@open-agent-toolkit/cli 0.1.45 → 0.1.48

package/dist/engine/scanner.js

@@ -1,7 +1,8 @@
 import { readdir } from 'node:fs/promises';
 import { join, resolve } from 'node:path';
 import { CliError } from '../errors/index.js';
-import { SCOPE_CONTENT_TYPES } from '../shared/types.js';
+import { resolveAssetsRoot } from '../fs/assets.js';
+import { SCOPE_CONTENT_TYPES, USER_SCOPE_MANAGED_AGENT_FILES, } from '../shared/types.js';
 function canonicalDirectoryName(contentType) {
     if (contentType === 'skill') {
         return 'skills';
@@ -42,6 +43,21 @@ async function readEntries(dirPath) {
         throw error;
     }
 }
+export async function scanBundledManagedCodexAgents() {
+    const agentsDir = join(await resolveAssetsRoot(), 'agents');
+    const entries = await readEntries(agentsDir);
+    const available = new Set(entries.filter((entry) => entry.isFile).map((entry) => entry.name));
+    const missing = USER_SCOPE_MANAGED_AGENT_FILES.filter((name) => !available.has(name));
+    if (missing.length > 0) {
+        throw new CliError(`Bundled managed Codex role definitions are unavailable: ${missing.join(', ')}. Reinstall or rebuild OAT before running user sync.`);
+    }
+    return USER_SCOPE_MANAGED_AGENT_FILES.map((name) => ({
+        name,
+        type: 'agent',
+        canonicalPath: join(agentsDir, name),
+        isFile: true,
+    }));
+}
 export async function scanCanonical(basePath, scope) {
     const scopeRoot = resolve(basePath);
     const entries = [];

package/dist/fs/paths.d.ts

@@ -5,5 +5,9 @@ export declare function resolveScopeRoot(scope: ConcreteScope, cwd: string, home
 export declare function toPosixPath(pathValue: string): string;
 export declare function normalizeToPosixPath(pathValue: string): string;
 export declare function validatePathWithinScope(candidatePath: string, scopeRoot: string): string;
+export declare function validateRealPathWithinScope(candidatePath: string, scopeRoot: string): Promise<{
+    realScopeRoot: string;
+    realPath: string;
+}>;
 export {};
 //# sourceMappingURL=paths.d.ts.map

package/dist/fs/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/fs/paths.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,KAAK,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE3C,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBrE;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/fs/paths.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAE3C,KAAK,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAE3C,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBrE;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,aAAa,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,MAAM,CAMR;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,uBAAuB,CACrC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,MAAM,CAcR;AAED,wBAAsB,2BAA2B,CAC/C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBtD"}

package/dist/fs/paths.js

@@ -1,4 +1,4 @@
-import { access } from 'node:fs/promises';
+import { access, realpath } from 'node:fs/promises';
 import { dirname, posix, resolve, sep } from 'node:path';
 import { CliError } from '../errors/index.js';
 export async function resolveProjectRoot(cwd) {
@@ -40,3 +40,20 @@ export function validatePathWithinScope(candidatePath, scopeRoot) {
     }
     return resolvedCandidatePath;
 }
+export async function validateRealPathWithinScope(candidatePath, scopeRoot) {
+    const resolvedCandidatePath = validatePathWithinScope(candidatePath, scopeRoot);
+    let realScopeRoot;
+    let realCandidatePath;
+    try {
+        [realScopeRoot, realCandidatePath] = await Promise.all([
+            realpath(resolve(scopeRoot)),
+            realpath(resolvedCandidatePath),
+        ]);
+    }
+    catch (error) {
+        const detail = error instanceof Error ? `: ${error.message}` : '';
+        throw new CliError(`Unable to resolve real path for ${candidatePath} within scope root ${scopeRoot}${detail}`);
+    }
+    validatePathWithinScope(realCandidatePath, realScopeRoot);
+    return { realScopeRoot, realPath: realCandidatePath };
+}

package/dist/providers/ceiling/registry.d.ts

@@ -8,23 +8,26 @@
  * ceiling intent with these adapters to decide enforced/advisory/unsupported and
  * to produce concrete dispatch args — skills never re-implement this logic.
  *
- * Codex enforces via sync-time pinned role variants
- * (`oat-phase-implementer-<effort>` / `oat-reviewer-<effort>`); the adapter only
- * *consumes* those existing names and never generates new variant files. Claude
- * enforces via the per-call Task `model` argument (no variant files). Every other
- * provider is advisory by default.
+ * Codex enforces via sync-time materialized role variants selected from matrix
+ * model+effort targets. Claude enforces via the per-call Task `model` argument
+ * (no variant files). Every other provider is advisory by default.
  */
 export type EnforcementMechanism = 'pinned-variant' | 'model-arg' | 'none';
 export type CeilingRole = 'implementer' | 'reviewer';
 export interface CeilingCompileContext {
     /** The orchestrator's own tier, used to detect above-orchestrator upgrades. */
     orchestratorTier?: string;
+    target?: {
+        model?: string;
+        effort?: string;
+    } | null;
 }
 export type CeilingDispatchArgs = {
     variant: string;
 } | {
     model: string;
 } | null;
+export declare function isDirectDispatchRoleName(value: string): boolean;
 export interface ProviderCeilingAdapter {
     provider: string;
     supportsCeiling: boolean;

package/dist/providers/ceiling/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/providers/ceiling/registry.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3E,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB,IAAI,CAAC;AAET,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;OAGG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,qBAAqB,GACzB,mBAAmB,CAAC;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC;CACtE;AAMD,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAK9C,CAAC;AA2FF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAE1E"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/providers/ceiling/registry.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,WAAW,GAAG,MAAM,CAAC;AAE3E,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GACjB,IAAI,CAAC;AAKT,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;OAGG;IACH,qBAAqB,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,qBAAqB,GACzB,mBAAmB,CAAC;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC;CACtE;AAMD,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAK9C,CAAC;AA4GF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,sBAAsB,CAE1E"}

package/dist/providers/ceiling/registry.js

@@ -1,5 +1,10 @@
 import { VALID_CLAUDE_DISPATCH_CEILINGS, VALID_CODEX_DISPATCH_CEILINGS, } from '../../config/oat-config.js';
-/** Codex pinned-variant base role names (must match sync-extension output). */
+import { buildCodexMaterializedTargetRoleName } from '../codex/codec/shared.js';
+const DIRECT_DISPATCH_ROLE_PATTERN = /^oat-(?:phase-implementer|reviewer)(?:-|$)/;
+export function isDirectDispatchRoleName(value) {
+    return DIRECT_DISPATCH_ROLE_PATTERN.test(value.trim());
+}
+/** Codex materialized-role base names (must match sync-extension output). */
 const CODEX_IMPLEMENTER_ROLE = 'oat-phase-implementer';
 const CODEX_REVIEWER_ROLE = 'oat-reviewer';
 /** Claude tier order, low → high, for above-orchestrator comparison. */
@@ -14,15 +19,27 @@ const codexAdapter = {
     supportsCeiling: true,
     validValues: [...VALID_CODEX_DISPATCH_CEILINGS],
     mechanism: 'pinned-variant',
-    compileToDispatchArgs(value, role) {
+    compileToDispatchArgs(value, role, ctx) {
         if (!VALID_CODEX_DISPATCH_CEILINGS.includes(value)) {
             return null;
         }
+        const target = ctx.target;
+        if (!target?.model ||
+            !target.effort ||
+            isDirectDispatchRoleName(target.model)) {
+            return null;
+        }
         const baseRole = role === 'reviewer' ? CODEX_REVIEWER_ROLE : CODEX_IMPLEMENTER_ROLE;
-        return { variant: `${baseRole}-${value}` };
+        return {
+            variant: buildCodexMaterializedTargetRoleName({
+                agentName: baseRole,
+                model: target.model,
+                effort: target.effort,
+            }),
+        };
     },
-    // Codex enforces via effort variants, not model tier; there is no
-    // above-orchestrator upgrade path to verify.
+    // Codex enforces via materialized model+effort roles, not model tier; there
+    // is no above-orchestrator upgrade path to verify.
     verifyOnDispatch() {
         return false;
     },
@@ -44,7 +61,8 @@ const claudeAdapter = {
     validValues: [...VALID_CLAUDE_DISPATCH_CEILINGS],
     mechanism: 'model-arg',
     compileToDispatchArgs(value) {
-        if (!VALID_CLAUDE_DISPATCH_CEILINGS.includes(value)) {
+        if (isDirectDispatchRoleName(value) ||
+            !VALID_CLAUDE_DISPATCH_CEILINGS.includes(value)) {
             return null;
         }
         return { model: value };
@@ -61,7 +79,7 @@ const cursorAdapter = {
     mechanism: 'model-arg',
     compileToDispatchArgs(value) {
         const model = value.trim();
-        return model ? { model } : null;
+        return model && !isDirectDispatchRoleName(model) ? { model } : null;
     },
     // Cursor model slugs do not share a total order, so upgrade verification is
     // not meaningful here; availability is checked by the identity oracle layer.

package/dist/providers/codex/codec/catalog.d.ts

@@ -0,0 +1,14 @@
+export { SUPPORTED_CODEX_ROLE_TARGETS } from './shared.js';
+export declare const SUPPORTED_CODEX_BASE_ROLES: readonly ["oat-phase-implementer", "oat-reviewer"];
+export interface SupportedCodexRoleCatalogueEntry {
+    baseRole: (typeof SUPPORTED_CODEX_BASE_ROLES)[number];
+    model: string;
+    effort: string;
+    roleName: string;
+}
+export declare function isSupportedCodexRoleTarget(target: {
+    model: string;
+    effort: string;
+}): boolean;
+export declare function expandSupportedCodexRoleCatalogue(): SupportedCodexRoleCatalogueEntry[];
+//# sourceMappingURL=catalog.d.ts.map

package/dist/providers/codex/codec/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/catalog.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC;AAExD,eAAO,MAAM,0BAA0B,oDAG7B,CAAC;AAEX,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,EAAE,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAKV;AAED,wBAAgB,iCAAiC,IAAI,gCAAgC,EAAE,CAYtF"}

package/dist/providers/codex/codec/catalog.js

@@ -0,0 +1,21 @@
+import { buildCodexMaterializedRoleName } from './materialize.js';
+import { SUPPORTED_CODEX_ROLE_TARGETS } from './shared.js';
+export { SUPPORTED_CODEX_ROLE_TARGETS } from './shared.js';
+export const SUPPORTED_CODEX_BASE_ROLES = [
+    'oat-phase-implementer',
+    'oat-reviewer',
+];
+export function isSupportedCodexRoleTarget(target) {
+    return SUPPORTED_CODEX_ROLE_TARGETS.some((supported) => supported.model === target.model && supported.effort === target.effort);
+}
+export function expandSupportedCodexRoleCatalogue() {
+    return SUPPORTED_CODEX_BASE_ROLES.flatMap((baseRole) => SUPPORTED_CODEX_ROLE_TARGETS.map((target) => ({
+        baseRole,
+        ...target,
+        roleName: buildCodexMaterializedRoleName({
+            agentName: baseRole,
+            model: target.model,
+            effort: target.effort,
+        }),
+    }))).sort((left, right) => left.roleName.localeCompare(right.roleName));
+}

package/dist/providers/codex/codec/config-merge.d.ts

@@ -8,10 +8,16 @@ export interface CodexConfigMergeArgs {
     desiredRoles: CodexManagedRoleConfig[];
     staleManagedRoles?: string[];
 }
+export interface CodexSingleRoleConfigMergeArgs {
+    existingContent: string | null;
+    role: CodexManagedRoleConfig;
+    staleManagedRoles?: string[];
+}
 export interface CodexConfigMergeResult {
     mergedContent: string;
     changed: boolean;
     removedRoles: string[];
 }
 export declare function mergeCodexConfig({ existingContent, desiredRoles, staleManagedRoles, }: CodexConfigMergeArgs): CodexConfigMergeResult;
+export declare function mergeCodexConfigForRole({ existingContent, role, staleManagedRoles, }: CodexSingleRoleConfigMergeArgs): CodexConfigMergeResult;
 //# sourceMappingURL=config-merge.d.ts.map

package/dist/providers/codex/codec/config-merge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-merge.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/config-merge.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAiCD,wBAAgB,gBAAgB,CAAC,EAC/B,eAAe,EACf,YAAY,EACZ,iBAAsB,GACvB,EAAE,oBAAoB,GAAG,sBAAsB,CAsC/C"}
+{"version":3,"file":"config-merge.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/config-merge.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA8B;IAC7C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,IAAI,EAAE,sBAAsB,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAiCD,wBAAgB,gBAAgB,CAAC,EAC/B,eAAe,EACf,YAAY,EACZ,iBAAsB,GACvB,EAAE,oBAAoB,GAAG,sBAAsB,CAsC/C;AAED,wBAAgB,uBAAuB,CAAC,EACtC,eAAe,EACf,IAAI,EACJ,iBAAsB,GACvB,EAAE,8BAA8B,GAAG,sBAAsB,CAMzD"}

package/dist/providers/codex/codec/config-merge.js

@@ -59,3 +59,10 @@ export function mergeCodexConfig({ existingContent, desiredRoles, staleManagedRo
         removedRoles,
     };
 }
+export function mergeCodexConfigForRole({ existingContent, role, staleManagedRoles = [], }) {
+    return mergeCodexConfig({
+        existingContent,
+        desiredRoles: [role],
+        staleManagedRoles,
+    });
+}

package/dist/providers/codex/codec/materialize.d.ts

@@ -0,0 +1,16 @@
+import type { CanonicalAgentDocument } from '../../../agents/canonical/index.js';
+import { type CodexRoleExport } from './export-to-codex.js';
+export interface CodexMaterializeRoleOptions {
+    agent: CanonicalAgentDocument;
+    model: string;
+    effort: string;
+    roleName?: string;
+}
+export interface CodexMaterializedRoleNameOptions {
+    agentName: string;
+    model: string;
+    effort: string;
+}
+export declare function buildCodexMaterializedRoleName({ agentName, model, effort, }: CodexMaterializedRoleNameOptions): string;
+export declare function materializeCodexRole({ agent, model, effort, roleName, }: CodexMaterializeRoleOptions): CodexRoleExport;
+//# sourceMappingURL=materialize.d.ts.map

package/dist/providers/codex/codec/materialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/materialize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAGhE,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,mBAAmB,CAAC;AAM3B,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,sBAAsB,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAgB,8BAA8B,CAAC,EAC7C,SAAS,EACT,KAAK,EACL,MAAM,GACP,EAAE,gCAAgC,GAAG,MAAM,CAY3C;AAWD,wBAAgB,oBAAoB,CAAC,EACnC,KAAK,EACL,KAAK,EACL,MAAM,EACN,QAAQ,GACT,EAAE,2BAA2B,GAAG,eAAe,CA+B/C"}

package/dist/providers/codex/codec/materialize.js

@@ -0,0 +1,58 @@
+import { CliError } from '../../../errors/index.js';
+import { exportCanonicalAgentToCodexRole, } from './export-to-codex.js';
+import { buildCodexMaterializedTargetRoleName, sanitizeCodexRoleName, } from './shared.js';
+function requireNonEmpty(value, label) {
+    const normalized = value.trim();
+    if (!normalized) {
+        throw new CliError(`Cannot materialize Codex role: missing ${label}.`);
+    }
+    return normalized;
+}
+export function buildCodexMaterializedRoleName({ agentName, model, effort, }) {
+    const roleName = buildCodexMaterializedTargetRoleName({
+        agentName,
+        model,
+        effort,
+    });
+    if (!roleName) {
+        throw new CliError('Cannot materialize Codex role: missing role name.');
+    }
+    return roleName;
+}
+function codexExtensionObject(agent) {
+    const extension = agent.extensions.x_codex;
+    if (!extension || typeof extension !== 'object' || Array.isArray(extension)) {
+        return {};
+    }
+    return { ...extension };
+}
+export function materializeCodexRole({ agent, model, effort, roleName, }) {
+    const materializedModel = requireNonEmpty(model, 'model');
+    const materializedEffort = requireNonEmpty(effort, 'effort');
+    const materializedRoleName = roleName
+        ? sanitizeCodexRoleName(roleName)
+        : buildCodexMaterializedRoleName({
+            agentName: agent.name,
+            model: materializedModel,
+            effort: materializedEffort,
+        });
+    if (!materializedRoleName) {
+        throw new CliError('Cannot materialize Codex role: missing role name.');
+    }
+    return exportCanonicalAgentToCodexRole({
+        ...agent,
+        name: materializedRoleName,
+        frontmatter: {
+            ...agent.frontmatter,
+            name: materializedRoleName,
+        },
+        extensions: {
+            ...agent.extensions,
+            x_codex: {
+                ...codexExtensionObject(agent),
+                model: materializedModel,
+                model_reasoning_effort: materializedEffort,
+            },
+        },
+    });
+}

package/dist/providers/codex/codec/shared.d.ts

@@ -1,7 +1,27 @@
 export declare const OAT_MANAGED_ROLE_HEADER = "# oat-managed: true";
 export declare const OAT_MANAGED_ROLE_NAME_PREFIX = "# oat-role: ";
+export declare const OAT_MANAGED_ROLE_OWNER_PREFIX = "# oat-owner: ";
+export type CodexRoleOwner = 'supported-catalogue' | 'user-config' | 'project-config';
+export declare const SUPPORTED_CODEX_ROLE_TARGETS: readonly ({
+    model: string;
+    effort: "high" | "medium" | "low" | "xhigh";
+} | {
+    model: string;
+    effort: "high" | "medium" | "low" | "xhigh";
+} | {
+    model: string;
+    effort: string;
+})[];
 export declare function sanitizeCodexRoleName(input: string): string;
+export declare function normalizeCodexRoleName(input: string): string;
+export declare function buildCodexMaterializedTargetRoleName(options: {
+    agentName: string;
+    model: string;
+    effort: string;
+}): string;
 export declare function isOatManagedCodexRoleFile(content: string, roleName?: string): boolean;
 export declare function withOatManagedCodexHeader(roleName: string, tomlBody: string): string;
+export declare function readOatManagedCodexRoleOwner(content: string): CodexRoleOwner | null;
+export declare function withOatManagedCodexRoleOwner(content: string, owner: CodexRoleOwner): string;
 export declare function stringifyToml(object: Record<string, unknown>): string;
 //# sourceMappingURL=shared.d.ts.map

package/dist/providers/codex/codec/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/shared.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAE3D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAUT;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/shared.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAC3D,eAAO,MAAM,6BAA6B,kBAAkB,CAAC;AAE7D,MAAM,MAAM,cAAc,GACtB,qBAAqB,GACrB,aAAa,GACb,gBAAgB,CAAC;AAoBrB,eAAO,MAAM,4BAA4B;;;;;;;;;IAa/B,CAAC;AAEX,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO5D;AAQD,wBAAgB,oCAAoC,CAAC,OAAO,EAAE;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAiBT;AAgDD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAOT;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,GACd,cAAc,GAAG,IAAI,CAEvB;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,cAAc,GACpB,MAAM,CAkBR;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE"}

package/dist/providers/codex/codec/shared.js

@@ -1,21 +1,122 @@
+import { createHash } from 'node:crypto';
 import TOML from '@iarna/toml';
 export const OAT_MANAGED_ROLE_HEADER = '# oat-managed: true';
 export const OAT_MANAGED_ROLE_NAME_PREFIX = '# oat-role: ';
+export const OAT_MANAGED_ROLE_OWNER_PREFIX = '# oat-owner: ';
+const CODEX_ROLE_MARKER_PATTERN = /^# oat-role: ([a-zA-Z0-9_-]+)$/;
+const CODEX_OWNER_MARKER_PATTERN = /^# oat-owner: (supported-catalogue|user-config|project-config)$/;
+const STANDARD_SUPPORTED_CODEX_EFFORTS = [
+    'low',
+    'medium',
+    'high',
+    'xhigh',
+];
+export const SUPPORTED_CODEX_ROLE_TARGETS = [
+    ...STANDARD_SUPPORTED_CODEX_EFFORTS.map((effort) => ({
+        model: 'gpt-5.6-luna',
+        effort,
+    })),
+    ...STANDARD_SUPPORTED_CODEX_EFFORTS.map((effort) => ({
+        model: 'gpt-5.6-terra',
+        effort,
+    })),
+    ...[...STANDARD_SUPPORTED_CODEX_EFFORTS, 'max'].map((effort) => ({
+        model: 'gpt-5.6-sol',
+        effort,
+    })),
+];
 export function sanitizeCodexRoleName(input) {
-    return input.trim().replace(/\.md$/i, '');
+    return normalizeCodexRoleName(input.replace(/\.md$/i, ''));
+}
+export function normalizeCodexRoleName(input) {
+    return input
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/g, '-')
+        .replace(/-{2,}/g, '-')
+        .replace(/^-+|-+$/g, '');
+}
+function isSupportedCodexRoleTarget(model, effort) {
+    return SUPPORTED_CODEX_ROLE_TARGETS.some((supported) => supported.model === model && supported.effort === effort);
+}
+export function buildCodexMaterializedTargetRoleName(options) {
+    const normalizedAgentName = sanitizeCodexRoleName(options.agentName);
+    const normalizedModel = normalizeCodexRoleName(options.model);
+    const normalizedEffort = normalizeCodexRoleName(options.effort);
+    const customTargetSuffix = isSupportedCodexRoleTarget(options.model, options.effort)
+        ? ''
+        : `-${createHash('sha256')
+            .update(`${options.model}\0${options.effort}`)
+            .digest('hex')
+            .slice(0, 10)}`;
+    return normalizeCodexRoleName(`${normalizedAgentName}-${normalizedModel}-${normalizedEffort}${customTargetSuffix}`);
+}
+function parseOatManagedCodexRoleHeader(content) {
+    const lines = content
+        .split('\n')
+        .map((line) => (line.endsWith('\r') ? line.slice(0, -1) : line));
+    const headerLines = [];
+    for (const line of lines) {
+        if (!line.startsWith('# oat-')) {
+            break;
+        }
+        headerLines.push(line);
+    }
+    if (headerLines.length < 2 ||
+        headerLines.length > 3 ||
+        headerLines[0] !== OAT_MANAGED_ROLE_HEADER) {
+        return null;
+    }
+    const roleMatch = CODEX_ROLE_MARKER_PATTERN.exec(headerLines[1]);
+    if (!roleMatch) {
+        return null;
+    }
+    let owner = null;
+    let ownerLineIndex = null;
+    if (headerLines.length === 3) {
+        const ownerMatch = CODEX_OWNER_MARKER_PATTERN.exec(headerLines[2]);
+        if (!ownerMatch) {
+            return null;
+        }
+        owner = ownerMatch[1];
+        ownerLineIndex = 2;
+    }
+    return {
+        roleName: roleMatch[1],
+        roleLineIndex: 1,
+        owner,
+        ownerLineIndex,
+    };
 }
 export function isOatManagedCodexRoleFile(content, roleName) {
-    if (!content.includes(OAT_MANAGED_ROLE_HEADER)) {
+    const header = parseOatManagedCodexRoleHeader(content);
+    if (!header) {
         return false;
     }
-    if (!roleName) {
-        return true;
-    }
-    return content.includes(`${OAT_MANAGED_ROLE_NAME_PREFIX}${roleName}`);
+    return roleName === undefined || header.roleName === roleName;
 }
 export function withOatManagedCodexHeader(roleName, tomlBody) {
     return `${OAT_MANAGED_ROLE_HEADER}\n${OAT_MANAGED_ROLE_NAME_PREFIX}${roleName}\n${tomlBody}`;
 }
+export function readOatManagedCodexRoleOwner(content) {
+    return parseOatManagedCodexRoleHeader(content)?.owner ?? null;
+}
+export function withOatManagedCodexRoleOwner(content, owner) {
+    const header = parseOatManagedCodexRoleHeader(content);
+    if (!header) {
+        return content;
+    }
+    const lines = content.split('\n');
+    const ownerLine = `${OAT_MANAGED_ROLE_OWNER_PREFIX}${owner}`;
+    const usesCarriageReturn = lines[header.roleLineIndex]?.endsWith('\r') ?? false;
+    const encodedOwnerLine = `${ownerLine}${usesCarriageReturn ? '\r' : ''}`;
+    if (header.ownerLineIndex !== null) {
+        lines[header.ownerLineIndex] = encodedOwnerLine;
+        return lines.join('\n');
+    }
+    lines.splice(header.roleLineIndex + 1, 0, encodedOwnerLine);
+    return lines.join('\n');
+}
 export function stringifyToml(object) {
     return TOML.stringify(object);
 }

package/dist/providers/codex/codec/sync-extension.d.ts

@@ -21,7 +21,12 @@ export interface CodexExtensionApplyResult {
     failed: number;
     skipped: number;
 }
-export declare function computeCodexProjectExtensionPlan(scopeRoot: string, canonicalEntries: CanonicalEntry[], allowedCanonicalPaths?: string[]): Promise<CodexExtensionPlan>;
+interface CodexMaterializationTargetOptions {
+    userConfigDir?: string;
+    projectPath?: string | null;
+    env?: NodeJS.ProcessEnv;
+}
+export declare function computeCodexProjectExtensionPlan(scopeRoot: string, canonicalEntries: CanonicalEntry[], allowedCanonicalPaths?: string[], options?: CodexMaterializationTargetOptions): Promise<CodexExtensionPlan>;
 export declare function applyCodexProjectExtensionPlan(scopeRoot: string, plan: CodexExtensionPlan): Promise<CodexExtensionApplyResult>;
 export declare function hasCodexExtensionChanges(plan: CodexExtensionPlan): boolean;
 export declare function summarizeCodexExtension(plan: CodexExtensionPlan): {
@@ -29,4 +34,5 @@ export declare function summarizeCodexExtension(plan: CodexExtensionPlan): {
     skipped: number;
 };
 export declare function toCodexExtensionOperations(plan: CodexExtensionPlan): CodexExtensionOperation[];
+export {};
 //# sourceMappingURL=sync-extension.d.ts.map

package/dist/providers/codex/codec/sync-extension.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-extension.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/sync-extension.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAQpD,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAyND,wBAAsB,gCAAgC,CACpD,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,cAAc,EAAE,EAClC,qBAAqB,CAAC,EAAE,MAAM,EAAE,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAqH7B;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CA6BpC;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAE1E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IACjE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAaA;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,kBAAkB,GACvB,uBAAuB,EAAE,CAQ3B"}
+{"version":3,"file":"sync-extension.d.ts","sourceRoot":"","sources":["../../../../src/providers/codex/codec/sync-extension.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAqBpD,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAC3E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,4BAA4B,EAAE,CAAC;IAC3C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAgBD,UAAU,iCAAiC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAwhBD,wBAAsB,gCAAgC,CACpD,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,cAAc,EAAE,EAClC,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAChC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,kBAAkB,CAAC,CA+I7B;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CA6BpC;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAE1E;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,kBAAkB,GAAG;IACjE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAaA;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,kBAAkB,GACvB,uBAAuB,EAAE,CAQ3B"}