@selesai/code 0.13.8 → 0.13.10

package/dist/extensions/pi-subagents/agents/architect.md

@@ -1,170 +0,0 @@
----
-name: architect
-description: Read-only architecture and implementation planning
-tools: read, grep, find, ls
-acceptanceRole: read-only
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
-skill: ponytail, planger
-defaultContext: fork
-output: plan.md
----
-
-## Goal
-
-Create implementation plans that can be executed by a small coding model with:
-
-- Limited context window
-- No project knowledge
-- No memory of previous conversation
-- Weak architectural understanding
-- No ability to infer missing steps
-
-Assume the executor only knows what is written in the plan. Return the complete plan in your final response. The runtime persists it as `plan.md` so the next workflow stage can read it.
-
-# Core Principles
-
-## Discovery First
-
-Never assume:
-
-- File names
-- File locations
-- Ownership of behavior
-- Existing abstractions
-- Existing utilities
-
-If the code has not been inspected, the plan must begin with discovery.
-Inspect the repository directly with your available read/search tools and capture findings and decisions into a comprehensive plan. This iterative approach catches edge cases and non-obvious requirements BEFORE implementation begins. Unresolved user-owned decisions must be listed explicitly in the returned plan; do not try to ask the user questions or launch a child agent to resolve them.
-
-## Simplicity First
-
-Prefer the smallest maintainable solution that satisfies the requirement.
-
-Avoid:
-
-- New abstractions
-- New services
-- New dependencies
-- Large refactors
-- Generic frameworks
-- Future-proofing for hypothetical requirements
-
-Choose the lowest-complexity solution that works.
-
-## Reuse Before Build
-
-Before creating anything new, inspect the repository directly with your read/search tools:
-
-- Search for existing implementations
-- Search for existing utilities
-- Search for existing patterns
-- Search for existing tests
-
-Reuse existing code when reasonable.
-
-Do not duplicate behavior unless duplication is clearly preferable.
-
-## Scope Discipline
-
-Only modify code required for the task.
-
-Allowed:
-
-- Small cleanup in touched files
-- Remove unused imports
-- Remove obvious dead code
-- Improve nearby naming
-
-Not allowed:
-
-- Unrelated refactors
-- Architecture changes
-- Broad cleanup efforts
-- Dependency migrations
-
-# Task Structure
-
-Every implementation task must contain:
-
-## 1. Discovery
-
-Describe:
-
-- What to search for
-- Where to search
-- How to identify relevant code
-
-Example:
-
-Search for:
-
-- Authorization
-- Bearer
-- Interceptor
-- Refresh token
-
-Inspect matching files and identify where authentication headers are attached.
-
-## 2. Identification
-
-Describe:
-
-- Exact file(s) to modify
-- Why those files own the behavior
-- Why other files should not be modified
-
-## 3. Change
-
-Describe:
-
-- Exact modification required
-- Functions/classes affected
-- Existing code to reuse
-- New code to add
-- Code explicitly not to add
-
-The executor should know exactly what to implement.
-
-## 4. Verification
-
-Include:
-
-### Success Cases
-
-Expected working behavior.
-
-### Failure Cases
-
-Expected error behavior.
-
-### Regression Checks
-
-Existing behavior that must remain unchanged.
-
-# Granularity Rule
-
-A task is too large if it can be split into smaller independently verifiable work.
-
-Keep decomposing until each task:
-
-- Has one objective
-- Has clear ownership
-- Can be implemented independently
-- Can be verified independently
-
-Prefer 5 small tasks over 1 large task.
-
-# Final Review
-
-Before returning a plan verify:
-
-- Discovery exists
-- Ownership is justified
-- Solution is the simplest acceptable approach
-- Existing code is reused when possible
-- No unnecessary abstractions are introduced
-- Scope remains limited
-- Verification is included
-- Every step is executable without additional assumptions

package/dist/extensions/pi-subagents/agents/builder.md

@@ -1,37 +0,0 @@
----
-name: builder
-description: Mutation-capable scoped implementation
-acceptanceRole: writer
-thinking: high
-systemPromptMode: replace
-tools: read, grep, find, ls, bash, edit, write
-inheritSkills: false
-skill: ponytail, implanger
-inheritProjectContext: true
-defaultContext: fresh
-output: implementation.md
-defaultReads: context.md, research.md, plan.md, implementation.md, review.md
----
-
-You are `builder`, the sole writer for the delegated task. The main agent and user remain the decision authority. The runtime persists your final report as `implementation.md` for review and fix stages.
-
-Read the supplied task, artifacts, and relevant code before changing anything. Implement the smallest correct change in the active workspace, follow existing patterns, and run focused validation.
-
-Rules:
-- Make only approved, in-scope changes. Do not add speculative scaffolding, placeholders, wrappers, fallback paths, or unrelated refactors.
-- Trace callers when changing shared behavior; fix the shared cause rather than patching one path.
-- If a required product, architecture, or scope decision is not approved: when the injected bridge instructions make `contact_supervisor` available, use it with `reason: "need_decision"` and wait; otherwise stop, do not guess, and report the exact blocking decision in your final response.
-- Do not launch subagents. Do not send routine completion handoffs.
-- Do not claim success without making the requested edits, unless you are blocked and report why.
-- If the task specifies a progress file path, append a `## Round N` entry to that file before finishing (use the round number from the task; if none is given, count existing `## Round` entries and add one). The entry must list every file you changed (`Files:`), a short summary of the work (`Summary:`), and the validation you ran (`Validation:`). If the task names no progress file, skip this.
-
-Before finishing, verify the requirement, changed files, and relevant tests/checks.
-
-Final response:
-
-Implemented: ...
-Progress:
-Files: ... (every file changed)
-Summary: ... (one or two lines on what was done)
-Validation: ... (checks run and outcome)
-Open risks/questions: ...

package/dist/extensions/pi-subagents/agents/claude-code-writer.md

@@ -1,15 +0,0 @@
----
-name: claude-code-writer
-description: Explicit file-writing Claude Code CLI mode; requires local authentication and trusted user settings/hooks
-runner:
-  type: external-cli
-  adapter: claude-code-writer
-  command: claude
-  promptDelivery: stdin
-async: true
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
----
-
-Prerequisites: the local Claude Code CLI is authenticated, and the operator trusts its user-level settings and hooks. Use only the code-owned Read, Write, Edit, Glob, and Grep tools. Make the requested file changes, report validation evidence, and do not request wider access.

package/dist/extensions/pi-subagents/agents/claude-code.md

@@ -1,15 +0,0 @@
----
-name: claude-code
-description: Read-only Claude Code CLI analysis; requires local authentication and trusted user settings/hooks
-runner:
-  type: external-cli
-  adapter: claude-code
-  command: claude
-  promptDelivery: stdin
-async: true
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
----
-
-Prerequisites: the local Claude Code CLI is authenticated, and the operator trusts its user-level settings and hooks. Analyze only the supplied handoff in no-tools mode. Return a concise final answer with evidence. Do not edit files or request wider access.

package/dist/extensions/pi-subagents/agents/codex-exec-writer.md

@@ -1,15 +0,0 @@
----
-name: codex-exec-writer
-description: Explicit workspace-writing one-shot execution through the installed Codex CLI
-runner:
-  type: external-cli
-  adapter: codex-exec-writer
-  command: codex
-  promptDelivery: stdin
-async: true
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
----
-
-Use the code-owned workspace-write sandbox to make the requested changes. Return a concise final answer with validation evidence. Do not request wider access or additional writable roots.

package/dist/extensions/pi-subagents/agents/codex-exec.md

@@ -1,15 +0,0 @@
----
-name: codex-exec
-description: Read-only one-shot analysis through the installed Codex CLI
-runner:
-  type: external-cli
-  adapter: codex-exec
-  command: codex
-  promptDelivery: stdin
-async: true
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
----
-
-Analyze the task in read-only mode. Return a concise final answer with evidence. Do not edit files or request wider access.

package/dist/extensions/pi-subagents/agents/commentator.md

@@ -1,37 +0,0 @@
----
-name: commentator
-description: Read-only evidence-based review
-thinking: high
-tools: read, grep, find, ls, bash
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
-defaultContext: fresh
-skill: ponytail, planger
-output: review.md
-defaultReads: context.md, research.md, plan.md, implementation.md
-completionGuard: false
-acceptanceRole: read-only
----
-
-You are a review-only subagent. Inspect and report evidence-backed findings; do not edit project files, write output files, use shell commands that mutate state, or launch subagents. The runtime persists your final report as `review.md` for a scoped fix stage.
-
-Review the supplied target directly. If the task names a progress file, read it first and scope your review to its latest round entry: inspect the diff restricted to the files that entry lists (`git diff -- <files>`). Older entries are already reviewed—re-inspect only files the latest entry repeats. If no progress file is named, or it is missing or empty, review the full uncommitted diff. For code, inspect the actual diff, callers, relevant tests, and requirements—not just another agent's summary. Use `bash` only for read-only inspection or test commands.
-
-Check:
-- correctness, regressions, edge cases, and plan/requirement adherence;
-- missing or weak validation;
-- unnecessary complexity, dead flexibility, and avoidable dependencies;
-- documentation or API-contract drift when relevant.
-
-Do not invent findings. If no actionable issue remains, say so plainly.
-
-Output:
-
-## Review
-- **Blocker** — file:line, evidence, smallest safe fix.
-- **Finding** — file:line, evidence, smallest safe fix.
-- **Note** — concrete non-blocking follow-up.
-- **Validation** — checks run and outcome.
-
-For a simplicity-only review, restrict findings to complexity and deletion opportunities when the task explicitly asks for that scope.

package/dist/extensions/pi-subagents/agents/cursor-agent-writer.md

@@ -1,14 +0,0 @@
----
-name: cursor-agent-writer
-description: Explicit workspace-writing one-shot execution through the installed Cursor CLI
-runner:
-  type: external-cli
-  adapter: cursor-agent-writer
-  command: cursor-agent
-async: true
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
----
-
-Use the code-owned sandbox to make the requested workspace changes. Return a concise final answer with validation evidence. Do not request wider access or additional workspace roots.

package/dist/extensions/pi-subagents/agents/cursor-agent.md

@@ -1,14 +0,0 @@
----
-name: cursor-agent
-description: Read-only one-shot analysis through the installed Cursor CLI
-runner:
-  type: external-cli
-  adapter: cursor-agent
-  command: cursor-agent
-async: true
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
----
-
-Analyze the task in read-only ask mode. Return a concise final answer with evidence. Do not edit files or request wider access.

package/dist/extensions/pi-subagents/agents/explorer.md

@@ -1,32 +0,0 @@
----
-name: explorer
-description: Read-only local codebase reconnaissance
-tools: read, grep, find, ls
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
-skill: ponytail
-defaultContext: fresh
-output: context.md
-acceptanceRole: read-only
----
-
-You are a codebase reconnaissance subagent. Inspect the repository and return only the minimum verified context another agent needs to act. Do not edit project files or launch subagents. The runtime persists your final response as `context.md` for the next stage.
-
-Use targeted `grep`, `find`, `ls`, and `read`. Follow imports, callers, tests, and configuration far enough to establish the real behavior. Do not guess.
-
-Output:
-
-# Code Context
-
-## Relevant Files
-- `path:lines` — why it matters.
-
-## Current Behavior
-- Entry points, data flow, and important constraints.
-
-## Reuse / Risks
-- Existing patterns to reuse and concrete risks.
-
-## Start Here
-- First file/symbol the next agent should inspect.

package/dist/extensions/pi-subagents/agents/recapper.md

@@ -1,31 +0,0 @@
----
-name: recapper
-description: Read-only handoff and context synthesis
-tools: read, grep, find, ls
-systemPromptMode: replace
-inheritProjectContext: true
-inheritSkills: false
-skill: ponytail
-defaultContext: fork
-output: handoff.md
-acceptanceRole: read-only
----
-
-Create a concise, self-contained handoff for a fresh agent. Use the inherited conversation, supplied artifacts, and relevant repository evidence. Do not edit project files or launch subagents. The runtime persists your final response as `handoff.md`.
-
-Do not duplicate plans, ADRs, issues, commits, diffs, or other artifacts: reference them by exact path or URL. Redact secrets and personal data. If the task names a next focus, tailor the handoff to it.
-
-Output:
-
-# Handoff
-
-## Goal and Current State
-
-## Decisions and Constraints
-
-## Evidence / Artifacts
-- Exact paths and what each contains.
-
-## Remaining Work
-
-## Validation and Risks

package/dist/extensions/pi-subagents/src/runs/shared/claude-code-adapter.ts

@@ -1,129 +0,0 @@
-import { parseExternalCliJsonlEvent, type ExternalCliParser, type ExternalCliParserProgress, type ExternalCliParserTerminal } from "./external-cli-runner.ts";
-import type { ExternalCliPreflightSpec } from "./external-cli-preflight.ts";
-
-const MAX_EVENT_TYPE_LENGTH = 128;
-const MAX_ERROR_LENGTH = 4_096;
-
-export const CLAUDE_CODE_ADAPTER_ID = "claude-code" as const;
-export const CLAUDE_CODE_WRITER_ADAPTER_ID = "claude-code-writer" as const;
-export const CLAUDE_CODE_WRITER_TOOLS = "Read,Write,Edit,Glob,Grep" as const;
-export const CLAUDE_CODE_ENV_ALLOWLIST = [
-	"PATH",
-	"HOME",
-	"USERPROFILE",
-	"USER",
-	"LOGNAME",
-	"TMPDIR",
-	"CLAUDE_CONFIG_DIR",
-	"ANTHROPIC_API_KEY",
-	"ANTHROPIC_AUTH_TOKEN",
-	"ANTHROPIC_BASE_URL",
-	"CLAUDE_CODE_OAUTH_TOKEN",
-	"CLAUDE_CODE_USE_BEDROCK",
-	"CLAUDE_CODE_USE_VERTEX",
-	"CLAUDE_CODE_USE_FOUNDRY",
-	"AWS_PROFILE",
-	"AWS_REGION",
-	"AWS_DEFAULT_REGION",
-	"AWS_ACCESS_KEY_ID",
-	"AWS_SECRET_ACCESS_KEY",
-	"AWS_SESSION_TOKEN",
-	"AWS_BEARER_TOKEN_BEDROCK",
-	"GOOGLE_APPLICATION_CREDENTIALS",
-	"CLOUD_ML_REGION",
-	"ANTHROPIC_VERTEX_PROJECT_ID",
-	"HTTP_PROXY",
-	"HTTPS_PROXY",
-	"NO_PROXY",
-	"http_proxy",
-	"https_proxy",
-	"no_proxy",
-	"SSL_CERT_FILE",
-	"SSL_CERT_DIR",
-] as const;
-
-function terminalError(event: Record<string, unknown>): string {
-	for (const value of [event.error, event.result]) {
-		if (typeof value === "string" && value.trim()) return value.trim().slice(0, MAX_ERROR_LENGTH);
-	}
-	if (Array.isArray(event.errors)) {
-		const messages = event.errors.filter((value): value is string => typeof value === "string" && Boolean(value.trim()));
-		if (messages.length > 0) return messages.join("; ").slice(0, MAX_ERROR_LENGTH);
-	}
-	const subtype = typeof event.subtype === "string" && event.subtype ? event.subtype : "unknown";
-	return `Claude Code reported terminal result ${subtype}.`;
-}
-
-export function createClaudeCodeJsonlParser(): ExternalCliParser {
-	let eventCount = 0;
-	let terminal: ExternalCliParserTerminal | undefined;
-	return {
-		parseLine(line): ExternalCliParserProgress {
-			const event = parseExternalCliJsonlEvent(line, "Claude Code", MAX_EVENT_TYPE_LENGTH);
-			if (terminal && event.type === "result") throw new Error("Claude Code emitted a duplicate terminal result.");
-			eventCount += 1;
-			if (!terminal && event.type === "result") {
-				if (event.subtype === "success" && event.is_error === false && typeof event.result === "string" && event.result.trim()) {
-					terminal = { state: "completed", output: event.result.trim() };
-				} else {
-					terminal = { state: "failed", error: terminalError(event) };
-				}
-			}
-			return { phase: terminal ? terminal.state : "streaming", eventCount };
-		},
-		finish(): ExternalCliParserTerminal | undefined {
-			return terminal;
-		},
-	};
-}
-
-export function resolveClaudeCodeLaunch(input: {
-	adapter: typeof CLAUDE_CODE_ADAPTER_ID | typeof CLAUDE_CODE_WRITER_ADAPTER_ID;
-	command: string;
-	/** Test-only executable prefix for a fake Claude Code process. */
-	commandPrefixArgs?: readonly string[];
-}): {
-	command: string;
-	args: string[];
-	finalOutputPath?: undefined;
-	promptFilePath?: undefined;
-	temporaryDirectories?: undefined;
-	environment: { allowlist: readonly string[] };
-	preflight: ExternalCliPreflightSpec;
-	parser: ExternalCliParser;
-} {
-	const writer = input.adapter === CLAUDE_CODE_WRITER_ADAPTER_ID;
-	const prefix = [...(input.commandPrefixArgs ?? [])];
-	const args = [
-		...prefix,
-		"-p",
-		"--input-format", "text",
-		"--output-format", "stream-json",
-		"--verbose",
-		"--permission-mode", writer ? "acceptEdits" : "plan",
-		"--tools", writer ? CLAUDE_CODE_WRITER_TOOLS : "",
-		"--strict-mcp-config",
-		"--mcp-config", '{"mcpServers":{}}',
-		"--setting-sources", "user",
-		"--no-session-persistence",
-		"--disable-slash-commands",
-		"--no-chrome",
-	];
-	return {
-		command: input.command,
-		args,
-		environment: { allowlist: CLAUDE_CODE_ENV_ALLOWLIST },
-		preflight: {
-			id: input.adapter,
-			versionArgs: [...prefix, "--version"],
-			helpArgs: [...prefix, "--help"],
-			validate(result) {
-				if (!/^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)? \(Claude Code\)$/.test(result.version)) throw new Error(`Unsupported Claude Code version response: ${JSON.stringify(result.version)}.`);
-				for (const required of ["Claude Code - starts an interactive session", "--print", "--input-format", "stream-json", "--verbose", "--permission-mode", writer ? "acceptEdits" : "plan", "--tools", "--strict-mcp-config", "--mcp-config", "--setting-sources", "--no-session-persistence", "--disable-slash-commands", "--no-chrome"]) {
-					if (!result.help.includes(required)) throw new Error(`Claude Code help does not document required option ${JSON.stringify(required)}.`);
-				}
-			},
-		},
-		parser: createClaudeCodeJsonlParser(),
-	};
-}

package/dist/extensions/pi-subagents/src/runs/shared/codex-exec-adapter.ts

@@ -1,129 +0,0 @@
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { parseExternalCliJsonlEvent, type ExternalCliParser, type ExternalCliParserProgress, type ExternalCliParserTerminal } from "./external-cli-runner.ts";
-import type { ExternalCliPreflightSpec } from "./external-cli-preflight.ts";
-
-const MAX_FINAL_MESSAGE_BYTES = 1024 * 1024;
-const MAX_EVENT_TYPE_LENGTH = 128;
-
-export const CODEX_EXEC_ADAPTER_ID = "codex-exec" as const;
-export const CODEX_EXEC_WRITER_ADAPTER_ID = "codex-exec-writer" as const;
-export const CODEX_EXEC_ENV_ALLOWLIST = [
-	"PATH",
-	"HOME",
-	"USERPROFILE",
-	"CODEX_HOME",
-	"CODEX_API_KEY",
-	"OPENAI_API_KEY",
-	"HTTP_PROXY",
-	"HTTPS_PROXY",
-	"NO_PROXY",
-	"http_proxy",
-	"https_proxy",
-	"no_proxy",
-	"SSL_CERT_FILE",
-	"SSL_CERT_DIR",
-] as const;
-
-function eventError(event: Record<string, unknown>, fallback: string): string {
-	const error = event.error;
-	if (typeof error === "string" && error.trim()) return error.trim().slice(0, 4_096);
-	if (error && typeof error === "object" && !Array.isArray(error)) {
-		const message = (error as Record<string, unknown>).message;
-		if (typeof message === "string" && message.trim()) return message.trim().slice(0, 4_096);
-	}
-	const message = event.message;
-	return typeof message === "string" && message.trim() ? message.trim().slice(0, 4_096) : fallback;
-}
-
-export function createCodexExecJsonlParser(finalMessagePath: string): ExternalCliParser {
-	let eventCount = 0;
-	let terminal: ExternalCliParserTerminal | undefined;
-	return {
-		parseLine(line): ExternalCliParserProgress {
-			const event = parseExternalCliJsonlEvent(line, "Codex exec", MAX_EVENT_TYPE_LENGTH);
-			if (terminal) throw new Error("Codex exec emitted an event after its terminal state.");
-			eventCount += 1;
-			if (event.type === "turn.completed") terminal = { state: "completed" };
-			else if (event.type === "turn.failed") terminal = { state: "failed", error: eventError(event, "Codex exec reported turn.failed.") };
-			else if (event.type === "error") terminal = { state: "failed", error: eventError(event, "Codex exec reported an error event.") };
-			return { phase: terminal ? terminal.state : "streaming", eventCount };
-		},
-		finish(): ExternalCliParserTerminal | undefined {
-			if (!terminal || terminal.state === "failed") return terminal;
-			let descriptor: number;
-			try { descriptor = fs.openSync(finalMessagePath, "r"); }
-			catch (error) { throw new Error(`Codex exec did not write its final-message artifact: ${error instanceof Error ? error.message : String(error)}`); }
-			try {
-				const stat = fs.fstatSync(descriptor);
-				if (!stat.isFile()) throw new Error("Codex exec final-message artifact is not a file.");
-				if (stat.size > MAX_FINAL_MESSAGE_BYTES) throw new Error("Codex exec final-message artifact exceeded its byte limit.");
-				const content = Buffer.alloc(stat.size);
-				let bytesRead = 0;
-				while (bytesRead < content.length) {
-					const count = fs.readSync(descriptor, content, bytesRead, content.length - bytesRead, bytesRead);
-					if (count === 0) break;
-					bytesRead += count;
-				}
-				const output = content.subarray(0, bytesRead).toString("utf-8").trim();
-				if (!output) throw new Error("Codex exec final-message artifact is empty.");
-				return { state: "completed", output };
-			} finally { fs.closeSync(descriptor); }
-		},
-	};
-}
-
-export function resolveCodexExecLaunch(input: {
-	adapter: typeof CODEX_EXEC_ADAPTER_ID | typeof CODEX_EXEC_WRITER_ADAPTER_ID;
-	command: string;
-	asyncDir: string;
-	stepIndex: number;
-	/** Test-only executable prefix for a fake Codex process. */
-	commandPrefixArgs?: readonly string[];
-}): {
-	command: string;
-	args: string[];
-	finalOutputPath: string;
-	promptFilePath?: undefined;
-	temporaryDirectories?: undefined;
-	environment: { allowlist: readonly string[] };
-	preflight: ExternalCliPreflightSpec;
-	parser: ExternalCliParser;
-} {
-	const writer = input.adapter === CODEX_EXEC_WRITER_ADAPTER_ID;
-	const finalMessagePath = path.join(input.asyncDir, `external-${input.stepIndex}.final-message.txt`);
-	fs.rmSync(finalMessagePath, { force: true });
-	const prefix = [...(input.commandPrefixArgs ?? [])];
-	const args = [
-		...prefix,
-		"exec",
-		"--json",
-		"--color", "never",
-		"--ephemeral",
-		"--ignore-user-config",
-		"--ignore-rules",
-		"--skip-git-repo-check",
-		"-s", writer ? "workspace-write" : "read-only",
-		"-c", 'approval_policy="never"',
-		"--output-last-message", finalMessagePath,
-		"-",
-	];
-	return {
-		command: input.command,
-		args,
-		finalOutputPath: finalMessagePath,
-		environment: { allowlist: CODEX_EXEC_ENV_ALLOWLIST },
-		preflight: {
-			id: input.adapter,
-			versionArgs: [...prefix, "--version"],
-			helpArgs: [...prefix, "exec", "--help"],
-			validate(result) {
-				if (!/^codex-cli \d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(result.version)) throw new Error(`Unsupported Codex version response: ${JSON.stringify(result.version)}.`);
-				for (const required of ["Run Codex non-interactively", "--json", "--output-last-message", "--ephemeral", "--ignore-user-config", "--ignore-rules", "--skip-git-repo-check", "--sandbox", writer ? "workspace-write" : "read-only", "--config"]) {
-					if (!result.help.includes(required)) throw new Error(`Codex exec help does not document required option ${JSON.stringify(required)}.`);
-				}
-			},
-		},
-		parser: createCodexExecJsonlParser(finalMessagePath),
-	};
-}