabTasks.get(threadId)?.itemId : undefined;
+}
+function threadIdOf(params) {
+    const thread = isRecord(params.thread) ? params.thread : undefined;
+    return (thread && str(thread.id)) ?? str(params.threadId);
+}
+function str(value) {
+    return typeof value === 'string' && value !== '' ? value : undefined;
+}
+export { mapHookCompleted, collabParentItemId, threadIdOf };
+//# sourceMappingURL=codex-hook-mapper.js.map

package/dist/core/codex-hook-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hook-mapper.js","sourceRoot":"","sources":["../../src/core/codex-hook-mapper.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,CAAC,MAAM,WAAW,GAAyC;IAC/D,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,WAAW;CACrB,CAAC;AACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAErG;;4EAE4E;AAC5E,SAAS,gBAAgB,CAAC,MAA+B,EAAE,KAAyB;IAClF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC3F,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1E,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;iEACiE;AACjE,SAAS,WAAW,CAAC,GAA4B,EAAE,MAAkB;IACnE,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACvF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAqB,CAAC;QACvC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;eACe;AACf,SAAS,QAAQ,CACf,GAA4B,EAC5B,EAAU,EACV,SAAiB,EACjB,MAAkB,EAClB,OAA8B,EAC9B,MAA+B,EAC/B,KAAyB;IAEzB,MAAM,IAAI,GAAe,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC9G,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAC/C,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC3D,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA+B,EAAE,KAAyB;IACpF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,MAA+B;IACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC"}

package/dist/core/codex-model-catalog.d.ts

@@ -0,0 +1,10 @@
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { ModelOption } from './runner-model-catalog.ts';
+export interface CodexModelDiscoveryOptions {
+    cwd: string;
+    bin?: string;
+    timeoutMs?: number;
+    spawn?: (bin: string, cwd: string) => ChildProcessWithoutNullStreams;
+}
+/** Discover the visible catalog exposed by the authenticated host Codex CLI. */
+export declare function discoverCodexModels(options: CodexModelDiscoveryOptions): Promise<ModelOption[]>;

package/dist/core/codex-model-catalog.js

@@ -0,0 +1,110 @@
+import { z } from 'zod';
+import { readNdjson } from './ndjson.js';
+import { CodexAppServerRpc, endCodexAppServer, resolveCodexExecutable, spawnCodexAppServer, } from './codex-app-server-transport.js';
+const modelSchema = z.object({
+    model: z.string(),
+    displayName: z.string().optional(),
+    description: z.string().optional(),
+    hidden: z.boolean().optional(),
+}).passthrough();
+const pageSchema = z.object({
+    data: z.array(modelSchema),
+    nextCursor: z.string().nullable().optional(),
+}).passthrough();
+const DEFAULT_DISCOVERY_TIMEOUT_MS = 5_000;
+const MAX_MODEL_PAGES = 25;
+const MAX_MODELS = 500;
+/** Discover the visible catalog exposed by the authenticated host Codex CLI. */
+export async function discoverCodexModels(options) {
+    const child = (options.spawn ?? spawnCodexAppServer)(resolveCodexExecutable(options.bin), options.cwd);
+    const rpc = new CodexAppServerRpc(child);
+    let readerError;
+    const reader = (async () => {
+        try {
+            for await (const line of readNdjson(child.stdout)) {
+                let message;
+                try {
+                    message = JSON.parse(line);
+                }
+                catch {
+                    throw new Error('Codex model discovery returned malformed NDJSON');
+                }
+                rpc.dispatchResponse(message);
+            }
+        }
+        catch (error) {
+            readerError = error instanceof Error ? error : new Error(String(error));
+            rpc.rejectPending(readerError.message);
+        }
+    })();
+    const exited = new Promise((_, reject) => {
+        const fail = (detail) => {
+            const error = new Error(detail);
+            rpc.rejectPending(error.message);
+            reject(error);
+        };
+        child.once('error', () => fail('Codex model discovery child failed'));
+        child.once('exit', (code) => fail(`Codex model discovery child exited (${code ?? 'unknown'})`));
+    });
+    const timeoutMs = options.timeoutMs ?? DEFAULT_DISCOVERY_TIMEOUT_MS;
+    let timeout;
+    const deadline = new Promise((_, reject) => {
+        timeout = setTimeout(() => {
+            const error = new Error('Codex model discovery timed out');
+            rpc.rejectPending(error.message);
+            reject(error);
+        }, timeoutMs);
+        timeout.unref?.();
+    });
+    try {
+        return await Promise.race([
+            discoverPages(rpc),
+            exited,
+            deadline,
+        ]);
+    }
+    finally {
+        if (timeout)
+            clearTimeout(timeout);
+        endCodexAppServer(child);
+        void reader.catch(() => undefined);
+        if (readerError)
+            rpc.rejectPending(readerError.message);
+    }
+}
+async function discoverPages(rpc) {
+    await rpc.initialize();
+    const models = [];
+    const ids = new Set();
+    const cursors = new Set();
+    let cursor = null;
+    for (let pageNumber = 0; pageNumber < MAX_MODEL_PAGES; pageNumber += 1) {
+        const raw = await rpc.request('model/list', { cursor, includeHidden: false });
+        const parsed = pageSchema.safeParse(raw);
+        if (!parsed.success)
+            throw new Error('Codex model discovery returned malformed model data');
+        for (const model of parsed.data.data) {
+            const id = model.model.trim();
+            if (!id || model.hidden || ids.has(id))
+                continue;
+            if (models.length >= MAX_MODELS)
+                throw new Error('Codex model discovery exceeded the size limit');
+            ids.add(id);
+            models.push({
+                id,
+                label: model.displayName?.trim() || id,
+                description: model.description ?? '',
+            });
+        }
+        const nextCursor = parsed.data.nextCursor ?? null;
+        if (nextCursor === null)
+            return models;
+        if (!nextCursor || cursors.has(nextCursor)) {
+            throw new Error('Codex model discovery returned a cursor loop');
+        }
+        cursors.add(nextCursor);
+        cursor = nextCursor;
+    }
+    throw new Error('Codex model discovery exceeded the page limit');
+}
+//# sourceMappingURL=codex-model-catalog.js.map

package/dist/core/codex-model-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-model-catalog.js","sourceRoot":"","sources":["../../src/core/codex-model-catalog.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,iCAAiC,CAAC;AAUzC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAC3C,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IAC3E,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAClD,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,EACnC,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,WAA8B,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,OAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBACD,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,uCAAuC,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,4BAA4B,CAAC;IACpE,IAAI,OAAmC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC3D,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,aAAa,CAAC,GAAG,CAAC;YAClB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,WAAW;YAAE,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAsB;IACjD,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;IACvB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,MAAM,GAAkB,IAAI,CAAC;IAEjC,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,eAAe,EAAE,UAAU,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAE5F,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACjD,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAClG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE;gBACF,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE;gBACtC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;aACrC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QAClD,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QACvC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACnE,CAAC"}

package/dist/core/codex-native-frames.d.ts

@@ -0,0 +1,35 @@
+import type { CodexAppServerMessage } from './codex-app-server-transport.ts';
+/** One native NDJSON line, or undefined when it is not JSON. */
+export declare function parseNativeLine(line: string): CodexAppServerMessage | undefined;
+export declare function isServerRequest(msg: CodexAppServerMessage): boolean;
+/** After close, only passive output and, after natural exit, the final
+ *  outcome are drained, without restoring input authority. */
+export declare function drainsAfterClose(msg: CodexAppServerMessage, exitedWithInputOpen: () => boolean): boolean;
+export declare function isStaleTurnOutcome(msg: CodexAppServerMessage, activeTurnId: string | undefined): boolean;
+export declare function stringField(obj: Record<string, unknown>, key: string): string | undefined;
+export declare function turnIdOf(obj: Record<string, unknown>): string | undefined;
+/** A non-zero exit that is not cezar's own signal teardown still carries stderr. */
+export declare function sessionStderrIsUnexpected(exitCode: number | null, timedOut: boolean, terminatedByCezar: boolean): boolean;
+/** Startup died on a real non-signal exit, so the drained stderr owns the failure text. */
+export declare function startupCrashOwnsFailure(session: {
+    startupComplete: boolean;
+    timedOut: boolean;
+    terminatedByCezar: boolean;
+}, stderr: string, exitCode: number | null): boolean;
+/** 143/137, or a signal with no code, is the teardown cezar asked for. */
+export declare function cezarAskedForExit(exitCode: number | null, signalCode: NodeJS.Signals | null): boolean;
+export interface SessionExit {
+    timedOut: boolean;
+    terminatedByCezar: boolean;
+    exitCode: number | null;
+    signalCode: NodeJS.Signals | null;
+    limitMs: number;
+    stderrSummary: string;
+}
+/** The one event a settled exit emits before `done`, or the error it throws. `undefined` is a clean exit. */
+export declare function sessionExitEvent(exit: SessionExit): {
+    event: 'error' | 'note';
+    message: string;
+} | {
+    failure: string;
+} | undefined;

package/dist/core/codex-native-frames.js

@@ -0,0 +1,80 @@
+import { isSignalTerminationExit } from './agent-runner.js';
+/** Pure reads of native Codex app-server frames, for the session's stdout reader. */
+/** Notifications that only collect output; never dispatch control after close. */
+const PASSIVE_OUTPUT_METHODS = new Set([
+    'item/started', 'item/updated', 'item/completed', 'item/agentMessage/delta',
+    'item/reasoning/textDelta', 'item/reasoning/summaryDelta', 'item/reasoning/summaryTextDelta',
+    'item/commandExecution/outputDelta', 'thread/tokenUsage/updated', 'turn/plan/updated',
+    'hook/started', 'hook/completed',
+]);
+/** One native NDJSON line, or undefined when it is not JSON. */
+export function parseNativeLine(line) {
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function isServerRequest(msg) {
+    return typeof msg.method === 'string' && (typeof msg.id === 'number' || typeof msg.id === 'string');
+}
+function isTurnOutcome(method) {
+    return method === 'turn/completed' || method === 'turn/failed';
+}
+/** After close, only passive output and, after natural exit, the final
+ *  outcome are drained, without restoring input authority. */
+export function drainsAfterClose(msg, exitedWithInputOpen) {
+    if (msg.id !== undefined)
+        return false;
+    if (PASSIVE_OUTPUT_METHODS.has(msg.method ?? ''))
+        return true;
+    return exitedWithInputOpen() && isTurnOutcome(msg.method);
+}
+export function isStaleTurnOutcome(msg, activeTurnId) {
+    if (!isTurnOutcome(msg.method) || !activeTurnId)
+        return false;
+    const turnId = turnIdOf(msg.params ?? {});
+    return !!turnId && turnId !== activeTurnId;
+}
+export function stringField(obj, key) {
+    const v = obj[key];
+    return typeof v === 'string' ? v : undefined;
+}
+export function turnIdOf(obj) {
+    const turn = obj.turn;
+    return typeof turn?.id === 'string' ? turn.id : stringField(obj, 'turnId');
+}
+/** A non-zero exit that is not cezar's own signal teardown still carries stderr. */
+export function sessionStderrIsUnexpected(exitCode, timedOut, terminatedByCezar) {
+    return !timedOut && exitCode !== 0 && exitCode !== null && !(terminatedByCezar && isSignalTerminationExit(exitCode));
+}
+/** Startup died on a real non-signal exit, so the drained stderr owns the failure text. */
+export function startupCrashOwnsFailure(session, stderr, exitCode) {
+    return !session.startupComplete && !session.timedOut && !!stderr.trim() && exitCode !== null && exitCode !== 0
+        && !(session.terminatedByCezar && isSignalTerminationExit(exitCode));
+}
+/** 143/137, or a signal with no code, is the teardown cezar asked for. */
+export function cezarAskedForExit(exitCode, signalCode) {
+    return isSignalTerminationExit(exitCode) || (exitCode === null && signalCode !== null);
+}
+/** The one event a settled exit emits before `done`, or the error it throws. `undefined` is a clean exit. */
+export function sessionExitEvent(exit) {
+    if (exit.timedOut) {
+        const mins = Math.round((exit.limitMs / 60_000) * 10) / 10;
+        return { event: 'error', message: `codex app-server timed out after ${mins}m and was killed` };
+    }
+    // Our own EOF watchdog / cancel signal coming back as 143/137 — the
+    // teardown cezar asked for, not a codex failure (#703).
+    if (exit.terminatedByCezar && cezarAskedForExit(exit.exitCode, exit.signalCode)) {
+        const how = exit.exitCode === null ? exit.signalCode : `code ${exit.exitCode}`;
+        return { event: 'note', message: `codex app-server did not exit on its own after close; terminated by cezar (${how})` };
+    }
+    if (exit.exitCode === null && exit.signalCode !== null)
+        return { failure: `codex app-server was killed by signal ${exit.signalCode}` };
+    if (exit.exitCode !== 0 && exit.exitCode !== null) {
+        return { failure: `codex app-server exited with code ${exit.exitCode}${exit.stderrSummary ? ` — ${exit.stderrSummary}` : ''}` };
+    }
+    return undefined;
+}
+//# sourceMappingURL=codex-native-frames.js.map

package/dist/core/codex-native-frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-native-frames.js","sourceRoot":"","sources":["../../src/core/codex-native-frames.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,qFAAqF;AAErF,kFAAkF;AAClF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,yBAAyB;IAC3E,0BAA0B,EAAE,6BAA6B,EAAE,iCAAiC;IAC5F,mCAAmC,EAAE,2BAA2B,EAAE,mBAAmB;IACrF,cAAc,EAAE,gBAAgB;CACjC,CAAC,CAAC;AAEH,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;IAAC,CAAC;IACzD,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAA0B;IACxD,OAAO,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,OAAO,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,aAAa,CAAC;AACjE,CAAC;AAED;8DAC8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,GAA0B,EAAE,mBAAkC;IAC7F,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,mBAAmB,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAA0B,EAAE,YAAgC;IAC7F,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,MAAM,IAAI,MAAM,KAAK,YAAY,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAA4B,EAAE,GAAW;IACnE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAA4B;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAoC,CAAC;IACtD,OAAO,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CAAC,QAAuB,EAAE,QAAiB,EAAE,iBAA0B;IAC9G,OAAO,CAAC,QAAQ,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,uBAAuB,CACrC,OAAoF,EACpF,MAAc,EACd,QAAuB;IAEvB,OAAO,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,CAAC;WACzG,CAAC,CAAC,OAAO,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,QAAuB,EAAE,UAAiC;IAC1F,OAAO,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;AACzF,CAAC;AAWD,6GAA6G;AAC7G,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,oCAAoC,IAAI,kBAAkB,EAAE,CAAC;IACjG,CAAC;IACD,oEAAoE;IACpE,wDAAwD;IACxD,IAAI,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,8EAA8E,GAAG,GAAG,EAAE,CAAC;IAC1H,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,yCAAyC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;IACvI,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,qCAAqC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;IAClI,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/core/codex-permissions.d.ts

@@ -0,0 +1,6 @@
+export declare function codexPermissionOverrides(response: unknown, restrictNetwork: boolean): {
+    sandbox: string;
+} | {
+    sandbox?: never;
+};
+export declare function codexNetworkIsRestricted(response: Record<string, unknown>): boolean;

package/dist/core/codex-permissions.js

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+// Codex owns policy interpretation. Even requirements we do not recognize can
+// constrain permissions; only an explicit null proves the unmanaged case.
+const requirementsResponse = z.object({
+    requirements: z.null(),
+});
+export function codexPermissionOverrides(response, restrictNetwork) {
+    const parsed = requirementsResponse.safeParse(response);
+    if (parsed.success && parsed.data.requirements === null) {
+        // Full access keeps unmanaged container installs working when bubblewrap
+        // cannot create a UID map (#563). Never select it on an unknown policy.
+        return { sandbox: restrictNetwork ? 'workspace-write' : 'danger-full-access' };
+    }
+    // A managed default is a fallback, not a mandate to replace an allowed saved
+    // read-only profile on resume. Codex resolves both defaults and saved profiles.
+    return {};
+}
+export function codexNetworkIsRestricted(response) {
+    const parsed = z.object({ sandbox: z.discriminatedUnion('type', [
+            // Older app-server versions omit networkAccess on readOnly (restricted).
+            z.object({ type: z.literal('readOnly'), networkAccess: z.literal(false).optional() }),
+            z.object({ type: z.literal('workspaceWrite'), networkAccess: z.literal(false) }),
+            z.object({ type: z.literal('externalSandbox'), networkAccess: z.literal('restricted') }),
+        ]) }).safeParse(response);
+    return parsed.success;
+}
+//# sourceMappingURL=codex-permissions.js.map

package/dist/core/codex-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-permissions.js","sourceRoot":"","sources":["../../src/core/codex-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CAAC,QAAiB,EAAE,eAAwB;IAClF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACxD,yEAAyE;QACzE,wEAAwE;QACxE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACjF,CAAC;IACD,6EAA6E;IAC7E,gFAAgF;IAChF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAiC;IACxE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;YAC9D,yEAAyE;YACzE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;YACrF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;SACzF,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}

package/dist/core/codex-stream-error.d.ts

@@ -0,0 +1,2 @@
+/** Shared formatting for app-server error notifications (not JSON-RPC errors). */
+export declare function codexStreamError(params: Record<string, unknown>): string | undefined;

package/dist/core/codex-stream-error.js

@@ -0,0 +1,12 @@
+/** Shared formatting for app-server error notifications (not JSON-RPC errors). */
+export function codexStreamError(params) {
+    const error = params.error;
+    if (!error || typeof error !== 'object' || Array.isArray(error))
+        return undefined;
+    const { message, additionalDetails } = error;
+    if (typeof message !== 'string' || !message.trim())
+        return undefined;
+    const details = typeof additionalDetails === 'string' ? additionalDetails.trim() : '';
+    return details && details !== message.trim() ? `${message.trim()} — ${details}` : message.trim();
+}
+//# sourceMappingURL=codex-stream-error.js.map

package/dist/core/codex-stream-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-stream-error.js","sourceRoot":"","sources":["../../src/core/codex-stream-error.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,MAA+B;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,KAAgC,CAAC;IACxE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,OAAO,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,OAAO,OAAO,IAAI,OAAO,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AACnG,CAAC"}

package/dist/core/codex-turn-outcome.d.ts

@@ -0,0 +1,10 @@
+import type { StopReason } from './ui-events.ts';
+export declare const CODEX_TURN_STATUSES: readonly ['interrupted', 'failed'];
+export type CodexTurnStatus = (typeof CODEX_TURN_STATUSES)[number];
+/** App-server reports provider failures on turn/completed with turn.error
+ * and status=failed (#83). Keep v1 failure handling and v2 classification
+ * aligned; an empty successful turn still belongs to the normal waiting path. */
+export declare function codexTurnOutcome(method: string, params: Record<string, unknown>): {
+    stopReason: StopReason;
+    error?: string;
+};

package/dist/core/codex-turn-outcome.js

@@ -0,0 +1,35 @@
+export const CODEX_TURN_STATUSES = ['interrupted', 'failed'];
+const CODEX_TURN_STATUS = {
+    interrupted: CODEX_TURN_STATUSES[0],
+    failed: CODEX_TURN_STATUSES[1],
+};
+/** App-server reports provider failures on turn/completed with turn.error
+ * and status=failed (#83). Keep v1 failure handling and v2 classification
+ * aligned; an empty successful turn still belongs to the normal waiting path. */
+export function codexTurnOutcome(method, params) {
+    const turn = record(params.turn);
+    const message = errorMessage(turn.error) ?? errorMessage(params.error);
+    // Preserve the legacy turn/failed interrupt spelling. A provider error that
+    // mentions an interrupted stream is still an error on turn/completed.
+    if (turn.status === CODEX_TURN_STATUS.interrupted || (method === 'turn/failed' && /interrupt/i.test(message ?? ''))) {
+        // Legacy turn/failed still emits a v1 error unless cezar initiated teardown;
+        // only its v2 stop reason is cancelled. Keep that existing lifecycle bound.
+        return {
+            stopReason: 'cancelled',
+            ...(method === 'turn/failed' ? { error: message ?? 'codex turn failed' } : {}),
+        };
+    }
+    if (method === 'turn/failed' || turn.status === CODEX_TURN_STATUS.failed || message !== undefined) {
+        return { stopReason: 'error', error: message ?? 'codex turn failed' };
+    }
+    return { stopReason: 'end_turn' };
+}
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value : {};
+}
+function errorMessage(error) {
+    const message = typeof error === 'string' ? error : record(error).message;
+    return typeof message === 'string' && message.trim() !== '' ? message : undefined;
+}
+//# sourceMappingURL=codex-turn-outcome.js.map

package/dist/core/codex-turn-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-turn-outcome.js","sourceRoot":"","sources":["../../src/core/codex-turn-outcome.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAU,CAAC;AAGtE,MAAM,iBAAiB,GAA4C;IACjE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;CAC/B,CAAC;AAEF;;iFAEiF;AACjF,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,MAA+B;IAE/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,CAAC,WAAW,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACpH,6EAA6E;QAC7E,4EAA4E;QAC5E,OAAO;YACL,UAAU,EAAE,WAAW;YACvB,GAAG,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAClG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,mBAAmB,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IAC1E,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC"}

package/dist/core/codex-ui-mapper-state.d.ts

@@ -0,0 +1,84 @@
+/**
+ * The codex UI mapper's fold state: the per-channel reasoning accumulators,
+ * the collaboration task record, and the state the mapper threads from frame
+ * to frame. `codex-ui-mapper.ts` re-exports `ReasoningAccumulator` and
+ * `CodexUiMapperState`.
+ */
+import type { TokenUsage, UiToolItem } from './ui-events.ts';
+/** The two reasoning delta channels, accumulated separately — see
+ *  `CodexUiMapperState.reasonings`. */
+export interface ReasoningAccumulator {
+    /** `item/reasoning/textDelta` — the raw chain of thought. */
+    readonly text: string;
+    /** `item/reasoning/summaryDelta` + `summaryTextDelta` — the condensed summary. */
+    readonly summary: string;
+}
+export interface CodexCollabTask {
+    readonly itemId: string;
+    readonly prompt?: string;
+    readonly model?: string;
+}
+export interface CodexUiMapperState {
+    /** True once `session.started` was emitted (thread/started notification or
+     *  the runner's `codexSessionStarted` after the thread/start result —
+     *  whichever lands first wins; the other is deduplicated). */
+    readonly sessionStarted: boolean;
+    /** Fallback counter for turn frames that arrive without a wire turn id. */
+    readonly turnSeq: number;
+    readonly currentTurnId: string | null;
+    /** Fresh `tokenUsage.last` received while the current turn is active.
+     * Consumed exactly once by its matching turn end; cumulative `total` is
+     * never used as a persisted per-turn delta. */
+    readonly pendingTurnUsage: TokenUsage | null;
+    /** Item ids already introduced — a delta for an unknown id synthesizes an
+     *  `item.started` first so consumers always have something to upsert. */
+    readonly knownItems: ReadonlySet<string>;
+    /** Accumulated `outputDelta` text per commandExecution item, attached to
+     *  the final snapshot when the wire `item/completed` carries no output. */
+    readonly outputs: ReadonlyMap<string, string>;
+    /** Accumulated reasoning deltas per reasoning item, attached to the final
+     *  snapshot when the wire `item/completed` carries no `content`. Deltas are
+     *  live-only (never persisted), so without this the reasoning text is
+     *  unrecoverable on replay and the row reads back empty (#528).
+     *
+     *  Kept PER CHANNEL: `item/reasoning/textDelta` streams the raw chain of
+     *  thought while `summaryDelta`/`summaryTextDelta` stream the condensed
+     *  summary, and codex emits both when raw reasoning is enabled. One shared
+     *  bucket would concatenate the two into `"<raw CoT><summary>"` and persist
+     *  that garble over the clean wire `summary`.
+     *
+     *  Turn-scoped, and reset by `turn/started`: an interrupted item is never
+     *  completed, so without the reset its text would both leak into a later
+     *  turn that reuses the id and pin whole chains of thought in memory. */
+    readonly reasonings: ReadonlyMap<string, ReasoningAccumulator>;
+    /** True once `turn/plan/updated` has spoken IN THE CURRENT TURN. Both that
+     *  notification and the `plan`/`todoList` item arm write `plan.updated`, so
+     *  without a precedence rule the last frame wins and a prose plan item would
+     *  flatten the real checklist into one entry. The authoritative channel
+     *  latches this and the item arm stands down (see `mapItemLifecycle`).
+     *
+     *  Turn-scoped, and reset by `turn/started`: a plan belongs to a turn (hence
+     *  `turn/plan/updated`), so a latch that outlived its turn would gag the item
+     *  arm for the rest of the session and strand the dock on a stale checklist. */
+    readonly planFromNotification: boolean;
+    /** The open review-mode item's id, or `null` when review mode is not active.
+     *
+     *  Codex announces review mode as two disjoint frames (`enteredReviewMode`,
+     *  `exitedReviewMode`) with different ids. Mapped literally that is two
+     *  childless `task` items — which the Agents dock would read as two separate
+     *  sub-agents that each did nothing (spec
+     *  `.ai/specs/2026-07-20-grouped-subagent-display.md` §"Codex-mapper fix",
+     *  #474). This latch folds the pair into ONE item with a running→completed
+     *  lifecycle: the entered frame opens it, the exited frame completes that
+     *  same id. An unpaired exit falls back to its own item, so a stream that
+     *  starts mid-review still renders. */
+    readonly reviewItemId: string | null;
+    /** Child thread → stable task item created by a Codex collaboration spawn.
+     * Installed 0.144.6 uses `collabAgentToolCall`; newer protocol revisions use
+     * `collabToolCall`. Both carry the receiver ids used for child attribution. */
+    readonly collabTasks: ReadonlyMap<string, CodexCollabTask>;
+    /** Background spawn rows still running, keyed by item id (hearsay-tools/cezarion#2431): a
+     *  `subAgentActivity(kind: started)` child outlives the parent turn, so its row stays running
+     *  until the child's `subAgentActivity(kind: completed)`. */
+    readonly backgroundTasks: ReadonlyMap<string, UiToolItem>;
+}

package/dist/core/codex-ui-mapper-state.js

@@ -0,0 +1,8 @@
+/**
+ * The codex UI mapper's fold state: the per-channel reasoning accumulators,
+ * the collaboration task record, and the state the mapper threads from frame
+ * to frame. `codex-ui-mapper.ts` re-exports `ReasoningAccumulator` and
+ * `CodexUiMapperState`.
+ */
+export {};
+//# sourceMappingURL=codex-ui-mapper-state.js.map

package/dist/core/codex-ui-mapper-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-ui-mapper-state.js","sourceRoot":"","sources":["../../src/core/codex-ui-mapper-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/codex-ui-mapper.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Pure codex app-server JSON-RPC → protocol-v2 mapper. `mapCodexNotification`
+ * folds one parsed JSONL frame into `UiEvent`s plus the next mapper state;
+ * the runner calls it ALONGSIDE the v1 path (v1 events keep flowing
+ * unchanged).
+ *
+ * Contract: `.ai/analysis/cockpit-ui-redesign/agent-event-protocols.md` §3
+ * (wire format) and §7.1 "Codex (app-server)" (the mapping). Golden fixtures
+ * replaying wire-faithful frame sequences live in `__fixtures__/codex/`.
+ *
+ * Robustness rule: input is untrusted wire data — the mapper never throws;
+ * responses, server→client requests (handled by the session transport) and
+ * unknown methods map to zero events.
+ *
+ * State is explicit and treated as immutable: callers thread the returned
+ * `state` into the next call. Ids are deterministic — codex items and turns
+ * carry stable wire ids which are reused verbatim (`turn_<n>` is minted only
+ * when a turn frame arrives without one) — so replaying a stored transcript
+ * reproduces the exact event sequence.
+ *
+ * Status map (§7.1, kills v1's regex-on-status hack): `inProgress→running`,
+ * `completed→completed`, `failed→failed`, `declined→declined`.
+ */
+import type { CodexUiMapperState } from './codex-ui-mapper-state.ts';
+import type { ToolStatus, UiEvent } from './ui-events.ts';
+export type { CodexUiMapperState, ReasoningAccumulator } from './codex-ui-mapper-state.ts';
+export { HOOK_STATUS } from './codex-hook-mapper.ts';
+export interface CodexUiMapping {
+    events: UiEvent[];
+    state: CodexUiMapperState;
+}
+export declare function createCodexUiState(): CodexUiMapperState;
+/**
+ * Codex confirms the thread via the `thread/start`/`thread/resume` RESULT
+ * (a response frame the mapper cannot attribute), so the runner calls this
+ * once the thread id is known. Deduplicated against the `thread/started`
+ * notification — whichever arrives first emits `session.started`.
+ */
+export declare function codexSessionStarted(threadId: string, state: CodexUiMapperState): CodexUiMapping;
+/** Fold one parsed JSON-RPC frame into v2 events. Never throws. */
+export declare function mapCodexNotification(frame: unknown, state: CodexUiMapperState): CodexUiMapping;
+/** The §7.1 status map — the wire word wins; an item without one derives its
+ *  status from the lifecycle phase it arrived in. */
+export declare const STATUS_MAP: Readonly<Record<string, ToolStatus>>;