@ken-jo/agent-connector 0.4.95 → 0.4.98

package/dist/codebuff-D3MIKJHC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/codebuff/index.ts"],"sourcesContent":["/**\r\n * adapters/codebuff — Codebuff platform adapter for agent-connector.\r\n *\r\n * Codebuff is an **mcp-only** host: it exposes no lifecycle hook system, and MCP\r\n * is its extensibility mechanism. This adapter therefore installs only the MCP\r\n * server and reports hooks as unavailable (mirrors the Warp reference path that\r\n * validates the `mcp-only` paradigm end-to-end).\r\n *\r\n * MCP config (SPEC):\r\n *   - project scope (preferred) → <projectDir>/.agents/mcp.json\r\n *   - user scope               → ~/.agents/mcp.json\r\n *   Both are JSON, root key \"mcpServers\". There is no separate hook file — the\r\n *   hook \"config path\" is the same mcp.json so the generic doctor/backup behave\r\n *   sensibly.\r\n *\r\n * A stdio server entry is the standard `{ type:\"stdio\", command, args, env }`\r\n * shape. Codebuff supports native `$VAR` interpolation, so `${env:VAR}` refs are\r\n * rewritten to Codebuff's native `$VAR` token (rewriteEnvRefs) rather than being\r\n * resolved to literals — secrets are never baked into the config file.\r\n */\r\n\r\nimport { existsSync } from \"node:fs\";\r\nimport { homedir } from \"node:os\";\r\nimport { join } from \"node:path\";\r\n\r\nimport { BaseAdapter } from \"../base.js\";\r\nimport type { Adapter, InstallContext } from \"../spi.js\";\r\nimport type {\r\n  ChangeRecord,\r\n  DetectedPlatform,\r\n  HealthCheck,\r\n  HookParadigm,\r\n  PlatformCapabilities,\r\n  PlatformId,\r\n  ServerDef,\r\n  SubagentDef,\r\n  Transport,\r\n} from \"../../core/types.js\";\r\nimport { rewriteEnvRefs } from \"../../core/interpolate.js\";\r\nimport {\r\n  buildWrappedStdio,\r\n} from \"../../core/spawn.js\";\r\nimport { renderSkillMd } from \"../claude-code/render.js\";\r\n\r\nconst HOST: PlatformId = \"codebuff\";\r\nconst MCP_ROOT_KEY = \"mcpServers\";\r\n\r\n/**\r\n * Render `${env:VAR}`/`${env:VAR:-default}` into Codebuff's native `$VAR` token.\r\n *\r\n * When the portable ref carried a default (`${env:VAR:-fallback}`), Codebuff's\r\n * native `$VAR` token cannot express it — so a bare native token would silently\r\n * DROP the default. Instead, resolve the default at install time: emit the live\r\n * value when VAR is set and non-empty, else the literal fallback. The native\r\n * token is only emitted when there is no default to preserve.\r\n */\r\nconst toNativeRef = (name: string, def?: string): string => {\r\n  if (def !== undefined) {\r\n    const v = process.env[name];\r\n    return v != null && v !== \"\" ? v : def;\r\n  }\r\n  return `$${name}`;\r\n};\r\n\r\n/** Recursively rewrite every `${env:VAR}` ref in a JSON-ish value to `$VAR`. */\r\nfunction rewriteEnvRefsDeep<T>(value: T): T {\r\n  if (typeof value === \"string\") {\r\n    return rewriteEnvRefs(value, toNativeRef) as unknown as T;\r\n  }\r\n  if (Array.isArray(value)) {\r\n    return value.map((v) => rewriteEnvRefsDeep(v)) as unknown as T;\r\n  }\r\n  if (value && typeof value === \"object\") {\r\n    const out: Record<string, unknown> = {};\r\n    for (const [k, v] of Object.entries(value)) out[k] = rewriteEnvRefsDeep(v);\r\n    return out as T;\r\n  }\r\n  return value;\r\n}\r\n\r\n/**\r\n * Render one AgentDefinition field as a `  key: value,` line for the emitted\r\n * `.agents/<id>.ts` module. The value is serialized with JSON.stringify (correct\r\n * string/array/object escaping); a known-identifier key is emitted unquoted, and\r\n * anything else (only reachable via `extra`) is quoted. Multi-line JSON (arrays /\r\n * nested objects) is reindented so it sits under the 2-space object body.\r\n */\r\nfunction renderAgentField(key: string, value: unknown): string {\r\n  const k = /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : JSON.stringify(key);\r\n  const json = JSON.stringify(value, null, 2);\r\n  const v = json.includes(\"\\n\") ? json.replace(/\\n/g, \"\\n  \") : json;\r\n  return `  ${k}: ${v},`;\r\n}\r\n\r\n/**\r\n * Native MCP server entry shapes Codebuff accepts under `mcpServers`.\r\n * A stdio entry is tagged with `type:\"stdio\"`; remote transports carry a `url`.\r\n */\r\ninterface CodebuffStdioServer {\r\n  type: \"stdio\";\r\n  command: string;\r\n  args?: string[];\r\n  env?: Record<string, string>;\r\n}\r\ninterface CodebuffHttpServer {\r\n  type: \"http\";\r\n  url: string;\r\n  headers?: Record<string, string>;\r\n}\r\n\r\nexport class CodebuffAdapter extends BaseAdapter implements Adapter {\r\n  readonly id: PlatformId = HOST;\r\n  readonly name = \"Codebuff\";\r\n  readonly paradigm: HookParadigm = \"mcp-only\";\r\n\r\n  readonly capabilities: PlatformCapabilities = {\r\n    // Memory surface: AGENTS.md-first managed block via the BaseAdapter default\r\n    // (memoryTargets: project <projectDir>/AGENTS.md; user scope where documented).\r\n    supportsMemory: true,\r\n    // Codebuff has no lifecycle hook system — every hook capability is false.\r\n    preToolUse: false,\r\n    postToolUse: false,\r\n    preCompact: false,\r\n    sessionStart: false,\r\n    sessionEnd: false,\r\n    userPromptSubmit: false,\r\n    stop: false,\r\n    notification: false,\r\n    canModifyArgs: false,\r\n    canModifyOutput: false,\r\n    canInjectSessionContext: false,\r\n    // Codebuff registers stdio and Streamable HTTP MCP servers.\r\n    transports: [\"stdio\", \"http\"],\r\n    // Server env/url use Codebuff's NATIVE ${env:VAR} interpolation\r\n    // (rewriteEnvRefs) — the token survives into the config, never a baked\r\n    // literal — so the installer's unset-env-ref bake warn does not apply here.\r\n    nativeServerEnvInterpolation: true,\r\n    // Content surfaces: Codebuff reads AgentSkills from\r\n    // <configDir>/skills/<name>/SKILL.md (configDir is .agents, so the path is\r\n    // .agents/skills/<name>/SKILL.md). Verified against codebuff source\r\n    // sdk/src/skills/load-skills.ts — the frontmatter `name` MUST equal the dir\r\n    // name. Commands have no native Codebuff surface. Subagents ARE natively\r\n    // supported — executable .agents/*.ts AgentDefinition modules (codebuff docs:\r\n    // \"Create a new TypeScript file in .agents/\") — and are now WIRED:\r\n    // installSubagents emits one `.agents/<id>.ts` AgentDefinition module per\r\n    // declared subagent (PROJECT scope; see renderSubagent), each\r\n    // default-exporting the AgentDefinition object WITHOUT the type-only\r\n    // `agent-definition` import (erased at runtime; emitting it would only couple\r\n    // the module to a generated types file that may not exist).\r\n    supportsSkills: true,\r\n    supportsSubagents: true,\r\n  };\r\n\r\n  // ── Detection ────────────────────────────────────────────────────────────\r\n\r\n  detectInstalled(projectDir: string): DetectedPlatform {\r\n    const userDir = join(homedir(), \".agents\");\r\n    const userMcp = join(userDir, \"mcp.json\");\r\n    const projDir = join(projectDir, \".agents\");\r\n    const projMcp = join(projDir, \"mcp.json\");\r\n\r\n    const userInstalled = existsSync(userDir) || existsSync(userMcp);\r\n    const projInstalled = existsSync(projDir) || existsSync(projMcp);\r\n    const installed = userInstalled || projInstalled;\r\n    // Project is the preferred scope; fall back to user when only that matched.\r\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\r\n    const configPath = scope === \"project\" ? projMcp : userMcp;\r\n\r\n    return {\r\n      id: this.id,\r\n      name: this.name,\r\n      installed,\r\n      paradigm: this.paradigm,\r\n      capabilities: this.capabilities,\r\n      configPath,\r\n      scope,\r\n      reason: installed\r\n        ? `found Codebuff config (${scope})`\r\n        : `no .agents config dir at ${userDir} or ${projDir}`,\r\n      confidence: installed ? \"high\" : \"low\",\r\n    };\r\n  }\r\n\r\n  // ── Native paths ─────────────────────────────────────────────────────────\r\n\r\n  getConfigDir(ctx: InstallContext): string {\r\n    return ctx.scope === \"project\"\r\n      ? join(ctx.projectDir, \".agents\")\r\n      : join(homedir(), \".agents\");\r\n  }\r\n\r\n  getServerConfigPath(ctx: InstallContext): string {\r\n    return join(this.getConfigDir(ctx), \"mcp.json\");\r\n  }\r\n\r\n  /**\r\n   * Codebuff has no hook file — hooks are not a thing here. The hook \"config\r\n   * path\" is the same mcp.json so the generic doctor/backup behave sensibly.\r\n   */\r\n  getHookConfigPath(ctx: InstallContext): string {\r\n    return this.getServerConfigPath(ctx);\r\n  }\r\n\r\n  // ── MCP server install / uninstall ───────────────────────────────────────\r\n\r\n  installServer(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    const override = connector.platforms[HOST]?.server;\r\n    if (!connector.server || override === false) {\r\n      return [\r\n        {\r\n          platform: this.id,\r\n          action: \"skip\",\r\n          detail: connector.server\r\n            ? \"server registration disabled for codebuff\"\r\n            : \"connector declares no MCP server\",\r\n        },\r\n      ];\r\n    }\r\n\r\n    // Shallow-merge any per-platform server override into the base ServerDef.\r\n    const server: ServerDef =\r\n      override && typeof override === \"object\"\r\n        ? { ...connector.server, ...override }\r\n        : connector.server;\r\n\r\n    const serverPath = this.getServerConfigPath(ctx);\r\n    const entry = this.renderServerEntry(ctx, server);\r\n\r\n    return [\r\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\r\n    ];\r\n  }\r\n\r\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\r\n    const serverPath = this.getServerConfigPath(ctx);\r\n    return [\r\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\r\n    ];\r\n  }\r\n\r\n  /** Render a normalized ServerDef into Codebuff's native mcpServers entry. */\r\n  private renderServerEntry(\r\n    ctx: InstallContext,\r\n    server: ServerDef,\r\n  ): CodebuffStdioServer | CodebuffHttpServer {\r\n    const transport: Transport = server.transport;\r\n\r\n    if (transport === \"stdio\") {\r\n      let command = server.command ?? \"\";\r\n      let args = [...(server.args ?? [])];\r\n\r\n      // Transparent telemetry wrapping: route the real command through\r\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\r\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\r\n\r\n      // Codebuff supports native `$VAR` interpolation, so rewrite every\r\n      // ${env:VAR} ref to `$VAR` rather than baking literals into the config.\r\n      const entry: CodebuffStdioServer = {\r\n        type: \"stdio\",\r\n        command: rewriteEnvRefsDeep(command),\r\n      };\r\n      if (args.length > 0) entry.args = rewriteEnvRefsDeep(args);\r\n      const env = this.renderEnv(server.env);\r\n      if (env) entry.env = env;\r\n      return entry;\r\n    }\r\n\r\n    // http (and any other remote transport) — Codebuff registers a URL.\r\n    const entry: CodebuffHttpServer = {\r\n      type: \"http\",\r\n      url: rewriteEnvRefsDeep(server.url ?? \"\"),\r\n    };\r\n    const headers = this.renderEnv(server.headers);\r\n    if (headers) entry.headers = headers;\r\n    return entry;\r\n  }\r\n\r\n  /**\r\n   * Render env/header values. Codebuff supports native `$VAR` interpolation, so\r\n   * rewrite `${env:VAR}` references to `$VAR` rather than resolving to literals.\r\n   */\r\n  private renderEnv(\r\n    env: Record<string, string> | undefined,\r\n  ): Record<string, string> | undefined {\r\n    if (!env || Object.keys(env).length === 0) return undefined;\r\n    return rewriteEnvRefsDeep({ ...env });\r\n  }\r\n\r\n  // ── Content surfaces: skills ──────────────────────────────────────────────\r\n  // CONTENT-ONLY: pure native-file writers. No runtime dispatch, no home-bin\r\n  // pointer, no telemetry wrap. Each method is idempotent (byte-identical →\r\n  // skip) via writeContentFile and reversible via removeContentFile. Honors\r\n  // platforms[\"codebuff\"].skills === false to skip. Both user and project scope\r\n  // are supported (configDir resolves per scope).\r\n  //\r\n  // Native location:\r\n  //   skill → <configDir>/skills/<name>/SKILL.md (+ resources)\r\n  //           configDir is .agents, so .agents/skills/<name>/SKILL.md. Verified\r\n  //           against codebuff source sdk/src/skills/load-skills.ts — the\r\n  //           frontmatter `name` MUST equal the dir name.\r\n\r\n  private skillDir(ctx: InstallContext, name: string): string {\r\n    return join(this.getConfigDir(ctx), \"skills\", name);\r\n  }\r\n\r\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.platforms[HOST]?.skills === false) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for codebuff\" }];\r\n    }\r\n    if (connector.skills.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\r\n    }\r\n    const changes: ChangeRecord[] = [];\r\n    for (const skill of connector.skills) {\r\n      const dir = this.skillDir(ctx, skill.name);\r\n      changes.push(\r\n        this.writeContentFile(join(dir, \"SKILL.md\"), renderSkillMd(skill), ctx.dryRun),\r\n      );\r\n      // Bundle any resource files beside SKILL.md (relative path → contents).\r\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\r\n      // (config-time validation already rejects these, but never trust input).\r\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\r\n        const target = this.resolveWithin(dir, rel);\r\n        if (target === null) {\r\n          changes.push({\r\n            platform: this.id,\r\n            action: \"warn\",\r\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\r\n          });\r\n          continue;\r\n        }\r\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\r\n      }\r\n    }\r\n    return changes;\r\n  }\r\n\r\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.skills.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\r\n    }\r\n    const changes: ChangeRecord[] = [];\r\n    for (const skill of connector.skills) {\r\n      const dir = this.skillDir(ctx, skill.name);\r\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\r\n      // skill dir itself when we own its full contents.\r\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\r\n      for (const rel of Object.keys(skill.resources ?? {})) {\r\n        const target = this.resolveWithin(dir, rel);\r\n        if (target === null) continue; // never delete outside the skill dir\r\n        changes.push(this.removeContentFile(target, ctx.dryRun));\r\n      }\r\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\r\n      // dir that still holds user-added / sibling-tool / shared files.\r\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\r\n    }\r\n    return changes;\r\n  }\r\n\r\n  // ── Content surfaces: subagents ───────────────────────────────────────────\r\n  // CONTENT-ONLY: pure native-file writers (no runtime dispatch, no home-bin\r\n  // pointer, no telemetry wrap). Idempotent via writeContentFile, reversible via\r\n  // removeContentFile. Honors platforms[\"codebuff\"].subagents === false.\r\n  //\r\n  // Native location: codebuff agents are executable TypeScript modules in the\r\n  // PROJECT .agents/ dir — <projectDir>/.agents/<id>.ts (codebuff docs:\r\n  // \"Create a new TypeScript file in .agents/\"). No user-scope agents dir is\r\n  // documented, so user scope warn-skips (the warp/amp project-scoped precedent).\r\n\r\n  /** Native subagent module path: <configDir>/<name>.ts (= .agents/<name>.ts). */\r\n  private subagentPath(ctx: InstallContext, name: string): string {\r\n    return join(this.getConfigDir(ctx), `${name}.ts`);\r\n  }\r\n\r\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.platforms[HOST]?.subagents === false) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for codebuff\" }];\r\n    }\r\n    if (connector.subagents.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\r\n    }\r\n    // codebuff agents live in the PROJECT .agents/ dir; no user-scope agents dir\r\n    // is documented, so user scope warn-skips (mirrors warp/amp project-scoped).\r\n    if (ctx.scope !== \"project\") {\r\n      return [\r\n        {\r\n          platform: this.id,\r\n          action: \"warn\",\r\n          detail:\r\n            \"codebuff subagents are project-scoped only (.agents/*.ts; no documented \" +\r\n            `user-scope agents dir); ${connector.subagents.length} skipped`,\r\n        },\r\n      ];\r\n    }\r\n    return connector.subagents.map((agent) =>\r\n      this.writeContentFile(\r\n        this.subagentPath(ctx, agent.name),\r\n        this.renderSubagent(agent),\r\n        ctx.dryRun,\r\n      ),\r\n    );\r\n  }\r\n\r\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.subagents.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\r\n    }\r\n    if (ctx.scope !== \"project\") {\r\n      return [\r\n        { platform: this.id, action: \"skip\", detail: \"codebuff subagents are project-scoped only\" },\r\n      ];\r\n    }\r\n    return connector.subagents.map((agent) =>\r\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Render a subagent into a Codebuff `.agents/<id>.ts` AgentDefinition module:\r\n   *\r\n   *   const definition = {\r\n   *     id: \"<name>\",\r\n   *     ...\r\n   *   };\r\n   *\r\n   *   export default definition;\r\n   *\r\n   * Emitted WITHOUT the `import { AgentDefinition } from './types/agent-definition'`\r\n   * line the docs show: that import is TYPE-ONLY (erased at runtime), so omitting\r\n   * it avoids coupling the module to a generated types file that may not exist —\r\n   * a bare object literal + default export is a complete, valid AgentDefinition.\r\n   *\r\n   * Field mapping (ONLY fields AC's SubagentDef can populate; nothing fabricated):\r\n   *   id                 ← name (already kebab-case → a valid codebuff id)\r\n   *   displayName        ← name\r\n   *   spawnerPrompt      ← description (the delegation hint)\r\n   *   model              ← model        (OMITTED when the connector declares none)\r\n   *   toolNames          ← tools.allow  (OMITTED when none declared)\r\n   *   instructionsPrompt ← prompt       (the system prompt / instructions body)\r\n   * SubagentDef.readonly is NOT mapped: Codebuff expresses tool access through the\r\n   * `toolNames` allowlist and documents no read-only permission flag, and AC has no\r\n   * verified read-only tool taxonomy to synthesize one — so a readonly hint is\r\n   * carried only if the author restricts `tools.allow` themselves (or via `extra`).\r\n   * `extra` is merged LAST as the documented escape hatch — the only way to reach\r\n   * codebuff AgentDefinition fields AC does not model (version, outputMode,\r\n   * spawnableAgents, inputSchema, …); its values come from the connector author,\r\n   * never invented here.\r\n   */\r\n  private renderSubagent(agent: SubagentDef): string {\r\n    const def: Record<string, unknown> = {\r\n      id: agent.name,\r\n      displayName: agent.name,\r\n      spawnerPrompt: agent.description,\r\n    };\r\n    if (agent.model !== undefined) def.model = agent.model;\r\n    const allow = agent.tools?.allow;\r\n    if (allow && allow.length > 0) def.toolNames = [...allow];\r\n    def.instructionsPrompt = agent.prompt;\r\n    if (agent.extra) Object.assign(def, agent.extra);\r\n\r\n    const body = Object.entries(def)\r\n      .map(([k, v]) => renderAgentField(k, v))\r\n      .join(\"\\n\");\r\n    return `const definition = {\\n${body}\\n};\\n\\nexport default definition;\\n`;\r\n  }\r\n\r\n  // ── Hooks (unavailable — Codebuff is mcp-only) ────────────────────────────\r\n\r\n  installHooks(_ctx: InstallContext): ChangeRecord[] {\r\n    return [\r\n      {\r\n        platform: this.id,\r\n        action: \"skip\",\r\n        detail: \"hooks unavailable (Codebuff is mcp-only)\",\r\n      },\r\n    ];\r\n  }\r\n\r\n  uninstallHooks(_ctx: InstallContext): ChangeRecord[] {\r\n    return [\r\n      {\r\n        platform: this.id,\r\n        action: \"skip\",\r\n        detail: \"hooks unavailable (Codebuff is mcp-only)\",\r\n      },\r\n    ];\r\n  }\r\n\r\n  // ── Diagnostics ──────────────────────────────────────────────────────────\r\n\r\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\r\n    const mcpPath = this.getServerConfigPath(ctx);\r\n    const connectorId = ctx.connector.id;\r\n    const checks: HealthCheck[] = [\r\n      {\r\n        name: `${this.name}: mcp.json present`,\r\n        check: () =>\r\n          existsSync(mcpPath)\r\n            ? { status: \"OK\", detail: mcpPath }\r\n            : { status: \"FAIL\", detail: `not found: ${mcpPath}` },\r\n      },\r\n      {\r\n        name: `${this.name}: server entry registered`,\r\n        check: () => {\r\n          // Only assert what the connector declares: a server-less connector\r\n          // never writes a server entry, so its absence is healthy.\r\n          if (!ctx.connector.server) {\r\n            return { status: \"OK\", detail: \"no MCP server declared\" };\r\n          }\r\n          const cfg = this.readJson<{ [k: string]: Record<string, unknown> }>(mcpPath);\r\n          const bucket = cfg?.[MCP_ROOT_KEY];\r\n          if (!cfg || !bucket) {\r\n            return { status: \"FAIL\", detail: `no ${MCP_ROOT_KEY} in ${mcpPath}` };\r\n          }\r\n          return connectorId in bucket\r\n            ? { status: \"OK\", detail: `${MCP_ROOT_KEY}.${connectorId} present` }\r\n            : {\r\n                status: \"FAIL\",\r\n                detail: `no ${MCP_ROOT_KEY}.${connectorId} in ${mcpPath}`,\r\n              };\r\n        },\r\n      },\r\n    ];\r\n\r\n    // Content-surface checks: assert presence only for the skills this connector\r\n    // declares (a skill-less connector writes none, so absence is healthy).\r\n    for (const skill of ctx.connector.skills) {\r\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\r\n      checks.push({\r\n        name: `${this.name}: skill ${skill.name} present`,\r\n        check: () =>\r\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\r\n      });\r\n    }\r\n    // Subagent checks: codebuff agents are PROJECT-scoped .agents/*.ts modules,\r\n    // so assert presence only at project scope (user scope warn-skips install).\r\n    if (ctx.scope === \"project\") {\r\n      for (const agent of ctx.connector.subagents) {\r\n        const p = this.subagentPath(ctx, agent.name);\r\n        checks.push({\r\n          name: `${this.name}: subagent ${agent.name} present`,\r\n          check: () =>\r\n            existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\r\n        });\r\n      }\r\n    }\r\n    return checks;\r\n  }\r\n}\r\n\r\nexport const adapter = new CodebuffAdapter();\r\nexport default adapter;\r\n"],"mappings":";;;;;;;;;;;;;;;AAqBA,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AAqBrB,IAAM,OAAmB;AACzB,IAAM,eAAe;AAWrB,IAAM,cAAc,CAAC,MAAc,QAAyB;AAC1D,MAAI,QAAQ,QAAW;AACrB,UAAM,IAAI,QAAQ,IAAI,IAAI;AAC1B,WAAO,KAAK,QAAQ,MAAM,KAAK,IAAI;AAAA,EACrC;AACA,SAAO,IAAI,IAAI;AACjB;AAGA,SAAS,mBAAsB,OAAa;AAC1C,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,eAAe,OAAO,WAAW;AAAA,EAC1C;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,CAAC,MAAM,mBAAmB,CAAC,CAAC;AAAA,EAC/C;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,EAAG,KAAI,CAAC,IAAI,mBAAmB,CAAC;AACzE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AASA,SAAS,iBAAiB,KAAa,OAAwB;AAC7D,QAAM,IAAI,6BAA6B,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;AAC3E,QAAM,OAAO,KAAK,UAAU,OAAO,MAAM,CAAC;AAC1C,QAAM,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,OAAO,MAAM,IAAI;AAC9D,SAAO,KAAK,CAAC,KAAK,CAAC;AACrB;AAkBO,IAAM,kBAAN,cAA8B,YAA+B;AAAA,EACzD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA,IAEhB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA,IACd,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA;AAAA,IAEzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAI5B,8BAA8B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAa9B,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,SAAS;AACzC,UAAM,UAAU,KAAK,SAAS,UAAU;AACxC,UAAM,UAAU,KAAK,YAAY,SAAS;AAC1C,UAAM,UAAU,KAAK,SAAS,UAAU;AAExC,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AAEnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,0BAA0B,KAAK,MAC/B,4BAA4B,OAAO,OAAO,OAAO;AAAA,MACrD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,SAAS,IAC9B,KAAK,QAAQ,GAAG,SAAS;AAAA,EAC/B;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,oBAAoB,GAAG;AAAA,EACrC;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,8CACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAEhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QAC0C;AAC1C,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAI1E,YAAMA,SAA6B;AAAA,QACjC,MAAM;AAAA,QACN,SAAS,mBAAmB,OAAO;AAAA,MACrC;AACA,UAAI,KAAK,SAAS,EAAG,CAAAA,OAAM,OAAO,mBAAmB,IAAI;AACzD,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,aAAOA;AAAA,IACT;AAGA,UAAM,QAA4B;AAAA,MAChC,MAAM;AAAA,MACN,KAAK,mBAAmB,OAAO,OAAO,EAAE;AAAA,IAC1C;AACA,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,WAAO,mBAAmB,EAAE,GAAG,IAAI,CAAC;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,IAAI;AAAA,EACpD;AAAA,EAES,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,cAAc,KAAK,GAAG,IAAI,MAAM;AAAA,MAC/E;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,GAAG,IAAI,KAAK;AAAA,EAClD;AAAA,EAES,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,cAAc,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AAGA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QACE,mGAC2B,UAAU,UAAU,MAAM;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK;AAAA,QACH,KAAK,aAAa,KAAK,MAAM,IAAI;AAAA,QACjC,KAAK,eAAe,KAAK;AAAA,QACzB,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO;AAAA,QACL,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,6CAA6C;AAAA,MAC5F;AAAA,IACF;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiCQ,eAAe,OAA4B;AACjD,UAAM,MAA+B;AAAA,MACnC,IAAI,MAAM;AAAA,MACV,aAAa,MAAM;AAAA,MACnB,eAAe,MAAM;AAAA,IACvB;AACA,QAAI,MAAM,UAAU,OAAW,KAAI,QAAQ,MAAM;AACjD,UAAM,QAAQ,MAAM,OAAO;AAC3B,QAAI,SAAS,MAAM,SAAS,EAAG,KAAI,YAAY,CAAC,GAAG,KAAK;AACxD,QAAI,qBAAqB,MAAM;AAC/B,QAAI,MAAM,MAAO,QAAO,OAAO,KAAK,MAAM,KAAK;AAE/C,UAAM,OAAO,OAAO,QAAQ,GAAG,EAC5B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,EACtC,KAAK,IAAI;AACZ,WAAO;AAAA,EAAyB,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,EACtC;AAAA;AAAA,EAIA,aAAa,MAAsC;AACjD,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA,EAEA,eAAe,MAAsC;AACnD,WAAO;AAAA,MACL;AAAA,QACE,UAAU,KAAK;AAAA,QACf,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,UAAU,KAAK,oBAAoB,GAAG;AAC5C,UAAM,cAAc,IAAI,UAAU;AAClC,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,OAAO,IACd,EAAE,QAAQ,MAAM,QAAQ,QAAQ,IAChC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,OAAO,GAAG;AAAA,MAC1D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AAGX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAmD,OAAO;AAC3E,gBAAM,SAAS,MAAM,YAAY;AACjC,cAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,mBAAO,EAAE,QAAQ,QAAQ,QAAQ,MAAM,YAAY,OAAO,OAAO,GAAG;AAAA,UACtE;AACA,iBAAO,eAAe,SAClB,EAAE,QAAQ,MAAM,QAAQ,GAAG,YAAY,IAAI,WAAW,WAAW,IACjE;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ,MAAM,YAAY,IAAI,WAAW,OAAO,OAAO;AAAA,UACzD;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAIA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AAGA,QAAI,IAAI,UAAU,WAAW;AAC3B,iBAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,cAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,eAAO,KAAK;AAAA,UACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,UAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC9F,CAAC;AAAA,MACH;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAEO,IAAM,UAAU,IAAI,gBAAgB;AAC3C,IAAO,mBAAQ;","names":["entry"]}

package/dist/{codex-YAORPCOD.js → codex-DKBAAUCO.js}

@@ -2,17 +2,17 @@
 import {
   fileMtimeMs,
   readJsonlLines
-} from "./chunk-RK6VBLXP.js";
+} from "./chunk-ZSOS2KOR.js";
 import {
   firstExistingRoot,
   walkFiles
-} from "./chunk-O7SDRBVB.js";
+} from "./chunk-KM2YXO6V.js";
 import {
   emptyTokens,
   inferProvider,
   normalizeWorkspaceKey,
   workspaceLabelFromKey
-} from "./chunk-XD7MY6HB.js";
+} from "./chunk-7PSNXUFK.js";
 
 // src/usage/readers/codex.ts
 import { basename } from "path";
@@ -361,4 +361,4 @@ var codex_default = codexReader;
 export {
   codex_default as default
 };
-//# sourceMappingURL=codex-YAORPCOD.js.map
+//# sourceMappingURL=codex-DKBAAUCO.js.map

package/dist/codex-DKBAAUCO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/usage/readers/codex.ts"],"sourcesContent":["/**\r\n * usage/readers/codex — Codex CLI native session-log reader.\r\n *\r\n * Faithful port of tokscale sessions/codex.rs (the hard, stateful reader). Reads\r\n * ~/.codex/sessions/**\\/*.jsonl (and the rare *.json headless variants; the\r\n * rollout-*.jsonl files are just a subset of *.jsonl and need no special-casing).\r\n *\r\n * Codex logs a cumulative token snapshot on every `token_count` event, so naive\r\n * summing double-counts every turn. This reader reproduces codex.rs exactly:\r\n *\r\n *   - The per-turn increment comes from `payload.info.last_token_usage`\r\n *     (the DELTA source). `total_token_usage` is a mutable cumulative snapshot\r\n *     (compaction / context-window capping rewrites it) used ONLY for dedup and\r\n *     monotonicity / stale-regression checks — never as a direct delta source\r\n *     unless `last_token_usage` is absent.\r\n *   - State is tracked PER SESSION (per file): `previous_totals` is the last\r\n *     accepted cumulative baseline; each new snapshot must advance past it.\r\n *   - When the new total equals the previous baseline → skip (duplicate snapshot).\r\n *   - When the total regresses but `looks_like_stale_regression` holds (a small\r\n *     out-of-order dip that resumes from the true watermark next row) → skip,\r\n *     so `last_token_usage` is not counted twice.\r\n *   - Forked-child sessions replay parent token rows before their first\r\n *     `turn_context`; those inherited snapshots are skipped until totals move\r\n *     past the inherited baseline.\r\n *\r\n * Token mapping (CodexTotals::into_tokens): cached = min(cached, input); the\r\n * reported `input` already INCLUDES cached, so net input = input - cached\r\n * (clamped ≥ 0). cache_read = clamped cached, cache_write = 0, reasoning as-is.\r\n * `cached` itself is max(cached_input_tokens, cache_read_input_tokens).\r\n *\r\n * Model: model_info.slug > model > model_name > info.model > info.model_name,\r\n * falling back to the session's current_model (from turn_context). Provider:\r\n * session_meta.model_provider, else inferred from the model, else \"openai\".\r\n * Session id: the file stem. Project: session_meta.cwd, only when it looks like\r\n * an explicit absolute/UNC/drive path. Confidence is \"host-reported\".\r\n *\r\n * Dedup key (set only when the row had a real RFC3339 timestamp, matching\r\n * codex.rs which skips the key on the mtime fallback):\r\n *   codex:token_count:<ts>:<provider>:<model>:<in>:<out>:<cacheRead>:<cacheWrite>:<reasoning>\r\n *\r\n * Fail-open: no root → []; unreadable/malformed file or line → skipped.\r\n */\r\n\r\nimport { basename } from \"node:path\";\r\n\r\nimport type { TokenBreakdown, UsageReader, UsageRecord } from \"../types.js\";\r\nimport { emptyTokens } from \"../aggregate.js\";\r\nimport { fileMtimeMs, readJsonlLines } from \"../jsonl.js\";\r\nimport { inferProvider, normalizeWorkspaceKey, workspaceLabelFromKey } from \"../normalize.js\";\r\nimport { firstExistingRoot, walkFiles } from \"../paths.js\";\r\n\r\nconst PLATFORM_ID = \"codex\" as const;\r\nconst DEFAULT_MODEL = \"unknown\";\r\nconst DEFAULT_PROVIDER = \"openai\";\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// Wire shapes (everything optional / unknown — narrowed at use)\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\ninterface CodexTokenUsage {\r\n  input_tokens?: unknown;\r\n  output_tokens?: unknown;\r\n  cached_input_tokens?: unknown;\r\n  cache_read_input_tokens?: unknown;\r\n  reasoning_output_tokens?: unknown;\r\n  total_tokens?: unknown;\r\n}\r\n\r\ninterface CodexInfo {\r\n  model?: unknown;\r\n  model_name?: unknown;\r\n  last_token_usage?: CodexTokenUsage | null;\r\n  total_token_usage?: CodexTokenUsage | null;\r\n}\r\n\r\ninterface CodexModelInfo {\r\n  slug?: unknown;\r\n}\r\n\r\ninterface CodexPayload {\r\n  id?: unknown;\r\n  forked_from_id?: unknown;\r\n  type?: unknown;\r\n  model?: unknown;\r\n  model_name?: unknown;\r\n  model_info?: CodexModelInfo | null;\r\n  info?: CodexInfo | null;\r\n  source?: unknown;\r\n  cwd?: unknown;\r\n  model_provider?: unknown;\r\n  agent_nickname?: unknown;\r\n}\r\n\r\ninterface CodexEntry {\r\n  type?: unknown;\r\n  timestamp?: unknown;\r\n  payload?: CodexPayload | null;\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// CodexTotals — the four cumulative dimensions + delta / regression logic\r\n// (port of the Rust CodexTotals struct).\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\ninterface CodexTotals {\r\n  input: number;\r\n  output: number;\r\n  cached: number;\r\n  reasoning: number;\r\n}\r\n\r\n/** Coerce an unknown to a non-negative integer (0 on absence/garbage). */\r\nfunction toNonNegInt(v: unknown): number {\r\n  const n = typeof v === \"number\" ? v : typeof v === \"string\" ? Number(v) : NaN;\r\n  if (!Number.isFinite(n)) return 0;\r\n  return Math.max(0, Math.trunc(n));\r\n}\r\n\r\n/** Read a possibly-missing i64-ish field as an integer (may be negative). */\r\nfunction toIntOr(v: unknown, fallback: number): number {\r\n  const n = typeof v === \"number\" ? v : typeof v === \"string\" ? Number(v) : NaN;\r\n  if (!Number.isFinite(n)) return fallback;\r\n  return Math.trunc(n);\r\n}\r\n\r\n/** CodexTotals::from_usage — clamp each field ≥ 0; cached = max of both fields. */\r\nfunction totalsFromUsage(usage: CodexTokenUsage): CodexTotals {\r\n  const cached = Math.max(\r\n    toIntOr(usage.cached_input_tokens, 0),\r\n    toIntOr(usage.cache_read_input_tokens, 0),\r\n  );\r\n  return {\r\n    input: Math.max(0, toIntOr(usage.input_tokens, 0)),\r\n    output: Math.max(0, toIntOr(usage.output_tokens, 0)),\r\n    cached: Math.max(0, cached),\r\n    reasoning: Math.max(0, toIntOr(usage.reasoning_output_tokens, 0)),\r\n  };\r\n}\r\n\r\nfunction totalsEqual(a: CodexTotals, b: CodexTotals): boolean {\r\n  return a.input === b.input && a.output === b.output && a.cached === b.cached && a.reasoning === b.reasoning;\r\n}\r\n\r\n/** CodexTotals::delta_from — null when any dimension regressed. */\r\nfunction deltaFrom(self: CodexTotals, previous: CodexTotals): CodexTotals | null {\r\n  if (\r\n    self.input < previous.input ||\r\n    self.output < previous.output ||\r\n    self.cached < previous.cached ||\r\n    self.reasoning < previous.reasoning\r\n  ) {\r\n    return null;\r\n  }\r\n  return {\r\n    input: self.input - previous.input,\r\n    output: self.output - previous.output,\r\n    cached: self.cached - previous.cached,\r\n    reasoning: self.reasoning - previous.reasoning,\r\n  };\r\n}\r\n\r\n/** CodexTotals::saturating_add (plain add — values are well within Number range). */\r\nfunction saturatingAdd(self: CodexTotals, other: CodexTotals): CodexTotals {\r\n  return {\r\n    input: self.input + other.input,\r\n    output: self.output + other.output,\r\n    cached: self.cached + other.cached,\r\n    reasoning: self.reasoning + other.reasoning,\r\n  };\r\n}\r\n\r\nfunction totalsSum(t: CodexTotals): number {\r\n  return t.input + t.output + t.cached + t.reasoning;\r\n}\r\n\r\n/** CodexTotals::is_within — every dimension ≤ baseline. */\r\nfunction isWithin(self: CodexTotals, baseline: CodexTotals): boolean {\r\n  return (\r\n    self.input <= baseline.input &&\r\n    self.output <= baseline.output &&\r\n    self.cached <= baseline.cached &&\r\n    self.reasoning <= baseline.reasoning\r\n  );\r\n}\r\n\r\n/**\r\n * CodexTotals::looks_like_stale_regression — some snapshots arrive slightly out\r\n * of order: the cumulative total dips by ~one recent increment then resumes from\r\n * the true higher watermark next row. Treat those as stale (skip) rather than a\r\n * hard reset, so last_token_usage is not counted twice.\r\n */\r\nfunction looksLikeStaleRegression(self: CodexTotals, previous: CodexTotals, last: CodexTotals): boolean {\r\n  const previousTotal = totalsSum(previous);\r\n  const currentTotal = totalsSum(self);\r\n  const lastTotal = totalsSum(last);\r\n  if (previousTotal <= 0 || currentTotal <= 0 || lastTotal <= 0) return false;\r\n  return currentTotal * 100 >= previousTotal * 98 || currentTotal + lastTotal * 2 >= previousTotal;\r\n}\r\n\r\n/**\r\n * CodexTotals::into_tokens — clamp cached to ≤ input so malformed rows can't\r\n * inflate the total; net input = input - clamped_cached; cache_write = 0.\r\n */\r\nfunction intoTokens(t: CodexTotals): TokenBreakdown {\r\n  const clampedCached = Math.max(0, Math.min(t.cached, t.input));\r\n  const tokens = emptyTokens();\r\n  tokens.input = Math.max(0, t.input - clampedCached);\r\n  tokens.output = Math.max(0, t.output);\r\n  tokens.cacheRead = clampedCached;\r\n  tokens.cacheWrite = 0;\r\n  tokens.reasoning = Math.max(0, t.reasoning);\r\n  return tokens;\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// Per-file (per-session) parse state\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\ninterface CodexParseState {\r\n  currentModel: string | undefined;\r\n  previousTotals: CodexTotals | undefined;\r\n  sessionIsHeadless: boolean;\r\n  sessionProvider: string | undefined;\r\n  sessionAgent: string | undefined;\r\n  sessionWorkspaceKey: string | undefined;\r\n  sessionWorkspaceLabel: string | undefined;\r\n  forkedChildWaitingForTurnContext: boolean;\r\n  forkedChildInheritedBaseline: CodexTotals | undefined;\r\n  forkedChildInheritedReportedTotal: number | undefined;\r\n}\r\n\r\nfunction freshState(): CodexParseState {\r\n  return {\r\n    currentModel: undefined,\r\n    previousTotals: undefined,\r\n    sessionIsHeadless: false,\r\n    sessionProvider: undefined,\r\n    sessionAgent: undefined,\r\n    sessionWorkspaceKey: undefined,\r\n    sessionWorkspaceLabel: undefined,\r\n    forkedChildWaitingForTurnContext: false,\r\n    forkedChildInheritedBaseline: undefined,\r\n    forkedChildInheritedReportedTotal: undefined,\r\n  };\r\n}\r\n\r\n/**\r\n * A model-less token_count record buffered until a later turn resolves the\r\n * model (port of codex.rs `pending_model_messages`). codex.rs back-fills the\r\n * resolved model + dedup key onto these, and flushes any still-unresolved at EOF\r\n * as \"unknown\" — but STILL with a dedup key when the row had a real timestamp.\r\n * `usedFallbackTimestamp` mirrors `parsed_timestamp.is_none()`: when true the\r\n * dedup key is skipped on flush (the mtime fallback is not a stable identity).\r\n */\r\ninterface PendingCodexRecord {\r\n  record: UsageRecord;\r\n  tokens: TokenBreakdown;\r\n  providerId: string;\r\n  ts: number;\r\n  usedFallbackTimestamp: boolean;\r\n}\r\n\r\n/**\r\n * Flush every buffered model-less record with a now-resolved model (port of\r\n * flush_pending_model_messages): back-fill modelId and — when the row carried a\r\n * real timestamp — the codex dedup key keyed on that model.\r\n */\r\nfunction flushPending(pending: PendingCodexRecord[], out: UsageRecord[], model: string): void {\r\n  for (const p of pending) {\r\n    p.record.modelId = model;\r\n    if (!p.usedFallbackTimestamp) {\r\n      p.record.dedupKey = codexDedupKey(p.ts, p.providerId, model, p.tokens);\r\n    }\r\n    out.push(p.record);\r\n  }\r\n  pending.length = 0;\r\n}\r\n\r\n/** Flush remaining buffered records as \"unknown\" (still keyed when timestamped). */\r\nfunction flushPendingAsUnknown(pending: PendingCodexRecord[], out: UsageRecord[]): void {\r\n  if (pending.length === 0) return;\r\n  flushPending(pending, out, DEFAULT_MODEL);\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// Helpers\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\nfunction nonEmptyString(v: unknown): string | undefined {\r\n  return typeof v === \"string\" && v !== \"\" ? v : undefined;\r\n}\r\n\r\n/** session id from path file stem (port of session_id_from_path). */\r\nfunction sessionIdFromPath(path: string): string {\r\n  const name = basename(path);\r\n  const dot = name.lastIndexOf(\".\");\r\n  const stem = dot > 0 ? name.slice(0, dot) : name;\r\n  return stem === \"\" ? \"unknown\" : stem;\r\n}\r\n\r\n/** Parse an RFC3339 timestamp to epoch ms, or null (port of parse_codex_entry_timestamp). */\r\nfunction parseEntryTimestamp(v: unknown): number | null {\r\n  if (typeof v !== \"string\" || v === \"\") return null;\r\n  const ms = Date.parse(v);\r\n  return Number.isNaN(ms) ? null : ms;\r\n}\r\n\r\n/**\r\n * extract_model — model_info.slug > model > model_name > info.model >\r\n * info.model_name (first non-empty).\r\n */\r\nfunction extractModel(payload: CodexPayload): string | undefined {\r\n  return (\r\n    nonEmptyString(payload.model_info?.slug) ??\r\n    nonEmptyString(payload.model) ??\r\n    nonEmptyString(payload.model_name) ??\r\n    (payload.info ? extractModelFromInfo(payload.info) : undefined)\r\n  );\r\n}\r\n\r\n/** extract_model_from_info — info.model > info.model_name. */\r\nfunction extractModelFromInfo(info: CodexInfo): string | undefined {\r\n  return nonEmptyString(info.model) ?? nonEmptyString(info.model_name);\r\n}\r\n\r\n/** codex_source_is_exec — session_meta.source === \"exec\" marks a headless run. */\r\nfunction sourceIsExec(source: unknown): boolean {\r\n  return source === \"exec\";\r\n}\r\n\r\n/** forked_from_id_from_source — source.subagent.thread_spawn.parent_thread_id. */\r\nfunction forkedFromIdFromSource(source: unknown): string | undefined {\r\n  if (typeof source !== \"object\" || source === null) return undefined;\r\n  const sub = (source as Record<string, unknown>).subagent;\r\n  if (typeof sub !== \"object\" || sub === null) return undefined;\r\n  const spawn = (sub as Record<string, unknown>).thread_spawn;\r\n  if (typeof spawn !== \"object\" || spawn === null) return undefined;\r\n  const parent = (spawn as Record<string, unknown>).parent_thread_id;\r\n  return nonEmptyString(parent);\r\n}\r\n\r\n/**\r\n * codex_workspace_from_cwd — normalize the cwd, but only accept it when it looks\r\n * like an explicit absolute/UNC/drive path AND yields a label.\r\n */\r\nfunction workspaceFromCwd(cwd: string): { key?: string; label?: string } {\r\n  const normalized = normalizeWorkspaceKey(cwd);\r\n  if (normalized === undefined) return {};\r\n  // Reject control characters.\r\n  for (let i = 0; i < normalized.length; i++) {\r\n    const c = normalized.charCodeAt(i);\r\n    if (c < 0x20 || c === 0x7f) return {};\r\n  }\r\n  if (!looksLikeExplicitWorkspacePath(normalized)) return {};\r\n  const label = workspaceLabelFromKey(normalized);\r\n  if (label === undefined) return {};\r\n  return { key: normalized, label };\r\n}\r\n\r\n/** looks_like_explicit_workspace_path — leading `/` or `//`, or `X:/` drive. */\r\nfunction looksLikeExplicitWorkspacePath(path: string): boolean {\r\n  if (path.startsWith(\"//\") || path.startsWith(\"/\")) return true;\r\n  if (path.length >= 3) {\r\n    const c0 = path.charCodeAt(0);\r\n    const isAlpha = (c0 >= 0x41 && c0 <= 0x5a) || (c0 >= 0x61 && c0 <= 0x7a);\r\n    if (isAlpha && path[1] === \":\" && path[2] === \"/\") return true;\r\n  }\r\n  return false;\r\n}\r\n\r\n/** reported_total_tokens — info.total_token_usage.total_tokens when ≥ 0. */\r\nfunction reportedTotalTokens(usage: CodexTokenUsage): number | undefined {\r\n  const v = toIntOr(usage.total_tokens, NaN);\r\n  if (!Number.isFinite(v) || v < 0) return undefined;\r\n  return v;\r\n}\r\n\r\nfunction rememberForkedChildInheritedBaseline(state: CodexParseState, info: CodexInfo): void {\r\n  const totalUsage = info.total_token_usage;\r\n  if (!totalUsage) return;\r\n  const totals = totalsFromUsage(totalUsage);\r\n  state.previousTotals = totals;\r\n  state.forkedChildInheritedBaseline = totals;\r\n  state.forkedChildInheritedReportedTotal = reportedTotalTokens(totalUsage);\r\n}\r\n\r\nfunction forkedChildShouldSkipInheritedSnapshot(\r\n  state: CodexParseState,\r\n  totalUsage: CodexTokenUsage | null | undefined,\r\n  totals: CodexTotals | undefined,\r\n): boolean {\r\n  if (totalUsage && state.forkedChildInheritedReportedTotal !== undefined) {\r\n    const reported = reportedTotalTokens(totalUsage);\r\n    if (reported !== undefined && reported <= state.forkedChildInheritedReportedTotal) {\r\n      return true;\r\n    }\r\n  }\r\n  if (totals !== undefined && state.forkedChildInheritedBaseline !== undefined) {\r\n    return isWithin(totals, state.forkedChildInheritedBaseline);\r\n  }\r\n  return false;\r\n}\r\n\r\n/** The codex:token_count dedup key (port of codex_token_count_dedup_key). */\r\nfunction codexDedupKey(\r\n  ts: number,\r\n  provider: string,\r\n  model: string,\r\n  tokens: TokenBreakdown,\r\n): string {\r\n  return `codex:token_count:${ts}:${provider}:${model}:${tokens.input}:${tokens.output}:${tokens.cacheRead}:${tokens.cacheWrite}:${tokens.reasoning}`;\r\n}\r\n\r\nfunction tokensAllZero(t: TokenBreakdown): boolean {\r\n  return t.input === 0 && t.output === 0 && t.cacheRead === 0 && t.reasoning === 0;\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// File parse (port of parse_codex_reader, stateless single-pass)\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\nfunction parseCodexFile(path: string): UsageRecord[] {\r\n  const lines = readJsonlLines(path);\r\n  if (lines.length === 0) return [];\r\n\r\n  const sessionId = sessionIdFromPath(path);\r\n  const fallbackTs = fileMtimeMs(path);\r\n  const state = freshState();\r\n  const out: UsageRecord[] = [];\r\n  // Model-less token_count rows are buffered here and back-filled once a later\r\n  // turn resolves the model (else flushed as \"unknown\" WITH a dedup key at EOF).\r\n  const pending: PendingCodexRecord[] = [];\r\n\r\n  for (const raw of lines) {\r\n    if (typeof raw !== \"object\" || raw === null) continue;\r\n    const entry = raw as CodexEntry;\r\n    const payload = entry.payload;\r\n    if (payload === undefined || payload === null) continue;\r\n\r\n    const entryType = typeof entry.type === \"string\" ? entry.type : \"\";\r\n    const payloadType = typeof payload.type === \"string\" ? payload.type : undefined;\r\n    const isTokenCount = entryType === \"event_msg\" && payloadType === \"token_count\";\r\n\r\n    // ── Forked-child gate: replayed parent rows arrive before turn_context. ──\r\n    if (state.forkedChildWaitingForTurnContext) {\r\n      if (entryType === \"turn_context\") {\r\n        state.forkedChildWaitingForTurnContext = false;\r\n        state.currentModel = extractModel(payload);\r\n      } else {\r\n        if (isTokenCount && payload.info) {\r\n          rememberForkedChildInheritedBaseline(state, payload.info);\r\n        }\r\n        continue;\r\n      }\r\n    }\r\n\r\n    // ── session_meta: headless flag, fork detection, provider, cwd. ──\r\n    if (entryType === \"session_meta\") {\r\n      if (sourceIsExec(payload.source)) state.sessionIsHeadless = true;\r\n      const forkedFromId =\r\n        nonEmptyString(payload.forked_from_id) ?? forkedFromIdFromSource(payload.source);\r\n      if (forkedFromId !== undefined) {\r\n        state.forkedChildWaitingForTurnContext = true;\r\n        state.forkedChildInheritedBaseline = undefined;\r\n        state.forkedChildInheritedReportedTotal = undefined;\r\n      }\r\n      const provider = nonEmptyString(payload.model_provider);\r\n      if (provider !== undefined) state.sessionProvider = provider;\r\n      const nickname = nonEmptyString(payload.agent_nickname);\r\n      if (nickname !== undefined) state.sessionAgent = nickname;\r\n      if (typeof payload.cwd === \"string\") {\r\n        const ws = workspaceFromCwd(payload.cwd);\r\n        state.sessionWorkspaceKey = ws.key;\r\n        state.sessionWorkspaceLabel = ws.label;\r\n      }\r\n      continue;\r\n    }\r\n\r\n    // ── turn_context: sets the current model for subsequent token rows. When\r\n    // it resolves a model, flush any buffered model-less rows onto it. ──\r\n    if (entryType === \"turn_context\") {\r\n      state.currentModel = extractModel(payload);\r\n      if (state.currentModel !== undefined) {\r\n        flushPending(pending, out, state.currentModel);\r\n      }\r\n      continue;\r\n    }\r\n\r\n    if (!isTokenCount) continue;\r\n\r\n    const info = payload.info;\r\n    if (info === undefined || info === null) continue;\r\n\r\n    // Resolve model: payload model > info model > current session model.\r\n    const payloadModel = extractModel(payload);\r\n    const infoModel = extractModelFromInfo(info);\r\n    const model = payloadModel ?? infoModel ?? state.currentModel;\r\n    if (model !== undefined) {\r\n      state.currentModel = model;\r\n      // A resolved model back-fills any earlier model-less rows (codex.rs flushes\r\n      // pending_model_messages here before building the current record).\r\n      flushPending(pending, out, model);\r\n    }\r\n\r\n    const totalUsageRaw = info.total_token_usage ?? undefined;\r\n    const lastUsageRaw = info.last_token_usage ?? undefined;\r\n    const totalUsage = totalUsageRaw ? totalsFromUsage(totalUsageRaw) : undefined;\r\n    const lastUsage = lastUsageRaw ? totalsFromUsage(lastUsageRaw) : undefined;\r\n\r\n    // Forked child may replay >1 parent token row after the first turn_context.\r\n    if (forkedChildShouldSkipInheritedSnapshot(state, totalUsageRaw, totalUsage)) {\r\n      continue;\r\n    }\r\n    state.forkedChildInheritedBaseline = undefined;\r\n    state.forkedChildInheritedReportedTotal = undefined;\r\n\r\n    // ── Delta selection (exact port of the Rust match arms). ──\r\n    let tokensTotals: CodexTotals | undefined;\r\n    let nextTotals: CodexTotals | undefined;\r\n    const previous = state.previousTotals;\r\n\r\n    if (totalUsage !== undefined && lastUsage !== undefined && previous !== undefined) {\r\n      // Both present with previous baseline (standard path).\r\n      if (totalsEqual(totalUsage, previous)) continue;\r\n      if (deltaFrom(totalUsage, previous) === null && looksLikeStaleRegression(totalUsage, previous, lastUsage)) {\r\n        continue;\r\n      }\r\n      tokensTotals = lastUsage;\r\n      nextTotals = totalUsage;\r\n    } else if (totalUsage !== undefined && lastUsage !== undefined && previous === undefined) {\r\n      // Both present, first event — use last (not full total).\r\n      tokensTotals = lastUsage;\r\n      nextTotals = totalUsage;\r\n    } else if (totalUsage !== undefined && lastUsage === undefined && previous !== undefined) {\r\n      // Only total, have previous (defensive).\r\n      if (totalsEqual(totalUsage, previous)) continue;\r\n      const delta = deltaFrom(totalUsage, previous);\r\n      if (delta !== null) {\r\n        tokensTotals = delta;\r\n        nextTotals = totalUsage;\r\n      } else {\r\n        state.previousTotals = totalUsage;\r\n        continue;\r\n      }\r\n    } else if (totalUsage !== undefined && lastUsage === undefined && previous === undefined) {\r\n      // Only total, first event, no last — legacy/degraded path.\r\n      tokensTotals = totalUsage;\r\n      nextTotals = totalUsage;\r\n    } else if (totalUsage === undefined && lastUsage !== undefined && previous !== undefined) {\r\n      // Only last, have previous.\r\n      tokensTotals = lastUsage;\r\n      nextTotals = saturatingAdd(previous, lastUsage);\r\n    } else if (totalUsage === undefined && lastUsage !== undefined && previous === undefined) {\r\n      // Only last, no previous.\r\n      tokensTotals = lastUsage;\r\n      nextTotals = undefined;\r\n    } else {\r\n      // Neither.\r\n      continue;\r\n    }\r\n\r\n    const tokens = intoTokens(tokensTotals);\r\n\r\n    // Skip zero-token snapshots WITHOUT advancing the baseline, so post-compaction\r\n    // zeros don't inflate later deltas.\r\n    if (tokensAllZero(tokens)) continue;\r\n\r\n    state.previousTotals = nextTotals;\r\n\r\n    const parsedTs = parseEntryTimestamp(entry.timestamp);\r\n    const ts = parsedTs ?? fallbackTs;\r\n\r\n    const modelId = model ?? DEFAULT_MODEL;\r\n    const providerId = state.sessionProvider ?? inferProvider(modelId) ?? DEFAULT_PROVIDER;\r\n    const agent = state.sessionIsHeadless ? \"headless\" : state.sessionAgent;\r\n\r\n    const record: UsageRecord = {\r\n      platformId: PLATFORM_ID,\r\n      modelId,\r\n      providerId,\r\n      sessionId,\r\n      tokens,\r\n      ts,\r\n      messageCount: 1,\r\n      confidence: \"host-reported\",\r\n    };\r\n    if (state.sessionWorkspaceKey !== undefined) record.projectKey = state.sessionWorkspaceKey;\r\n    if (state.sessionWorkspaceLabel !== undefined) record.projectLabel = state.sessionWorkspaceLabel;\r\n    if (agent !== undefined) record.agent = agent;\r\n\r\n    if (model === undefined) {\r\n      // Model not yet resolved: buffer the record and defer modelId + dedupKey\r\n      // until a later turn resolves the model (codex.rs pending_model_messages).\r\n      // At EOF it flushes as \"unknown\" but STILL with a dedup key when the row\r\n      // carried a real timestamp — so it can dedup against cross-source overlap.\r\n      pending.push({\r\n        record,\r\n        tokens,\r\n        providerId,\r\n        ts,\r\n        usedFallbackTimestamp: parsedTs === null,\r\n      });\r\n      continue;\r\n    }\r\n\r\n    // Dedup key only when a real timestamp was parsed (mtime fallback skips it,\r\n    // matching codex.rs which sets the key only when parsed_timestamp.is_some()).\r\n    if (parsedTs !== null) {\r\n      record.dedupKey = codexDedupKey(ts, providerId, model, tokens);\r\n    }\r\n    out.push(record);\r\n  }\r\n\r\n  // EOF: any token_count rows whose model never resolved are emitted as\r\n  // \"unknown\" — keeping a dedup key when their timestamp was real (codex.rs\r\n  // flush_pending_model_messages_as_unknown at end of file).\r\n  flushPendingAsUnknown(pending, out);\r\n\r\n  return out;\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// Reader\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\n/** The Codex CLI usage reader singleton. */\r\nconst codexReader: UsageReader = {\r\n  platformId: PLATFORM_ID,\r\n  kind: \"local\",\r\n  async read({ sinceMs }: { sinceMs?: number }): Promise<UsageRecord[]> {\r\n    const root = firstExistingRoot(PLATFORM_ID);\r\n    if (root === undefined) return []; // no ~/.codex/sessions → fail-open\r\n\r\n    // ~/.codex/sessions/**/*.jsonl (+ *.json headless). rollout-*.jsonl is a\r\n    // subset of *.jsonl and is matched by the same predicate.\r\n    const files = walkFiles(root, (name) => name.endsWith(\".jsonl\") || name.endsWith(\".json\"));\r\n\r\n    const records: UsageRecord[] = [];\r\n    for (const file of files) {\r\n      const rows = parseCodexFile(file);\r\n      for (const row of rows) {\r\n        if (sinceMs !== undefined && row.ts < sinceMs) continue;\r\n        records.push(row);\r\n      }\r\n    }\r\n    return records;\r\n  },\r\n};\r\n\r\nexport default codexReader;\r\n"],"mappings":";;;;;;;;;;;;;;;;;AA2CA,SAAS,gBAAgB;AAQzB,IAAM,cAAc;AACpB,IAAM,gBAAgB;AACtB,IAAM,mBAAmB;AAkEzB,SAAS,QAAQ,GAAY,UAA0B;AACrD,QAAM,IAAI,OAAO,MAAM,WAAW,IAAI,OAAO,MAAM,WAAW,OAAO,CAAC,IAAI;AAC1E,MAAI,CAAC,OAAO,SAAS,CAAC,EAAG,QAAO;AAChC,SAAO,KAAK,MAAM,CAAC;AACrB;AAGA,SAAS,gBAAgB,OAAqC;AAC5D,QAAM,SAAS,KAAK;AAAA,IAClB,QAAQ,MAAM,qBAAqB,CAAC;AAAA,IACpC,QAAQ,MAAM,yBAAyB,CAAC;AAAA,EAC1C;AACA,SAAO;AAAA,IACL,OAAO,KAAK,IAAI,GAAG,QAAQ,MAAM,cAAc,CAAC,CAAC;AAAA,IACjD,QAAQ,KAAK,IAAI,GAAG,QAAQ,MAAM,eAAe,CAAC,CAAC;AAAA,IACnD,QAAQ,KAAK,IAAI,GAAG,MAAM;AAAA,IAC1B,WAAW,KAAK,IAAI,GAAG,QAAQ,MAAM,yBAAyB,CAAC,CAAC;AAAA,EAClE;AACF;AAEA,SAAS,YAAY,GAAgB,GAAyB;AAC5D,SAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE;AACpG;AAGA,SAAS,UAAU,MAAmB,UAA2C;AAC/E,MACE,KAAK,QAAQ,SAAS,SACtB,KAAK,SAAS,SAAS,UACvB,KAAK,SAAS,SAAS,UACvB,KAAK,YAAY,SAAS,WAC1B;AACA,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,OAAO,KAAK,QAAQ,SAAS;AAAA,IAC7B,QAAQ,KAAK,SAAS,SAAS;AAAA,IAC/B,QAAQ,KAAK,SAAS,SAAS;AAAA,IAC/B,WAAW,KAAK,YAAY,SAAS;AAAA,EACvC;AACF;AAGA,SAAS,cAAc,MAAmB,OAAiC;AACzE,SAAO;AAAA,IACL,OAAO,KAAK,QAAQ,MAAM;AAAA,IAC1B,QAAQ,KAAK,SAAS,MAAM;AAAA,IAC5B,QAAQ,KAAK,SAAS,MAAM;AAAA,IAC5B,WAAW,KAAK,YAAY,MAAM;AAAA,EACpC;AACF;AAEA,SAAS,UAAU,GAAwB;AACzC,SAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE;AAC3C;AAGA,SAAS,SAAS,MAAmB,UAAgC;AACnE,SACE,KAAK,SAAS,SAAS,SACvB,KAAK,UAAU,SAAS,UACxB,KAAK,UAAU,SAAS,UACxB,KAAK,aAAa,SAAS;AAE/B;AAQA,SAAS,yBAAyB,MAAmB,UAAuB,MAA4B;AACtG,QAAM,gBAAgB,UAAU,QAAQ;AACxC,QAAM,eAAe,UAAU,IAAI;AACnC,QAAM,YAAY,UAAU,IAAI;AAChC,MAAI,iBAAiB,KAAK,gBAAgB,KAAK,aAAa,EAAG,QAAO;AACtE,SAAO,eAAe,OAAO,gBAAgB,MAAM,eAAe,YAAY,KAAK;AACrF;AAMA,SAAS,WAAW,GAAgC;AAClD,QAAM,gBAAgB,KAAK,IAAI,GAAG,KAAK,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;AAC7D,QAAM,SAAS,YAAY;AAC3B,SAAO,QAAQ,KAAK,IAAI,GAAG,EAAE,QAAQ,aAAa;AAClD,SAAO,SAAS,KAAK,IAAI,GAAG,EAAE,MAAM;AACpC,SAAO,YAAY;AACnB,SAAO,aAAa;AACpB,SAAO,YAAY,KAAK,IAAI,GAAG,EAAE,SAAS;AAC1C,SAAO;AACT;AAmBA,SAAS,aAA8B;AACrC,SAAO;AAAA,IACL,cAAc;AAAA,IACd,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,IACnB,iBAAiB;AAAA,IACjB,cAAc;AAAA,IACd,qBAAqB;AAAA,IACrB,uBAAuB;AAAA,IACvB,kCAAkC;AAAA,IAClC,8BAA8B;AAAA,IAC9B,mCAAmC;AAAA,EACrC;AACF;AAuBA,SAAS,aAAa,SAA+B,KAAoB,OAAqB;AAC5F,aAAW,KAAK,SAAS;AACvB,MAAE,OAAO,UAAU;AACnB,QAAI,CAAC,EAAE,uBAAuB;AAC5B,QAAE,OAAO,WAAW,cAAc,EAAE,IAAI,EAAE,YAAY,OAAO,EAAE,MAAM;AAAA,IACvE;AACA,QAAI,KAAK,EAAE,MAAM;AAAA,EACnB;AACA,UAAQ,SAAS;AACnB;AAGA,SAAS,sBAAsB,SAA+B,KAA0B;AACtF,MAAI,QAAQ,WAAW,EAAG;AAC1B,eAAa,SAAS,KAAK,aAAa;AAC1C;AAMA,SAAS,eAAe,GAAgC;AACtD,SAAO,OAAO,MAAM,YAAY,MAAM,KAAK,IAAI;AACjD;AAGA,SAAS,kBAAkB,MAAsB;AAC/C,QAAM,OAAO,SAAS,IAAI;AAC1B,QAAM,MAAM,KAAK,YAAY,GAAG;AAChC,QAAM,OAAO,MAAM,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI;AAC5C,SAAO,SAAS,KAAK,YAAY;AACnC;AAGA,SAAS,oBAAoB,GAA2B;AACtD,MAAI,OAAO,MAAM,YAAY,MAAM,GAAI,QAAO;AAC9C,QAAM,KAAK,KAAK,MAAM,CAAC;AACvB,SAAO,OAAO,MAAM,EAAE,IAAI,OAAO;AACnC;AAMA,SAAS,aAAa,SAA2C;AAC/D,SACE,eAAe,QAAQ,YAAY,IAAI,KACvC,eAAe,QAAQ,KAAK,KAC5B,eAAe,QAAQ,UAAU,MAChC,QAAQ,OAAO,qBAAqB,QAAQ,IAAI,IAAI;AAEzD;AAGA,SAAS,qBAAqB,MAAqC;AACjE,SAAO,eAAe,KAAK,KAAK,KAAK,eAAe,KAAK,UAAU;AACrE;AAGA,SAAS,aAAa,QAA0B;AAC9C,SAAO,WAAW;AACpB;AAGA,SAAS,uBAAuB,QAAqC;AACnE,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,QAAM,MAAO,OAAmC;AAChD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,QAAM,QAAS,IAAgC;AAC/C,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,SAAU,MAAkC;AAClD,SAAO,eAAe,MAAM;AAC9B;AAMA,SAAS,iBAAiB,KAA+C;AACvE,QAAM,aAAa,sBAAsB,GAAG;AAC5C,MAAI,eAAe,OAAW,QAAO,CAAC;AAEtC,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,UAAM,IAAI,WAAW,WAAW,CAAC;AACjC,QAAI,IAAI,MAAQ,MAAM,IAAM,QAAO,CAAC;AAAA,EACtC;AACA,MAAI,CAAC,+BAA+B,UAAU,EAAG,QAAO,CAAC;AACzD,QAAM,QAAQ,sBAAsB,UAAU;AAC9C,MAAI,UAAU,OAAW,QAAO,CAAC;AACjC,SAAO,EAAE,KAAK,YAAY,MAAM;AAClC;AAGA,SAAS,+BAA+B,MAAuB;AAC7D,MAAI,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,GAAG,EAAG,QAAO;AAC1D,MAAI,KAAK,UAAU,GAAG;AACpB,UAAM,KAAK,KAAK,WAAW,CAAC;AAC5B,UAAM,UAAW,MAAM,MAAQ,MAAM,MAAU,MAAM,MAAQ,MAAM;AACnE,QAAI,WAAW,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,IAAK,QAAO;AAAA,EAC5D;AACA,SAAO;AACT;AAGA,SAAS,oBAAoB,OAA4C;AACvE,QAAM,IAAI,QAAQ,MAAM,cAAc,GAAG;AACzC,MAAI,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAG,QAAO;AACzC,SAAO;AACT;AAEA,SAAS,qCAAqC,OAAwB,MAAuB;AAC3F,QAAM,aAAa,KAAK;AACxB,MAAI,CAAC,WAAY;AACjB,QAAM,SAAS,gBAAgB,UAAU;AACzC,QAAM,iBAAiB;AACvB,QAAM,+BAA+B;AACrC,QAAM,oCAAoC,oBAAoB,UAAU;AAC1E;AAEA,SAAS,uCACP,OACA,YACA,QACS;AACT,MAAI,cAAc,MAAM,sCAAsC,QAAW;AACvE,UAAM,WAAW,oBAAoB,UAAU;AAC/C,QAAI,aAAa,UAAa,YAAY,MAAM,mCAAmC;AACjF,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI,WAAW,UAAa,MAAM,iCAAiC,QAAW;AAC5E,WAAO,SAAS,QAAQ,MAAM,4BAA4B;AAAA,EAC5D;AACA,SAAO;AACT;AAGA,SAAS,cACP,IACA,UACA,OACA,QACQ;AACR,SAAO,qBAAqB,EAAE,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,IAAI,OAAO,MAAM,IAAI,OAAO,SAAS,IAAI,OAAO,UAAU,IAAI,OAAO,SAAS;AACnJ;AAEA,SAAS,cAAc,GAA4B;AACjD,SAAO,EAAE,UAAU,KAAK,EAAE,WAAW,KAAK,EAAE,cAAc,KAAK,EAAE,cAAc;AACjF;AAMA,SAAS,eAAe,MAA6B;AACnD,QAAM,QAAQ,eAAe,IAAI;AACjC,MAAI,MAAM,WAAW,EAAG,QAAO,CAAC;AAEhC,QAAM,YAAY,kBAAkB,IAAI;AACxC,QAAM,aAAa,YAAY,IAAI;AACnC,QAAM,QAAQ,WAAW;AACzB,QAAM,MAAqB,CAAC;AAG5B,QAAM,UAAgC,CAAC;AAEvC,aAAW,OAAO,OAAO;AACvB,QAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM;AAC7C,UAAM,QAAQ;AACd,UAAM,UAAU,MAAM;AACtB,QAAI,YAAY,UAAa,YAAY,KAAM;AAE/C,UAAM,YAAY,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAChE,UAAM,cAAc,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AACtE,UAAM,eAAe,cAAc,eAAe,gBAAgB;AAGlE,QAAI,MAAM,kCAAkC;AAC1C,UAAI,cAAc,gBAAgB;AAChC,cAAM,mCAAmC;AACzC,cAAM,eAAe,aAAa,OAAO;AAAA,MAC3C,OAAO;AACL,YAAI,gBAAgB,QAAQ,MAAM;AAChC,+CAAqC,OAAO,QAAQ,IAAI;AAAA,QAC1D;AACA;AAAA,MACF;AAAA,IACF;AAGA,QAAI,cAAc,gBAAgB;AAChC,UAAI,aAAa,QAAQ,MAAM,EAAG,OAAM,oBAAoB;AAC5D,YAAM,eACJ,eAAe,QAAQ,cAAc,KAAK,uBAAuB,QAAQ,MAAM;AACjF,UAAI,iBAAiB,QAAW;AAC9B,cAAM,mCAAmC;AACzC,cAAM,+BAA+B;AACrC,cAAM,oCAAoC;AAAA,MAC5C;AACA,YAAM,WAAW,eAAe,QAAQ,cAAc;AACtD,UAAI,aAAa,OAAW,OAAM,kBAAkB;AACpD,YAAM,WAAW,eAAe,QAAQ,cAAc;AACtD,UAAI,aAAa,OAAW,OAAM,eAAe;AACjD,UAAI,OAAO,QAAQ,QAAQ,UAAU;AACnC,cAAM,KAAK,iBAAiB,QAAQ,GAAG;AACvC,cAAM,sBAAsB,GAAG;AAC/B,cAAM,wBAAwB,GAAG;AAAA,MACnC;AACA;AAAA,IACF;AAIA,QAAI,cAAc,gBAAgB;AAChC,YAAM,eAAe,aAAa,OAAO;AACzC,UAAI,MAAM,iBAAiB,QAAW;AACpC,qBAAa,SAAS,KAAK,MAAM,YAAY;AAAA,MAC/C;AACA;AAAA,IACF;AAEA,QAAI,CAAC,aAAc;AAEnB,UAAM,OAAO,QAAQ;AACrB,QAAI,SAAS,UAAa,SAAS,KAAM;AAGzC,UAAM,eAAe,aAAa,OAAO;AACzC,UAAM,YAAY,qBAAqB,IAAI;AAC3C,UAAM,QAAQ,gBAAgB,aAAa,MAAM;AACjD,QAAI,UAAU,QAAW;AACvB,YAAM,eAAe;AAGrB,mBAAa,SAAS,KAAK,KAAK;AAAA,IAClC;AAEA,UAAM,gBAAgB,KAAK,qBAAqB;AAChD,UAAM,eAAe,KAAK,oBAAoB;AAC9C,UAAM,aAAa,gBAAgB,gBAAgB,aAAa,IAAI;AACpE,UAAM,YAAY,eAAe,gBAAgB,YAAY,IAAI;AAGjE,QAAI,uCAAuC,OAAO,eAAe,UAAU,GAAG;AAC5E;AAAA,IACF;AACA,UAAM,+BAA+B;AACrC,UAAM,oCAAoC;AAG1C,QAAI;AACJ,QAAI;AACJ,UAAM,WAAW,MAAM;AAEvB,QAAI,eAAe,UAAa,cAAc,UAAa,aAAa,QAAW;AAEjF,UAAI,YAAY,YAAY,QAAQ,EAAG;AACvC,UAAI,UAAU,YAAY,QAAQ,MAAM,QAAQ,yBAAyB,YAAY,UAAU,SAAS,GAAG;AACzG;AAAA,MACF;AACA,qBAAe;AACf,mBAAa;AAAA,IACf,WAAW,eAAe,UAAa,cAAc,UAAa,aAAa,QAAW;AAExF,qBAAe;AACf,mBAAa;AAAA,IACf,WAAW,eAAe,UAAa,cAAc,UAAa,aAAa,QAAW;AAExF,UAAI,YAAY,YAAY,QAAQ,EAAG;AACvC,YAAM,QAAQ,UAAU,YAAY,QAAQ;AAC5C,UAAI,UAAU,MAAM;AAClB,uBAAe;AACf,qBAAa;AAAA,MACf,OAAO;AACL,cAAM,iBAAiB;AACvB;AAAA,MACF;AAAA,IACF,WAAW,eAAe,UAAa,cAAc,UAAa,aAAa,QAAW;AAExF,qBAAe;AACf,mBAAa;AAAA,IACf,WAAW,eAAe,UAAa,cAAc,UAAa,aAAa,QAAW;AAExF,qBAAe;AACf,mBAAa,cAAc,UAAU,SAAS;AAAA,IAChD,WAAW,eAAe,UAAa,cAAc,UAAa,aAAa,QAAW;AAExF,qBAAe;AACf,mBAAa;AAAA,IACf,OAAO;AAEL;AAAA,IACF;AAEA,UAAM,SAAS,WAAW,YAAY;AAItC,QAAI,cAAc,MAAM,EAAG;AAE3B,UAAM,iBAAiB;AAEvB,UAAM,WAAW,oBAAoB,MAAM,SAAS;AACpD,UAAM,KAAK,YAAY;AAEvB,UAAM,UAAU,SAAS;AACzB,UAAM,aAAa,MAAM,mBAAmB,cAAc,OAAO,KAAK;AACtE,UAAM,QAAQ,MAAM,oBAAoB,aAAa,MAAM;AAE3D,UAAM,SAAsB;AAAA,MAC1B,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AACA,QAAI,MAAM,wBAAwB,OAAW,QAAO,aAAa,MAAM;AACvE,QAAI,MAAM,0BAA0B,OAAW,QAAO,eAAe,MAAM;AAC3E,QAAI,UAAU,OAAW,QAAO,QAAQ;AAExC,QAAI,UAAU,QAAW;AAKvB,cAAQ,KAAK;AAAA,QACX;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,uBAAuB,aAAa;AAAA,MACtC,CAAC;AACD;AAAA,IACF;AAIA,QAAI,aAAa,MAAM;AACrB,aAAO,WAAW,cAAc,IAAI,YAAY,OAAO,MAAM;AAAA,IAC/D;AACA,QAAI,KAAK,MAAM;AAAA,EACjB;AAKA,wBAAsB,SAAS,GAAG;AAElC,SAAO;AACT;AAOA,IAAM,cAA2B;AAAA,EAC/B,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,MAAM,KAAK,EAAE,QAAQ,GAAiD;AACpE,UAAM,OAAO,kBAAkB,WAAW;AAC1C,QAAI,SAAS,OAAW,QAAO,CAAC;AAIhC,UAAM,QAAQ,UAAU,MAAM,CAAC,SAAS,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,OAAO,CAAC;AAEzF,UAAM,UAAyB,CAAC;AAChC,eAAW,QAAQ,OAAO;AACxB,YAAM,OAAO,eAAe,IAAI;AAChC,iBAAW,OAAO,MAAM;AACtB,YAAI,YAAY,UAAa,IAAI,KAAK,QAAS;AAC/C,gBAAQ,KAAK,GAAG;AAAA,MAClB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAEA,IAAO,gBAAQ;","names":[]}

package/dist/{codex-CPNKTXG3.js → codex-ZKLP5IXZ.js}

@@ -1,31 +1,31 @@
 #!/usr/bin/env node
 import {
   codexConfigHome
-} from "./chunk-UM5S7DKK.js";
+} from "./chunk-C747DYNT.js";
 import {
   writeTomlString
-} from "./chunk-OPXAP3AC.js";
+} from "./chunk-XN7S44U4.js";
 import {
   normalizeSessionSource
-} from "./chunk-H53QZQJI.js";
+} from "./chunk-PSGTHJQU.js";
 import {
   resolveEnvRefsDeep
-} from "./chunk-BEFVJ2OE.js";
+} from "./chunk-XXLCMSD3.js";
 import {
   BaseAdapter,
   removeFromObjectMap,
   renderCommandMd,
   renderSkillMd,
   upsertInObjectMap
-} from "./chunk-MGTDQLJJ.js";
+} from "./chunk-UNU2KPYJ.js";
 import {
   buildHomeBinHookCommand,
   buildWrappedStdio
-} from "./chunk-4NHXLXSD.js";
-import "./chunk-UMQ6NBQR.js";
+} from "./chunk-W7AGWAMH.js";
+import "./chunk-ILWHLGIC.js";
 import {
   ensureDir
-} from "./chunk-GZGLCCEE.js";
+} from "./chunk-QYOUQCC6.js";
 
 // src/adapters/codex/index.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";
@@ -762,4 +762,4 @@ export {
   adapter,
   codex_default as default
 };
-//# sourceMappingURL=codex-CPNKTXG3.js.map
+//# sourceMappingURL=codex-ZKLP5IXZ.js.map

package/dist/codex-ZKLP5IXZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/codex/index.ts"],"sourcesContent":["/**\r\n * adapters/codex — Codex CLI platform adapter for agent-connector.\r\n *\r\n * Codex CLI hook paradigm is \"json-stdio\": the host pipes a JSON payload to a\r\n * command on stdin and reads JSON/exit-code back — the same wire protocol as\r\n * Claude Code (PascalCase fields, `hookSpecificOutput` reply wrapper).\r\n *\r\n * Two native config files live under the Codex config dir\r\n * (`$CODEX_HOME` || `~/.codex`, mirrored to `<projectDir>/.codex` for project\r\n * scope):\r\n *   - config.toml  → `[mcp_servers.<id>]` MCP registration (TOML, NO native\r\n *     interpolation, so env-refs are resolved to literals at install time).\r\n *   - hooks.json   → Claude-compatible hook registration ({ matcher, hooks }).\r\n *\r\n * Grounded in context-mode's proven Codex adapter (configs/codex/{config.toml,\r\n * hooks.json}, src/adapters/codex/*) — exact TOML MCP shape + hook JSON schema.\r\n *\r\n * Codex capabilities (upstream, verified against openai/codex source at the\r\n * stable release tags noted):\r\n *   - PreToolUse `updatedInput` rewrite IS honored (PR #20527, commit d08906a9,\r\n *     stable since codex 0.131.0; applied in the shell/mcp/apply_patch tool\r\n *     handlers, confirmed present through 0.141.0) — hence canModifyArgs is now\r\n *     TRUE. Codex's output_parser.rs requires the rewrite to be paired with\r\n *     `permissionDecision:\"allow\"` (an allow WITHOUT updatedInput, and an\r\n *     updatedInput WITHOUT allow, are both rejected as invalid), so \"modify\"\r\n *     emits the allow+updatedInput envelope together. The still-open tracking\r\n *     issue openai/codex#18491 is now scoped to a NARROWER gap — read_file/grep\r\n *     have no PreToolUse handler yet — not to updatedInput itself, which works\r\n *     for every tool that fires PreToolUse (shell/Bash, apply_patch, MCP).\r\n *   - PostToolUse `updatedMCPToolOutput` is still explicitly rejected as\r\n *     \"unsupported\" by output_parser.rs (no output-rewrite field on\r\n *     PostToolUseOutput at 0.141.0) — hence canModifyOutput stays FALSE.\r\n *\r\n * E1 extension events (verified against developers.openai.com/codex/hooks):\r\n *   - PermissionRequest — native, decision-capable via the nested\r\n *     hookSpecificOutput.decision{behavior:\"allow\"|\"deny\", message?} envelope.\r\n *     Codex docs: updatedInput / updatedPermissions / interrupt FAIL CLOSED on\r\n *     this event, so they are never emitted here.\r\n *   - SubagentStart — native; hookSpecificOutput.additionalContext is injected\r\n *     as developer context for the subagent (not blockable).\r\n *   - SubagentStop — native; the documented continuation shape is the TOP-LEVEL\r\n *     {\"decision\":\"block\",\"reason\"} (Stop semantics: keeps the subagent going).\r\n *   - PostToolUseFailure — NO Codex analog (PostToolUse only); declared hooks\r\n *     for it warn-skip at install and the capability flag stays unset.\r\n *   - PostCompact — native (Codex's hook system fires both PreCompact and\r\n *     PostCompact); observe-only, normalizing the `trigger` (manual|auto)\r\n *     exactly like PreCompact, with a passthrough formatReply.\r\n */\r\n\r\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\r\nimport { homedir } from \"node:os\";\r\nimport { dirname, join } from \"node:path\";\r\n\r\nimport TOML from \"@iarna/toml\";\r\n\r\nimport type {\r\n  ChangeRecord,\r\n  DetectedPlatform,\r\n  HealthCheck,\r\n  HookEventName,\r\n  HookParadigm,\r\n  HookResponse,\r\n  PlatformCapabilities,\r\n  PlatformId,\r\n  ServerDef,\r\n  SkillDef,\r\n  SubagentDef,\r\n} from \"../../core/types.js\";\r\nimport { ensureDir } from \"../../core/paths.js\";\r\nimport { codexConfigHome } from \"../../core/host-paths.js\";\r\nimport { resolveEnvRefsDeep } from \"../../core/interpolate.js\";\r\nimport {\r\n  removeFromObjectMap,\r\n  upsertInObjectMap,\r\n  type ObjectMapCodec,\r\n} from \"../../core/object-map.js\";\r\nimport { writeTomlString } from \"../../core/toml.js\";\r\nimport {\r\n  buildHomeBinHookCommand,\r\n  buildWrappedStdio,\r\n} from \"../../core/spawn.js\";\r\nimport { renderCommandMd, renderSkillMd } from \"../claude-code/render.js\";\r\nimport { normalizeSessionSource } from \"../claude-code/wire.js\";\r\nimport { BaseAdapter, type HookMergeDescriptor } from \"../base.js\";\r\nimport type {\r\n  HookReply,\r\n  InstallContext,\r\n  MemoryTarget,\r\n  NormalizedEvent,\r\n} from \"../spi.js\";\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// Native shapes\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\n/** Raw Codex hook payload (PascalCase event, snake_case fields — Claude-style). */\r\ninterface CodexHookInput {\r\n  tool_name?: string;\r\n  tool_input?: Record<string, unknown>;\r\n  // PostToolUse only. The host serializes this as serde_json::Value (any JSON):\r\n  // a BARE STRING for shell/apply_patch (e.g. json!(\"shell output\")) but an\r\n  // OBJECT for MCP/structured tools (the serialized CallToolResult, e.g.\r\n  // json!({content,structuredContent,isError})) — NOT always a string. Typed\r\n  // `unknown` so PostToolUse coerces it for the string-typed toolOutput.\r\n  // Primary source: openai/codex codex-rs/hooks/src/schema.rs PostToolUseCommandInput\r\n  // `tool_response: Value` + core/src/tools/handlers/{mcp.rs object, shell_tests.rs string}.\r\n  tool_response?: unknown;\r\n  session_id?: string;\r\n  cwd?: string;\r\n  hook_event_name?: string;\r\n  source?: string;\r\n  prompt?: string;\r\n  // NO is_error: Codex's PostToolUseCommandInput struct (#[serde(deny_unknown_fields)])\r\n  // never serializes a top-level is_error — the error signal for MCP tools lives\r\n  // INSIDE tool_response as the CallToolResult `isError`. The field was removed;\r\n  // see derivePostToolUseIsError below. (openai/codex codex-rs/hooks/src/schema.rs:317-337)\r\n  stop_hook_active?: boolean;\r\n  trigger?: string;\r\n  message?: string;\r\n  // PostToolUseFailure-style failure field. Codex has NO failure event today;\r\n  // parsed defensively only (the Claude-compatible wire would carry it).\r\n  error?: string;\r\n  // SubagentStart / SubagentStop (agent_type is the matcher subject).\r\n  agent_id?: string;\r\n  agent_type?: string;\r\n  // SubagentStop only — the subagent's own transcript + final message.\r\n  agent_transcript_path?: string;\r\n  last_assistant_message?: string;\r\n}\r\n\r\n/** One hook entry inside hooks.json (Claude-compatible). */\r\ninterface CodexHookEntry {\r\n  matcher?: string;\r\n  hooks: Array<{ type: \"command\"; command: string }>;\r\n}\r\n\r\n/** Rendered `[mcp_servers.<id>]` table — string env table, no interpolation. */\r\ninterface CodexMcpEntry {\r\n  // stdio transport\r\n  command?: string;\r\n  args?: string[];\r\n  env?: Record<string, string>;\r\n  // streamable HTTP transport (remote): codex infers the transport from `url`\r\n  // (no explicit transport key). Verified against codex-cli 0.139.0.\r\n  url?: string;\r\n  bearer_token_env_var?: string;\r\n  http_headers?: Record<string, string>;\r\n}\r\n\r\n/**\r\n * Codex hook events agent-connector registers, in the canonical → native order.\r\n * Codex uses the same PascalCase event names as Claude Code; the home-binary\r\n * hook command receives the lowercased event token.\r\n */\r\nconst CODEX_HOOK_EVENTS = [\r\n  \"SessionStart\",\r\n  \"PreToolUse\",\r\n  \"PostToolUse\",\r\n  \"PreCompact\",\r\n  \"UserPromptSubmit\",\r\n  \"Stop\",\r\n  \"PermissionRequest\",\r\n  \"SubagentStart\",\r\n  \"SubagentStop\",\r\n  \"PostCompact\",\r\n] as const;\r\n\r\ntype CodexHookEventName = (typeof CODEX_HOOK_EVENTS)[number];\r\n\r\n/**\r\n * Newer E1 canonical events with NO Codex analog: Codex ships PostToolUse only —\r\n * there is no failure event on the live hooks page. Declared hooks for these\r\n * warn-skip (action `warn`, exit-1) — the established convention. The legacy\r\n * SessionEnd / Notification, which Codex also cannot fire, are reported as a\r\n * VISIBLE `skip` instead (exit-0 preserving) — see the hook descriptor's\r\n * `unmappedAction`. Nothing Codex cannot fire is ever silently dropped.\r\n */\r\nconst WARN_SKIP_EVENTS: ReadonlySet<HookEventName> = new Set([\"PostToolUseFailure\"]);\r\n\r\n/**\r\n * PreToolUse matcher — canonical Codex tool names + bare MCP tool names +\r\n * external MCP catch-all literal. Charset-clean ([A-Za-z0-9_|] only) so Codex's\r\n * Rust `regex` exact-matcher short-circuits (no look-around, which Codex\r\n * rejects at boot). Copied from context-mode's proven matcher.\r\n */\r\nconst PRE_TOOL_USE_MATCHER =\r\n  \"local_shell|shell|shell_command|exec_command|Bash|Shell|apply_patch|Edit|Write|grep_files|mcp__\";\r\n\r\n/**\r\n * Coerce Codex's PostToolUse `tool_response` (serde_json::Value — bare string\r\n * for shell/apply_patch, OBJECT for MCP/structured tools) to a string for the\r\n * string-typed `toolOutput`. A string passes through verbatim; everything else\r\n * (object/array/number/bool) is JSON-stringified; undefined/null → undefined\r\n * (leave `toolOutput` unset).\r\n *\r\n * Source: openai/codex codex-rs/hooks/src/schema.rs PostToolUseCommandInput\r\n * `tool_response: Value`; core/src/tools/handlers/shell_tests.rs emits\r\n * `json!(\"shell output\")` (string), mcp.rs emits `json!({...})` (object).\r\n */\r\nfunction coerceToolResponse(value: unknown): string | undefined {\r\n  if (value === undefined || value === null) return undefined;\r\n  if (typeof value === \"string\") return value;\r\n  try {\r\n    return JSON.stringify(value);\r\n  } catch {\r\n    return String(value);\r\n  }\r\n}\r\n\r\n/**\r\n * Derive PostToolUse `isError`. Codex's PostToolUseCommandInput\r\n * (`#[serde(deny_unknown_fields)]`) has NO top-level is_error field, so the only\r\n * machine-readable error signal is the MCP CallToolResult `isError` nested in\r\n * the `tool_response` object (serialized camelCase by rmcp). For shell/\r\n * apply_patch tool_response is a bare string carrying no boolean, so we report\r\n * false. Returns false when no such signal exists (never invents one).\r\n *\r\n * Source: openai/codex codex-rs/hooks/src/schema.rs:317-337 (no is_error field);\r\n * codex-rs/core/src/tools/handlers/mcp.rs (tool_response = serialized\r\n * CallToolResult → `isError` when the MCP call failed).\r\n */\r\nfunction derivePostToolUseIsError(toolResponse: unknown): boolean {\r\n  if (toolResponse !== null && typeof toolResponse === \"object\") {\r\n    const flag = (toolResponse as Record<string, unknown>).isError;\r\n    if (typeof flag === \"boolean\") return flag;\r\n  }\r\n  return false;\r\n}\r\n\r\n// ─────────────────────────────────────────────────────────────────────────\r\n// Adapter\r\n// ─────────────────────────────────────────────────────────────────────────\r\n\r\nexport class CodexAdapter extends BaseAdapter {\r\n  readonly id: PlatformId = \"codex\";\r\n  readonly name = \"Codex CLI\";\r\n  readonly paradigm: HookParadigm = \"json-stdio\";\r\n\r\n  readonly capabilities: PlatformCapabilities = {\r\n    // Memory surface: AGENTS.md-first managed block. memoryTargets below probes\r\n    // AGENTS.override.md first (it shadows AGENTS.md per directory on codex).\r\n    supportsMemory: true,\r\n    preToolUse: true,\r\n    postToolUse: true,\r\n    preCompact: true,\r\n    sessionStart: true,\r\n    sessionEnd: false,\r\n    userPromptSubmit: true,\r\n    stop: true,\r\n    notification: false,\r\n    // E1 events: PermissionRequest (decision-capable) + SubagentStart/Stop are\r\n    // Codex-native. postToolUseFailure stays unset — Codex has no failure event,\r\n    // so a declared hook for it warn-skips at install.\r\n    permissionRequest: true,\r\n    subagentStart: true,\r\n    subagentStop: true,\r\n    // PostCompact: Codex's hook system fires both PreCompact and PostCompact\r\n    // (developers.openai.com/codex/hooks). Observational only — the reply\r\n    // contract mirrors PreCompact (cannot block/modify a completed compaction).\r\n    postCompact: true,\r\n    // PreToolUse updatedInput rewrite is honored upstream (paired with\r\n    // permissionDecision:\"allow\"); PostToolUse output rewrite is not (see header).\r\n    canModifyArgs: true,\r\n    canModifyOutput: false,\r\n    canInjectSessionContext: true,\r\n    transports: [\"stdio\", \"http\"],\r\n    // Content surfaces: Codex implements all three.\r\n    //   command  → ~/.codex/prompts/<name>.md   (md+frontmatter, USER SCOPE ONLY)\r\n    //   skill    → project: .codex/skills/<name>/SKILL.md · user: ~/.agents/skills/<name>/SKILL.md\r\n    //   subagent → <codexDir>/agents/<name>.toml (TOML)\r\n    supportsCommands: true,\r\n    supportsSkills: true,\r\n    supportsSubagents: true,\r\n  };\r\n\r\n  // ── Detection ──────────────────────────────────────────────────────────\r\n\r\n  detectInstalled(projectDir: string): DetectedPlatform {\r\n    const userDir = this.userConfigDir();\r\n    const projDir = join(projectDir, \".codex\");\r\n    const userCfg = join(userDir, \"config.toml\");\r\n    const projCfg = join(projDir, \"config.toml\");\r\n\r\n    const userInstalled = existsSync(userDir) || existsSync(userCfg);\r\n    const projInstalled = existsSync(projDir) || existsSync(projCfg);\r\n    const installed = userInstalled || projInstalled;\r\n    const scope = projInstalled && !userInstalled ? \"project\" : \"user\";\r\n    const configPath = scope === \"project\" ? projCfg : userCfg;\r\n\r\n    return {\r\n      id: this.id,\r\n      name: this.name,\r\n      installed,\r\n      paradigm: this.paradigm,\r\n      capabilities: this.capabilities,\r\n      configPath,\r\n      scope,\r\n      reason: installed\r\n        ? `Found Codex config dir (${scope})`\r\n        : `No .codex config dir at ${userDir} or ${projDir}`,\r\n      confidence: installed ? \"high\" : \"low\",\r\n    };\r\n  }\r\n\r\n  // ── Native paths ───────────────────────────────────────────────────────\r\n\r\n  override getConfigDir(ctx: InstallContext): string {\r\n    if (ctx.scope === \"project\") return join(ctx.projectDir, \".codex\");\r\n    return this.userConfigDir();\r\n  }\r\n\r\n  override getServerConfigPath(ctx: InstallContext): string {\r\n    return join(this.getConfigDir(ctx), \"config.toml\");\r\n  }\r\n\r\n  override getHookConfigPath(ctx: InstallContext): string {\r\n    return join(this.getConfigDir(ctx), \"hooks.json\");\r\n  }\r\n\r\n  // ── Memory surface: AGENTS.override.md probe + 32 KiB doc-cap budget ─────\r\n  // Codex reads AGENTS.override.md > AGENTS.md per directory (one file per\r\n  // directory), so when the override file exists OUR block must live there or\r\n  // it is never loaded. Combined project docs are capped at 32 KiB\r\n  // (`project_doc_max_bytes`), hence the ~28 KiB per-file budget warn.\r\n  protected override memoryTargets(ctx: InstallContext): MemoryTarget[] {\r\n    // An explicit path override keeps the base resolution (escape hatch wins).\r\n    if (this.memoryOverride(ctx)?.path) return super.memoryTargets(ctx);\r\n    if (ctx.scope !== \"project\" && ctx.scope !== \"user\") return [];\r\n    const budgetBytes = 28 * 1024;\r\n    const dir = ctx.scope === \"project\" ? ctx.projectDir : this.userConfigDir();\r\n    const overrideMd = join(dir, \"AGENTS.override.md\");\r\n    if (existsSync(overrideMd)) {\r\n      return [\r\n        {\r\n          path: overrideMd,\r\n          reason: \"AGENTS.override.md shadows AGENTS.md on codex (one doc per directory)\",\r\n          budgetBytes,\r\n        },\r\n      ];\r\n    }\r\n    return [\r\n      {\r\n        path: join(dir, \"AGENTS.md\"),\r\n        reason:\r\n          ctx.scope === \"project\"\r\n            ? \"AGENTS.md standard (project root; codex is the format's originator)\"\r\n            : \"codex global guidance ($CODEX_HOME/AGENTS.md)\",\r\n        budgetBytes,\r\n      },\r\n    ];\r\n  }\r\n\r\n  /** `$CODEX_HOME` (tilde-expanded, then resolved) || `~/.codex` for user\r\n   *  scope. Shared with marketplace detection via `codexConfigHome` so the\r\n   *  config writer and the install probe never target different dirs. */\r\n  private userConfigDir(): string {\r\n    return codexConfigHome();\r\n  }\r\n\r\n  // ── TOML config IO (override JSON helpers — config.toml is TOML) ─────────\r\n\r\n  private readToml(path: string): Record<string, unknown> {\r\n    if (!existsSync(path)) return {};\r\n    try {\r\n      return TOML.parse(readFileSync(path, \"utf8\")) as Record<string, unknown>;\r\n    } catch {\r\n      return {};\r\n    }\r\n  }\r\n\r\n  private writeToml(path: string, data: Record<string, unknown>, dryRun: boolean): void {\r\n    if (dryRun) return;\r\n    ensureDir(dirname(path));\r\n    // @iarna/toml's stringify type wants its JsonMap; our object is structurally compatible.\r\n    writeFileSync(path, TOML.stringify(data as never), \"utf8\");\r\n  }\r\n\r\n  /** An ObjectMapCodec over config.toml for the core/object-map engine.\r\n   * `isPresentButUnparseable` is `() => false`: readToml fail-softs to {} and the\r\n   * server path has historically coerced/overwritten rather than warn-skip on an\r\n   * unparseable file — preserved here for byte-identical behavior. */\r\n  private tomlObjectMapCodec(): ObjectMapCodec {\r\n    return {\r\n      parse: (path) => this.readToml(path),\r\n      serialize: (path, data, dryRun) => this.writeToml(path, data, dryRun),\r\n      isPresentButUnparseable: () => false,\r\n    };\r\n  }\r\n\r\n  // ── Install server (config.toml → [mcp_servers.<id>]) ───────────────────\r\n\r\n  override installServer(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector, dryRun } = ctx;\r\n    const server = this.effectiveServer(ctx);\r\n    const path = this.getServerConfigPath(ctx);\r\n\r\n    if (!server) {\r\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no server declared\" }];\r\n    }\r\n    const isStdio = server.transport === \"stdio\" && !!server.command;\r\n    const isHttp = server.transport === \"http\" && !!server.url;\r\n    if (!isStdio && !isHttp) {\r\n      // Codex config.toml [mcp_servers] supports stdio (command) + streamable\r\n      // HTTP (url). Other remote transports (sse/ws) have no codex analog.\r\n      return [\r\n        {\r\n          platform: this.id,\r\n          action: \"skip\",\r\n          path,\r\n          detail: `transport \"${server.transport}\" not registrable in config.toml (stdio + streamable-http only)`,\r\n        },\r\n      ];\r\n    }\r\n\r\n    const symlink = this.symlinkPathWarning(path);\r\n    if (symlink) return [symlink];\r\n\r\n    const entry = this.renderMcpEntry(ctx, server);\r\n\r\n    return [\r\n      upsertInObjectMap({\r\n        codec: this.tomlObjectMapCodec(),\r\n        rootKey: \"mcp_servers\",\r\n        policy: \"coerce\",\r\n        platform: this.id,\r\n        configPath: path,\r\n        entryId: connector.id,\r\n        entry,\r\n        dryRun,\r\n      }),\r\n    ];\r\n  }\r\n\r\n  override uninstallServer(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector, dryRun } = ctx;\r\n    const path = this.getServerConfigPath(ctx);\r\n    const symlink = this.symlinkPathWarning(path);\r\n    if (symlink) return [symlink];\r\n\r\n    return [\r\n      removeFromObjectMap({\r\n        codec: this.tomlObjectMapCodec(),\r\n        rootKey: \"mcp_servers\",\r\n        policy: \"coerce\",\r\n        platform: this.id,\r\n        configPath: path,\r\n        entryId: connector.id,\r\n        dryRun,\r\n      }),\r\n    ];\r\n  }\r\n\r\n  // ── Install hooks (hooks.json) ──────────────────────────────────────────\r\n\r\n  override installHooks(ctx: InstallContext): ChangeRecord[] {\r\n    const path = this.getHookConfigPath(ctx);\r\n    const hooksOff = ctx.connector.platforms[this.id]?.hooks === false;\r\n    const declared = hooksOff ? [] : ctx.connector.hookEvents;\r\n\r\n    if (declared.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", path, detail: \"no hooks declared\" }];\r\n    }\r\n\r\n    // HOST-ORDERED pending: the unsupported events (mapEvent → undefined →\r\n    // warn/skip via the descriptor) FIRST, then the supported events in\r\n    // CODEX_HOOK_EVENTS order. EVERY declared event is enqueued — an event with\r\n    // no Codex analog is reported VISIBLY (warn for the E1 newer events, a `skip`\r\n    // for the legacy SessionEnd/Notification whose drop predates the convention),\r\n    // never silently dropped. matcher is \"\" for every item; renderEntry derives\r\n    // the real matcher from the event (PreToolUse/PermissionRequest).\r\n    const supported = (e: HookEventName) =>\r\n      (CODEX_HOOK_EVENTS as readonly string[]).includes(e);\r\n    const pending = [\r\n      ...declared.filter((e) => !supported(e)).map((event) => ({ event: event as string, matcher: \"\" })),\r\n      ...declared.filter(supported).map((event) => ({ event: event as string, matcher: \"\" })),\r\n    ];\r\n    return this.upsertHookEntries(ctx, path, pending, this.hookDescriptor(ctx));\r\n  }\r\n\r\n  override uninstallHooks(ctx: InstallContext): ChangeRecord[] {\r\n    return this.removeHookEntries(ctx, this.getHookConfigPath(ctx), this.hookDescriptor(ctx));\r\n  }\r\n\r\n  /**\r\n   * Codex hook-merge policy for the shared object-map engine. EVENT-SPECIFIC by\r\n   * construction: every observable (coerce root + bucket, the path-normalized\r\n   * per-event ownership find, the event-derived matcher with `hooks`-then-\r\n   * `matcher` key order, the BARE `hooks.<event>` skip/remove details with NO\r\n   * count, the warn wording, and the absent/no-match skips) is carried here so\r\n   * the engine reproduces the prior in-adapter loop byte-for-byte.\r\n   */\r\n  private hookDescriptor(_ctx: InstallContext): HookMergeDescriptor<CodexHookEntry> {\r\n    return {\r\n      // Codex's server path coerces a malformed root; the hook path matches it.\r\n      malformedPolicy: \"coerce\",\r\n      // Supported event → identity; any other canonical event → undefined → the\r\n      // engine reports it (never silent), at the severity unmappedAction picks.\r\n      mapEvent: (e) =>\r\n        (CODEX_HOOK_EVENTS as readonly string[]).includes(e) ? e : undefined,\r\n      unmappedWarnDetail: (e) => `${e} has no Codex hook equivalent — skipped`,\r\n      // E1 newer events (PostToolUseFailure) keep the established `warn` (exit-1);\r\n      // the legacy SessionEnd / Notification — silently dropped before this fix —\r\n      // become a VISIBLE `skip` so the install exit code is unchanged for them.\r\n      unmappedAction: (e) =>\r\n        WARN_SKIP_EVENTS.has(e as HookEventName) ? \"warn\" : \"skip\",\r\n      renderEntry: (event, _matcher, command) => {\r\n        const entry: CodexHookEntry = { hooks: [{ type: \"command\", command }] };\r\n        // KEY ORDER: hooks THEN matcher. Matcher is EVENT-derived, not from the\r\n        // connector's declared matcher: PermissionRequest matches tool names like\r\n        // PreToolUse (charset-clean), everything else registers \"\" (all).\r\n        entry.matcher =\r\n          event === \"PreToolUse\" || event === \"PermissionRequest\" ? PRE_TOOL_USE_MATCHER : \"\";\r\n        return entry;\r\n      },\r\n      // Idempotency find for the CANONICAL event the engine built `command` from —\r\n      // path-normalized, exact-command, the body of isOurEntry's command check.\r\n      entryOwnsCommand: (entry, command) =>\r\n        Array.isArray(entry.hooks) &&\r\n        entry.hooks.some(\r\n          (h) => (h.command ?? \"\").replace(/\\\\/g, \"/\") === command.replace(/\\\\/g, \"/\"),\r\n        ),\r\n      // FLAT whole-entry removal, EVENT-SPECIFIC: isOurEntry rebuilds our command\r\n      // from the event key being stripped, so a SubagentStop entry is never matched\r\n      // while iterating the PreToolUse bucket.\r\n      ownsEntryForRemove: (c, event) => (entry) =>\r\n        this.isOurEntry(c, event as CodexHookEventName, entry),\r\n      skipDetail: (e) => `hooks.${e}`,\r\n      removeDetail: (e, _n) => `hooks.${e}`,\r\n      absentDetail: \"no hooks.json\",\r\n      noMatchDetail: \"no agent-connector hooks present\",\r\n      // Uninstall scans EXACTLY codex's fixed event set (not Object.keys), so a\r\n      // home-bin command hand-placed under a foreign event key is left untouched —\r\n      // byte-identical to the prior `for (const event of CODEX_HOOK_EVENTS)` loop.\r\n      removeEventKeys: CODEX_HOOK_EVENTS,\r\n    };\r\n  }\r\n\r\n  // ── Health checks (default doctor renders these) ────────────────────────\r\n\r\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\r\n    const path = this.getServerConfigPath(ctx);\r\n    const id = ctx.connector.id;\r\n    const checks: HealthCheck[] = [\r\n      {\r\n        name: `${this.name}: config.toml exists`,\r\n        check: () =>\r\n          existsSync(path)\r\n            ? { status: \"OK\", detail: path }\r\n            : { status: \"FAIL\", detail: `not found: ${path}` },\r\n      },\r\n      {\r\n        name: `${this.name}: mcp_servers.${id} registered`,\r\n        check: () => {\r\n          // Only assert what the connector declares (same rule as the\r\n          // content-surface checks below): a server-less connector — e.g. a\r\n          // catalog-only bundle of agents/skills/commands — never writes an\r\n          // [mcp_servers.<id>] table, so its absence is healthy.\r\n          if (!ctx.connector.server) {\r\n            return { status: \"OK\", detail: \"no MCP server declared\" };\r\n          }\r\n          const cfg = this.readToml(path);\r\n          const bucket = cfg[\"mcp_servers\"];\r\n          const present =\r\n            typeof bucket === \"object\" &&\r\n            bucket !== null &&\r\n            id in (bucket as Record<string, unknown>);\r\n          return present\r\n            ? { status: \"OK\", detail: `mcp_servers.${id}` }\r\n            : { status: \"FAIL\", detail: `mcp_servers.${id} not found in ${path}` };\r\n        },\r\n      },\r\n    ];\r\n\r\n    // Content-surface checks: assert presence only for surfaces this connector\r\n    // declares. Codex commands are user-scope only, so a project-scope install\r\n    // won't have written them — only check command files in user scope.\r\n    if (ctx.scope !== \"project\") {\r\n      for (const cmd of ctx.connector.commands) {\r\n        const p = this.commandPath(cmd.name);\r\n        checks.push({\r\n          name: `${this.name}: command ${cmd.name} present`,\r\n          check: () =>\r\n            existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\r\n        });\r\n      }\r\n    }\r\n    for (const skill of ctx.connector.skills) {\r\n      const p = join(this.skillDir(ctx, skill.name), \"SKILL.md\");\r\n      checks.push({\r\n        name: `${this.name}: skill ${skill.name} present`,\r\n        check: () =>\r\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\r\n      });\r\n    }\r\n    for (const agent of ctx.connector.subagents) {\r\n      const p = this.subagentPath(ctx, agent.name);\r\n      checks.push({\r\n        name: `${this.name}: subagent ${agent.name} present`,\r\n        check: () =>\r\n          existsSync(p) ? { status: \"OK\", detail: p } : { status: \"FAIL\", detail: `not found: ${p}` },\r\n      });\r\n    }\r\n    return checks;\r\n  }\r\n\r\n  // ── Content surfaces: commands / skills / subagents ──────────────────────\r\n  // CONTENT-ONLY: pure native-file writers. No runtime dispatch, no home-bin\r\n  // pointer, no telemetry wrap. Each method is idempotent (byte-identical →\r\n  // skip) via writeContentFile and reversible via removeContentFile. Honors\r\n  // platforms[\"codex\"] per-surface false to skip.\r\n  //\r\n  // Native locations:\r\n  //   command  → ~/.codex/prompts/<name>.md   md+frontmatter(description,argument-hint)\r\n  //              USER SCOPE ONLY — project scope yields a single \"warn\".\r\n  //   skill    → project: <projectDir>/.codex/skills/<name>/SKILL.md (+ resources)\r\n  //              user:    ~/.agents/skills/<name>/SKILL.md (~/.codex/skills is deprecated)\r\n  //   subagent → <codexDir>/agents/<name>.toml  TOML via writeTomlString\r\n\r\n  /** Command files always live under the USER codex dir: ~/.codex/prompts. */\r\n  private commandPath(name: string): string {\r\n    return join(this.userConfigDir(), \"prompts\", `${name}.md`);\r\n  }\r\n  private skillDir(ctx: InstallContext, name: string): string {\r\n    // Project scope: <projectDir>/.codex/skills/<name> — the Project config-layer\r\n    // skills root (codex-rs/core-skills/src/loader.rs, ConfigLayerSource::Project),\r\n    // NOT deprecated. User scope: $HOME/.agents/skills/<name> — codex's CURRENT\r\n    // user skills root. The older $CODEX_HOME/skills (~/.codex/skills) is still\r\n    // read but the loader labels it a \"Deprecated user skills location, kept for\r\n    // backward compatibility\". .agents is anchored to the OS home (home_dir), NOT\r\n    // $CODEX_HOME — so use homedir() here, never userConfigDir() (which honors\r\n    // CODEX_HOME).\r\n    if (ctx.scope === \"project\") return join(this.getConfigDir(ctx), \"skills\", name);\r\n    return join(homedir(), \".agents\", \"skills\", name);\r\n  }\r\n  private subagentPath(ctx: InstallContext, name: string): string {\r\n    return join(this.getConfigDir(ctx), \"agents\", `${name}.toml`);\r\n  }\r\n\r\n  // ── Commands (USER SCOPE ONLY) ───────────────────────────────────────────\r\n\r\n  override installCommands(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.platforms[this.id]?.commands === false) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"commands disabled for codex\" }];\r\n    }\r\n    if (ctx.scope === \"project\") {\r\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\r\n    }\r\n    if (connector.commands.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\r\n    }\r\n    return connector.commands.map((cmd) =>\r\n      this.writeContentFile(\r\n        this.commandPath(cmd.name),\r\n        renderCommandMd(cmd, { includeToolsAndModel: false }),\r\n        ctx.dryRun,\r\n      ),\r\n    );\r\n  }\r\n\r\n  override uninstallCommands(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (ctx.scope === \"project\") {\r\n      return [{ platform: this.id, action: \"warn\", detail: \"codex commands are user-scope only\" }];\r\n    }\r\n    if (connector.commands.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no commands\" }];\r\n    }\r\n    return connector.commands.map((cmd) =>\r\n      this.removeContentFile(this.commandPath(cmd.name), ctx.dryRun),\r\n    );\r\n  }\r\n\r\n  // ── Skills ───────────────────────────────────────────────────────────────\r\n\r\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.platforms[this.id]?.skills === false) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for codex\" }];\r\n    }\r\n    if (connector.skills.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\r\n    }\r\n    const changes: ChangeRecord[] = [];\r\n    for (const skill of connector.skills) {\r\n      const dir = this.skillDir(ctx, skill.name);\r\n      const rendered = renderSkillMd(skill);\r\n      changes.push(this.writeContentFile(join(dir, \"SKILL.md\"), rendered, ctx.dryRun));\r\n      // Bundle any resource files beside SKILL.md (relative path → contents).\r\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\r\n      // (config-time validation already rejects these, but never trust input).\r\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\r\n        const target = this.resolveWithin(dir, rel);\r\n        if (target === null) {\r\n          changes.push({\r\n            platform: this.id,\r\n            action: \"warn\",\r\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\r\n          });\r\n          continue;\r\n        }\r\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\r\n      }\r\n      // Migrate away an AC-owned copy at the deprecated user skills root so the\r\n      // skill is not double-registered after the move to ~/.agents/skills.\r\n      changes.push(...this.migrateDeprecatedUserSkill(ctx, skill, rendered));\r\n    }\r\n    return changes;\r\n  }\r\n\r\n  /**\r\n   * One-time, opt-out-safe migration: prior AC versions wrote user-scope skills\r\n   * to the now-deprecated $CODEX_HOME/skills/<name> root, which codex STILL reads\r\n   * (kept for backward compatibility). Once we write the same skill to the current\r\n   * ~/.agents/skills root, codex would register it TWICE (same frontmatter name,\r\n   * two User-scope roots). If a SKILL.md exists at the deprecated path AND is\r\n   * byte-identical to what we render — i.e. AC-owned, not hand-authored — remove\r\n   * it (and its now-empty dir). The content-equality guard guarantees we never\r\n   * delete a skill a user placed there by hand. No-op for project scope (where\r\n   * .codex/skills is the valid, non-deprecated Project config-layer path) and when\r\n   * a custom CODEX_HOME would make the deprecated path coincide with the new one.\r\n   */\r\n  private migrateDeprecatedUserSkill(\r\n    ctx: InstallContext,\r\n    skill: SkillDef,\r\n    rendered: string,\r\n  ): ChangeRecord[] {\r\n    if (ctx.scope === \"project\") return [];\r\n    const deprecated = join(this.userConfigDir(), \"skills\", skill.name, \"SKILL.md\");\r\n    // Never touch the file we just wrote (pathological CODEX_HOME === ~/.agents).\r\n    if (deprecated === join(this.skillDir(ctx, skill.name), \"SKILL.md\")) return [];\r\n    if (!existsSync(deprecated)) return [];\r\n    if (readFileSync(deprecated, \"utf8\") !== rendered) return []; // hand-authored — leave it\r\n    return [\r\n      this.removeContentFile(deprecated, ctx.dryRun),\r\n      this.removeDirIfEmpty(dirname(deprecated), ctx.dryRun),\r\n    ];\r\n  }\r\n\r\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.skills.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\r\n    }\r\n    const changes: ChangeRecord[] = [];\r\n    for (const skill of connector.skills) {\r\n      const dir = this.skillDir(ctx, skill.name);\r\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\r\n      // skill dir itself when we own its full contents.\r\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\r\n      for (const rel of Object.keys(skill.resources ?? {})) {\r\n        const target = this.resolveWithin(dir, rel);\r\n        if (target === null) continue; // never delete outside the skill dir\r\n        changes.push(this.removeContentFile(target, ctx.dryRun));\r\n      }\r\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\r\n      // dir that still holds user-added / sibling-tool / shared files.\r\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\r\n    }\r\n    return changes;\r\n  }\r\n\r\n  // ── Subagents (TOML) ─────────────────────────────────────────────────────\r\n\r\n  override installSubagents(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.platforms[this.id]?.subagents === false) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"subagents disabled for codex\" }];\r\n    }\r\n    if (connector.subagents.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\r\n    }\r\n    return connector.subagents.map((agent) =>\r\n      this.writeContentFile(this.subagentPath(ctx, agent.name), this.renderSubagent(agent), ctx.dryRun),\r\n    );\r\n  }\r\n\r\n  override uninstallSubagents(ctx: InstallContext): ChangeRecord[] {\r\n    const { connector } = ctx;\r\n    if (connector.subagents.length === 0) {\r\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no subagents\" }];\r\n    }\r\n    return connector.subagents.map((agent) =>\r\n      this.removeContentFile(this.subagentPath(ctx, agent.name), ctx.dryRun),\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Render a subagent to a Codex agent TOML file:\r\n   *   { name, description, developer_instructions: prompt, model }.\r\n   * model is omitted when undefined so Codex applies its default.\r\n   *\r\n   * Codex custom agent files are config layers, not a closed four-field\r\n   * manifest. The Codex manual documents required custom-agent keys, plus\r\n   * optional config keys such as nickname_candidates, model_reasoning_effort,\r\n   * sandbox_mode, mcp_servers, and skills.config. Keep `extra` as the\r\n   * author-controlled escape hatch for that native surface.\r\n   */\r\n  private renderSubagent(agent: SubagentDef): string {\r\n    const table: Record<string, unknown> = {\r\n      name: agent.name,\r\n      description: agent.description,\r\n      developer_instructions: agent.prompt,\r\n    };\r\n    if (agent.model !== undefined) table.model = agent.model;\r\n    if (agent.extra) Object.assign(table, agent.extra);\r\n    return writeTomlString(table);\r\n  }\r\n\r\n  // ── Runtime dispatch ────────────────────────────────────────────────────\r\n\r\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\r\n    const input = (raw ?? {}) as CodexHookInput;\r\n    const base = {\r\n      hostPlatform: this.id,\r\n      connectorId: \"\",\r\n      sessionId: input.session_id ?? `pid-${process.ppid}`,\r\n      projectDir: input.cwd ?? process.env.CODEX_PROJECT_DIR ?? process.cwd(),\r\n      raw,\r\n    };\r\n\r\n    switch (event) {\r\n      case \"PreToolUse\":\r\n        return {\r\n          ...base,\r\n          toolName: input.tool_name ?? \"\",\r\n          toolInput: input.tool_input ?? {},\r\n        };\r\n      case \"PostToolUse\":\r\n        return {\r\n          ...base,\r\n          toolName: input.tool_name ?? \"\",\r\n          toolInput: input.tool_input ?? {},\r\n          // tool_response is a bare string for shell/apply_patch but an OBJECT\r\n          // for MCP tools — coerce non-strings to JSON so the string-typed\r\n          // toolOutput never receives a raw object.\r\n          toolOutput: coerceToolResponse(input.tool_response),\r\n          // Codex never serializes a top-level is_error (deny_unknown_fields);\r\n          // the true error signal is the CallToolResult.isError nested inside\r\n          // tool_response for MCP tools. Derive it from there.\r\n          isError: derivePostToolUseIsError(input.tool_response),\r\n        };\r\n      case \"SessionStart\":\r\n        return { ...base, source: normalizeSessionSource(input.source) };\r\n      case \"SessionEnd\":\r\n        return { ...base, reason: input.message };\r\n      case \"UserPromptSubmit\":\r\n        return { ...base, prompt: input.prompt ?? \"\" };\r\n      case \"PreCompact\":\r\n        return { ...base, trigger: input.trigger === \"manual\" ? \"manual\" : \"auto\" };\r\n      case \"PostCompact\":\r\n        // Post-compaction sibling of PreCompact — same `trigger` normalization\r\n        // (manual|auto), observe-only. Codex's PostCompact payload mirrors\r\n        // PreCompact's; everything else rides on `raw`.\r\n        return { ...base, trigger: input.trigger === \"manual\" ? \"manual\" : \"auto\" };\r\n      case \"Stop\":\r\n        return { ...base, stopHookActive: input.stop_hook_active ?? false };\r\n      case \"Notification\":\r\n        return { ...base, message: input.message ?? \"\" };\r\n      case \"PermissionRequest\":\r\n        // Codex documents tool_name/tool_input (+tool_input.description); it has\r\n        // no permission_suggestions field, so the normalized optional stays unset.\r\n        return {\r\n          ...base,\r\n          toolName: input.tool_name ?? \"\",\r\n          toolInput: input.tool_input ?? {},\r\n        };\r\n      case \"PostToolUseFailure\":\r\n        // No Codex analog — never fired natively. Parsed defensively (Claude-\r\n        // compatible wire) so a manual `hook codex PostToolUseFailure` invocation\r\n        // still normalizes instead of throwing.\r\n        return {\r\n          ...base,\r\n          toolName: input.tool_name ?? \"\",\r\n          toolInput: input.tool_input ?? {},\r\n          error: input.error ?? \"\",\r\n        };\r\n      case \"SubagentStart\":\r\n        return {\r\n          ...base,\r\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\r\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\r\n        };\r\n      case \"SubagentStop\":\r\n        // agent_id/agent_type stay optional — never depend on hosts populating\r\n        // them on stop (the Claude-family SDK quirk).\r\n        return {\r\n          ...base,\r\n          ...(typeof input.agent_id === \"string\" ? { agentId: input.agent_id } : {}),\r\n          ...(typeof input.agent_type === \"string\" ? { agentType: input.agent_type } : {}),\r\n          ...(typeof input.agent_transcript_path === \"string\"\r\n            ? { agentTranscriptPath: input.agent_transcript_path }\r\n            : {}),\r\n          ...(typeof input.last_assistant_message === \"string\"\r\n            ? { lastAssistantMessage: input.last_assistant_message }\r\n            : {}),\r\n          ...(typeof input.stop_hook_active === \"boolean\"\r\n            ? { stopHookActive: input.stop_hook_active }\r\n            : {}),\r\n        };\r\n    }\r\n  }\r\n\r\n  formatReply(event: HookEventName, response: HookResponse): HookReply {\r\n    // Codex (like Claude Code) reads a `hookSpecificOutput` JSON wrapper from\r\n    // stdout; exit code 0 = allow. Fields the host cannot honor are dropped.\r\n\r\n    // PermissionRequest uses Codex's nested decision{behavior} envelope and is\r\n    // the ONE event where an EXPLICIT \"allow\" is an ACTIVE grant (suppresses the\r\n    // approval prompt). ask/context/void → NO decision output: fall through to\r\n    // the normal approval flow (the prompt IS the ask). Codex docs: updatedInput\r\n    // / updatedPermissions / interrupt FAIL CLOSED on this event, so \"modify\"\r\n    // also falls through — emitting a bare allow would grant the ORIGINAL input\r\n    // the handler wanted rewritten.\r\n    if (event === \"PermissionRequest\") {\r\n      if (response.decision === \"deny\") {\r\n        return {\r\n          exitCode: 0,\r\n          stdout: JSON.stringify({\r\n            hookSpecificOutput: {\r\n              hookEventName: \"PermissionRequest\",\r\n              decision: {\r\n                behavior: \"deny\",\r\n                message: response.reason ?? \"Blocked by hook\",\r\n              },\r\n            },\r\n          }),\r\n        };\r\n      }\r\n      if (response.decision === \"allow\") {\r\n        return {\r\n          exitCode: 0,\r\n          stdout: JSON.stringify({\r\n            hookSpecificOutput: {\r\n              hookEventName: \"PermissionRequest\",\r\n              decision: { behavior: \"allow\" },\r\n            },\r\n          }),\r\n        };\r\n      }\r\n      return { exitCode: 0 };\r\n    }\r\n\r\n    // SubagentStart is observe/context-only on Codex (continue:false is parsed\r\n    // but does not stop the subagent): \"context\" injects additionalContext as\r\n    // developer context for the SUBAGENT, and a \"deny\" DEGRADES to the same\r\n    // shape carrying the reason.\r\n    if (event === \"SubagentStart\") {\r\n      const context =\r\n        response.decision === \"context\"\r\n          ? response.additionalContext\r\n          : response.decision === \"deny\"\r\n            ? response.reason ?? response.additionalContext\r\n            : undefined;\r\n      if (context) {\r\n        return {\r\n          exitCode: 0,\r\n          stdout: JSON.stringify({\r\n            hookSpecificOutput: {\r\n              hookEventName: \"SubagentStart\",\r\n              additionalContext: context,\r\n            },\r\n          }),\r\n        };\r\n      }\r\n      return { exitCode: 0 };\r\n    }\r\n\r\n    if (response.decision === \"deny\") {\r\n      // PreToolUse deny is honored; other events fail-open to allow.\r\n      if (event === \"PreToolUse\") {\r\n        return {\r\n          exitCode: 0,\r\n          stdout: JSON.stringify({\r\n            hookSpecificOutput: {\r\n              hookEventName: \"PreToolUse\",\r\n              permissionDecision: \"deny\",\r\n              permissionDecisionReason: response.reason ?? \"Blocked by hook\",\r\n            },\r\n          }),\r\n        };\r\n      }\r\n      // SubagentStop deny = Stop semantics: the documented continuation shape is\r\n      // the TOP-LEVEL {\"decision\":\"block\",\"reason\"} (keeps the subagent going\r\n      // with `reason` as its next instruction).\r\n      if (event === \"SubagentStop\") {\r\n        return {\r\n          exitCode: 0,\r\n          stdout: JSON.stringify({\r\n            decision: \"block\",\r\n            reason: response.reason ?? \"Blocked by hook\",\r\n          }),\r\n        };\r\n      }\r\n      return { exitCode: 0 };\r\n    }\r\n\r\n    // modify → rewrite PreToolUse tool input. Codex applies `updatedInput`\r\n    // (PR #20527, stable since 0.131.0) but its output_parser.rs only accepts it\r\n    // when paired with permissionDecision:\"allow\" — emitting updatedInput alone\r\n    // (the Claude Code shape) is rejected as \"updatedInput without\r\n    // permissionDecision:allow\", and an allow alone is rejected too, so the pair\r\n    // is emitted together. Other events fail open (no updatedInput surface).\r\n    if (response.decision === \"modify\") {\r\n      if (event === \"PreToolUse\" && response.updatedInput) {\r\n        return {\r\n          exitCode: 0,\r\n          stdout: JSON.stringify({\r\n            hookSpecificOutput: {\r\n              hookEventName: \"PreToolUse\",\r\n              permissionDecision: \"allow\",\r\n              updatedInput: response.updatedInput,\r\n            },\r\n          }),\r\n        };\r\n      }\r\n      return { exitCode: 0 };\r\n    }\r\n\r\n    // Context injection: honored on SessionStart, PostToolUse, and PreToolUse\r\n    // (additionalContext — PreToolUse support shipped via PR #20692, stable since\r\n    // codex 0.130.0; injected independent of any permission decision).\r\n    // (SubagentStop accepts only the common output fields — no additionalContext.)\r\n    if (\r\n      response.additionalContext &&\r\n      (event === \"SessionStart\" || event === \"PostToolUse\" || event === \"PreToolUse\")\r\n    ) {\r\n      return {\r\n        exitCode: 0,\r\n        stdout: JSON.stringify({\r\n          hookSpecificOutput: {\r\n            hookEventName: event,\r\n            additionalContext: response.additionalContext,\r\n          },\r\n        }),\r\n      };\r\n    }\r\n\r\n    // \"allow\" / unsupported-on-Codex (ask) → passthrough.\r\n    return { exitCode: 0 };\r\n  }\r\n\r\n  // ── Internal helpers ────────────────────────────────────────────────────\r\n\r\n  /** Resolve the per-platform server override into an effective ServerDef. */\r\n  private effectiveServer(ctx: InstallContext): ServerDef | undefined {\r\n    const override = ctx.connector.platforms[this.id]?.server;\r\n    if (override === false) return undefined;\r\n    const base = ctx.connector.server;\r\n    if (!base) return undefined;\r\n    return override ? { ...base, ...override } : base;\r\n  }\r\n\r\n  /**\r\n   * Render the `[mcp_servers.<id>]` table. TOML has NO interpolation, so every\r\n   * `${env:VAR}` is resolved to a literal at install time. The env table is a\r\n   * plain string→string map. Honors the telemetry serve-wrapper.\r\n   */\r\n  private renderMcpEntry(ctx: InstallContext, server: ServerDef): CodexMcpEntry {\r\n    // Streamable HTTP server: codex infers the transport from `url` (no explicit\r\n    // transport key). VERIFIED against codex-cli 0.139.0 — `codex mcp add <id>\r\n    // --url <U> --bearer-token-env-var <E>` writes:\r\n    //   [mcp_servers.<id>]\r\n    //   url = \"…\"\r\n    //   bearer_token_env_var = \"…\"   (only with bearerEnv auth)\r\n    // Telemetry serve-wrapping is stdio-only (remote cannot be intercepted).\r\n    // installServer's guard only lets stdio+command or http+url reach here, so\r\n    // this branch is exactly the streamable-HTTP case (lock-step with the guard).\r\n    if (server.transport === \"http\") {\r\n      const remote: CodexMcpEntry = { url: resolveEnvRefsDeep(server.url ?? \"\") };\r\n      if (server.auth?.type === \"bearerEnv\" && server.auth.bearerEnvVar) {\r\n        remote.bearer_token_env_var = server.auth.bearerEnvVar;\r\n      }\r\n      if (server.headers && Object.keys(server.headers).length > 0) {\r\n        const headers: Record<string, string> = {};\r\n        for (const [k, v] of Object.entries(resolveEnvRefsDeep(server.headers))) {\r\n          headers[k] = String(v);\r\n        }\r\n        remote.http_headers = headers;\r\n      }\r\n      return remote;\r\n    }\r\n    let command = server.command as string;\r\n    let args = [...(server.args ?? [])];\r\n\r\n    ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\r\n\r\n    // Resolve env-refs to literals (TOML cannot interpolate).\r\n    command = resolveEnvRefsDeep(command);\r\n    args = resolveEnvRefsDeep(args);\r\n\r\n    const entry: CodexMcpEntry = { command };\r\n    if (args.length > 0) entry.args = args;\r\n\r\n    if (server.env && Object.keys(server.env).length > 0) {\r\n      const env: Record<string, string> = {};\r\n      for (const [k, v] of Object.entries(resolveEnvRefsDeep(server.env))) {\r\n        env[k] = String(v);\r\n      }\r\n      entry.env = env;\r\n    }\r\n    return entry;\r\n  }\r\n\r\n  /**\r\n   * Does this hooks.json entry belong to this connector for `event`? EVENT-\r\n   * SPECIFIC + path-normalized exact-command match. The engine binds this per\r\n   * event in the uninstall (whole-entry FLAT removal) and the install idempotency\r\n   * find reuses its command body via the descriptor's entryOwnsCommand.\r\n   */\r\n  private isOurEntry(ctx: InstallContext, event: CodexHookEventName, entry: CodexHookEntry): boolean {\r\n    if (!entry || typeof entry !== \"object\" || !Array.isArray(entry.hooks)) return false;\r\n    const ours = buildHomeBinHookCommand(ctx.homeBinPath, \"codex\", event, ctx.connector.id);\r\n    const needle = ours.replace(/\\\\/g, \"/\");\r\n    return entry.hooks.some((h) => (h.command ?? \"\").replace(/\\\\/g, \"/\") === needle);\r\n  }\r\n}\r\n\r\nexport const adapter = new CodexAdapter();\r\nexport default adapter;\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,eAAe;AACxB,SAAS,SAAS,YAAY;AAE9B,OAAO,UAAU;AAqGjB,IAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAYA,IAAM,mBAA+C,oBAAI,IAAI,CAAC,oBAAoB,CAAC;AAQnF,IAAM,uBACJ;AAaF,SAAS,mBAAmB,OAAoC;AAC9D,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAcA,SAAS,yBAAyB,cAAgC;AAChE,MAAI,iBAAiB,QAAQ,OAAO,iBAAiB,UAAU;AAC7D,UAAM,OAAQ,aAAyC;AACvD,QAAI,OAAO,SAAS,UAAW,QAAO;AAAA,EACxC;AACA,SAAO;AACT;AAMO,IAAM,eAAN,cAA2B,YAAY;AAAA,EACnC,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA,IAChB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,mBAAmB;AAAA,IACnB,eAAe;AAAA,IACf,cAAc;AAAA;AAAA;AAAA;AAAA,IAId,aAAa;AAAA;AAAA;AAAA,IAGb,eAAe;AAAA,IACf,iBAAiB;AAAA,IACjB,yBAAyB;AAAA,IACzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,IAK5B,kBAAkB;AAAA,IAClB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,cAAc;AACnC,UAAM,UAAU,KAAK,YAAY,QAAQ;AACzC,UAAM,UAAU,KAAK,SAAS,aAAa;AAC3C,UAAM,UAAU,KAAK,SAAS,aAAa;AAE3C,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,OAAO;AAC/D,UAAM,YAAY,iBAAiB;AACnC,UAAM,QAAQ,iBAAiB,CAAC,gBAAgB,YAAY;AAC5D,UAAM,aAAa,UAAU,YAAY,UAAU;AAEnD,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,2BAA2B,KAAK,MAChC,2BAA2B,OAAO,OAAO,OAAO;AAAA,MACpD,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIS,aAAa,KAA6B;AACjD,QAAI,IAAI,UAAU,UAAW,QAAO,KAAK,IAAI,YAAY,QAAQ;AACjE,WAAO,KAAK,cAAc;AAAA,EAC5B;AAAA,EAES,oBAAoB,KAA6B;AACxD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,aAAa;AAAA,EACnD;AAAA,EAES,kBAAkB,KAA6B;AACtD,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,YAAY;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOmB,cAAc,KAAqC;AAEpE,QAAI,KAAK,eAAe,GAAG,GAAG,KAAM,QAAO,MAAM,cAAc,GAAG;AAClE,QAAI,IAAI,UAAU,aAAa,IAAI,UAAU,OAAQ,QAAO,CAAC;AAC7D,UAAM,cAAc,KAAK;AACzB,UAAM,MAAM,IAAI,UAAU,YAAY,IAAI,aAAa,KAAK,cAAc;AAC1E,UAAM,aAAa,KAAK,KAAK,oBAAoB;AACjD,QAAI,WAAW,UAAU,GAAG;AAC1B,aAAO;AAAA,QACL;AAAA,UACE,MAAM;AAAA,UACN,QAAQ;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,QACE,MAAM,KAAK,KAAK,WAAW;AAAA,QAC3B,QACE,IAAI,UAAU,YACV,wEACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAwB;AAC9B,WAAO,gBAAgB;AAAA,EACzB;AAAA;AAAA,EAIQ,SAAS,MAAuC;AACtD,QAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAI;AACF,aAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,IAC9C,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,UAAU,MAAc,MAA+B,QAAuB;AACpF,QAAI,OAAQ;AACZ,cAAU,QAAQ,IAAI,CAAC;AAEvB,kBAAc,MAAM,KAAK,UAAU,IAAa,GAAG,MAAM;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,qBAAqC;AAC3C,WAAO;AAAA,MACL,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI;AAAA,MACnC,WAAW,CAAC,MAAM,MAAM,WAAW,KAAK,UAAU,MAAM,MAAM,MAAM;AAAA,MACpE,yBAAyB,MAAM;AAAA,IACjC;AAAA,EACF;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,SAAS,KAAK,gBAAgB,GAAG;AACvC,UAAM,OAAO,KAAK,oBAAoB,GAAG;AAEzC,QAAI,CAAC,QAAQ;AACX,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,qBAAqB,CAAC;AAAA,IACnF;AACA,UAAM,UAAU,OAAO,cAAc,WAAW,CAAC,CAAC,OAAO;AACzD,UAAM,SAAS,OAAO,cAAc,UAAU,CAAC,CAAC,OAAO;AACvD,QAAI,CAAC,WAAW,CAAC,QAAQ;AAGvB,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR;AAAA,UACA,QAAQ,cAAc,OAAO,SAAS;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAU,KAAK,mBAAmB,IAAI;AAC5C,QAAI,QAAS,QAAO,CAAC,OAAO;AAE5B,UAAM,QAAQ,KAAK,eAAe,KAAK,MAAM;AAE7C,WAAO;AAAA,MACL,kBAAkB;AAAA,QAChB,OAAO,KAAK,mBAAmB;AAAA,QAC/B,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,UAAU,KAAK;AAAA,QACf,YAAY;AAAA,QACZ,SAAS,UAAU;AAAA,QACnB;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,UAAM,UAAU,KAAK,mBAAmB,IAAI;AAC5C,QAAI,QAAS,QAAO,CAAC,OAAO;AAE5B,WAAO;AAAA,MACL,oBAAoB;AAAA,QAClB,OAAO,KAAK,mBAAmB;AAAA,QAC/B,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,UAAU,KAAK;AAAA,QACf,YAAY;AAAA,QACZ,SAAS,UAAU;AAAA,QACnB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA,EAIS,aAAa,KAAqC;AACzD,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG,UAAU;AAC7D,UAAM,WAAW,WAAW,CAAC,IAAI,IAAI,UAAU;AAE/C,QAAI,SAAS,WAAW,GAAG;AACzB,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,MAAM,QAAQ,oBAAoB,CAAC;AAAA,IAClF;AASA,UAAM,YAAY,CAAC,MAChB,kBAAwC,SAAS,CAAC;AACrD,UAAM,UAAU;AAAA,MACd,GAAG,SAAS,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,OAAwB,SAAS,GAAG,EAAE;AAAA,MACjG,GAAG,SAAS,OAAO,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,OAAwB,SAAS,GAAG,EAAE;AAAA,IACxF;AACA,WAAO,KAAK,kBAAkB,KAAK,MAAM,SAAS,KAAK,eAAe,GAAG,CAAC;AAAA,EAC5E;AAAA,EAES,eAAe,KAAqC;AAC3D,WAAO,KAAK,kBAAkB,KAAK,KAAK,kBAAkB,GAAG,GAAG,KAAK,eAAe,GAAG,CAAC;AAAA,EAC1F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,eAAe,MAA2D;AAChF,WAAO;AAAA;AAAA,MAEL,iBAAiB;AAAA;AAAA;AAAA,MAGjB,UAAU,CAAC,MACR,kBAAwC,SAAS,CAAC,IAAI,IAAI;AAAA,MAC7D,oBAAoB,CAAC,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,MAI/B,gBAAgB,CAAC,MACf,iBAAiB,IAAI,CAAkB,IAAI,SAAS;AAAA,MACtD,aAAa,CAAC,OAAO,UAAU,YAAY;AACzC,cAAM,QAAwB,EAAE,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC,EAAE;AAItE,cAAM,UACJ,UAAU,gBAAgB,UAAU,sBAAsB,uBAAuB;AACnF,eAAO;AAAA,MACT;AAAA;AAAA;AAAA,MAGA,kBAAkB,CAAC,OAAO,YACxB,MAAM,QAAQ,MAAM,KAAK,KACzB,MAAM,MAAM;AAAA,QACV,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,OAAO,GAAG,MAAM,QAAQ,QAAQ,OAAO,GAAG;AAAA,MAC7E;AAAA;AAAA;AAAA;AAAA,MAIF,oBAAoB,CAAC,GAAG,UAAU,CAAC,UACjC,KAAK,WAAW,GAAG,OAA6B,KAAK;AAAA,MACvD,YAAY,CAAC,MAAM,SAAS,CAAC;AAAA,MAC7B,cAAc,CAAC,GAAG,OAAO,SAAS,CAAC;AAAA,MACnC,cAAc;AAAA,MACd,eAAe;AAAA;AAAA;AAAA;AAAA,MAIf,iBAAiB;AAAA,IACnB;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,OAAO,KAAK,oBAAoB,GAAG;AACzC,UAAM,KAAK,IAAI,UAAU;AACzB,UAAM,SAAwB;AAAA,MAC5B;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,IAAI,IACX,EAAE,QAAQ,MAAM,QAAQ,KAAK,IAC7B,EAAE,QAAQ,QAAQ,QAAQ,cAAc,IAAI,GAAG;AAAA,MACvD;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI,iBAAiB,EAAE;AAAA,QACrC,OAAO,MAAM;AAKX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAS,IAAI;AAC9B,gBAAM,SAAS,IAAI,aAAa;AAChC,gBAAM,UACJ,OAAO,WAAW,YAClB,WAAW,QACX,MAAO;AACT,iBAAO,UACH,EAAE,QAAQ,MAAM,QAAQ,eAAe,EAAE,GAAG,IAC5C,EAAE,QAAQ,QAAQ,QAAQ,eAAe,EAAE,iBAAiB,IAAI,GAAG;AAAA,QACzE;AAAA,MACF;AAAA,IACF;AAKA,QAAI,IAAI,UAAU,WAAW;AAC3B,iBAAW,OAAO,IAAI,UAAU,UAAU;AACxC,cAAM,IAAI,KAAK,YAAY,IAAI,IAAI;AACnC,eAAO,KAAK;AAAA,UACV,MAAM,GAAG,KAAK,IAAI,aAAa,IAAI,IAAI;AAAA,UACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,QAC9F,CAAC;AAAA,MACH;AAAA,IACF;AACA,eAAW,SAAS,IAAI,UAAU,QAAQ;AACxC,YAAM,IAAI,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU;AACzD,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,WAAW,MAAM,IAAI;AAAA,QACvC,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,eAAW,SAAS,IAAI,UAAU,WAAW;AAC3C,YAAM,IAAI,KAAK,aAAa,KAAK,MAAM,IAAI;AAC3C,aAAO,KAAK;AAAA,QACV,MAAM,GAAG,KAAK,IAAI,cAAc,MAAM,IAAI;AAAA,QAC1C,OAAO,MACL,WAAW,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ,EAAE,IAAI,EAAE,QAAQ,QAAQ,QAAQ,cAAc,CAAC,GAAG;AAAA,MAC9F,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,YAAY,MAAsB;AACxC,WAAO,KAAK,KAAK,cAAc,GAAG,WAAW,GAAG,IAAI,KAAK;AAAA,EAC3D;AAAA,EACQ,SAAS,KAAqB,MAAsB;AAS1D,QAAI,IAAI,UAAU,UAAW,QAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,IAAI;AAC/E,WAAO,KAAK,QAAQ,GAAG,WAAW,UAAU,IAAI;AAAA,EAClD;AAAA,EACQ,aAAa,KAAqB,MAAsB;AAC9D,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,UAAU,GAAG,IAAI,OAAO;AAAA,EAC9D;AAAA;AAAA,EAIS,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,aAAa,OAAO;AACpD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,8BAA8B,CAAC;AAAA,IACtF;AACA,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK;AAAA,QACH,KAAK,YAAY,IAAI,IAAI;AAAA,QACzB,gBAAgB,KAAK,EAAE,sBAAsB,MAAM,CAAC;AAAA,QACpD,IAAI;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAAA,EAES,kBAAkB,KAAqC;AAC9D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,qCAAqC,CAAC;AAAA,IAC7F;AACA,QAAI,UAAU,SAAS,WAAW,GAAG;AACnC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,iCAAiC,CAAC;AAAA,IACzF;AACA,WAAO,UAAU,SAAS;AAAA,MAAI,CAAC,QAC7B,KAAK,kBAAkB,KAAK,YAAY,IAAI,IAAI,GAAG,IAAI,MAAM;AAAA,IAC/D;AAAA,EACF;AAAA;AAAA,EAIS,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,WAAW,OAAO;AAClD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,4BAA4B,CAAC;AAAA,IACpF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,YAAM,WAAW,cAAc,KAAK;AACpC,cAAQ,KAAK,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,UAAU,IAAI,MAAM,CAAC;AAI/E,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAGA,cAAQ,KAAK,GAAG,KAAK,2BAA2B,KAAK,OAAO,QAAQ,CAAC;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcQ,2BACN,KACA,OACA,UACgB;AAChB,QAAI,IAAI,UAAU,UAAW,QAAO,CAAC;AACrC,UAAM,aAAa,KAAK,KAAK,cAAc,GAAG,UAAU,MAAM,MAAM,UAAU;AAE9E,QAAI,eAAe,KAAK,KAAK,SAAS,KAAK,MAAM,IAAI,GAAG,UAAU,EAAG,QAAO,CAAC;AAC7E,QAAI,CAAC,WAAW,UAAU,EAAG,QAAO,CAAC;AACrC,QAAI,aAAa,YAAY,MAAM,MAAM,SAAU,QAAO,CAAC;AAC3D,WAAO;AAAA,MACL,KAAK,kBAAkB,YAAY,IAAI,MAAM;AAAA,MAC7C,KAAK,iBAAiB,QAAQ,UAAU,GAAG,IAAI,MAAM;AAAA,IACvD;AAAA,EACF;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIS,iBAAiB,KAAqC;AAC7D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,KAAK,EAAE,GAAG,cAAc,OAAO;AACrD,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,iBAAiB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,KAAK,eAAe,KAAK,GAAG,IAAI,MAAM;AAAA,IAClG;AAAA,EACF;AAAA,EAES,mBAAmB,KAAqC;AAC/D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,WAAW,GAAG;AACpC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,kCAAkC,CAAC;AAAA,IAC1F;AACA,WAAO,UAAU,UAAU;AAAA,MAAI,CAAC,UAC9B,KAAK,kBAAkB,KAAK,aAAa,KAAK,MAAM,IAAI,GAAG,IAAI,MAAM;AAAA,IACvE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaQ,eAAe,OAA4B;AACjD,UAAM,QAAiC;AAAA,MACrC,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,wBAAwB,MAAM;AAAA,IAChC;AACA,QAAI,MAAM,UAAU,OAAW,OAAM,QAAQ,MAAM;AACnD,QAAI,MAAM,MAAO,QAAO,OAAO,OAAO,MAAM,KAAK;AACjD,WAAO,gBAAgB,KAAK;AAAA,EAC9B;AAAA;AAAA,EAIA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,OAAO;AAAA,MACX,cAAc,KAAK;AAAA,MACnB,aAAa;AAAA,MACb,WAAW,MAAM,cAAc,OAAO,QAAQ,IAAI;AAAA,MAClD,YAAY,MAAM,OAAO,QAAQ,IAAI,qBAAqB,QAAQ,IAAI;AAAA,MACtE;AAAA,IACF;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA;AAAA;AAAA;AAAA,UAIhC,YAAY,mBAAmB,MAAM,aAAa;AAAA;AAAA;AAAA;AAAA,UAIlD,SAAS,yBAAyB,MAAM,aAAa;AAAA,QACvD;AAAA,MACF,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,uBAAuB,MAAM,MAAM,EAAE;AAAA,MACjE,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,QAAQ;AAAA,MAC1C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,QAAQ,MAAM,UAAU,GAAG;AAAA,MAC/C,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,OAAO;AAAA,MAC5E,KAAK;AAIH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,OAAO;AAAA,MAC5E,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,gBAAgB,MAAM,oBAAoB,MAAM;AAAA,MACpE,KAAK;AACH,eAAO,EAAE,GAAG,MAAM,SAAS,MAAM,WAAW,GAAG;AAAA,MACjD,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,QAClC;AAAA,MACF,KAAK;AAIH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,UAAU,MAAM,aAAa;AAAA,UAC7B,WAAW,MAAM,cAAc,CAAC;AAAA,UAChC,OAAO,MAAM,SAAS;AAAA,QACxB;AAAA,MACF,KAAK;AACH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,QAChF;AAAA,MACF,KAAK;AAGH,eAAO;AAAA,UACL,GAAG;AAAA,UACH,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,SAAS,MAAM,SAAS,IAAI,CAAC;AAAA,UACxE,GAAI,OAAO,MAAM,eAAe,WAAW,EAAE,WAAW,MAAM,WAAW,IAAI,CAAC;AAAA,UAC9E,GAAI,OAAO,MAAM,0BAA0B,WACvC,EAAE,qBAAqB,MAAM,sBAAsB,IACnD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,2BAA2B,WACxC,EAAE,sBAAsB,MAAM,uBAAuB,IACrD,CAAC;AAAA,UACL,GAAI,OAAO,MAAM,qBAAqB,YAClC,EAAE,gBAAgB,MAAM,iBAAiB,IACzC,CAAC;AAAA,QACP;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,YAAY,OAAsB,UAAmC;AAWnE,QAAI,UAAU,qBAAqB;AACjC,UAAI,SAAS,aAAa,QAAQ;AAChC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU;AAAA,gBACR,UAAU;AAAA,gBACV,SAAS,SAAS,UAAU;AAAA,cAC9B;AAAA,YACF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,UAAI,SAAS,aAAa,SAAS;AACjC,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,UAAU,EAAE,UAAU,QAAQ;AAAA,YAChC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAMA,QAAI,UAAU,iBAAiB;AAC7B,YAAM,UACJ,SAAS,aAAa,YAClB,SAAS,oBACT,SAAS,aAAa,SACpB,SAAS,UAAU,SAAS,oBAC5B;AACR,UAAI,SAAS;AACX,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,mBAAmB;AAAA,YACrB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAEA,QAAI,SAAS,aAAa,QAAQ;AAEhC,UAAI,UAAU,cAAc;AAC1B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,oBAAoB;AAAA,cACpB,0BAA0B,SAAS,UAAU;AAAA,YAC/C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAIA,UAAI,UAAU,gBAAgB;AAC5B,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,UAAU;AAAA,YACV,QAAQ,SAAS,UAAU;AAAA,UAC7B,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAQA,QAAI,SAAS,aAAa,UAAU;AAClC,UAAI,UAAU,gBAAgB,SAAS,cAAc;AACnD,eAAO;AAAA,UACL,UAAU;AAAA,UACV,QAAQ,KAAK,UAAU;AAAA,YACrB,oBAAoB;AAAA,cAClB,eAAe;AAAA,cACf,oBAAoB;AAAA,cACpB,cAAc,SAAS;AAAA,YACzB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO,EAAE,UAAU,EAAE;AAAA,IACvB;AAMA,QACE,SAAS,sBACR,UAAU,kBAAkB,UAAU,iBAAiB,UAAU,eAClE;AACA,aAAO;AAAA,QACL,UAAU;AAAA,QACV,QAAQ,KAAK,UAAU;AAAA,UACrB,oBAAoB;AAAA,YAClB,eAAe;AAAA,YACf,mBAAmB,SAAS;AAAA,UAC9B;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAGA,WAAO,EAAE,UAAU,EAAE;AAAA,EACvB;AAAA;AAAA;AAAA,EAKQ,gBAAgB,KAA4C;AAClE,UAAM,WAAW,IAAI,UAAU,UAAU,KAAK,EAAE,GAAG;AACnD,QAAI,aAAa,MAAO,QAAO;AAC/B,UAAM,OAAO,IAAI,UAAU;AAC3B,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,WAAW,EAAE,GAAG,MAAM,GAAG,SAAS,IAAI;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,KAAqB,QAAkC;AAU5E,QAAI,OAAO,cAAc,QAAQ;AAC/B,YAAM,SAAwB,EAAE,KAAK,mBAAmB,OAAO,OAAO,EAAE,EAAE;AAC1E,UAAI,OAAO,MAAM,SAAS,eAAe,OAAO,KAAK,cAAc;AACjE,eAAO,uBAAuB,OAAO,KAAK;AAAA,MAC5C;AACA,UAAI,OAAO,WAAW,OAAO,KAAK,OAAO,OAAO,EAAE,SAAS,GAAG;AAC5D,cAAM,UAAkC,CAAC;AACzC,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,OAAO,OAAO,CAAC,GAAG;AACvE,kBAAQ,CAAC,IAAI,OAAO,CAAC;AAAA,QACvB;AACA,eAAO,eAAe;AAAA,MACxB;AACA,aAAO;AAAA,IACT;AACA,QAAI,UAAU,OAAO;AACrB,QAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAElC,KAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAG1E,cAAU,mBAAmB,OAAO;AACpC,WAAO,mBAAmB,IAAI;AAE9B,UAAM,QAAuB,EAAE,QAAQ;AACvC,QAAI,KAAK,SAAS,EAAG,OAAM,OAAO;AAElC,QAAI,OAAO,OAAO,OAAO,KAAK,OAAO,GAAG,EAAE,SAAS,GAAG;AACpD,YAAM,MAA8B,CAAC;AACrC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,mBAAmB,OAAO,GAAG,CAAC,GAAG;AACnE,YAAI,CAAC,IAAI,OAAO,CAAC;AAAA,MACnB;AACA,YAAM,MAAM;AAAA,IACd;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,KAAqB,OAA2B,OAAgC;AACjG,QAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,KAAK,EAAG,QAAO;AAC/E,UAAM,OAAO,wBAAwB,IAAI,aAAa,SAAS,OAAO,IAAI,UAAU,EAAE;AACtF,UAAM,SAAS,KAAK,QAAQ,OAAO,GAAG;AACtC,WAAO,MAAM,MAAM,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,QAAQ,OAAO,GAAG,MAAM,MAAM;AAAA,EACjF;AACF;AAEO,IAAM,UAAU,IAAI,aAAa;AACxC,IAAO,gBAAQ;","names":[]}

package/dist/{continue-WU2IB5KS.js → continue-I34FNSTJ.js}

@@ -2,25 +2,25 @@
 import {
   readYaml,
   writeYaml
-} from "./chunk-FJCUKXGX.js";
+} from "./chunk-THI4PI4H.js";
 import {
   extractSessionId,
   normalizeSessionSource,
   toolResponseToString
-} from "./chunk-H53QZQJI.js";
+} from "./chunk-PSGTHJQU.js";
 import {
   resolveEnvRefsDeep
-} from "./chunk-BEFVJ2OE.js";
+} from "./chunk-XXLCMSD3.js";
 import {
   BaseAdapter
-} from "./chunk-MGTDQLJJ.js";
+} from "./chunk-UNU2KPYJ.js";
 import {
   buildHomeBinHookCommand,
   buildWrappedStdio,
   isHomeBinHookCommand
-} from "./chunk-4NHXLXSD.js";
-import "./chunk-UMQ6NBQR.js";
-import "./chunk-GZGLCCEE.js";
+} from "./chunk-W7AGWAMH.js";
+import "./chunk-ILWHLGIC.js";
+import "./chunk-QYOUQCC6.js";
 
 // src/adapters/continue/index.ts
 import { existsSync, statSync } from "fs";
@@ -769,4 +769,4 @@ export {
   adapter,
   continue_default as default
 };
-//# sourceMappingURL=continue-WU2IB5KS.js.map
+//# sourceMappingURL=continue-I34FNSTJ.js.map