@rudderhq/agent-runtime-codex-local 0.7.16 → 0.7.19-canary.0

package/dist/server/readiness-gate.js

@@ -0,0 +1,91 @@
+import { createHash, randomUUID } from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+const STATE_VERSION = 1;
+const STATE_RELATIVE_DIRECTORY = path.join(".rudder", "provider-readiness", "codex");
+function digestParts(parts) {
+    const hash = createHash("sha256");
+    for (const part of parts) {
+        const bytes = Buffer.isBuffer(part) ? part : Buffer.from(part, "utf8");
+        hash.update(String(bytes.length));
+        hash.update(":");
+        hash.update(bytes);
+        hash.update("\n");
+    }
+    return hash.digest("hex");
+}
+async function readFingerprintInput(candidate) {
+    return fs.readFile(candidate).catch(() => Buffer.from("missing", "utf8"));
+}
+export async function buildCodexReadinessFingerprint(input) {
+    const apiKey = input.env.OPENAI_API_KEY?.trim() ?? "";
+    const authSource = apiKey ? "api_key" : "subscription";
+    const authMaterial = apiKey
+        ? Buffer.from(apiKey, "utf8")
+        : await readFingerprintInput(path.join(input.sharedCodexHome, "auth.json"));
+    const providerConfig = await readFingerprintInput(path.join(input.sharedCodexHome, "config.toml"));
+    return digestParts([
+        "rudder.codex.readiness.v1",
+        authSource,
+        authMaterial,
+        providerConfig,
+        input.env.OPENAI_BASE_URL?.trim() ?? "",
+        input.env.OPENAI_API_BASE?.trim() ?? "",
+    ]);
+}
+function statePath(agentHome, fingerprint) {
+    return path.join(agentHome, STATE_RELATIVE_DIRECTORY, `${fingerprint}.json`);
+}
+async function readState(agentHome, fingerprint) {
+    const raw = await fs.readFile(statePath(agentHome, fingerprint), "utf8").catch(() => null);
+    if (!raw)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed.version !== STATE_VERSION
+            || typeof parsed.fingerprint !== "string"
+            || parsed.classification !== "authentication"
+            || parsed.errorCode !== "codex_provider_auth_required"
+            || typeof parsed.failedAt !== "string") {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export async function hasMatchingCodexAuthFailure(agentHome, fingerprint) {
+    const state = await readState(agentHome, fingerprint);
+    return state?.fingerprint === fingerprint;
+}
+export async function recordCodexAuthFailure(agentHome, fingerprint) {
+    const target = statePath(agentHome, fingerprint);
+    const directory = path.dirname(target);
+    await fs.mkdir(directory, { recursive: true });
+    const temporary = `${target}.${process.pid}.${randomUUID()}.tmp`;
+    const state = {
+        version: STATE_VERSION,
+        fingerprint,
+        classification: "authentication",
+        errorCode: "codex_provider_auth_required",
+        failedAt: new Date().toISOString(),
+    };
+    await fs.writeFile(temporary, `${JSON.stringify(state)}\n`, { encoding: "utf8", mode: 0o600 });
+    try {
+        await fs.link(temporary, target);
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+    }
+    finally {
+        await fs.unlink(temporary).catch(() => undefined);
+    }
+}
+export async function clearMatchingCodexAuthFailure(agentHome, fingerprint) {
+    if (!(await hasMatchingCodexAuthFailure(agentHome, fingerprint)))
+        return;
+    await fs.unlink(statePath(agentHome, fingerprint)).catch(() => undefined);
+}
+//# sourceMappingURL=readiness-gate.js.map

package/dist/server/readiness-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness-gate.js","sourceRoot":"","sources":["../../src/server/readiness-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;AAUrF,SAAS,WAAW,CAAC,KAA6B;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IACnD,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAIpD;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;IACvD,MAAM,YAAY,GAAG,MAAM;QACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;QAC7B,CAAC,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;IAEnG,OAAO,WAAW,CAAC;QACjB,2BAA2B;QAC3B,UAAU;QACV,YAAY;QACZ,cAAc;QACd,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE;QACvC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB,EAAE,WAAmB;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,WAAmB;IAC7D,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3F,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmC,CAAC;QACjE,IACE,MAAM,CAAC,OAAO,KAAK,aAAa;eAC7B,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;eACtC,MAAM,CAAC,cAAc,KAAK,gBAAgB;eAC1C,MAAM,CAAC,SAAS,KAAK,8BAA8B;eACnD,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EACtC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAA+B,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAiB,EACjB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACtD,OAAO,KAAK,EAAE,WAAW,KAAK,WAAW,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,WAAmB;IAEnB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACjE,MAAM,KAAK,GAA0B;QACnC,OAAO,EAAE,aAAa;QACtB,WAAW;QACX,cAAc,EAAE,gBAAgB;QAChC,SAAS,EAAE,8BAA8B;QACzC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAAiB,EACjB,WAAmB;IAEnB,IAAI,CAAC,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO;IACzE,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC"}

package/dist/server/readiness-gate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=readiness-gate.test.d.ts.map

package/dist/server/readiness-gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness-gate.test.d.ts","sourceRoot":"","sources":["../../src/server/readiness-gate.test.ts"],"names":[],"mappings":""}

package/dist/server/readiness-gate.test.js

@@ -0,0 +1,79 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, describe, expect, it } from "vitest";
+import { buildCodexReadinessFingerprint, clearMatchingCodexAuthFailure, hasMatchingCodexAuthFailure, recordCodexAuthFailure, } from "./readiness-gate.js";
+let roots = [];
+afterEach(async () => {
+    await Promise.all(roots.splice(0).map((root) => fs.rm(root, { recursive: true, force: true })));
+});
+async function createFixture() {
+    const root = await fs.mkdtemp(path.join(os.tmpdir(), "rudder-codex-readiness-"));
+    roots.push(root);
+    const agentHome = path.join(root, "agent");
+    const sharedCodexHome = path.join(root, "shared-codex");
+    await fs.mkdir(sharedCodexHome, { recursive: true });
+    await fs.writeFile(path.join(sharedCodexHome, "auth.json"), '{"token":"first"}\n', "utf8");
+    await fs.writeFile(path.join(sharedCodexHome, "config.toml"), 'model_provider = "custom"\n', "utf8");
+    return { root, agentHome, sharedCodexHome };
+}
+describe("Codex provider readiness gate", () => {
+    it("persists only an opaque fingerprint and blocks the same readiness state", async () => {
+        const { agentHome, sharedCodexHome } = await createFixture();
+        const fingerprint = await buildCodexReadinessFingerprint({
+            env: { OPENAI_BASE_URL: "https://provider.test/v1" },
+            sharedCodexHome,
+            model: "gpt-test",
+        });
+        await recordCodexAuthFailure(agentHome, fingerprint);
+        expect(await hasMatchingCodexAuthFailure(agentHome, fingerprint)).toBe(true);
+        const raw = await fs.readFile(path.join(agentHome, ".rudder", "provider-readiness", "codex", `${fingerprint}.json`), "utf8");
+        expect(raw).toContain(fingerprint);
+        expect(raw).not.toContain("first");
+        expect(raw).not.toContain("provider.test");
+    });
+    it("uses one provider and credential scope across model fallbacks", async () => {
+        const { sharedCodexHome } = await createFixture();
+        const primary = await buildCodexReadinessFingerprint({
+            env: { OPENAI_BASE_URL: "https://provider.test/v1" },
+            sharedCodexHome,
+            model: "gpt-primary",
+        });
+        const fallback = await buildCodexReadinessFingerprint({
+            env: { OPENAI_BASE_URL: "https://provider.test/v1" },
+            sharedCodexHome,
+            model: "gpt-fallback",
+        });
+        expect(fallback).toBe(primary);
+    });
+    it("publishes the first concurrent auth failure without overwriting it", async () => {
+        const { agentHome } = await createFixture();
+        await Promise.all([
+            recordCodexAuthFailure(agentHome, "same-scope"),
+            recordCodexAuthFailure(agentHome, "same-scope"),
+        ]);
+        expect(await hasMatchingCodexAuthFailure(agentHome, "same-scope")).toBe(true);
+    });
+    it("allows a retry after credentials or provider configuration changes", async () => {
+        const { agentHome, sharedCodexHome } = await createFixture();
+        const input = { env: {}, sharedCodexHome, model: "gpt-test" };
+        const failedFingerprint = await buildCodexReadinessFingerprint(input);
+        await recordCodexAuthFailure(agentHome, failedFingerprint);
+        await fs.writeFile(path.join(sharedCodexHome, "auth.json"), '{"token":"second"}\n', "utf8");
+        const credentialFingerprint = await buildCodexReadinessFingerprint(input);
+        expect(credentialFingerprint).not.toBe(failedFingerprint);
+        expect(await hasMatchingCodexAuthFailure(agentHome, credentialFingerprint)).toBe(false);
+        await fs.writeFile(path.join(sharedCodexHome, "config.toml"), 'model_provider = "other"\n', "utf8");
+        const providerFingerprint = await buildCodexReadinessFingerprint(input);
+        expect(providerFingerprint).not.toBe(credentialFingerprint);
+    });
+    it("clears only the matching failure state", async () => {
+        const { agentHome } = await createFixture();
+        await recordCodexAuthFailure(agentHome, "failed-fingerprint");
+        await clearMatchingCodexAuthFailure(agentHome, "different-fingerprint");
+        expect(await hasMatchingCodexAuthFailure(agentHome, "failed-fingerprint")).toBe(true);
+        await clearMatchingCodexAuthFailure(agentHome, "failed-fingerprint");
+        expect(await hasMatchingCodexAuthFailure(agentHome, "failed-fingerprint")).toBe(false);
+    });
+});
+//# sourceMappingURL=readiness-gate.test.js.map

package/dist/server/readiness-gate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness-gate.test.js","sourceRoot":"","sources":["../../src/server/readiness-gate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAE7B,IAAI,KAAK,GAAa,EAAE,CAAC;AAEzB,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,aAAa;IAC1B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACjF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC3F,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;IACrG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;AAC9C,CAAC;AAED,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;YACvD,GAAG,EAAE,EAAE,eAAe,EAAE,0BAA0B,EAAE;YACpD,eAAe;YACf,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QAEH,MAAM,sBAAsB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,WAAW,OAAO,CAAC,EACrF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;YACnD,GAAG,EAAE,EAAE,eAAe,EAAE,0BAA0B,EAAE;YACpD,eAAe;YACf,KAAK,EAAE,aAAa;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC;YACpD,GAAG,EAAE,EAAE,eAAe,EAAE,0BAA0B,EAAE;YACpD,eAAe;YACf,KAAK,EAAE,cAAc;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;QAC5C,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,sBAAsB,CAAC,SAAS,EAAE,YAAY,CAAC;YAC/C,sBAAsB,CAAC,SAAS,EAAE,YAAY,CAAC;SAChD,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC9D,MAAM,iBAAiB,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,sBAAsB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAE3D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,qBAAqB,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExF,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,EAAE,4BAA4B,EAAE,MAAM,CAAC,CAAC;QACpG,MAAM,mBAAmB,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;QAC5C,MAAM,sBAAsB,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QAE9D,MAAM,6BAA6B,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEtF,MAAM,6BAA6B,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rudderhq/agent-runtime-codex-local",
-  "version": "0.7.16",
+  "version": "0.7.19-canary.0",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/Undertone0809/rudder",
   "bugs": {
@@ -68,8 +68,8 @@
     "probe:quota": "pnpm exec tsx src/cli/quota-probe.ts --json"
   },
   "dependencies": {
-    "@rudderhq/agent-runtime-utils": "0.7.16",
-    "@rudderhq/shared": "0.7.16",
+    "@rudderhq/agent-runtime-utils": "0.7.19-canary.0",
+    "@rudderhq/shared": "0.7.19-canary.0",
     "picocolors": "^1.1.1"
   },
   "devDependencies": {

package/skills/rudder-docs/SKILL.md

@@ -14,7 +14,7 @@ If this body is already present in the prompt but the current request does not n
 
 Classify the Rudder question, consult the smallest authoritative source set,
 and answer with clear provenance. Use current evidence instead of memory for
-commands, interfaces, versioned behavior, and product contracts.
+commands, interfaces, versioned behavior, and design proposals.
 
 This router does not make an ordinary hosted task into a Rudder workflow. It
 does not provide a command catalog, replace runtime-owned execution rails, or
@@ -71,8 +71,8 @@ exact page. Do not crawl or load the whole site for a narrow question.
 ### Local Rudder Checkout
 
 Follow the checkout's `AGENTS.md`, then use `doc/README.md` to choose the
-documentation layer: `docs/` for public user guidance, `doc/product/` for the
-intended product contract, `doc/engineering/` for contributor detail, and
+documentation layer: `docs/` for public user guidance, `doc/plans/` for design
+proposals, `doc/engineering/` for contributor detail, and
 source and tests for exact implementation. Search the owning area narrowly and
 cite local paths and line numbers when supported.
 
@@ -92,7 +92,7 @@ limits. Missing evidence narrows the answer; it does not justify invention.
 ## Resolve Versions And Conflicts
 
 Current callable or installed behavior wins for this environment.
-`doc/product/` owns intended product semantics. Source and tests own exact implementation evidence. Public docs own published user guidance. An official
+Proposals record intended changes and rationale. Source and tests own exact implementation evidence. Public docs own published user guidance. An official
 release or tag owns version-specific history.
 
 Do not flatten disagreement:
@@ -101,10 +101,10 @@ Do not flatten disagreement:
   documentation drift;
 - installed help versus a bundled reference: use installed help here and label
   the reference version-adjacent or stale;
-- public docs versus product contract: distinguish published guidance from
-  intended semantics;
-- product contract versus source or tests: report apparent implementation
-  drift and identify both;
+- public docs versus source or tests: report documentation drift and identify
+  both;
+- proposal versus implementation: distinguish intended changes from shipped
+  behavior;
 - default branch versus installed release: use the matching release tag for
   installed behavior;
 - verified evidence versus model memory: discard unsupported memory.
@@ -115,7 +115,7 @@ together or imply certainty that the evidence does not support.
 ## Evidence And Citations
 
 - Attribute each material claim as current-environment behavior, public
-  guidance, intended contract, implementation evidence, version history, or
+  guidance, proposed design, implementation evidence, version history, or
   inference.
 - Cite or link the exact source near the claim when the host supports links.
   For local files, include the path and a tight line reference when possible.
@@ -142,7 +142,7 @@ Read only the reference needed for the request:
 6. [Organization skills](references/organization-skills.md) — discover,
    import, inspect, enable, and synchronize organization or agent skills.
 7. [Source map](references/source-map.md) — stable official documentation,
-   Product Logic, engineering, implementation, test, release, and search
+   proposal, engineering, implementation, test, release, and search
    routes.
 
 ## Security And Bounded Use
@@ -157,8 +157,8 @@ Read only the reference needed for the request:
   releases and tags. Follow stricter host policy when it applies.
 - Preserve organization and workspace boundaries. Do not use documentation
   lookup to expose private resources or cross organization scope.
-- Reading `doc/product/` is allowed for evidence; it does not authorize edits.
-  Product Logic changes require the repository's separate explicit approval.
+- Code and tests establish current behavior. Proposals record design decisions;
+  the retired `doc/product/` registry is historical reference, not an approval gate.
 - A docs-only question does not authorize mutations. If the user also asks for
   an action, apply the normal authorization and safety rules to that action.
 

package/skills/rudder-docs/references/source-map.md

@@ -7,7 +7,7 @@ directories rather than an exhaustive page list. Follow the current checkout's
 ## Section Map
 
 - [Official public documentation](#official-public-documentation)
-- [Product Logic Registry](#product-logic-registry)
+- [Design proposals](#design-proposals)
 - [Contributor and engineering documentation](#contributor-and-engineering-documentation)
 - [Implementation and tests](#implementation-and-tests)
 - [Official remote source and version history](#official-remote-source-and-version-history)
@@ -51,36 +51,12 @@ Other lookup pages are similarly narrow:
 | Windows Desktop release signing policy | `https://docs.rudderhq.dev/reference/code-signing-policy` | `https://docs.rudderhq.dev/zh/reference/code-signing-policy` |
 | Local data and optional service privacy | `https://docs.rudderhq.dev/reference/privacy` | `https://docs.rudderhq.dev/zh/reference/privacy` |
 
-## Product Logic Registry
-
-- Entry point: `doc/product/README.md`
-- Registry map: `doc/product/registry.yml`
-- Domain contracts: `doc/product/domains/`
-- Composed workflows: `doc/product/workflows/`
-- Surface-to-contract maps: `doc/product/surfaces/`
-
-Use Product Logic for intended product semantics and invariants. Start at the
-registry entry point and select the owning domain rather than scanning all
-contracts. Reading these guarded files does not authorize editing them.
-
-Common domain routes include:
-
-- agents, skills, and inbox: `doc/product/domains/agents/`
-- issues and issue-visible state: `doc/product/domains/issues/`
-- assignment, checkout, review routing: `doc/product/domains/work-routing/`
-- runs, execution, transcripts, workspaces: `doc/product/domains/execution/`
-- organizations, goals, and projects:
-  `doc/product/domains/organizations-and-goals/`
-- Library, resources, and runtime context:
-  `doc/product/domains/library-and-context/`
-- Chat, Messenger, comments, and integrations:
-  `doc/product/domains/collaboration/`
-- approvals, budgets, costs, and activity:
-  `doc/product/domains/governance-and-visibility/`
-- reviews, feedback, and learning:
-  `doc/product/domains/review-feedback-learning/`
-- automations: `doc/product/domains/automations/`
-- plugins: `doc/product/domains/plugins/`
+## Design Proposals
+
+Use `doc/plans/` for proposed designs and decision history. Verify current
+behavior against implementation and tests; a proposal is not evidence that a
+feature shipped. The old `doc/product/` registry, domains, workflows, and surface
+maps are historical reference only. They require no synchronization or approval.
 
 ## Contributor And Engineering Documentation