@sleep2agi/agent-network 2.3.0-preview.11 → 2.3.0-preview.111

package/dist/bin/goal-wake-log-render.d.ts

@@ -0,0 +1,31 @@
+export interface WakeLogEntryShape {
+    ts?: string;
+    status?: string;
+    summary?: string;
+    task_id?: string;
+}
+export interface WakeLogGoalShape {
+    goal_id: string;
+    progress_log?: WakeLogEntryShape[];
+}
+export interface WakeLogRenderOpts {
+    /** Trim to the last N entries. undefined = all. */
+    tail?: number;
+}
+/**
+ * Format progress_log as a JSON object suitable for `--json` output.
+ * Pure. Never reads/writes filesystem. Legacy goals without
+ * progress_log render as empty array (not error).
+ */
+export declare function renderWakeLogJson(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): {
+    goal_id: string;
+    total: number;
+    returned: number;
+    entries: WakeLogEntryShape[];
+};
+/**
+ * Format progress_log as a table for human console output.
+ * Column layout mirrors printGoalShow so the two commands read
+ * consistently. Empty log renders a single "(none)" line, not an error.
+ */
+export declare function renderWakeLogText(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): string;

package/dist/src/active-network-task.d.ts

@@ -0,0 +1,28 @@
+export interface ActiveNetworkTask {
+    taskId: string;
+    from: string;
+    startedAt: number;
+}
+/** 运行时崩溃没来得及删标记时的兜底:超过这个年龄的标记当不存在。 */
+export declare const ACTIVE_NETWORK_TASK_MAX_AGE_MS: number;
+export declare function parseActiveNetworkTask(raw: string | null | undefined, now: number, maxAgeMs?: number): ActiveNetworkTask | null;
+export type OutboundTool = "commhub_send_task" | "commhub_send_message";
+export type OutboundRewrite = {
+    kind: "pass";
+} | {
+    kind: "progress_of_active_task";
+    taskId: string;
+    from: string;
+    text: string;
+};
+/**
+ * 只在「目标 alias 恰好是当前网络任务的发起方」时改写;发给别人的照常放行——
+ * 模型替任务派活给第三方是合法的协作,不能一刀切。
+ */
+export declare function decideOutboundRewrite(tool: OutboundTool, args: {
+    alias?: unknown;
+    task?: unknown;
+    message?: unknown;
+} | null | undefined, active: ActiveNetworkTask | null): OutboundRewrite;
+/** outbound-only 模式下模型不能自选 high(#1770 第三条):降为 normal,其余原样。 */
+export declare function clampOutboundPriority(priority: unknown, outboundOnly: boolean): "high" | "normal" | "low" | undefined;

package/dist/src/batch-workdir.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolve one batch workdir before any mkdir/chdir loop starts.
+ *
+ * Node does not expand shell tildes. Leaving `~/team` relative means every
+ * iteration can resolve it from the previous node's cwd and create paths such
+ * as `/work/~/team/~/team`. Only the current user's `~` form is supported;
+ * `~other` is rejected instead of being written as a literal directory.
+ */
+export declare function normalizeBatchWorkdir(input: string, cwd?: string, home?: string): string;

package/dist/src/bootstrap-password-db.d.ts

@@ -0,0 +1,13 @@
+export interface BootstrapPasswordUpdateInvocation {
+    argv: string[];
+    env: NodeJS.ProcessEnv;
+    script: string;
+}
+/**
+ * Resolve the database selected for the local Hub into an explicit absolute
+ * path before launching the bootstrap helper. The helper must never infer a
+ * database from its own HOME/cwd: those can differ from the parent process.
+ */
+export declare function resolveBootstrapDatabasePath(env: NodeJS.ProcessEnv, home: string, cwd: string): string;
+export declare const BOOTSTRAP_PASSWORD_UPDATE_SCRIPT: string;
+export declare function buildBootstrapPasswordUpdateInvocation(userId: string, dbPath: string, baseEnv?: NodeJS.ProcessEnv): BootstrapPasswordUpdateInvocation;

package/dist/src/channel-attachments.d.ts

@@ -0,0 +1,29 @@
+interface AttachmentDescriptor {
+    type?: unknown;
+    file_id?: unknown;
+    path?: unknown;
+    mime?: unknown;
+    name?: unknown;
+    size?: unknown;
+}
+export interface ChannelAttachmentDeps {
+    hubUrl: string;
+    authToken: string;
+    cacheDir: string;
+    fetch?: typeof fetch;
+    maxBytes?: number;
+}
+export interface ChannelAttachmentResult {
+    paths: string[];
+    failures: Array<{
+        fileId: string;
+        code: string;
+        message: string;
+    }>;
+}
+export declare function readableAttachmentsFromInbox(message: any): AttachmentDescriptor[];
+export declare function channelAttachmentCacheDir(home: string, alias: string): string;
+export declare function downloadChannelAttachments(message: any, deps: ChannelAttachmentDeps): Promise<ChannelAttachmentResult>;
+export declare const downloadChannelImageAttachments: typeof downloadChannelAttachments;
+export declare function appendChannelAttachmentPaths(content: string, paths: readonly string[]): string;
+export {};

package/dist/src/channel-meta.d.ts

@@ -0,0 +1,10 @@
+/** One inbound inbox row → the meta Claude Code renders as `<channel …>` attrs.
+ *
+ * Pure so the attribute set is assertable; it used to be inline in the SSE
+ * handler, where nothing could see it. */
+export declare function inboundChannelMeta(msg: {
+    id: string;
+    from_session?: string | null;
+    priority?: string | null;
+    created_at?: string | null;
+}): Record<string, string>;

package/dist/src/channel-task-trace.d.ts

@@ -0,0 +1,14 @@
+export declare function sendChannelTaskWithTrace(input: {
+    alias: string;
+    task: string;
+    priority?: string;
+    fromAlias: string;
+    networkId?: string | null;
+    /** Structured task metadata forwarded verbatim, e.g. { attachments: [...] }.
+     *  Omitted from the outbound body when absent, so a call without it is
+     *  unchanged. */
+    meta?: Record<string, unknown>;
+}, deps: {
+    send: (args: Record<string, unknown>) => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/claude-vendor-env.d.ts

@@ -0,0 +1,28 @@
+export declare const CLAUDE_VENDOR_ENV_KEYS: readonly ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
+export type PlainSecretEnvRewrite = {
+    key: string;
+    refName: string;
+    value: string;
+};
+/**
+ * Plan the values that the node-create writer will move into its line-oriented
+ * `.env` file. This is deliberately side-effect free: callers can run it as a
+ * preflight before creating a node directory, changing process.env, or writing
+ * config.json. Keeping the line-break rejection here makes it cover every
+ * caller of the dotenv writer, including the no-name interactive wizard.
+ */
+export declare function planPlainSecretEnvRewrites(input: {
+    env: unknown;
+    nodeId: string;
+}): PlainSecretEnvRewrite[];
+/**
+ * Persist the exact Anthropic-compatible vendor environment used by an
+ * explicit claude-agent-sdk create. Explicit --env values retain precedence;
+ * ambient shell values only fill missing known keys. Other environment values
+ * are intentionally ignored so node create never snapshots the whole shell.
+ */
+export declare function collectClaudeVendorEnvForCreate(input: {
+    runtime: string;
+    explicitEnv: readonly string[];
+    shellEnv: Readonly<Record<string, string | undefined>>;
+}): string[];

package/dist/src/cli-args.d.ts

@@ -0,0 +1,8 @@
+export type ParsedCliOptions = {
+    [key: string]: string | string[];
+    _channels: string[];
+    _envs: string[];
+};
+export declare const BOOLEAN_FLAGS: Set<string>;
+export declare function parseCliOptions(argv: string[]): ParsedCliOptions;
+export declare function positionalArgs(argv: string[]): string[];

package/dist/src/cli-version-display.d.ts

@@ -0,0 +1,16 @@
+/**
+ * #1645 —— `anet doctor` 原先对三个 runtime CLI **只检查「在不在」**:
+ *
+ *   try { execSync("codex --version", …); check("Codex CLI", true); } catch { … }
+ *
+ * 于是一个**装着、但太旧**的 CLI 会拿到一个 ✅。实测过一次:`codex-cli 0.149.1`
+ * 解不动上游 models 响应(`unknown variant \`max\``,它只认到 `xhigh`),
+ * rmcp worker 致命退出,用户看到的是 300s 超时 —— 而 doctor 说一切正常。
+ *
+ * 🔴 **这里只把版本摆出来,不做最低版本判定。**
+ *    「多少版本才够」由上游返回什么决定,不是我们能钉死的常量;猜一个下限,
+ *    会在别人升级 CLI、上游又改动之后变成误报。而一个会误报的检查,
+ *    第一周就会被人关掉。摆出实际版本,让读的人自己对得上号,是这一格
+ *    现在能诚实做到的全部。
+ */
+export declare function formatCliVersion(raw: unknown): string;

package/dist/src/client-task-trace.d.ts

@@ -0,0 +1,9 @@
+export declare function sendClientTaskWithTrace(input: {
+    alias: string;
+    fromAlias: string;
+    parentTaskId?: string | null;
+    networkId?: string | null;
+}, dependencies: {
+    send: () => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/client.js

@@ -1 +1 @@
-const a0_0x4059a6=a0_0x27f5;(function(_0x15cdca,_0x33c5b4){const _0x478268=a0_0x27f5,_0x51f030=_0x15cdca();while(!![]){try{const _0x2214d1=parseInt(_0x478268(0x1ee))/0x1+-parseInt(_0x478268(0x1d6))/0x2*(-parseInt(_0x478268(0x1db))/0x3)+parseInt(_0x478268(0x210))/0x4*(parseInt(_0x478268(0x1d4))/0x5)+parseInt(_0x478268(0x206))/0x6+-parseInt(_0x478268(0x1d2))/0x7+parseInt(_0x478268(0x1e9))/0x8*(parseInt(_0x478268(0x1dd))/0x9)+-parseInt(_0x478268(0x1da))/0xa;if(_0x2214d1===_0x33c5b4)break;else _0x51f030['push'](_0x51f030['shift']());}catch(_0x241b90){_0x51f030['push'](_0x51f030['shift']());}}}(a0_0x59e0,0x3f187));import{EventEmitter as a0_0x535c0e}from'events';import{hostname as a0_0x8960f3}from'os';class T extends a0_0x535c0e{[a0_0x4059a6(0x1f2)];[a0_0x4059a6(0x1e1)];[a0_0x4059a6(0x1f9)];[a0_0x4059a6(0x1ff)];['resumeId'];[a0_0x4059a6(0x1f1)];[a0_0x4059a6(0x209)];[a0_0x4059a6(0x211)];['sseAbort'];[a0_0x4059a6(0x1ce)]=!0x1;constructor(_0x332b50){const _0x1d936b=a0_0x4059a6;super();if(this[_0x1d936b(0x1f2)]=_0x332b50['url'][_0x1d936b(0x200)](/\/$/,''),this[_0x1d936b(0x1e1)]=_0x332b50['alias'],this[_0x1d936b(0x1f9)]=_0x332b50[_0x1d936b(0x1f9)],this[_0x1d936b(0x1ff)]=_0x332b50['agent']||_0x1d936b(0x1de),this[_0x1d936b(0x203)]=_0x1d936b(0x1d9)+_0x332b50[_0x1d936b(0x1e1)]+'-'+Date['now']()[_0x1d936b(0x1ca)](0x24),this['heartbeatInterval']=_0x332b50[_0x1d936b(0x1f1)]??0x2bf20,this[_0x1d936b(0x209)]=_0x332b50[_0x1d936b(0x209)]??0xbb8,_0x332b50[_0x1d936b(0x1eb)]!==!0x1)this[_0x1d936b(0x1d7)]();}[a0_0x4059a6(0x1e0)](_0x295217){const _0x5d9e3c=a0_0x4059a6;console[_0x5d9e3c(0x1e0)]('['+new Date()[_0x5d9e3c(0x20b)]()[_0x5d9e3c(0x1fd)](0x0,0x8)+_0x5d9e3c(0x1f0)+this[_0x5d9e3c(0x1e1)]+']\x20'+_0x295217);}async['call'](_0x311ad1,_0x4838d7){const _0x52ef0a=a0_0x4059a6;let _0x248b99={'Content-Type':_0x52ef0a(0x1f8),'Accept':_0x52ef0a(0x208)};if(this[_0x52ef0a(0x1f9)])_0x248b99[_0x52ef0a(0x1df)]=_0x52ef0a(0x204)+this[_0x52ef0a(0x1f9)];let _0x2059d2=await(await fetch(this[_0x52ef0a(0x1f2)]+_0x52ef0a(0x1e5),{'method':'POST','headers':_0x248b99,'body':JSON[_0x52ef0a(0x20a)]({'jsonrpc':'2.0','id':Date[_0x52ef0a(0x1e6)](),'method':_0x52ef0a(0x1c4),'params':{'name':_0x311ad1,'arguments':_0x4838d7}})}))[_0x52ef0a(0x1c9)](),_0x26c4a1=_0x2059d2[_0x52ef0a(0x1d1)](/data: (.+)/),_0x5a1078=_0x26c4a1?JSON[_0x52ef0a(0x1ef)](_0x26c4a1[0x1]):JSON['parse'](_0x2059d2),_0x38fd28=_0x5a1078?.[_0x52ef0a(0x1e4)]?.[_0x52ef0a(0x1cc)]?.[0x0]?.[_0x52ef0a(0x1c9)];return _0x38fd28?JSON[_0x52ef0a(0x1ef)](_0x38fd28):_0x5a1078;}async['connect'](){const _0x480e05=a0_0x4059a6;if(this['running'])return;this[_0x480e05(0x1ce)]=!0x0,await this[_0x480e05(0x1cd)](_0x480e05(0x1c2)),this[_0x480e05(0x1e0)]('registered'),this['heartbeatTimer']=setInterval(()=>{const _0x93e01c=_0x480e05;this[_0x93e01c(0x1cd)](_0x93e01c(0x1c2))[_0x93e01c(0x202)](_0x46ccbd=>this[_0x93e01c(0x1e0)]('heartbeat\x20failed:\x20'+_0x46ccbd[_0x93e01c(0x20f)]));},this[_0x480e05(0x1f1)]),this['connectSSE']();}async[a0_0x4059a6(0x1c1)](){const _0x1691e2=a0_0x4059a6;if(this['running']=!0x1,this['sseAbort']?.[_0x1691e2(0x1fe)](),this[_0x1691e2(0x211)])clearInterval(this[_0x1691e2(0x211)]);await this[_0x1691e2(0x1cd)]('offline')['catch'](()=>{}),this[_0x1691e2(0x1e0)](_0x1691e2(0x1fa));}async[a0_0x4059a6(0x1f6)](_0x27993b,_0x26abfd,_0xb43d11=a0_0x4059a6(0x1dc)){const _0x81460d=a0_0x4059a6;return this[_0x81460d(0x207)](_0x81460d(0x1cf),{'alias':_0x27993b,'task':_0x26abfd,'priority':_0xb43d11,'from_session':this[_0x81460d(0x1e1)]});}async['message'](_0x1c53a4,_0x2689bc){const _0xa4a523=a0_0x4059a6;return this[_0xa4a523(0x207)]('send_message',{'alias':_0x1c53a4,'message':_0x2689bc,'from_session':this['alias']});}async[a0_0x4059a6(0x1e2)](_0x50f553,_0x14ad02,_0x2a5143='completed'){const _0x36edf1=a0_0x4059a6;return this[_0x36edf1(0x207)]('send_reply',{'in_reply_to':_0x50f553,'text':_0x14ad02,'status':_0x2a5143});}async[a0_0x4059a6(0x1cd)](_0x80a390,_0x451e24){const _0x3c7df5=a0_0x4059a6;return this['call']('report_status',{'resume_id':this[_0x3c7df5(0x203)],'alias':this[_0x3c7df5(0x1e1)],'status':_0x80a390,'server':a0_0x8960f3(),'hostname':a0_0x8960f3(),'agent':this['agent'],'project_dir':process[_0x3c7df5(0x1c6)](),..._0x451e24});}async[a0_0x4059a6(0x1d5)](){const _0x1737ef=a0_0x4059a6;return this[_0x1737ef(0x207)](_0x1737ef(0x1f3),{});}async[a0_0x4059a6(0x20d)](_0x4b87de,_0x68abd2){const _0x18faab=a0_0x4059a6;return this['call'](_0x18faab(0x20d),{'message':_0x4b87de,'filter_server':_0x68abd2?.['server'],'filter_status':_0x68abd2?.[_0x18faab(0x1cd)]});}async['connectSSE'](){const _0x49128a=a0_0x4059a6;let _0x1575e4=encodeURIComponent(this['alias']),_0xc8d3ba=this[_0x49128a(0x1f2)]+'/events/'+_0x1575e4,_0x5e1288=this[_0x49128a(0x209)];while(this['running']){try{this['sseAbort']=new AbortController();let _0x19f575={'Accept':_0x49128a(0x1ea)};if(this['token'])_0x19f575[_0x49128a(0x1df)]='Bearer\x20'+this['token'];let _0x24d6f5=await fetch(_0xc8d3ba,{'headers':_0x19f575,'signal':this[_0x49128a(0x1fb)][_0x49128a(0x205)]});if(!_0x24d6f5['ok']||!_0x24d6f5['body']){this[_0x49128a(0x1e0)](_0x49128a(0x201)+_0x24d6f5[_0x49128a(0x1cd)]),await this[_0x49128a(0x1fc)](_0x5e1288),_0x5e1288=Math[_0x49128a(0x1c5)](_0x5e1288*1.5,0xea60);continue;}_0x5e1288=this[_0x49128a(0x209)];let _0x5c3cf4=_0x24d6f5['body'][_0x49128a(0x1d0)](),_0x1caacd=new TextDecoder(),_0x486e6e='';while(this['running']){let {done:_0x1d8055,value:_0x4606df}=await _0x5c3cf4[_0x49128a(0x1c3)]();if(_0x1d8055)break;_0x486e6e+=_0x1caacd['decode'](_0x4606df,{'stream':!0x0});let _0xad8b1=_0x486e6e['split']('\x0a');_0x486e6e=_0xad8b1[_0x49128a(0x1d8)]()||'';for(let _0x5cc51a of _0xad8b1){if(!_0x5cc51a[_0x49128a(0x20e)](_0x49128a(0x1f7)))continue;try{let _0x5081d2=JSON['parse'](_0x5cc51a[_0x49128a(0x1fd)](0x6));if(_0x5081d2[_0x49128a(0x1ec)]===_0x49128a(0x1cb)){this[_0x49128a(0x1e0)](_0x49128a(0x1c8)),this[_0x49128a(0x1d3)](_0x49128a(0x1cb));continue;}if(_0x5081d2[_0x49128a(0x1ec)]==='new_task'||_0x5081d2['type']===_0x49128a(0x1e3)||_0x5081d2[_0x49128a(0x1ec)]===_0x49128a(0x20d))await this[_0x49128a(0x1f4)]();}catch{}}}}catch(_0x9f64eb){if(_0x9f64eb['name']==='AbortError')break;this[_0x49128a(0x1d3)]('error',_0x9f64eb),this[_0x49128a(0x1e0)](_0x49128a(0x1e7)+_0x9f64eb[_0x49128a(0x20f)]);}if(this['running'])this[_0x49128a(0x1d3)](_0x49128a(0x1fa)),this[_0x49128a(0x1e0)](_0x49128a(0x1ed)+_0x5e1288/0x3e8+_0x49128a(0x1f5)),await this[_0x49128a(0x1fc)](_0x5e1288),_0x5e1288=Math['min'](_0x5e1288*1.5,0xea60);}}async['processInbox'](){const _0x3f58b6=a0_0x4059a6;try{let _0x565345=(await this[_0x3f58b6(0x207)](_0x3f58b6(0x1c7),{'alias':this[_0x3f58b6(0x1e1)],'limit':0xa}))?.['messages']||[];for(let _0x2ec321 of _0x565345)await this['call'](_0x3f58b6(0x20c),{'alias':this[_0x3f58b6(0x1e1)],'message_id':_0x2ec321['id']}),this['log']('←\x20'+_0x2ec321['from_session']+':\x20'+_0x2ec321[_0x3f58b6(0x1cc)]['slice'](0x0,0x3c)),this[_0x3f58b6(0x1d3)]('task',_0x2ec321),this[_0x3f58b6(0x1d3)]('message',_0x2ec321);}catch(_0x54eb28){this[_0x3f58b6(0x1e0)](_0x3f58b6(0x1e8)+_0x54eb28[_0x3f58b6(0x20f)]);}}[a0_0x4059a6(0x1fc)](_0x59d1f3){return new Promise(_0x175e80=>setTimeout(_0x175e80,_0x59d1f3));}}function a0_0x27f5(_0x46f7fb,_0x5cfedd){_0x46f7fb=_0x46f7fb-0x1c1;const _0x59e05e=a0_0x59e0();let _0x27f5cf=_0x59e05e[_0x46f7fb];return _0x27f5cf;}var $=T;export{$ as default,T as CommHub};function a0_0x59e0(){const _0x18b957=['12MZNXgz','heartbeatTimer','disconnect','idle','read','tools/call','min','cwd','get_inbox','SSE\x20connected','text','toString','connected','content','status','running','send_task','getReader','match','1724037tyLDEM','emit','87585gvKJbd','getAllStatus','42892KhZtrm','connect','pop','sdk-','6010190EZalRW','21nTlVZe','normal','9xUexcv','sdk','Authorization','log','alias','reply','new_message','result','/mcp','now','SSE\x20error:\x20','inbox\x20error:\x20','1390168FnahBL','text/event-stream','autoConnect','type','SSE\x20reconnecting\x20in\x20','427813GXMJxk','parse',']\x20[commhub:','heartbeatInterval','url','get_all_status','processInbox','s...','send','data:\x20','application/json','token','disconnected','sseAbort','sleep','slice','abort','agent','replace','SSE\x20failed:\x20','catch','resumeId','Bearer\x20','signal','1808952fKTtBp','call','application/json,\x20text/event-stream','reconnectDelay','stringify','toTimeString','ack_inbox','broadcast','startsWith','message'];a0_0x59e0=function(){return _0x18b957;};return a0_0x59e0();}
+function a0_0x3382(){const _0xea0559=['SSE\x20failed:\x20','get_all_status','alias','abort','task.started','\x20duration_ms=','type','SSE\x20error:\x20','send','disconnected','data:\x20','AbortError','from_alias','615156FSeCEu','catch','s...','offline','heartbeatInterval','min','replace','text/event-stream','processInbox','\x20parent_task_id=','content','network_id','transport','parent_task_id','running','sseAbort','tools/call','connected','error','autoConnect','<pending>','application/json','CommHub\x20response\x20omitted\x20task_id','sleep','1723156XqVmlz','15794001rlVHYF','connectSSE','report_status','to_alias','new_message','task','broadcast','78qkZQEO','Authorization','\x20from=','cwd','task.expired','reconnectDelay','8568959otsEhV','slice','message','<unknown>','Bearer\x20','registered','SSE\x20reconnecting\x20in\x20','call','task.ack','signal','[REDACTED]','connect','fromAlias','application/json,\x20text/event-stream','\x20task_id=','\x20transport=','token','message_id','[commhub:task]\x20','missing_task_id','agent','inbox\x20error:\x20','6880405jcVnQQ','match','normal','5431482VZAhXy','2.0','\x20network_id=','/mcp','status','toTimeString','now','split','task_id','text','read','mcp_http','ack_inbox','parse','failed','startsWith','reply',']\x20[commhub:','POST','server','8hqXtQN','<missing>','getAllStatus','\x20to=','name','delivered','resumeId','unknown\x20error','97580CTmIxV','heartbeatTimer','send_failed','error_code','\x20error=','getReader','error_message','pop','send_task','get_inbox','disconnect','task.send.start','url','log','task.send.delivered','CommHub\x20rejected\x20task','emit','body','completed','stringify','duration_ms','string'];a0_0x3382=function(){return _0xea0559;};return a0_0x3382();}const a0_0x27e4e3=a0_0x1e42;function a0_0x1e42(_0xf905eb,_0x779b8d){_0xf905eb=_0xf905eb-0x12a;const _0x3382e0=a0_0x3382();let _0x1e4297=_0x3382e0[_0xf905eb];return _0x1e4297;}(function(_0x90da6,_0x3e6638){const _0x36ca51=a0_0x1e42,_0x20cd61=_0x90da6();while(!![]){try{const _0x562b6b=-parseInt(_0x36ca51(0x198))/0x1+-parseInt(_0x36ca51(0x132))/0x2+parseInt(_0x36ca51(0x13a))/0x3*(parseInt(_0x36ca51(0x175))/0x4)+parseInt(_0x36ca51(0x156))/0x5+parseInt(_0x36ca51(0x159))/0x6+parseInt(_0x36ca51(0x140))/0x7+parseInt(_0x36ca51(0x16d))/0x8*(-parseInt(_0x36ca51(0x133))/0x9);if(_0x562b6b===_0x3e6638)break;else _0x20cd61['push'](_0x20cd61['shift']());}catch(_0x21f0e5){_0x20cd61['push'](_0x20cd61['shift']());}}}(a0_0x3382,0xddb50));import{EventEmitter as a0_0x542b01}from'events';import{hostname as a0_0x4e6936}from'os';var K=/(?:atok|ntok|utok|ghp|github_pat)_[A-Za-z0-9_-]+|Bearer\s+\S+/gi,L=(_0xd41c9c,_0x182e26)=>(_0xd41c9c??_0x182e26)[a0_0x27e4e3(0x19e)](/[\r\n\x00-\x1f\x7f]/g,'\x20')['slice'](0x0,0xf0);function N(_0x467dfc){const _0x95e0ae=a0_0x27e4e3;return(_0x467dfc instanceof Error?_0x467dfc[_0x95e0ae(0x142)]:String(_0x467dfc??_0x95e0ae(0x174)))[_0x95e0ae(0x19e)](K,_0x95e0ae(0x14a))['replace'](/[\r\n\x00-\x1f\x7f]/g,'\x20')[_0x95e0ae(0x141)](0x0,0xf0);}function O(_0x1fe4e9,_0x5b6f2d=process.env.ANET_TASK_TRACE_FORMAT==='json'){const _0x2037b8=a0_0x27e4e3;if(_0x5b6f2d)return JSON[_0x2037b8(0x188)](_0x1fe4e9);let _0x478d57=L(_0x1fe4e9[_0x2037b8(0x1a5)],_0x2037b8(0x16e)),_0x3273e3=L(_0x1fe4e9['task_id'],_0x2037b8(0x12e)),_0x36f482=_0x1fe4e9[_0x2037b8(0x178)]?_0x2037b8(0x179)+_0x1fe4e9['error_code']+':'+(_0x1fe4e9[_0x2037b8(0x17b)]??''):'';return _0x2037b8(0x152)+_0x1fe4e9[_0x2037b8(0x15d)]+_0x2037b8(0x13c)+L(_0x1fe4e9[_0x2037b8(0x197)],_0x2037b8(0x143))+_0x2037b8(0x170)+L(_0x1fe4e9[_0x2037b8(0x136)],_0x2037b8(0x143))+_0x2037b8(0x14e)+_0x3273e3+_0x2037b8(0x1a1)+_0x478d57+_0x2037b8(0x15b)+L(_0x1fe4e9[_0x2037b8(0x1a3)],_0x2037b8(0x143))+_0x2037b8(0x14f)+_0x1fe4e9['transport']+_0x2037b8(0x190)+_0x1fe4e9[_0x2037b8(0x189)]+'\x20lifecycle='+_0x1fe4e9['lifecycle_tracking']+_0x36f482;}function U(_0x5f36ca){const _0x480a19=a0_0x27e4e3;return{'event':{'sending':_0x480a19(0x180),'delivered':_0x480a19(0x183),'failed':'task.send.failed','acked':_0x480a19(0x148),'started':_0x480a19(0x18f),'replied':'task.replied','expired':_0x480a19(0x13e)}[_0x5f36ca[_0x480a19(0x15d)]],..._0x5f36ca};}function j(_0x256d22){const _0x32f770=a0_0x27e4e3;let _0x29aa0d=_0x256d22?.[_0x32f770(0x161)]||_0x256d22?.[_0x32f770(0x151)]||_0x256d22?.['id'];if(_0x29aa0d)return String(_0x29aa0d);let _0x3ee371=_0x256d22?.['content']?.[0x0]?.[_0x32f770(0x162)];if(typeof _0x3ee371!==_0x32f770(0x18a))return null;try{let _0x2ff83b=JSON[_0x32f770(0x166)](_0x3ee371);return _0x2ff83b?.[_0x32f770(0x161)]||_0x2ff83b?.[_0x32f770(0x151)]||_0x2ff83b?.['id']||null;}catch{return null;}}async function X(_0x52d832,_0x2485e7){const _0x573433=a0_0x27e4e3;let _0x198397=_0x2485e7[_0x573433(0x15f)]??Date[_0x573433(0x15f)],_0x4ac56e=_0x198397(),_0x129730=(_0x476382,_0xaee3ff,_0x43cbc7,_0x3c4187)=>{const _0x2cae9a=_0x573433;_0x2485e7['log'](O(U({'from_alias':_0x52d832[_0x2cae9a(0x14c)],'to_alias':_0x52d832['toAlias'],'task_id':_0xaee3ff,'parent_task_id':_0x52d832['parentTaskId'],'network_id':_0x52d832['networkId'],'transport':_0x52d832[_0x2cae9a(0x1a4)],'status':_0x476382,'duration_ms':_0x198397()-_0x4ac56e,'lifecycle_tracking':_0x52d832['lifecycleTracking'],..._0x43cbc7!==void 0x0?{'error_code':_0x3c4187||_0x2cae9a(0x177),'error_message':N(_0x43cbc7)}:{}})));};_0x129730('sending',null);try{let _0x30edb7=await _0x2485e7['send'](),_0x5ba6a8=j(_0x30edb7);if(_0x5ba6a8)_0x129730(_0x573433(0x172),_0x5ba6a8);else{if(_0x30edb7?.['ok']===!0x1||_0x30edb7?.[_0x573433(0x12c)])_0x129730(_0x573433(0x167),_0x5ba6a8,_0x30edb7?.['error']||_0x573433(0x184),'send_rejected');else _0x129730('failed',null,_0x573433(0x130),_0x573433(0x153));}return _0x30edb7;}catch(_0x29d035){throw _0x129730(_0x573433(0x167),null,_0x29d035,_0x573433(0x177)),_0x29d035;}}async function Y(_0xe417af,_0x359cab){const _0x4fe36a=a0_0x27e4e3;return X({'fromAlias':_0xe417af[_0x4fe36a(0x14c)],'toAlias':_0xe417af['alias'],'parentTaskId':_0xe417af['parentTaskId']||null,'networkId':_0xe417af['networkId']||null,'transport':_0x4fe36a(0x164),'lifecycleTracking':'not_tracked'},_0x359cab);}class $ extends a0_0x542b01{['url'];[a0_0x27e4e3(0x18d)];['token'];['agent'];[a0_0x27e4e3(0x173)];['heartbeatInterval'];[a0_0x27e4e3(0x13f)];[a0_0x27e4e3(0x176)];[a0_0x27e4e3(0x1a7)];[a0_0x27e4e3(0x1a6)]=!0x1;constructor(_0x47a35f){const _0x175230=a0_0x27e4e3;super();if(this[_0x175230(0x181)]=_0x47a35f[_0x175230(0x181)][_0x175230(0x19e)](/\/$/,''),this[_0x175230(0x18d)]=_0x47a35f['alias'],this[_0x175230(0x150)]=_0x47a35f['token'],this[_0x175230(0x154)]=_0x47a35f['agent']||'sdk',this[_0x175230(0x173)]='sdk-'+_0x47a35f[_0x175230(0x18d)]+'-'+Date[_0x175230(0x15f)]()['toString'](0x24),this[_0x175230(0x19c)]=_0x47a35f[_0x175230(0x19c)]??0x2bf20,this['reconnectDelay']=_0x47a35f[_0x175230(0x13f)]??0xbb8,_0x47a35f[_0x175230(0x12d)]!==!0x1)this[_0x175230(0x14b)]();}['log'](_0x143e0c){const _0x2563ab=a0_0x27e4e3;console['log']('['+new Date()[_0x2563ab(0x15e)]()[_0x2563ab(0x141)](0x0,0x8)+_0x2563ab(0x16a)+this[_0x2563ab(0x18d)]+']\x20'+_0x143e0c);}async[a0_0x27e4e3(0x147)](_0x4e3448,_0x368953){const _0x225fc6=a0_0x27e4e3;let _0x12b58d={'Content-Type':_0x225fc6(0x12f),'Accept':_0x225fc6(0x14d)};if(this[_0x225fc6(0x150)])_0x12b58d[_0x225fc6(0x13b)]=_0x225fc6(0x144)+this[_0x225fc6(0x150)];let _0x4e4719=await(await fetch(this[_0x225fc6(0x181)]+_0x225fc6(0x15c),{'method':_0x225fc6(0x16b),'headers':_0x12b58d,'body':JSON[_0x225fc6(0x188)]({'jsonrpc':_0x225fc6(0x15a),'id':Date[_0x225fc6(0x15f)](),'method':_0x225fc6(0x12a),'params':{'name':_0x4e3448,'arguments':_0x368953}})}))[_0x225fc6(0x162)](),_0x35c021=_0x4e4719[_0x225fc6(0x157)](/data: (.+)/),_0x1ca6f3=_0x35c021?JSON['parse'](_0x35c021[0x1]):JSON[_0x225fc6(0x166)](_0x4e4719),_0x346011=_0x1ca6f3?.['result']?.['content']?.[0x0]?.['text'];return _0x346011?JSON[_0x225fc6(0x166)](_0x346011):_0x1ca6f3;}async[a0_0x27e4e3(0x14b)](){const _0x52f34f=a0_0x27e4e3;if(this[_0x52f34f(0x1a6)])return;this['running']=!0x0,await this[_0x52f34f(0x15d)]('idle'),this['log'](_0x52f34f(0x145)),this['heartbeatTimer']=setInterval(()=>{const _0x4ffac7=_0x52f34f;this[_0x4ffac7(0x15d)]('idle')[_0x4ffac7(0x199)](_0x39cf5f=>this[_0x4ffac7(0x182)]('heartbeat\x20failed:\x20'+_0x39cf5f[_0x4ffac7(0x142)]));},this['heartbeatInterval']),this[_0x52f34f(0x134)]();}async[a0_0x27e4e3(0x17f)](){const _0x26df7f=a0_0x27e4e3;if(this[_0x26df7f(0x1a6)]=!0x1,this[_0x26df7f(0x1a7)]?.[_0x26df7f(0x18e)](),this[_0x26df7f(0x176)])clearInterval(this[_0x26df7f(0x176)]);await this[_0x26df7f(0x15d)](_0x26df7f(0x19b))[_0x26df7f(0x199)](()=>{}),this[_0x26df7f(0x182)](_0x26df7f(0x194));}async[a0_0x27e4e3(0x193)](_0x1dba3f,_0x52e665,_0x199b24=a0_0x27e4e3(0x158)){const _0x57d499=a0_0x27e4e3;return Y({'alias':_0x1dba3f,'fromAlias':this[_0x57d499(0x18d)]},{'log':_0x285353=>console['log'](_0x285353),'send':()=>this[_0x57d499(0x147)](_0x57d499(0x17d),{'alias':_0x1dba3f,'task':_0x52e665,'priority':_0x199b24,'from_session':this[_0x57d499(0x18d)]})});}async[a0_0x27e4e3(0x142)](_0x45e0c9,_0x23c08e){const _0x257c5b=a0_0x27e4e3;return this[_0x257c5b(0x147)]('send_message',{'alias':_0x45e0c9,'message':_0x23c08e,'from_session':this[_0x257c5b(0x18d)]});}async[a0_0x27e4e3(0x169)](_0x5d6985,_0xc2b49a,_0x3c4097=a0_0x27e4e3(0x187)){const _0x5db0db=a0_0x27e4e3;return this[_0x5db0db(0x147)]('send_reply',{'in_reply_to':_0x5d6985,'text':_0xc2b49a,'status':_0x3c4097});}async['status'](_0x224fad,_0x20c9bc){const _0x5021ac=a0_0x27e4e3;return this[_0x5021ac(0x147)](_0x5021ac(0x135),{'resume_id':this['resumeId'],'alias':this[_0x5021ac(0x18d)],'status':_0x224fad,'server':a0_0x4e6936(),'hostname':a0_0x4e6936(),'agent':this[_0x5021ac(0x154)],'project_dir':process[_0x5021ac(0x13d)](),..._0x20c9bc});}async[a0_0x27e4e3(0x16f)](){const _0x3d86a9=a0_0x27e4e3;return this['call'](_0x3d86a9(0x18c),{});}async[a0_0x27e4e3(0x139)](_0x227c4d,_0x4f718c){const _0x274cb4=a0_0x27e4e3;return this[_0x274cb4(0x147)](_0x274cb4(0x139),{'message':_0x227c4d,'filter_server':_0x4f718c?.[_0x274cb4(0x16c)],'filter_status':_0x4f718c?.[_0x274cb4(0x15d)]});}async[a0_0x27e4e3(0x134)](){const _0x573bb9=a0_0x27e4e3;let _0x59b837=encodeURIComponent(this['alias']),_0xc4b6a8=this[_0x573bb9(0x181)]+'/events/'+_0x59b837,_0x210804=this['reconnectDelay'];while(this[_0x573bb9(0x1a6)]){try{this[_0x573bb9(0x1a7)]=new AbortController();let _0x5814c0={'Accept':_0x573bb9(0x19f)};if(this['token'])_0x5814c0[_0x573bb9(0x13b)]=_0x573bb9(0x144)+this[_0x573bb9(0x150)];let _0x514cde=await fetch(_0xc4b6a8,{'headers':_0x5814c0,'signal':this[_0x573bb9(0x1a7)][_0x573bb9(0x149)]});if(!_0x514cde['ok']||!_0x514cde[_0x573bb9(0x186)]){this['log'](_0x573bb9(0x18b)+_0x514cde[_0x573bb9(0x15d)]),await this[_0x573bb9(0x131)](_0x210804),_0x210804=Math[_0x573bb9(0x19d)](_0x210804*1.5,0xea60);continue;}_0x210804=this[_0x573bb9(0x13f)];let _0x26fe44=_0x514cde['body'][_0x573bb9(0x17a)](),_0x98b346=new TextDecoder(),_0x1edf3b='';while(this[_0x573bb9(0x1a6)]){let {done:_0x27f79b,value:_0x1b5147}=await _0x26fe44[_0x573bb9(0x163)]();if(_0x27f79b)break;_0x1edf3b+=_0x98b346['decode'](_0x1b5147,{'stream':!0x0});let _0x576a7e=_0x1edf3b[_0x573bb9(0x160)]('\x0a');_0x1edf3b=_0x576a7e[_0x573bb9(0x17c)]()||'';for(let _0x4e2b06 of _0x576a7e){if(!_0x4e2b06[_0x573bb9(0x168)](_0x573bb9(0x195)))continue;try{let _0x3ce523=JSON[_0x573bb9(0x166)](_0x4e2b06[_0x573bb9(0x141)](0x6));if(_0x3ce523['type']===_0x573bb9(0x12b)){this[_0x573bb9(0x182)]('SSE\x20connected'),this['emit'](_0x573bb9(0x12b));continue;}if(_0x3ce523[_0x573bb9(0x191)]==='new_task'||_0x3ce523[_0x573bb9(0x191)]===_0x573bb9(0x137)||_0x3ce523[_0x573bb9(0x191)]===_0x573bb9(0x139))await this[_0x573bb9(0x1a0)]();}catch{}}}}catch(_0x4e6e0f){if(_0x4e6e0f[_0x573bb9(0x171)]===_0x573bb9(0x196))break;this[_0x573bb9(0x185)](_0x573bb9(0x12c),_0x4e6e0f),this[_0x573bb9(0x182)](_0x573bb9(0x192)+_0x4e6e0f['message']);}if(this[_0x573bb9(0x1a6)])this[_0x573bb9(0x185)](_0x573bb9(0x194)),this['log'](_0x573bb9(0x146)+_0x210804/0x3e8+_0x573bb9(0x19a)),await this[_0x573bb9(0x131)](_0x210804),_0x210804=Math[_0x573bb9(0x19d)](_0x210804*1.5,0xea60);}}async[a0_0x27e4e3(0x1a0)](){const _0x497900=a0_0x27e4e3;try{let _0x1208ed=(await this[_0x497900(0x147)](_0x497900(0x17e),{'alias':this[_0x497900(0x18d)],'limit':0xa}))?.['messages']||[];for(let _0x25d0c0 of _0x1208ed)await this[_0x497900(0x147)](_0x497900(0x165),{'alias':this[_0x497900(0x18d)],'message_id':_0x25d0c0['id']}),this[_0x497900(0x182)]('←\x20'+_0x25d0c0['from_session']+':\x20'+_0x25d0c0[_0x497900(0x1a2)][_0x497900(0x141)](0x0,0x3c)),this[_0x497900(0x185)](_0x497900(0x138),_0x25d0c0),this[_0x497900(0x185)](_0x497900(0x142),_0x25d0c0);}catch(_0x36ea44){this['log'](_0x497900(0x155)+_0x36ea44['message']);}}[a0_0x27e4e3(0x131)](_0x111f88){return new Promise(_0x1cf202=>setTimeout(_0x1cf202,_0x111f88));}}var F=$;export{F as default,$ as CommHub};

package/dist/src/codex-auth-fingerprint.d.ts

@@ -0,0 +1,211 @@
+/** Per-node record, written into the node dir next to the other state files. */
+export declare const CODEX_AUTH_FINGERPRINT_FILE = ".codex-auth-fingerprint.json";
+/**
+ * Host-wide index of the same records — the read side's source of truth.
+ *
+ * Under `~/.anet/` because that is already this repo's host-scoped state
+ * directory (global config lives there) and it does not move with `cwd`, which
+ * is the entire point: the nodes that need to see each other are in different
+ * workspaces.
+ */
+export declare function codexFingerprintIndexDir(home?: string): string;
+/**
+ * Index filename for a node.
+ *
+ * 🔴 Derived from the node's DIRECTORY, never its alias. Aliases are not unique
+ *    across workspaces — the reference fleet runs a node beside its own `2号`
+ *    twin, and nothing stops two workspaces from using one name — so an
+ *    alias-keyed file would let one node silently overwrite another's record,
+ *    re-creating the very blindness this index fixes. A directory cannot be two
+ *    nodes.
+ *
+ * 🔴 And derived from the directory rather than from `node_id`, even though the
+ *    CLI has one handy: agent-node's `NODE_ID` can be empty (older configs), so
+ *    a node_id key would need a fallback — and then the same node would write
+ *    one filename from one launch path and a different one from the other,
+ *    leaving two records that look like two nodes sharing a credential. One
+ *    deterministic key from an input both call sites already have is worth more
+ *    than a prettier name. `node_id` is still recorded, for humans.
+ */
+export declare function codexFingerprintIndexFile(nodeDir: string): string;
+/** Length of the stored fingerprint. Collisions at 8 hex are ~1 in 4 billion;
+ *  a false "these two share a login" warning costs a second look, while the
+ *  value staying short keeps it obviously non-reversible in logs. */
+export declare const FINGERPRINT_LENGTH = 8;
+/** Access tokens measured on the reference fleet: `exp - iat` was exactly this,
+ *  on 29 of 29 samples, with no jitter. Used only to phrase "how long until the
+ *  shared copy dies" when we have an `exp` but no `iat`. */
+export declare const ACCESS_TOKEN_LIFETIME_SECONDS = 864000;
+/** Past this, a published record's age is shown beside the alias. It does not
+ *  suppress the warning: a node that has not started in a week still holds the
+ *  shared credential. See the liveness note on `checkCodexCredentialSharing`. */
+export declare const STALE_RECORD_NOTICE_MS: number;
+export interface CodexAuthFingerprintRecord {
+    readonly schema_version: 1 | 2 | 3;
+    readonly alias: string;
+    /** sha256(refresh_token) truncated — never the token. */
+    readonly fingerprint: string;
+    readonly written_at: string;
+    /** v2: when this copy's ACCESS token expires, ISO-8601, or null if unreadable.
+     *  A timestamp, not a credential. Two nodes holding one copied file share this
+     *  instant exactly — which is how "they stop together" becomes observable. */
+    readonly access_expires_at?: string | null;
+    /** v2: the CODEX_HOME this record was read from. Distinguishes "two copies of
+     *  one credential" from "two nodes pointed at one directory", which need
+     *  different fixes. */
+    readonly codex_home?: string | null;
+    /** v3: the node directory this record describes, canonical. Three jobs: it is
+     *  the identity used to de-duplicate the index against the sibling scan and to
+     *  exclude self; and it is the liveness test — if this directory is gone, the
+     *  node is gone and the record must not accuse anyone. */
+    readonly node_dir?: string;
+    /** v3: recorded for humans reading the index by hand. Never the key: it can be
+     *  absent, and a key that is sometimes absent produces two records per node. */
+    readonly node_id?: string | null;
+}
+/**
+ * Hash the refresh token out of an auth.json body.
+ *
+ * Accepts both shapes seen in the wild: the current codex layout nests it
+ * under `tokens` (`{auth_mode, tokens:{id_token, access_token, refresh_token,
+ * account_id}, last_refresh}`), and older/plain bodies put `refresh_token` at
+ * the top level. Anything else — unparsable, absent, empty, non-string —
+ * returns null, because "we cannot tell" must not be reported as "no
+ * collision".
+ */
+export declare function fingerprintRefreshToken(authJsonText: string): string | null;
+/**
+ * When this copy's access token expires, read out of the JWT's own payload.
+ *
+ * The signature is NOT verified and nothing here authenticates: we are reading
+ * a timestamp the token states about itself, the same way `jwt.io` would. A
+ * token that is not a JWT, or carries no numeric `exp`, yields null — unknown
+ * stays unknown.
+ */
+export declare function accessTokenExpiry(authJsonText: string): Date | null;
+export interface NodeFingerprint {
+    readonly alias: string;
+    /** null when the node has no auth.json, or one we could not read. */
+    readonly fingerprint: string | null;
+    /** When the record was written; used to say how stale a claim is. */
+    readonly writtenAt?: string | null;
+    /** When this copy's access token expires, if we could read it. */
+    readonly accessExpiresAt?: Date | null;
+    /** The CODEX_HOME this fingerprint came from, if known. */
+    readonly codexHome?: string | null;
+    /** Canonical node directory — identity for de-duplication and self-exclusion. */
+    readonly nodeDir?: string | null;
+}
+/**
+ * Other nodes holding the same credential chain as `self`.
+ *
+ * Records with no fingerprint are skipped rather than grouped: "unknown" is
+ * not a match.
+ *
+ * 🔴 Self is excluded by node DIRECTORY when both sides carry one, and only
+ *    falls back to alias for pre-v3 records. Once the read side is host-wide,
+ *    alias stops being an identity: two workspaces may each hold a node called
+ *    the same thing, and excluding by name would hide a genuine collision
+ *    between them — the exact failure this index was added to fix.
+ */
+export declare function collidingNodes(records: readonly NodeFingerprint[], self: NodeFingerprint): NodeFingerprint[];
+/**
+ * The warning an operator sees at start. Returns [] when nothing collides —
+ * callers print exactly what they get, so silence is representable and the
+ * "no collision" path cannot accidentally print a scary empty banner.
+ *
+ * Deliberately a warning and never a refusal: every node on a host shares one
+ * login today, so refusing to start would take the whole box down at once
+ * over a condition that is survivable until the next refresh.
+ *
+ * 🔴 Two outcomes, and the wrong one is actively misleading. The default text
+ *    ("whichever node refreshes first keeps working") assumes refresh WORKS.
+ *    On a host that cannot reach the OAuth token endpoint — egress blocked, or
+ *    a proxy that allowlists the model API and 403s everything else — nobody
+ *    refreshes, and the nodes holding one copy do not degrade one at a time:
+ *    they stop together the moment the shared access token expires. Field case:
+ *    three nodes whose auth.json files were byte-identical, carrying one access
+ *    token, all expired at the same instant.
+ *
+ *    We do NOT probe the network to tell these apart — a start path is the wrong
+ *    place to open a socket, and a probe would answer for this moment rather
+ *    than for the window that matters. We branch on evidence already in the
+ *    file: an access token whose `exp` has passed is a copy that demonstrably
+ *    stopped being refreshed, which is the observable the field case exhibits.
+ *    When `exp` is still in the future we cannot prove reachability either way,
+ *    and the default wording is the right one to print.
+ */
+export declare function sharedCredentialWarningLines(self: NodeFingerprint, colliding: readonly NodeFingerprint[], now?: Date): string[];
+/**
+ * Two different things both read as "codex cannot refresh", and they need
+ * opposite remedies. Telling them apart is the whole value of this mapping:
+ * treating a transport failure as a rotation conflict sends an operator to
+ * copy someone else's auth.json, which is precisely how a shared-credential
+ * chain gets created.
+ */
+export type CodexRefreshFailureKind = 
+/** Someone else spent this refresh token first. */
+"rotation-conflict"
+/** The token endpoint is unreachable — nobody's token is rotating. */
+ | "token-endpoint-unreachable";
+export interface CodexRefreshFailure {
+    readonly kind: CodexRefreshFailureKind;
+    readonly lines: string[];
+}
+/**
+ * Name what actually went wrong with a codex refresh, and say what to do.
+ *
+ * Returns null for anything else, so callers fall through to whatever they
+ * printed before — an unrelated error must pass through unchanged.
+ *
+ * Order matters: a reuse rejection is a server answer and is checked first; a
+ * transport failure means no answer arrived at all.
+ */
+export declare function describeCodexRefreshFailure(text: string, colliding?: readonly NodeFingerprint[]): CodexRefreshFailure | null;
+export interface CodexCredentialSharingCheck {
+    /** This node's own directory — where its record is written. */
+    readonly nodeDir: string;
+    /** Shown to the operator; also how a node recognises its own record. */
+    readonly alias: string;
+    /** The CODEX_HOME whose auth.json this node will actually use. */
+    readonly codexHome: string;
+    /** Recorded for humans reading the index; never used as a key. Optional
+     *  because agent-node's can be empty on older configs. */
+    readonly nodeId?: string | null;
+    /** Where the warning goes. Defaults to stderr. */
+    readonly say?: (message: string) => void;
+    /** Injected for tests; production passes nothing. */
+    readonly now?: Date;
+    /** Injected for tests; production uses the real host index under `~/.anet`. */
+    readonly indexDir?: string;
+}
+/**
+ * The whole operation: read this node's credential, publish an 8-hex record,
+ * read what the *other* nodes published, and warn if any of them is on the
+ * same chain. Returns the colliding nodes so a caller can name them again if
+ * codex later fails to refresh.
+ *
+ * 🔴 Reads the neighbours' published fingerprint files, never their
+ *    credentials. A guard against credential sharing must not itself become a
+ *    reason to open every node's auth.json.
+ *
+ * 🔴 Always recomputes. The fingerprint changes every time codex refreshes in
+ *    place, so a stale record is a wrong answer; both call paths may run for
+ *    one node in sequence, and whichever runs last must leave the current
+ *    value, never an older one.
+ *
+ * 🔴 Liveness is EXISTENCE, not age. An index record outlives the node that
+ *    wrote it, and a stale one accusing a node that no longer exists is worse
+ *    than silence — it teaches operators to ignore the warning. So a record
+ *    whose `node_dir` is gone is dropped and its index entry deleted.
+ *    Age deliberately does NOT filter: on the reference fleet two of the three
+ *    nodes in the worst-affected group were not running at all, and six of 29
+ *    credential files had not been touched in days, while still holding the
+ *    shared copy. An age cutoff would have hidden precisely the collisions
+ *    worth reporting. Age is surfaced in the warning instead, so the operator
+ *    can judge how old the claim is.
+ *
+ * Never throws and never refuses: observability must not be the reason a node
+ * will not start.
+ */
+export declare function checkCodexCredentialSharing(opts: CodexCredentialSharingCheck): NodeFingerprint[];

package/dist/src/codex-copresence-preflight.d.ts

@@ -0,0 +1,65 @@
+export interface CodexHomeInheritedFile {
+    readonly name: string;
+    readonly mode: number;
+    /** Why a node needs it — printed when staged, so the action is legible. */
+    readonly because: string;
+}
+export declare const CODEX_HOME_INHERITED_FILES: readonly CodexHomeInheritedFile[];
+export interface StatLike {
+    readonly mtimeMs: number;
+}
+export type StatFn = (path: string) => StatLike | null;
+export interface CodexHomeStageStep {
+    readonly name: string;
+    readonly src: string;
+    readonly dst: string;
+    readonly mode: number;
+    readonly reason: "missing" | "host-newer";
+    readonly because: string;
+}
+/**
+ * What to copy from the host CODEX_HOME into the node's, right now.
+ *
+ * Pure: takes the stat function so the ordering rules are testable without a
+ * filesystem. A node file that is NEWER than the host's is left alone — codex
+ * refreshes its own copy in place, and clobbering it would throw away a fresher
+ * token than the one we hold.
+ */
+export declare function codexHomeStagePlan(hostHome: string, nodeHome: string, stat: StatFn, join: (a: string, b: string) => string, files?: readonly CodexHomeInheritedFile[]): CodexHomeStageStep[];
+export type CodexTuiBlocker = "sign-in" | "update-prompt" | "trust-prompt";
+export type CodexTuiPaneState = CodexTuiBlocker | "not-painted" | "usable";
+/**
+ * Classify the TUI, from two different reads of the same pane.
+ *
+ * They answer different questions and need different tmux flags — the same
+ * distinction `waitForTmuxPaneText` documents one screenful up:
+ *
+ *   onScreen  (capture-pane, no -S)  → "is it sitting on a prompt right now"
+ *             A prompt that was already answered stays in scrollback forever,
+ *             so reading history here would report a fixed node as blocked.
+ *
+ *   everSeen  (capture-pane -S -N)   → "did the TUI ever paint"
+ *             The banner is printed once and scrolls away — an MCP error burst
+ *             was enough to push it off screen in under a minute — so reading
+ *             only the current screen here would report a working node as dead.
+ *
+ * 🔴 And "the pane has text" answers neither. An earlier version of this used
+ * "≥3 non-empty lines ⇒ ready" and passed a node parked on the sign-in page.
+ * Measured timeline for that start:
+ *
+ *     t≈3s   22 non-empty lines   ← launcher output, TUI not up yet
+ *     t≈6s    0 non-empty lines   ← codex clears the screen and takes over
+ *     t≈9s   10 non-empty lines   ← the sign-in page finally paints
+ *
+ * The rule fired at t≈3s, six seconds before the thing it was meant to catch
+ * existed.
+ */
+export declare function codexTuiPaneState(onScreen: string, everSeen?: string): CodexTuiPaneState;
+/**
+ * What the operator should read when a node came up but cannot work. Names the
+ * blocker AND where to look — a launcher that only says "not ready" sends
+ * someone hunting through three tmux sessions.
+ */
+export declare function describeCodexTuiBlocker(blocker: CodexTuiBlocker, displayName: string, tuiSession: string): string;
+/** The TUI never painted at all — a distinct failure from being blocked. */
+export declare function describeCodexTuiNotPainted(displayName: string, tuiSession: string, waitedMs: number): string;