@i14ks/ccv 0.22.0 → 0.24.0

package/bundle/ccv.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
 // dist/ccv.js
-import { spawn as spawn3 } from "node:child_process";
+import { spawn as spawn4 } from "node:child_process";
 import { readFile as readFile17 } from "node:fs/promises";
-import path24 from "node:path";
+import path25 from "node:path";
 import { fileURLToPath } from "node:url";
 import { parseArgs } from "node:util";
 
@@ -145,10 +145,10 @@ function envDefaults() {
 
 // ../host/dist/server.js
 import { createServer } from "node:http";
-import { createReadStream, existsSync as existsSync4, statSync as statSync3 } from "node:fs";
-import path23 from "node:path";
-import { homedir as homedir6 } from "node:os";
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { createReadStream, existsSync as existsSync5, statSync as statSync4 } from "node:fs";
+import path24 from "node:path";
+import { homedir as homedir7 } from "node:os";
+import { randomUUID as randomUUID6 } from "node:crypto";
 import { WebSocketServer } from "ws";
 import { renameSession as renameSession2 } from "@anthropic-ai/claude-agent-sdk";
 
@@ -187,12 +187,12 @@ function hashText(text) {
 // ../host/dist/workspace-ids.js
 function workspaceIdRemap(paths, sessionsOf) {
   const byLegacy = /* @__PURE__ */ new Map();
-  for (const path25 of paths) {
-    const id = workspaceIdFromPath(path25);
-    for (const legacy of formerWorkspaceIdsFromPath(path25)) {
+  for (const path26 of paths) {
+    const id = workspaceIdFromPath(path26);
+    for (const legacy of formerWorkspaceIdsFromPath(path26)) {
       const group = byLegacy.get(legacy) ?? [];
       if (!group.some((target) => target.id === id))
-        group.push({ id, path: path25 });
+        group.push({ id, path: path26 });
       byLegacy.set(legacy, group);
     }
   }
@@ -223,7 +223,7 @@ function workspaceIdRemap(paths, sessionsOf) {
 }
 
 // ../host/dist/session.js
-import { EventEmitter } from "node:events";
+import { EventEmitter as EventEmitter2 } from "node:events";
 import { randomUUID } from "node:crypto";
 import path5 from "node:path";
 import { query, renameSession } from "@anthropic-ai/claude-agent-sdk";
@@ -787,6 +787,173 @@ var Journal = class {
   }
 };
 
+// ../host/dist/network-guard.js
+import { EventEmitter } from "node:events";
+import { request } from "node:https";
+import { networkInterfaces } from "node:os";
+var TRACE_URL = "https://api.anthropic.com/cdn-cgi/trace";
+var NETWORK_CHECK_MS = 5e3;
+var INTERFACES_POLL_MS = 1e3;
+var CHECK_TIMEOUT_MS = 4e3;
+var RETRY_DELAY_MS = 1e3;
+var NETWORK_FRESH_MS = 3e3;
+var UNCHECKED_REASON = "\u041C\u0430\u0440\u0448\u0440\u0443\u0442 \u0434\u043E Anthropic \u0435\u0449\u0451 \u043D\u0435 \u043F\u0440\u043E\u0432\u0435\u0440\u0435\u043D";
+var NetworkGuard = class extends EventEmitter {
+  #enabled = false;
+  #blocked = /* @__PURE__ */ new Set();
+  #state = {
+    status: "ok",
+    country: null,
+    reason: null,
+    checkedAt: null,
+    enabled: false
+  };
+  #checkTimer = null;
+  #interfacesTimer = null;
+  #interfaces = "";
+  #inFlight = null;
+  /** Растёт при каждой смене настроек: ответ проверки, начатой до неё, не применяется. */
+  #generation = 0;
+  get state() {
+    return { ...this.#state };
+  }
+  /** Почему агентам сейчас нельзя в сеть; `null` — можно. */
+  blockedReason() {
+    return this.#state.status === "blocked" ? this.#state.reason ?? UNCHECKED_REASON : null;
+  }
+  /**
+   * Применить настройки. Включение начинает с блока до первой проверки,
+   * выключение снимает блок сразу.
+   */
+  configure(enabled, blockedCountries) {
+    const countries = new Set(blockedCountries);
+    const same = enabled === this.#enabled && countries.size === this.#blocked.size && [...countries].every((c) => this.#blocked.has(c));
+    if (same)
+      return;
+    this.#generation += 1;
+    this.#blocked = countries;
+    const wasEnabled = this.#enabled;
+    this.#enabled = enabled;
+    if (!enabled) {
+      this.#stopTimers();
+      this.#apply({ status: "ok", country: this.#state.country, reason: null, checkedAt: null });
+      return;
+    }
+    if (!wasEnabled) {
+      this.#apply({ status: "blocked", country: null, reason: UNCHECKED_REASON, checkedAt: null });
+      this.#startTimers();
+    }
+    void this.check();
+  }
+  stop() {
+    this.#stopTimers();
+  }
+  /** Проверить сейчас. Параллельные вызовы делят одну проверку. */
+  check() {
+    if (!this.#enabled)
+      return Promise.resolve(this.state);
+    this.#inFlight ??= this.#runCheck().finally(() => {
+      this.#inFlight = null;
+    });
+    return this.#inFlight;
+  }
+  /** Проверить, если последняя проверка старше `NETWORK_FRESH_MS`. */
+  async ensureFresh() {
+    if (!this.#enabled)
+      return this.state;
+    const at = this.#state.checkedAt;
+    if (at !== null && Date.now() - at < NETWORK_FRESH_MS && !this.#inFlight)
+      return this.state;
+    return this.check();
+  }
+  async #runCheck() {
+    const generation = this.#generation;
+    let result = await traceCountry();
+    if (!result.ok && generation === this.#generation) {
+      await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY_MS));
+      result = await traceCountry();
+    }
+    if (generation !== this.#generation || !this.#enabled)
+      return this.state;
+    const checkedAt = Date.now();
+    if (!result.ok) {
+      this.#apply({
+        status: "blocked",
+        country: null,
+        reason: `\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u043F\u0440\u043E\u0432\u0435\u0440\u0438\u0442\u044C \u043C\u0430\u0440\u0448\u0440\u0443\u0442 \u0434\u043E Anthropic: ${result.error}`,
+        checkedAt
+      });
+    } else if (this.#blocked.has(result.country)) {
+      this.#apply({
+        status: "blocked",
+        country: result.country,
+        reason: `\u0417\u0430\u043F\u0440\u043E\u0441\u044B \u043A Anthropic \u0438\u0434\u0443\u0442 \u0438\u0437 ${result.country} \u2014 \u043F\u043E\u0445\u043E\u0436\u0435, VPN \u043D\u0435 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442`,
+        checkedAt
+      });
+    } else {
+      this.#apply({ status: "ok", country: result.country, reason: null, checkedAt });
+    }
+    return this.state;
+  }
+  #apply(next) {
+    const previous = this.#state;
+    this.#state = { ...next, enabled: this.#enabled };
+    const changed = previous.status !== next.status || previous.country !== next.country || previous.reason !== next.reason || previous.enabled !== this.#enabled;
+    if (changed)
+      this.emit("change", this.state);
+  }
+  #startTimers() {
+    this.#stopTimers();
+    this.#interfaces = interfacesSignature();
+    this.#checkTimer = setInterval(() => void this.check(), NETWORK_CHECK_MS);
+    this.#checkTimer.unref();
+    this.#interfacesTimer = setInterval(() => {
+      const signature = interfacesSignature();
+      if (signature === this.#interfaces)
+        return;
+      this.#interfaces = signature;
+      void this.check();
+    }, INTERFACES_POLL_MS);
+    this.#interfacesTimer.unref();
+  }
+  #stopTimers() {
+    if (this.#checkTimer)
+      clearInterval(this.#checkTimer);
+    if (this.#interfacesTimer)
+      clearInterval(this.#interfacesTimer);
+    this.#checkTimer = null;
+    this.#interfacesTimer = null;
+  }
+};
+var networkGuard = new NetworkGuard();
+function traceCountry() {
+  return new Promise((resolve) => {
+    const req = request(TRACE_URL, { method: "GET", agent: false, timeout: CHECK_TIMEOUT_MS, headers: { "cache-control": "no-store" } }, (res) => {
+      let body = "";
+      res.setEncoding("utf8");
+      res.on("data", (chunk) => {
+        body += chunk;
+        if (body.length > 16e3)
+          req.destroy(new Error("\u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0434\u043B\u0438\u043D\u043D\u044B\u0439 \u043E\u0442\u0432\u0435\u0442"));
+      });
+      res.on("end", () => {
+        const country = /^loc=([A-Z]{2})$/m.exec(body)?.[1];
+        if (res.statusCode === 200 && country)
+          resolve({ ok: true, country });
+        else
+          resolve({ ok: false, error: `\u043D\u0435\u043E\u0436\u0438\u0434\u0430\u043D\u043D\u044B\u0439 \u043E\u0442\u0432\u0435\u0442 (HTTP ${res.statusCode ?? "\u2014"})` });
+      });
+      res.on("error", (error) => resolve({ ok: false, error: error.message }));
+    });
+    req.on("timeout", () => req.destroy(new Error("\u043D\u0435\u0442 \u043E\u0442\u0432\u0435\u0442\u0430")));
+    req.on("error", (error) => resolve({ ok: false, error: error.message }));
+    req.end();
+  });
+}
+function interfacesSignature() {
+  return Object.entries(networkInterfaces()).map(([name, addresses]) => `${name}:${(addresses ?? []).map((a) => a.address).sort().join(",")}`).sort().join("|");
+}
+
 // ../host/dist/settings.js
 import { readFile as readFile3 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
@@ -1176,7 +1343,7 @@ var INTERRUPT_SETTLE_MS = 15e3;
 var TASK_STOP_TIMEOUT_MS = 5e3;
 var TASK_WAKE_MS = 5e3;
 var CONTEXT_MIN_INTERVAL_MS = 5e3;
-var ClaudeSession = class extends EventEmitter {
+var ClaudeSession = class extends EventEmitter2 {
   id;
   workspaceId;
   cwd;
@@ -1484,6 +1651,8 @@ var ClaudeSession = class extends EventEmitter {
    * умолчанию) — обычное поведение, ничего не меняется.
    */
   #spawn(restarted, resumeAt) {
+    if (this.#refuseOffRoute())
+      return;
     const options2 = {
       cwd: this.cwd,
       // Без этого SDK не читает с диска ничего: ни CLAUDE.md, ни кастомные
@@ -1668,6 +1837,56 @@ var ClaudeSession = class extends EventEmitter {
     this.#query = null;
     this.#resetTasks();
   }
+  /**
+   * Погасить процесс CLI, не закрывая сессию: упал VPN (см. network-guard.ts).
+   *
+   * Идущий ход обрывается вместе с процессом, отложенное переподключение
+   * отменяется, накопленные для повтора промпты забываются — повторить их сам
+   * хост не вправе, решать человеку. Разговор цел: следующий промпт после
+   * возвращения VPN поднимет процесс, продолжающий ту же сессию.
+   */
+  suspend(reason) {
+    if (this.#closing || this.#state === "closed")
+      return;
+    if (this.#reconnectTimer) {
+      clearTimeout(this.#reconnectTimer);
+      this.#reconnectTimer = null;
+    }
+    this.#pendingRetry = [];
+    if (!this.#query) {
+      if (this.#state === "reconnecting")
+        this.#setState("error");
+      return;
+    }
+    const busy = this.#state !== "idle";
+    this.#teardown(reason);
+    this.#inbox = new AsyncQueue();
+    this.#streamMessageId = null;
+    this.#blockCounts.clear();
+    if (busy)
+      this.#lastTurn = "interrupted";
+    this.#record({
+      kind: "error",
+      message: `${reason}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Claude \u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D${busy ? ", \u0445\u043E\u0434 \u043F\u0440\u0435\u0440\u0432\u0430\u043D" : ""}. \u0420\u0430\u0437\u0433\u043E\u0432\u043E\u0440 \u0441\u043E\u0445\u0440\u0430\u043D\u0451\u043D \u2014 \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F, \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u0438 \u0441\u0435\u0441\u0441\u0438\u044F \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442.`
+    });
+    this.#setState("error");
+  }
+  /**
+   * Нет VPN — процесс не поднимаем: пишем об этом в ленту и оставляем сессию
+   * без процесса. Следующий промпт попробует снова.
+   */
+  #refuseOffRoute() {
+    const blocked = networkGuard.blockedReason();
+    if (!blocked)
+      return false;
+    this.#pendingRetry = [];
+    this.#record({
+      kind: "error",
+      message: `${blocked}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Claude \u043D\u0435 \u0437\u0430\u043F\u0443\u0449\u0435\u043D \u2014 \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F.`
+    });
+    this.#setState("error");
+    return true;
+  }
   // -------------------------------------------------------------------------
   // Переподключение
   // -------------------------------------------------------------------------
@@ -1697,6 +1916,8 @@ var ClaudeSession = class extends EventEmitter {
       clearTimeout(this.#reconnectTimer);
       this.#reconnectTimer = null;
     }
+    if (this.#refuseOffRoute())
+      return;
     this.#setState("reconnecting");
     this.#teardown("\u043F\u0435\u0440\u0435\u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0435\u043D\u0438\u0435");
     this.#inbox = new AsyncQueue();
@@ -1751,6 +1972,9 @@ var ClaudeSession = class extends EventEmitter {
   sendPrompt(text, images, service = false) {
     if (this.#closing)
       throw new Error("session is closed");
+    const blocked = networkGuard.blockedReason();
+    if (blocked)
+      throw new Error(`${blocked}. \u041F\u0440\u043E\u043C\u043F\u0442 \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D.`);
     this.#record({ kind: "user.message", text, images });
     if (!service && (!this.#title || this.#titleIsDefault)) {
       this.#title = text.slice(0, 80);
@@ -1788,6 +2012,9 @@ var ClaudeSession = class extends EventEmitter {
   async editPrompt(userIndex, text, images) {
     if (this.#closing)
       throw new Error("session is closed");
+    const blocked = networkGuard.blockedReason();
+    if (blocked)
+      throw new Error(`${blocked}. \u041F\u0440\u0430\u0432\u043A\u0430 \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D\u0430.`);
     if (this.#state === "running")
       await this.interrupt();
     const source = this.#claudeSessionId ?? this.#options.resume;
@@ -2905,7 +3132,7 @@ function contentToText2(content) {
 }
 
 // ../host/dist/antigravity-session.js
-import { EventEmitter as EventEmitter2 } from "node:events";
+import { EventEmitter as EventEmitter3 } from "node:events";
 import { spawn as spawn2, execFile as execFile3 } from "node:child_process";
 import { randomUUID as randomUUID2 } from "node:crypto";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "node:fs/promises";
@@ -3125,7 +3352,7 @@ function agyContextWindow(model) {
 
 // ../host/dist/antigravity-session.js
 var TRANSIENT = /* @__PURE__ */ new Set(["assistant.delta", "thinking.delta", "state"]);
-var AntigravitySession = class extends EventEmitter2 {
+var AntigravitySession = class extends EventEmitter3 {
   id;
   workspaceId;
   cwd;
@@ -3265,6 +3492,8 @@ var AntigravitySession = class extends EventEmitter2 {
     }
     this.#capabilities = this.#baseCapabilities();
     this.emit("capabilities");
+    if (this.#refuseOffRoute())
+      return;
     void agyModels(this.#executable).then((models) => {
       if (!this.#capabilities || models.length === 0)
         return;
@@ -3323,6 +3552,8 @@ var AntigravitySession = class extends EventEmitter2 {
   #spawn() {
     if (!this.#executable || this.#closing)
       return;
+    if (this.#refuseOffRoute())
+      return;
     let child;
     try {
       child = spawn2(this.#executable, this.#args(), {
@@ -3420,12 +3651,48 @@ var AntigravitySession = class extends EventEmitter2 {
   reconnect(_reason) {
     this.#restart();
   }
+  /**
+   * Погасить процесс `agy`, не закрывая сессию: упал VPN (см.
+   * network-guard.ts). Следующий промпт после его возвращения поднимет
+   * процесс на том же разговоре.
+   */
+  suspend(reason) {
+    if (this.#closing || this.#state === "closed" || !this.#child)
+      return;
+    const busy = this.#pendingTurns > 0;
+    this.#restartPending = false;
+    this.#kill();
+    this.#closeOpenSteps();
+    this.#pendingTurns = 0;
+    if (busy)
+      this.#lastTurn = "interrupted";
+    this.#record_({
+      kind: "error",
+      message: `${reason}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Antigravity \u043E\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D${busy ? ", \u0445\u043E\u0434 \u043F\u0440\u0435\u0440\u0432\u0430\u043D" : ""}. \u0420\u0430\u0437\u0433\u043E\u0432\u043E\u0440 \u0441\u043E\u0445\u0440\u0430\u043D\u0451\u043D \u2014 \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F, \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u0438 \u0441\u0435\u0441\u0441\u0438\u044F \u043F\u0440\u043E\u0434\u043E\u043B\u0436\u0438\u0442.`
+    });
+    this.#setState("error");
+  }
+  /** Нет VPN — процесс не поднимаем, пишем об этом в ленту. */
+  #refuseOffRoute() {
+    const blocked = networkGuard.blockedReason();
+    if (!blocked)
+      return false;
+    this.#record_({
+      kind: "error",
+      message: `${blocked}. \u041F\u0440\u043E\u0446\u0435\u0441\u0441 Antigravity \u043D\u0435 \u0437\u0430\u043F\u0443\u0449\u0435\u043D \u2014 \u043E\u0442\u043F\u0440\u0430\u0432\u044C\u0442\u0435 \u043F\u0440\u043E\u043C\u043F\u0442, \u043A\u043E\u0433\u0434\u0430 VPN \u0432\u0435\u0440\u043D\u0451\u0442\u0441\u044F.`
+    });
+    this.#setState("error");
+    return true;
+  }
   // -------------------------------------------------------------------------
   // Ввод
   // -------------------------------------------------------------------------
   sendPrompt(text, images) {
     if (this.#closing)
       throw new Error("session is closed");
+    const blocked = networkGuard.blockedReason();
+    if (blocked)
+      throw new Error(`${blocked}. \u041F\u0440\u043E\u043C\u043F\u0442 \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D.`);
     const command = /^\/([\w-]+)(?:\s+([\s\S]*))?$/.exec(text.trim());
     if (command && AGY_CLI_COMMANDS.has(command[1]) && (!images || images.length === 0)) {
       void this.#runCliCommand(text, command[1], command[2]?.trim() ?? "");
@@ -3642,7 +3909,7 @@ Attached image${paths.length > 1 ? "s" : ""} (view them with your file viewing t
   }
   /** Квота `agy` (`/usage`) — общая на аккаунт, кэш один на хост. */
   async refreshUsage(force = false) {
-    if (!this.#executable)
+    if (!this.#executable || networkGuard.blockedReason())
       return;
     const usage = await agyUsage(this.#executable, force);
     if (!usage)
@@ -3820,148 +4087,995 @@ Attached image${paths.length > 1 ? "s" : ""} (view them with your file viewing t
         message: `Antigravity \u043E\u0442\u043A\u043B\u043E\u043D\u0438\u043B \u0431\u0435\u0437 \u0432\u043E\u043F\u0440\u043E\u0441\u0430: ${[...new Set(denied)].join(", ")}. \u0412 headless-\u0440\u0435\u0436\u0438\u043C\u0435 agy \u043D\u0435 \u0443\u043C\u0435\u0435\u0442 \u0441\u043F\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044C \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043D\u0438\u0435: \u043F\u0440\u0430\u0432\u043A\u0438 \u0444\u0430\u0439\u043B\u043E\u0432 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043C acceptEdits, \u043A\u043E\u043C\u0430\u043D\u0434\u044B \u0438 \u0432\u0441\u0451 \u043E\u0441\u0442\u0430\u043B\u044C\u043D\u043E\u0435 \u2014 bypassPermissions. \u041E\u0442\u0434\u0435\u043B\u044C\u043D\u044B\u0435 \u043A\u043E\u043C\u0430\u043D\u0434\u044B \u043C\u043E\u0436\u043D\u043E \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044C \u043F\u0440\u0430\u0432\u0438\u043B\u043E\u043C \u0432 permissions.allow \u0444\u0430\u0439\u043B\u0430 ~/.gemini/antigravity-cli/settings.json, \u043D\u0430\u043F\u0440\u0438\u043C\u0435\u0440 command(npm test).`
       });
     }
-    if (!ok && result.error)
-      this.#record_({ kind: "error", message: result.error });
-    this.#record_({
+    if (!ok && result.error)
+      this.#record_({ kind: "error", message: result.error });
+    this.#record_({
+      kind: "result",
+      subtype: ok ? "success" : "error",
+      isError: !ok,
+      durationMs: Math.round((result.duration_seconds ?? 0) * 1e3),
+      costUsd: null,
+      usage,
+      contextTokens: this.#contextTokens,
+      text: result.response ?? null
+    });
+    this.#emitContext();
+    void this.refreshUsage(true);
+    this.#lastTurn = ok ? "completed" : "failed";
+    this.#pendingTurns = Math.max(0, this.#pendingTurns - 1);
+    if (this.#pendingTurns > 0)
+      return;
+    if (this.#restartPending)
+      this.#restart();
+    this.#setState("idle");
+  }
+  /** Незакрытые шаги оборванного хода: текст — в ленту, инструменты — с ошибкой. */
+  #closeOpenSteps() {
+    const prefix = this.#record.conversationId ?? this.id;
+    for (const [index, text] of this.#texts) {
+      if (text)
+        this.#record_({ kind: "assistant.text", text, blockId: `${prefix}:${index}` });
+    }
+    for (const index of this.#tools) {
+      this.#record_({
+        kind: "tool.result",
+        toolUseId: `${prefix}:${index}`,
+        content: "\u041F\u0440\u0435\u0440\u0432\u0430\u043D\u043E",
+        isError: true
+      });
+    }
+    this.#texts.clear();
+    this.#thinking.clear();
+    this.#tools.clear();
+  }
+  // -------------------------------------------------------------------------
+  #record_(event) {
+    this.#updatedAt = Date.now();
+    const entry = this.journal.append(event);
+    this.emit("event", entry);
+    if (TRANSIENT.has(event.kind))
+      return;
+    this.#unsaved.push({ ts: entry.ts, event });
+    this.#scheduleFlush();
+  }
+  #scheduleFlush() {
+    if (this.#flushTimer)
+      return;
+    this.#flushTimer = setTimeout(() => this.#flush(), 500);
+    this.#flushTimer.unref?.();
+  }
+  #flush() {
+    if (this.#flushTimer) {
+      clearTimeout(this.#flushTimer);
+      this.#flushTimer = null;
+    }
+    const batch = this.#unsaved;
+    this.#unsaved = [];
+    this.#record.updatedAt = this.#updatedAt;
+    void this.#store.appendEvents(this.id, batch);
+    void this.#store.save(this.#record);
+  }
+  #setState(state) {
+    if (this.#state === state)
+      return;
+    this.#state = state;
+    this.#record_({ kind: "state", state });
+    if (state === "idle" || state === "error" || state === "closed")
+      this.#flush();
+    this.emit("summary", this.summary());
+  }
+};
+function toolInput(parameters) {
+  const input = { ...parameters ?? {} };
+  const pick = (...keys) => keys.map((k) => input[k]).find((v) => typeof v === "string");
+  const file = pick("TargetFile", "AbsolutePath", "File", "FilePath", "Path");
+  if (file && input.file_path === void 0)
+    input.file_path = file;
+  const command = pick("CommandLine", "Command");
+  if (command && input.command === void 0)
+    input.command = command;
+  const pattern = pick("Query", "Pattern", "SearchPattern");
+  if (pattern && input.pattern === void 0)
+    input.pattern = pattern;
+  const dir = pick("DirectoryPath", "SearchPath", "SearchDirectory");
+  if (dir && input.path === void 0)
+    input.path = dir;
+  const url2 = pick("Url", "URL");
+  if (url2 && input.url === void 0)
+    input.url = url2;
+  return input;
+}
+function formatUsage(usage) {
+  const rows = (usage.buckets ?? []).map((b) => {
+    const left = Math.round(100 - b.window.utilization);
+    const reset = b.window.resetsAt ? new Date(b.window.resetsAt).toLocaleString("ru-RU") : "\u2014";
+    return `| ${b.title || b.label} | ${left}% | ${reset} |`;
+  });
+  if (rows.length === 0)
+    return "\u041A\u0432\u043E\u0442\u0430 Antigravity: \u0434\u0430\u043D\u043D\u044B\u0445 \u043D\u0435\u0442.";
+  return ["**\u041A\u0432\u043E\u0442\u0430 Antigravity**", "", "| \u0413\u0440\u0443\u043F\u043F\u0430 | \u041E\u0441\u0442\u0430\u043B\u043E\u0441\u044C | \u041E\u0431\u043D\u0443\u043B\u0438\u0442\u0441\u044F |", "|---|---|---|", ...rows].join("\n");
+}
+function formatCommandReply(name, response) {
+  const text = response.replace(/\s+$/, "");
+  if (!text)
+    return `/${name}: \u043F\u0443\u0441\u0442\u043E`;
+  const lines = text.split(/\r?\n/);
+  if (lines.every((l) => l.includes("	"))) {
+    return lines.map((l) => {
+      const [head, ...rest] = l.split("	");
+      return `- **${head}** \u2014 ${rest.join(" ")}`;
+    }).join("\n");
+  }
+  return text;
+}
+function agyEffort(effort) {
+  if (!effort)
+    return null;
+  return effort === "xhigh" ? "high" : effort;
+}
+function describe2(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+
+// ../host/dist/codex-session.js
+import { EventEmitter as EventEmitter5 } from "node:events";
+import { randomUUID as randomUUID3 } from "node:crypto";
+
+// ../host/dist/codex-cli.js
+import { accessSync, constants as constants2, existsSync as existsSync2, readFileSync, statSync } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import path8 from "node:path";
+var CODEX_MISSING_HINT = "Codex CLI \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D. \u0423\u0441\u0442\u0430\u043D\u043E\u0432\u0438\u0442\u0435: npm install -g @openai/codex, \u0437\u0430\u0442\u0435\u043C \u0432\u044B\u043F\u043E\u043B\u043D\u0438\u0442\u0435 codex login. \u0415\u0441\u043B\u0438 CLI \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D, \u0437\u0430\u0434\u0430\u0439\u0442\u0435 CCV_CODEX_PATH \u0438 \u043F\u0435\u0440\u0435\u0437\u0430\u043F\u0443\u0441\u0442\u0438\u0442\u0435 ccv.";
+function codexLauncher() {
+  const forced = process.env.CCV_CODEX_PATH;
+  if (forced)
+    return launcherFor(path8.resolve(forced));
+  const dirs = (process.env.PATH ?? "").split(path8.delimiter).filter(Boolean);
+  if (process.platform === "win32") {
+    const local = process.env.LOCALAPPDATA ?? path8.join(homedir4(), "AppData", "Local");
+    dirs.push(path8.join(local, "Programs", "OpenAI", "Codex", "bin"));
+    dirs.push(path8.join(process.env.APPDATA ?? path8.join(homedir4(), "AppData", "Roaming"), "npm"));
+  } else {
+    dirs.push(path8.join(homedir4(), ".local", "bin"), "/usr/local/bin", "/opt/homebrew/bin");
+  }
+  for (const dir of dirs) {
+    for (const name of process.platform === "win32" ? ["codex.exe", "codex.cmd", "codex"] : ["codex"]) {
+      const found = launcherFor(path8.join(dir.replace(/^"|"$/g, ""), name));
+      if (found)
+        return found;
+    }
+  }
+  return null;
+}
+function launcherFor(file) {
+  try {
+    if (!statSync(file).isFile())
+      return null;
+    if (/\.[cm]?js$/i.test(file))
+      return { file: process.execPath, prefix: [file] };
+    if (process.platform === "win32" && /\.(cmd|bat|ps1)$/i.test(file)) {
+      const root = path8.dirname(file);
+      const candidates = [path8.join(root, "node_modules", "@openai", "codex", "bin", "codex.js")];
+      const shim = readFileSync(file, "utf8");
+      for (const match of shim.matchAll(/(?:%dp0%|%~dp0|\$basedir)[\\/]([^"\r\n]+?\.[cm]?js)/gi)) {
+        candidates.push(path8.resolve(root, match[1]));
+      }
+      const script = candidates.find((candidate) => existsSync2(candidate));
+      return script ? { file: process.execPath, prefix: [script] } : null;
+    }
+    if (process.platform === "win32" && !/\.exe$/i.test(file))
+      return null;
+    accessSync(file, constants2.X_OK);
+    return { file, prefix: [] };
+  } catch {
+    return null;
+  }
+}
+
+// ../host/dist/codex-rpc.js
+import { EventEmitter as EventEmitter4 } from "node:events";
+import { execFile as execFile4, spawn as spawn3 } from "node:child_process";
+import { createInterface as createInterface2 } from "node:readline";
+var CodexRpc = class extends EventEmitter4 {
+  #child;
+  #pending = /* @__PURE__ */ new Map();
+  #nextId = 0;
+  #closed = false;
+  #stderr = "";
+  constructor(launcher, cwd) {
+    super();
+    this.#child = spawn3(launcher.file, [...launcher.prefix, "app-server", "--listen", "stdio://"], {
+      cwd,
+      windowsHide: true,
+      stdio: ["pipe", "pipe", "pipe"],
+      env: { ...process.env, NO_COLOR: "1" }
+    });
+    createInterface2({ input: this.#child.stdout }).on("line", (line) => {
+      let message;
+      try {
+        message = JSON.parse(line);
+      } catch {
+        return;
+      }
+      if (!message || typeof message !== "object")
+        return;
+      if (message.method) {
+        this.emit("message", message);
+        return;
+      }
+      const pending = typeof message.id === "number" ? this.#pending.get(message.id) : void 0;
+      if (!pending)
+        return;
+      this.#pending.delete(message.id);
+      clearTimeout(pending.timer);
+      if (message.error)
+        pending.reject(new Error(message.error.message));
+      else
+        pending.resolve(message.result);
+    });
+    this.#child.stderr.on("data", (chunk) => {
+      this.#stderr = (this.#stderr + chunk.toString()).slice(-4e3);
+      this.emit("stderr", chunk.toString());
+    });
+    this.#child.stdin.on("error", (error) => this.#finish(error));
+    this.#child.on("error", (error) => this.#finish(error));
+    this.#child.on("exit", (code) => this.#finish(new Error(`Codex \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043B\u0441\u044F (${code ?? "signal"}). ${this.#stderr.trim()}`)));
+  }
+  request(method, params = {}) {
+    if (this.#closed)
+      return Promise.reject(new Error("\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0441 Codex \u0437\u0430\u043A\u0440\u044B\u0442\u043E"));
+    const id = ++this.#nextId;
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        this.#pending.delete(id);
+        reject(new Error(`Codex \u043D\u0435 \u043E\u0442\u0432\u0435\u0442\u0438\u043B \u043D\u0430 ${method} \u0437\u0430 60 \u0441\u0435\u043A\u0443\u043D\u0434`));
+      }, 6e4);
+      this.#pending.set(id, { resolve: (value) => resolve(value), reject, timer });
+      this.write({ id, method, params });
+    });
+  }
+  write(message) {
+    if (!this.#closed)
+      this.#child.stdin.write(JSON.stringify(message) + "\n");
+  }
+  close() {
+    this.#finish(new Error("\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0441 Codex \u0437\u0430\u043A\u0440\u044B\u0442\u043E"), false);
+    this.#child.stdin.end();
+    const child = this.#child;
+    if (child.exitCode !== null)
+      return;
+    if (process.platform === "win32" && child.pid) {
+      execFile4("taskkill", ["/pid", String(child.pid), "/T", "/F"], { windowsHide: true }, () => {
+        if (child.exitCode === null)
+          child.kill();
+      });
+    } else
+      child.kill("SIGTERM");
+  }
+  #finish(error, notify = true) {
+    if (this.#closed)
+      return;
+    this.#closed = true;
+    for (const pending of this.#pending.values()) {
+      clearTimeout(pending.timer);
+      pending.reject(error);
+    }
+    this.#pending.clear();
+    if (notify)
+      this.emit("exit", error);
+  }
+};
+
+// ../host/dist/codex-session.js
+function codexPolicy(mode) {
+  switch (mode) {
+    case "default":
+      return { approvalPolicy: "untrusted", sandbox: "workspace-write" };
+    case "acceptEdits":
+      return { approvalPolicy: "on-request", sandbox: "workspace-write" };
+    case "plan":
+      return { approvalPolicy: "untrusted", sandbox: "read-only" };
+    case "bypassPermissions":
+      return { approvalPolicy: "never", sandbox: "danger-full-access" };
+    default:
+      throw new Error(`Codex \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043C \u043F\u0440\u0430\u0432 \xAB${mode}\xBB`);
+  }
+}
+function codexUsage(limits) {
+  const window = (value) => value ? {
+    utilization: Math.min(100, Math.max(0, value.usedPercent)),
+    resetsAt: value.resetsAt ? new Date(value.resetsAt * 1e3).toISOString() : ""
+  } : null;
+  return {
+    available: !!(limits.primary || limits.secondary),
+    plan: limits.planType ?? "",
+    fiveHour: window(limits.primary),
+    sevenDay: window(limits.secondary),
+    sevenDayOpus: null,
+    fetchedAt: Date.now()
+  };
+}
+var CodexSession = class extends EventEmitter5 {
+  provider = "codex";
+  id;
+  workspaceId;
+  cwd;
+  journal = new Journal();
+  #store;
+  #record;
+  #history = Promise.resolve([]);
+  #rpc = null;
+  #ready = Promise.resolve();
+  #state = "starting";
+  #lastTurn = null;
+  #capabilities = null;
+  #usage = null;
+  #context = null;
+  #turnId = null;
+  #turnStartedAt = 0;
+  #turnUsage = null;
+  #totalUsage = null;
+  #turnUsageBaseline = null;
+  #interruptRequested = false;
+  #busy = false;
+  #startingTurn = false;
+  #generation = 0;
+  #queue = [];
+  #pending = /* @__PURE__ */ new Map();
+  #texts = /* @__PURE__ */ new Map();
+  #tools = /* @__PURE__ */ new Set();
+  #items = /* @__PURE__ */ new Map();
+  #titleIsDefault;
+  #unsaved = [];
+  #flushTimer = null;
+  constructor(options2) {
+    super();
+    this.workspaceId = options2.workspaceId;
+    this.cwd = options2.cwd;
+    this.#store = options2.store;
+    this.#record = options2.record ? { ...options2.record } : {
+      id: randomUUID3(),
+      conversationId: null,
+      workspaceId: options2.workspaceId,
+      cwd: options2.cwd,
+      title: options2.defaultTitle ?? null,
+      model: options2.model ?? null,
+      permissionMode: options2.permissionMode ?? "default",
+      effort: null,
+      createdAt: Date.now(),
+      updatedAt: Date.now()
+    };
+    if (options2.permissionMode)
+      this.#record.permissionMode = options2.permissionMode;
+    if (options2.model)
+      this.#record.model = options2.model;
+    this.id = this.#record.id;
+    this.#context = this.#record.context ?? null;
+    if (!options2.record?.conversationId) {
+      this.#totalUsage = { inputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheCreationTokens: 0 };
+    }
+    this.#titleIsDefault = !options2.record;
+  }
+  get state() {
+    return this.#state;
+  }
+  get capabilities() {
+    return this.#capabilities;
+  }
+  get claudeSessionId() {
+    return this.id;
+  }
+  get parentSessionId() {
+    return null;
+  }
+  get usage() {
+    return this.#usage;
+  }
+  get context() {
+    return this.#context;
+  }
+  history() {
+    return this.#history;
+  }
+  summary() {
+    return {
+      id: this.id,
+      provider: this.provider,
+      claudeSessionId: this.id,
+      workspaceId: this.workspaceId,
+      cwd: this.cwd,
+      parentSessionId: null,
+      title: this.#record.title,
+      state: this.#state,
+      lastTurn: this.#lastTurn,
+      backgroundWork: false,
+      tasks: [],
+      model: this.#record.model,
+      permissionMode: this.#record.permissionMode,
+      effort: this.#record.effort,
+      ultracode: false,
+      thinking: true,
+      switchModelsOnFlag: false,
+      createdAt: this.#record.createdAt,
+      updatedAt: this.#record.updatedAt,
+      lastSeq: this.journal.lastSeq,
+      totalCostUsd: 0
+    };
+  }
+  start() {
+    this.#history = this.#store.readEvents(this.id).then((entries) => {
+      const pending = /* @__PURE__ */ new Set();
+      for (const { event } of entries) {
+        if (event.kind === "permission.request")
+          pending.add(event.requestId);
+        if (event.kind === "permission.resolved")
+          pending.delete(event.requestId);
+      }
+      for (const requestId of pending)
+        entries.push({ seq: entries.length + 1, ts: Date.now(), event: {
+          kind: "permission.resolved",
+          requestId,
+          decision: "deny",
+          reason: "\u041F\u0440\u0435\u0434\u044B\u0434\u0443\u0449\u0438\u0439 \u043F\u0440\u043E\u0446\u0435\u0441\u0441 Codex \u0437\u0430\u0432\u0435\u0440\u0448\u0451\u043D"
+        } });
+      return entries;
+    });
+    this.#launch();
+  }
+  #launch() {
+    const generation = ++this.#generation;
+    this.#ready = this.#connect(generation);
+    void this.#ready.catch((error) => {
+      if (generation === this.#generation)
+        this.#fail(error);
+    });
+  }
+  async #connect(generation) {
+    await this.#history;
+    await this.#store.save(this.#record);
+    if (generation !== this.#generation)
+      return;
+    const reason = networkGuard.blockedReason();
+    if (reason)
+      throw new Error(reason);
+    const launcher = codexLauncher();
+    if (!launcher)
+      throw new Error(CODEX_MISSING_HINT);
+    const rpc = new CodexRpc(launcher, this.cwd);
+    this.#rpc = rpc;
+    rpc.on("message", (message) => {
+      if (this.#rpc === rpc)
+        this.#message(message);
+    });
+    rpc.on("stderr", (data) => this.emit("stderr", data));
+    rpc.on("exit", (error) => {
+      if (this.#rpc === rpc)
+        this.#fail(error);
+    });
+    await rpc.request("initialize", { clientInfo: { name: "ccv", title: "Claude Code Visual", version: "0.1.0" } });
+    if (this.#rpc !== rpc)
+      return;
+    rpc.write({ method: "initialized", params: {} });
+    const policy = codexPolicy(this.#record.permissionMode);
+    const result = await rpc.request(this.#record.conversationId ? "thread/resume" : "thread/start", {
+      ...this.#record.conversationId ? { threadId: this.#record.conversationId } : {},
+      cwd: this.cwd,
+      ...this.#record.model ? { model: this.#record.model } : {},
+      approvalPolicy: policy.approvalPolicy,
+      sandbox: policy.sandbox
+    });
+    if (this.#rpc !== rpc)
+      return;
+    this.#record.conversationId = result.thread.id;
+    this.#record.model = result.model;
+    if (!this.#record.effort && result.reasoningEffort)
+      this.#record.effort = result.reasoningEffort;
+    await this.#store.save(this.#record);
+    if (this.#rpc !== rpc)
+      return;
+    this.#capabilities = {
+      cwd: this.cwd,
+      model: result.model,
+      permissionMode: this.#record.permissionMode,
+      slashCommands: [],
+      commands: [],
+      models: [],
+      tools: ["Bash", "apply_patch", "web_search"],
+      agents: [],
+      mcpServers: [],
+      flags: []
+    };
+    this.emit("capabilities");
+    this.#setState("idle");
+    void this.#loadModels(rpc).catch((error) => {
+      if (this.#rpc === rpc)
+        this.#notice(error);
+    });
+    void this.refreshUsage();
+  }
+  async #loadModels(rpc) {
+    const models = [];
+    let cursor = null;
+    do {
+      const page = await rpc.request("model/list", { cursor, limit: 100 });
+      for (const model of page.data) {
+        const levels = (model.supportedReasoningEfforts ?? []).map((e) => e.reasoningEffort).filter((e) => ["low", "medium", "high", "xhigh", "max"].includes(e));
+        models.push({
+          value: model.model,
+          resolvedModel: model.model,
+          displayName: model.displayName,
+          description: model.description,
+          supportsEffort: levels.length > 0,
+          effortLevels: levels,
+          supportsThinking: false,
+          supportsAutoMode: false
+        });
+      }
+      cursor = page.nextCursor;
+    } while (cursor && this.#rpc === rpc);
+    if (this.#capabilities && this.#rpc === rpc) {
+      this.#capabilities.models = models;
+      this.emit("capabilities");
+    }
+  }
+  sendPrompt(text, images) {
+    const reason = networkGuard.blockedReason();
+    if (reason) {
+      this.#notice(new Error(reason));
+      return;
+    }
+    if (this.#state === "closed" || this.#state === "error") {
+      this.#notice(new Error("\u041F\u0435\u0440\u0435\u043F\u043E\u0434\u043A\u043B\u044E\u0447\u0438\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u044E Codex \u043F\u0435\u0440\u0435\u0434 \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u043E\u0439"));
+      return;
+    }
+    if (!text.trim() && !images?.length)
+      return;
+    this.#append({ kind: "user.message", text, ...images?.length ? { images } : {} });
+    if (this.#titleIsDefault) {
+      this.#record.title = text.trim().split("\n")[0].slice(0, 100) || "Codex";
+      this.#titleIsDefault = false;
+      this.emit("summary", this.summary());
+    }
+    this.#queue.push({ text, images });
+    void this.#drain();
+  }
+  async #drain() {
+    if (this.#busy || this.#startingTurn || !this.#queue.length)
+      return;
+    const generation = this.#generation;
+    this.#busy = true;
+    this.#startingTurn = true;
+    try {
+      await this.#ready;
+      if (generation !== this.#generation)
+        return;
+      const prompt = this.#queue.shift();
+      if (!prompt || !this.#rpc || this.#state === "closed" || this.#state === "error") {
+        this.#busy = false;
+        return;
+      }
+      const reason = networkGuard.blockedReason();
+      if (reason)
+        throw new Error(reason);
+      this.#turnStartedAt = Date.now();
+      this.#turnUsage = null;
+      this.#turnUsageBaseline = this.#totalUsage;
+      this.#lastTurn = null;
+      this.#setState("running");
+      const policy = codexPolicy(this.#record.permissionMode);
+      const sandboxPolicy = this.#record.permissionMode === "bypassPermissions" ? { type: "dangerFullAccess" } : this.#record.permissionMode === "plan" ? { type: "readOnly", networkAccess: false } : {
+        type: "workspaceWrite",
+        writableRoots: [this.cwd],
+        networkAccess: false,
+        excludeTmpdirEnvVar: false,
+        excludeSlashTmp: false
+      };
+      const result = await this.#rpc.request("turn/start", {
+        threadId: this.#record.conversationId,
+        cwd: this.cwd,
+        input: [{ type: "text", text: prompt.text, text_elements: [] }, ...(prompt.images ?? []).map((image) => ({
+          type: "image",
+          url: `data:${image.mediaType};base64,${image.data}`
+        }))],
+        model: this.#record.model,
+        effort: this.#record.effort,
+        approvalPolicy: policy.approvalPolicy,
+        sandboxPolicy
+      });
+      if (this.#busy)
+        this.#turnId = result.turn.id;
+      if (this.#interruptRequested && this.#turnId)
+        await this.interrupt();
+    } catch (error) {
+      if (generation === this.#generation)
+        this.#fail(error);
+    } finally {
+      if (generation === this.#generation) {
+        this.#startingTurn = false;
+        if (!this.#busy)
+          void this.#drain();
+      }
+    }
+  }
+  #message(message) {
+    const p = message.params ?? {};
+    if (message.id !== void 0 && message.method) {
+      this.#request(message.id, message.method, p);
+      return;
+    }
+    if (p.threadId && p.threadId !== this.#record.conversationId)
+      return;
+    switch (message.method) {
+      case "turn/started": {
+        const turn = p.turn;
+        this.#turnId = turn.id;
+        break;
+      }
+      case "item/agentMessage/delta":
+      case "item/reasoning/summaryTextDelta": {
+        const id = String(p.itemId);
+        const thinking = message.method !== "item/agentMessage/delta";
+        const key = `${id}:${thinking ? "thinking" : "text"}`;
+        const delta = String(p.delta ?? "");
+        const block = this.#texts.get(key) ?? { text: "", thinking };
+        block.text += delta;
+        this.#texts.set(key, block);
+        this.#append({ kind: thinking ? "thinking.delta" : "assistant.delta", blockId: key, text: delta });
+        break;
+      }
+      case "item/started":
+        this.#item(p.item, false);
+        break;
+      case "item/completed":
+        this.#item(p.item, true);
+        break;
+      case "thread/tokenUsage/updated": {
+        const usage = p.tokenUsage;
+        if (usage?.last && usage.modelContextWindow) {
+          this.#context = { tokens: usage.last.totalTokens, maxTokens: usage.modelContextWindow, fetchedAt: Date.now() };
+          this.#record.context = this.#context;
+          this.emit("context", this.#context);
+        }
+        if (usage?.total) {
+          const total = {
+            inputTokens: usage.total.inputTokens,
+            outputTokens: usage.total.outputTokens,
+            cacheReadTokens: usage.total.cachedInputTokens ?? 0,
+            cacheCreationTokens: usage.total.cacheWriteInputTokens ?? 0
+          };
+          if (this.#busy && this.#turnUsageBaseline) {
+            const baseline = this.#turnUsageBaseline;
+            this.#turnUsage = {
+              inputTokens: Math.max(0, total.inputTokens - baseline.inputTokens),
+              outputTokens: Math.max(0, total.outputTokens - baseline.outputTokens),
+              cacheReadTokens: Math.max(0, total.cacheReadTokens - baseline.cacheReadTokens),
+              cacheCreationTokens: Math.max(0, total.cacheCreationTokens - baseline.cacheCreationTokens)
+            };
+          }
+          this.#totalUsage = total;
+        }
+        break;
+      }
+      case "account/rateLimits/updated":
+        if (p.rateLimits)
+          this.#setUsage(p.rateLimits);
+        break;
+      case "serverRequest/resolved": {
+        const requestId = String(p.requestId);
+        if (this.#pending.delete(requestId)) {
+          this.#append({ kind: "permission.resolved", requestId, decision: "deny", reason: "\u0417\u0430\u043F\u0440\u043E\u0441 \u0437\u0430\u043A\u0440\u044B\u0442 Codex" });
+          this.#setState(this.#pending.size ? "waiting_permission" : "running");
+        }
+        break;
+      }
+      case "turn/completed": {
+        const turn = p.turn;
+        this.#lastTurn = turn.status === "completed" ? "completed" : turn.status === "interrupted" ? "interrupted" : "failed";
+        if (turn.error?.message)
+          this.#notice(new Error(turn.error.message));
+        this.#finishTurn(turn.status, turn.durationMs);
+        void this.refreshUsage();
+        break;
+      }
+      case "error": {
+        const error = p.error;
+        this.#notice(new Error(error?.message ?? "\u041E\u0448\u0438\u0431\u043A\u0430 Codex"));
+        break;
+      }
+    }
+  }
+  #item(item, done) {
+    if (!item)
+      return;
+    this.#items.set(item.id, item);
+    if (item.type === "agentMessage" || item.type === "reasoning" || item.type === "plan") {
+      if (!done)
+        return;
+      const thinking = item.type === "reasoning";
+      const key = `${item.id}:${thinking ? "thinking" : "text"}`;
+      const text = item.text ?? item.summary?.join("\n") ?? this.#texts.get(key)?.text ?? "";
+      this.#texts.delete(key);
+      if (text)
+        this.#append({ kind: thinking ? "assistant.thinking" : "assistant.text", text, blockId: key });
+      return;
+    }
+    if (!["commandExecution", "fileChange", "mcpToolCall", "webSearch", "imageView", "collabAgentToolCall"].includes(item.type))
+      return;
+    if (!this.#tools.has(item.id)) {
+      this.#tools.add(item.id);
+      const name = item.type === "commandExecution" ? "Bash" : item.type === "fileChange" ? "apply_patch" : item.type === "mcpToolCall" ? `mcp__${item.server}__${item.tool}` : item.type;
+      const input = item.type === "commandExecution" ? { command: item.command, cwd: item.cwd } : item.type === "fileChange" ? { changes: item.changes, file_path: item.changes?.[0]?.path } : item.arguments ?? item.action ?? { query: item.query };
+      this.#append({ kind: "tool.use", toolUseId: item.id, name, input });
+    }
+    if (done) {
+      this.#tools.delete(item.id);
+      const output = item.aggregatedOutput ?? (item.changes ? item.changes.map((c) => `${c.path}
+${c.diff}`).join("\n") : typeof item.result === "string" ? item.result : JSON.stringify(item.error ?? item.result ?? item.action ?? "\u0413\u043E\u0442\u043E\u0432\u043E"));
+      this.#append({
+        kind: "tool.result",
+        toolUseId: item.id,
+        content: output,
+        isError: ["failed", "declined"].includes(item.status ?? "") || item.exitCode != null && item.exitCode !== 0 || !!item.error
+      });
+    }
+  }
+  #request(id, method, params) {
+    const requestId = String(id);
+    const questions = method === "item/tool/requestUserInput" ? params.questions.map((q) => ({ ...q, options: q.options ?? [], multiSelect: false })) : void 0;
+    const known = [
+      "item/commandExecution/requestApproval",
+      "item/fileChange/requestApproval",
+      "item/permissions/requestApproval",
+      "item/tool/requestUserInput"
+    ];
+    if (!known.includes(method)) {
+      this.#rpc?.write({ id, error: { code: -32601, message: `CCV does not support ${method}` } });
+      this.#notice(new Error(`Codex \u0437\u0430\u043F\u0440\u043E\u0441\u0438\u043B \u043D\u0435\u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043C\u043E\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435: ${method}`));
+      return;
+    }
+    this.#pending.set(requestId, { id, method, params, questions });
+    this.#append({
+      kind: "permission.request",
+      requestId,
+      toolUseId: String(params.itemId ?? requestId),
+      toolName: questions ? "AskUserQuestion" : method.includes("commandExecution") ? "Bash" : method.includes("fileChange") ? "apply_patch" : "Codex permissions",
+      input: { ...params, ...this.#items.get(String(params.itemId))?.changes ? { changes: this.#items.get(String(params.itemId)).changes } : {} },
+      ...typeof params.reason === "string" ? { reason: params.reason } : {},
+      ...questions ? { questions } : {}
+    });
+    this.#setState("waiting_permission");
+  }
+  respondPermission(requestId, decision, reason, answers) {
+    const request2 = this.#pending.get(requestId);
+    if (!request2)
+      return;
+    let result = { decision: decision === "allow" ? "accept" : "decline" };
+    if (request2.questions) {
+      result = { answers: Object.fromEntries(request2.questions.map((q) => [q.id, {
+        answers: decision === "allow" ? [answers?.[q.question] ?? ""] : []
+      }])) };
+    } else if (request2.method === "item/permissions/requestApproval") {
+      result = { permissions: decision === "allow" ? request2.params.permissions : {}, scope: "turn" };
+    }
+    this.#rpc?.write({ id: request2.id, result });
+    this.#pending.delete(requestId);
+    this.#append({ kind: "permission.resolved", requestId, decision, reason, answers });
+    this.#setState(this.#pending.size ? "waiting_permission" : "running");
+  }
+  async interrupt() {
+    this.#queue = [];
+    if (!this.#busy)
+      return;
+    this.#interruptRequested = true;
+    if (this.#turnId && this.#rpc) {
+      await this.#rpc.request("turn/interrupt", { threadId: this.#record.conversationId, turnId: this.#turnId });
+    }
+  }
+  #finishTurn(subtype, durationMs) {
+    for (const [blockId, block] of this.#texts) {
+      this.#append({ kind: block.thinking ? "assistant.thinking" : "assistant.text", text: block.text, blockId });
+    }
+    this.#texts.clear();
+    for (const toolUseId of this.#tools) {
+      this.#append({ kind: "tool.result", toolUseId, content: "\u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043F\u0440\u0435\u0440\u0432\u0430\u043D\u043E", isError: true });
+    }
+    this.#tools.clear();
+    this.#items.clear();
+    this.#clearApprovals();
+    this.#append({
       kind: "result",
-      subtype: ok ? "success" : "error",
-      isError: !ok,
-      durationMs: Math.round((result.duration_seconds ?? 0) * 1e3),
+      subtype,
+      isError: this.#lastTurn === "failed",
+      durationMs: durationMs ?? Math.max(0, Date.now() - this.#turnStartedAt),
       costUsd: null,
-      usage,
-      contextTokens: this.#contextTokens,
-      text: result.response ?? null
+      usage: this.#turnUsage,
+      contextTokens: this.#context?.tokens ?? null,
+      text: null
     });
-    this.#emitContext();
-    void this.refreshUsage(true);
-    this.#lastTurn = ok ? "completed" : "failed";
-    this.#pendingTurns = Math.max(0, this.#pendingTurns - 1);
-    if (this.#pendingTurns > 0)
-      return;
-    if (this.#restartPending)
-      this.#restart();
+    this.#busy = false;
+    this.#turnId = null;
+    this.#interruptRequested = false;
     this.#setState("idle");
+    void this.#drain();
   }
-  /** Незакрытые шаги оборванного хода: текст — в ленту, инструменты — с ошибкой. */
-  #closeOpenSteps() {
-    const prefix = this.#record.conversationId ?? this.id;
-    for (const [index, text] of this.#texts) {
-      if (text)
-        this.#record_({ kind: "assistant.text", text, blockId: `${prefix}:${index}` });
+  async setPermissionMode(mode) {
+    codexPolicy(mode);
+    this.#record.permissionMode = mode;
+    this.#settingsChanged();
+  }
+  async setModel(model) {
+    this.#record.model = model;
+    this.#record.effort = null;
+    this.#settingsChanged();
+  }
+  async setEffort(effort) {
+    const model = this.#capabilities?.models.find((m) => m.value === this.#record.model);
+    if (model && !model.effortLevels.includes(effort))
+      throw new Error("\u041C\u043E\u0434\u0435\u043B\u044C Codex \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u044D\u0442\u043E \u0443\u0441\u0438\u043B\u0438\u0435");
+    this.#record.effort = effort;
+    this.#settingsChanged();
+  }
+  #settingsChanged() {
+    if (this.#capabilities) {
+      this.#capabilities.model = this.#record.model ?? "";
+      this.#capabilities.permissionMode = this.#record.permissionMode;
+      this.emit("capabilities");
     }
-    for (const index of this.#tools) {
-      this.#record_({
-        kind: "tool.result",
-        toolUseId: `${prefix}:${index}`,
-        content: "\u041F\u0440\u0435\u0440\u0432\u0430\u043D\u043E",
-        isError: true
-      });
+    void this.#store.save(this.#record);
+    this.emit("summary", this.summary());
+  }
+  setTitle(title) {
+    this.#record.title = title;
+    this.#titleIsDefault = false;
+    this.#settingsChanged();
+  }
+  async refreshUsage(_force = false) {
+    if (!this.#rpc || networkGuard.blockedReason())
+      return;
+    try {
+      const reply = await this.#rpc.request("account/rateLimits/read");
+      this.#setUsage(reply.rateLimits);
+    } catch {
     }
-    this.#texts.clear();
-    this.#thinking.clear();
-    this.#tools.clear();
   }
-  // -------------------------------------------------------------------------
-  #record_(event) {
-    this.#updatedAt = Date.now();
+  #setUsage(limits) {
+    this.#usage = codexUsage(limits);
+    this.emit("usage", this.#usage);
+  }
+  async refreshContext(_force = false) {
+    if (this.#context)
+      this.emit("context", this.#context);
+  }
+  reconnect(_reason) {
+    this.#disconnect();
+    this.#setState("starting");
+    this.#launch();
+  }
+  suspend(reason) {
+    this.#disconnect();
+    this.#notice(new Error(reason));
+    this.#setState("error");
+  }
+  async close(_reason = "closed by client") {
+    this.#disconnect();
+    this.#setState("closed");
+    await this.#flush();
+  }
+  #disconnect() {
+    this.#generation += 1;
+    this.#startingTurn = false;
+    const rpc = this.#rpc;
+    this.#rpc = null;
+    rpc?.close();
+    this.#queue = [];
+    if (this.#busy) {
+      this.#lastTurn = "interrupted";
+      this.#finishTurn("interrupted");
+    }
+    this.#clearApprovals();
+  }
+  #clearApprovals() {
+    for (const requestId of this.#pending.keys()) {
+      this.#append({ kind: "permission.resolved", requestId, decision: "deny", reason: "\u0425\u043E\u0434 \u0437\u0430\u0432\u0435\u0440\u0448\u0451\u043D" });
+    }
+    this.#pending.clear();
+  }
+  #notice(error) {
+    this.#append({ kind: "error", message: error instanceof Error ? error.message : String(error) });
+  }
+  #fail(error) {
+    if (this.#state === "closed")
+      return;
+    this.#queue = [];
+    if (this.#busy) {
+      this.#lastTurn = "failed";
+      this.#finishTurn("failed");
+    }
+    this.#notice(error);
+    const rpc = this.#rpc;
+    this.#rpc = null;
+    rpc?.close();
+    this.#setState("error");
+  }
+  #append(event) {
+    this.#record.updatedAt = Date.now();
     const entry = this.journal.append(event);
     this.emit("event", entry);
-    if (TRANSIENT.has(event.kind))
+    if (["assistant.delta", "thinking.delta", "state"].includes(event.kind))
       return;
     this.#unsaved.push({ ts: entry.ts, event });
-    this.#scheduleFlush();
+    if (!this.#flushTimer) {
+      this.#flushTimer = setTimeout(() => {
+        void this.#flush();
+      }, 500);
+      this.#flushTimer.unref?.();
+    }
   }
-  #scheduleFlush() {
+  async #flush() {
     if (this.#flushTimer)
-      return;
-    this.#flushTimer = setTimeout(() => this.#flush(), 500);
-    this.#flushTimer.unref?.();
-  }
-  #flush() {
-    if (this.#flushTimer) {
       clearTimeout(this.#flushTimer);
-      this.#flushTimer = null;
-    }
+    this.#flushTimer = null;
     const batch = this.#unsaved;
     this.#unsaved = [];
-    this.#record.updatedAt = this.#updatedAt;
-    void this.#store.appendEvents(this.id, batch);
-    void this.#store.save(this.#record);
+    await this.#store.appendEvents(this.id, batch);
+    await this.#store.save(this.#record);
   }
   #setState(state) {
-    if (this.#state === state)
-      return;
     this.#state = state;
-    this.#record_({ kind: "state", state });
-    if (state === "idle" || state === "error" || state === "closed")
-      this.#flush();
+    this.#append({ kind: "state", state });
+    if (["idle", "error", "closed"].includes(state))
+      void this.#flush();
     this.emit("summary", this.summary());
   }
-};
-function toolInput(parameters) {
-  const input = { ...parameters ?? {} };
-  const pick = (...keys) => keys.map((k) => input[k]).find((v) => typeof v === "string");
-  const file = pick("TargetFile", "AbsolutePath", "File", "FilePath", "Path");
-  if (file && input.file_path === void 0)
-    input.file_path = file;
-  const command = pick("CommandLine", "Command");
-  if (command && input.command === void 0)
-    input.command = command;
-  const pattern = pick("Query", "Pattern", "SearchPattern");
-  if (pattern && input.pattern === void 0)
-    input.pattern = pattern;
-  const dir = pick("DirectoryPath", "SearchPath", "SearchDirectory");
-  if (dir && input.path === void 0)
-    input.path = dir;
-  const url2 = pick("Url", "URL");
-  if (url2 && input.url === void 0)
-    input.url = url2;
-  return input;
-}
-function formatUsage(usage) {
-  const rows = (usage.buckets ?? []).map((b) => {
-    const left = Math.round(100 - b.window.utilization);
-    const reset = b.window.resetsAt ? new Date(b.window.resetsAt).toLocaleString("ru-RU") : "\u2014";
-    return `| ${b.title || b.label} | ${left}% | ${reset} |`;
-  });
-  if (rows.length === 0)
-    return "\u041A\u0432\u043E\u0442\u0430 Antigravity: \u0434\u0430\u043D\u043D\u044B\u0445 \u043D\u0435\u0442.";
-  return ["**\u041A\u0432\u043E\u0442\u0430 Antigravity**", "", "| \u0413\u0440\u0443\u043F\u043F\u0430 | \u041E\u0441\u0442\u0430\u043B\u043E\u0441\u044C | \u041E\u0431\u043D\u0443\u043B\u0438\u0442\u0441\u044F |", "|---|---|---|", ...rows].join("\n");
-}
-function formatCommandReply(name, response) {
-  const text = response.replace(/\s+$/, "");
-  if (!text)
-    return `/${name}: \u043F\u0443\u0441\u0442\u043E`;
-  const lines = text.split(/\r?\n/);
-  if (lines.every((l) => l.includes("	"))) {
-    return lines.map((l) => {
-      const [head, ...rest] = l.split("	");
-      return `- **${head}** \u2014 ${rest.join(" ")}`;
-    }).join("\n");
+  async editPrompt(_index, _text, _images) {
+    throw new Error("\u0412 \u0441\u0435\u0441\u0441\u0438\u0438 Codex \u043F\u0440\u0430\u0432\u043A\u0430 \u043F\u0440\u043E\u0448\u043B\u044B\u0445 \u0440\u0435\u043F\u043B\u0438\u043A \u043F\u043E\u043A\u0430 \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044F");
   }
-  return text;
-}
-function agyEffort(effort) {
-  if (!effort)
-    return null;
-  return effort === "xhigh" ? "high" : effort;
-}
-function describe2(error) {
-  return error instanceof Error ? error.message : String(error);
-}
+  async setUltracode(_enabled) {
+  }
+  async setThinking(_enabled) {
+  }
+  async setSwitchModelsOnFlag(_enabled) {
+  }
+  async reloadPlugins() {
+  }
+  async mcpServerStatus() {
+    return [];
+  }
+  async addMcpServer(_name, _config) {
+    throw this.#mcpHint();
+  }
+  async removeMcpServer(_name) {
+    throw this.#mcpHint();
+  }
+  async reconnectMcpServer(_name) {
+    throw this.#mcpHint();
+  }
+  async toggleMcpServer(_name, _enabled) {
+    throw this.#mcpHint();
+  }
+  async authenticateMcpServer(_name) {
+    throw this.#mcpHint();
+  }
+  async submitMcpOAuthCallback(_name, _url) {
+    throw this.#mcpHint();
+  }
+  #mcpHint() {
+    return new Error("MCP Codex \u043D\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044F \u0447\u0435\u0440\u0435\u0437 codex mcp \u0438\u043B\u0438 ~/.codex/config.toml");
+  }
+};
 
 // ../host/dist/antigravity-store.js
 import { appendFile, mkdir as mkdir3, readFile as readFile4, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
-import path8 from "node:path";
+import path9 from "node:path";
 var AntigravityStore = class {
   #dir;
   #file;
   #records = /* @__PURE__ */ new Map();
   #loaded = null;
   #writing = Promise.resolve();
-  constructor(dataDir) {
-    this.#dir = path8.join(dataDir, "antigravity");
-    this.#file = path8.join(this.#dir, "sessions.json");
+  constructor(dataDir, provider = "antigravity") {
+    this.#dir = path9.join(dataDir, provider);
+    this.#file = path9.join(this.#dir, "sessions.json");
   }
   #load() {
     this.#loaded ??= (async () => {
@@ -4058,7 +5172,7 @@ var AntigravityStore = class {
     return entries;
   }
   #eventsFile(id) {
-    return path8.join(this.#dir, `${id.replace(/[^\w-]/g, "_")}.jsonl`);
+    return path9.join(this.#dir, `${id.replace(/[^\w-]/g, "_")}.jsonl`);
   }
   #persist() {
     const snapshot = JSON.stringify([...this.#records.values()], null, 2);
@@ -4078,10 +5192,10 @@ var AntigravityStore = class {
 };
 
 // ../host/dist/git.js
-import { execFile as execFile4 } from "node:child_process";
+import { execFile as execFile5 } from "node:child_process";
 import { mkdtemp, readFile as readFile5, rm as rm3, writeFile as writeFile4 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import path9 from "node:path";
+import path10 from "node:path";
 var TIMEOUT_MS = 2e4;
 var NET_TIMEOUT_MS = 5 * 6e4;
 var MAX_BUFFER = 32 * 1024 * 1024;
@@ -4397,7 +5511,7 @@ var GitRepo = class {
    * важнее всего (см. `checkIgnored`).
    */
   async #withoutRepo(args) {
-    const dir = await mkdtemp(path9.join(tmpdir2(), "ccv-git-"));
+    const dir = await mkdtemp(path10.join(tmpdir2(), "ccv-git-"));
     try {
       await this.#run(["init", "--bare", "--quiet", dir]);
       return await this.#soft([`--git-dir=${dir}`, `--work-tree=${this.cwd}`, ...args]);
@@ -4443,7 +5557,7 @@ var GitRepo = class {
    * исключил. Повторы отсеиваются, чтобы файл не рос от каждой публикации.
    */
   async #appendGitignore(paths) {
-    const file = path9.join(this.cwd, ".gitignore");
+    const file = path10.join(this.cwd, ".gitignore");
     const existing = await readFile5(file, "utf8").catch(() => "");
     const known = new Set(existing.split(/\r?\n/).map((line) => line.trim()));
     const lines = paths.map(ignorePattern).filter((line) => !known.has(line));
@@ -4468,7 +5582,7 @@ var GitRepo = class {
   #run(args, options2 = {}) {
     const token = options2.token ?? "";
     return new Promise((resolve, reject) => {
-      const child = execFile4(
+      const child = execFile5(
         "git",
         // core.quotepath=false — иначе кириллические пути приезжают в виде
         // «\320\277\321\200…» и в панели читаются как мусор.
@@ -4649,9 +5763,9 @@ function parsePatch(raw) {
       body = "";
     }
     total += body.length;
-    const path25 = status === "deleted" ? oldPath : newPath || oldPath;
+    const path26 = status === "deleted" ? oldPath : newPath || oldPath;
     files.push({
-      path: path25,
+      path: path26,
       oldPath: status === "renamed" ? oldPath : "",
       status,
       added: count(body, "+"),
@@ -4663,10 +5777,10 @@ function parsePatch(raw) {
   return { files, truncated };
 }
 function stripPrefix(value) {
-  const path25 = unquote(value.trim());
-  if (path25 === "/dev/null")
+  const path26 = unquote(value.trim());
+  if (path26 === "/dev/null")
     return "";
-  return path25.replace(/^[ab]\//, "");
+  return path26.replace(/^[ab]\//, "");
 }
 function count(body, mark) {
   let n = 0;
@@ -4678,9 +5792,9 @@ function count(body, mark) {
 }
 
 // ../host/dist/github.js
-import { execFile as execFile5 } from "node:child_process";
+import { execFile as execFile6 } from "node:child_process";
 import { mkdir as mkdir4, readFile as readFile6, writeFile as writeFile5 } from "node:fs/promises";
-import path10 from "node:path";
+import path11 from "node:path";
 var API = "https://api.github.com";
 var API_VERSION = "2022-11-28";
 var API_TIMEOUT_MS = 2e4;
@@ -4701,7 +5815,7 @@ var GitHubAccount = class {
    */
   #ghInstalled = null;
   constructor(dataDir) {
-    this.#storePath = path10.join(dataDir, "github.json");
+    this.#storePath = path11.join(dataDir, "github.json");
   }
   async load() {
     try {
@@ -4715,7 +5829,7 @@ var GitHubAccount = class {
   /** Сохранить токен или стереть его пустой строкой. */
   async setToken(token) {
     this.#token = token.trim();
-    await mkdir4(path10.dirname(this.#storePath), { recursive: true });
+    await mkdir4(path11.dirname(this.#storePath), { recursive: true });
     await writeFile5(this.#storePath, JSON.stringify({ token: this.#token }, null, 2), {
       encoding: "utf8",
       mode: 384
@@ -4867,7 +5981,7 @@ var GitHubAccount = class {
 };
 function gh(args) {
   return new Promise((resolve, reject) => {
-    execFile5("gh", args, { timeout: GH_TIMEOUT_MS, windowsHide: true, encoding: "utf8" }, (error, stdout, stderr) => {
+    execFile6("gh", args, { timeout: GH_TIMEOUT_MS, windowsHide: true, encoding: "utf8" }, (error, stdout, stderr) => {
       if (error)
         return reject(new Error(stderr.trim() || error.message));
       resolve(stdout);
@@ -4908,10 +6022,10 @@ function describe4(error) {
 }
 
 // ../host/dist/finder.js
-import { existsSync as existsSync2, statSync } from "node:fs";
+import { existsSync as existsSync3, statSync as statSync2 } from "node:fs";
 import { readdir as readdir2 } from "node:fs/promises";
 import os2 from "node:os";
-import path11 from "node:path";
+import path12 from "node:path";
 import { listSessions } from "@anthropic-ai/claude-agent-sdk";
 var CACHE_TTL = 6e4;
 var FIND_LIMIT = 50;
@@ -4950,7 +6064,7 @@ var ProjectFinder = class {
     if (needles.length === 0)
       return { candidates: [], truncated: false };
     const open = new Map(this.registry.list().map((workspace) => [workspace.path.toLowerCase(), workspace]));
-    const byName = this.#dirs.filter((dir) => matches(path11.basename(dir.path), needles));
+    const byName = this.#dirs.filter((dir) => matches(path12.basename(dir.path), needles));
     const matched = byName.length > 0 ? byName : this.#dirs.filter((dir) => matches(dir.path, needles));
     const sorted = [...matched].sort((a, b) => {
       const aOpen = open.has(a.path.toLowerCase());
@@ -4961,7 +6075,7 @@ var ProjectFinder = class {
         return a.sessions > 0 ? -1 : 1;
       if (a.lastUsedAt !== b.lastUsedAt)
         return b.lastUsedAt - a.lastUsedAt;
-      return path11.basename(a.path).localeCompare(path11.basename(b.path), void 0, {
+      return path12.basename(a.path).localeCompare(path12.basename(b.path), void 0, {
         numeric: true,
         sensitivity: "base"
       });
@@ -4969,7 +6083,7 @@ var ProjectFinder = class {
     return {
       candidates: sorted.slice(0, FIND_LIMIT).map((dir) => ({
         path: dir.path,
-        name: path11.basename(dir.path) || dir.path,
+        name: path12.basename(dir.path) || dir.path,
         sessions: dir.sessions,
         lastUsedAt: dir.lastUsedAt || null,
         open: open.has(dir.path.toLowerCase()),
@@ -4993,7 +6107,7 @@ var ProjectFinder = class {
     const candidates = [];
     for (const entry of named) {
       const absolute = entry.path.trim();
-      if (!absolute || !path11.isAbsolute(absolute))
+      if (!absolute || !path12.isAbsolute(absolute))
         continue;
       const key = absolute.toLowerCase();
       if (seen.has(key))
@@ -5004,7 +6118,7 @@ var ProjectFinder = class {
       const record = known.get(key);
       candidates.push({
         path: record?.path ?? absolute,
-        name: path11.basename(absolute) || absolute,
+        name: path12.basename(absolute) || absolute,
         sessions: record?.sessions ?? 0,
         lastUsedAt: record?.lastUsedAt || null,
         open: open.has(key),
@@ -5061,7 +6175,7 @@ var ProjectFinder = class {
         if (!dirent.isDirectory() || SKIP_NAMES.has(dirent.name) || dirent.name.startsWith(".")) {
           continue;
         }
-        const full = path11.join(parent, dirent.name);
+        const full = path12.join(parent, dirent.name);
         const key = full.toLowerCase();
         if (dirs.has(key))
           continue;
@@ -5082,7 +6196,7 @@ var ProjectFinder = class {
   #parents(dirs) {
     const counted = /* @__PURE__ */ new Map();
     for (const dir of dirs) {
-      const parent = path11.dirname(dir.path);
+      const parent = path12.dirname(dir.path);
       if (parent === dir.path || !usable(parent))
         continue;
       const key = parent.toLowerCase();
@@ -5096,7 +6210,7 @@ var ProjectFinder = class {
   }
 };
 function usable(dir) {
-  return !contains(os2.tmpdir(), dir) && existsSync2(dir);
+  return !contains(os2.tmpdir(), dir) && existsSync3(dir);
 }
 function tokens(query2) {
   return query2.toLowerCase().split(/[^a-z0-9а-яё]+/i).filter(Boolean);
@@ -5107,7 +6221,7 @@ function matches(value, needles) {
 }
 function isDirectory(dir) {
   try {
-    return statSync(dir).isDirectory();
+    return statSync2(dir).isDirectory();
   } catch {
     return false;
   }
@@ -5193,15 +6307,15 @@ function fromText(text) {
 }
 
 // ../host/dist/workspaces.js
-import { existsSync as existsSync3, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync4, statSync as statSync3 } from "node:fs";
 import { mkdir as mkdir5, readFile as readFile7, writeFile as writeFile6 } from "node:fs/promises";
-import path12 from "node:path";
+import path13 from "node:path";
 import { listSessions as listSessions2 } from "@anthropic-ai/claude-agent-sdk";
 var WorkspaceRegistry = class {
   #entries = [];
   #storePath;
   constructor(dataDir) {
-    this.#storePath = path12.join(dataDir, "workspaces.json");
+    this.#storePath = path13.join(dataDir, "workspaces.json");
   }
   async load() {
     try {
@@ -5217,13 +6331,13 @@ var WorkspaceRegistry = class {
         if (isEntry(item))
           return item;
         return null;
-      }).filter((e) => e !== null && existsSync3(e.path));
+      }).filter((e) => e !== null && existsSync4(e.path));
     } catch {
       this.#entries = [];
     }
   }
   async #persist() {
-    await mkdir5(path12.dirname(this.#storePath), { recursive: true });
+    await mkdir5(path13.dirname(this.#storePath), { recursive: true });
     await writeFile6(this.#storePath, JSON.stringify(this.#entries, null, 2), "utf8");
   }
   /** Активные проекты. */
@@ -5243,8 +6357,8 @@ var WorkspaceRegistry = class {
     return entry ? toInfo(entry) : void 0;
   }
   async open(rawPath) {
-    const absolute = path12.resolve(rawPath);
-    if (!existsSync3(absolute)) {
+    const absolute = path13.resolve(rawPath);
+    if (!existsSync4(absolute)) {
       throw new Error(`\u041A\u0430\u0442\u0430\u043B\u043E\u0433 \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D: ${absolute}`);
     }
     const existing = this.#entries.find((e) => e.path === absolute);
@@ -5310,24 +6424,24 @@ var WorkspaceRegistry = class {
   async create(parentRaw, nameRaw, init) {
     const name = nameRaw.trim();
     requireName(name);
-    const parent = path12.resolve(parentRaw.trim());
-    if (!existsSync3(parent)) {
+    const parent = path13.resolve(parentRaw.trim());
+    if (!existsSync4(parent)) {
       throw new Error(`\u041A\u0430\u0442\u0430\u043B\u043E\u0433 \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D: ${parent}`);
     }
-    if (!statSync2(parent).isDirectory()) {
+    if (!statSync3(parent).isDirectory()) {
       throw new Error(`\u042D\u0442\u043E \u043D\u0435 \u043A\u0430\u0442\u0430\u043B\u043E\u0433: ${parent}`);
     }
-    const target = path12.join(parent, name);
-    if (existsSync3(target)) {
+    const target = path13.join(parent, name);
+    if (existsSync4(target)) {
       throw new Error(`\u0423\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442: ${target} \u2014 \u043E\u0442\u043A\u0440\u043E\u0439\u0442\u0435 \u0435\u0433\u043E \u043A\u0430\u043A \u043F\u0440\u043E\u0435\u043A\u0442`);
     }
     await mkdir5(target);
     const warnings = [];
     if (init.claudeMd) {
-      await step(warnings, "CLAUDE.md", () => writeFile6(path12.join(target, "CLAUDE.md"), claudeMdStub(name), "utf8"));
+      await step(warnings, "CLAUDE.md", () => writeFile6(path13.join(target, "CLAUDE.md"), claudeMdStub(name), "utf8"));
     }
     if (init.readme) {
-      await step(warnings, "README.md", () => writeFile6(path12.join(target, "README.md"), readmeStub(name), "utf8"));
+      await step(warnings, "README.md", () => writeFile6(path13.join(target, "README.md"), readmeStub(name), "utf8"));
     }
     if (init.git) {
       await step(warnings, "git init", () => new GitRepo(target).init());
@@ -5399,8 +6513,8 @@ function toInfo(entry) {
   return {
     id: workspaceIdFromPath(absolute),
     path: absolute,
-    name: path12.basename(absolute) || absolute,
-    hasClaudeMd: existsSync3(path12.join(absolute, "CLAUDE.md")),
+    name: path13.basename(absolute) || absolute,
+    hasClaudeMd: existsSync4(path13.join(absolute, "CLAUDE.md")),
     ...archivedAt ? { archivedAt } : {}
   };
 }
@@ -5410,13 +6524,13 @@ function isEntry(value) {
 
 // ../host/dist/archive.js
 import { mkdir as mkdir6, readFile as readFile8, writeFile as writeFile7 } from "node:fs/promises";
-import path13 from "node:path";
+import path14 from "node:path";
 var SessionArchive = class {
   #archived = /* @__PURE__ */ new Map();
   #restored = /* @__PURE__ */ new Map();
   #storePath;
   constructor(dataDir) {
-    this.#storePath = path13.join(dataDir, "session-archive.json");
+    this.#storePath = path14.join(dataDir, "session-archive.json");
   }
   async load() {
     try {
@@ -5528,7 +6642,7 @@ var SessionArchive = class {
       archived: Object.fromEntries(this.#archived),
       restored: Object.fromEntries(this.#restored)
     };
-    await mkdir6(path13.dirname(this.#storePath), { recursive: true });
+    await mkdir6(path14.dirname(this.#storePath), { recursive: true });
     await writeFile7(this.#storePath, JSON.stringify(file, null, 2), "utf8");
   }
 };
@@ -5538,7 +6652,7 @@ function isRecord(value) {
 
 // ../host/dist/pins.js
 import { mkdir as mkdir7, readFile as readFile9, writeFile as writeFile8 } from "node:fs/promises";
-import path14 from "node:path";
+import path15 from "node:path";
 var SessionPins = class {
   #pinned = /* @__PURE__ */ new Map();
   /**
@@ -5553,7 +6667,7 @@ var SessionPins = class {
   #moved = /* @__PURE__ */ new Map();
   #storePath;
   constructor(dataDir) {
-    this.#storePath = path14.join(dataDir, "session-pins.json");
+    this.#storePath = path15.join(dataDir, "session-pins.json");
   }
   async load() {
     try {
@@ -5710,7 +6824,7 @@ var SessionPins = class {
       pinned: Object.fromEntries(this.#pinned),
       ...this.#moved.size > 0 ? { moved: Object.fromEntries(this.#moved) } : {}
     };
-    await mkdir7(path14.dirname(this.#storePath), { recursive: true });
+    await mkdir7(path15.dirname(this.#storePath), { recursive: true });
     await writeFile8(this.#storePath, JSON.stringify(file, null, 2), "utf8");
   }
 };
@@ -5720,12 +6834,12 @@ function isRecord2(value) {
 
 // ../host/dist/order.js
 import { mkdir as mkdir8, readFile as readFile10, writeFile as writeFile9 } from "node:fs/promises";
-import path15 from "node:path";
+import path16 from "node:path";
 var ListOrderStore = class {
   #order = emptyOrder();
   #storePath;
   constructor(dataDir) {
-    this.#storePath = path15.join(dataDir, "list-order.json");
+    this.#storePath = path16.join(dataDir, "list-order.json");
   }
   async load() {
     try {
@@ -5801,7 +6915,7 @@ var ListOrderStore = class {
     return changed;
   }
   async #persist() {
-    await mkdir8(path15.dirname(this.#storePath), { recursive: true });
+    await mkdir8(path16.dirname(this.#storePath), { recursive: true });
     await writeFile9(this.#storePath, JSON.stringify(this.#order, null, 2), "utf8");
   }
 };
@@ -5832,8 +6946,8 @@ function sanitize(value) {
 
 // ../host/dist/folders.js
 import { mkdir as mkdir9, readFile as readFile11, writeFile as writeFile10 } from "node:fs/promises";
-import path16 from "node:path";
-import { randomUUID as randomUUID3 } from "node:crypto";
+import path17 from "node:path";
+import { randomUUID as randomUUID4 } from "node:crypto";
 var COLOR_PATTERN = /^#[0-9a-f]{6}$/i;
 var Folders = class {
   #workspaceFolders = /* @__PURE__ */ new Map();
@@ -5844,7 +6958,7 @@ var Folders = class {
   #pinnedAssignments = /* @__PURE__ */ new Map();
   #storePath;
   constructor(dataDir) {
-    this.#storePath = path16.join(dataDir, "folders.json");
+    this.#storePath = path17.join(dataDir, "folders.json");
   }
   async load() {
     try {
@@ -5933,19 +7047,19 @@ var Folders = class {
     };
   }
   async createWorkspaceFolder(name) {
-    const id = randomUUID3();
+    const id = randomUUID4();
     this.#workspaceFolders.set(id, { name });
     await this.#persist();
     return id;
   }
   async createSessionFolder(workspaceId, name) {
-    const id = randomUUID3();
+    const id = randomUUID4();
     this.#sessionFolders.set(id, { name, workspaceId });
     await this.#persist();
     return id;
   }
   async createPinnedFolder(name) {
-    const id = randomUUID3();
+    const id = randomUUID4();
     this.#pinnedFolders.set(id, { name });
     await this.#persist();
     return id;
@@ -6125,7 +7239,7 @@ var Folders = class {
       sessionAssignments: Object.fromEntries(this.#sessionAssignments),
       pinnedAssignments: Object.fromEntries(this.#pinnedAssignments)
     };
-    await mkdir9(path16.dirname(this.#storePath), { recursive: true });
+    await mkdir9(path17.dirname(this.#storePath), { recursive: true });
     await writeFile10(this.#storePath, JSON.stringify(file, null, 2), "utf8");
   }
 };
@@ -6148,15 +7262,16 @@ function isPinnedFolder(value) {
 
 // ../host/dist/app-settings.js
 import { mkdir as mkdir10, readFile as readFile12, writeFile as writeFile11 } from "node:fs/promises";
-import { homedir as homedir4 } from "node:os";
-import path17 from "node:path";
+import { homedir as homedir5 } from "node:os";
+import path18 from "node:path";
 var DEFAULT_AUTO_ARCHIVE_AFTER_MS = 2 * 24 * 60 * 60 * 1e3;
 var MIN_AUTO_ARCHIVE_AFTER_MS = 60 * 60 * 1e3;
 var DEFAULT_AUTO_STOP_AFTER_MS = 10 * 60 * 1e3;
 var MIN_AUTO_STOP_AFTER_MS = 60 * 1e3;
 var MIN_AUTO_SAVE_AFTER_PAUSE_MS = 500;
+var DEFAULT_BLOCKED_COUNTRIES = ["RU", "BY", "CN", "IR", "KP", "SY", "CU"];
 var FOLDER_ACCESS = ["all", "projects", "project"];
-var PROVIDERS = ["claude", "antigravity"];
+var PROVIDERS = ["claude", "antigravity", "codex"];
 var PERMISSION_MODES = [
   "default",
   "acceptEdits",
@@ -6191,13 +7306,17 @@ var DEFAULT_APP_SETTINGS = {
   limitStopFiveHourPct: 95,
   limitStopSevenDayPct: 99,
   // Оба: до появления настройки приложение предлагало обоих агентов.
-  enabledProviders: ["claude", "antigravity"]
+  enabledProviders: ["claude", "antigravity", "codex"],
+  // Включено: запрос без VPN может стоить аккаунта, а тому, у кого маршрут и
+  // так из разрешённой страны, защита ничем не мешает.
+  networkGuardEnabled: true,
+  networkGuardBlockedCountries: DEFAULT_BLOCKED_COUNTRIES
 };
 var AppSettingsStore = class {
   #settings = { ...DEFAULT_APP_SETTINGS };
   #storePath;
   constructor(dataDir) {
-    this.#storePath = path17.join(dataDir, "app-settings.json");
+    this.#storePath = path18.join(dataDir, "app-settings.json");
   }
   async load() {
     try {
@@ -6221,7 +7340,7 @@ var AppSettingsStore = class {
   async update(patch) {
     const next = sanitize2(patch, this.#settings);
     this.#settings = next;
-    await mkdir10(path17.dirname(this.#storePath), { recursive: true });
+    await mkdir10(path18.dirname(this.#storePath), { recursive: true });
     await writeFile11(this.#storePath, JSON.stringify(next, null, 2), "utf8");
     return this.current;
   }
@@ -6276,10 +7395,19 @@ function sanitize2(value, fallback) {
     if (picked.length > 0)
       result.enabledProviders = picked;
   }
+  if (typeof record.networkGuardEnabled === "boolean") {
+    result.networkGuardEnabled = record.networkGuardEnabled;
+  }
+  const countries = record.networkGuardBlockedCountries;
+  if (Array.isArray(countries)) {
+    result.networkGuardBlockedCountries = [
+      ...new Set(countries.filter((c) => typeof c === "string").map((c) => c.trim().toUpperCase()).filter((c) => /^[A-Z]{2}$/.test(c)))
+    ];
+  }
   return result;
 }
 function claudeHome() {
-  return path17.join(homedir4(), ".claude");
+  return path18.join(homedir5(), ".claude");
 }
 function writableRoots(mode, cwd, workspacePaths) {
   if (mode === "all")
@@ -6289,7 +7417,7 @@ function writableRoots(mode, cwd, workspacePaths) {
     return [...roots];
   for (const workspace of [cwd, ...workspacePaths]) {
     roots.add(workspace);
-    const parent = path17.dirname(workspace);
+    const parent = path18.dirname(workspace);
     if (parent !== workspace)
       roots.add(parent);
   }
@@ -6298,11 +7426,11 @@ function writableRoots(mode, cwd, workspacePaths) {
 
 // ../host/dist/handoff-store.js
 import { mkdir as mkdir11, readFile as readFile13, readdir as readdir3, rm as rm4, writeFile as writeFile12 } from "node:fs/promises";
-import path18 from "node:path";
+import path19 from "node:path";
 var HandoffStore = class {
   #dir;
   constructor(dataDir) {
-    this.#dir = path18.join(dataDir, "handoffs");
+    this.#dir = path19.join(dataDir, "handoffs");
   }
   async get(sessionId) {
     const file = this.#file(sessionId);
@@ -6339,7 +7467,7 @@ var HandoffStore = class {
   #file(sessionId) {
     if (!/^[\w-]{1,128}$/.test(sessionId))
       return null;
-    return path18.join(this.#dir, `${sessionId}.json`);
+    return path19.join(this.#dir, `${sessionId}.json`);
   }
 };
 var SAME_WINDOW_MS = 5 * 6e4;
@@ -6347,7 +7475,7 @@ var LimitStopState = class {
   #fired = {};
   #storePath;
   constructor(dataDir) {
-    this.#storePath = path18.join(dataDir, "limit-stop.json");
+    this.#storePath = path19.join(dataDir, "limit-stop.json");
   }
   async load() {
     try {
@@ -6383,7 +7511,7 @@ var LimitStopState = class {
   /** Запомнить срабатывание до `until` (момент сброса окна). */
   async mark(limit, until) {
     this.#fired[limit] = until;
-    await mkdir11(path18.dirname(this.#storePath), { recursive: true });
+    await mkdir11(path19.dirname(this.#storePath), { recursive: true });
     await writeFile12(this.#storePath, JSON.stringify(this.#fired, null, 2), "utf8");
   }
 };
@@ -6489,8 +7617,8 @@ function capitalize(text) {
 
 // ../host/dist/plugins.js
 import { readFile as readFile14 } from "node:fs/promises";
-import { homedir as homedir5 } from "node:os";
-import path19 from "node:path";
+import { homedir as homedir6 } from "node:os";
+import path20 from "node:path";
 var TIMEOUT_MS2 = 12e4;
 var SAFE_ARG = /^[A-Za-z0-9][A-Za-z0-9._@/-]*$/;
 var PluginCli = class {
@@ -6589,10 +7717,10 @@ async function readCatalog(markets, installed) {
   return lists.flat().sort((a, b) => a.name.localeCompare(b.name));
 }
 async function readMarketplace(market, installed) {
-  const root = market.installLocation || path19.join(homedir5(), ".claude", "plugins", "marketplaces", market.name);
+  const root = market.installLocation || path20.join(homedir6(), ".claude", "plugins", "marketplaces", market.name);
   let manifest;
   try {
-    const text = await readFile14(path19.join(root, ".claude-plugin", "marketplace.json"), "utf8");
+    const text = await readFile14(path20.join(root, ".claude-plugin", "marketplace.json"), "utf8");
     manifest = JSON.parse(text);
   } catch {
     return [];
@@ -6635,7 +7763,7 @@ function authorName(raw) {
 }
 
 // ../host/dist/auth.js
-import { EventEmitter as EventEmitter3 } from "node:events";
+import { EventEmitter as EventEmitter6 } from "node:events";
 var QUICK_TIMEOUT_MS = 3e4;
 var LOGIN_TIMEOUT_MS = 10 * 6e4;
 var URL_RE = /https:\/\/\S*\/oauth\/authorize\S*/;
@@ -6647,7 +7775,7 @@ var IDLE = {
   output: "",
   error: null
 };
-var AuthCli = class extends EventEmitter3 {
+var AuthCli = class extends EventEmitter6 {
   #child = null;
   #state = IDLE;
   #timer = null;
@@ -6832,9 +7960,9 @@ function describe5(error) {
 }
 
 // ../host/dist/relay-link.js
-import { EventEmitter as EventEmitter4 } from "node:events";
+import { EventEmitter as EventEmitter7 } from "node:events";
 import { readFile as readFile15, writeFile as writeFile13, rm as rm5, mkdir as mkdir12 } from "node:fs/promises";
-import path20 from "node:path";
+import path21 from "node:path";
 import { hostname } from "node:os";
 import WebSocket from "ws";
 
@@ -6851,7 +7979,7 @@ var SILENCE_TIMEOUT_MS = 95e3;
 function jitter(delay2) {
   return Math.round(delay2 * (0.8 + Math.random() * 0.4));
 }
-var RelayLink = class extends EventEmitter4 {
+var RelayLink = class extends EventEmitter7 {
   #credentials = null;
   #socket = null;
   #retry = RETRY_MIN_MS;
@@ -6889,7 +8017,7 @@ var RelayLink = class extends EventEmitter4 {
   #log;
   constructor(options2) {
     super();
-    this.#file = path20.join(options2.dataDir, "relay.json");
+    this.#file = path21.join(options2.dataDir, "relay.json");
     this.#defaultUrl = options2.defaultUrl.replace(/\/+$/, "");
     this.#log = options2.log ?? ((msg) => console.log(`[relay] ${msg}`));
   }
@@ -6983,7 +8111,7 @@ var RelayLink = class extends EventEmitter4 {
     }
   }
   async #write(credentials) {
-    await mkdir12(path20.dirname(this.#file), { recursive: true });
+    await mkdir12(path21.dirname(this.#file), { recursive: true });
     await writeFile13(this.#file, `${JSON.stringify(credentials, null, 2)}
 `, {
       encoding: "utf8",
@@ -7239,14 +8367,14 @@ function humanize(error) {
 }
 
 // ../host/dist/terminal.js
-import { EventEmitter as EventEmitter5 } from "node:events";
-import { access as access2, constants as constants2 } from "node:fs/promises";
-import path21 from "node:path";
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { EventEmitter as EventEmitter8 } from "node:events";
+import { access as access2, constants as constants3 } from "node:fs/promises";
+import path22 from "node:path";
+import { randomUUID as randomUUID5 } from "node:crypto";
 var SCROLLBACK_BYTES = 256 * 1024;
 var FLUSH_MS = 12;
 var MAX_TERMINALS = 24;
-var TerminalHub = class extends EventEmitter5 {
+var TerminalHub = class extends EventEmitter8 {
   #terminals = /* @__PURE__ */ new Map();
   #module = null;
   list(workspaceId) {
@@ -7279,7 +8407,7 @@ var TerminalHub = class extends EventEmitter5 {
       env: environment()
     });
     const info = {
-      id: randomUUID4(),
+      id: randomUUID5(),
       workspaceId: options2.workspaceId,
       title: shell.title,
       shell: shell.file,
@@ -7411,36 +8539,36 @@ async function defaultShell() {
     if (pwsh)
       return { file: pwsh, args: [], title: "pwsh" };
     const system = process.env.SystemRoot ?? "C:\\Windows";
-    const powershell = path21.join(system, "System32/WindowsPowerShell/v1.0/powershell.exe");
+    const powershell = path22.join(system, "System32/WindowsPowerShell/v1.0/powershell.exe");
     if (await exists2(powershell))
       return { file: powershell, args: [], title: "powershell" };
     return { file: process.env.COMSPEC ?? "cmd.exe", args: [], title: "cmd" };
   }
   const shell = process.env.SHELL;
   if (shell && await exists2(shell))
-    return { file: shell, args: [], title: path21.basename(shell) };
+    return { file: shell, args: [], title: path22.basename(shell) };
   if (await exists2("/bin/bash"))
     return { file: "/bin/bash", args: [], title: "bash" };
   return { file: "/bin/sh", args: [], title: "sh" };
 }
 async function findOnPath(name) {
-  const dirs = (process.env.PATH ?? "").split(path21.delimiter).filter(Boolean);
+  const dirs = (process.env.PATH ?? "").split(path22.delimiter).filter(Boolean);
   for (const dir of dirs) {
-    const candidate = path21.join(dir, name);
+    const candidate = path22.join(dir, name);
     if (await exists2(candidate))
       return candidate;
   }
   return null;
 }
 function exists2(file) {
-  return access2(file, constants2.X_OK).then(() => true, () => false);
+  return access2(file, constants3.X_OK).then(() => true, () => false);
 }
 
 // ../host/dist/mcp-config.js
 import { readFile as readFile16, writeFile as writeFile14, mkdir as mkdir13 } from "node:fs/promises";
-import path22 from "node:path";
+import path23 from "node:path";
 var MCP_FILE = ".mcp.json";
-var LOCAL_SETTINGS2 = path22.join(".claude", "settings.local.json");
+var LOCAL_SETTINGS2 = path23.join(".claude", "settings.local.json");
 var queues = /* @__PURE__ */ new Map();
 function serialize(cwd, work) {
   const previous = queues.get(cwd) ?? Promise.resolve();
@@ -7449,7 +8577,7 @@ function serialize(cwd, work) {
   return next;
 }
 async function readProjectServers(cwd) {
-  const file = await readJson(path22.join(cwd, MCP_FILE));
+  const file = await readJson(path23.join(cwd, MCP_FILE));
   const servers = file?.mcpServers;
   if (!servers || typeof servers !== "object")
     return {};
@@ -7457,23 +8585,23 @@ async function readProjectServers(cwd) {
 }
 function addProjectServer(cwd, name, config) {
   return serialize(cwd, async () => {
-    const file = await readJson(path22.join(cwd, MCP_FILE)) ?? {};
+    const file = await readJson(path23.join(cwd, MCP_FILE)) ?? {};
     const servers = file.mcpServers ?? {};
     servers[name] = config;
     file.mcpServers = servers;
-    await writeJson(path22.join(cwd, MCP_FILE), file);
+    await writeJson(path23.join(cwd, MCP_FILE), file);
     await approve(cwd, name);
   });
 }
 function removeProjectServer(cwd, name) {
   return serialize(cwd, async () => {
-    const file = await readJson(path22.join(cwd, MCP_FILE));
+    const file = await readJson(path23.join(cwd, MCP_FILE));
     const servers = file?.mcpServers;
     if (!servers || !(name in servers))
       return false;
     delete servers[name];
-    await writeJson(path22.join(cwd, MCP_FILE), file);
-    const settingsPath = path22.join(cwd, LOCAL_SETTINGS2);
+    await writeJson(path23.join(cwd, MCP_FILE), file);
+    const settingsPath = path23.join(cwd, LOCAL_SETTINGS2);
     const settings = await readJson(settingsPath);
     const enabled = settings?.enabledMcpjsonServers;
     if (settings && Array.isArray(enabled) && enabled.includes(name)) {
@@ -7484,7 +8612,7 @@ function removeProjectServer(cwd, name) {
   });
 }
 async function approve(cwd, name) {
-  const file = path22.join(cwd, LOCAL_SETTINGS2);
+  const file = path23.join(cwd, LOCAL_SETTINGS2);
   const settings = await readJson(file) ?? {};
   const enabled = Array.isArray(settings.enabledMcpjsonServers) ? settings.enabledMcpjsonServers : [];
   if (!enabled.includes(name))
@@ -7530,13 +8658,13 @@ async function readJson(file) {
     if (error.code === "ENOENT")
       return null;
     if (error instanceof SyntaxError) {
-      throw new Error(`\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0440\u0430\u0437\u043E\u0431\u0440\u0430\u0442\u044C ${path22.basename(file)}: ${error.message}`);
+      throw new Error(`\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0440\u0430\u0437\u043E\u0431\u0440\u0430\u0442\u044C ${path23.basename(file)}: ${error.message}`);
     }
     throw error;
   }
 }
 async function writeJson(file, data) {
-  await mkdir13(path22.dirname(file), { recursive: true });
+  await mkdir13(path23.dirname(file), { recursive: true });
   await writeFile14(file, `${JSON.stringify(data, null, 2)}
 `, "utf8");
 }
@@ -7555,6 +8683,8 @@ var BUSY_STATES2 = /* @__PURE__ */ new Set([
   "reconnecting"
 ]);
 var HostServer = class {
+  #httpServer = null;
+  #webSockets = null;
   #options;
   #workspaces;
   #archive;
@@ -7567,6 +8697,7 @@ var HostServer = class {
   /** Опросы статуса для идущих OAuth-входов MCP, ключ — сессия и сервер. */
   #mcpAuthWatch = /* @__PURE__ */ new Map();
   #antigravity;
+  #codex;
   /** Боковые сессии («вопрос на полях») по id родителя — не больше одной на разговор. */
   #sides = /* @__PURE__ */ new Map();
   /**
@@ -7614,7 +8745,7 @@ var HostServer = class {
   #limitHandoffBusy = /* @__PURE__ */ new Set();
   /** Живые id сессий, у которых сейчас пишется ручной хэндофф. */
   #handoffBusy = /* @__PURE__ */ new Set();
-  #hostId = randomUUID5();
+  #hostId = randomUUID6();
   #plugins = new PluginCli();
   #auth = new AuthCli();
   #relay;
@@ -7638,6 +8769,7 @@ var HostServer = class {
     this.#folders = new Folders(options2.dataDir);
     this.#settings = new AppSettingsStore(options2.dataDir);
     this.#antigravity = new AntigravityStore(options2.dataDir);
+    this.#codex = new AntigravityStore(options2.dataDir, "codex");
     this.#handoffs = new HandoffStore(options2.dataDir);
     this.#limitStop = new LimitStopState(options2.dataDir);
     this.#finder = new ProjectFinder(this.#workspaces);
@@ -7664,9 +8796,11 @@ var HostServer = class {
       const id = workspaceIdFromPath(dir);
       const onDisk = await this.#workspaces.sessionsOnDisk(id);
       const antigravity = await this.#antigravity.list(id);
-      return [...onDisk.map((s) => s.sessionId), ...antigravity.map((r) => r.id)];
+      const codex = await this.#codex.list(id);
+      return [...onDisk.map((s) => s.sessionId), ...antigravity.map((r) => r.id), ...codex.map((r) => r.id)];
     });
     await this.#antigravity.remapWorkspaceIds(remap);
+    await this.#codex.remapWorkspaceIds(remap);
     await this.#archive.remapWorkspaceIds(remap);
     await this.#pins.remapWorkspaceIds(remap);
     await this.#order.remapWorkspaceIds(remap);
@@ -7680,6 +8814,7 @@ var HostServer = class {
     await this.#folders.load();
     await this.#carryOverWorkspaceIds();
     await this.#settings.load();
+    this.#wireNetworkGuard();
     await this.#limitStop.load();
     await this.#github.load();
     await warmClaudeLauncher();
@@ -7700,6 +8835,8 @@ var HostServer = class {
         resolve();
       });
     });
+    this.#httpServer = httpServer;
+    this.#webSockets = wss;
     await this.#relay.start().catch((error) => {
       console.error("[relay]", error instanceof Error ? error.message : String(error));
     });
@@ -7708,7 +8845,25 @@ var HostServer = class {
     this.#limitTimer = setInterval(() => this.#sweepUsage(), LIMIT_SWEEP_MS);
     this.#limitTimer.unref();
   }
+  /**
+   * Защита от запросов без VPN (см. network-guard.ts): при блоке гасим
+   * процессы всех живых сессий — идущий ход шлёт запрос за запросом, и
+   * дожидаться его конца нельзя.
+   */
+  #wireNetworkGuard() {
+    networkGuard.on("change", (state) => {
+      this.#broadcast({ type: "network.state", state });
+      if (state.status !== "blocked")
+        return;
+      const reason = state.reason ?? "VPN \u043D\u0435 \u0440\u0430\u0431\u043E\u0442\u0430\u0435\u0442";
+      for (const session of this.#sessions.values())
+        session.suspend(reason);
+    });
+    const { networkGuardEnabled, networkGuardBlockedCountries } = this.#settings.current;
+    networkGuard.configure(networkGuardEnabled, networkGuardBlockedCountries);
+  }
   async shutdown() {
+    networkGuard.stop();
     if (this.#autoStopTimer)
       clearInterval(this.#autoStopTimer);
     this.#autoStopTimer = null;
@@ -7720,6 +8875,16 @@ var HostServer = class {
     await this.#relay.close();
     await Promise.all([...this.#sessions.values()].map((s) => s.close("host shutdown")));
     this.#sessions.clear();
+    const wss = this.#webSockets;
+    const http = this.#httpServer;
+    this.#webSockets = null;
+    this.#httpServer = null;
+    for (const socket of wss?.clients ?? [])
+      socket.terminate();
+    await Promise.all([
+      ...wss ? [new Promise((resolve) => wss.close(() => resolve()))] : [],
+      ...http ? [new Promise((resolve) => http.close(() => resolve()))] : []
+    ]);
   }
   // -------------------------------------------------------------------------
   // WebSocket
@@ -7876,6 +9041,7 @@ var HostServer = class {
         this.#sendLive(socket);
         this.#auth.status().then((status) => this.#send(socket, { type: "auth.status", status })).catch(() => void 0);
         this.#send(socket, { type: "relay.state", state: this.#relay.state });
+        this.#send(socket, { type: "network.state", state: networkGuard.state });
         return;
       case "ping":
         this.#send(socket, { type: "pong", nonce: frame.nonce });
@@ -7921,6 +9087,7 @@ var HostServer = class {
         return;
       }
       case "workspace.find.agent":
+        await networkGuard.ensureFresh();
         this.#findWithAgent(frame.query);
         return;
       case "workspace.roots":
@@ -8135,10 +9302,12 @@ var HostServer = class {
         return;
       }
       case "prompt.send":
+        await networkGuard.ensureFresh();
         this.#approveAfterLimit(frame.sessionId);
         this.#requireSession(frame.sessionId).sendPrompt(frame.text, frame.images);
         return;
       case "prompt.edit":
+        await networkGuard.ensureFresh();
         this.#approveAfterLimit(frame.sessionId);
         await this.#requireSession(frame.sessionId).editPrompt(frame.userIndex, frame.text, frame.images);
         return;
@@ -8146,6 +9315,7 @@ var HostServer = class {
         this.#requireSession(frame.sessionId).respondPermission(frame.requestId, frame.decision, frame.reason, frame.answers, frame.annotations, frame.plan);
         return;
       case "side.ask":
+        await networkGuard.ensureFresh();
         this.#ensureSide(this.#requireSession(frame.sessionId)).sendPrompt(frame.text);
         return;
       // Поднять форк, ничего не спрашивая: клиенту нужен его id, чтобы
@@ -8560,6 +9730,7 @@ var HostServer = class {
             await this.#sendSessionList(workspace.id);
           }
         }
+        networkGuard.configure(settings.networkGuardEnabled, settings.networkGuardBlockedCountries);
         if (before.terminalEnabled && !settings.terminalEnabled) {
           for (const terminal of this.#terminals.list()) {
             this.#terminals.close(terminal.id);
@@ -8572,9 +9743,13 @@ var HostServer = class {
         this.#send(socket, { type: "auth.status", status: await this.#auth.status() });
         this.#send(socket, { type: "auth.login", state: this.#auth.loginState });
         return;
-      case "auth.login":
+      case "auth.login": {
+        const blocked = (await networkGuard.ensureFresh()).status === "blocked";
+        if (blocked)
+          throw new Error(`${networkGuard.blockedReason()}. \u0412\u0445\u043E\u0434 \u043E\u0442\u043B\u043E\u0436\u0435\u043D.`);
         await this.#auth.login(frame.mode, frame.switchAccount === true);
         return;
+      }
       case "auth.code":
         this.#auth.submitCode(frame.code);
         return;
@@ -9109,7 +10284,31 @@ var HostServer = class {
       throw new Error(`\u0412\u043E\u0440\u043A\u0441\u043F\u0435\u0439\u0441 \u043D\u0435 \u043D\u0430\u0439\u0434\u0435\u043D: ${frame.workspaceId}`);
     const provider = frame.provider ?? "claude";
     if (!frame.resume && !this.#settings.current.enabledProviders.includes(provider)) {
-      throw new Error(`${provider === "antigravity" ? "Antigravity" : "Claude"} \u0432\u044B\u043A\u043B\u044E\u0447\u0435\u043D \u0432 \u043D\u0430\u0441\u0442\u0440\u043E\u0439\u043A\u0430\u0445`);
+      throw new Error(`${provider === "antigravity" ? "Antigravity" : provider === "codex" ? "Codex" : "Claude"} \u0432\u044B\u043A\u043B\u044E\u0447\u0435\u043D \u0432 \u043D\u0430\u0441\u0442\u0440\u043E\u0439\u043A\u0430\u0445`);
+    }
+    const codexRecord = frame.resume ? await this.#codex.find(frame.resume) : null;
+    if (codexRecord || !frame.resume && provider === "codex") {
+      if (frame.fork)
+        throw new Error("\u0412\u0435\u0442\u0432\u043B\u0435\u043D\u0438\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 Codex \u043F\u043E\u043A\u0430 \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044F");
+      if (codexRecord && codexRecord.workspaceId !== workspace.id)
+        throw new Error("\u0421\u0435\u0441\u0441\u0438\u044F Codex \u043F\u0440\u0438\u043D\u0430\u0434\u043B\u0435\u0436\u0438\u0442 \u0434\u0440\u0443\u0433\u043E\u043C\u0443 \u043F\u0440\u043E\u0435\u043A\u0442\u0443");
+      if (codexRecord)
+        await this.#archive.unarchive([codexRecord.id]);
+      const session2 = new CodexSession({
+        workspaceId: workspace.id,
+        cwd: codexRecord?.cwd ?? workspace.path,
+        store: this.#codex,
+        ...codexRecord ? { record: codexRecord } : {},
+        ...frame.permissionMode ? { permissionMode: frame.permissionMode } : {},
+        ...frame.model ? { model: frame.model } : {},
+        defaultTitle: workspace.name
+      });
+      this.#wire(session2);
+      this.#sessions.set(session2.id, session2);
+      session2.start();
+      this.#sendLive();
+      this.#send(socket, { type: "session.summary", session: session2.summary() });
+      return;
     }
     const agyRecord = frame.resume ? await this.#antigravity.find(frame.resume) : null;
     if (agyRecord || !frame.resume && frame.provider === "antigravity") {
@@ -9273,7 +10472,7 @@ var HostServer = class {
       this.#broadcast({ type: "context.state", sessionId: session.id, context });
     });
     session.on("stderr", (data) => {
-      const tag = session instanceof AntigravitySession ? "agy" : "claude";
+      const tag = session instanceof AntigravitySession ? "agy" : session instanceof CodexSession ? "codex" : "claude";
       process.stderr.write(`[${tag} ${session.id.slice(0, 8)}] ${data}`);
     });
   }
@@ -9293,7 +10492,7 @@ var HostServer = class {
    * разговора пока и не было.
    */
   #ensureSide(parent) {
-    if (parent instanceof AntigravitySession) {
+    if (!(parent instanceof ClaudeSession)) {
       throw new Error("\u0412\u043E\u043F\u0440\u043E\u0441 \u043D\u0430 \u043F\u043E\u043B\u044F\u0445 \u0434\u043E\u0441\u0442\u0443\u043F\u0435\u043D \u0442\u043E\u043B\u044C\u043A\u043E \u0432 \u0441\u0435\u0441\u0441\u0438\u044F\u0445 Claude");
     }
     const existing = this.#sides.get(parent.id);
@@ -9351,7 +10550,7 @@ var HostServer = class {
    */
   #roots() {
     const roots = this.#finder.roots();
-    return roots.length > 0 ? roots : [homedir6()];
+    return roots.length > 0 ? roots : [homedir7()];
   }
   /**
    * Где сессии этого каталога разрешено писать без вопроса.
@@ -9593,7 +10792,7 @@ var HostServer = class {
       live.setTitle(title);
       return;
     }
-    if (await this.#antigravity.rename(sessionId, title)) {
+    if (await this.#antigravity.rename(sessionId, title) || await this.#codex.rename(sessionId, title)) {
       if (workspaceId)
         await this.#sendSessionList(workspaceId);
       return;
@@ -9650,6 +10849,11 @@ var HostServer = class {
         continue;
       historical.push(antigravitySummary(record));
     }
+    for (const record of await this.#codex.list(workspaceId)) {
+      if (liveIds.has(record.id))
+        continue;
+      historical.push({ ...antigravitySummary(record), provider: "codex", switchModelsOnFlag: false });
+    }
     const known = /* @__PURE__ */ new Set([...liveIds, ...historical.map((s) => s.id)]);
     await this.#archive.sweep(workspaceId, historical.filter((s) => !this.#pins.has(s.id)).map((s) => ({ id: s.id, updatedAt: s.updatedAt })), known, this.#settings.current.autoArchiveAfterMs);
     await this.#pins.sweep(workspaceId, known);
@@ -9696,15 +10900,15 @@ var HostServer = class {
   }
   #serveStatic(req, res) {
     const webRoot = this.#options.webRoot;
-    if (!webRoot || !existsSync4(webRoot)) {
+    if (!webRoot || !existsSync5(webRoot)) {
       res.writeHead(200, { "content-type": "text/plain; charset=utf-8" });
       res.end("CCV host is running. UI is served by the Vite dev server.\n");
       return;
     }
     const url2 = new URL(req.url ?? "/", "http://localhost");
-    const requested = path23.join(webRoot, path23.normalize(url2.pathname));
-    const target = requested.startsWith(webRoot) && existsSync4(requested) && statSync3(requested).isFile() ? requested : path23.join(webRoot, "index.html");
-    if (!existsSync4(target)) {
+    const requested = path24.join(webRoot, path24.normalize(url2.pathname));
+    const target = requested.startsWith(webRoot) && existsSync5(requested) && statSync4(requested).isFile() ? requested : path24.join(webRoot, "index.html");
+    if (!existsSync5(target)) {
       res.writeHead(404).end("not found");
       return;
     }
@@ -9729,7 +10933,7 @@ function contentType(file) {
     ".svg": "image/svg+xml",
     ".woff2": "font/woff2"
   };
-  return types[path23.extname(file)] ?? "application/octet-stream";
+  return types[path24.extname(file)] ?? "application/octet-stream";
 }
 function antigravitySummary(record) {
   return {
@@ -9758,9 +10962,9 @@ function antigravitySummary(record) {
 }
 
 // dist/ccv.js
-var HERE = path24.dirname(fileURLToPath(import.meta.url));
-var PACKAGE_ROOT = path24.resolve(HERE, "..");
-var USAGE = `ccv \u2014 Claude Code Visual: \u043B\u043E\u043A\u0430\u043B\u044C\u043D\u044B\u0439 \u0445\u043E\u0441\u0442 Claude Code \u0441 \u0438\u043D\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043E\u043C \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.
+var HERE = path25.dirname(fileURLToPath(import.meta.url));
+var PACKAGE_ROOT = path25.resolve(HERE, "..");
+var USAGE = `ccv \u2014 Claude Code Visual: \u0438\u043D\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043A Claude Code, Codex \u0438 Antigravity \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.
 
 \u0418\u0441\u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u043D\u0438\u0435:
   ccv [\u043E\u043F\u0446\u0438\u0438]
@@ -9769,12 +10973,12 @@ var USAGE = `ccv \u2014 Claude Code Visual: \u043B\u043E\u043A\u0430\u043B\u044C
   -p, --port <\u043F\u043E\u0440\u0442>    \u043F\u043E\u0440\u0442 \u0445\u043E\u0441\u0442\u0430 (\u043F\u043E \u0443\u043C\u043E\u043B\u0447\u0430\u043D\u0438\u044E 8787)
       --host <\u0430\u0434\u0440\u0435\u0441>   \u0430\u0434\u0440\u0435\u0441 \u043F\u0440\u043E\u0441\u043B\u0443\u0448\u0438\u0432\u0430\u043D\u0438\u044F (\u043F\u043E \u0443\u043C\u043E\u043B\u0447\u0430\u043D\u0438\u044E 127.0.0.1)
       --no-open        \u043D\u0435 \u043E\u0442\u043A\u0440\u044B\u0432\u0430\u0442\u044C \u0431\u0440\u0430\u0443\u0437\u0435\u0440
-      --claude         \u0447\u0435\u043C \u0431\u0443\u0434\u0443\u0442 \u043F\u043E\u0434\u043D\u0438\u043C\u0430\u0442\u044C\u0441\u044F \u0441\u0435\u0441\u0441\u0438\u0438, \u0438 \u0432\u044B\u0439\u0442\u0438
+      --claude         \u0447\u0435\u043C \u0431\u0443\u0434\u0443\u0442 \u043F\u043E\u0434\u043D\u0438\u043C\u0430\u0442\u044C\u0441\u044F \u0441\u0435\u0441\u0441\u0438\u0438 Claude, \u0438 \u0432\u044B\u0439\u0442\u0438
   -v, --version        \u0432\u0435\u0440\u0441\u0438\u044F
   -h, --help           \u044D\u0442\u0430 \u0441\u043F\u0440\u0430\u0432\u043A\u0430
 
 \u041E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u0435: CCV_PORT, CCV_HOST, CCV_DATA_DIR, CCV_WEB_ROOT, CCV_RELAY_URL,
-CCV_CLAUDE_PATH, CCV_BUNDLED_CLAUDE.
+CCV_CLAUDE_PATH, CCV_BUNDLED_CLAUDE, CCV_CODEX_PATH, CCV_AGY_PATH.
 \u0424\u043B\u0430\u0433 \u0432\u0430\u0436\u043D\u0435\u0435 \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u043E\u0439 \u043E\u043A\u0440\u0443\u0436\u0435\u043D\u0438\u044F, \u043F\u0435\u0440\u0435\u043C\u0435\u043D\u043D\u0430\u044F \u0432\u0430\u0436\u043D\u0435\u0435 \u0437\u043D\u0430\u0447\u0435\u043D\u0438\u044F \u043F\u043E \u0443\u043C\u043E\u043B\u0447\u0430\u043D\u0438\u044E.`;
 var options = {
   port: { type: "string", short: "p" },
@@ -9826,7 +11030,7 @@ var server = new HostServer({
   dataDir: defaults.dataDir,
   // UI лежит в пакете рядом с бандлом — это и есть разница между установленной
   // утилитой и запуском из репозитория, где сборка живёт в `apps/web/dist`.
-  webRoot: process.env.CCV_WEB_ROOT ?? path24.join(PACKAGE_ROOT, "web"),
+  webRoot: process.env.CCV_WEB_ROOT ?? path25.join(PACKAGE_ROOT, "web"),
   version,
   relayUrl: defaults.relayUrl
 });
@@ -9855,7 +11059,7 @@ for (const signal of ["SIGINT", "SIGTERM"]) {
 }
 async function packageVersion() {
   try {
-    const text = await readFile17(path24.join(PACKAGE_ROOT, "package.json"), "utf8");
+    const text = await readFile17(path25.join(PACKAGE_ROOT, "package.json"), "utf8");
     return JSON.parse(text).version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -9899,7 +11103,7 @@ function openBrowser(target) {
     return;
   }
   const command = process.platform === "win32" ? { file: "cmd", args: ["/c", "start", "", target] } : process.platform === "darwin" ? { file: "open", args: [target] } : { file: "xdg-open", args: [target] };
-  const child = spawn3(command.file, command.args, {
+  const child = spawn4(command.file, command.args, {
     stdio: "ignore",
     detached: true,
     windowsHide: true