@pzy560117/codex-harness 0.1.0 → 0.1.2

package/package-source/docs/codex-harness-engineering/templates/package-assets/skills/qoder-codex-api-config/scripts/configure-qoder-codex-api.ps1

@@ -0,0 +1,278 @@
+param(
+    [string]$CodexHome = (Join-Path $env:USERPROFILE ".codex"),
+    [string]$QoderDataDir = (Join-Path $env:APPDATA "Qoder"),
+    [string]$Model = "",
+    [string]$BaseUrl = "",
+    [string]$Alias = "",
+    [string]$Provider = "openai",
+    [string]$ByokTypeKey = "openai",
+    [string]$ModelId = "",
+    [switch]$AllowRunning
+)
+
+$ErrorActionPreference = "Stop"
+
+if (-not ("System.Security.Cryptography.AesGcm" -as [type])) {
+    $pwsh = Get-Command pwsh -ErrorAction SilentlyContinue
+    if (-not $pwsh -and (Test-Path -LiteralPath "C:\Program Files\PowerShell\7\pwsh.exe")) {
+        $pwsh = [pscustomobject]@{ Source = "C:\Program Files\PowerShell\7\pwsh.exe" }
+    }
+    if ($pwsh -and $PSCommandPath) {
+        $pwshArgs = [System.Collections.Generic.List[string]]::new()
+        @(
+            "-NoProfile",
+            "-ExecutionPolicy", "Bypass",
+            "-File", $PSCommandPath,
+            "-CodexHome", $CodexHome,
+            "-QoderDataDir", $QoderDataDir
+        ) | ForEach-Object { $pwshArgs.Add($_) }
+        if (-not [string]::IsNullOrWhiteSpace($Model)) { $pwshArgs.Add("-Model"); $pwshArgs.Add($Model) }
+        if (-not [string]::IsNullOrWhiteSpace($BaseUrl)) { $pwshArgs.Add("-BaseUrl"); $pwshArgs.Add($BaseUrl) }
+        if (-not [string]::IsNullOrWhiteSpace($Alias)) { $pwshArgs.Add("-Alias"); $pwshArgs.Add($Alias) }
+        if (-not [string]::IsNullOrWhiteSpace($Provider)) { $pwshArgs.Add("-Provider"); $pwshArgs.Add($Provider) }
+        if (-not [string]::IsNullOrWhiteSpace($ByokTypeKey)) { $pwshArgs.Add("-ByokTypeKey"); $pwshArgs.Add($ByokTypeKey) }
+        if (-not [string]::IsNullOrWhiteSpace($ModelId)) { $pwshArgs.Add("-ModelId"); $pwshArgs.Add($ModelId) }
+        if ($AllowRunning) { $pwshArgs.Add("-AllowRunning") }
+        & $pwsh.Source @pwshArgs
+        exit $LASTEXITCODE
+    }
+    throw "System.Security.Cryptography.AesGcm is unavailable. Install PowerShell 7 or run this script with pwsh."
+}
+
+function Resolve-Tool {
+    param(
+        [string]$Name,
+        [string[]]$Fallbacks
+    )
+    $cmd = Get-Command $Name -ErrorAction SilentlyContinue
+    if ($cmd) { return $cmd.Source }
+    foreach ($path in $Fallbacks) {
+        if (Test-Path -LiteralPath $path) { return $path }
+    }
+    throw "Tool not found: $Name"
+}
+
+function SqlQuote {
+    param([string]$Value)
+    return "'" + $Value.Replace("'", "''") + "'"
+}
+
+function Get-TomlString {
+    param(
+        [string]$Text,
+        [string]$Key
+    )
+    $match = [regex]::Match($Text, "(?m)^\s*$([regex]::Escape($Key))\s*=\s*""([^""]*)""")
+    if ($match.Success) { return $match.Groups[1].Value }
+    return ""
+}
+
+function Get-ProviderBaseUrl {
+    param(
+        [string]$ConfigText,
+        [string]$ProviderName
+    )
+    if ([string]::IsNullOrWhiteSpace($ProviderName)) { return "" }
+    $escaped = [regex]::Escape($ProviderName)
+    $pattern = "(?ms)^\[model_providers\.$escaped\]\s*(.*?)(?=^\[|\z)"
+    $section = [regex]::Match($ConfigText, $pattern)
+    if (-not $section.Success) { return "" }
+    return Get-TomlString -Text $section.Groups[1].Value -Key "base_url"
+}
+
+function ConvertTo-QoderEncryptedSecretJson {
+    param(
+        [string]$PlainText,
+        [string]$LocalStatePath
+    )
+
+    $localState = Get-Content -LiteralPath $LocalStatePath -Raw | ConvertFrom-Json
+    $encryptedKey = [Convert]::FromBase64String($localState.os_crypt.encrypted_key)
+    if ($encryptedKey.Length -le 5) { throw "Invalid Qoder os_crypt encrypted_key." }
+
+    $dpapiBlob = [byte[]]$encryptedKey[5..($encryptedKey.Length - 1)]
+    Add-Type -AssemblyName System.Security
+    $key = [System.Security.Cryptography.ProtectedData]::Unprotect(
+        $dpapiBlob,
+        $null,
+        [System.Security.Cryptography.DataProtectionScope]::CurrentUser
+    )
+
+    $plain = [Text.Encoding]::UTF8.GetBytes($PlainText)
+    $nonce = New-Object byte[] 12
+    $rng = [System.Security.Cryptography.RandomNumberGenerator]::Create()
+    try {
+        $rng.GetBytes($nonce)
+    }
+    finally {
+        $rng.Dispose()
+    }
+    $cipher = New-Object byte[] $plain.Length
+    $tag = New-Object byte[] 16
+
+    $aes = [System.Security.Cryptography.AesGcm]::new($key)
+    try {
+        $aes.Encrypt($nonce, $plain, $cipher, $tag, $null)
+    }
+    finally {
+        $aes.Dispose()
+    }
+
+    $encrypted = New-Object byte[] (3 + $nonce.Length + $cipher.Length + $tag.Length)
+    $prefix = [byte[]][char[]]"v10"
+    [Array]::Copy($prefix, 0, $encrypted, 0, 3)
+    [Array]::Copy($nonce, 0, $encrypted, 3, $nonce.Length)
+    [Array]::Copy($cipher, 0, $encrypted, 15, $cipher.Length)
+    [Array]::Copy($tag, 0, $encrypted, 15 + $cipher.Length, $tag.Length)
+
+    return @{
+        Json = (@{ type = "Buffer"; data = @($encrypted) } | ConvertTo-Json -Compress)
+        Key = $key
+    }
+}
+
+function Test-QoderSecret {
+    param(
+        [string]$SecretJson,
+        [byte[]]$Key,
+        [string]$ExpectedPlainText
+    )
+    $obj = $SecretJson | ConvertFrom-Json
+    $bytes = [byte[]]$obj.data
+    if ($bytes.Length -lt 32) { return $false }
+    $nonce = [byte[]]$bytes[3..14]
+    $ctag = [byte[]]$bytes[15..($bytes.Length - 1)]
+    $cipher = [byte[]]$ctag[0..($ctag.Length - 17)]
+    $tag = [byte[]]$ctag[($ctag.Length - 16)..($ctag.Length - 1)]
+    $plain = New-Object byte[] $cipher.Length
+    $aes = [System.Security.Cryptography.AesGcm]::new($Key)
+    try {
+        $aes.Decrypt($nonce, $cipher, $tag, $plain, $null)
+    }
+    finally {
+        $aes.Dispose()
+    }
+    return ([Text.Encoding]::UTF8.GetString($plain)) -eq $ExpectedPlainText
+}
+
+$qoderProcess = Get-Process | Where-Object { $_.ProcessName -match "Qoder|qoder" }
+if ($qoderProcess -and -not $AllowRunning) {
+    throw "Qoder is running. Close Qoder first, or rerun with -AllowRunning if you accept overwrite risk."
+}
+
+$sqlite = Resolve-Tool -Name "sqlite3" -Fallbacks @("D:\platform-tools\sqlite3.exe")
+$configPath = Join-Path $CodexHome "config.toml"
+$authPath = Join-Path $CodexHome "auth.json"
+$dbPath = Join-Path $QoderDataDir "User\globalStorage\state.vscdb"
+$localStatePath = Join-Path $QoderDataDir "Local State"
+
+foreach ($path in @($configPath, $authPath, $dbPath, $localStatePath)) {
+    if (-not (Test-Path -LiteralPath $path)) { throw "Required file not found: $path" }
+}
+
+$configText = Get-Content -LiteralPath $configPath -Raw
+if ([string]::IsNullOrWhiteSpace($Model)) {
+    $Model = Get-TomlString -Text $configText -Key "model"
+}
+if ([string]::IsNullOrWhiteSpace($BaseUrl)) {
+    $modelProvider = Get-TomlString -Text $configText -Key "model_provider"
+    $BaseUrl = Get-ProviderBaseUrl -ConfigText $configText -ProviderName $modelProvider
+}
+if ([string]::IsNullOrWhiteSpace($Model)) { throw "Model not provided and not found in Codex config." }
+if ([string]::IsNullOrWhiteSpace($BaseUrl)) { throw "BaseUrl not provided and not found in Codex config." }
+
+if ([string]::IsNullOrWhiteSpace($ModelId)) {
+    $safeModel = ($Model -replace "[^A-Za-z0-9]+", "_").Trim("_").ToLowerInvariant()
+    $ModelId = "model_codex_$safeModel"
+}
+if ([string]::IsNullOrWhiteSpace($Alias)) {
+    $Alias = "Codex $Model"
+}
+
+$auth = Get-Content -LiteralPath $authPath -Raw | ConvertFrom-Json
+$apiKey = [string]$auth.OPENAI_API_KEY
+if ([string]::IsNullOrWhiteSpace($apiKey)) { throw "OPENAI_API_KEY not found in Codex auth.json." }
+
+$backup = "$dbPath.codex-backup-$(Get-Date -Format 'yyyyMMdd-HHmmss')"
+Copy-Item -LiteralPath $dbPath -Destination $backup
+if (Test-Path -LiteralPath "$dbPath-wal") { Copy-Item -LiteralPath "$dbPath-wal" -Destination "$backup-wal" }
+if (Test-Path -LiteralPath "$dbPath-shm") { Copy-Item -LiteralPath "$dbPath-shm" -Destination "$backup-shm" }
+
+$encryptedSecret = ConvertTo-QoderEncryptedSecretJson -PlainText $apiKey -LocalStatePath $localStatePath
+
+$now = [DateTimeOffset]::Now.ToUnixTimeMilliseconds()
+$modelKey = "custom:$ModelId"
+$record = [ordered]@{
+    id = $ModelId
+    provider = $Provider
+    model = $Model
+    alias = $Alias
+    baseUrl = $BaseUrl
+    visible = $true
+    hasApiKey = $true
+    is_vl = $false
+    is_reasoning = $true
+    max_input_tokens = 1000000
+    byokTypeKey = $ByokTypeKey
+    createTime = $now
+}
+$modelsJson = "[" + ($record | ConvertTo-Json -Compress) + "]"
+$agentJson = @{
+    "globalstate-selected-models" = @{
+        chat = $modelKey
+        assistant = $modelKey
+        inline = "auto"
+    }
+} | ConvertTo-Json -Compress
+
+$markerRaw = & $sqlite $dbPath "select value from ItemTable where key='__$__targetStorageMarker';"
+if ($markerRaw) {
+    $marker = $markerRaw | ConvertFrom-Json
+}
+else {
+    $marker = [pscustomobject]@{}
+}
+$marker | Add-Member -NotePropertyName "aicoding.customModels" -NotePropertyValue 1 -Force
+$marker | Add-Member -NotePropertyName "chat.modelConfig.assistant" -NotePropertyValue 0 -Force
+$marker | Add-Member -NotePropertyName "chat.modelConfig.experts" -NotePropertyValue 0 -Force
+$markerJson = $marker | ConvertTo-Json -Compress
+
+$sql = @(
+    "insert or replace into ItemTable(key,value) values('aicoding.customModels',$(SqlQuote $modelsJson));",
+    "insert or replace into ItemTable(key,value) values('chat.modelConfig.assistant',$(SqlQuote $modelKey));",
+    "insert or replace into ItemTable(key,value) values('chat.modelConfig.experts',$(SqlQuote $modelKey));",
+    "insert or replace into ItemTable(key,value) values('aicoding.aicoding-agent',$(SqlQuote $agentJson));",
+    "insert or replace into ItemTable(key,value) values('secret://aicoding.customModel.apiKey.$ModelId',$(SqlQuote $encryptedSecret.Json));",
+    "insert or replace into ItemTable(key,value) values('__$__targetStorageMarker',$(SqlQuote $markerJson));"
+) -join "`n"
+
+$sqlPath = Join-Path $env:TEMP ("qoder-config-" + [Guid]::NewGuid().ToString("N") + ".sql")
+Set-Content -LiteralPath $sqlPath -Value $sql -NoNewline -Encoding UTF8
+try {
+    & $sqlite $dbPath ".read '$sqlPath'"
+}
+finally {
+    Remove-Item -LiteralPath $sqlPath -Force
+}
+
+$storedModels = & $sqlite $dbPath "select value from ItemTable where key='aicoding.customModels';"
+$parsedModels = $storedModels | ConvertFrom-Json -NoEnumerate
+if (($parsedModels -isnot [array]) -or $parsedModels.Count -lt 1 -or $parsedModels[0].id -ne $ModelId) {
+    throw "Verification failed: aicoding.customModels was not written correctly."
+}
+
+$storedSecret = & $sqlite $dbPath "select value from ItemTable where key='secret://aicoding.customModel.apiKey.$ModelId';"
+if (-not (Test-QoderSecret -SecretJson $storedSecret -Key $encryptedSecret.Key -ExpectedPlainText $apiKey)) {
+    throw "Verification failed: encrypted API key cannot be decrypted to the Codex API key."
+}
+
+$assistant = & $sqlite $dbPath "select value from ItemTable where key='chat.modelConfig.assistant';"
+if ($assistant -ne $modelKey) {
+    throw "Verification failed: assistant model selection was not written."
+}
+
+Write-Output "Qoder custom model configured."
+Write-Output "Model key: $modelKey"
+Write-Output "Model: $Model"
+Write-Output "Base URL: $BaseUrl"
+Write-Output "Backup: $backup"

package/package-source/docs/codex-harness-engineering/templates/package-assets/skills/refactor-clean/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: refactor-clean
+description: Workflow skill from refactor-clean.md
+---
+
+# Refactor Clean
+
+Safely identify and remove dead code with test verification:
+
+1. Run dead code analysis tools:
+   - knip: Find unused exports and files
+   - depcheck: Find unused dependencies
+   - ts-prune: Find unused TypeScript exports
+
+2. Generate comprehensive report in .reports/dead-code-analysis.md
+
+3. Categorize findings by severity:
+   - SAFE: Test files, unused utilities
+   - CAUTION: API routes, components
+   - DANGER: Config files, main entry points
+
+4. Propose safe deletions only
+
+5. Before each deletion:
+   - Run full test suite
+   - Verify tests pass
+   - Apply change
+   - Re-run tests
+   - Rollback if tests fail
+
+6. Show summary of cleaned items
+
+Never delete code without running tests first!

package/package-source/docs/codex-harness-engineering/templates/package-assets/skills/refactor-cleaner/SKILL.md

@@ -0,0 +1,306 @@
+---
+name: refactor-cleaner
+description: Dead code cleanup and consolidation specialist. Use PROACTIVELY for removing unused code, duplicates, and refactoring. Runs analysis tools (knip, depcheck, ts-prune) to identify dead code and safely removes it.
+tools: Read, Write, Edit, Bash, Grep, Glob
+model: opus
+---
+
+# Refactor & Dead Code Cleaner
+
+You are an expert refactoring specialist focused on code cleanup and consolidation. Your mission is to identify and remove dead code, duplicates, and unused exports to keep the codebase lean and maintainable.
+
+## Core Responsibilities
+
+1. **Dead Code Detection** - Find unused code, exports, dependencies
+2. **Duplicate Elimination** - Identify and consolidate duplicate code
+3. **Dependency Cleanup** - Remove unused packages and imports
+4. **Safe Refactoring** - Ensure changes don't break functionality
+5. **Documentation** - Track all deletions in DELETION_LOG.md
+
+## Tools at Your Disposal
+
+### Detection Tools
+- **knip** - Find unused files, exports, dependencies, types
+- **depcheck** - Identify unused npm dependencies
+- **ts-prune** - Find unused TypeScript exports
+- **eslint** - Check for unused disable-directives and variables
+
+### Analysis Commands
+```bash
+# Run knip for unused exports/files/dependencies
+npx knip
+
+# Check unused dependencies
+npx depcheck
+
+# Find unused TypeScript exports
+npx ts-prune
+
+# Check for unused disable-directives
+npx eslint . --report-unused-disable-directives
+```
+
+## Refactoring Workflow
+
+### 1. Analysis Phase
+```
+a) Run detection tools in parallel
+b) Collect all findings
+c) Categorize by risk level:
+   - SAFE: Unused exports, unused dependencies
+   - CAREFUL: Potentially used via dynamic imports
+   - RISKY: Public API, shared utilities
+```
+
+### 2. Risk Assessment
+```
+For each item to remove:
+- Check if it's imported anywhere (grep search)
+- Verify no dynamic imports (grep for string patterns)
+- Check if it's part of public API
+- Review git history for context
+- Test impact on build/tests
+```
+
+### 3. Safe Removal Process
+```
+a) Start with SAFE items only
+b) Remove one category at a time:
+   1. Unused npm dependencies
+   2. Unused internal exports
+   3. Unused files
+   4. Duplicate code
+c) Run tests after each batch
+d) Create git commit for each batch
+```
+
+### 4. Duplicate Consolidation
+```
+a) Find duplicate components/utilities
+b) Choose the best implementation:
+   - Most feature-complete
+   - Best tested
+   - Most recently used
+c) Update all imports to use chosen version
+d) Delete duplicates
+e) Verify tests still pass
+```
+
+## Deletion Log Format
+
+Create/update `docs/DELETION_LOG.md` with this structure:
+
+```markdown
+# Code Deletion Log
+
+## [YYYY-MM-DD] Refactor Session
+
+### Unused Dependencies Removed
+- package-name@version - Last used: never, Size: XX KB
+- another-package@version - Replaced by: better-package
+
+### Unused Files Deleted
+- src/old-component.tsx - Replaced by: src/new-component.tsx
+- lib/deprecated-util.ts - Functionality moved to: lib/utils.ts
+
+### Duplicate Code Consolidated
+- src/components/Button1.tsx + Button2.tsx → Button.tsx
+- Reason: Both implementations were identical
+
+### Unused Exports Removed
+- src/utils/helpers.ts - Functions: foo(), bar()
+- Reason: No references found in codebase
+
+### Impact
+- Files deleted: 15
+- Dependencies removed: 5
+- Lines of code removed: 2,300
+- Bundle size reduction: ~45 KB
+
+### Testing
+- All unit tests passing: ✓
+- All integration tests passing: ✓
+- Manual testing completed: ✓
+```
+
+## Safety Checklist
+
+Before removing ANYTHING:
+- [ ] Run detection tools
+- [ ] Grep for all references
+- [ ] Check dynamic imports
+- [ ] Review git history
+- [ ] Check if part of public API
+- [ ] Run all tests
+- [ ] Create backup branch
+- [ ] Document in DELETION_LOG.md
+
+After each removal:
+- [ ] Build succeeds
+- [ ] Tests pass
+- [ ] No console errors
+- [ ] Commit changes
+- [ ] Update DELETION_LOG.md
+
+## Common Patterns to Remove
+
+### 1. Unused Imports
+```typescript
+// ❌ Remove unused imports
+import { useState, useEffect, useMemo } from 'react' // Only useState used
+
+// ✅ Keep only what's used
+import { useState } from 'react'
+```
+
+### 2. Dead Code Branches
+```typescript
+// ❌ Remove unreachable code
+if (false) {
+  // This never executes
+  doSomething()
+}
+
+// ❌ Remove unused functions
+export function unusedHelper() {
+  // No references in codebase
+}
+```
+
+### 3. Duplicate Components
+```typescript
+// ❌ Multiple similar components
+components/Button.tsx
+components/PrimaryButton.tsx
+components/NewButton.tsx
+
+// ✅ Consolidate to one
+components/Button.tsx (with variant prop)
+```
+
+### 4. Unused Dependencies
+```json
+// ❌ Package installed but not imported
+{
+  "dependencies": {
+    "lodash": "^4.17.21",  // Not used anywhere
+    "moment": "^2.29.4"     // Replaced by date-fns
+  }
+}
+```
+
+## Example Project-Specific Rules
+
+**CRITICAL - NEVER REMOVE:**
+- Privy authentication code
+- Solana wallet integration
+- Supabase database clients
+- Redis/OpenAI semantic search
+- Market trading logic
+- Real-time subscription handlers
+
+**SAFE TO REMOVE:**
+- Old unused components in components/ folder
+- Deprecated utility functions
+- Test files for deleted features
+- Commented-out code blocks
+- Unused TypeScript types/interfaces
+
+**ALWAYS VERIFY:**
+- Semantic search functionality (lib/redis.js, lib/openai.js)
+- Market data fetching (api/markets/*, api/market/[slug]/)
+- Authentication flows (HeaderWallet.tsx, UserMenu.tsx)
+- Trading functionality (Meteora SDK integration)
+
+## Pull Request Template
+
+When opening PR with deletions:
+
+```markdown
+## Refactor: Code Cleanup
+
+### Summary
+Dead code cleanup removing unused exports, dependencies, and duplicates.
+
+### Changes
+- Removed X unused files
+- Removed Y unused dependencies
+- Consolidated Z duplicate components
+- See docs/DELETION_LOG.md for details
+
+### Testing
+- [x] Build passes
+- [x] All tests pass
+- [x] Manual testing completed
+- [x] No console errors
+
+### Impact
+- Bundle size: -XX KB
+- Lines of code: -XXXX
+- Dependencies: -X packages
+
+### Risk Level
+🟢 LOW - Only removed verifiably unused code
+
+See DELETION_LOG.md for complete details.
+```
+
+## Error Recovery
+
+If something breaks after removal:
+
+1. **Immediate rollback:**
+   ```bash
+   git revert HEAD
+   npm install
+   npm run build
+   npm test
+   ```
+
+2. **Investigate:**
+   - What failed?
+   - Was it a dynamic import?
+   - Was it used in a way detection tools missed?
+
+3. **Fix forward:**
+   - Mark item as "DO NOT REMOVE" in notes
+   - Document why detection tools missed it
+   - Add explicit type annotations if needed
+
+4. **Update process:**
+   - Add to "NEVER REMOVE" list
+   - Improve grep patterns
+   - Update detection methodology
+
+## Best Practices
+
+1. **Start Small** - Remove one category at a time
+2. **Test Often** - Run tests after each batch
+3. **Document Everything** - Update DELETION_LOG.md
+4. **Be Conservative** - When in doubt, don't remove
+5. **Git Commits** - One commit per logical removal batch
+6. **Branch Protection** - Always work on feature branch
+7. **Peer Review** - Have deletions reviewed before merging
+8. **Monitor Production** - Watch for errors after deployment
+
+## When NOT to Use This Agent
+
+- During active feature development
+- Right before a production deployment
+- When codebase is unstable
+- Without proper test coverage
+- On code you don't understand
+
+## Success Metrics
+
+After cleanup session:
+- ✅ All tests passing
+- ✅ Build succeeds
+- ✅ No console errors
+- ✅ DELETION_LOG.md updated
+- ✅ Bundle size reduced
+- ✅ No regressions in production
+
+---
+
+**Remember**: Dead code is technical debt. Regular cleanup keeps the codebase maintainable and fast. But safety first - never remove code without understanding why it exists.