@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/adapters/codex-runtime-adapter.d.ts

@@ -0,0 +1,194 @@
+import type { TmuxAdapter } from "./tmux.js";
+import type { RuntimeAdapter, NodeBinding, ResolvedStartupFile, InstalledResource, ProjectionResult, StartupDeliveryResult, ReadinessResult, HarnessLaunchResult } from "../domain/runtime-adapter.js";
+import type { CodexProfileProbeResult } from "../domain/codex-profile-preflight.js";
+import type { ProjectionPlan } from "../domain/projection-planner.js";
+import { type ResolveHomeDirByPid } from "../domain/codex-thread-id.js";
+export interface CodexAdapterFsOps {
+    readFile(path: string): string;
+    writeFile(path: string, content: string): void;
+    exists(path: string): boolean;
+    mkdirp(path: string): void;
+    listFiles?(dirPath: string): string[];
+    /** Source file permission bits (for mode-preserving projection). Optional: mode preservation is a no-op if absent. */
+    statMode?(path: string): number;
+    /** Apply permission bits to a file (for mode-preserving projection). Optional: no-op if absent. */
+    chmod?(path: string, mode: number): void;
+    homedir?: string;
+}
+/**
+ * Codex runtime adapter. Projects resources to .agents/ targets (preserving
+ * existing Codex filesystem contract) and delivers startup files.
+ */
+export declare class CodexRuntimeAdapter implements RuntimeAdapter {
+    readonly runtime = "codex";
+    private tmux;
+    private fs;
+    private listProcesses;
+    private readThreadIdByPid;
+    private sleep;
+    private resolveHomeDirByPid;
+    private codexHome?;
+    private verifyProfilePreflight;
+    private activityRelayPath?;
+    constructor(deps: {
+        tmux: TmuxAdapter;
+        fsOps: CodexAdapterFsOps;
+        listProcesses?: () => Array<{
+            pid: number;
+            ppid: number;
+            command: string;
+        }> | Promise<Array<{
+            pid: number;
+            ppid: number;
+            command: string;
+        }>>;
+        readThreadIdByPid?: (pid: number) => Promise<string | undefined> | string | undefined;
+        resolveHomeDirByPid?: ResolveHomeDirByPid;
+        sleep?: (ms: number) => Promise<void>;
+        activityRelayPath?: string;
+        codexHome?: string;
+        verifyProfilePreflight?: (profile: string) => Promise<CodexProfileProbeResult>;
+    });
+    /**
+     * plugin-primitive Phase 3a slice 3.5 — ensure Codex feature flag.
+     *
+     * When `enabled` is true, idempotently writes `codex_hooks = true` under
+     * `[features]` in `~/.codex/config.toml`, creating the file if missing.
+     * When `enabled` is false, makes ZERO modifications — the operator is
+     * managing Codex config independently and the daemon does not touch it.
+     *
+     * Replaces the activity-hook-injection-coupled feature-flag set call
+     * that lived inside the auto-injected activity-hook provisioning path
+     * pre-rip (plugin-primitive Phase 3a slice 3.1).
+     */
+    ensureCodexFeatureFlag(enabled: boolean, opts?: {
+        codexVersion?: string;
+    }): void;
+    /**
+     * OPR.0.4.1.10 FR-A — write the OpenRig activity hooks into Codex's config layer
+     * (`~/.codex/config.toml` inline `[hooks]`) so an OpenRig-launched Codex seat is
+     * hook-PRIMARY from clean shipped config. Idempotent managed-block upsert for the
+     * four events SessionStart / UserPromptSubmit / Stop / PermissionRequest; each
+     * command is `node "<activityRelayPath>"` (the daemon's OWN shipped relay, FR-B —
+     * cwd-independent, version-matched, NOT `${PLUGIN_ROOT}` nor a per-cwd copy). Also
+     * pins `[features].hooks = true` (canonical key; the deprecated `codex_hooks` alias
+     * is intentionally NOT used here). Trust is granted at launch by the hook_trust_gate
+     * auto-clear (dismissCodexInteractiveGates → "2" Trust all and continue, verified on
+     * Codex 0.139). The relay inherits the seat's OPENRIG_* env from the tmux session.
+     *
+     * Fail-safe: skips + warns when the relay asset is missing — never writes a hook that
+     * points at a nonexistent script. Verified-firsthand (Codex 0.139, dev1-qa AC-2 proof):
+     * on the OpenRig-managed launch path — managed inline hooks + trusted + the relay env
+     * delivered into the seat (OPENRIG_URL + OPENRIG_ACTIVITY_HOOK_TOKEN + session/node/runtime)
+     * — all four events, SessionStart included, deliver as runtime_hook activity. Without the
+     * relay env the hooks are still trusted/visible but no activity rows land. (A bare/manual
+     * codex TUI launch lacks that context and may not deliver SessionStart — not how OpenRig
+     * launches seats.)
+     */
+    ensureCodexActivityHooks(): void;
+    /**
+     * OPR.0.4.3.33 — compute + splice Codex's `[hooks.state."<key>"] trusted_hash` for our 4
+     * authored activity hooks into `content`. `key_source` is the canonicalized config path
+     * (Codex keys trust by `std::fs::canonicalize(config.toml).display()`); we best-effort
+     * `realpathSync` the config path to match — on a miss (file not yet on real disk, or a mock
+     * fs in tests) we fall back to the plain absolute path, and any resulting key mismatch just
+     * degrades to the launch-time trust gate (Layer-2 floor), never a broken run. The command
+     * string is the value Codex deserializes from our TOML literal `'node "<relay>"'` — i.e.
+     * `node "<relay>"` WITHOUT the outer TOML quote delimiters. Timeout=5, matcher/status None.
+     */
+    private applyCodexActivityHookTrust;
+    /**
+     * OPR.0.4.1.10 B3 — durable disable. When runtime.codex.hooks_enabled is false, strip the
+     * OpenRig-managed activity-hooks sentinel block from ~/.codex/config.toml so a seat that was
+     * previously provisioned with hooks does not keep firing them after the operator disables.
+     * Removes ONLY the managed block — preserves any user-owned hooks and leaves [features].hooks
+     * (the Codex 0.139 default) intact. Idempotent; no-op when the config or the block is absent.
+     */
+    removeCodexActivityHooks(): void;
+    listInstalled(binding: NodeBinding): Promise<InstalledResource[]>;
+    project(plan: ProjectionPlan, binding: NodeBinding): Promise<ProjectionResult>;
+    deliverStartup(files: ResolvedStartupFile[], binding: NodeBinding): Promise<StartupDeliveryResult>;
+    launchHarness(binding: NodeBinding, opts: {
+        name: string;
+        resumeToken?: string;
+        forkSource?: import("../domain/runtime-adapter.js").ForkSource;
+    }): Promise<HarnessLaunchResult>;
+    private buildQueueStateAddDirArg;
+    checkReady(binding: NodeBinding): Promise<ReadinessResult>;
+    private dismissSkippableCodexUpdatePrompt;
+    private dismissCodexInteractiveGates;
+    ensureManagedBootstrap(binding: {
+        cwd?: string | null;
+    }): void;
+    private projectEntry;
+    /**
+     * Reapply the source file's permission bits to the projected dest. Plain
+     * readFile+writeFile (writeFileSync) creates the dest with the process default
+     * mode, dropping executable bits on nested plugin helpers (e.g. the
+     * claude-compaction-restore/scripts/*.mjs 0755 hooks). No-op when the fs adapter
+     * does not expose mode primitives (keeps existing mock-fs callers unaffected).
+     */
+    private preserveMode;
+    private pluginAppliesToCodex;
+    private resolveTargetDir;
+    private applyRuntimeResource;
+    /**
+     * Merge a managed block into the target guidance file. Returns `true` when
+     * the merge happened, `false` when intentionally skipped (rig-role). Callers
+     * propagate the skip signal so ProjectionResult and StartupDeliveryResult
+     * report honest counts.
+     */
+    private mergeGuidance;
+    private detectDeliveryHint;
+    private provisionWorkspaceTrust;
+    private resolveCodexConfigPath;
+    private readJsonObject;
+    private readJsonObjectField;
+    private workspaceTrustKeys;
+    private captureFreshThreadId;
+    private verifyResumeLaunch;
+    private findCodexDescendantPids;
+    private readThreadIdFromLogs;
+}
+export interface CodexHookTrustInput {
+    /** Codex hook_key source identity: canonicalized `~/.codex/config.toml` path. */
+    keySource: string;
+    /** The command as Codex DESERIALIZES it — `node "<relay>"` (no outer TOML quote delimiters). */
+    command: string;
+    /** Our authored hook timeout (seconds). */
+    timeoutSec: number;
+    /** None for our hooks; folded into the hash when present (kept for faithful reproduction). */
+    matcher?: string | null;
+    /** None for our hooks; folded into the hash when present. */
+    statusMessage?: string | null;
+    /** Positional group index within the event's matcher-group list (our hooks: 0). */
+    groupIndex?: number;
+    /** Positional handler index within the group's handler list (our hooks: 0). */
+    handlerIndex?: number;
+}
+/**
+ * Reproduce Codex's persisted hook trust `{ key, trusted_hash }` for one authored activity
+ * hook. Pure + deterministic. See the block comment above for the full RTFM derivation and the
+ * PROVISIONAL-until-VM-read-back caveat.
+ */
+export declare function computeCodexHookTrust(event: (typeof OPENRIG_ACTIVITY_HOOK_EVENTS)[number], input: CodexHookTrustInput): {
+    key: string;
+    hash: string;
+};
+/**
+ * OPR.0.4.3.33 — idempotent, non-clobbering, section-scoped writer for a single
+ * `[hooks.state."<key>"] trusted_hash = "<hash>"` record. Mirrors upsertCodexProjectTrust:
+ * find/create the exact table header, splice ONLY its `trusted_hash` line, leave every other
+ * `[hooks.state]` / `[projects]` entry and the managed hook block byte-identical. Same key+hash
+ * ⇒ no-op. Only ever called for OUR 4 authored hook keys (never a blanket/wildcard trust).
+ */
+export declare function upsertCodexHookTrust(content: string, key: string, hash: string): string;
+export declare function isCodex013xOrLater(version: string): boolean;
+declare const OPENRIG_ACTIVITY_HOOK_EVENTS: readonly ["SessionStart", "UserPromptSubmit", "Stop", "PermissionRequest"];
+export declare function defaultListProcesses(): Promise<Array<{
+    pid: number;
+    ppid: number;
+    command: string;
+}>>;
+export {};
+//# sourceMappingURL=codex-runtime-adapter.d.ts.map

package/node_modules/@openrig/daemon/dist/adapters/codex-runtime-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-runtime-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/codex-runtime-adapter.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,KAAK,EACV,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAChD,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAC3E,mBAAmB,EACpB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,iCAAiC,CAAC;AAEvF,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAStC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtC,sHAAsH;IACtH,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,mGAAmG;IACnG,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,QAAQ,CAAC,OAAO,WAAW;IAC3B,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,aAAa,CAA+H;IACpJ,OAAO,CAAC,iBAAiB,CAAoE;IAC7F,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,SAAS,CAAC,CAAS;IAO3B,OAAO,CAAC,sBAAsB,CAAwD;IAKtF,OAAO,CAAC,iBAAiB,CAAC,CAAS;gBAEvB,IAAI,EAAE;QAChB,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,EAAE,iBAAiB,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC7I,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;QACtF,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;QAC1C,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;KAChF;IAYD;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAahF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,wBAAwB,IAAI,IAAI;IA6BhC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IAiBnC;;;;;;OAMG;IACH,wBAAwB,IAAI,IAAI;IAU1B,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAWjE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B9E,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgDlG,aAAa,CACjB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,8BAA8B,EAAE,UAAU,CAAA;KAAE,GAC3G,OAAO,CAAC,mBAAmB,CAAC;IAwG/B,OAAO,CAAC,wBAAwB;IAW1B,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC;YAqBlD,iCAAiC;YAiCjC,4BAA4B;IAuC1C,sBAAsB,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAI9D,OAAO,CAAC,YAAY;IAqDpB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,oBAAoB;IAc5B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,uBAAuB;IAmB/B,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,kBAAkB;YAUZ,oBAAoB;YAsBpB,kBAAkB;YAsGlB,uBAAuB;YAKvB,oBAAoB;CAOnC;AAsGD,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,EACpD,KAAK,EAAE,mBAAmB,GACzB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAoB/B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CA8BvF;AA0BD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAO3D;AA4DD,QAAA,MAAM,4BAA4B,4EAA6E,CAAC;AA0GhH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAwB3G"}