@skaile/workspaces 6.9.0 → 6.10.0

package/dist/chunk-GYBDWW6K.js

@@ -1,160 +0,0 @@
-import { unresolvedProviderCredentials, providerCredentialEnvName } from './chunk-SQMDFM4N.js';
-import { getProviderPreset } from './chunk-6UP2EDFN.js';
-import { globalSkaileDir } from './chunk-L5VSIPQD.js';
-import { registryEntries, parseModelRef, isEntryEnabled, resolveEntryBaseUrl } from './chunk-RXGPFAMN.js';
-import { createHash } from 'crypto';
-import { mkdirSync, rmSync, writeFileSync, renameSync, readFileSync, existsSync } from 'fs';
-import { join, resolve } from 'path';
-import { stringify } from 'smol-toml';
-import { homedir } from 'os';
-
-var CODEX_WIRE_API = {
-  "openai-codex-responses": "responses",
-  "openai-responses": "responses",
-  "azure-openai-responses": "responses"
-};
-var CODEX_RESERVED_PROVIDER_IDS = /* @__PURE__ */ new Set(["openai", "ollama", "lmstudio"]);
-function codexProviderTableId(id) {
-  return CODEX_RESERVED_PROVIDER_IDS.has(id) ? `skaile-${id}` : id;
-}
-var ENV_DELIVERED_CREDENTIALS = {
-  api_key_header: true,
-  bearer: true,
-  command: true
-};
-function selectionNamesEntry(input, selected, registry) {
-  if (selected.role && selected.modelId !== void 0) return true;
-  const selector = input.modelRef?.trim() || input.model?.trim() || "";
-  if (selector.startsWith(`${selected.providerId}/`)) return true;
-  const entry = registryEntries(registry).find(([id]) => id === selected.providerId)?.[1];
-  const modelId = selected.modelId;
-  return modelId !== void 0 && (entry?.model_map?.[modelId] !== void 0 || entry?.capabilities?.[modelId] !== void 0);
-}
-function renderCodexProviderTable(id, entry) {
-  if (!isEntryEnabled(entry)) return { skipped: "entry is disabled" };
-  if (entry.kind !== "llm" && entry.kind !== "embed")
-    return { skipped: `kind '${entry.kind}' is not a model endpoint` };
-  const llm = entry;
-  const preset = entry.preset ? getProviderPreset(entry.preset) : void 0;
-  const surface = llm.surface ?? preset?.surface;
-  const wireApi = surface ? CODEX_WIRE_API[surface] : void 0;
-  if (!wireApi)
-    return {
-      skipped: surface ? `codex has no wire_api for surface '${surface}'` : "entry declares no surface"
-    };
-  const credentialKind = entry.credential?.kind;
-  const table = { name: entry.label ?? id };
-  const baseUrl = resolveEntryBaseUrl(entry) ?? preset?.base_url;
-  if (baseUrl) table.base_url = baseUrl;
-  if (credentialKind && ENV_DELIVERED_CREDENTIALS[credentialKind])
-    table.env_key = providerCredentialEnvName(id);
-  table.wire_api = wireApi;
-  if (credentialKind === "oauth") table.requires_openai_auth = true;
-  if (llm.query_params && Object.keys(llm.query_params).length > 0)
-    table.query_params = { ...llm.query_params };
-  if (entry.headers && Object.keys(entry.headers).length > 0)
-    table.http_headers = { ...entry.headers };
-  return { table };
-}
-function buildCodexConfigDocument(input) {
-  const document = { model_providers: {} };
-  const skipped = [];
-  const entries = input.registry ? registryEntries(input.registry) : [];
-  for (const [id, entry] of entries) {
-    const rendered = renderCodexProviderTable(id, entry);
-    if ("skipped" in rendered) skipped.push({ id, reason: rendered.skipped });
-    else document.model_providers[codexProviderTableId(id)] = rendered.table;
-  }
-  if (!input.registry) return { document, skipped, warnings: [] };
-  const selected = parseModelRef(
-    input.modelRef?.trim() || input.model?.trim() || "",
-    input.registry,
-    input.roles
-  );
-  if (!selected) return { document, skipped, warnings: [] };
-  const warnings = selected.warnings;
-  const tableId = codexProviderTableId(selected.providerId);
-  if (!document.model_providers[tableId]) {
-    const reason = skipped.find((s) => s.id === selected.providerId)?.reason;
-    if (reason && selectionNamesEntry(input, selected, input.registry)) {
-      return {
-        document,
-        skipped,
-        warnings,
-        unaddressable: { id: selected.providerId, reason }
-      };
-    }
-    return { document, skipped, warnings };
-  }
-  document.model_provider = tableId;
-  if (selected.providerModelId) document.model = selected.providerModelId;
-  return {
-    document,
-    providerId: selected.providerId,
-    ...selected.providerModelId ? { model: selected.providerModelId } : {},
-    skipped,
-    warnings
-  };
-}
-function renderCodexConfigToml(document) {
-  const ordered = {};
-  if (document.model_provider) ordered.model_provider = document.model_provider;
-  if (document.model) ordered.model = document.model;
-  ordered.model_providers = document.model_providers;
-  return `${stringify(ordered)}
-`;
-}
-function codexSessionHome(config) {
-  const key = config.sessionId && /^[A-Za-z0-9._-]{1,128}$/.test(config.sessionId) ? config.sessionId : createHash("sha256").update(config.sessionId ?? config.cwd).digest("hex").slice(0, 32);
-  return join(globalSkaileDir(), "codex", key);
-}
-function writeCodexConfigToml(home, document) {
-  const path = join(home, "config.toml");
-  mkdirSync(home, { recursive: true, mode: 448 });
-  if (Object.keys(document.model_providers).length === 0) {
-    rmSync(path, { force: true });
-    return void 0;
-  }
-  const temporary = join(home, "config.toml.new");
-  rmSync(temporary, { force: true });
-  writeFileSync(temporary, renderCodexConfigToml(document), { mode: 384, flag: "wx" });
-  renameSync(temporary, path);
-  return path;
-}
-function isChatgptLogin(file) {
-  if (!file) return false;
-  try {
-    const doc = JSON.parse(readFileSync(file, "utf8"));
-    return doc.auth_mode === "chatgpt";
-  } catch {
-    return false;
-  }
-}
-function codexLoginFile(env) {
-  const home = env.CODEX_HOME?.trim() || join(env.HOME || homedir(), ".codex");
-  const file = join(home, "auth.json");
-  return existsSync(file) ? resolve(file) : void 0;
-}
-function usesCodexOwnAuth(build, env, loginFile) {
-  if (build.providerId !== "openai") return false;
-  const table = build.document.model_providers[codexProviderTableId("openai")];
-  if (!table?.env_key || table.requires_openai_auth || env[table.env_key]) return false;
-  return Boolean(env.OPENAI_API_KEY || env.CODEX_API_KEY || loginFile);
-}
-function codexLoginFallbackNotice(session, env) {
-  if (!session.registry) return void 0;
-  const build = buildCodexConfigDocument({
-    registry: session.registry,
-    ...session.modelRef ? { modelRef: session.modelRef } : {}
-  });
-  if (!usesCodexOwnAuth(build, env, codexLoginFile(env))) return void 0;
-  const unresolved = unresolvedProviderCredentials(session.registry, {
-    env,
-    providerId: "openai"
-  })[0];
-  return `provider 'openai' is not used: ${unresolved?.reason ?? "its credential is not set"}; codex uses its own login or OPENAI_API_KEY instead (check with \`skaile providers test openai\`)`;
-}
-
-export { buildCodexConfigDocument, codexLoginFallbackNotice, codexLoginFile, codexProviderTableId, codexSessionHome, isChatgptLogin, usesCodexOwnAuth, writeCodexConfigToml };
-//# sourceMappingURL=chunk-GYBDWW6K.js.map
-//# sourceMappingURL=chunk-GYBDWW6K.js.map

package/dist/chunk-GYBDWW6K.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/codex/config-toml.ts","../bridge/src/codex/login-fallback.ts"],"names":["stringifyToml","join"],"mappings":";;;;;;;;;;AAyDA,IAAM,cAAA,GAA6D;AAAA,EACjE,wBAAA,EAA0B,WAAA;AAAA,EAC1B,kBAAA,EAAoB,WAAA;AAAA,EACpB,wBAAA,EAA0B;AAC5B,CAAA;AAQA,IAAM,8CAAmD,IAAI,GAAA,CAAI,CAAC,QAAA,EAAU,QAAA,EAAU,UAAU,CAAC,CAAA;AAM1F,SAAS,qBAAqB,EAAA,EAAoB;AACvD,EAAA,OAAO,4BAA4B,GAAA,CAAI,EAAE,CAAA,GAAI,CAAA,OAAA,EAAU,EAAE,CAAA,CAAA,GAAK,EAAA;AAChE;AAGA,IAAM,yBAAA,GAAkD;AAAA,EACtD,cAAA,EAAgB,IAAA;AAAA,EAChB,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAA;AAyDA,SAAS,mBAAA,CACP,KAAA,EACA,QAAA,EACA,QAAA,EACS;AACT,EAAA,IAAI,QAAA,CAAS,IAAA,IAAQ,QAAA,CAAS,OAAA,KAAY,QAAW,OAAO,IAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAClE,EAAA,IAAI,SAAS,UAAA,CAAW,CAAA,EAAG,SAAS,UAAU,CAAA,CAAA,CAAG,GAAG,OAAO,IAAA;AAC3D,EAAA,MAAM,KAAA,GAAQ,eAAA,CAAgB,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,CAAC,EAAE,CAAA,KAAM,EAAA,KAAO,QAAA,CAAS,UAAU,IAAI,CAAC,CAAA;AAGtF,EAAA,MAAM,UAAU,QAAA,CAAS,OAAA;AACzB,EAAA,OACE,OAAA,KAAY,MAAA,KACX,KAAA,EAAO,SAAA,GAAY,OAAO,MAAM,MAAA,IAAa,KAAA,EAAO,YAAA,GAAe,OAAO,CAAA,KAAM,MAAA,CAAA;AAErF;AAiBO,SAAS,wBAAA,CACd,IACA,KAAA,EAC0D;AAC1D,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,GAAG,OAAO,EAAE,SAAS,mBAAA,EAAoB;AAClE,EAAA,IAAI,KAAA,CAAM,IAAA,KAAS,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,OAAA;AACzC,IAAA,OAAO,EAAE,OAAA,EAAS,CAAA,MAAA,EAAS,KAAA,CAAM,IAAI,CAAA,yBAAA,CAAA,EAA4B;AACnE,EAAA,MAAM,GAAA,GAAM,KAAA;AAIZ,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,iBAAA,CAAkB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAChE,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,OAAA,IAAW,MAAA,EAAQ,OAAA;AACvC,EAAA,MAAM,OAAA,GAAU,OAAA,GAAU,cAAA,CAAe,OAAO,CAAA,GAAI,MAAA;AACpD,EAAA,IAAI,CAAC,OAAA;AACH,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAA,GACL,CAAA,mCAAA,EAAsC,OAAO,CAAA,CAAA,CAAA,GAC7C;AAAA,KACN;AACF,EAAA,MAAM,cAAA,GAAiB,MAAM,UAAA,EAAY,IAAA;AACzC,EAAA,MAAM,KAAA,GAAiC,EAAE,IAAA,EAAM,KAAA,CAAM,SAAS,EAAA,EAAG;AACjE,EAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,KAAK,CAAA,IAAK,MAAA,EAAQ,QAAA;AACtD,EAAA,IAAI,OAAA,QAAe,QAAA,GAAW,OAAA;AAC9B,EAAA,IAAI,cAAA,IAAkB,0BAA0B,cAAc,CAAA;AAC5D,IAAA,KAAA,CAAM,OAAA,GAAU,0BAA0B,EAAE,CAAA;AAC9C,EAAA,KAAA,CAAM,QAAA,GAAW,OAAA;AACjB,EAAA,IAAI,cAAA,KAAmB,OAAA,EAAS,KAAA,CAAM,oBAAA,GAAuB,IAAA;AAC7D,EAAA,IAAI,IAAI,YAAA,IAAgB,MAAA,CAAO,KAAK,GAAA,CAAI,YAAY,EAAE,MAAA,GAAS,CAAA;AAC7D,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,GAAA,CAAI,YAAA,EAAa;AAC7C,EAAA,IAAI,MAAM,OAAA,IAAW,MAAA,CAAO,KAAK,KAAA,CAAM,OAAO,EAAE,MAAA,GAAS,CAAA;AACvD,IAAA,KAAA,CAAM,YAAA,GAAe,EAAE,GAAG,KAAA,CAAM,OAAA,EAAQ;AAC1C,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAMO,SAAS,yBAAyB,KAAA,EAA2C;AAClF,EAAA,MAAM,QAAA,GAAgC,EAAE,eAAA,EAAiB,EAAC,EAAE;AAC5D,EAAA,MAAM,UAA+B,EAAC;AACtC,EAAA,MAAM,UAAU,KAAA,CAAM,QAAA,GAAW,gBAAgB,KAAA,CAAM,QAAQ,IAAI,EAAC;AACpE,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,OAAA,EAAS;AACjC,IAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,EAAA,EAAI,KAAK,CAAA;AACnD,IAAA,IAAI,SAAA,IAAa,UAAU,OAAA,CAAQ,IAAA,CAAK,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAA,CAAS,OAAA,EAAS,CAAA;AAAA,kBAC1D,eAAA,CAAgB,oBAAA,CAAqB,EAAE,CAAC,IAAI,QAAA,CAAS,KAAA;AAAA,EACrE;AAEA,EAAA,IAAI,CAAC,MAAM,QAAA,EAAU,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AAI9D,EAAA,MAAM,QAAA,GAAW,aAAA;AAAA,IACf,MAAM,QAAA,EAAU,IAAA,MAAU,KAAA,CAAM,KAAA,EAAO,MAAK,IAAK,EAAA;AAAA,IACjD,KAAA,CAAM,QAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AACA,EAAA,IAAI,CAAC,UAAU,OAAO,EAAE,UAAU,OAAA,EAAS,QAAA,EAAU,EAAC,EAAE;AACxD,EAAA,MAAM,WAAW,QAAA,CAAS,QAAA;AAC1B,EAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,QAAA,CAAS,UAAU,CAAA;AACxD,EAAA,IAAI,CAAC,QAAA,CAAS,eAAA,CAAgB,OAAO,CAAA,EAAG;AAMtC,IAAA,MAAM,MAAA,GAAS,QAAQ,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,QAAA,CAAS,UAAU,CAAA,EAAG,MAAA;AAClE,IAAA,IAAI,UAAU,mBAAA,CAAoB,KAAA,EAAO,QAAA,EAAU,KAAA,CAAM,QAAQ,CAAA,EAAG;AAClE,MAAA,OAAO;AAAA,QACL,QAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA;AAAA,QACA,aAAA,EAAe,EAAE,EAAA,EAAI,QAAA,CAAS,YAAY,MAAA;AAAO,OACnD;AAAA,IACF;AACA,IAAA,OAAO,EAAE,QAAA,EAAU,OAAA,EAAS,QAAA,EAAS;AAAA,EACvC;AACA,EAAA,QAAA,CAAS,cAAA,GAAiB,OAAA;AAC1B,EAAA,IAAI,QAAA,CAAS,eAAA,EAAiB,QAAA,CAAS,KAAA,GAAQ,QAAA,CAAS,eAAA;AACxD,EAAA,OAAO;AAAA,IACL,QAAA;AAAA,IACA,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,GAAI,SAAS,eAAA,GAAkB,EAAE,OAAO,QAAA,CAAS,eAAA,KAAoB,EAAC;AAAA,IACtE,OAAA;AAAA,IACA;AAAA,GACF;AACF;AAGO,SAAS,sBAAsB,QAAA,EAAuC;AAC3E,EAAA,MAAM,UAAmC,EAAC;AAC1C,EAAA,IAAI,QAAA,CAAS,cAAA,EAAgB,OAAA,CAAQ,cAAA,GAAiB,QAAA,CAAS,cAAA;AAC/D,EAAA,IAAI,QAAA,CAAS,KAAA,EAAO,OAAA,CAAQ,KAAA,GAAQ,QAAA,CAAS,KAAA;AAC7C,EAAA,OAAA,CAAQ,kBAAkB,QAAA,CAAS,eAAA;AACnC,EAAA,OAAO,CAAA,EAAGA,SAAA,CAAc,OAAO,CAAC;AAAA,CAAA;AAClC;AAWO,SAAS,iBAAiB,MAAA,EAAqD;AACpF,EAAA,MAAM,GAAA,GACJ,MAAA,CAAO,SAAA,IAAa,yBAAA,CAA0B,IAAA,CAAK,OAAO,SAAS,CAAA,GAC/D,MAAA,CAAO,SAAA,GACP,UAAA,CAAW,QAAQ,EAChB,MAAA,CAAO,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,GAAG,CAAA,CACrC,OAAO,KAAK,CAAA,CACZ,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACpB,EAAA,OAAO,IAAA,CAAK,eAAA,EAAgB,EAAG,OAAA,EAAS,GAAG,CAAA;AAC7C;AAeO,SAAS,oBAAA,CACd,MACA,QAAA,EACoB;AACpB,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,EAAM,aAAa,CAAA;AAGrC,EAAA,SAAA,CAAU,MAAM,EAAE,SAAA,EAAW,IAAA,EAAM,IAAA,EAAM,KAAO,CAAA;AAChD,EAAA,IAAI,OAAO,IAAA,CAAK,QAAA,CAAS,eAAe,CAAA,CAAE,WAAW,CAAA,EAAG;AACtD,IAAA,MAAA,CAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AAC5B,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,IAAA,EAAM,iBAAiB,CAAA;AAC9C,EAAA,MAAA,CAAO,SAAA,EAAW,EAAE,KAAA,EAAO,IAAA,EAAM,CAAA;AACjC,EAAA,aAAA,CAAc,SAAA,EAAW,sBAAsB,QAAQ,CAAA,EAAG,EAAE,IAAA,EAAM,GAAA,EAAO,IAAA,EAAM,IAAA,EAAM,CAAA;AACrF,EAAA,UAAA,CAAW,WAAW,IAAI,CAAA;AAC1B,EAAA,OAAO,IAAA;AACT;ACtSO,SAAS,eAAe,IAAA,EAAmC;AAChE,EAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAClB,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,YAAA,CAAa,IAAA,EAAM,MAAM,CAAC,CAAA;AACjD,IAAA,OAAO,IAAI,SAAA,KAAc,SAAA;AAAA,EAC3B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAOO,SAAS,eAAe,GAAA,EAA6D;AAC1F,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,UAAA,EAAY,IAAA,EAAK,IAAKC,KAAK,GAAA,CAAI,IAAA,IAAQ,OAAA,EAAQ,EAAG,QAAQ,CAAA;AAC3E,EAAA,MAAM,IAAA,GAAOA,IAAAA,CAAK,IAAA,EAAM,WAAW,CAAA;AACnC,EAAA,OAAO,UAAA,CAAW,IAAI,CAAA,GAAI,OAAA,CAAQ,IAAI,CAAA,GAAI,MAAA;AAC5C;AAWO,SAAS,gBAAA,CACd,KAAA,EACA,GAAA,EACA,SAAA,EACS;AACT,EAAA,IAAI,KAAA,CAAM,UAAA,KAAe,QAAA,EAAU,OAAO,KAAA;AAC1C,EAAA,MAAM,QAAQ,KAAA,CAAM,QAAA,CAAS,eAAA,CAAgB,oBAAA,CAAqB,QAAQ,CAAC,CAAA;AAC3E,EAAA,IAAI,CAAC,OAAO,OAAA,IAAW,KAAA,CAAM,wBAAwB,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA,EAAG,OAAO,KAAA;AAChF,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,GAAA,CAAI,iBAAiB,SAAS,CAAA;AACrE;AASO,SAAS,wBAAA,CACd,SACA,GAAA,EACoB;AACpB,EAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,EAAU,OAAO,MAAA;AAC9B,EAAA,MAAM,QAAQ,wBAAA,CAAyB;AAAA,IACrC,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,GAAI,QAAQ,QAAA,GAAW,EAAE,UAAU,OAAA,CAAQ,QAAA,KAAa;AAAC,GAC1D,CAAA;AACD,EAAA,IAAI,CAAC,iBAAiB,KAAA,EAAO,GAAA,EAAK,eAAe,GAAG,CAAC,GAAG,OAAO,MAAA;AAC/D,EAAA,MAAM,UAAA,GAAa,6BAAA,CAA8B,OAAA,CAAQ,QAAA,EAAU;AAAA,IACjE,GAAA;AAAA,IACA,UAAA,EAAY;AAAA,GACb,EAAE,CAAC,CAAA;AACJ,EAAA,OAAO,CAAA,+BAAA,EAAkC,UAAA,EAAY,MAAA,IAAU,2BAA2B,CAAA,kGAAA,CAAA;AAC5F","file":"chunk-GYBDWW6K.js","sourcesContent":["/**\n * Codex's `config.toml` adapter — the AI provider registry materialized into\n * the only provider surface the Codex CLI reads (plan §2.3, codex rows).\n *\n * Codex is a **file-shaped** harness: it takes its endpoints from\n * `$CODEX_HOME/config.toml`, never from per-request options. Both codex modes\n * therefore get a session-private `CODEX_HOME` holding a rendered document:\n *\n * - every addressable registry entry becomes `[model_providers.<id>]` with\n *   `base_url`, `env_key`, `wire_api`, `query_params` and `http_headers`\n *   mapping 1:1 onto the entry's `base_url`, `credential`, `surface`,\n *   `query_params` and `headers`;\n * - `model_provider` and `model` at the top level name the selected entry.\n *\n * The rendered file never contains a credential **value** — `env_key` holds\n * the *name* of the per-entry variable (`SKAILE_AIP_<ID>_KEY`, minted by\n * {@link providerCredentialEnvName}), and the value rides in the child\n * environment. An `oauth` entry has no env carrier at all: it gets\n * `requires_openai_auth`, which routes codex to its own auth manager.\n *\n * **Surface coverage.** Codex names the wire protocol `wire_api` and, as of\n * codex-cli 0.154, accepts exactly one value: `responses`. `chat` was removed\n * (\"`wire_api = \\\"chat\\\"` is no longer supported\", openai/codex#7782), and an\n * unknown value fails the *whole* document at load time — one unaddressable\n * entry would take the rest of the registry down with it. Entries whose\n * surface codex cannot speak (`openai-completions`, `anthropic-messages`,\n * `bedrock-converse-stream`, `google-*`) are therefore left out and reported\n * in {@link CodexConfigBuild.skipped} for the harness to log.\n *\n * @docLink packages/bridge/harnesses#codex-harness\n */\n\nimport { createHash } from \"node:crypto\";\nimport { mkdirSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { globalSkaileDir } from \"@skaile/workspaces/core\";\nimport {\n  type AIProviderEntry,\n  type AIProviderLlmEntry,\n  type AIProviderRegistry,\n  type AIProviderSurface,\n  isEntryEnabled,\n  type MergedAIProviderRegistry,\n  parseModelRef,\n  registryEntries,\n  type ResolvedModelRef,\n  resolveEntryBaseUrl,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { stringify as stringifyToml } from \"smol-toml\";\nimport { getProviderPreset } from \"../provider-catalog.js\";\nimport { providerCredentialEnvName } from \"../provider-materialize/credential-env.js\";\n\n/**\n * `surface` → codex `wire_api`. Only the responses-flavoured surfaces have a\n * codex spelling; see the module docstring for why `openai-completions` is\n * absent rather than mapped to the removed `chat` value.\n */\nconst CODEX_WIRE_API: Partial<Record<AIProviderSurface, string>> = {\n  \"openai-codex-responses\": \"responses\",\n  \"openai-responses\": \"responses\",\n  \"azure-openai-responses\": \"responses\",\n};\n\n/**\n * Provider ids codex reserves for its own built-ins. A `[model_providers.<id>]`\n * table under one of them fails the whole document (\"model_providers contains\n * reserved built-in provider IDs\"), so such an entry is rendered under\n * {@link codexProviderTableId}.\n */\nconst CODEX_RESERVED_PROVIDER_IDS: ReadonlySet<string> = new Set([\"openai\", \"ollama\", \"lmstudio\"]);\n\n/**\n * The `[model_providers.<id>]` table name for a registry entry: the entry id,\n * or `skaile-<id>` when codex reserves that id (the `openai` preset).\n */\nexport function codexProviderTableId(id: string): string {\n  return CODEX_RESERVED_PROVIDER_IDS.has(id) ? `skaile-${id}` : id;\n}\n\n/** Credential kinds whose value the adapter hands over in an env var. */\nconst ENV_DELIVERED_CREDENTIALS: Record<string, true> = {\n  api_key_header: true,\n  bearer: true,\n  command: true,\n};\n\n/** One `[model_providers.<id>]` table, in codex's own vocabulary. */\nexport interface CodexModelProviderTable {\n  /** Display name. Codex rejects a provider table without one. */\n  name: string;\n  base_url?: string;\n  /** Name of the variable carrying the credential — never the credential. */\n  env_key?: string;\n  wire_api?: string;\n  /** Routes codex to its own auth manager (ChatGPT subscription / stored key). */\n  requires_openai_auth?: boolean;\n  query_params?: Record<string, string>;\n  http_headers?: Record<string, string>;\n}\n\n/** The subset of codex's `config.toml` this adapter owns. */\nexport interface CodexConfigDocument {\n  /** Table id the session addresses (see {@link codexProviderTableId}); absent when nothing rendered. */\n  model_provider?: string;\n  /** Provider-side model id. */\n  model?: string;\n  model_providers: Record<string, CodexModelProviderTable>;\n}\n\n/** An entry codex cannot address, and why. */\nexport interface CodexSkippedEntry {\n  id: string;\n  reason: string;\n}\n\n/** Result of {@link buildCodexConfigDocument}. */\nexport interface CodexConfigBuild {\n  document: CodexConfigDocument;\n  /** Selected registry entry id (not the table id), when it rendered. */\n  providerId?: string;\n  /** Provider-side model id of the selection, when the selector named one. */\n  model?: string;\n  /**\n   * Entries left out of the document. Non-fatal: codex keeps its built-in\n   * providers, so a session whose selection was skipped behaves exactly as it\n   * did before the registry existed.\n   */\n  skipped: CodexSkippedEntry[];\n  /** Notes from `modelRef` resolution (dangling role, disabled provider, …). */\n  warnings: string[];\n  /**\n   * Set when the selector named an entry codex cannot address: the session\n   * must stop with `reason`, not fall back to codex's built-in providers.\n   */\n  unaddressable?: { id: string; reason: string };\n}\n\n/**\n * Whether the session's selector named the entry `selected` resolved to, rather\n * than reaching it by registry order alone.\n */\nfunction selectionNamesEntry(\n  input: CodexConfigInput,\n  selected: ResolvedModelRef,\n  registry: AIProviderRegistry | MergedAIProviderRegistry,\n): boolean {\n  if (selected.role && selected.modelId !== undefined) return true;\n  const selector = input.modelRef?.trim() || input.model?.trim() || \"\";\n  if (selector.startsWith(`${selected.providerId}/`)) return true;\n  const entry = registryEntries(registry).find(([id]) => id === selected.providerId)?.[1] as\n    | AIProviderLlmEntry\n    | undefined;\n  const modelId = selected.modelId;\n  return (\n    modelId !== undefined &&\n    (entry?.model_map?.[modelId] !== undefined || entry?.capabilities?.[modelId] !== undefined)\n  );\n}\n\n/** Inputs {@link buildCodexConfigDocument} reads off an `AgentConfig`. */\nexport interface CodexConfigInput {\n  registry?: AIProviderRegistry | MergedAIProviderRegistry;\n  /** `\"<providerId>/<modelId>\"`, a bare model id, or `\"@role\"`. */\n  modelRef?: string;\n  /** Legacy model field, used as the selector when `modelRef` is absent. */\n  model?: string;\n  /** Roles table (`skaile.yaml`), consulted for an `@role` selector. */\n  roles?: Record<string, string>;\n}\n\n/**\n * Render one entry as a codex provider table, or explain why codex cannot\n * address it.\n */\nexport function renderCodexProviderTable(\n  id: string,\n  entry: AIProviderEntry,\n): { table: CodexModelProviderTable } | { skipped: string } {\n  if (!isEntryEnabled(entry)) return { skipped: \"entry is disabled\" };\n  if (entry.kind !== \"llm\" && entry.kind !== \"embed\")\n    return { skipped: `kind '${entry.kind}' is not a model endpoint` };\n  const llm = entry as AIProviderLlmEntry;\n  // `surface` and `base_url` may live on the catalog preset the entry names —\n  // the catalog layer fills them during a merge, but an entry handed straight\n  // to a harness has not necessarily been through one.\n  const preset = entry.preset ? getProviderPreset(entry.preset) : undefined;\n  const surface = llm.surface ?? preset?.surface;\n  const wireApi = surface ? CODEX_WIRE_API[surface] : undefined;\n  if (!wireApi)\n    return {\n      skipped: surface\n        ? `codex has no wire_api for surface '${surface}'`\n        : \"entry declares no surface\",\n    };\n  const credentialKind = entry.credential?.kind;\n  const table: CodexModelProviderTable = { name: entry.label ?? id };\n  const baseUrl = resolveEntryBaseUrl(entry) ?? preset?.base_url;\n  if (baseUrl) table.base_url = baseUrl;\n  if (credentialKind && ENV_DELIVERED_CREDENTIALS[credentialKind])\n    table.env_key = providerCredentialEnvName(id);\n  table.wire_api = wireApi;\n  if (credentialKind === \"oauth\") table.requires_openai_auth = true;\n  if (llm.query_params && Object.keys(llm.query_params).length > 0)\n    table.query_params = { ...llm.query_params };\n  if (entry.headers && Object.keys(entry.headers).length > 0)\n    table.http_headers = { ...entry.headers };\n  return { table };\n}\n\n/**\n * Build the document for a session: every addressable entry, plus the\n * selection when it resolved to one of them.\n */\nexport function buildCodexConfigDocument(input: CodexConfigInput): CodexConfigBuild {\n  const document: CodexConfigDocument = { model_providers: {} };\n  const skipped: CodexSkippedEntry[] = [];\n  const entries = input.registry ? registryEntries(input.registry) : [];\n  for (const [id, entry] of entries) {\n    const rendered = renderCodexProviderTable(id, entry);\n    if (\"skipped\" in rendered) skipped.push({ id, reason: rendered.skipped });\n    else document.model_providers[codexProviderTableId(id)] = rendered.table;\n  }\n\n  if (!input.registry) return { document, skipped, warnings: [] };\n  // An empty selector resolves the same way a bare one does — first entry in\n  // registry order. A session that configured an endpoint and named no model\n  // still means that endpoint, not codex's built-in default.\n  const selected = parseModelRef(\n    input.modelRef?.trim() || input.model?.trim() || \"\",\n    input.registry,\n    input.roles,\n  );\n  if (!selected) return { document, skipped, warnings: [] };\n  const warnings = selected.warnings;\n  const tableId = codexProviderTableId(selected.providerId);\n  if (!document.model_providers[tableId]) {\n    // A selector that names the entry (`ollama/llama3`, a role or a model its\n    // `model_map` lists) and cannot be rendered must not fall through to\n    // codex's built-in OpenAI: the prompt would go to a provider the user did\n    // not pick. A bare model id that matched no entry only landed on the first\n    // entry by registry order, so codex's own providers stay the right answer.\n    const reason = skipped.find((s) => s.id === selected.providerId)?.reason;\n    if (reason && selectionNamesEntry(input, selected, input.registry)) {\n      return {\n        document,\n        skipped,\n        warnings,\n        unaddressable: { id: selected.providerId, reason },\n      };\n    }\n    return { document, skipped, warnings };\n  }\n  document.model_provider = tableId;\n  if (selected.providerModelId) document.model = selected.providerModelId;\n  return {\n    document,\n    providerId: selected.providerId,\n    ...(selected.providerModelId ? { model: selected.providerModelId } : {}),\n    skipped,\n    warnings,\n  };\n}\n\n/** Serialize a document to TOML. Deterministic: registry order throughout. */\nexport function renderCodexConfigToml(document: CodexConfigDocument): string {\n  const ordered: Record<string, unknown> = {};\n  if (document.model_provider) ordered.model_provider = document.model_provider;\n  if (document.model) ordered.model = document.model;\n  ordered.model_providers = document.model_providers;\n  return `${stringifyToml(ordered)}\\n`;\n}\n\n/**\n * The session-private codex home.\n *\n * Deliberately outside `cwd`: codex's `workspace-write` sandbox makes the\n * working tree writable by the model, and a config home inside it would let a\n * turn rewrite its own `base_url`. `$SKAILE_HOME` (honoured by\n * {@link globalSkaileDir}) relocates the whole tree, which is also the test\n * seam.\n */\nexport function codexSessionHome(config: { cwd: string; sessionId?: string }): string {\n  const key =\n    config.sessionId && /^[A-Za-z0-9._-]{1,128}$/.test(config.sessionId)\n      ? config.sessionId\n      : createHash(\"sha256\")\n          .update(config.sessionId ?? config.cwd)\n          .digest(\"hex\")\n          .slice(0, 32);\n  return join(globalSkaileDir(), \"codex\", key);\n}\n\n/**\n * Write `<home>/config.toml`, creating the home always. Atomic: a\n * partially written document would fail codex's config load for the whole\n * session.\n *\n * A document with no provider tables says nothing codex does not already\n * know, so nothing is written and a file left by an earlier render is\n * removed — a session that no longer carries a registry must not keep\n * answering to the one it used to have.\n *\n * @returns the absolute path written, or `undefined` when there was nothing\n *   to render.\n */\nexport function writeCodexConfigToml(\n  home: string,\n  document: CodexConfigDocument,\n): string | undefined {\n  const path = join(home, \"config.toml\");\n  // codex exits when CODEX_HOME names a directory that does not exist, so the\n  // home exists before the early return too.\n  mkdirSync(home, { recursive: true, mode: 0o700 });\n  if (Object.keys(document.model_providers).length === 0) {\n    rmSync(path, { force: true });\n    return undefined;\n  }\n  const temporary = join(home, \"config.toml.new\");\n  rmSync(temporary, { force: true });\n  writeFileSync(temporary, renderCodexConfigToml(document), { mode: 0o600, flag: \"wx\" });\n  renameSync(temporary, path);\n  return path;\n}\n","/**\n * The codex CLI's own credentials, and when they stand in for the registry's `openai` entry.\n *\n * An `openai` registry entry whose key variable is not exported cannot be rendered as a working\n * `[model_providers.*]` table. The omp harness then answers with its own login; codex does the\n * same (p1871): it drops the entry and runs on codex's built-in `openai` provider, which uses\n * the ChatGPT login (`~/.codex/auth.json`) or an exported `OPENAI_API_KEY`. Every other entry\n * whose key is missing still refuses, naming the variable to export.\n */\n\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join, resolve } from \"node:path\";\nimport type {\n  AIProviderRegistry,\n  MergedAIProviderRegistry,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { unresolvedProviderCredentials } from \"../provider-materialize/credential-env.js\";\nimport {\n  buildCodexConfigDocument,\n  type CodexConfigBuild,\n  codexProviderTableId,\n} from \"./config-toml.js\";\n\n/**\n * Whether the codex login file at `file` is a ChatGPT sign-in (`auth_mode: chatgpt`) and not a\n * stored API key. `false` for no file or one that does not parse.\n */\nexport function isChatgptLogin(file: string | undefined): boolean {\n  if (!file) return false;\n  try {\n    const doc = JSON.parse(readFileSync(file, \"utf8\")) as { auth_mode?: unknown };\n    return doc.auth_mode === \"chatgpt\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * The codex CLI's ChatGPT login file (`$CODEX_HOME/auth.json`, default `~/.codex/auth.json`) of\n * the user's environment, or `undefined` when there is none. `env` is the parent environment,\n * not the session's: the session's `CODEX_HOME` is the private one, which has no login.\n */\nexport function codexLoginFile(env: Record<string, string | undefined>): string | undefined {\n  const home = env.CODEX_HOME?.trim() || join(env.HOME || homedir(), \".codex\");\n  const file = join(home, \"auth.json\");\n  return existsSync(file) ? resolve(file) : undefined;\n}\n\n/**\n * Whether the session runs on codex's own auth instead of the selected `openai` registry entry:\n * the entry is selected, its key variable (`env_key` of the rendered table) is not set in `env`,\n * and codex has a login file or an exported key to use instead.\n *\n * @param build - The rendered codex config of the session.\n * @param env - The environment the child gets, credential variables included.\n * @param loginFile - The codex login file, when there is one.\n */\nexport function usesCodexOwnAuth(\n  build: CodexConfigBuild,\n  env: Record<string, string | undefined>,\n  loginFile: string | undefined,\n): boolean {\n  if (build.providerId !== \"openai\") return false;\n  const table = build.document.model_providers[codexProviderTableId(\"openai\")];\n  if (!table?.env_key || table.requires_openai_auth || env[table.env_key]) return false;\n  return Boolean(env.OPENAI_API_KEY || env.CODEX_API_KEY || loginFile);\n}\n\n/**\n * The line `run` and `repl` print when a codex session falls back to codex's own auth because\n * the `openai` entry has no key (the `omp` line of the same kind, p1871), or `undefined`.\n *\n * @param session - The session's registry and model selector.\n * @param env - Process environment plus the session's credential variables.\n */\nexport function codexLoginFallbackNotice(\n  session: { registry?: AIProviderRegistry | MergedAIProviderRegistry; modelRef?: string },\n  env: Record<string, string | undefined>,\n): string | undefined {\n  if (!session.registry) return undefined;\n  const build = buildCodexConfigDocument({\n    registry: session.registry,\n    ...(session.modelRef ? { modelRef: session.modelRef } : {}),\n  });\n  if (!usesCodexOwnAuth(build, env, codexLoginFile(env))) return undefined;\n  const unresolved = unresolvedProviderCredentials(session.registry, {\n    env,\n    providerId: \"openai\",\n  })[0];\n  return `provider 'openai' is not used: ${unresolved?.reason ?? \"its credential is not set\"}; codex uses its own login or OPENAI_API_KEY instead (check with \\`skaile providers test openai\\`)`;\n}\n"]}

package/dist/chunk-GYPPVANR.js

@@ -1,357 +0,0 @@
-import { CODEX_NATIVE_STATE_FORMAT, CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
-import { registryEntries, isEntryEnabled, parseCredentialRef } from './chunk-RXGPFAMN.js';
-import { openSqlite } from './chunk-MDCI4RSG.js';
-import * as z from 'zod';
-import { createHash } from 'crypto';
-import { realpathSync, existsSync, lstatSync, chmodSync, rmSync, writeFileSync, renameSync, mkdirSync, readdirSync, readFileSync } from 'fs';
-import { isAbsolute, join, resolve, dirname, relative } from 'path';
-
-var identifier = z.string().min(1).max(4096);
-var timestamp = z.iso.datetime({ offset: true });
-var common = {
-  configId: identifier,
-  credentialVersion: z.number().int().nonnegative().safe(),
-  mintedAt: timestamp
-};
-var subscription = z.strictObject({
-  ...common,
-  kind: z.literal("codex-subscription"),
-  accessToken: z.string().min(1).max(65536),
-  chatgptAccountId: identifier,
-  chatgptPlanType: identifier.optional(),
-  expiresAt: timestamp
-});
-var delivery = z.discriminatedUnion("kind", [
-  subscription,
-  z.strictObject({
-    ...common,
-    kind: z.literal("openai-api-key"),
-    apiKey: z.string().min(1).max(65536)
-  })
-]);
-function parseCodexCredential(value, now = Date.now()) {
-  const parsed = delivery.safeParse(value);
-  if (!parsed.success) throw new Error("Invalid managed AI credential");
-  const credential = parsed.data;
-  const mintedAt = Date.parse(credential.mintedAt);
-  if (mintedAt > now + 6e4 || credential.kind === "codex-subscription" && (Date.parse(credential.expiresAt) <= now || Date.parse(credential.expiresAt) <= mintedAt))
-    throw new Error("Invalid managed AI credential timestamps");
-  return credential;
-}
-function parseCodexRefreshInput(value, pinned) {
-  const parsed = z.strictObject({
-    kind: z.literal("codex-subscription"),
-    configId: identifier,
-    credentialVersion: common.credentialVersion,
-    reason: z.enum(["initial", "refresh", "retry-401"])
-  }).safeParse(value);
-  if (!parsed.success || parsed.data.configId !== pinned.configId || parsed.data.credentialVersion !== pinned.credentialVersion)
-    throw new Error("Invalid managed AI refresh binding");
-  return parsed.data;
-}
-function parseCodexRefreshResult(value, pinned, now = Date.now()) {
-  const parsed = z.discriminatedUnion("ok", [
-    z.strictObject({ ok: z.literal(true), credential: subscription }),
-    z.strictObject({
-      ok: z.literal(false),
-      code: z.enum(["not-configured", "revoked", "provider-error", "backend-error"]),
-      message: z.string()
-    })
-  ]).safeParse(value);
-  if (!parsed.success) throw new Error("Invalid managed AI refresh result");
-  if (!parsed.data.ok) return { ...parsed.data, message: "Managed subscription refresh failed" };
-  const credential = parseCodexCredential(parsed.data.credential, now);
-  if (credential.kind !== "codex-subscription" || credential.configId !== pinned.configId || credential.chatgptAccountId !== pinned.chatgptAccountId || credential.credentialVersion < pinned.credentialVersion)
-    throw new Error("Invalid managed AI refresh binding");
-  return { ok: true, credential };
-}
-function managedCodexRegistryViolation(registry) {
-  if (!registry) return void 0;
-  const entries = registryEntries(registry);
-  if (entries.length === 0) return void 0;
-  if (entries.length > 1)
-    return `registry carries ${entries.length} entries; managed codex admits exactly one`;
-  const [id, entry] = entries[0];
-  if (!isEntryEnabled(entry)) return `entry '${id}' is disabled`;
-  if (entry.kind !== "llm") return `entry '${id}' is a '${entry.kind}' endpoint, not an llm one`;
-  const surface = entry.surface;
-  if (surface !== "openai-codex-responses")
-    return `entry '${id}' declares surface '${surface ?? "none"}'; managed codex admits only openai-codex-responses`;
-  const credential = entry.credential;
-  if (credential?.kind !== "oauth")
-    return `entry '${id}' carries a '${credential?.kind ?? "none"}' credential; managed codex admits only a platform-injected oauth credential`;
-  const ref = credential.ref ? parseCredentialRef(credential.ref) : void 0;
-  if (!ref || ref.form !== "platform")
-    return `entry '${id}' resolves its credential outside the control plane; managed codex admits only a 'platform:' reference`;
-  return void 0;
-}
-var invalid = () => new Error("AI_PROFILE_INVALID");
-var within = (path, root) => {
-  const rel = relative(root, path);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-};
-function directory(path) {
-  if (!existsSync(path)) mkdirSync(path, { mode: 448 });
-  const stat = lstatSync(path);
-  if (!stat.isDirectory() || stat.isSymbolicLink() || stat.mode & 63) throw invalid();
-}
-function readRegular(path, limit) {
-  const stat = lstatSync(path);
-  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > limit) throw invalid();
-  return readFileSync(path);
-}
-function prepareCodexInstance(config, options, credential) {
-  if (!isAbsolute(options.privateDirectory) || !isAbsolute(config.cwd) || !config.sessionId)
-    throw invalid();
-  directory(options.privateDirectory);
-  const root = realpathSync(options.privateDirectory);
-  const cwd = realpathSync(config.cwd);
-  if (within(root, cwd) || within(cwd, root)) throw invalid();
-  const lock = join(root, ".active");
-  const leasePath = join(root, "lease.db");
-  if (existsSync(leasePath) && !lstatSync(leasePath).isFile()) throw invalid();
-  const lease = openSqlite(leasePath);
-  try {
-    lease.exec("PRAGMA busy_timeout=0; BEGIN EXCLUSIVE");
-    chmodSync(leasePath, 384);
-    rmSync(lock, { force: true });
-    writeFileSync(lock, "active", { flag: "wx", mode: 384 });
-  } catch (error) {
-    lease.close();
-    throw error;
-  }
-  let released = false;
-  const release = () => {
-    if (released) return;
-    released = true;
-    try {
-      rmSync(lock, { force: true });
-    } finally {
-      lease.close();
-    }
-  };
-  try {
-    const key = createHash("sha256").update(
-      JSON.stringify({
-        harness: "codex-app-server-v1",
-        session: config.sessionId,
-        config: credential.configId,
-        kind: credential.kind,
-        account: credential.kind === "codex-subscription" ? credential.chatgptAccountId : null
-      })
-    ).digest("hex");
-    const slots = join(root, CODEX_NATIVE_STATE_FORMAT);
-    directory(slots);
-    const stateRoot = join(slots, key);
-    directory(stateRoot);
-    for (const name of ["instructions.new", "binding.new"])
-      rmSync(join(stateRoot, name), { force: true });
-    const bindingPath = join(stateRoot, "binding.json");
-    if (config.resumeSessionId && !existsSync(bindingPath)) throw new CodexNativeStateUnavailable();
-    if (existsSync(bindingPath)) {
-      const bytes = readRegular(bindingPath, 4096);
-      if (config.resumeSessionId) {
-        let binding;
-        try {
-          binding = JSON.parse(bytes.toString("utf8"));
-        } catch {
-          throw new CodexNativeStateUnavailable();
-        }
-        if (!binding || typeof binding !== "object" || Array.isArray(binding) || Object.keys(binding).sort().join(",") !== "format,key,threadId" || binding.format !== CODEX_NATIVE_STATE_FORMAT || binding.key !== key || binding.threadId !== config.resumeSessionId)
-          throw new CodexNativeStateUnavailable();
-      }
-    }
-    const home = join(stateRoot, "home");
-    if (config.resumeSessionId && !existsSync(home)) throw new CodexNativeStateUnavailable();
-    directory(home);
-    for (const subdir of ["config", "cache", "data", "tmp"]) directory(join(home, subdir));
-    if (["auth.json", ".credentials.json"].some((name) => existsSync(join(home, name))))
-      throw invalid();
-    const instructionFile = join(stateRoot, "instructions.md");
-    const instructions = [
-      ...(options.instructionFiles ?? []).map(
-        (path) => readRegular(path, 1024 * 1024).toString("utf8")
-      ),
-      ...config.systemPrompt ? [config.systemPrompt] : []
-    ].join("\n\n---\n\n");
-    const temporary = join(stateRoot, "instructions.new");
-    writeFileSync(temporary, instructions, { mode: 384, flag: "wx" });
-    renameSync(temporary, instructionFile);
-    const target = join(home, "skills");
-    if (!options.skillsDirectory && existsSync(target)) rmSync(target, { recursive: true });
-    if (options.skillsDirectory) {
-      const source = realpathSync(options.skillsDirectory);
-      if (within(target, source) || within(source, target)) throw invalid();
-      if (existsSync(target)) rmSync(target, { recursive: true });
-      let files = 0;
-      let entries = 0;
-      let bytes = 0;
-      const copy = (source2, destination) => {
-        if (++entries > 1024) throw invalid();
-        if (lstatSync(source2).isSymbolicLink()) throw invalid();
-        mkdirSync(destination, { mode: 448 });
-        for (const entry of readdirSync(source2, { withFileTypes: true })) {
-          const src = join(source2, entry.name);
-          const dst = join(destination, entry.name);
-          if (entry.isSymbolicLink()) throw invalid();
-          if (entry.isDirectory()) copy(src, dst);
-          else {
-            const content = readRegular(src, 1024 * 1024);
-            bytes += content.byteLength;
-            if (++files > 512 || bytes > 8 * 1024 * 1024) throw invalid();
-            writeFileSync(dst, content, { mode: 384, flag: "wx" });
-          }
-        }
-      };
-      copy(options.skillsDirectory, target);
-    }
-    const bindThread = (threadId) => {
-      if (!threadId || threadId.length > 4096) throw invalid();
-      const next = join(stateRoot, "binding.new");
-      writeFileSync(next, JSON.stringify({ format: CODEX_NATIVE_STATE_FORMAT, key, threadId }), {
-        mode: 384,
-        flag: "wx"
-      });
-      renameSync(next, bindingPath);
-    };
-    const setToolInstructions = (text) => {
-      writeFileSync(temporary, `${instructions}
-
-${text}`, { mode: 384, flag: "wx" });
-      renameSync(temporary, instructionFile);
-    };
-    return {
-      root,
-      stateRoot,
-      cwd,
-      home,
-      instructionFile,
-      bindThread,
-      release,
-      setToolInstructions
-    };
-  } catch (error) {
-    release();
-    throw error;
-  }
-}
-function codexInstanceEnvironment(input, home) {
-  const allowed = /* @__PURE__ */ new Set([
-    "PATH",
-    "LANG",
-    "LC_ALL",
-    "TZ",
-    "SSL_CERT_FILE",
-    "SSL_CERT_DIR",
-    "HTTPS_PROXY",
-    "HTTP_PROXY",
-    "NO_PROXY"
-  ]);
-  if (!input || Object.entries(input).some(([key, value]) => !allowed.has(key) || typeof value !== "string"))
-    throw invalid();
-  return {
-    ...input,
-    HOME: home,
-    CODEX_HOME: home,
-    XDG_CONFIG_HOME: join(home, "config"),
-    XDG_CACHE_HOME: join(home, "cache"),
-    XDG_DATA_HOME: join(home, "data"),
-    TMPDIR: join(home, "tmp")
-  };
-}
-var invalid2 = () => new Error("AI_PROFILE_INVALID");
-var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var within2 = (child, parent) => {
-  const rel = relative(parent, child);
-  return rel === "" || !rel.startsWith("../") && rel !== ".." && !isAbsolute(rel);
-};
-var hasControl = (path) => [...path].some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
-var directory2 = (path) => {
-  if (!isAbsolute(path) || hasControl(path)) throw invalid2();
-  const stat = lstatSync(path);
-  if (!stat.isDirectory() || stat.isSymbolicLink()) throw invalid2();
-  return realpathSync(path);
-};
-function prepareNativePolicy(input) {
-  const cwd = directory2(input.cwd);
-  const privateRoot = directory2(input.privateRoot);
-  const privateDirectory = directory2(input.privateDirectory);
-  if (within2(cwd, privateRoot) || within2(privateRoot, cwd) || !within2(privateDirectory, privateRoot) || privateDirectory === privateRoot || input.sandboxMode !== "read-only" && input.sandboxMode !== "workspace-write")
-    throw invalid2();
-  const stat = lstatSync(privateRoot);
-  if (stat.mode & 63 || process.getuid && stat.uid !== 0 && stat.uid !== process.getuid())
-    throw invalid2();
-  const filesystem = Object.freeze({
-    [cwd]: input.sandboxMode === "workspace-write" ? "write" : "read",
-    [privateRoot]: "deny"
-  });
-  const config = Object.freeze({
-    default_permissions: "managed",
-    features: Object.freeze({ use_legacy_landlock: false }),
-    permissions: Object.freeze({
-      managed: Object.freeze({
-        extends: ":read-only",
-        filesystem,
-        network: Object.freeze({ enabled: false })
-      })
-    })
-  });
-  const profile = `{ managed = { extends = ":read-only", filesystem = { ${Object.entries(filesystem).map(([path, access]) => `${JSON.stringify(path)} = ${JSON.stringify(access)}`).join(", ")} }, network = { enabled = false } } }`;
-  const policy = Object.freeze({
-    config,
-    cliArgs: Object.freeze([
-      "-c",
-      'default_permissions="managed"',
-      "-c",
-      "features.use_legacy_landlock=false",
-      "-c",
-      `permissions=${profile}`
-    ])
-  });
-  prepared.set(policy, { cwd, privateRoot, writable: input.sandboxMode === "workspace-write" });
-  return policy;
-}
-var prepared = /* @__PURE__ */ new WeakMap();
-var active = /* @__PURE__ */ new WeakMap();
-function activateNativeApprovalPolicy(policy, response, signal) {
-  const binding = prepared.get(policy);
-  if (!binding || signal.aborted || !record(response) || !record(response.thread) || typeof response.thread.id !== "string" || !response.thread.id || response.cwd !== binding.cwd || !record(response.activePermissionProfile) || response.activePermissionProfile.id !== "managed" || response.activePermissionProfile.extends !== ":read-only")
-    throw invalid2();
-  const token = Object.freeze({});
-  active.set(token, { ...binding, threadId: response.thread.id, signal });
-  return token;
-}
-function isNativeApprovalPolicyActive(policy, threadId) {
-  if (!record(policy)) return false;
-  const binding = active.get(policy);
-  return Boolean(binding && !binding.signal.aborted && binding.threadId === threadId);
-}
-function allowsNativeApprovalPath(policy, path, access) {
-  if (!policy) return false;
-  const binding = active.get(policy);
-  if (!binding || binding.signal.aborted || !isAbsolute(path) || hasControl(path) || access !== "read" && access !== "write" || access === "write" && !binding.writable)
-    return false;
-  try {
-    let existing = resolve(path);
-    const suffix = [];
-    while (true) {
-      try {
-        lstatSync(existing);
-        break;
-      } catch (error) {
-        if (error.code !== "ENOENT" || dirname(existing) === existing)
-          return false;
-        suffix.unshift(existing.slice(dirname(existing).length + 1));
-        existing = dirname(existing);
-      }
-    }
-    const canonical = resolve(realpathSync(existing), ...suffix);
-    return within2(canonical, binding.cwd) && !within2(canonical, binding.privateRoot);
-  } catch {
-    return false;
-  }
-}
-
-export { activateNativeApprovalPolicy, allowsNativeApprovalPath, codexInstanceEnvironment, isNativeApprovalPolicyActive, managedCodexRegistryViolation, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult, prepareCodexInstance, prepareNativePolicy };
-//# sourceMappingURL=chunk-GYPPVANR.js.map
-//# sourceMappingURL=chunk-GYPPVANR.js.map