@skaile/workspaces 5.11.0 → 5.13.0

package/dist/bridge/drivers/codex.js

@@ -1,36 +1,37 @@
 import { CodexAppServerClient } from '../../chunk-K4O6L3WH.js';
 import { freshBudget, decide, spend } from '../../chunk-IZCR27MU.js';
-import { managedCodexRegistryViolation, parseCodexCredential, prepareNativePolicy, prepareCodexInstance, codexInstanceEnvironment, isNativeApprovalPolicyActive, activateNativeApprovalPolicy, parseCodexRefreshResult, allowsNativeApprovalPath } from '../../chunk-NWDSLXOX.js';
+import { managedCodexRegistryViolation, parseCodexCredential, prepareNativePolicy, prepareCodexInstance, codexInstanceEnvironment, isNativeApprovalPolicyActive, activateNativeApprovalPolicy, parseCodexRefreshResult, allowsNativeApprovalPath } from '../../chunk-PHRNUTSG.js';
 import { CodexNativeStateUnavailable } from '../../chunk-LOO5CB5M.js';
-import { fetchProviderModels } from '../../chunk-M3B6EIJD.js';
+import { fetchProviderModels } from '../../chunk-B7CZYFB2.js';
 import { ReconfigureLedger, stripRunnerPrivateEnv, classifyGenericErrorMessage } from '../../chunk-B4X2N7JQ.js';
 import '../../chunk-YROR332M.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, TOOL_ALLOWLIST_UNSUPPORTED, getBridgeLogger, registryCredentialEnv, entryCredentialValue, registryDriverConfig, getProviderPreset, providerCredentialEnvName } from '../../chunk-47U4GZ4M.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, TOOL_ALLOWLIST_UNSUPPORTED, getBridgeLogger, registryCredentialEnv, entryCredentialValue, registryDriverConfig, getProviderPreset, providerCredentialEnvName } from '../../chunk-BVJU2GKE.js';
 import '../../chunk-6E6PKKAD.js';
-import '../../chunk-ZCAJZ4B2.js';
-import '../../chunk-PBBPZYVG.js';
+import '../../chunk-57SF6W6E.js';
+import { installCommandFor } from '../../chunk-BF422IDP.js';
 import '../../chunk-4GY63JU6.js';
-import '../../chunk-EDYHEMJA.js';
-import '../../chunk-PMECEZK3.js';
+import '../../chunk-QO7CR3KB.js';
+import '../../chunk-D54T2F54.js';
 import '../../chunk-5BEFNLOR.js';
 import '../../chunk-A2ULN3KX.js';
-import '../../chunk-ALEYHUC5.js';
+import '../../chunk-L3ZGYSWY.js';
 import { globalSkaileDir } from '../../chunk-L5VSIPQD.js';
-import '../../chunk-CPSIPIX7.js';
-import '../../chunk-ZPWTOUTK.js';
+import '../../chunk-IG5LZ3WU.js';
+import '../../chunk-IY5E7Y5W.js';
 import '../../chunk-RVRB27AN.js';
-import '../../chunk-SBSA3IQA.js';
-import '../../chunk-BNMZVPYA.js';
+import '../../chunk-M3P4BYRK.js';
+import '../../chunk-J4OYIYFQ.js';
 import '../../chunk-ICSCSM5D.js';
-import '../../chunk-DALV4HHP.js';
+import '../../chunk-DKXNKFKP.js';
 import { resolveEntryBaseUrl, registryEntries, parseModelRef, isEntryEnabled } from '../../chunk-MJHSLODD.js';
 import '../../chunk-C3CAXQMA.js';
 import '../../chunk-BOFL7GIF.js';
 import '../../chunk-NSBPE2FW.js';
-import { isAbsolute, join, dirname, relative } from 'path';
+import { isAbsolute, join, resolve, dirname, relative } from 'path';
 import { isDeepStrictEqual } from 'util';
-import { existsSync, readFileSync, mkdirSync, writeFileSync, realpathSync, statSync, rmSync, renameSync } from 'fs';
+import { existsSync, rmSync, readFileSync, mkdirSync, writeFileSync, realpathSync, statSync, renameSync, symlinkSync, copyFileSync } from 'fs';
 import { randomUUID, createHash } from 'crypto';
+import { homedir } from 'os';
 import * as z from 'zod';
 import { stringify } from 'smol-toml';
 
@@ -242,13 +243,13 @@ var CodexQuestions = class {
     approval = approval ? structuredClone(approval) : void 0;
     const id = randomUUID();
     const eventId = params.itemId ?? `local-consent:${id}`;
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       const abort = () => finish();
       const finish = (result) => {
         if (this.pending?.id !== id) return;
         this.pending = void 0;
         signal.removeEventListener("abort", abort);
-        if (result && !signal.aborted) resolve(result);
+        if (result && !signal.aborted) resolve2(result);
         else reject(new Error("CODEX_INPUT_CANCELLED"));
       };
       this.pending = {
@@ -518,6 +519,7 @@ var ManagedCodexDriver = class extends AgentDriver {
     const handlers = {
       "account/chatgptAuthTokens/refresh": async (params, signal) => {
         const active = this.active;
+        if (!active && !this.starting) throw failure("CODEX_AUTH_UNAVAILABLE");
         if (!active) this.startupAuthAttempted = true;
         const cancellation = AbortSignal.any([
           signal,
@@ -722,8 +724,8 @@ var ManagedCodexDriver = class extends AgentDriver {
       if (result.type !== "apiKey") throw failure("CODEX_AUTH_UNAVAILABLE");
       return;
     }
-    const completion = new Promise((resolve, reject) => {
-      this.loginCompleted = { resolve, reject };
+    const completion = new Promise((resolve2, reject) => {
+      this.loginCompleted = { resolve: resolve2, reject };
     });
     const wait = bounded(completion, this.controller.signal, timeout);
     void wait.catch(() => {
@@ -830,11 +832,11 @@ var ManagedCodexDriver = class extends AgentDriver {
     }
     let finish;
     let readyNow;
-    const ready = new Promise((resolve) => {
-      readyNow = resolve;
+    const ready = new Promise((resolve2) => {
+      readyNow = resolve2;
     });
-    const done = new Promise((resolve) => {
-      finish = resolve;
+    const done = new Promise((resolve2) => {
+      finish = resolve2;
     });
     const active = {
       controller: new AbortController(),
@@ -1272,11 +1274,23 @@ var CODEX_WIRE_API = {
   "openai-responses": "responses",
   "azure-openai-responses": "responses"
 };
+var CODEX_RESERVED_PROVIDER_IDS = /* @__PURE__ */ new Set(["openai", "ollama", "lmstudio"]);
+function codexProviderTableId(id) {
+  return CODEX_RESERVED_PROVIDER_IDS.has(id) ? `skaile-${id}` : id;
+}
 var ENV_DELIVERED_CREDENTIALS = {
   api_key_header: true,
   bearer: true,
   command: true
 };
+function selectionNamesEntry(input, selected, registry) {
+  if (selected.role && selected.modelId !== void 0) return true;
+  const selector = input.modelRef?.trim() || input.model?.trim() || "";
+  if (selector.startsWith(`${selected.providerId}/`)) return true;
+  const entry = registryEntries(registry).find(([id]) => id === selected.providerId)?.[1];
+  const modelId = selected.modelId;
+  return modelId !== void 0 && (entry?.model_map?.[modelId] !== void 0 || entry?.capabilities?.[modelId] !== void 0);
+}
 function renderCodexProviderTable(id, entry) {
   if (!isEntryEnabled(entry)) return { skipped: "entry is disabled" };
   if (entry.kind !== "llm" && entry.kind !== "embed")
@@ -1310,7 +1324,7 @@ function buildCodexConfigDocument(input) {
   for (const [id, entry] of entries) {
     const rendered = renderCodexProviderTable(id, entry);
     if ("skipped" in rendered) skipped.push({ id, reason: rendered.skipped });
-    else document.model_providers[id] = rendered.table;
+    else document.model_providers[codexProviderTableId(id)] = rendered.table;
   }
   if (!input.registry) return { document, skipped, warnings: [] };
   const selected = parseModelRef(
@@ -1320,8 +1334,20 @@ function buildCodexConfigDocument(input) {
   );
   if (!selected) return { document, skipped, warnings: [] };
   const warnings = selected.warnings;
-  if (!document.model_providers[selected.providerId]) return { document, skipped, warnings };
-  document.model_provider = selected.providerId;
+  const tableId = codexProviderTableId(selected.providerId);
+  if (!document.model_providers[tableId]) {
+    const reason = skipped.find((s) => s.id === selected.providerId)?.reason;
+    if (reason && selectionNamesEntry(input, selected, input.registry)) {
+      return {
+        document,
+        skipped,
+        warnings,
+        unaddressable: { id: selected.providerId, reason }
+      };
+    }
+    return { document, skipped, warnings };
+  }
+  document.model_provider = tableId;
   if (selected.providerModelId) document.model = selected.providerModelId;
   return {
     document,
@@ -1345,11 +1371,11 @@ function codexSessionHome(config) {
 }
 function writeCodexConfigToml(home, document) {
   const path = join(home, "config.toml");
+  mkdirSync(home, { recursive: true, mode: 448 });
   if (Object.keys(document.model_providers).length === 0) {
     rmSync(path, { force: true });
     return void 0;
   }
-  mkdirSync(home, { recursive: true, mode: 448 });
   const temporary = join(home, "config.toml.new");
   rmSync(temporary, { force: true });
   writeFileSync(temporary, renderCodexConfigToml(document), { mode: 384, flag: "wx" });
@@ -1368,9 +1394,38 @@ function buildCodexChildEnv(parent, codexHome) {
   for (const [key, value] of Object.entries(parent)) {
     if (key.startsWith("PI_") && typeof value === "string") out[key] = value;
   }
+  for (const key of ["OPENAI_API_KEY", "CODEX_API_KEY"]) {
+    const v = parent[key];
+    if (v) out[key] = v;
+  }
   out.CODEX_HOME = codexHome;
   return out;
 }
+function codexLoginFile(env) {
+  const home = env.CODEX_HOME?.trim() || join(env.HOME || homedir(), ".codex");
+  const file = join(home, "auth.json");
+  return existsSync(file) ? resolve(file) : void 0;
+}
+function linkCodexLogin(codexHome, loginFile) {
+  const target = join(codexHome, "auth.json");
+  mkdirSync(codexHome, { recursive: true, mode: 448 });
+  rmSync(target, { force: true });
+  try {
+    symlinkSync(loginFile, target);
+  } catch {
+    copyFileSync(loginFile, target);
+  }
+}
+function missingCodexCredential(build, env, loginFile) {
+  const table = build.providerId ? build.document.model_providers[codexProviderTableId(build.providerId)] : void 0;
+  if (table) {
+    if (table.requires_openai_auth) return void 0;
+    if (!table.env_key || env[table.env_key]) return void 0;
+    return `codex driver: the AI provider entry '${build.providerId}' has no credential; export the variable its credential names (see \`skaile providers test ${build.providerId}\`)`;
+  }
+  if (env.OPENAI_API_KEY || env.CODEX_API_KEY || loginFile) return void 0;
+  return "codex driver needs OPENAI_API_KEY, or the codex CLI's ChatGPT login (run `codex login`; ~/.codex/auth.json), or an AI provider entry with a credential";
+}
 var CodexDriver = class extends AgentDriver {
   driverInfo = {
     id: "codex",
@@ -1420,7 +1475,9 @@ var CodexDriver = class extends AgentDriver {
       sdk = await import('@openai/codex-sdk');
     } catch (err) {
       this.log.error("codex SDK load failed", err);
-      throw new Error("Codex SDK not installed. Run: bun add @openai/codex-sdk");
+      throw new Error(
+        `Codex SDK not installed. Run: ${installCommandFor("@openai/codex-sdk", this.config.cwd)}`
+      );
     }
     const codexHome = codexSessionHome(this.config);
     const build = buildCodexConfigDocument({
@@ -1429,6 +1486,12 @@ var CodexDriver = class extends AgentDriver {
       model: this.config.model,
       roles: this.config.roles
     });
+    if (build.unaddressable) {
+      const { id, reason } = build.unaddressable;
+      const message = `AI provider '${id}' cannot be used with the codex driver: ${reason}. Pick a model of another provider.`;
+      this.log.error("codex cannot address the selected AI provider", { provider: id, reason });
+      throw Object.assign(new Error(message), { category: "config", hint: message });
+    }
     writeCodexConfigToml(codexHome, build.document);
     for (const warning of build.warnings) this.log.warn("codex model selection", { warning });
     for (const entry of build.skipped)
@@ -1442,6 +1505,15 @@ var CodexDriver = class extends AgentDriver {
       registryCredentialEnv(this.config.registry ?? {}, { env: { ...process.env, ...env } })
     );
     stripRunnerPrivateEnv(env);
+    const hasKey = Boolean(env.OPENAI_API_KEY || env.CODEX_API_KEY);
+    const loginFile = hasKey ? void 0 : codexLoginFile({ ...process.env, ...this.config.env });
+    const missing = missingCodexCredential(build, env, loginFile);
+    if (missing) {
+      this.log.error("codex credential missing", { reason: missing });
+      throw Object.assign(new Error(missing), { category: "config", hint: missing });
+    }
+    if (loginFile) linkCodexLogin(codexHome, loginFile);
+    else rmSync(join(codexHome, "auth.json"), { force: true });
     const instructionsFile = this.writeInstructionsFile();
     const client = new sdk.Codex({
       apiKey: env.OPENAI_API_KEY,
@@ -1886,6 +1958,6 @@ var codexDriverTarget = {
   }
 };
 
-export { CodexDriver, codexDriverTarget, isManagedCodexConfig };
+export { CodexDriver, codexDriverTarget, codexLoginFile, isManagedCodexConfig };
 //# sourceMappingURL=codex.js.map
 //# sourceMappingURL=codex.js.map