@right-link/paperclip-plugin-codex-remote 0.3.1

package/dist/server/adapter.js

@@ -0,0 +1,157 @@
+/**
+ * External adapter entry point.
+ *
+ * Paperclip's adapter-plugin store loads an external adapter package by
+ * importing its main entry and calling `createServerAdapter()`, which must
+ * return a complete `ServerAdapterModule`. This module assembles the
+ * standalone codex_remote adapter from the package's own building blocks plus
+ * the sandbox preflight / remote-default behavior that previously lived in a
+ * host-side registry wrapper — so nothing needs to change in upstream
+ * Paperclip to register this adapter.
+ */
+import { buildSandboxNpmInstallCommand, getAdapterSessionManagement, } from "@paperclipai/adapter-utils";
+import { execute as baseExecute } from "./execute.js";
+import { testEnvironment as baseTestEnvironment } from "./test.js";
+import { listCodexSkills, syncCodexSkills } from "./skills.js";
+import { sessionCodec, getQuotaWindows } from "./index.js";
+import { models, modelProfiles, agentConfigurationDoc, type } from "../index.js";
+export const CODEX_REMOTE_TYPE = type;
+const DEFAULT_REMOTE_TIMEOUT_SEC = 300;
+const CODEX_RUNTIME_PACKAGE = "@openai/codex";
+const CODEX_RUNTIME_FALLBACK_COMMAND = "codex";
+function requireRemoteTarget(ctx) {
+    const target = ctx.executionTarget;
+    if (!target || target.kind !== "remote") {
+        throw new Error("codex_remote requires a remote execution target.");
+    }
+    if (target.transport === "sandbox" && !target.runner) {
+        throw new Error("codex_remote requires a sandbox runner from the environment provider.");
+    }
+    return target;
+}
+function isSandboxTarget(target) {
+    return target.transport === "sandbox";
+}
+function failureResult(error, prefix) {
+    const message = error instanceof Error ? error.message : String(error);
+    return {
+        exitCode: 1,
+        signal: null,
+        timedOut: false,
+        errorMessage: `${prefix}: ${message}`,
+        resultJson: {
+            error: message,
+            phase: prefix,
+        },
+    };
+}
+export function applyCodexRemoteDefaults(config) {
+    const hasExplicitTimeout = typeof config.timeoutSec === "number" && Number.isFinite(config.timeoutSec) && config.timeoutSec > 0;
+    return {
+        ...config,
+        timeoutSec: hasExplicitTimeout ? config.timeoutSec : DEFAULT_REMOTE_TIMEOUT_SEC,
+        dangerouslyBypassApprovalsAndSandbox: true,
+        // Codex Remote is sandbox-runtime only. The agent owns repository cloning
+        // and Git finalization when the task requires them, so do not upload the
+        // host workspace or request provider Git-clone realization.
+        remoteWorkspaceSync: false,
+    };
+}
+async function verifySandboxWorkspace(input) {
+    const shell = input.target.shellCommand === "sh" ? "sh" : "bash";
+    const marker = input.bridgeChannel ? "BRIDGE_SESSION_OK" : "WORKSPACE_OK";
+    const label = input.bridgeChannel ? "bridge channel" : "main session";
+    const result = await input.target.runner.execute({
+        command: shell,
+        args: [
+            "-c",
+            `mkdir -p ${JSON.stringify(input.target.remoteCwd)} && ls -la ${JSON.stringify(input.target.remoteCwd)} 2>&1 && echo ${marker}`,
+        ],
+        cwd: "/",
+        env: input.bridgeChannel ? { PAPERCLIP_SANDBOX_EXEC_CHANNEL: "bridge" } : undefined,
+        timeoutMs: input.bridgeChannel ? 90_000 : 30_000,
+    });
+    if (result.timedOut || (result.exitCode ?? 1) !== 0) {
+        const detail = [result.stderr, result.stdout].filter(Boolean).join("\n").trim();
+        throw new Error(`codex_remote sandbox workspace verify (${label}) failed with exit=${result.exitCode ?? "null"} timedOut=${result.timedOut}${detail ? `: ${detail}` : ""}`);
+    }
+    await input.ctx.onLog("stdout", `[paperclip] codex_remote workspace verify (${label}): exit=${result.exitCode} timedOut=${result.timedOut}\n${result.stdout || ""}\n${result.stderr || ""}`);
+}
+async function executeCodexRemote(ctx) {
+    const target = requireRemoteTarget(ctx);
+    const config = applyCodexRemoteDefaults(ctx.config);
+    const codexRunTimeoutMs = typeof config.timeoutSec === "number" && config.timeoutSec > 0
+        ? config.timeoutSec * 1_000
+        : DEFAULT_REMOTE_TIMEOUT_SEC * 1_000;
+    if (isSandboxTarget(target)) {
+        try {
+            await verifySandboxWorkspace({ ctx, target });
+            await verifySandboxWorkspace({ ctx, target, bridgeChannel: true });
+        }
+        catch (error) {
+            return failureResult(error, "codex_remote_prepare_failed");
+        }
+    }
+    try {
+        return await baseExecute({
+            ...ctx,
+            executionTarget: isSandboxTarget(target)
+                ? {
+                    ...target,
+                    timeoutMs: codexRunTimeoutMs,
+                }
+                : target,
+            config,
+        });
+    }
+    catch (error) {
+        return failureResult(error, "codex_remote_execute_failed");
+    }
+}
+function hasPathSeparator(value) {
+    return value.includes("/") || value.includes("\\");
+}
+function shellQuote(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function readConfiguredCommand(config) {
+    const value = typeof config.command === "string" ? config.command.trim() : "";
+    return value.length > 0 ? value : CODEX_RUNTIME_FALLBACK_COMMAND;
+}
+function buildRuntimeCommandSpec(config) {
+    const command = readConfiguredCommand(config);
+    const canSelfInstall = !hasPathSeparator(command) && command === CODEX_RUNTIME_FALLBACK_COMMAND;
+    const installLine = buildSandboxNpmInstallCommand(CODEX_RUNTIME_PACKAGE);
+    return {
+        command,
+        detectCommand: command,
+        installCommand: canSelfInstall
+            ? `if ! command -v ${shellQuote(command)} >/dev/null 2>&1; then ${installLine}; fi`
+            : null,
+    };
+}
+export function createServerAdapter() {
+    return {
+        type: CODEX_REMOTE_TYPE,
+        execute: (ctx) => executeCodexRemote(ctx),
+        testEnvironment: (ctx) => baseTestEnvironment({
+            ...ctx,
+            adapterType: CODEX_REMOTE_TYPE,
+            config: applyCodexRemoteDefaults(ctx.config),
+        }),
+        listSkills: listCodexSkills,
+        syncSkills: syncCodexSkills,
+        sessionCodec,
+        sessionManagement: getAdapterSessionManagement(CODEX_REMOTE_TYPE) ?? undefined,
+        models,
+        modelProfiles,
+        supportsLocalAgentJwt: true,
+        supportsInstructionsBundle: true,
+        instructionsPathKey: "instructionsFilePath",
+        requiresMaterializedRuntimeSkills: false,
+        getRuntimeCommandSpec: (config) => buildRuntimeCommandSpec(config),
+        getQuotaWindows,
+        agentConfigurationDoc,
+    };
+}
+//# sourceMappingURL=adapter.js.map

package/dist/server/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/server/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,GAK5B,MAAM,4BAA4B,CAAC;AAOpC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,eAAe,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAC9C,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAQ/C,SAAS,mBAAmB,CAAC,GAA4B;IACvD,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;IACnC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAAkC;IACzD,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,MAAc;IACnD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,GAAG,MAAM,KAAK,OAAO,EAAE;QACrC,UAAU,EAAE;YACV,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,MAAM;SACd;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA+B;IACtE,MAAM,kBAAkB,GACtB,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC;IACvG,OAAO;QACL,GAAG,MAAM;QACT,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,0BAA0B;QAC/E,oCAAoC,EAAE,IAAI;QAC1C,0EAA0E;QAC1E,yEAAyE;QACzE,4DAA4D;QAC5D,mBAAmB,EAAE,KAAK;KAC3B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAIrC;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC;IAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/C,OAAO,EAAE,KAAK;QACd,IAAI,EAAE;YACJ,IAAI;YACJ,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,MAAM,EAAE;SAChI;QACD,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,8BAA8B,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;QACnF,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;KACjD,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CACb,0CAA0C,KAAK,sBAAsB,MAAM,CAAC,QAAQ,IAAI,MAAM,aAAa,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3J,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CACnB,QAAQ,EACR,8CAA8C,KAAK,WAAW,MAAM,CAAC,QAAQ,aAAa,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAC5J,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAA4B;IAC5D,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,iBAAiB,GACrB,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC;QAC5D,CAAC,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK;QAC3B,CAAC,CAAC,0BAA0B,GAAG,KAAK,CAAC;IAEzC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,sBAAsB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,MAAM,sBAAsB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC;YACvB,GAAG,GAAG;YACN,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC;gBACtC,CAAC,CAAC;oBACE,GAAG,MAAM;oBACT,SAAS,EAAE,iBAAiB;iBAC7B;gBACH,CAAC,CAAC,MAAM;YACV,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA+B;IAC5D,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,8BAA8B,CAAC;AACnE,CAAC;AAED,SAAS,uBAAuB,CAAC,MAA+B;IAC9D,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,8BAA8B,CAAC;IAChG,MAAM,WAAW,GAAG,6BAA6B,CAAC,qBAAqB,CAAC,CAAC;IACzE,OAAO;QACL,OAAO;QACP,aAAa,EAAE,OAAO;QACtB,cAAc,EAAE,cAAc;YAC5B,CAAC,CAAC,mBAAmB,UAAU,CAAC,OAAO,CAAC,0BAA0B,WAAW,MAAM;YACnF,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC;QACzC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CACvB,mBAAmB,CAAC;YAClB,GAAG,GAAG;YACN,WAAW,EAAE,iBAAiB;YAC9B,MAAM,EAAE,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC;SAC7C,CAAC;QACJ,UAAU,EAAE,eAAe;QAC3B,UAAU,EAAE,eAAe;QAC3B,YAAY;QACZ,iBAAiB,EAAE,2BAA2B,CAAC,iBAAiB,CAAC,IAAI,SAAS;QAC9E,MAAM;QACN,aAAa;QACb,qBAAqB,EAAE,IAAI;QAC3B,0BAA0B,EAAE,IAAI;QAChC,mBAAmB,EAAE,sBAAsB;QAC3C,iCAAiC,EAAE,KAAK;QACxC,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC;QAClE,eAAe;QACf,qBAAqB;KACtB,CAAC;AACJ,CAAC"}

package/dist/server/adapter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter.test.d.ts.map

package/dist/server/adapter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.test.d.ts","sourceRoot":"","sources":["../../src/server/adapter.test.ts"],"names":[],"mappings":""}

package/dist/server/adapter.test.js

@@ -0,0 +1,84 @@
+import { describe, expect, it, vi } from "vitest";
+import { applyCodexRemoteDefaults, createServerAdapter, CODEX_REMOTE_TYPE } from "./adapter.js";
+vi.mock("./execute.js", () => ({
+    execute: vi.fn(async () => ({
+        exitCode: 0,
+        signal: null,
+        timedOut: false,
+        resultJson: { ok: true },
+    })),
+}));
+describe("createServerAdapter", () => {
+    it("returns a complete standalone codex_remote module", () => {
+        const adapter = createServerAdapter();
+        expect(adapter.type).toBe("codex_remote");
+        expect(CODEX_REMOTE_TYPE).toBe("codex_remote");
+        expect(typeof adapter.execute).toBe("function");
+        expect(typeof adapter.testEnvironment).toBe("function");
+        expect(typeof adapter.getRuntimeCommandSpec).toBe("function");
+        expect(Array.isArray(adapter.models)).toBe(true);
+        expect(adapter.instructionsPathKey).toBe("instructionsFilePath");
+        expect(adapter.requiresMaterializedRuntimeSkills).toBe(false);
+    });
+    it("provisions the @openai/codex runtime command by default", () => {
+        const adapter = createServerAdapter();
+        const spec = adapter.getRuntimeCommandSpec?.({});
+        expect(spec?.command).toBe("codex");
+        expect(spec?.detectCommand).toBe("codex");
+        expect(spec?.installCommand).toContain("@openai/codex");
+    });
+    it("does not self-install when an explicit command path is configured", () => {
+        const adapter = createServerAdapter();
+        const spec = adapter.getRuntimeCommandSpec?.({ command: "/usr/local/bin/codex" });
+        expect(spec?.command).toBe("/usr/local/bin/codex");
+        expect(spec?.installCommand).toBeNull();
+    });
+    it("rejects a non-remote execution target", async () => {
+        const adapter = createServerAdapter();
+        await expect(adapter.execute({
+            config: {},
+            executionTarget: { kind: "local" },
+            onLog: async () => { },
+        })).rejects.toThrow(/remote execution target/);
+    });
+    it("accepts an SSH execution target", async () => {
+        const adapter = createServerAdapter();
+        const result = await adapter.execute({
+            config: {},
+            executionTarget: {
+                kind: "remote",
+                transport: "ssh",
+                remoteCwd: "/workspace",
+                spec: {
+                    host: "127.0.0.1",
+                    port: 2222,
+                    username: "paperclip",
+                    remoteWorkspacePath: "/workspace",
+                    remoteCwd: "/workspace",
+                    privateKey: "PRIVATE KEY",
+                    knownHosts: "[127.0.0.1]:2222 ssh-ed25519 AAAA",
+                    strictHostKeyChecking: true,
+                },
+            },
+            onLog: async () => { },
+        });
+        expect(result.exitCode).toBe(0);
+    });
+});
+describe("applyCodexRemoteDefaults", () => {
+    it("applies sandbox-only remote defaults", () => {
+        const result = applyCodexRemoteDefaults({});
+        expect(result.timeoutSec).toBe(300);
+        expect(result.dangerouslyBypassApprovalsAndSandbox).toBe(true);
+        expect(result.remoteWorkspaceSync).toBe(false);
+    });
+    it("preserves an explicit positive timeout", () => {
+        const result = applyCodexRemoteDefaults({ timeoutSec: 900 });
+        expect(result.timeoutSec).toBe(900);
+    });
+    it("replaces a non-positive timeout with the default", () => {
+        expect(applyCodexRemoteDefaults({ timeoutSec: 0 }).timeoutSec).toBe(300);
+        expect(applyCodexRemoteDefaults({ timeoutSec: -5 }).timeoutSec).toBe(300);
+    });
+});
+//# sourceMappingURL=adapter.test.js.map

package/dist/server/adapter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.test.js","sourceRoot":"","sources":["../../src/server/adapter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEhG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7B,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;KACzB,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,MAAM,CACV,OAAO,CAAC,OAAO,CAAC;YACd,MAAM,EAAE,EAAE;YACV,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YAClC,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACb,CAAC,CACZ,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;YACnC,MAAM,EAAE,EAAE;YACV,eAAe,EAAE;gBACf,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,YAAY;gBACvB,IAAI,EAAE;oBACJ,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,WAAW;oBACrB,mBAAmB,EAAE,YAAY;oBACjC,SAAS,EAAE,YAAY;oBACvB,UAAU,EAAE,aAAa;oBACzB,UAAU,EAAE,mCAAmC;oBAC/C,qBAAqB,EAAE,IAAI;iBAC5B;aACF;YACD,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACb,CAAC,CAAC;QAEZ,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,wBAAwB,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,CAAC,wBAAwB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/codex-args.d.ts

@@ -0,0 +1,13 @@
+export type BuildCodexExecArgsResult = {
+    args: string[];
+    model: string;
+    fastModeRequested: boolean;
+    fastModeApplied: boolean;
+    fastModeIgnoredReason: string | null;
+};
+export declare function buildCodexExecArgs(config: unknown, options?: {
+    resumeSessionId?: string | null;
+    skipGitRepoCheck?: boolean;
+    isolatePaperclipTaskSystem?: boolean;
+}): BuildCodexExecArgsResult;
+//# sourceMappingURL=codex-args.d.ts.map

package/dist/server/codex-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-args.d.ts","sourceRoot":"","sources":["../../src/server/codex-args.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC,CAAC;AAkBF,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IACP,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACjC,GACL,wBAAwB,CAmD1B"}

package/dist/server/codex-args.js

@@ -0,0 +1,60 @@
+import { asBoolean, asString, asStringArray } from "@paperclipai/adapter-utils/server-utils";
+import { CODEX_REMOTE_FAST_MODE_SUPPORTED_MODELS, isCodexRemoteFastModeSupported, } from "../index.js";
+function readExtraArgs(config) {
+    const fromExtraArgs = asStringArray(asRecord(config).extraArgs);
+    if (fromExtraArgs.length > 0)
+        return fromExtraArgs;
+    return asStringArray(asRecord(config).args);
+}
+function asRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : {};
+}
+function formatFastModeSupportedModels() {
+    return `${CODEX_REMOTE_FAST_MODE_SUPPORTED_MODELS.join(", ")} or manually configured model IDs`;
+}
+export function buildCodexExecArgs(config, options = {}) {
+    const record = asRecord(config);
+    const model = asString(record.model, "").trim();
+    const modelReasoningEffort = asString(record.modelReasoningEffort, asString(record.reasoningEffort, "")).trim();
+    const search = asBoolean(record.search, false);
+    const fastModeRequested = asBoolean(record.fastMode, false);
+    const fastModeApplied = fastModeRequested && isCodexRemoteFastModeSupported(model);
+    const bypass = asBoolean(record.dangerouslyBypassApprovalsAndSandbox, asBoolean(record.dangerouslyBypassSandbox, false));
+    const extraArgs = readExtraArgs(record);
+    const args = ["exec", "--json"];
+    if (options.skipGitRepoCheck)
+        args.push("--skip-git-repo-check");
+    if (options.isolatePaperclipTaskSystem) {
+        args.push("-c", "mcp_servers={}", "-c", "plugins={}", "-c", "marketplaces={}");
+    }
+    if (search)
+        args.unshift("--search");
+    if (bypass)
+        args.push("--dangerously-bypass-approvals-and-sandbox");
+    if (model)
+        args.push("--model", model);
+    if (modelReasoningEffort) {
+        args.push("-c", `model_reasoning_effort=${JSON.stringify(modelReasoningEffort)}`);
+    }
+    if (fastModeApplied) {
+        args.push("-c", 'service_tier="fast"', "-c", "features.fast_mode=true");
+    }
+    if (extraArgs.length > 0)
+        args.push(...extraArgs);
+    if (options.resumeSessionId)
+        args.push("resume", options.resumeSessionId, "-");
+    else
+        args.push("-");
+    return {
+        args,
+        model,
+        fastModeRequested,
+        fastModeApplied,
+        fastModeIgnoredReason: fastModeRequested && !fastModeApplied
+            ? `Configured fast mode is currently only supported on ${formatFastModeSupportedModels()}; Paperclip will ignore it for model ${model || "(default)"}.`
+            : null,
+    };
+}
+//# sourceMappingURL=codex-args.js.map

package/dist/server/codex-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-args.js","sourceRoot":"","sources":["../../src/server/codex-args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAC7F,OAAO,EACL,uCAAuC,EACvC,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AAUrB,SAAS,aAAa,CAAC,MAAe;IACpC,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACnD,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,6BAA6B;IACpC,OAAO,GAAG,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAe,EACf,UAII,EAAE;IAEN,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,oBAAoB,GAAG,QAAQ,CACnC,MAAM,CAAC,oBAAoB,EAC3B,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,CACrC,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,eAAe,GAAG,iBAAiB,IAAI,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,SAAS,CACtB,MAAM,CAAC,oCAAoC,EAC3C,SAAS,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAClD,CAAC;IACF,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,gBAAgB;QAAE,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CACP,IAAI,EACJ,gBAAgB,EAChB,IAAI,EACJ,YAAY,EACZ,IAAI,EACJ,iBAAiB,CAClB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM;QAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACpE,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,oBAAoB,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,0BAA0B,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,eAAe;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;;QAC1E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEpB,OAAO;QACL,IAAI;QACJ,KAAK;QACL,iBAAiB;QACjB,eAAe;QACf,qBAAqB,EACnB,iBAAiB,IAAI,CAAC,eAAe;YACnC,CAAC,CAAC,uDAAuD,6BAA6B,EAAE,wCAAwC,KAAK,IAAI,WAAW,GAAG;YACvJ,CAAC,CAAC,IAAI;KACX,CAAC;AACJ,CAAC"}

package/dist/server/codex-args.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codex-args.test.d.ts.map

package/dist/server/codex-args.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-args.test.d.ts","sourceRoot":"","sources":["../../src/server/codex-args.test.ts"],"names":[],"mappings":""}

package/dist/server/codex-args.test.js

@@ -0,0 +1,94 @@
+import { describe, expect, it } from "vitest";
+import { buildCodexExecArgs } from "./codex-args.js";
+describe("buildCodexExecArgs", () => {
+    it("enables Codex fast mode overrides for GPT-5.4", () => {
+        const result = buildCodexExecArgs({
+            model: "gpt-5.4",
+            search: true,
+            fastMode: true,
+        });
+        expect(result.fastModeRequested).toBe(true);
+        expect(result.fastModeApplied).toBe(true);
+        expect(result.fastModeIgnoredReason).toBeNull();
+        expect(result.args).toEqual([
+            "--search",
+            "exec",
+            "--json",
+            "--model",
+            "gpt-5.4",
+            "-c",
+            'service_tier="fast"',
+            "-c",
+            "features.fast_mode=true",
+            "-",
+        ]);
+    });
+    it("enables Codex fast mode overrides for manual models", () => {
+        const result = buildCodexExecArgs({
+            model: "gpt-5.5",
+            fastMode: true,
+        });
+        expect(result.fastModeRequested).toBe(true);
+        expect(result.fastModeApplied).toBe(true);
+        expect(result.fastModeIgnoredReason).toBeNull();
+        expect(result.args).toEqual([
+            "exec",
+            "--json",
+            "--model",
+            "gpt-5.5",
+            "-c",
+            'service_tier="fast"',
+            "-c",
+            "features.fast_mode=true",
+            "-",
+        ]);
+    });
+    it("ignores fast mode for unsupported models", () => {
+        const result = buildCodexExecArgs({
+            model: "gpt-5.3-codex",
+            fastMode: true,
+        });
+        expect(result.fastModeRequested).toBe(true);
+        expect(result.fastModeApplied).toBe(false);
+        expect(result.fastModeIgnoredReason).toContain("currently only supported on gpt-5.4 or manually configured model IDs");
+        expect(result.args).toEqual([
+            "exec",
+            "--json",
+            "--model",
+            "gpt-5.3-codex",
+            "-",
+        ]);
+    });
+    it("adds --skip-git-repo-check when requested", () => {
+        const result = buildCodexExecArgs({
+            model: "gpt-5.3-codex",
+        }, { skipGitRepoCheck: true });
+        expect(result.args).toEqual([
+            "exec",
+            "--json",
+            "--skip-git-repo-check",
+            "--model",
+            "gpt-5.3-codex",
+            "-",
+        ]);
+    });
+    it("can isolate sandbox runs from external task-management tools while keeping user config", () => {
+        const result = buildCodexExecArgs({
+            model: "gpt-5.3-codex",
+        }, { isolatePaperclipTaskSystem: true });
+        expect(result.args).toEqual([
+            "exec",
+            "--json",
+            "-c",
+            "mcp_servers={}",
+            "-c",
+            "plugins={}",
+            "-c",
+            "marketplaces={}",
+            "--model",
+            "gpt-5.3-codex",
+            "-",
+        ]);
+    });
+});
+//# sourceMappingURL=codex-args.test.js.map

package/dist/server/codex-args.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-args.test.js","sourceRoot":"","sources":["../../src/server/codex-args.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAChC,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAC1B,UAAU;YACV,MAAM;YACN,QAAQ;YACR,SAAS;YACT,SAAS;YACT,IAAI;YACJ,qBAAqB;YACrB,IAAI;YACJ,yBAAyB;YACzB,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAChC,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,SAAS;YACT,SAAS;YACT,IAAI;YACJ,qBAAqB;YACrB,IAAI;YACJ,yBAAyB;YACzB,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAChC,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,SAAS,CAC5C,sEAAsE,CACvE,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,SAAS;YACT,eAAe;YACf,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAC/B;YACE,KAAK,EAAE,eAAe;SACvB,EACD,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAC3B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,uBAAuB;YACvB,SAAS;YACT,eAAe;YACf,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,MAAM,GAAG,kBAAkB,CAC/B;YACE,KAAK,EAAE,eAAe;SACvB,EACD,EAAE,0BAA0B,EAAE,IAAI,EAAE,CACrC,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,IAAI;YACJ,gBAAgB;YAChB,IAAI;YACJ,YAAY;YACZ,IAAI;YACJ,iBAAiB;YACjB,SAAS;YACT,eAAe;YACf,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/codex-home.d.ts

@@ -0,0 +1,47 @@
+import type { AdapterExecutionContext } from "@paperclipai/adapter-utils";
+/**
+ * Reduces a Codex `config.toml` to the minimum needed inside a remote sandbox:
+ * the allowlisted top-level keys ({@link REMOTE_KEPT_TOP_LEVEL_KEYS}) plus the
+ * `[model_providers.*]` sections. Everything else — MCP servers, project trust
+ * lists, plugins, marketplaces, desktop/Windows host settings — is dropped, so
+ * Codex starts clean and fast and never tries to launch host-only tooling.
+ *
+ * Each provider also gets `supports_websockets = false` injected: Codex defaults
+ * to a `wss://` transport for the Responses API, but a sandbox reaching the
+ * provider through a userspace-Tailscale HTTP proxy cannot open that WebSocket,
+ * so Codex burns ~75s retrying it before falling back to HTTP on every run (the
+ * misleading "failed to refresh available models: timeout waiting for child
+ * process to exit"). Forcing HTTP removes that stall.
+ */
+export declare function sanitizeRemoteCodexConfigToml(toml: string): string;
+/**
+ * Injects `supports_websockets = false` into every `[model_providers.<name>]`
+ * section that does not already set the flag. Unlike
+ * {@link sanitizeRemoteCodexConfigToml}, this preserves all other config
+ * content — it is safe to apply to both local and remote config copies.
+ */
+export declare function injectWebsocketsDisabled(toml: string): string;
+/**
+ * Builds a throwaway Codex home directory suitable for syncing into a remote
+ * sandbox: the same auth/instructions as the managed home, but with a
+ * sandbox-sanitized `config.toml` (see {@link sanitizeRemoteCodexConfigToml}).
+ * The caller must invoke `cleanup()` when the run finishes.
+ */
+export declare function prepareRemoteCodexHomeAsset(sourceHome: string): Promise<{
+    dir: string;
+    cleanup: () => Promise<void>;
+}>;
+export declare function pathExists(candidate: string): Promise<boolean>;
+export declare function resolveSharedCodexHomeDir(env?: NodeJS.ProcessEnv): string;
+export declare function resolveManagedCodexHomeDir(env: NodeJS.ProcessEnv, companyId?: string): string;
+/**
+ * Writes an `auth.json` containing only `OPENAI_API_KEY` so the codex CLI can
+ * authenticate via API key. Overwrites any existing file or symlink at that
+ * path. Required because the codex CLI (>= 0.122) ignores the `OPENAI_API_KEY`
+ * environment variable and only reads credentials from `$CODEX_HOME/auth.json`.
+ */
+export declare function writeApiKeyAuthJson(home: string, apiKey: string): Promise<void>;
+export declare function prepareManagedCodexHome(env: NodeJS.ProcessEnv, onLog: AdapterExecutionContext["onLog"], companyId?: string, options?: {
+    apiKey?: string | null;
+}): Promise<string>;
+//# sourceMappingURL=codex-home.d.ts.map

package/dist/server/codex-home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-home.d.ts","sourceRoot":"","sources":["../../src/server/codex-home.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AA+C1E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+ElE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgC7D;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CA0BxD;AAMD,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEpE;AAED,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAGR;AAMD,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CASR;AA0FD;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKrF;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,EACvC,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACvC,OAAO,CAAC,MAAM,CAAC,CAiEjB"}