@skaile/workspaces 3.17.0 → 3.18.0

package/dist/bridge/src/codex/instance-state.d.ts

@@ -0,0 +1,16 @@
+import type { CodexCredentialDelivery } from "@skaile/workspaces/types";
+import type { AgentConfig, CodexManagedRuntimeOptions } from "../types.js";
+/** Session-owned state lock and account-bound native resume metadata; never stores credentials. */
+export declare function prepareCodexInstance(config: AgentConfig, options: CodexManagedRuntimeOptions, credential: CodexCredentialDelivery): {
+    root: string;
+    stateRoot: string;
+    cwd: string;
+    home: string;
+    instructionFile: string;
+    bindThread: (threadId: string) => void;
+    release: () => void;
+    setToolInstructions: (text: string) => void;
+};
+/** A replacement environment; managed auth never reads or mutates ambient process.env. */
+export declare function codexInstanceEnvironment(input: Record<string, string>, home: string): Record<string, string>;
+//# sourceMappingURL=instance-state.d.ts.map

package/dist/bridge/src/codex/instance-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-state.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/instance-state.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAoB3E,mGAAmG;AACnG,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,0BAA0B,EACnC,UAAU,EAAE,uBAAuB;;;;;;2BAuHH,MAAM;;gCASD,MAAM;EAkB5C;AAED,0FAA0F;AAC1F,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BxB"}

package/dist/bridge/src/codex/managed-driver.d.ts

@@ -0,0 +1,71 @@
+import { AgentDriver, type AgentConfig, type AgentPromptInput } from "../types.js";
+/** Internal managed implementation behind the existing CodexDriver registry identity. */
+export declare class ManagedCodexDriver extends AgentDriver {
+    private config;
+    readonly driverInfo: {
+        id: string;
+        name: string;
+        modelAgnostic: boolean;
+        supportsInBandAbort: boolean;
+    };
+    private client?;
+    private connecting?;
+    private options?;
+    private credential?;
+    private nativeApprovalPolicy?;
+    private instance?;
+    private tools?;
+    private mcpStartup;
+    private pendingMcpStartup?;
+    private mcpDiagnostics;
+    private controller;
+    private generation;
+    private killed;
+    private broken;
+    private cleanupUncertain;
+    private unexpectedClose;
+    private starting?;
+    private closing;
+    private threadId?;
+    private lastThreadId?;
+    private resetting?;
+    private pendingPatch?;
+    private active?;
+    private threadUsageTotal?;
+    private resumeUsageTurnIds;
+    private queue;
+    private queued;
+    private admittedTurns;
+    private loginCompleted?;
+    private startupRefreshUsed;
+    private startupAuthAttempted;
+    private readonly questions;
+    get acceptsReplyAsPrompt(): boolean;
+    hasPendingQuestion(): boolean;
+    answerQuestion(answer: string, question?: string, requestId?: string): boolean;
+    constructor(config: AgentConfig);
+    get runtimeSessionId(): string | undefined;
+    get isRunning(): boolean;
+    getModel(): string | undefined;
+    start(): Promise<void>;
+    private initialize;
+    private authenticate;
+    private refresh;
+    prompt(message: string): Promise<void>;
+    promptInput(input: AgentPromptInput): Promise<void>;
+    private runTurn;
+    abort(): Promise<void>;
+    kill(): void;
+    dispose(): Promise<void>;
+    resetSession(): Promise<void>;
+    reconfigure(patch: Partial<Pick<AgentConfig, "model" | "thinking" | "effort">>): void;
+    private closeGeneration;
+    private notification;
+    private item;
+    private complete;
+    private nativeErrorCode;
+    private observeMcp;
+    private finishTurn;
+    private event;
+}
+//# sourceMappingURL=managed-driver.d.ts.map

package/dist/bridge/src/codex/managed-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-driver.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/managed-driver.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,WAAW,EACX,KAAK,WAAW,EAGhB,KAAK,gBAAgB,EAItB,MAAM,aAAa,CAAC;AAsHrB,yFAAyF;AACzF,qBAAa,kBAAmB,SAAQ,WAAW;IA+DrC,OAAO,CAAC,MAAM;IA9D1B,QAAQ,CAAC,UAAU;;;;;MAKjB;IACF,OAAO,CAAC,MAAM,CAAC,CAAuB;IACtC,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,OAAO,CAAC,CAA6B;IAC7C,OAAO,CAAC,UAAU,CAAC,CAA0B;IAC7C,OAAO,CAAC,oBAAoB,CAAC,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,CAA0C;IAC3D,OAAO,CAAC,KAAK,CAAC,CAAqB;IACnC,OAAO,CAAC,UAAU,CAAwD;IAC1E,OAAO,CAAC,iBAAiB,CAAC,CAGxB;IACF,OAAO,CAAC,cAAc,CAOpB;IACF,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAC,CAAgB;IAClC,OAAO,CAAC,YAAY,CAAC,CAA8D;IACnF,OAAO,CAAC,MAAM,CAAC,CAAa;IAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAa;IACtC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,cAAc,CAAC,CAGrB;IACF,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoD;IAE9E,IAAa,oBAAoB,IAAI,OAAO,CAE3C;IACQ,kBAAkB,IAAI,OAAO;IAG7B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;gBAInE,MAAM,EAAE,WAAW;IAGvC,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IACD,IAAI,SAAS,IAAI,OAAO,CAEvB;IACQ,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA4Bd,UAAU;YA4PV,YAAY;YA8BZ,OAAO;IAwCrB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;YAsB9C,OAAO;IAuFf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B,IAAI,IAAI,IAAI;IAMG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB1B,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAI9F,OAAO,CAAC,eAAe;IAgDvB,OAAO,CAAC,YAAY;IA+GpB,OAAO,CAAC,IAAI;IAgGZ,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,eAAe;IAsBvB,OAAO,CAAC,UAAU;IAgClB,OAAO,CAAC,UAAU;IA8DlB,OAAO,CAAC,KAAK;CAMd"}

package/dist/bridge/src/codex/native-approvals.d.ts

@@ -0,0 +1,22 @@
+import type { CodexServerRequestHandlers } from "../codex-app-server.js";
+import type { NativeNotifications } from "./native-protocol.generated.js";
+import { type NativeApprovalPolicy } from "./native-policy.js";
+import type { CodexQuestions } from "./questions.js";
+type ApprovalMethod = "item/commandExecution/requestApproval" | "item/fileChange/requestApproval" | "item/permissions/requestApproval";
+type Identity = {
+    itemId: string;
+    threadId: string;
+    turnId: string;
+};
+/** Changes from a retained native file-change item in the same thread and turn. */
+export type NativeApprovalFileChanges = Extract<NativeNotifications["item/started"]["item"], {
+    type: "fileChange";
+}>["changes"];
+/** Driver-owned consent hooks; the existing native callback wrapper owns turn/generation binding. */
+export declare function createCodexNativeApprovalHandlers(options: {
+    questions: CodexQuestions;
+    getPolicy: () => NativeApprovalPolicy | undefined;
+    getFileChanges: (identity: Identity) => NativeApprovalFileChanges | undefined;
+}): Pick<CodexServerRequestHandlers, ApprovalMethod>;
+export {};
+//# sourceMappingURL=native-approvals.d.ts.map

package/dist/bridge/src/codex/native-approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-approvals.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/native-approvals.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAwB,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,KAAK,cAAc,GACf,uCAAuC,GACvC,iCAAiC,GACjC,kCAAkC,CAAC;AACvC,KAAK,QAAQ,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAIrE,mFAAmF;AACnF,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAC7C,mBAAmB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,EAC3C;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CACvB,CAAC,SAAS,CAAC,CAAC;AAEb,qGAAqG;AACrG,wBAAgB,iCAAiC,CAAC,OAAO,EAAE;IACzD,SAAS,EAAE,cAAc,CAAC;IAC1B,SAAS,EAAE,MAAM,oBAAoB,GAAG,SAAS,CAAC;IAClD,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,yBAAyB,GAAG,SAAS,CAAC;CAC/E,GAAG,IAAI,CAAC,0BAA0B,EAAE,cAAc,CAAC,CA2InD"}

package/dist/bridge/src/codex/native-policy.d.ts

@@ -0,0 +1,38 @@
+/** Fixed pinned-native policy. No caller-supplied profile or sandbox override is admitted. */
+export declare function prepareNativePolicy(input: {
+    cwd: string;
+    privateRoot: string;
+    privateDirectory: string;
+    sandboxMode: "read-only" | "workspace-write";
+}): Readonly<{
+    config: Readonly<{
+        default_permissions: "managed";
+        features: Readonly<{
+            use_legacy_landlock: false;
+        }>;
+        permissions: Readonly<{
+            managed: Readonly<{
+                extends: ":read-only";
+                filesystem: Readonly<{
+                    [x: string]: "read" | "write" | "deny";
+                }>;
+                network: Readonly<{
+                    enabled: false;
+                }>;
+            }>;
+        }>;
+    }>;
+    cliArgs: readonly string[];
+}>;
+type PreparedNativePolicy = ReturnType<typeof prepareNativePolicy>;
+declare const admissionBrand: unique symbol;
+export type NativeApprovalPolicy = {
+    readonly [admissionBrand]: true;
+};
+/** Confirms composition and native selection, not live OS isolation (G1/G2 remain required). */
+export declare function activateNativeApprovalPolicy(policy: PreparedNativePolicy, response: unknown, signal: AbortSignal): NativeApprovalPolicy;
+export declare function isNativeApprovalPolicyActive(policy: unknown, threadId: string): policy is NativeApprovalPolicy;
+/** Resolve existing ancestors too, so new files cannot escape via a project symlink. */
+export declare function allowsNativeApprovalPath(policy: NativeApprovalPolicy | undefined, path: string, access: "read" | "write"): boolean;
+export {};
+//# sourceMappingURL=native-policy.d.ts.map

package/dist/bridge/src/codex/native-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-policy.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/native-policy.ts"],"names":[],"mappings":"AAmBA,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,WAAW,GAAG,iBAAiB,CAAC;CAC9C;;;;;;;;;;;;;;;;;;;GA+CA;AAED,KAAK,oBAAoB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGnE,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAC5C,MAAM,MAAM,oBAAoB,GAAG;IAAE,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAGvE,gGAAgG;AAChG,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,WAAW,GAClB,oBAAoB,CAkBtB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,GACf,MAAM,IAAI,oBAAoB,CAIhC;AAED,wFAAwF;AACxF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,oBAAoB,GAAG,SAAS,EACxC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,OAAO,GACvB,OAAO,CA+BT"}