@rarebit-one/harness-kernel 0.5.1

package/dist/engines/claudeCode.d.ts

@@ -0,0 +1,73 @@
+import type { ConnectorConfig } from "../types.js";
+import type { AgentEngine, EngineContext, EngineResult, EngineSupport, RunSpec } from "./types.js";
+import { type CapabilityContext, type CapabilityTool } from "./capability.js";
+/**
+ * Driver-neutral options the engine derives from a {@link RunSpec} and hands to
+ * the Claude Code harness. The default driver maps these onto the Anthropic Agent
+ * SDK; tests inject a fake driver and assert this mapping.
+ */
+export interface ClaudeCodeOptions {
+    /** The task prompt (workflow prompt + inputs). */
+    prompt: string;
+    /** The prepared sandbox working tree — the harness's cwd; edits land here. */
+    cwd: string;
+    /** Model id (resolved: per-run model, else the engine default). */
+    model: string;
+    /** API key (per-org BYO, else the runner env key). */
+    apiKey?: string;
+    /** Tool allowlist; undefined means the harness's defaults. */
+    allowedTools?: string[];
+    /** Wall-clock budget in ms; undefined means no engine-imposed limit. */
+    maxDurationMs?: number;
+    /** Workspace-scoped capabilities the driver mounts as an in-process MCP server.
+     *  Which ones is the application's choice — see {@link CapabilityToolFactory}. */
+    mcpTools?: CapabilityTool[];
+    /** The run's external MCP connectors; the driver mounts them as SDK mcpServers so
+     *  they become tools inside Claude Code (parity with the native engine). */
+    connectors?: ConnectorConfig[];
+}
+/** A normalized message from the harness (driver-agnostic). */
+export type ClaudeCodeMessage = {
+    kind: "assistant";
+    text: string;
+} | {
+    kind: "result";
+    text: string;
+    isError: boolean;
+};
+/**
+ * The injectable boundary to the Claude Code harness: given mapped options, yield
+ * a normalized message stream. The default implementation drives the Agent SDK;
+ * tests inject a fake so no CLI/network runs.
+ */
+export type ClaudeCodeDriver = (opts: ClaudeCodeOptions) => AsyncIterable<ClaudeCodeMessage>;
+/**
+ * Builds the capability surface a run gets, bound to that run's workspace scope
+ * and working tree. The kernel supplies only the generic
+ * {@link writeFileCapability}; an application injects a factory that composes
+ * its own capabilities alongside it, closing over whatever sinks it wants the
+ * emissions to land in.
+ */
+export type CapabilityToolFactory = (ctx: CapabilityContext) => CapabilityTool[];
+/** The kernel's default surface: the one capability that carries no product semantics. */
+export declare const defaultCapabilityTools: CapabilityToolFactory;
+/**
+ * Drives a run with the Claude Code harness (its own grep/glob/edit/bash tools +
+ * tuned loop) against the sandbox working tree. File edits land on disk and are
+ * captured by the caller's change-set diff — the engine returns prose only.
+ *
+ * Claude Code runs arbitrary bash, so it must not run on the warm shared runner.
+ * `supports()` refuses unless (a) the operator has explicitly enabled it and (b)
+ * the run is on the `ephemeral` runner profile (one throwaway container per run —
+ * the container, not a human, is the safety boundary). The SDK is loaded lazily by
+ * the driver, so this module stays cheap to import on the warm runner.
+ */
+export declare class ClaudeCodeEngine implements AgentEngine {
+    readonly name = "claude-code";
+    private readonly drive;
+    private readonly capabilityTools;
+    constructor(drive?: ClaudeCodeDriver, capabilityTools?: CapabilityToolFactory);
+    supports(spec: RunSpec): EngineSupport;
+    run(spec: RunSpec, ctx: EngineContext): Promise<EngineResult>;
+}
+//# sourceMappingURL=claudeCode.d.ts.map

package/dist/engines/claudeCode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCode.d.ts","sourceRoot":"","sources":["../../src/engines/claudeCode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAElG,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAElG;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAA;IACX,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAA;IACb,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,wEAAwE;IACxE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;sFACkF;IAClF,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAA;IAC3B;gFAC4E;IAC5E,UAAU,CAAC,EAAE,eAAe,EAAE,CAAA;CAC/B;AAED,+DAA+D;AAC/D,MAAM,MAAM,iBAAiB,GAC3B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AAE1F;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,iBAAiB,KAAK,aAAa,CAAC,iBAAiB,CAAC,CAAA;AAK5F;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,iBAAiB,KAAK,cAAc,EAAE,CAAA;AAEhF,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB,EAAE,qBAA2D,CAAA;AAEhG;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,WAAW;IAClD,QAAQ,CAAC,IAAI,iBAAgB;IAE7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;gBAGrD,KAAK,GAAE,gBAA0C,EACjD,eAAe,GAAE,qBAA8C;IAMjE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa;IAiBhC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;CA4CpE"}

package/dist/engines/claudeCode.js

@@ -0,0 +1,100 @@
+import { defaultClaudeCodeDriver } from "./claudeCodeDriver.js";
+import { writeFileCapability } from "./capability.js";
+const DEFAULT_MODEL = "claude-opus-4-8";
+const LOG_TRUNCATE = 2000;
+/** The kernel's default surface: the one capability that carries no product semantics. */
+export const defaultCapabilityTools = (ctx) => [writeFileCapability(ctx)];
+/**
+ * Drives a run with the Claude Code harness (its own grep/glob/edit/bash tools +
+ * tuned loop) against the sandbox working tree. File edits land on disk and are
+ * captured by the caller's change-set diff — the engine returns prose only.
+ *
+ * Claude Code runs arbitrary bash, so it must not run on the warm shared runner.
+ * `supports()` refuses unless (a) the operator has explicitly enabled it and (b)
+ * the run is on the `ephemeral` runner profile (one throwaway container per run —
+ * the container, not a human, is the safety boundary). The SDK is loaded lazily by
+ * the driver, so this module stays cheap to import on the warm runner.
+ */
+export class ClaudeCodeEngine {
+    name = "claude-code";
+    drive;
+    capabilityTools;
+    constructor(drive = defaultClaudeCodeDriver, capabilityTools = defaultCapabilityTools) {
+        this.drive = drive;
+        this.capabilityTools = capabilityTools;
+    }
+    supports(spec) {
+        if (process.env.RUNNER_ENABLE_CLAUDE_CODE !== "1") {
+            return {
+                ok: false,
+                reason: "claude-code engine is disabled (set RUNNER_ENABLE_CLAUDE_CODE=1)",
+            };
+        }
+        if (spec.workflow.runner?.profile !== "ephemeral") {
+            return {
+                ok: false,
+                reason: "claude-code engine requires the ephemeral runner profile (per-run container isolation)",
+            };
+        }
+        return { ok: true };
+    }
+    async run(spec, ctx) {
+        const apiKey = spec.provider.credentials?.anthropic ?? process.env.ANTHROPIC_API_KEY;
+        const model = spec.provider.model || DEFAULT_MODEL;
+        const allowedTools = Array.isArray(spec.permissions.tools) && spec.permissions.tools.length > 0
+            ? spec.permissions.tools
+            : undefined;
+        // No emissions from here: injected capabilities close over sinks the
+        // APPLICATION owns, so it reads what a run emitted from those directly.
+        // Omitted rather than returned empty — see EngineResult.
+        const mcpTools = this.capabilityTools({
+            workspaceId: spec.workspaceId,
+            workdir: spec.workdir,
+        });
+        const options = {
+            prompt: buildPrompt(spec),
+            cwd: spec.workdir,
+            model,
+            mcpTools,
+            ...(spec.connectors.length > 0 ? { connectors: spec.connectors } : {}),
+            ...(apiKey ? { apiKey } : {}),
+            ...(allowedTools ? { allowedTools } : {}),
+            ...(spec.limits?.maxDurationMs !== undefined
+                ? { maxDurationMs: spec.limits.maxDurationMs }
+                : {}),
+        };
+        ctx.log(`claude-code: driving model ${model} in ${spec.workdir}`);
+        let finalText = "";
+        for await (const message of this.drive(options)) {
+            if (message.kind === "assistant") {
+                if (message.text)
+                    ctx.log(`claude-code: ${truncate(message.text, LOG_TRUNCATE)}`);
+            }
+            else {
+                finalText = message.text;
+                if (message.isError)
+                    ctx.log("claude-code: harness reported an error");
+            }
+        }
+        return { text: finalText || "(no output)" };
+    }
+}
+function buildPrompt(spec) {
+    const inputs = JSON.stringify(spec.inputs ?? {}, null, 2);
+    return [
+        spec.workflow.prompt ?? `Execute the "${spec.workflow.name ?? spec.workflowPath}" workflow.`,
+        "",
+        "## Inputs",
+        "```json",
+        inputs,
+        "```",
+        "",
+        "You are running as an autonomous workflow. The current working directory is the",
+        "workspace — inspect and edit its files directly with your tools. When finished,",
+        "reply with the workflow's output as Markdown.",
+    ].join("\n");
+}
+function truncate(text, max) {
+    return text.length <= max ? text : `${text.slice(0, max)}…`;
+}
+//# sourceMappingURL=claudeCode.js.map

package/dist/engines/claudeCode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCode.js","sourceRoot":"","sources":["../../src/engines/claudeCode.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAA+C,MAAM,iBAAiB,CAAA;AAuClG,MAAM,aAAa,GAAG,iBAAiB,CAAA;AACvC,MAAM,YAAY,GAAG,IAAI,CAAA;AAWzB,0FAA0F;AAC1F,MAAM,CAAC,MAAM,sBAAsB,GAA0B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAA;AAEhG;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,aAAa,CAAA;IAEZ,KAAK,CAAkB;IACvB,eAAe,CAAuB;IAEvD,YACE,QAA0B,uBAAuB,EACjD,kBAAyC,sBAAsB;QAE/D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAA;IACxC,CAAC;IAED,QAAQ,CAAC,IAAa;QACpB,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC;YAClD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,kEAAkE;aAC3E,CAAA;QACH,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,KAAK,WAAW,EAAE,CAAC;YAClD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,wFAAwF;aAC3F,CAAA;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAa,EAAE,GAAkB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,aAAa,CAAA;QAClD,MAAM,YAAY,GAChB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YACxE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK;YACxB,CAAC,CAAC,SAAS,CAAA;QAEf,qEAAqE;QACrE,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;YACpC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAA;QAEF,MAAM,OAAO,GAAsB;YACjC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC;YACzB,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,KAAK;YACL,QAAQ;YACR,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR,CAAA;QAED,GAAG,CAAC,GAAG,CAAC,8BAA8B,KAAK,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QAEjE,IAAI,SAAS,GAAG,EAAE,CAAA;QAElB,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,IAAI;oBAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;YACnF,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,OAAO,CAAC,IAAI,CAAA;gBACxB,IAAI,OAAO,CAAC,OAAO;oBAAE,GAAG,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAA;YACxE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,aAAa,EAAE,CAAA;IAC7C,CAAC;CACF;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACzD,OAAO;QACL,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,gBAAgB,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,aAAa;QAC5F,EAAE;QACF,WAAW;QACX,SAAS;QACT,MAAM;QACN,KAAK;QACL,EAAE;QACF,iFAAiF;QACjF,iFAAiF;QACjF,+CAA+C;KAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;AAC7D,CAAC"}

package/dist/engines/claudeCodeDriver.d.ts

@@ -0,0 +1,14 @@
+import type { ClaudeCodeMessage, ClaudeCodeOptions } from "./claudeCode.js";
+/**
+ * The default Claude Code driver: runs the Anthropic Agent SDK's `query()` (which
+ * spawns the Claude Code CLI) against the prepared workdir and normalizes its
+ * message stream. This is the ONLY module that touches the SDK, and it loads it
+ * lazily (dynamic import) so the warm runner — where this engine never runs —
+ * doesn't pay to import it.
+ *
+ * Permission mode is `bypassPermissions`: this engine only runs inside a throwaway
+ * ephemeral container (enforced by ClaudeCodeEngine.supports), so the container,
+ * not an interactive human, is the safety boundary.
+ */
+export declare function defaultClaudeCodeDriver(opts: ClaudeCodeOptions): AsyncIterable<ClaudeCodeMessage>;
+//# sourceMappingURL=claudeCodeDriver.d.ts.map

package/dist/engines/claudeCodeDriver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCodeDriver.d.ts","sourceRoot":"","sources":["../../src/engines/claudeCodeDriver.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAI3E;;;;;;;;;;GAUG;AACH,wBAAuB,uBAAuB,CAC5C,IAAI,EAAE,iBAAiB,GACtB,aAAa,CAAC,iBAAiB,CAAC,CAqDlC"}

package/dist/engines/claudeCodeDriver.js

@@ -0,0 +1,90 @@
+import { CAPABILITY_SERVER_NAME, capabilitySdkServer, capabilityToolIds } from "./capabilityMcp.js";
+import { connectorServers } from "./connectorMcp.js";
+/**
+ * The default Claude Code driver: runs the Anthropic Agent SDK's `query()` (which
+ * spawns the Claude Code CLI) against the prepared workdir and normalizes its
+ * message stream. This is the ONLY module that touches the SDK, and it loads it
+ * lazily (dynamic import) so the warm runner — where this engine never runs —
+ * doesn't pay to import it.
+ *
+ * Permission mode is `bypassPermissions`: this engine only runs inside a throwaway
+ * ephemeral container (enforced by ClaudeCodeEngine.supports), so the container,
+ * not an interactive human, is the safety boundary.
+ */
+export async function* defaultClaudeCodeDriver(opts) {
+    const { query } = await import("@anthropic-ai/claude-agent-sdk");
+    const controller = new AbortController();
+    const timer = opts.maxDurationMs && opts.maxDurationMs > 0
+        ? setTimeout(() => controller.abort(), opts.maxDurationMs)
+        : undefined;
+    // Mount the run's MCP servers: the runner-hosted, workspace-scoped capability
+    // surface (in-process) so Claude Code emits issues/knowledge/files uniformly with
+    // native, plus the run's external connectors (Slack, an Airwallex MCP, …) so they
+    // become tools inside Claude Code too. Same connector source the native engine uses.
+    const capabilities = opts.mcpTools ?? [];
+    const connectors = connectorServers(opts.connectors ?? []);
+    const mcpServers = { ...connectors };
+    if (capabilities.length > 0) {
+        mcpServers[CAPABILITY_SERVER_NAME] = await capabilitySdkServer(capabilities);
+    }
+    const hasMcpServers = Object.keys(mcpServers).length > 0;
+    // When the workflow narrows tools (allowedTools set), the mounted MCP tools must
+    // still be permitted; append the capability tool ids and a server-level allow for
+    // each connector (whose tool names are only known at connect time). With no
+    // allowlist, bypassPermissions already permits every tool.
+    const allowedTools = opts.allowedTools && opts.allowedTools.length > 0
+        ? [
+            ...opts.allowedTools,
+            ...capabilityToolIds(capabilities),
+            ...Object.keys(connectors).map((name) => `mcp__${name}`),
+        ]
+        : opts.allowedTools;
+    const options = {
+        cwd: opts.cwd,
+        model: opts.model,
+        permissionMode: "bypassPermissions",
+        allowDangerouslySkipPermissions: true,
+        abortController: controller,
+        env: { ...process.env, ...(opts.apiKey ? { ANTHROPIC_API_KEY: opts.apiKey } : {}) },
+        ...(hasMcpServers ? { mcpServers } : {}),
+        ...(allowedTools ? { allowedTools } : {}),
+    };
+    try {
+        for await (const message of query({ prompt: opts.prompt, options })) {
+            const normalized = normalize(message);
+            if (normalized)
+                yield normalized;
+        }
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+function normalize(message) {
+    if (message.type === "assistant") {
+        const text = extractText(message.message.content);
+        return text ? { kind: "assistant", text } : undefined;
+    }
+    if (message.type === "result") {
+        const text = message.subtype === "success" ? message.result : "";
+        return { kind: "result", text, isError: message.is_error };
+    }
+    return undefined;
+}
+/** Concatenate the text blocks of an assistant message's content. */
+function extractText(content) {
+    if (!Array.isArray(content))
+        return "";
+    const texts = [];
+    for (const block of content) {
+        if (typeof block === "object" &&
+            block !== null &&
+            block.type === "text" &&
+            typeof block.text === "string") {
+            texts.push(block.text);
+        }
+    }
+    return texts.join("\n");
+}
+//# sourceMappingURL=claudeCodeDriver.js.map

package/dist/engines/claudeCodeDriver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudeCodeDriver.js","sourceRoot":"","sources":["../../src/engines/claudeCodeDriver.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACnG,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,uBAAuB,CAC5C,IAAuB;IAEvB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAA;IAEhE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GACT,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC;QAC1C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAA;IAEf,8EAA8E;IAC9E,kFAAkF;IAClF,kFAAkF;IAClF,qFAAqF;IACrF,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IACxC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAoC,EAAE,GAAG,UAAU,EAAE,CAAA;IACrE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,sBAAsB,CAAC,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAExD,iFAAiF;IACjF,kFAAkF;IAClF,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC/C,CAAC,CAAC;YACE,GAAG,IAAI,CAAC,YAAY;YACpB,GAAG,iBAAiB,CAAC,YAAY,CAAC;YAClC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;SACzD;QACH,CAAC,CAAC,IAAI,CAAC,YAAY,CAAA;IAEvB,MAAM,OAAO,GAAY;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,cAAc,EAAE,mBAAmB;QACnC,+BAA+B,EAAE,IAAI;QACrC,eAAe,EAAE,UAAU;QAC3B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACnF,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAA;IAED,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;YACrC,IAAI,UAAU;gBAAE,MAAM,UAAU,CAAA;QAClC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAmB;IACpC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACjD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAA;IAC5D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,qEAAqE;AACrE,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAA;IACtC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACb,KAA4B,CAAC,IAAI,KAAK,MAAM;YAC7C,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,EACtD,CAAC;YACD,KAAK,CAAC,IAAI,CAAE,KAA0B,CAAC,IAAI,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/engines/codex.d.ts

@@ -0,0 +1,72 @@
+import type { AgentEngine, EngineContext, EngineResult, EngineSupport, RunSpec } from "./types.js";
+/**
+ * Driver-neutral options the engine derives from a {@link RunSpec} and hands to
+ * the codex harness. The default driver maps these onto the OpenAI Codex CLI;
+ * tests inject a fake driver and assert this mapping.
+ */
+export interface CodexOptions {
+    /** The task prompt (workflow prompt + inputs). */
+    prompt: string;
+    /** The prepared sandbox working tree — the harness's cwd; edits land here. */
+    cwd: string;
+    /** Model id (resolved: per-run model, else the engine default). */
+    model: string;
+    /** API key (per-org BYO, else the runner env key). */
+    apiKey?: string;
+    /**
+     * The transient `CODEX_HOME` for this run — a temp dir OUTSIDE the sandbox that
+     * holds the `config.toml` the engine wrote (the run's MCP servers). The driver
+     * points the codex process at it via the `CODEX_HOME` env var.
+     */
+    codexHome: string;
+    /**
+     * Env the runner-hosted capability stdio MCP server needs (workspace id, workdir,
+     * emissions-file path). These are ALSO declared in the server's `config.toml` env
+     * table, but the driver sets them on the codex process env too so the spawned
+     * server inherits them even if codex doesn't forward the config env table.
+     */
+    capabilityEnv: Record<string, string>;
+    /** Wall-clock budget in ms; undefined means no engine-imposed limit. */
+    maxDurationMs?: number;
+}
+/** A normalized message from the harness (driver-agnostic). */
+export type CodexMessage = {
+    kind: "assistant";
+    text: string;
+} | {
+    kind: "result";
+    text: string;
+    isError: boolean;
+};
+/** The injectable boundary to the codex harness. Tests supply a fake. */
+export type CodexDriver = (opts: CodexOptions) => AsyncIterable<CodexMessage>;
+/** The runner-hosted capability MCP server the codex `config.toml` points at. */
+/**
+ * Drives a run with the OpenAI Codex CLI against the sandbox working tree,
+ * mirroring the Claude Code engine. Because codex runs as an EXTERNAL process, it
+ * reaches the run's tools through a `config.toml` the engine writes into a transient
+ * `CODEX_HOME` (codex's REAL MCP discovery mechanism — it ignores `.mcp.json`):
+ * the run's connectors (Pillar 4) plus the runner-hosted, workspace-scoped
+ * capability server (Pillar 3) as a stdio MCP server. The capability server
+ * persists issue/knowledge emits to a file outside the tree, which this engine
+ * reads back — so codex reaches emit parity with native and Claude Code.
+ *
+ * Codex runs arbitrary code, so — like Claude Code — `supports()` refuses unless
+ * the operator enabled it (RUNNER_ENABLE_CODEX=1) AND the run is on the ephemeral
+ * runner profile (one throwaway container per run is the safety boundary).
+ */
+export declare class CodexEngine implements AgentEngine {
+    readonly name = "codex";
+    private readonly drive;
+    private readonly capabilityServerScript;
+    /**
+     * `capabilityServerScript` is REQUIRED: the capability surface is injected,
+     * and a child process cannot be handed a closure, so the application must
+     * supply the entrypoint that builds and serves its own tools. There is no
+     * sensible kernel default — one would silently serve an empty surface.
+     */
+    constructor(drive: CodexDriver | undefined, capabilityServerScript: string);
+    supports(spec: RunSpec): EngineSupport;
+    run(spec: RunSpec, ctx: EngineContext): Promise<EngineResult>;
+}
+//# sourceMappingURL=codex.d.ts.map

package/dist/engines/codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/engines/codex.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAMlG;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAA;IACX,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAA;IACb,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACrC,wEAAwE;IACxE,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,+DAA+D;AAC/D,MAAM,MAAM,YAAY,GACtB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AAE1F,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,aAAa,CAAC,YAAY,CAAC,CAAA;AAK7E,iFAAiF;AAEjF;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,QAAQ,CAAC,IAAI,WAAU;IAEvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAQ;IAE/C;;;;;OAKG;gBACS,KAAK,EAAE,WAAW,YAAqB,EAAE,sBAAsB,EAAE,MAAM;IAKnF,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa;IAahC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;CA+FpE"}

package/dist/engines/codex.js

@@ -0,0 +1,157 @@
+import { mkdtemp, rm, stat } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { CAPABILITY_SERVER_NAME } from "./capabilityMcp.js";
+import { connectorServers, writeCodexConfig } from "./connectorMcp.js";
+import { readEmissions } from "./capabilityEmissions.js";
+import { defaultCodexDriver } from "./codexDriver.js";
+const DEFAULT_MODEL = "gpt-5-codex";
+const LOG_TRUNCATE = 2000;
+/** The runner-hosted capability MCP server the codex `config.toml` points at. */
+/**
+ * Drives a run with the OpenAI Codex CLI against the sandbox working tree,
+ * mirroring the Claude Code engine. Because codex runs as an EXTERNAL process, it
+ * reaches the run's tools through a `config.toml` the engine writes into a transient
+ * `CODEX_HOME` (codex's REAL MCP discovery mechanism — it ignores `.mcp.json`):
+ * the run's connectors (Pillar 4) plus the runner-hosted, workspace-scoped
+ * capability server (Pillar 3) as a stdio MCP server. The capability server
+ * persists issue/knowledge emits to a file outside the tree, which this engine
+ * reads back — so codex reaches emit parity with native and Claude Code.
+ *
+ * Codex runs arbitrary code, so — like Claude Code — `supports()` refuses unless
+ * the operator enabled it (RUNNER_ENABLE_CODEX=1) AND the run is on the ephemeral
+ * runner profile (one throwaway container per run is the safety boundary).
+ */
+export class CodexEngine {
+    name = "codex";
+    drive;
+    capabilityServerScript;
+    /**
+     * `capabilityServerScript` is REQUIRED: the capability surface is injected,
+     * and a child process cannot be handed a closure, so the application must
+     * supply the entrypoint that builds and serves its own tools. There is no
+     * sensible kernel default — one would silently serve an empty surface.
+     */
+    constructor(drive = defaultCodexDriver, capabilityServerScript) {
+        this.drive = drive;
+        this.capabilityServerScript = capabilityServerScript;
+    }
+    supports(spec) {
+        if (process.env.RUNNER_ENABLE_CODEX !== "1") {
+            return { ok: false, reason: "codex engine is disabled (set RUNNER_ENABLE_CODEX=1)" };
+        }
+        if (spec.workflow.runner?.profile !== "ephemeral") {
+            return {
+                ok: false,
+                reason: "codex engine requires the ephemeral runner profile (per-run container isolation)",
+            };
+        }
+        return { ok: true };
+    }
+    async run(spec, ctx) {
+        const apiKey = spec.provider.credentials?.openai ?? process.env.OPENAI_API_KEY;
+        const model = spec.provider.model || DEFAULT_MODEL;
+        // Emissions land OUTSIDE the sandbox so the bookkeeping file is never captured
+        // by the change set; the capability server (an external process) writes here and
+        // we read it back after the run.
+        const emissionsDir = await mkdtemp(path.join(tmpdir(), "harness-emit-"));
+        const emissionsFile = path.join(emissionsDir, "emissions.json");
+        // The codex `config.toml` carries resolved connector auth tokens, so it lives in
+        // a transient CODEX_HOME OUTSIDE the sandbox — it can never reach the change set —
+        // and is deleted in `finally` regardless.
+        //
+        // On /tmp, codex logs one harmless warning per run ("Refusing to create helper
+        // binaries under temporary dir /tmp") and PROCEEDS: it only skips creating the
+        // PATH-alias helper binaries, which we never use. Kept on /tmp deliberately —
+        // relocating off /tmp (e.g. to the `node` user's home in the container) would
+        // silence the log but flip codex into actually writing those unneeded helpers
+        // every run, and couple this to assumptions about the runtime image's writable
+        // dirs. The warning is purely cosmetic; not worth that trade.
+        const codexHome = await mkdtemp(path.join(tmpdir(), "harness-codex-home-"));
+        // The env the capability stdio server needs — set both in its config.toml env
+        // table AND on the codex process env (see CodexOptions.capabilityEnv) so it
+        // arrives regardless of whether codex forwards the config env table.
+        const capabilityEnv = {
+            HARNESS_WORKSPACE_ID: spec.workspaceId,
+            HARNESS_WORKDIR: spec.workdir,
+            HARNESS_EMISSIONS_FILE: emissionsFile,
+        };
+        const servers = {
+            ...connectorServers(spec.connectors),
+            [CAPABILITY_SERVER_NAME]: {
+                type: "stdio",
+                command: process.execPath,
+                args: [this.capabilityServerScript],
+                env: capabilityEnv,
+            },
+        };
+        await writeCodexConfig(codexHome, servers);
+        const options = {
+            prompt: buildPrompt(spec),
+            cwd: spec.workdir,
+            model,
+            codexHome,
+            capabilityEnv,
+            ...(apiKey ? { apiKey } : {}),
+            ...(spec.limits?.maxDurationMs !== undefined
+                ? { maxDurationMs: spec.limits.maxDurationMs }
+                : {}),
+        };
+        ctx.log(`codex: driving model ${model} in ${spec.workdir}`);
+        let finalText = "";
+        try {
+            for await (const message of this.drive(options)) {
+                if (message.kind === "assistant") {
+                    if (message.text)
+                        ctx.log(`codex: ${truncate(message.text, LOG_TRUNCATE)}`);
+                }
+                else {
+                    finalText = message.text;
+                    if (message.isError)
+                        ctx.log("codex: harness reported an error");
+                }
+            }
+        }
+        finally {
+            // The token-bearing config is transient — never let it linger.
+            await rm(codexHome, { recursive: true, force: true });
+        }
+        // The stat's SIZE is the log's byte count, for two reasons. It is the only
+        // honest one — `JSON.stringify(x).length` counts UTF-16 code units, not
+        // bytes, and under-reports anything outside the BMP. And measuring by
+        // re-serializing allocates a second copy of a payload that may be large,
+        // to produce a number we already have on disk.
+        const emissionsStat = await stat(emissionsFile).then((st) => st, () => undefined);
+        const emissions = await readEmissions(emissionsFile);
+        // The engine reports whether the round trip HAPPENED, not what it carried:
+        // counting entries would mean knowing the shape, which is the coupling this
+        // is rid of. Presence plus size separates "the server never wrote" from "it
+        // wrote and the run emitted nothing".
+        ctx.log(`codex: capability emissions — file ${emissionsStat ? `present (${emissionsStat.size} bytes)` : "absent"}` +
+            `${emissionsStat && emissions === undefined ? ", unreadable" : ""}`);
+        await rm(emissionsDir, { recursive: true, force: true });
+        return {
+            text: finalText || "(no output)",
+            ...(emissions !== undefined ? { emissions } : {}),
+        };
+    }
+}
+function buildPrompt(spec) {
+    const inputs = JSON.stringify(spec.inputs ?? {}, null, 2);
+    return [
+        spec.workflow.prompt ?? `Execute the "${spec.workflow.name ?? spec.workflowPath}" workflow.`,
+        "",
+        "## Inputs",
+        "```json",
+        inputs,
+        "```",
+        "",
+        "You are running as an autonomous workflow. The current working directory is the",
+        "workspace — inspect and edit its files directly with your tools. When finished,",
+        "reply with the workflow's output as Markdown.",
+    ].join("\n");
+}
+function truncate(text, max) {
+    return text.length <= max ? text : `${text.slice(0, max)}…`;
+}
+//# sourceMappingURL=codex.js.map

package/dist/engines/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/engines/codex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAA8B,MAAM,mBAAmB,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAwCrD,MAAM,aAAa,GAAG,aAAa,CAAA;AACnC,MAAM,YAAY,GAAG,IAAI,CAAA;AAEzB,iFAAiF;AAEjF;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,WAAW;IACb,IAAI,GAAG,OAAO,CAAA;IAEN,KAAK,CAAa;IAClB,sBAAsB,CAAQ;IAE/C;;;;;OAKG;IACH,YAAY,QAAqB,kBAAkB,EAAE,sBAA8B;QACjF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAA;IACtD,CAAC;IAED,QAAQ,CAAC,IAAa;QACpB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,GAAG,EAAE,CAAC;YAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAA;QACtF,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,KAAK,WAAW,EAAE,CAAC;YAClD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,kFAAkF;aAC3F,CAAA;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAa,EAAE,GAAkB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,aAAa,CAAA;QAElD,+EAA+E;QAC/E,iFAAiF;QACjF,iCAAiC;QACjC,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAA;QACxE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;QAE/D,iFAAiF;QACjF,mFAAmF;QACnF,0CAA0C;QAC1C,EAAE;QACF,+EAA+E;QAC/E,+EAA+E;QAC/E,8EAA8E;QAC9E,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,8DAA8D;QAC9D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAA;QAC3E,8EAA8E;QAC9E,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,aAAa,GAA2B;YAC5C,oBAAoB,EAAE,IAAI,CAAC,WAAW;YACtC,eAAe,EAAE,IAAI,CAAC,OAAO;YAC7B,sBAAsB,EAAE,aAAa;SACtC,CAAA;QACD,MAAM,OAAO,GAA0C;YACrD,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC;YACpC,CAAC,sBAAsB,CAAC,EAAE;gBACxB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO,CAAC,QAAQ;gBACzB,IAAI,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC;gBACnC,GAAG,EAAE,aAAa;aACnB;SACF,CAAA;QACD,MAAM,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAE1C,MAAM,OAAO,GAAiB;YAC5B,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC;YACzB,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,KAAK;YACL,SAAS;YACT,aAAa;YACb,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR,CAAA;QAED,GAAG,CAAC,GAAG,CAAC,wBAAwB,KAAK,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QAE3D,IAAI,SAAS,GAAG,EAAE,CAAA;QAClB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACjC,IAAI,OAAO,CAAC,IAAI;wBAAE,GAAG,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;gBAC7E,CAAC;qBAAM,CAAC;oBACN,SAAS,GAAG,OAAO,CAAC,IAAI,CAAA;oBACxB,IAAI,OAAO,CAAC,OAAO;wBAAE,GAAG,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAA;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,+DAA+D;YAC/D,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;QAED,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAClD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EACV,GAAG,EAAE,CAAC,SAAS,CAChB,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;QACpD,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,sCAAsC;QACtC,GAAG,CAAC,GAAG,CACL,sCAAsC,aAAa,CAAC,CAAC,CAAC,YAAY,aAAa,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;YACxG,GAAG,aAAa,IAAI,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE,CAAA;QACD,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAExD,OAAO;YACL,IAAI,EAAE,SAAS,IAAI,aAAa;YAChC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAA;IACH,CAAC;CACF;AAED,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACzD,OAAO;QACL,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,gBAAgB,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,aAAa;QAC5F,EAAE;QACF,WAAW;QACX,SAAS;QACT,MAAM;QACN,KAAK;QACL,EAAE;QACF,iFAAiF;QACjF,iFAAiF;QACjF,+CAA+C;KAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAW;IACzC,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAA;AAC7D,CAAC"}

package/dist/engines/codexDriver.d.ts

@@ -0,0 +1,43 @@
+import type { CodexMessage, CodexOptions } from "./codex.js";
+/**
+ * The default codex driver: the single integration boundary to the OpenAI Codex
+ * CLI, mirroring claudeCodeDriver's injectable shape. It runs codex
+ * non-interactively (`codex exec`) against the prepared sandbox. The engine has
+ * already written the run's MCP servers (connectors + the runner-hosted capability
+ * server) into `config.toml` inside `opts.codexHome`; pointing the child at it via
+ * the `CODEX_HOME` env var is how codex discovers them.
+ *
+ * Invocation (verified against the OpenAI Codex CLI reference, `codex exec`):
+ *   - `-m <model>`            — model override
+ *   - `-C <cwd>`              — workspace root
+ *   - `--skip-git-repo-check` — the tarball sandbox is not a git repo; without this
+ *                               `codex exec` refuses to run ("not inside a trusted
+ *                               directory")
+ *   - `-o <file>`             — write only the assistant's final message to a file,
+ *                               which we read back as the result (cleaner than the
+ *                               formatted stdout transcript)
+ *   - `--dangerously-bypass-approvals-and-sandbox`
+ *                             — auto-approve every action (incl. MCP tool calls such
+ *                               as the runner-hosted open_issue) and disable codex's
+ *                               local sandbox. Under the default `approval: never` +
+ *                               `sandbox: read-only`, codex auto-CANCELS tool calls
+ *                               it would otherwise need approval for, so the
+ *                               capability tools never fire. This is codex's
+ *                               equivalent of the Claude Code driver's
+ *                               `bypassPermissions` and is justified the same way:
+ *                               this engine only runs inside a throwaway ephemeral
+ *                               container, so the container — not codex's sandbox —
+ *                               is the safety boundary.
+ *   - `-`                     — read the prompt from stdin
+ * The API key rides on `CODEX_API_KEY` (codex exec's dedicated, preferred key,
+ * which also avoids reading `~/.codex/auth.json`); `OPENAI_API_KEY` is set too for
+ * compatibility (codex deprioritizes it but still accepts it).
+ *
+ * Like the Claude Code driver this only runs inside a throwaway ephemeral
+ * container (enforced by CodexEngine.supports) — the container, not a human, is
+ * the safety boundary. It is exercised only when the operator sets
+ * RUNNER_ENABLE_CODEX=1; every test injects a fake driver, so no binary/network
+ * is touched in CI.
+ */
+export declare function defaultCodexDriver(opts: CodexOptions): AsyncIterable<CodexMessage>;
+//# sourceMappingURL=codexDriver.d.ts.map

package/dist/engines/codexDriver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexDriver.d.ts","sourceRoot":"","sources":["../../src/engines/codexDriver.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,wBAAuB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC,CAyEzF"}