@skaile/workspaces 5.18.1 → 6.0.0

package/dist/{chunk-GBYNC5V3.js → chunk-JDR6ILCW.js}

@@ -1,6 +1,6 @@
-import { getProviderPreset, providerCredentialEnvName } from './chunk-KY4UXX7M.js';
+import { getProviderPreset, providerCredentialEnvName } from './chunk-F2GOZMRA.js';
 import { globalSkaileDir } from './chunk-L5VSIPQD.js';
-import { registryEntries, parseModelRef, isEntryEnabled, resolveEntryBaseUrl } from './chunk-MJHSLODD.js';
+import { registryEntries, parseModelRef, isEntryEnabled, resolveEntryBaseUrl } from './chunk-LSI2IVFT.js';
 import { createHash } from 'crypto';
 import { mkdirSync, rmSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
@@ -121,5 +121,5 @@ function writeCodexConfigToml(home, document) {
 }
 
 export { buildCodexConfigDocument, codexProviderTableId, codexSessionHome, writeCodexConfigToml };
-//# sourceMappingURL=chunk-GBYNC5V3.js.map
-//# sourceMappingURL=chunk-GBYNC5V3.js.map
+//# sourceMappingURL=chunk-JDR6ILCW.js.map
+//# sourceMappingURL=chunk-JDR6ILCW.js.map

package/dist/chunk-JDR6ILCW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/codex/config-toml.ts"],"names":["stringifyToml"],"mappings":";;;;;;;;AAyDA,IAAM,cAAA,GAA6D;AAAA,EACjE,wBAAA,EAA0B,WAAA;AAAA,EAC1B,kBAAA,EAAoB,WAAA;AAAA,EACpB,wBAAA,EAA0B;AAC5B,CAAA;AAQA,IAAM,8CAAmD,IAAI,GAAA,CAAI,CAAC,QAAA,EAAU,QAAA,EAAU,UAAU,CAAC,CAAA;AAM1F,SAAS,qBAAqB,EAAA,EAAoB;AACvD,EAAA,OAAO,4BAA4B,GAAA,CAAI,EAAE,CAAA,GAAI,CAAA,OAAA,EAAU,EAAE,CAAA,CAAA,GAAK,EAAA;AAChE;AAGA,IAAM,yBAAA,GAAkD;AAAA,EACtD,cAAA,EAAgB,IAAA;AAAA,EAChB,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAA;AAyDA,SAAS,mBAAA,CACP,KAAA,EACA,QAAA,EACA,QAAA,EACS;AACT,EAAA,IAAI,QAAA,CAAS,IAAA,IAAQ,QAAA,CAAS,OAAA,KAAY,QAAW,OAAO,IAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAClE,EAAA,IAAI,SAAS,UAAA,CAAW,CAAA,EAAG,SAAS,UAAU,CAAA,CAAA,CAAG,GAAG,OAAO,IAAA;AAC3D,EAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,CAAC,EAAE,CAAA,KAAM,EAAA,KAAO,QAAA,CAAS,UAAU,IAAI,CAAC,CAAA;AAGtF,EAAA,MAAM,UAAU,QAAA,CAAS,OAAA;AACzB,EAAA,OACE,OAAA,KAAY,MAAA,KACX,KAAA,EAAO,SAAA,GAAY,OAAO,MAAM,MAAA,IAAa,KAAA,EAAO,YAAA,GAAe,OAAO,CAAA,KAAM,MAAA,CAAA;AAErF;AAiBO,SAAS,wBAAA,CACd,IACA,KAAA,EAC0D;AAC1D,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,GAAG,OAAO,EAAE,SAAS,mBAAA,EAAoB;AAClE,EAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,OAAA;AACzC,IAAA,OAAO,EAAE,OAAA,EAAS,CAAA,MAAA,EAAS,KAAA,CAAM,IAAI,CAAA,yBAAA,CAAA,EAA4B;AACnE,EAAA,MAAM,GAAA,GAAM,KAAA;AAIZ,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,iBAAA,CAAkB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,IAAW,MAAA,EAAQ,OAAA;AACvC,EAAA,MAAM,OAAA,GAAU,OAAA,GAAU,cAAA,CAAe,OAAO,CAAA,GAAI,MAAA;AACpD,EAAA,IAAI,CAAC,OAAA;AACH,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAA,GACL,CAAA,mCAAA,EAAsC,OAAO,CAAA,CAAA,CAAA,GAC7C;AAAA,KACN;AACF,EAAA,MAAM,cAAA,GAAiB,MAAM,UAAA,EAAY,IAAA;AACzC,EAAA,MAAM,KAAA,GAAiC,EAAE,IAAA,EAAM,KAAA,CAAM,SAAS,EAAA,EAAG;AACjE,EAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,KAAK,CAAA,IAAK,MAAA,EAAQ,QAAA;AACtD,EAAA,IAAI,OAAA,QAAe,QAAA,GAAW,OAAA;AAC9B,EAAA,IAAI,cAAA,IAAkB,0BAA0B,cAAc,CAAA;AAC5D,IAAA,KAAA,CAAM,OAAA,GAAU,0BAA0B,EAAE,CAAA;AAC9C,EAAA,KAAA,CAAM,QAAA,GAAW,OAAA;AACjB,EAAA,IAAI,cAAA,KAAmB,OAAA,EAAS,KAAA,CAAM,oBAAA,GAAuB,IAAA;AAC7D,EAAA,IAAI,IAAI,YAAA,IAAgB,MAAA,CAAO,KAAK,GAAA,CAAI,YAAY,EAAE,MAAA,GAAS,CAAA;AAC7D,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,GAAA,CAAI,YAAA,EAAa;AAC7C,EAAA,IAAI,MAAM,OAAA,IAAW,MAAA,CAAO,KAAK,KAAA,CAAM,OAAO,EAAE,MAAA,GAAS,CAAA;AACvD,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,KAAA,CAAM,OAAA,EAAQ;AAC1C,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAMO,SAAS,yBAAyB,KAAA,EAA2C;AAClF,EAAA,MAAM,QAAA,GAAgC,EAAE,eAAA,EAAiB,EAAC,EAAE;AAC5D,EAAA,MAAM,UAA+B,EAAC;AACtC,EAAA,MAAM,UAAU,KAAA,CAAM,QAAA,GAAW,gBAAgB,KAAA,CAAM,QAAQ,IAAI,EAAC;AACpE,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,OAAA,EAAS;AACjC,IAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,EAAA,EAAI,KAAK,CAAA;AACnD,IAAA,IAAI,SAAA,IAAa,UAAU,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAA,CAAS,OAAA,EAAS,CAAA;AAAA,kBAC1D,eAAA,CAAgB,oBAAA,CAAqB,EAAE,CAAC,IAAI,QAAA,CAAS,KAAA;AAAA,EACrE;AAEA,EAAA,IAAI,CAAC,MAAM,QAAA,EAAU,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AAI9D,EAAA,MAAM,QAAA,GAAW,aAAA;AAAA,IACf,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAAA,IACjD,KAAA,CAAM,QAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,IAAI,CAAC,UAAU,OAAO,EAAE,UAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AACxD,EAAA,MAAM,WAAW,QAAA,CAAS,QAAA;AAC1B,EAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,QAAA,CAAS,UAAU,CAAA;AACxD,EAAA,IAAI,CAAC,QAAA,CAAS,eAAA,CAAgB,OAAO,CAAA,EAAG;AAMtC,IAAA,MAAM,MAAA,GAAS,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,QAAA,CAAS,UAAU,CAAA,EAAG,MAAA;AAClE,IAAA,IAAI,UAAU,mBAAA,CAAoB,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAQ,CAAA,EAAG;AAClE,MAAA,OAAO;AAAA,QACL,QAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA,aAAA,EAAe,EAAE,EAAA,EAAI,QAAA,CAAS,YAAY,MAAA;AAAO,OACnD;AAAA,IACF;AACA,IAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAS;AAAA,EACvC;AACA,EAAA,QAAA,CAAS,cAAA,GAAiB,OAAA;AAC1B,EAAA,IAAI,QAAA,CAAS,eAAA,EAAiB,QAAA,CAAS,KAAA,GAAQ,QAAA,CAAS,eAAA;AACxD,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,GAAI,SAAS,eAAA,GAAkB,EAAE,OAAO,QAAA,CAAS,eAAA,KAAoB,EAAC;AAAA,IACtE,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAGO,SAAS,sBAAsB,QAAA,EAAuC;AAC3E,EAAA,MAAM,UAAmC,EAAC;AAC1C,EAAA,IAAI,QAAA,CAAS,cAAA,EAAgB,OAAA,CAAQ,cAAA,GAAiB,QAAA,CAAS,cAAA;AAC/D,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,OAAA,CAAQ,KAAA,GAAQ,QAAA,CAAS,KAAA;AAC7C,EAAA,OAAA,CAAQ,kBAAkB,QAAA,CAAS,eAAA;AACnC,EAAA,OAAO,CAAA,EAAGA,SAAA,CAAc,OAAO,CAAC;AAAA,CAAA;AAClC;AAWO,SAAS,iBAAiB,MAAA,EAAqD;AACpF,EAAA,MAAM,GAAA,GACJ,MAAA,CAAO,SAAA,IAAa,yBAAA,CAA0B,IAAA,CAAK,OAAO,SAAS,CAAA,GAC/D,MAAA,CAAO,SAAA,GACP,UAAA,CAAW,QAAQ,EAChB,MAAA,CAAO,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,GAAG,CAAA,CACrC,OAAO,KAAK,CAAA,CACZ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACpB,EAAA,OAAO,IAAA,CAAK,eAAA,EAAgB,EAAG,OAAA,EAAS,GAAG,CAAA;AAC7C;AAeO,SAAS,oBAAA,CACd,MACA,QAAA,EACoB;AACpB,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AAGrC,EAAA,SAAA,CAAU,MAAM,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAChD,EAAA,IAAI,OAAO,IAAA,CAAK,QAAA,CAAS,eAAe,CAAA,CAAE,WAAW,CAAA,EAAG;AACtD,IAAA,MAAA,CAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AAC5B,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,IAAA,EAAM,iBAAiB,CAAA;AAC9C,EAAA,MAAA,CAAO,SAAA,EAAW,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AACjC,EAAA,aAAA,CAAc,SAAA,EAAW,sBAAsB,QAAQ,CAAA,EAAG,EAAE,IAAA,EAAM,GAAA,EAAO,IAAA,EAAM,IAAA,EAAM,CAAA;AACrF,EAAA,UAAA,CAAW,WAAW,IAAI,CAAA;AAC1B,EAAA,OAAO,IAAA;AACT","file":"chunk-JDR6ILCW.js","sourcesContent":["/**\n * Codex's `config.toml` adapter — the AI provider registry materialized into\n * the only provider surface the Codex CLI reads (plan §2.3, codex rows).\n *\n * Codex is a **file-shaped** harness: it takes its endpoints from\n * `$CODEX_HOME/config.toml`, never from per-request options. Both codex modes\n * therefore get a session-private `CODEX_HOME` holding a rendered document:\n *\n * - every addressable registry entry becomes `[model_providers.<id>]` with\n *   `base_url`, `env_key`, `wire_api`, `query_params` and `http_headers`\n *   mapping 1:1 onto the entry's `base_url`, `credential`, `surface`,\n *   `query_params` and `headers`;\n * - `model_provider` and `model` at the top level name the selected entry.\n *\n * The rendered file never contains a credential **value** — `env_key` holds\n * the *name* of the per-entry variable (`SKAILE_AIP_<ID>_KEY`, minted by\n * {@link providerCredentialEnvName}), and the value rides in the child\n * environment. An `oauth` entry has no env carrier at all: it gets\n * `requires_openai_auth`, which routes codex to its own auth manager.\n *\n * **Surface coverage.** Codex names the wire protocol `wire_api` and, as of\n * codex-cli 0.154, accepts exactly one value: `responses`. `chat` was removed\n * (\"`wire_api = \\\"chat\\\"` is no longer supported\", openai/codex#7782), and an\n * unknown value fails the *whole* document at load time — one unaddressable\n * entry would take the rest of the registry down with it. Entries whose\n * surface codex cannot speak (`openai-completions`, `anthropic-messages`,\n * `bedrock-converse-stream`, `google-*`) are therefore left out and reported\n * in {@link CodexConfigBuild.skipped} for the harness to log.\n *\n * @docLink packages/bridge/harnesses#codex-harness\n */\n\nimport { createHash } from \"node:crypto\";\nimport { mkdirSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { globalSkaileDir } from \"@skaile/workspaces/core\";\nimport {\n  type AIProviderEntry,\n  type AIProviderLlmEntry,\n  type AIProviderRegistry,\n  type AIProviderSurface,\n  isEntryEnabled,\n  type MergedAIProviderRegistry,\n  parseModelRef,\n  registryEntries,\n  type ResolvedModelRef,\n  resolveEntryBaseUrl,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { stringify as stringifyToml } from \"smol-toml\";\nimport { getProviderPreset } from \"../provider-catalog.js\";\nimport { providerCredentialEnvName } from \"../provider-materialize/credential-env.js\";\n\n/**\n * `surface` → codex `wire_api`. Only the responses-flavoured surfaces have a\n * codex spelling; see the module docstring for why `openai-completions` is\n * absent rather than mapped to the removed `chat` value.\n */\nconst CODEX_WIRE_API: Partial<Record<AIProviderSurface, string>> = {\n  \"openai-codex-responses\": \"responses\",\n  \"openai-responses\": \"responses\",\n  \"azure-openai-responses\": \"responses\",\n};\n\n/**\n * Provider ids codex reserves for its own built-ins. A `[model_providers.<id>]`\n * table under one of them fails the whole document (\"model_providers contains\n * reserved built-in provider IDs\"), so such an entry is rendered under\n * {@link codexProviderTableId}.\n */\nconst CODEX_RESERVED_PROVIDER_IDS: ReadonlySet<string> = new Set([\"openai\", \"ollama\", \"lmstudio\"]);\n\n/**\n * The `[model_providers.<id>]` table name for a registry entry: the entry id,\n * or `skaile-<id>` when codex reserves that id (the `openai` preset).\n */\nexport function codexProviderTableId(id: string): string {\n  return CODEX_RESERVED_PROVIDER_IDS.has(id) ? `skaile-${id}` : id;\n}\n\n/** Credential kinds whose value the adapter hands over in an env var. */\nconst ENV_DELIVERED_CREDENTIALS: Record<string, true> = {\n  api_key_header: true,\n  bearer: true,\n  command: true,\n};\n\n/** One `[model_providers.<id>]` table, in codex's own vocabulary. */\nexport interface CodexModelProviderTable {\n  /** Display name. Codex rejects a provider table without one. */\n  name: string;\n  base_url?: string;\n  /** Name of the variable carrying the credential — never the credential. */\n  env_key?: string;\n  wire_api?: string;\n  /** Routes codex to its own auth manager (ChatGPT subscription / stored key). */\n  requires_openai_auth?: boolean;\n  query_params?: Record<string, string>;\n  http_headers?: Record<string, string>;\n}\n\n/** The subset of codex's `config.toml` this adapter owns. */\nexport interface CodexConfigDocument {\n  /** Table id the session addresses (see {@link codexProviderTableId}); absent when nothing rendered. */\n  model_provider?: string;\n  /** Provider-side model id. */\n  model?: string;\n  model_providers: Record<string, CodexModelProviderTable>;\n}\n\n/** An entry codex cannot address, and why. */\nexport interface CodexSkippedEntry {\n  id: string;\n  reason: string;\n}\n\n/** Result of {@link buildCodexConfigDocument}. */\nexport interface CodexConfigBuild {\n  document: CodexConfigDocument;\n  /** Selected registry entry id (not the table id), when it rendered. */\n  providerId?: string;\n  /** Provider-side model id of the selection, when the selector named one. */\n  model?: string;\n  /**\n   * Entries left out of the document. Non-fatal: codex keeps its built-in\n   * providers, so a session whose selection was skipped behaves exactly as it\n   * did before the registry existed.\n   */\n  skipped: CodexSkippedEntry[];\n  /** Notes from `modelRef` resolution (dangling role, disabled provider, …). */\n  warnings: string[];\n  /**\n   * Set when the selector named an entry codex cannot address: the session\n   * must stop with `reason`, not fall back to codex's built-in providers.\n   */\n  unaddressable?: { id: string; reason: string };\n}\n\n/**\n * Whether the session's selector named the entry `selected` resolved to, rather\n * than reaching it by registry order alone.\n */\nfunction selectionNamesEntry(\n  input: CodexConfigInput,\n  selected: ResolvedModelRef,\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n): boolean {\n  if (selected.role && selected.modelId !== undefined) return true;\n  const selector = input.modelRef?.trim() || input.model?.trim() || \"\";\n  if (selector.startsWith(`${selected.providerId}/`)) return true;\n  const entry = registryEntries(registry).find(([id]) => id === selected.providerId)?.[1] as\n    | AIProviderLlmEntry\n    | undefined;\n  const modelId = selected.modelId;\n  return (\n    modelId !== undefined &&\n    (entry?.model_map?.[modelId] !== undefined || entry?.capabilities?.[modelId] !== undefined)\n  );\n}\n\n/** Inputs {@link buildCodexConfigDocument} reads off an `AgentConfig`. */\nexport interface CodexConfigInput {\n  registry?: AIProviderRegistry | MergedAIProviderRegistry;\n  /** `\"<providerId>/<modelId>\"`, a bare model id, or `\"@role\"`. */\n  modelRef?: string;\n  /** Legacy model field, used as the selector when `modelRef` is absent. */\n  model?: string;\n  /** Roles table (`skaile.yaml`), consulted for an `@role` selector. */\n  roles?: Record<string, string>;\n}\n\n/**\n * Render one entry as a codex provider table, or explain why codex cannot\n * address it.\n */\nexport function renderCodexProviderTable(\n  id: string,\n  entry: AIProviderEntry,\n): { table: CodexModelProviderTable } | { skipped: string } {\n  if (!isEntryEnabled(entry)) return { skipped: \"entry is disabled\" };\n  if (entry.kind !== \"llm\" && entry.kind !== \"embed\")\n    return { skipped: `kind '${entry.kind}' is not a model endpoint` };\n  const llm = entry as AIProviderLlmEntry;\n  // `surface` and `base_url` may live on the catalog preset the entry names —\n  // the catalog layer fills them during a merge, but an entry handed straight\n  // to a harness has not necessarily been through one.\n  const preset = entry.preset ? getProviderPreset(entry.preset) : undefined;\n  const surface = llm.surface ?? preset?.surface;\n  const wireApi = surface ? CODEX_WIRE_API[surface] : undefined;\n  if (!wireApi)\n    return {\n      skipped: surface\n        ? `codex has no wire_api for surface '${surface}'`\n        : \"entry declares no surface\",\n    };\n  const credentialKind = entry.credential?.kind;\n  const table: CodexModelProviderTable = { name: entry.label ?? id };\n  const baseUrl = resolveEntryBaseUrl(entry) ?? preset?.base_url;\n  if (baseUrl) table.base_url = baseUrl;\n  if (credentialKind && ENV_DELIVERED_CREDENTIALS[credentialKind])\n    table.env_key = providerCredentialEnvName(id);\n  table.wire_api = wireApi;\n  if (credentialKind === \"oauth\") table.requires_openai_auth = true;\n  if (llm.query_params && Object.keys(llm.query_params).length > 0)\n    table.query_params = { ...llm.query_params };\n  if (entry.headers && Object.keys(entry.headers).length > 0)\n    table.http_headers = { ...entry.headers };\n  return { table };\n}\n\n/**\n * Build the document for a session: every addressable entry, plus the\n * selection when it resolved to one of them.\n */\nexport function buildCodexConfigDocument(input: CodexConfigInput): CodexConfigBuild {\n  const document: CodexConfigDocument = { model_providers: {} };\n  const skipped: CodexSkippedEntry[] = [];\n  const entries = input.registry ? registryEntries(input.registry) : [];\n  for (const [id, entry] of entries) {\n    const rendered = renderCodexProviderTable(id, entry);\n    if (\"skipped\" in rendered) skipped.push({ id, reason: rendered.skipped });\n    else document.model_providers[codexProviderTableId(id)] = rendered.table;\n  }\n\n  if (!input.registry) return { document, skipped, warnings: [] };\n  // An empty selector resolves the same way a bare one does — first entry in\n  // registry order. A session that configured an endpoint and named no model\n  // still means that endpoint, not codex's built-in default.\n  const selected = parseModelRef(\n    input.modelRef?.trim() || input.model?.trim() || \"\",\n    input.registry,\n    input.roles,\n  );\n  if (!selected) return { document, skipped, warnings: [] };\n  const warnings = selected.warnings;\n  const tableId = codexProviderTableId(selected.providerId);\n  if (!document.model_providers[tableId]) {\n    // A selector that names the entry (`ollama/llama3`, a role or a model its\n    // `model_map` lists) and cannot be rendered must not fall through to\n    // codex's built-in OpenAI: the prompt would go to a provider the user did\n    // not pick. A bare model id that matched no entry only landed on the first\n    // entry by registry order, so codex's own providers stay the right answer.\n    const reason = skipped.find((s) => s.id === selected.providerId)?.reason;\n    if (reason && selectionNamesEntry(input, selected, input.registry)) {\n      return {\n        document,\n        skipped,\n        warnings,\n        unaddressable: { id: selected.providerId, reason },\n      };\n    }\n    return { document, skipped, warnings };\n  }\n  document.model_provider = tableId;\n  if (selected.providerModelId) document.model = selected.providerModelId;\n  return {\n    document,\n    providerId: selected.providerId,\n    ...(selected.providerModelId ? { model: selected.providerModelId } : {}),\n    skipped,\n    warnings,\n  };\n}\n\n/** Serialize a document to TOML. Deterministic: registry order throughout. */\nexport function renderCodexConfigToml(document: CodexConfigDocument): string {\n  const ordered: Record<string, unknown> = {};\n  if (document.model_provider) ordered.model_provider = document.model_provider;\n  if (document.model) ordered.model = document.model;\n  ordered.model_providers = document.model_providers;\n  return `${stringifyToml(ordered)}\\n`;\n}\n\n/**\n * The session-private codex home.\n *\n * Deliberately outside `cwd`: codex's `workspace-write` sandbox makes the\n * working tree writable by the model, and a config home inside it would let a\n * turn rewrite its own `base_url`. `$SKAILE_HOME` (honoured by\n * {@link globalSkaileDir}) relocates the whole tree, which is also the test\n * seam.\n */\nexport function codexSessionHome(config: { cwd: string; sessionId?: string }): string {\n  const key =\n    config.sessionId && /^[A-Za-z0-9._-]{1,128}$/.test(config.sessionId)\n      ? config.sessionId\n      : createHash(\"sha256\")\n          .update(config.sessionId ?? config.cwd)\n          .digest(\"hex\")\n          .slice(0, 32);\n  return join(globalSkaileDir(), \"codex\", key);\n}\n\n/**\n * Write `<home>/config.toml`, creating the home always. Atomic: a\n * partially written document would fail codex's config load for the whole\n * session.\n *\n * A document with no provider tables says nothing codex does not already\n * know, so nothing is written and a file left by an earlier render is\n * removed — a session that no longer carries a registry must not keep\n * answering to the one it used to have.\n *\n * @returns the absolute path written, or `undefined` when there was nothing\n *   to render.\n */\nexport function writeCodexConfigToml(\n  home: string,\n  document: CodexConfigDocument,\n): string | undefined {\n  const path = join(home, \"config.toml\");\n  // codex exits when CODEX_HOME names a directory that does not exist, so the\n  // home exists before the early return too.\n  mkdirSync(home, { recursive: true, mode: 0o700 });\n  if (Object.keys(document.model_providers).length === 0) {\n    rmSync(path, { force: true });\n    return undefined;\n  }\n  const temporary = join(home, \"config.toml.new\");\n  rmSync(temporary, { force: true });\n  writeFileSync(temporary, renderCodexConfigToml(document), { mode: 0o600, flag: \"wx\" });\n  renameSync(temporary, path);\n  return path;\n}\n"]}

package/dist/{chunk-K4O6L3WH.js → chunk-KNY356I3.js}

@@ -1,5 +1,5 @@
 import { CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
-import { wrapAgentCommand, resolveAgentExec } from './chunk-YROR332M.js';
+import { wrapAgentCommand, resolveAgentExec } from './chunk-7DN6JKP2.js';
 import { processGroupAlive } from './chunk-4GY63JU6.js';
 import { spawn } from 'child_process';
 
@@ -241,5 +241,5 @@ var CodexAppServerClient = class _CodexAppServerClient {
 };
 
 export { CodexAppServerClient, CodexAppServerError };
-//# sourceMappingURL=chunk-K4O6L3WH.js.map
-//# sourceMappingURL=chunk-K4O6L3WH.js.map
+//# sourceMappingURL=chunk-KNY356I3.js.map
+//# sourceMappingURL=chunk-KNY356I3.js.map

package/dist/{chunk-K4O6L3WH.js.map → chunk-KNY356I3.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../bridge/src/codex-app-server.ts"],"names":[],"mappings":";;;;;AAsCO,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,YACW,IAAA,EACT;AACA,IAAA,KAAA,CAAM,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAA;AAFvB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAGT,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AAAA,EAJW,IAAA;AAKb;AAOA,IAAM,MAAA,GAAS,CAAC,KAAA,KACd,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACrE,IAAM,OAAA,GAAU,CAAC,KAAA,KACf,OAAO,KAAA,KAAU,QAAA,IAAa,OAAO,KAAA,KAAU,QAAA,IAAY,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AACvF,SAAS,KAAA,CAAM,KAAA,EAA2B,QAAA,EAAkB,OAAA,EAAyB;AACnF,EAAA,MAAM,SAAS,KAAA,IAAS,QAAA;AACxB,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA,IAAK,MAAA,IAAU,KAAK,MAAA,GAAS,OAAA;AAC3D,IAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC1C,EAAA,OAAO,MAAA;AACT;AAGO,IAAM,oBAAA,GAAN,MAAM,qBAAA,CAAqB;AAAA,EAcxB,YAA6B,OAAA,EAAgC;AAAhC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,KAAA,CAAM,OAAA,CAAQ,gBAAA,EAAkB,MAAQ,GAAO,CAAA;AAC9D,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAA,CAAM,OAAA,CAAQ,sBAAA,EAAwB,KAAQ,GAAO,CAAA;AAC5E,IAAA,IAAA,CAAK,QAAA,GAAW,KAAA,CAAM,OAAA,CAAQ,kBAAA,EAAoB,IAAI,IAAI,CAAA;AAC1D,IAAA,IAAA,CAAK,UAAA,GAAa,MAAM,OAAA,CAAQ,aAAA,EAAe,OAAO,IAAA,EAAM,EAAA,GAAK,OAAO,IAAI,CAAA;AAI5E,IAAA,MAAM,SAAS,gBAAA,CAAiB,OAAA,CAAQ,SAAS,OAAA,CAAQ,IAAA,EAAM,kBAAkB,CAAA;AACjF,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA,CAAM,MAAA,CAAO,OAAA,EAAS,OAAO,IAAA,EAAM;AAAA,MAC9C,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,OAAA,CAAQ,YAAA,KAAiB,IAAA,IAAQ,QAAQ,QAAA,KAAa;AAAA,KACjE,CAAA;AACD,IAAA,IAAA,CAAK,SAAS,IAAI,OAAA;AAAA,MAAQ,CAAC,OAAA,KACzB,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM;AAC7B,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,QAAA,OAAA,EAAQ;AAAA,MACV,CAAC;AAAA,KACH;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,WAAA,CAAY,MAAM,CAAA;AACpC,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAC,CAAA;AAEnE,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,MAAA,EAAO;AACzB,IAAA,IAAA,CAAK,MAAM,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACjD,IAAA,IAAA,CAAK,KAAA,CAAM,MAAM,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACvD,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AAAA,EACpD;AAAA,EA9BqC,OAAA;AAAA,EAbpB,OAAA,uBAAc,GAAA,EAAqB;AAAA,EACnC,SAAA,uBAAgB,GAAA,EAAsC;AAAA,EACtD,OAAA;AAAA,EACA,eAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACT,QAAA,GAAW,KAAA;AAAA,EACX,WAAA,GAAc,KAAA;AAAA,EACd,MAAA,GAAS,CAAA;AAAA,EACT,MAAA,GAAS,EAAA;AAAA;AAAA,EAmCjB,aAAa,OAAA,CACX,OAAA,EACA,MAAA,EAC+B;AAC/B,IAAA,IAAI,MAAA;AACJ,IAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AACzC,IAAA,IAAI;AACF,MAAA,IAAI,MAAA,EAAQ,OAAA,EAAS,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AAC3D,MAAA,MAAA,GAAS,IAAI,sBAAqB,OAAO,CAAA;AACzC,MAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAM,CAAA;AACvD,MAAA,MAAM,MAAA,CAAO,QAAQ,YAAA,EAAc;AAAA,QACjC,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,YAAA,EAAc,EAAE,eAAA,EAAiB,IAAA;AAAK,OACvC,CAAA;AACD,MAAA,MAAA,CAAO,KAAA,CAAM,EAAE,MAAA,EAAQ,aAAA,EAAe,CAAA;AACtC,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,QAAQ,OAAA,EAAQ;AACtB,MAAA,MAAM,KAAA,YAAiB,mBAAA,GAAsB,KAAA,GAAQ,IAAI,oBAAoB,SAAS,CAAA;AAAA,IACxF,CAAA,SAAE;AACA,MAAA,MAAA,EAAQ,mBAAA,CAAoB,SAAS,KAAK,CAAA;AAAA,IAC5C;AAAA,EACF;AAAA;AAAA,EAGA,OAAA,CACE,QACA,MAAA,EACsC;AACtC,IAAA,IAAI,IAAA,CAAK,UAAU,OAAO,OAAA,CAAQ,OAAO,IAAI,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAC1E,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,IAAQ,IAAA,CAAK,QAAA;AAC5B,MAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,UAAU,CAAC,CAAA;AAC3D,IAAA,MAAM,KAAK,IAAA,CAAK,MAAA,EAAA;AAChB,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,IAAA,CAAK,KAAK,SAAS,CAAA,EAAG,KAAK,OAAO,CAAA;AACjE,MAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,EAAA,EAAI;AAAA,QACnB,OAAA;AAAA,QACA,MAAA;AAAA,QACA,KAAA;AAAA,QACA,GAAI,MAAA,KAAW,eAAA,IACf,MAAA,KAAW,IAAA,IACX,cAAc,MAAA,IACd,OAAO,MAAA,CAAO,QAAA,KAAa,WACvB,EAAE,cAAA,EAAgB,MAAA,CAAO,QAAA,KACzB;AAAC,OACN,CAAA;AACD,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,MACnC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,MACtB;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAA,CAAK,KAAK,QAAQ,CAAA;AAClB,IAAA,IAAI,KAAA;AACJ,IAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,MACjB,IAAA,CAAK,MAAA;AAAA,MACL,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY;AAC7B,QAAA,KAAA,GAAQ,UAAA,CAAW,SAAS,GAAI,CAAA;AAAA,MAClC,CAAC;AAAA,KACF,CAAA;AACD,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AAAA;AAAA,EAGA,IAAI,oBAAA,GAAgC;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,EAAa,OAAO,KAAA;AAC9B,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,YAAA,IAAgB,OAAA,CAAQ,QAAA,KAAa,OAAA,IAAW,CAAC,IAAA,CAAK,KAAA,CAAM,GAAA,EAAK,OAAO,IAAA;AAE1F,IAAA,OAAO,CAAC,iBAAA,CAAkB,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAAA,EAC1C;AAAA,EAEQ,KAAK,IAAA,EAAyC;AACpD,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,MAAA,GAAS,EAAA;AACd,IAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAO,EAAG;AAC3C,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,IAAI,CAAC,CAAA;AAAA,IAC9C;AACA,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AACnB,IAAA,KAAA,MAAW,cAAc,IAAA,CAAK,SAAA,CAAU,MAAA,EAAO,aAAc,KAAA,EAAM;AACnE,IAAA,IAAA,CAAK,UAAU,KAAA,EAAM;AACrB,IAAA,IAAI,IAAA,CAAK,QAAQ,YAAA,IAAgB,OAAA,CAAQ,aAAa,OAAA,IAAW,IAAA,CAAK,MAAM,GAAA,EAAK;AAC/E,MAAA,IAAI;AACF,QAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MACzC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MAC3B;AAAA,IACF,CAAA,MAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA;AAChC,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,OAAA,CAAQ,OAAA,GAAU,IAAI,mBAAA,CAAoB,IAAI,CAAC,CAAA;AAAA,IACtD,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,MAAM,KAAA,EAAsB;AAClC,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACzD,IAAA,MAAM,IAAA,GAAO,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC;AAAA,CAAA;AACrC,IAAA,IAAI,MAAA,CAAO,WAAW,IAAI,CAAA,GAAI,KAAK,UAAA,EAAY,MAAM,IAAI,mBAAA,CAAoB,UAAU,CAAA;AACvF,IAAA,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA;AAAA,EAC7B;AAAA,EAEQ,QAAQ,KAAA,EAAqB;AACnC,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,MAAA,IAAU,KAAA;AACf,IAAA,IAAI;AACF,MAAA,WAAS;AACP,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA;AACpC,QAAA,IAAI,MAAM,CAAA,EAAG;AACb,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,GAAG,GAAG,CAAA;AACrC,QAAA,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA;AACvC,QAAA,IAAI,MAAA,CAAO,WAAW,IAAI,CAAA,GAAI,KAAK,UAAA,EAAY,MAAM,IAAI,mBAAA,CAAoB,UAAU,CAAA;AACvF,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,QAAA,MAAM,KAAA,GAAiB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACtC,QAAA,IAAI,CAAC,MAAA,CAAO,KAAK,GAAG,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC5D,QAAA,IAAI,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,EAAU;AACpC,UAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,YAAA,IAAI,CAAC,QAAQ,KAAA,CAAM,EAAE,GAAG,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAChE,YAAA,KAAK,KAAK,mBAAA,CAAoB,KAAA,CAAM,IAAI,KAAA,CAAM,MAAA,EAAQ,MAAM,MAAM,CAAA;AAAA,UACpE,OAAO,IAAA,CAAK,OAAA,CAAQ,iBAAiB,KAAA,CAAM,MAAA,EAAQ,MAAM,MAAM,CAAA;AAAA,QACjE,CAAA,MAAO;AACL,UAAA,IACE,OAAO,KAAA,CAAM,EAAA,KAAO,QAAA,IACpB,CAAC,MAAA,CAAO,aAAA,CAAc,KAAA,CAAM,EAAE,CAAA,IAC9B,OAAA,IAAW,KAAA,KAAU,QAAA,IAAY,KAAA;AAEjC,YAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC1C,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAM,EAAE,CAAA;AACzC,UAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,oBAAoB,UAAU,CAAA;AACtD,UAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,UAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,EAAE,CAAA;AAC5B,UAAA,IAAI,WAAW,KAAA,EAAO;AAGpB,YAAA,MAAM,UACJ,OAAA,CAAQ,cAAA,IACR,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,IAClB,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,UACrB,KAAA,CAAM,KAAA,CAAM,OAAA,KAAY,CAAA,+BAAA,EAAkC,QAAQ,cAAc,CAAA,CAAA;AAClF,YAAA,OAAA,CAAQ,MAAA;AAAA,cACN,UAAU,IAAI,2BAAA,EAA4B,GAAI,IAAI,oBAAoB,UAAU;AAAA,aAClF;AAAA,UACF,CAAA,MAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA;AAAA,QACrC;AACA,QAAA,IAAI,KAAK,QAAA,EAAU;AAAA,MACrB;AACA,MAAA,IAAI,MAAA,CAAO,UAAA,CAAW,IAAA,CAAK,MAAM,IAAI,IAAA,CAAK,UAAA;AACxC,QAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAAA,IAC5C,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,IACtB;AAAA,EACF;AAAA,EAEA,MAAc,mBAAA,CACZ,EAAA,EACA,MAAA,EACA,MAAA,EACe;AACf,IAAA,IAAI,IAAA,CAAK,UAAU,GAAA,CAAI,EAAE,KAAK,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAA,CAAK,QAAA;AACxD,MAAA,OAAO,IAAA,CAAK,KAAK,UAAU,CAAA;AAC7B,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA;AACjC,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,eAAA,IAAmB,EAAC,EAAG,MAAM,CAAA,GACpE,IAAA,CAAK,OAAA,CAAQ,eAAA,GAAkB,MAAoC,CAAA,GACnE,KAAA,CAAA;AACJ,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,oBAAoB,UAAU,CAAA;AACtD,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,CAAK;AAAA,QAChC,OAAA,CAAQ,OAAA,EAAQ,CAAE,IAAA,CAAK,MAAM;AAC3B,UAAA,IAAI,IAAA,CAAK,YAAY,UAAA,CAAW,MAAA,CAAO,SAAS,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACtF,UAAA,OAAQ,OAAA;AAAA,YACN,MAAA;AAAA,YACA,UAAA,CAAW;AAAA,WACb;AAAA,QACF,CAAC,CAAA;AAAA,QACD,IAAI,OAAA,CAAe,CAAC,CAAA,EAAG,MAAA,KAAW;AAChC,UAAA,UAAA,CAAW,MAAA,CAAO,gBAAA;AAAA,YAChB,OAAA;AAAA,YACA,MAAM,MAAA,CAAO,IAAI,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAAA,YAC9C,EAAE,MAAM,IAAA;AAAK,WACf;AACA,UAAA,KAAA,GAAQ,WAAW,MAAM;AACvB,YAAA,UAAA,CAAW,KAAA,EAAM;AACjB,YAAA,MAAA,CAAO,IAAI,mBAAA,CAAoB,SAAS,CAAC,CAAA;AAAA,UAC3C,CAAA,EAAG,KAAK,eAAe,CAAA;AAAA,QACzB,CAAC;AAAA,OACF,CAAA;AACD,MAAA,MAAM,UAAU,IAAA,CAAK,OAAA,CAAQ,uBAAA,GAA0B,MAAA,EAAQ,MAAM,CAAA,IAAK,IAAA;AAC1E,MAAA,IACE,CAAC,OAAA,IACD,IAAA,CAAK,QAAA,IACL,UAAA,CAAW,MAAA,CAAO,OAAA,IAClB,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA,KAAM,UAAA;AAE3B,QAAA,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACxC,MAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,CAAA;AAAA,IAC3B,CAAA,CAAA,MAAQ;AACN,MAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAClB,QAAA,IAAI;AACF,UAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,KAAA,EAAO,EAAE,MAAM,CAAA,KAAA,EAAQ,OAAA,EAAS,6BAAA,EAA8B,EAAG,CAAA;AAAA,QACpF,CAAA,CAAA,MAAQ;AACN,UAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,QACtB;AAAA,MACF;AAAA,IACF,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,UAAA,CAAW,KAAA,EAAM;AACjB,MAAA,IAAA,CAAK,SAAA,CAAU,OAAO,EAAE,CAAA;AAAA,IAC1B;AAAA,EACF;AACF","file":"chunk-K4O6L3WH.js","sourcesContent":["import { CodexNativeStateUnavailable } from \"./codex/native-state.js\";\nimport { spawn, type ChildProcessWithoutNullStreams } from \"node:child_process\";\n// Narrow module, not the `core` barrel: the barrel's chunks carry `import.meta`,\n// which breaks consumers that transpile this entry to CommonJS.\nimport { resolveAgentExec, wrapAgentCommand } from \"./agent-exec.js\";\nimport { processGroupAlive } from \"../../core/src/process-alive.js\";\nimport type { NativeRequests, NativeServerRequests } from \"./codex/native-protocol.generated.js\";\n\n/** The retained native request types, exposed only through this client surface. */\nexport type CodexRequestMethod = keyof NativeRequests;\n/** Native callback handlers receive cancellation when their process is disposed. */\nexport type CodexServerRequestHandlers = {\n  [M in keyof NativeServerRequests]?: (\n    params: NativeServerRequests[M][\"params\"],\n    signal: AbortSignal,\n  ) => Promise<NativeServerRequests[M][\"result\"]>;\n};\n/** Explicit process inputs keep managed callers from inheriting ambient credentials. */\nexport interface CodexAppServerOptions {\n  command: string;\n  args: string[];\n  cwd: string;\n  env: Record<string, string>;\n  clientInfo: NativeRequests[\"initialize\"][\"params\"][\"clientInfo\"];\n  requestTimeoutMs?: number;\n  serverRequestTimeoutMs?: number;\n  maxPendingRequests?: number;\n  maxFrameBytes?: number;\n  /** Isolate and reap the native process group on POSIX. */\n  processGroup?: boolean;\n  onServerRequest?: CodexServerRequestHandlers;\n  /** Final synchronous lifecycle veto before a callback reply; cannot grant a missing handler. */\n  canReplyToServerRequest?: (method: string, params: unknown) => boolean;\n  onNotification?: (method: string, params: unknown) => void;\n  /** Exactly once on terminal failure or disposal, even with no RPC pending. */\n  onClose?: (error: CodexAppServerError) => void;\n}\n/** Safe error codes never contain stderr, native errors, RPC payloads or credentials. */\nexport class CodexAppServerError extends Error {\n  constructor(\n    readonly code: \"closed\" | \"process\" | \"protocol\" | \"timeout\" | \"rejected\" | \"capacity\",\n  ) {\n    super(`Codex App Server ${code}`);\n    this.name = \"CodexAppServerError\";\n  }\n}\ntype Pending = {\n  resolve: (value: unknown) => void;\n  reject: (error: CodexAppServerError | CodexNativeStateUnavailable) => void;\n  timer: ReturnType<typeof setTimeout>;\n  resumeThreadId?: string;\n};\nconst record = (value: unknown): value is Record<string, unknown> =>\n  value !== null && typeof value === \"object\" && !Array.isArray(value);\nconst validId = (value: unknown): value is string | number =>\n  typeof value === \"string\" || (typeof value === \"number\" && Number.isSafeInteger(value));\nfunction bound(value: number | undefined, fallback: number, maximum: number): number {\n  const result = value ?? fallback;\n  if (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n    throw new CodexAppServerError(\"protocol\");\n  return result;\n}\n\n/** One initialized stdio process with correlated, bounded requests and terminal disposal. */\nexport class CodexAppServerClient {\n  private readonly pending = new Map<number, Pending>();\n  private readonly callbacks = new Map<string | number, AbortController>();\n  private readonly timeout: number;\n  private readonly callbackTimeout: number;\n  private readonly capacity: number;\n  private readonly frameLimit: number;\n  private readonly child: ChildProcessWithoutNullStreams;\n  private readonly closed: Promise<void>;\n  private terminal = false;\n  private childClosed = false;\n  private nextId = 1;\n  private buffer = \"\";\n\n  private constructor(private readonly options: CodexAppServerOptions) {\n    this.timeout = bound(options.requestTimeoutMs, 15_000, 300_000);\n    this.callbackTimeout = bound(options.serverRequestTimeoutMs, 30_000, 300_000);\n    this.capacity = bound(options.maxPendingRequests, 64, 1024);\n    this.frameLimit = bound(options.maxFrameBytes, 1024 * 1024, 16 * 1024 * 1024);\n    // With the uid split on, the app server runs as the agent uid through the\n    // launch shim. A process-group kill of the shim still ends it: the launcher\n    // kills the agent's whole group when the shim dies.\n    const target = wrapAgentCommand(options.command, options.args, resolveAgentExec());\n    this.child = spawn(target.command, target.args, {\n      cwd: options.cwd,\n      env: options.env,\n      stdio: \"pipe\",\n      detached: options.processGroup === true && process.platform !== \"win32\",\n    });\n    this.closed = new Promise((resolve) =>\n      this.child.once(\"close\", () => {\n        this.childClosed = true;\n        resolve();\n      }),\n    );\n    this.child.stdout.setEncoding(\"utf8\");\n    this.child.stdout.on(\"data\", (chunk: string) => this.receive(chunk));\n    // Drain without retaining raw diagnostic output: native stderr can contain secrets.\n    this.child.stderr.resume();\n    this.child.on(\"error\", () => this.fail(\"process\"));\n    this.child.stdin.on(\"error\", () => this.fail(\"process\"));\n    this.child.stdout.on(\"error\", () => this.fail(\"process\"));\n    this.child.stderr.on(\"error\", () => this.fail(\"process\"));\n    this.child.once(\"exit\", () => this.fail(\"process\"));\n  }\n\n  /** Spawn and finish the native initialize/initialized handshake before returning. */\n  static async connect(\n    options: CodexAppServerOptions,\n    signal?: AbortSignal,\n  ): Promise<CodexAppServerClient> {\n    let client: CodexAppServerClient | undefined;\n    const abort = () => client?.fail(\"closed\");\n    try {\n      if (signal?.aborted) throw new CodexAppServerError(\"closed\");\n      client = new CodexAppServerClient(options);\n      signal?.addEventListener(\"abort\", abort, { once: true });\n      await client.request(\"initialize\", {\n        clientInfo: options.clientInfo,\n        capabilities: { experimentalApi: true },\n      });\n      client.write({ method: \"initialized\" });\n      return client;\n    } catch (error) {\n      await client?.dispose();\n      throw error instanceof CodexAppServerError ? error : new CodexAppServerError(\"process\");\n    } finally {\n      signal?.removeEventListener(\"abort\", abort);\n    }\n  }\n\n  /** Timeout closes this generation, so late replies can never satisfy a later request. */\n  request<M extends CodexRequestMethod>(\n    method: M,\n    params: NativeRequests[M][\"params\"],\n  ): Promise<NativeRequests[M][\"result\"]> {\n    if (this.terminal) return Promise.reject(new CodexAppServerError(\"closed\"));\n    if (this.pending.size >= this.capacity)\n      return Promise.reject(new CodexAppServerError(\"capacity\"));\n    const id = this.nextId++;\n    return new Promise((resolve, reject) => {\n      const timer = setTimeout(() => this.fail(\"timeout\"), this.timeout);\n      this.pending.set(id, {\n        resolve: resolve as (value: unknown) => void,\n        reject,\n        timer,\n        ...(method === \"thread/resume\" &&\n        params !== null &&\n        \"threadId\" in params &&\n        typeof params.threadId === \"string\"\n          ? { resumeThreadId: params.threadId }\n          : {}),\n      });\n      try {\n        this.write({ id, method, params });\n      } catch {\n        this.fail(\"protocol\");\n      }\n    });\n  }\n\n  /** Reject pending work immediately and wait a bounded interval for process shutdown. */\n  async dispose(): Promise<void> {\n    this.fail(\"closed\");\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    await Promise.race([\n      this.closed,\n      new Promise<void>((resolve) => {\n        timer = setTimeout(resolve, 1000);\n      }),\n    ]);\n    clearTimeout(timer);\n  }\n\n  /** Positive exit proof for callers that may replace a failed native generation. */\n  get terminationConfirmed(): boolean {\n    if (!this.childClosed) return false;\n    if (!this.options.processGroup || process.platform === \"win32\" || !this.child.pid) return true;\n    // A group left holding only unreaped zombies runs nothing; a bare kill(-pid, 0) says otherwise.\n    return !processGroupAlive(this.child.pid);\n  }\n\n  private fail(code: CodexAppServerError[\"code\"]): void {\n    if (this.terminal) return;\n    this.terminal = true;\n    this.buffer = \"\";\n    for (const request of this.pending.values()) {\n      clearTimeout(request.timer);\n      request.reject(new CodexAppServerError(code));\n    }\n    this.pending.clear();\n    for (const controller of this.callbacks.values()) controller.abort();\n    this.callbacks.clear();\n    if (this.options.processGroup && process.platform !== \"win32\" && this.child.pid) {\n      try {\n        process.kill(-this.child.pid, \"SIGKILL\");\n      } catch {\n        this.child.kill(\"SIGKILL\");\n      }\n    } else this.child.kill(\"SIGKILL\");\n    try {\n      this.options.onClose?.(new CodexAppServerError(code));\n    } catch {\n      // Observer failures cannot interrupt transport cleanup.\n    }\n  }\n\n  private write(frame: unknown): void {\n    if (this.terminal) throw new CodexAppServerError(\"closed\");\n    const line = `${JSON.stringify(frame)}\\n`;\n    if (Buffer.byteLength(line) > this.frameLimit) throw new CodexAppServerError(\"protocol\");\n    this.child.stdin.write(line);\n  }\n\n  private receive(chunk: string): void {\n    if (this.terminal) return;\n    this.buffer += chunk;\n    try {\n      for (;;) {\n        const end = this.buffer.indexOf(\"\\n\");\n        if (end < 0) break;\n        const line = this.buffer.slice(0, end);\n        this.buffer = this.buffer.slice(end + 1);\n        if (Buffer.byteLength(line) > this.frameLimit) throw new CodexAppServerError(\"protocol\");\n        if (!line.trim()) continue;\n        const frame: unknown = JSON.parse(line);\n        if (!record(frame)) throw new CodexAppServerError(\"protocol\");\n        if (typeof frame.method === \"string\") {\n          if (\"id\" in frame) {\n            if (!validId(frame.id)) throw new CodexAppServerError(\"protocol\");\n            void this.handleServerRequest(frame.id, frame.method, frame.params);\n          } else this.options.onNotification?.(frame.method, frame.params);\n        } else {\n          if (\n            typeof frame.id !== \"number\" ||\n            !Number.isSafeInteger(frame.id) ||\n            \"error\" in frame === \"result\" in frame\n          )\n            throw new CodexAppServerError(\"protocol\");\n          const request = this.pending.get(frame.id);\n          if (!request) throw new CodexAppServerError(\"protocol\");\n          clearTimeout(request.timer);\n          this.pending.delete(frame.id);\n          if (\"error\" in frame) {\n            // Pinned 0.153.4 thread_store_resume_read_error maps only missing rollout\n            // to this exact invalid-request message. Never retain raw native errors.\n            const missing =\n              request.resumeThreadId &&\n              record(frame.error) &&\n              frame.error.code === -32600 &&\n              frame.error.message === `no rollout found for thread id ${request.resumeThreadId}`;\n            request.reject(\n              missing ? new CodexNativeStateUnavailable() : new CodexAppServerError(\"rejected\"),\n            );\n          } else request.resolve(frame.result);\n        }\n        if (this.terminal) return;\n      }\n      if (Buffer.byteLength(this.buffer) > this.frameLimit)\n        throw new CodexAppServerError(\"protocol\");\n    } catch {\n      this.fail(\"protocol\");\n    }\n  }\n\n  private async handleServerRequest(\n    id: string | number,\n    method: string,\n    params: unknown,\n  ): Promise<void> {\n    if (this.callbacks.has(id) || this.callbacks.size >= this.capacity)\n      return this.fail(\"protocol\");\n    const controller = new AbortController();\n    this.callbacks.set(id, controller);\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    try {\n      const handler = Object.hasOwn(this.options.onServerRequest ?? {}, method)\n        ? this.options.onServerRequest?.[method as keyof NativeServerRequests]\n        : undefined;\n      if (!handler) throw new CodexAppServerError(\"rejected\");\n      const result = await Promise.race([\n        Promise.resolve().then(() => {\n          if (this.terminal || controller.signal.aborted) throw new CodexAppServerError(\"closed\");\n          return (handler as (params: unknown, signal: AbortSignal) => Promise<unknown>)(\n            params,\n            controller.signal,\n          );\n        }),\n        new Promise<never>((_, reject) => {\n          controller.signal.addEventListener(\n            \"abort\",\n            () => reject(new CodexAppServerError(\"closed\")),\n            { once: true },\n          );\n          timer = setTimeout(() => {\n            controller.abort();\n            reject(new CodexAppServerError(\"timeout\"));\n          }, this.callbackTimeout);\n        }),\n      ]);\n      const current = this.options.canReplyToServerRequest?.(method, params) ?? true;\n      if (\n        !current ||\n        this.terminal ||\n        controller.signal.aborted ||\n        this.callbacks.get(id) !== controller\n      )\n        throw new CodexAppServerError(\"closed\");\n      this.write({ id, result });\n    } catch {\n      if (!this.terminal) {\n        try {\n          this.write({ id, error: { code: -32603, message: \"Codex client request failed\" } });\n        } catch {\n          this.fail(\"protocol\");\n        }\n      }\n    } finally {\n      clearTimeout(timer);\n      controller.abort();\n      this.callbacks.delete(id);\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../bridge/src/codex-app-server.ts"],"names":[],"mappings":";;;;;AAsCO,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,YACW,IAAA,EACT;AACA,IAAA,KAAA,CAAM,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAA;AAFvB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAGT,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AAAA,EAJW,IAAA;AAKb;AAOA,IAAM,MAAA,GAAS,CAAC,KAAA,KACd,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACrE,IAAM,OAAA,GAAU,CAAC,KAAA,KACf,OAAO,KAAA,KAAU,QAAA,IAAa,OAAO,KAAA,KAAU,QAAA,IAAY,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AACvF,SAAS,KAAA,CAAM,KAAA,EAA2B,QAAA,EAAkB,OAAA,EAAyB;AACnF,EAAA,MAAM,SAAS,KAAA,IAAS,QAAA;AACxB,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA,IAAK,MAAA,IAAU,KAAK,MAAA,GAAS,OAAA;AAC3D,IAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC1C,EAAA,OAAO,MAAA;AACT;AAGO,IAAM,oBAAA,GAAN,MAAM,qBAAA,CAAqB;AAAA,EAcxB,YAA6B,OAAA,EAAgC;AAAhC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,KAAA,CAAM,OAAA,CAAQ,gBAAA,EAAkB,MAAQ,GAAO,CAAA;AAC9D,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAA,CAAM,OAAA,CAAQ,sBAAA,EAAwB,KAAQ,GAAO,CAAA;AAC5E,IAAA,IAAA,CAAK,QAAA,GAAW,KAAA,CAAM,OAAA,CAAQ,kBAAA,EAAoB,IAAI,IAAI,CAAA;AAC1D,IAAA,IAAA,CAAK,UAAA,GAAa,MAAM,OAAA,CAAQ,aAAA,EAAe,OAAO,IAAA,EAAM,EAAA,GAAK,OAAO,IAAI,CAAA;AAI5E,IAAA,MAAM,SAAS,gBAAA,CAAiB,OAAA,CAAQ,SAAS,OAAA,CAAQ,IAAA,EAAM,kBAAkB,CAAA;AACjF,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA,CAAM,MAAA,CAAO,OAAA,EAAS,OAAO,IAAA,EAAM;AAAA,MAC9C,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,OAAA,CAAQ,YAAA,KAAiB,IAAA,IAAQ,QAAQ,QAAA,KAAa;AAAA,KACjE,CAAA;AACD,IAAA,IAAA,CAAK,SAAS,IAAI,OAAA;AAAA,MAAQ,CAAC,OAAA,KACzB,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM;AAC7B,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,QAAA,OAAA,EAAQ;AAAA,MACV,CAAC;AAAA,KACH;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,WAAA,CAAY,MAAM,CAAA;AACpC,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAC,CAAA;AAEnE,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,MAAA,EAAO;AACzB,IAAA,IAAA,CAAK,MAAM,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACjD,IAAA,IAAA,CAAK,KAAA,CAAM,MAAM,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACvD,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AAAA,EACpD;AAAA,EA9BqC,OAAA;AAAA,EAbpB,OAAA,uBAAc,GAAA,EAAqB;AAAA,EACnC,SAAA,uBAAgB,GAAA,EAAsC;AAAA,EACtD,OAAA;AAAA,EACA,eAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACT,QAAA,GAAW,KAAA;AAAA,EACX,WAAA,GAAc,KAAA;AAAA,EACd,MAAA,GAAS,CAAA;AAAA,EACT,MAAA,GAAS,EAAA;AAAA;AAAA,EAmCjB,aAAa,OAAA,CACX,OAAA,EACA,MAAA,EAC+B;AAC/B,IAAA,IAAI,MAAA;AACJ,IAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AACzC,IAAA,IAAI;AACF,MAAA,IAAI,MAAA,EAAQ,OAAA,EAAS,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AAC3D,MAAA,MAAA,GAAS,IAAI,sBAAqB,OAAO,CAAA;AACzC,MAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAM,CAAA;AACvD,MAAA,MAAM,MAAA,CAAO,QAAQ,YAAA,EAAc;AAAA,QACjC,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,YAAA,EAAc,EAAE,eAAA,EAAiB,IAAA;AAAK,OACvC,CAAA;AACD,MAAA,MAAA,CAAO,KAAA,CAAM,EAAE,MAAA,EAAQ,aAAA,EAAe,CAAA;AACtC,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,QAAQ,OAAA,EAAQ;AACtB,MAAA,MAAM,KAAA,YAAiB,mBAAA,GAAsB,KAAA,GAAQ,IAAI,oBAAoB,SAAS,CAAA;AAAA,IACxF,CAAA,SAAE;AACA,MAAA,MAAA,EAAQ,mBAAA,CAAoB,SAAS,KAAK,CAAA;AAAA,IAC5C;AAAA,EACF;AAAA;AAAA,EAGA,OAAA,CACE,QACA,MAAA,EACsC;AACtC,IAAA,IAAI,IAAA,CAAK,UAAU,OAAO,OAAA,CAAQ,OAAO,IAAI,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAC1E,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,IAAQ,IAAA,CAAK,QAAA;AAC5B,MAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,UAAU,CAAC,CAAA;AAC3D,IAAA,MAAM,KAAK,IAAA,CAAK,MAAA,EAAA;AAChB,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,IAAA,CAAK,KAAK,SAAS,CAAA,EAAG,KAAK,OAAO,CAAA;AACjE,MAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,EAAA,EAAI;AAAA,QACnB,OAAA;AAAA,QACA,MAAA;AAAA,QACA,KAAA;AAAA,QACA,GAAI,MAAA,KAAW,eAAA,IACf,MAAA,KAAW,IAAA,IACX,cAAc,MAAA,IACd,OAAO,MAAA,CAAO,QAAA,KAAa,WACvB,EAAE,cAAA,EAAgB,MAAA,CAAO,QAAA,KACzB;AAAC,OACN,CAAA;AACD,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,MACnC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,MACtB;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAA,CAAK,KAAK,QAAQ,CAAA;AAClB,IAAA,IAAI,KAAA;AACJ,IAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,MACjB,IAAA,CAAK,MAAA;AAAA,MACL,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY;AAC7B,QAAA,KAAA,GAAQ,UAAA,CAAW,SAAS,GAAI,CAAA;AAAA,MAClC,CAAC;AAAA,KACF,CAAA;AACD,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AAAA;AAAA,EAGA,IAAI,oBAAA,GAAgC;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,EAAa,OAAO,KAAA;AAC9B,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,YAAA,IAAgB,OAAA,CAAQ,QAAA,KAAa,OAAA,IAAW,CAAC,IAAA,CAAK,KAAA,CAAM,GAAA,EAAK,OAAO,IAAA;AAE1F,IAAA,OAAO,CAAC,iBAAA,CAAkB,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAAA,EAC1C;AAAA,EAEQ,KAAK,IAAA,EAAyC;AACpD,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,MAAA,GAAS,EAAA;AACd,IAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAO,EAAG;AAC3C,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,IAAI,CAAC,CAAA;AAAA,IAC9C;AACA,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AACnB,IAAA,KAAA,MAAW,cAAc,IAAA,CAAK,SAAA,CAAU,MAAA,EAAO,aAAc,KAAA,EAAM;AACnE,IAAA,IAAA,CAAK,UAAU,KAAA,EAAM;AACrB,IAAA,IAAI,IAAA,CAAK,QAAQ,YAAA,IAAgB,OAAA,CAAQ,aAAa,OAAA,IAAW,IAAA,CAAK,MAAM,GAAA,EAAK;AAC/E,MAAA,IAAI;AACF,QAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MACzC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MAC3B;AAAA,IACF,CAAA,MAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA;AAChC,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,OAAA,CAAQ,OAAA,GAAU,IAAI,mBAAA,CAAoB,IAAI,CAAC,CAAA;AAAA,IACtD,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,MAAM,KAAA,EAAsB;AAClC,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACzD,IAAA,MAAM,IAAA,GAAO,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC;AAAA,CAAA;AACrC,IAAA,IAAI,MAAA,CAAO,WAAW,IAAI,CAAA,GAAI,KAAK,UAAA,EAAY,MAAM,IAAI,mBAAA,CAAoB,UAAU,CAAA;AACvF,IAAA,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA;AAAA,EAC7B;AAAA,EAEQ,QAAQ,KAAA,EAAqB;AACnC,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,MAAA,IAAU,KAAA;AACf,IAAA,IAAI;AACF,MAAA,WAAS;AACP,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA;AACpC,QAAA,IAAI,MAAM,CAAA,EAAG;AACb,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,GAAG,GAAG,CAAA;AACrC,QAAA,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA;AACvC,QAAA,IAAI,MAAA,CAAO,WAAW,IAAI,CAAA,GAAI,KAAK,UAAA,EAAY,MAAM,IAAI,mBAAA,CAAoB,UAAU,CAAA;AACvF,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,QAAA,MAAM,KAAA,GAAiB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACtC,QAAA,IAAI,CAAC,MAAA,CAAO,KAAK,GAAG,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC5D,QAAA,IAAI,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,EAAU;AACpC,UAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,YAAA,IAAI,CAAC,QAAQ,KAAA,CAAM,EAAE,GAAG,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAChE,YAAA,KAAK,KAAK,mBAAA,CAAoB,KAAA,CAAM,IAAI,KAAA,CAAM,MAAA,EAAQ,MAAM,MAAM,CAAA;AAAA,UACpE,OAAO,IAAA,CAAK,OAAA,CAAQ,iBAAiB,KAAA,CAAM,MAAA,EAAQ,MAAM,MAAM,CAAA;AAAA,QACjE,CAAA,MAAO;AACL,UAAA,IACE,OAAO,KAAA,CAAM,EAAA,KAAO,QAAA,IACpB,CAAC,MAAA,CAAO,aAAA,CAAc,KAAA,CAAM,EAAE,CAAA,IAC9B,OAAA,IAAW,KAAA,KAAU,QAAA,IAAY,KAAA;AAEjC,YAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC1C,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAM,EAAE,CAAA;AACzC,UAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,oBAAoB,UAAU,CAAA;AACtD,UAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,UAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,EAAE,CAAA;AAC5B,UAAA,IAAI,WAAW,KAAA,EAAO;AAGpB,YAAA,MAAM,UACJ,OAAA,CAAQ,cAAA,IACR,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,IAClB,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,UACrB,KAAA,CAAM,KAAA,CAAM,OAAA,KAAY,CAAA,+BAAA,EAAkC,QAAQ,cAAc,CAAA,CAAA;AAClF,YAAA,OAAA,CAAQ,MAAA;AAAA,cACN,UAAU,IAAI,2BAAA,EAA4B,GAAI,IAAI,oBAAoB,UAAU;AAAA,aAClF;AAAA,UACF,CAAA,MAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA;AAAA,QACrC;AACA,QAAA,IAAI,KAAK,QAAA,EAAU;AAAA,MACrB;AACA,MAAA,IAAI,MAAA,CAAO,UAAA,CAAW,IAAA,CAAK,MAAM,IAAI,IAAA,CAAK,UAAA;AACxC,QAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAAA,IAC5C,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,IACtB;AAAA,EACF;AAAA,EAEA,MAAc,mBAAA,CACZ,EAAA,EACA,MAAA,EACA,MAAA,EACe;AACf,IAAA,IAAI,IAAA,CAAK,UAAU,GAAA,CAAI,EAAE,KAAK,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAA,CAAK,QAAA;AACxD,MAAA,OAAO,IAAA,CAAK,KAAK,UAAU,CAAA;AAC7B,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA;AACjC,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,eAAA,IAAmB,EAAC,EAAG,MAAM,CAAA,GACpE,IAAA,CAAK,OAAA,CAAQ,eAAA,GAAkB,MAAoC,CAAA,GACnE,KAAA,CAAA;AACJ,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,oBAAoB,UAAU,CAAA;AACtD,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,CAAK;AAAA,QAChC,OAAA,CAAQ,OAAA,EAAQ,CAAE,IAAA,CAAK,MAAM;AAC3B,UAAA,IAAI,IAAA,CAAK,YAAY,UAAA,CAAW,MAAA,CAAO,SAAS,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACtF,UAAA,OAAQ,OAAA;AAAA,YACN,MAAA;AAAA,YACA,UAAA,CAAW;AAAA,WACb;AAAA,QACF,CAAC,CAAA;AAAA,QACD,IAAI,OAAA,CAAe,CAAC,CAAA,EAAG,MAAA,KAAW;AAChC,UAAA,UAAA,CAAW,MAAA,CAAO,gBAAA;AAAA,YAChB,OAAA;AAAA,YACA,MAAM,MAAA,CAAO,IAAI,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAAA,YAC9C,EAAE,MAAM,IAAA;AAAK,WACf;AACA,UAAA,KAAA,GAAQ,WAAW,MAAM;AACvB,YAAA,UAAA,CAAW,KAAA,EAAM;AACjB,YAAA,MAAA,CAAO,IAAI,mBAAA,CAAoB,SAAS,CAAC,CAAA;AAAA,UAC3C,CAAA,EAAG,KAAK,eAAe,CAAA;AAAA,QACzB,CAAC;AAAA,OACF,CAAA;AACD,MAAA,MAAM,UAAU,IAAA,CAAK,OAAA,CAAQ,uBAAA,GAA0B,MAAA,EAAQ,MAAM,CAAA,IAAK,IAAA;AAC1E,MAAA,IACE,CAAC,OAAA,IACD,IAAA,CAAK,QAAA,IACL,UAAA,CAAW,MAAA,CAAO,OAAA,IAClB,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA,KAAM,UAAA;AAE3B,QAAA,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACxC,MAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,CAAA;AAAA,IAC3B,CAAA,CAAA,MAAQ;AACN,MAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAClB,QAAA,IAAI;AACF,UAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,KAAA,EAAO,EAAE,MAAM,CAAA,KAAA,EAAQ,OAAA,EAAS,6BAAA,EAA8B,EAAG,CAAA;AAAA,QACpF,CAAA,CAAA,MAAQ;AACN,UAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,QACtB;AAAA,MACF;AAAA,IACF,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,UAAA,CAAW,KAAA,EAAM;AACjB,MAAA,IAAA,CAAK,SAAA,CAAU,OAAO,EAAE,CAAA;AAAA,IAC1B;AAAA,EACF;AACF","file":"chunk-KNY356I3.js","sourcesContent":["import { CodexNativeStateUnavailable } from \"./codex/native-state.js\";\nimport { spawn, type ChildProcessWithoutNullStreams } from \"node:child_process\";\n// Narrow module, not the `core` barrel: the barrel's chunks carry `import.meta`,\n// which breaks consumers that transpile this entry to CommonJS.\nimport { resolveAgentExec, wrapAgentCommand } from \"./agent-exec.js\";\nimport { processGroupAlive } from \"../../core/src/process-alive.js\";\nimport type { NativeRequests, NativeServerRequests } from \"./codex/native-protocol.generated.js\";\n\n/** The retained native request types, exposed only through this client surface. */\nexport type CodexRequestMethod = keyof NativeRequests;\n/** Native callback handlers receive cancellation when their process is disposed. */\nexport type CodexServerRequestHandlers = {\n  [M in keyof NativeServerRequests]?: (\n    params: NativeServerRequests[M][\"params\"],\n    signal: AbortSignal,\n  ) => Promise<NativeServerRequests[M][\"result\"]>;\n};\n/** Explicit process inputs keep managed callers from inheriting ambient credentials. */\nexport interface CodexAppServerOptions {\n  command: string;\n  args: string[];\n  cwd: string;\n  env: Record<string, string>;\n  clientInfo: NativeRequests[\"initialize\"][\"params\"][\"clientInfo\"];\n  requestTimeoutMs?: number;\n  serverRequestTimeoutMs?: number;\n  maxPendingRequests?: number;\n  maxFrameBytes?: number;\n  /** Isolate and reap the native process group on POSIX. */\n  processGroup?: boolean;\n  onServerRequest?: CodexServerRequestHandlers;\n  /** Final synchronous lifecycle veto before a callback reply; cannot grant a missing handler. */\n  canReplyToServerRequest?: (method: string, params: unknown) => boolean;\n  onNotification?: (method: string, params: unknown) => void;\n  /** Exactly once on terminal failure or disposal, even with no RPC pending. */\n  onClose?: (error: CodexAppServerError) => void;\n}\n/** Safe error codes never contain stderr, native errors, RPC payloads or credentials. */\nexport class CodexAppServerError extends Error {\n  constructor(\n    readonly code: \"closed\" | \"process\" | \"protocol\" | \"timeout\" | \"rejected\" | \"capacity\",\n  ) {\n    super(`Codex App Server ${code}`);\n    this.name = \"CodexAppServerError\";\n  }\n}\ntype Pending = {\n  resolve: (value: unknown) => void;\n  reject: (error: CodexAppServerError | CodexNativeStateUnavailable) => void;\n  timer: ReturnType<typeof setTimeout>;\n  resumeThreadId?: string;\n};\nconst record = (value: unknown): value is Record<string, unknown> =>\n  value !== null && typeof value === \"object\" && !Array.isArray(value);\nconst validId = (value: unknown): value is string | number =>\n  typeof value === \"string\" || (typeof value === \"number\" && Number.isSafeInteger(value));\nfunction bound(value: number | undefined, fallback: number, maximum: number): number {\n  const result = value ?? fallback;\n  if (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n    throw new CodexAppServerError(\"protocol\");\n  return result;\n}\n\n/** One initialized stdio process with correlated, bounded requests and terminal disposal. */\nexport class CodexAppServerClient {\n  private readonly pending = new Map<number, Pending>();\n  private readonly callbacks = new Map<string | number, AbortController>();\n  private readonly timeout: number;\n  private readonly callbackTimeout: number;\n  private readonly capacity: number;\n  private readonly frameLimit: number;\n  private readonly child: ChildProcessWithoutNullStreams;\n  private readonly closed: Promise<void>;\n  private terminal = false;\n  private childClosed = false;\n  private nextId = 1;\n  private buffer = \"\";\n\n  private constructor(private readonly options: CodexAppServerOptions) {\n    this.timeout = bound(options.requestTimeoutMs, 15_000, 300_000);\n    this.callbackTimeout = bound(options.serverRequestTimeoutMs, 30_000, 300_000);\n    this.capacity = bound(options.maxPendingRequests, 64, 1024);\n    this.frameLimit = bound(options.maxFrameBytes, 1024 * 1024, 16 * 1024 * 1024);\n    // With the uid split on, the app server runs as the agent uid through the\n    // launch shim. A process-group kill of the shim still ends it: the launcher\n    // kills the agent's whole group when the shim dies.\n    const target = wrapAgentCommand(options.command, options.args, resolveAgentExec());\n    this.child = spawn(target.command, target.args, {\n      cwd: options.cwd,\n      env: options.env,\n      stdio: \"pipe\",\n      detached: options.processGroup === true && process.platform !== \"win32\",\n    });\n    this.closed = new Promise((resolve) =>\n      this.child.once(\"close\", () => {\n        this.childClosed = true;\n        resolve();\n      }),\n    );\n    this.child.stdout.setEncoding(\"utf8\");\n    this.child.stdout.on(\"data\", (chunk: string) => this.receive(chunk));\n    // Drain without retaining raw diagnostic output: native stderr can contain secrets.\n    this.child.stderr.resume();\n    this.child.on(\"error\", () => this.fail(\"process\"));\n    this.child.stdin.on(\"error\", () => this.fail(\"process\"));\n    this.child.stdout.on(\"error\", () => this.fail(\"process\"));\n    this.child.stderr.on(\"error\", () => this.fail(\"process\"));\n    this.child.once(\"exit\", () => this.fail(\"process\"));\n  }\n\n  /** Spawn and finish the native initialize/initialized handshake before returning. */\n  static async connect(\n    options: CodexAppServerOptions,\n    signal?: AbortSignal,\n  ): Promise<CodexAppServerClient> {\n    let client: CodexAppServerClient | undefined;\n    const abort = () => client?.fail(\"closed\");\n    try {\n      if (signal?.aborted) throw new CodexAppServerError(\"closed\");\n      client = new CodexAppServerClient(options);\n      signal?.addEventListener(\"abort\", abort, { once: true });\n      await client.request(\"initialize\", {\n        clientInfo: options.clientInfo,\n        capabilities: { experimentalApi: true },\n      });\n      client.write({ method: \"initialized\" });\n      return client;\n    } catch (error) {\n      await client?.dispose();\n      throw error instanceof CodexAppServerError ? error : new CodexAppServerError(\"process\");\n    } finally {\n      signal?.removeEventListener(\"abort\", abort);\n    }\n  }\n\n  /** Timeout closes this generation, so late replies can never satisfy a later request. */\n  request<M extends CodexRequestMethod>(\n    method: M,\n    params: NativeRequests[M][\"params\"],\n  ): Promise<NativeRequests[M][\"result\"]> {\n    if (this.terminal) return Promise.reject(new CodexAppServerError(\"closed\"));\n    if (this.pending.size >= this.capacity)\n      return Promise.reject(new CodexAppServerError(\"capacity\"));\n    const id = this.nextId++;\n    return new Promise((resolve, reject) => {\n      const timer = setTimeout(() => this.fail(\"timeout\"), this.timeout);\n      this.pending.set(id, {\n        resolve: resolve as (value: unknown) => void,\n        reject,\n        timer,\n        ...(method === \"thread/resume\" &&\n        params !== null &&\n        \"threadId\" in params &&\n        typeof params.threadId === \"string\"\n          ? { resumeThreadId: params.threadId }\n          : {}),\n      });\n      try {\n        this.write({ id, method, params });\n      } catch {\n        this.fail(\"protocol\");\n      }\n    });\n  }\n\n  /** Reject pending work immediately and wait a bounded interval for process shutdown. */\n  async dispose(): Promise<void> {\n    this.fail(\"closed\");\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    await Promise.race([\n      this.closed,\n      new Promise<void>((resolve) => {\n        timer = setTimeout(resolve, 1000);\n      }),\n    ]);\n    clearTimeout(timer);\n  }\n\n  /** Positive exit proof for callers that may replace a failed native generation. */\n  get terminationConfirmed(): boolean {\n    if (!this.childClosed) return false;\n    if (!this.options.processGroup || process.platform === \"win32\" || !this.child.pid) return true;\n    // A group left holding only unreaped zombies runs nothing; a bare kill(-pid, 0) says otherwise.\n    return !processGroupAlive(this.child.pid);\n  }\n\n  private fail(code: CodexAppServerError[\"code\"]): void {\n    if (this.terminal) return;\n    this.terminal = true;\n    this.buffer = \"\";\n    for (const request of this.pending.values()) {\n      clearTimeout(request.timer);\n      request.reject(new CodexAppServerError(code));\n    }\n    this.pending.clear();\n    for (const controller of this.callbacks.values()) controller.abort();\n    this.callbacks.clear();\n    if (this.options.processGroup && process.platform !== \"win32\" && this.child.pid) {\n      try {\n        process.kill(-this.child.pid, \"SIGKILL\");\n      } catch {\n        this.child.kill(\"SIGKILL\");\n      }\n    } else this.child.kill(\"SIGKILL\");\n    try {\n      this.options.onClose?.(new CodexAppServerError(code));\n    } catch {\n      // Observer failures cannot interrupt transport cleanup.\n    }\n  }\n\n  private write(frame: unknown): void {\n    if (this.terminal) throw new CodexAppServerError(\"closed\");\n    const line = `${JSON.stringify(frame)}\\n`;\n    if (Buffer.byteLength(line) > this.frameLimit) throw new CodexAppServerError(\"protocol\");\n    this.child.stdin.write(line);\n  }\n\n  private receive(chunk: string): void {\n    if (this.terminal) return;\n    this.buffer += chunk;\n    try {\n      for (;;) {\n        const end = this.buffer.indexOf(\"\\n\");\n        if (end < 0) break;\n        const line = this.buffer.slice(0, end);\n        this.buffer = this.buffer.slice(end + 1);\n        if (Buffer.byteLength(line) > this.frameLimit) throw new CodexAppServerError(\"protocol\");\n        if (!line.trim()) continue;\n        const frame: unknown = JSON.parse(line);\n        if (!record(frame)) throw new CodexAppServerError(\"protocol\");\n        if (typeof frame.method === \"string\") {\n          if (\"id\" in frame) {\n            if (!validId(frame.id)) throw new CodexAppServerError(\"protocol\");\n            void this.handleServerRequest(frame.id, frame.method, frame.params);\n          } else this.options.onNotification?.(frame.method, frame.params);\n        } else {\n          if (\n            typeof frame.id !== \"number\" ||\n            !Number.isSafeInteger(frame.id) ||\n            \"error\" in frame === \"result\" in frame\n          )\n            throw new CodexAppServerError(\"protocol\");\n          const request = this.pending.get(frame.id);\n          if (!request) throw new CodexAppServerError(\"protocol\");\n          clearTimeout(request.timer);\n          this.pending.delete(frame.id);\n          if (\"error\" in frame) {\n            // Pinned 0.153.4 thread_store_resume_read_error maps only missing rollout\n            // to this exact invalid-request message. Never retain raw native errors.\n            const missing =\n              request.resumeThreadId &&\n              record(frame.error) &&\n              frame.error.code === -32600 &&\n              frame.error.message === `no rollout found for thread id ${request.resumeThreadId}`;\n            request.reject(\n              missing ? new CodexNativeStateUnavailable() : new CodexAppServerError(\"rejected\"),\n            );\n          } else request.resolve(frame.result);\n        }\n        if (this.terminal) return;\n      }\n      if (Buffer.byteLength(this.buffer) > this.frameLimit)\n        throw new CodexAppServerError(\"protocol\");\n    } catch {\n      this.fail(\"protocol\");\n    }\n  }\n\n  private async handleServerRequest(\n    id: string | number,\n    method: string,\n    params: unknown,\n  ): Promise<void> {\n    if (this.callbacks.has(id) || this.callbacks.size >= this.capacity)\n      return this.fail(\"protocol\");\n    const controller = new AbortController();\n    this.callbacks.set(id, controller);\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    try {\n      const handler = Object.hasOwn(this.options.onServerRequest ?? {}, method)\n        ? this.options.onServerRequest?.[method as keyof NativeServerRequests]\n        : undefined;\n      if (!handler) throw new CodexAppServerError(\"rejected\");\n      const result = await Promise.race([\n        Promise.resolve().then(() => {\n          if (this.terminal || controller.signal.aborted) throw new CodexAppServerError(\"closed\");\n          return (handler as (params: unknown, signal: AbortSignal) => Promise<unknown>)(\n            params,\n            controller.signal,\n          );\n        }),\n        new Promise<never>((_, reject) => {\n          controller.signal.addEventListener(\n            \"abort\",\n            () => reject(new CodexAppServerError(\"closed\")),\n            { once: true },\n          );\n          timer = setTimeout(() => {\n            controller.abort();\n            reject(new CodexAppServerError(\"timeout\"));\n          }, this.callbackTimeout);\n        }),\n      ]);\n      const current = this.options.canReplyToServerRequest?.(method, params) ?? true;\n      if (\n        !current ||\n        this.terminal ||\n        controller.signal.aborted ||\n        this.callbacks.get(id) !== controller\n      )\n        throw new CodexAppServerError(\"closed\");\n      this.write({ id, result });\n    } catch {\n      if (!this.terminal) {\n        try {\n          this.write({ id, error: { code: -32603, message: \"Codex client request failed\" } });\n        } catch {\n          this.fail(\"protocol\");\n        }\n      }\n    } finally {\n      clearTimeout(timer);\n      controller.abort();\n      this.callbacks.delete(id);\n    }\n  }\n}\n"]}

package/dist/{chunk-4ZTPYIBE.js → chunk-KW37WNXY.js}

@@ -1,4 +1,4 @@
-import { okJson, err } from './chunk-X5YPJV4N.js';
+import { okJson, err } from './chunk-3MWQKQUB.js';
 import { execFile } from 'child_process';
 import { promisify } from 'util';
 
@@ -31,11 +31,11 @@ function resolveEnvRef(ref) {
   if (val) return { resolved: true, value: val, provider: "env" };
   return { resolved: false, error: `'${ref}' not found in environment` };
 }
-async function workspaceInfo(plugin, driver, model) {
+async function workspaceInfo(plugin, harness, model) {
   try {
     const { mounts, connectors } = splitConnectors(plugin);
     return okJson({
-      driver,
+      harness,
       model,
       mountCount: mounts.length,
       connectorCount: connectors.length,
@@ -68,22 +68,22 @@ async function workspaceTestSecret(ref) {
     return err(e instanceof Error ? e.message : String(e));
   }
 }
-async function workspaceValidate(plugin, driver) {
+async function workspaceValidate(plugin, harness) {
   const report = {
-    driver: { name: driver, installed: false },
+    harness: { name: harness, installed: false },
     mounts: [],
     connectors: []
   };
   try {
-    const binaryName = driver === "omp" ? "omp" : "claude";
+    const binaryName = harness === "omp" ? "omp" : "claude";
     await execFileAsync("which", [binaryName], {
       timeout: WHICH_TIMEOUT_MS,
       killSignal: "SIGKILL"
     });
-    report.driver.installed = true;
+    report.harness.installed = true;
   } catch {
-    report.driver.installed = false;
-    report.driver.hint = `Install the '${driver}' binary to use this driver`;
+    report.harness.installed = false;
+    report.harness.hint = `Install the '${harness}' binary to use this harness`;
   }
   const { mounts, connectors } = splitConnectors(plugin);
   for (const v of mounts) {
@@ -102,7 +102,7 @@ async function workspaceValidate(plugin, driver) {
       ok: true
     });
   }
-  report.passed = report.driver.installed && report.mounts.every((v) => v.ok) && report.connectors.every((c) => c.ok);
+  report.passed = report.harness.installed && report.mounts.every((v) => v.ok) && report.connectors.every((c) => c.ok);
   return okJson(report);
 }
 async function workspaceReload(plugin) {
@@ -117,5 +117,5 @@ async function workspaceReload(plugin) {
 }
 
 export { workspaceInfo, workspaceReload, workspaceTestSecret, workspaceValidate };
-//# sourceMappingURL=chunk-4ZTPYIBE.js.map
-//# sourceMappingURL=chunk-4ZTPYIBE.js.map
+//# sourceMappingURL=chunk-KW37WNXY.js.map
+//# sourceMappingURL=chunk-KW37WNXY.js.map

package/dist/chunk-KW37WNXY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../workspace-plugin/src/tools/validator.ts"],"names":["val"],"mappings":";;;;AAKA,IAAM,aAAA,GAAgB,UAAU,QAAQ,CAAA;AASxC,IAAM,gBAAA,GAAmB,GAAA;AAqBzB,SAAS,gBAAgB,MAAA,EAGvB;AACA,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,gBAAA,EAAkB,cAAA,MAAoB,EAAC;AAC1D,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,IAAI,MAAA,CAAO,CAAC,MAAM,OAAO,CAAA,CAAE,cAAc,QAAQ,CAAA;AAAA,IACzD,UAAA,EAAY,IAAI,MAAA,CAAO,CAAC,MAAM,OAAO,CAAA,CAAE,cAAc,QAAQ;AAAA,GAC/D;AACF;AAOA,SAAS,gBAAgB,MAAA,EAIvB;AACA,EAAA,MAAM,EAAE,MAAA,EAAQ,UAAA,EAAW,GAAI,gBAAgB,MAAM,CAAA;AACrD,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,gBAAA,EAAkB,oBAAA,QAA4B,EAAC;AACrE,EAAA,OAAO,EAAE,QAAQ,MAAA,CAAO,MAAA,EAAQ,YAAY,UAAA,CAAW,MAAA,EAAQ,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAO;AACvF;AAEA,SAAS,WAAW,KAAA,EAAuB;AACzC,EAAA,IAAI,KAAA,CAAM,MAAA,IAAU,CAAA,EAAG,OAAO,MAAA;AAC9B,EAAA,OAAO,CAAA,EAAG,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA,IAAA,CAAA;AAC7B;AAEA,SAAS,cAAc,GAAA,EAKrB;AACA,EAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC1B,IAAA,MAAM,OAAA,GAAU,GAAA,CAAI,KAAA,CAAM,CAAC,CAAA;AAC3B,IAAA,MAAMA,IAAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA;AAC/B,IAAA,IAAIA,IAAAA,SAAY,EAAE,QAAA,EAAU,MAAM,KAAA,EAAOA,IAAAA,EAAK,UAAU,KAAA,EAAM;AAC9D,IAAA,OAAO,EAAE,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,CAAA,SAAA,EAAY,OAAO,CAAA,YAAA,CAAA,EAAe;AAAA,EACrE;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC3B,EAAA,IAAI,GAAA,SAAY,EAAE,QAAA,EAAU,MAAM,KAAA,EAAO,GAAA,EAAK,UAAU,KAAA,EAAM;AAC9D,EAAA,OAAO,EAAE,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,CAAA,CAAA,EAAI,GAAG,CAAA,0BAAA,CAAA,EAA6B;AACvE;AAeA,eAAsB,aAAA,CACpB,MAAA,EACA,OAAA,EACA,KAAA,EACqB;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,MAAA,EAAQ,UAAA,EAAW,GAAI,gBAAgB,MAAM,CAAA;AACrD,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,OAAA;AAAA,MACA,KAAA;AAAA,MACA,YAAY,MAAA,CAAO,MAAA;AAAA,MACnB,gBAAgB,UAAA,CAAW,MAAA;AAAA,MAC3B,MAAA,EAAQ,MAAA,CAAO,GAAA,CAAI,CAAC,OAAO,EAAE,EAAA,EAAI,CAAA,CAAE,EAAA,EAAI,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAQ,OAAA,EAAS,MAAK,CAAE,CAAA;AAAA,MACzE,UAAA,EAAY,UAAA,CAAW,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,EAAA,EAAI,CAAA,CAAE,EAAA,EAAI,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,CAAA;AAAA,MACnE,YAAY,MAAA,CAAO;AAAA,KACpB,CAAA;AAAA,EACH,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAcA,eAAsB,oBAAoB,GAAA,EAAkC;AAC1E,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,cAAc,GAAG,CAAA;AAChC,IAAA,IAAI,MAAA,CAAO,QAAA,IAAY,MAAA,CAAO,KAAA,EAAO;AACnC,MAAA,OAAO,MAAA,CAAO;AAAA,QACZ,QAAA,EAAU,IAAA;AAAA,QACV,UAAU,MAAA,CAAO,QAAA;AAAA,QACjB,MAAA,EAAQ,UAAA,CAAW,MAAA,CAAO,KAAK;AAAA,OAChC,CAAA;AAAA,IACH;AACA,IAAA,IAAI,GAAA,CAAI,SAAS,GAAG,CAAA,IAAK,CAAC,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAChD,MAAA,OAAO,MAAA,CAAO;AAAA,QACZ,QAAA,EAAU,KAAA;AAAA,QACV,OAAO,CAAA,UAAA,EAAa,GAAA,CAAI,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA,kFAAA;AAAA,OACtC,CAAA;AAAA,IACH;AACA,IAAA,OAAO,OAAO,EAAE,QAAA,EAAU,OAAO,KAAA,EAAO,MAAA,CAAO,OAAO,CAAA;AAAA,EACxD,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF;AAcA,eAAsB,iBAAA,CAAkB,QAAoB,OAAA,EAAsC;AAChG,EAAA,MAAM,MAAA,GAAkC;AAAA,IACtC,OAAA,EAAS,EAAE,IAAA,EAAM,OAAA,EAAS,WAAW,KAAA,EAAM;AAAA,IAC3C,QAAQ,EAAC;AAAA,IACT,YAAY;AAAC,GACf;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,UAAA,GAAa,OAAA,KAAY,KAAA,GAAQ,KAAA,GAAQ,QAAA;AAI/C,IAAA,MAAM,aAAA,CAAc,OAAA,EAAS,CAAC,UAAU,CAAA,EAAG;AAAA,MACzC,OAAA,EAAS,gBAAA;AAAA,MACT,UAAA,EAAY;AAAA,KACb,CAAA;AACD,IAAC,MAAA,CAAO,QAAgB,SAAA,GAAY,IAAA;AAAA,EACtC,CAAA,CAAA,MAAQ;AACN,IAAC,MAAA,CAAO,QAAgB,SAAA,GAAY,KAAA;AACpC,IAAC,MAAA,CAAO,OAAA,CAAgB,IAAA,GAAO,CAAA,aAAA,EAAgB,OAAO,CAAA,4BAAA,CAAA;AAAA,EACxD;AAEA,EAAA,MAAM,EAAE,MAAA,EAAQ,UAAA,EAAW,GAAI,gBAAgB,MAAM,CAAA;AACrD,EAAA,KAAA,MAAW,KAAK,MAAA,EAAQ;AACtB,IAAC,MAAA,CAAO,OAAiB,IAAA,CAAK;AAAA,MAC5B,IAAI,CAAA,CAAE,EAAA;AAAA,MACN,QAAQ,CAAA,CAAE,MAAA;AAAA,MACV,OAAA,EAAS,IAAA;AAAA,MACT,EAAA,EAAI;AAAA,KACL,CAAA;AAAA,EACH;AAEA,EAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,IAAC,MAAA,CAAO,WAAqB,IAAA,CAAK;AAAA,MAChC,IAAI,CAAA,CAAE,EAAA;AAAA,MACN,SAAS,CAAA,CAAE,MAAA;AAAA,MACX,SAAA,EAAW,IAAA;AAAA,MACX,EAAA,EAAI;AAAA,KACL,CAAA;AAAA,EACH;AAEA,EAAA,MAAA,CAAO,SACJ,MAAA,CAAO,OAAA,CAAgB,aACvB,MAAA,CAAO,MAAA,CAAiB,MAAM,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,KACzC,MAAA,CAAO,UAAA,CAAqB,MAAM,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA;AAEhD,EAAA,OAAO,OAAO,MAAM,CAAA;AACtB;AAYA,eAAsB,gBAAgB,MAAA,EAAyC;AAC7E,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,gBAAgB,MAAM,CAAA;AACrC,IAAA,MAAM,OAAO,MAAA,EAAO;AACpB,IAAA,MAAM,KAAA,GAAQ,gBAAgB,MAAM,CAAA;AACpC,IAAA,OAAO,OAAO,EAAE,QAAA,EAAU,IAAA,EAAM,MAAA,EAAQ,OAAO,CAAA;AAAA,EACjD,SAAS,CAAA,EAAY;AACnB,IAAA,OAAO,IAAI,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACvD;AACF","file":"chunk-KW37WNXY.js","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport type { ToolResult } from \"../types.js\";\nimport { err, okJson } from \"../types.js\";\n\nconst execFileAsync = promisify(execFile);\n\n/**\n * Wall-clock ceiling for the harness-binary probe.\n *\n * `which` searches `PATH`, and a `PATH` entry on a wedged network mount makes\n * the lookup itself unbounded. This runs on an agent request path inside the\n * long-lived `skaile serve` process, so the probe must fail rather than wait.\n */\nconst WHICH_TIMEOUT_MS = 10_000;\n\n// Minimal interface for WorkspacePlugin to avoid circular dep.\n// The unified ConnectorManager owns both filesystem-face (mountable) and\n// tool-face connectors — `listConnectors()` returns both; filesystem-face\n// entries carry a `mountPath`.\ninterface ConnectorSummary {\n  id: string;\n  driver: string;\n  mountPath?: string;\n}\ninterface PluginLike {\n  projectDir: string;\n  connectorManager: {\n    listConnectors(): ConnectorSummary[];\n    listFailedConnectors?(): unknown[];\n  } | null;\n  reload(): Promise<void>;\n}\n\n/** Split a manager's connectors into mountable / tool-face groups. */\nfunction splitConnectors(plugin: PluginLike): {\n  mounts: ConnectorSummary[];\n  connectors: ConnectorSummary[];\n} {\n  const all = plugin.connectorManager?.listConnectors() ?? [];\n  return {\n    mounts: all.filter((c) => typeof c.mountPath === \"string\"),\n    connectors: all.filter((c) => typeof c.mountPath !== \"string\"),\n  };\n}\n\n/**\n * Connected mounts/connectors plus the declared-but-failed ones. Without\n * `failed`, a declaration that never connected leaves every count unchanged,\n * which reads the same as a declaration that was never saved.\n */\nfunction countConnectors(plugin: PluginLike): {\n  mounts: number;\n  connectors: number;\n  failed: number;\n} {\n  const { mounts, connectors } = splitConnectors(plugin);\n  const failed = plugin.connectorManager?.listFailedConnectors?.() ?? [];\n  return { mounts: mounts.length, connectors: connectors.length, failed: failed.length };\n}\n\nfunction maskSecret(value: string): string {\n  if (value.length <= 4) return \"****\";\n  return `${value.slice(0, 4)}****`;\n}\n\nfunction resolveEnvRef(ref: string): {\n  resolved: boolean;\n  value?: string;\n  provider?: string;\n  error?: string;\n} {\n  if (ref.startsWith(\"env:\")) {\n    const varName = ref.slice(4);\n    const val = process.env[varName];\n    if (val) return { resolved: true, value: val, provider: \"env\" };\n    return { resolved: false, error: `env var '${varName}' is not set` };\n  }\n  const val = process.env[ref];\n  if (val) return { resolved: true, value: val, provider: \"env\" };\n  return { resolved: false, error: `'${ref}' not found in environment` };\n}\n\n/**\n * Return a summary of the current workspace configuration.\n *\n * Reports the active harness, model, mount count, connector count, and\n * per-resource descriptors. Endpoints are not summarised here: they live in\n * the session's AI provider registry, which `skaile providers list` prints.\n *\n * @param plugin   - Plugin instance (or compatible shape) exposing managers.\n * @param harness   - Harness name (e.g. `\"omp\"`, `\"claude-sdk\"`).\n * @param model    - Model identifier, if resolved.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function workspaceInfo(\n  plugin: PluginLike,\n  harness: string,\n  model: string | undefined,\n): Promise<ToolResult> {\n  try {\n    const { mounts, connectors } = splitConnectors(plugin);\n    return okJson({\n      harness,\n      model,\n      mountCount: mounts.length,\n      connectorCount: connectors.length,\n      mounts: mounts.map((v) => ({ id: v.id, driver: v.driver, mounted: true })),\n      connectors: connectors.map((c) => ({ id: c.id, adapter: c.driver })),\n      projectDir: plugin.projectDir,\n    });\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Test resolution of a secret reference.\n *\n * Resolves `env:<VAR>` references against `process.env`.  For other provider\n * schemes (e.g. `forge:key`) reports that a running forge/vault context is\n * required.  Returns a JSON object with `{ resolved, provider?, masked? }` —\n * the secret value is never returned in plain text.\n *\n * @param ref - Secret reference string, e.g. `\"env:ANTHROPIC_API_KEY\"`.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function workspaceTestSecret(ref: string): Promise<ToolResult> {\n  try {\n    const result = resolveEnvRef(ref);\n    if (result.resolved && result.value) {\n      return okJson({\n        resolved: true,\n        provider: result.provider,\n        masked: maskSecret(result.value),\n      });\n    }\n    if (ref.includes(\":\") && !ref.startsWith(\"env:\")) {\n      return okJson({\n        resolved: false,\n        error: `Provider '${ref.split(\":\")[0]}' requires a running forge/vault context. Use env: refs for standalone validation.`,\n      });\n    }\n    return okJson({ resolved: false, error: result.error });\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n\n/**\n * Run a full health check on the workspace.\n *\n * Checks whether the harness binary is installed, then validates every\n * declared mount and connector.  Returns a JSON report with a top-level\n * `passed` boolean and per-resource `ok` flags.\n *\n * @param plugin - Plugin instance (or compatible shape) exposing managers.\n * @param harness - Harness name used to locate the binary (`omp` or `claude`).\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function workspaceValidate(plugin: PluginLike, harness: string): Promise<ToolResult> {\n  const report: Record<string, unknown> = {\n    harness: { name: harness, installed: false },\n    mounts: [] as unknown[],\n    connectors: [] as unknown[],\n  };\n\n  try {\n    const binaryName = harness === \"omp\" ? \"omp\" : \"claude\";\n    // `killSignal: \"SIGKILL\"`: a process stuck in an uninterruptible wait on a\n    // dead mount never receives SIGTERM, so a SIGTERM-based timeout would not\n    // actually end it — the same reason the recipe resolver uses SIGKILL.\n    await execFileAsync(\"which\", [binaryName], {\n      timeout: WHICH_TIMEOUT_MS,\n      killSignal: \"SIGKILL\",\n    });\n    (report.harness as any).installed = true;\n  } catch {\n    (report.harness as any).installed = false;\n    (report.harness as any).hint = `Install the '${harness}' binary to use this harness`;\n  }\n\n  const { mounts, connectors } = splitConnectors(plugin);\n  for (const v of mounts) {\n    (report.mounts as any[]).push({\n      id: v.id,\n      driver: v.driver,\n      mounted: true,\n      ok: true,\n    });\n  }\n\n  for (const c of connectors) {\n    (report.connectors as any[]).push({\n      id: c.id,\n      adapter: c.driver,\n      connected: true,\n      ok: true,\n    });\n  }\n\n  report.passed =\n    (report.harness as any).installed &&\n    (report.mounts as any[]).every((v) => v.ok) &&\n    (report.connectors as any[]).every((c) => c.ok);\n\n  return okJson(report);\n}\n\n/**\n * Re-read `skaile.yaml` and reinitialise all plugin resources.\n *\n * Delegates to `plugin.reload()`.  Returns a JSON object comparing the\n * mount and connector counts before and after the reload.\n *\n * @param plugin - Plugin instance exposing a `reload()` method.\n *\n * @docLink packages/workspace-plugin/concepts#tool-delivery\n */\nexport async function workspaceReload(plugin: PluginLike): Promise<ToolResult> {\n  try {\n    const before = countConnectors(plugin);\n    await plugin.reload();\n    const after = countConnectors(plugin);\n    return okJson({ reloaded: true, before, after });\n  } catch (e: unknown) {\n    return err(e instanceof Error ? e.message : String(e));\n  }\n}\n"]}

package/dist/{chunk-BO426QWN.js → chunk-KX2PT5Q4.js}

@@ -1,6 +1,6 @@
-import { softDepName } from './chunk-VM3PH7BB.js';
-import { SKAILE_YAML_DEFAULT, resolveSkWorkspaceConfig } from './chunk-2NOLF7B2.js';
-import { SUPPORTED_DRIVER_TARGETS } from './chunk-IG5LZ3WU.js';
+import { softDepName } from './chunk-OAHVKSQJ.js';
+import { SKAILE_YAML_DEFAULT, resolveSkWorkspaceConfig } from './chunk-OHNKYHRR.js';
+import { SUPPORTED_HARNESSES } from './chunk-VTETQCR6.js';
 import { existsSync, readdirSync, readFileSync } from 'fs';
 import { homedir } from 'os';
 import path from 'path';
@@ -135,7 +135,7 @@ function warnLegacyClaudeCopies(am) {
   const shown = rel.slice(0, LEGACY_COPY_LIST_MAX).join(", ");
   const more = rel.length > LEGACY_COPY_LIST_MAX ? `, +${rel.length - LEGACY_COPY_LIST_MAX} more` : "";
   logWarn(
-    `Stale ${S.cmd(".claude/")} copies no longer managed (deploying to ${am.driverTarget}): ${shown}${more}. Delete them once ${S.cmd("skaile install")} has deployed to ${am.driverTarget}, or pass ${S.cmd("--target claude-code")} to keep using .claude/.`
+    `Stale ${S.cmd(".claude/")} copies no longer managed (deploying to ${am.harness}): ${shown}${more}. Delete them once ${S.cmd("skaile install")} has deployed to ${am.harness}, or pass ${S.cmd("--target claude-code")} to keep using .claude/.`
   );
 }
 function bareSoftDepName(ref) {
@@ -187,8 +187,8 @@ function parseHarnessFilter(raw) {
   const ids = raw.split(",").map((s) => s.trim()).filter(Boolean);
   const out = [];
   for (const id of ids) {
-    if (!SUPPORTED_DRIVER_TARGETS.includes(id)) {
-      logErr(`unknown harness '${id}' \u2014 expected one of: ${SUPPORTED_DRIVER_TARGETS.join(", ")}`);
+    if (!SUPPORTED_HARNESSES.includes(id)) {
+      logErr(`unknown harness '${id}' \u2014 expected one of: ${SUPPORTED_HARNESSES.join(", ")}`);
       process.exit(1);
     }
     out.push(id);
@@ -219,5 +219,5 @@ function warnFilesOnlyDelegates(projectDir, target) {
 }
 
 export { KIND_COL_WIDTH, S, TARGET_DEFAULT_HINT, bareSoftDepName, colorRef, deferredWarnings, fitWidth, formatRelativeTime, formatSoftDepAddPreview, formatSoftDepHint, formatSoftDepRemovePreview, formatSoftDepSection, kindColor, kindColorPad, logErr, logInfo, logNoProject, logOk, logWarn, parseHarnessFilter, reportLegacyOmpCopies, requireProjectConfig, warnFilesOnlyDelegates, warnLegacyClaudeCopies, warnPlaceholderBodies };
-//# sourceMappingURL=chunk-BO426QWN.js.map
-//# sourceMappingURL=chunk-BO426QWN.js.map
+//# sourceMappingURL=chunk-KX2PT5Q4.js.map
+//# sourceMappingURL=chunk-KX2PT5Q4.js.map

package/dist/chunk-KX2PT5Q4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../cli/src/helpers.ts"],"names":[],"mappings":";;;;;;;;AAiBO,IAAM,CAAA,GAAI;AAAA,EACf,KAAA,EAAO,CAAC,CAAA,KAAc,EAAA,CAAG,KAAK,EAAA,CAAG,IAAA,CAAK,CAAC,CAAC,CAAA;AAAA,EACxC,GAAA,EAAK,CAAC,CAAA,KAAc,EAAA,CAAG,KAAK,CAAC,CAAA;AAAA,EAC7B,OAAA,EAAS,CAAC,CAAA,KAAc,EAAA,CAAG,KAAK,CAAC,CAAA;AAAA,EACjC,IAAA,EAAM,CAAC,CAAA,KAAc,EAAA,CAAG,KAAK,CAAC,CAAA;AAAA,EAC9B,GAAA,EAAK,CAAC,CAAA,KAAc,EAAA,CAAG,IAAI,CAAC,CAAA;AAAA,EAC5B,EAAA,EAAI,CAAC,CAAA,KAAc,EAAA,CAAG,MAAM,CAAC,CAAA;AAAA,EAC7B,IAAA,EAAM,CAAC,CAAA,KAAc,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EAChC,GAAA,EAAK,CAAC,CAAA,KAAc,EAAA,CAAG,IAAI,CAAC,CAAA;AAAA,EAC5B,KAAA,EAAO,CAAC,CAAA,KAAc,EAAA,CAAG,IAAI,CAAC,CAAA;AAAA,EAC9B,IAAA,EAAM,CAAC,CAAA,GAAI,EAAA,KAAO,GAAG,GAAA,CAAI,QAAA,CAAI,MAAA,CAAO,CAAC,CAAC;AACxC;AAEA,IAAM,WAAA,GAAqD;AAAA,EACzD,OAAO,EAAA,CAAG,IAAA;AAAA,EACV,OAAO,EAAA,CAAG,OAAA;AAAA,EACV,QAAQ,EAAA,CAAG,MAAA;AAAA,EACX,MAAM,EAAA,CAAG,KAAA;AAAA,EACT,QAAQ,EAAA,CAAG,IAAA;AAAA,EACX,UAAU,EAAA,CAAG,GAAA;AAAA,EACb,WAAW,EAAA,CAAG,KAAA;AAAA,EACd,WAAW,EAAA,CAAG,IAAA;AAAA,EACd,SAAS,EAAA,CAAG,IAAA;AAAA,EACZ,SAAS,EAAA,CAAG,IAAA;AAAA,EACZ,cAAc,EAAA,CAAG;AACnB,CAAA;AAQO,SAAS,QAAA,CAAS,GAAW,KAAA,EAAuB;AACzD,EAAA,IAAI,KAAA,IAAS,GAAG,OAAO,EAAA;AACvB,EAAA,IAAI,CAAA,CAAE,MAAA,GAAS,KAAA,EAAO,OAAO,KAAA,KAAU,CAAA,GAAI,QAAA,GAAM,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,KAAA,GAAQ,CAAC,CAAC,CAAA,MAAA,CAAA;AACzE,EAAA,OAAO,CAAA,CAAE,OAAO,KAAK,CAAA;AACvB;AAGO,SAAS,UAAU,IAAA,EAAsB;AAC9C,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,IAAI,CAAA,IAAK,EAAA,CAAG,GAAA;AACxC,EAAA,OAAO,QAAQ,IAAI,CAAA;AACrB;AAMO,IAAM,cAAA,GAAiB;AAOvB,IAAM,mBAAA,GAAsB;AAO5B,SAAS,YAAA,CAAa,IAAA,EAAc,KAAA,GAAQ,cAAA,EAAwB;AACzE,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,IAAI,CAAA,IAAK,EAAA,CAAG,GAAA;AACxC,EAAA,OAAO,OAAA,CAAQ,QAAA,CAAS,IAAA,EAAM,KAAK,CAAC,CAAA;AACtC;AAGO,SAAS,SAAS,GAAA,EAAqB;AAC5C,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAChC,EAAA,IAAI,QAAA,KAAa,IAAI,OAAO,GAAA;AAC5B,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA;AAClC,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,KAAA,CAAM,QAAQ,CAAA;AAC/B,EAAA,OAAO,CAAA,EAAG,SAAA,CAAU,IAAI,CAAC,GAAG,IAAI,CAAA,CAAA;AAClC;AAQO,SAAS,MAAM,GAAA,EAAa;AACjC,EAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,EAAA,CAAG,KAAA,CAAM,QAAG,CAAC,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAA;AACzC;AAOO,SAAS,OAAO,GAAA,EAAa;AAClC,EAAA,OAAA,CAAQ,KAAA,CAAM,KAAK,EAAA,CAAG,GAAA,CAAI,QAAG,CAAC,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAA;AACzC;AAOO,SAAS,QAAQ,GAAA,EAAa;AACnC,EAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,EAAA,CAAG,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAA;AAC1C;AASO,SAAS,qBAAA,CACd,QACA,YAAA,EACA;AACA,EAAA,MAAM,IAAA,GAAO,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAI,MAAA,IAAU,IAAK,GAAI,YAAA,IAAgB,EAAG,CAAC,CAAC,CAAA;AACtE,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,KAAA,GAAQ;AAAA,MACZ,GAAI,cAAc,QAAA,CAAS,GAAG,IAAI,CAAC,aAAa,IAAI,EAAC;AAAA,MACrD,GAAI,QAAQ,QAAA,CAAS,GAAG,IAAI,CAAC,MAAM,IAAI;AAAC,KAC1C;AACA,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,GAAS,CAAA;AAC5B,IAAA,OAAA;AAAA,MACE,GAAG,GAAG,CAAA,CAAA,EAAI,MAAM,IAAA,CAAK,OAAO,CAAC,CAAA,CAAA,EAAI,IAAA,GAAO,KAAA,GAAQ,IAAI,0CAA0C,IAAA,GAAO,MAAA,GAAS,IAAI,CAAA,4BAAA,EAA+B,IAAA,GAAO,SAAS,IAAI,CAAA,CAAA;AAAA,KACvK;AAAA,EACF;AACF;AAOO,SAAS,QAAQ,GAAA,EAAa;AACnC,EAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,EAAA,CAAG,GAAA,CAAI,MAAG,CAAC,CAAA,CAAA,EAAI,GAAG,CAAA,CAAE,CAAA;AACvC;AAGA,SAAS,qBAAqB,GAAA,EAAiC;AAC7D,EAAA,KAAA,IAAS,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,EAAG,EAAA,KAAO,GAAA,EAAK,GAAA,GAAM,EAAA,EAAI,EAAA,GAAK,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC7E,IAAA,IAAI,WAAW,IAAA,CAAK,IAAA,CAAK,IAAI,mBAAmB,CAAC,GAAG,OAAO,EAAA;AAAA,EAC7D;AACA,EAAA,OAAO,MAAA;AACT;AAOO,SAAS,aAAa,UAAA,EAA0B;AACrD,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA;AACnC,EAAA,MAAA,CAAO,CAAA,GAAA,EAAM,CAAA,CAAE,GAAA,CAAI,aAAa,CAAC,eAAe,CAAA,CAAE,GAAA,CAAI,aAAa,CAAC,CAAA,eAAA,CAAiB,CAAA;AACrF,EAAA,MAAM,MAAA,GAAS,qBAAqB,GAAG,CAAA;AACvC,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAA;AAAA,MACE,GAAG,CAAA,CAAE,GAAA,CAAI,MAAM,CAAC,YAAY,CAAA,CAAE,GAAA,CAAI,aAAa,CAAC,4BAA4B,CAAA,CAAE,GAAA,CAAI,CAAA,cAAA,EAAiB,MAAM,EAAE,CAAC,CAAA,CAAA;AAAA,KAC9G;AAAA,EACF;AACF;AAWO,SAAS,oBAAA,CACd,UAAA,EACA,IAAA,GAAmC,EAAC,EAC9B;AACN,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,CAAQ,UAAU,CAAA;AACnC,EAAA,IAAI,CAAC,UAAA,CAAW,IAAA,CAAK,KAAK,GAAA,EAAK,mBAAmB,CAAC,CAAA,EAAG;AACpD,IAAA,IAAI,KAAK,YAAA,EAAc;AACvB,IAAA,YAAA,CAAa,GAAG,CAAA;AAChB,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,IAAI;AACF,IAAA,wBAAA,CAAyB,GAAG,CAAA;AAAA,EAC9B,SAAS,GAAA,EAAK;AACZ,IAAA,MAAA,CAAO,eAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA;AACvD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF;AAQO,SAAS,gBAAA,GAAuE;AACrF,EAAA,MAAM,OAAiB,EAAC;AACxB,EAAA,IAAI,IAAA,GAAO,KAAA;AACX,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,GAAA,KAAQ;AACb,MAAA,IAAI,IAAA,UAAc,GAAG,CAAA;AAAA,WAChB,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,IACpB,CAAA;AAAA,IACA,OAAO,MAAM;AACX,MAAA,KAAA,MAAW,OAAO,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,UAAW,GAAG,CAAA;AAC7C,MAAA,IAAA,GAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF;AAGA,IAAM,oBAAA,GAAuB,CAAA;AAQtB,SAAS,uBAAuB,EAAA,EAI9B;AACP,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,GAAG,wBAAA,EAAyB;AAAA,EACvC,CAAA,CAAA,MAAQ;AACN,IAAA;AAAA,EACF;AACA,EAAA,IAAI,MAAA,CAAO,WAAW,CAAA,EAAG;AACzB,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,IAAA,CAAK,QAAA,CAAS,EAAA,CAAG,UAAA,EAAY,CAAA,CAAE,IAAI,CAAC,CAAA;AAClE,EAAA,MAAM,QAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,oBAAoB,CAAA,CAAE,KAAK,IAAI,CAAA;AAC1D,EAAA,MAAM,IAAA,GACJ,IAAI,MAAA,GAAS,oBAAA,GAAuB,MAAM,GAAA,CAAI,MAAA,GAAS,oBAAoB,CAAA,KAAA,CAAA,GAAU,EAAA;AACvF,EAAA,OAAA;AAAA,IACE,CAAA,MAAA,EAAS,CAAA,CAAE,GAAA,CAAI,UAAU,CAAC,2CAA2C,EAAA,CAAG,OAAO,CAAA,GAAA,EAAM,KAAK,CAAA,EAAG,IAAI,sBAC3E,CAAA,CAAE,GAAA,CAAI,gBAAgB,CAAC,CAAA,iBAAA,EAAoB,EAAA,CAAG,OAAO,CAAA,UAAA,EAAa,CAAA,CAAE,GAAA,CAAI,sBAAsB,CAAC,CAAA,wBAAA;AAAA,GACvH;AACF;AAOO,SAAS,gBAAgB,GAAA,EAAqB;AACnD,EAAA,OAAO,YAAY,GAAG,CAAA;AACxB;AAOO,SAAS,kBAAkB,IAAA,EAA4D;AAC5F,EAAA,MAAM,SAAS,IAAA,CAAK,KAAA,GAAQ,CAAA,yBAAA,EAAuB,IAAA,CAAK,KAAK,CAAA,iBAAA,CAAA,GAAsB,EAAA;AACnF,EAAA,OAAO,CAAA,EAAG,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAC,CAAA,YAAA,EAAe,eAAA,CAAgB,IAAA,CAAK,EAAE,CAAC,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAA;AACxG;AAQO,SAAS,qBAAqB,OAAA,EAA6B;AAChE,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AAClC,EAAA,MAAM,MAAM,CAAC,CAAA,EAAA,EAAK,EAAE,KAAA,CAAM,8BAA8B,CAAC,CAAA,CAAA,CAAG,CAAA;AAC5D,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS,GAAA,CAAI,IAAA,CAAK,CAAA,IAAA,EAAO,EAAE,GAAA,CAAI,MAAG,CAAC,CAAA,EAAA,EAAK,CAAC,CAAA,CAAA,EAAI,CAAA,CAAE,GAAA,CAAI,QAAQ,CAAC,CAAA,CAAE,CAAA;AAC9E,EAAA,OAAO,GAAA;AACT;AAOO,SAAS,uBAAA,CAAwB,MAAc,OAAA,EAA2B;AAC/E,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AACjC,EAAA,OAAO,CAAA,CAAE,IAAI,CAAA,EAAG,IAAI,eAAe,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,2BAAA,CAA6B,CAAA;AACpF;AAOO,SAAS,0BAAA,CAA2B,MAAc,OAAA,EAA2B;AAClF,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAA;AACjC,EAAA,OAAO,CAAA,CAAE,IAAI,CAAA,SAAA,EAAY,IAAI,iBAAiB,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,WAAA,CAAa,CAAA;AAC/E;AAGO,SAAS,mBAAmB,IAAA,EAAoB;AACrD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,GAAA,EAAI,GAAI,KAAK,OAAA,EAAQ;AACvC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,IAAA,GAAO,GAAI,CAAA;AACtC,EAAA,IAAI,OAAA,GAAU,IAAI,OAAO,UAAA;AACzB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACvC,EAAA,IAAI,OAAA,GAAU,EAAA,EAAI,OAAO,CAAA,EAAG,OAAO,CAAA,KAAA,CAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,EAAE,CAAA;AACrC,EAAA,IAAI,KAAA,GAAQ,EAAA,EAAI,OAAO,CAAA,EAAG,KAAK,CAAA,KAAA,CAAA;AAC/B,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,EAAE,CAAA;AAClC,EAAA,OAAO,GAAG,IAAI,CAAA,KAAA,CAAA;AAChB;AAGO,SAAS,qBAAA,CAAsB,OAAA,EAAmB,IAAA,GAAiB,EAAC,EAAS;AAClF,EAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,IAAA,OAAA;AAAA,MACE,CAAA,CAAE,IAAI,CAAA,yBAAA,EAA4B,CAAA,CAAE,QAAQ,OAAA,EAAQ,EAAG,GAAG,CAAC,CAAA,yBAAA,CAA2B;AAAA,KACxF;AAAA,EACF;AACA,EAAA,KAAA,MAAW,KAAK,IAAA,EAAM;AACpB,IAAA,OAAA;AAAA,MACE,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAA,EAAQ,EAAG,GAAG,CAAC,CAAA,2GAAA;AAAA,KAC9B;AAAA,EACF;AACF;AAOO,SAAS,mBAAmB,GAAA,EAAoD;AACrF,EAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,EAAA,MAAM,GAAA,GAAM,GAAA,CACT,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAA,CACnB,OAAO,OAAO,CAAA;AACjB,EAAA,MAAM,MAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,MAAM,GAAA,EAAK;AACpB,IAAA,IAAI,CAAE,mBAAA,CAAiC,QAAA,CAAS,EAAE,CAAA,EAAG;AACnD,MAAA,MAAA,CAAO,oBAAoB,EAAE,CAAA,0BAAA,EAAwB,oBAAoB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACrF,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAChB;AACA,IAAA,GAAA,CAAI,KAAK,EAAiB,CAAA;AAAA,EAC5B;AACA,EAAA,OAAO,GAAA,CAAI,MAAA,GAAS,CAAA,GAAI,GAAA,GAAM,MAAA;AAChC;AAGA,IAAM,gBAAA,GAAmB,sBAAA;AAQlB,SAAS,sBAAA,CAAuB,YAAoB,MAAA,EAAsB;AAC/E,EAAA,IAAI,WAAW,OAAA,EAAS;AACxB,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,UAAA,EAAY,UAAU,eAAe,CAAA;AAC3D,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AACF,IAAA,KAAA,GAAQ,WAAA,CAAY,GAAG,CAAA,CAAE,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,CAAS,KAAK,CAAC,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AACN,IAAA;AAAA,EACF;AACA,EAAA,MAAM,SAAA,GAAY,KAAA,CACf,MAAA,CAAO,CAAC,CAAA,KAAM;AACb,IAAA,IAAI;AACF,MAAA,OAAO,YAAA,CAAa,KAAK,IAAA,CAAK,GAAA,EAAK,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,QAAA,CAAS,gBAAgB,CAAA;AAAA,IAC1E,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF,CAAC,CAAA,CACA,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAC,CAAA,CACjC,IAAA,EAAK;AACR,EAAA,IAAI,SAAA,CAAU,WAAW,CAAA,EAAG;AAC5B,EAAA,OAAA;AAAA,IACE,CAAA,uCAAA,EAA0C,SAAA,CAAU,IAAA,CAAK,IAAI,CAAC,CAAA,wFAAA;AAAA,GAChE;AACF","file":"chunk-KX2PT5Q4.js","sourcesContent":["import { existsSync, readdirSync, readFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport path from \"node:path\";\nimport { softDepName } from \"@skaile/workspaces/asset-manager\";\nimport {\n  type HarnessName,\n  resolveSkWorkspaceConfig,\n  SKAILE_YAML_DEFAULT,\n  SUPPORTED_HARNESSES,\n} from \"@skaile/workspaces/core\";\nimport pc from \"picocolors\";\n\n/**\n * Terminal styling helpers used across all CLI commands.\n *\n * @docLink cli/dev-guide#helpers\n */\nexport const S = {\n  brand: (s: string) => pc.cyan(pc.bold(s)),\n  cmd: (s: string) => pc.cyan(s),\n  heading: (s: string) => pc.bold(s),\n  bold: (s: string) => pc.bold(s),\n  dim: (s: string) => pc.dim(s),\n  ok: (s: string) => pc.green(s),\n  warn: (s: string) => pc.yellow(s),\n  err: (s: string) => pc.red(s),\n  label: (s: string) => pc.dim(s),\n  rule: (w = 40) => pc.dim(\"─\".repeat(w)),\n};\n\nconst KIND_COLORS: Record<string, (s: string) => string> = {\n  skill: pc.blue,\n  agent: pc.magenta,\n  prompt: pc.yellow,\n  flow: pc.green,\n  preset: pc.cyan,\n  contract: pc.red,\n  connector: pc.green,\n  knowledge: pc.cyan,\n  persona: pc.cyan,\n  ruleset: pc.cyan,\n  \"mcp-server\": pc.magenta,\n};\n\n/**\n * Fit a plain (ANSI-free) string into exactly `width` columns: truncate with a\n * trailing `…` when too long, pad with spaces when too short. Keeps fixed-width\n * columns from overflowing the row when a value (e.g. an asset name) is wider\n * than its budget.\n */\nexport function fitWidth(s: string, width: number): string {\n  if (width <= 0) return \"\";\n  if (s.length > width) return width === 1 ? \"…\" : `${s.slice(0, width - 1)}…`;\n  return s.padEnd(width);\n}\n\n/** Color-code an asset kind string. */\nexport function kindColor(kind: string): string {\n  const colorFn = KIND_COLORS[kind] ?? pc.dim;\n  return colorFn(kind);\n}\n\n/**\n * Widest kind label (`mcp-server`); the default kind-column width fits it so\n * long kinds don't shove the rest of the row out of alignment.\n */\nexport const KIND_COL_WIDTH = 10;\n\n/**\n * Shared `--target` help suffix: with no flag, the manager deploys into the\n * harness the project is configured for (the harness `skaile config show`\n * resolves), and only then falls back to `claude-code`.\n */\nexport const TARGET_DEFAULT_HINT = \"default: the project's configured harness, else claude-code\";\n\n/**\n * Color-code an asset kind string fit to exactly `width` columns — pads short\n * kinds, truncates over-long ones (via {@link fitWidth}) so the column can never\n * overflow and break row alignment.\n */\nexport function kindColorPad(kind: string, width = KIND_COL_WIDTH): string {\n  const colorFn = KIND_COLORS[kind] ?? pc.dim;\n  return colorFn(fitWidth(kind, width));\n}\n\n/** Color-code a \"kind:name\" reference string. */\nexport function colorRef(ref: string): string {\n  const colonIdx = ref.indexOf(\":\");\n  if (colonIdx === -1) return ref;\n  const kind = ref.slice(0, colonIdx);\n  const rest = ref.slice(colonIdx);\n  return `${kindColor(kind)}${rest}`;\n}\n\n/**\n * Print a success line prefixed with a green check mark.\n *\n * @param msg - Message to display.\n * @docLink cli/dev-guide#helpers\n */\nexport function logOk(msg: string) {\n  console.log(`  ${pc.green(\"✓\")} ${msg}`);\n}\n/**\n * Print an error line prefixed with a red cross to stderr.\n *\n * @param msg - Message to display.\n * @docLink cli/dev-guide#helpers\n */\nexport function logErr(msg: string) {\n  console.error(`  ${pc.red(\"✗\")} ${msg}`);\n}\n/**\n * Print a warning line prefixed with a yellow exclamation mark.\n *\n * @param msg - Message to display.\n * @docLink cli/dev-guide#helpers\n */\nexport function logWarn(msg: string) {\n  console.log(`  ${pc.yellow(\"!\")} ${msg}`);\n}\n/**\n * One `!` line per deployed library asset whose body or description is still the untouched\n * `library create` scaffold: `validate` and the publish plan fail both, so `add`, `install` and\n * `update` name every placeholder they fail (p926).\n *\n * @param bodies - Canonical refs the asset manager reported as placeholder bodies.\n * @param descriptions - Canonical refs the asset manager reported as placeholder descriptions.\n */\nexport function warnPlaceholderBodies(\n  bodies: readonly string[] | undefined,\n  descriptions?: readonly string[],\n) {\n  const refs = [...new Set([...(bodies ?? []), ...(descriptions ?? [])])];\n  for (const ref of refs) {\n    const parts = [\n      ...(descriptions?.includes(ref) ? [\"description\"] : []),\n      ...(bodies?.includes(ref) ? [\"body\"] : []),\n    ];\n    const both = parts.length > 1;\n    logWarn(\n      `${ref} ${parts.join(\" and \")} ${both ? \"are\" : \"is\"} still the scaffold placeholder; write ${both ? \"them\" : \"it\"} (\\`skaile validate\\` fails ${both ? \"them\" : \"it\"})`,\n    );\n  }\n}\n/**\n * Print an info line prefixed with a dim dot.\n *\n * @param msg - Message to display.\n * @docLink cli/dev-guide#helpers\n */\nexport function logInfo(msg: string) {\n  console.log(`  ${pc.dim(\"·\")} ${msg}`);\n}\n\n/** The nearest parent directory of `dir` that holds a `skaile.yaml`, or `undefined`. */\nfunction nearestParentProject(dir: string): string | undefined {\n  for (let up = path.dirname(dir); up !== dir; dir = up, up = path.dirname(dir)) {\n    if (existsSync(path.join(up, SKAILE_YAML_DEFAULT))) return up;\n  }\n  return undefined;\n}\n\n/**\n * Print the `No skaile.yaml found` line for `projectDir`, plus a second line naming the nearest\n * parent directory that holds a `skaile.yaml` and `--project-dir`, when there is one: skaile\n * does not search parent directories.\n */\nexport function logNoProject(projectDir: string): void {\n  const dir = path.resolve(projectDir);\n  logErr(`No ${S.cmd(\"skaile.yaml\")} found. Run ${S.cmd(\"skaile init\")} to create one.`);\n  const parent = nearestParentProject(dir);\n  if (parent) {\n    logErr(\n      `${S.cmd(parent)} holds a ${S.cmd(\"skaile.yaml\")}: run from there or pass ${S.cmd(`--project-dir ${parent}`)}.`,\n    );\n  }\n}\n\n/**\n * Stop a project command that has no usable project: print one `✗` line and exit 1, before\n * the command deploys, undeploys, locks or clones anything. Two causes: no `skaile.yaml` in\n * `projectDir` (`No skaile.yaml found`), or a `skaile.yaml` — project, app or user scope —\n * that does not parse (`<file> — parse error: …`, a duplicate key included). Without this a\n * broken file would read as \"nothing declared\" and `install` would undeploy every asset.\n *\n * Library-level commands (`library …`, `search`, `init`) have no project and do not call it.\n */\nexport function requireProjectConfig(\n  projectDir: string,\n  opts: { allowMissing?: boolean } = {},\n): void {\n  const dir = path.resolve(projectDir);\n  if (!existsSync(path.join(dir, SKAILE_YAML_DEFAULT))) {\n    if (opts.allowMissing) return;\n    logNoProject(dir);\n    process.exit(1);\n  }\n  try {\n    resolveSkWorkspaceConfig(dir);\n  } catch (err) {\n    logErr(err instanceof Error ? err.message : String(err));\n    process.exit(1);\n  }\n}\n\n/**\n * Hold warnings raised while a spinner animates and print them once it stops:\n * on a TTY a line written mid-spin is overwritten by the next frame. Pass\n * `push` as `AssetManager`'s `onLibraryCollision`, call `flush()` after\n * `spinner.stop(...)`. Warnings pushed after `flush()` print immediately.\n */\nexport function deferredWarnings(): { push: (msg: string) => void; flush: () => void } {\n  const held: string[] = [];\n  let live = false;\n  return {\n    push: (msg) => {\n      if (live) logWarn(msg);\n      else held.push(msg);\n    },\n    flush: () => {\n      for (const msg of held.splice(0)) logWarn(msg);\n      live = true;\n    },\n  };\n}\n\n/** Max stale `.claude/` copies named inline by {@link warnLegacyClaudeCopies}. */\nconst LEGACY_COPY_LIST_MAX = 5;\n\n/**\n * Print ONE warning when tracked assets still have a copy in `.claude/` although\n * the project deploys to another harness (the old default target, see\n * MIGRATION.md). Those copies are orphans: `remove` / `clean` / `list` only look\n * in the active harness dir. Nothing is deleted. Silent when there are none.\n */\nexport function warnLegacyClaudeCopies(am: {\n  projectDir: string;\n  harness: string;\n  listLegacyClaudeDeployed(): Array<{ path: string }>;\n}): void {\n  let legacy: Array<{ path: string }>;\n  try {\n    legacy = am.listLegacyClaudeDeployed();\n  } catch {\n    return; // advisory only — never fail the command\n  }\n  if (legacy.length === 0) return;\n  const rel = legacy.map((l) => path.relative(am.projectDir, l.path));\n  const shown = rel.slice(0, LEGACY_COPY_LIST_MAX).join(\", \");\n  const more =\n    rel.length > LEGACY_COPY_LIST_MAX ? `, +${rel.length - LEGACY_COPY_LIST_MAX} more` : \"\";\n  logWarn(\n    `Stale ${S.cmd(\".claude/\")} copies no longer managed (deploying to ${am.harness}): ${shown}${more}. ` +\n      `Delete them once ${S.cmd(\"skaile install\")} has deployed to ${am.harness}, or pass ${S.cmd(\"--target claude-code\")} to keep using .claude/.`,\n  );\n}\n\n/**\n * Bare asset name of a canonical soft-dep target ref (`@pub/name@ver` → `name`),\n * for compact rendering in `info` / `tree` / `why`. Delegates to the asset-manager\n * parser (the soft-dep read surface) so the two never diverge.\n */\nexport function bareSoftDepName(ref: string): string {\n  return softDepName(ref);\n}\n\n/**\n * The report-only soft-dep hint line shared by the `add` no-TTY branch and the\n * `install` surface, so the two user-facing wordings can't drift. Appends a\n * runnable `skaile add` suffix only when the target has a parseable ref.\n */\nexport function formatSoftDepHint(edge: { from: string; to: string; toRef?: string }): string {\n  const suffix = edge.toRef ? ` — run \\`skaile add ${edge.toRef}\\` to include it.` : \"\";\n  return `${bareSoftDepName(edge.from)} references ${bareSoftDepName(edge.to)} (soft dependency)${suffix}`;\n}\n\n/**\n * Build the \"Soft dependencies (inferred)\" section for `skaile info`. Returns one\n * header line plus one line per soft-dep target, each marked `(soft)` to read\n * differently from a typed `requires`. Empty array when there are no soft deps,\n * so the caller prints nothing.\n */\nexport function formatSoftDepSection(targets: string[]): string[] {\n  if (targets.length === 0) return [];\n  const out = [`  ${S.label(\"Soft dependencies (inferred)\")}:`];\n  for (const t of targets) out.push(`    ${S.dim(\"·\")}  ${t} ${S.dim(\"(soft)\")}`);\n  return out;\n}\n\n/**\n * Footer line previewing the soft deps that *adding* the highlighted asset would\n * reference (manage TUI). \"references\" + \"not auto-added\" makes clear the pull is\n * report-only. Empty string when there are no targets, so the caller clears.\n */\nexport function formatSoftDepAddPreview(name: string, targets: string[]): string {\n  if (targets.length === 0) return \"\";\n  return S.dim(`${name} references ${targets.join(\", \")} (soft dep, not auto-added)`);\n}\n\n/**\n * Footer line previewing the soft deps that *removing* the highlighted asset\n * would orphan (manage TUI) — symmetric with {@link formatSoftDepAddPreview}.\n * Empty string when nothing would be orphaned, so the caller clears.\n */\nexport function formatSoftDepRemovePreview(name: string, targets: string[]): string {\n  if (targets.length === 0) return \"\";\n  return S.dim(`removing ${name} would orphan ${targets.join(\", \")} (soft dep)`);\n}\n\n/** Format a Date as a human-readable relative time string (e.g. \"5m ago\"). */\nexport function formatRelativeTime(date: Date): string {\n  const diff = Date.now() - date.getTime();\n  const seconds = Math.floor(diff / 1000);\n  if (seconds < 60) return \"just now\";\n  const minutes = Math.floor(seconds / 60);\n  if (minutes < 60) return `${minutes}m ago`;\n  const hours = Math.floor(minutes / 60);\n  if (hours < 24) return `${hours}h ago`;\n  const days = Math.floor(hours / 24);\n  return `${days}d ago`;\n}\n\n/** Name the old `~/.omp/<dir>` copies a global deploy replaced (omp reads `~/.omp/agent/<dir>`). */\nexport function reportLegacyOmpCopies(removed: string[], kept: string[] = []): void {\n  for (const p of removed) {\n    logInfo(\n      S.dim(`removed the old omp copy ${p.replace(homedir(), \"~\")} (omp reads ~/.omp/agent)`),\n    );\n  }\n  for (const p of kept) {\n    logWarn(\n      `${p.replace(homedir(), \"~\")} is an old omp location and skaile did not write this copy, so it was kept: delete it if you do not need it`,\n    );\n  }\n}\n\n/**\n * Parse a `--harness a,b` value into validated {@link HarnessName}s, exiting on\n * an unknown id. Returns `undefined` when the flag is absent (the caller then\n * resolves the full global harness set).\n */\nexport function parseHarnessFilter(raw: string | undefined): HarnessName[] | undefined {\n  if (!raw) return undefined;\n  const ids = raw\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter(Boolean);\n  const out: HarnessName[] = [];\n  for (const id of ids) {\n    if (!(SUPPORTED_HARNESSES as string[]).includes(id)) {\n      logErr(`unknown harness '${id}' — expected one of: ${SUPPORTED_HARNESSES.join(\", \")}`);\n      process.exit(1);\n    }\n    out.push(id as HarnessName);\n  }\n  return out.length > 0 ? out : undefined;\n}\n\n/** The sentence the agent renderer puts into a delegate sub-agent's file (`asset-manager` fragments). */\nconst SUB_AGENT_MARKER = \"You are a sub-agent:\";\n\n/**\n * One line when a Codex project holds delegate sub-agents. Codex does not load\n * `.codex/agents/*.toml` as spawnable agents (its `spawn_agent` has no `agent_type`), so the\n * delegate exists only as a file there and the orchestrator cannot call it (p428). A delegate is\n * found by the sentence the renderer writes into its file. Silent for every other harness.\n */\nexport function warnFilesOnlyDelegates(projectDir: string, target: string): void {\n  if (target !== \"codex\") return;\n  const dir = path.join(projectDir, \".codex\", \"skaile-agents\");\n  let names: string[];\n  try {\n    names = readdirSync(dir).filter((f) => f.endsWith(\".md\"));\n  } catch {\n    return;\n  }\n  const delegates = names\n    .filter((f) => {\n      try {\n        return readFileSync(path.join(dir, f), \"utf8\").includes(SUB_AGENT_MARKER);\n      } catch {\n        return false;\n      }\n    })\n    .map((f) => f.replace(/\\.md$/, \"\"))\n    .sort();\n  if (delegates.length === 0) return;\n  logWarn(\n    `codex: delegate agents are files only (${delegates.join(\", \")}): Codex does not load .codex/agents as sub-agents, so the orchestrator cannot call them`,\n  );\n}\n"]}