@lesliechan721/agent-skill-eval 0.1.0-beta.8 → 0.1.0-beta.9

package/dist/codex-eval-isolation.js

@@ -0,0 +1,318 @@
+import { execFile } from 'node:child_process';
+import path from 'node:path';
+import { promisify } from 'node:util';
+import fs from 'fs-extra';
+const execFileAsync = promisify(execFile);
+export const CODEX_EVAL_CREDENTIAL_CONFIG_LINES = [
+    'cli_auth_credentials_store = "file"',
+    'mcp_oauth_credentials_store = "file"',
+    'features.secret_auth_storage = false',
+];
+const CODEX_EVAL_CREDENTIAL_OVERRIDES = [
+    'cli_auth_credentials_store="file"',
+    'mcp_oauth_credentials_store="file"',
+    'features.secret_auth_storage=false',
+];
+export const CODEX_EVAL_STRICT_OVERRIDES = [
+    'skills.bundled.enabled=false',
+    'orchestrator.skills.enabled=false',
+    'orchestrator.mcp.enabled=false',
+    'include_apps_instructions=false',
+    'include_collaboration_mode_instructions=false',
+    'features.apps=false',
+    'features.plugins=false',
+    'features.remote_plugin=false',
+    'features.plugin_sharing=false',
+    'features.tool_suggest=false',
+    'features.skill_mcp_dependency_install=false',
+];
+const REQUIRED_STRICT_FALSE_PATHS = [
+    'features.secret_auth_storage',
+    ...CODEX_EVAL_STRICT_OVERRIDES.map((entry) => entry.slice(0, entry.indexOf('='))),
+];
+const MACOS_MANAGED_PREFERENCE_KEYS = [
+    'config_toml_base64',
+    'requirements_toml_base64',
+];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function expectRecord(value, label) {
+    if (!isRecord(value)) {
+        throw new Error(`${label} must be an object.`);
+    }
+    return value;
+}
+function canonicalPath(value) {
+    try {
+        return fs.realpathSync(value);
+    }
+    catch {
+        return path.resolve(value);
+    }
+}
+function isPathInsideOrEqual(root, candidate) {
+    const relative = path.relative(canonicalPath(root), canonicalPath(candidate));
+    return relative === '' || (relative !== '..' &&
+        !relative.startsWith(`..${path.sep}`) &&
+        !path.isAbsolute(relative));
+}
+function valueAtPath(root, keyPath) {
+    let value = root;
+    for (const segment of keyPath.split('.')) {
+        if (!isRecord(value))
+            return undefined;
+        value = value[segment];
+    }
+    return value;
+}
+function systemCodexRoot(platform, sourceEnv) {
+    if (platform === 'win32') {
+        return path.join(sourceEnv.ProgramData ?? String.raw `C:\ProgramData`, 'OpenAI', 'Codex');
+    }
+    return '/etc/codex';
+}
+async function readMacManagedPreference(key) {
+    try {
+        await execFileAsync('/usr/bin/defaults', ['read', 'com.openai.codex', key], {
+            encoding: 'utf8',
+            timeout: 10_000,
+        });
+        return true;
+    }
+    catch (error) {
+        const row = error;
+        const message = `${row.message ?? ''}\n${row.stderr ?? ''}`;
+        if (/does not exist|domain\/default pair.*not found/iu.test(message)) {
+            return false;
+        }
+        throw new Error(`Unable to inspect the macOS managed Codex preference ${key}.`, { cause: error });
+    }
+}
+async function readMacUserKeychainSearchList() {
+    try {
+        const result = await execFileAsync('/usr/bin/security', ['list-keychains', '-d', 'user'], { encoding: 'utf8', timeout: 10_000 });
+        return result.stdout;
+    }
+    catch (error) {
+        throw new Error('Unable to inspect the macOS user keychain search list before Codex model eval.', { cause: error });
+    }
+}
+export async function assertCodexEvalKeychainWrapperAbsent(options = {}) {
+    if ((options.platform ?? process.platform) !== 'darwin')
+        return;
+    const searchList = await (options.readUserKeychainSearchList ?? readMacUserKeychainSearchList)();
+    if (/accountsKeychainExport/iu.test(searchList)) {
+        throw new Error('Cannot start a Codex model eval from a macOS wrapper that injects ' +
+            'accountsKeychainExport into the user keychain search list. Run ' +
+            'aw-skill-eval run with its required --audit input from an ordinary Terminal session.');
+    }
+}
+export function codexEvalConfigOverrides(isolation) {
+    return [
+        ...CODEX_EVAL_CREDENTIAL_OVERRIDES,
+        ...(isolation === 'strict' ? CODEX_EVAL_STRICT_OVERRIDES : []),
+    ];
+}
+export function codexEvalIsolationEvidence(options) {
+    return {
+        mode: options.mode,
+        isolated_home: true,
+        source_user_config_filtered: true,
+        credential_stores: {
+            cli_auth: 'file',
+            mcp_oauth: 'file',
+            secret_auth_storage: false,
+        },
+        strict_surfaces_disabled: options.mode === 'strict',
+        host_configuration: options.host ?? null,
+        runtime_probe: options.runtimeProbe ?? null,
+    };
+}
+export async function inspectCodexEvalHostIsolation(options = {}) {
+    const platform = options.platform ?? process.platform;
+    const sourceEnv = options.sourceEnv ?? process.env;
+    const systemRoot = systemCodexRoot(platform, sourceEnv);
+    const readSystemEntries = options.readSystemEntries ?? (async (root) => fs.readdir(root).catch((error) => {
+        if (error.code === 'ENOENT')
+            return [];
+        throw error;
+    }));
+    const systemEntries = await readSystemEntries(systemRoot);
+    if (systemEntries.length > 0) {
+        throw new Error(`Strict Codex eval is blocked because system configuration exists at ${systemRoot}.`);
+    }
+    const presentKeys = [];
+    if (platform === 'darwin') {
+        const readManagedPreference = options.readManagedPreference ?? readMacManagedPreference;
+        for (const key of MACOS_MANAGED_PREFERENCE_KEYS) {
+            if (await readManagedPreference(key))
+                presentKeys.push(key);
+        }
+        if (presentKeys.length > 0) {
+            throw new Error(`Strict Codex eval is blocked by macOS managed preference(s): ${presentKeys.join(', ')}.`);
+        }
+    }
+    return {
+        system_config_root: systemRoot,
+        system_config_present: false,
+        managed_preferences_checked: platform === 'darwin',
+        managed_preference_keys_present: [],
+    };
+}
+function validateConfigLayers(response, codexHome, workspaceRoot) {
+    if (!Array.isArray(response.layers)) {
+        throw new Error('Strict Codex eval config/read response is missing layers.');
+    }
+    const layerTypes = [];
+    const projectConfigPath = path.join(workspaceRoot, '.codex', 'config.toml');
+    const expectedProjectFolder = canonicalPath(path.dirname(projectConfigPath));
+    const projectConfigExpected = fs.pathExistsSync(projectConfigPath);
+    let projectConfigActive = false;
+    for (const [index, value] of response.layers.entries()) {
+        const layer = expectRecord(value, `config/read.layers[${index}]`);
+        const name = expectRecord(layer.name, `config/read.layers[${index}].name`);
+        const type = typeof name.type === 'string' ? name.type : '';
+        const config = expectRecord(layer.config, `config/read.layers[${index}].config`);
+        layerTypes.push(type);
+        if (type === 'system') {
+            if (Object.keys(config).length > 0) {
+                throw new Error('Strict Codex eval found non-empty system configuration.');
+            }
+            continue;
+        }
+        if (type === 'user') {
+            if (typeof name.file !== 'string' || !isPathInsideOrEqual(codexHome, name.file)) {
+                throw new Error('Strict Codex eval found a user config layer outside isolated CODEX_HOME.');
+            }
+            continue;
+        }
+        if (type === 'project') {
+            if (typeof layer.disabledReason === 'string' && layer.disabledReason.trim() !== '') {
+                throw new Error(`Strict Codex eval found a disabled project config layer: ${layer.disabledReason}`);
+            }
+            if (typeof name.dotCodexFolder !== 'string' ||
+                canonicalPath(name.dotCodexFolder) !== expectedProjectFolder) {
+                throw new Error('Strict Codex eval found an unexpected project config layer.');
+            }
+            projectConfigActive = true;
+            continue;
+        }
+        if (type === 'sessionFlags')
+            continue;
+        throw new Error(`Strict Codex eval found forbidden config layer ${JSON.stringify(type)}.`);
+    }
+    if (projectConfigExpected && !projectConfigActive) {
+        throw new Error('Strict Codex eval did not activate the workspace project config layer.');
+    }
+    return layerTypes;
+}
+function validateEffectiveConfig(response) {
+    const config = expectRecord(response.config, 'config/read.config');
+    if (config.cli_auth_credentials_store !== 'file') {
+        throw new Error('Strict Codex eval did not apply cli_auth_credentials_store=file.');
+    }
+    if (config.mcp_oauth_credentials_store !== 'file') {
+        throw new Error('Strict Codex eval did not apply mcp_oauth_credentials_store=file.');
+    }
+    if (valueAtPath(config, 'features.default_mode_request_user_input') !== true) {
+        throw new Error('Strict Codex eval did not enable features.default_mode_request_user_input.');
+    }
+    for (const keyPath of REQUIRED_STRICT_FALSE_PATHS) {
+        if (valueAtPath(config, keyPath) !== false) {
+            throw new Error(`Strict Codex eval did not disable ${keyPath}.`);
+        }
+    }
+    const mcpServers = config.mcp_servers;
+    if (mcpServers !== undefined &&
+        mcpServers !== null &&
+        (!isRecord(mcpServers) || Object.keys(mcpServers).length > 0)) {
+        throw new Error('Strict Codex eval found effective MCP server configuration.');
+    }
+}
+function validateRequirements(value) {
+    const response = expectRecord(value, 'configRequirements/read response');
+    if (response.requirements !== null) {
+        throw new Error('Strict Codex eval found managed configuration requirements.');
+    }
+}
+function validateSkills(value, workspaceRoot, allowedSkillRoots) {
+    const response = expectRecord(value, 'skills/list response');
+    if (!Array.isArray(response.data)) {
+        throw new Error('Strict Codex eval skills/list response is missing data.');
+    }
+    if (response.data.length !== 1) {
+        throw new Error('Strict Codex eval skills/list must return exactly one workspace entry.');
+    }
+    const expectedSkills = new Map(allowedSkillRoots.map((root) => [
+        canonicalPath(path.join(root, 'SKILL.md')),
+        { root, name: path.basename(root) },
+    ]));
+    const paths = [];
+    for (const [index, value] of response.data.entries()) {
+        const entry = expectRecord(value, `skills/list.data[${index}]`);
+        if (typeof entry.cwd !== 'string' ||
+            !isPathInsideOrEqual(workspaceRoot, entry.cwd) ||
+            !isPathInsideOrEqual(entry.cwd, workspaceRoot)) {
+            throw new Error('Strict Codex eval skills/list returned an unexpected workspace.');
+        }
+        if (!Array.isArray(entry.errors) || entry.errors.length > 0) {
+            throw new Error('Strict Codex eval found Skill discovery errors.');
+        }
+        if (!Array.isArray(entry.skills)) {
+            throw new Error('Strict Codex eval skills/list entry is missing skills.');
+        }
+        for (const [skillIndex, skillValue] of entry.skills.entries()) {
+            const skill = expectRecord(skillValue, `skills/list.data[${index}].skills[${skillIndex}]`);
+            if (typeof skill.path !== 'string') {
+                throw new Error(`Strict Codex eval found an invalid Skill path ${String(skill.path)}.`);
+            }
+            const normalizedPath = canonicalPath(skill.path);
+            const expected = expectedSkills.get(normalizedPath);
+            if (!expected || !isPathInsideOrEqual(expected.root, skill.path)) {
+                throw new Error(`Strict Codex eval found non-target Skill ${skill.path}.`);
+            }
+            if (skill.name !== expected.name ||
+                skill.enabled !== true) {
+                throw new Error(`Strict Codex eval found an invalid target Skill ${skill.path}.`);
+            }
+            paths.push(normalizedPath);
+        }
+    }
+    if (paths.length !== expectedSkills.size ||
+        new Set(paths).size !== expectedSkills.size) {
+        throw new Error(expectedSkills.size > 0
+            ? 'Strict Codex eval did not discover exactly the enabled participant Skills.'
+            : 'Strict Codex eval found a Skill in an empty baseline workspace.');
+    }
+    return paths.sort((left, right) => left.localeCompare(right));
+}
+function validateMcpServers(value) {
+    const response = expectRecord(value, 'mcpServerStatus/list response');
+    if (!Array.isArray(response.data) || response.data.length > 0) {
+        throw new Error('Strict Codex eval found an active MCP server.');
+    }
+    if (response.nextCursor !== undefined && response.nextCursor !== null) {
+        throw new Error('Strict Codex eval MCP inventory is unexpectedly paginated.');
+    }
+}
+export function validateCodexEvalRpcIsolation(options) {
+    const layers = validateCodexEvalConfigIsolation(options);
+    const skillPaths = validateSkills(options.skills, options.workspaceRoot, options.allowedSkillRoots);
+    validateMcpServers(options.mcpServers);
+    return {
+        config_layers: layers,
+        config_requirements_absent: true,
+        skill_paths: skillPaths,
+        mcp_server_count: 0,
+        strict_overrides_effective: true,
+    };
+}
+export function validateCodexEvalConfigIsolation(options) {
+    const config = expectRecord(options.config, 'config/read response');
+    const layers = validateConfigLayers(config, options.codexHome, options.workspaceRoot);
+    validateEffectiveConfig(config);
+    validateRequirements(options.requirements);
+    return layers;
+}
+//# sourceMappingURL=codex-eval-isolation.js.map

package/dist/codex-eval-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-eval-isolation.js","sourceRoot":"","sources":["../src/codex-eval-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,MAAM,UAAU,CAAC;AAI1B,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,qCAAqC;IACrC,sCAAsC;IACtC,sCAAsC;CAC9B,CAAC;AAEX,MAAM,+BAA+B,GAAG;IACtC,mCAAmC;IACnC,oCAAoC;IACpC,oCAAoC;CAC5B,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,8BAA8B;IAC9B,mCAAmC;IACnC,gCAAgC;IAChC,iCAAiC;IACjC,+CAA+C;IAC/C,qBAAqB;IACrB,wBAAwB;IACxB,8BAA8B;IAC9B,+BAA+B;IAC/B,6BAA6B;IAC7B,6CAA6C;CACrC,CAAC;AAEX,MAAM,2BAA2B,GAAG;IAClC,8BAA8B;IAC9B,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;CACzE,CAAC;AAEX,MAAM,6BAA6B,GAAG;IACpC,oBAAoB;IACpB,0BAA0B;CAClB,CAAC;AAsCX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa;IACjD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,SAAiB;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9E,OAAO,QAAQ,KAAK,EAAE,IAAI,CACxB,QAAQ,KAAK,IAAI;QACjB,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,OAAe;IACjE,IAAI,KAAK,GAAY,IAAI,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,QAAyB,EACzB,SAA4B;IAE5B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,IAAI,CACd,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,CAAA,gBAAgB,EACnD,QAAQ,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACjD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE;YAC1E,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAoD,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC5D,IAAI,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wDAAwD,GAAG,GAAG,EAC9D,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,6BAA6B;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,mBAAmB,EACnB,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,EAChC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACtC,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,gFAAgF,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,UAGvD,EAAE;IACJ,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAAE,OAAO;IAChE,MAAM,UAAU,GAAG,MAAM,CACvB,OAAO,CAAC,0BAA0B,IAAI,6BAA6B,CACpE,EAAE,CAAC;IACJ,IAAI,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,oEAAoE;YACpE,iEAAiE;YACjE,sFAAsF,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,SAA+B;IAE/B,OAAO;QACL,GAAG,+BAA+B;QAClC,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAI1C;IACC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,aAAa,EAAE,IAAI;QACnB,2BAA2B,EAAE,IAAI;QACjC,iBAAiB,EAAE;YACjB,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,MAAM;YACjB,mBAAmB,EAAE,KAAK;SAC3B;QACD,wBAAwB,EAAE,OAAO,CAAC,IAAI,KAAK,QAAQ;QACnD,kBAAkB,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;QACxC,aAAa,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,UAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC;IACnD,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAC7E,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACtD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC,CAAC;IACN,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,uEAAuE,UAAU,GAAG,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,wBAAwB,CAAC;QACxF,KAAK,MAAM,GAAG,IAAI,6BAA6B,EAAE,CAAC;YAChD,IAAI,MAAM,qBAAqB,CAAC,GAAG,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,gEAAgE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,kBAAkB,EAAE,UAAU;QAC9B,qBAAqB,EAAE,KAAK;QAC5B,2BAA2B,EAAE,QAAQ,KAAK,QAAQ;QAClD,+BAA+B,EAAE,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAiC,EACjC,SAAiB,EACjB,aAAqB;IAErB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC5E,MAAM,qBAAqB,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7E,MAAM,qBAAqB,GAAG,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACnE,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,sBAAsB,KAAK,GAAG,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,KAAK,QAAQ,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,sBAAsB,KAAK,UAAU,CAAC,CAAC;QACjF,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;YAC9F,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CACb,4DAA4D,KAAK,CAAC,cAAc,EAAE,CACnF,CAAC;YACJ,CAAC;YACD,IACE,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;gBACvC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,qBAAqB,EAC5D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;YACD,mBAAmB,GAAG,IAAI,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,cAAc;YAAE,SAAS;QACtC,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,qBAAqB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAiC;IAChE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,0BAA0B,KAAK,MAAM,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,2BAA2B,KAAK,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,EAAE,0CAA0C,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;IACtC,IACE,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,IAAI;QACnB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAC7D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,aAAqB,EACrB,iBAA2B;IAE3B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC1C,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;KACpC,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,oBAAoB,KAAK,GAAG,CAAC,CAAC;QAChE,IACE,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAC7B,CAAC,mBAAmB,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC;YAC9C,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,EAC9C,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,oBAAoB,KAAK,YAAY,UAAU,GAAG,CAAC,CAAC;YAC3F,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7E,CAAC;YACD,IACE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;gBAC5B,KAAK,CAAC,OAAO,KAAK,IAAI,EACtB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YACpF,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC,IAAI;QACpC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,cAAc,CAAC,IAAI,GAAG,CAAC;YACrB,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,iEAAiE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAQ7C;IACC,MAAM,MAAM,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,cAAc,CAC/B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,iBAAiB,CAC1B,CAAC;IACF,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,OAAO;QACL,aAAa,EAAE,MAAM;QACrB,0BAA0B,EAAE,IAAI;QAChC,WAAW,EAAE,UAAU;QACvB,gBAAgB,EAAE,CAAC;QACnB,0BAA0B,EAAE,IAAI;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAKhD;IACC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACtF,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChC,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/codex-eval-process-tree.d.ts

@@ -0,0 +1,38 @@
+import { type ChildProcess } from 'node:child_process';
+export declare const CODEX_EVAL_PROCESS_TREE_ID_ENV = "AW_CODEX_EVAL_PROCESS_TREE_ID";
+export declare const PROCESS_TREE_CLEANUP_UNCONFIRMED_PREFIX = "Could not confirm process-tree cleanup";
+interface PosixProcessEntry {
+    ppid: number;
+    state: string;
+    startTime: string;
+}
+interface PosixProcessTreeDependencies {
+    readProcessTable?: (timeoutMs?: number) => Promise<Map<number, PosixProcessEntry>>;
+    readTaggedProcessTable?: (treeId: string, timeoutMs?: number) => Promise<Map<number, PosixProcessEntry>>;
+    kill?: (pid: number, signal: NodeJS.Signals | 0) => boolean;
+    treeId?: string;
+    canUseProcessGroup?: () => boolean;
+    allowRootIdentityDiscovery?: boolean;
+}
+export interface ChildProcessTreeMonitor {
+    terminate(): Promise<string[]>;
+}
+export declare function createDirectChildProcessMonitor(child: ChildProcess): ChildProcessTreeMonitor;
+export declare function processTreeCleanupIsUnconfirmed(diagnostics: readonly string[]): boolean;
+export declare function scrubProcessTreeId<T>(value: T, treeId: string): T;
+export declare function terminatePosixProcessTree(rootPid: number, dependencies?: PosixProcessTreeDependencies): Promise<string[]>;
+export declare function createPosixProcessTreeMonitor(rootPid: number, dependencies?: PosixProcessTreeDependencies): ChildProcessTreeMonitor;
+export declare function releaseChildProcessHandles(child: ChildProcess): void;
+export declare function terminateWindowsProcessTree(child: ChildProcess, options?: {
+    closeTimeoutMs?: number;
+    runTaskkill?: (pid: number) => Promise<void>;
+}): Promise<string[]>;
+export declare function createWindowsChildProcessTreeMonitor(child: ChildProcess, options?: Parameters<typeof terminateWindowsProcessTree>[1]): ChildProcessTreeMonitor;
+export declare function terminateChildProcessTree(child: ChildProcess): Promise<string[]>;
+export declare function createChildProcessTreeMonitor(child: ChildProcess, options?: {
+    treeId?: string;
+}): ChildProcessTreeMonitor;
+export declare function assertProcessTreeInspectionAvailable(options?: {
+    platform?: NodeJS.Platform;
+}): Promise<void>;
+export {};