@raidiant/notifai 11.7.1 → 12.0.0-beta.6

package/dist/codex-question-bindings.d.ts

@@ -1,76 +0,0 @@
-import type { QuestionT, ReplyAnswerT } from '@raidiant/notifai-protocol';
-import type { ServiceIdentity } from './credentials.js';
-import type { PendingQuestion, SessionState } from './hook-types.js';
-import type { NativeTurnSnapshot } from './codex-native-turn.js';
-export interface CodexQuestionBinding {
-    question: QuestionT;
-    marker: string;
-    native?: {
-        turn_id: string;
-        call_id: string;
-        index: number;
-    };
-    /** Recomputed from a fresh full registration-turn snapshot before use. */
-    verified?: true;
-    /** A second occurrence permanently removes this marker's authority. */
-    ambiguous?: true;
-}
-export interface CodexQuestionRegistration {
-    question_id: string;
-    owner_key: string;
-    registration_turn_id: string;
-    transcript: {
-        file: string;
-        identity: string;
-        registered_offset: number;
-    };
-    service_identity: ServiceIdentity;
-    questions: CodexQuestionBinding[];
-    /** Positive receipt evidence only; never an unconfirmed reserved ID. */
-    confirmed_request_id?: string;
-    /** Ordinary presentation is sticky, including an uncertain stdout write. */
-    ordinary_only?: true;
-    /** Explicit retirement/withdrawal cannot become native authority again. */
-    terminated?: true;
-}
-export declare function nativeQuestionTitle(binding: CodexQuestionBinding): string;
-/** Invocation-local service permission; never stored or reused for later asks. */
-export interface NativeQuestionAdmission {
-    owner_key: string;
-    turn_id: string;
-    service: ServiceIdentity;
-}
-/** Read-only local eligibility. Registration repeats this under its lock. */
-export declare function currentCodexQuestionContext(state: SessionState, sessionId: string, env: NodeJS.ProcessEnv): {
-    owner_key: string;
-    snapshot: NativeTurnSnapshot;
-} | null;
-/** Called by registration while holding the session lock. Capability absence
- * leaves the ordinary registration untouched and creates no native authority.
- */
-export declare function reserveCurrentCodexQuestion(state: SessionState, pending: PendingQuestion, sessionId: string, env: NodeJS.ProcessEnv, admission?: NativeQuestionAdmission): SessionState;
-/** Caller holds the registration transaction and has proved the current owner.
- * Reservation and pending registration must be saved in that single write.
- * This creates no native question; only the agent's real tool call can do that.
- */
-export declare function reserveCodexQuestion(state: SessionState, pending: PendingQuestion, key: string, snapshot: NativeTurnSnapshot): SessionState;
-/** Count every marker occurrence before shape filtering. A changed-options
- * duplicate is still ambiguous. Missing/truncated/replaced evidence removes
- * current eligibility without forgetting the original tuple or ambiguity.
- */
-export declare function observeCodexQuestions(state: SessionState, key: string, snapshot: NativeTurnSnapshot | null): SessionState;
-/** Mark in the same transaction that consumes the ordinary app answer. */
-export declare function markCodexOrdinaryPresentation(state: SessionState, questionIds: ReadonlySet<string>): SessionState;
-/** Explicit cancellation only, in the transaction selecting the questions. */
-export declare function terminateCodexQuestions(state: SessionState, ids: ReadonlySet<string>): SessionState;
-/** Reservation protects early native answers before the emission observer runs.
- * Apply after matching all pending questions, so sibling ambiguity is preserved.
- */
-export declare function mayRetireFromPrompt(state: SessionState, pending: PendingQuestion): boolean;
-/** The caller refreshes observation under the owner fence before admission.
- * A fresh native answer remains reportable after ordinary app presentation.
- */
-export declare function admitBoundNativeAnswer(state: SessionState, questionId: string, key: string, service: ServiceIdentity, answers: ReplyAnswerT[]): {
-    requestId?: string;
-    service: ServiceIdentity;
-};

package/dist/codex-question-bindings.js

@@ -1,151 +0,0 @@
-/** Local association of registered questions with actual accepted Codex forms. */
-import { isDeepStrictEqual } from 'node:util';
-import { readNativeQuestionSnapshot } from './codex-native-turn.js';
-import { readSessionIncarnation, sessionHasEnded } from './hook-session-state.js';
-import { currentCodexTurn } from './session-attendant-state.js';
-import { processIdentityLiveness } from './process-identity.js';
-export function nativeQuestionTitle(binding) {
-    return `[nf:${binding.marker}] ${binding.question.text}`;
-}
-/** Read-only local eligibility. Registration repeats this under its lock. */
-export function currentCodexQuestionContext(state, sessionId, env) {
-    const owner = readSessionIncarnation(sessionId, env);
-    const proof = state.codex_native_turn;
-    if (state.harness !== 'codex' || owner === null || proof?.key !== owner.key || sessionHasEnded(sessionId, env) ||
-        owner.harness_process === undefined || processIdentityLiveness(owner.harness_process) !== 'alive' ||
-        state.codex_tool_hook?.incarnation !== owner.incarnation || state.codex_tool_hook.root_observed?.turn_id !== proof.turn_id ||
-        currentCodexTurn(sessionId, env, owner.key) !== proof.turn_id)
-        return null;
-    const snapshot = readNativeQuestionSnapshot(proof.transcript_path, sessionId, env);
-    if (snapshot === null || snapshot.latest.id !== proof.turn_id || snapshot.latest.ended)
-        return null;
-    return { owner_key: owner.key, snapshot };
-}
-/** Called by registration while holding the session lock. Capability absence
- * leaves the ordinary registration untouched and creates no native authority.
- */
-export function reserveCurrentCodexQuestion(state, pending, sessionId, env, admission) {
-    if (admission === undefined || !isDeepStrictEqual(admission.service, pending.service_identity))
-        return state;
-    const current = currentCodexQuestionContext(state, sessionId, env);
-    if (current === null || current.owner_key !== admission.owner_key || current.snapshot.latest.id !== admission.turn_id)
-        return state;
-    return reserveCodexQuestion(state, pending, current.owner_key, current.snapshot);
-}
-/** Caller holds the registration transaction and has proved the current owner.
- * Reservation and pending registration must be saved in that single write.
- * This creates no native question; only the agent's real tool call can do that.
- */
-export function reserveCodexQuestion(state, pending, key, snapshot) {
-    if (state.harness !== 'codex' || pending.question_id === undefined || pending.service_identity === undefined ||
-        snapshot.latest.ended || snapshot.questions === undefined || !snapshot.positions.has(snapshot.latest.id) ||
-        pending.questions === undefined || pending.questions.length === 0 ||
-        pending.questions.some(question => question.multi === true) ||
-        state.codex_question_bindings?.some(item => item.question_id === pending.question_id))
-        return state;
-    const used = new Set((state.codex_question_bindings ?? []).flatMap(item => item.questions.map(q => q.marker)));
-    // Avoid even an unrelated previously emitted marker visible in this turn.
-    for (const emission of snapshot.questions) {
-        for (const match of emission.title.matchAll(/\[nf:([0-9A-Z]+)\]/g))
-            used.add(match[1]);
-    }
-    let counter = state.codex_question_marker_counter ?? 0;
-    if (!Number.isSafeInteger(counter) || counter < 0)
-        return state;
-    const questions = [];
-    for (const question of pending.questions) {
-        let marker;
-        do {
-            if (counter >= Number.MAX_SAFE_INTEGER)
-                return state;
-            marker = (++counter).toString(36).toUpperCase().padStart(3, '0');
-        } while (used.has(marker));
-        used.add(marker);
-        questions.push({ question: structuredClone(question), marker });
-    }
-    return { ...state, codex_question_marker_counter: counter, codex_question_bindings: [
-            ...(state.codex_question_bindings ?? []), {
-                question_id: pending.question_id, owner_key: key, registration_turn_id: snapshot.latest.id,
-                transcript: { file: snapshot.file, identity: snapshot.identity, registered_offset: snapshot.size },
-                service_identity: { ...pending.service_identity }, questions,
-            },
-        ] };
-}
-/** Count every marker occurrence before shape filtering. A changed-options
- * duplicate is still ambiguous. Missing/truncated/replaced evidence removes
- * current eligibility without forgetting the original tuple or ambiguity.
- */
-export function observeCodexQuestions(state, key, snapshot) {
-    if (state.codex_question_bindings === undefined)
-        return state;
-    return { ...state, codex_question_bindings: state.codex_question_bindings.map(registration => {
-            const covered = registration.terminated !== true && registration.owner_key === key && snapshot !== null &&
-                snapshot.file === registration.transcript.file && snapshot.identity === registration.transcript.identity &&
-                snapshot.size >= registration.transcript.registered_offset && snapshot.positions.has(registration.registration_turn_id);
-            return { ...registration, questions: registration.questions.map(binding => {
-                    const next = { ...binding };
-                    delete next.verified;
-                    if (!covered || binding.ambiguous === true)
-                        return next;
-                    const matches = snapshot.questions?.filter(emission => emission.accepted && emission.title.includes(`[nf:${binding.marker}]`)) ?? [];
-                    // Count multiple copies of the token in a single title as ambiguous too.
-                    if (matches.length > 1 || matches.some(emission => emission.title.split(`[nf:${binding.marker}]`).length !== 2)) {
-                        return { ...next, ambiguous: true };
-                    }
-                    const emission = matches[0];
-                    if (emission === undefined || emission.offset < registration.transcript.registered_offset ||
-                        emission.turn_id !== registration.registration_turn_id ||
-                        emission.title !== nativeQuestionTitle(binding) ||
-                        !isDeepStrictEqual(emission.options, binding.question.choices?.map(choice => choice.label)))
-                        return next;
-                    const native = { turn_id: emission.turn_id, call_id: emission.call_id, index: emission.index };
-                    if (binding.native !== undefined && !isDeepStrictEqual(binding.native, native))
-                        return { ...next, ambiguous: true };
-                    return { ...next, native, verified: true };
-                }) };
-        }) };
-}
-/** Mark in the same transaction that consumes the ordinary app answer. */
-export function markCodexOrdinaryPresentation(state, questionIds) {
-    if (!state.codex_question_bindings?.some(item => questionIds.has(item.question_id)))
-        return state;
-    return { ...state, codex_question_bindings: state.codex_question_bindings.map(item => questionIds.has(item.question_id) ? { ...item, ordinary_only: true } : item) };
-}
-/** Explicit cancellation only, in the transaction selecting the questions. */
-export function terminateCodexQuestions(state, ids) {
-    if (state.codex_question_bindings === undefined)
-        return state;
-    return { ...state, codex_question_bindings: state.codex_question_bindings.map(binding => ids.has(binding.question_id) || (binding.confirmed_request_id !== undefined && ids.has(binding.confirmed_request_id))
-            ? { ...binding, terminated: true } : binding),
-    };
-}
-/** Reservation protects early native answers before the emission observer runs.
- * Apply after matching all pending questions, so sibling ambiguity is preserved.
- */
-export function mayRetireFromPrompt(state, pending) {
-    return !state.codex_question_bindings?.some(item => item.question_id === pending.question_id);
-}
-/** The caller refreshes observation under the owner fence before admission.
- * A fresh native answer remains reportable after ordinary app presentation.
- */
-export function admitBoundNativeAnswer(state, questionId, key, service, answers) {
-    const registration = state.codex_question_bindings?.find(item => item.question_id === questionId);
-    if (registration === undefined || registration.terminated === true || registration.owner_key !== key || !isDeepStrictEqual(registration.service_identity, service)) {
-        throw new Error('The native question is not registered to this owner and Approved Machine.');
-    }
-    if (answers.length === 0 || new Set(answers.map(answer => answer.question_id)).size !== answers.length)
-        throw new Error('Native answers must name distinct registered questions.');
-    for (const answer of answers) {
-        const binding = registration.questions.find(item => item.question.id === answer.question_id);
-        const choices = answer.choice_ids ?? [];
-        if (binding?.verified !== true || binding.native === undefined || binding.ambiguous === true ||
-            new Set(choices).size !== choices.length || (binding.question.multi !== true && choices.length > 1) ||
-            choices.some(id => !binding.question.choices?.some(choice => choice.id === id)) ||
-            (choices.length === 0 && !answer.text?.trim())) {
-            throw new Error('The answer does not match one verified native question and its registered choices.');
-        }
-    }
-    return { service: registration.service_identity,
-        ...(registration.confirmed_request_id === undefined ? {} : { requestId: registration.confirmed_request_id }) };
-}
-//# sourceMappingURL=codex-question-bindings.js.map

package/dist/codex-question-bindings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-question-bindings.js","sourceRoot":"","sources":["../src/codex-question-bindings.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAK7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AACnE,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AA2B/D,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;AAC1D,CAAC;AASD,6EAA6E;AAC7E,MAAM,UAAU,2BAA2B,CAAC,KAAmB,EAAE,SAAiB,EAAE,GAAsB;IAExG,MAAM,KAAK,GAAG,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAA;IACrC,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,EAAE,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC;QAC1G,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,OAAO;QACjG,KAAK,CAAC,eAAe,EAAE,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,eAAe,CAAC,aAAa,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO;QAC1H,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAC9E,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAClF,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACnG,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAA;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAmB,EAAE,OAAwB,EAAE,SAAiB,EAAE,GAAsB,EAClI,SAAmC;IACnC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5G,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAClE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,OAAO;QAAE,OAAO,KAAK,CAAA;IACnI,OAAO,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;AAClF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EAAE,OAAwB,EAAE,GAAW,EAAE,QAA4B;IAExF,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACxG,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxG,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QACjE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC;QAC3D,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IACvG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC9G,0EAA0E;IAC1E,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC,6BAA6B,IAAI,CAAC,CAAA;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/D,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,MAAc,CAAA;QAClB,GAAG,CAAC;YACF,IAAI,OAAO,IAAI,MAAM,CAAC,gBAAgB;gBAAE,OAAO,KAAK,CAAA;YACpD,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAClE,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAChB,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,6BAA6B,EAAE,OAAO,EAAE,uBAAuB,EAAE;YAClF,GAAG,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,EAAE;gBACxC,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE;gBAC1F,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE;gBAClG,gBAAgB,EAAE,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,EAAE,SAAS;aAC7D;SACF,EAAE,CAAA;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAmB,EAAE,GAAW,EAAE,QAAmC;IACzG,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC7D,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE;YAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,KAAK,IAAI,IAAI,YAAY,CAAC,SAAS,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI;gBACrG,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC,UAAU,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,CAAC,UAAU,CAAC,QAAQ;gBACxG,QAAQ,CAAC,IAAI,IAAI,YAAY,CAAC,UAAU,CAAC,iBAAiB,IAAI,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAA;YACzH,OAAO,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;oBACxE,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,CAAA;oBAC3B,OAAO,IAAI,CAAC,QAAQ,CAAA;oBACpB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;wBAAE,OAAO,IAAI,CAAA;oBACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;oBACpI,yEAAyE;oBACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;wBAChH,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAa,EAAE,CAAA;oBAC9C,CAAC;oBACD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;oBAC3B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,iBAAiB;wBACrF,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,oBAAoB;wBACtD,QAAQ,CAAC,KAAK,KAAK,mBAAmB,CAAC,OAAO,CAAC;wBAC/C,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAAE,OAAO,IAAI,CAAA;oBAC5G,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAA;oBAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;wBAAE,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAa,EAAE,CAAA;oBAC5H,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAA;gBACrD,CAAC,CAAC,EAAE,CAAA;QACN,CAAC,CAAC,EAAE,CAAA;AACN,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,6BAA6B,CAAC,KAAmB,EAAE,WAAgC;IACjG,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACjG,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CACnF,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAA;AAClF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,KAAmB,EAAE,GAAwB;IACnF,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC7D,OAAO,EAAE,GAAG,KAAK,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CACtF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACnH,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;KAChD,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB,EAAE,OAAwB;IAC/E,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;AAC/F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAmB,EAAE,UAAkB,EAAE,GAAW,EAAE,OAAwB,EAAE,OAAuB;IAEvG,MAAM,YAAY,GAAG,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,UAAU,CAAC,CAAA;IACjG,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,UAAU,KAAK,IAAI,IAAI,YAAY,CAAC,SAAS,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,CAAC;QACnK,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAClL,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC,CAAA;QAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAA;QACvC,IAAI,OAAO,EAAE,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;YACxF,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAA;QACvG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,gBAAgB;QAC7C,GAAG,CAAC,YAAY,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAA;AAClH,CAAC"}

package/dist/codex-queue-control.d.ts

@@ -1,21 +0,0 @@
-export interface NativeQueueItem {
-    id: string;
-    clientUserMessageId: string;
-    input: Array<{
-        type: string;
-        text?: string;
-    }>;
-}
-export interface QueueControl {
-    namespace: string;
-    threadId: string;
-    add(token: string, text: string): Promise<string>;
-    find(token: string, text: string): Promise<'absent' | 'ambiguous' | {
-        id: string;
-    }>;
-    remove(id: string): Promise<boolean>;
-    close(): void;
-}
-/** Missing queue capability is a preflight result. Errors after add starts
- * remain uncertain acceptance and cannot authorize another writer. */
-export declare function connectCodexQueue(sessionId: string, env: NodeJS.ProcessEnv, deadlineAt: number, now?: () => number, unavailable?: (stage: string) => void): Promise<QueueControl | null>;

package/dist/codex-queue-control.js

@@ -1,59 +0,0 @@
-/** Optional exact queue capability on a verified existing Codex connection. */
-import { connectCodexControl } from './codex-native-control.js';
-/** Missing queue capability is a preflight result. Errors after add starts
- * remain uncertain acceptance and cannot authorize another writer. */
-export async function connectCodexQueue(sessionId, env, deadlineAt, now = () => performance.now(), unavailable) {
-    const control = await connectCodexControl(sessionId, env, deadlineAt, now, unavailable);
-    if (control === null)
-        return null;
-    const call = control.call;
-    try {
-        const list = async () => {
-            const all = [];
-            let cursor = null;
-            for (let page = 0; page < 16; page += 1) {
-                const result = await call('thread/queue/list', { threadId: sessionId, ...(cursor === null ? {} : { cursor }) });
-                if (!Array.isArray(result.data) || !result.data.every(item => typeof item.id === 'string' && typeof item.clientUserMessageId === 'string' && Array.isArray(item.input)))
-                    throw new Error('Unrecognized native queue response');
-                all.push(...result.data);
-                if (result.nextCursor === null)
-                    return all;
-                if (typeof result.nextCursor !== 'string' || result.nextCursor === cursor)
-                    throw new Error('Unrecognized native queue cursor');
-                cursor = result.nextCursor;
-            }
-            throw new Error('Native queue inspection exceeded its bound');
-        };
-        await list(); // Capability check before any mutation or election.
-        return {
-            namespace: control.namespace,
-            threadId: sessionId,
-            add: async (token, text) => {
-                const response = await call('thread/queue/add', { threadId: sessionId, clientUserMessageId: token, input: [{ type: 'text', text }] });
-                if (typeof response.queuedSubmission?.id !== 'string' || response.queuedSubmission.clientUserMessageId !== token)
-                    throw new Error('Native queue receipt unknown');
-                return response.queuedSubmission.id;
-            },
-            find: async (token, text) => {
-                const matches = (await list()).filter(item => item.clientUserMessageId === token);
-                if (matches.length === 0)
-                    return 'absent';
-                const match = matches[0];
-                return matches.length === 1 && match.input.length === 1 && match.input[0]?.type === 'text' && match.input[0].text === text ? { id: match.id } : 'ambiguous';
-            },
-            remove: async (id) => {
-                const result = await call('thread/queue/delete', { threadId: sessionId, queuedSubmissionId: id });
-                if (typeof result.deleted !== 'boolean')
-                    throw new Error('Native queue deletion unknown');
-                return result.deleted;
-            },
-            close: () => control.close(),
-        };
-    }
-    catch {
-        control.close();
-        unavailable?.('queue-list');
-        return null;
-    }
-}
-//# sourceMappingURL=codex-queue-control.js.map

package/dist/codex-queue-control.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-queue-control.js","sourceRoot":"","sources":["../src/codex-queue-control.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAY/D;sEACsE;AACtE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EAAE,GAAsB,EAAE,UAAkB,EAC7D,MAAoB,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAC3C,WAAqC;IAErC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IACvF,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,IAAgC,EAAE;YAClD,MAAM,GAAG,GAAsB,EAAE,CAAA;YACjC,IAAI,MAAM,GAAkB,IAAI,CAAA;YAChC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAA2D,CAAA;gBACzK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;gBAC9N,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;gBACxB,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;oBAAE,OAAO,GAAG,CAAA;gBAC1C,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;gBAC9H,MAAM,GAAG,MAAM,CAAC,UAAU,CAAA;YAC5B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC/D,CAAC,CAAA;QACD,MAAM,IAAI,EAAE,CAAA,CAAC,oDAAoD;QACjE,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,SAAS;YACnB,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAA2C,CAAA;gBAC/K,IAAI,OAAO,QAAQ,CAAC,gBAAgB,EAAE,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,CAAC,mBAAmB,KAAK,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;gBACjK,OAAO,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAA;YACrC,CAAC;YACD,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,KAAK,KAAK,CAAC,CAAA;gBACjF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,QAAQ,CAAA;gBACzC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;gBACzB,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;YAC7J,CAAC;YACD,MAAM,EAAE,KAAK,EAAC,EAAE,EAAC,EAAE;gBACjB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAA0B,CAAA;gBAC1H,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;gBACzF,OAAO,MAAM,CAAC,OAAO,CAAA;YACvB,CAAC;YACD,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;SAC7B,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,EAAE,CAAA;QACf,WAAW,EAAE,CAAC,YAAY,CAAC,CAAA;QAC3B,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/codex-tool-messages.d.ts

@@ -1,7 +0,0 @@
-import { type CommandDeps } from './commands-core.js';
-import type { HookEnvelope } from './hook-types.js';
-import type { Logger } from './logging.js';
-export declare function codexToolHookReady(deps: Pick<CommandDeps, 'env' | 'hookAdapterHome' | 'hookPlatform'>, sessionId: string): boolean;
-export declare const CODEX_TOOL_HOOK_RECOVERY = "Wait for a real tool callback in this turn. If tools complete but this remains unverified, Codex may retain an older hook configuration in memory even when /hooks lists trusted, active definitions. In the existing session, open /hooks and toggle only the already-trusted Notifai PostToolUse handler off and back on to refresh it, then verify the next callback. Do not change approvals or end the Agent Session. The ordinary queue can wait until the active turn finishes; queue acceptance does not prove busy delivery.";
-/** Notes and answers share one bounded stdout document at the trusted boundary. */
-export declare function deliverCodexToolMessage(deps: CommandDeps, envelope: HookEnvelope, logger: Logger): Promise<void>;

package/dist/codex-tool-messages.js

@@ -1,126 +0,0 @@
-/** A trusted Codex tool boundary observes the turn and drains shared pending input. */
-import { drainSessionInputs, hasSessionInputs } from './session-inputs.js';
-import { makeClient } from './commands-core.js';
-import { readSessionIncarnation, readSessionState, sessionHasEnded, updateSessionState } from './hook-session-state.js';
-import { codexHookIdentityHash, codexTrustKey, codexTrustProblems, findInstallations, handlerEvent } from './install-hooks.js';
-import { currentProcessIdentity, processIdentityLiveness } from './process-identity.js';
-import { currentCodexTurn, readAttendantLease, recordTurnStart } from './session-attendant-state.js';
-import { refreshCodexInputActivity } from './codex-input-lifecycle.js';
-import { readNativeQuestionSnapshot } from './codex-native-turn.js';
-import { observeCodexQuestions } from './codex-question-bindings.js';
-import { codexAnswerPresentation } from './codex-answer-presentation.js';
-import { isDeepStrictEqual } from 'node:util';
-/** Missing, disabled, changed or untrusted hooks retain ordinary queue delivery. */
-function toolHookFingerprint(deps) {
-    const installations = findInstallations(deps.env, deps.hookAdapterHome, deps.hookPlatform)
-        .filter((installation) => installation.harness === 'codex');
-    if (installations.some((installation) => (installation.problems ?? []).length > 0))
-        return null;
-    const hooks = installations.flatMap((installation) => installation.handlers
-        .filter((handler) => ['post-tool-use', 'user-prompt-submit'].includes(handlerEvent(handler.command) ?? ''))
-        .map((handler) => ({ installation, handler })));
-    if (hooks.length !== 2 || !['PostToolUse', 'UserPromptSubmit'].every((event) => hooks.some(({ handler }) => handler.event === event)))
-        return null;
-    if (hooks.some(({ installation, handler }) => handler.async === true || handler.asyncRewake === true ||
-        codexTrustProblems([{ ...installation, handlers: [handler] }], deps.env).length !== 0))
-        return null;
-    return hooks.map(({ installation, handler }) => `${codexTrustKey(installation, handler)}:${codexHookIdentityHash(handler)}`).sort().join('|');
-}
-export function codexToolHookReady(deps, sessionId) {
-    const fingerprint = toolHookFingerprint(deps);
-    const proof = readSessionState(sessionId, deps.env).codex_tool_hook;
-    const incarnation = readSessionIncarnation(sessionId, deps.env);
-    const turn = incarnation === null ? null : currentCodexTurn(sessionId, deps.env, incarnation.key);
-    return fingerprint !== null && proof?.fingerprint === fingerprint &&
-        proof.incarnation === incarnation?.incarnation && proof.root_observed !== undefined &&
-        (turn === null || proof.root_observed.turn_id === turn);
-}
-export const CODEX_TOOL_HOOK_RECOVERY = 'Wait for a real tool callback in this turn. If tools complete but this remains unverified, Codex may retain an older hook configuration in memory even when /hooks lists trusted, active definitions. In the existing session, open /hooks and toggle only the already-trusted Notifai PostToolUse handler off and back on to refresh it, then verify the next callback. Do not change approvals or end the Agent Session. The ordinary queue can wait until the active turn finishes; queue acceptance does not prove busy delivery.';
-/** Notes and answers share one bounded stdout document at the trusted boundary. */
-export async function deliverCodexToolMessage(deps, envelope, logger) {
-    const sessionId = envelope.session_id;
-    if (sessionId === undefined || envelope.hook_event_name !== 'PostToolUse' ||
-        typeof envelope.turn_id !== 'string' || envelope.turn_id === '')
-        return;
-    const incarnation = readSessionIncarnation(sessionId, deps.env);
-    const sourcePid = Number(deps.env['NOTIFAI_HOOK_SOURCE_PID']);
-    const owner = incarnation?.harness_process;
-    if (incarnation === null || owner === undefined || owner.pid !== sourcePid)
-        return;
-    const ownsRoot = () => {
-        const current = readSessionIncarnation(sessionId, deps.env);
-        return !sessionHasEnded(sessionId, deps.env) && current?.key === incarnation.key &&
-            current.incarnation === incarnation.incarnation &&
-            processIdentityLiveness(owner) === 'alive';
-    };
-    // Seeing a definition on disk does not prove an already-running Codex loaded
-    // it. Only this exact session's real tool invocation enables busy delivery.
-    const fingerprint = toolHookFingerprint(deps);
-    if (fingerprint === null || !ownsRoot())
-        return;
-    // Automatic continuations need not emit UserPromptSubmit. A trusted,
-    // synchronous tool callback from this exact owner is also a turn observation.
-    // recordTurnStart ignores previously seen/ended turns, so a late callback
-    // cannot resurrect an interrupted turn or replace a newer observed turn.
-    if (currentCodexTurn(sessionId, deps.env, incarnation.key) !== envelope.turn_id) {
-        recordTurnStart(sessionId, deps.env, incarnation.key, envelope.turn_id);
-    }
-    const mayObserve = () => ownsRoot() &&
-        currentCodexTurn(sessionId, deps.env, incarnation.key) === envelope.turn_id;
-    if (!mayObserve())
-        return;
-    refreshCodexInputActivity(sessionId, deps.env, incarnation.key, envelope.transcript_path);
-    if (!mayObserve())
-        return;
-    if (readSessionState(sessionId, deps.env).codex_question_bindings?.length) {
-        const snapshot = readNativeQuestionSnapshot(envelope.transcript_path, sessionId, deps.env);
-        updateSessionState(sessionId, deps.env, state => mayObserve() ? observeCodexQuestions(state, incarnation.key, snapshot) : state);
-    }
-    const proof = readSessionState(sessionId, deps.env).codex_tool_hook;
-    if (proof?.incarnation !== incarnation.incarnation || proof.fingerprint !== fingerprint ||
-        proof.root_observed?.turn_id !== envelope.turn_id) {
-        updateSessionState(sessionId, deps.env, (state) => !mayObserve() ? state : ({
-            ...state, codex_tool_hook: { incarnation: incarnation.incarnation, fingerprint,
-                root_observed: { turn_id: envelope.turn_id, at: (deps.now ?? Date.now)() } },
-        }));
-    }
-    // A fresh session may have no service lease until its first question exists.
-    // Callback evidence permits registration; only a current lease permits input.
-    const lease = readAttendantLease(sessionId, deps.env);
-    if (lease === null || lease.incarnation !== incarnation.incarnation)
-        return;
-    const mayWrite = () => {
-        const current = readAttendantLease(sessionId, deps.env);
-        return mayObserve() && current?.incarnation === lease.incarnation && current.generation === lease.generation;
-    };
-    if (!hasSessionInputs(sessionId, deps.env, lease) || !mayWrite())
-        return;
-    const credential = deps.store.load();
-    const writer = currentProcessIdentity();
-    if (credential === null || writer === null)
-        return;
-    const now = deps.now ?? Date.now;
-    const deadlineAt = now() + 2_000;
-    const mayDeliver = () => now() < deadlineAt && mayWrite();
-    const client = makeClient(deps, credential.baseUrl, `Bearer nfm_${credential.machineId}.${credential.secret}`, {
-        timeoutMs: 750, deadlineAt, now,
-    });
-    await drainSessionInputs({
-        lease,
-        mayWrite: mayDeliver,
-        nativeAnswers: codexAnswerPresentation({ sessionId, env: deps.env, lease, ownerKey: incarnation.key,
-            turnId: envelope.turn_id, transcriptPath: envelope.transcript_path,
-            service: { base_url: credential.baseUrl, machine_id: credential.machineId },
-            deadline: performance.now() + 2_000, mayWrite: mayDeliver,
-            serviceCurrent: () => isDeepStrictEqual(deps.store.load(), credential) }),
-        sequencer: {
-            sessionId, env: deps.env, client, writer, log: logger,
-            monotonic: () => performance.now(), wall: now,
-            recoveryDeadline: performance.now() + 500,
-            sleep: async (ms) => { if (now() < deadlineAt)
-                await new Promise((resolve) => setTimeout(resolve, Math.min(ms, deadlineAt - now()))); },
-        },
-        write: (text) => deps.io.out(JSON.stringify({ hookSpecificOutput: { hookEventName: 'PostToolUse', additionalContext: text } })),
-    });
-}
-//# sourceMappingURL=codex-tool-messages.js.map

package/dist/codex-tool-messages.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codex-tool-messages.js","sourceRoot":"","sources":["../src/codex-tool-messages.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAoB,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAGvH,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC9H,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AACvF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAA;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,oFAAoF;AACpF,SAAS,mBAAmB,CAAC,IAAmE;IAC9F,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC;SACvF,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;IAC7D,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/F,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ;SACxE,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;SAC1G,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAClJ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI;QAClG,kBAAkB,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACrG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC/I,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAmE,EAAE,SAAiB;IAEtF,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,CAAA;IACnE,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAA;IACjG,OAAO,WAAW,KAAK,IAAI,IAAI,KAAK,EAAE,WAAW,KAAK,WAAW;QAC/D,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,WAAW,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QACnF,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,IAAI,CAAC,CAAA;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,ugBAAugB,CAAA;AAE/iB,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAiB,EAAE,QAAsB,EAAE,MAAc;IAEzD,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAA;IACrC,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,eAAe,KAAK,aAAa;QACrE,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,EAAE;QAAE,OAAM;IAC3E,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,WAAW,EAAE,eAAe,CAAA;IAC1C,IAAI,WAAW,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,OAAM;IAClF,MAAM,QAAQ,GAAG,GAAY,EAAE;QAC7B,MAAM,OAAO,GAAG,sBAAsB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QAC3D,OAAO,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,GAAG,KAAK,WAAW,CAAC,GAAG;YAC9E,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;YAC/C,uBAAuB,CAAC,KAAK,CAAC,KAAK,OAAO,CAAA;IAC9C,CAAC,CAAA;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAC7C,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE;QAAE,OAAM;IAC/C,qEAAqE;IACrE,8EAA8E;IAC9E,0EAA0E;IAC1E,yEAAyE;IACzE,IAAI,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QAChF,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,GAAY,EAAE,CAAC,QAAQ,EAAE;QAC1C,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAA;IAC7E,IAAI,CAAC,UAAU,EAAE;QAAE,OAAM;IACzB,yBAAyB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAA;IACzF,IAAI,CAAC,UAAU,EAAE;QAAE,OAAM;IACzB,IAAI,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,uBAAuB,EAAE,MAAM,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1F,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAClI,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,eAAe,CAAA;IACnE,IAAI,KAAK,EAAE,WAAW,KAAK,WAAW,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW;QACnF,KAAK,CAAC,aAAa,EAAE,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtD,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1E,GAAG,KAAK,EAAE,eAAe,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,WAAW;gBAC5E,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAQ,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE;SAChF,CAAC,CAAC,CAAA;IACL,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;QAAE,OAAM;IAC3E,MAAM,QAAQ,GAAG,GAAY,EAAE;QAC7B,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;QACvD,OAAO,UAAU,EAAE,IAAI,OAAO,EAAE,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAA;IAC9G,CAAC,CAAA;IACD,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;QAAE,OAAM;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAA;IACvC,IAAI,UAAU,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAM;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAChC,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,KAAK,CAAA;IAChC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAA;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,cAAc,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE;QAC7G,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;KAChC,CAAC,CAAA;IACF,MAAM,kBAAkB,CAAC;QACvB,KAAK;QACL,QAAQ,EAAE,UAAU;QACpB,aAAa,EAAE,uBAAuB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG;YACjG,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,eAAe;YAClE,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,SAAS,EAAE;YAC3E,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,UAAU;YACzD,cAAc,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3E,SAAS,EAAE;YACT,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;YACrD,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG;YAC7C,gBAAgB,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG;YACzC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,UAAU;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;SACvI;QACD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;KAChI,CAAC,CAAA;AACJ,CAAC"}

package/dist/codex-wake.d.ts

@@ -1,58 +0,0 @@
-import { type EscalationDeliveryRoute } from './hook-types.js';
-/**
- * The per-thread durable inbox `codex queue` writes to, relative to `$CODEX_HOME`.
- *
- * Named for diagnostics only. Notifai never opens it: the schema is private to
- * Codex, versioned by its own migration table, and the supported writer is the
- * CLI. Reading it here would couple Notifai to an internal shape it does not own.
- */
-export declare const CODEX_QUEUE_STORE_FILE = "queue_1.sqlite";
-export interface CodexWakeAdapters {
-    /**
-     * Write one message into the thread's durable inbox via `codex queue`.
-     * `onSpawn` receives the child's own process group as soon as it exists.
-     * When `signal` aborts, the whole group is killed and the call rejects:
-     * a claimed write never outlives its claim.
-     */
-    queue(threadId: string, cwd: string, context: string, onSpawn?: (pgid: number) => void, signal?: AbortSignal): Promise<void>;
-    /**
-     * Whether the `codex` executable `queue` runs can be found at all. A
-     * resident writer asks once, before it offers to take Session Messages.
-     */
-    available?(): boolean;
-}
-export type CodexQueueReadiness = {
-    state: 'ready';
-    threadId: string;
-} | {
-    state: 'unavailable';
-    reason: string;
-};
-export declare function codexHome(env: NodeJS.ProcessEnv): string;
-export declare function codexQueueStorePath(env: NodeJS.ProcessEnv): string;
-/**
- * Whether this Stop hook could queue an answer into its own thread.
- *
- * The only precondition the route actually has is an exact thread id: queueing
- * needs no writer lock, no daemon, no socket and no platform syscall, and it
- * succeeds against a live, busy or stopped thread alike. The absence of the
- * queue store is deliberately *not* a blocker — Codex creates it on first
- * write — so this reports readiness, never a store-existence gate.
- */
-export declare function inspectCodexQueue(threadId: string | undefined, _env: NodeJS.ProcessEnv): CodexQueueReadiness;
-/**
- * Low-level exact-thread wake transport. Production callers wrap this route
- * with sessionInputRoute: only a content-free wake goes into the native queue,
- * and the foreground consumer claims current input immediately before stdout.
- *
- * Queue exit 0 proves storage, never presentation. A busy owner may consume
- * the wake much later; an exited thread keeps it until reopened. There is no
- * cold-resume path here, which would consume the queue and a repeated prompt.
- */
-export declare function codexWakeRoute(options: {
-    threadId: string;
-    cwd: string;
-    env?: NodeJS.ProcessEnv;
-    adapters?: CodexWakeAdapters;
-}): EscalationDeliveryRoute;
-export declare function systemCodexWakeAdapters(env?: NodeJS.ProcessEnv): CodexWakeAdapters;