@openrig/cli 0.5.15 → 0.5.17

package/node_modules/@openrig/daemon/dist/adapters/codex-runtime-adapter.d.ts

@@ -1,188 +0,0 @@
-import type { TmuxAdapter } from "./tmux.js";
-import type { RuntimeAdapter, NodeBinding, ResolvedStartupFile, InstalledResource, ProjectionResult, StartupDeliveryResult, ReadinessResult, HarnessLaunchResult } from "../domain/runtime-adapter.js";
-import type { CodexProfileProbeResult } from "../domain/codex-profile-preflight.js";
-import type { ProjectionPlan } from "../domain/projection-planner.js";
-import { type ResolveHomeDirByPid } from "../domain/codex-thread-id.js";
-import { type NativeProcessRow } from "../domain/native-process-lineage.js";
-type CodexProcess = NativeProcessRow;
-export interface CodexAdapterFsOps {
-    readFile(path: string): string;
-    writeFile(path: string, content: string): void;
-    exists(path: string): boolean;
-    mkdirp(path: string): void;
-    listFiles?(dirPath: string): string[];
-    /** Source file permission bits (for mode-preserving projection). Optional: mode preservation is a no-op if absent. */
-    statMode?(path: string): number;
-    /** Apply permission bits to a file (for mode-preserving projection). Optional: no-op if absent. */
-    chmod?(path: string, mode: number): void;
-    homedir?: string;
-}
-/**
- * Codex runtime adapter. Projects resources to .agents/ targets (preserving
- * existing Codex filesystem contract) and delivers startup files.
- */
-export declare class CodexRuntimeAdapter implements RuntimeAdapter {
-    readonly runtime = "codex";
-    private tmux;
-    private fs;
-    private listProcesses;
-    private readThreadIdByPid;
-    private sleep;
-    private resolveHomeDirByPid;
-    private codexHome?;
-    private launchPath?;
-    private verifyProfilePreflight;
-    private activityRelayPath?;
-    constructor(deps: {
-        tmux: TmuxAdapter;
-        fsOps: CodexAdapterFsOps;
-        listProcesses?: () => CodexProcess[] | Promise<CodexProcess[]>;
-        readThreadIdByPid?: (pid: number) => Promise<string | undefined> | string | undefined;
-        resolveHomeDirByPid?: ResolveHomeDirByPid;
-        sleep?: (ms: number) => Promise<void>;
-        activityRelayPath?: string;
-        codexHome?: string;
-        /** Match the daemon's prerequisite probe even if the pane's login shell rewrites PATH. */
-        launchPath?: string;
-        verifyProfilePreflight?: (profile: string) => Promise<CodexProfileProbeResult>;
-    });
-    /**
-     * plugin-primitive Phase 3a slice 3.5 — ensure Codex feature flag.
-     *
-     * When `enabled` is true, idempotently writes `codex_hooks = true` under
-     * `[features]` in `~/.codex/config.toml`, creating the file if missing.
-     * When `enabled` is false, makes ZERO modifications — the operator is
-     * managing Codex config independently and the daemon does not touch it.
-     *
-     * Replaces the activity-hook-injection-coupled feature-flag set call
-     * that lived inside the auto-injected activity-hook provisioning path
-     * pre-rip (plugin-primitive Phase 3a slice 3.1).
-     */
-    ensureCodexFeatureFlag(enabled: boolean, opts?: {
-        codexVersion?: string;
-    }): void;
-    /**
-     * OPR.0.4.1.10 FR-A — write the OpenRig activity hooks into Codex's config layer
-     * (`~/.codex/config.toml` inline `[hooks]`) so an OpenRig-launched Codex seat is
-     * hook-PRIMARY from clean shipped config. Idempotent managed-block upsert for the
-     * four events SessionStart / UserPromptSubmit / Stop / PermissionRequest; each
-     * command is `node "<activityRelayPath>"` (the daemon's OWN shipped relay, FR-B —
-     * cwd-independent, version-matched, NOT `${PLUGIN_ROOT}` nor a per-cwd copy). Also
-     * pins `[features].hooks = true` (canonical key; the deprecated `codex_hooks` alias
-     * is intentionally NOT used here). Trust is scoped to the exact authored hook
-     * hashes below; remaining native review prompts require an operator decision.
-     * The relay inherits the seat's OPENRIG_* env from the tmux session.
-     *
-     * Fail-safe: skips + warns when the relay asset is missing — never writes a hook that
-     * points at a nonexistent script. Verified-firsthand (Codex 0.139, dev1-qa AC-2 proof):
-     * on the OpenRig-managed launch path — managed inline hooks + trusted + the relay env
-     * delivered into the seat (OPENRIG_URL + OPENRIG_ACTIVITY_HOOK_TOKEN + session/node/runtime)
-     * — all four events, SessionStart included, deliver as runtime_hook activity. Without the
-     * relay env the hooks are still trusted/visible but no activity rows land. (A bare/manual
-     * codex TUI launch lacks that context and may not deliver SessionStart — not how OpenRig
-     * launches seats.)
-     */
-    ensureCodexActivityHooks(): void;
-    /**
-     * OPR.0.4.3.33 — compute + splice Codex's `[hooks.state."<key>"] trusted_hash` for our 4
-     * authored activity hooks into `content`. `key_source` is the canonicalized config path
-     * (Codex keys trust by `std::fs::canonicalize(config.toml).display()`); we best-effort
-     * `realpathSync` the config path to match — on a miss (file not yet on real disk, or a mock
-     * fs in tests) we fall back to the plain absolute path, and any resulting key mismatch just
-     * degrades to the launch-time trust gate (Layer-2 floor), never a broken run. The command
-     * string is the value Codex deserializes from our TOML literal `'node "<relay>"'` — i.e.
-     * `node "<relay>"` WITHOUT the outer TOML quote delimiters. Timeout=5, matcher/status None.
-     */
-    private applyCodexActivityHookTrust;
-    /**
-     * OPR.0.4.1.10 B3 — durable disable. When runtime.codex.hooks_enabled is false, strip the
-     * OpenRig-managed activity-hooks sentinel block from ~/.codex/config.toml so a seat that was
-     * previously provisioned with hooks does not keep firing them after the operator disables.
-     * Removes ONLY the managed block — preserves any user-owned hooks and leaves [features].hooks
-     * (the Codex 0.139 default) intact. Idempotent; no-op when the config or the block is absent.
-     */
-    removeCodexActivityHooks(): void;
-    listInstalled(binding: NodeBinding): Promise<InstalledResource[]>;
-    project(plan: ProjectionPlan, binding: NodeBinding): Promise<ProjectionResult>;
-    deliverStartup(files: ResolvedStartupFile[], binding: NodeBinding): Promise<StartupDeliveryResult>;
-    launchHarness(binding: NodeBinding, opts: {
-        name: string;
-        resumeToken?: string;
-        forkSource?: import("../domain/runtime-adapter.js").ForkSource;
-    }): Promise<HarnessLaunchResult>;
-    private buildQueueStateAddDirArg;
-    private captureProbeScreen;
-    checkReady(binding: NodeBinding): Promise<ReadinessResult>;
-    private dismissSkippableCodexUpdatePrompt;
-    private observeMenuProcess;
-    ensureManagedBootstrap(binding: {
-        cwd?: string | null;
-    }): void;
-    private projectEntry;
-    /**
-     * Reapply the source file's permission bits to the projected dest. Plain
-     * readFile+writeFile (writeFileSync) creates the dest with the process default
-     * mode, dropping executable bits on nested plugin helpers (e.g. the
-     * claude-compaction-restore/scripts/*.mjs 0755 hooks). No-op when the fs adapter
-     * does not expose mode primitives (keeps existing mock-fs callers unaffected).
-     */
-    private preserveMode;
-    private pluginAppliesToCodex;
-    private resolveTargetDir;
-    private applyRuntimeResource;
-    /**
-     * Merge a managed block into the target guidance file. Returns `true` when
-     * the merge happened, `false` when intentionally skipped (rig-role). Callers
-     * propagate the skip signal so ProjectionResult and StartupDeliveryResult
-     * report honest counts.
-     */
-    private mergeGuidance;
-    private detectDeliveryHint;
-    private provisionWorkspaceTrust;
-    private resolveCodexConfigPath;
-    private readJsonObject;
-    private readJsonObjectField;
-    private workspaceTrustKeys;
-    private captureFreshThreadId;
-    private verifyResumeLaunch;
-    private findCodexDescendantPids;
-    private readThreadIdFromLogs;
-}
-export interface CodexHookTrustInput {
-    /** Codex hook_key source identity: canonicalized `~/.codex/config.toml` path. */
-    keySource: string;
-    /** The command as Codex DESERIALIZES it — `node "<relay>"` (no outer TOML quote delimiters). */
-    command: string;
-    /** Our authored hook timeout (seconds). */
-    timeoutSec: number;
-    /** None for our hooks; folded into the hash when present (kept for faithful reproduction). */
-    matcher?: string | null;
-    /** None for our hooks; folded into the hash when present. */
-    statusMessage?: string | null;
-    /** Positional group index within the event's matcher-group list (our hooks: 0). */
-    groupIndex?: number;
-    /** Positional handler index within the group's handler list (our hooks: 0). */
-    handlerIndex?: number;
-}
-/**
- * Reproduce Codex's persisted hook trust `{ key, trusted_hash }` for one authored activity
- * hook. Pure + deterministic. See the block comment above for the full RTFM derivation and the
- * PROVISIONAL-until-VM-read-back caveat.
- */
-export declare function computeCodexHookTrust(event: (typeof OPENRIG_ACTIVITY_HOOK_EVENTS)[number], input: CodexHookTrustInput): {
-    key: string;
-    hash: string;
-};
-/**
- * OPR.0.4.3.33 — idempotent, non-clobbering, section-scoped writer for a single
- * `[hooks.state."<key>"] trusted_hash = "<hash>"` record. Mirrors upsertCodexProjectTrust:
- * find/create the exact table header, splice ONLY its `trusted_hash` line, leave every other
- * `[hooks.state]` / `[projects]` entry and the managed hook block byte-identical. Same key+hash
- * ⇒ no-op. Only ever called for OUR 4 authored hook keys (never a blanket/wildcard trust).
- */
-export declare function upsertCodexHookTrust(content: string, key: string, hash: string): string;
-export declare function isCodex013xOrLater(version: string): boolean;
-declare const OPENRIG_ACTIVITY_HOOK_EVENTS: readonly ["SessionStart", "UserPromptSubmit", "Stop", "PermissionRequest"];
-export declare function defaultListProcesses(): Promise<CodexProcess[]>;
-export {};
-//# sourceMappingURL=codex-runtime-adapter.d.ts.map

package/node_modules/@openrig/daemon/dist/adapters/codex-runtime-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-runtime-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/codex-runtime-adapter.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,KAAK,EACV,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAChD,iBAAiB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,eAAe,EAC3E,mBAAmB,EACpB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,iCAAiC,CAAC;AAEvF,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAOtC,OAAO,EAAgD,KAAK,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAS1H,KAAK,YAAY,GAAG,gBAAgB,CAAC;AAErC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtC,sHAAsH;IACtH,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,mGAAmG;IACnG,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,qBAAa,mBAAoB,YAAW,cAAc;IACxD,QAAQ,CAAC,OAAO,WAAW;IAC3B,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,aAAa,CAAiD;IACtE,OAAO,CAAC,iBAAiB,CAAoE;IAC7F,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,UAAU,CAAC,CAAS;IAO5B,OAAO,CAAC,sBAAsB,CAAwD;IAKtF,OAAO,CAAC,iBAAiB,CAAC,CAAS;gBAEvB,IAAI,EAAE;QAChB,IAAI,EAAE,WAAW,CAAC;QAClB,KAAK,EAAE,iBAAiB,CAAC;QACzB,aAAa,CAAC,EAAE,MAAM,YAAY,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/D,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;QACtF,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;QAC1C,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,0FAA0F;QAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;KAChF;IAaD;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAahF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,wBAAwB,IAAI,IAAI;IA6BhC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IAiBnC;;;;;;OAMG;IACH,wBAAwB,IAAI,IAAI;IAU1B,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAWjE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B9E,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgDlG,aAAa,CACjB,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,8BAA8B,EAAE,UAAU,CAAA;KAAE,GAC3G,OAAO,CAAC,mBAAmB,CAAC;IAqG/B,OAAO,CAAC,wBAAwB;YAWlB,kBAAkB;IAO1B,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC;YAqBlD,iCAAiC;YAuDjC,kBAAkB;IAOhC,sBAAsB,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI;IAI9D,OAAO,CAAC,YAAY;IAqDpB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,oBAAoB;IAsB5B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,uBAAuB;IAmB/B,OAAO,CAAC,sBAAsB;IAM9B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,kBAAkB;YAUZ,oBAAoB;YAuBpB,kBAAkB;YA2GlB,uBAAuB;YAKvB,oBAAoB;CAOnC;AAsGD,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,EACpD,KAAK,EAAE,mBAAmB,GACzB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAoB/B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CA8BvF;AA0BD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAO3D;AA4DD,QAAA,MAAM,4BAA4B,4EAA6E,CAAC;AA+ThH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAEpE"}