@quantiya/codevibe-codex-plugin 2.0.28 → 2.0.29

package/dist/server.js

@@ -1,32 +1,32 @@
-"use strict";var kt=Object.create;var re=Object.defineProperty;var Ft=Object.getOwnPropertyDescriptor;var Dt=Object.getOwnPropertyNames;var Nt=Object.getPrototypeOf,Mt=Object.prototype.hasOwnProperty;var Lt=(o,t)=>{for(var e in t)re(o,e,{get:t[e],enumerable:!0})},Be=(o,t,e,i)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Dt(t))!Mt.call(o,s)&&s!==e&&re(o,s,{get:()=>t[s],enumerable:!(i=Ft(t,s))||i.enumerable});return o};var R=(o,t,e)=>(e=o!=null?kt(Nt(o)):{},Be(t||!o||!o.__esModule?re(e,"default",{value:o,enumerable:!0}):e,o)),Kt=o=>Be(re({},"__esModule",{value:!0}),o);var Bi={};Lt(Bi,{CodexCompanionServer:()=>Pe,TERMINAL_SHUTDOWN_SIGNALS:()=>Rt,classifyTmuxHasSessionError:()=>_t,extractShellCommandFromPromptText:()=>Tt,extractShellCommandPartsFromPromptText:()=>Ke,restoreCodexPersistOptionCommand:()=>Ct,shellCommandPartsMatchExpected:()=>xt});module.exports=Kt(Bi);var se=require("uuid"),Se=R(require("crypto")),H=R(require("fs")),k=R(require("path")),De=R(require("os")),Me=require("util"),Ie=require("child_process"),Le=require("shell-quote"),m=require("@quantiya/codevibe-core");var qe=R(require("os")),Ue=R(require("path")),$e=require("@quantiya/codevibe-core"),a=(0,$e.createLogger)({name:"codevibe-codex",logFile:Ue.default.join(qe.default.tmpdir(),"codevibe-codex-mcp.log"),level:"debug"});var He=require("events"),w=R(require("fs")),N=R(require("path")),ze=require("string_decoder"),We=require("chokidar"),je=require("@quantiya/codevibe-core");var we=256*1024,Bt=64*1024*1024,qt=16*1024*1024,Ut=64*1024;function $t(o=process.env){let t=o.CODEX_HOME?.trim();return t?N.resolve(t,"sessions"):(0,je.getConfig)().codex.sessionsDir}var ne=class extends He.EventEmitter{constructor(e={}){super();this.watcher=null;this.filePositions=new Map;this.activeLogFile=null;this.sessionId=null;this.isWatching=!1;this.startTime=0;this.sessionsDir=null;this.activeReads=new Map;this.pendingReads=new Set;this.readGeneration=0;this.oversizedRecordFiles=new Set;this.fileIdentities=new Map;this.bindSource=null;this.authoritativeSessionId=null;this.pendingTranscriptBind=null;this.transcriptBindGeneration=0;this.transcriptBindingsClosed=!1;this.activeTranscriptAdmissions=new Set;this.startBaselines=new Map;if(this.maxBacklogBytes=e.maxBacklogBytes??Bt,this.maxRecordBytes=e.maxRecordBytes??qt,!Number.isSafeInteger(this.maxBacklogBytes)||this.maxBacklogBytes<=0)throw new RangeError("maxBacklogBytes must be a positive safe integer");if(!Number.isSafeInteger(this.maxRecordBytes)||this.maxRecordBytes<=0)throw new RangeError("maxRecordBytes must be a positive safe integer")}start(){if(this.isWatching){a.warn("Session log watcher already running");return}this.transcriptBindGeneration++,this.transcriptBindingsClosed=!1;let e=$t();this.sessionsDir=e,a.info("Starting Codex session log watcher",{sessionsDir:e}),w.existsSync(e)||(a.info("Codex sessions directory does not exist yet, creating...",{sessionsDir:e}),w.mkdirSync(e,{recursive:!0})),this.startTime=Date.now(),this.readGeneration++,this.bindSource=null,this.authoritativeSessionId=null,this.snapshotStartBaselines(e),this.drainPendingTranscriptBind(),this.watcher=(0,We.watch)(e,{persistent:!0,ignoreInitial:!0,awaitWriteFinish:{stabilityThreshold:100,pollInterval:50},depth:4,ignored:i=>{let s=N.basename(i);return w.existsSync(i)&&w.statSync(i).isDirectory()?!1:!s.startsWith("rollout-")||!s.endsWith(".jsonl")}}),this.watcher.on("add",i=>{i.endsWith(".jsonl")&&this.onFileAdded(i)}),this.watcher.on("change",i=>{i.endsWith(".jsonl")&&this.onFileChanged(i)}),this.watcher.on("error",i=>{a.error("Watcher error:",i),this.emit("error",i)}),this.watcher.on("ready",()=>{a.info("Session log watcher ready"),this.activeLogFile||a.debug("No authoritative transcript hook received yet; rollout watcher remains fail-closed")}),this.isWatching=!0,a.info("Session log watcher started")}stop(){this.transcriptBindingsClosed=!0,this.transcriptBindGeneration++,this.watcher&&(this.watcher.close(),this.watcher=null),this.isWatching=!1,this.readGeneration++,this.filePositions.clear(),this.activeReads.clear(),this.pendingReads.clear(),this.oversizedRecordFiles.clear(),this.activeLogFile=null,this.sessionId=null,this.sessionsDir=null,this.bindSource=null,this.authoritativeSessionId=null,this.pendingTranscriptBind&&(this.pendingTranscriptBind.resolve({status:"rejected",reason:"watcher_stopped"}),this.pendingTranscriptBind=null),this.startBaselines.clear(),this.fileIdentities.clear(),a.info("Session log watcher stopped")}async waitForTranscriptAdmissions(){for(;this.activeTranscriptAdmissions.size>0;)await Promise.all(Array.from(this.activeTranscriptAdmissions,e=>e.then(()=>{},()=>{})))}getSessionId(){return this.sessionId}getActiveLogFile(){return this.activeLogFile}getBindSource(){return this.bindSource}getAuthoritativeSessionId(){return this.authoritativeSessionId}tryRealpath(e){try{return w.realpathSync(e)}catch{return null}}isInteractiveRollout(e){return!(!e||e.originator==="codex_exec"||e.threadSource==="subagent"||e.sourceSubagent)}identityOf(e){return{dev:e.dev,ino:e.ino}}identitiesEqual(e,i){return e.dev===i.dev&&e.ino===i.ino}computeSeedOffset(e){let i;try{i=w.statSync(e)}catch{return 0}if(this.getSessionAgeMs(e,i)>=this.startTime)return 0;let r=this.startBaselines.get(e);return r&&this.identitiesEqual(r.identity,this.identityOf(i))?r.size:i.size}applyBind(e,i){this.readGeneration++,this.activeReads.delete(e),this.pendingReads.delete(e),this.activeLogFile=e,this.bindSource=i,i==="heuristic"&&(this.authoritativeSessionId=null),this.filePositions.has(e)||this.filePositions.set(e,this.computeSeedOffset(e));try{this.fileIdentities.set(e,this.identityOf(w.statSync(e)))}catch{this.fileIdentities.delete(e)}this.scheduleReadNewLines(e)}bindToFile(e){let i=this.tryRealpath(e);if(!i){a.warn("bindToFile: could not canonicalize path; skipping",{filePath:e});return}if(i===this.activeLogFile){this.bindSource="authoritative";return}a.info("bindToFile: authoritative bind to session rollout",{filePath:i}),this.applyBind(i,"authoritative")}async bindToSessionTranscript(e,i){if(typeof e!="string"||e.length===0)return{status:"rejected",reason:"missing_transcript_path"};if(this.transcriptBindingsClosed)return{status:"rejected",reason:"watcher_stopped"};if(!this.sessionsDir){let s=this.pendingTranscriptBind;if(s)return s.transcriptPath===e&&s.expectedSessionId===i?{status:"pending",completion:s.completion}:(a.warn("bindToSessionTranscript: conflicting startup bind rejected",{transcriptPath:e,expectedSessionId:i,pendingExpectedSessionId:s.expectedSessionId}),{status:"rejected",reason:"conflicting_startup_bind"});let r,n=new Promise(l=>{r=l});return this.pendingTranscriptBind={transcriptPath:e,expectedSessionId:i,completion:n,resolve:r},a.debug("bindToSessionTranscript: watcher not started yet; queued pending authoritative bind",{transcriptPath:e,expectedSessionId:i}),{status:"pending",completion:n}}return this.trackTranscriptAdmission(this.validateAndBindSessionTranscript(e,i,this.transcriptBindGeneration))}trackTranscriptAdmission(e){let i;return i=e.finally(()=>{this.activeTranscriptAdmissions.delete(i)}),this.activeTranscriptAdmissions.add(i),i}isTranscriptAdmissionCurrent(e,i){return!this.transcriptBindingsClosed&&this.transcriptBindGeneration===e&&this.sessionsDir===i}async validateAndBindSessionTranscript(e,i,s){let r=this.sessionsDir;if(!r||!this.isTranscriptAdmissionCurrent(s,r))return{status:"rejected",reason:"watcher_not_started"};let n=this.tryRealpath(e),l=this.tryRealpath(r);if(!n||!l)return{status:"rejected",reason:"canonicalization_failed"};let p=N.relative(l,n);if(p===".."||p.startsWith(".."+N.sep)||N.isAbsolute(p))return a.warn("bindToSessionTranscript: path not under sessionsDir; rejecting",{transcriptPath:n}),{status:"rejected",reason:"outside_sessions_directory"};let d=N.basename(n);if(!d.startsWith("rollout-")||!d.endsWith(".jsonl"))return{status:"rejected",reason:"invalid_rollout_filename"};let c=null;for(let u=0;u<3;u++){if(!this.isTranscriptAdmissionCurrent(s,r))return{status:"rejected",reason:"watcher_stopped"};if(c=this.readSessionMeta(n),c)break;if(await new Promise(f=>setTimeout(f,20)),!this.isTranscriptAdmissionCurrent(s,r))return{status:"rejected",reason:"watcher_stopped"}}return!c||c.id!==i?(a.debug("bindToSessionTranscript: meta missing or id mismatch; not binding",{transcriptPath:n,metaId:c?.id,expectedSessionId:i}),{status:"rejected",reason:"session_metadata_mismatch"}):this.isInteractiveRollout(c)?this.isTranscriptAdmissionCurrent(s,r)?(this.bindToFile(n),this.authoritativeSessionId=i,{status:"bound"}):{status:"rejected",reason:"watcher_stopped"}:(a.debug("bindToSessionTranscript: non-interactive rollout (codex_exec/subagent); not binding",{transcriptPath:n,originator:c.originator,threadSource:c.threadSource}),{status:"rejected",reason:"non_interactive_rollout"})}async drainPendingTranscriptBind(){let e=this.pendingTranscriptBind;if(!e)return;this.pendingTranscriptBind=null;let i;try{this.transcriptBindingsClosed?i={status:"rejected",reason:"watcher_stopped"}:i=await this.trackTranscriptAdmission(this.validateAndBindSessionTranscript(e.transcriptPath,e.expectedSessionId,this.transcriptBindGeneration))}catch(s){a.warn("bindToSessionTranscript: pending startup bind failed",{expectedSessionId:e.expectedSessionId,error:s instanceof Error?s.message:String(s)}),i={status:"rejected",reason:"startup_bind_failed"}}e.resolve(i)}onFileAdded(e){let i=this.tryRealpath(e);i&&(i===this.activeLogFile?this.scheduleReadNewLines(i):a.debug("Ignoring unowned rollout add; awaiting authoritative hook binding",{filePath:i}))}onFileChanged(e){let i=this.tryRealpath(e);i&&(this.activeLogFile&&i!==this.activeLogFile||this.activeLogFile&&this.scheduleReadNewLines(i))}readSessionMeta(e){let i=this.readFirstLogEntry(e);if(!i)return null;let s=i.payload||{};return{id:typeof s.id=="string"?s.id:void 0,timestamp:typeof i.timestamp=="string"?i.timestamp:void 0,originator:typeof s.originator=="string"?s.originator:void 0,cwd:typeof s.cwd=="string"?s.cwd:void 0,threadSource:typeof s.thread_source=="string"?s.thread_source:void 0,sourceSubagent:!!(s.source&&typeof s.source=="object"&&s.source.subagent)}}readFirstLogEntry(e){let i=null;try{i=w.openSync(e,"r");let s=new ze.StringDecoder("utf8"),r=Buffer.alloc(64*1024),n="",l=0,p=-1;for(;l<we;){let c=w.readSync(i,r,0,r.length,l);if(c<=0||(l+=c,n+=s.write(r.subarray(0,c)),p=n.indexOf(`
-`),p!==-1))break}n+=s.end();let d=p===-1?n:n.slice(0,p);return d.trim()?JSON.parse(d):null}catch{return null}finally{if(i!==null)try{w.closeSync(i)}catch{}}}snapshotStartBaselines(e){this.startBaselines.clear();try{for(let{filePath:i,size:s}of this.collectRecentSessionFiles(e,!0)){let r=this.tryRealpath(i);if(r)try{let n=w.statSync(r);this.startBaselines.set(r,{size:s,identity:this.identityOf(n)})}catch{}}}catch{}}getSessionAgeMs(e,i){let s=this.readSessionMeta(e);if(s?.timestamp){let r=Date.parse(s.timestamp);if(!Number.isNaN(r))return r}return i.birthtimeMs||i.ctimeMs}collectRecentSessionFiles(e,i=!1){let s=[],r=[e];for(;r.length>0;){let n=r.pop();if(!n)continue;let l;try{l=w.readdirSync(n,{withFileTypes:!0})}catch{continue}for(let p of l){let d=N.join(n,p.name);if(p.isDirectory()){r.push(d);continue}if(!(!p.isFile()||!p.name.startsWith("rollout-")||!p.name.endsWith(".jsonl")))try{let c=w.statSync(d),u=c.birthtimeMs||c.ctimeMs,f=c.mtimeMs;(i||u>=this.startTime||f>=this.startTime-5e3)&&s.push({filePath:d,createdAt:u,modifiedAt:f,size:c.size})}catch{}}}return s}scheduleReadNewLines(e){let i=this.activeReads.get(e);if(i)return this.pendingReads.add(e),i;let s=this.readGeneration,r=Promise.resolve().then(()=>this.drainReadQueue(e,s));return this.activeReads.set(e,r),r.finally(()=>{this.activeReads.get(e)===r&&(this.activeReads.delete(e),this.pendingReads.delete(e))}),r}async drainReadQueue(e,i){do this.pendingReads.delete(e),await this.readNewLines(e,i);while(i===this.readGeneration&&this.pendingReads.has(e))}async readNewLines(e,i){if(i!==this.readGeneration)return;let s=this.filePositions.get(e)||0,r=null;try{r=w.openSync(e,w.constants.O_RDONLY|(w.constants.O_NOFOLLOW??0));let n=w.fstatSync(r),l=this.identityOf(n),p=this.fileIdentities.get(e);if(p&&!this.identitiesEqual(p,l)){let v=this.readFirstLogEntryFromFd(r),P=v?.type==="session_meta"?v.payload.id:void 0;if(this.authoritativeSessionId&&P!==this.authoritativeSessionId){let E=new Error("Authoritative Codex rollout path was replaced by a different session");a.error("Refusing replaced rollout with mismatched session identity",{filePath:e,expectedSessionId:this.authoritativeSessionId,replacementSessionId:P}),this.emit("error",E);return}a.info("Session log inode replaced; resetting byte and decoder state",{filePath:e,oldPosition:s,oldIdentity:p,newIdentity:l}),s=0,this.filePositions.set(e,0),this.oversizedRecordFiles.delete(e)}if(this.fileIdentities.set(e,l),n.size<s&&(a.info("Session log truncated/rotated; resetting cursor to 0",{filePath:e,oldPosition:s,size:n.size}),s=0,this.filePositions.set(e,0),this.oversizedRecordFiles.delete(e)),n.size<=s)return;if(n.size-s>this.maxBacklogBytes){if(s===0&&this.sessionId===null){let P=this.readFirstLogEntryFromFd(r);P?.type==="session_meta"&&this.processLogEntry(P)}let v=this.findRecentRecordBoundary(r,n.size);if(a.warn("Codex rollout backlog exceeded live-mirror limit; skipping archival prefix",{filePath:e,oldPosition:s,newPosition:v.position,size:n.size,maxBacklogBytes:this.maxBacklogBytes,discardUntilNewline:v.discardUntilNewline}),s=v.position,this.filePositions.set(e,s),v.discardUntilNewline?this.oversizedRecordFiles.add(e):this.oversizedRecordFiles.delete(e),n.size<=s)return}let d=n.size,c=Buffer.allocUnsafe(64*1024),u=s,f=[],y=0,h=this.oversizedRecordFiles.has(e);for(;u<d;){if(i!==this.readGeneration)return;let v=Math.min(c.length,d-u),P=w.readSync(r,c,0,v,u);if(P<=0)break;let E=0;for(;E<P;){if(i!==this.readGeneration)return;let S=c.subarray(0,P).indexOf(10,E),b=S!==-1,O=b?S:P,L=O-E,C=L+(b?1:0);if(h){u+=C,this.filePositions.set(e,u),b&&(h=!1,this.oversizedRecordFiles.delete(e)),E=b?S+1:P;continue}if(L>0&&(f.push(Buffer.from(c.subarray(E,O))),y+=L),u+=C,y>this.maxRecordBytes){a.warn("Discarding oversized Codex rollout JSONL record",{filePath:e,recordEnd:u,maxRecordBytes:this.maxRecordBytes}),this.filePositions.set(e,u),f=[],y=0,h=!b,h?this.oversizedRecordFiles.add(e):this.oversizedRecordFiles.delete(e),E=b?S+1:P;continue}if(!b){E=P;continue}let D=Buffer.concat(f,y);f=[],y=0,D.length>0&&D[D.length-1]===13&&(D=D.subarray(0,D.length-1));let Q=D.toString("utf8");if(Q.trim())try{let be=JSON.parse(Q);this.processLogEntry(be)}catch(be){a.warn("Failed to parse log line",{filePath:e,line:Q.substring(0,100),error:be})}if(i===this.readGeneration&&this.filePositions.set(e,u),i!==this.readGeneration)return;E=S+1}}}catch(n){a.error("Error reading log file",{filePath:e,error:n}),this.emit("error",n)}finally{if(r!==null)try{w.closeSync(r)}catch{}}}findRecentRecordBoundary(e,i){let s=Math.max(0,i-this.maxBacklogBytes),r=s+Math.min(i-s,this.maxRecordBytes);{if(s===0)return{position:0,discardUntilNewline:!1};let n=Buffer.allocUnsafe(1);if(w.readSync(e,n,0,1,s-1)===1&&n[0]===10)return{position:s,discardUntilNewline:!1};let l=Buffer.allocUnsafe(Ut),p=s;for(;p<r;){let d=Math.min(l.length,r-p),c=w.readSync(e,l,0,d,p);if(c<=0)break;let u=l.subarray(0,c).indexOf(10);if(u!==-1)return{position:p+u+1,discardUntilNewline:!1};p+=c}if(p===r&&p<i&&r-s===this.maxRecordBytes){let d=Buffer.allocUnsafe(1);if(w.readSync(e,d,0,1,p)===1&&d[0]===10)return{position:p+1,discardUntilNewline:!1}}return{position:s,discardUntilNewline:!0}}}readFirstLogEntryFromFd(e){try{let i=[],s=0,r=Buffer.allocUnsafe(64*1024);for(;s<we;){let l=Math.min(r.length,we-s),p=w.readSync(e,r,0,l,s);if(p<=0)break;let d=r.subarray(0,p).indexOf(10);if(d!==-1){i.push(Buffer.from(r.subarray(0,d)));break}i.push(Buffer.from(r.subarray(0,p))),s+=p}if(i.length===0)return null;let n=Buffer.concat(i).toString("utf8");return n.trim()?JSON.parse(n):null}catch{return null}}processLogEntry(e){if(a.debug("Processing log entry",{type:e.type}),e.type==="session_meta"){let i=e.payload;this.sessionId=i.id,a.info("Codex session started",{sessionId:i.id,cwd:i.cwd,cliVersion:i.cli_version}),this.emit("session-started",i);return}this.emit("log-entry",e),e.type==="event_msg"&&e.payload?.type?this.emit(`event:${e.payload.type}`,e):e.type==="response_item"&&e.payload?.type&&this.emit(`response:${e.payload.type}`,e)}};var Re=require("uuid"),A=require("@quantiya/codevibe-core");var z=new Map,G=[],Ht=24;function Z(o){return typeof o=="string"?o.trim():""}function Xe(o){return typeof o=="string"?o:""}function Ge(o,t,e){let i=Z(e);if(!i)return!1;let s=Xe(t);return G.some(r=>r.text===i&&r.phase===s&&r.carrier!==o)}function zt(o){let t=Z(o);return t.length>0&&G.some(e=>e.text===t&&e.phase==="final_answer")}function Ee(o,t,e){let i=Z(e);if(i)for(G.push({carrier:o,phase:Xe(t),text:i});G.length>Ht;)G.shift()}function j(){G.length=0}function Wt(o){let t=o?.content;return Array.isArray(t)?t.filter(e=>e&&(e.type==="output_text"||e.type==="text")).map(e=>typeof e?.text=="string"?e.text:"").join(""):""}function jt(o){let t=o?.summary;return!Array.isArray(t)||t.length===0?"":t.map(e=>typeof e=="string"?e:typeof e?.text=="string"?e.text:"").join(`
-`).trim()}function Gt(o){if(typeof o!="string")return"";let t=o.match(/"cmd"\s*:\s*"((?:\\.|[^"\\])*)"/);if(t)try{return JSON.parse(`"${t[1]}"`)}catch{return t[1]}return""}function V(o){if(typeof o!="string"||!o.startsWith(`*** Begin Patch
+"use strict";var Dt=Object.create;var oe=Object.defineProperty;var Mt=Object.getOwnPropertyDescriptor;var Nt=Object.getOwnPropertyNames;var Lt=Object.getPrototypeOf,Kt=Object.prototype.hasOwnProperty;var Bt=(o,t)=>{for(var e in t)oe(o,e,{get:t[e],enumerable:!0})},Ue=(o,t,e,i)=>{if(t&&typeof t=="object"||typeof t=="function")for(let s of Nt(t))!Kt.call(o,s)&&s!==e&&oe(o,s,{get:()=>t[s],enumerable:!(i=Mt(t,s))||i.enumerable});return o};var R=(o,t,e)=>(e=o!=null?Dt(Lt(o)):{},Ue(t||!o||!o.__esModule?oe(e,"default",{value:o,enumerable:!0}):e,o)),qt=o=>Ue(oe({},"__esModule",{value:!0}),o);var Ui={};Bt(Ui,{CodexCompanionServer:()=>be,TERMINAL_SHUTDOWN_SIGNALS:()=>Tt,classifyTmuxHasSessionError:()=>xt,extractShellCommandFromPromptText:()=>Ct,extractShellCommandPartsFromPromptText:()=>qe,restoreCodexPersistOptionCommand:()=>At,shellCommandPartsMatchExpected:()=>Ot});module.exports=qt(Ui);var J=require("uuid"),Ie=R(require("crypto")),H=R(require("fs")),k=R(require("path")),Ne=R(require("os")),Ke=require("util"),we=require("child_process"),Be=require("shell-quote"),m=require("@quantiya/codevibe-core");var $e=R(require("os")),He=R(require("path")),ze=require("@quantiya/codevibe-core"),a=(0,ze.createLogger)({name:"codevibe-codex",logFile:He.default.join($e.default.tmpdir(),"codevibe-codex-mcp.log"),level:"debug"});var We=require("events"),w=R(require("fs")),M=R(require("path")),je=require("string_decoder"),Ge=require("chokidar"),Ve=require("@quantiya/codevibe-core");var Re=256*1024,Ut=64*1024*1024,$t=16*1024*1024,Ht=64*1024;function zt(o=process.env){let t=o.CODEX_HOME?.trim();return t?M.resolve(t,"sessions"):(0,Ve.getConfig)().codex.sessionsDir}var ae=class extends We.EventEmitter{constructor(e={}){super();this.watcher=null;this.filePositions=new Map;this.activeLogFile=null;this.sessionId=null;this.isWatching=!1;this.startTime=0;this.sessionsDir=null;this.activeReads=new Map;this.pendingReads=new Set;this.readGeneration=0;this.oversizedRecordFiles=new Set;this.fileIdentities=new Map;this.bindSource=null;this.authoritativeSessionId=null;this.pendingTranscriptBind=null;this.transcriptBindGeneration=0;this.transcriptBindingsClosed=!1;this.activeTranscriptAdmissions=new Set;this.startBaselines=new Map;if(this.maxBacklogBytes=e.maxBacklogBytes??Ut,this.maxRecordBytes=e.maxRecordBytes??$t,!Number.isSafeInteger(this.maxBacklogBytes)||this.maxBacklogBytes<=0)throw new RangeError("maxBacklogBytes must be a positive safe integer");if(!Number.isSafeInteger(this.maxRecordBytes)||this.maxRecordBytes<=0)throw new RangeError("maxRecordBytes must be a positive safe integer")}start(){if(this.isWatching){a.warn("Session log watcher already running");return}this.transcriptBindGeneration++,this.transcriptBindingsClosed=!1;let e=zt();this.sessionsDir=e,a.info("Starting Codex session log watcher",{sessionsDir:e}),w.existsSync(e)||(a.info("Codex sessions directory does not exist yet, creating...",{sessionsDir:e}),w.mkdirSync(e,{recursive:!0})),this.startTime=Date.now(),this.readGeneration++,this.bindSource=null,this.authoritativeSessionId=null,this.snapshotStartBaselines(e),this.drainPendingTranscriptBind(),this.watcher=(0,Ge.watch)(e,{persistent:!0,ignoreInitial:!0,awaitWriteFinish:{stabilityThreshold:100,pollInterval:50},depth:4,ignored:i=>{let s=M.basename(i);return w.existsSync(i)&&w.statSync(i).isDirectory()?!1:!s.startsWith("rollout-")||!s.endsWith(".jsonl")}}),this.watcher.on("add",i=>{i.endsWith(".jsonl")&&this.onFileAdded(i)}),this.watcher.on("change",i=>{i.endsWith(".jsonl")&&this.onFileChanged(i)}),this.watcher.on("error",i=>{a.error("Watcher error:",i),this.emit("error",i)}),this.watcher.on("ready",()=>{a.info("Session log watcher ready"),this.activeLogFile||a.debug("No authoritative transcript hook received yet; rollout watcher remains fail-closed")}),this.isWatching=!0,a.info("Session log watcher started")}stop(){this.transcriptBindingsClosed=!0,this.transcriptBindGeneration++,this.watcher&&(this.watcher.close(),this.watcher=null),this.isWatching=!1,this.readGeneration++,this.filePositions.clear(),this.activeReads.clear(),this.pendingReads.clear(),this.oversizedRecordFiles.clear(),this.activeLogFile=null,this.sessionId=null,this.sessionsDir=null,this.bindSource=null,this.authoritativeSessionId=null,this.pendingTranscriptBind&&(this.pendingTranscriptBind.resolve({status:"rejected",reason:"watcher_stopped"}),this.pendingTranscriptBind=null),this.startBaselines.clear(),this.fileIdentities.clear(),a.info("Session log watcher stopped")}async waitForTranscriptAdmissions(){for(;this.activeTranscriptAdmissions.size>0;)await Promise.all(Array.from(this.activeTranscriptAdmissions,e=>e.then(()=>{},()=>{})))}getSessionId(){return this.sessionId}getActiveLogFile(){return this.activeLogFile}getBindSource(){return this.bindSource}getAuthoritativeSessionId(){return this.authoritativeSessionId}tryRealpath(e){try{return w.realpathSync(e)}catch{return null}}isInteractiveRollout(e){return!(!e||e.originator==="codex_exec"||e.threadSource==="subagent"||e.sourceSubagent)}identityOf(e){return{dev:e.dev,ino:e.ino}}identitiesEqual(e,i){return e.dev===i.dev&&e.ino===i.ino}computeSeedOffset(e){let i;try{i=w.statSync(e)}catch{return 0}if(this.getSessionAgeMs(e,i)>=this.startTime)return 0;let r=this.startBaselines.get(e);return r&&this.identitiesEqual(r.identity,this.identityOf(i))?r.size:i.size}applyBind(e,i){this.readGeneration++,this.activeReads.delete(e),this.pendingReads.delete(e),this.activeLogFile=e,this.bindSource=i,i==="heuristic"&&(this.authoritativeSessionId=null),this.filePositions.has(e)||this.filePositions.set(e,this.computeSeedOffset(e));try{this.fileIdentities.set(e,this.identityOf(w.statSync(e)))}catch{this.fileIdentities.delete(e)}this.scheduleReadNewLines(e)}bindToFile(e){let i=this.tryRealpath(e);if(!i){a.warn("bindToFile: could not canonicalize path; skipping",{filePath:e});return}if(i===this.activeLogFile){this.bindSource="authoritative";return}a.info("bindToFile: authoritative bind to session rollout",{filePath:i}),this.applyBind(i,"authoritative")}async bindToSessionTranscript(e,i){if(typeof e!="string"||e.length===0)return{status:"rejected",reason:"missing_transcript_path"};if(this.transcriptBindingsClosed)return{status:"rejected",reason:"watcher_stopped"};if(!this.sessionsDir){let s=this.pendingTranscriptBind;if(s)return s.transcriptPath===e&&s.expectedSessionId===i?{status:"pending",completion:s.completion}:(a.warn("bindToSessionTranscript: conflicting startup bind rejected",{transcriptPath:e,expectedSessionId:i,pendingExpectedSessionId:s.expectedSessionId}),{status:"rejected",reason:"conflicting_startup_bind"});let r,n=new Promise(l=>{r=l});return this.pendingTranscriptBind={transcriptPath:e,expectedSessionId:i,completion:n,resolve:r},a.debug("bindToSessionTranscript: watcher not started yet; queued pending authoritative bind",{transcriptPath:e,expectedSessionId:i}),{status:"pending",completion:n}}return this.trackTranscriptAdmission(this.validateAndBindSessionTranscript(e,i,this.transcriptBindGeneration))}trackTranscriptAdmission(e){let i;return i=e.finally(()=>{this.activeTranscriptAdmissions.delete(i)}),this.activeTranscriptAdmissions.add(i),i}isTranscriptAdmissionCurrent(e,i){return!this.transcriptBindingsClosed&&this.transcriptBindGeneration===e&&this.sessionsDir===i}async validateAndBindSessionTranscript(e,i,s){let r=this.sessionsDir;if(!r||!this.isTranscriptAdmissionCurrent(s,r))return{status:"rejected",reason:"watcher_not_started"};let n=this.tryRealpath(e),l=this.tryRealpath(r);if(!n||!l)return{status:"rejected",reason:"canonicalization_failed"};let p=M.relative(l,n);if(p===".."||p.startsWith(".."+M.sep)||M.isAbsolute(p))return a.warn("bindToSessionTranscript: path not under sessionsDir; rejecting",{transcriptPath:n}),{status:"rejected",reason:"outside_sessions_directory"};let d=M.basename(n);if(!d.startsWith("rollout-")||!d.endsWith(".jsonl"))return{status:"rejected",reason:"invalid_rollout_filename"};let u=null;for(let c=0;c<3;c++){if(!this.isTranscriptAdmissionCurrent(s,r))return{status:"rejected",reason:"watcher_stopped"};if(u=this.readSessionMeta(n),u)break;if(await new Promise(f=>setTimeout(f,20)),!this.isTranscriptAdmissionCurrent(s,r))return{status:"rejected",reason:"watcher_stopped"}}return!u||u.id!==i?(a.debug("bindToSessionTranscript: meta missing or id mismatch; not binding",{transcriptPath:n,metaId:u?.id,expectedSessionId:i}),{status:"rejected",reason:"session_metadata_mismatch"}):this.isInteractiveRollout(u)?this.isTranscriptAdmissionCurrent(s,r)?(this.bindToFile(n),this.authoritativeSessionId=i,{status:"bound"}):{status:"rejected",reason:"watcher_stopped"}:(a.debug("bindToSessionTranscript: non-interactive rollout (codex_exec/subagent); not binding",{transcriptPath:n,originator:u.originator,threadSource:u.threadSource}),{status:"rejected",reason:"non_interactive_rollout"})}async drainPendingTranscriptBind(){let e=this.pendingTranscriptBind;if(!e)return;this.pendingTranscriptBind=null;let i;try{this.transcriptBindingsClosed?i={status:"rejected",reason:"watcher_stopped"}:i=await this.trackTranscriptAdmission(this.validateAndBindSessionTranscript(e.transcriptPath,e.expectedSessionId,this.transcriptBindGeneration))}catch(s){a.warn("bindToSessionTranscript: pending startup bind failed",{expectedSessionId:e.expectedSessionId,error:s instanceof Error?s.message:String(s)}),i={status:"rejected",reason:"startup_bind_failed"}}e.resolve(i)}onFileAdded(e){let i=this.tryRealpath(e);i&&(i===this.activeLogFile?this.scheduleReadNewLines(i):a.debug("Ignoring unowned rollout add; awaiting authoritative hook binding",{filePath:i}))}onFileChanged(e){let i=this.tryRealpath(e);i&&(this.activeLogFile&&i!==this.activeLogFile||this.activeLogFile&&this.scheduleReadNewLines(i))}readSessionMeta(e){let i=this.readFirstLogEntry(e);if(!i)return null;let s=i.payload||{};return{id:typeof s.id=="string"?s.id:void 0,timestamp:typeof i.timestamp=="string"?i.timestamp:void 0,originator:typeof s.originator=="string"?s.originator:void 0,cwd:typeof s.cwd=="string"?s.cwd:void 0,threadSource:typeof s.thread_source=="string"?s.thread_source:void 0,sourceSubagent:!!(s.source&&typeof s.source=="object"&&s.source.subagent)}}readFirstLogEntry(e){let i=null;try{i=w.openSync(e,"r");let s=new je.StringDecoder("utf8"),r=Buffer.alloc(64*1024),n="",l=0,p=-1;for(;l<Re;){let u=w.readSync(i,r,0,r.length,l);if(u<=0||(l+=u,n+=s.write(r.subarray(0,u)),p=n.indexOf(`
+`),p!==-1))break}n+=s.end();let d=p===-1?n:n.slice(0,p);return d.trim()?JSON.parse(d):null}catch{return null}finally{if(i!==null)try{w.closeSync(i)}catch{}}}snapshotStartBaselines(e){this.startBaselines.clear();try{for(let{filePath:i,size:s}of this.collectRecentSessionFiles(e,!0)){let r=this.tryRealpath(i);if(r)try{let n=w.statSync(r);this.startBaselines.set(r,{size:s,identity:this.identityOf(n)})}catch{}}}catch{}}getSessionAgeMs(e,i){let s=this.readSessionMeta(e);if(s?.timestamp){let r=Date.parse(s.timestamp);if(!Number.isNaN(r))return r}return i.birthtimeMs||i.ctimeMs}collectRecentSessionFiles(e,i=!1){let s=[],r=[e];for(;r.length>0;){let n=r.pop();if(!n)continue;let l;try{l=w.readdirSync(n,{withFileTypes:!0})}catch{continue}for(let p of l){let d=M.join(n,p.name);if(p.isDirectory()){r.push(d);continue}if(!(!p.isFile()||!p.name.startsWith("rollout-")||!p.name.endsWith(".jsonl")))try{let u=w.statSync(d),c=u.birthtimeMs||u.ctimeMs,f=u.mtimeMs;(i||c>=this.startTime||f>=this.startTime-5e3)&&s.push({filePath:d,createdAt:c,modifiedAt:f,size:u.size})}catch{}}}return s}scheduleReadNewLines(e){let i=this.activeReads.get(e);if(i)return this.pendingReads.add(e),i;let s=this.readGeneration,r=Promise.resolve().then(()=>this.drainReadQueue(e,s));return this.activeReads.set(e,r),r.finally(()=>{this.activeReads.get(e)===r&&(this.activeReads.delete(e),this.pendingReads.delete(e))}),r}async drainReadQueue(e,i){do this.pendingReads.delete(e),await this.readNewLines(e,i);while(i===this.readGeneration&&this.pendingReads.has(e))}async readNewLines(e,i){if(i!==this.readGeneration)return;let s=this.filePositions.get(e)||0,r=null;try{r=w.openSync(e,w.constants.O_RDONLY|(w.constants.O_NOFOLLOW??0));let n=w.fstatSync(r),l=this.identityOf(n),p=this.fileIdentities.get(e);if(p&&!this.identitiesEqual(p,l)){let v=this.readFirstLogEntryFromFd(r),P=v?.type==="session_meta"?v.payload.id:void 0;if(this.authoritativeSessionId&&P!==this.authoritativeSessionId){let E=new Error("Authoritative Codex rollout path was replaced by a different session");a.error("Refusing replaced rollout with mismatched session identity",{filePath:e,expectedSessionId:this.authoritativeSessionId,replacementSessionId:P}),this.emit("error",E);return}a.info("Session log inode replaced; resetting byte and decoder state",{filePath:e,oldPosition:s,oldIdentity:p,newIdentity:l}),s=0,this.filePositions.set(e,0),this.oversizedRecordFiles.delete(e)}if(this.fileIdentities.set(e,l),n.size<s&&(a.info("Session log truncated/rotated; resetting cursor to 0",{filePath:e,oldPosition:s,size:n.size}),s=0,this.filePositions.set(e,0),this.oversizedRecordFiles.delete(e)),n.size<=s)return;if(n.size-s>this.maxBacklogBytes){if(s===0&&this.sessionId===null){let P=this.readFirstLogEntryFromFd(r);P?.type==="session_meta"&&this.processLogEntry(P)}let v=this.findRecentRecordBoundary(r,n.size);if(a.warn("Codex rollout backlog exceeded live-mirror limit; skipping archival prefix",{filePath:e,oldPosition:s,newPosition:v.position,size:n.size,maxBacklogBytes:this.maxBacklogBytes,discardUntilNewline:v.discardUntilNewline}),s=v.position,this.filePositions.set(e,s),v.discardUntilNewline?this.oversizedRecordFiles.add(e):this.oversizedRecordFiles.delete(e),n.size<=s)return}let d=n.size,u=Buffer.allocUnsafe(64*1024),c=s,f=[],y=0,h=this.oversizedRecordFiles.has(e);for(;c<d;){if(i!==this.readGeneration)return;let v=Math.min(u.length,d-c),P=w.readSync(r,u,0,v,c);if(P<=0)break;let E=0;for(;E<P;){if(i!==this.readGeneration)return;let S=u.subarray(0,P).indexOf(10,E),b=S!==-1,O=b?S:P,L=O-E,F=L+(b?1:0);if(h){c+=F,this.filePositions.set(e,c),b&&(h=!1,this.oversizedRecordFiles.delete(e)),E=b?S+1:P;continue}if(L>0&&(f.push(Buffer.from(u.subarray(E,O))),y+=L),c+=F,y>this.maxRecordBytes){a.warn("Discarding oversized Codex rollout JSONL record",{filePath:e,recordEnd:c,maxRecordBytes:this.maxRecordBytes}),this.filePositions.set(e,c),f=[],y=0,h=!b,h?this.oversizedRecordFiles.add(e):this.oversizedRecordFiles.delete(e),E=b?S+1:P;continue}if(!b){E=P;continue}let C=Buffer.concat(f,y);f=[],y=0,C.length>0&&C[C.length-1]===13&&(C=C.subarray(0,C.length-1));let Z=C.toString("utf8");if(Z.trim())try{let Ee=JSON.parse(Z);this.processLogEntry(Ee)}catch(Ee){a.warn("Failed to parse log line",{filePath:e,line:Z.substring(0,100),error:Ee})}if(i===this.readGeneration&&this.filePositions.set(e,c),i!==this.readGeneration)return;E=S+1}}}catch(n){a.error("Error reading log file",{filePath:e,error:n}),this.emit("error",n)}finally{if(r!==null)try{w.closeSync(r)}catch{}}}findRecentRecordBoundary(e,i){let s=Math.max(0,i-this.maxBacklogBytes),r=s+Math.min(i-s,this.maxRecordBytes);{if(s===0)return{position:0,discardUntilNewline:!1};let n=Buffer.allocUnsafe(1);if(w.readSync(e,n,0,1,s-1)===1&&n[0]===10)return{position:s,discardUntilNewline:!1};let l=Buffer.allocUnsafe(Ht),p=s;for(;p<r;){let d=Math.min(l.length,r-p),u=w.readSync(e,l,0,d,p);if(u<=0)break;let c=l.subarray(0,u).indexOf(10);if(c!==-1)return{position:p+c+1,discardUntilNewline:!1};p+=u}if(p===r&&p<i&&r-s===this.maxRecordBytes){let d=Buffer.allocUnsafe(1);if(w.readSync(e,d,0,1,p)===1&&d[0]===10)return{position:p+1,discardUntilNewline:!1}}return{position:s,discardUntilNewline:!0}}}readFirstLogEntryFromFd(e){try{let i=[],s=0,r=Buffer.allocUnsafe(64*1024);for(;s<Re;){let l=Math.min(r.length,Re-s),p=w.readSync(e,r,0,l,s);if(p<=0)break;let d=r.subarray(0,p).indexOf(10);if(d!==-1){i.push(Buffer.from(r.subarray(0,d)));break}i.push(Buffer.from(r.subarray(0,p))),s+=p}if(i.length===0)return null;let n=Buffer.concat(i).toString("utf8");return n.trim()?JSON.parse(n):null}catch{return null}}processLogEntry(e){if(a.debug("Processing log entry",{type:e.type}),e.type==="session_meta"){let i=e.payload;this.sessionId=i.id,a.info("Codex session started",{sessionId:i.id,cwd:i.cwd,cliVersion:i.cli_version}),this.emit("session-started",i);return}this.emit("log-entry",e),e.type==="event_msg"&&e.payload?.type?this.emit(`event:${e.payload.type}`,e):e.type==="response_item"&&e.payload?.type&&this.emit(`response:${e.payload.type}`,e)}};var Te=require("uuid"),A=require("@quantiya/codevibe-core");var z=new Map,G=[],Wt=24;function te(o){return typeof o=="string"?o.trim():""}function Qe(o){return typeof o=="string"?o:""}function Xe(o,t,e){let i=te(e);if(!i)return!1;let s=Qe(t);return G.some(r=>r.text===i&&r.phase===s&&r.carrier!==o)}function jt(o){let t=te(o);return t.length>0&&G.some(e=>e.text===t&&e.phase==="final_answer")}function _e(o,t,e){let i=te(e);if(i)for(G.push({carrier:o,phase:Qe(t),text:i});G.length>Wt;)G.shift()}function j(){G.length=0}function Gt(o){let t=o?.content;return Array.isArray(t)?t.filter(e=>e&&(e.type==="output_text"||e.type==="text")).map(e=>typeof e?.text=="string"?e.text:"").join(""):""}function Vt(o){let t=o?.summary;return!Array.isArray(t)||t.length===0?"":t.map(e=>typeof e=="string"?e:typeof e?.text=="string"?e.text:"").join(`
+`).trim()}function Xt(o){if(typeof o!="string")return"";let t=o.match(/"cmd"\s*:\s*"((?:\\.|[^"\\])*)"/);if(t)try{return JSON.parse(`"${t[1]}"`)}catch{return t[1]}return""}function V(o){if(typeof o!="string"||!o.startsWith(`*** Begin Patch
 `)||!o.endsWith(`
 *** End Patch`))return"";let t=o.split(`
-`);return t[0]!=="*** Begin Patch"||t[t.length-1]!=="*** End Patch"||t.filter(e=>e==="*** Begin Patch").length!==1||t.filter(e=>e==="*** End Patch").length!==1||!/^\*\*\* (?:Add|Update|Delete) File: [^\r\n]+$/.test(t[1]??"")?"":o}function ee(o){if(typeof o!="string")return"";let t="[A-Za-z_$][\\w$]*",e='"(?:\\\\.|[^"\\\\])*"',i=o.match(new RegExp(`^\\s*(?:const|let|var)\\s+(${t})\\s*=\\s*await\\s+tools\\.apply_patch\\(\\s*(${e})\\s*\\)\\s*;\\s*(?:text\\(\\s*(${t})\\s*\\)\\s*;\\s*)?$`,"s")),s=o.match(new RegExp(`^\\s*(?:const|let|var)\\s+(${t})\\s*=\\s*(${e})\\s*;\\s*(?:const|let|var)\\s+(${t})\\s*=\\s*await\\s+tools\\.apply_patch\\(\\s*(${t})\\s*\\)\\s*;\\s*(?:text\\(\\s*(${t})\\s*\\)\\s*;\\s*)?$`,"s")),r;if(i&&(!i[3]||i[3]===i[1])?r=i[2]:s&&s[4]===s[1]&&(!s[5]||s[5]===s[3])&&(r=s[2]),!r)return"";try{return V(JSON.parse(r))}catch{return""}}var Vt=new Set(["exec","shell","shell_command","bash","run_command","run_cmd"]);function Ve(o,t){return typeof t!="string"?"":o==="apply_patch"?t:o==="exec"?ee(t):typeof o=="string"&&Vt.has(o)?"":t.includes("*** Begin Patch")?t:""}function Ye(o,t){let e={sessionId:t,source:A.EventSource.DESKTOP};if(o.type==="event_msg"&&o.payload){let i=o.payload.type;switch(i){case"user_message":return j(),{...e,type:A.EventType.USER_PROMPT,content:o.payload.message||"",metadata:{images:o.payload.images||[]}};case"agent_message":{let s=o.payload.message||"",r=o.payload.phase;return Ge("agent_message",r,s)?null:(Ee("agent_message",r,s),{...e,type:A.EventType.ASSISTANT_RESPONSE,content:s,metadata:{phase:r}})}case"agent_reasoning":return{...e,type:A.EventType.REASONING,content:o.payload.text||""};case"task_started":return j(),a.debug("Skipping task_started entry (turn boundary)"),null;case"task_complete":{let s=o.payload.error,r=typeof s?.message=="string"?s.message.trim():"";if(r){o.payload.last_agent_message&&a.warn("task_complete carried BOTH an error and a final message; relaying the error",{turnId:o.payload.turn_id});let p=typeof s?.codex_error_info=="string"?s.codex_error_info.trim():"",d=p!==""&&new RegExp(`(^|[^A-Za-z0-9_])${p.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}($|[^A-Za-z0-9_])`).test(r);return j(),{...e,type:A.EventType.NOTIFICATION,content:p&&!d?`${r} (${p})`:r,metadata:{phase:"turn_error",turnId:o.payload.turn_id,...p?{codexErrorInfo:p}:{}}}}s!=null&&a.warn("task_complete carried an error with no extractable message; falling through to the message path",{turnId:o.payload.turn_id,errorShape:typeof s});let n=Z(o.payload.last_agent_message),l=null;return n&&!zt(n)?(Ee("task_complete","final_answer",n),l={...e,type:A.EventType.ASSISTANT_RESPONSE,content:n,metadata:{phase:"final_answer"}}):a.debug("Skipping task_complete (final already emitted or empty)"),j(),l}case"turn_aborted":{let s=typeof o.payload.reason=="string"?o.payload.reason.trim():"";return j(),{...e,type:A.EventType.NOTIFICATION,content:s?`Turn aborted (${s})`:"Turn aborted",metadata:{phase:"turn_aborted",turnId:o.payload.turn_id,...s?{reason:s}:{}}}}case"token_count":return a.debug("Skipping token_count entry"),null;default:return a.debug("Unknown event_msg type",{type:i}),null}}if(o.type==="response_item"&&o.payload){let i=o.payload.type;if(i==="message"){if(o.payload.role!=="assistant")return a.debug("Skipping non-assistant response_item/message",{role:o.payload.role}),null;let s=Wt(o.payload),r=o.payload.phase;return!Z(s)||Ge("response_item",r,s)?null:(Ee("response_item",r,s),{...e,type:A.EventType.ASSISTANT_RESPONSE,content:s,metadata:{phase:r}})}if(i==="reasoning"){let s=jt(o.payload);return s?{...e,type:A.EventType.REASONING,content:s}:(a.debug("Skipping reasoning response_item (no readable summary)"),null)}if(i==="function_call"){let{name:s,arguments:r,call_id:n}=o.payload,l={};try{l=JSON.parse(r||"{}")}catch{l={raw:r}}let p=(0,Re.v4)();z.set(n,{name:s,input:r,eventId:p});let d=J(s),c=Xt(s,l);return{...e,type:A.EventType.TOOL_USE,content:c,metadata:{toolName:d,toolInput:l,callId:n,status:"running"}}}if(i==="function_call_output"){let{call_id:s,output:r}=o.payload,n=z.get(s);z.delete(s);let l=n?.name?J(n.name):"Tool",p=_e(oe(r),500);return{...e,type:A.EventType.TOOL_USE,content:`${l} completed:
-${p}`,metadata:{toolName:l,toolOutput:r,callId:s,status:"completed"}}}if(i==="custom_tool_call"){let{name:s,call_id:r,input:n,status:l}=o.payload;z.set(r,{name:s,input:n,eventId:(0,Re.v4)()});let p=Ve(s,n);if(p){let u=Qt(p),{oldString:f,newString:y}=Yt(p),h=u?`Editing: ${u.filePath}`:"Applying patch";return{...e,type:A.EventType.TOOL_USE,content:h,metadata:{tool_name:"Edit",tool_input:{file_path:u?.filePath||"",old_string:f,new_string:y},callId:r,status:l||"running"}}}let d=Gt(n),c=J(s==="exec"?"shell":s||"tool");return{...e,type:A.EventType.TOOL_USE,content:d?`Running: ${d}`:`Running ${c}`,metadata:{toolName:c,toolInput:d?{command:d}:{raw:typeof n=="string"?n:""},callId:r,status:l||"running"}}}if(i==="custom_tool_call_output"){let{call_id:s,output:r}=o.payload,n=z.get(s);if(z.delete(s),Ve(n?.name,n?.input)){let d={};if(typeof r=="string")try{d=JSON.parse(r||"{}")}catch{d={raw:r}}else if(Array.isArray(r)){let v=oe(r);try{d=JSON.parse(v)}catch{d={raw:r,text:v}}}else d=r??{};let c=d!==null&&typeof d=="object"&&!Array.isArray(d)?d:null,u=typeof c?.output=="string"?c.output:void 0,f=c?.error,y=u!==void 0&&u.includes("Success"),h=typeof f=="string"?f:f!==void 0?JSON.stringify(f):"Unknown error";return{...e,type:A.EventType.TOOL_USE,content:y?"File edit applied successfully":`Edit failed: ${h}`,metadata:{toolName:"Edit",toolOutput:d,callId:s,status:"completed",success:y}}}let l=n?.name?J(n.name==="exec"?"shell":n.name):"Tool",p=oe(r);return{...e,type:A.EventType.TOOL_USE,content:`${l} completed:
-${_e(p,500)}`,metadata:{toolName:l,toolOutput:r,callId:s,status:"completed"}}}return a.debug("Unknown response_item type",{type:i}),null}return o.type==="turn_context"?(a.debug("Skipping turn_context entry"),null):(a.debug("Unhandled log entry type",{type:o.type}),null)}function J(o){return{shell_command:"Bash",shell:"Bash",apply_patch:"Edit",write_file:"Write",read_file:"Read",list_files:"Glob",search_files:"Grep",web_search:"WebSearch",web_fetch:"WebFetch"}[o]||o}function Xt(o,t){switch(o){case"shell_command":case"shell":return`Running: ${t.command||"command"}`;case"read_file":return`Reading: ${t.file_path||t.path||"file"}`;case"write_file":return`Writing: ${t.file_path||t.path||"file"}`;case"list_files":return`Listing: ${t.path||"."}`;case"search_files":return`Searching for: ${t.pattern||t.query||"pattern"}`;case"web_search":return`Searching web: ${t.query||"query"}`;default:return`Running ${J(o)}`}}function Yt(o){let t=[],e=[],i=/^@@ -(\d+)(?:,\d+)? \+(\d+)(?:,\d+)? @@/;for(let s of o.split(`
+`);return t[0]!=="*** Begin Patch"||t[t.length-1]!=="*** End Patch"||t.filter(e=>e==="*** Begin Patch").length!==1||t.filter(e=>e==="*** End Patch").length!==1||!/^\*\*\* (?:Add|Update|Delete) File: [^\r\n]+$/.test(t[1]??"")?"":o}function ie(o){if(typeof o!="string")return"";let t="[A-Za-z_$][\\w$]*",e='"(?:\\\\.|[^"\\\\])*"',i=o.match(new RegExp(`^\\s*(?:const|let|var)\\s+(${t})\\s*=\\s*await\\s+tools\\.apply_patch\\(\\s*(${e})\\s*\\)\\s*;\\s*(?:text\\(\\s*(${t})\\s*\\)\\s*;\\s*)?$`,"s")),s=o.match(new RegExp(`^\\s*(?:const|let|var)\\s+(${t})\\s*=\\s*(${e})\\s*;\\s*(?:const|let|var)\\s+(${t})\\s*=\\s*await\\s+tools\\.apply_patch\\(\\s*(${t})\\s*\\)\\s*;\\s*(?:text\\(\\s*(${t})\\s*\\)\\s*;\\s*)?$`,"s")),r;if(i&&(!i[3]||i[3]===i[1])?r=i[2]:s&&s[4]===s[1]&&(!s[5]||s[5]===s[3])&&(r=s[2]),!r)return"";try{return V(JSON.parse(r))}catch{return""}}var Yt=new Set(["exec","shell","shell_command","bash","run_command","run_cmd"]);function Ye(o,t){return typeof t!="string"?"":o==="apply_patch"?t:o==="exec"?ie(t):typeof o=="string"&&Yt.has(o)?"":t.includes("*** Begin Patch")?t:""}function Je(o,t){let e={sessionId:t,source:A.EventSource.DESKTOP};if(o.type==="event_msg"&&o.payload){let i=o.payload.type;switch(i){case"user_message":return j(),{...e,type:A.EventType.USER_PROMPT,content:o.payload.message||"",metadata:{images:o.payload.images||[]}};case"agent_message":{let s=o.payload.message||"",r=o.payload.phase;return Xe("agent_message",r,s)?null:(_e("agent_message",r,s),{...e,type:A.EventType.ASSISTANT_RESPONSE,content:s,metadata:{phase:r}})}case"agent_reasoning":return{...e,type:A.EventType.REASONING,content:o.payload.text||""};case"task_started":return j(),a.debug("Skipping task_started entry (turn boundary)"),null;case"task_complete":{let s=o.payload.error,r=typeof s?.message=="string"?s.message.trim():"";if(r){o.payload.last_agent_message&&a.warn("task_complete carried BOTH an error and a final message; relaying the error",{turnId:o.payload.turn_id});let p=typeof s?.codex_error_info=="string"?s.codex_error_info.trim():"",d=p!==""&&new RegExp(`(^|[^A-Za-z0-9_])${p.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}($|[^A-Za-z0-9_])`).test(r);return j(),{...e,type:A.EventType.NOTIFICATION,content:p&&!d?`${r} (${p})`:r,metadata:{phase:"turn_error",turnId:o.payload.turn_id,...p?{codexErrorInfo:p}:{}}}}s!=null&&a.warn("task_complete carried an error with no extractable message; falling through to the message path",{turnId:o.payload.turn_id,errorShape:typeof s});let n=te(o.payload.last_agent_message),l=null;return n&&!jt(n)?(_e("task_complete","final_answer",n),l={...e,type:A.EventType.ASSISTANT_RESPONSE,content:n,metadata:{phase:"final_answer"}}):a.debug("Skipping task_complete (final already emitted or empty)"),j(),l}case"turn_aborted":{let s=typeof o.payload.reason=="string"?o.payload.reason.trim():"";return j(),{...e,type:A.EventType.NOTIFICATION,content:s?`Turn aborted (${s})`:"Turn aborted",metadata:{phase:"turn_aborted",turnId:o.payload.turn_id,...s?{reason:s}:{}}}}case"token_count":return a.debug("Skipping token_count entry"),null;default:return a.debug("Unknown event_msg type",{type:i}),null}}if(o.type==="response_item"&&o.payload){let i=o.payload.type;if(i==="message"){if(o.payload.role!=="assistant")return a.debug("Skipping non-assistant response_item/message",{role:o.payload.role}),null;let s=Gt(o.payload),r=o.payload.phase;return!te(s)||Xe("response_item",r,s)?null:(_e("response_item",r,s),{...e,type:A.EventType.ASSISTANT_RESPONSE,content:s,metadata:{phase:r}})}if(i==="reasoning"){let s=Vt(o.payload);return s?{...e,type:A.EventType.REASONING,content:s}:(a.debug("Skipping reasoning response_item (no readable summary)"),null)}if(i==="function_call"){let{name:s,arguments:r,call_id:n}=o.payload,l={};try{l=JSON.parse(r||"{}")}catch{l={raw:r}}let p=(0,Te.v4)();z.set(n,{name:s,input:r,eventId:p});let d=ee(s),u=Qt(s,l);return{...e,type:A.EventType.TOOL_USE,content:u,metadata:{toolName:d,toolInput:l,callId:n,status:"running"}}}if(i==="function_call_output"){let{call_id:s,output:r}=o.payload,n=z.get(s);z.delete(s);let l=n?.name?ee(n.name):"Tool",p=xe(le(r),500);return{...e,type:A.EventType.TOOL_USE,content:`${l} completed:
+${p}`,metadata:{toolName:l,toolOutput:r,callId:s,status:"completed"}}}if(i==="custom_tool_call"){let{name:s,call_id:r,input:n,status:l}=o.payload;z.set(r,{name:s,input:n,eventId:(0,Te.v4)()});let p=Ye(s,n);if(p){let c=Zt(p),{oldString:f,newString:y}=Jt(p),h=c?`Editing: ${c.filePath}`:"Applying patch";return{...e,type:A.EventType.TOOL_USE,content:h,metadata:{tool_name:"Edit",tool_input:{file_path:c?.filePath||"",old_string:f,new_string:y},callId:r,status:l||"running"}}}let d=Xt(n),u=ee(s==="exec"?"shell":s||"tool");return{...e,type:A.EventType.TOOL_USE,content:d?`Running: ${d}`:`Running ${u}`,metadata:{toolName:u,toolInput:d?{command:d}:{raw:typeof n=="string"?n:""},callId:r,status:l||"running"}}}if(i==="custom_tool_call_output"){let{call_id:s,output:r}=o.payload,n=z.get(s);if(z.delete(s),Ye(n?.name,n?.input)){let d={};if(typeof r=="string")try{d=JSON.parse(r||"{}")}catch{d={raw:r}}else if(Array.isArray(r)){let v=le(r);try{d=JSON.parse(v)}catch{d={raw:r,text:v}}}else d=r??{};let u=d!==null&&typeof d=="object"&&!Array.isArray(d)?d:null,c=typeof u?.output=="string"?u.output:void 0,f=u?.error,y=c!==void 0&&c.includes("Success"),h=typeof f=="string"?f:f!==void 0?JSON.stringify(f):"Unknown error";return{...e,type:A.EventType.TOOL_USE,content:y?"File edit applied successfully":`Edit failed: ${h}`,metadata:{toolName:"Edit",toolOutput:d,callId:s,status:"completed",success:y}}}let l=n?.name?ee(n.name==="exec"?"shell":n.name):"Tool",p=le(r);return{...e,type:A.EventType.TOOL_USE,content:`${l} completed:
+${xe(p,500)}`,metadata:{toolName:l,toolOutput:r,callId:s,status:"completed"}}}return a.debug("Unknown response_item type",{type:i}),null}return o.type==="turn_context"?(a.debug("Skipping turn_context entry"),null):(a.debug("Unhandled log entry type",{type:o.type}),null)}function ee(o){return{shell_command:"Bash",shell:"Bash",apply_patch:"Edit",write_file:"Write",read_file:"Read",list_files:"Glob",search_files:"Grep",web_search:"WebSearch",web_fetch:"WebFetch"}[o]||o}function Qt(o,t){switch(o){case"shell_command":case"shell":return`Running: ${t.command||"command"}`;case"read_file":return`Reading: ${t.file_path||t.path||"file"}`;case"write_file":return`Writing: ${t.file_path||t.path||"file"}`;case"list_files":return`Listing: ${t.path||"."}`;case"search_files":return`Searching for: ${t.pattern||t.query||"pattern"}`;case"web_search":return`Searching web: ${t.query||"query"}`;default:return`Running ${ee(o)}`}}function Jt(o){let t=[],e=[],i=/^@@ -(\d+)(?:,\d+)? \+(\d+)(?:,\d+)? @@/;for(let s of o.split(`
 `))if(!(i.test(s)||s.startsWith("***")||s.startsWith("---")||s.startsWith("+++"))){if(s.startsWith("-"))t.push(s.slice(1));else if(s.startsWith("+"))e.push(s.slice(1));else if(s.startsWith(" ")){let r=s.slice(1);t.push(r),e.push(r)}}return{oldString:t.join(`
 `),newString:e.join(`
-`)}}function Qt(o){if(!o)return null;let t=o.match(/\*\*\* (?:Update|Add|Delete) File: (.+)/);return t?{filePath:t[1].trim()}:null}function oe(o){if(o==null)return"";if(typeof o=="string")return o;if(Array.isArray(o))return o.map(t=>typeof t?.text=="string"?t.text:t?.type==="input_image"||typeof t?.image_url=="string"?"[image]":JSON.stringify(t??null)).join(`
-`);if(typeof o=="object"&&typeof o.text=="string")return o.text;try{return JSON.stringify(o)??""}catch{return String(o)}}function _e(o,t){return typeof o!="string"?_e(oe(o),t):o?o.length<=t?o:o.substring(0,t)+"...":""}function Te(){z.clear(),j()}var T=require("@quantiya/codevibe-core"),Qe=3e3,Jt=8,Zt=10,ei=100;function Je(o){let t=Buffer.byteLength(o.carryover);return{status:"partial",progressKey:`${o.fileIdentity.dev}:${o.fileIdentity.ino}:${o.size}:${o.endOfComplete}:${t}`,size:o.size,carryoverBytes:t,endOfComplete:o.endOfComplete}}var ti="tool_activity",X=class{constructor(t){this.consolidator=null;this.ledger=null;this.sessionMap=null;this.ownership=null;this.cursor=null;this.backendSessionId=null;this.rolloutId=null;this.transcriptPath=null;this.backstopTimer=null;this.backstopInFlight=null;this.cursorReady=Promise.resolve();this.cursorRepaired=!1;this.deps=t}static mintBackendSessionId(){return T.ToolActivitySessionMap.mintCodexBackendSessionId()}async recordedBackendSessionId(t){return new T.ToolActivitySessionMap({agent:"codex",logger:this.deps.logger,lock:new T.InProcessRolloutLock,root:this.deps.root}).ownerBackendSessionId(t)}get sessionId(){return this.backendSessionId}get rollout(){return this.rolloutId}isActive(){return this.consolidator!==null}async start(t,e,i){this.backendSessionId=t,this.rolloutId=e;let s=(0,T.createRolloutLock)({agent:"codex",logger:this.deps.logger,socketDir:this.deps.socketDir,root:this.deps.root});this.sessionMap=new T.ToolActivitySessionMap({agent:"codex",logger:this.deps.logger,lock:s,root:this.deps.root}),this.ownership=await this.sessionMap.claimOwnership(e,t);let r=new T.ToolActivityOutbox({agent:"codex",logger:this.deps.logger,root:this.deps.root});this.ledger=new T.ToolActivityLedger({agent:"codex",sessionId:t,logger:this.deps.logger,root:this.deps.root}),this.consolidator=new T.ToolActivityConsolidator({agent:"codex",sessionId:t,logger:this.deps.logger,outbox:r,ledger:this.ledger,transport:this.buildTransport()}),await this.consolidator.init(),i&&this.bindTranscript(i),this.deps.logger.info("[tool-activity] codex consolidator started",{sessionId:t,rollout:e,hasTranscript:!!i})}bindTranscript(t){if(!this.consolidator||!t||this.transcriptPath===t)return;this.transcriptPath=t;let e=new T.ToolReplayCursor({agent:"codex",sessionId:this.backendSessionId,canonicalPath:t,logger:this.deps.logger,root:this.deps.root,readBytes:this.deps.replayReadBytes,maxFrameBytes:this.deps.replayMaxFrameBytes});this.cursor=e,this.cursorRepaired=!1,this.cursorReady=e.load().catch(s=>this.deps.logger.warn("[tool-activity] codex cursor load failed (rescanning fresh)",{sessionId:this.backendSessionId,err:String(s)}));let i=this.deps.backstopIntervalMs??3e3;i>0&&!this.backstopTimer&&(this.backstopTimer=setInterval(()=>{this.runTranscriptBackstop().catch(s=>this.deps.logger.warn("[tool-activity] codex transcript backstop failed",{sessionId:this.backendSessionId,err:String(s)}))},i),this.backstopTimer.unref?.())}async observeCall(t,e){if(!this.consolidator||!this.sessionMap||!this.ownership||!t.callId||!t.toolName)return;let i=this.consolidator;await this.sessionMap.bindCall(this.ownership,t.callId);let s={id:t.callId,tool:t.toolName,normalizedTarget:ni(t.toolName,t.toolInput),ts:t.ts??new Date().toISOString(),byteOffset:t.byteOffset??0,...t.toolInput!==void 0?{digest:(0,T.digestOf)(t.toolInput)}:{}},r=await i.observe(s,e);return r==="closed"?await i.captureTerminal(s,this.deps.shutdownDrainMs??Qe)?"sealed-terminal":"closed":r}async runTranscriptBackstop(t=!1){await this.runTranscriptBackstopTurn(t)}runTranscriptBackstopTurn(t=!1){if(this.backstopInFlight)return this.backstopInFlight;let e=this.cursor,i=this.cursorReady,s=this.consolidator;if(!s||!e)return Promise.resolve("caught-up");let n=(async()=>{if(await i,this.cursor!==e)return"more";if(!this.cursorRepaired){if(await s.repairLostWindows(e),this.cursor!==e)return"more";this.cursorRepaired=!0}return this.doTranscriptBackstop(e,t)})().finally(()=>{this.backstopInFlight===n&&(this.backstopInFlight=null)});return this.backstopInFlight=n,n}async doTranscriptBackstop(t,e=!1){let i=this.consolidator;if(!i)return"caught-up";this.ledger&&await this.ledger.reloadLegacyOwned();for(let s=0;s<Jt;s+=1){if(this.cursor!==t)return"caught-up";let r=await t.readFrames();if(r.missing)return"caught-up";if(r.frames.length===0)return r.carryover.length>0?Je(r):"caught-up";let n=Number.POSITIVE_INFINITY,l=e?{includeInFlight:!0}:void 0;for(let p of r.frames)for(let d of ii(p.line,p.startOffset))await this.observeCall(d,l)==="deferred-in-flight"&&(n=Math.min(n,p.startOffset));if(await i.flush(),n<r.endOfComplete)return await t.checkpoint(n,{fileIdentity:r.fileIdentity,size:r.size,carryover:""}),"more";if(await t.checkpoint(r.endOfComplete,{fileIdentity:r.fileIdentity,size:r.size,carryover:r.carryover}),!r.hasMore)return r.carryover.length>0?Je(r):"caught-up"}return"more"}async flush(){await this.consolidator?.flush()}async stop(){this.backstopTimer&&(clearInterval(this.backstopTimer),this.backstopTimer=null),await this.runTranscriptBackstop().catch(()=>{});let t=Math.max(1,Math.trunc(this.deps.shutdownPartialNoProgressTurns??ei)),e=null,i=0;for(;;){let s=await this.runTranscriptBackstopTurn(!0);if(s==="caught-up")break;if(typeof s!="string"){if(s.progressKey===e?i+=1:(e=s.progressKey,i=1),i>=t){this.deps.logger.warn("[tool-activity] deferring unchanged incomplete rollout suffix during shutdown; the next owner will re-read it from the durable complete-line boundary",{size:s.size,carryoverBytes:s.carryoverBytes,endOfComplete:s.endOfComplete,unchangedTurns:i});break}await new Promise(r=>setTimeout(r,Zt))}else e=null,i=0,await new Promise(r=>setImmediate(r))}await this.consolidator?.drainSends(this.deps.shutdownDrainMs??Qe).catch(()=>{});try{await this.consolidator?.shutdown()}finally{await this.ownership?.release().catch(()=>{}),this.ownership=null,this.consolidator=null,this.ledger=null,this.sessionMap=null,this.cursor=null}}buildTransport(){let t=async(e,i,s)=>{let r=s?s.sessionKey:this.deps.getSessionKey();if(!r)throw new Error("[tool-activity] no session key at send (retryable)");let n=s?s.sessionKeyGen:this.deps.getSessionKeyGen();await this.deps.createEvent({sessionId:e,type:T.EventType.TOOL_ACTIVITY,source:T.EventSource.DESKTOP,content:this.deps.encryptContent(ti,r),metadata:{encrypted:this.deps.encryptMetadata({manifest:i.manifest},r)},timestamp:i.windowStart,isEncrypted:!0,clientEventId:i.clientEventId,...n?{expectedSessionKeyGen:n}:{}})};return{send:async(e,i)=>{try{await t(e,i)}catch(s){if((0,T.isSessionKeyStaleError)(s)&&this.deps.refreshSessionKey){let r=await this.deps.refreshSessionKey(e);if(!r)throw s;await t(e,i,r);return}throw s}}}}};function ii(o,t){let e;try{e=JSON.parse(o)}catch{return[]}if(e?.type!=="response_item"||!e.payload)return[];let i=e.payload,s=typeof e.timestamp=="string"?e.timestamp:new Date(0).toISOString();if(i.type==="function_call"&&typeof i.call_id=="string"&&typeof i.name=="string"){let r;try{r=JSON.parse(i.arguments||"{}")}catch{r={raw:i.arguments}}return[{callId:i.call_id,toolName:si(i.name),toolInput:r,ts:s,byteOffset:t}]}if(i.type==="custom_tool_call"&&typeof i.call_id=="string"){let r=ri(typeof i.input=="string"?i.input:""),n=r?{file_path:r,patch:i.input}:{patch:i.input};return[{callId:i.call_id,toolName:"Edit",toolInput:n,ts:s,byteOffset:t}]}return[]}function si(o){return o==="shell"||o==="shell_command"||o==="local_shell"?"Bash":o==="apply_patch"?"Edit":o}function ri(o){let t=o.match(/^\*\*\* (?:Update|Add|Delete) File: (.+)$/m);return t?t[1].trim():void 0}function ni(o,t){if(!t||typeof t!="object")return;let e=t,i=r=>typeof r=="string"&&r.length>0?r:void 0,s=Array.isArray(e.command)?e.command.filter(r=>typeof r=="string").join(" ").trim().split(/\s+/)[0]:typeof e.command=="string"?e.command.trim().split(/\s+/)[0]:void 0;return i(e.file_path)??i(e.path)??i(e.pattern)??i(e.url)??(s&&s.length>0?s:void 0)}var Ze=require("events"),et=require("@quantiya/codevibe-core");var ae=class o extends Ze.EventEmitter{constructor(){super();this.pendingCalls=new Map;this.timers=new Map;this.timeoutMs=(0,et.getConfig)().codex.approvalTimeoutMs,a.info("Approval detector initialized",{timeoutMs:this.timeoutMs})}onToolCallStart(e,i,s){a.debug("Tool call started",{callId:e,name:i});let r=this.parseInput(s),n=this.extractFilePath(i,s,r),l=this.extractDiff(i,s,r),p={callId:e,name:i,input:s,filePath:n,diff:l,parsedInput:r,timestamp:Date.now(),notificationSent:!1};if(this.pendingCalls.set(e,p),!this.shouldScheduleApprovalTimeout(i,r)){a.debug("Skipping approval timeout for non-escalated tool call",{callId:e,name:i});return}let d=setTimeout(()=>{this.checkPendingCall(e)},this.timeoutMs);this.timers.set(e,d)}onToolCallComplete(e){a.debug("Tool call completed",{callId:e}),this.pendingCalls.delete(e);let i=this.timers.get(e);i&&(clearTimeout(i),this.timers.delete(e))}checkPendingCall(e){let i=this.pendingCalls.get(e);if(!i||i.notificationSent)return;let s=Date.now()-i.timestamp;a.info("Tool call still pending after timeout",{callId:e,name:i.name,elapsedMs:s}),i.notificationSent=!0,this.pendingCalls.set(e,i),this.emit("approval-pending",{callId:e,toolName:i.name,hint:this.extractHint(i.name,i.input,i.filePath),filePath:i.filePath,diff:i.diff,toolInput:i.parsedInput,rawInput:i.input,elapsedMs:s})}extractHint(e,i,s){if(s)return`File: ${s}`;if(e==="apply_patch"&&i){let r=i.match(/\*\*\* (?:Update|Add|Delete) File: (.+)/);if(r)return`File: ${r[1].trim()}`}if(o.SHELL_TOOL_NAMES.has(e))try{let r=JSON.parse(i),n=typeof r.command=="string"?r.command:typeof r.cmd=="string"?r.cmd:void 0;if(n)return`Command: ${n.substring(0,50)}${n.length>50?"...":""}`}catch{}return`Tool: ${this.mapToolName(e)}`}mapToolName(e){return{exec_command:"Bash",shell_command:"Bash",shell:"Bash",exec:"Bash",local_shell:"Bash",apply_patch:"File Edit",write_file:"Write File",read_file:"Read File"}[e]||e}parseInput(e){if(e)try{return JSON.parse(e)}catch{return}}static{this.SHELL_TOOL_NAMES=new Set(["exec_command","shell_command","shell","exec","local_shell"])}shouldScheduleApprovalTimeout(e,i){return o.SHELL_TOOL_NAMES.has(e)?i?.sandbox_permissions==="require_escalated":!1}extractFilePath(e,i,s){if(e==="apply_patch"&&i){let n=i.match(/\*\*\* (?:Update|Add|Delete) File: (.+)/);if(n)return n[1].trim()}let r=s?.file_path||s?.path||s?.filePath;if(r&&typeof r=="string")return r}extractDiff(e,i,s){if(e==="apply_patch"&&i)return i;if(s?.diff&&typeof s.diff=="string")return s.diff}getPendingCalls(){return Array.from(this.pendingCalls.values())}hasPendingCalls(){return this.pendingCalls.size>0}clear(){for(let e of this.timers.values())clearTimeout(e);this.timers.clear(),this.pendingCalls.clear(),a.debug("Approval detector cleared")}shutdown(){this.clear(),this.removeAllListeners(),a.info("Approval detector shutdown")}};var tt=require("child_process"),it=require("util");var xe=(0,it.promisify)(tt.exec),Y="__CODEVIBE_CODEX_KEY_ESCAPE__",le=class{async sendLiteral(t,e){return this.sendTerminalOperation(t,async i=>{await this.sendLiteralViaTmux(i,e)})}async sendKey(t,e){return this.sendTerminalOperation(t,async i=>{await this.sendKeyViaTmux(i,e)})}async sendInput(t,e){a.info("Attempting to send input to Codex",{sessionId:t,input:e});try{let i=process.env.CODEVIBE_CODEX_TMUX_SESSION;return i?(a.info("Using tmux send-keys",{tmuxSession:i}),e===Y?await this.sendKeyViaTmux(i,"Escape"):await this.sendViaTmux(i,e),a.info("Successfully sent input to Codex",{sessionId:t,input:e}),!0):(a.error("No tmux session found - CodeVibe Companion launch is required",{sessionId:t,hint:"Start Codex CLI using `codevibe --agent codex`"}),!1)}catch(i){return a.error("Failed to send input to Codex",{sessionId:t,error:i instanceof Error?i.message:String(i)}),!1}}async sendTerminalOperation(t,e){let i=process.env.CODEVIBE_CODEX_TMUX_SESSION;if(!i)return a.error("No tmux session found - CodeVibe Companion launch is required",{sessionId:t,hint:"Start Codex CLI using `codevibe --agent codex`"}),!1;try{return await e(i),!0}catch(s){return a.error("Failed to send terminal input to Codex",{sessionId:t,error:s instanceof Error?s.message:String(s)}),!1}}async sendViaTmux(t,e){a.info("Sending via tmux",{sessionName:t,inputLength:e.length});try{await this.sendLiteralViaTmux(t,e),await this.delay(500);let i=`tmux send-keys -t "${t}" Enter`;await xe(i),a.info("tmux send-keys completed")}catch(i){throw a.error("tmux send-keys failed",{sessionName:t,error:i}),i}}async sendLiteralViaTmux(t,e){let i=e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),s=`tmux send-keys -t "${t}" -l "${i}"`;await xe(s)}async sendKeyViaTmux(t,e){a.info("Sending special key via tmux",{sessionName:t,key:e});try{let i=`tmux send-keys -t "${t}" ${e}`;await xe(i),a.info("tmux special-key send completed")}catch(i){throw a.error("tmux special-key send failed",{sessionName:t,key:e,error:i}),i}}delay(t){return new Promise(e=>setTimeout(e,t))}isApprovalResponse(t){let e=t.trim().toLowerCase();return["y","n","a","q","e","yes","no"].includes(e)||/^[0-9]+$/.test(e)}};var g=R(require("fs")),de=R(require("os")),M=R(require("path")),te=require("crypto"),rt=require("child_process"),nt=require("events"),ot=require("util");var Ce=(0,ot.promisify)(rt.execFile),st=512*1024,W="writer.state",oi=2e3,ai=10,li=16*1024*1024,pi=10080*60*1e3,pe=class extends nt.EventEmitter{constructor(e={}){super();this.sessionName=null;this.started=!1;this.pipeDirPath=null;this.pipeDirIdentity=null;this.pipeFilePath=null;this.pipeFileFd=null;this.pipeFileIdentity=null;this.writerStatePath=null;this.writerStateFd=null;this.writerStateIdentity=null;this.writerGeneration=null;this.pipeEnabled=!1;this.filePosition=0;this.pollTimer=null;this.processing=!1;this.pendingRead=!1;this.promptInspectionChain=Promise.resolve();this.lastPromptHash=null;this.lifecycleGeneration=0;this.retainedMirrors=[];this.retainedMirrorContainmentLost=!1;this.maxPaneFileBytes=e.maxPaneFileBytes??li,this.stalePaneRetentionMs=e.stalePaneRetentionMs??pi,this.tempDir=e.tempDir??de.tmpdir(),this.writerPath=M.resolve(__dirname,"..","libexec","pane-mirror-writer.js");let i=e.runtimePlatform??process.platform,s=e.runtimeRelease??de.release();if(this.wslDetected=i==="linux"&&(/microsoft/i.test(s)||!!process.env.WSL_DISTRO_NAME||!!process.env.WSL_INTEROP),!Number.isSafeInteger(this.maxPaneFileBytes)||this.maxPaneFileBytes<=0)throw new RangeError("maxPaneFileBytes must be a positive safe integer");if(!Number.isSafeInteger(this.stalePaneRetentionMs)||this.stalePaneRetentionMs<0)throw new RangeError("stalePaneRetentionMs must be a non-negative safe integer")}async start(e){if(this.wslDetected)throw new Error("Tmux pane mirror fallback is disabled on unqualified WSL; using hook-based prompts only");if(this.started&&this.sessionName===e&&this.pipeEnabled){a.debug("Tmux pane observer already started",{sessionName:e});return}this.started&&await this.stop(),this.lifecycleGeneration++,this.sessionName=e,this.filePosition=0,this.lastPromptHash=null;try{if(this.cleanupStalePipeFiles(),this.reapOwnedRetainedMirrors(),this.retainedMirrorContainmentLost||this.retainedMirrors.length>0)throw new Error("Prior bounded tmux pane writer is still unconfirmed; refusing another mirror");this.createSecureMirror(),this.started=!0,await this.enablePipePane(),this.pipeEnabled=!0,this.startPolling()}catch(i){this.started=!1,this.lifecycleGeneration++;let s=this.writerGeneration===null;if(!s)try{await this.disablePipePane(),s=!0}catch(r){a.error("Failed to confirm tmux pane writer quiescence after startup failure",{disableError:r})}throw s&&(this.pipeEnabled=!1),this.clearPolling(),s?this.releaseSecureMirror():this.abandonSecureMirror(),this.resetLifecycleState(),i}a.info("Tmux pane observer started",{sessionName:e})}async stop(){if(!this.started&&this.pipeFileFd===null)return;this.started=!1,this.lifecycleGeneration++;let e=!1;try{await this.disablePipePane(),e=!0}catch(i){a.error("Failed to confirm tmux pane writer quiescence during stop",{error:i}),this.emit("observer-error",i)}e&&(this.pipeEnabled=!1),this.clearPolling(),e?this.releaseSecureMirror():this.abandonSecureMirror(),a.info("Tmux pane observer stopped",{sessionName:this.sessionName,writerQuiesced:e}),this.resetLifecycleState()}identityOf(e){return{dev:e.dev,ino:e.ino}}identitiesEqual(e,i){return e.dev===i.dev&&e.ino===i.ino}openMirrorFile(e){return g.openSync(e,g.constants.O_RDWR|g.constants.O_CREAT|g.constants.O_EXCL|(g.constants.O_NOFOLLOW??0),384)}truncateMirror(e){g.ftruncateSync(e,0)}createSecureMirror(){g.mkdirSync(this.tempDir,{recursive:!0,mode:448});let e=g.mkdtempSync(M.join(this.tempDir,`codevibe-codex-pane-${process.pid}-`));g.chmodSync(e,448);let i=M.join(e,"pane.log"),s=M.join(e,W),r=null,n=null;try{r=this.openMirrorFile(i),g.fchmodSync(r,384);let l=g.fstatSync(r);if(!l.isFile())throw new Error("Tmux pane mirror is not a regular file");n=this.openMirrorFile(s),g.fchmodSync(n,384);let p=g.fstatSync(n);if(!p.isFile())throw new Error("Tmux pane writer state is not a regular file");g.writeSync(n,Buffer.from(`idle
-`),0,5,0),this.pipeDirPath=e,this.pipeDirIdentity=this.identityOf(g.lstatSync(e)),this.pipeFilePath=i,this.pipeFileFd=r,this.pipeFileIdentity=this.identityOf(l),this.writerStatePath=s,this.writerStateFd=n,this.writerStateIdentity=this.identityOf(p),r=null,n=null}catch(l){if(r!==null)try{g.closeSync(r)}catch{}if(n!==null)try{g.closeSync(n)}catch{}try{g.unlinkSync(i)}catch{}try{g.unlinkSync(s)}catch{}try{g.rmdirSync(e)}catch{}throw l}}pathMatchesMirrorIdentity(){if(!this.pipeFilePath||!this.pipeFileIdentity)return!1;try{let e=g.lstatSync(this.pipeFilePath);return e.isFile()&&!e.isSymbolicLink()&&this.identitiesEqual(this.pipeFileIdentity,this.identityOf(e))}catch{return!1}}quarantineIfIdentityMatches(e,i){let s=`${e}.reap-${process.pid}-${(0,te.randomBytes)(6).toString("hex")}`;try{g.renameSync(e,s);let r=g.lstatSync(s);return this.identitiesEqual(i,this.identityOf(r))?s:(g.existsSync(e)||g.renameSync(s,e),null)}catch{return null}}restoreQuarantine(e,i){try{g.existsSync(i)||g.renameSync(e,i)}catch{}}pathMatchesIdentity(e,i){if(!e||!i)return!1;try{let s=g.lstatSync(e);return s.isFile()&&!s.isSymbolicLink()&&this.identitiesEqual(i,this.identityOf(s))}catch{return!1}}closeOwnedDescriptors(){if(this.pipeFileFd!==null)try{g.closeSync(this.pipeFileFd)}catch{}if(this.writerStateFd!==null)try{g.closeSync(this.writerStateFd)}catch{}this.pipeFileFd=null,this.writerStateFd=null}unlinkOwnedFile(e,i){if(!e||!i||!this.pathMatchesIdentity(e,i))return;let s=this.quarantineIfIdentityMatches(e,i);s&&g.unlinkSync(s)}releaseSecureMirror(){let e=this.pipeFilePath,i=this.writerStatePath,s=this.pipeDirPath,r=this.pipeFileIdentity,n=this.writerStateIdentity;this.closeOwnedDescriptors();try{this.unlinkOwnedFile(e,r)}catch{}try{this.unlinkOwnedFile(i,n)}catch{}if(s)try{g.rmdirSync(s)}catch{}this.pipeDirPath=null,this.pipeDirIdentity=null,this.pipeFilePath=null,this.pipeFileIdentity=null,this.writerStatePath=null,this.writerStateIdentity=null,this.writerGeneration=null}abandonSecureMirror(){let e=this.pipeDirPath,i=this.pipeFilePath;e&&this.pipeDirIdentity&&i&&this.pipeFileIdentity&&this.writerStatePath&&this.writerStateIdentity&&this.writerGeneration?this.retainedMirrors.push({dirPath:e,dirIdentity:this.pipeDirIdentity,panePath:i,paneIdentity:this.pipeFileIdentity,statePath:this.writerStatePath,stateIdentity:this.writerStateIdentity,writerGeneration:this.writerGeneration}):(e||i)&&(this.retainedMirrorContainmentLost=!0),this.closeOwnedDescriptors(),a.warn("Retaining bounded tmux pane mirror because writer quiescence is unconfirmed",{retainedDir:e,retainedFile:i,maxBytes:this.maxPaneFileBytes}),this.pipeDirPath=null,this.pipeDirIdentity=null,this.pipeFilePath=null,this.pipeFileIdentity=null,this.writerStatePath=null,this.writerStateIdentity=null,this.writerGeneration=null}resetLifecycleState(){this.sessionName=null,this.pipeDirPath=null,this.pipeDirIdentity=null,this.pipeFilePath=null,this.pipeFileFd=null,this.pipeFileIdentity=null,this.writerStatePath=null,this.writerStateFd=null,this.writerStateIdentity=null,this.writerGeneration=null,this.pipeEnabled=!1,this.filePosition=0,this.processing=!1,this.pendingRead=!1,this.lastPromptHash=null}async failClosedPipe(e){let i=!1;try{await this.disablePipePane(),i=!0}catch(s){a.error("Failed to confirm unsafe tmux pane writer quiescence",{disableError:s})}i&&(this.pipeEnabled=!1),this.clearPolling(),a.error("Tmux pane mirror entered fail-closed containment after integrity/cap failure",{error:e,writerQuiesced:i,independentlyBounded:!0}),this.emit("observer-error",e)}resetLastPromptHash(){this.lastPromptHash=null}async captureSnapshot(e=120){if(!this.sessionName)throw new Error("Tmux pane observer is not started");let i=Math.max(1,Math.floor(e));try{let{stdout:s}=await Ce("tmux",["capture-pane","-p","-e","-J","-S",`-${i}`,"-t",this.sessionName],{timeout:5e3,maxBuffer:2097152});return s}catch(s){throw a.error("Failed to capture tmux pane snapshot",{sessionName:this.sessionName,error:s}),this.emit("observer-error",s),s}}quoteShellArg(e){return`'${e.replace(/'/g,"'\\''")}'`}writerStatePathMatchesIdentity(){return this.pathMatchesIdentity(this.writerStatePath,this.writerStateIdentity)}writeWriterState(e){if(this.writerStateFd===null||!this.writerStateIdentity||!this.writerStatePathMatchesIdentity())throw new Error("Tmux pane writer state identity is not valid");let i=g.fstatSync(this.writerStateFd);if(!this.identitiesEqual(this.writerStateIdentity,this.identityOf(i)))throw new Error("Tmux pane writer state descriptor identity changed");let s=Buffer.from(e,"utf8");g.ftruncateSync(this.writerStateFd,0);let r=0;for(;r<s.length;){let n=g.writeSync(this.writerStateFd,s,r,s.length-r,r);if(n<=0)throw new Error("Short tmux pane writer-state write");r+=n}g.fsyncSync(this.writerStateFd)}readWriterState(){if(this.writerStateFd===null||!this.writerStateIdentity||!this.writerStatePathMatchesIdentity())throw new Error("Tmux pane writer state identity is not valid");let e=g.fstatSync(this.writerStateFd);if(!this.identitiesEqual(this.writerStateIdentity,this.identityOf(e)))throw new Error("Tmux pane writer state descriptor identity changed");let i=Math.min(e.size,512);if(i===0)return"";let s=Buffer.alloc(i),r=g.readSync(this.writerStateFd,s,0,i,0);return s.subarray(0,r).toString("utf8").trim()}async waitForWriterState(e,i,s=oi){let r=Date.now()+s;do{let n=this.readWriterState();if(i.some(l=>n.startsWith(`${l} ${e} `)))return n;if(Date.now()>=r)return null;await new Promise(l=>setTimeout(l,ai))}while(!0)}async enablePipePane(){if(!this.sessionName||!this.pipeFilePath||!this.writerStatePath)throw new Error("Tmux pane observer is not initialized");if(this.pipeFileFd===null||!this.pipeFileIdentity||!this.pathMatchesMirrorIdentity()||this.writerStateFd===null||!this.writerStateIdentity||!this.writerStatePathMatchesIdentity())throw new Error("Tmux pane mirror identity is not valid");let e=(0,te.randomBytes)(16).toString("hex");this.writerGeneration=e,this.writeWriterState(`starting ${e}
-`);let i=[process.execPath,this.writerPath,this.pipeFilePath,String(this.pipeFileIdentity.dev),String(this.pipeFileIdentity.ino),this.writerStatePath,String(this.writerStateIdentity.dev),String(this.writerStateIdentity.ino),e,String(this.maxPaneFileBytes)].map(r=>this.quoteShellArg(r)).join(" ");try{await Ce("tmux",["pipe-pane","-O","-t",this.sessionName,i])}catch(r){throw this.writerGeneration=null,r}let s=await this.waitForWriterState(e,["ready","done"]);if(!s)throw new Error("Tmux pane writer did not confirm startup");if(s.startsWith(`done ${e} `))throw new Error("Tmux pane writer terminated during startup");a.debug("Enabled tmux pipe-pane mirroring",{sessionName:this.sessionName,pipeFilePath:this.pipeFilePath,writerGeneration:e})}async disablePipePane(){let e=this.writerGeneration;if(!this.sessionName||!e)return;let i=null;try{await Ce("tmux",["pipe-pane","-t",this.sessionName])}catch(n){i=n}if(!e){if(i)throw i;return}if(await this.waitForWriterState(e,["done"])){this.writerGeneration=null;return}let r=i instanceof Error?`: ${i.message}`:"";throw new Error(`Tmux pane writer quiescence was not confirmed${r}`)}startPolling(){this.clearPolling(),this.pollTimer=setInterval(()=>{this.processFileChanges()},100),this.pollTimer.unref?.()}clearPolling(){this.pollTimer&&clearInterval(this.pollTimer),this.pollTimer=null}async processFileChanges(){if(!(!this.started||!this.pipeFilePath)){if(this.processing){this.pendingRead=!0;return}this.processing=!0;try{do{this.pendingRead=!1;let e="";try{e=this.readAppendedChunk()}catch(i){a.error("Failed to read bounded tmux pane mirror",{error:i}),await this.failClosedPipe(i);return}await this.rotatePipeFileIfNeeded(),e&&this.queuePromptInspection(e,this.lifecycleGeneration)}while(this.pendingRead)}catch(e){a.error("Failed to process tmux pane changes",{error:e}),this.emit("observer-error",e)}finally{this.processing=!1}}}queuePromptInspection(e,i){this.promptInspectionChain=this.promptInspectionChain.then(async()=>{if(!(!this.started||this.lifecycleGeneration!==i))try{await this.inspectChunkForPrompt(e)}catch(s){a.error("Failed to inspect tmux pane delta",{error:s}),this.emit("observer-error",s)}})}async inspectChunkForPrompt(e){if(!this.lastPromptHash&&!this.looksLikePromptDelta(e))return;let i=await this.captureSnapshot();this.inspectSnapshotForPrompt(i,e)}inspectSnapshotForPrompt(e,i){let s=e?this.extractActiveApprovalBlock(e):null;if(!s){if(this.lastPromptHash){let n=this.lastPromptHash;this.lastPromptHash=null,this.emit("prompt-cleared",{promptHash:n})}e&&a.debug("tmux delta cue matched but no active dialog isolated (no candidate emitted)",{snapshotTail:e.split(`
-`).slice(-6).join("\\n")});return}let r=this.hashPromptSnapshot(s);r!==this.lastPromptHash&&(this.lastPromptHash=r,this.emit("prompt-candidate",{rawDelta:i,snapshot:s,promptHash:r,detectedAt:Date.now()}))}queueCurrentSnapshotInspection(e){this.promptInspectionChain=this.promptInspectionChain.then(async()=>{if(!(!this.started||this.lifecycleGeneration!==e))try{let i=await this.captureSnapshot();this.inspectSnapshotForPrompt(i,"")}catch(i){a.error("Failed to inspect tmux pane snapshot after rotation",{error:i}),this.emit("observer-error",i)}})}async rotatePipeFileIfNeeded(){let e=this.pipeFilePath,i=this.pipeFileFd,s=this.pipeFileIdentity,r=this.sessionName,n=this.lifecycleGeneration;if(!e||i===null||!s||!r||!this.started)return;let l;try{let d=g.fstatSync(i);if(!this.identitiesEqual(s,this.identityOf(d)))throw new Error("Tmux pane mirror descriptor identity changed");l=d.size}catch(d){await this.failClosedPipe(d);return}if(l<this.maxPaneFileBytes)return;let p="";try{await this.disablePipePane(),this.pipeEnabled=!1}catch(d){a.error("Tmux pane mirror rotation deferred because writer quiescence is unconfirmed",{error:d}),this.emit("observer-error",d),this.clearPolling();return}if(!(!this.started||this.lifecycleGeneration!==n||this.pipeFilePath!==e)){try{p=this.readAppendedChunk()}catch(d){a.error("Failed to drain final tmux pane suffix during rotation; mirror remains intact and disabled",{error:d}),this.emit("observer-error",d),this.clearPolling();return}try{this.truncateMirror(i);let d=g.fstatSync(i);if(!this.identitiesEqual(s,this.identityOf(d))||d.size!==0)throw new Error("Tmux pane mirror truncation could not be verified");if(!this.pathMatchesMirrorIdentity())throw new Error("Tmux pane mirror path was replaced during rotation")}catch(d){a.error("Tmux pane mirror remains disabled after truncation verification failure",{error:d}),this.emit("observer-error",d),this.clearPolling();return}if(this.filePosition=0,a.info("Rotated bounded tmux pane mirror",{sessionName:r,priorBytes:l,maxBytes:this.maxPaneFileBytes}),this.started&&this.lifecycleGeneration===n&&this.pipeFilePath===e&&this.sessionName===r)try{await this.enablePipePane(),this.pipeEnabled=!0}catch(d){this.pipeEnabled=!1,a.error("Tmux pane mirror remains disabled after re-enable failure",{error:d}),this.emit("observer-error",d),this.clearPolling()}p&&this.queuePromptInspection(p,n),this.pipeEnabled&&this.queueCurrentSnapshotInspection(n)}}retainedPathMatchesIdentity(e,i,s){try{let r=g.lstatSync(e);return(s==="file"?r.isFile():r.isDirectory())&&!r.isSymbolicLink()&&(typeof process.getuid!="function"||r.uid===process.getuid())&&this.identitiesEqual(i,this.identityOf(r))}catch{return!1}}readRetainedWriterState(e,i){let s=null;try{s=g.openSync(e,g.constants.O_RDONLY|(g.constants.O_NOFOLLOW??0));let r=g.fstatSync(s);if(!r.isFile()||typeof process.getuid=="function"&&r.uid!==process.getuid()||!this.identitiesEqual(i,this.identityOf(r))||r.size>512)return null;let n=Buffer.alloc(r.size),l=r.size===0?0:g.readSync(s,n,0,r.size,0);return n.subarray(0,l).toString("utf8").trim()}catch{return null}finally{if(s!==null)try{g.closeSync(s)}catch{}}}reapOwnedRetainedMirror(e){if(!this.retainedPathMatchesIdentity(e.dirPath,e.dirIdentity,"directory"))return!1;let i;try{i=g.readdirSync(e.dirPath).sort()}catch{return!1}if(i.length!==2||i[0]!=="pane.log"||i[1]!==W||!this.retainedPathMatchesIdentity(e.panePath,e.paneIdentity,"file")||!this.retainedPathMatchesIdentity(e.statePath,e.stateIdentity,"file"))return!1;let s=new RegExp(`^done ${e.writerGeneration} \\d+ \\d+$`);if(!s.test(this.readRetainedWriterState(e.statePath,e.stateIdentity)??""))return!1;let r=this.quarantineIfIdentityMatches(e.dirPath,e.dirIdentity);if(!r)return!1;let n=!1;try{let l=M.join(r,"pane.log"),p=M.join(r,W);if(!this.retainedPathMatchesIdentity(l,e.paneIdentity,"file"))throw new Error("pane identity changed");if(!this.retainedPathMatchesIdentity(p,e.stateIdentity,"file"))throw new Error("state identity changed");if(!s.test(this.readRetainedWriterState(p,e.stateIdentity)??""))throw new Error("writer generation is no longer done");if(this.unlinkOwnedFile(l,e.paneIdentity),this.unlinkOwnedFile(p,e.stateIdentity),g.existsSync(l)||g.existsSync(p))throw new Error("retained mirror unlink was incomplete");g.rmdirSync(r),n=!0,a.info("Removed completed same-owner tmux pane mirror",{retainedDir:e.dirPath})}catch{g.existsSync(r)&&this.restoreQuarantine(r,e.dirPath)}return n}reapOwnedRetainedMirrors(){this.retainedMirrors=this.retainedMirrors.filter(e=>!this.reapOwnedRetainedMirror(e))}cleanupStalePipeFiles(){let e=Date.now()-this.stalePaneRetentionMs,i;try{i=g.readdirSync(this.tempDir,{withFileTypes:!0})}catch{return}for(let s of i){let r=/^codevibe-codex-pane-(\d+)\.log$/.exec(s.name);if(r){let d=M.join(this.tempDir,s.name),c=null;try{let u=g.lstatSync(d);if(!u.isFile()||u.isSymbolicLink()||u.mtimeMs>e||typeof process.getuid=="function"&&u.uid!==process.getuid()||this.isProcessAlive(Number(r[1]))||(c=this.quarantineIfIdentityMatches(d,this.identityOf(u)),!c))continue;g.unlinkSync(c),c=null,a.info("Removed stale legacy tmux pane mirror",{candidate:d,ageMs:Date.now()-u.mtimeMs})}catch{c&&this.restoreQuarantine(c,d)}continue}let n=/^codevibe-codex-pane-(\d+)-[A-Za-z0-9_-]+$/.exec(s.name);if(!n||!s.isDirectory())continue;let l=M.join(this.tempDir,s.name),p=null;try{let d=g.lstatSync(l);if(!d.isDirectory()||d.isSymbolicLink()||d.mtimeMs>e||typeof process.getuid=="function"&&d.uid!==process.getuid())continue;let c=Number(n[1]);if(this.isProcessAlive(c)||(p=this.quarantineIfIdentityMatches(l,this.identityOf(d)),!p))continue;let u=M.join(p,"pane.log"),f=M.join(p,W),y=g.readdirSync(p);if(y.some(h=>h!=="pane.log"&&h!==W)){this.restoreQuarantine(p,l);continue}for(let h of y.map(v=>M.join(p,v))){let v=g.lstatSync(h);if(!v.isFile()||v.isSymbolicLink()||typeof process.getuid=="function"&&v.uid!==process.getuid()){this.restoreQuarantine(p,l),p=null;break}}if(!p)continue;if(y.includes(W)){let h=g.readFileSync(f,"utf8").trim(),v=/^ready [a-f0-9]{32} (\d+)$/.exec(h);if(!(h==="idle"||/^done [a-f0-9]{32} \d+ \d+$/.test(h)||!!v)||v&&this.isProcessAlive(Number(v[1]))){this.restoreQuarantine(p,l);continue}}y.includes("pane.log")&&g.unlinkSync(u),y.includes(W)&&g.unlinkSync(f),g.rmdirSync(p),p=null,a.info("Removed stale tmux pane mirror directory",{candidate:l,ageMs:Date.now()-d.mtimeMs})}catch{p&&this.restoreQuarantine(p,l)}}}isProcessAlive(e){try{return process.kill(e,0),!0}catch(i){return i?.code==="EPERM"}}readAppendedChunk(){if(!this.pipeFilePath||this.pipeFileFd===null||!this.pipeFileIdentity)return"";if(!this.pathMatchesMirrorIdentity())throw new Error("Tmux pane mirror path was replaced");let e=g.fstatSync(this.pipeFileFd);if(!this.identitiesEqual(this.pipeFileIdentity,this.identityOf(e)))throw new Error("Tmux pane mirror descriptor identity changed");if(e.size<=this.filePosition)return"";{let s=e.size-this.filePosition>st?e.size-st:this.filePosition,r=e.size-s,n=Buffer.alloc(r),l=0;for(;l<r;){let p=g.readSync(this.pipeFileFd,n,l,r-l,s+l);if(p===0)break;l+=p}return this.filePosition=s+l,n.subarray(0,l).toString("utf-8")}}looksLikePromptDelta(e){return/Would you like to run/i.test(e)||/Press enter to confirm/i.test(e)||/\besc to cancel\b/i.test(e)||/\bYes,\s+proceed\b/i.test(e)||/\bNo,\s+and tell Codex\b/i.test(e)||/don't ask again/i.test(e)||/Requesting permission for:|Do you want to proceed\?/i.test(e)||/\[(?:y\/n|Y\/n|y\/N)\]|\b(?:apply|approve|allow|reject|deny|continue)\b/i.test(e)}looksLikePromptSnapshot(e){return this.extractActiveApprovalBlock(e)!==null}extractActiveApprovalBlock(e){let s=e.replace(/\x1B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~])/g,"").split(`
-`).map(h=>h.replace(/\s+$/,"")),r=h=>h.trim().length>0,n=h=>{let v=h.trim();return/^(?:[>›❯]\s*)?press enter to confirm(?: or esc to cancel)?$/i.test(v)||/^(?:[>›❯]\s*)?(?:press )?esc to cancel$/i.test(v)},l=h=>/Would you like to |Do you want to |The model would like to |Allow .+ to run|Requesting permission for:/i.test(h),p=h=>/^[>›❯\s]*[1-9][.)]\s+\S/.test(h),d=h=>/\[(?:y\/n|Y\/n|y\/N)\]/i.test(h),c=h=>{let v=new Set;for(let P of h)p(P)&&(/\bYes,\s+proceed\b/i.test(P)&&v.add("proceed"),/\bNo,\s+and tell Codex\b/i.test(P)&&v.add("reject"),/don't ask again/i.test(P)&&v.add("dont-ask"));return v.size},u=h=>p(h)&&(/\bYes,\s+proceed\b/i.test(h)||/\bNo,\s+and tell Codex\b/i.test(h)||/don't ask again/i.test(h)),f=-1;for(let h=s.length-1;h>=0;h--)if(r(s[h])){f=h;break}if(f===-1)return null;if(d(s[f])){let h=f;for(let v=f-1;v>=0&&f-v<=8&&!(!r(s[v])||n(s[v])||p(s[v]));v--)h=v;return s.slice(h,f+1).join(`
+`)}}function Zt(o){if(!o)return null;let t=o.match(/\*\*\* (?:Update|Add|Delete) File: (.+)/);return t?{filePath:t[1].trim()}:null}function le(o){if(o==null)return"";if(typeof o=="string")return o;if(Array.isArray(o))return o.map(t=>typeof t?.text=="string"?t.text:t?.type==="input_image"||typeof t?.image_url=="string"?"[image]":JSON.stringify(t??null)).join(`
+`);if(typeof o=="object"&&typeof o.text=="string")return o.text;try{return JSON.stringify(o)??""}catch{return String(o)}}function xe(o,t){return typeof o!="string"?xe(le(o),t):o?o.length<=t?o:o.substring(0,t)+"...":""}function Ce(){z.clear(),j()}var T=require("@quantiya/codevibe-core"),Ze=3e3,ei=8,ti=10,ii=100;function et(o){let t=Buffer.byteLength(o.carryover);return{status:"partial",progressKey:`${o.fileIdentity.dev}:${o.fileIdentity.ino}:${o.size}:${o.endOfComplete}:${t}`,size:o.size,carryoverBytes:t,endOfComplete:o.endOfComplete}}var si="tool_activity",X=class{constructor(t){this.consolidator=null;this.ledger=null;this.sessionMap=null;this.ownership=null;this.cursor=null;this.backendSessionId=null;this.rolloutId=null;this.transcriptPath=null;this.backstopTimer=null;this.backstopInFlight=null;this.cursorReady=Promise.resolve();this.cursorRepaired=!1;this.deps=t}static mintBackendSessionId(){return T.ToolActivitySessionMap.mintCodexBackendSessionId()}async recordedBackendSessionId(t){return new T.ToolActivitySessionMap({agent:"codex",logger:this.deps.logger,lock:new T.InProcessRolloutLock,root:this.deps.root}).ownerBackendSessionId(t)}get sessionId(){return this.backendSessionId}get rollout(){return this.rolloutId}isActive(){return this.consolidator!==null}async start(t,e,i){this.backendSessionId=t,this.rolloutId=e;let s=(0,T.createRolloutLock)({agent:"codex",logger:this.deps.logger,socketDir:this.deps.socketDir,root:this.deps.root});this.sessionMap=new T.ToolActivitySessionMap({agent:"codex",logger:this.deps.logger,lock:s,root:this.deps.root}),this.ownership=await this.sessionMap.claimOwnership(e,t);let r=new T.ToolActivityOutbox({agent:"codex",logger:this.deps.logger,root:this.deps.root});this.ledger=new T.ToolActivityLedger({agent:"codex",sessionId:t,logger:this.deps.logger,root:this.deps.root}),this.consolidator=new T.ToolActivityConsolidator({agent:"codex",sessionId:t,logger:this.deps.logger,outbox:r,ledger:this.ledger,transport:this.buildTransport()}),await this.consolidator.init(),i&&this.bindTranscript(i),this.deps.logger.info("[tool-activity] codex consolidator started",{sessionId:t,rollout:e,hasTranscript:!!i})}bindTranscript(t){if(!this.consolidator||!t||this.transcriptPath===t)return;this.transcriptPath=t;let e=new T.ToolReplayCursor({agent:"codex",sessionId:this.backendSessionId,canonicalPath:t,logger:this.deps.logger,root:this.deps.root,readBytes:this.deps.replayReadBytes,maxFrameBytes:this.deps.replayMaxFrameBytes});this.cursor=e,this.cursorRepaired=!1,this.cursorReady=e.load().catch(s=>this.deps.logger.warn("[tool-activity] codex cursor load failed (rescanning fresh)",{sessionId:this.backendSessionId,err:String(s)}));let i=this.deps.backstopIntervalMs??3e3;i>0&&!this.backstopTimer&&(this.backstopTimer=setInterval(()=>{this.runTranscriptBackstop().catch(s=>this.deps.logger.warn("[tool-activity] codex transcript backstop failed",{sessionId:this.backendSessionId,err:String(s)}))},i),this.backstopTimer.unref?.())}async observeCall(t,e){if(!this.consolidator||!this.sessionMap||!this.ownership||!t.callId||!t.toolName)return;let i=this.consolidator;await this.sessionMap.bindCall(this.ownership,t.callId);let s={id:t.callId,tool:t.toolName,normalizedTarget:ai(t.toolName,t.toolInput),ts:t.ts??new Date().toISOString(),byteOffset:t.byteOffset??0,...t.toolInput!==void 0?{digest:(0,T.digestOf)(t.toolInput)}:{}},r=await i.observe(s,e);return r==="closed"?await i.captureTerminal(s,this.deps.shutdownDrainMs??Ze)?"sealed-terminal":"closed":r}async runTranscriptBackstop(t=!1){await this.runTranscriptBackstopTurn(t)}runTranscriptBackstopTurn(t=!1){if(this.backstopInFlight)return this.backstopInFlight;let e=this.cursor,i=this.cursorReady,s=this.consolidator;if(!s||!e)return Promise.resolve("caught-up");let n=(async()=>{if(await i,this.cursor!==e)return"more";if(!this.cursorRepaired){if(await s.repairLostWindows(e),this.cursor!==e)return"more";this.cursorRepaired=!0}return this.doTranscriptBackstop(e,t)})().finally(()=>{this.backstopInFlight===n&&(this.backstopInFlight=null)});return this.backstopInFlight=n,n}async doTranscriptBackstop(t,e=!1){let i=this.consolidator;if(!i)return"caught-up";this.ledger&&await this.ledger.reloadLegacyOwned();for(let s=0;s<ei;s+=1){if(this.cursor!==t)return"caught-up";let r=await t.readFrames();if(r.missing)return"caught-up";if(r.frames.length===0)return r.carryover.length>0?et(r):"caught-up";let n=Number.POSITIVE_INFINITY,l=e?{includeInFlight:!0}:void 0;for(let p of r.frames)for(let d of ri(p.line,p.startOffset))await this.observeCall(d,l)==="deferred-in-flight"&&(n=Math.min(n,p.startOffset));if(await i.flush(),n<r.endOfComplete)return await t.checkpoint(n,{fileIdentity:r.fileIdentity,size:r.size,carryover:""}),"more";if(await t.checkpoint(r.endOfComplete,{fileIdentity:r.fileIdentity,size:r.size,carryover:r.carryover}),!r.hasMore)return r.carryover.length>0?et(r):"caught-up"}return"more"}async flush(){await this.consolidator?.flush()}async stop(){this.backstopTimer&&(clearInterval(this.backstopTimer),this.backstopTimer=null),await this.runTranscriptBackstop().catch(()=>{});let t=Math.max(1,Math.trunc(this.deps.shutdownPartialNoProgressTurns??ii)),e=null,i=0;for(;;){let s=await this.runTranscriptBackstopTurn(!0);if(s==="caught-up")break;if(typeof s!="string"){if(s.progressKey===e?i+=1:(e=s.progressKey,i=1),i>=t){this.deps.logger.warn("[tool-activity] deferring unchanged incomplete rollout suffix during shutdown; the next owner will re-read it from the durable complete-line boundary",{size:s.size,carryoverBytes:s.carryoverBytes,endOfComplete:s.endOfComplete,unchangedTurns:i});break}await new Promise(r=>setTimeout(r,ti))}else e=null,i=0,await new Promise(r=>setImmediate(r))}await this.consolidator?.drainSends(this.deps.shutdownDrainMs??Ze).catch(()=>{});try{await this.consolidator?.shutdown()}finally{await this.ownership?.release().catch(()=>{}),this.ownership=null,this.consolidator=null,this.ledger=null,this.sessionMap=null,this.cursor=null}}buildTransport(){let t=async(e,i,s)=>{let r=s?s.sessionKey:this.deps.getSessionKey();if(!r)throw new Error("[tool-activity] no session key at send (retryable)");let n=s?s.sessionKeyGen:this.deps.getSessionKeyGen();await this.deps.createEvent({sessionId:e,type:T.EventType.TOOL_ACTIVITY,source:T.EventSource.DESKTOP,content:this.deps.encryptContent(si,r),metadata:{encrypted:this.deps.encryptMetadata({manifest:i.manifest},r)},timestamp:i.windowStart,isEncrypted:!0,clientEventId:i.clientEventId,...n?{expectedSessionKeyGen:n}:{}})};return{send:async(e,i)=>{try{await t(e,i)}catch(s){if((0,T.isSessionKeyStaleError)(s)&&this.deps.refreshSessionKey){let r=await this.deps.refreshSessionKey(e);if(!r)throw s;await t(e,i,r);return}throw s}}}}};function ri(o,t){let e;try{e=JSON.parse(o)}catch{return[]}if(e?.type!=="response_item"||!e.payload)return[];let i=e.payload,s=typeof e.timestamp=="string"?e.timestamp:new Date(0).toISOString();if(i.type==="function_call"&&typeof i.call_id=="string"&&typeof i.name=="string"){let r;try{r=JSON.parse(i.arguments||"{}")}catch{r={raw:i.arguments}}return[{callId:i.call_id,toolName:ni(i.name),toolInput:r,ts:s,byteOffset:t}]}if(i.type==="custom_tool_call"&&typeof i.call_id=="string"){let r=oi(typeof i.input=="string"?i.input:""),n=r?{file_path:r,patch:i.input}:{patch:i.input};return[{callId:i.call_id,toolName:"Edit",toolInput:n,ts:s,byteOffset:t}]}return[]}function ni(o){return o==="shell"||o==="shell_command"||o==="local_shell"?"Bash":o==="apply_patch"?"Edit":o}function oi(o){let t=o.match(/^\*\*\* (?:Update|Add|Delete) File: (.+)$/m);return t?t[1].trim():void 0}function ai(o,t){if(!t||typeof t!="object")return;let e=t,i=r=>typeof r=="string"&&r.length>0?r:void 0,s=Array.isArray(e.command)?e.command.filter(r=>typeof r=="string").join(" ").trim().split(/\s+/)[0]:typeof e.command=="string"?e.command.trim().split(/\s+/)[0]:void 0;return i(e.file_path)??i(e.path)??i(e.pattern)??i(e.url)??(s&&s.length>0?s:void 0)}var tt=require("events"),it=require("@quantiya/codevibe-core");var pe=class o extends tt.EventEmitter{constructor(){super();this.pendingCalls=new Map;this.timers=new Map;this.timeoutMs=(0,it.getConfig)().codex.approvalTimeoutMs,a.info("Approval detector initialized",{timeoutMs:this.timeoutMs})}onToolCallStart(e,i,s){a.debug("Tool call started",{callId:e,name:i});let r=this.parseInput(s),n=this.extractFilePath(i,s,r),l=this.extractDiff(i,s,r),p={callId:e,name:i,input:s,filePath:n,diff:l,parsedInput:r,timestamp:Date.now(),notificationSent:!1};if(this.pendingCalls.set(e,p),!this.shouldScheduleApprovalTimeout(i,r)){a.debug("Skipping approval timeout for non-escalated tool call",{callId:e,name:i});return}let d=setTimeout(()=>{this.checkPendingCall(e)},this.timeoutMs);this.timers.set(e,d)}onToolCallComplete(e){a.debug("Tool call completed",{callId:e}),this.pendingCalls.delete(e);let i=this.timers.get(e);i&&(clearTimeout(i),this.timers.delete(e))}checkPendingCall(e){let i=this.pendingCalls.get(e);if(!i||i.notificationSent)return;let s=Date.now()-i.timestamp;a.info("Tool call still pending after timeout",{callId:e,name:i.name,elapsedMs:s}),i.notificationSent=!0,this.pendingCalls.set(e,i),this.emit("approval-pending",{callId:e,toolName:i.name,hint:this.extractHint(i.name,i.input,i.filePath),filePath:i.filePath,diff:i.diff,toolInput:i.parsedInput,rawInput:i.input,elapsedMs:s})}extractHint(e,i,s){if(s)return`File: ${s}`;if(e==="apply_patch"&&i){let r=i.match(/\*\*\* (?:Update|Add|Delete) File: (.+)/);if(r)return`File: ${r[1].trim()}`}if(o.SHELL_TOOL_NAMES.has(e))try{let r=JSON.parse(i),n=typeof r.command=="string"?r.command:typeof r.cmd=="string"?r.cmd:void 0;if(n)return`Command: ${n.substring(0,50)}${n.length>50?"...":""}`}catch{}return`Tool: ${this.mapToolName(e)}`}mapToolName(e){return{exec_command:"Bash",shell_command:"Bash",shell:"Bash",exec:"Bash",local_shell:"Bash",apply_patch:"File Edit",write_file:"Write File",read_file:"Read File"}[e]||e}parseInput(e){if(e)try{return JSON.parse(e)}catch{return}}static{this.SHELL_TOOL_NAMES=new Set(["exec_command","shell_command","shell","exec","local_shell"])}shouldScheduleApprovalTimeout(e,i){return o.SHELL_TOOL_NAMES.has(e)?i?.sandbox_permissions==="require_escalated":!1}extractFilePath(e,i,s){if(e==="apply_patch"&&i){let n=i.match(/\*\*\* (?:Update|Add|Delete) File: (.+)/);if(n)return n[1].trim()}let r=s?.file_path||s?.path||s?.filePath;if(r&&typeof r=="string")return r}extractDiff(e,i,s){if(e==="apply_patch"&&i)return i;if(s?.diff&&typeof s.diff=="string")return s.diff}getPendingCalls(){return Array.from(this.pendingCalls.values())}hasPendingCalls(){return this.pendingCalls.size>0}clear(){for(let e of this.timers.values())clearTimeout(e);this.timers.clear(),this.pendingCalls.clear(),a.debug("Approval detector cleared")}shutdown(){this.clear(),this.removeAllListeners(),a.info("Approval detector shutdown")}};var st=require("child_process"),rt=require("util");var Oe=(0,rt.promisify)(st.exec),Y="__CODEVIBE_CODEX_KEY_ESCAPE__",de=class{async sendLiteral(t,e){return this.sendTerminalOperation(t,async i=>{await this.sendLiteralViaTmux(i,e)})}async sendKey(t,e){return this.sendTerminalOperation(t,async i=>{await this.sendKeyViaTmux(i,e)})}async sendInput(t,e){a.info("Attempting to send input to Codex",{sessionId:t,input:e});try{let i=process.env.CODEVIBE_CODEX_TMUX_SESSION;return i?(a.info("Using tmux send-keys",{tmuxSession:i}),e===Y?await this.sendKeyViaTmux(i,"Escape"):await this.sendViaTmux(i,e),a.info("Successfully sent input to Codex",{sessionId:t,input:e}),!0):(a.error("No tmux session found - CodeVibe Companion launch is required",{sessionId:t,hint:"Start Codex CLI using `codevibe --agent codex`"}),!1)}catch(i){return a.error("Failed to send input to Codex",{sessionId:t,error:i instanceof Error?i.message:String(i)}),!1}}async sendTerminalOperation(t,e){let i=process.env.CODEVIBE_CODEX_TMUX_SESSION;if(!i)return a.error("No tmux session found - CodeVibe Companion launch is required",{sessionId:t,hint:"Start Codex CLI using `codevibe --agent codex`"}),!1;try{return await e(i),!0}catch(s){return a.error("Failed to send terminal input to Codex",{sessionId:t,error:s instanceof Error?s.message:String(s)}),!1}}async sendViaTmux(t,e){a.info("Sending via tmux",{sessionName:t,inputLength:e.length});try{await this.sendLiteralViaTmux(t,e),await this.delay(500);let i=`tmux send-keys -t "${t}" Enter`;await Oe(i),a.info("tmux send-keys completed")}catch(i){throw a.error("tmux send-keys failed",{sessionName:t,error:i}),i}}async sendLiteralViaTmux(t,e){let i=e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`"),s=`tmux send-keys -t "${t}" -l "${i}"`;await Oe(s)}async sendKeyViaTmux(t,e){a.info("Sending special key via tmux",{sessionName:t,key:e});try{let i=`tmux send-keys -t "${t}" ${e}`;await Oe(i),a.info("tmux special-key send completed")}catch(i){throw a.error("tmux special-key send failed",{sessionName:t,key:e,error:i}),i}}delay(t){return new Promise(e=>setTimeout(e,t))}isApprovalResponse(t){let e=t.trim().toLowerCase();return["y","n","a","q","e","yes","no"].includes(e)||/^[0-9]+$/.test(e)}};var g=R(require("fs")),ue=R(require("os")),N=R(require("path")),Q=require("crypto"),ot=require("child_process"),at=require("events"),lt=require("util");var se=require("@quantiya/codevibe-core"),Ae=(0,lt.promisify)(ot.execFile),nt=512*1024,W="writer.state",li=2e3,pi=10,di=16*1024*1024,ci=10080*60*1e3,ce=class extends at.EventEmitter{constructor(e={}){super();this.sessionName=null;this.started=!1;this.pipeDirPath=null;this.pipeDirIdentity=null;this.pipeFilePath=null;this.pipeFileFd=null;this.pipeFileIdentity=null;this.writerStatePath=null;this.writerStateFd=null;this.writerStateIdentity=null;this.writerGeneration=null;this.pipeEnabled=!1;this.filePosition=0;this.pollTimer=null;this.processing=!1;this.pendingRead=!1;this.promptInspectionChain=Promise.resolve();this.lastPromptHash=null;this.lastPromptWasMenu=!1;this.lifecycleGeneration=0;this.retainedMirrors=[];this.retainedMirrorContainmentLost=!1;this.maxPaneFileBytes=e.maxPaneFileBytes??di,this.stalePaneRetentionMs=e.stalePaneRetentionMs??ci,this.tempDir=e.tempDir??ue.tmpdir(),this.writerPath=N.resolve(__dirname,"..","libexec","pane-mirror-writer.js");let i=e.runtimePlatform??process.platform,s=e.runtimeRelease??ue.release();if(this.wslDetected=i==="linux"&&(/microsoft/i.test(s)||!!process.env.WSL_DISTRO_NAME||!!process.env.WSL_INTEROP),!Number.isSafeInteger(this.maxPaneFileBytes)||this.maxPaneFileBytes<=0)throw new RangeError("maxPaneFileBytes must be a positive safe integer");if(!Number.isSafeInteger(this.stalePaneRetentionMs)||this.stalePaneRetentionMs<0)throw new RangeError("stalePaneRetentionMs must be a non-negative safe integer")}async start(e){if(this.wslDetected)throw new Error("Tmux pane mirror fallback is disabled on unqualified WSL; using hook-based prompts only");if(this.started&&this.sessionName===e&&this.pipeEnabled){a.debug("Tmux pane observer already started",{sessionName:e});return}this.started&&await this.stop(),this.lifecycleGeneration++,this.sessionName=e,this.filePosition=0,this.lastPromptHash=null;try{if(this.cleanupStalePipeFiles(),this.reapOwnedRetainedMirrors(),this.retainedMirrorContainmentLost||this.retainedMirrors.length>0)throw new Error("Prior bounded tmux pane writer is still unconfirmed; refusing another mirror");this.createSecureMirror(),this.started=!0,await this.enablePipePane(),this.pipeEnabled=!0,this.startPolling()}catch(i){this.started=!1,this.lifecycleGeneration++;let s=this.writerGeneration===null;if(!s)try{await this.disablePipePane(),s=!0}catch(r){a.error("Failed to confirm tmux pane writer quiescence after startup failure",{disableError:r})}throw s&&(this.pipeEnabled=!1),this.clearPolling(),s?this.releaseSecureMirror():this.abandonSecureMirror(),this.resetLifecycleState(),i}a.info("Tmux pane observer started",{sessionName:e})}async stop(){if(!this.started&&this.pipeFileFd===null)return;this.started=!1,this.lifecycleGeneration++;let e=!1;try{await this.disablePipePane(),e=!0}catch(i){a.error("Failed to confirm tmux pane writer quiescence during stop",{error:i}),this.emit("observer-error",i)}e&&(this.pipeEnabled=!1),this.clearPolling(),e?this.releaseSecureMirror():this.abandonSecureMirror(),a.info("Tmux pane observer stopped",{sessionName:this.sessionName,writerQuiesced:e}),this.resetLifecycleState()}identityOf(e){return{dev:e.dev,ino:e.ino}}identitiesEqual(e,i){return e.dev===i.dev&&e.ino===i.ino}openMirrorFile(e){return g.openSync(e,g.constants.O_RDWR|g.constants.O_CREAT|g.constants.O_EXCL|(g.constants.O_NOFOLLOW??0),384)}truncateMirror(e){g.ftruncateSync(e,0)}createSecureMirror(){g.mkdirSync(this.tempDir,{recursive:!0,mode:448});let e=g.mkdtempSync(N.join(this.tempDir,`codevibe-codex-pane-${process.pid}-`));g.chmodSync(e,448);let i=N.join(e,"pane.log"),s=N.join(e,W),r=null,n=null;try{r=this.openMirrorFile(i),g.fchmodSync(r,384);let l=g.fstatSync(r);if(!l.isFile())throw new Error("Tmux pane mirror is not a regular file");n=this.openMirrorFile(s),g.fchmodSync(n,384);let p=g.fstatSync(n);if(!p.isFile())throw new Error("Tmux pane writer state is not a regular file");g.writeSync(n,Buffer.from(`idle
+`),0,5,0),this.pipeDirPath=e,this.pipeDirIdentity=this.identityOf(g.lstatSync(e)),this.pipeFilePath=i,this.pipeFileFd=r,this.pipeFileIdentity=this.identityOf(l),this.writerStatePath=s,this.writerStateFd=n,this.writerStateIdentity=this.identityOf(p),r=null,n=null}catch(l){if(r!==null)try{g.closeSync(r)}catch{}if(n!==null)try{g.closeSync(n)}catch{}try{g.unlinkSync(i)}catch{}try{g.unlinkSync(s)}catch{}try{g.rmdirSync(e)}catch{}throw l}}pathMatchesMirrorIdentity(){if(!this.pipeFilePath||!this.pipeFileIdentity)return!1;try{let e=g.lstatSync(this.pipeFilePath);return e.isFile()&&!e.isSymbolicLink()&&this.identitiesEqual(this.pipeFileIdentity,this.identityOf(e))}catch{return!1}}quarantineIfIdentityMatches(e,i){let s=`${e}.reap-${process.pid}-${(0,Q.randomBytes)(6).toString("hex")}`;try{g.renameSync(e,s);let r=g.lstatSync(s);return this.identitiesEqual(i,this.identityOf(r))?s:(g.existsSync(e)||g.renameSync(s,e),null)}catch{return null}}restoreQuarantine(e,i){try{g.existsSync(i)||g.renameSync(e,i)}catch{}}pathMatchesIdentity(e,i){if(!e||!i)return!1;try{let s=g.lstatSync(e);return s.isFile()&&!s.isSymbolicLink()&&this.identitiesEqual(i,this.identityOf(s))}catch{return!1}}closeOwnedDescriptors(){if(this.pipeFileFd!==null)try{g.closeSync(this.pipeFileFd)}catch{}if(this.writerStateFd!==null)try{g.closeSync(this.writerStateFd)}catch{}this.pipeFileFd=null,this.writerStateFd=null}unlinkOwnedFile(e,i){if(!e||!i||!this.pathMatchesIdentity(e,i))return;let s=this.quarantineIfIdentityMatches(e,i);s&&g.unlinkSync(s)}releaseSecureMirror(){let e=this.pipeFilePath,i=this.writerStatePath,s=this.pipeDirPath,r=this.pipeFileIdentity,n=this.writerStateIdentity;this.closeOwnedDescriptors();try{this.unlinkOwnedFile(e,r)}catch{}try{this.unlinkOwnedFile(i,n)}catch{}if(s)try{g.rmdirSync(s)}catch{}this.pipeDirPath=null,this.pipeDirIdentity=null,this.pipeFilePath=null,this.pipeFileIdentity=null,this.writerStatePath=null,this.writerStateIdentity=null,this.writerGeneration=null}abandonSecureMirror(){let e=this.pipeDirPath,i=this.pipeFilePath;e&&this.pipeDirIdentity&&i&&this.pipeFileIdentity&&this.writerStatePath&&this.writerStateIdentity&&this.writerGeneration?this.retainedMirrors.push({dirPath:e,dirIdentity:this.pipeDirIdentity,panePath:i,paneIdentity:this.pipeFileIdentity,statePath:this.writerStatePath,stateIdentity:this.writerStateIdentity,writerGeneration:this.writerGeneration}):(e||i)&&(this.retainedMirrorContainmentLost=!0),this.closeOwnedDescriptors(),a.warn("Retaining bounded tmux pane mirror because writer quiescence is unconfirmed",{retainedDir:e,retainedFile:i,maxBytes:this.maxPaneFileBytes}),this.pipeDirPath=null,this.pipeDirIdentity=null,this.pipeFilePath=null,this.pipeFileIdentity=null,this.writerStatePath=null,this.writerStateIdentity=null,this.writerGeneration=null}resetLifecycleState(){this.sessionName=null,this.pipeDirPath=null,this.pipeDirIdentity=null,this.pipeFilePath=null,this.pipeFileFd=null,this.pipeFileIdentity=null,this.writerStatePath=null,this.writerStateFd=null,this.writerStateIdentity=null,this.writerGeneration=null,this.pipeEnabled=!1,this.filePosition=0,this.processing=!1,this.pendingRead=!1,this.lastPromptHash=null}async failClosedPipe(e){let i=!1;try{await this.disablePipePane(),i=!0}catch(s){a.error("Failed to confirm unsafe tmux pane writer quiescence",{disableError:s})}i&&(this.pipeEnabled=!1),this.clearPolling(),a.error("Tmux pane mirror entered fail-closed containment after integrity/cap failure",{error:e,writerQuiesced:i,independentlyBounded:!0}),this.emit("observer-error",e)}resetLastPromptHash(){this.lastPromptHash=null}async captureSnapshot(e=120){if(!this.sessionName)throw new Error("Tmux pane observer is not started");let i=Math.max(1,Math.floor(e));try{let{stdout:s}=await Ae("tmux",["capture-pane","-p","-e","-J","-S",`-${i}`,"-t",this.sessionName],{timeout:5e3,maxBuffer:2097152});return s}catch(s){throw a.error("Failed to capture tmux pane snapshot",{sessionName:this.sessionName,error:s}),this.emit("observer-error",s),s}}quoteShellArg(e){return`'${e.replace(/'/g,"'\\''")}'`}writerStatePathMatchesIdentity(){return this.pathMatchesIdentity(this.writerStatePath,this.writerStateIdentity)}writeWriterState(e){if(this.writerStateFd===null||!this.writerStateIdentity||!this.writerStatePathMatchesIdentity())throw new Error("Tmux pane writer state identity is not valid");let i=g.fstatSync(this.writerStateFd);if(!this.identitiesEqual(this.writerStateIdentity,this.identityOf(i)))throw new Error("Tmux pane writer state descriptor identity changed");let s=Buffer.from(e,"utf8");g.ftruncateSync(this.writerStateFd,0);let r=0;for(;r<s.length;){let n=g.writeSync(this.writerStateFd,s,r,s.length-r,r);if(n<=0)throw new Error("Short tmux pane writer-state write");r+=n}g.fsyncSync(this.writerStateFd)}readWriterState(){if(this.writerStateFd===null||!this.writerStateIdentity||!this.writerStatePathMatchesIdentity())throw new Error("Tmux pane writer state identity is not valid");let e=g.fstatSync(this.writerStateFd);if(!this.identitiesEqual(this.writerStateIdentity,this.identityOf(e)))throw new Error("Tmux pane writer state descriptor identity changed");let i=Math.min(e.size,512);if(i===0)return"";let s=Buffer.alloc(i),r=g.readSync(this.writerStateFd,s,0,i,0);return s.subarray(0,r).toString("utf8").trim()}async waitForWriterState(e,i,s=li){let r=Date.now()+s;do{let n=this.readWriterState();if(i.some(l=>n.startsWith(`${l} ${e} `)))return n;if(Date.now()>=r)return null;await new Promise(l=>setTimeout(l,pi))}while(!0)}async enablePipePane(){if(!this.sessionName||!this.pipeFilePath||!this.writerStatePath)throw new Error("Tmux pane observer is not initialized");if(this.pipeFileFd===null||!this.pipeFileIdentity||!this.pathMatchesMirrorIdentity()||this.writerStateFd===null||!this.writerStateIdentity||!this.writerStatePathMatchesIdentity())throw new Error("Tmux pane mirror identity is not valid");let e=(0,Q.randomBytes)(16).toString("hex");this.writerGeneration=e,this.writeWriterState(`starting ${e}
+`);let i=[process.execPath,this.writerPath,this.pipeFilePath,String(this.pipeFileIdentity.dev),String(this.pipeFileIdentity.ino),this.writerStatePath,String(this.writerStateIdentity.dev),String(this.writerStateIdentity.ino),e,String(this.maxPaneFileBytes)].map(r=>this.quoteShellArg(r)).join(" ");try{await Ae("tmux",["pipe-pane","-O","-t",this.sessionName,i])}catch(r){throw this.writerGeneration=null,r}let s=await this.waitForWriterState(e,["ready","done"]);if(!s)throw new Error("Tmux pane writer did not confirm startup");if(s.startsWith(`done ${e} `))throw new Error("Tmux pane writer terminated during startup");a.debug("Enabled tmux pipe-pane mirroring",{sessionName:this.sessionName,pipeFilePath:this.pipeFilePath,writerGeneration:e})}async disablePipePane(){let e=this.writerGeneration;if(!this.sessionName||!e)return;let i=null;try{await Ae("tmux",["pipe-pane","-t",this.sessionName])}catch(n){i=n}if(!e){if(i)throw i;return}if(await this.waitForWriterState(e,["done"])){this.writerGeneration=null;return}let r=i instanceof Error?`: ${i.message}`:"";throw new Error(`Tmux pane writer quiescence was not confirmed${r}`)}startPolling(){this.clearPolling(),this.pollTimer=setInterval(()=>{this.processFileChanges()},100),this.pollTimer.unref?.()}clearPolling(){this.pollTimer&&clearInterval(this.pollTimer),this.pollTimer=null}async processFileChanges(){if(!(!this.started||!this.pipeFilePath)){if(this.processing){this.pendingRead=!0;return}this.processing=!0;try{do{this.pendingRead=!1;let e="";try{e=this.readAppendedChunk()}catch(i){a.error("Failed to read bounded tmux pane mirror",{error:i}),await this.failClosedPipe(i);return}await this.rotatePipeFileIfNeeded(),e&&this.queuePromptInspection(e,this.lifecycleGeneration)}while(this.pendingRead)}catch(e){a.error("Failed to process tmux pane changes",{error:e}),this.emit("observer-error",e)}finally{this.processing=!1}}}queuePromptInspection(e,i){this.promptInspectionChain=this.promptInspectionChain.then(async()=>{if(!(!this.started||this.lifecycleGeneration!==i))try{await this.inspectChunkForPrompt(e)}catch(s){a.error("Failed to inspect tmux pane delta",{error:s}),this.emit("observer-error",s)}})}async inspectChunkForPrompt(e){if(!this.lastPromptHash&&!this.looksLikePromptDelta(e))return;let i=await this.captureSnapshot();this.inspectSnapshotForPrompt(i,e)}inspectSnapshotForPrompt(e,i){let s=e?this.extractActivePromptBlock(e):null;if(!s){if(this.lastPromptHash){let n=this.lastPromptHash;this.lastPromptHash=null,this.lastPromptWasMenu=!1,this.emit("prompt-cleared",{promptHash:n})}e&&a.debug("tmux delta cue matched but no active dialog isolated (no candidate emitted)",{snapshotTail:e.split(`
+`).slice(-6).join("\\n")});return}let r=this.hashPromptSnapshot(s);r!==this.lastPromptHash&&(this.lastPromptHash&&(this.lastPromptWasMenu||(0,se.parseActiveTerminalMenu)(s))&&this.emit("prompt-cleared",{promptHash:this.lastPromptHash}),this.lastPromptHash=r,this.lastPromptWasMenu=!!(0,se.parseActiveTerminalMenu)(s),this.emit("prompt-candidate",{rawDelta:i,snapshot:s,promptHash:r,detectedAt:Date.now()}))}queueCurrentSnapshotInspection(e){this.promptInspectionChain=this.promptInspectionChain.then(async()=>{if(!(!this.started||this.lifecycleGeneration!==e))try{let i=await this.captureSnapshot();this.inspectSnapshotForPrompt(i,"")}catch(i){a.error("Failed to inspect tmux pane snapshot after rotation",{error:i}),this.emit("observer-error",i)}})}async rotatePipeFileIfNeeded(){let e=this.pipeFilePath,i=this.pipeFileFd,s=this.pipeFileIdentity,r=this.sessionName,n=this.lifecycleGeneration;if(!e||i===null||!s||!r||!this.started)return;let l;try{let d=g.fstatSync(i);if(!this.identitiesEqual(s,this.identityOf(d)))throw new Error("Tmux pane mirror descriptor identity changed");l=d.size}catch(d){await this.failClosedPipe(d);return}if(l<this.maxPaneFileBytes)return;let p="";try{await this.disablePipePane(),this.pipeEnabled=!1}catch(d){a.error("Tmux pane mirror rotation deferred because writer quiescence is unconfirmed",{error:d}),this.emit("observer-error",d),this.clearPolling();return}if(!(!this.started||this.lifecycleGeneration!==n||this.pipeFilePath!==e)){try{p=this.readAppendedChunk()}catch(d){a.error("Failed to drain final tmux pane suffix during rotation; mirror remains intact and disabled",{error:d}),this.emit("observer-error",d),this.clearPolling();return}try{this.truncateMirror(i);let d=g.fstatSync(i);if(!this.identitiesEqual(s,this.identityOf(d))||d.size!==0)throw new Error("Tmux pane mirror truncation could not be verified");if(!this.pathMatchesMirrorIdentity())throw new Error("Tmux pane mirror path was replaced during rotation")}catch(d){a.error("Tmux pane mirror remains disabled after truncation verification failure",{error:d}),this.emit("observer-error",d),this.clearPolling();return}if(this.filePosition=0,a.info("Rotated bounded tmux pane mirror",{sessionName:r,priorBytes:l,maxBytes:this.maxPaneFileBytes}),this.started&&this.lifecycleGeneration===n&&this.pipeFilePath===e&&this.sessionName===r)try{await this.enablePipePane(),this.pipeEnabled=!0}catch(d){this.pipeEnabled=!1,a.error("Tmux pane mirror remains disabled after re-enable failure",{error:d}),this.emit("observer-error",d),this.clearPolling()}p&&this.queuePromptInspection(p,n),this.pipeEnabled&&this.queueCurrentSnapshotInspection(n)}}retainedPathMatchesIdentity(e,i,s){try{let r=g.lstatSync(e);return(s==="file"?r.isFile():r.isDirectory())&&!r.isSymbolicLink()&&(typeof process.getuid!="function"||r.uid===process.getuid())&&this.identitiesEqual(i,this.identityOf(r))}catch{return!1}}readRetainedWriterState(e,i){let s=null;try{s=g.openSync(e,g.constants.O_RDONLY|(g.constants.O_NOFOLLOW??0));let r=g.fstatSync(s);if(!r.isFile()||typeof process.getuid=="function"&&r.uid!==process.getuid()||!this.identitiesEqual(i,this.identityOf(r))||r.size>512)return null;let n=Buffer.alloc(r.size),l=r.size===0?0:g.readSync(s,n,0,r.size,0);return n.subarray(0,l).toString("utf8").trim()}catch{return null}finally{if(s!==null)try{g.closeSync(s)}catch{}}}reapOwnedRetainedMirror(e){if(!this.retainedPathMatchesIdentity(e.dirPath,e.dirIdentity,"directory"))return!1;let i;try{i=g.readdirSync(e.dirPath).sort()}catch{return!1}if(i.length!==2||i[0]!=="pane.log"||i[1]!==W||!this.retainedPathMatchesIdentity(e.panePath,e.paneIdentity,"file")||!this.retainedPathMatchesIdentity(e.statePath,e.stateIdentity,"file"))return!1;let s=new RegExp(`^done ${e.writerGeneration} \\d+ \\d+$`);if(!s.test(this.readRetainedWriterState(e.statePath,e.stateIdentity)??""))return!1;let r=this.quarantineIfIdentityMatches(e.dirPath,e.dirIdentity);if(!r)return!1;let n=!1;try{let l=N.join(r,"pane.log"),p=N.join(r,W);if(!this.retainedPathMatchesIdentity(l,e.paneIdentity,"file"))throw new Error("pane identity changed");if(!this.retainedPathMatchesIdentity(p,e.stateIdentity,"file"))throw new Error("state identity changed");if(!s.test(this.readRetainedWriterState(p,e.stateIdentity)??""))throw new Error("writer generation is no longer done");if(this.unlinkOwnedFile(l,e.paneIdentity),this.unlinkOwnedFile(p,e.stateIdentity),g.existsSync(l)||g.existsSync(p))throw new Error("retained mirror unlink was incomplete");g.rmdirSync(r),n=!0,a.info("Removed completed same-owner tmux pane mirror",{retainedDir:e.dirPath})}catch{g.existsSync(r)&&this.restoreQuarantine(r,e.dirPath)}return n}reapOwnedRetainedMirrors(){this.retainedMirrors=this.retainedMirrors.filter(e=>!this.reapOwnedRetainedMirror(e))}cleanupStalePipeFiles(){let e=Date.now()-this.stalePaneRetentionMs,i;try{i=g.readdirSync(this.tempDir,{withFileTypes:!0})}catch{return}for(let s of i){let r=/^codevibe-codex-pane-(\d+)\.log$/.exec(s.name);if(r){let d=N.join(this.tempDir,s.name),u=null;try{let c=g.lstatSync(d);if(!c.isFile()||c.isSymbolicLink()||c.mtimeMs>e||typeof process.getuid=="function"&&c.uid!==process.getuid()||this.isProcessAlive(Number(r[1]))||(u=this.quarantineIfIdentityMatches(d,this.identityOf(c)),!u))continue;g.unlinkSync(u),u=null,a.info("Removed stale legacy tmux pane mirror",{candidate:d,ageMs:Date.now()-c.mtimeMs})}catch{u&&this.restoreQuarantine(u,d)}continue}let n=/^codevibe-codex-pane-(\d+)-[A-Za-z0-9_-]+$/.exec(s.name);if(!n||!s.isDirectory())continue;let l=N.join(this.tempDir,s.name),p=null;try{let d=g.lstatSync(l);if(!d.isDirectory()||d.isSymbolicLink()||d.mtimeMs>e||typeof process.getuid=="function"&&d.uid!==process.getuid())continue;let u=Number(n[1]);if(this.isProcessAlive(u)||(p=this.quarantineIfIdentityMatches(l,this.identityOf(d)),!p))continue;let c=N.join(p,"pane.log"),f=N.join(p,W),y=g.readdirSync(p);if(y.some(h=>h!=="pane.log"&&h!==W)){this.restoreQuarantine(p,l);continue}for(let h of y.map(v=>N.join(p,v))){let v=g.lstatSync(h);if(!v.isFile()||v.isSymbolicLink()||typeof process.getuid=="function"&&v.uid!==process.getuid()){this.restoreQuarantine(p,l),p=null;break}}if(!p)continue;if(y.includes(W)){let h=g.readFileSync(f,"utf8").trim(),v=/^ready [a-f0-9]{32} (\d+)$/.exec(h);if(!(h==="idle"||/^done [a-f0-9]{32} \d+ \d+$/.test(h)||!!v)||v&&this.isProcessAlive(Number(v[1]))){this.restoreQuarantine(p,l);continue}}y.includes("pane.log")&&g.unlinkSync(c),y.includes(W)&&g.unlinkSync(f),g.rmdirSync(p),p=null,a.info("Removed stale tmux pane mirror directory",{candidate:l,ageMs:Date.now()-d.mtimeMs})}catch{p&&this.restoreQuarantine(p,l)}}}isProcessAlive(e){try{return process.kill(e,0),!0}catch(i){return i?.code==="EPERM"}}readAppendedChunk(){if(!this.pipeFilePath||this.pipeFileFd===null||!this.pipeFileIdentity)return"";if(!this.pathMatchesMirrorIdentity())throw new Error("Tmux pane mirror path was replaced");let e=g.fstatSync(this.pipeFileFd);if(!this.identitiesEqual(this.pipeFileIdentity,this.identityOf(e)))throw new Error("Tmux pane mirror descriptor identity changed");if(e.size<=this.filePosition)return"";{let s=e.size-this.filePosition>nt?e.size-nt:this.filePosition,r=e.size-s,n=Buffer.alloc(r),l=0;for(;l<r;){let p=g.readSync(this.pipeFileFd,n,l,r-l,s+l);if(p===0)break;l+=p}return this.filePosition=s+l,n.subarray(0,l).toString("utf-8")}}looksLikePromptDelta(e){return/Would you like to run/i.test(e)||/[›❯▸▶]\s*[1-9]\d?\.\s/.test(e)||/\x1b\[[0-9;]*m[^\n]{0,80}[1-9]\d?\.\s/.test(e)||/Press enter to confirm/i.test(e)||/\besc to cancel\b/i.test(e)||/\bYes,\s+proceed\b/i.test(e)||/\bNo,\s+and tell Codex\b/i.test(e)||/don't ask again/i.test(e)||/Requesting permission for:|Do you want to proceed\?/i.test(e)||/\[(?:y\/n|Y\/n|y\/N)\]|\b(?:apply|approve|allow|reject|deny|continue)\b/i.test(e)}looksLikePromptSnapshot(e){return this.extractActivePromptBlock(e)!==null}extractActivePromptBlock(e){return this.extractActiveApprovalBlock(e)??(0,se.parseActiveTerminalMenu)(e)?.snapshot??null}extractActiveApprovalBlock(e){let s=e.replace(/\x1B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~])/g,"").split(`
+`).map(h=>h.replace(/\s+$/,"")),r=h=>h.trim().length>0,n=h=>{let v=h.trim();return/^(?:[>›❯]\s*)?press enter to confirm(?: or esc to cancel)?$/i.test(v)||/^(?:[>›❯]\s*)?(?:press )?esc to cancel$/i.test(v)},l=h=>/Would you like to |Do you want to |The model would like to |Allow .+ to run|Requesting permission for:/i.test(h),p=h=>/^[>›❯\s]*[1-9][.)]\s+\S/.test(h),d=h=>/\[(?:y\/n|Y\/n|y\/N)\]/i.test(h),u=h=>{let v=new Set;for(let P of h)p(P)&&(/\bYes,\s+proceed\b/i.test(P)&&v.add("proceed"),/\bNo,\s+and tell Codex\b/i.test(P)&&v.add("reject"),/don't ask again/i.test(P)&&v.add("dont-ask"));return v.size},c=h=>p(h)&&(/\bYes,\s+proceed\b/i.test(h)||/\bNo,\s+and tell Codex\b/i.test(h)||/don't ask again/i.test(h)),f=-1;for(let h=s.length-1;h>=0;h--)if(r(s[h])){f=h;break}if(f===-1)return null;if(d(s[f])){let h=f;for(let v=f-1;v>=0&&f-v<=8&&!(!r(s[v])||n(s[v])||p(s[v]));v--)h=v;return s.slice(h,f+1).join(`
 `)}let y=-1;for(let h=s.length-1;h>=0;h--)if(n(s[h])){y=h;break}if(y===f){let h=-1;for(let P=y-1;P>=0&&!n(s[P]);P--)if(l(s[P])){h=P;break}if(h===-1)return null;let v=s.slice(h,y+1);return v.some(p)?v.join(`
-`):null}if(u(s[f])){let h=-1;for(let S=f-1;S>=0;S--){if(n(s[S]))return null;if(l(s[S])){h=S;break}}if(h===-1)return null;let v=S=>{let b=S.match(/^[>›❯\s]*([1-9])[.)]\s/);return b?parseInt(b[1],10):null},P=[],E=Number.POSITIVE_INFINITY;for(let S=f;S>h&&p(s[S]);S--){let b=v(s[S]);if(b===null||b>=E)break;P.push(s[S]),E=b}return c(P)<2?null:s.slice(h,f+1).join(`
-`)}return null}hashPromptSnapshot(e){let i=e.replace(/\x1B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~])/g,"").replace(/\r/g,`
+`):null}if(c(s[f])){let h=-1;for(let S=f-1;S>=0;S--){if(n(s[S]))return null;if(l(s[S])){h=S;break}}if(h===-1)return null;let v=S=>{let b=S.match(/^[>›❯\s]*([1-9])[.)]\s/);return b?parseInt(b[1],10):null},P=[],E=Number.POSITIVE_INFINITY;for(let S=f;S>h&&p(s[S]);S--){let b=v(s[S]);if(b===null||b>=E)break;P.push(s[S]),E=b}return u(P)<2?null:s.slice(h,f+1).join(`
+`)}return null}hashPromptSnapshot(e){let i=(0,se.parseActiveTerminalMenu)(e);if(i)return(0,Q.createHash)("sha256").update(i.identity).digest("hex");let s=e.replace(/\x1B(?:[@-Z\\-_]|\[[0-?]*[ -/]*[@-~])/g,"").replace(/\r/g,`
 `).replace(/[ \t]+\n/g,`
-`).trim();return(0,te.createHash)("sha256").update(i).digest("hex")}};var B=require("@quantiya/codevibe-core");var Oe=R(require("express")),U=R(require("fs")),at=R(require("path")),lt=R(require("os"));var di=1800*1e3,ci=60*1e3,ui=1440*60*1e3;var ce=class{constructor(){this.assignedPort=0;this.portRefreshTimer=null;this.app=(0,Oe.default)(),this.setupMiddleware(),this.setupRoutes(),this.tmuxSession=process.env.CODEVIBE_CODEX_TMUX_SESSION}getPort(){return this.assignedPort}setupMiddleware(){this.app.use(Oe.default.json({limit:"1mb"})),this.app.use((t,e,i)=>{a.debug(`${t.method} ${t.path}`,{body:t.body}),i()})}setupRoutes(){this.app.get("/health",(t,e)=>{e.json({success:!0,service:"codevibe-codex",pid:process.pid,data:{status:"healthy",uptime:process.uptime()}})}),this.app.post("/event",this.handleEvent.bind(this))}async handleEvent(t,e){try{let i=t.body;if(!i.session_id||!i.hook_event_name){e.status(400).json({success:!1,error:"Missing session_id or hook_event_name"});return}let s=this.transformHookToEvent(i);if(a.info("Received hook event",{sessionId:i.session_id,hookEvent:i.hook_event_name,type:s.type}),this.eventHandler){let r=this.eventHandler(s);if(i.hook_event_name==="PermissionRequest"){r.catch(n=>{a.error("Error resolving PermissionRequest after acknowledgement:",n)}),e.json({success:!0});return}await r}e.json({success:!0})}catch(i){a.error("Error handling event:",i),e.status(500).json({success:!1,error:i instanceof Error?i.message:"Unknown error"})}}transformHookToEvent(t){let e={cwd:t.cwd,hook_event_name:t.hook_event_name,transcript_path:t.transcript_path,...t.metadata||{}},i,s;switch(t.hook_event_name){case"SessionStart":i="NOTIFICATION",s="Session started",e.source=t.source,e.model=t.model;break;case"UserPromptSubmit":i="USER_PROMPT",s=t.prompt||"";break;case"PreToolUse":i="NOTIFICATION",s="PreToolUse observed",e.tool_name=t.tool_name,e.tool_input=t.tool_input,e.tool_use_id=t.tool_use_id,e.approval_status="observed_pre_tool",e.requires_user_action=!1;break;case"PermissionRequest":i="NOTIFICATION",s="PermissionRequest observed",e.tool_name=t.tool_name,e.tool_input=t.tool_input,e.permission_mode=t.permission_mode,e.turn_id=t.turn_id,e.requires_user_action=!0;break;case"PostToolUse":i="TOOL_USE",s=JSON.stringify({tool_name:t.tool_name,tool_input:t.tool_input,tool_response:t.tool_response}),e.tool_name=t.tool_name,e.tool_input=t.tool_input,e.tool_use_id=t.tool_use_id;break;case"Stop":i="ASSISTANT_RESPONSE",s=t.last_assistant_message||"";break;default:i="NOTIFICATION",s=`Hook: ${t.hook_event_name}`}return{session_id:t.session_id,hook_event_name:t.hook_event_name,type:i,source:"DESKTOP",content:s,metadata:e}}onEvent(t){this.eventHandler=t}async start(){return new Promise((t,e)=>{try{this.server=this.app.listen(0,"localhost",()=>{let i=this.server.address();this.assignedPort=i.port,a.info(`HTTP API listening on http://localhost:${this.assignedPort}`),this.writePortFile(this.assignedPort),this.startPortFileKeepalive(),t(this.assignedPort)}),this.server.on("error",i=>{a.error("HTTP server error:",i),e(i)})}catch(i){e(i)}})}portFilePath(){return this.tmuxSession?at.join(lt.tmpdir(),`codevibe-codex-${this.tmuxSession}.port`):null}writePortFile(t){let e=this.portFilePath();if(!e){a.warn("No CODEVIBE_CODEX_TMUX_SESSION set, skipping port file");return}try{U.writeFileSync(e,t.toString()),a.info(`Port file written: ${e} -> ${t}`)}catch(i){a.error(`Failed to write port file: ${e}`,i)}}removePortFile(){let t=this.portFilePath();if(t)try{U.existsSync(t)&&(U.unlinkSync(t),a.info(`Port file removed: ${t}`))}catch(e){a.warn(`Failed to remove port file: ${t}`,e)}}startPortFileKeepalive(){this.portRefreshTimer&&(clearInterval(this.portRefreshTimer),this.portRefreshTimer=null);let t=Number(process.env.CODEVIBE_PORTFILE_REFRESH_MS),e=Number.isFinite(t)&&t>0?Math.min(ui,Math.max(ci,t)):di;this.portRefreshTimer=setInterval(()=>this.refreshPortFile(),e)}refreshPortFile(){let t=this.portFilePath();if(t)try{let e=new Date;U.utimesSync(t,e,e)}catch(e){e?.code==="ENOENT"?this.writePortFile(this.assignedPort):a.warn(`Port-file refresh failed: ${t}`,e)}}async stop(){return this.portRefreshTimer&&(clearInterval(this.portRefreshTimer),this.portRefreshTimer=null),this.removePortFile(),new Promise(t=>{this.server?this.server.close(()=>{a.info("HTTP API stopped"),t()}):t()})}};var ue=class{constructor(t={}){this.pendingBySession=new Map;this.expiryMs=t.expiryMs??1e4,this.minFuzzyEchoLength=t.minFuzzyEchoLength??16,this.minFuzzyEchoRatio=t.minFuzzyEchoRatio??.35,this.now=t.now??Date.now}track(t,e){let i=this.normalize(e);if(!i)return;let s=this.validEntries(t);s.push({normalized:i,timestamp:this.now()}),this.pendingBySession.set(t,s)}forget(t,e){let i=this.normalize(e);if(!i)return;let s=!1,r=this.validEntries(t).filter(n=>!s&&n.normalized===i?(s=!0,!1):!0);this.replaceEntries(t,r)}consumeIfDuplicate(t,e){let i=this.normalize(e);if(!i)return null;let s=null,r=this.validEntries(t).filter(n=>{if(!s){let l=this.matchType(n.normalized,i);if(l)return s={matchType:l,originalLength:n.normalized.length,echoLength:i.length},!1}return!0});return this.replaceEntries(t,r),s}validEntries(t){let e=this.now()-this.expiryMs;return(this.pendingBySession.get(t)||[]).filter(i=>i.timestamp>=e)}replaceEntries(t,e){e.length>0?this.pendingBySession.set(t,e):this.pendingBySession.delete(t)}matchType(t,e){if(t===e)return"exact";let i=e.length>=this.minFuzzyEchoLength,s=e.length/t.length>=this.minFuzzyEchoRatio;return i&&s&&t.endsWith(e)?"suffix":null}normalize(t){return t.replace(/\s+/g," ").trim()}};var dt=R(require("crypto")),ct=R(require("fs")),ut=R(require("https")),he=R(require("os")),ht=R(require("path")),hi="G-GS74YEQTB8",mi="lAfOF6OxRzSQ-NsLBRjhAg",fi="www.google-analytics.com",gi=`/mp/collect?measurement_id=${hi}&api_secret=${mi}`,pt=800;function yi(){try{let o=ht.resolve(__dirname,"..","package.json"),t=ct.readFileSync(o,"utf-8"),e=JSON.parse(t);if(typeof e.version=="string"&&e.version.length>0&&e.version.length<30)return e.version}catch{}return"unknown"}var vi=yi();function Si(){let o=typeof process.getuid=="function"?process.getuid():0;return dt.createHash("sha256").update(`${he.hostname()}-${o}`).digest("hex").substring(0,36)}function Pi(o){if(!o)return"";let t=he.homedir(),e=o.replace(/[\n\r\t]/g," ");if(t&&t.length>0){let i=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");e=e.replace(new RegExp(i,"g"),"~")}return e=e.replace(/\/Users\/[^/\s"'`]+/g,"/Users/<user>").replace(/\/home\/[^/\s"'`]+/g,"/home/<user>").replace(/[^\x20-\x7E]/g,""),e.trim().substring(0,100)}function _(o,t){return new Promise(e=>{let i,s=!1,r=()=>{s||(s=!0,clearTimeout(n),e())},n=setTimeout(()=>{try{i?.destroy()}catch{}r()},pt);typeof n.unref=="function"&&n.unref();try{let l={...t};typeof l.error_message=="string"&&(l.error_message=Pi(l.error_message));let p=JSON.stringify({client_id:Si(),events:[{name:o,params:{agent:"codex",plugin_version:vi,platform:process.platform,source:process.env.CODEVIBE_TELEMETRY_SOURCE||"production",...l}}]});i=ut.request({hostname:fi,path:gi,method:"POST",headers:{"Content-Type":"application/json"},timeout:pt},d=>{d.resume(),d.on("end",r),d.on("close",r),d.on("error",r)}),i.on("error",r),i.on("timeout",()=>{try{i?.destroy()}catch{}r()}),i.on("close",r),i.write(p),i.end()}catch{r()}})}var me=class{constructor(){this.originated=new Set;this.externallyResolved=new Set}markOriginated(t){this.originated.add(t)}clearOriginated(t){this.originated.delete(t)}getOriginated(){return new Set(this.originated)}getExternallyResolved(){return new Set(this.externallyResolved)}isExternallyResolved(t){return this.externallyResolved.has(t)}dispatch(t){let{gateId:e}=t;return this.originated.has(e)?(this.originated.delete(e),this.externallyResolved.add(e),"self_echo"):(this.externallyResolved.add(e),"foreign")}clear(){this.originated.clear(),this.externallyResolved.clear()}};function mt(o){return`[CodeVibe] Decision recorded on another device: ${o} \u2014 type any number to dismiss the open AskUserQuestion`}var ie=R(require("crypto")),I=R(require("fs")),ge=R(require("os")),K=R(require("path")),yt=require("@quantiya/codevibe-core"),Ae=2*1024*1024,Ii=600*1e3,q=1e3;function vt(){return typeof process.getuid=="function"?process.getuid():void 0}function ke(o,t){let e=vt();if(e!==void 0&&o.uid!==e)throw new Error(`E1_STATE_FOREIGN_OWNER: ${t}`)}function St(o){I.mkdirSync(o,{recursive:!0,mode:448});let t=I.lstatSync(o);if(!t.isDirectory()||t.isSymbolicLink())throw new Error(`E1_STATE_ROOT_NOT_PRIVATE_DIRECTORY: ${o}`);ke(t,o),process.platform!=="win32"&&I.chmodSync(o,448)}function ft(o,t){let e=K.dirname(o);St(e);let i=`${JSON.stringify(t)}
-`;if(Buffer.byteLength(i,"utf8")>Ae)throw new Error(`E1_STATE_TOO_LARGE: ${o}`);let s=K.join(e,`.${K.basename(o)}.${process.pid}.${ie.randomUUID()}.tmp`),r=I.constants.O_NOFOLLOW??0,n=null;try{n=I.openSync(s,I.constants.O_WRONLY|I.constants.O_CREAT|I.constants.O_EXCL|r,384),I.writeFileSync(n,i,{encoding:"utf8"}),I.fsyncSync(n),I.closeSync(n),n=null,process.platform!=="win32"&&I.chmodSync(s,384),I.renameSync(s,o),process.platform!=="win32"&&I.chmodSync(o,384);try{let l=I.openSync(e,I.constants.O_RDONLY);try{I.fsyncSync(l)}finally{I.closeSync(l)}}catch{}}finally{n!==null&&I.closeSync(n);try{I.unlinkSync(s)}catch(l){if(l.code!=="ENOENT")throw l}}}function gt(o){let t;try{t=I.lstatSync(o)}catch(s){if(s.code==="ENOENT")return null;throw s}if(!t.isFile()||t.isSymbolicLink())throw new Error(`E1_STATE_NOT_REGULAR_FILE: ${o}`);if(ke(t,o),process.platform!=="win32"&&(t.mode&63)!==0)throw new Error(`E1_STATE_PERMISSIONS_LOOSE: ${o}`);if(t.size>Ae)throw new Error(`E1_STATE_TOO_LARGE: ${o}`);let e=I.constants.O_NOFOLLOW??0,i=I.openSync(o,I.constants.O_RDONLY|e);try{let s=I.fstatSync(i);if(ke(s,o),!s.isFile()||t.dev!==s.dev||t.ino!==s.ino)throw new Error(`E1_STATE_FILE_CHANGED_DURING_OPEN: ${o}`);if(s.size>Ae)throw new Error(`E1_STATE_TOO_LARGE: ${o}`);return JSON.parse(I.readFileSync(i,{encoding:"utf8"}))}finally{I.closeSync(i)}}function F(o){return o!==null&&typeof o=="object"&&!Array.isArray(o)}function x(o,t=256*1024){return typeof o=="string"&&Buffer.byteLength(o,"utf8")<=t}function Pt(o){if(!F(o)||!x(o.promptId,512)||!x(o.ownerToken,512)||!x(o.sessionId,1024)||o.producerKind!=="PLUGIN_APPROVAL"||o.agentType!==void 0&&o.agentType!=="CODEX"||o.title!==void 0&&!x(o.title,4096)||typeof o.mobileActionable!="boolean"||typeof o.raisedAtMs!="number"||!Number.isFinite(o.raisedAtMs))return!1;try{return(0,yt.deriveOpenPromptId)(o.ownerToken)===o.promptId}catch{return!1}}function bi(o){if(!F(o)||!Pt(o.record))return!1;for(let t of["contentPlain","resolutionDedupeKey","resolutionCompletionKey","resolutionCallId","suppressedObserverSnapshotKey"])if(o[t]!==void 0&&!x(o[t]))return!1;return!(o.metadataPlain!==void 0&&!F(o.metadataPlain)||o.suppressTmuxObserverUntilResolved!==void 0&&typeof o.suppressTmuxObserverUntilResolved!="boolean")}function It(o){return F(o)&&Pt(o.record)&&x(o.resolutionAt,128)&&!Number.isNaN(Date.parse(o.resolutionAt))&&typeof o.attempts=="number"&&Number.isSafeInteger(o.attempts)&&o.attempts>=0}function bt(o){if(!F(o)||!x(o.promptId,512)||!["yes_no","numbered","text"].includes(String(o.kind))||!Array.isArray(o.options)||o.options.length>100||!o.options.every(t=>F(t)&&x(t.number,32)&&x(t.text,32*1024))||!F(o.submitMap)||!Object.entries(o.submitMap).every(([t,e])=>x(t,128)&&x(e,32*1024))||!x(o.promptText)||typeof o.createdAt!="number"||!Number.isFinite(o.createdAt)||!["permission_hook","tmux","heuristic"].includes(String(o.source)))return!1;for(let t of["callId","dedupeKey","completionKey","ownerSessionId","observerMatchKey","observerPromptHash"])if(o[t]!==void 0&&!x(o[t],32*1024))return!1;return o.requiresFollowUpText===void 0||typeof o.requiresFollowUpText=="boolean"}function wi(o){return F(o)&&bt(o.prompt)&&x(o.content)&&F(o.metadata)}function Ei(o,t,e){if(!F(o)||o.version!==1)throw new Error("E1_HANDOFF_UNSUPPORTED_VERSION");if(o.tmuxSession!==t||!x(o.backendSessionId,1024))throw new Error("E1_HANDOFF_INSTANCE_MISMATCH");if(typeof o.createdAtMs!="number"||!Number.isFinite(o.createdAtMs))throw new Error("E1_HANDOFF_INVALID_TIMESTAMP");if(o.createdAtMs>e+6e4||e-o.createdAtMs>Ii)throw new Error("E1_HANDOFF_STALE");if(!Array.isArray(o.openRaises)||o.openRaises.length>q||!o.openRaises.every(bi))throw new Error("E1_HANDOFF_INVALID_OPEN_RAISES");if(!Array.isArray(o.pendingResolutions)||o.pendingResolutions.length>q||!o.pendingResolutions.every(It))throw new Error("E1_HANDOFF_INVALID_PENDING_RESOLUTIONS");if(!Array.isArray(o.needsReRaisePromptIds)||o.needsReRaisePromptIds.length>q||!o.needsReRaisePromptIds.every(s=>x(s,512)))throw new Error("E1_HANDOFF_INVALID_RERAISE_IDS");if(!Array.isArray(o.permissionOccurrences)||o.permissionOccurrences.length>q)throw new Error("E1_HANDOFF_INVALID_OCCURRENCES");if(!o.permissionOccurrences.every(s=>Array.isArray(s)&&s.length===2&&x(s[0],256*1024)&&Array.isArray(s[1])&&s[1].length<=q&&s[1].every(r=>F(r)&&x(r.occurrenceKey,512)&&typeof r.hookObserved=="boolean"&&typeof r.jsonlObserved=="boolean")))throw new Error("E1_HANDOFF_INVALID_OCCURRENCES");if(o.waitingPermissionRequests!==void 0&&(!Array.isArray(o.waitingPermissionRequests)||o.waitingPermissionRequests.length>q||!o.waitingPermissionRequests.every(s=>F(s)&&x(s.occurrenceKey,512)&&(s.dedupeKey===void 0||x(s.dedupeKey))&&F(s.payload)&&s.payload.hook_event_name==="PermissionRequest"&&(s.payload.metadata===void 0||F(s.payload.metadata)))))throw new Error("E1_HANDOFF_INVALID_WAITING_REQUESTS");if(o.pendingInteractivePrompt!==null&&!bt(o.pendingInteractivePrompt))throw new Error("E1_HANDOFF_INVALID_ACTIVE_PROMPT");if(!Array.isArray(o.queuedInteractivePrompts)||o.queuedInteractivePrompts.length>q||!o.queuedInteractivePrompts.every(wi))throw new Error("E1_HANDOFF_INVALID_QUEUED_PROMPTS");if(!Array.isArray(o.resolvedApprovalDedupeKeys)||o.resolvedApprovalDedupeKeys.length>q||!o.resolvedApprovalDedupeKeys.every(s=>Array.isArray(s)&&s.length===2&&x(s[0])&&typeof s[1]=="number"&&Number.isFinite(s[1])))throw new Error("E1_HANDOFF_INVALID_RESOLVED_KEYS");return o}function Ri(o){if(!F(o)||o.version!==1||!It(o.pending))throw new Error("E1_RESOLUTION_OUTBOX_INVALID_RECORD");if(typeof o.updatedAtMs!="number"||!Number.isFinite(o.updatedAtMs))throw new Error("E1_RESOLUTION_OUTBOX_INVALID_TIMESTAMP");return o}var fe=class{constructor(t={}){let e=vt()??"nouid";this.handoffRoot=t.handoffRoot??K.join(ge.tmpdir(),`codevibe-codex-handoff-${e}`),this.resolutionRoot=t.resolutionRoot??K.join(ge.homedir(),".codevibe","codex","e1-resolution-outbox"),this.now=t.now??Date.now}handoffPath(t){let e=ie.createHash("sha256").update(t).digest("hex").slice(0,32);return K.join(this.handoffRoot,`${e}.json`)}resolutionPath(t){let e=ie.createHash("sha256").update(t).digest("hex");return K.join(this.resolutionRoot,`${e}.json`)}writeHandoff(t){ft(this.handoffPath(t.tmuxSession),t)}readHandoff(t){let e=gt(this.handoffPath(t));if(e===null)return null;try{return Ei(e,t,this.now())}catch(i){if(i.message==="E1_HANDOFF_STALE")return this.removeHandoff(t),null;throw i}}removeHandoff(t){try{I.unlinkSync(this.handoffPath(t))}catch(e){if(e.code!=="ENOENT")throw e}}writeResolution(t){ft(this.resolutionPath(t.record.promptId),{version:1,updatedAtMs:this.now(),pending:t})}removeResolution(t){try{I.unlinkSync(this.resolutionPath(t))}catch(e){if(e.code!=="ENOENT")throw e}}readResolutions(){let t;try{St(this.resolutionRoot),t=I.readdirSync(this.resolutionRoot).filter(s=>s.endsWith(".json"))}catch(s){if(s.code==="ENOENT")return{records:[],rejected:[]};throw s}let e=[],i=[];for(let s of t.slice(0,q)){let r=K.join(this.resolutionRoot,s);try{let n=gt(r);if(n!==null){let l=Ri(n).pending;if(K.basename(this.resolutionPath(l.record.promptId))!==s)throw new Error("E1_RESOLUTION_OUTBOX_IDENTITY_MISMATCH");e.push(l)}}catch(n){i.push({file:r,reason:n instanceof Error?n.message:String(n)})}}return t.length>q&&i.push({file:this.resolutionRoot,reason:`E1_RESOLUTION_OUTBOX_RECORD_LIMIT: ${t.length}`}),{records:e,rejected:i}}};var Et=(0,Me.promisify)(Ie.exec),_i=(0,Me.promisify)(Ie.execFile),Ti="/quit",$="CODEVIBE_CODEX_TMUX_SESSION",ye="CODEVIBE_CODEX_DAEMON_RECOVERY",xi=1e3,Ci=1e4,ve=3,Oi=100,Rt=["SIGINT","SIGTERM","SIGHUP"],Ai=600*1e3,Fe=30*1e3,ki=/^(?:[a-z0-9]|esc|escape)$/;function wt(o,t){let e=o?.[t];return typeof e=="string"?e:Buffer.isBuffer(e)?e.toString("utf8"):""}function _t(o){if(typeof o?.code!="number")return"unknown";let t=`${wt(o,"stderr")}
-${wt(o,"stdout")}`;return/^can't find session:/m.test(t)||/^no server running on /m.test(t)||/^error connecting to .* \((?:No such file or directory|Connection refused)\)$/m.test(t)?"absent":"unknown"}async function Fi(o,t){let e=async(i,s)=>{try{await Et(i)}catch(r){a.warn("tmux send-keys failed during self-terminate",{sessionName:o,label:s,error:String(r)})}};await e(`tmux send-keys -t "${o}" C-c`,"ctrl-c"),await new Promise(i=>setTimeout(i,200)),await e(`tmux send-keys -t "${o}" -l "${t}"`,"quit-text"),await new Promise(i=>setTimeout(i,500)),await e(`tmux send-keys -t "${o}" Enter`,"enter")}function Ke(o){let t=o.split(`
-`),e=n=>/^[\s>]*\d+\.\s/.test(n),i=-1;for(let n=t.length-1;n>=0;n-=1)if(/^\s*\$\s+/.test(t[n])){i=n;break}if(i===-1)return;let s=t[i].trim().match(/^\$\s+(.+)$/);if(!s?.[1]?.trim())return;let r=[s[1].trim()];for(let n=i+1;n<t.length;n+=1){let l=t[n];if(e(l)||/^\s*$/.test(l)||/^\s*\$\s+/.test(l))break;r.push(l.trim())}return r.length>0?r:void 0}function Tt(o){let t=Ke(o);if(!t)return;let e=t.join(" ").trim();return e.length>0?e:void 0}function xt(o,t){return Di(o,t).has(t)}function Di(o,t){if(o.length===0)return new Set;let e=t,i=new Set([o[0]]);for(let s of o.slice(1)){let r=s,n=new Set;for(let l of i)for(let p of[""," "]){let d=`${l}${p}${r}`;e.startsWith(d)&&n.add(d)}if(n.size===0)return new Set;i=n}return i}function Ni(o,t,e){let i=/^\[\u2026\s+\d+\s+lines\]\s+ctrl\s*\+\s*a\s+view\s+all$/i,s=o.split(`
-`).map(r=>r.trim()).filter(Boolean);return s.length<2||!i.test(s[s.length-1])||!e?!1:Mi(e,t)}function Mi(o,t){let e=Ne(t),i=Ot(o,"2");if(!e||!i)return!1;let s=new Set;for(let r of At(i)){let n=r.match(/^Yes, and don't ask again for commands that start with `([^`]*)`\s*\(p\)$/);if(!n)continue;let l=Ne(n[1]);l&&JSON.stringify(l)===JSON.stringify(e)&&s.add(JSON.stringify(l))}return s.size===1}function Ct(o,t,e){if(!o.find(u=>u.number==="2"&&/\(p\)\s*$/i.test(u.text)))return o;let s="Yes, and don't ask again for commands that start with",r="Yes, and don't ask again (p)",n=Ot(e,"2");if(!n)return null;let l=At(n);if(l.has(r))return o.map(u=>u.number==="2"?{...u,text:r}:u);if(!t)return null;let p=new Map;for(let u of l){let f=u.match(/^Yes, and don't ask again for commands that start with `([^`]*)`\s*\(p\)$/);if(!f)continue;let y=Ne(f[1]);!y||!Ki(y,t)||p.set(JSON.stringify(y),y)}if(p.size!==1)return null;let d=[...p.values()][0],c=Li(d);return o.map(u=>u.number==="2"?{...u,text:`${s} \`${c}\` (p)`}:u)}function Ot(o,t){if(!o)return null;let e=(0,B.normalizeSnapshot)(o).split(`
-`).map(l=>l.trim()),i=new RegExp(`^(?:[>\u203A\u276F\u25B8\u25B6\u279C\u27A4*\u25CF]\\s*)?${t}\\.\\s+(.*)$`),s=-1,r="";for(let l=e.length-1;l>=0;l-=1){let p=e[l].match(i);if(p){s=l,r=p[1];break}}if(s<0)return null;let n=[r];for(let l=s+1;l<e.length&&!(/^(?:[>›❯▸▶➜➤*●]\s*)?\d+\.\s+/.test(e[l])||!e[l]||(n.push(e[l]),/\(p\)\s*$/i.test(e[l])));l+=1);return n.some(l=>/\(p\)\s*$/i.test(l))?n:null}function At(o){if(o.length===0||o.length>13)return new Set;let t=new Set([o[0]]);for(let e of o.slice(1)){let i=new Set;for(let s of t)i.add(`${s}${e}`),i.add(`${s} ${e}`);t=i}return t}function Ne(o){try{let t=(0,Le.parse)(o,e=>`\${${e}}`);return t.every(e=>typeof e=="string")?t:null}catch{return null}}function Li(o){return o.map(t=>/^[A-Za-z0-9_@%+=:,./-]+$/.test(t)?t:`'${t.replace(/'/g,`'"'"'`)}'`).join(" ")}function Ki(o,t){if(o.length===0)return!1;let e;try{e=(0,Le.parse)(t,s=>`\${${s}}`)}catch{return!1}let i=[[]];for(let s of e){if(typeof s=="string"){i[i.length-1].push(s);continue}if("op"in s&&["&&","||",";","|","|&","&"].includes(s.op)){i.push([]);continue}return!1}return i.some(s=>o.every((r,n)=>s[n]===r))}var Pe=class o{constructor(){this.sessionState=null;this.unsubscribe=null;this.sessionKey=null;this.sessionIsEncrypted=!1;this.sessionKeyGen=null;this.e1PromptRaises=new Map;this.e1PendingResolutions=new Map;this.e1ResolutionInFlight=new Map;this.e1RaiseInFlight=new Map;this.e1NeedsReRaise=new Set;this.e1RetirementOrphans=new Map;this.e1ContentKeyIndex=new Map;this.e1TtlRefreshTimer=null;this.toolActivity=null;this.toolActivityStartPromise=null;this.toolActivityLegacyRecorders=new Map;this.pendingInteractivePrompt=null;this.queuedInteractivePrompts=[];this.isInitializingSession=!1;this.bufferedLogEntries=[];this.logEntryChain=Promise.resolve();this.hookEventChain=Promise.resolve();this.hooksActive=!1;this.hooksCompatibilityNoticeSent=!1;this.permissionRequestHookInFlight=null;this.queuedPermissionRequestDedupeKeys=new Map;this.queuedPermissionRequestSessionCounts=new Map;this.queuedPermissionRequestRegistrations=new Map;this.waitingPermissionRequests=new Map;this.permissionRequestOccurrencesByCompletionKey=new Map;this.deferredTmuxPromptCandidates=new Map;this.recoveryPermissionReplay=null;this.resolvedApprovalDedupeKeys=new Map;this.subscribedSessionId=null;this.subscribedSessionState=null;this.terminalInputChain=Promise.resolve();this.terminalInputBlockedStates=new WeakSet;this.mobilePromptDeduper=new ue({expiryMs:1e4});this.launchSessionInitPromise=null;this.sessionStartedInitPromise=null;this.bootstrapSessionId=null;this.recoveryBootstrapOwnerBound=!1;this.resumeBackendSession=m.resumeOrCreateSession;this.sessionBootstrapFailureCount=0;this.sessionBootstrapRetryAt=0;this.retiredSessionRecoveryPromise=null;this.lifecycleGeneration=0;this.isStopping=!1;this.stopPromise=null;this.terminalRetirementRequested=!1;this.tmuxLifecycleTimer=null;this.tmuxLifecycleCheckInFlight=!1;this.tmuxLifecycleObservedAlive=!1;this.tmuxLifecycleInitDeadlineMs=Number.POSITIVE_INFINITY;this.v1Bridge=new me;this.orchestrationClient=null;this.userDecisionUnsubscribe=null;this.httpApi=new ce,this.sessionWatcher=new ne,this.approvalDetector=new ae,this.promptResponder=new le,this.tmuxPaneObserver=new pe,this.e1DurableState=new fe({handoffRoot:process.env.CODEVIBE_CODEX_HANDOFF_ROOT,resolutionRoot:process.env.CODEVIBE_CODEX_E1_OUTBOX_ROOT})}static{this.E1_TTL_REFRESH_MS=300*1e3}async start(){a.info("Starting CodeVibe Codex companion server",{environment:(0,m.getEnvironment)()}),this.appSyncClient=new m.AppSyncClient,await this.appSyncClient.authenticateWithStoredTokens()||(a.error('Authentication failed. Run "codevibe login" first.'),console.error('Not authenticated. Run "codevibe login" to sign in.'),process.exit(1)),a.info("Authenticated successfully",{userId:this.appSyncClient.getCurrentUserId(),email:this.appSyncClient.getCurrentUserEmail()}),await this.restorePendingE1ResolutionsFromOutbox(),await(0,m.registerDeviceEncryptionKey)(this.appSyncClient,a),(0,m.startDeviceKeyWatcher)(this.appSyncClient,a),(0,m.pushDetectedAgents)(this.appSyncClient,a).catch(i=>{a.warn("Failed to update available agents (non-fatal)",{error:i?.message})});try{let i=await this.appSyncClient.sweepOrphanSessions({agentType:"CODEX"});i>0&&a.info("Orphan sweep: marked stale Codex sessions INACTIVE",{swept:i})}catch(i){a.warn("Orphan sweep failed, continuing startup",{error:i instanceof Error?i.message:String(i)})}this.httpApi.onEvent(this.handleEventFromHook.bind(this));let e=await this.httpApi.start();a.info("HTTP API started for hooks",{port:e}),this.startTmuxLifecycleMonitor(),await this.createLaunchSession(),this.setupEventHandlers(),this.sessionWatcher.start(),a.info("CodeVibe Codex companion server started")}async createLaunchSession(){if(this.isStopping)return;if(process.env[ye]==="1"){a.info("Recovery daemon deferring backend bootstrap until the native rollout is known");return}let t=this.lifecycleGeneration,e=process.env.CODEVIBE_CODEX_TMUX_SESSION;if(!e){a.warn("No CODEVIBE_CODEX_TMUX_SESSION \u2014 skipping launch session");return}let i;this.launchSessionInitPromise=new Promise(s=>{i=s});try{let s=process.env.CODEX_WORKING_DIRECTORY||process.cwd(),r=this.getOrCreateBootstrapSessionId(),n=this.appSyncClient.getCurrentUserId();a.info("Creating launch session",{sessionId:r,projectPath:s});let l=!1;try{let p=await(0,m.resumeOrCreateSession)({sessionId:r,userId:n,agentType:m.AgentType.CODEX,projectPath:s,metadata:{launchSession:!0}},this.appSyncClient,a);if(r=p.sessionId,!this.isLifecycleCurrent(t)){await this.retireCancelledBootstrap(r,"launch_session");return}this.sessionKey=p.sessionKey,this.sessionKeyGen=p.sessionKeyGen,this.sessionIsEncrypted=!!p.sessionKey,l=!0,this.sessionState={sessionId:r,userId:n,projectPath:s,cwd:s,createdAt:new Date,subscriptionActive:!1,metadata:{launchSession:!0},encryptionSnapshot:{sessionKey:p.sessionKey,sessionIsEncrypted:!!p.sessionKey},codexSessionId:e,codexLogFile:void 0},this.clearSessionBootstrapFailure(),this.bootstrapSessionId=null,await _("daemon_init_step_completed",{step:"session_resume_or_create",path:"launch_session"})}catch(p){if(!this.isLifecycleCurrent(t)){let d=this.authoritativeSessionIdFromError(p)??r;await this.retireCancelledBootstrap(d,"launch_session_error");return}await _("daemon_init_step_failed",{step:"session_resume_or_create",path:"launch_session",error_class:p?.name||"Error",error_message:p?.message||String(p)}),p?.code==="ENCRYPTED_SESSION_NO_KEY"&&(this.sessionIsEncrypted=!0,this.sessionKey=null),this.bindBootstrapIdentityFromError(p),this.recordSessionBootstrapFailure(p,"launch_session"),a.error("Failed to create/resume launch session (non-fatal)",{error:p})}if(!l)return;await _("daemon_init_step_completed",{step:"session_state_set",path:"launch_session"});try{this.subscribeToMobileEvents(r)?await _("daemon_init_step_completed",{step:"subscribe_mobile_events",path:"launch_session"}):await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"launch_session",error_class:"SubscriptionSetupFailed",error_message:"subscribeToMobileEvents returned false"})}catch(p){await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"launch_session",error_class:p?.name||"Error",error_message:p?.message||String(p)}),a.error("Failed to subscribe to mobile events for launch session",{error:p})}try{await this.appSyncClient.startHeartbeat(r)?await _("daemon_init_step_completed",{step:"heartbeat_start",path:"launch_session"}):(await _("daemon_init_step_failed",{step:"heartbeat_start",path:"launch_session",error_class:"InitialHeartbeatNotPersisted",error_message:"Backend did not confirm the initial heartbeat mutation"}),a.error("Initial launch-session heartbeat was not persisted",{sessionId:r}))}catch(p){await _("daemon_init_step_failed",{step:"heartbeat_start",path:"launch_session",error_class:p?.name||"Error",error_message:p?.message||String(p)}),a.error("Failed to start heartbeat for launch session",{error:p})}try{await this.subscribeToOnApplyUserDecision(r)}catch(p){a.error("Failed to subscribe to onApplyUserDecision for launch session (non-fatal)",{error:p})}this.startMobileEndWatcher(r),a.info("Launch session created",{sessionId:r})}finally{i()}}encryptForEmit(t,e,i,s){let r=this.sessionState;if(!r||r.sessionId!==s||!r.encryptionSnapshot)return a.warn("Dropping event from stale or unresolved session generation (#638)",{type:i,sessionId:s,currentSessionId:r?.sessionId}),null;let{sessionKey:n,sessionIsEncrypted:l}=r.encryptionSnapshot,p=(0,m.encryptForEmit)(n,l,t,e);return p===null&&a.error("No session key for ENCRYPTED session \u2014 dropping event (fail-closed, #638)",{type:i,sessionId:s}),p}newE1Raise(t,e,i,s){let{record:r}=(0,m.newPromptRaise)({sessionId:t,producerKind:"PLUGIN_APPROVAL",mobileActionable:e,agentType:"CODEX",...i!==void 0&&{title:i}});return this.e1PromptRaises.set(r.promptId,{record:r,...s?.dedupeKey!==void 0?{resolutionDedupeKey:s.dedupeKey}:{},...s?.completionKey!==void 0?{resolutionCompletionKey:s.completionKey}:{},...s?.callId!==void 0?{resolutionCallId:s.callId}:{}}),this.e1TtlRefreshTimer||this.startE1TtlRefresh(),r}stashE1RaiseContent(t,e,i){let s=this.e1PromptRaises.get(t);s&&(s.contentPlain=e,s.metadataPlain=i)}async emitSuppressedPromptCarrier(t,e){let i="\u26A0\uFE0F A prompt is waiting in your desktop terminal, but its options could not be shown here. Please answer it on your desktop.",s=this.encryptForEmit(i,{e1SuppressedPrompt:!0},m.EventType.NOTIFICATION,t);return s?(await this.trackE1Raise(e.promptId,this.appSyncClient.createEvent({sessionId:t,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,content:s.content,metadata:s.metadata,...(0,m.raiseFieldsFromRecord)(e),notificationText:i,timestamp:(0,m.prepareEventTimestamp)({orderingKey:t}),isEncrypted:s.isEncrypted?!0:void 0})),a.info("E1: emitted suppressed-prompt badge carrier (mobileActionable=false)",{sessionId:t,promptId:e.promptId}),!0):!1}raiseSuppressedBadge(t,e,i={}){if(e){if(this.hasRecentlyResolvedApprovalDedupeKey(t,e)){a.debug("Skipping suppressed-prompt carrier; approval completed while producer was in flight",{sessionId:t,dedupeKey:e});return}let r=`${t}::${e}`,n=this.e1ContentKeyIndex.get(r);if(n&&this.e1PromptRaises.has(n)){if(i.suppressTmuxObserverUntilResolved){let l=this.e1PromptRaises.get(n);l&&(l.suppressTmuxObserverUntilResolved=!0,i.observerSnapshot&&(l.suppressedObserverSnapshotKey=this.buildObserverSnapshotMatchKey(i.observerSnapshot)))}return}n&&this.e1ContentKeyIndex.delete(r)}let s=this.newE1Raise(t,!1,void 0,e?{dedupeKey:e,completionKey:i.completionKey}:void 0);if(i.suppressTmuxObserverUntilResolved){let r=this.e1PromptRaises.get(s.promptId);r&&(r.suppressTmuxObserverUntilResolved=!0,i.observerSnapshot&&(r.suppressedObserverSnapshotKey=this.buildObserverSnapshotMatchKey(i.observerSnapshot)))}e&&this.e1ContentKeyIndex.set(`${t}::${e}`,s.promptId),this.emitSuppressedPromptCarrier(t,s).catch(r=>{a.error("E1: failed to emit suppressed-prompt badge carrier",{sessionId:t,promptId:s.promptId,error:r instanceof Error?r.message:String(r)})})}snapshotOpenE1(t){return[...this.e1PromptRaises.values()].filter(e=>e.record.sessionId===t).map(e=>({record:{...e.record},...e.contentPlain!==void 0&&{contentPlain:e.contentPlain},...e.metadataPlain!==void 0&&{metadataPlain:e.metadataPlain},...e.resolutionDedupeKey!==void 0&&{resolutionDedupeKey:e.resolutionDedupeKey},...e.resolutionCompletionKey!==void 0&&{resolutionCompletionKey:e.resolutionCompletionKey},...e.resolutionCallId!==void 0&&{resolutionCallId:e.resolutionCallId},...e.suppressTmuxObserverUntilResolved!==void 0&&{suppressTmuxObserverUntilResolved:e.suppressTmuxObserverUntilResolved},...e.suppressedObserverSnapshotKey!==void 0&&{suppressedObserverSnapshotKey:e.suppressedObserverSnapshotKey}}))}buildDaemonHandoffSnapshot(t){let e=process.env[$];if(!e)throw new Error("E1_DAEMON_HANDOFF_MISSING_TMUX_SESSION");return{version:1,createdAtMs:Date.now(),tmuxSession:e,backendSessionId:t.sessionId,openRaises:this.snapshotOpenE1(t.sessionId),pendingResolutions:[...this.e1PendingResolutions.values()].map(i=>({record:{...i.record},resolutionAt:i.resolutionAt,attempts:i.attempts})),needsReRaisePromptIds:[...this.e1NeedsReRaise],permissionOccurrences:[...this.permissionRequestOccurrencesByCompletionKey.entries()].map(([i,s])=>[i,s.map(r=>({...r}))]),waitingPermissionRequests:[...this.waitingPermissionRequests.values()].filter(i=>i.ownerState===t).map(({occurrenceKey:i,dedupeKey:s,payload:r})=>({occurrenceKey:i,dedupeKey:s,payload:r})),pendingInteractivePrompt:this.pendingInteractivePrompt?{...this.pendingInteractivePrompt}:null,queuedInteractivePrompts:this.queuedInteractivePrompts.map(i=>({prompt:{...i.prompt},content:i.content,metadata:{...i.metadata}})),resolvedApprovalDedupeKeys:[...this.resolvedApprovalDedupeKeys.entries()].filter(([,i])=>i>Date.now()-Fe)}}persistDaemonHandoffState(t){for(let i of this.e1PendingResolutions.values())this.e1DurableState.writeResolution(i);let e=this.buildDaemonHandoffSnapshot(t);this.e1DurableState.writeHandoff(e),a.info("E1: persisted daemon handoff state",{sessionId:t.sessionId,openPrompts:e.openRaises.length,pendingResolutions:e.pendingResolutions.length,completionQueues:e.permissionOccurrences.length})}async adoptDaemonHandoffState(t){if(process.env[ye]!=="1")return!1;let e=process.env[$];if(!e)return!1;let i=this.e1DurableState.readHandoff(e);if(!i)return!1;let s=this.sessionState;if(!s||s.sessionId!==t)throw new Error("E1_DAEMON_HANDOFF_WITHOUT_CURRENT_SESSION");for(let p of i.pendingResolutions)this.e1PendingResolutions.has(p.record.promptId)||this.e1PendingResolutions.set(p.record.promptId,{record:{...p.record},resolutionAt:p.resolutionAt,attempts:p.attempts}),this.e1DurableState.writeResolution(p);for(let p of i.openRaises){let d={...p,record:{...p.record},...p.metadataPlain!==void 0&&{metadataPlain:{...p.metadataPlain}}};this.e1PromptRaises.set(d.record.promptId,d),i.backendSessionId!==t&&this.e1RetirementOrphans.set(d.record.promptId,{...d,record:{...d.record}}),d.resolutionDedupeKey&&this.e1ContentKeyIndex.set(`${t}::${d.resolutionDedupeKey}`,d.record.promptId)}this.permissionRequestOccurrencesByCompletionKey=new Map(i.permissionOccurrences.map(([p,d])=>[p,d.map(c=>({...c}))])),this.e1NeedsReRaise=new Set(i.needsReRaisePromptIds);for(let p of i.waitingPermissionRequests??[])this.waitingPermissionRequests.set(p.occurrenceKey,{...p,ownerState:s,context:this.buildApprovalPromptContextFromHookPayload(p.payload)});this.pendingInteractivePrompt=i.pendingInteractivePrompt?{...i.pendingInteractivePrompt,ownerSessionId:t}:null;let r=this.pendingInteractivePrompt,n=r?.completionKey?this.permissionRequestOccurrencesByCompletionKey.get(r.completionKey):void 0;this.recoveryPermissionReplay=r?.source==="permission_hook"&&r.completionKey&&r.dedupeKey&&this.isPermissionRequestOccurrenceKey(r.dedupeKey)&&n?.some(p=>p.occurrenceKey===r.dedupeKey)?{ownerSessionId:t,completionKey:r.completionKey,occurrenceKey:r.dedupeKey}:null,this.queuedInteractivePrompts=i.queuedInteractivePrompts.map(p=>({prompt:{...p.prompt,ownerSessionId:t},content:p.content,metadata:{...p.metadata},ownerState:s}));let l=Date.now()-Fe;for(let[p,d]of i.resolvedApprovalDedupeKeys){if(d<=l)continue;let c=`${i.backendSessionId}::`,u=p.startsWith(c)?`${t}::${p.slice(c.length)}`:p;this.resolvedApprovalDedupeKeys.set(u,d)}return i.backendSessionId!==t&&await this.drainRetirementOrphans(t),await this.drainPendingE1Resolutions(),await this.drainPendingE1ReRaises(),(this.e1PromptRaises.size>0||this.e1PendingResolutions.size>0)&&this.startE1TtlRefresh(),this.e1DurableState.removeHandoff(e),a.info("E1: adopted daemon handoff state",{fromSessionId:i.backendSessionId,replacementSessionId:t,openPrompts:i.openRaises.length,pendingResolutions:i.pendingResolutions.length,completionQueues:i.permissionOccurrences.length}),!0}parkRetirementOrphans(t){for(let e of this.snapshotOpenE1(t))this.e1RetirementOrphans.set(e.record.promptId,e)}async drainRetirementOrphans(t){if(this.e1RetirementOrphans.size===0){this.e1PendingResolutions.size>0&&!this.e1TtlRefreshTimer&&this.startE1TtlRefresh();return}a.info("E1 (\xA76a-4): re-homing parked retirement-orphan prompts onto replacement session",{replacementSessionId:t,count:this.e1RetirementOrphans.size});for(let[e,i]of[...this.e1RetirementOrphans]){let r=this.e1PromptRaises.get(e)??{record:{...i.record},...i.contentPlain!==void 0&&{contentPlain:i.contentPlain},...i.metadataPlain!==void 0&&{metadataPlain:i.metadataPlain},...i.resolutionDedupeKey!==void 0&&{resolutionDedupeKey:i.resolutionDedupeKey},...i.resolutionCompletionKey!==void 0&&{resolutionCompletionKey:i.resolutionCompletionKey},...i.resolutionCallId!==void 0&&{resolutionCallId:i.resolutionCallId}};for(let[l,p]of this.e1ContentKeyIndex.entries())p===e&&this.e1ContentKeyIndex.delete(l);if(r.record.sessionId=t,this.e1PromptRaises.set(e,r),r.resolutionDedupeKey&&this.e1ContentKeyIndex.set(`${t}::${r.resolutionDedupeKey}`,e),!await this.reRaiseOneE1(t,r,{untilAck:!0})){if(!this.e1RetirementOrphans.has(e))continue;break}this.e1RetirementOrphans.delete(e)}this.e1TtlRefreshTimer||this.startE1TtlRefresh()}isReRaiseTargetCurrent(t){return!this.isStopping&&this.sessionState!==null&&this.sessionState.sessionId===t}async reRaiseOneE1(t,e,i){let s=e.record;if(!(0,m.canRecoverPromptRaise)(e,this.e1RaiseInFlight.has(s.promptId)))return!1;let r=s.mobileActionable&&e.contentPlain!==void 0,n=i?.untilAck??!1,l=4,p=4e3;for(let d=1;n||d<=l;d++){if(!(0,m.isOpenPromptRaise)(e,this.e1PromptRaises.get(s.promptId)))return!1;if(n&&!this.isReRaiseTargetCurrent(t))return this.e1NeedsReRaise.add(s.promptId),a.warn("E1: retirement re-raise aborted (stopping/superseded) \u2014 parked",{sessionId:t,promptId:s.promptId}),!1;try{if(r){let c=this.encryptForEmit(e.contentPlain,e.metadataPlain??{},m.EventType.INTERACTIVE_PROMPT,t);if(!c)return!1;await this.trackE1Raise(s.promptId,this.appSyncClient.createEvent({sessionId:t,type:m.EventType.INTERACTIVE_PROMPT,source:m.EventSource.DESKTOP,content:c.content,metadata:c.metadata,...(0,m.raiseFieldsFromRecord)(s),timestamp:(0,m.prepareEventTimestamp)({orderingKey:t}),...c.isEncrypted?{isEncrypted:!0}:{}}))}else if(s.mobileActionable=!1,!await this.emitSuppressedPromptCarrier(t,s))return!1;return this.e1NeedsReRaise.delete(s.promptId),a.info("E1: re-raised prompt onto replacement session",{sessionId:t,promptId:s.promptId,actionable:r}),!0}catch(c){if(!n&&d===l)return this.e1NeedsReRaise.add(s.promptId),a.error("E1: re-raise unacked after backoff \u2014 parked for retry-until-ack",{sessionId:t,promptId:s.promptId,error:c instanceof Error?c.message:String(c)}),!1;if(n){let u=Date.now()+Math.min(250*2**(d-1),p);for(;Date.now()<u&&this.isReRaiseTargetCurrent(t);)await new Promise(f=>setTimeout(f,Math.min(50,u-Date.now())))}else await new Promise(u=>setTimeout(u,250*d))}}return!1}async drainPendingE1ReRaises(){if(this.e1NeedsReRaise.size!==0)for(let t of[...this.e1NeedsReRaise]){let e=this.e1PromptRaises.get(t);if(!e){this.e1NeedsReRaise.delete(t);continue}!this.sessionState||e.record.sessionId!==this.sessionState.sessionId||await this.reRaiseOneE1(e.record.sessionId,e)}}beginE1Resolution(t,e){if(this.e1PendingResolutions.has(t))return!0;let i=this.e1PromptRaises.get(t);if(!i||i.record.sessionId!==e)return!1;this.e1PromptRaises.delete(t),this.e1NeedsReRaise.delete(t),this.e1RetirementOrphans.delete(t);for(let[s,r]of this.e1ContentKeyIndex.entries())r===t&&this.e1ContentKeyIndex.delete(s);return this.e1PendingResolutions.set(t,{record:{...i.record},resolutionAt:new Date().toISOString(),attempts:0}),this.e1TtlRefreshTimer||this.startE1TtlRefresh(),!0}async emitE1Resolution(t){let e=this.e1ResolutionInFlight.get(t);if(e)return e;if(!this.e1PendingResolutions.has(t))return;let i=(async()=>{let s=this.e1PendingResolutions.get(t);if(s){try{this.e1DurableState.writeResolution(s)}catch(r){a.error("E1: failed to persist exact-clear outbox record",{promptId:t,error:r instanceof Error?r.message:String(r)})}try{let r=this.e1RaiseInFlight.get(t);if(r&&await r,s=this.e1PendingResolutions.get(t),!s)return;if((await this.appSyncClient.createEvent({sessionId:s.record.sessionId,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,resolvedPromptId:s.record.promptId,ownerToken:s.record.ownerToken,resolutionAt:s.resolutionAt,timestamp:(0,m.prepareEventTimestamp)({orderingKey:s.record.sessionId})}))?.promptId!==s.record.promptId)throw new Error("E1_PLUGIN_RESOLUTION_NOT_ACKNOWLEDGED: exact prompt id was not returned");this.e1PendingResolutions.delete(t);try{this.e1DurableState.removeResolution(t)}catch(l){a.warn("E1: exact-clear ACKed but outbox cleanup failed",{promptId:t,error:l instanceof Error?l.message:String(l)})}a.info("E1: plugin approval resolution acknowledged",{sessionId:s.record.sessionId,promptId:t})}catch(r){let n=this.e1PendingResolutions.get(t);a.warn("E1: plugin approval resolution unacknowledged; parked for retry",{sessionId:n?.record.sessionId,promptId:t,error:r instanceof Error?r.message:String(r)})}}})();this.e1ResolutionInFlight.set(t,i);try{await i}finally{this.e1ResolutionInFlight.get(t)===i&&this.e1ResolutionInFlight.delete(t)}}trackE1Raise(t,e){let i=e.then(()=>{},()=>{});return this.e1RaiseInFlight.set(t,i),i.then(()=>{this.e1RaiseInFlight.get(t)===i&&this.e1RaiseInFlight.delete(t)}),e}async drainPendingE1Resolutions(){for(let[t,e]of[...this.e1PendingResolutions.entries()])e.attempts+=1,await this.emitE1Resolution(t)}async restorePendingE1ResolutionsFromOutbox(){let{records:t,rejected:e}=this.e1DurableState.readResolutions();for(let i of e)a.error("E1: rejected unsafe or invalid resolution outbox record",i);for(let i of t){let s=this.e1PendingResolutions.get(i.record.promptId);(!s||i.attempts>s.attempts)&&this.e1PendingResolutions.set(i.record.promptId,{record:{...i.record},resolutionAt:i.resolutionAt,attempts:i.attempts})}t.length>0&&(a.info("E1: recovered pending exact-clear outbox records",{count:t.length}),await this.drainPendingE1Resolutions(),this.e1PendingResolutions.size>0&&!this.e1TtlRefreshTimer&&this.startE1TtlRefresh())}async drainPendingE1ResolutionsForLifecycleEnd(t={}){let e=t.maxWaitMs??4e3,i=t.retryDelayMs??250,s=Date.now()+Math.max(0,e),r=0;do{if(await this.drainPendingE1Resolutions(),this.e1PendingResolutions.size===0)return;if(r+=1,Date.now()>=s)break;await new Promise(n=>setTimeout(n,Math.min(i*r,Math.max(0,s-Date.now()))))}while(Date.now()<s);for(let n of this.e1PendingResolutions.values())this.e1DurableState.writeResolution(n);a.warn("E1: graceful lifecycle ended with durable exact-clear work pending",{count:this.e1PendingResolutions.size})}beginE1PromptResolutions(t,e){let i=[];for(let s of new Set(t))this.beginE1Resolution(s,e)&&i.push(s);return i}launchE1Resolutions(t){Promise.all([...t].map(e=>this.emitE1Resolution(e)))}async exactClearOpenE1ForLifecycleEnd(t){let e=[...this.e1PromptRaises.values()].filter(s=>s.record.sessionId===t).map(s=>s.record.promptId),i=this.beginE1PromptResolutions(e,t);await Promise.all(i.map(s=>this.emitE1Resolution(s)))}async refreshE1Ttls(){await this.drainPendingE1Resolutions(),await this.drainPendingE1ReRaises();let t=this.sessionState?.sessionId;if(!t)return;let e=[...this.e1PromptRaises.values()].filter(i=>i.record.sessionId===t&&(0,m.canRecoverPromptRaise)(i,this.e1RaiseInFlight.has(i.record.promptId))).map(i=>i.record.promptId);if(e.length!==0)try{let i=await this.appSyncClient.refreshOpenPromptTtl(e);for(let s of i){let r=this.e1PromptRaises.get(s);r&&r.record.sessionId===t&&await this.reRaiseOneE1(t,r)}}catch(i){a.warn("E1: TTL-refresh tick failed (non-fatal, retries next tick)",{error:i instanceof Error?i.message:String(i)})}}startE1TtlRefresh(){this.e1TtlRefreshTimer&&clearInterval(this.e1TtlRefreshTimer),this.e1TtlRefreshTimer=setInterval(()=>{this.refreshE1Ttls()},o.E1_TTL_REFRESH_MS)}stopE1TtlRefresh(){this.e1TtlRefreshTimer&&(clearInterval(this.e1TtlRefreshTimer),this.e1TtlRefreshTimer=null)}isExpectedSessionStateCurrent(t){return!this.isStopping&&this.sessionState===t&&!this.terminalInputBlockedStates.has(t)}sendSessionPinnedInput(t,e){if(!this.isExpectedSessionStateCurrent(t)||this.terminalInputBlockedStates.has(t))return Promise.resolve(!1);let i=this.terminalInputChain.then(async()=>!this.isExpectedSessionStateCurrent(t)||this.terminalInputBlockedStates.has(t)||!await this.verifyNoActiveCodexChooser(t.sessionId)||!await this.promptResponder.sendLiteral(t.sessionId,e)||(await new Promise(s=>setTimeout(s,500)),!this.isExpectedSessionStateCurrent(t))||!await this.verifyNoActiveCodexChooser(t.sessionId)?!1:this.promptResponder.sendKey(t.sessionId,"Enter"));return this.terminalInputChain=i.then(()=>{},()=>{}),i}async verifyNoActiveCodexChooser(t){try{let e=await this.tmuxPaneObserver.captureSnapshot();return!this.tmuxPaneObserver.extractActiveApprovalBlock(e)}catch(e){return a.warn("Failed to verify that no Codex chooser is active",{sessionId:t,error:e instanceof Error?e.message:String(e)}),!1}}sendVerifiedPromptInput(t,e,i){if(!this.isExpectedSessionStateCurrent(t))return Promise.resolve("stale");let s=this.terminalInputChain.then(async()=>{if(!this.isExpectedSessionStateCurrent(t)||this.pendingInteractivePrompt!==e||e.ownerSessionId!==t.sessionId)return"stale";if(!e.observerMatchKey)return a.warn("Refusing mobile prompt input without a captured pane identity",{sessionId:t.sessionId,promptId:e.promptId}),"unverified";let r=null;try{let l=await this.tmuxPaneObserver.captureSnapshot(),p=this.tmuxPaneObserver.extractActiveApprovalBlock(l),d=p?(0,B.parseInteractivePrompt)(p):null;r=d?this.buildObserverPromptMatchKey(d):null}catch(l){return a.warn("Failed to re-probe Codex prompt before mobile input",{sessionId:t.sessionId,promptId:e.promptId,error:l instanceof Error?l.message:String(l)}),"unverified"}return!this.isExpectedSessionStateCurrent(t)||this.pendingInteractivePrompt!==e?"stale":!r||r!==e.observerMatchKey?(a.warn("Refusing mobile input because the live Codex prompt changed",{sessionId:t.sessionId,promptId:e.promptId,hasLiveIdentity:!!r}),"unverified"):(i===Y?await this.promptResponder.sendKey(t.sessionId,"Escape"):await this.promptResponder.sendLiteral(t.sessionId,i))?"sent":"send_failed"});return this.terminalInputChain=s.then(()=>{},()=>{}),s}sendVerifiedFollowUpAfterDismissal(t,e,i){let s=this.terminalInputChain.then(async()=>{let r=()=>this.isExpectedSessionStateCurrent(t)&&e.ownerSessionId===t.sessionId;return r()?!await this.verifyNoActiveCodexChooser(t.sessionId)||!r()?"unverified":await this.promptResponder.sendLiteral(t.sessionId,i)?(await new Promise(n=>setTimeout(n,500)),r()?!await this.verifyNoActiveCodexChooser(t.sessionId)||!r()?"unverified":await this.promptResponder.sendKey(t.sessionId,"Enter")?"sent":"send_failed":"stale"):"send_failed":"stale"});return this.terminalInputChain=s.then(()=>{},()=>{}),s}sendConversationContinuation(t,e){if(!this.isExpectedSessionStateCurrent(t))return Promise.resolve("stale");let i=this.terminalInputChain.then(async()=>{if(!this.isExpectedSessionStateCurrent(t))return"stale";try{let s=await this.tmuxPaneObserver.captureSnapshot();if(this.tmuxPaneObserver.extractActiveApprovalBlock(s)){if(!await this.promptResponder.sendKey(t.sessionId,"Escape"))return"send_failed";if(await new Promise(r=>setTimeout(r,200)),!this.isExpectedSessionStateCurrent(t))return"stale";if(!await this.verifyNoActiveCodexChooser(t.sessionId))return"unverified"}}catch(s){return a.warn("Failed to inspect Codex chooser before conversation continuation",{sessionId:t.sessionId,error:s instanceof Error?s.message:String(s)}),"unverified"}return await this.promptResponder.sendLiteral(t.sessionId,e)?(await new Promise(s=>setTimeout(s,500)),this.isExpectedSessionStateCurrent(t)?await this.verifyNoActiveCodexChooser(t.sessionId)?await this.promptResponder.sendKey(t.sessionId,"Enter")?"sent":"send_failed":"unverified":"stale"):"send_failed"});return this.terminalInputChain=i.then(()=>{},()=>{}),i}handleEventFromHook(t){if(this.isStopping)return Promise.resolve();let e=this.lifecycleGeneration,i=this.registerQueuedPermissionRequest(t,e),s=this.hookEventChain.then(()=>this.processHookEvent(t,e,i??void 0)),r=i?s.finally(()=>this.unregisterQueuedPermissionRequest(i)):s;return this.hookEventChain=r.catch(n=>{a.error("[Hooks] event handler failed",{hookEvent:t.hook_event_name,sessionId:t.session_id,error:n instanceof Error?n.message:String(n)})}),r}registerQueuedPermissionRequest(t,e){if(t.hook_event_name!=="PermissionRequest"||!this.sessionState||this.sessionWatcher.getAuthoritativeSessionId()!==t.session_id)return null;let i=this.sessionState.sessionId;this.queuedPermissionRequestSessionCounts.set(i,(this.queuedPermissionRequestSessionCounts.get(i)??0)+1);let s=this.buildApprovalPromptContextFromHookPayload(t),r=this.buildApprovalDedupeKey(s),n=`permission:${(0,se.v4)()}`,l=r?`${i}::${r}`:void 0;l&&this.queuedPermissionRequestDedupeKeys.set(l,(this.queuedPermissionRequestDedupeKeys.get(l)??0)+1);let p={sessionId:i,lifecycleGeneration:e,context:s,dedupeKey:r,occurrenceKey:n,dedupeRegistryKey:l,disposition:"pending"};if(r){let c=this.permissionRequestOccurrencesByCompletionKey.get(r)??[];c.push({occurrenceKey:n,hookObserved:!1,jsonlObserved:!1}),this.permissionRequestOccurrencesByCompletionKey.set(r,c)}let d=this.queuedPermissionRequestRegistrations.get(i)??[];return d.push(p),this.queuedPermissionRequestRegistrations.set(i,d),p}async unregisterQueuedPermissionRequest(t){let e=this.queuedPermissionRequestSessionCounts.get(t.sessionId)??0;if(e<=1?this.queuedPermissionRequestSessionCounts.delete(t.sessionId):this.queuedPermissionRequestSessionCounts.set(t.sessionId,e-1),t.dedupeRegistryKey){let l=this.queuedPermissionRequestDedupeKeys.get(t.dedupeRegistryKey)??0;l<=1?this.queuedPermissionRequestDedupeKeys.delete(t.dedupeRegistryKey):this.queuedPermissionRequestDedupeKeys.set(t.dedupeRegistryKey,l-1)}let s=(this.queuedPermissionRequestRegistrations.get(t.sessionId)??[]).filter(l=>l!==t);s.length>0?this.queuedPermissionRequestRegistrations.set(t.sessionId,s):this.queuedPermissionRequestRegistrations.delete(t.sessionId),(t.disposition==="pending"||t.disposition==="dropped"||this.sessionState?.sessionId!==t.sessionId)&&this.removePermissionRequestOccurrence(t.dedupeKey,t.occurrenceKey);let r=this.deferredTmuxPromptCandidates.get(t);if(!r)return;if(this.deferredTmuxPromptCandidates.delete(t),!this.isLifecycleCurrent(t.lifecycleGeneration)){t.disposition="dropped",this.removePermissionRequestOccurrence(t.dedupeKey,t.occurrenceKey),a.debug("Discarding deferred tmux prompt after lifecycle invalidation",{sessionId:t.sessionId,lifecycleGeneration:t.lifecycleGeneration,currentLifecycleGeneration:this.lifecycleGeneration});return}let n=this.hasRecentlyResolvedApprovalDedupeKey(t.sessionId,t.occurrenceKey);if(t.disposition==="covered"||t.disposition==="resolved"||n){a.debug("Discarding deferred tmux prompt covered by its PermissionRequest",{sessionId:t.sessionId,dedupeKey:t.dedupeKey,disposition:t.disposition});return}if(!(t.disposition==="dropped"||this.sessionState?.sessionId!==t.sessionId)){a.debug("Replaying deferred tmux prompt after PermissionRequest produced no durable owner",{sessionId:t.sessionId,dedupeKey:t.dedupeKey});try{await this.handleTmuxPromptCandidate(r.snapshot,t,r.promptHash)}catch(l){a.error("Failed to replay deferred tmux prompt candidate",{sessionId:t.sessionId,error:l instanceof Error?l.message:String(l)})}}}removePermissionRequestOccurrence(t,e){if(!t||!e)return;let i=this.permissionRequestOccurrencesByCompletionKey.get(t);if(!i)return;let s=i.filter(r=>r.occurrenceKey!==e);s.length>0?this.permissionRequestOccurrencesByCompletionKey.set(t,s):this.permissionRequestOccurrencesByCompletionKey.delete(t)}observePermissionRequestCompletion(t,e){if(!t)return{shouldResolve:!0};let i=this.permissionRequestOccurrencesByCompletionKey.get(t);if(!i)return{shouldResolve:!0};let s=e==="hook"?"hookObserved":"jsonlObserved",r=i.find(l=>!l[s]);if(!r)return a.debug("Ignoring duplicate interactive-prompt completion observation",{completionKey:t,producer:e}),{shouldResolve:!1};let n=!r.hookObserved&&!r.jsonlObserved;return r[s]=!0,r.hookObserved&&r.jsonlObserved&&this.removePermissionRequestOccurrence(t,r.occurrenceKey),{shouldResolve:n,occurrenceKey:r.occurrenceKey}}isPermissionRequestOccurrenceKey(t){return t.startsWith("permission:")}consumeRecoveryPermissionReplay(t,e,i){let s=this.recoveryPermissionReplay,r=this.pendingInteractivePrompt;return!s||!e||s.ownerSessionId!==t.sessionId||s.completionKey!==e||r?.ownerSessionId!==t.sessionId||r.source!=="permission_hook"||r.dedupeKey!==s.occurrenceKey||r.completionKey!==s.completionKey?!1:(this.recoveryPermissionReplay=null,i&&(this.removePermissionRequestOccurrence(i.dedupeKey,i.occurrenceKey),i.occurrenceKey=s.occurrenceKey,i.disposition="covered"),a.info("[Hooks] Reused adopted PermissionRequest occurrence for one recovery replay",{sessionId:t.sessionId,completionKey:e,occurrenceKey:s.occurrenceKey}),!0)}async processHookEvent(t,e,i){if(!this.isLifecycleCurrent(e))return;let{session_id:s,hook_event_name:r,type:n,content:l,metadata:p}=t;a.info("[Hooks] Received event",{sessionId:s,hookEvent:r,type:n,contentLength:l?.length});let d=this.sessionWatcher.getAuthoritativeSessionId();if(d&&d!==s){a.warn("[Hooks] Rejecting event for foreign native session",{hookEvent:r,sessionId:s,authoritativeSessionId:d});return}if(p?.transcript_path){let f=await this.sessionWatcher.bindToSessionTranscript(p.transcript_path,s);if(!this.isLifecycleCurrent(e))return;let y=f.status==="pending"?await f.completion:f;if(!this.isLifecycleCurrent(e))return;if(y.status!=="bound"){a.warn("[Hooks] Rejecting event whose transcript ownership was not proven",{hookEvent:r,sessionId:s,reason:y.reason});return}}else if(d!==s){a.warn("[Hooks] Rejecting event without an owned transcript",{hookEvent:r,sessionId:s});return}if(!this.isLifecycleCurrent(e)||this.sessionWatcher.getAuthoritativeSessionId()!==s){a.warn("[Hooks] Rejecting event after ownership changed during admission",{hookEvent:r,sessionId:s,authoritativeSessionId:this.sessionWatcher.getAuthoritativeSessionId()});return}if(this.hooksActive=!0,r==="SessionStart"){if(this.launchSessionInitPromise&&(await this.launchSessionInitPromise,!this.isLifecycleCurrent(e)))return;if(this.sessionState){if(a.info("[Hooks] SessionStart \u2014 launch session already exists, updating codexSessionId",{existingSessionId:this.sessionState.sessionId,codexSessionId:s}),this.sessionState.codexSessionId=s,this.sessionState.metadata={...this.sessionState.metadata,codexSessionId:s,cliVersion:p?.model||"unknown",modelProvider:p?.model||"unknown",launchSession:void 0},this.appSyncClient.updateSession({sessionId:this.sessionState.sessionId,metadata:this.sessionState.metadata}).catch(f=>a.warn("Failed to update session metadata",{error:f})),await this.startTmuxObserverWithBeacon("session_start_existing"),!this.isLifecycleCurrent(e))return;await this.ensureToolActivityStarted(s)}else{let f={id:s,timestamp:new Date().toISOString(),cwd:p?.cwd||process.cwd(),originator:"hook",cli_version:p?.model||"unknown",instructions:null,source:p?.source||"startup",model_provider:p?.model||"unknown"};await this.ensureSessionStarted(f)}return}if(!this.sessionState){a.warn("[Hooks] Hook event for un-bootstrapped session \u2014 self-healing via session bootstrap (#638)",{hookEvent:r,sessionId:s});let f={id:s,timestamp:new Date().toISOString(),cwd:p?.cwd||process.cwd(),originator:"hook",cli_version:p?.model||"unknown",instructions:null,source:p?.source||"startup",model_provider:p?.model||"unknown"};if(await this.ensureSessionStarted(f),!this.isLifecycleCurrent(e))return;if(!this.sessionState){a.warn("[Hooks] Session still not initialized after self-heal, dropping event",{hook_event_name:r});return}}let c=this.sessionState,u=c.sessionId;if(n==="USER_PROMPT"&&(this.approvalDetector.clear(),this.clearInteractivePromptsForAcceptedInput(c)),n==="USER_PROMPT"&&l){let f=this.consumeRecentMobilePrompt(u,l);if(f){a.info("[Hooks] Skipping duplicate USER_PROMPT from mobile",{sessionId:u,matchType:f.matchType,originalLength:f.originalLength,echoLength:f.echoLength});return}}if(r==="PreToolUse"){a.debug("[Hooks] PreToolUse observed; AppSync emission suppressed",{toolName:p?.tool_name||"unknown",sessionId:u});return}if(r==="PermissionRequest"){let f=i??this.registerQueuedPermissionRequest(t,e);if(!f){a.error("[Hooks] Dropping admitted PermissionRequest without occurrence registration",{sessionId:u,nativeSessionId:s});return}try{await this.handlePermissionRequestHook(t,c,f)}finally{i||await this.unregisterQueuedPermissionRequest(f)}return}if(r==="PostToolUse"){let f=this.buildApprovalPromptContextFromHookPayload(t),y=this.buildApprovalDedupeKey(f),h=this.firstString(p?.tool_use_id,p?.call_id,p?.callId)??"",v=this.observePermissionRequestCompletion(y,"hook");if(v.shouldResolve&&await this.clearResolvedInteractivePrompt(h,v.occurrenceKey??y),!this.isExpectedSessionStateCurrent(c)||this.toolActivity?.isActive()&&await this.toolActivity.observeCall({callId:p?.tool_use_id??p?.call_id??p?.callId,toolName:p?.tool_name,toolInput:p?.tool_input})!=="closed")return;let P=this.encryptForEmit(l,p,m.EventType.TOOL_USE,u);if(!P)return;let E=P.content,S=P.metadata,b=P.isEncrypted,O=p?.tool_use_id??p?.call_id??p?.callId,L=typeof O=="string"&&O.length>0&&!!this.sessionKey,C=L?this.getToolActivityLegacyRecorder(u):void 0;C&&L&&C.markLegacyInFlight(O);try{let D=await this.appSyncClient.createEvent({sessionId:u,type:m.EventType.TOOL_USE,source:m.EventSource.DESKTOP,content:E,metadata:S,isEncrypted:b,timestamp:(0,m.prepareEventTimestamp)({orderingKey:u})});C&&L&&((0,m.isPersistedEventResult)(D)?await C.finalizeLegacyOwned([O]):C.clearLegacyInFlight(O))}catch(D){throw C&&L&&C.clearLegacyInFlight(O),D}return}if(n==="ASSISTANT_RESPONSE"||n==="USER_PROMPT"){if(n==="ASSISTANT_RESPONSE"){this.sessionWatcher.getBindSource()==="authoritative"&&this.sessionWatcher.getAuthoritativeSessionId()===s?a.debug("[Hooks] Suppressing Stop final \u2014 JSONL watcher authoritatively bound to this session (Bug #2)"):a.warn("[Hooks] Dropping Stop final after authoritative ownership changed",{authoritativeSessionId:this.sessionWatcher.getAuthoritativeSessionId()});return}let f=this.encryptForEmit(l,void 0,m.EventType.USER_PROMPT,u);if(!f)return;await this.appSyncClient.createEvent({sessionId:u,type:m.EventType.USER_PROMPT,source:m.EventSource.DESKTOP,content:f.content,isEncrypted:f.isEncrypted,timestamp:(0,m.prepareEventTimestamp)({orderingKey:u})});return}}mapToolName(t){return{shell_command:"Bash",shell:"Bash",apply_patch:"Edit",create_file:"Write",read_file:"Read"}[t]||t}trackMobilePrompt(t,e){this.mobilePromptDeduper.track(t,e),a.debug("Tracking mobile prompt for USER_PROMPT echo deduplication",{sessionId:t,promptLength:e.trim().length})}forgetMobilePrompt(t,e){this.mobilePromptDeduper.forget(t,e)}consumeRecentMobilePrompt(t,e){return this.mobilePromptDeduper.consumeIfDuplicate(t,e)}setupEventHandlers(){this.sessionWatcher.on("session-started",async t=>{try{if(this.launchSessionInitPromise&&await this.launchSessionInitPromise,this.sessionState){a.info("[JSONL] Session already active, skipping",{currentSessionId:this.sessionState.sessionId,codexSessionId:t.id}),await this.ensureToolActivityStarted(t.id);return}await this.ensureSessionStarted(t)}catch(e){a.error("[JSONL] session-started handler failed (non-fatal) \u2014 next event retries",{codexSessionId:t?.id,error:String(e)})}}),this.sessionWatcher.on("log-entry",t=>{this.enqueueLogEntry(t)}),this.approvalDetector.on("approval-pending",async t=>{try{await this.handleApprovalPending(t)}catch(e){a.error("approval-pending handler failed (non-fatal)",{error:String(e)})}}),this.tmuxPaneObserver.on("prompt-candidate",async t=>{try{await this.handleTmuxPromptCandidate(t.snapshot,void 0,t.promptHash)}catch(e){a.error("prompt-candidate handler failed (non-fatal)",{error:String(e)})}}),this.tmuxPaneObserver.on("prompt-cleared",t=>{let e=this.sessionState;e&&this.clearObservedInteractivePrompt(e,t.promptHash).catch(i=>{a.error("prompt-cleared handler failed (non-fatal)",{error:String(i)})})}),this.tmuxPaneObserver.on("observer-error",t=>{a.debug("Tmux pane observer error",{error:t})}),this.sessionWatcher.on("error",t=>{a.error("Session watcher error:",t)})}async ensureSessionStarted(t,e){if(this.isStopping||(this.launchSessionInitPromise&&await this.launchSessionInitPromise,this.isStopping)||this.sessionState)return;process.env[ye]==="1"&&await this.bindRecoveryBootstrapIdentity(t.id);let i=this.sessionBootstrapRetryAt-Date.now();if(i>0){a.warn("Session bootstrap is in retry backoff; hook will be retried later",{codexSessionId:t.id,retryDelayMs:i,failureCount:this.sessionBootstrapFailureCount});return}if(this.sessionStartedInitPromise){try{await this.sessionStartedInitPromise}catch{}return}let s=this.handleSessionStarted(t,e);this.sessionStartedInitPromise=s.catch(()=>{});try{await s}finally{this.sessionStartedInitPromise=null}}async handleSessionStarted(t,e){if(this.isStopping)return;let i=this.lifecycleGeneration;a.info("Handling new Codex session",{codexSessionId:t.id}),this.isInitializingSession=!0,this.bufferedLogEntries=[],this.sessionState&&await this.endActiveSession("new-codex-session-started");let s=process.env.CODEX_WORKING_DIRECTORY||t.cwd||process.cwd(),r=this.getOrCreateBootstrapSessionId(),n=this.appSyncClient.getCurrentUserId(),l={codexSessionId:t.id,cliVersion:t.cli_version,modelProvider:t.model_provider},p={sessionKey:null,sessionIsEncrypted:!0};try{let d={sessionId:r,userId:n,agentType:m.AgentType.CODEX,projectPath:s,metadata:l},c=await this.resumeOrCreateBootstrapSession(d);if(r=c.sessionId,!this.isLifecycleCurrent(i)){this.isInitializingSession=!1,await this.retireCancelledBootstrap(r,"session_started");return}this.sessionKey=c.sessionKey,this.sessionKeyGen=c.sessionKeyGen,this.sessionIsEncrypted=!!c.sessionKey,p={sessionKey:c.sessionKey,sessionIsEncrypted:!!c.sessionKey},await _("daemon_init_step_completed",{step:"session_resume_or_create",path:"session_started"})}catch(d){if(this.isInitializingSession=!1,!this.isLifecycleCurrent(i)){let c=this.authoritativeSessionIdFromError(d)??r;await this.retireCancelledBootstrap(c,"session_started_error");return}throw await _("daemon_init_step_failed",{step:"session_resume_or_create",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),d?.code==="ENCRYPTED_SESSION_NO_KEY"&&(this.sessionIsEncrypted=!0,this.sessionKey=null),this.bindBootstrapIdentityFromError(d),this.recordSessionBootstrapFailure(d,"session_started"),a.error("Failed to create/resume session:",d),d}try{this.sessionState={sessionId:r,userId:n,projectPath:s,cwd:t.cwd,createdAt:new Date,subscriptionActive:!1,metadata:l,encryptionSnapshot:p,codexSessionId:t.id,codexLogFile:this.sessionWatcher.getActiveLogFile()||void 0},this.clearSessionBootstrapFailure(),this.bootstrapSessionId=null,this.recoveryBootstrapOwnerBound=!1,await _("daemon_init_step_completed",{step:"session_state_set",path:"session_started"})}catch(d){await _("daemon_init_step_failed",{step:"session_state_set",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to set session state:",d)}await this.adoptDaemonHandoffState(r),this.sessionState&&this.rebindWaitingPermissionRequests(this.sessionState),await this.ensureToolActivityStarted(t.id);try{this.subscribeToMobileEvents(r)?await _("daemon_init_step_completed",{step:"subscribe_mobile_events",path:"session_started"}):await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"session_started",error_class:"SubscriptionSetupFailed",error_message:"subscribeToMobileEvents returned false"})}catch(d){await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to subscribe to mobile events:",d)}if(e)try{await e()}catch(d){a.error("E1: pre-heartbeat re-raise hook failed (non-fatal)",{sessionId:r,error:d instanceof Error?d.message:String(d)})}try{await this.drainRetirementOrphans(r)}catch(d){a.error("E1: retirement-orphan drain failed (non-fatal)",{sessionId:r,error:d instanceof Error?d.message:String(d)})}try{await this.appSyncClient.startHeartbeat(r)?await _("daemon_init_step_completed",{step:"heartbeat_start",path:"session_started"}):(await _("daemon_init_step_failed",{step:"heartbeat_start",path:"session_started",error_class:"InitialHeartbeatNotPersisted",error_message:"Backend did not confirm the initial heartbeat mutation"}),a.error("Initial session heartbeat was not persisted",{sessionId:r}))}catch(d){await _("daemon_init_step_failed",{step:"heartbeat_start",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to start heartbeat:",d)}try{await this.subscribeToOnApplyUserDecision(r)}catch(d){a.error("Failed to subscribe to onApplyUserDecision (non-fatal)",{error:d})}this.startMobileEndWatcher(r);try{await this.flushBufferedLogEntries(),await _("daemon_init_step_completed",{step:"flush_buffered_entries",path:"session_started"})}catch(d){await _("daemon_init_step_failed",{step:"flush_buffered_entries",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to flush buffered log entries:",d),this.bufferedLogEntries=[]}await this.startTmuxObserverWithBeacon("session_started"),this.isInitializingSession=!1}getOrCreateBootstrapSessionId(){return this.bootstrapSessionId||(this.bootstrapSessionId=X.mintBackendSessionId()),this.bootstrapSessionId}async bindRecoveryBootstrapIdentity(t){if(!(process.env[ye]!=="1"||this.bootstrapSessionId||this.sessionState||!t))try{let e=await this.buildToolActivityIntegration().recordedBackendSessionId(t);if(!e){a.warn("Recovery daemon found no durable backend owner; a new session will be created",{rolloutId:t});return}if(!/^codex-[A-Za-z0-9_-]{1,180}$/.test(e)){a.warn("Recovery daemon ignored invalid durable backend owner",{rolloutId:t});return}this.bootstrapSessionId=e,this.recoveryBootstrapOwnerBound=!0,a.info("Recovery daemon reclaiming existing backend session",{rolloutId:t,sessionId:e})}catch(e){a.warn("Recovery daemon could not read the durable rollout owner; a new session will be created",{rolloutId:t,error:e instanceof Error?e.message:String(e)})}}isSessionIdReservedRejection(t){return(t instanceof Error?t.message:String(t)).includes("SESSION_ID_RESERVED")}async resumeOrCreateBootstrapSession(t){try{return await this.resumeBackendSession(t,this.appSyncClient,a)}catch(e){if(!this.recoveryBootstrapOwnerBound||!this.isSessionIdReservedRejection(e))throw e;return a.warn("Recovery discarded a permanently reserved pending create; retrying the durable rollout owner",{sessionId:t.sessionId}),this.resumeBackendSession(t,this.appSyncClient,a)}}startTmuxLifecycleMonitor(){if(this.tmuxLifecycleTimer)return;let t=process.env[$];t&&(this.tmuxLifecycleInitDeadlineMs=Date.now()+Ci,this.tmuxLifecycleTimer=setInterval(()=>{this.checkTmuxLifecycle(t)},xi),this.tmuxLifecycleTimer.unref?.(),this.checkTmuxLifecycle(t))}async tmuxSessionState(t){try{return await _i("tmux",["has-session","-t",t]),"alive"}catch(e){let i=_t(e);return i==="absent"?i:(a.warn("Could not inspect native Codex tmux session; preserving daemon",{tmuxSession:t,error:e instanceof Error?e.message:String(e)}),"unknown")}}async checkTmuxLifecycle(t){if(!(this.isStopping||this.tmuxLifecycleCheckInFlight)){this.tmuxLifecycleCheckInFlight=!0;try{let e=await this.tmuxSessionState(t);if(e==="alive"){this.tmuxLifecycleObservedAlive=!0;return}let i=this.tmuxLifecycleObservedAlive||Date.now()>=this.tmuxLifecycleInitDeadlineMs;if(e==="unknown"||!i||this.isStopping)return;this.stopTmuxLifecycleMonitor(),a.info("Native Codex tmux session ended; stopping companion daemon",{tmuxSession:t}),this.stop().then(()=>process.exit(0),s=>{a.error("Failed to stop companion daemon after native session end",{error:s instanceof Error?s.message:String(s)}),process.exit(1)})}finally{this.tmuxLifecycleCheckInFlight=!1}}}stopTmuxLifecycleMonitor(){this.tmuxLifecycleTimer&&(clearInterval(this.tmuxLifecycleTimer),this.tmuxLifecycleTimer=null)}async stopForTerminalSignal(t){if(t==="SIGHUP"){let e=process.env[$];if(e){let i=await this.tmuxSessionState(e);if(i!=="absent")return a.info("Ignoring SIGHUP while native Codex tmux session remains available",{tmuxSession:e,state:i}),!1}}return await this.stop(),!0}isLifecycleCurrent(t){return!this.isStopping&&this.lifecycleGeneration===t}authoritativeSessionIdFromError(t){let e=t?.authoritativeSessionId;return typeof e=="string"&&e.length>0?e:null}async retireCancelledBootstrap(t,e){this.appSyncClient.stopHeartbeat(t),this.appSyncClient.cleanupSubscription(t);try{await this.appSyncClient.updateSession({sessionId:t,status:m.SessionStatus.INACTIVE}),a.info("Cancelled bootstrap row marked INACTIVE",{sessionId:t,path:e})}catch(i){a.warn("Cancelled bootstrap row could not be marked INACTIVE",{sessionId:t,path:e,error:i instanceof Error?i.message:String(i)})}}bindBootstrapIdentityFromError(t){let e=t?.authoritativeSessionId;typeof e!="string"||e.length===0||(this.bootstrapSessionId=e,a.info("Retained authoritative backend identity from failed bootstrap",{sessionId:e}))}recoverRetiredBackendSession(t){if(this.retiredSessionRecoveryPromise)return this.retiredSessionRecoveryPromise;if(this.isStopping)return Promise.resolve();let e=(async()=>{if(this.launchSessionInitPromise&&await this.launchSessionInitPromise,this.sessionStartedInitPromise&&await this.sessionStartedInitPromise,this.isStopping)return;let i=this.sessionState;if(!i||i.sessionId!==t)return;let s={id:i.codexSessionId||t,timestamp:new Date().toISOString(),cwd:i.cwd||i.projectPath,originator:"codevibe-retired-session-recovery",cli_version:String(i.metadata?.cliVersion??"unknown"),instructions:null,source:"codevibe",model_provider:String(i.metadata?.modelProvider??"unknown")};a.warn("Backend retired live Codex session; creating replacement row",{sessionId:t,codexSessionId:s.id}),this.parkRetirementOrphans(t),await this.endActiveSession("backend-generation-retired"),this.bootstrapSessionId=X.mintBackendSessionId(),this.recoveryBootstrapOwnerBound=!1,this.clearSessionBootstrapFailure(),await this.ensureSessionStarted(s)})();return this.retiredSessionRecoveryPromise=e.finally(()=>{this.retiredSessionRecoveryPromise=null}),this.retiredSessionRecoveryPromise}recordSessionBootstrapFailure(t,e){this.sessionBootstrapFailureCount+=1;let i=t instanceof Error?t.message:String(t),r=i.includes("SESSION_LIMIT_EXCEEDED")?6e4:Math.min(5e3*2**(this.sessionBootstrapFailureCount-1),6e4);this.sessionBootstrapRetryAt=Date.now()+r,a.warn("Session bootstrap retry scheduled",{path:e,requestedSessionId:this.bootstrapSessionId,failureCount:this.sessionBootstrapFailureCount,delayMs:r,error:i})}clearSessionBootstrapFailure(){this.sessionBootstrapFailureCount=0,this.sessionBootstrapRetryAt=0}async flushBufferedLogEntries(){if(this.bufferedLogEntries.length===0)return;let t=this.bufferedLogEntries;this.bufferedLogEntries=[],a.info("Flushing buffered log entries after session initialization",{count:t.length,sessionId:this.sessionState?.sessionId});let e=Promise.resolve();for(let i of t)e=this.enqueueLogEntry(i);await e.catch(()=>{})}enqueueLogEntry(t){let e=this.logEntryChain.then(()=>this.handleLogEntry(t));return this.logEntryChain=e.catch(i=>{a.error("[JSONL] log entry handler failed",{type:t.type,err:String(i)})}),e}async handleLogEntry(t){if(!this.sessionState){if(this.isInitializingSession){this.bufferedLogEntries.push(t),a.debug("Buffering log entry until session initialization completes",{type:t.type,bufferedCount:this.bufferedLogEntries.length});return}a.warn("Received log entry but no active session");return}let e=this.sessionState,i=e.sessionId,{sessionKey:s,sessionIsEncrypted:r}=e.encryptionSnapshot;if(t.type==="event_msg"&&t.payload?.type==="turn_aborted"&&(this.approvalDetector.clear(),this.clearInteractivePromptsForAcceptedInput(e)),t.type==="response_item"&&t.payload){let h=t.payload.type;if(h==="function_call"||h==="custom_tool_call")this.approvalDetector.onToolCallStart(t.payload.call_id,t.payload.name,t.payload.arguments||t.payload.input||"");else if(h==="function_call_output"||h==="custom_tool_call_output"){let v=this.approvalDetector.getPendingCalls().find(S=>S.callId===t.payload.call_id),P=v?this.buildApprovalDedupeKey(this.buildApprovalPromptContextFromPendingCall(v)):void 0;this.approvalDetector.onToolCallComplete(t.payload.call_id);let E=this.observePermissionRequestCompletion(P,"jsonl");if(E.shouldResolve&&await this.clearResolvedInteractivePrompt(t.payload.call_id,E.occurrenceKey??P),!this.isExpectedSessionStateCurrent(e))return}}let n=Ye(t,i);if(!n)return;n.timestamp=(0,m.prepareEventTimestamp)({orderingKey:i,agentClock:t.timestamp});let l=t.payload?.type,p=!1;if(this.toolActivity?.isActive()&&n.type===m.EventType.TOOL_USE){let h=l==="function_call"||l==="custom_tool_call",v=l==="function_call_output"||l==="custom_tool_call_output";if(h&&typeof t.payload?.call_id=="string"){let P=this.sessionWatcher.getActiveLogFile();P&&this.toolActivity.bindTranscript(P);let E=await this.toolActivity.observeCall({callId:t.payload.call_id,toolName:n.metadata?.toolName??n.metadata?.tool_name,toolInput:n.metadata?.toolInput??n.metadata?.tool_input,ts:t.timestamp});if(!this.isExpectedSessionStateCurrent(e)||E!=="closed")return;p=!0}if(v)return}if(this.toolActivity?.isActive()&&(l==="user_message"||l==="agent_message")&&(await this.toolActivity.flush().catch(h=>a.warn("[tool-activity] codex boundary flush failed",{sessionId:i,err:String(h)})),!this.isExpectedSessionStateCurrent(e)))return;let d=l==="function_call"||l==="function_call_output",c=n.type===m.EventType.USER_PROMPT||n.type===m.EventType.ASSISTANT_RESPONSE||d&&(n.type===m.EventType.TOOL_USE||n.type===m.EventType.INTERACTIVE_PROMPT);if(!this.hooksActive&&c&&(await this.emitHooksCompatibilityModeNotice(e),!this.isExpectedSessionStateCurrent(e)))return;if(this.hooksActive){if(n.type===m.EventType.USER_PROMPT){a.debug("[JSONL] Skipping USER_PROMPT \u2014 hooks deliver it",{type:n.type});return}if(d&&(n.type===m.EventType.TOOL_USE||n.type===m.EventType.INTERACTIVE_PROMPT)&&!p){a.debug("[JSONL] Skipping function_call \u2014 hooks deliver this",{type:n.type,tool:t.payload?.name});return}}if(n.type===m.EventType.USER_PROMPT&&n.source===m.EventSource.DESKTOP){let h=this.consumeRecentMobilePrompt(i,n.content);if(h){a.info("[JSONL] Skipping duplicate USER_PROMPT from mobile",{sessionId:i,matchType:h.matchType,originalLength:h.originalLength,echoLength:h.echoLength});return}}if(this.sessionState!==e){a.warn("[JSONL] Dropping event from stale session generation (#638)",{sessionId:i,currentSessionId:this.sessionState?.sessionId});return}let u=t.payload?.call_id,f=n.type===m.EventType.TOOL_USE&&typeof u=="string"&&u.length>0&&!!s,y=f?this.getToolActivityLegacyRecorder(i):void 0;y&&f&&y.markLegacyInFlight(u);try{let h=(0,m.encryptForEmit)(s,r,n.content,n.metadata);if(!h){a.error("No session key for ENCRYPTED session \u2014 dropping JSONL event (fail-closed, #638)",{type:n.type,sessionId:i});return}n.content=h.content,n.metadata=h.metadata,h.isEncrypted&&(n.isEncrypted=!0,a.debug("Event encrypted",{type:n.type}));let v=await this.appSyncClient.createEvent(n);a.debug("Event synced to backend",{type:n.type,encrypted:h.isEncrypted}),y&&f&&((0,m.isPersistedEventResult)(v)?await y.finalizeLegacyOwned([u]):y.clearLegacyInFlight(u))}catch(h){y&&f&&y.clearLegacyInFlight(u),a.error("Failed to sync event:",h)}}async handlePermissionRequestHook(t,e,i){if(!this.isExpectedSessionStateCurrent(e)){i&&(i.disposition="dropped");return}let s=i?.context??this.buildApprovalPromptContextFromHookPayload(t),r=i?.dedupeKey??this.buildApprovalDedupeKey(s);if(this.consumeRecoveryPermissionReplay(e,r,i))return;let n=i?.occurrenceKey??`permission:${(0,se.v4)()}`,l={ownerState:e,context:s,dedupeKey:r,occurrenceKey:n,registration:i};this.permissionRequestHookInFlight=l;try{let p=await this.handlePermissionRequestHookWhileTracked(t,e,s,n,r);i&&(i.disposition=p)}finally{this.permissionRequestHookInFlight===l&&(this.permissionRequestHookInFlight=null)}}buildApprovalPromptContextFromHookPayload(t){let e=t.metadata||{},i=typeof e.tool_name=="string"?e.tool_name:"Tool",s=e.tool_input,r=this.firstString(s?.command,s?.cmd),n=V(r)||ee(r),l=i==="apply_patch"?this.firstString(s?.patch,r,typeof s=="string"?s:void 0):void 0,d=V(l)||n,c=!!d,u=d?"apply_patch":i,f=d||this.stringifyToolInput(s),y=d?this.extractFilePathFromToolInput("apply_patch",void 0,d):this.extractFilePathFromToolInput(u,s,f),h=d?this.resolveHookPatchPath(y,e.cwd):y;return{toolName:u,framedPatch:c,toolInput:s,rawInput:f,filePath:h,diff:c?f:void 0,hint:h&&this.mapToolNameForApproval(u)==="Edit"?`File: ${h}`:this.buildPermissionRequestHint(u,s,f)}}resolveHookPatchPath(t,e){if(!t||k.isAbsolute(t))return t;if(!(typeof e!="string"||!k.isAbsolute(e)))return k.resolve(e,t)}async handlePermissionRequestHookWhileTracked(t,e,i=this.buildApprovalPromptContextFromHookPayload(t),s=`permission:${(0,se.v4)()}`,r,n){let l=t.metadata||{},{toolName:p,toolInput:d,rawInput:c}=i,u=this.buildToolDetailsForInteractivePrompt(i),f=u.tool_name||this.mapToolNameForApproval(p),y=u.tool_input||this.buildFallbackToolInput(i),h=!!(f&&y);if(r??=this.buildApprovalDedupeKey({toolName:p,toolInput:d,filePath:i.filePath,rawInput:c,hint:i.hint}),this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s))return"resolved";let v=n??await this.tryParsePermissionRequestPromptFromTmux((D,Q)=>this.parsedPromptMatchesApprovalContext(D,i,Q),()=>this.isExpectedSessionStateCurrent(e));if(!this.isExpectedSessionStateCurrent(e))return a.warn("[Hooks] Dropping stale PermissionRequest after session generation changed",{sessionId:e.sessionId,currentSessionId:this.sessionState?.sessionId}),"dropped";if(this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s))return a.info("[Hooks] Dropping PermissionRequest completed while terminal options were being parsed",{sessionId:e.sessionId,toolName:p,occurrenceKey:s}),"resolved";let P=v?.parsedPrompt??null;if(!P)return v?.differentPrompt?(this.waitingPermissionRequests.set(s,{ownerState:e,context:i,occurrenceKey:s,dedupeKey:r,payload:t}),a.info("[Hooks] Queued PermissionRequest until its desktop dialog is visible",{sessionId:e.sessionId,occurrenceKey:s,toolName:p}),"waiting"):(a.warn("[Hooks] Suppressing PermissionRequest mobile prompt because exact Codex options are unavailable",{sessionId:e.sessionId,toolName:p,hint:i.hint}),this.raiseSuppressedBadge(e.sessionId,s,{suppressTmuxObserverUntilResolved:!0,observerSnapshot:v?.snapshot,completionKey:r}),"covered");let E=this.mapToolNameForApproval(p)==="Bash"?this.firstString(d?.command,d?.cmd):void 0,S=this.buildCodexPromptPresentation(P,E,v?.snapshot);if(!S)return a.warn("[Hooks] Suppressing PermissionRequest mobile prompt because Codex option hotkeys are unavailable",{sessionId:e.sessionId,toolName:p,hint:i.hint}),this.raiseSuppressedBadge(e.sessionId,s,{suppressTmuxObserverUntilResolved:!0,observerSnapshot:v?.snapshot,completionKey:r}),"covered";let b=s,O=this.buildApprovalPromptContent(S.content,{toolName:f,toolInput:y,hint:i.hint,filePath:i.filePath}),L={promptId:b,kind:S.kind,options:S.options,submitMap:S.submitMap,promptText:O,createdAt:Date.now(),source:"permission_hook",dedupeKey:s,completionKey:r,ownerSessionId:e.sessionId,observerMatchKey:this.buildObserverPromptMatchKey(P),observerPromptHash:v?.snapshot?this.tmuxPaneObserver.hashPromptSnapshot(v.snapshot):void 0,requiresFollowUpText:S.requiresFollowUpText},C={isApprovalHint:!0,toolName:p,toolInput:d,hint:i.hint,filePath:i.filePath,diff:i.diff,rawInput:c,tool_name:f,tool_input:y,has_details:h,options:S.options,instructions:S.instructions,prompt_source:P?"permission_hook_tmux":"permission_hook",permission_mode:l.permission_mode,turn_id:l.turn_id,dedupe_key:s};return a.info("[Hooks] Sending PermissionRequest interactive prompt",{sessionId:e.sessionId,toolName:p,promptId:b,promptSource:C.prompt_source,occurrenceKey:s}),await this.enqueueOrEmitInteractivePrompt({prompt:L,content:O,metadata:C,ownerState:e}),this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s)?"resolved":"covered"}async emitHooksCompatibilityModeNotice(t){if(this.hooksCompatibilityNoticeSent||!this.isExpectedSessionStateCurrent(t))return;this.hooksCompatibilityNoticeSent=!0;let e="Codex hooks are not active. CodeVibe is using compatibility mode: mobile approvals still mirror the desktop prompt, but timeline events may be delayed or incomplete. Open Codex /hooks and trust/enable CodeVibe hooks for full fidelity.",i={compatibility_mode:!0,reason:"codex_hooks_inactive",action:"trust_enable_codevibe_hooks"};a.warn("Codex hooks inactive; running in compatibility mode",{sessionId:t.sessionId});let s=this.encryptForEmit(e,i,m.EventType.NOTIFICATION,t.sessionId);if(s)try{await this.appSyncClient.createEvent({sessionId:t.sessionId,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,content:s.content,metadata:s.metadata,timestamp:(0,m.prepareEventTimestamp)({orderingKey:t.sessionId}),...s.isEncrypted?{isEncrypted:!0}:{}})}catch(r){a.warn("Failed to emit hooks compatibility mode notification",{error:r})}}async handleApprovalPending(t){let e=this.sessionState;if(!e)return;if((this.queuedPermissionRequestSessionCounts.get(e.sessionId)??0)>0){a.debug("Skipping heuristic approval prompt while PermissionRequest owns the session prompt",{sessionId:e.sessionId,callId:t.callId});return}let i=this.buildApprovalDedupeKey(t);if(i&&this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,i)){a.info("Skipping heuristic approval prompt; same approval was already answered recently",{callId:t.callId,toolName:t.toolName,dedupeKey:i});return}if(i&&this.hasDurablePermissionHookFallbackByDedupeKey(e.sessionId,i)){a.debug("Skipping heuristic approval prompt already owned by a hook fallback",{sessionId:e.sessionId,callId:t.callId,dedupeKey:i});return}if(i&&this.hasActiveOrQueuedPermissionHookPrompt(e.sessionId,i)){this.mergeCallIdIntoPromptByDedupeKey(e.sessionId,i,t.callId),a.info("Skipping heuristic approval prompt; PermissionRequest hook already emitted it",{callId:t.callId,toolName:t.toolName,dedupeKey:i});return}a.info("Sending approval pending interactive prompt",t);try{let s=await this.tryParseInteractivePromptFromTmux(),r=s?.parsedPrompt??null;if((this.queuedPermissionRequestSessionCounts.get(e.sessionId)??0)>0||r&&this.hasMatchingDurablePermissionHookFallback(r,e.sessionId,s?.snapshot)||r&&this.hasMatchingPermissionHookPrompt(r,e.sessionId)){a.debug("Skipping heuristic approval prompt after PermissionRequest claimed the terminal dialog",{sessionId:e.sessionId,callId:t.callId});return}let n=this.buildToolDetailsForInteractivePrompt(t,s?.snapshot),l=n.tool_name||this.mapToolNameForApproval(t.toolName),p=n.tool_input||this.buildFallbackToolInput(t),d=!!(l&&p);if(!r){a.warn("Suppressing heuristic approval prompt because exact Codex options are unavailable",{callId:t.callId,toolName:t.toolName,hint:t.hint}),this.raiseSuppressedBadge(e.sessionId,i);return}if(!this.parsedPromptMatchesApprovalContext(r,t,s?.snapshot)){a.warn("Suppressing heuristic approval prompt because parsed tmux prompt does not match the active tool",{callId:t.callId,toolName:t.toolName,hint:t.hint,parsedPromptText:r.promptText}),this.raiseSuppressedBadge(e.sessionId,i);return}let c=this.mapToolNameForApproval(t.toolName)==="Bash"?this.firstString(t.toolInput?.command,t.toolInput?.cmd):void 0,u=this.buildCodexPromptPresentation(r,c,s?.snapshot);if(!u){a.warn("Suppressing heuristic approval prompt because Codex option hotkeys are unavailable",{callId:t.callId,toolName:t.toolName,hint:t.hint}),this.raiseSuppressedBadge(e.sessionId,i);return}let f=u.options,y=this.buildApprovalPromptContent(u.content,{toolName:l,toolInput:p,hint:t.hint,filePath:t.filePath}),h={promptId:t.callId,callId:t.callId,kind:u.kind,options:f,submitMap:u.submitMap,promptText:u.promptText,createdAt:Date.now(),source:r?"tmux":"heuristic",dedupeKey:i,ownerSessionId:e.sessionId,observerMatchKey:this.buildObserverPromptMatchKey(r),requiresFollowUpText:u.requiresFollowUpText},v={isApprovalHint:!0,toolName:t.toolName,toolInput:t.toolInput,hint:t.hint,callId:t.callId,filePath:t.filePath,diff:t.diff,rawInput:t.rawInput,tool_name:l,tool_input:p,has_details:d,options:f,instructions:u.instructions,prompt_source:r?"tmux":"heuristic",dedupe_key:i};a.debug("Interactive prompt (pre-encryption)",{sessionId:e.sessionId,callId:t.callId,contentPreview:y.substring(0,200),toolDetails:n,metadata:v}),await this.enqueueOrEmitInteractivePrompt({prompt:h,content:y,metadata:v,ownerState:e})}catch(s){a.error("Failed to send approval interactive prompt:",s)}}async handleTmuxPromptCandidate(t,e,i){let s=this.sessionState;if(!s){this.tmuxPaneObserver.resetLastPromptHash();return}if(await this.promoteWaitingPermissionRequest(t,s)||!e&&this.deferTmuxPromptCandidateForPermissionHook(s.sessionId,t,i))return;let r=e?.occurrenceKey;if(r&&this.hasRecentlyResolvedApprovalDedupeKey(s.sessionId,r))return;let n=(0,B.parseInteractivePrompt)(t);if(!n){this.raiseSuppressedBadge(s.sessionId,r??null);return}if(this.hasMatchingPermissionHookPrompt(n,s.sessionId)){a.debug("Skipping tmux prompt candidate already owned by PermissionRequest",{sessionId:s.sessionId,promptText:n.promptText});return}let l=this.getMostRecentPendingToolCall();if(!l){if(await new Promise(C=>setTimeout(C,500)),!this.isExpectedSessionStateCurrent(s)){a.warn("Dropping tmux prompt candidate after session generation changed",{sessionId:s.sessionId,currentSessionId:this.sessionState?.sessionId});return}if(!e&&this.deferTmuxPromptCandidateForPermissionHook(s.sessionId,t,i))return;l=this.getMostRecentPendingToolCall()}let p=e?.context??(l?this.buildApprovalPromptContextFromPendingCall(l):null);if(p&&!this.parsedPromptMatchesApprovalContext(n,p,t)){a.warn("Skipping tmux-detected prompt because parsed prompt does not match pending tool call",{callId:l?.callId,toolName:l?.name,parsedPromptText:n.promptText}),this.raiseSuppressedBadge(s.sessionId,r??null);return}let d=p?null:this.buildApprovalPromptContextFromParsedPrompt(n),c=p||d;if(!c){a.warn("Skipping tmux-detected prompt because no tool context could be derived from the parsed prompt",{parsedPromptText:n.promptText}),this.raiseSuppressedBadge(s.sessionId,r??null);return}let u=this.mapToolNameForApproval(c.toolName)==="Bash"?this.firstString(c.toolInput?.command,c.toolInput?.cmd):void 0,f=this.buildCodexPromptPresentation(n,u,t);if(!f){a.warn("Skipping tmux-detected prompt because Codex option hotkeys are unavailable",{parsedPromptText:n.promptText}),this.raiseSuppressedBadge(s.sessionId,r??null);return}let y=c?this.buildApprovalDedupeKey(c):void 0;if(y&&this.hasRecentlyResolvedApprovalDedupeKey(s.sessionId,y)){a.info("Skipping tmux-detected prompt; same approval was already answered recently",{promptText:n.promptText,dedupeKey:y});return}if(y&&this.hasActiveOrQueuedPermissionHookPrompt(s.sessionId,y)){l?.callId&&this.mergeCallIdIntoPromptByDedupeKey(s.sessionId,y,l.callId),a.info("Skipping tmux-detected prompt; PermissionRequest hook already emitted it",{promptText:n.promptText,dedupeKey:y});return}let h=c?this.buildToolDetailsForInteractivePrompt(c,t):{},v=h.tool_name||this.mapToolNameForApproval(l?.name),P=h.tool_input||(c?this.buildFallbackToolInput(c):void 0),E=!!(v&&P),b={promptId:l?.callId||(0,se.v4)(),callId:l?.callId,kind:f.kind,options:f.options,submitMap:f.submitMap,promptText:f.promptText,createdAt:Date.now(),source:"tmux",dedupeKey:y,ownerSessionId:s.sessionId,observerMatchKey:this.buildObserverPromptMatchKey(n),observerPromptHash:i,requiresFollowUpText:f.requiresFollowUpText},O={options:f.options,instructions:f.instructions,prompt_source:"tmux_live",toolName:c?.toolName,toolInput:c?.toolInput,hint:c?.hint,filePath:c?.filePath,diff:c?.diff,rawInput:c?.rawInput,tool_name:v,tool_input:P,has_details:E,dedupe_key:y},L=this.buildApprovalPromptContent(f.content,{toolName:v,toolInput:P,hint:c?.hint,filePath:c?.filePath});try{await this.enqueueOrEmitInteractivePrompt({prompt:b,content:L,metadata:O,ownerState:s})&&a.info("Sent tmux-detected interactive prompt",{sessionId:s.sessionId,promptText:n.promptText,kind:n.kind})}catch(C){a.error("Failed to send tmux-detected interactive prompt",{error:C})}}async enqueueOrEmitInteractivePrompt(t){if(!this.isExpectedSessionStateCurrent(t.ownerState))return a.warn("Dropping interactive prompt from stale session generation",{sessionId:t.ownerState.sessionId,currentSessionId:this.sessionState?.sessionId,source:t.prompt.source}),!1;if(t.prompt.ownerSessionId??=t.ownerState.sessionId,t.prompt.dedupeKey&&this.hasRecentlyResolvedApprovalDedupeKey(t.ownerState.sessionId,t.prompt.dedupeKey))return a.debug("Skipping interactive prompt emission; same approval was already answered recently",{source:t.prompt.source,callId:t.prompt.callId,dedupeKey:t.prompt.dedupeKey}),!1;let e=this.pendingInteractivePrompt;if(e&&e.ownerSessionId!==t.ownerState.sessionId&&(a.warn("Discarding active prompt from a stale session generation",{activeSessionId:e.ownerSessionId,candidateSessionId:t.ownerState.sessionId}),this.pendingInteractivePrompt=null,e=null),!e){this.pendingInteractivePrompt=t.prompt;try{return await this.emitInteractivePromptEvent(t),!0}catch(i){throw this.pendingInteractivePrompt?.promptId===t.prompt.promptId&&(this.pendingInteractivePrompt=null),i}}if(this.isSameInteractivePrompt(e,t.prompt)){if(t.prompt.source==="permission_hook"&&e.source!=="permission_hook"){e.source="permission_hook",e.completionKey=t.prompt.completionKey??e.dedupeKey,e.dedupeKey=t.prompt.dedupeKey;let i=this.e1PromptRaises.get(e.promptId);i&&(i.resolutionDedupeKey=e.dedupeKey,i.resolutionCompletionKey=e.completionKey)}return!e.callId&&t.prompt.callId&&(e.callId=t.prompt.callId,a.debug("Merged callId into existing interactive prompt",{source:e.source,callId:t.prompt.callId,promptText:e.promptText})),a.debug("Skipping duplicate interactive prompt emission",{existingSource:e.source,candidateSource:t.prompt.source,existingCallId:e.callId,candidateCallId:t.prompt.callId,promptText:t.prompt.promptText}),!1}return this.queuedInteractivePrompts.some(i=>this.isSameInteractivePrompt(i.prompt,t.prompt))?(a.debug("Skipping duplicate queued interactive prompt",{candidateSource:t.prompt.source,candidateCallId:t.prompt.callId,promptText:t.prompt.promptText}),!1):(this.queuedInteractivePrompts.push(t),a.info("Queued interactive prompt behind active prompt",{activeCallId:e.callId,queuedCallId:t.prompt.callId,queueLength:this.queuedInteractivePrompts.length}),!1)}async emitInteractivePromptEvent(t){if(!this.isExpectedSessionStateCurrent(t.ownerState))return;let e=t.ownerState.sessionId,i=this.e1PromptRaises.get(t.prompt.promptId),s=i?i.record:this.newE1Raise(e,!0,void 0,{...t.prompt.dedupeKey!==void 0?{dedupeKey:t.prompt.dedupeKey}:{},...t.prompt.completionKey!==void 0?{completionKey:t.prompt.completionKey}:{},...t.prompt.callId!==void 0?{callId:t.prompt.callId}:{}});t.prompt.promptId=s.promptId;let r=this.e1PromptRaises.get(s.promptId);r&&(r.resolutionDedupeKey??=t.prompt.dedupeKey,r.resolutionCompletionKey??=t.prompt.completionKey,r.resolutionCallId??=t.prompt.callId),t.prompt.dedupeKey&&this.e1ContentKeyIndex.set(`${e}::${t.prompt.dedupeKey}`,s.promptId),this.stashE1RaiseContent(s.promptId,t.content,t.metadata??{});let n=this.encryptForEmit(t.content,t.metadata,m.EventType.INTERACTIVE_PROMPT,e);n&&await this.trackE1Raise(s.promptId,this.appSyncClient.createEvent({sessionId:e,type:m.EventType.INTERACTIVE_PROMPT,source:m.EventSource.DESKTOP,content:n.content,metadata:n.metadata,...(0,m.raiseFieldsFromRecord)(s),timestamp:(0,m.prepareEventTimestamp)({orderingKey:e}),...n.isEncrypted?{isEncrypted:!0}:{}}))}rebindWaitingPermissionRequests(t){for(let e of this.waitingPermissionRequests.values())e.ownerState.codexSessionId&&e.ownerState.codexSessionId===t.codexSessionId&&(e.ownerState=t)}async promoteWaitingPermissionRequest(t,e){if(!this.isExpectedSessionStateCurrent(e))return!1;let i=(0,B.parseInteractivePrompt)(t);if(!i||this.hasMatchingPermissionHookPrompt(i,e.sessionId))return!1;for(let[s,r]of this.waitingPermissionRequests)if(this.isExpectedSessionStateCurrent(r.ownerState)&&this.parsedPromptMatchesApprovalContext(i,r.context,t)){this.waitingPermissionRequests.delete(s);try{await this.handlePermissionRequestHookWhileTracked(r.payload,e,r.context,s,r.dedupeKey,{parsedPrompt:i,snapshot:t})}catch(n){throw this.isExpectedSessionStateCurrent(e)&&!this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s)&&this.waitingPermissionRequests.set(s,r),this.tmuxPaneObserver.resetLastPromptHash(),n}return!0}return!1}async emitNextQueuedInteractivePrompt(){if(this.pendingInteractivePrompt)return;if(this.queuedInteractivePrompts.length===0){let e=this.sessionState;if(e&&this.waitingPermissionRequests.size>0){let i=await this.tmuxPaneObserver.captureSnapshot();!(i&&await this.promoteWaitingPermissionRequest(i,e))&&this.isExpectedSessionStateCurrent(e)&&!this.pendingInteractivePrompt&&this.waitingPermissionRequests.size>0&&this.tmuxPaneObserver.resetLastPromptHash()}return}let t=this.queuedInteractivePrompts.shift();if(t){if(!this.isExpectedSessionStateCurrent(t.ownerState)){a.warn("Discarding queued prompt from stale session generation",{sessionId:t.ownerState.sessionId,currentSessionId:this.sessionState?.sessionId}),await this.emitNextQueuedInteractivePrompt();return}this.pendingInteractivePrompt=t.prompt;try{await this.emitInteractivePromptEvent(t),a.info("Emitted next queued interactive prompt",{callId:t.prompt.callId,queueLength:this.queuedInteractivePrompts.length})}catch(e){this.pendingInteractivePrompt=null,a.error("Failed to emit queued interactive prompt",{error:e}),await this.emitNextQueuedInteractivePrompt()}}}async clearObservedInteractivePrompt(t,e){if(!this.isExpectedSessionStateCurrent(t))return;let i=this.pendingInteractivePrompt;if(!i||i.ownerSessionId!==t.sessionId||i.observerPromptHash!==e){a.debug("Ignoring prompt-cleared for a non-current chooser occurrence",{sessionId:t.sessionId,clearedPromptHash:e,activePromptId:i?.promptId,activePromptHash:i?.observerPromptHash});return}this.pendingInteractivePrompt=null,i.callId&&this.approvalDetector.onToolCallComplete(i.callId),this.rememberResolvedApprovalDedupeKey(t.sessionId,i.dedupeKey);for(let r of this.queuedPermissionRequestRegistrations.get(t.sessionId)??[])r.occurrenceKey===i.dedupeKey&&(r.disposition="resolved",this.deferredTmuxPromptCandidates.delete(r),this.removePermissionRequestOccurrence(r.dedupeKey,r.occurrenceKey));let s=this.beginE1PromptResolutions(new Set([i.promptId]),t.sessionId);this.launchE1Resolutions(s),await this.emitNextQueuedInteractivePrompt()}async clearResolvedInteractivePrompt(t,e){if(!e){a.debug("Interactive prompt completion had no comparable dialog identity",{callId:t});return}let i=this.isPermissionRequestOccurrenceKey(e),s=this.pendingInteractivePrompt,r=!!s&&(s.dedupeKey===e||s.completionKey===e||!i&&!!t&&s.callId===t),n=this.sessionState?.sessionId??s?.ownerSessionId,l=this.queuedInteractivePrompts.find(S=>!i&&!!t&&S.prompt.callId===t||S.prompt.dedupeKey===e||S.prompt.completionKey===e),p=this.permissionRequestHookInFlight,d=p?.ownerState.sessionId===n&&(p?.dedupeKey===e||p?.occurrenceKey===e),u=(n?this.queuedPermissionRequestRegistrations.get(n)??[]:[]).find(S=>S.dedupeKey===e||S.occurrenceKey===e),f=[...this.waitingPermissionRequests.values()].find(S=>S.ownerState.sessionId===n&&(S.occurrenceKey===e||S.dedupeKey===e)),y=r?s?.dedupeKey:l?.prompt.dedupeKey??(d?p?.occurrenceKey:void 0)??u?.occurrenceKey??f?.occurrenceKey??e,h=new Set;if(r&&s&&h.add(s.promptId),l&&h.add(l.prompt.promptId),n&&y){let S=this.e1ContentKeyIndex.get(`${n}::${y}`);S&&h.add(S)}let v=[...this.e1PromptRaises.entries()].find(([,S])=>S.record.sessionId===n&&(S.resolutionDedupeKey===y||!i&&!!t&&S.resolutionCallId===t||S.resolutionCompletionKey===e));if(v&&h.add(v[0]),(r||d||u||f||h.size>0)&&this.rememberResolvedApprovalDedupeKey(n,y),r&&s&&(this.pendingInteractivePrompt=null),u&&(u.disposition="resolved"),y)for(let S of this.removeQueuedInteractivePromptByDedupeKey(y))h.add(S);let E=n?this.beginE1PromptResolutions(h,n):[];this.launchE1Resolutions(E),(r||!this.pendingInteractivePrompt&&l)&&await this.emitNextQueuedInteractivePrompt()}clearInteractivePromptsForAcceptedInput(t){let e=t.sessionId,i=new Set,s=this.pendingInteractivePrompt;s?.ownerSessionId===e&&(i.add(s.promptId),this.rememberResolvedApprovalDedupeKey(e,s.dedupeKey),this.pendingInteractivePrompt=null);let r=[];for(let l of this.queuedInteractivePrompts)l.prompt.ownerSessionId===e?(i.add(l.prompt.promptId),this.rememberResolvedApprovalDedupeKey(e,l.prompt.dedupeKey)):r.push(l);this.queuedInteractivePrompts=r;for(let[l,p]of this.e1PromptRaises.entries())p.record.sessionId===e&&i.add(l);for(let l of this.queuedPermissionRequestRegistrations.get(e)??[])l.disposition="resolved",this.rememberResolvedApprovalDedupeKey(e,l.occurrenceKey),this.deferredTmuxPromptCandidates.delete(l);for(let[l,p]of this.waitingPermissionRequests)p.ownerState.sessionId===e&&(this.rememberResolvedApprovalDedupeKey(e,l),this.waitingPermissionRequests.delete(l));this.permissionRequestOccurrencesByCompletionKey.clear();let n=this.beginE1PromptResolutions(i,e);this.launchE1Resolutions(n)}removeQueuedInteractivePromptByDedupeKey(t){let e=this.queuedInteractivePrompts.length,i=this.queuedInteractivePrompts.filter(s=>s.prompt.dedupeKey===t);for(let s of i)this.rememberResolvedApprovalDedupeKey(s.ownerState.sessionId,s.prompt.dedupeKey);return this.queuedInteractivePrompts=this.queuedInteractivePrompts.filter(s=>s.prompt.dedupeKey!==t),this.queuedInteractivePrompts.length!==e&&a.debug("Removed resolved deduped tool call from interactive prompt queue",{dedupeKey:t,removed:e-this.queuedInteractivePrompts.length}),i.map(s=>s.prompt.promptId)}mergeCallIdIntoPromptByDedupeKey(t,e,i){let s=this.pendingInteractivePrompt;if(s?.ownerSessionId===t&&(s.completionKey??s.dedupeKey)===e&&!s.callId){s.callId=i;let n=this.e1PromptRaises.get(s.promptId);n&&(n.resolutionCallId??=i),a.debug("Merged callId into active deduped interactive prompt",{source:s.source,callId:i,dedupeKey:e});return}let r=this.queuedInteractivePrompts.find(n=>n.prompt.ownerSessionId===t&&(n.prompt.completionKey??n.prompt.dedupeKey)===e&&!n.prompt.callId);r&&(r.prompt.callId=i,a.debug("Merged callId into queued deduped interactive prompt",{source:r.prompt.source,callId:i,dedupeKey:e}))}isSameInteractivePrompt(t,e){if(t.ownerSessionId!==e.ownerSessionId||Date.now()-t.createdAt>Ai)return!1;if(t.callId&&e.callId)return t.callId===e.callId;let s=t.completionKey??t.dedupeKey,r=e.completionKey??e.dedupeKey;return t.source!==e.source&&s&&s===r&&t.observerMatchKey&&t.observerMatchKey===e.observerMatchKey?!0:t.dedupeKey&&e.dedupeKey?t.dedupeKey===e.dedupeKey:t.kind===e.kind&&this.normalizePromptDedupeText(t.promptText)===this.normalizePromptDedupeText(e.promptText)}normalizePromptDedupeText(t){return t.replace(/\s+/g," ").trim().toLowerCase()}async startTmuxObserver(){let t=process.env.CODEVIBE_CODEX_TMUX_SESSION;if(!t)return a.debug("Skipping tmux pane observer start - no tmux session in environment"),!0;try{return await this.tmuxPaneObserver.start(t),!0}catch(e){return a.warn("Failed to start tmux pane observer",{tmuxSession:t,error:e}),!1}}async startTmuxObserverWithBeacon(t){try{await this.startTmuxObserver()?await _("daemon_init_step_completed",{step:"tmux_observer_start",path:t}):await _("daemon_init_step_failed",{step:"tmux_observer_start",path:t,error_class:"TmuxObserverStartFailed",error_message:"tmuxPaneObserver.start threw (see plugin log)"})}catch(e){await _("daemon_init_step_failed",{step:"tmux_observer_start",path:t,error_class:e?.name||"Error",error_message:e?.message||String(e)}),a.error("Failed to start tmux observer:",e)}}async tryParseInteractivePromptFromTmux(){try{let t=await this.tmuxPaneObserver.captureSnapshot(),e=this.tmuxPaneObserver.extractActiveApprovalBlock(t),i=e?(0,B.parseInteractivePrompt)(e):null;return a.debug("tmux prompt parse result",{parsed:!!i,kind:i?.kind,promptText:i?.promptText,isolated:!!e,snapshotPreview:this.summarizePromptSnapshot(e??t)}),{parsedPrompt:i,snapshot:e??t}}catch(t){return a.debug("tmux prompt parsing unavailable",{error:t}),null}}async tryParsePermissionRequestPromptFromTmux(t,e){let r=null;for(let n=0;n<25;n+=1){if(e&&!e()||n>0&&(await new Promise(p=>setTimeout(p,125)),e&&!e()))return null;let l=await this.tryParseInteractivePromptFromTmux();if(l&&(r=l),l?.parsedPrompt&&(!t||t(l.parsedPrompt,l.snapshot)))return l}return r?.snapshot?{parsedPrompt:null,snapshot:r.snapshot,...r.parsedPrompt?{differentPrompt:!0}:{}}:null}buildPromptPresentation(t){return t?{content:t.promptText,promptText:t.promptText,kind:t.kind,options:t.options,submitMap:t.submitMap,instructions:this.buildPromptInstructions(t),requiresFollowUpText:t.requiresFollowUpText}:{content:"Codex is waiting for approval.",promptText:"Codex is waiting for approval.",kind:"yes_no",options:[{number:"1",text:'Yes (sends "y")'},{number:"2",text:'No, tell Codex what to change (sends "n <instructions>")'}],submitMap:{1:"y",2:"n"},instructions:"Reply with 1 to approve, or 2 followed by what to change",requiresFollowUpText:!0}}buildCodexPromptPresentation(t,e,i){let s=this.buildPromptPresentation(t),r=Ct(s.options,e,i);if(!r)return null;let n=this.buildSubmitMapFromCodexOptionHotkeys(r);return n?{...s,options:r,submitMap:n,instructions:this.buildCodexPermissionInstructions(r),requiresFollowUpText:this.optionsRequireFollowUpText(r)}:null}buildSubmitMapFromCodexOptionHotkeys(t){let e={};for(let i of t){let s=i.text.match(/\(([^)]+)\)\s*$/)?.[1]?.trim().toLowerCase();if(!s||!ki.test(s))return null;s==="esc"||s==="escape"?e[i.number]=Y:e[i.number]=s}return e}buildCodexPermissionInstructions(t){let e=t.find(n=>/\((?:y|yes)\)\s*$/i.test(n.text)),i=t.find(n=>/\(p\)\s*$/i.test(n.text)),s=t.find(n=>/\((?:esc|escape)\)\s*$/i.test(n.text)),r=[];return e&&r.push(`${e.number} to approve`),i&&r.push(`${i.number} to persist the desktop allow rule`),s&&r.push(`${s.number} followed by what to change`),r.length>0?`Reply with ${r.join(", ")}`:"Reply with the number of the option you want"}optionsRequireFollowUpText(t){return t.some(e=>/what to (?:do differently|change)|instructions/i.test(e.text))}getMostRecentPendingToolCall(){let t=this.approvalDetector.getPendingCalls();return t.length===0?null:t.reduce((e,i)=>i.timestamp>e.timestamp?i:e)}hasActiveOrQueuedPermissionHookPrompt(t,e){let i=this.pendingInteractivePrompt;return i?.ownerSessionId===t&&i.source==="permission_hook"&&(i.completionKey??i.dedupeKey)===e?!0:this.queuedInteractivePrompts.some(s=>s.prompt.ownerSessionId===t&&s.prompt.source==="permission_hook"&&(s.prompt.completionKey??s.prompt.dedupeKey)===e)||[...this.waitingPermissionRequests.values()].some(s=>s.ownerState.sessionId===t&&s.dedupeKey===e)}hasDurablePermissionHookFallback(t){return[...this.e1PromptRaises.values()].some(e=>e.record.sessionId===t&&e.suppressTmuxObserverUntilResolved===!0)}hasDurablePermissionHookFallbackByDedupeKey(t,e){return[...this.e1PromptRaises.values()].some(i=>i.record.sessionId===t&&i.suppressTmuxObserverUntilResolved===!0&&(i.resolutionDedupeKey===e||i.resolutionCompletionKey===e))}hasMatchingDurablePermissionHookFallback(t,e,i){let s=this.buildApprovalPromptContextFromParsedPrompt(t),r=s?this.buildApprovalDedupeKey(s):void 0;if(r&&this.hasDurablePermissionHookFallbackByDedupeKey(e,r))return!0;if(!i)return!1;let n=this.buildObserverSnapshotMatchKey(i);return[...this.e1PromptRaises.values()].some(l=>l.record.sessionId===e&&l.suppressTmuxObserverUntilResolved===!0&&l.suppressedObserverSnapshotKey===n)}deferTmuxPromptCandidateForPermissionHook(t,e,i){let s=this.queuedPermissionRequestSessionCounts.get(t)??0,r=this.hasDurablePermissionHookFallback(t);if(s<=0&&!r)return!1;let n=(0,B.parseInteractivePrompt)(e);if(n&&this.hasMatchingDurablePermissionHookFallback(n,t,e))return a.debug("Skipping tmux repaint already owned by a durable PermissionRequest fallback",{sessionId:t,promptText:n.promptText}),!0;if(n&&this.hasMatchingPermissionHookPrompt(n,t))return a.debug("Skipping tmux repaint already owned by an actionable PermissionRequest",{sessionId:t,promptText:n.promptText}),!0;if(n&&s<=0)return!1;if(s>0){let l=this.queuedPermissionRequestRegistrations.get(t)??[],p=n?l.find(u=>this.parsedPromptMatchesApprovalContext(n,u.context,e)):void 0,d=!n&&this.permissionRequestHookInFlight?.ownerState.sessionId===t?this.permissionRequestHookInFlight.registration:void 0,c=p??d??(l.length===1&&(!n||!r)?l[0]:void 0);if(c&&this.deferredTmuxPromptCandidates.set(c,{snapshot:e,promptHash:i}),n&&!c)return!1}return a.debug("Skipping tmux prompt candidate while PermissionRequest owns the session prompt",{sessionId:t,toolName:this.permissionRequestHookInFlight?.context.toolName,ownership:s>0?"queued_or_in_flight":"durable_prompt"}),!0}hasMatchingPermissionHookPrompt(t,e){let i=this.buildObserverPromptMatchKey(t);return[this.pendingInteractivePrompt,...this.queuedInteractivePrompts.map(r=>r.prompt)].some(r=>r?.source==="permission_hook"&&r.ownerSessionId===e&&r.observerMatchKey===i)}buildObserverPromptMatchKey(t){let e=t.options.map(s=>`${s.number}:${this.normalizeObserverPromptText(s.text)}`).join("|"),i=[t.kind,this.normalizeObserverPromptText(t.promptText),e].join("::");return`observer:${Se.createHash("sha256").update(i).digest("hex").slice(0,16)}`}buildObserverSnapshotMatchKey(t){let e=this.normalizeObserverPromptText(t);return`snapshot:${Se.createHash("sha256").update(e).digest("hex").slice(0,16)}`}normalizeObserverPromptText(t){return t.replace(/\r\n?/g,`
+`).trim();return(0,Q.createHash)("sha256").update(s).digest("hex")}};var B=require("@quantiya/codevibe-core");var ne=require("@quantiya/codevibe-core");var ke=R(require("express")),U=R(require("fs")),pt=R(require("path")),dt=R(require("os"));var ui=1800*1e3,hi=60*1e3,mi=1440*60*1e3;var he=class{constructor(){this.assignedPort=0;this.portRefreshTimer=null;this.app=(0,ke.default)(),this.setupMiddleware(),this.setupRoutes(),this.tmuxSession=process.env.CODEVIBE_CODEX_TMUX_SESSION}getPort(){return this.assignedPort}setupMiddleware(){this.app.use(ke.default.json({limit:"1mb"})),this.app.use((t,e,i)=>{a.debug(`${t.method} ${t.path}`,{body:t.body}),i()})}setupRoutes(){this.app.get("/health",(t,e)=>{e.json({success:!0,service:"codevibe-codex",pid:process.pid,data:{status:"healthy",uptime:process.uptime()}})}),this.app.post("/event",this.handleEvent.bind(this))}async handleEvent(t,e){try{let i=t.body;if(!i.session_id||!i.hook_event_name){e.status(400).json({success:!1,error:"Missing session_id or hook_event_name"});return}let s=this.transformHookToEvent(i);if(a.info("Received hook event",{sessionId:i.session_id,hookEvent:i.hook_event_name,type:s.type}),this.eventHandler){let r=this.eventHandler(s);if(i.hook_event_name==="PermissionRequest"){r.catch(n=>{a.error("Error resolving PermissionRequest after acknowledgement:",n)}),e.json({success:!0});return}await r}e.json({success:!0})}catch(i){a.error("Error handling event:",i),e.status(500).json({success:!1,error:i instanceof Error?i.message:"Unknown error"})}}transformHookToEvent(t){let e={cwd:t.cwd,hook_event_name:t.hook_event_name,transcript_path:t.transcript_path,...t.metadata||{}},i,s;switch(t.hook_event_name){case"SessionStart":i="NOTIFICATION",s="Session started",e.source=t.source,e.model=t.model;break;case"UserPromptSubmit":i="USER_PROMPT",s=t.prompt||"";break;case"PreToolUse":i="NOTIFICATION",s="PreToolUse observed",e.tool_name=t.tool_name,e.tool_input=t.tool_input,e.tool_use_id=t.tool_use_id,e.approval_status="observed_pre_tool",e.requires_user_action=!1;break;case"PermissionRequest":i="NOTIFICATION",s="PermissionRequest observed",e.tool_name=t.tool_name,e.tool_input=t.tool_input,e.permission_mode=t.permission_mode,e.turn_id=t.turn_id,e.requires_user_action=!0;break;case"PostToolUse":i="TOOL_USE",s=JSON.stringify({tool_name:t.tool_name,tool_input:t.tool_input,tool_response:t.tool_response}),e.tool_name=t.tool_name,e.tool_input=t.tool_input,e.tool_use_id=t.tool_use_id;break;case"Stop":i="ASSISTANT_RESPONSE",s=t.last_assistant_message||"";break;default:i="NOTIFICATION",s=`Hook: ${t.hook_event_name}`}return{session_id:t.session_id,hook_event_name:t.hook_event_name,type:i,source:"DESKTOP",content:s,metadata:e}}onEvent(t){this.eventHandler=t}async start(){return new Promise((t,e)=>{try{this.server=this.app.listen(0,"localhost",()=>{let i=this.server.address();this.assignedPort=i.port,a.info(`HTTP API listening on http://localhost:${this.assignedPort}`),this.writePortFile(this.assignedPort),this.startPortFileKeepalive(),t(this.assignedPort)}),this.server.on("error",i=>{a.error("HTTP server error:",i),e(i)})}catch(i){e(i)}})}portFilePath(){return this.tmuxSession?pt.join(dt.tmpdir(),`codevibe-codex-${this.tmuxSession}.port`):null}writePortFile(t){let e=this.portFilePath();if(!e){a.warn("No CODEVIBE_CODEX_TMUX_SESSION set, skipping port file");return}try{U.writeFileSync(e,t.toString()),a.info(`Port file written: ${e} -> ${t}`)}catch(i){a.error(`Failed to write port file: ${e}`,i)}}removePortFile(){let t=this.portFilePath();if(t)try{U.existsSync(t)&&(U.unlinkSync(t),a.info(`Port file removed: ${t}`))}catch(e){a.warn(`Failed to remove port file: ${t}`,e)}}startPortFileKeepalive(){this.portRefreshTimer&&(clearInterval(this.portRefreshTimer),this.portRefreshTimer=null);let t=Number(process.env.CODEVIBE_PORTFILE_REFRESH_MS),e=Number.isFinite(t)&&t>0?Math.min(mi,Math.max(hi,t)):ui;this.portRefreshTimer=setInterval(()=>this.refreshPortFile(),e)}refreshPortFile(){let t=this.portFilePath();if(t)try{let e=new Date;U.utimesSync(t,e,e)}catch(e){e?.code==="ENOENT"?this.writePortFile(this.assignedPort):a.warn(`Port-file refresh failed: ${t}`,e)}}async stop(){return this.portRefreshTimer&&(clearInterval(this.portRefreshTimer),this.portRefreshTimer=null),this.removePortFile(),new Promise(t=>{this.server?this.server.close(()=>{a.info("HTTP API stopped"),t()}):t()})}};var me=class{constructor(t={}){this.pendingBySession=new Map;this.expiryMs=t.expiryMs??1e4,this.minFuzzyEchoLength=t.minFuzzyEchoLength??16,this.minFuzzyEchoRatio=t.minFuzzyEchoRatio??.35,this.now=t.now??Date.now}track(t,e){let i=this.normalize(e);if(!i)return;let s=this.validEntries(t);s.push({normalized:i,timestamp:this.now()}),this.pendingBySession.set(t,s)}forget(t,e){let i=this.normalize(e);if(!i)return;let s=!1,r=this.validEntries(t).filter(n=>!s&&n.normalized===i?(s=!0,!1):!0);this.replaceEntries(t,r)}consumeIfDuplicate(t,e){let i=this.normalize(e);if(!i)return null;let s=null,r=this.validEntries(t).filter(n=>{if(!s){let l=this.matchType(n.normalized,i);if(l)return s={matchType:l,originalLength:n.normalized.length,echoLength:i.length},!1}return!0});return this.replaceEntries(t,r),s}validEntries(t){let e=this.now()-this.expiryMs;return(this.pendingBySession.get(t)||[]).filter(i=>i.timestamp>=e)}replaceEntries(t,e){e.length>0?this.pendingBySession.set(t,e):this.pendingBySession.delete(t)}matchType(t,e){if(t===e)return"exact";let i=e.length>=this.minFuzzyEchoLength,s=e.length/t.length>=this.minFuzzyEchoRatio;return i&&s&&t.endsWith(e)?"suffix":null}normalize(t){return t.replace(/\s+/g," ").trim()}};var ut=R(require("crypto")),ht=R(require("fs")),mt=R(require("https")),fe=R(require("os")),ft=R(require("path")),fi="G-GS74YEQTB8",gi="lAfOF6OxRzSQ-NsLBRjhAg",yi="www.google-analytics.com",vi=`/mp/collect?measurement_id=${fi}&api_secret=${gi}`,ct=800;function Si(){try{let o=ft.resolve(__dirname,"..","package.json"),t=ht.readFileSync(o,"utf-8"),e=JSON.parse(t);if(typeof e.version=="string"&&e.version.length>0&&e.version.length<30)return e.version}catch{}return"unknown"}var Pi=Si();function Ii(){let o=typeof process.getuid=="function"?process.getuid():0;return ut.createHash("sha256").update(`${fe.hostname()}-${o}`).digest("hex").substring(0,36)}function bi(o){if(!o)return"";let t=fe.homedir(),e=o.replace(/[\n\r\t]/g," ");if(t&&t.length>0){let i=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");e=e.replace(new RegExp(i,"g"),"~")}return e=e.replace(/\/Users\/[^/\s"'`]+/g,"/Users/<user>").replace(/\/home\/[^/\s"'`]+/g,"/home/<user>").replace(/[^\x20-\x7E]/g,""),e.trim().substring(0,100)}function _(o,t){return new Promise(e=>{let i,s=!1,r=()=>{s||(s=!0,clearTimeout(n),e())},n=setTimeout(()=>{try{i?.destroy()}catch{}r()},ct);typeof n.unref=="function"&&n.unref();try{let l={...t};typeof l.error_message=="string"&&(l.error_message=bi(l.error_message));let p=JSON.stringify({client_id:Ii(),events:[{name:o,params:{agent:"codex",plugin_version:Pi,platform:process.platform,source:process.env.CODEVIBE_TELEMETRY_SOURCE||"production",...l}}]});i=mt.request({hostname:yi,path:vi,method:"POST",headers:{"Content-Type":"application/json"},timeout:ct},d=>{d.resume(),d.on("end",r),d.on("close",r),d.on("error",r)}),i.on("error",r),i.on("timeout",()=>{try{i?.destroy()}catch{}r()}),i.on("close",r),i.write(p),i.end()}catch{r()}})}var ge=class{constructor(){this.originated=new Set;this.externallyResolved=new Set}markOriginated(t){this.originated.add(t)}clearOriginated(t){this.originated.delete(t)}getOriginated(){return new Set(this.originated)}getExternallyResolved(){return new Set(this.externallyResolved)}isExternallyResolved(t){return this.externallyResolved.has(t)}dispatch(t){let{gateId:e}=t;return this.originated.has(e)?(this.originated.delete(e),this.externallyResolved.add(e),"self_echo"):(this.externallyResolved.add(e),"foreign")}clear(){this.originated.clear(),this.externallyResolved.clear()}};function gt(o){return`[CodeVibe] Decision recorded on another device: ${o} \u2014 type any number to dismiss the open AskUserQuestion`}var re=R(require("crypto")),I=R(require("fs")),ve=R(require("os")),K=R(require("path")),St=require("@quantiya/codevibe-core"),Fe=2*1024*1024,wi=600*1e3,q=1e3;function Pt(){return typeof process.getuid=="function"?process.getuid():void 0}function De(o,t){let e=Pt();if(e!==void 0&&o.uid!==e)throw new Error(`E1_STATE_FOREIGN_OWNER: ${t}`)}function It(o){I.mkdirSync(o,{recursive:!0,mode:448});let t=I.lstatSync(o);if(!t.isDirectory()||t.isSymbolicLink())throw new Error(`E1_STATE_ROOT_NOT_PRIVATE_DIRECTORY: ${o}`);De(t,o),process.platform!=="win32"&&I.chmodSync(o,448)}function yt(o,t){let e=K.dirname(o);It(e);let i=`${JSON.stringify(t)}
+`;if(Buffer.byteLength(i,"utf8")>Fe)throw new Error(`E1_STATE_TOO_LARGE: ${o}`);let s=K.join(e,`.${K.basename(o)}.${process.pid}.${re.randomUUID()}.tmp`),r=I.constants.O_NOFOLLOW??0,n=null;try{n=I.openSync(s,I.constants.O_WRONLY|I.constants.O_CREAT|I.constants.O_EXCL|r,384),I.writeFileSync(n,i,{encoding:"utf8"}),I.fsyncSync(n),I.closeSync(n),n=null,process.platform!=="win32"&&I.chmodSync(s,384),I.renameSync(s,o),process.platform!=="win32"&&I.chmodSync(o,384);try{let l=I.openSync(e,I.constants.O_RDONLY);try{I.fsyncSync(l)}finally{I.closeSync(l)}}catch{}}finally{n!==null&&I.closeSync(n);try{I.unlinkSync(s)}catch(l){if(l.code!=="ENOENT")throw l}}}function vt(o){let t;try{t=I.lstatSync(o)}catch(s){if(s.code==="ENOENT")return null;throw s}if(!t.isFile()||t.isSymbolicLink())throw new Error(`E1_STATE_NOT_REGULAR_FILE: ${o}`);if(De(t,o),process.platform!=="win32"&&(t.mode&63)!==0)throw new Error(`E1_STATE_PERMISSIONS_LOOSE: ${o}`);if(t.size>Fe)throw new Error(`E1_STATE_TOO_LARGE: ${o}`);let e=I.constants.O_NOFOLLOW??0,i=I.openSync(o,I.constants.O_RDONLY|e);try{let s=I.fstatSync(i);if(De(s,o),!s.isFile()||t.dev!==s.dev||t.ino!==s.ino)throw new Error(`E1_STATE_FILE_CHANGED_DURING_OPEN: ${o}`);if(s.size>Fe)throw new Error(`E1_STATE_TOO_LARGE: ${o}`);return JSON.parse(I.readFileSync(i,{encoding:"utf8"}))}finally{I.closeSync(i)}}function D(o){return o!==null&&typeof o=="object"&&!Array.isArray(o)}function x(o,t=256*1024){return typeof o=="string"&&Buffer.byteLength(o,"utf8")<=t}function bt(o){if(!D(o)||!x(o.promptId,512)||!x(o.ownerToken,512)||!x(o.sessionId,1024)||o.producerKind!=="PLUGIN_APPROVAL"||o.agentType!==void 0&&o.agentType!=="CODEX"||o.title!==void 0&&!x(o.title,4096)||typeof o.mobileActionable!="boolean"||typeof o.raisedAtMs!="number"||!Number.isFinite(o.raisedAtMs))return!1;try{return(0,St.deriveOpenPromptId)(o.ownerToken)===o.promptId}catch{return!1}}function Ei(o){if(!D(o)||!bt(o.record))return!1;for(let t of["contentPlain","resolutionDedupeKey","resolutionCompletionKey","resolutionCallId","suppressedObserverSnapshotKey"])if(o[t]!==void 0&&!x(o[t]))return!1;return!(o.metadataPlain!==void 0&&!D(o.metadataPlain)||o.suppressTmuxObserverUntilResolved!==void 0&&typeof o.suppressTmuxObserverUntilResolved!="boolean")}function wt(o){return D(o)&&bt(o.record)&&x(o.resolutionAt,128)&&!Number.isNaN(Date.parse(o.resolutionAt))&&typeof o.attempts=="number"&&Number.isSafeInteger(o.attempts)&&o.attempts>=0}function Et(o){if(!D(o)||!x(o.promptId,512)||!["yes_no","numbered","text"].includes(String(o.kind))||!Array.isArray(o.options)||o.options.length>100||!o.options.every(t=>D(t)&&x(t.number,32)&&x(t.text,32*1024))||!D(o.submitMap)||!Object.entries(o.submitMap).every(([t,e])=>x(t,128)&&x(e,32*1024))||!x(o.promptText)||typeof o.createdAt!="number"||!Number.isFinite(o.createdAt)||!["permission_hook","tmux","heuristic"].includes(String(o.source)))return!1;for(let t of["callId","dedupeKey","completionKey","ownerSessionId","observerMatchKey","observerPromptHash","terminalMenuIdentity"])if(o[t]!==void 0&&!x(o[t],32*1024))return!1;return o.requiresFollowUpText===void 0||typeof o.requiresFollowUpText=="boolean"}function Ri(o){return D(o)&&Et(o.prompt)&&x(o.content)&&D(o.metadata)}function _i(o,t,e){if(!D(o)||o.version!==1)throw new Error("E1_HANDOFF_UNSUPPORTED_VERSION");if(o.tmuxSession!==t||!x(o.backendSessionId,1024))throw new Error("E1_HANDOFF_INSTANCE_MISMATCH");if(typeof o.createdAtMs!="number"||!Number.isFinite(o.createdAtMs))throw new Error("E1_HANDOFF_INVALID_TIMESTAMP");if(o.createdAtMs>e+6e4||e-o.createdAtMs>wi)throw new Error("E1_HANDOFF_STALE");if(!Array.isArray(o.openRaises)||o.openRaises.length>q||!o.openRaises.every(Ei))throw new Error("E1_HANDOFF_INVALID_OPEN_RAISES");if(!Array.isArray(o.pendingResolutions)||o.pendingResolutions.length>q||!o.pendingResolutions.every(wt))throw new Error("E1_HANDOFF_INVALID_PENDING_RESOLUTIONS");if(!Array.isArray(o.needsReRaisePromptIds)||o.needsReRaisePromptIds.length>q||!o.needsReRaisePromptIds.every(s=>x(s,512)))throw new Error("E1_HANDOFF_INVALID_RERAISE_IDS");if(!Array.isArray(o.permissionOccurrences)||o.permissionOccurrences.length>q)throw new Error("E1_HANDOFF_INVALID_OCCURRENCES");if(!o.permissionOccurrences.every(s=>Array.isArray(s)&&s.length===2&&x(s[0],256*1024)&&Array.isArray(s[1])&&s[1].length<=q&&s[1].every(r=>D(r)&&x(r.occurrenceKey,512)&&typeof r.hookObserved=="boolean"&&typeof r.jsonlObserved=="boolean")))throw new Error("E1_HANDOFF_INVALID_OCCURRENCES");if(o.waitingPermissionRequests!==void 0&&(!Array.isArray(o.waitingPermissionRequests)||o.waitingPermissionRequests.length>q||!o.waitingPermissionRequests.every(s=>D(s)&&x(s.occurrenceKey,512)&&(s.dedupeKey===void 0||x(s.dedupeKey))&&D(s.payload)&&s.payload.hook_event_name==="PermissionRequest"&&(s.payload.metadata===void 0||D(s.payload.metadata)))))throw new Error("E1_HANDOFF_INVALID_WAITING_REQUESTS");if(o.pendingInteractivePrompt!==null&&!Et(o.pendingInteractivePrompt))throw new Error("E1_HANDOFF_INVALID_ACTIVE_PROMPT");if(!Array.isArray(o.queuedInteractivePrompts)||o.queuedInteractivePrompts.length>q||!o.queuedInteractivePrompts.every(Ri))throw new Error("E1_HANDOFF_INVALID_QUEUED_PROMPTS");if(!Array.isArray(o.resolvedApprovalDedupeKeys)||o.resolvedApprovalDedupeKeys.length>q||!o.resolvedApprovalDedupeKeys.every(s=>Array.isArray(s)&&s.length===2&&x(s[0])&&typeof s[1]=="number"&&Number.isFinite(s[1])))throw new Error("E1_HANDOFF_INVALID_RESOLVED_KEYS");return o}function Ti(o){if(!D(o)||o.version!==1||!wt(o.pending))throw new Error("E1_RESOLUTION_OUTBOX_INVALID_RECORD");if(typeof o.updatedAtMs!="number"||!Number.isFinite(o.updatedAtMs))throw new Error("E1_RESOLUTION_OUTBOX_INVALID_TIMESTAMP");return o}var ye=class{constructor(t={}){let e=Pt()??"nouid";this.handoffRoot=t.handoffRoot??K.join(ve.tmpdir(),`codevibe-codex-handoff-${e}`),this.resolutionRoot=t.resolutionRoot??K.join(ve.homedir(),".codevibe","codex","e1-resolution-outbox"),this.now=t.now??Date.now}handoffPath(t){let e=re.createHash("sha256").update(t).digest("hex").slice(0,32);return K.join(this.handoffRoot,`${e}.json`)}resolutionPath(t){let e=re.createHash("sha256").update(t).digest("hex");return K.join(this.resolutionRoot,`${e}.json`)}writeHandoff(t){yt(this.handoffPath(t.tmuxSession),t)}readHandoff(t){let e=vt(this.handoffPath(t));if(e===null)return null;try{return _i(e,t,this.now())}catch(i){if(i.message==="E1_HANDOFF_STALE")return this.removeHandoff(t),null;throw i}}removeHandoff(t){try{I.unlinkSync(this.handoffPath(t))}catch(e){if(e.code!=="ENOENT")throw e}}writeResolution(t){yt(this.resolutionPath(t.record.promptId),{version:1,updatedAtMs:this.now(),pending:t})}removeResolution(t){try{I.unlinkSync(this.resolutionPath(t))}catch(e){if(e.code!=="ENOENT")throw e}}readResolutions(){let t;try{It(this.resolutionRoot),t=I.readdirSync(this.resolutionRoot).filter(s=>s.endsWith(".json"))}catch(s){if(s.code==="ENOENT")return{records:[],rejected:[]};throw s}let e=[],i=[];for(let s of t.slice(0,q)){let r=K.join(this.resolutionRoot,s);try{let n=vt(r);if(n!==null){let l=Ti(n).pending;if(K.basename(this.resolutionPath(l.record.promptId))!==s)throw new Error("E1_RESOLUTION_OUTBOX_IDENTITY_MISMATCH");e.push(l)}}catch(n){i.push({file:r,reason:n instanceof Error?n.message:String(n)})}}return t.length>q&&i.push({file:this.resolutionRoot,reason:`E1_RESOLUTION_OUTBOX_RECORD_LIMIT: ${t.length}`}),{records:e,rejected:i}}};var _t=(0,Ke.promisify)(we.exec),xi=(0,Ke.promisify)(we.execFile),Ci="/quit",$="CODEVIBE_CODEX_TMUX_SESSION",Se="CODEVIBE_CODEX_DAEMON_RECOVERY",Oi=1e3,Ai=1e4,Pe=3,ki=100,Tt=["SIGINT","SIGTERM","SIGHUP"],Fi=600*1e3,Me=30*1e3,Di=/^(?:[a-z0-9]|esc|escape)$/;function Rt(o,t){let e=o?.[t];return typeof e=="string"?e:Buffer.isBuffer(e)?e.toString("utf8"):""}function xt(o){if(typeof o?.code!="number")return"unknown";let t=`${Rt(o,"stderr")}
+${Rt(o,"stdout")}`;return/^can't find session:/m.test(t)||/^no server running on /m.test(t)||/^error connecting to .* \((?:No such file or directory|Connection refused)\)$/m.test(t)?"absent":"unknown"}async function Mi(o,t){let e=async(i,s)=>{try{await _t(i)}catch(r){a.warn("tmux send-keys failed during self-terminate",{sessionName:o,label:s,error:String(r)})}};await e(`tmux send-keys -t "${o}" C-c`,"ctrl-c"),await new Promise(i=>setTimeout(i,200)),await e(`tmux send-keys -t "${o}" -l "${t}"`,"quit-text"),await new Promise(i=>setTimeout(i,500)),await e(`tmux send-keys -t "${o}" Enter`,"enter")}function qe(o){let t=o.split(`
+`),e=n=>/^[\s>]*\d+\.\s/.test(n),i=-1;for(let n=t.length-1;n>=0;n-=1)if(/^\s*\$\s+/.test(t[n])){i=n;break}if(i===-1)return;let s=t[i].trim().match(/^\$\s+(.+)$/);if(!s?.[1]?.trim())return;let r=[s[1].trim()];for(let n=i+1;n<t.length;n+=1){let l=t[n];if(e(l)||/^\s*$/.test(l)||/^\s*\$\s+/.test(l))break;r.push(l.trim())}return r.length>0?r:void 0}function Ct(o){let t=qe(o);if(!t)return;let e=t.join(" ").trim();return e.length>0?e:void 0}function Ot(o,t){return Ni(o,t).has(t)}function Ni(o,t){if(o.length===0)return new Set;let e=t,i=new Set([o[0]]);for(let s of o.slice(1)){let r=s,n=new Set;for(let l of i)for(let p of[""," "]){let d=`${l}${p}${r}`;e.startsWith(d)&&n.add(d)}if(n.size===0)return new Set;i=n}return i}function Li(o,t,e){let i=/^\[\u2026\s+\d+\s+lines\]\s+ctrl\s*\+\s*a\s+view\s+all$/i,s=o.split(`
+`).map(r=>r.trim()).filter(Boolean);return s.length<2||!i.test(s[s.length-1])||!e?!1:Ki(e,t)}function Ki(o,t){let e=Le(t),i=kt(o,"2");if(!e||!i)return!1;let s=new Set;for(let r of Ft(i)){let n=r.match(/^Yes, and don't ask again for commands that start with `([^`]*)`\s*\(p\)$/);if(!n)continue;let l=Le(n[1]);l&&JSON.stringify(l)===JSON.stringify(e)&&s.add(JSON.stringify(l))}return s.size===1}function At(o,t,e){if(!o.find(c=>c.number==="2"&&/\(p\)\s*$/i.test(c.text)))return o;let s="Yes, and don't ask again for commands that start with",r="Yes, and don't ask again (p)",n=kt(e,"2");if(!n)return null;let l=Ft(n);if(l.has(r))return o.map(c=>c.number==="2"?{...c,text:r}:c);if(!t)return null;let p=new Map;for(let c of l){let f=c.match(/^Yes, and don't ask again for commands that start with `([^`]*)`\s*\(p\)$/);if(!f)continue;let y=Le(f[1]);!y||!qi(y,t)||p.set(JSON.stringify(y),y)}if(p.size!==1)return null;let d=[...p.values()][0],u=Bi(d);return o.map(c=>c.number==="2"?{...c,text:`${s} \`${u}\` (p)`}:c)}function kt(o,t){if(!o)return null;let e=(0,B.normalizeSnapshot)(o).split(`
+`).map(l=>l.trim()),i=new RegExp(`^(?:[>\u203A\u276F\u25B8\u25B6\u279C\u27A4*\u25CF]\\s*)?${t}\\.\\s+(.*)$`),s=-1,r="";for(let l=e.length-1;l>=0;l-=1){let p=e[l].match(i);if(p){s=l,r=p[1];break}}if(s<0)return null;let n=[r];for(let l=s+1;l<e.length&&!(/^(?:[>›❯▸▶➜➤*●]\s*)?\d+\.\s+/.test(e[l])||!e[l]||(n.push(e[l]),/\(p\)\s*$/i.test(e[l])));l+=1);return n.some(l=>/\(p\)\s*$/i.test(l))?n:null}function Ft(o){if(o.length===0||o.length>13)return new Set;let t=new Set([o[0]]);for(let e of o.slice(1)){let i=new Set;for(let s of t)i.add(`${s}${e}`),i.add(`${s} ${e}`);t=i}return t}function Le(o){try{let t=(0,Be.parse)(o,e=>`\${${e}}`);return t.every(e=>typeof e=="string")?t:null}catch{return null}}function Bi(o){return o.map(t=>/^[A-Za-z0-9_@%+=:,./-]+$/.test(t)?t:`'${t.replace(/'/g,`'"'"'`)}'`).join(" ")}function qi(o,t){if(o.length===0)return!1;let e;try{e=(0,Be.parse)(t,s=>`\${${s}}`)}catch{return!1}let i=[[]];for(let s of e){if(typeof s=="string"){i[i.length-1].push(s);continue}if("op"in s&&["&&","||",";","|","|&","&"].includes(s.op)){i.push([]);continue}return!1}return i.some(s=>o.every((r,n)=>s[n]===r))}var be=class o{constructor(){this.sessionState=null;this.unsubscribe=null;this.sessionKey=null;this.sessionIsEncrypted=!1;this.sessionKeyGen=null;this.e1PromptRaises=new Map;this.e1PendingResolutions=new Map;this.e1ResolutionInFlight=new Map;this.e1RaiseInFlight=new Map;this.e1NeedsReRaise=new Set;this.e1RetirementOrphans=new Map;this.e1ContentKeyIndex=new Map;this.e1TtlRefreshTimer=null;this.toolActivity=null;this.toolActivityStartPromise=null;this.toolActivityLegacyRecorders=new Map;this.pendingInteractivePrompt=null;this.queuedInteractivePrompts=[];this.isInitializingSession=!1;this.bufferedLogEntries=[];this.logEntryChain=Promise.resolve();this.hookEventChain=Promise.resolve();this.hooksActive=!1;this.hooksCompatibilityNoticeSent=!1;this.permissionRequestHookInFlight=null;this.queuedPermissionRequestDedupeKeys=new Map;this.queuedPermissionRequestSessionCounts=new Map;this.queuedPermissionRequestRegistrations=new Map;this.waitingPermissionRequests=new Map;this.permissionRequestOccurrencesByCompletionKey=new Map;this.deferredTmuxPromptCandidates=new Map;this.recoveryPermissionReplay=null;this.resolvedApprovalDedupeKeys=new Map;this.subscribedSessionId=null;this.subscribedSessionState=null;this.terminalInputChain=Promise.resolve();this.terminalInputBlockedStates=new WeakSet;this.mobilePromptDeduper=new me({expiryMs:1e4});this.launchSessionInitPromise=null;this.sessionStartedInitPromise=null;this.bootstrapSessionId=null;this.recoveryBootstrapOwnerBound=!1;this.resumeBackendSession=m.resumeOrCreateSession;this.sessionBootstrapFailureCount=0;this.sessionBootstrapRetryAt=0;this.retiredSessionRecoveryPromise=null;this.lifecycleGeneration=0;this.isStopping=!1;this.stopPromise=null;this.terminalRetirementRequested=!1;this.tmuxLifecycleTimer=null;this.tmuxLifecycleCheckInFlight=!1;this.tmuxLifecycleObservedAlive=!1;this.tmuxLifecycleInitDeadlineMs=Number.POSITIVE_INFINITY;this.v1Bridge=new ge;this.orchestrationClient=null;this.userDecisionUnsubscribe=null;this.httpApi=new he,this.sessionWatcher=new ae,this.approvalDetector=new pe,this.promptResponder=new de,this.tmuxPaneObserver=new ce,this.e1DurableState=new ye({handoffRoot:process.env.CODEVIBE_CODEX_HANDOFF_ROOT,resolutionRoot:process.env.CODEVIBE_CODEX_E1_OUTBOX_ROOT})}static{this.E1_TTL_REFRESH_MS=300*1e3}async start(){a.info("Starting CodeVibe Codex companion server",{environment:(0,m.getEnvironment)()}),this.appSyncClient=new m.AppSyncClient,await this.appSyncClient.authenticateWithStoredTokens()||(a.error('Authentication failed. Run "codevibe login" first.'),console.error('Not authenticated. Run "codevibe login" to sign in.'),process.exit(1)),a.info("Authenticated successfully",{userId:this.appSyncClient.getCurrentUserId(),email:this.appSyncClient.getCurrentUserEmail()}),await this.restorePendingE1ResolutionsFromOutbox(),await(0,m.registerDeviceEncryptionKey)(this.appSyncClient,a),(0,m.startDeviceKeyWatcher)(this.appSyncClient,a),(0,m.pushDetectedAgents)(this.appSyncClient,a).catch(i=>{a.warn("Failed to update available agents (non-fatal)",{error:i?.message})});try{let i=await this.appSyncClient.sweepOrphanSessions({agentType:"CODEX"});i>0&&a.info("Orphan sweep: marked stale Codex sessions INACTIVE",{swept:i})}catch(i){a.warn("Orphan sweep failed, continuing startup",{error:i instanceof Error?i.message:String(i)})}this.httpApi.onEvent(this.handleEventFromHook.bind(this));let e=await this.httpApi.start();a.info("HTTP API started for hooks",{port:e}),this.startTmuxLifecycleMonitor(),await this.createLaunchSession(),this.setupEventHandlers(),this.sessionWatcher.start(),a.info("CodeVibe Codex companion server started")}async createLaunchSession(){if(this.isStopping)return;if(process.env[Se]==="1"){a.info("Recovery daemon deferring backend bootstrap until the native rollout is known");return}let t=this.lifecycleGeneration,e=process.env.CODEVIBE_CODEX_TMUX_SESSION;if(!e){a.warn("No CODEVIBE_CODEX_TMUX_SESSION \u2014 skipping launch session");return}let i;this.launchSessionInitPromise=new Promise(s=>{i=s});try{let s=process.env.CODEX_WORKING_DIRECTORY||process.cwd(),r=this.getOrCreateBootstrapSessionId(),n=this.appSyncClient.getCurrentUserId();a.info("Creating launch session",{sessionId:r,projectPath:s});let l=!1;try{let p=await(0,m.resumeOrCreateSession)({sessionId:r,userId:n,agentType:m.AgentType.CODEX,projectPath:s,metadata:{launchSession:!0}},this.appSyncClient,a);if(r=p.sessionId,!this.isLifecycleCurrent(t)){await this.retireCancelledBootstrap(r,"launch_session");return}this.sessionKey=p.sessionKey,this.sessionKeyGen=p.sessionKeyGen,this.sessionIsEncrypted=!!p.sessionKey,l=!0,this.sessionState={sessionId:r,userId:n,projectPath:s,cwd:s,createdAt:new Date,subscriptionActive:!1,metadata:{launchSession:!0},encryptionSnapshot:{sessionKey:p.sessionKey,sessionIsEncrypted:!!p.sessionKey},codexSessionId:e,codexLogFile:void 0},this.clearSessionBootstrapFailure(),this.bootstrapSessionId=null,await _("daemon_init_step_completed",{step:"session_resume_or_create",path:"launch_session"})}catch(p){if(!this.isLifecycleCurrent(t)){let d=this.authoritativeSessionIdFromError(p)??r;await this.retireCancelledBootstrap(d,"launch_session_error");return}await _("daemon_init_step_failed",{step:"session_resume_or_create",path:"launch_session",error_class:p?.name||"Error",error_message:p?.message||String(p)}),p?.code==="ENCRYPTED_SESSION_NO_KEY"&&(this.sessionIsEncrypted=!0,this.sessionKey=null),this.bindBootstrapIdentityFromError(p),this.recordSessionBootstrapFailure(p,"launch_session"),a.error("Failed to create/resume launch session (non-fatal)",{error:p})}if(!l)return;await _("daemon_init_step_completed",{step:"session_state_set",path:"launch_session"});try{this.subscribeToMobileEvents(r)?await _("daemon_init_step_completed",{step:"subscribe_mobile_events",path:"launch_session"}):await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"launch_session",error_class:"SubscriptionSetupFailed",error_message:"subscribeToMobileEvents returned false"})}catch(p){await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"launch_session",error_class:p?.name||"Error",error_message:p?.message||String(p)}),a.error("Failed to subscribe to mobile events for launch session",{error:p})}try{await this.appSyncClient.startHeartbeat(r)?await _("daemon_init_step_completed",{step:"heartbeat_start",path:"launch_session"}):(await _("daemon_init_step_failed",{step:"heartbeat_start",path:"launch_session",error_class:"InitialHeartbeatNotPersisted",error_message:"Backend did not confirm the initial heartbeat mutation"}),a.error("Initial launch-session heartbeat was not persisted",{sessionId:r}))}catch(p){await _("daemon_init_step_failed",{step:"heartbeat_start",path:"launch_session",error_class:p?.name||"Error",error_message:p?.message||String(p)}),a.error("Failed to start heartbeat for launch session",{error:p})}try{await this.subscribeToOnApplyUserDecision(r)}catch(p){a.error("Failed to subscribe to onApplyUserDecision for launch session (non-fatal)",{error:p})}this.startMobileEndWatcher(r),a.info("Launch session created",{sessionId:r})}finally{i()}}encryptForEmit(t,e,i,s){let r=this.sessionState;if(!r||r.sessionId!==s||!r.encryptionSnapshot)return a.warn("Dropping event from stale or unresolved session generation (#638)",{type:i,sessionId:s,currentSessionId:r?.sessionId}),null;let{sessionKey:n,sessionIsEncrypted:l}=r.encryptionSnapshot,p=(0,m.encryptForEmit)(n,l,t,e);return p===null&&a.error("No session key for ENCRYPTED session \u2014 dropping event (fail-closed, #638)",{type:i,sessionId:s}),p}newE1Raise(t,e,i,s){let{record:r}=(0,m.newPromptRaise)({sessionId:t,producerKind:"PLUGIN_APPROVAL",mobileActionable:e,agentType:"CODEX",...i!==void 0&&{title:i}});return this.e1PromptRaises.set(r.promptId,{record:r,...s?.dedupeKey!==void 0?{resolutionDedupeKey:s.dedupeKey}:{},...s?.completionKey!==void 0?{resolutionCompletionKey:s.completionKey}:{},...s?.callId!==void 0?{resolutionCallId:s.callId}:{}}),this.e1TtlRefreshTimer||this.startE1TtlRefresh(),r}stashE1RaiseContent(t,e,i){let s=this.e1PromptRaises.get(t);s&&(s.contentPlain=e,s.metadataPlain=i)}async emitSuppressedPromptCarrier(t,e){let i="\u26A0\uFE0F A prompt is waiting in your desktop terminal, but its options could not be shown here. Please answer it on your desktop.",s=this.encryptForEmit(i,{e1SuppressedPrompt:!0},m.EventType.NOTIFICATION,t);return s?(await this.trackE1Raise(e.promptId,this.appSyncClient.createEvent({sessionId:t,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,content:s.content,metadata:s.metadata,...(0,m.raiseFieldsFromRecord)(e),notificationText:i,timestamp:(0,m.prepareEventTimestamp)({orderingKey:t}),isEncrypted:s.isEncrypted?!0:void 0})),a.info("E1: emitted suppressed-prompt badge carrier (mobileActionable=false)",{sessionId:t,promptId:e.promptId}),!0):!1}raiseSuppressedBadge(t,e,i={}){if(e){if(this.hasRecentlyResolvedApprovalDedupeKey(t,e)){a.debug("Skipping suppressed-prompt carrier; approval completed while producer was in flight",{sessionId:t,dedupeKey:e});return}let r=`${t}::${e}`,n=this.e1ContentKeyIndex.get(r);if(n&&this.e1PromptRaises.has(n)){if(i.suppressTmuxObserverUntilResolved){let l=this.e1PromptRaises.get(n);l&&(l.suppressTmuxObserverUntilResolved=!0,i.observerSnapshot&&(l.suppressedObserverSnapshotKey=this.buildObserverSnapshotMatchKey(i.observerSnapshot)))}return}n&&this.e1ContentKeyIndex.delete(r)}let s=this.newE1Raise(t,!1,void 0,e?{dedupeKey:e,completionKey:i.completionKey}:void 0);if(i.suppressTmuxObserverUntilResolved){let r=this.e1PromptRaises.get(s.promptId);r&&(r.suppressTmuxObserverUntilResolved=!0,i.observerSnapshot&&(r.suppressedObserverSnapshotKey=this.buildObserverSnapshotMatchKey(i.observerSnapshot)))}e&&this.e1ContentKeyIndex.set(`${t}::${e}`,s.promptId),this.emitSuppressedPromptCarrier(t,s).catch(r=>{a.error("E1: failed to emit suppressed-prompt badge carrier",{sessionId:t,promptId:s.promptId,error:r instanceof Error?r.message:String(r)})})}snapshotOpenE1(t){return[...this.e1PromptRaises.values()].filter(e=>e.record.sessionId===t).map(e=>({record:{...e.record},...e.contentPlain!==void 0&&{contentPlain:e.contentPlain},...e.metadataPlain!==void 0&&{metadataPlain:e.metadataPlain},...e.resolutionDedupeKey!==void 0&&{resolutionDedupeKey:e.resolutionDedupeKey},...e.resolutionCompletionKey!==void 0&&{resolutionCompletionKey:e.resolutionCompletionKey},...e.resolutionCallId!==void 0&&{resolutionCallId:e.resolutionCallId},...e.suppressTmuxObserverUntilResolved!==void 0&&{suppressTmuxObserverUntilResolved:e.suppressTmuxObserverUntilResolved},...e.suppressedObserverSnapshotKey!==void 0&&{suppressedObserverSnapshotKey:e.suppressedObserverSnapshotKey}}))}buildDaemonHandoffSnapshot(t){let e=process.env[$];if(!e)throw new Error("E1_DAEMON_HANDOFF_MISSING_TMUX_SESSION");return{version:1,createdAtMs:Date.now(),tmuxSession:e,backendSessionId:t.sessionId,openRaises:this.snapshotOpenE1(t.sessionId),pendingResolutions:[...this.e1PendingResolutions.values()].map(i=>({record:{...i.record},resolutionAt:i.resolutionAt,attempts:i.attempts})),needsReRaisePromptIds:[...this.e1NeedsReRaise],permissionOccurrences:[...this.permissionRequestOccurrencesByCompletionKey.entries()].map(([i,s])=>[i,s.map(r=>({...r}))]),waitingPermissionRequests:[...this.waitingPermissionRequests.values()].filter(i=>i.ownerState===t).map(({occurrenceKey:i,dedupeKey:s,payload:r})=>({occurrenceKey:i,dedupeKey:s,payload:r})),pendingInteractivePrompt:this.pendingInteractivePrompt?{...this.pendingInteractivePrompt}:null,queuedInteractivePrompts:this.queuedInteractivePrompts.map(i=>({prompt:{...i.prompt},content:i.content,metadata:{...i.metadata}})),resolvedApprovalDedupeKeys:[...this.resolvedApprovalDedupeKeys.entries()].filter(([,i])=>i>Date.now()-Me)}}persistDaemonHandoffState(t){for(let i of this.e1PendingResolutions.values())this.e1DurableState.writeResolution(i);let e=this.buildDaemonHandoffSnapshot(t);this.e1DurableState.writeHandoff(e),a.info("E1: persisted daemon handoff state",{sessionId:t.sessionId,openPrompts:e.openRaises.length,pendingResolutions:e.pendingResolutions.length,completionQueues:e.permissionOccurrences.length})}async adoptDaemonHandoffState(t){if(process.env[Se]!=="1")return!1;let e=process.env[$];if(!e)return!1;let i=this.e1DurableState.readHandoff(e);if(!i)return!1;let s=this.sessionState;if(!s||s.sessionId!==t)throw new Error("E1_DAEMON_HANDOFF_WITHOUT_CURRENT_SESSION");for(let p of i.pendingResolutions)this.e1PendingResolutions.has(p.record.promptId)||this.e1PendingResolutions.set(p.record.promptId,{record:{...p.record},resolutionAt:p.resolutionAt,attempts:p.attempts}),this.e1DurableState.writeResolution(p);for(let p of i.openRaises){let d={...p,record:{...p.record},...p.metadataPlain!==void 0&&{metadataPlain:{...p.metadataPlain}}};this.e1PromptRaises.set(d.record.promptId,d),i.backendSessionId!==t&&this.e1RetirementOrphans.set(d.record.promptId,{...d,record:{...d.record}}),d.resolutionDedupeKey&&this.e1ContentKeyIndex.set(`${t}::${d.resolutionDedupeKey}`,d.record.promptId)}this.permissionRequestOccurrencesByCompletionKey=new Map(i.permissionOccurrences.map(([p,d])=>[p,d.map(u=>({...u}))])),this.e1NeedsReRaise=new Set(i.needsReRaisePromptIds);for(let p of i.waitingPermissionRequests??[])this.waitingPermissionRequests.set(p.occurrenceKey,{...p,ownerState:s,context:this.buildApprovalPromptContextFromHookPayload(p.payload)});this.pendingInteractivePrompt=i.pendingInteractivePrompt?{...i.pendingInteractivePrompt,ownerSessionId:t}:null;let r=this.pendingInteractivePrompt,n=r?.completionKey?this.permissionRequestOccurrencesByCompletionKey.get(r.completionKey):void 0;this.recoveryPermissionReplay=r?.source==="permission_hook"&&r.completionKey&&r.dedupeKey&&this.isPermissionRequestOccurrenceKey(r.dedupeKey)&&n?.some(p=>p.occurrenceKey===r.dedupeKey)?{ownerSessionId:t,completionKey:r.completionKey,occurrenceKey:r.dedupeKey}:null,this.queuedInteractivePrompts=i.queuedInteractivePrompts.map(p=>({prompt:{...p.prompt,ownerSessionId:t},content:p.content,metadata:{...p.metadata},ownerState:s}));let l=Date.now()-Me;for(let[p,d]of i.resolvedApprovalDedupeKeys){if(d<=l)continue;let u=`${i.backendSessionId}::`,c=p.startsWith(u)?`${t}::${p.slice(u.length)}`:p;this.resolvedApprovalDedupeKeys.set(c,d)}return i.backendSessionId!==t&&await this.drainRetirementOrphans(t),await this.drainPendingE1Resolutions(),await this.drainPendingE1ReRaises(),(this.e1PromptRaises.size>0||this.e1PendingResolutions.size>0)&&this.startE1TtlRefresh(),this.e1DurableState.removeHandoff(e),a.info("E1: adopted daemon handoff state",{fromSessionId:i.backendSessionId,replacementSessionId:t,openPrompts:i.openRaises.length,pendingResolutions:i.pendingResolutions.length,completionQueues:i.permissionOccurrences.length}),!0}parkRetirementOrphans(t){for(let e of this.snapshotOpenE1(t))this.e1RetirementOrphans.set(e.record.promptId,e)}async drainRetirementOrphans(t){if(this.e1RetirementOrphans.size===0){this.e1PendingResolutions.size>0&&!this.e1TtlRefreshTimer&&this.startE1TtlRefresh();return}a.info("E1 (\xA76a-4): re-homing parked retirement-orphan prompts onto replacement session",{replacementSessionId:t,count:this.e1RetirementOrphans.size});for(let[e,i]of[...this.e1RetirementOrphans]){let r=this.e1PromptRaises.get(e)??{record:{...i.record},...i.contentPlain!==void 0&&{contentPlain:i.contentPlain},...i.metadataPlain!==void 0&&{metadataPlain:i.metadataPlain},...i.resolutionDedupeKey!==void 0&&{resolutionDedupeKey:i.resolutionDedupeKey},...i.resolutionCompletionKey!==void 0&&{resolutionCompletionKey:i.resolutionCompletionKey},...i.resolutionCallId!==void 0&&{resolutionCallId:i.resolutionCallId}};for(let[l,p]of this.e1ContentKeyIndex.entries())p===e&&this.e1ContentKeyIndex.delete(l);if(r.record.sessionId=t,this.e1PromptRaises.set(e,r),r.resolutionDedupeKey&&this.e1ContentKeyIndex.set(`${t}::${r.resolutionDedupeKey}`,e),!await this.reRaiseOneE1(t,r,{untilAck:!0})){if(!this.e1RetirementOrphans.has(e))continue;break}this.e1RetirementOrphans.delete(e)}this.e1TtlRefreshTimer||this.startE1TtlRefresh()}isReRaiseTargetCurrent(t){return!this.isStopping&&this.sessionState!==null&&this.sessionState.sessionId===t}async reRaiseOneE1(t,e,i){let s=e.record;if(!(0,m.canRecoverPromptRaise)(e,this.e1RaiseInFlight.has(s.promptId)))return!1;let r=s.mobileActionable&&e.contentPlain!==void 0,n=i?.untilAck??!1,l=4,p=4e3;for(let d=1;n||d<=l;d++){if(!(0,m.isOpenPromptRaise)(e,this.e1PromptRaises.get(s.promptId)))return!1;if(n&&!this.isReRaiseTargetCurrent(t))return this.e1NeedsReRaise.add(s.promptId),a.warn("E1: retirement re-raise aborted (stopping/superseded) \u2014 parked",{sessionId:t,promptId:s.promptId}),!1;try{if(r){let u=this.encryptForEmit(e.contentPlain,e.metadataPlain??{},m.EventType.INTERACTIVE_PROMPT,t);if(!u)return!1;await this.trackE1Raise(s.promptId,this.appSyncClient.createEvent({sessionId:t,type:m.EventType.INTERACTIVE_PROMPT,source:m.EventSource.DESKTOP,content:u.content,metadata:u.metadata,...(0,m.raiseFieldsFromRecord)(s),timestamp:(0,m.prepareEventTimestamp)({orderingKey:t}),...u.isEncrypted?{isEncrypted:!0}:{}}))}else if(s.mobileActionable=!1,!await this.emitSuppressedPromptCarrier(t,s))return!1;return this.e1NeedsReRaise.delete(s.promptId),a.info("E1: re-raised prompt onto replacement session",{sessionId:t,promptId:s.promptId,actionable:r}),!0}catch(u){if(!n&&d===l)return this.e1NeedsReRaise.add(s.promptId),a.error("E1: re-raise unacked after backoff \u2014 parked for retry-until-ack",{sessionId:t,promptId:s.promptId,error:u instanceof Error?u.message:String(u)}),!1;if(n){let c=Date.now()+Math.min(250*2**(d-1),p);for(;Date.now()<c&&this.isReRaiseTargetCurrent(t);)await new Promise(f=>setTimeout(f,Math.min(50,c-Date.now())))}else await new Promise(c=>setTimeout(c,250*d))}}return!1}async drainPendingE1ReRaises(){if(this.e1NeedsReRaise.size!==0)for(let t of[...this.e1NeedsReRaise]){let e=this.e1PromptRaises.get(t);if(!e){this.e1NeedsReRaise.delete(t);continue}!this.sessionState||e.record.sessionId!==this.sessionState.sessionId||await this.reRaiseOneE1(e.record.sessionId,e)}}beginE1Resolution(t,e){if(this.e1PendingResolutions.has(t))return!0;let i=this.e1PromptRaises.get(t);if(!i||i.record.sessionId!==e)return!1;this.e1PromptRaises.delete(t),this.e1NeedsReRaise.delete(t),this.e1RetirementOrphans.delete(t);for(let[s,r]of this.e1ContentKeyIndex.entries())r===t&&this.e1ContentKeyIndex.delete(s);return this.e1PendingResolutions.set(t,{record:{...i.record},resolutionAt:new Date().toISOString(),attempts:0}),this.e1TtlRefreshTimer||this.startE1TtlRefresh(),!0}async emitE1Resolution(t){let e=this.e1ResolutionInFlight.get(t);if(e)return e;if(!this.e1PendingResolutions.has(t))return;let i=(async()=>{let s=this.e1PendingResolutions.get(t);if(s){try{this.e1DurableState.writeResolution(s)}catch(r){a.error("E1: failed to persist exact-clear outbox record",{promptId:t,error:r instanceof Error?r.message:String(r)})}try{let r=this.e1RaiseInFlight.get(t);if(r&&await r,s=this.e1PendingResolutions.get(t),!s)return;if((await this.appSyncClient.createEvent({sessionId:s.record.sessionId,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,resolvedPromptId:s.record.promptId,ownerToken:s.record.ownerToken,resolutionAt:s.resolutionAt,timestamp:(0,m.prepareEventTimestamp)({orderingKey:s.record.sessionId})}))?.promptId!==s.record.promptId)throw new Error("E1_PLUGIN_RESOLUTION_NOT_ACKNOWLEDGED: exact prompt id was not returned");this.e1PendingResolutions.delete(t);try{this.e1DurableState.removeResolution(t)}catch(l){a.warn("E1: exact-clear ACKed but outbox cleanup failed",{promptId:t,error:l instanceof Error?l.message:String(l)})}a.info("E1: plugin approval resolution acknowledged",{sessionId:s.record.sessionId,promptId:t})}catch(r){let n=this.e1PendingResolutions.get(t);a.warn("E1: plugin approval resolution unacknowledged; parked for retry",{sessionId:n?.record.sessionId,promptId:t,error:r instanceof Error?r.message:String(r)})}}})();this.e1ResolutionInFlight.set(t,i);try{await i}finally{this.e1ResolutionInFlight.get(t)===i&&this.e1ResolutionInFlight.delete(t)}}trackE1Raise(t,e){let i=e.then(()=>{},()=>{});return this.e1RaiseInFlight.set(t,i),i.then(()=>{this.e1RaiseInFlight.get(t)===i&&this.e1RaiseInFlight.delete(t)}),e}async drainPendingE1Resolutions(){for(let[t,e]of[...this.e1PendingResolutions.entries()])e.attempts+=1,await this.emitE1Resolution(t)}async restorePendingE1ResolutionsFromOutbox(){let{records:t,rejected:e}=this.e1DurableState.readResolutions();for(let i of e)a.error("E1: rejected unsafe or invalid resolution outbox record",i);for(let i of t){let s=this.e1PendingResolutions.get(i.record.promptId);(!s||i.attempts>s.attempts)&&this.e1PendingResolutions.set(i.record.promptId,{record:{...i.record},resolutionAt:i.resolutionAt,attempts:i.attempts})}t.length>0&&(a.info("E1: recovered pending exact-clear outbox records",{count:t.length}),await this.drainPendingE1Resolutions(),this.e1PendingResolutions.size>0&&!this.e1TtlRefreshTimer&&this.startE1TtlRefresh())}async drainPendingE1ResolutionsForLifecycleEnd(t={}){let e=t.maxWaitMs??4e3,i=t.retryDelayMs??250,s=Date.now()+Math.max(0,e),r=0;do{if(await this.drainPendingE1Resolutions(),this.e1PendingResolutions.size===0)return;if(r+=1,Date.now()>=s)break;await new Promise(n=>setTimeout(n,Math.min(i*r,Math.max(0,s-Date.now()))))}while(Date.now()<s);for(let n of this.e1PendingResolutions.values())this.e1DurableState.writeResolution(n);a.warn("E1: graceful lifecycle ended with durable exact-clear work pending",{count:this.e1PendingResolutions.size})}beginE1PromptResolutions(t,e){let i=[];for(let s of new Set(t))this.beginE1Resolution(s,e)&&i.push(s);return i}launchE1Resolutions(t){Promise.all([...t].map(e=>this.emitE1Resolution(e)))}async exactClearOpenE1ForLifecycleEnd(t){let e=[...this.e1PromptRaises.values()].filter(s=>s.record.sessionId===t).map(s=>s.record.promptId),i=this.beginE1PromptResolutions(e,t);await Promise.all(i.map(s=>this.emitE1Resolution(s)))}async refreshE1Ttls(){await this.drainPendingE1Resolutions(),await this.drainPendingE1ReRaises();let t=this.sessionState?.sessionId;if(!t)return;let e=[...this.e1PromptRaises.values()].filter(i=>i.record.sessionId===t&&(0,m.canRecoverPromptRaise)(i,this.e1RaiseInFlight.has(i.record.promptId))).map(i=>i.record.promptId);if(e.length!==0)try{let i=await this.appSyncClient.refreshOpenPromptTtl(e);for(let s of i){let r=this.e1PromptRaises.get(s);r&&r.record.sessionId===t&&await this.reRaiseOneE1(t,r)}}catch(i){a.warn("E1: TTL-refresh tick failed (non-fatal, retries next tick)",{error:i instanceof Error?i.message:String(i)})}}startE1TtlRefresh(){this.e1TtlRefreshTimer&&clearInterval(this.e1TtlRefreshTimer),this.e1TtlRefreshTimer=setInterval(()=>{this.refreshE1Ttls()},o.E1_TTL_REFRESH_MS)}stopE1TtlRefresh(){this.e1TtlRefreshTimer&&(clearInterval(this.e1TtlRefreshTimer),this.e1TtlRefreshTimer=null)}isExpectedSessionStateCurrent(t){return!this.isStopping&&this.sessionState===t&&!this.terminalInputBlockedStates.has(t)}sendSessionPinnedInput(t,e){if(!this.isExpectedSessionStateCurrent(t)||this.terminalInputBlockedStates.has(t))return Promise.resolve(!1);let i=this.terminalInputChain.then(async()=>!this.isExpectedSessionStateCurrent(t)||this.terminalInputBlockedStates.has(t)||!await this.verifyNoActiveCodexChooser(t.sessionId)||!await this.promptResponder.sendLiteral(t.sessionId,e)||(await new Promise(s=>setTimeout(s,500)),!this.isExpectedSessionStateCurrent(t))||!await this.verifyNoActiveCodexChooser(t.sessionId)?!1:this.promptResponder.sendKey(t.sessionId,"Enter"));return this.terminalInputChain=i.then(()=>{},()=>{}),i}async verifyNoActiveCodexChooser(t){try{let e=await this.tmuxPaneObserver.captureSnapshot();return!this.tmuxPaneObserver.extractActivePromptBlock(e)}catch(e){return a.warn("Failed to verify that no Codex chooser is active",{sessionId:t,error:e instanceof Error?e.message:String(e)}),!1}}sendVerifiedPromptInput(t,e,i){if(!this.isExpectedSessionStateCurrent(t))return Promise.resolve("stale");let s=this.terminalInputChain.then(async()=>{if(!this.isExpectedSessionStateCurrent(t)||this.pendingInteractivePrompt!==e||e.ownerSessionId!==t.sessionId)return"stale";if(!e.observerMatchKey)return a.warn("Refusing mobile prompt input without a captured pane identity",{sessionId:t.sessionId,promptId:e.promptId}),"unverified";if(e.terminalMenuIdentity)try{return await(0,ne.selectTerminalMenuOption)(e.terminalMenuIdentity,i,{current:()=>this.isExpectedSessionStateCurrent(t)&&this.pendingInteractivePrompt===e,read:async()=>(0,ne.parseActiveTerminalMenu)(await this.tmuxPaneObserver.captureSnapshot()),key:l=>this.promptResponder.sendKey(t.sessionId,l),wait:()=>new Promise(l=>setTimeout(l,100))})}catch{return"unverified"}let r=null;try{let l=await this.tmuxPaneObserver.captureSnapshot(),p=this.tmuxPaneObserver.extractActiveApprovalBlock(l),d=p?(0,B.parseInteractivePrompt)(p):null;r=d?this.buildObserverPromptMatchKey(d):null}catch(l){return a.warn("Failed to re-probe Codex prompt before mobile input",{sessionId:t.sessionId,promptId:e.promptId,error:l instanceof Error?l.message:String(l)}),"unverified"}return!this.isExpectedSessionStateCurrent(t)||this.pendingInteractivePrompt!==e?"stale":!r||r!==e.observerMatchKey?(a.warn("Refusing mobile input because the live Codex prompt changed",{sessionId:t.sessionId,promptId:e.promptId,hasLiveIdentity:!!r}),"unverified"):(i===Y?await this.promptResponder.sendKey(t.sessionId,"Escape"):await this.promptResponder.sendLiteral(t.sessionId,i))?"sent":"send_failed"});return this.terminalInputChain=s.then(()=>{},()=>{}),s}sendVerifiedFollowUpAfterDismissal(t,e,i){let s=this.terminalInputChain.then(async()=>{let r=()=>this.isExpectedSessionStateCurrent(t)&&e.ownerSessionId===t.sessionId;return r()?!await this.verifyNoActiveCodexChooser(t.sessionId)||!r()?"unverified":await this.promptResponder.sendLiteral(t.sessionId,i)?(await new Promise(n=>setTimeout(n,500)),r()?!await this.verifyNoActiveCodexChooser(t.sessionId)||!r()?"unverified":await this.promptResponder.sendKey(t.sessionId,"Enter")?"sent":"send_failed":"stale"):"send_failed":"stale"});return this.terminalInputChain=s.then(()=>{},()=>{}),s}sendConversationContinuation(t,e){if(!this.isExpectedSessionStateCurrent(t))return Promise.resolve("stale");let i=this.terminalInputChain.then(async()=>{if(!this.isExpectedSessionStateCurrent(t))return"stale";try{let s=new Set;for(;;){let r=await this.tmuxPaneObserver.captureSnapshot();if(!this.isExpectedSessionStateCurrent(t))return"stale";let n=this.tmuxPaneObserver.extractActivePromptBlock(r);if(!n)break;let l=this.tmuxPaneObserver.hashPromptSnapshot(n);if(s.has(l)||s.size>=4)return"unverified";if(s.add(l),!await this.promptResponder.sendKey(t.sessionId,"Escape"))return"send_failed";if(await new Promise(p=>setTimeout(p,200)),!this.isExpectedSessionStateCurrent(t))return"stale"}}catch(s){return a.warn("Failed to inspect Codex chooser before conversation continuation",{sessionId:t.sessionId,error:s instanceof Error?s.message:String(s)}),"unverified"}return await this.promptResponder.sendLiteral(t.sessionId,e)?(await new Promise(s=>setTimeout(s,500)),this.isExpectedSessionStateCurrent(t)?await this.verifyNoActiveCodexChooser(t.sessionId)?await this.promptResponder.sendKey(t.sessionId,"Enter")?"sent":"send_failed":"unverified":"stale"):"send_failed"});return this.terminalInputChain=i.then(()=>{},()=>{}),i}handleEventFromHook(t){if(this.isStopping)return Promise.resolve();let e=this.lifecycleGeneration,i=this.registerQueuedPermissionRequest(t,e),s=this.hookEventChain.then(()=>this.processHookEvent(t,e,i??void 0)),r=i?s.finally(()=>this.unregisterQueuedPermissionRequest(i)):s;return this.hookEventChain=r.catch(n=>{a.error("[Hooks] event handler failed",{hookEvent:t.hook_event_name,sessionId:t.session_id,error:n instanceof Error?n.message:String(n)})}),r}registerQueuedPermissionRequest(t,e){if(t.hook_event_name!=="PermissionRequest"||!this.sessionState||this.sessionWatcher.getAuthoritativeSessionId()!==t.session_id)return null;let i=this.sessionState.sessionId;this.queuedPermissionRequestSessionCounts.set(i,(this.queuedPermissionRequestSessionCounts.get(i)??0)+1);let s=this.buildApprovalPromptContextFromHookPayload(t),r=this.buildApprovalDedupeKey(s),n=`permission:${(0,J.v4)()}`,l=r?`${i}::${r}`:void 0;l&&this.queuedPermissionRequestDedupeKeys.set(l,(this.queuedPermissionRequestDedupeKeys.get(l)??0)+1);let p={sessionId:i,lifecycleGeneration:e,context:s,dedupeKey:r,occurrenceKey:n,dedupeRegistryKey:l,disposition:"pending"};if(r){let u=this.permissionRequestOccurrencesByCompletionKey.get(r)??[];u.push({occurrenceKey:n,hookObserved:!1,jsonlObserved:!1}),this.permissionRequestOccurrencesByCompletionKey.set(r,u)}let d=this.queuedPermissionRequestRegistrations.get(i)??[];return d.push(p),this.queuedPermissionRequestRegistrations.set(i,d),p}async unregisterQueuedPermissionRequest(t){let e=this.queuedPermissionRequestSessionCounts.get(t.sessionId)??0;if(e<=1?this.queuedPermissionRequestSessionCounts.delete(t.sessionId):this.queuedPermissionRequestSessionCounts.set(t.sessionId,e-1),t.dedupeRegistryKey){let l=this.queuedPermissionRequestDedupeKeys.get(t.dedupeRegistryKey)??0;l<=1?this.queuedPermissionRequestDedupeKeys.delete(t.dedupeRegistryKey):this.queuedPermissionRequestDedupeKeys.set(t.dedupeRegistryKey,l-1)}let s=(this.queuedPermissionRequestRegistrations.get(t.sessionId)??[]).filter(l=>l!==t);s.length>0?this.queuedPermissionRequestRegistrations.set(t.sessionId,s):this.queuedPermissionRequestRegistrations.delete(t.sessionId),(t.disposition==="pending"||t.disposition==="dropped"||this.sessionState?.sessionId!==t.sessionId)&&this.removePermissionRequestOccurrence(t.dedupeKey,t.occurrenceKey);let r=this.deferredTmuxPromptCandidates.get(t);if(!r)return;if(this.deferredTmuxPromptCandidates.delete(t),!this.isLifecycleCurrent(t.lifecycleGeneration)){t.disposition="dropped",this.removePermissionRequestOccurrence(t.dedupeKey,t.occurrenceKey),a.debug("Discarding deferred tmux prompt after lifecycle invalidation",{sessionId:t.sessionId,lifecycleGeneration:t.lifecycleGeneration,currentLifecycleGeneration:this.lifecycleGeneration});return}let n=this.hasRecentlyResolvedApprovalDedupeKey(t.sessionId,t.occurrenceKey);if(t.disposition==="covered"||t.disposition==="resolved"||n){a.debug("Discarding deferred tmux prompt covered by its PermissionRequest",{sessionId:t.sessionId,dedupeKey:t.dedupeKey,disposition:t.disposition});return}if(!(t.disposition==="dropped"||this.sessionState?.sessionId!==t.sessionId)){a.debug("Replaying deferred tmux prompt after PermissionRequest produced no durable owner",{sessionId:t.sessionId,dedupeKey:t.dedupeKey});try{await this.handleTmuxPromptCandidate(r.snapshot,t,r.promptHash)}catch(l){a.error("Failed to replay deferred tmux prompt candidate",{sessionId:t.sessionId,error:l instanceof Error?l.message:String(l)})}}}removePermissionRequestOccurrence(t,e){if(!t||!e)return;let i=this.permissionRequestOccurrencesByCompletionKey.get(t);if(!i)return;let s=i.filter(r=>r.occurrenceKey!==e);s.length>0?this.permissionRequestOccurrencesByCompletionKey.set(t,s):this.permissionRequestOccurrencesByCompletionKey.delete(t)}observePermissionRequestCompletion(t,e){if(!t)return{shouldResolve:!0};let i=this.permissionRequestOccurrencesByCompletionKey.get(t);if(!i)return{shouldResolve:!0};let s=e==="hook"?"hookObserved":"jsonlObserved",r=i.find(l=>!l[s]);if(!r)return a.debug("Ignoring duplicate interactive-prompt completion observation",{completionKey:t,producer:e}),{shouldResolve:!1};let n=!r.hookObserved&&!r.jsonlObserved;return r[s]=!0,r.hookObserved&&r.jsonlObserved&&this.removePermissionRequestOccurrence(t,r.occurrenceKey),{shouldResolve:n,occurrenceKey:r.occurrenceKey}}isPermissionRequestOccurrenceKey(t){return t.startsWith("permission:")}consumeRecoveryPermissionReplay(t,e,i){let s=this.recoveryPermissionReplay,r=this.pendingInteractivePrompt;return!s||!e||s.ownerSessionId!==t.sessionId||s.completionKey!==e||r?.ownerSessionId!==t.sessionId||r.source!=="permission_hook"||r.dedupeKey!==s.occurrenceKey||r.completionKey!==s.completionKey?!1:(this.recoveryPermissionReplay=null,i&&(this.removePermissionRequestOccurrence(i.dedupeKey,i.occurrenceKey),i.occurrenceKey=s.occurrenceKey,i.disposition="covered"),a.info("[Hooks] Reused adopted PermissionRequest occurrence for one recovery replay",{sessionId:t.sessionId,completionKey:e,occurrenceKey:s.occurrenceKey}),!0)}async processHookEvent(t,e,i){if(!this.isLifecycleCurrent(e))return;let{session_id:s,hook_event_name:r,type:n,content:l,metadata:p}=t;a.info("[Hooks] Received event",{sessionId:s,hookEvent:r,type:n,contentLength:l?.length});let d=this.sessionWatcher.getAuthoritativeSessionId();if(d&&d!==s){a.warn("[Hooks] Rejecting event for foreign native session",{hookEvent:r,sessionId:s,authoritativeSessionId:d});return}if(p?.transcript_path){let f=await this.sessionWatcher.bindToSessionTranscript(p.transcript_path,s);if(!this.isLifecycleCurrent(e))return;let y=f.status==="pending"?await f.completion:f;if(!this.isLifecycleCurrent(e))return;if(y.status!=="bound"){a.warn("[Hooks] Rejecting event whose transcript ownership was not proven",{hookEvent:r,sessionId:s,reason:y.reason});return}}else if(d!==s){a.warn("[Hooks] Rejecting event without an owned transcript",{hookEvent:r,sessionId:s});return}if(!this.isLifecycleCurrent(e)||this.sessionWatcher.getAuthoritativeSessionId()!==s){a.warn("[Hooks] Rejecting event after ownership changed during admission",{hookEvent:r,sessionId:s,authoritativeSessionId:this.sessionWatcher.getAuthoritativeSessionId()});return}if(this.hooksActive=!0,r==="SessionStart"){if(this.launchSessionInitPromise&&(await this.launchSessionInitPromise,!this.isLifecycleCurrent(e)))return;if(this.sessionState){if(a.info("[Hooks] SessionStart \u2014 launch session already exists, updating codexSessionId",{existingSessionId:this.sessionState.sessionId,codexSessionId:s}),this.sessionState.codexSessionId=s,this.sessionState.metadata={...this.sessionState.metadata,codexSessionId:s,cliVersion:p?.model||"unknown",modelProvider:p?.model||"unknown",launchSession:void 0},this.appSyncClient.updateSession({sessionId:this.sessionState.sessionId,metadata:this.sessionState.metadata}).catch(f=>a.warn("Failed to update session metadata",{error:f})),await this.startTmuxObserverWithBeacon("session_start_existing"),!this.isLifecycleCurrent(e))return;await this.ensureToolActivityStarted(s)}else{let f={id:s,timestamp:new Date().toISOString(),cwd:p?.cwd||process.cwd(),originator:"hook",cli_version:p?.model||"unknown",instructions:null,source:p?.source||"startup",model_provider:p?.model||"unknown"};await this.ensureSessionStarted(f)}return}if(!this.sessionState){a.warn("[Hooks] Hook event for un-bootstrapped session \u2014 self-healing via session bootstrap (#638)",{hookEvent:r,sessionId:s});let f={id:s,timestamp:new Date().toISOString(),cwd:p?.cwd||process.cwd(),originator:"hook",cli_version:p?.model||"unknown",instructions:null,source:p?.source||"startup",model_provider:p?.model||"unknown"};if(await this.ensureSessionStarted(f),!this.isLifecycleCurrent(e))return;if(!this.sessionState){a.warn("[Hooks] Session still not initialized after self-heal, dropping event",{hook_event_name:r});return}}let u=this.sessionState,c=u.sessionId;if(n==="USER_PROMPT"&&(this.approvalDetector.clear(),this.clearInteractivePromptsForAcceptedInput(u)),n==="USER_PROMPT"&&l){let f=this.consumeRecentMobilePrompt(c,l);if(f){a.info("[Hooks] Skipping duplicate USER_PROMPT from mobile",{sessionId:c,matchType:f.matchType,originalLength:f.originalLength,echoLength:f.echoLength});return}}if(r==="PreToolUse"){a.debug("[Hooks] PreToolUse observed; AppSync emission suppressed",{toolName:p?.tool_name||"unknown",sessionId:c});return}if(r==="PermissionRequest"){let f=i??this.registerQueuedPermissionRequest(t,e);if(!f){a.error("[Hooks] Dropping admitted PermissionRequest without occurrence registration",{sessionId:c,nativeSessionId:s});return}try{await this.handlePermissionRequestHook(t,u,f)}finally{i||await this.unregisterQueuedPermissionRequest(f)}return}if(r==="PostToolUse"){let f=this.buildApprovalPromptContextFromHookPayload(t),y=this.buildApprovalDedupeKey(f),h=this.firstString(p?.tool_use_id,p?.call_id,p?.callId)??"",v=this.observePermissionRequestCompletion(y,"hook");if(v.shouldResolve&&await this.clearResolvedInteractivePrompt(h,v.occurrenceKey??y),!this.isExpectedSessionStateCurrent(u)||this.toolActivity?.isActive()&&await this.toolActivity.observeCall({callId:p?.tool_use_id??p?.call_id??p?.callId,toolName:p?.tool_name,toolInput:p?.tool_input})!=="closed")return;let P=this.encryptForEmit(l,p,m.EventType.TOOL_USE,c);if(!P)return;let E=P.content,S=P.metadata,b=P.isEncrypted,O=p?.tool_use_id??p?.call_id??p?.callId,L=typeof O=="string"&&O.length>0&&!!this.sessionKey,F=L?this.getToolActivityLegacyRecorder(c):void 0;F&&L&&F.markLegacyInFlight(O);try{let C=await this.appSyncClient.createEvent({sessionId:c,type:m.EventType.TOOL_USE,source:m.EventSource.DESKTOP,content:E,metadata:S,isEncrypted:b,timestamp:(0,m.prepareEventTimestamp)({orderingKey:c})});F&&L&&((0,m.isPersistedEventResult)(C)?await F.finalizeLegacyOwned([O]):F.clearLegacyInFlight(O))}catch(C){throw F&&L&&F.clearLegacyInFlight(O),C}return}if(n==="ASSISTANT_RESPONSE"||n==="USER_PROMPT"){if(n==="ASSISTANT_RESPONSE"){this.sessionWatcher.getBindSource()==="authoritative"&&this.sessionWatcher.getAuthoritativeSessionId()===s?a.debug("[Hooks] Suppressing Stop final \u2014 JSONL watcher authoritatively bound to this session (Bug #2)"):a.warn("[Hooks] Dropping Stop final after authoritative ownership changed",{authoritativeSessionId:this.sessionWatcher.getAuthoritativeSessionId()});return}let f=this.encryptForEmit(l,void 0,m.EventType.USER_PROMPT,c);if(!f)return;await this.appSyncClient.createEvent({sessionId:c,type:m.EventType.USER_PROMPT,source:m.EventSource.DESKTOP,content:f.content,isEncrypted:f.isEncrypted,timestamp:(0,m.prepareEventTimestamp)({orderingKey:c})});return}}mapToolName(t){return{shell_command:"Bash",shell:"Bash",apply_patch:"Edit",create_file:"Write",read_file:"Read"}[t]||t}trackMobilePrompt(t,e){this.mobilePromptDeduper.track(t,e),a.debug("Tracking mobile prompt for USER_PROMPT echo deduplication",{sessionId:t,promptLength:e.trim().length})}forgetMobilePrompt(t,e){this.mobilePromptDeduper.forget(t,e)}consumeRecentMobilePrompt(t,e){return this.mobilePromptDeduper.consumeIfDuplicate(t,e)}setupEventHandlers(){this.sessionWatcher.on("session-started",async t=>{try{if(this.launchSessionInitPromise&&await this.launchSessionInitPromise,this.sessionState){a.info("[JSONL] Session already active, skipping",{currentSessionId:this.sessionState.sessionId,codexSessionId:t.id}),await this.ensureToolActivityStarted(t.id);return}await this.ensureSessionStarted(t)}catch(e){a.error("[JSONL] session-started handler failed (non-fatal) \u2014 next event retries",{codexSessionId:t?.id,error:String(e)})}}),this.sessionWatcher.on("log-entry",t=>{this.enqueueLogEntry(t)}),this.approvalDetector.on("approval-pending",async t=>{try{await this.handleApprovalPending(t)}catch(e){a.error("approval-pending handler failed (non-fatal)",{error:String(e)})}}),this.tmuxPaneObserver.on("prompt-candidate",async t=>{try{await this.handleTmuxPromptCandidate(t.snapshot,void 0,t.promptHash)}catch(e){a.error("prompt-candidate handler failed (non-fatal)",{error:String(e)})}}),this.tmuxPaneObserver.on("prompt-cleared",t=>{let e=this.sessionState;e&&this.clearObservedInteractivePrompt(e,t.promptHash).catch(i=>{a.error("prompt-cleared handler failed (non-fatal)",{error:String(i)})})}),this.tmuxPaneObserver.on("observer-error",t=>{a.debug("Tmux pane observer error",{error:t})}),this.sessionWatcher.on("error",t=>{a.error("Session watcher error:",t)})}async ensureSessionStarted(t,e){if(this.isStopping||(this.launchSessionInitPromise&&await this.launchSessionInitPromise,this.isStopping)||this.sessionState)return;process.env[Se]==="1"&&await this.bindRecoveryBootstrapIdentity(t.id);let i=this.sessionBootstrapRetryAt-Date.now();if(i>0){a.warn("Session bootstrap is in retry backoff; hook will be retried later",{codexSessionId:t.id,retryDelayMs:i,failureCount:this.sessionBootstrapFailureCount});return}if(this.sessionStartedInitPromise){try{await this.sessionStartedInitPromise}catch{}return}let s=this.handleSessionStarted(t,e);this.sessionStartedInitPromise=s.catch(()=>{});try{await s}finally{this.sessionStartedInitPromise=null}}async handleSessionStarted(t,e){if(this.isStopping)return;let i=this.lifecycleGeneration;a.info("Handling new Codex session",{codexSessionId:t.id}),this.isInitializingSession=!0,this.bufferedLogEntries=[],this.sessionState&&await this.endActiveSession("new-codex-session-started");let s=process.env.CODEX_WORKING_DIRECTORY||t.cwd||process.cwd(),r=this.getOrCreateBootstrapSessionId(),n=this.appSyncClient.getCurrentUserId(),l={codexSessionId:t.id,cliVersion:t.cli_version,modelProvider:t.model_provider},p={sessionKey:null,sessionIsEncrypted:!0};try{let d={sessionId:r,userId:n,agentType:m.AgentType.CODEX,projectPath:s,metadata:l},u=await this.resumeOrCreateBootstrapSession(d);if(r=u.sessionId,!this.isLifecycleCurrent(i)){this.isInitializingSession=!1,await this.retireCancelledBootstrap(r,"session_started");return}this.sessionKey=u.sessionKey,this.sessionKeyGen=u.sessionKeyGen,this.sessionIsEncrypted=!!u.sessionKey,p={sessionKey:u.sessionKey,sessionIsEncrypted:!!u.sessionKey},await _("daemon_init_step_completed",{step:"session_resume_or_create",path:"session_started"})}catch(d){if(this.isInitializingSession=!1,!this.isLifecycleCurrent(i)){let u=this.authoritativeSessionIdFromError(d)??r;await this.retireCancelledBootstrap(u,"session_started_error");return}throw await _("daemon_init_step_failed",{step:"session_resume_or_create",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),d?.code==="ENCRYPTED_SESSION_NO_KEY"&&(this.sessionIsEncrypted=!0,this.sessionKey=null),this.bindBootstrapIdentityFromError(d),this.recordSessionBootstrapFailure(d,"session_started"),a.error("Failed to create/resume session:",d),d}try{this.sessionState={sessionId:r,userId:n,projectPath:s,cwd:t.cwd,createdAt:new Date,subscriptionActive:!1,metadata:l,encryptionSnapshot:p,codexSessionId:t.id,codexLogFile:this.sessionWatcher.getActiveLogFile()||void 0},this.clearSessionBootstrapFailure(),this.bootstrapSessionId=null,this.recoveryBootstrapOwnerBound=!1,await _("daemon_init_step_completed",{step:"session_state_set",path:"session_started"})}catch(d){await _("daemon_init_step_failed",{step:"session_state_set",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to set session state:",d)}await this.adoptDaemonHandoffState(r),this.sessionState&&this.rebindWaitingPermissionRequests(this.sessionState),await this.ensureToolActivityStarted(t.id);try{this.subscribeToMobileEvents(r)?await _("daemon_init_step_completed",{step:"subscribe_mobile_events",path:"session_started"}):await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"session_started",error_class:"SubscriptionSetupFailed",error_message:"subscribeToMobileEvents returned false"})}catch(d){await _("daemon_init_step_failed",{step:"subscribe_mobile_events",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to subscribe to mobile events:",d)}if(e)try{await e()}catch(d){a.error("E1: pre-heartbeat re-raise hook failed (non-fatal)",{sessionId:r,error:d instanceof Error?d.message:String(d)})}try{await this.drainRetirementOrphans(r)}catch(d){a.error("E1: retirement-orphan drain failed (non-fatal)",{sessionId:r,error:d instanceof Error?d.message:String(d)})}try{await this.appSyncClient.startHeartbeat(r)?await _("daemon_init_step_completed",{step:"heartbeat_start",path:"session_started"}):(await _("daemon_init_step_failed",{step:"heartbeat_start",path:"session_started",error_class:"InitialHeartbeatNotPersisted",error_message:"Backend did not confirm the initial heartbeat mutation"}),a.error("Initial session heartbeat was not persisted",{sessionId:r}))}catch(d){await _("daemon_init_step_failed",{step:"heartbeat_start",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to start heartbeat:",d)}try{await this.subscribeToOnApplyUserDecision(r)}catch(d){a.error("Failed to subscribe to onApplyUserDecision (non-fatal)",{error:d})}this.startMobileEndWatcher(r);try{await this.flushBufferedLogEntries(),await _("daemon_init_step_completed",{step:"flush_buffered_entries",path:"session_started"})}catch(d){await _("daemon_init_step_failed",{step:"flush_buffered_entries",path:"session_started",error_class:d?.name||"Error",error_message:d?.message||String(d)}),a.error("Failed to flush buffered log entries:",d),this.bufferedLogEntries=[]}await this.startTmuxObserverWithBeacon("session_started"),this.isInitializingSession=!1}getOrCreateBootstrapSessionId(){return this.bootstrapSessionId||(this.bootstrapSessionId=X.mintBackendSessionId()),this.bootstrapSessionId}async bindRecoveryBootstrapIdentity(t){if(!(process.env[Se]!=="1"||this.bootstrapSessionId||this.sessionState||!t))try{let e=await this.buildToolActivityIntegration().recordedBackendSessionId(t);if(!e){a.warn("Recovery daemon found no durable backend owner; a new session will be created",{rolloutId:t});return}if(!/^codex-[A-Za-z0-9_-]{1,180}$/.test(e)){a.warn("Recovery daemon ignored invalid durable backend owner",{rolloutId:t});return}this.bootstrapSessionId=e,this.recoveryBootstrapOwnerBound=!0,a.info("Recovery daemon reclaiming existing backend session",{rolloutId:t,sessionId:e})}catch(e){a.warn("Recovery daemon could not read the durable rollout owner; a new session will be created",{rolloutId:t,error:e instanceof Error?e.message:String(e)})}}isSessionIdReservedRejection(t){return(t instanceof Error?t.message:String(t)).includes("SESSION_ID_RESERVED")}async resumeOrCreateBootstrapSession(t){try{return await this.resumeBackendSession(t,this.appSyncClient,a)}catch(e){if(!this.recoveryBootstrapOwnerBound||!this.isSessionIdReservedRejection(e))throw e;return a.warn("Recovery discarded a permanently reserved pending create; retrying the durable rollout owner",{sessionId:t.sessionId}),this.resumeBackendSession(t,this.appSyncClient,a)}}startTmuxLifecycleMonitor(){if(this.tmuxLifecycleTimer)return;let t=process.env[$];t&&(this.tmuxLifecycleInitDeadlineMs=Date.now()+Ai,this.tmuxLifecycleTimer=setInterval(()=>{this.checkTmuxLifecycle(t)},Oi),this.tmuxLifecycleTimer.unref?.(),this.checkTmuxLifecycle(t))}async tmuxSessionState(t){try{return await xi("tmux",["has-session","-t",t]),"alive"}catch(e){let i=xt(e);return i==="absent"?i:(a.warn("Could not inspect native Codex tmux session; preserving daemon",{tmuxSession:t,error:e instanceof Error?e.message:String(e)}),"unknown")}}async checkTmuxLifecycle(t){if(!(this.isStopping||this.tmuxLifecycleCheckInFlight)){this.tmuxLifecycleCheckInFlight=!0;try{let e=await this.tmuxSessionState(t);if(e==="alive"){this.tmuxLifecycleObservedAlive=!0;return}let i=this.tmuxLifecycleObservedAlive||Date.now()>=this.tmuxLifecycleInitDeadlineMs;if(e==="unknown"||!i||this.isStopping)return;this.stopTmuxLifecycleMonitor(),a.info("Native Codex tmux session ended; stopping companion daemon",{tmuxSession:t}),this.stop().then(()=>process.exit(0),s=>{a.error("Failed to stop companion daemon after native session end",{error:s instanceof Error?s.message:String(s)}),process.exit(1)})}finally{this.tmuxLifecycleCheckInFlight=!1}}}stopTmuxLifecycleMonitor(){this.tmuxLifecycleTimer&&(clearInterval(this.tmuxLifecycleTimer),this.tmuxLifecycleTimer=null)}async stopForTerminalSignal(t){if(t==="SIGHUP"){let e=process.env[$];if(e){let i=await this.tmuxSessionState(e);if(i!=="absent")return a.info("Ignoring SIGHUP while native Codex tmux session remains available",{tmuxSession:e,state:i}),!1}}return await this.stop(),!0}isLifecycleCurrent(t){return!this.isStopping&&this.lifecycleGeneration===t}authoritativeSessionIdFromError(t){let e=t?.authoritativeSessionId;return typeof e=="string"&&e.length>0?e:null}async retireCancelledBootstrap(t,e){this.appSyncClient.stopHeartbeat(t),this.appSyncClient.cleanupSubscription(t);try{await this.appSyncClient.updateSession({sessionId:t,status:m.SessionStatus.INACTIVE}),a.info("Cancelled bootstrap row marked INACTIVE",{sessionId:t,path:e})}catch(i){a.warn("Cancelled bootstrap row could not be marked INACTIVE",{sessionId:t,path:e,error:i instanceof Error?i.message:String(i)})}}bindBootstrapIdentityFromError(t){let e=t?.authoritativeSessionId;typeof e!="string"||e.length===0||(this.bootstrapSessionId=e,a.info("Retained authoritative backend identity from failed bootstrap",{sessionId:e}))}recoverRetiredBackendSession(t){if(this.retiredSessionRecoveryPromise)return this.retiredSessionRecoveryPromise;if(this.isStopping)return Promise.resolve();let e=(async()=>{if(this.launchSessionInitPromise&&await this.launchSessionInitPromise,this.sessionStartedInitPromise&&await this.sessionStartedInitPromise,this.isStopping)return;let i=this.sessionState;if(!i||i.sessionId!==t)return;let s={id:i.codexSessionId||t,timestamp:new Date().toISOString(),cwd:i.cwd||i.projectPath,originator:"codevibe-retired-session-recovery",cli_version:String(i.metadata?.cliVersion??"unknown"),instructions:null,source:"codevibe",model_provider:String(i.metadata?.modelProvider??"unknown")};a.warn("Backend retired live Codex session; creating replacement row",{sessionId:t,codexSessionId:s.id}),this.parkRetirementOrphans(t),await this.endActiveSession("backend-generation-retired"),this.bootstrapSessionId=X.mintBackendSessionId(),this.recoveryBootstrapOwnerBound=!1,this.clearSessionBootstrapFailure(),await this.ensureSessionStarted(s)})();return this.retiredSessionRecoveryPromise=e.finally(()=>{this.retiredSessionRecoveryPromise=null}),this.retiredSessionRecoveryPromise}recordSessionBootstrapFailure(t,e){this.sessionBootstrapFailureCount+=1;let i=t instanceof Error?t.message:String(t),r=i.includes("SESSION_LIMIT_EXCEEDED")?6e4:Math.min(5e3*2**(this.sessionBootstrapFailureCount-1),6e4);this.sessionBootstrapRetryAt=Date.now()+r,a.warn("Session bootstrap retry scheduled",{path:e,requestedSessionId:this.bootstrapSessionId,failureCount:this.sessionBootstrapFailureCount,delayMs:r,error:i})}clearSessionBootstrapFailure(){this.sessionBootstrapFailureCount=0,this.sessionBootstrapRetryAt=0}async flushBufferedLogEntries(){if(this.bufferedLogEntries.length===0)return;let t=this.bufferedLogEntries;this.bufferedLogEntries=[],a.info("Flushing buffered log entries after session initialization",{count:t.length,sessionId:this.sessionState?.sessionId});let e=Promise.resolve();for(let i of t)e=this.enqueueLogEntry(i);await e.catch(()=>{})}enqueueLogEntry(t){let e=this.logEntryChain.then(()=>this.handleLogEntry(t));return this.logEntryChain=e.catch(i=>{a.error("[JSONL] log entry handler failed",{type:t.type,err:String(i)})}),e}async handleLogEntry(t){if(!this.sessionState){if(this.isInitializingSession){this.bufferedLogEntries.push(t),a.debug("Buffering log entry until session initialization completes",{type:t.type,bufferedCount:this.bufferedLogEntries.length});return}a.warn("Received log entry but no active session");return}let e=this.sessionState,i=e.sessionId,{sessionKey:s,sessionIsEncrypted:r}=e.encryptionSnapshot;if(t.type==="event_msg"&&t.payload?.type==="turn_aborted"&&(this.approvalDetector.clear(),this.clearInteractivePromptsForAcceptedInput(e)),t.type==="response_item"&&t.payload){let h=t.payload.type;if(h==="function_call"||h==="custom_tool_call")this.approvalDetector.onToolCallStart(t.payload.call_id,t.payload.name,t.payload.arguments||t.payload.input||"");else if(h==="function_call_output"||h==="custom_tool_call_output"){let v=this.approvalDetector.getPendingCalls().find(S=>S.callId===t.payload.call_id),P=v?this.buildApprovalDedupeKey(this.buildApprovalPromptContextFromPendingCall(v)):void 0;this.approvalDetector.onToolCallComplete(t.payload.call_id);let E=this.observePermissionRequestCompletion(P,"jsonl");if(E.shouldResolve&&await this.clearResolvedInteractivePrompt(t.payload.call_id,E.occurrenceKey??P),!this.isExpectedSessionStateCurrent(e))return}}let n=Je(t,i);if(!n)return;n.timestamp=(0,m.prepareEventTimestamp)({orderingKey:i,agentClock:t.timestamp});let l=t.payload?.type,p=!1;if(this.toolActivity?.isActive()&&n.type===m.EventType.TOOL_USE){let h=l==="function_call"||l==="custom_tool_call",v=l==="function_call_output"||l==="custom_tool_call_output";if(h&&typeof t.payload?.call_id=="string"){let P=this.sessionWatcher.getActiveLogFile();P&&this.toolActivity.bindTranscript(P);let E=await this.toolActivity.observeCall({callId:t.payload.call_id,toolName:n.metadata?.toolName??n.metadata?.tool_name,toolInput:n.metadata?.toolInput??n.metadata?.tool_input,ts:t.timestamp});if(!this.isExpectedSessionStateCurrent(e)||E!=="closed")return;p=!0}if(v)return}if(this.toolActivity?.isActive()&&(l==="user_message"||l==="agent_message")&&(await this.toolActivity.flush().catch(h=>a.warn("[tool-activity] codex boundary flush failed",{sessionId:i,err:String(h)})),!this.isExpectedSessionStateCurrent(e)))return;let d=l==="function_call"||l==="function_call_output",u=n.type===m.EventType.USER_PROMPT||n.type===m.EventType.ASSISTANT_RESPONSE||d&&(n.type===m.EventType.TOOL_USE||n.type===m.EventType.INTERACTIVE_PROMPT);if(!this.hooksActive&&u&&(await this.emitHooksCompatibilityModeNotice(e),!this.isExpectedSessionStateCurrent(e)))return;if(this.hooksActive){if(n.type===m.EventType.USER_PROMPT){a.debug("[JSONL] Skipping USER_PROMPT \u2014 hooks deliver it",{type:n.type});return}if(d&&(n.type===m.EventType.TOOL_USE||n.type===m.EventType.INTERACTIVE_PROMPT)&&!p){a.debug("[JSONL] Skipping function_call \u2014 hooks deliver this",{type:n.type,tool:t.payload?.name});return}}if(n.type===m.EventType.USER_PROMPT&&n.source===m.EventSource.DESKTOP){let h=this.consumeRecentMobilePrompt(i,n.content);if(h){a.info("[JSONL] Skipping duplicate USER_PROMPT from mobile",{sessionId:i,matchType:h.matchType,originalLength:h.originalLength,echoLength:h.echoLength});return}}if(this.sessionState!==e){a.warn("[JSONL] Dropping event from stale session generation (#638)",{sessionId:i,currentSessionId:this.sessionState?.sessionId});return}let c=t.payload?.call_id,f=n.type===m.EventType.TOOL_USE&&typeof c=="string"&&c.length>0&&!!s,y=f?this.getToolActivityLegacyRecorder(i):void 0;y&&f&&y.markLegacyInFlight(c);try{let h=(0,m.encryptForEmit)(s,r,n.content,n.metadata);if(!h){a.error("No session key for ENCRYPTED session \u2014 dropping JSONL event (fail-closed, #638)",{type:n.type,sessionId:i});return}n.content=h.content,n.metadata=h.metadata,h.isEncrypted&&(n.isEncrypted=!0,a.debug("Event encrypted",{type:n.type}));let v=await this.appSyncClient.createEvent(n);a.debug("Event synced to backend",{type:n.type,encrypted:h.isEncrypted}),y&&f&&((0,m.isPersistedEventResult)(v)?await y.finalizeLegacyOwned([c]):y.clearLegacyInFlight(c))}catch(h){y&&f&&y.clearLegacyInFlight(c),a.error("Failed to sync event:",h)}}async handlePermissionRequestHook(t,e,i){if(!this.isExpectedSessionStateCurrent(e)){i&&(i.disposition="dropped");return}let s=i?.context??this.buildApprovalPromptContextFromHookPayload(t),r=i?.dedupeKey??this.buildApprovalDedupeKey(s);if(this.consumeRecoveryPermissionReplay(e,r,i))return;let n=i?.occurrenceKey??`permission:${(0,J.v4)()}`,l={ownerState:e,context:s,dedupeKey:r,occurrenceKey:n,registration:i};this.permissionRequestHookInFlight=l;try{let p=await this.handlePermissionRequestHookWhileTracked(t,e,s,n,r);i&&(i.disposition=p)}finally{this.permissionRequestHookInFlight===l&&(this.permissionRequestHookInFlight=null)}}buildApprovalPromptContextFromHookPayload(t){let e=t.metadata||{},i=typeof e.tool_name=="string"?e.tool_name:"Tool",s=e.tool_input,r=this.firstString(s?.command,s?.cmd),n=V(r)||ie(r),l=i==="apply_patch"?this.firstString(s?.patch,r,typeof s=="string"?s:void 0):void 0,d=V(l)||n,u=!!d,c=d?"apply_patch":i,f=d||this.stringifyToolInput(s),y=d?this.extractFilePathFromToolInput("apply_patch",void 0,d):this.extractFilePathFromToolInput(c,s,f),h=d?this.resolveHookPatchPath(y,e.cwd):y;return{toolName:c,framedPatch:u,toolInput:s,rawInput:f,filePath:h,diff:u?f:void 0,hint:h&&this.mapToolNameForApproval(c)==="Edit"?`File: ${h}`:this.buildPermissionRequestHint(c,s,f)}}resolveHookPatchPath(t,e){if(!t||k.isAbsolute(t))return t;if(!(typeof e!="string"||!k.isAbsolute(e)))return k.resolve(e,t)}async handlePermissionRequestHookWhileTracked(t,e,i=this.buildApprovalPromptContextFromHookPayload(t),s=`permission:${(0,J.v4)()}`,r,n){let l=t.metadata||{},{toolName:p,toolInput:d,rawInput:u}=i,c=this.buildToolDetailsForInteractivePrompt(i),f=c.tool_name||this.mapToolNameForApproval(p),y=c.tool_input||this.buildFallbackToolInput(i),h=!!(f&&y);if(r??=this.buildApprovalDedupeKey({toolName:p,toolInput:d,filePath:i.filePath,rawInput:u,hint:i.hint}),this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s))return"resolved";let v=n??await this.tryParsePermissionRequestPromptFromTmux((C,Z)=>this.parsedPromptMatchesApprovalContext(C,i,Z),()=>this.isExpectedSessionStateCurrent(e));if(!this.isExpectedSessionStateCurrent(e))return a.warn("[Hooks] Dropping stale PermissionRequest after session generation changed",{sessionId:e.sessionId,currentSessionId:this.sessionState?.sessionId}),"dropped";if(this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s))return a.info("[Hooks] Dropping PermissionRequest completed while terminal options were being parsed",{sessionId:e.sessionId,toolName:p,occurrenceKey:s}),"resolved";let P=v?.parsedPrompt??null;if(!P)return v?.differentPrompt?(this.waitingPermissionRequests.set(s,{ownerState:e,context:i,occurrenceKey:s,dedupeKey:r,payload:t}),a.info("[Hooks] Queued PermissionRequest until its desktop dialog is visible",{sessionId:e.sessionId,occurrenceKey:s,toolName:p}),"waiting"):(a.warn("[Hooks] Suppressing PermissionRequest mobile prompt because exact Codex options are unavailable",{sessionId:e.sessionId,toolName:p,hint:i.hint}),this.raiseSuppressedBadge(e.sessionId,s,{suppressTmuxObserverUntilResolved:!0,observerSnapshot:v?.snapshot,completionKey:r}),"covered");let E=this.mapToolNameForApproval(p)==="Bash"?this.firstString(d?.command,d?.cmd):void 0,S=this.buildCodexPromptPresentation(P,E,v?.snapshot);if(!S)return a.warn("[Hooks] Suppressing PermissionRequest mobile prompt because Codex option hotkeys are unavailable",{sessionId:e.sessionId,toolName:p,hint:i.hint}),this.raiseSuppressedBadge(e.sessionId,s,{suppressTmuxObserverUntilResolved:!0,observerSnapshot:v?.snapshot,completionKey:r}),"covered";let b=s,O=this.buildApprovalPromptContent(S.content,{toolName:f,toolInput:y,hint:i.hint,filePath:i.filePath}),L={promptId:b,kind:S.kind,options:S.options,submitMap:S.submitMap,promptText:O,createdAt:Date.now(),source:"permission_hook",dedupeKey:s,completionKey:r,ownerSessionId:e.sessionId,observerMatchKey:this.buildObserverPromptMatchKey(P),observerPromptHash:v?.snapshot?this.tmuxPaneObserver.hashPromptSnapshot(v.snapshot):void 0,requiresFollowUpText:S.requiresFollowUpText},F={isApprovalHint:!0,toolName:p,toolInput:d,hint:i.hint,filePath:i.filePath,diff:i.diff,rawInput:u,tool_name:f,tool_input:y,has_details:h,options:S.options,instructions:S.instructions,prompt_source:P?"permission_hook_tmux":"permission_hook",permission_mode:l.permission_mode,turn_id:l.turn_id,dedupe_key:s};return a.info("[Hooks] Sending PermissionRequest interactive prompt",{sessionId:e.sessionId,toolName:p,promptId:b,promptSource:F.prompt_source,occurrenceKey:s}),await this.enqueueOrEmitInteractivePrompt({prompt:L,content:O,metadata:F,ownerState:e}),this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s)?"resolved":"covered"}async emitHooksCompatibilityModeNotice(t){if(this.hooksCompatibilityNoticeSent||!this.isExpectedSessionStateCurrent(t))return;this.hooksCompatibilityNoticeSent=!0;let e="Codex hooks are not active. CodeVibe is using compatibility mode: mobile approvals still mirror the desktop prompt, but timeline events may be delayed or incomplete. Open Codex /hooks and trust/enable CodeVibe hooks for full fidelity.",i={compatibility_mode:!0,reason:"codex_hooks_inactive",action:"trust_enable_codevibe_hooks"};a.warn("Codex hooks inactive; running in compatibility mode",{sessionId:t.sessionId});let s=this.encryptForEmit(e,i,m.EventType.NOTIFICATION,t.sessionId);if(s)try{await this.appSyncClient.createEvent({sessionId:t.sessionId,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,content:s.content,metadata:s.metadata,timestamp:(0,m.prepareEventTimestamp)({orderingKey:t.sessionId}),...s.isEncrypted?{isEncrypted:!0}:{}})}catch(r){a.warn("Failed to emit hooks compatibility mode notification",{error:r})}}async handleApprovalPending(t){let e=this.sessionState;if(!e)return;if((this.queuedPermissionRequestSessionCounts.get(e.sessionId)??0)>0){a.debug("Skipping heuristic approval prompt while PermissionRequest owns the session prompt",{sessionId:e.sessionId,callId:t.callId});return}let i=this.buildApprovalDedupeKey(t);if(i&&this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,i)){a.info("Skipping heuristic approval prompt; same approval was already answered recently",{callId:t.callId,toolName:t.toolName,dedupeKey:i});return}if(i&&this.hasDurablePermissionHookFallbackByDedupeKey(e.sessionId,i)){a.debug("Skipping heuristic approval prompt already owned by a hook fallback",{sessionId:e.sessionId,callId:t.callId,dedupeKey:i});return}if(i&&this.hasActiveOrQueuedPermissionHookPrompt(e.sessionId,i)){this.mergeCallIdIntoPromptByDedupeKey(e.sessionId,i,t.callId),a.info("Skipping heuristic approval prompt; PermissionRequest hook already emitted it",{callId:t.callId,toolName:t.toolName,dedupeKey:i});return}a.info("Sending approval pending interactive prompt",t);try{let s=await this.tryParseInteractivePromptFromTmux(),r=s?.parsedPrompt??null;if((this.queuedPermissionRequestSessionCounts.get(e.sessionId)??0)>0||r&&this.hasMatchingDurablePermissionHookFallback(r,e.sessionId,s?.snapshot)||r&&this.hasMatchingPermissionHookPrompt(r,e.sessionId)){a.debug("Skipping heuristic approval prompt after PermissionRequest claimed the terminal dialog",{sessionId:e.sessionId,callId:t.callId});return}let n=this.buildToolDetailsForInteractivePrompt(t,s?.snapshot),l=n.tool_name||this.mapToolNameForApproval(t.toolName),p=n.tool_input||this.buildFallbackToolInput(t),d=!!(l&&p);if(!r){a.warn("Suppressing heuristic approval prompt because exact Codex options are unavailable",{callId:t.callId,toolName:t.toolName,hint:t.hint}),this.raiseSuppressedBadge(e.sessionId,i);return}if(!this.parsedPromptMatchesApprovalContext(r,t,s?.snapshot)){a.warn("Suppressing heuristic approval prompt because parsed tmux prompt does not match the active tool",{callId:t.callId,toolName:t.toolName,hint:t.hint,parsedPromptText:r.promptText}),this.raiseSuppressedBadge(e.sessionId,i);return}let u=this.mapToolNameForApproval(t.toolName)==="Bash"?this.firstString(t.toolInput?.command,t.toolInput?.cmd):void 0,c=this.buildCodexPromptPresentation(r,u,s?.snapshot);if(!c){a.warn("Suppressing heuristic approval prompt because Codex option hotkeys are unavailable",{callId:t.callId,toolName:t.toolName,hint:t.hint}),this.raiseSuppressedBadge(e.sessionId,i);return}let f=c.options,y=this.buildApprovalPromptContent(c.content,{toolName:l,toolInput:p,hint:t.hint,filePath:t.filePath}),h={promptId:t.callId,callId:t.callId,kind:c.kind,options:f,submitMap:c.submitMap,promptText:c.promptText,createdAt:Date.now(),source:r?"tmux":"heuristic",dedupeKey:i,ownerSessionId:e.sessionId,observerMatchKey:this.buildObserverPromptMatchKey(r),requiresFollowUpText:c.requiresFollowUpText},v={isApprovalHint:!0,toolName:t.toolName,toolInput:t.toolInput,hint:t.hint,callId:t.callId,filePath:t.filePath,diff:t.diff,rawInput:t.rawInput,tool_name:l,tool_input:p,has_details:d,options:f,instructions:c.instructions,prompt_source:r?"tmux":"heuristic",dedupe_key:i};a.debug("Interactive prompt (pre-encryption)",{sessionId:e.sessionId,callId:t.callId,contentPreview:y.substring(0,200),toolDetails:n,metadata:v}),await this.enqueueOrEmitInteractivePrompt({prompt:h,content:y,metadata:v,ownerState:e})}catch(s){a.error("Failed to send approval interactive prompt:",s)}}async handleTerminalMenu(t,e,i){if(!this.isExpectedSessionStateCurrent(e)||this.pendingInteractivePrompt?.terminalMenuIdentity===t.identity&&this.pendingInteractivePrompt.ownerSessionId===e.sessionId)return;let s=(0,J.v4)(),r={promptId:s,kind:"numbered",options:t.prompt.options,submitMap:t.prompt.submitMap,promptText:t.prompt.promptText,createdAt:Date.now(),source:"tmux",dedupeKey:`menu:${s}`,ownerSessionId:e.sessionId,observerMatchKey:this.buildObserverPromptMatchKey(t.prompt),observerPromptHash:i??this.tmuxPaneObserver.hashPromptSnapshot(t.snapshot),terminalMenuIdentity:t.identity};await this.enqueueOrEmitInteractivePrompt({prompt:r,ownerState:e,content:t.prompt.promptText,metadata:{options:t.prompt.options,instructions:"Reply with the number of the option you want",prompt_source:"tmux_live",dialog_kind:"terminal_menu",has_details:!1}}),a.info("Published live terminal menu",{sessionId:e.sessionId,promptId:r.promptId,optionsCount:r.options.length})}async handleTmuxPromptCandidate(t,e,i){let s=this.sessionState;if(!s){this.tmuxPaneObserver.resetLastPromptHash();return}let r=this.tmuxPaneObserver.extractActiveApprovalBlock(t)?null:(0,ne.parseActiveTerminalMenu)(t);if(r){await this.handleTerminalMenu(r,s,i);return}if(await this.promoteWaitingPermissionRequest(t,s)||!e&&this.deferTmuxPromptCandidateForPermissionHook(s.sessionId,t,i))return;let n=e?.occurrenceKey;if(n&&this.hasRecentlyResolvedApprovalDedupeKey(s.sessionId,n))return;let l=(0,B.parseInteractivePrompt)(t);if(!l){this.raiseSuppressedBadge(s.sessionId,n??null);return}if(this.hasMatchingPermissionHookPrompt(l,s.sessionId)){a.debug("Skipping tmux prompt candidate already owned by PermissionRequest",{sessionId:s.sessionId,promptText:l.promptText});return}let p=this.getMostRecentPendingToolCall();if(!p){if(await new Promise(C=>setTimeout(C,500)),!this.isExpectedSessionStateCurrent(s)){a.warn("Dropping tmux prompt candidate after session generation changed",{sessionId:s.sessionId,currentSessionId:this.sessionState?.sessionId});return}if(!e&&this.deferTmuxPromptCandidateForPermissionHook(s.sessionId,t,i))return;p=this.getMostRecentPendingToolCall()}let d=e?.context??(p?this.buildApprovalPromptContextFromPendingCall(p):null);if(d&&!this.parsedPromptMatchesApprovalContext(l,d,t)){a.warn("Skipping tmux-detected prompt because parsed prompt does not match pending tool call",{callId:p?.callId,toolName:p?.name,parsedPromptText:l.promptText}),this.raiseSuppressedBadge(s.sessionId,n??null);return}let u=d?null:this.buildApprovalPromptContextFromParsedPrompt(l),c=d||u;if(!c){a.warn("Skipping tmux-detected prompt because no tool context could be derived from the parsed prompt",{parsedPromptText:l.promptText}),this.raiseSuppressedBadge(s.sessionId,n??null);return}let f=this.mapToolNameForApproval(c.toolName)==="Bash"?this.firstString(c.toolInput?.command,c.toolInput?.cmd):void 0,y=this.buildCodexPromptPresentation(l,f,t);if(!y){a.warn("Skipping tmux-detected prompt because Codex option hotkeys are unavailable",{parsedPromptText:l.promptText}),this.raiseSuppressedBadge(s.sessionId,n??null);return}let h=c?this.buildApprovalDedupeKey(c):void 0;if(h&&this.hasRecentlyResolvedApprovalDedupeKey(s.sessionId,h)){a.info("Skipping tmux-detected prompt; same approval was already answered recently",{promptText:l.promptText,dedupeKey:h});return}if(h&&this.hasActiveOrQueuedPermissionHookPrompt(s.sessionId,h)){p?.callId&&this.mergeCallIdIntoPromptByDedupeKey(s.sessionId,h,p.callId),a.info("Skipping tmux-detected prompt; PermissionRequest hook already emitted it",{promptText:l.promptText,dedupeKey:h});return}let v=c?this.buildToolDetailsForInteractivePrompt(c,t):{},P=v.tool_name||this.mapToolNameForApproval(p?.name),E=v.tool_input||(c?this.buildFallbackToolInput(c):void 0),S=!!(P&&E),O={promptId:p?.callId||(0,J.v4)(),callId:p?.callId,kind:y.kind,options:y.options,submitMap:y.submitMap,promptText:y.promptText,createdAt:Date.now(),source:"tmux",dedupeKey:h,ownerSessionId:s.sessionId,observerMatchKey:this.buildObserverPromptMatchKey(l),observerPromptHash:i,requiresFollowUpText:y.requiresFollowUpText},L={options:y.options,instructions:y.instructions,prompt_source:"tmux_live",toolName:c?.toolName,toolInput:c?.toolInput,hint:c?.hint,filePath:c?.filePath,diff:c?.diff,rawInput:c?.rawInput,tool_name:P,tool_input:E,has_details:S,dedupe_key:h},F=this.buildApprovalPromptContent(y.content,{toolName:P,toolInput:E,hint:c?.hint,filePath:c?.filePath});try{await this.enqueueOrEmitInteractivePrompt({prompt:O,content:F,metadata:L,ownerState:s})&&a.info("Sent tmux-detected interactive prompt",{sessionId:s.sessionId,promptText:l.promptText,kind:l.kind})}catch(C){a.error("Failed to send tmux-detected interactive prompt",{error:C})}}async enqueueOrEmitInteractivePrompt(t){if(!this.isExpectedSessionStateCurrent(t.ownerState))return a.warn("Dropping interactive prompt from stale session generation",{sessionId:t.ownerState.sessionId,currentSessionId:this.sessionState?.sessionId,source:t.prompt.source}),!1;if(t.prompt.ownerSessionId??=t.ownerState.sessionId,t.prompt.dedupeKey&&this.hasRecentlyResolvedApprovalDedupeKey(t.ownerState.sessionId,t.prompt.dedupeKey))return a.debug("Skipping interactive prompt emission; same approval was already answered recently",{source:t.prompt.source,callId:t.prompt.callId,dedupeKey:t.prompt.dedupeKey}),!1;let e=this.pendingInteractivePrompt;if(e&&e.ownerSessionId!==t.ownerState.sessionId&&(a.warn("Discarding active prompt from a stale session generation",{activeSessionId:e.ownerSessionId,candidateSessionId:t.ownerState.sessionId}),this.pendingInteractivePrompt=null,e=null),!e){this.pendingInteractivePrompt=t.prompt;try{return await this.emitInteractivePromptEvent(t),!0}catch(i){throw this.pendingInteractivePrompt?.promptId===t.prompt.promptId&&(this.pendingInteractivePrompt=null),i}}if(this.isSameInteractivePrompt(e,t.prompt)){if(t.prompt.source==="permission_hook"&&e.source!=="permission_hook"){e.source="permission_hook",e.completionKey=t.prompt.completionKey??e.dedupeKey,e.dedupeKey=t.prompt.dedupeKey;let i=this.e1PromptRaises.get(e.promptId);i&&(i.resolutionDedupeKey=e.dedupeKey,i.resolutionCompletionKey=e.completionKey)}return!e.callId&&t.prompt.callId&&(e.callId=t.prompt.callId,a.debug("Merged callId into existing interactive prompt",{source:e.source,callId:t.prompt.callId,promptText:e.promptText})),a.debug("Skipping duplicate interactive prompt emission",{existingSource:e.source,candidateSource:t.prompt.source,existingCallId:e.callId,candidateCallId:t.prompt.callId,promptText:t.prompt.promptText}),!1}return this.queuedInteractivePrompts.some(i=>this.isSameInteractivePrompt(i.prompt,t.prompt))?(a.debug("Skipping duplicate queued interactive prompt",{candidateSource:t.prompt.source,candidateCallId:t.prompt.callId,promptText:t.prompt.promptText}),!1):(this.queuedInteractivePrompts.push(t),a.info("Queued interactive prompt behind active prompt",{activeCallId:e.callId,queuedCallId:t.prompt.callId,queueLength:this.queuedInteractivePrompts.length}),!1)}async emitInteractivePromptEvent(t){if(!this.isExpectedSessionStateCurrent(t.ownerState))return;let e=t.ownerState.sessionId,i=this.e1PromptRaises.get(t.prompt.promptId),s=i?i.record:this.newE1Raise(e,!0,void 0,{...t.prompt.dedupeKey!==void 0?{dedupeKey:t.prompt.dedupeKey}:{},...t.prompt.completionKey!==void 0?{completionKey:t.prompt.completionKey}:{},...t.prompt.callId!==void 0?{callId:t.prompt.callId}:{}});t.prompt.promptId=s.promptId;let r=this.e1PromptRaises.get(s.promptId);r&&(r.resolutionDedupeKey??=t.prompt.dedupeKey,r.resolutionCompletionKey??=t.prompt.completionKey,r.resolutionCallId??=t.prompt.callId),t.prompt.dedupeKey&&this.e1ContentKeyIndex.set(`${e}::${t.prompt.dedupeKey}`,s.promptId),this.stashE1RaiseContent(s.promptId,t.content,t.metadata??{});let n=this.encryptForEmit(t.content,t.metadata,m.EventType.INTERACTIVE_PROMPT,e);n&&await this.trackE1Raise(s.promptId,this.appSyncClient.createEvent({sessionId:e,type:m.EventType.INTERACTIVE_PROMPT,source:m.EventSource.DESKTOP,content:n.content,metadata:n.metadata,...(0,m.raiseFieldsFromRecord)(s),timestamp:(0,m.prepareEventTimestamp)({orderingKey:e}),...n.isEncrypted?{isEncrypted:!0}:{}}))}rebindWaitingPermissionRequests(t){for(let e of this.waitingPermissionRequests.values())e.ownerState.codexSessionId&&e.ownerState.codexSessionId===t.codexSessionId&&(e.ownerState=t)}async promoteWaitingPermissionRequest(t,e){if(!this.isExpectedSessionStateCurrent(e))return!1;let i=(0,B.parseInteractivePrompt)(t);if(!i||this.hasMatchingPermissionHookPrompt(i,e.sessionId))return!1;for(let[s,r]of this.waitingPermissionRequests)if(this.isExpectedSessionStateCurrent(r.ownerState)&&this.parsedPromptMatchesApprovalContext(i,r.context,t)){this.waitingPermissionRequests.delete(s);try{await this.handlePermissionRequestHookWhileTracked(r.payload,e,r.context,s,r.dedupeKey,{parsedPrompt:i,snapshot:t})}catch(n){throw this.isExpectedSessionStateCurrent(e)&&!this.hasRecentlyResolvedApprovalDedupeKey(e.sessionId,s)&&this.waitingPermissionRequests.set(s,r),this.tmuxPaneObserver.resetLastPromptHash(),n}return!0}return!1}async emitNextQueuedInteractivePrompt(){if(this.pendingInteractivePrompt)return;if(this.queuedInteractivePrompts.length===0){let e=this.sessionState;if(e&&this.waitingPermissionRequests.size>0){let i=await this.tmuxPaneObserver.captureSnapshot();!(i&&await this.promoteWaitingPermissionRequest(i,e))&&this.isExpectedSessionStateCurrent(e)&&!this.pendingInteractivePrompt&&this.waitingPermissionRequests.size>0&&this.tmuxPaneObserver.resetLastPromptHash()}return}let t=this.queuedInteractivePrompts.shift();if(t){if(!this.isExpectedSessionStateCurrent(t.ownerState)){a.warn("Discarding queued prompt from stale session generation",{sessionId:t.ownerState.sessionId,currentSessionId:this.sessionState?.sessionId}),await this.emitNextQueuedInteractivePrompt();return}this.pendingInteractivePrompt=t.prompt;try{await this.emitInteractivePromptEvent(t),a.info("Emitted next queued interactive prompt",{callId:t.prompt.callId,queueLength:this.queuedInteractivePrompts.length})}catch(e){this.pendingInteractivePrompt=null,a.error("Failed to emit queued interactive prompt",{error:e}),await this.emitNextQueuedInteractivePrompt()}}}async clearObservedInteractivePrompt(t,e){if(!this.isExpectedSessionStateCurrent(t))return;let i=this.pendingInteractivePrompt;if(!i||i.ownerSessionId!==t.sessionId||i.observerPromptHash!==e){a.debug("Ignoring prompt-cleared for a non-current chooser occurrence",{sessionId:t.sessionId,clearedPromptHash:e,activePromptId:i?.promptId,activePromptHash:i?.observerPromptHash});return}this.pendingInteractivePrompt=null,i.callId&&this.approvalDetector.onToolCallComplete(i.callId),this.rememberResolvedApprovalDedupeKey(t.sessionId,i.dedupeKey);for(let r of this.queuedPermissionRequestRegistrations.get(t.sessionId)??[])r.occurrenceKey===i.dedupeKey&&(r.disposition="resolved",this.deferredTmuxPromptCandidates.delete(r),this.removePermissionRequestOccurrence(r.dedupeKey,r.occurrenceKey));let s=this.beginE1PromptResolutions(new Set([i.promptId]),t.sessionId);this.launchE1Resolutions(s),await this.emitNextQueuedInteractivePrompt()}async clearResolvedInteractivePrompt(t,e){if(!e){a.debug("Interactive prompt completion had no comparable dialog identity",{callId:t});return}let i=this.isPermissionRequestOccurrenceKey(e),s=this.pendingInteractivePrompt,r=!!s&&(s.dedupeKey===e||s.completionKey===e||!i&&!!t&&s.callId===t),n=this.sessionState?.sessionId??s?.ownerSessionId,l=this.queuedInteractivePrompts.find(S=>!i&&!!t&&S.prompt.callId===t||S.prompt.dedupeKey===e||S.prompt.completionKey===e),p=this.permissionRequestHookInFlight,d=p?.ownerState.sessionId===n&&(p?.dedupeKey===e||p?.occurrenceKey===e),c=(n?this.queuedPermissionRequestRegistrations.get(n)??[]:[]).find(S=>S.dedupeKey===e||S.occurrenceKey===e),f=[...this.waitingPermissionRequests.values()].find(S=>S.ownerState.sessionId===n&&(S.occurrenceKey===e||S.dedupeKey===e)),y=r?s?.dedupeKey:l?.prompt.dedupeKey??(d?p?.occurrenceKey:void 0)??c?.occurrenceKey??f?.occurrenceKey??e,h=new Set;if(r&&s&&h.add(s.promptId),l&&h.add(l.prompt.promptId),n&&y){let S=this.e1ContentKeyIndex.get(`${n}::${y}`);S&&h.add(S)}let v=[...this.e1PromptRaises.entries()].find(([,S])=>S.record.sessionId===n&&(S.resolutionDedupeKey===y||!i&&!!t&&S.resolutionCallId===t||S.resolutionCompletionKey===e));if(v&&h.add(v[0]),(r||d||c||f||h.size>0)&&this.rememberResolvedApprovalDedupeKey(n,y),r&&s&&(this.pendingInteractivePrompt=null),c&&(c.disposition="resolved"),y)for(let S of this.removeQueuedInteractivePromptByDedupeKey(y))h.add(S);let E=n?this.beginE1PromptResolutions(h,n):[];this.launchE1Resolutions(E),(r||!this.pendingInteractivePrompt&&l)&&await this.emitNextQueuedInteractivePrompt()}clearInteractivePromptsForAcceptedInput(t){let e=t.sessionId,i=new Set,s=this.pendingInteractivePrompt;s?.ownerSessionId===e&&(i.add(s.promptId),this.rememberResolvedApprovalDedupeKey(e,s.dedupeKey),this.pendingInteractivePrompt=null);let r=[];for(let l of this.queuedInteractivePrompts)l.prompt.ownerSessionId===e?(i.add(l.prompt.promptId),this.rememberResolvedApprovalDedupeKey(e,l.prompt.dedupeKey)):r.push(l);this.queuedInteractivePrompts=r;for(let[l,p]of this.e1PromptRaises.entries())p.record.sessionId===e&&i.add(l);for(let l of this.queuedPermissionRequestRegistrations.get(e)??[])l.disposition="resolved",this.rememberResolvedApprovalDedupeKey(e,l.occurrenceKey),this.deferredTmuxPromptCandidates.delete(l);for(let[l,p]of this.waitingPermissionRequests)p.ownerState.sessionId===e&&(this.rememberResolvedApprovalDedupeKey(e,l),this.waitingPermissionRequests.delete(l));this.permissionRequestOccurrencesByCompletionKey.clear();let n=this.beginE1PromptResolutions(i,e);this.launchE1Resolutions(n)}removeQueuedInteractivePromptByDedupeKey(t){let e=this.queuedInteractivePrompts.length,i=this.queuedInteractivePrompts.filter(s=>s.prompt.dedupeKey===t);for(let s of i)this.rememberResolvedApprovalDedupeKey(s.ownerState.sessionId,s.prompt.dedupeKey);return this.queuedInteractivePrompts=this.queuedInteractivePrompts.filter(s=>s.prompt.dedupeKey!==t),this.queuedInteractivePrompts.length!==e&&a.debug("Removed resolved deduped tool call from interactive prompt queue",{dedupeKey:t,removed:e-this.queuedInteractivePrompts.length}),i.map(s=>s.prompt.promptId)}mergeCallIdIntoPromptByDedupeKey(t,e,i){let s=this.pendingInteractivePrompt;if(s?.ownerSessionId===t&&(s.completionKey??s.dedupeKey)===e&&!s.callId){s.callId=i;let n=this.e1PromptRaises.get(s.promptId);n&&(n.resolutionCallId??=i),a.debug("Merged callId into active deduped interactive prompt",{source:s.source,callId:i,dedupeKey:e});return}let r=this.queuedInteractivePrompts.find(n=>n.prompt.ownerSessionId===t&&(n.prompt.completionKey??n.prompt.dedupeKey)===e&&!n.prompt.callId);r&&(r.prompt.callId=i,a.debug("Merged callId into queued deduped interactive prompt",{source:r.prompt.source,callId:i,dedupeKey:e}))}isSameInteractivePrompt(t,e){if(t.ownerSessionId!==e.ownerSessionId||Date.now()-t.createdAt>Fi)return!1;if(t.callId&&e.callId)return t.callId===e.callId;let s=t.completionKey??t.dedupeKey,r=e.completionKey??e.dedupeKey;return t.source!==e.source&&s&&s===r&&t.observerMatchKey&&t.observerMatchKey===e.observerMatchKey?!0:t.dedupeKey&&e.dedupeKey?t.dedupeKey===e.dedupeKey:t.kind===e.kind&&this.normalizePromptDedupeText(t.promptText)===this.normalizePromptDedupeText(e.promptText)}normalizePromptDedupeText(t){return t.replace(/\s+/g," ").trim().toLowerCase()}async startTmuxObserver(){let t=process.env.CODEVIBE_CODEX_TMUX_SESSION;if(!t)return a.debug("Skipping tmux pane observer start - no tmux session in environment"),!0;try{return await this.tmuxPaneObserver.start(t),!0}catch(e){return a.warn("Failed to start tmux pane observer",{tmuxSession:t,error:e}),!1}}async startTmuxObserverWithBeacon(t){try{await this.startTmuxObserver()?await _("daemon_init_step_completed",{step:"tmux_observer_start",path:t}):await _("daemon_init_step_failed",{step:"tmux_observer_start",path:t,error_class:"TmuxObserverStartFailed",error_message:"tmuxPaneObserver.start threw (see plugin log)"})}catch(e){await _("daemon_init_step_failed",{step:"tmux_observer_start",path:t,error_class:e?.name||"Error",error_message:e?.message||String(e)}),a.error("Failed to start tmux observer:",e)}}async tryParseInteractivePromptFromTmux(){try{let t=await this.tmuxPaneObserver.captureSnapshot(),e=this.tmuxPaneObserver.extractActiveApprovalBlock(t),i=e?(0,B.parseInteractivePrompt)(e):null;return a.debug("tmux prompt parse result",{parsed:!!i,kind:i?.kind,promptText:i?.promptText,isolated:!!e,snapshotPreview:this.summarizePromptSnapshot(e??t)}),{parsedPrompt:i,snapshot:e??t}}catch(t){return a.debug("tmux prompt parsing unavailable",{error:t}),null}}async tryParsePermissionRequestPromptFromTmux(t,e){let r=null;for(let n=0;n<25;n+=1){if(e&&!e()||n>0&&(await new Promise(p=>setTimeout(p,125)),e&&!e()))return null;let l=await this.tryParseInteractivePromptFromTmux();if(l&&(r=l),l?.parsedPrompt&&(!t||t(l.parsedPrompt,l.snapshot)))return l}return r?.snapshot?{parsedPrompt:null,snapshot:r.snapshot,...r.parsedPrompt?{differentPrompt:!0}:{}}:null}buildPromptPresentation(t){return t?{content:t.promptText,promptText:t.promptText,kind:t.kind,options:t.options,submitMap:t.submitMap,instructions:this.buildPromptInstructions(t),requiresFollowUpText:t.requiresFollowUpText}:{content:"Codex is waiting for approval.",promptText:"Codex is waiting for approval.",kind:"yes_no",options:[{number:"1",text:'Yes (sends "y")'},{number:"2",text:'No, tell Codex what to change (sends "n <instructions>")'}],submitMap:{1:"y",2:"n"},instructions:"Reply with 1 to approve, or 2 followed by what to change",requiresFollowUpText:!0}}buildCodexPromptPresentation(t,e,i){let s=this.buildPromptPresentation(t),r=At(s.options,e,i);if(!r)return null;let n=this.buildSubmitMapFromCodexOptionHotkeys(r);return n?{...s,options:r,submitMap:n,instructions:this.buildCodexPermissionInstructions(r),requiresFollowUpText:this.optionsRequireFollowUpText(r)}:null}buildSubmitMapFromCodexOptionHotkeys(t){let e={};for(let i of t){let s=i.text.match(/\(([^)]+)\)\s*$/)?.[1]?.trim().toLowerCase();if(!s||!Di.test(s))return null;s==="esc"||s==="escape"?e[i.number]=Y:e[i.number]=s}return e}buildCodexPermissionInstructions(t){let e=t.find(n=>/\((?:y|yes)\)\s*$/i.test(n.text)),i=t.find(n=>/\(p\)\s*$/i.test(n.text)),s=t.find(n=>/\((?:esc|escape)\)\s*$/i.test(n.text)),r=[];return e&&r.push(`${e.number} to approve`),i&&r.push(`${i.number} to persist the desktop allow rule`),s&&r.push(`${s.number} followed by what to change`),r.length>0?`Reply with ${r.join(", ")}`:"Reply with the number of the option you want"}optionsRequireFollowUpText(t){return t.some(e=>/what to (?:do differently|change)|instructions/i.test(e.text))}getMostRecentPendingToolCall(){let t=this.approvalDetector.getPendingCalls();return t.length===0?null:t.reduce((e,i)=>i.timestamp>e.timestamp?i:e)}hasActiveOrQueuedPermissionHookPrompt(t,e){let i=this.pendingInteractivePrompt;return i?.ownerSessionId===t&&i.source==="permission_hook"&&(i.completionKey??i.dedupeKey)===e?!0:this.queuedInteractivePrompts.some(s=>s.prompt.ownerSessionId===t&&s.prompt.source==="permission_hook"&&(s.prompt.completionKey??s.prompt.dedupeKey)===e)||[...this.waitingPermissionRequests.values()].some(s=>s.ownerState.sessionId===t&&s.dedupeKey===e)}hasDurablePermissionHookFallback(t){return[...this.e1PromptRaises.values()].some(e=>e.record.sessionId===t&&e.suppressTmuxObserverUntilResolved===!0)}hasDurablePermissionHookFallbackByDedupeKey(t,e){return[...this.e1PromptRaises.values()].some(i=>i.record.sessionId===t&&i.suppressTmuxObserverUntilResolved===!0&&(i.resolutionDedupeKey===e||i.resolutionCompletionKey===e))}hasMatchingDurablePermissionHookFallback(t,e,i){let s=this.buildApprovalPromptContextFromParsedPrompt(t),r=s?this.buildApprovalDedupeKey(s):void 0;if(r&&this.hasDurablePermissionHookFallbackByDedupeKey(e,r))return!0;if(!i)return!1;let n=this.buildObserverSnapshotMatchKey(i);return[...this.e1PromptRaises.values()].some(l=>l.record.sessionId===e&&l.suppressTmuxObserverUntilResolved===!0&&l.suppressedObserverSnapshotKey===n)}deferTmuxPromptCandidateForPermissionHook(t,e,i){let s=this.queuedPermissionRequestSessionCounts.get(t)??0,r=this.hasDurablePermissionHookFallback(t);if(s<=0&&!r)return!1;let n=(0,B.parseInteractivePrompt)(e);if(n&&this.hasMatchingDurablePermissionHookFallback(n,t,e))return a.debug("Skipping tmux repaint already owned by a durable PermissionRequest fallback",{sessionId:t,promptText:n.promptText}),!0;if(n&&this.hasMatchingPermissionHookPrompt(n,t))return a.debug("Skipping tmux repaint already owned by an actionable PermissionRequest",{sessionId:t,promptText:n.promptText}),!0;if(n&&s<=0)return!1;if(s>0){let l=this.queuedPermissionRequestRegistrations.get(t)??[],p=n?l.find(c=>this.parsedPromptMatchesApprovalContext(n,c.context,e)):void 0,d=!n&&this.permissionRequestHookInFlight?.ownerState.sessionId===t?this.permissionRequestHookInFlight.registration:void 0,u=p??d??(l.length===1&&(!n||!r)?l[0]:void 0);if(u&&this.deferredTmuxPromptCandidates.set(u,{snapshot:e,promptHash:i}),n&&!u)return!1}return a.debug("Skipping tmux prompt candidate while PermissionRequest owns the session prompt",{sessionId:t,toolName:this.permissionRequestHookInFlight?.context.toolName,ownership:s>0?"queued_or_in_flight":"durable_prompt"}),!0}hasMatchingPermissionHookPrompt(t,e){let i=this.buildObserverPromptMatchKey(t);return[this.pendingInteractivePrompt,...this.queuedInteractivePrompts.map(r=>r.prompt)].some(r=>r?.source==="permission_hook"&&r.ownerSessionId===e&&r.observerMatchKey===i)}buildObserverPromptMatchKey(t){let e=t.options.map(s=>`${s.number}:${this.normalizeObserverPromptText(s.text)}`).join("|"),i=[t.kind,this.normalizeObserverPromptText(t.promptText),e].join("::");return`observer:${Ie.createHash("sha256").update(i).digest("hex").slice(0,16)}`}buildObserverSnapshotMatchKey(t){let e=this.normalizeObserverPromptText(t);return`snapshot:${Ie.createHash("sha256").update(e).digest("hex").slice(0,16)}`}normalizeObserverPromptText(t){return t.replace(/\r\n?/g,`
 `).split(`
 `).map(e=>e.replace(/[ \t]+$/g,"")).join(`
-`).trim()}hasRecentlyResolvedApprovalDedupeKey(t,e){return t?(this.pruneResolvedApprovalDedupeKeys(),this.resolvedApprovalDedupeKeys.has(`${t}::${e}`)):!1}rememberResolvedApprovalDedupeKey(t,e){!t||!e||(this.pruneResolvedApprovalDedupeKeys(),this.waitingPermissionRequests.get(e)?.ownerState.sessionId===t&&this.waitingPermissionRequests.delete(e),this.resolvedApprovalDedupeKeys.set(`${t}::${e}`,Date.now()))}pruneResolvedApprovalDedupeKeys(){let t=Date.now()-Fe;for(let[e,i]of this.resolvedApprovalDedupeKeys.entries())i<t&&this.resolvedApprovalDedupeKeys.delete(e)}buildApprovalDedupeKey(t){let e=t.toolName||"Tool",i=this.firstString(t.toolInput?.command,t.toolInput?.cmd,t.rawInput);if(i)return`command:${this.hashDedupeValue(`${this.mapToolNameForApproval(e)||e}:${i}`)}`;let s=this.firstString(t.filePath,t.toolInput?.file_path,t.toolInput?.path,t.toolInput?.filePath);if(s)return`file:${this.hashDedupeValue(`${e}:${s}`)}`;let r=this.firstString(t.hint);if(r)return`hint:${this.hashDedupeValue(`${e}:${r}`)}`}hashDedupeValue(t){return Se.createHash("sha256").update(t).digest("hex").slice(0,16)}buildPermissionRequestHint(t,e,i){let s=this.extractFilePathFromToolInput(t,e,i);if(this.mapToolNameForApproval(t)==="Edit"&&s)return`File: ${s}`;let r=this.firstString(e?.command,e?.cmd);return r?`Command: ${this.truncateApprovalDetail(r,80)}`:s?`File: ${s}`:`Tool: ${this.mapToolNameForApproval(t)||t}`}extractFilePathFromToolInput(t,e,i){let s=this.firstString(e?.file_path,e?.path,e?.filePath);if(s)return s;if(t==="apply_patch"){let n=this.firstString(e?.command,e?.cmd,i)?.match(/\*\*\* (?:Update|Add|Delete) File: ([^\r\n]+)/);if(n)return n[1].trim()}}stringifyToolInput(t){if(t!=null){if(typeof t=="string")return t;try{return JSON.stringify(t)}catch{return String(t)}}}buildApprovalPromptContextFromPendingCall(t){let e=this.firstString(t.parsedInput?.command,t.parsedInput?.cmd),i=ee(t.input),s=V(e)||ee(e),n=(t.name==="apply_patch"?V(t.input):"")||i||s,l=!!n,p=l?"apply_patch":t.name,d=l?n:t.input,c=l?t.parsedInput||{command:n}:t.parsedInput,u=l?this.extractFilePathFromToolInput("apply_patch",void 0,n):t.filePath;return{toolName:p,framedPatch:l,filePath:u,diff:l?d:t.diff,toolInput:c,rawInput:d,hint:u?`File: ${u}`:`Tool: ${this.mapToolNameForApproval(p)||p}`}}buildApprovalPromptContextFromParsedPrompt(t){let e=this.extractShellCommandFromPromptText(t.promptText);if(e)return{toolName:"Bash",toolInput:{command:e},rawInput:e,hint:`Command: ${this.truncateApprovalDetail(e,80)}`};let i=t.promptText.match(/^(?:Destination|File):\s*([^\r\n]+)$/mi)?.[1]?.trim();return i?{toolName:"apply_patch",filePath:i,toolInput:{file_path:i},hint:`File: ${i}`}:null}parsedPromptMatchesApprovalContext(t,e,i){let s=this.buildApprovalPromptContextFromParsedPrompt(t),r=this.mapToolNameForApproval(e.toolName)==="Bash"?this.firstString(e.toolInput?.command,e.toolInput?.cmd):void 0;if(r){if(Ni(t.promptText,r,i))return!0;if(this.mapToolNameForApproval(s?.toolName)!=="Bash")return!1;let l=Ke(t.promptText);return l?xt(l,r):!1}if(e.framedPatch!==!0)return!1;let n=e.filePath;return n?s?.toolName!=="apply_patch"||!s.filePath?!1:k.normalize(s.filePath)===k.normalize(n):!1}extractShellCommandFromPromptText(t){return Tt(t)}buildPromptInstructions(t){return t.kind==="yes_no"&&t.requiresFollowUpText?"Reply with 1 to approve, or 2 followed by what to change":t.kind==="yes_no"?"Reply with 1 for yes or 2 for no":t.kind==="numbered"?"Reply with the number of the option you want":"Reply with your response"}buildApprovalPromptContent(t,e){let i=t.trim(),s=i==="Codex is waiting for approval.",r=/^\$\s+/.test(i),n=e.toolName?`${e.toolName} requires approval.`:"Codex is waiting for approval.",l=[s||r||!i?n:i],p=typeof e.toolInput?.command=="string"?e.toolInput.command.trim():void 0;if(p&&!l.join(`
+`).trim()}hasRecentlyResolvedApprovalDedupeKey(t,e){return t?(this.pruneResolvedApprovalDedupeKeys(),this.resolvedApprovalDedupeKeys.has(`${t}::${e}`)):!1}rememberResolvedApprovalDedupeKey(t,e){!t||!e||(this.pruneResolvedApprovalDedupeKeys(),this.waitingPermissionRequests.get(e)?.ownerState.sessionId===t&&this.waitingPermissionRequests.delete(e),this.resolvedApprovalDedupeKeys.set(`${t}::${e}`,Date.now()))}pruneResolvedApprovalDedupeKeys(){let t=Date.now()-Me;for(let[e,i]of this.resolvedApprovalDedupeKeys.entries())i<t&&this.resolvedApprovalDedupeKeys.delete(e)}buildApprovalDedupeKey(t){let e=t.toolName||"Tool",i=this.firstString(t.toolInput?.command,t.toolInput?.cmd,t.rawInput);if(i)return`command:${this.hashDedupeValue(`${this.mapToolNameForApproval(e)||e}:${i}`)}`;let s=this.firstString(t.filePath,t.toolInput?.file_path,t.toolInput?.path,t.toolInput?.filePath);if(s)return`file:${this.hashDedupeValue(`${e}:${s}`)}`;let r=this.firstString(t.hint);if(r)return`hint:${this.hashDedupeValue(`${e}:${r}`)}`}hashDedupeValue(t){return Ie.createHash("sha256").update(t).digest("hex").slice(0,16)}buildPermissionRequestHint(t,e,i){let s=this.extractFilePathFromToolInput(t,e,i);if(this.mapToolNameForApproval(t)==="Edit"&&s)return`File: ${s}`;let r=this.firstString(e?.command,e?.cmd);return r?`Command: ${this.truncateApprovalDetail(r,80)}`:s?`File: ${s}`:`Tool: ${this.mapToolNameForApproval(t)||t}`}extractFilePathFromToolInput(t,e,i){let s=this.firstString(e?.file_path,e?.path,e?.filePath);if(s)return s;if(t==="apply_patch"){let n=this.firstString(e?.command,e?.cmd,i)?.match(/\*\*\* (?:Update|Add|Delete) File: ([^\r\n]+)/);if(n)return n[1].trim()}}stringifyToolInput(t){if(t!=null){if(typeof t=="string")return t;try{return JSON.stringify(t)}catch{return String(t)}}}buildApprovalPromptContextFromPendingCall(t){let e=this.firstString(t.parsedInput?.command,t.parsedInput?.cmd),i=ie(t.input),s=V(e)||ie(e),n=(t.name==="apply_patch"?V(t.input):"")||i||s,l=!!n,p=l?"apply_patch":t.name,d=l?n:t.input,u=l?t.parsedInput||{command:n}:t.parsedInput,c=l?this.extractFilePathFromToolInput("apply_patch",void 0,n):t.filePath;return{toolName:p,framedPatch:l,filePath:c,diff:l?d:t.diff,toolInput:u,rawInput:d,hint:c?`File: ${c}`:`Tool: ${this.mapToolNameForApproval(p)||p}`}}buildApprovalPromptContextFromParsedPrompt(t){let e=this.extractShellCommandFromPromptText(t.promptText);if(e)return{toolName:"Bash",toolInput:{command:e},rawInput:e,hint:`Command: ${this.truncateApprovalDetail(e,80)}`};let i=t.promptText.match(/^(?:Destination|File):\s*([^\r\n]+)$/mi)?.[1]?.trim();return i?{toolName:"apply_patch",filePath:i,toolInput:{file_path:i},hint:`File: ${i}`}:null}parsedPromptMatchesApprovalContext(t,e,i){let s=this.buildApprovalPromptContextFromParsedPrompt(t),r=this.mapToolNameForApproval(e.toolName)==="Bash"?this.firstString(e.toolInput?.command,e.toolInput?.cmd):void 0;if(r){if(Li(t.promptText,r,i))return!0;if(this.mapToolNameForApproval(s?.toolName)!=="Bash")return!1;let l=qe(t.promptText);return l?Ot(l,r):!1}if(e.framedPatch!==!0)return!1;let n=e.filePath;return n?s?.toolName!=="apply_patch"||!s.filePath?!1:k.normalize(s.filePath)===k.normalize(n):!1}extractShellCommandFromPromptText(t){return Ct(t)}buildPromptInstructions(t){return t.kind==="yes_no"&&t.requiresFollowUpText?"Reply with 1 to approve, or 2 followed by what to change":t.kind==="yes_no"?"Reply with 1 for yes or 2 for no":t.kind==="numbered"?"Reply with the number of the option you want":"Reply with your response"}buildApprovalPromptContent(t,e){let i=t.trim(),s=i==="Codex is waiting for approval.",r=/^\$\s+/.test(i),n=e.toolName?`${e.toolName} requires approval.`:"Codex is waiting for approval.",l=[s||r||!i?n:i],p=typeof e.toolInput?.command=="string"?e.toolInput.command.trim():void 0;if(p&&!l.join(`
 `).includes(p))return l.push("Command:",this.truncateApprovalDetail(p,240)),l.join(`
 `);let d=e.filePath||e.toolInput?.file_path;return typeof d=="string"&&d.length>0&&!l.join(`
 `).includes(d)?(l.push(`File: ${d}`),l.join(`
@@ -34,13 +34,13 @@ ${wt(o,"stdout")}`;return/^can't find session:/m.test(t)||/^no server running on
 `).includes(e.hint)&&l.push(e.hint),l.join(`
 `))}truncateApprovalDetail(t,e){return t.length>e?`${t.slice(0,e-3)}...`:t}summarizePromptSnapshot(t){return t.split(`
 `).map(e=>e.trimEnd()).filter(e=>e.length>0).slice(-12).map(e=>e.slice(0,160)).join(`
-`)}translatePromptResponse(t,e,i=this.pendingInteractivePrompt){if(!i||e.kind!=="option")return{primaryInput:t};let s=i.submitMap[e.option];return s?e.followUpText?{primaryInput:s,followUpInput:e.followUpText}:{primaryInput:s}:{primaryInput:t}}getEventPromptId(t){let e=t.promptId;return typeof e=="string"&&e.trim().length>0?e.trim():null}async emitRejectedPromptResponseNotification(t,e,i){if(!this.isExpectedSessionStateCurrent(i))return;let s=i.sessionId,r=t==="no_safe_reject_option"?"Your message was not sent because the active desktop prompt has no verified reject option. Please resolve it on the desktop and send your message again.":t==="live_prompt_unverified"?"Your response was not sent because the desktop prompt changed or could not be verified. Please reply to the prompt currently shown on your device.":t==="follow_up_delivery_failed"?"Your option was accepted, but the accompanying text could not be sent. Please send the text again.":"Response ignored because it was not tied to the current prompt. Please reply to the latest prompt again.",n={prompt_response_rejected:!0,reason:t,eventId:e.eventId,eventPromptId:this.getEventPromptId(e),activePromptId:this.pendingInteractivePrompt?.promptId},l=this.encryptForEmit(r,n,m.EventType.NOTIFICATION,s);if(l)try{await this.appSyncClient.createEvent({sessionId:s,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,content:l.content,metadata:l.metadata,timestamp:(0,m.prepareEventTimestamp)({orderingKey:s}),...l.isEncrypted?{isEncrypted:!0}:{}})}catch(p){a.warn("Failed to emit rejected prompt response notification",{reason:t,error:p})}}buildToolDetailsForInteractivePrompt(t,e){let i=t.toolName,s=t.toolInput&&typeof t.toolInput=="object"?t.toolInput:void 0;if(i==="apply_patch"){let n=t.diff||t.rawInput;if(n){let{oldString:l,newString:p,oldStartLine:d,newStartLine:c}=this.extractOldNewFromPatch(n),u=e?this.extractDiffLineAnchorsFromSnapshot(e):{};return{tool_name:"Edit",tool_input:{file_path:t.filePath,content:n,diff:t.diff,raw_patch:t.rawInput,old_string:l,new_string:p,old_start_line:d??u.oldStartLine,new_start_line:c??u.newStartLine}}}}if(this.mapToolNameForApproval(i)==="Bash"){let n=this.firstString(s?.command,s?.cmd,t.rawInput,t.hint);if(n)return{tool_name:"Bash",tool_input:{command:n,output:s?.output}}}let r={};return t.filePath&&(r.file_path=t.filePath),t.diff&&(r.diff=t.diff),t.rawInput&&(r.raw_input=t.rawInput),Object.keys(r).length>0?{tool_name:i||"Tool",tool_input:r}:{}}firstString(...t){for(let e of t)if(typeof e=="string"&&e.trim().length>0)return e}buildFallbackToolInput(t){let e={};return t.filePath&&(e.file_path=t.filePath),t.diff&&(e.diff=t.diff),t.rawInput&&(e.raw_input=t.rawInput),t.toolInput&&typeof t.toolInput=="object"&&(e.parsed_input=t.toolInput),Object.keys(e).length>0?e:void 0}mapToolNameForApproval(t){return t?{exec_command:"Bash",exec:"Bash",local_shell:"Bash",Bash:"Bash",apply_patch:"Edit",shell_command:"Bash",shell:"Bash",Edit:"Edit",Write:"Write"}[t]||t:void 0}extractOldNewFromPatch(t){let e=[],i=[],s=/^@@ -(\d+)(?:,\d+)? \+(\d+)(?:,\d+)? @@/,r=0,n=0,l=0,p,d;for(let c of t.split(`
-`)){let u=c.match(s);if(u){r+=1,n=Number.parseInt(u[1],10),l=Number.parseInt(u[2],10);continue}if(!(c.startsWith("***")||c.startsWith("---")||c.startsWith("+++")||c.startsWith("*** End Patch"))){if(c.startsWith("-"))p===void 0&&(p=n),e.push(c.slice(1)),n+=1;else if(c.startsWith("+"))d===void 0&&(d=l),i.push(c.slice(1)),l+=1;else if(c.startsWith(" ")){let f=c.slice(1);e.push(f),i.push(f),n+=1,l+=1}}}return{oldString:e.join(`
+`)}translatePromptResponse(t,e,i=this.pendingInteractivePrompt){if(!i||e.kind!=="option")return{primaryInput:t};let s=i.submitMap[e.option];return s?e.followUpText?{primaryInput:s,followUpInput:e.followUpText}:{primaryInput:s}:{primaryInput:t}}getEventPromptId(t){let e=t.promptId;return typeof e=="string"&&e.trim().length>0?e.trim():null}async emitRejectedPromptResponseNotification(t,e,i){if(!this.isExpectedSessionStateCurrent(i))return;let s=i.sessionId,r=t==="no_safe_reject_option"?"Your message was not sent because the active desktop prompt has no verified reject option. Please resolve it on the desktop and send your message again.":t==="live_prompt_unverified"?"Your response was not sent because the desktop prompt changed or could not be verified. Please reply to the prompt currently shown on your device.":t==="follow_up_delivery_failed"?"Your option was accepted, but the accompanying text could not be sent. Please send the text again.":"Response ignored because it was not tied to the current prompt. Please reply to the latest prompt again.",n={prompt_response_rejected:!0,reason:t,eventId:e.eventId,eventPromptId:this.getEventPromptId(e),activePromptId:this.pendingInteractivePrompt?.promptId},l=this.encryptForEmit(r,n,m.EventType.NOTIFICATION,s);if(l)try{await this.appSyncClient.createEvent({sessionId:s,type:m.EventType.NOTIFICATION,source:m.EventSource.DESKTOP,content:l.content,metadata:l.metadata,timestamp:(0,m.prepareEventTimestamp)({orderingKey:s}),...l.isEncrypted?{isEncrypted:!0}:{}})}catch(p){a.warn("Failed to emit rejected prompt response notification",{reason:t,error:p})}}buildToolDetailsForInteractivePrompt(t,e){let i=t.toolName,s=t.toolInput&&typeof t.toolInput=="object"?t.toolInput:void 0;if(i==="apply_patch"){let n=t.diff||t.rawInput;if(n){let{oldString:l,newString:p,oldStartLine:d,newStartLine:u}=this.extractOldNewFromPatch(n),c=e?this.extractDiffLineAnchorsFromSnapshot(e):{};return{tool_name:"Edit",tool_input:{file_path:t.filePath,content:n,diff:t.diff,raw_patch:t.rawInput,old_string:l,new_string:p,old_start_line:d??c.oldStartLine,new_start_line:u??c.newStartLine}}}}if(this.mapToolNameForApproval(i)==="Bash"){let n=this.firstString(s?.command,s?.cmd,t.rawInput,t.hint);if(n)return{tool_name:"Bash",tool_input:{command:n,output:s?.output}}}let r={};return t.filePath&&(r.file_path=t.filePath),t.diff&&(r.diff=t.diff),t.rawInput&&(r.raw_input=t.rawInput),Object.keys(r).length>0?{tool_name:i||"Tool",tool_input:r}:{}}firstString(...t){for(let e of t)if(typeof e=="string"&&e.trim().length>0)return e}buildFallbackToolInput(t){let e={};return t.filePath&&(e.file_path=t.filePath),t.diff&&(e.diff=t.diff),t.rawInput&&(e.raw_input=t.rawInput),t.toolInput&&typeof t.toolInput=="object"&&(e.parsed_input=t.toolInput),Object.keys(e).length>0?e:void 0}mapToolNameForApproval(t){return t?{exec_command:"Bash",exec:"Bash",local_shell:"Bash",Bash:"Bash",apply_patch:"Edit",shell_command:"Bash",shell:"Bash",Edit:"Edit",Write:"Write"}[t]||t:void 0}extractOldNewFromPatch(t){let e=[],i=[],s=/^@@ -(\d+)(?:,\d+)? \+(\d+)(?:,\d+)? @@/,r=0,n=0,l=0,p,d;for(let u of t.split(`
+`)){let c=u.match(s);if(c){r+=1,n=Number.parseInt(c[1],10),l=Number.parseInt(c[2],10);continue}if(!(u.startsWith("***")||u.startsWith("---")||u.startsWith("+++")||u.startsWith("*** End Patch"))){if(u.startsWith("-"))p===void 0&&(p=n),e.push(u.slice(1)),n+=1;else if(u.startsWith("+"))d===void 0&&(d=l),i.push(u.slice(1)),l+=1;else if(u.startsWith(" ")){let f=u.slice(1);e.push(f),i.push(f),n+=1,l+=1}}}return{oldString:e.join(`
 `),newString:i.join(`
 `),oldStartLine:r===1?p:void 0,newStartLine:r===1?d:void 0}}extractDiffLineAnchorsFromSnapshot(t){let e=(0,B.normalizeSnapshot)(t),i,s;for(let r of e.split(`
-`)){let n=r.match(/^\s*(\d+)\s+(.*)$/);if(!n)continue;let l=Number.parseInt(n[1],10),p=n[2];if(Number.isFinite(l)){if(p.startsWith("-")){i??=l;continue}if(p.startsWith("+")){s??=l;continue}i??=l,s??=l}}return a.debug("Recovered diff line anchors from tmux snapshot",{oldStartLine:i,newStartLine:s,snapshotPreview:this.summarizePromptSnapshot(t)}),{oldStartLine:i,newStartLine:s}}subscribeToMobileEvents(t){let e=this.sessionState;if(!e||e.sessionId!==t)return a.warn("Refusing mobile subscription without matching session generation",{sessionId:t,currentSessionId:e?.sessionId}),!1;if(this.subscribedSessionId===t&&this.subscribedSessionState===e)return a.info("Already subscribed to mobile events, skipping",{sessionId:t}),!0;if(a.info("Subscribing to mobile events",{sessionId:t}),this.unsubscribe){try{this.unsubscribe()}catch(i){a.warn("Error cleaning up previous subscription (non-fatal)",{error:i})}this.subscribedSessionId=null,this.subscribedSessionState=null}try{this.unsubscribe=this.appSyncClient.subscribeToEvents(t,async i=>{await this.handleMobileEvent(i,e)},i=>{a.error("Subscription error:",i)},{onSessionRetired:()=>this.recoverRetiredBackendSession(t)}),this.subscribedSessionId=t,this.subscribedSessionState=e}catch(i){return a.error("Failed to subscribe to mobile events (non-fatal)",{sessionId:t,error:i}),!1}return this.isExpectedSessionStateCurrent(e)&&(e.subscriptionActive=!0),a.info("Subscribed to mobile events"),!0}async ensureOrchestrationClient(t){let{OrchestrationClient:e}=await import("@quantiya/quorum-core"),i=await m.keychainManager.getTokens((0,m.getEnvironment)());if(!i?.idToken)throw new Error("No Cognito ID token available \u2014 plugin must be logged in");let s=(0,m.getConfig)(),r=this.sessionKey??Buffer.alloc(32).toString("base64"),n=require("ws");return await e.connect({appsyncUrl:s.aws.appsyncUrl,cognitoIdToken:i.idToken,tokenProvider:async()=>(await m.keychainManager.getTokens((0,m.getEnvironment)()))?.idToken??i.idToken,sessionId:t,sessionKeyB64:r,webSocketFactory:((p,d)=>new n(p,d))})}async subscribeToOnApplyUserDecision(t){if(this.userDecisionUnsubscribe){try{this.userDecisionUnsubscribe()}catch(e){a.warn("Error invoking previous onApplyUserDecision unsubscribe (non-fatal)",{error:e})}this.userDecisionUnsubscribe=null}if(this.orchestrationClient){try{await this.orchestrationClient.destroy()}catch(e){a.warn("Error destroying previous OrchestrationClient (non-fatal)",{error:e})}this.orchestrationClient=null}try{let e=await this.ensureOrchestrationClient(t);this.orchestrationClient=e;let i=await e.onApplyUserDecision(s=>{this.handleApplyUserDecisionEvent(s)});return this.userDecisionUnsubscribe=i,a.info("[v1-bridge] Subscribed to onApplyUserDecision via OrchestrationClient",{sessionId:t}),!0}catch(e){if(a.error("Failed to subscribe to onApplyUserDecision (non-fatal)",{sessionId:t,error:e}),this.orchestrationClient){try{await this.orchestrationClient.destroy()}catch{}this.orchestrationClient=null}return!1}}handleApplyUserDecisionEvent(t){let{gateId:e,decision:i,sessionId:s,taskId:r}=t;if(this.v1Bridge.dispatch(t)==="self_echo"){a.debug("[v1-bridge] Self-origin decision echo absorbed",{gateId:e,decision:i,sessionId:s,taskId:r});return}a.info("[v1-bridge] cross-device decision recorded",{gateId:e,decision:i,sessionId:s,taskId:r});let l=String(i).toUpperCase();this.emitOrchestrationBanner(l)}async emitOrchestrationBanner(t){let e=process.env[$];if(!e){a.warn("[v1-bridge] No tmux session set; cannot emit cross-device banner",{expectedEnv:$});return}let s=mt(t).replace(/"/g,'\\"'),r=`tmux display-message -d 8000 -t "${e}" "${s}"`;try{await Et(r),a.info("[v1-bridge] Cross-device decision banner emitted",{decision:t})}catch(n){a.warn("[v1-bridge] tmux display-message failed (non-fatal)",{error:n instanceof Error?n.message:String(n)})}}async originateUserDecision(t){this.v1Bridge.markOriginated(t.gateId);let e=this.sessionState?.sessionId;if(!e)throw this.v1Bridge.clearOriginated(t.gateId),new Error("No active session \u2014 cannot originate user decision");let i=this.orchestrationClient,s=!1;i||(i=await this.ensureOrchestrationClient(e),s=!0);try{await i.applyUserDecision(t),a.info("[v1-bridge] originated user decision",{gateId:t.gateId,decision:t.decision,sessionId:e})}catch(r){throw this.v1Bridge.clearOriginated(t.gateId),a.error("[v1-bridge] applyUserDecision failed (rolled back originator marker)",{gateId:t.gateId,decision:t.decision,error:r instanceof Error?r.message:String(r)}),r}finally{if(s&&i)try{await i.destroy()}catch{}}}_v1BridgeStateForTest(){return this.v1Bridge}_v1BridgeHandleEventForTest(t){this.handleApplyUserDecisionEvent(t)}async downloadAttachment(t,e,i,s){try{let r=t.isEncrypted??s??!1;a.info("Downloading attachment",{id:t.id,type:t.type,filename:t.filename,s3Key:t.s3Key,attachmentIsEncrypted:t.isEncrypted,eventIsEncrypted:s,shouldDecrypt:r});let{downloadUrl:n}=await this.appSyncClient.getAttachmentDownloadUrl(t.s3Key),l=await fetch(n);if(!l.ok)throw new Error(`Failed to download attachment: ${l.status} ${l.statusText}`);let p=Buffer.from(await l.arrayBuffer());if(r&&i)try{a.info("Decrypting attachment",{id:t.id}),p=m.cryptoService.decryptData(p,i),a.info("Attachment decrypted successfully",{id:t.id,decryptedSize:p.length})}catch(y){throw a.error("Failed to decrypt attachment:",{id:t.id,error:y}),new Error("Failed to decrypt attachment")}else if(r&&!i)return a.warn("Cannot decrypt attachment - no session key available",{id:t.id}),null;let d=k.join(De.tmpdir(),"codevibe-codex",e);H.existsSync(d)||H.mkdirSync(d,{recursive:!0});let c="";if(t.filename){let y=k.extname(t.filename);y&&(c=y)}c||(c={"image/jpeg":".jpg","image/png":".png","image/gif":".gif","image/webp":".webp","image/heic":".heic","application/pdf":".pdf"}[t.type]||".bin");let u=`attachment-${t.id}${c}`,f=k.join(d,u);return H.writeFileSync(f,p),a.info("Attachment saved to temp file",{id:t.id,filePath:f,size:p.length}),f}catch(r){return a.error("Failed to download attachment:",{id:t.id,error:r}),null}}async handleMobileEvent(t,e=this.sessionState){if(t.attachments&&t.attachments.length>0&&a.info("DEBUG: Raw attachment data from subscription",{attachments:JSON.stringify(t.attachments),eventIsEncrypted:t.isEncrypted}),a.info("Received mobile event",{eventId:t.eventId,type:t.type,content:t.content?.substring(0,50),attachmentCount:t.attachments?.length||0,isEncrypted:t.isEncrypted}),!e||!this.isExpectedSessionStateCurrent(e)||t.sessionId!==e.sessionId){a.warn("Dropping mobile event for stale or mismatched session generation",{eventSessionId:t.sessionId,expectedSessionId:e?.sessionId,currentSessionId:this.sessionState?.sessionId});return}let i=e.sessionId,{sessionKey:s}=e.encryptionSnapshot,r=t.content||"";if(t.isEncrypted){if(!s){a.error("Dropping encrypted mobile event without its session-pinned key",{eventId:t.eventId,sessionId:i});return}try{r=m.cryptoService.decryptContent(t.content,s),a.debug("Event decrypted successfully",{eventId:t.eventId})}catch(l){a.error("Failed to decrypt event:",{eventId:t.eventId,error:l});return}}let n=this.pendingInteractivePrompt;try{await this.appSyncClient.updateEventStatus({eventId:t.eventId,sessionId:t.sessionId,timestamp:t.timestamp,deliveryStatus:m.DeliveryStatus.DELIVERED})}catch(l){a.error("Failed to update delivery status:",l)}if(this.isExpectedSessionStateCurrent(e)&&(t.type===m.EventType.USER_PROMPT||t.type===m.EventType.PROMPT_RESPONSE)){let l=r,p=t.attachments||[],d=t.type===m.EventType.PROMPT_RESPONSE,c=null,u=!1,f=(0,m.classifyMobilePromptInput)(l,n?Object.keys(n.submitMap):[]);if(f.kind==="option"){let S=n;if(!S)u=!0,d=!1;else if(t.type===m.EventType.PROMPT_RESPONSE){let b=this.getEventPromptId(t),O=S.promptId;if(!b||b!==O){a.warn("Rejecting stale or unbound PROMPT_RESPONSE",{eventId:t.eventId,eventPromptId:b,activePromptId:O}),await this.emitRejectedPromptResponseNotification("prompt_id_mismatch",t,e);return}c=S}else d=!0,c=S,a.info("Treating approval-shaped USER_PROMPT as active prompt response",{eventId:t.eventId,activePromptId:S.promptId,promptPreview:l.slice(0,20)})}else d=!1,u=!0,a.info("Treating mobile input as conversation continuation",{eventId:t.eventId,activePromptId:n?.promptId,attachmentCount:p.length});let y=[];if(p.length>0){a.info("Downloading attachments for prompt",{count:p.length});for(let S of p){let b=await this.downloadAttachment(S,i,s,t.isEncrypted);if(!this.isExpectedSessionStateCurrent(e))return;b&&y.push(b)}if(y.length>0){let S=y.map(b=>`[Attached file: ${b}]`).join(`
+`)){let n=r.match(/^\s*(\d+)\s+(.*)$/);if(!n)continue;let l=Number.parseInt(n[1],10),p=n[2];if(Number.isFinite(l)){if(p.startsWith("-")){i??=l;continue}if(p.startsWith("+")){s??=l;continue}i??=l,s??=l}}return a.debug("Recovered diff line anchors from tmux snapshot",{oldStartLine:i,newStartLine:s,snapshotPreview:this.summarizePromptSnapshot(t)}),{oldStartLine:i,newStartLine:s}}subscribeToMobileEvents(t){let e=this.sessionState;if(!e||e.sessionId!==t)return a.warn("Refusing mobile subscription without matching session generation",{sessionId:t,currentSessionId:e?.sessionId}),!1;if(this.subscribedSessionId===t&&this.subscribedSessionState===e)return a.info("Already subscribed to mobile events, skipping",{sessionId:t}),!0;if(a.info("Subscribing to mobile events",{sessionId:t}),this.unsubscribe){try{this.unsubscribe()}catch(i){a.warn("Error cleaning up previous subscription (non-fatal)",{error:i})}this.subscribedSessionId=null,this.subscribedSessionState=null}try{this.unsubscribe=this.appSyncClient.subscribeToEvents(t,async i=>{await this.handleMobileEvent(i,e)},i=>{a.error("Subscription error:",i)},{onSessionRetired:()=>this.recoverRetiredBackendSession(t)}),this.subscribedSessionId=t,this.subscribedSessionState=e}catch(i){return a.error("Failed to subscribe to mobile events (non-fatal)",{sessionId:t,error:i}),!1}return this.isExpectedSessionStateCurrent(e)&&(e.subscriptionActive=!0),a.info("Subscribed to mobile events"),!0}async ensureOrchestrationClient(t){let{OrchestrationClient:e}=await import("@quantiya/quorum-core"),i=await m.keychainManager.getTokens((0,m.getEnvironment)());if(!i?.idToken)throw new Error("No Cognito ID token available \u2014 plugin must be logged in");let s=(0,m.getConfig)(),r=this.sessionKey??Buffer.alloc(32).toString("base64"),n=require("ws");return await e.connect({appsyncUrl:s.aws.appsyncUrl,cognitoIdToken:i.idToken,tokenProvider:async()=>(await m.keychainManager.getTokens((0,m.getEnvironment)()))?.idToken??i.idToken,sessionId:t,sessionKeyB64:r,webSocketFactory:((p,d)=>new n(p,d))})}async subscribeToOnApplyUserDecision(t){if(this.userDecisionUnsubscribe){try{this.userDecisionUnsubscribe()}catch(e){a.warn("Error invoking previous onApplyUserDecision unsubscribe (non-fatal)",{error:e})}this.userDecisionUnsubscribe=null}if(this.orchestrationClient){try{await this.orchestrationClient.destroy()}catch(e){a.warn("Error destroying previous OrchestrationClient (non-fatal)",{error:e})}this.orchestrationClient=null}try{let e=await this.ensureOrchestrationClient(t);this.orchestrationClient=e;let i=await e.onApplyUserDecision(s=>{this.handleApplyUserDecisionEvent(s)});return this.userDecisionUnsubscribe=i,a.info("[v1-bridge] Subscribed to onApplyUserDecision via OrchestrationClient",{sessionId:t}),!0}catch(e){if(a.error("Failed to subscribe to onApplyUserDecision (non-fatal)",{sessionId:t,error:e}),this.orchestrationClient){try{await this.orchestrationClient.destroy()}catch{}this.orchestrationClient=null}return!1}}handleApplyUserDecisionEvent(t){let{gateId:e,decision:i,sessionId:s,taskId:r}=t;if(this.v1Bridge.dispatch(t)==="self_echo"){a.debug("[v1-bridge] Self-origin decision echo absorbed",{gateId:e,decision:i,sessionId:s,taskId:r});return}a.info("[v1-bridge] cross-device decision recorded",{gateId:e,decision:i,sessionId:s,taskId:r});let l=String(i).toUpperCase();this.emitOrchestrationBanner(l)}async emitOrchestrationBanner(t){let e=process.env[$];if(!e){a.warn("[v1-bridge] No tmux session set; cannot emit cross-device banner",{expectedEnv:$});return}let s=gt(t).replace(/"/g,'\\"'),r=`tmux display-message -d 8000 -t "${e}" "${s}"`;try{await _t(r),a.info("[v1-bridge] Cross-device decision banner emitted",{decision:t})}catch(n){a.warn("[v1-bridge] tmux display-message failed (non-fatal)",{error:n instanceof Error?n.message:String(n)})}}async originateUserDecision(t){this.v1Bridge.markOriginated(t.gateId);let e=this.sessionState?.sessionId;if(!e)throw this.v1Bridge.clearOriginated(t.gateId),new Error("No active session \u2014 cannot originate user decision");let i=this.orchestrationClient,s=!1;i||(i=await this.ensureOrchestrationClient(e),s=!0);try{await i.applyUserDecision(t),a.info("[v1-bridge] originated user decision",{gateId:t.gateId,decision:t.decision,sessionId:e})}catch(r){throw this.v1Bridge.clearOriginated(t.gateId),a.error("[v1-bridge] applyUserDecision failed (rolled back originator marker)",{gateId:t.gateId,decision:t.decision,error:r instanceof Error?r.message:String(r)}),r}finally{if(s&&i)try{await i.destroy()}catch{}}}_v1BridgeStateForTest(){return this.v1Bridge}_v1BridgeHandleEventForTest(t){this.handleApplyUserDecisionEvent(t)}async downloadAttachment(t,e,i,s){try{let r=t.isEncrypted??s??!1;a.info("Downloading attachment",{id:t.id,type:t.type,filename:t.filename,s3Key:t.s3Key,attachmentIsEncrypted:t.isEncrypted,eventIsEncrypted:s,shouldDecrypt:r});let{downloadUrl:n}=await this.appSyncClient.getAttachmentDownloadUrl(t.s3Key),l=await fetch(n);if(!l.ok)throw new Error(`Failed to download attachment: ${l.status} ${l.statusText}`);let p=Buffer.from(await l.arrayBuffer());if(r&&i)try{a.info("Decrypting attachment",{id:t.id}),p=m.cryptoService.decryptData(p,i),a.info("Attachment decrypted successfully",{id:t.id,decryptedSize:p.length})}catch(y){throw a.error("Failed to decrypt attachment:",{id:t.id,error:y}),new Error("Failed to decrypt attachment")}else if(r&&!i)return a.warn("Cannot decrypt attachment - no session key available",{id:t.id}),null;let d=k.join(Ne.tmpdir(),"codevibe-codex",e);H.existsSync(d)||H.mkdirSync(d,{recursive:!0});let u="";if(t.filename){let y=k.extname(t.filename);y&&(u=y)}u||(u={"image/jpeg":".jpg","image/png":".png","image/gif":".gif","image/webp":".webp","image/heic":".heic","application/pdf":".pdf"}[t.type]||".bin");let c=`attachment-${t.id}${u}`,f=k.join(d,c);return H.writeFileSync(f,p),a.info("Attachment saved to temp file",{id:t.id,filePath:f,size:p.length}),f}catch(r){return a.error("Failed to download attachment:",{id:t.id,error:r}),null}}async handleMobileEvent(t,e=this.sessionState){if(t.attachments&&t.attachments.length>0&&a.info("DEBUG: Raw attachment data from subscription",{attachments:JSON.stringify(t.attachments),eventIsEncrypted:t.isEncrypted}),a.info("Received mobile event",{eventId:t.eventId,type:t.type,content:t.content?.substring(0,50),attachmentCount:t.attachments?.length||0,isEncrypted:t.isEncrypted}),!e||!this.isExpectedSessionStateCurrent(e)||t.sessionId!==e.sessionId){a.warn("Dropping mobile event for stale or mismatched session generation",{eventSessionId:t.sessionId,expectedSessionId:e?.sessionId,currentSessionId:this.sessionState?.sessionId});return}let i=e.sessionId,{sessionKey:s}=e.encryptionSnapshot,r=t.content||"";if(t.isEncrypted){if(!s){a.error("Dropping encrypted mobile event without its session-pinned key",{eventId:t.eventId,sessionId:i});return}try{r=m.cryptoService.decryptContent(t.content,s),a.debug("Event decrypted successfully",{eventId:t.eventId})}catch(l){a.error("Failed to decrypt event:",{eventId:t.eventId,error:l});return}}let n=this.pendingInteractivePrompt;try{await this.appSyncClient.updateEventStatus({eventId:t.eventId,sessionId:t.sessionId,timestamp:t.timestamp,deliveryStatus:m.DeliveryStatus.DELIVERED})}catch(l){a.error("Failed to update delivery status:",l)}if(this.isExpectedSessionStateCurrent(e)&&(t.type===m.EventType.USER_PROMPT||t.type===m.EventType.PROMPT_RESPONSE)){let l=r,p=t.attachments||[],d=t.type===m.EventType.PROMPT_RESPONSE,u=null,c=!1,f=(0,m.classifyMobilePromptInput)(l,n?Object.keys(n.submitMap):[]);if(f.kind==="option"){let S=n;if(!S)c=!0,d=!1;else if(t.type===m.EventType.PROMPT_RESPONSE){let b=this.getEventPromptId(t),O=S.promptId;if(!b||b!==O){a.warn("Rejecting stale or unbound PROMPT_RESPONSE",{eventId:t.eventId,eventPromptId:b,activePromptId:O}),await this.emitRejectedPromptResponseNotification("prompt_id_mismatch",t,e);return}u=S}else d=!0,u=S,a.info("Treating approval-shaped USER_PROMPT as active prompt response",{eventId:t.eventId,activePromptId:S.promptId,promptPreview:l.slice(0,20)})}else d=!1,c=!0,a.info("Treating mobile input as conversation continuation",{eventId:t.eventId,activePromptId:n?.promptId,attachmentCount:p.length});let y=[];if(p.length>0){a.info("Downloading attachments for prompt",{count:p.length});for(let S of p){let b=await this.downloadAttachment(S,i,s,t.isEncrypted);if(!this.isExpectedSessionStateCurrent(e))return;b&&y.push(b)}if(y.length>0){let S=y.map(b=>`[Attached file: ${b}]`).join(`
 `);l?l=`${S}
 
 ${l}`:l=`${S}
 
-Please analyze the attached file(s).`,a.info("Prompt updated with attachment paths",{attachmentCount:y.length,newPromptLength:l.length})}}if(d&&this.pendingInteractivePrompt!==c){a.info("Ignoring mobile prompt response already settled by a concurrent completion",{eventId:t.eventId,boundPromptId:c?.promptId,activePromptId:this.pendingInteractivePrompt?.promptId});return}let h=this.translatePromptResponse(l,f,c);if(!this.isExpectedSessionStateCurrent(e)||(h.primaryInput!==Y&&this.trackMobilePrompt(i,h.primaryInput),!this.isExpectedSessionStateCurrent(e)))return;let v=c?await this.sendVerifiedPromptInput(e,c,h.primaryInput):u?await this.sendConversationContinuation(e,h.primaryInput):await this.sendSessionPinnedInput(e,h.primaryInput)?"sent":"send_failed",P=v==="sent";if(!this.isExpectedSessionStateCurrent(e))return;P&&u&&(this.approvalDetector.clear(),this.clearInteractivePromptsForAcceptedInput(e)),(v==="stale"||v==="unverified")&&await this.emitRejectedPromptResponseNotification("live_prompt_unverified",t,e),!P&&h.primaryInput!==Y&&this.forgetMobilePrompt(i,h.primaryInput);let E=!0;if(P&&h.followUpInput){if(await new Promise(b=>setTimeout(b,200)),!this.isExpectedSessionStateCurrent(e)||(this.trackMobilePrompt(i,h.followUpInput),!this.isExpectedSessionStateCurrent(e))||(E=(c?await this.sendVerifiedFollowUpAfterDismissal(e,c,h.followUpInput):await this.sendSessionPinnedInput(e,h.followUpInput)?"sent":"send_failed")==="sent",!this.isExpectedSessionStateCurrent(e)))return;E||(await this.emitRejectedPromptResponseNotification("follow_up_delivery_failed",t,e),this.forgetMobilePrompt(i,h.followUpInput))}if(P&&d&&c&&this.pendingInteractivePrompt===c){let S=c;this.rememberResolvedApprovalDedupeKey(e.sessionId,S.dedupeKey),this.pendingInteractivePrompt=null;let b=this.beginE1PromptResolutions([S.promptId],e.sessionId);if(this.launchE1Resolutions(b),!this.isExpectedSessionStateCurrent(e)||(await this.emitNextQueuedInteractivePrompt(),!this.isExpectedSessionStateCurrent(e)))return}if(P&&E){if(!this.isExpectedSessionStateCurrent(e))return;try{await this.appSyncClient.updateEventStatus({eventId:t.eventId,sessionId:t.sessionId,timestamp:t.timestamp,deliveryStatus:m.DeliveryStatus.EXECUTED})}catch(S){a.error("Failed to update executed status:",S)}}}}buildToolActivityIntegration(){return new X({logger:a,createEvent:t=>this.appSyncClient.createEvent(t),encryptContent:(t,e)=>m.cryptoService.encryptContent(t,e),encryptMetadata:(t,e)=>m.cryptoService.encryptMetadata(t,e),getSessionKey:()=>this.sessionKey,getSessionKeyGen:()=>this.sessionKeyGen,refreshSessionKey:t=>this.refreshToolActivitySessionKey(t)})}async refreshToolActivitySessionKey(t){try{let e=await this.appSyncClient.getSession(t);if(e&&e.status===m.SessionStatus.INACTIVE){let n=new Error(`SESSION_TERMINAL: session ${t} is ${e.status}; stop retrying`);throw n.errorType="SessionTerminal",n}if(!e||e.status!==m.SessionStatus.ACTIVE||!e.isEncrypted)return null;let i=e.sessionKeyGen??null,s=e.encryptedKeys??[];if(s.length===0)return null;let r=await m.keychainManager.getSessionKey(t,s,i);return r?(a.info("[tool-activity] refreshed session key for SessionKeyStale retry (live key untouched)",{sessionId:t,sessionKeyGen:i}),{sessionKey:r,sessionKeyGen:i}):null}catch(e){if((0,m.isTerminalSessionError)(e))throw e;return a.warn("[tool-activity] session key refresh failed after SessionKeyStale (staying retryable)",{sessionId:t,error:String(e)}),null}}getToolActivityLegacyRecorder(t){let e=this.toolActivityLegacyRecorders.get(t);return e||(e=new m.ToolActivityLedger({agent:"codex",sessionId:t,logger:a}),this.toolActivityLegacyRecorders.set(t,e)),e}async ensureToolActivityStarted(t){if(!this.sessionState||!t)return;let e=this.sessionWatcher.getActiveLogFile()||this.sessionState.codexLogFile||void 0,i=this.toolActivity;if(i){e&&i.bindTranscript(e);return}if(this.toolActivityStartPromise){await this.toolActivityStartPromise,e&&this.toolActivity?.bindTranscript(e);return}if(!this.sessionKey)return;let s=this.sessionState.sessionId;this.toolActivityStartPromise=(async()=>{let r=this.buildToolActivityIntegration();try{await r.start(s,t,e),this.toolActivity=r}catch(n){throw await r.stop().catch(()=>{}),this.toolActivityStartPromise=null,n}})().catch(r=>{a.warn("[tool-activity] failed to start codex consolidator (non-fatal)",{backendSessionId:s,rolloutId:t,error:String(r)})}),await this.toolActivityStartPromise}startMobileEndWatcher(t){!this.sessionState||this.sessionState.sessionId!==t||(this.sessionState.mobileEndWatcher=this.appSyncClient.watchForMobileEnd(t,async()=>{a.info("Mobile ended session \u2014 sending desktop quit",{sessionId:t}),this.appSyncClient.stopHeartbeat(t),this.appSyncClient.cleanupSubscription(t);try{await this.appSyncClient.updateSession({sessionId:t,status:m.SessionStatus.INACTIVE}),a.info("Marked session INACTIVE on mobile-end (before tmux terminate)",{sessionId:t})}catch(i){a.warn("Failed to mark session INACTIVE on mobile-end",{sessionId:t,error:i})}let e=process.env[$];if(!e){a.warn("No tmux session set; skipping desktop self-terminate",{sessionId:t,expectedEnv:$});return}await Fi(e,Ti)}))}async endActiveSession(t,e=!0){if(!this.sessionState)return;let i=t,s=e,r=this.sessionState;if(this.terminalInputBlockedStates.add(r),await this.terminalInputChain.catch(()=>{}),this.sessionState!==r){a.warn("Session changed while waiting for terminal-input teardown barrier",{endingSessionId:r.sessionId,currentSessionId:this.sessionState?.sessionId,reason:i});return}if(a.info("Ending active session",{sessionId:r.sessionId,codexSessionId:r.codexSessionId,reason:i}),this.sessionState.mobileEndWatcher&&(this.sessionState.mobileEndWatcher.stop(),this.sessionState.mobileEndWatcher=void 0),this.userDecisionUnsubscribe){try{this.userDecisionUnsubscribe()}catch(n){a.warn("Error invoking onApplyUserDecision unsubscribe (non-fatal)",{error:n})}this.userDecisionUnsubscribe=null}if(this.orchestrationClient){try{await this.orchestrationClient.destroy()}catch(n){a.warn("Error destroying OrchestrationClient (non-fatal)",{error:n})}this.orchestrationClient=null}this.v1Bridge.clear(),this.appSyncClient.stopHeartbeat(this.sessionState.sessionId),this.stopE1TtlRefresh(),this.unsubscribe&&(this.unsubscribe(),this.unsubscribe=null,this.subscribedSessionId=null,this.subscribedSessionState=null),await this.tmuxPaneObserver.stop();for(let n of this.deferredTmuxPromptCandidates.keys())n.sessionId===r.sessionId&&this.deferredTmuxPromptCandidates.delete(n);this.queuedPermissionRequestRegistrations.delete(r.sessionId),this.terminalRetirementRequested&&(i="shutdown",s=!0),i==="shutdown"&&this.sessionWatcher.stop(),this.toolActivityStartPromise&&(await this.toolActivityStartPromise.catch(()=>{}),this.toolActivityStartPromise=null),await this.logEntryChain.catch(()=>{}),this.toolActivity&&(await this.toolActivity.stop(),this.toolActivity=null);for(let n of this.toolActivityLegacyRecorders.values())n.disposeLegacyCoordination();this.toolActivityLegacyRecorders.clear(),this.terminalRetirementRequested&&(i="shutdown",s=!0),i==="daemon-handoff"&&this.persistDaemonHandoffState(r),(i==="new-codex-session-started"||i==="shutdown")&&(await this.exactClearOpenE1ForLifecycleEnd(r.sessionId),await this.drainPendingE1ResolutionsForLifecycleEnd(),this.stopE1TtlRefresh()),i!=="backend-generation-retired"&&i!=="daemon-handoff"&&(this.permissionRequestOccurrencesByCompletionKey.clear(),this.waitingPermissionRequests.clear()),this.pendingInteractivePrompt=null,this.queuedInteractivePrompts=[],this.isInitializingSession=!1,this.bufferedLogEntries=[],Te(),this.sessionKey&&(m.keychainManager.clearSessionKey(this.sessionState.sessionId),this.sessionKey=null,this.sessionKeyGen=null),this.terminalRetirementRequested&&(s=!0),s?await this.retireHostedSession(this.sessionState.sessionId):a.info("Preserving active backend session for daemon handoff",{sessionId:this.sessionState.sessionId}),this.sessionState=null}async retireHostedSession(t){let e;for(let i=1;i<=ve;i+=1)try{await this.appSyncClient.updateSession({sessionId:t,status:m.SessionStatus.INACTIVE});return}catch(s){e=s,a.warn("Failed to retire hosted Codex session",{sessionId:t,attempt:i,maxAttempts:ve,error:s instanceof Error?s.message:String(s)}),i<ve&&await new Promise(r=>setTimeout(r,Oi*i))}throw new Error(`Failed to retire hosted Codex session ${t} after ${ve} attempts: ${String(e)}`)}async cleanupDetachedWrapperArtifacts(){let t=process.env.CODEVIBE_CODEX_WRAPPER_PID;if(!t||!/^\d+$/.test(t))return;let e=process.env.TMPDIR||De.tmpdir(),i=[k.join(e,`codevibe-codex-server-${t}.pid`),k.join(e,`codevibe-codex-exit-${t}`),k.join(e,`codevibe-codex-tmux-session-${t}`)];for(let s of i)try{H.unlinkSync(s)}catch(r){r?.code!=="ENOENT"&&a.warn("Failed to remove detached-wrapper artifact",{ownedPath:s,error:String(r)})}}stop(t={}){return t.retireBackendSession!==!1&&(this.terminalRetirementRequested=!0),this.stopPromise?this.stopPromise:(this.stopPromise=this.doStop(),this.stopPromise)}async doStop(){a.info("Stopping CodeVibe Codex companion server"),this.stopTmuxLifecycleMonitor(),this.isStopping=!0,this.lifecycleGeneration+=1,this.sessionWatcher.stop();let t=this.launchSessionInitPromise,e=this.sessionStartedInitPromise,i=this.retiredSessionRecoveryPromise,s=this.hookEventChain,r=typeof this.sessionWatcher.waitForTranscriptAdmissions=="function"?this.sessionWatcher.waitForTranscriptAdmissions():Promise.resolve();await Promise.all([t?.catch(()=>{}),e?.catch(()=>{}),i?.catch(()=>{}),r.catch(()=>{}),s.catch(()=>{})]);try{let n=this.terminalRetirementRequested;await this.endActiveSession(n?"shutdown":"daemon-handoff",n),this.sessionWatcher.stop(),this.approvalDetector.shutdown(),Te()}finally{await this.httpApi.stop(),this.appSyncClient.cleanupSubscriptions(),this.terminalRetirementRequested&&await this.cleanupDetachedWrapperArtifacts()}a.info("CodeVibe Codex companion server stopped")}};if(require.main===module){let o=new Pe;for(let t of Rt)process.on(t,()=>{a.info(`Received ${t}, evaluating terminal shutdown...`),o.stopForTerminalSignal(t).then(e=>{e&&process.exit(0)},e=>{a.error(`Failed to stop companion daemon after ${t}`,{error:e instanceof Error?e.message:String(e)}),process.exit(1)})});process.on("SIGUSR2",async()=>{a.info("Received SIGUSR2, handing off active session to replacement daemon..."),await o.stop({retireBackendSession:!1}),process.exit(0)}),(0,m.installDaemonProcessGuards)(a,{onFatal:()=>{o.stop().finally(()=>process.exit(1))}}),o.start().catch(t=>{a.error("Failed to start server:",t),process.exit(1)})}0&&(module.exports={CodexCompanionServer,TERMINAL_SHUTDOWN_SIGNALS,classifyTmuxHasSessionError,extractShellCommandFromPromptText,extractShellCommandPartsFromPromptText,restoreCodexPersistOptionCommand,shellCommandPartsMatchExpected});
+Please analyze the attached file(s).`,a.info("Prompt updated with attachment paths",{attachmentCount:y.length,newPromptLength:l.length})}}if(d&&this.pendingInteractivePrompt!==u){a.info("Ignoring mobile prompt response already settled by a concurrent completion",{eventId:t.eventId,boundPromptId:u?.promptId,activePromptId:this.pendingInteractivePrompt?.promptId});return}let h=this.translatePromptResponse(l,f,u);if(!this.isExpectedSessionStateCurrent(e)||(h.primaryInput!==Y&&this.trackMobilePrompt(i,h.primaryInput),!this.isExpectedSessionStateCurrent(e)))return;let v=u?await this.sendVerifiedPromptInput(e,u,h.primaryInput):c?await this.sendConversationContinuation(e,h.primaryInput):await this.sendSessionPinnedInput(e,h.primaryInput)?"sent":"send_failed",P=v==="sent";if(!this.isExpectedSessionStateCurrent(e))return;P&&c&&(this.approvalDetector.clear(),this.clearInteractivePromptsForAcceptedInput(e)),(v==="stale"||v==="unverified")&&await this.emitRejectedPromptResponseNotification("live_prompt_unverified",t,e),!P&&h.primaryInput!==Y&&this.forgetMobilePrompt(i,h.primaryInput);let E=!0;if(P&&h.followUpInput){if(await new Promise(b=>setTimeout(b,200)),!this.isExpectedSessionStateCurrent(e)||(this.trackMobilePrompt(i,h.followUpInput),!this.isExpectedSessionStateCurrent(e))||(E=(u?await this.sendVerifiedFollowUpAfterDismissal(e,u,h.followUpInput):await this.sendSessionPinnedInput(e,h.followUpInput)?"sent":"send_failed")==="sent",!this.isExpectedSessionStateCurrent(e)))return;E||(await this.emitRejectedPromptResponseNotification("follow_up_delivery_failed",t,e),this.forgetMobilePrompt(i,h.followUpInput))}if(P&&d&&u&&!u.terminalMenuIdentity&&this.pendingInteractivePrompt===u){let S=u;this.rememberResolvedApprovalDedupeKey(e.sessionId,S.dedupeKey),this.pendingInteractivePrompt=null;let b=this.beginE1PromptResolutions([S.promptId],e.sessionId);if(this.launchE1Resolutions(b),!this.isExpectedSessionStateCurrent(e)||(await this.emitNextQueuedInteractivePrompt(),!this.isExpectedSessionStateCurrent(e)))return}if(P&&E){if(!this.isExpectedSessionStateCurrent(e))return;try{await this.appSyncClient.updateEventStatus({eventId:t.eventId,sessionId:t.sessionId,timestamp:t.timestamp,deliveryStatus:m.DeliveryStatus.EXECUTED})}catch(S){a.error("Failed to update executed status:",S)}}}}buildToolActivityIntegration(){return new X({logger:a,createEvent:t=>this.appSyncClient.createEvent(t),encryptContent:(t,e)=>m.cryptoService.encryptContent(t,e),encryptMetadata:(t,e)=>m.cryptoService.encryptMetadata(t,e),getSessionKey:()=>this.sessionKey,getSessionKeyGen:()=>this.sessionKeyGen,refreshSessionKey:t=>this.refreshToolActivitySessionKey(t)})}async refreshToolActivitySessionKey(t){try{let e=await this.appSyncClient.getSession(t);if(e&&e.status===m.SessionStatus.INACTIVE){let n=new Error(`SESSION_TERMINAL: session ${t} is ${e.status}; stop retrying`);throw n.errorType="SessionTerminal",n}if(!e||e.status!==m.SessionStatus.ACTIVE||!e.isEncrypted)return null;let i=e.sessionKeyGen??null,s=e.encryptedKeys??[];if(s.length===0)return null;let r=await m.keychainManager.getSessionKey(t,s,i);return r?(a.info("[tool-activity] refreshed session key for SessionKeyStale retry (live key untouched)",{sessionId:t,sessionKeyGen:i}),{sessionKey:r,sessionKeyGen:i}):null}catch(e){if((0,m.isTerminalSessionError)(e))throw e;return a.warn("[tool-activity] session key refresh failed after SessionKeyStale (staying retryable)",{sessionId:t,error:String(e)}),null}}getToolActivityLegacyRecorder(t){let e=this.toolActivityLegacyRecorders.get(t);return e||(e=new m.ToolActivityLedger({agent:"codex",sessionId:t,logger:a}),this.toolActivityLegacyRecorders.set(t,e)),e}async ensureToolActivityStarted(t){if(!this.sessionState||!t)return;let e=this.sessionWatcher.getActiveLogFile()||this.sessionState.codexLogFile||void 0,i=this.toolActivity;if(i){e&&i.bindTranscript(e);return}if(this.toolActivityStartPromise){await this.toolActivityStartPromise,e&&this.toolActivity?.bindTranscript(e);return}if(!this.sessionKey)return;let s=this.sessionState.sessionId;this.toolActivityStartPromise=(async()=>{let r=this.buildToolActivityIntegration();try{await r.start(s,t,e),this.toolActivity=r}catch(n){throw await r.stop().catch(()=>{}),this.toolActivityStartPromise=null,n}})().catch(r=>{a.warn("[tool-activity] failed to start codex consolidator (non-fatal)",{backendSessionId:s,rolloutId:t,error:String(r)})}),await this.toolActivityStartPromise}startMobileEndWatcher(t){!this.sessionState||this.sessionState.sessionId!==t||(this.sessionState.mobileEndWatcher=this.appSyncClient.watchForMobileEnd(t,async()=>{a.info("Mobile ended session \u2014 sending desktop quit",{sessionId:t}),this.appSyncClient.stopHeartbeat(t),this.appSyncClient.cleanupSubscription(t);try{await this.appSyncClient.updateSession({sessionId:t,status:m.SessionStatus.INACTIVE}),a.info("Marked session INACTIVE on mobile-end (before tmux terminate)",{sessionId:t})}catch(i){a.warn("Failed to mark session INACTIVE on mobile-end",{sessionId:t,error:i})}let e=process.env[$];if(!e){a.warn("No tmux session set; skipping desktop self-terminate",{sessionId:t,expectedEnv:$});return}await Mi(e,Ci)}))}async endActiveSession(t,e=!0){if(!this.sessionState)return;let i=t,s=e,r=this.sessionState;if(this.terminalInputBlockedStates.add(r),await this.terminalInputChain.catch(()=>{}),this.sessionState!==r){a.warn("Session changed while waiting for terminal-input teardown barrier",{endingSessionId:r.sessionId,currentSessionId:this.sessionState?.sessionId,reason:i});return}if(a.info("Ending active session",{sessionId:r.sessionId,codexSessionId:r.codexSessionId,reason:i}),this.sessionState.mobileEndWatcher&&(this.sessionState.mobileEndWatcher.stop(),this.sessionState.mobileEndWatcher=void 0),this.userDecisionUnsubscribe){try{this.userDecisionUnsubscribe()}catch(n){a.warn("Error invoking onApplyUserDecision unsubscribe (non-fatal)",{error:n})}this.userDecisionUnsubscribe=null}if(this.orchestrationClient){try{await this.orchestrationClient.destroy()}catch(n){a.warn("Error destroying OrchestrationClient (non-fatal)",{error:n})}this.orchestrationClient=null}this.v1Bridge.clear(),this.appSyncClient.stopHeartbeat(this.sessionState.sessionId),this.stopE1TtlRefresh(),this.unsubscribe&&(this.unsubscribe(),this.unsubscribe=null,this.subscribedSessionId=null,this.subscribedSessionState=null),await this.tmuxPaneObserver.stop();for(let n of this.deferredTmuxPromptCandidates.keys())n.sessionId===r.sessionId&&this.deferredTmuxPromptCandidates.delete(n);this.queuedPermissionRequestRegistrations.delete(r.sessionId),this.terminalRetirementRequested&&(i="shutdown",s=!0),i==="shutdown"&&this.sessionWatcher.stop(),this.toolActivityStartPromise&&(await this.toolActivityStartPromise.catch(()=>{}),this.toolActivityStartPromise=null),await this.logEntryChain.catch(()=>{}),this.toolActivity&&(await this.toolActivity.stop(),this.toolActivity=null);for(let n of this.toolActivityLegacyRecorders.values())n.disposeLegacyCoordination();this.toolActivityLegacyRecorders.clear(),this.terminalRetirementRequested&&(i="shutdown",s=!0),i==="daemon-handoff"&&this.persistDaemonHandoffState(r),(i==="new-codex-session-started"||i==="shutdown")&&(await this.exactClearOpenE1ForLifecycleEnd(r.sessionId),await this.drainPendingE1ResolutionsForLifecycleEnd(),this.stopE1TtlRefresh()),i!=="backend-generation-retired"&&i!=="daemon-handoff"&&(this.permissionRequestOccurrencesByCompletionKey.clear(),this.waitingPermissionRequests.clear()),this.pendingInteractivePrompt=null,this.queuedInteractivePrompts=[],this.isInitializingSession=!1,this.bufferedLogEntries=[],Ce(),this.sessionKey&&(m.keychainManager.clearSessionKey(this.sessionState.sessionId),this.sessionKey=null,this.sessionKeyGen=null),this.terminalRetirementRequested&&(s=!0),s?await this.retireHostedSession(this.sessionState.sessionId):a.info("Preserving active backend session for daemon handoff",{sessionId:this.sessionState.sessionId}),this.sessionState=null}async retireHostedSession(t){let e;for(let i=1;i<=Pe;i+=1)try{await this.appSyncClient.updateSession({sessionId:t,status:m.SessionStatus.INACTIVE});return}catch(s){e=s,a.warn("Failed to retire hosted Codex session",{sessionId:t,attempt:i,maxAttempts:Pe,error:s instanceof Error?s.message:String(s)}),i<Pe&&await new Promise(r=>setTimeout(r,ki*i))}throw new Error(`Failed to retire hosted Codex session ${t} after ${Pe} attempts: ${String(e)}`)}async cleanupDetachedWrapperArtifacts(){let t=process.env.CODEVIBE_CODEX_WRAPPER_PID;if(!t||!/^\d+$/.test(t))return;let e=process.env.TMPDIR||Ne.tmpdir(),i=[k.join(e,`codevibe-codex-server-${t}.pid`),k.join(e,`codevibe-codex-exit-${t}`),k.join(e,`codevibe-codex-tmux-session-${t}`)];for(let s of i)try{H.unlinkSync(s)}catch(r){r?.code!=="ENOENT"&&a.warn("Failed to remove detached-wrapper artifact",{ownedPath:s,error:String(r)})}}stop(t={}){return t.retireBackendSession!==!1&&(this.terminalRetirementRequested=!0),this.stopPromise?this.stopPromise:(this.stopPromise=this.doStop(),this.stopPromise)}async doStop(){a.info("Stopping CodeVibe Codex companion server"),this.stopTmuxLifecycleMonitor(),this.isStopping=!0,this.lifecycleGeneration+=1,this.sessionWatcher.stop();let t=this.launchSessionInitPromise,e=this.sessionStartedInitPromise,i=this.retiredSessionRecoveryPromise,s=this.hookEventChain,r=typeof this.sessionWatcher.waitForTranscriptAdmissions=="function"?this.sessionWatcher.waitForTranscriptAdmissions():Promise.resolve();await Promise.all([t?.catch(()=>{}),e?.catch(()=>{}),i?.catch(()=>{}),r.catch(()=>{}),s.catch(()=>{})]);try{let n=this.terminalRetirementRequested;await this.endActiveSession(n?"shutdown":"daemon-handoff",n),this.sessionWatcher.stop(),this.approvalDetector.shutdown(),Ce()}finally{await this.httpApi.stop(),this.appSyncClient.cleanupSubscriptions(),this.terminalRetirementRequested&&await this.cleanupDetachedWrapperArtifacts()}a.info("CodeVibe Codex companion server stopped")}};if(require.main===module){let o=new be;for(let t of Tt)process.on(t,()=>{a.info(`Received ${t}, evaluating terminal shutdown...`),o.stopForTerminalSignal(t).then(e=>{e&&process.exit(0)},e=>{a.error(`Failed to stop companion daemon after ${t}`,{error:e instanceof Error?e.message:String(e)}),process.exit(1)})});process.on("SIGUSR2",async()=>{a.info("Received SIGUSR2, handing off active session to replacement daemon..."),await o.stop({retireBackendSession:!1}),process.exit(0)}),(0,m.installDaemonProcessGuards)(a,{onFatal:()=>{o.stop().finally(()=>process.exit(1))}}),o.start().catch(t=>{a.error("Failed to start server:",t),process.exit(1)})}0&&(module.exports={CodexCompanionServer,TERMINAL_SHUTDOWN_SIGNALS,classifyTmuxHasSessionError,extractShellCommandFromPromptText,extractShellCommandPartsFromPromptText,restoreCodexPersistOptionCommand,shellCommandPartsMatchExpected});