@skaile/workspaces 3.17.0 → 3.19.0

package/dist/bridge/src/codex/credentials.d.ts

@@ -0,0 +1,12 @@
+import type { CodexCredentialDelivery, CodexSubscriptionRefreshInput, CodexSubscriptionRefreshResult } from "@skaile/workspaces/types";
+/** Validate credential shape and provenance without including input values in errors. */
+export declare function parseCodexCredential(value: unknown, now?: number): CodexCredentialDelivery;
+/** Validate runtime-only refresh input against the authenticated session's pinned delivery. */
+export declare function parseCodexRefreshInput(value: unknown, pinned: Extract<CodexCredentialDelivery, {
+    kind: "codex-subscription";
+}>): CodexSubscriptionRefreshInput;
+/** Accept refreshed subscription credentials only within the existing config/account binding. */
+export declare function parseCodexRefreshResult(value: unknown, pinned: Extract<CodexCredentialDelivery, {
+    kind: "codex-subscription";
+}>, now?: number): CodexSubscriptionRefreshResult;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/bridge/src/codex/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,8BAA8B,EAC/B,MAAM,0BAA0B,CAAC;AA0BlC,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,uBAAuB,CAa9F;AAED,+FAA+F;AAC/F,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,GACvE,6BAA6B,CAgB/B;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,EACxE,GAAG,SAAa,GACf,8BAA8B,CAsBhC"}

package/dist/bridge/src/codex/inputs.d.ts

@@ -0,0 +1,8 @@
+import type { AgentPromptInput } from "../types.js";
+import type { NativeRequests } from "./native-protocol.generated.js";
+/** Resolve attachments against trusted workspace/skill roots, never private credential state. */
+export declare function codexPromptInput(input: AgentPromptInput, cwd: string, skills?: {
+    source: string;
+    target: string;
+}): NativeRequests["turn/start"]["params"]["input"];
+//# sourceMappingURL=inputs.d.ts.map

package/dist/bridge/src/codex/inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inputs.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/inputs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAQrE,iGAAiG;AACjG,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,gBAAgB,EACvB,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1C,cAAc,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAsCjD"}

package/dist/bridge/src/codex/instance-state.d.ts

@@ -0,0 +1,16 @@
+import type { CodexCredentialDelivery } from "@skaile/workspaces/types";
+import type { AgentConfig, CodexManagedRuntimeOptions } from "../types.js";
+/** Session-owned state lock and account-bound native resume metadata; never stores credentials. */
+export declare function prepareCodexInstance(config: AgentConfig, options: CodexManagedRuntimeOptions, credential: CodexCredentialDelivery): {
+    root: string;
+    stateRoot: string;
+    cwd: string;
+    home: string;
+    instructionFile: string;
+    bindThread: (threadId: string) => void;
+    release: () => void;
+    setToolInstructions: (text: string) => void;
+};
+/** A replacement environment; managed auth never reads or mutates ambient process.env. */
+export declare function codexInstanceEnvironment(input: Record<string, string>, home: string): Record<string, string>;
+//# sourceMappingURL=instance-state.d.ts.map

package/dist/bridge/src/codex/instance-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-state.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/instance-state.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAoB3E,mGAAmG;AACnG,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,0BAA0B,EACnC,UAAU,EAAE,uBAAuB;;;;;;2BAuHH,MAAM;;gCASD,MAAM;EAkB5C;AAED,0FAA0F;AAC1F,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BxB"}

package/dist/bridge/src/codex/managed-driver.d.ts

@@ -0,0 +1,73 @@
+import { AgentDriver, type AgentConfig, type AgentPromptInput } from "../types.js";
+/** Internal managed implementation behind the existing CodexDriver registry identity. */
+export declare class ManagedCodexDriver extends AgentDriver {
+    private config;
+    readonly driverInfo: {
+        id: string;
+        name: string;
+        modelAgnostic: boolean;
+        supportsInBandAbort: boolean;
+    };
+    private client?;
+    private connecting?;
+    private options?;
+    private credential?;
+    private nativeApprovalPolicy?;
+    private instance?;
+    private tools?;
+    private mcpStartup;
+    private pendingMcpStartup?;
+    private mcpDiagnostics;
+    private controller;
+    private generation;
+    private killed;
+    private broken;
+    private cleanupUncertain;
+    private unexpectedClose;
+    private starting?;
+    private closing;
+    private threadId?;
+    private lastThreadId?;
+    private resetting?;
+    private pendingPatch?;
+    private active?;
+    private threadUsageTotal?;
+    private resumeUsageTurnIds;
+    private queue;
+    private queued;
+    private admittedTurns;
+    private loginCompleted?;
+    private startupRefreshUsed;
+    private startupAuthAttempted;
+    private readonly questions;
+    get acceptsReplyAsPrompt(): boolean;
+    hasPendingQuestion(): boolean;
+    answerQuestion(answer: string, question?: string, requestId?: string): boolean;
+    constructor(config: AgentConfig);
+    get runtimeSessionId(): string | undefined;
+    get isRunning(): boolean;
+    getModel(): string | undefined;
+    start(): Promise<void>;
+    private initialize;
+    private authenticate;
+    private refresh;
+    prompt(message: string): Promise<void>;
+    promptInput(input: AgentPromptInput): Promise<void>;
+    private runTurn;
+    abort(): Promise<void>;
+    kill(): void;
+    dispose(): Promise<void>;
+    resetSession(): Promise<void>;
+    reconfigure(patch: Partial<Pick<AgentConfig, "model" | "thinking" | "effort">>): void;
+    private closeGeneration;
+    private notification;
+    private item;
+    private complete;
+    private nativeErrorCode;
+    private observeMcp;
+    private observeClosedMcp;
+    private publishMcp;
+    private finishTurn;
+    private event;
+}
+//# sourceMappingURL=managed-driver.d.ts.map

package/dist/bridge/src/codex/managed-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-driver.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/managed-driver.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EACX,KAAK,WAAW,EAGhB,KAAK,gBAAgB,EAItB,MAAM,aAAa,CAAC;AAwHrB,yFAAyF;AACzF,qBAAa,kBAAmB,SAAQ,WAAW;IA+DrC,OAAO,CAAC,MAAM;IA9D1B,QAAQ,CAAC,UAAU;;;;;MAKjB;IACF,OAAO,CAAC,MAAM,CAAC,CAAuB;IACtC,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,OAAO,CAAC,CAA6B;IAC7C,OAAO,CAAC,UAAU,CAAC,CAA0B;IAC7C,OAAO,CAAC,oBAAoB,CAAC,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,CAA0C;IAC3D,OAAO,CAAC,KAAK,CAAC,CAAqB;IACnC,OAAO,CAAC,UAAU,CAAwD;IAC1E,OAAO,CAAC,iBAAiB,CAAC,CAGxB;IACF,OAAO,CAAC,cAAc,CAOpB;IACF,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAC,CAAgB;IAClC,OAAO,CAAC,YAAY,CAAC,CAA8D;IACnF,OAAO,CAAC,MAAM,CAAC,CAAa;IAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAa;IACtC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,cAAc,CAAC,CAGrB;IACF,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoD;IAE9E,IAAa,oBAAoB,IAAI,OAAO,CAE3C;IACQ,kBAAkB,IAAI,OAAO;IAG7B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;gBAInE,MAAM,EAAE,WAAW;IAGvC,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IACD,IAAI,SAAS,IAAI,OAAO,CAEvB;IACQ,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA4Bd,UAAU;YAqSV,YAAY;YA8BZ,OAAO;IAwCrB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;YAsB9C,OAAO;IAuFf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B,IAAI,IAAI,IAAI;IAMG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB1B,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAI9F,OAAO,CAAC,eAAe;IAsDvB,OAAO,CAAC,YAAY;IA+GpB,OAAO,CAAC,IAAI;IAgGZ,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,eAAe;IAsBvB,OAAO,CAAC,UAAU;IA0BlB,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,UAAU;IA8DlB,OAAO,CAAC,KAAK;CAMd"}

package/dist/bridge/src/codex/native-approvals.d.ts

@@ -0,0 +1,22 @@
+import type { CodexServerRequestHandlers } from "../codex-app-server.js";
+import type { NativeNotifications } from "./native-protocol.generated.js";
+import { type NativeApprovalPolicy } from "./native-policy.js";
+import type { CodexQuestions } from "./questions.js";
+type ApprovalMethod = "item/commandExecution/requestApproval" | "item/fileChange/requestApproval" | "item/permissions/requestApproval";
+type Identity = {
+    itemId: string;
+    threadId: string;
+    turnId: string;
+};
+/** Changes from a retained native file-change item in the same thread and turn. */
+export type NativeApprovalFileChanges = Extract<NativeNotifications["item/started"]["item"], {
+    type: "fileChange";
+}>["changes"];
+/** Driver-owned consent hooks; the existing native callback wrapper owns turn/generation binding. */
+export declare function createCodexNativeApprovalHandlers(options: {
+    questions: CodexQuestions;
+    getPolicy: () => NativeApprovalPolicy | undefined;
+    getFileChanges: (identity: Identity) => NativeApprovalFileChanges | undefined;
+}): Pick<CodexServerRequestHandlers, ApprovalMethod>;
+export {};
+//# sourceMappingURL=native-approvals.d.ts.map

package/dist/bridge/src/codex/native-approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-approvals.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/native-approvals.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAwB,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,KAAK,cAAc,GACf,uCAAuC,GACvC,iCAAiC,GACjC,kCAAkC,CAAC;AACvC,KAAK,QAAQ,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAIrE,mFAAmF;AACnF,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAC7C,mBAAmB,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,EAC3C;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CACvB,CAAC,SAAS,CAAC,CAAC;AAEb,qGAAqG;AACrG,wBAAgB,iCAAiC,CAAC,OAAO,EAAE;IACzD,SAAS,EAAE,cAAc,CAAC;IAC1B,SAAS,EAAE,MAAM,oBAAoB,GAAG,SAAS,CAAC;IAClD,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,yBAAyB,GAAG,SAAS,CAAC;CAC/E,GAAG,IAAI,CAAC,0BAA0B,EAAE,cAAc,CAAC,CA2InD"}

package/dist/bridge/src/codex/native-mcp-approval.d.ts

@@ -0,0 +1,13 @@
+import type { CodexServerRequestHandlers } from "../codex-app-server.js";
+import { type NativeApprovalPolicy } from "./native-policy.js";
+import type { CodexQuestions } from "./questions.js";
+type Handler = NonNullable<CodexServerRequestHandlers["mcpServer/elicitation/request"]>;
+/** Human consent for the configured runner callback, independent of downstream tool authorization. */
+export declare function createCodexMcpApprovalHandler(options: {
+    serverName: string | undefined;
+    questions: CodexQuestions;
+    getPolicy: () => NativeApprovalPolicy | undefined;
+    bindingActive: () => boolean;
+}): Handler;
+export {};
+//# sourceMappingURL=native-mcp-approval.d.ts.map

package/dist/bridge/src/codex/native-mcp-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-mcp-approval.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/native-mcp-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAgC,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,KAAK,OAAO,GAAG,WAAW,CAAC,0BAA0B,CAAC,+BAA+B,CAAC,CAAC,CAAC;AAMxF,sGAAsG;AACtG,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,cAAc,CAAC;IAC1B,SAAS,EAAE,MAAM,oBAAoB,GAAG,SAAS,CAAC;IAClD,aAAa,EAAE,MAAM,OAAO,CAAC;CAC9B,GAAG,OAAO,CA6DV"}

package/dist/bridge/src/codex/native-policy.d.ts

@@ -0,0 +1,38 @@
+/** Fixed pinned-native policy. No caller-supplied profile or sandbox override is admitted. */
+export declare function prepareNativePolicy(input: {
+    cwd: string;
+    privateRoot: string;
+    privateDirectory: string;
+    sandboxMode: "read-only" | "workspace-write";
+}): Readonly<{
+    config: Readonly<{
+        default_permissions: "managed";
+        features: Readonly<{
+            use_legacy_landlock: false;
+        }>;
+        permissions: Readonly<{
+            managed: Readonly<{
+                extends: ":read-only";
+                filesystem: Readonly<{
+                    [x: string]: "read" | "write" | "deny";
+                }>;
+                network: Readonly<{
+                    enabled: false;
+                }>;
+            }>;
+        }>;
+    }>;
+    cliArgs: readonly string[];
+}>;
+type PreparedNativePolicy = ReturnType<typeof prepareNativePolicy>;
+declare const admissionBrand: unique symbol;
+export type NativeApprovalPolicy = {
+    readonly [admissionBrand]: true;
+};
+/** Confirms composition and native selection, not live OS isolation (G1/G2 remain required). */
+export declare function activateNativeApprovalPolicy(policy: PreparedNativePolicy, response: unknown, signal: AbortSignal): NativeApprovalPolicy;
+export declare function isNativeApprovalPolicyActive(policy: unknown, threadId: string): policy is NativeApprovalPolicy;
+/** Resolve existing ancestors too, so new files cannot escape via a project symlink. */
+export declare function allowsNativeApprovalPath(policy: NativeApprovalPolicy | undefined, path: string, access: "read" | "write"): boolean;
+export {};
+//# sourceMappingURL=native-policy.d.ts.map

package/dist/bridge/src/codex/native-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-policy.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/native-policy.ts"],"names":[],"mappings":"AAmBA,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,WAAW,GAAG,iBAAiB,CAAC;CAC9C;;;;;;;;;;;;;;;;;;;GA+CA;AAED,KAAK,oBAAoB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGnE,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAC5C,MAAM,MAAM,oBAAoB,GAAG;IAAE,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAGvE,gGAAgG;AAChG,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,WAAW,GAClB,oBAAoB,CAkBtB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,GACf,MAAM,IAAI,oBAAoB,CAIhC;AAED,wFAAwF;AACxF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,oBAAoB,GAAG,SAAS,EACxC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,OAAO,GACvB,OAAO,CA+BT"}