@sleep2agi/agent-network 2.3.0-preview.6 → 2.3.0-preview.60

package/dist/bin/goal-wake-log-render.d.ts

@@ -0,0 +1,31 @@
+export interface WakeLogEntryShape {
+    ts?: string;
+    status?: string;
+    summary?: string;
+    task_id?: string;
+}
+export interface WakeLogGoalShape {
+    goal_id: string;
+    progress_log?: WakeLogEntryShape[];
+}
+export interface WakeLogRenderOpts {
+    /** Trim to the last N entries. undefined = all. */
+    tail?: number;
+}
+/**
+ * Format progress_log as a JSON object suitable for `--json` output.
+ * Pure. Never reads/writes filesystem. Legacy goals without
+ * progress_log render as empty array (not error).
+ */
+export declare function renderWakeLogJson(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): {
+    goal_id: string;
+    total: number;
+    returned: number;
+    entries: WakeLogEntryShape[];
+};
+/**
+ * Format progress_log as a table for human console output.
+ * Column layout mirrors printGoalShow so the two commands read
+ * consistently. Empty log renders a single "(none)" line, not an error.
+ */
+export declare function renderWakeLogText(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): string;

package/dist/src/batch-workdir.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolve one batch workdir before any mkdir/chdir loop starts.
+ *
+ * Node does not expand shell tildes. Leaving `~/team` relative means every
+ * iteration can resolve it from the previous node's cwd and create paths such
+ * as `/work/~/team/~/team`. Only the current user's `~` form is supported;
+ * `~other` is rejected instead of being written as a literal directory.
+ */
+export declare function normalizeBatchWorkdir(input: string, cwd?: string, home?: string): string;

package/dist/src/bootstrap-password-db.d.ts

@@ -0,0 +1,13 @@
+export interface BootstrapPasswordUpdateInvocation {
+    argv: string[];
+    env: NodeJS.ProcessEnv;
+    script: string;
+}
+/**
+ * Resolve the database selected for the local Hub into an explicit absolute
+ * path before launching the bootstrap helper. The helper must never infer a
+ * database from its own HOME/cwd: those can differ from the parent process.
+ */
+export declare function resolveBootstrapDatabasePath(env: NodeJS.ProcessEnv, home: string, cwd: string): string;
+export declare const BOOTSTRAP_PASSWORD_UPDATE_SCRIPT: string;
+export declare function buildBootstrapPasswordUpdateInvocation(userId: string, dbPath: string, baseEnv?: NodeJS.ProcessEnv): BootstrapPasswordUpdateInvocation;

package/dist/src/channel-attachments.d.ts

@@ -0,0 +1,29 @@
+interface AttachmentDescriptor {
+    type?: unknown;
+    file_id?: unknown;
+    path?: unknown;
+    mime?: unknown;
+    name?: unknown;
+    size?: unknown;
+}
+export interface ChannelAttachmentDeps {
+    hubUrl: string;
+    authToken: string;
+    cacheDir: string;
+    fetch?: typeof fetch;
+    maxBytes?: number;
+}
+export interface ChannelAttachmentResult {
+    paths: string[];
+    failures: Array<{
+        fileId: string;
+        code: string;
+        message: string;
+    }>;
+}
+export declare function readableAttachmentsFromInbox(message: any): AttachmentDescriptor[];
+export declare function channelAttachmentCacheDir(home: string, alias: string): string;
+export declare function downloadChannelAttachments(message: any, deps: ChannelAttachmentDeps): Promise<ChannelAttachmentResult>;
+export declare const downloadChannelImageAttachments: typeof downloadChannelAttachments;
+export declare function appendChannelAttachmentPaths(content: string, paths: readonly string[]): string;
+export {};

package/dist/src/channel-meta.d.ts

@@ -0,0 +1,10 @@
+/** One inbound inbox row → the meta Claude Code renders as `<channel …>` attrs.
+ *
+ * Pure so the attribute set is assertable; it used to be inline in the SSE
+ * handler, where nothing could see it. */
+export declare function inboundChannelMeta(msg: {
+    id: string;
+    from_session?: string | null;
+    priority?: string | null;
+    created_at?: string | null;
+}): Record<string, string>;

package/dist/src/channel-task-trace.d.ts

@@ -0,0 +1,10 @@
+export declare function sendChannelTaskWithTrace(input: {
+    alias: string;
+    task: string;
+    priority?: string;
+    fromAlias: string;
+    networkId?: string | null;
+}, deps: {
+    send: (args: Record<string, unknown>) => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/claude-vendor-env.d.ts

@@ -0,0 +1,28 @@
+export declare const CLAUDE_VENDOR_ENV_KEYS: readonly ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
+export type PlainSecretEnvRewrite = {
+    key: string;
+    refName: string;
+    value: string;
+};
+/**
+ * Plan the values that the node-create writer will move into its line-oriented
+ * `.env` file. This is deliberately side-effect free: callers can run it as a
+ * preflight before creating a node directory, changing process.env, or writing
+ * config.json. Keeping the line-break rejection here makes it cover every
+ * caller of the dotenv writer, including the no-name interactive wizard.
+ */
+export declare function planPlainSecretEnvRewrites(input: {
+    env: unknown;
+    nodeId: string;
+}): PlainSecretEnvRewrite[];
+/**
+ * Persist the exact Anthropic-compatible vendor environment used by an
+ * explicit claude-agent-sdk create. Explicit --env values retain precedence;
+ * ambient shell values only fill missing known keys. Other environment values
+ * are intentionally ignored so node create never snapshots the whole shell.
+ */
+export declare function collectClaudeVendorEnvForCreate(input: {
+    runtime: string;
+    explicitEnv: readonly string[];
+    shellEnv: Readonly<Record<string, string | undefined>>;
+}): string[];

package/dist/src/cli-args.d.ts

@@ -0,0 +1,8 @@
+export type ParsedCliOptions = {
+    [key: string]: string | string[];
+    _channels: string[];
+    _envs: string[];
+};
+export declare const BOOLEAN_FLAGS: Set<string>;
+export declare function parseCliOptions(argv: string[]): ParsedCliOptions;
+export declare function positionalArgs(argv: string[]): string[];

package/dist/src/client-task-trace.d.ts

@@ -0,0 +1,9 @@
+export declare function sendClientTaskWithTrace(input: {
+    alias: string;
+    fromAlias: string;
+    parentTaskId?: string | null;
+    networkId?: string | null;
+}, dependencies: {
+    send: () => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/client.js

@@ -1 +1 @@
-function a0_0x4787(){const _0xc49f0=['connect','normal','autoConnect','getReader','resumeId','emit','toString','sdk','disconnected','result','get_all_status','token','5087173NCbOmp','inbox\x20error:\x20','report_status','11665LrFOiw','connectSSE','message','log','AbortError','SSE\x20reconnecting\x20in\x20','from_session','application/json,\x20text/event-stream','messages','now','slice','min','content','signal','connected','cwd','decode','6982710isOHgq','url','new_task','getAllStatus','text','3606sAtYsO','type','running','catch','toTimeString','27873XqlSYg','alias','replace','text/event-stream','abort','call','broadcast','send_task','sdk-','status','completed','3JfxsGH','POST','new_message','1544pwkTLR','tools/call','SSE\x20failed:\x20','send_reply','idle','reply','heartbeatTimer','s...','heartbeatInterval','application/json','task','Bearer\x20','693624aRuhkw','offline','startsWith','name','get_inbox','server','reconnectDelay','267133AQpkhs','ack_inbox','parse','body','1519210AfjkqA','processInbox','SSE\x20connected','sseAbort','/mcp','2.0','match','agent','/events/','sleep'];a0_0x4787=function(){return _0xc49f0;};return a0_0x4787();}const a0_0x326ef2=a0_0x1d92;(function(_0x2d9f93,_0x55e142){const _0x4352d2=a0_0x1d92,_0x46163d=_0x2d9f93();while(!![]){try{const _0x9c32c4=-parseInt(_0x4352d2(0x1ce))/0x1+parseInt(_0x4352d2(0x1d2))/0x2+-parseInt(_0x4352d2(0x1b8))/0x3*(parseInt(_0x4352d2(0x1c7))/0x4)+-parseInt(_0x4352d2(0x1eb))/0x5*(-parseInt(_0x4352d2(0x1a8))/0x6)+-parseInt(_0x4352d2(0x1e8))/0x7+parseInt(_0x4352d2(0x1bb))/0x8*(parseInt(_0x4352d2(0x1ad))/0x9)+-parseInt(_0x4352d2(0x1a3))/0xa;if(_0x9c32c4===_0x55e142)break;else _0x46163d['push'](_0x46163d['shift']());}catch(_0x87a9d4){_0x46163d['push'](_0x46163d['shift']());}}}(a0_0x4787,0xda3d6));import{EventEmitter as a0_0x9a4b33}from'events';function a0_0x1d92(_0x589de0,_0x7570f1){_0x589de0=_0x589de0-0x195;const _0x4787e6=a0_0x4787();let _0x1d926f=_0x4787e6[_0x589de0];return _0x1d926f;}import{hostname as a0_0x3440fe}from'os';class T extends a0_0x9a4b33{[a0_0x326ef2(0x1a4)];['alias'];[a0_0x326ef2(0x1e7)];['agent'];[a0_0x326ef2(0x1e0)];['heartbeatInterval'];[a0_0x326ef2(0x1cd)];[a0_0x326ef2(0x1c1)];[a0_0x326ef2(0x1d5)];[a0_0x326ef2(0x1aa)]=!0x1;constructor(_0x27d2ee){const _0x2b74ed=a0_0x326ef2;super();if(this[_0x2b74ed(0x1a4)]=_0x27d2ee[_0x2b74ed(0x1a4)][_0x2b74ed(0x1af)](/\/$/,''),this[_0x2b74ed(0x1ae)]=_0x27d2ee[_0x2b74ed(0x1ae)],this['token']=_0x27d2ee[_0x2b74ed(0x1e7)],this[_0x2b74ed(0x1d9)]=_0x27d2ee[_0x2b74ed(0x1d9)]||_0x2b74ed(0x1e3),this[_0x2b74ed(0x1e0)]=_0x2b74ed(0x1b5)+_0x27d2ee[_0x2b74ed(0x1ae)]+'-'+Date[_0x2b74ed(0x19b)]()[_0x2b74ed(0x1e2)](0x24),this[_0x2b74ed(0x1c3)]=_0x27d2ee[_0x2b74ed(0x1c3)]??0x2bf20,this[_0x2b74ed(0x1cd)]=_0x27d2ee['reconnectDelay']??0xbb8,_0x27d2ee[_0x2b74ed(0x1de)]!==!0x1)this[_0x2b74ed(0x1dc)]();}['log'](_0x553859){const _0x5a30db=a0_0x326ef2;console['log']('['+new Date()[_0x5a30db(0x1ac)]()[_0x5a30db(0x19c)](0x0,0x8)+']\x20[commhub:'+this['alias']+']\x20'+_0x553859);}async[a0_0x326ef2(0x1b2)](_0xd1a490,_0x48238b){const _0x8c93f1=a0_0x326ef2;let _0x5074b0={'Content-Type':_0x8c93f1(0x1c4),'Accept':_0x8c93f1(0x199)};if(this[_0x8c93f1(0x1e7)])_0x5074b0['Authorization']=_0x8c93f1(0x1c6)+this[_0x8c93f1(0x1e7)];let _0x504a96=await(await fetch(this[_0x8c93f1(0x1a4)]+_0x8c93f1(0x1d6),{'method':_0x8c93f1(0x1b9),'headers':_0x5074b0,'body':JSON['stringify']({'jsonrpc':_0x8c93f1(0x1d7),'id':Date[_0x8c93f1(0x19b)](),'method':_0x8c93f1(0x1bc),'params':{'name':_0xd1a490,'arguments':_0x48238b}})}))[_0x8c93f1(0x1a7)](),_0x150935=_0x504a96[_0x8c93f1(0x1d8)](/data: (.+)/),_0x4be016=_0x150935?JSON[_0x8c93f1(0x1d0)](_0x150935[0x1]):JSON['parse'](_0x504a96),_0x28a021=_0x4be016?.[_0x8c93f1(0x1e5)]?.['content']?.[0x0]?.['text'];return _0x28a021?JSON[_0x8c93f1(0x1d0)](_0x28a021):_0x4be016;}async[a0_0x326ef2(0x1dc)](){const _0x2cb871=a0_0x326ef2;if(this[_0x2cb871(0x1aa)])return;this[_0x2cb871(0x1aa)]=!0x0,await this['status'](_0x2cb871(0x1bf)),this[_0x2cb871(0x195)]('registered'),this[_0x2cb871(0x1c1)]=setInterval(()=>{const _0x430408=_0x2cb871;this[_0x430408(0x1b6)](_0x430408(0x1bf))[_0x430408(0x1ab)](_0x321f90=>this[_0x430408(0x195)]('heartbeat\x20failed:\x20'+_0x321f90[_0x430408(0x1ed)]));},this[_0x2cb871(0x1c3)]),this[_0x2cb871(0x1ec)]();}async['disconnect'](){const _0x4338ba=a0_0x326ef2;if(this['running']=!0x1,this[_0x4338ba(0x1d5)]?.[_0x4338ba(0x1b1)](),this[_0x4338ba(0x1c1)])clearInterval(this[_0x4338ba(0x1c1)]);await this[_0x4338ba(0x1b6)](_0x4338ba(0x1c8))[_0x4338ba(0x1ab)](()=>{}),this[_0x4338ba(0x195)]('disconnected');}async['send'](_0x5b1ecc,_0x641df2,_0x303ada=a0_0x326ef2(0x1dd)){const _0x393393=a0_0x326ef2;return this[_0x393393(0x1b2)](_0x393393(0x1b4),{'alias':_0x5b1ecc,'task':_0x641df2,'priority':_0x303ada,'from_session':this[_0x393393(0x1ae)]});}async[a0_0x326ef2(0x1ed)](_0x3fea6c,_0x1636f5){const _0x10430c=a0_0x326ef2;return this[_0x10430c(0x1b2)]('send_message',{'alias':_0x3fea6c,'message':_0x1636f5,'from_session':this[_0x10430c(0x1ae)]});}async[a0_0x326ef2(0x1c0)](_0x4ba4b3,_0x3a3281,_0x467043=a0_0x326ef2(0x1b7)){const _0x3706a8=a0_0x326ef2;return this[_0x3706a8(0x1b2)](_0x3706a8(0x1be),{'in_reply_to':_0x4ba4b3,'text':_0x3a3281,'status':_0x467043});}async['status'](_0x1814b2,_0x14f949){const _0x450020=a0_0x326ef2;return this[_0x450020(0x1b2)](_0x450020(0x1ea),{'resume_id':this[_0x450020(0x1e0)],'alias':this['alias'],'status':_0x1814b2,'server':a0_0x3440fe(),'hostname':a0_0x3440fe(),'agent':this['agent'],'project_dir':process[_0x450020(0x1a1)](),..._0x14f949});}async[a0_0x326ef2(0x1a6)](){const _0x254179=a0_0x326ef2;return this['call'](_0x254179(0x1e6),{});}async[a0_0x326ef2(0x1b3)](_0x3010a6,_0x1a36d3){const _0x214d2c=a0_0x326ef2;return this[_0x214d2c(0x1b2)](_0x214d2c(0x1b3),{'message':_0x3010a6,'filter_server':_0x1a36d3?.[_0x214d2c(0x1cc)],'filter_status':_0x1a36d3?.[_0x214d2c(0x1b6)]});}async[a0_0x326ef2(0x1ec)](){const _0x1a0fde=a0_0x326ef2;let _0x5b4d94=encodeURIComponent(this['alias']),_0x1e94a5=this[_0x1a0fde(0x1a4)]+_0x1a0fde(0x1da)+_0x5b4d94,_0x459bbb=this['reconnectDelay'];while(this[_0x1a0fde(0x1aa)]){try{this['sseAbort']=new AbortController();let _0x37d4c5={'Accept':_0x1a0fde(0x1b0)};if(this[_0x1a0fde(0x1e7)])_0x37d4c5['Authorization']=_0x1a0fde(0x1c6)+this['token'];let _0x535b5e=await fetch(_0x1e94a5,{'headers':_0x37d4c5,'signal':this[_0x1a0fde(0x1d5)][_0x1a0fde(0x19f)]});if(!_0x535b5e['ok']||!_0x535b5e[_0x1a0fde(0x1d1)]){this[_0x1a0fde(0x195)](_0x1a0fde(0x1bd)+_0x535b5e[_0x1a0fde(0x1b6)]),await this['sleep'](_0x459bbb),_0x459bbb=Math['min'](_0x459bbb*1.5,0xea60);continue;}_0x459bbb=this[_0x1a0fde(0x1cd)];let _0x51d767=_0x535b5e[_0x1a0fde(0x1d1)][_0x1a0fde(0x1df)](),_0x3c31e1=new TextDecoder(),_0x442bf4='';while(this[_0x1a0fde(0x1aa)]){let {done:_0x4cce5c,value:_0x31f076}=await _0x51d767['read']();if(_0x4cce5c)break;_0x442bf4+=_0x3c31e1[_0x1a0fde(0x1a2)](_0x31f076,{'stream':!0x0});let _0x17f025=_0x442bf4['split']('\x0a');_0x442bf4=_0x17f025['pop']()||'';for(let _0x2b251d of _0x17f025){if(!_0x2b251d[_0x1a0fde(0x1c9)]('data:\x20'))continue;try{let _0x23afbd=JSON[_0x1a0fde(0x1d0)](_0x2b251d[_0x1a0fde(0x19c)](0x6));if(_0x23afbd['type']===_0x1a0fde(0x1a0)){this[_0x1a0fde(0x195)](_0x1a0fde(0x1d4)),this[_0x1a0fde(0x1e1)]('connected');continue;}if(_0x23afbd['type']===_0x1a0fde(0x1a5)||_0x23afbd[_0x1a0fde(0x1a9)]===_0x1a0fde(0x1ba)||_0x23afbd[_0x1a0fde(0x1a9)]==='broadcast')await this[_0x1a0fde(0x1d3)]();}catch{}}}}catch(_0x4ba1f7){if(_0x4ba1f7[_0x1a0fde(0x1ca)]===_0x1a0fde(0x196))break;this[_0x1a0fde(0x1e1)]('error',_0x4ba1f7),this[_0x1a0fde(0x195)]('SSE\x20error:\x20'+_0x4ba1f7[_0x1a0fde(0x1ed)]);}if(this[_0x1a0fde(0x1aa)])this[_0x1a0fde(0x1e1)](_0x1a0fde(0x1e4)),this['log'](_0x1a0fde(0x197)+_0x459bbb/0x3e8+_0x1a0fde(0x1c2)),await this[_0x1a0fde(0x1db)](_0x459bbb),_0x459bbb=Math[_0x1a0fde(0x19d)](_0x459bbb*1.5,0xea60);}}async['processInbox'](){const _0x3ed557=a0_0x326ef2;try{let _0x4d28a0=(await this[_0x3ed557(0x1b2)](_0x3ed557(0x1cb),{'alias':this[_0x3ed557(0x1ae)],'limit':0xa}))?.[_0x3ed557(0x19a)]||[];for(let _0x3d91c7 of _0x4d28a0)await this[_0x3ed557(0x1b2)](_0x3ed557(0x1cf),{'alias':this['alias'],'message_id':_0x3d91c7['id']}),this[_0x3ed557(0x195)]('←\x20'+_0x3d91c7[_0x3ed557(0x198)]+':\x20'+_0x3d91c7[_0x3ed557(0x19e)][_0x3ed557(0x19c)](0x0,0x3c)),this[_0x3ed557(0x1e1)](_0x3ed557(0x1c5),_0x3d91c7),this[_0x3ed557(0x1e1)](_0x3ed557(0x1ed),_0x3d91c7);}catch(_0x4ee1c5){this[_0x3ed557(0x195)](_0x3ed557(0x1e9)+_0x4ee1c5[_0x3ed557(0x1ed)]);}}[a0_0x326ef2(0x1db)](_0x40caed){return new Promise(_0x5e6710=>setTimeout(_0x5e6710,_0x40caed));}}var $=T;export{$ as default,T as CommHub};
+const a0_0x57a208=a0_0x46d5;(function(_0xb3918a,_0x30aecf){const _0xf24638=a0_0x46d5,_0xdf5b4b=_0xb3918a();while(!![]){try{const _0x3dca79=-parseInt(_0xf24638(0x1f7))/0x1+parseInt(_0xf24638(0x1ae))/0x2+parseInt(_0xf24638(0x1ff))/0x3*(parseInt(_0xf24638(0x1d8))/0x4)+parseInt(_0xf24638(0x1d7))/0x5*(-parseInt(_0xf24638(0x218))/0x6)+-parseInt(_0xf24638(0x1ed))/0x7*(-parseInt(_0xf24638(0x1bd))/0x8)+-parseInt(_0xf24638(0x202))/0x9*(parseInt(_0xf24638(0x200))/0xa)+parseInt(_0xf24638(0x212))/0xb*(parseInt(_0xf24638(0x1f1))/0xc);if(_0x3dca79===_0x30aecf)break;else _0xdf5b4b['push'](_0xdf5b4b['shift']());}catch(_0x1e4193){_0xdf5b4b['push'](_0xdf5b4b['shift']());}}}(a0_0x3771,0x35105));import{EventEmitter as a0_0x5c77a8}from'events';import{hostname as a0_0x1ceb32}from'os';var K=/(?:atok|ntok|utok|ghp|github_pat)_[A-Za-z0-9_-]+|Bearer\s+\S+/gi,L=(_0x4cef1b,_0x2bc4ce)=>(_0x4cef1b??_0x2bc4ce)[a0_0x57a208(0x1b7)](/[\r\n\x00-\x1f\x7f]/g,'\x20')[a0_0x57a208(0x1de)](0x0,0xf0);function a0_0x46d5(_0x4f96db,_0x10c642){_0x4f96db=_0x4f96db-0x1a4;const _0x3771fa=a0_0x3771();let _0x46d564=_0x3771fa[_0x4f96db];return _0x46d564;}function N(_0x461911){const _0x58affd=a0_0x57a208;return(_0x461911 instanceof Error?_0x461911['message']:String(_0x461911??_0x58affd(0x1fe)))[_0x58affd(0x1b7)](K,'[REDACTED]')['replace'](/[\r\n\x00-\x1f\x7f]/g,'\x20')[_0x58affd(0x1de)](0x0,0xf0);}function O(_0x1bf689,_0x4ea9d1=process.env.ANET_TASK_TRACE_FORMAT===a0_0x57a208(0x219)){const _0x84ce2e=a0_0x57a208;if(_0x4ea9d1)return JSON[_0x84ce2e(0x1fa)](_0x1bf689);let _0x28f967=L(_0x1bf689['parent_task_id'],_0x84ce2e(0x20c)),_0x2279f2=L(_0x1bf689[_0x84ce2e(0x1d0)],_0x84ce2e(0x1d1)),_0x38899a=_0x1bf689['error_code']?_0x84ce2e(0x1f8)+_0x1bf689['error_code']+':'+(_0x1bf689['error_message']??''):'';return _0x84ce2e(0x210)+_0x1bf689[_0x84ce2e(0x1dc)]+_0x84ce2e(0x226)+L(_0x1bf689[_0x84ce2e(0x1d2)],_0x84ce2e(0x1d5))+'\x20to='+L(_0x1bf689[_0x84ce2e(0x1e1)],_0x84ce2e(0x1d5))+_0x84ce2e(0x1f0)+_0x2279f2+_0x84ce2e(0x1ef)+_0x28f967+_0x84ce2e(0x205)+L(_0x1bf689['network_id'],_0x84ce2e(0x1d5))+_0x84ce2e(0x1a4)+_0x1bf689['transport']+'\x20duration_ms='+_0x1bf689[_0x84ce2e(0x224)]+_0x84ce2e(0x21d)+_0x1bf689['lifecycle_tracking']+_0x38899a;}function U(_0x4d45d4){const _0x2aaaee=a0_0x57a208;return{'event':{'sending':_0x2aaaee(0x1c7),'delivered':_0x2aaaee(0x1bb),'failed':_0x2aaaee(0x1e3),'acked':_0x2aaaee(0x1b8),'started':'task.started','replied':_0x2aaaee(0x1ec),'expired':_0x2aaaee(0x207)}[_0x4d45d4[_0x2aaaee(0x1dc)]],..._0x4d45d4};}function j(_0x5c5744){const _0xe2095b=a0_0x57a208;let _0x46544c=_0x5c5744?.[_0xe2095b(0x1d0)]||_0x5c5744?.[_0xe2095b(0x208)]||_0x5c5744?.['id'];if(_0x46544c)return String(_0x46544c);let _0x46b3ed=_0x5c5744?.['content']?.[0x0]?.['text'];if(typeof _0x46b3ed!==_0xe2095b(0x20a))return null;try{let _0x471819=JSON[_0xe2095b(0x1bc)](_0x46b3ed);return _0x471819?.['task_id']||_0x471819?.[_0xe2095b(0x208)]||_0x471819?.['id']||null;}catch{return null;}}async function X(_0x19852a,_0x5d78d8){const _0x3c89f2=a0_0x57a208;let _0xe05db7=_0x5d78d8[_0x3c89f2(0x1b0)]??Date[_0x3c89f2(0x1b0)],_0x515be6=_0xe05db7(),_0x34b5a7=(_0x5441ed,_0x52b1f0,_0x549a2e,_0xf33261)=>{const _0x3949c8=_0x3c89f2;_0x5d78d8[_0x3949c8(0x1b6)](O(U({'from_alias':_0x19852a['fromAlias'],'to_alias':_0x19852a['toAlias'],'task_id':_0x52b1f0,'parent_task_id':_0x19852a[_0x3949c8(0x1f5)],'network_id':_0x19852a[_0x3949c8(0x217)],'transport':_0x19852a[_0x3949c8(0x1e8)],'status':_0x5441ed,'duration_ms':_0xe05db7()-_0x515be6,'lifecycle_tracking':_0x19852a['lifecycleTracking'],..._0x549a2e!==void 0x0?{'error_code':_0xf33261||_0x3949c8(0x1b3),'error_message':N(_0x549a2e)}:{}})));};_0x34b5a7('sending',null);try{let _0x5f0e6e=await _0x5d78d8[_0x3c89f2(0x1b2)](),_0x192aa1=j(_0x5f0e6e);if(_0x192aa1)_0x34b5a7('delivered',_0x192aa1);else{if(_0x5f0e6e?.['ok']===!0x1||_0x5f0e6e?.['error'])_0x34b5a7(_0x3c89f2(0x214),_0x192aa1,_0x5f0e6e?.['error']||_0x3c89f2(0x21e),_0x3c89f2(0x203));else _0x34b5a7('failed',null,_0x3c89f2(0x20b),_0x3c89f2(0x1ab));}return _0x5f0e6e;}catch(_0x206aea){throw _0x34b5a7(_0x3c89f2(0x214),null,_0x206aea,_0x3c89f2(0x1b3)),_0x206aea;}}function a0_0x3771(){const _0x16b077=['[commhub:task]\x20','mcp_http','44GtRdav','/events/','failed','Bearer\x20','completed','networkId','6mCGCBj','json','body','connect','sleep','\x20lifecycle=','CommHub\x20rejected\x20task','url','reconnectDelay','agent','get_all_status','new_task','duration_ms','heartbeatTimer','\x20from=','\x20transport=','messages','min','get_inbox','autoConnect','call','alias','missing_task_id','application/json,\x20text/event-stream','new_message','282520sTnvxF','sdk','now','pop','send','send_failed','heartbeatInterval','offline','log','replace','task.ack','read','SSE\x20error:\x20','task.send.delivered','parse','21712sVXcmY','running','POST','type','message','send_task','sseAbort','s...','broadcast','registered','task.send.start','SSE\x20reconnecting\x20in\x20','catch','signal','send_message','token','getReader','text','emit','task_id','<pending>','from_alias','disconnected','Authorization','<unknown>','task','1011055NEaiim','8tTcSNu','abort','data:\x20','ack_inbox','status','server','slice','tools/call','send_reply','to_alias','reply','task.send.failed','result','normal','not_tracked','application/json','transport','AbortError','disconnect','split','task.replied','973xvSkwX','from_session','\x20parent_task_id=','\x20task_id=','83292TUuFTR','/mcp','connectSSE','decode','parentTaskId','toTimeString','134813cSUUdy','\x20error=','toString','stringify','content',']\x20[commhub:','processInbox','unknown\x20error','261912ViwWaS','333010hatgwo','text/event-stream','45ICTOLQ','send_rejected','idle','\x20network_id=','match','task.expired','message_id','resumeId','string','CommHub\x20response\x20omitted\x20task_id','<missing>','sdk-','SSE\x20failed:\x20','SSE\x20connected'];a0_0x3771=function(){return _0x16b077;};return a0_0x3771();}async function Y(_0x56ce0a,_0x216ba9){const _0x595220=a0_0x57a208;return X({'fromAlias':_0x56ce0a['fromAlias'],'toAlias':_0x56ce0a[_0x595220(0x1aa)],'parentTaskId':_0x56ce0a['parentTaskId']||null,'networkId':_0x56ce0a[_0x595220(0x217)]||null,'transport':_0x595220(0x211),'lifecycleTracking':_0x595220(0x1e6)},_0x216ba9);}class $ extends a0_0x5c77a8{[a0_0x57a208(0x21f)];[a0_0x57a208(0x1aa)];[a0_0x57a208(0x1cc)];[a0_0x57a208(0x221)];[a0_0x57a208(0x209)];['heartbeatInterval'];[a0_0x57a208(0x220)];[a0_0x57a208(0x225)];[a0_0x57a208(0x1c3)];['running']=!0x1;constructor(_0x2c5214){const _0x6c3a7c=a0_0x57a208;super();if(this['url']=_0x2c5214['url'][_0x6c3a7c(0x1b7)](/\/$/,''),this[_0x6c3a7c(0x1aa)]=_0x2c5214['alias'],this['token']=_0x2c5214[_0x6c3a7c(0x1cc)],this[_0x6c3a7c(0x221)]=_0x2c5214[_0x6c3a7c(0x221)]||_0x6c3a7c(0x1af),this['resumeId']=_0x6c3a7c(0x20d)+_0x2c5214[_0x6c3a7c(0x1aa)]+'-'+Date[_0x6c3a7c(0x1b0)]()[_0x6c3a7c(0x1f9)](0x24),this[_0x6c3a7c(0x1b4)]=_0x2c5214[_0x6c3a7c(0x1b4)]??0x2bf20,this['reconnectDelay']=_0x2c5214[_0x6c3a7c(0x220)]??0xbb8,_0x2c5214[_0x6c3a7c(0x1a8)]!==!0x1)this[_0x6c3a7c(0x21b)]();}[a0_0x57a208(0x1b6)](_0x492b27){const _0x120be8=a0_0x57a208;console[_0x120be8(0x1b6)]('['+new Date()[_0x120be8(0x1f6)]()[_0x120be8(0x1de)](0x0,0x8)+_0x120be8(0x1fc)+this[_0x120be8(0x1aa)]+']\x20'+_0x492b27);}async[a0_0x57a208(0x1a9)](_0x5b92b5,_0x4dcb20){const _0x27146f=a0_0x57a208;let _0x3a1029={'Content-Type':_0x27146f(0x1e7),'Accept':_0x27146f(0x1ac)};if(this[_0x27146f(0x1cc)])_0x3a1029[_0x27146f(0x1d4)]=_0x27146f(0x215)+this[_0x27146f(0x1cc)];let _0x4add50=await(await fetch(this[_0x27146f(0x21f)]+_0x27146f(0x1f2),{'method':_0x27146f(0x1bf),'headers':_0x3a1029,'body':JSON[_0x27146f(0x1fa)]({'jsonrpc':'2.0','id':Date['now'](),'method':_0x27146f(0x1df),'params':{'name':_0x5b92b5,'arguments':_0x4dcb20}})}))['text'](),_0x321ff0=_0x4add50[_0x27146f(0x206)](/data: (.+)/),_0x5d5ce6=_0x321ff0?JSON['parse'](_0x321ff0[0x1]):JSON[_0x27146f(0x1bc)](_0x4add50),_0xb0e0f5=_0x5d5ce6?.[_0x27146f(0x1e4)]?.[_0x27146f(0x1fb)]?.[0x0]?.[_0x27146f(0x1ce)];return _0xb0e0f5?JSON[_0x27146f(0x1bc)](_0xb0e0f5):_0x5d5ce6;}async[a0_0x57a208(0x21b)](){const _0x2c0e59=a0_0x57a208;if(this['running'])return;this['running']=!0x0,await this[_0x2c0e59(0x1dc)](_0x2c0e59(0x204)),this[_0x2c0e59(0x1b6)](_0x2c0e59(0x1c6)),this[_0x2c0e59(0x225)]=setInterval(()=>{const _0x1dc7c4=_0x2c0e59;this[_0x1dc7c4(0x1dc)](_0x1dc7c4(0x204))[_0x1dc7c4(0x1c9)](_0x4eb0e0=>this[_0x1dc7c4(0x1b6)]('heartbeat\x20failed:\x20'+_0x4eb0e0[_0x1dc7c4(0x1c1)]));},this[_0x2c0e59(0x1b4)]),this['connectSSE']();}async[a0_0x57a208(0x1ea)](){const _0x306068=a0_0x57a208;if(this['running']=!0x1,this[_0x306068(0x1c3)]?.[_0x306068(0x1d9)](),this[_0x306068(0x225)])clearInterval(this['heartbeatTimer']);await this[_0x306068(0x1dc)](_0x306068(0x1b5))[_0x306068(0x1c9)](()=>{}),this['log'](_0x306068(0x1d3));}async[a0_0x57a208(0x1b2)](_0x2144d3,_0x489223,_0x23e5ca=a0_0x57a208(0x1e5)){const _0xfb9ae2=a0_0x57a208;return Y({'alias':_0x2144d3,'fromAlias':this[_0xfb9ae2(0x1aa)]},{'log':_0x26b7d9=>console[_0xfb9ae2(0x1b6)](_0x26b7d9),'send':()=>this[_0xfb9ae2(0x1a9)](_0xfb9ae2(0x1c2),{'alias':_0x2144d3,'task':_0x489223,'priority':_0x23e5ca,'from_session':this[_0xfb9ae2(0x1aa)]})});}async[a0_0x57a208(0x1c1)](_0x54540c,_0x596baf){const _0x2a144c=a0_0x57a208;return this[_0x2a144c(0x1a9)](_0x2a144c(0x1cb),{'alias':_0x54540c,'message':_0x596baf,'from_session':this['alias']});}async[a0_0x57a208(0x1e2)](_0x1314c4,_0x49ef04,_0x3dc263=a0_0x57a208(0x216)){const _0x3b8dd3=a0_0x57a208;return this[_0x3b8dd3(0x1a9)](_0x3b8dd3(0x1e0),{'in_reply_to':_0x1314c4,'text':_0x49ef04,'status':_0x3dc263});}async['status'](_0x2116dc,_0x1cccd8){const _0x588e8a=a0_0x57a208;return this[_0x588e8a(0x1a9)]('report_status',{'resume_id':this[_0x588e8a(0x209)],'alias':this[_0x588e8a(0x1aa)],'status':_0x2116dc,'server':a0_0x1ceb32(),'hostname':a0_0x1ceb32(),'agent':this[_0x588e8a(0x221)],'project_dir':process['cwd'](),..._0x1cccd8});}async['getAllStatus'](){const _0x5efaaf=a0_0x57a208;return this[_0x5efaaf(0x1a9)](_0x5efaaf(0x222),{});}async['broadcast'](_0x1abd5e,_0x2384b7){const _0x36f641=a0_0x57a208;return this[_0x36f641(0x1a9)]('broadcast',{'message':_0x1abd5e,'filter_server':_0x2384b7?.[_0x36f641(0x1dd)],'filter_status':_0x2384b7?.[_0x36f641(0x1dc)]});}async[a0_0x57a208(0x1f3)](){const _0x3ff777=a0_0x57a208;let _0x232560=encodeURIComponent(this[_0x3ff777(0x1aa)]),_0x32db68=this[_0x3ff777(0x21f)]+_0x3ff777(0x213)+_0x232560,_0x3b9f1d=this['reconnectDelay'];while(this[_0x3ff777(0x1be)]){try{this['sseAbort']=new AbortController();let _0x3303ff={'Accept':_0x3ff777(0x201)};if(this[_0x3ff777(0x1cc)])_0x3303ff[_0x3ff777(0x1d4)]='Bearer\x20'+this[_0x3ff777(0x1cc)];let _0x4aef9d=await fetch(_0x32db68,{'headers':_0x3303ff,'signal':this['sseAbort'][_0x3ff777(0x1ca)]});if(!_0x4aef9d['ok']||!_0x4aef9d[_0x3ff777(0x21a)]){this[_0x3ff777(0x1b6)](_0x3ff777(0x20e)+_0x4aef9d['status']),await this['sleep'](_0x3b9f1d),_0x3b9f1d=Math[_0x3ff777(0x1a6)](_0x3b9f1d*1.5,0xea60);continue;}_0x3b9f1d=this[_0x3ff777(0x220)];let _0x5026ec=_0x4aef9d[_0x3ff777(0x21a)][_0x3ff777(0x1cd)](),_0x1c75df=new TextDecoder(),_0x239897='';while(this[_0x3ff777(0x1be)]){let {done:_0xe5d364,value:_0x37411b}=await _0x5026ec[_0x3ff777(0x1b9)]();if(_0xe5d364)break;_0x239897+=_0x1c75df[_0x3ff777(0x1f4)](_0x37411b,{'stream':!0x0});let _0x532204=_0x239897[_0x3ff777(0x1eb)]('\x0a');_0x239897=_0x532204[_0x3ff777(0x1b1)]()||'';for(let _0x1724a0 of _0x532204){if(!_0x1724a0['startsWith'](_0x3ff777(0x1da)))continue;try{let _0x72b7c=JSON[_0x3ff777(0x1bc)](_0x1724a0[_0x3ff777(0x1de)](0x6));if(_0x72b7c[_0x3ff777(0x1c0)]==='connected'){this[_0x3ff777(0x1b6)](_0x3ff777(0x20f)),this[_0x3ff777(0x1cf)]('connected');continue;}if(_0x72b7c[_0x3ff777(0x1c0)]===_0x3ff777(0x223)||_0x72b7c[_0x3ff777(0x1c0)]===_0x3ff777(0x1ad)||_0x72b7c[_0x3ff777(0x1c0)]===_0x3ff777(0x1c5))await this[_0x3ff777(0x1fd)]();}catch{}}}}catch(_0x229a06){if(_0x229a06['name']===_0x3ff777(0x1e9))break;this[_0x3ff777(0x1cf)]('error',_0x229a06),this[_0x3ff777(0x1b6)](_0x3ff777(0x1ba)+_0x229a06[_0x3ff777(0x1c1)]);}if(this['running'])this['emit'](_0x3ff777(0x1d3)),this[_0x3ff777(0x1b6)](_0x3ff777(0x1c8)+_0x3b9f1d/0x3e8+_0x3ff777(0x1c4)),await this[_0x3ff777(0x21c)](_0x3b9f1d),_0x3b9f1d=Math['min'](_0x3b9f1d*1.5,0xea60);}}async[a0_0x57a208(0x1fd)](){const _0x2195ae=a0_0x57a208;try{let _0x4807d8=(await this[_0x2195ae(0x1a9)](_0x2195ae(0x1a7),{'alias':this[_0x2195ae(0x1aa)],'limit':0xa}))?.[_0x2195ae(0x1a5)]||[];for(let _0x30faf1 of _0x4807d8)await this[_0x2195ae(0x1a9)](_0x2195ae(0x1db),{'alias':this['alias'],'message_id':_0x30faf1['id']}),this[_0x2195ae(0x1b6)]('←\x20'+_0x30faf1[_0x2195ae(0x1ee)]+':\x20'+_0x30faf1[_0x2195ae(0x1fb)][_0x2195ae(0x1de)](0x0,0x3c)),this[_0x2195ae(0x1cf)](_0x2195ae(0x1d6),_0x30faf1),this[_0x2195ae(0x1cf)]('message',_0x30faf1);}catch(_0x426079){this['log']('inbox\x20error:\x20'+_0x426079[_0x2195ae(0x1c1)]);}}[a0_0x57a208(0x21c)](_0x5a3952){return new Promise(_0x5a1435=>setTimeout(_0x5a1435,_0x5a3952));}}var F=$;export{F as default,$ as CommHub};

package/dist/src/codex-copresence-preflight.d.ts

@@ -0,0 +1,65 @@
+export interface CodexHomeInheritedFile {
+    readonly name: string;
+    readonly mode: number;
+    /** Why a node needs it — printed when staged, so the action is legible. */
+    readonly because: string;
+}
+export declare const CODEX_HOME_INHERITED_FILES: readonly CodexHomeInheritedFile[];
+export interface StatLike {
+    readonly mtimeMs: number;
+}
+export type StatFn = (path: string) => StatLike | null;
+export interface CodexHomeStageStep {
+    readonly name: string;
+    readonly src: string;
+    readonly dst: string;
+    readonly mode: number;
+    readonly reason: "missing" | "host-newer";
+    readonly because: string;
+}
+/**
+ * What to copy from the host CODEX_HOME into the node's, right now.
+ *
+ * Pure: takes the stat function so the ordering rules are testable without a
+ * filesystem. A node file that is NEWER than the host's is left alone — codex
+ * refreshes its own copy in place, and clobbering it would throw away a fresher
+ * token than the one we hold.
+ */
+export declare function codexHomeStagePlan(hostHome: string, nodeHome: string, stat: StatFn, join: (a: string, b: string) => string, files?: readonly CodexHomeInheritedFile[]): CodexHomeStageStep[];
+export type CodexTuiBlocker = "sign-in" | "update-prompt" | "trust-prompt";
+export type CodexTuiPaneState = CodexTuiBlocker | "not-painted" | "usable";
+/**
+ * Classify the TUI, from two different reads of the same pane.
+ *
+ * They answer different questions and need different tmux flags — the same
+ * distinction `waitForTmuxPaneText` documents one screenful up:
+ *
+ *   onScreen  (capture-pane, no -S)  → "is it sitting on a prompt right now"
+ *             A prompt that was already answered stays in scrollback forever,
+ *             so reading history here would report a fixed node as blocked.
+ *
+ *   everSeen  (capture-pane -S -N)   → "did the TUI ever paint"
+ *             The banner is printed once and scrolls away — an MCP error burst
+ *             was enough to push it off screen in under a minute — so reading
+ *             only the current screen here would report a working node as dead.
+ *
+ * 🔴 And "the pane has text" answers neither. An earlier version of this used
+ * "≥3 non-empty lines ⇒ ready" and passed a node parked on the sign-in page.
+ * Measured timeline for that start:
+ *
+ *     t≈3s   22 non-empty lines   ← launcher output, TUI not up yet
+ *     t≈6s    0 non-empty lines   ← codex clears the screen and takes over
+ *     t≈9s   10 non-empty lines   ← the sign-in page finally paints
+ *
+ * The rule fired at t≈3s, six seconds before the thing it was meant to catch
+ * existed.
+ */
+export declare function codexTuiPaneState(onScreen: string, everSeen?: string): CodexTuiPaneState;
+/**
+ * What the operator should read when a node came up but cannot work. Names the
+ * blocker AND where to look — a launcher that only says "not ready" sends
+ * someone hunting through three tmux sessions.
+ */
+export declare function describeCodexTuiBlocker(blocker: CodexTuiBlocker, displayName: string, tuiSession: string): string;
+/** The TUI never painted at all — a distinct failure from being blocked. */
+export declare function describeCodexTuiNotPainted(displayName: string, tuiSession: string, waitedMs: number): string;

package/dist/src/codex-copresence-profile.d.ts

@@ -0,0 +1,68 @@
+export interface CodexCopresenceProfileFields {
+    readonly runtime?: string;
+    readonly codexCopresence?: boolean;
+    readonly codexCopresenceFullAccess?: boolean;
+    readonly flags?: Record<string, unknown>;
+}
+export declare const CODEX_COPRESENCE_RUNTIME = "codex-app-server";
+/**
+ * Should this `anet node start` bring up the co-presence stack?
+ *
+ * The flag still works for a one-off; the profile field is what makes the
+ * second start a single command.
+ */
+export declare function codexCopresenceRequested(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * True when a plain `anet node start` just became enough for this node — i.e.
+ * the flag was passed and the profile had not recorded it yet. Callers persist
+ * `codexCopresence: true` and tell the user they can drop the flag.
+ */
+export declare function shouldPersistCodexCopresence(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+export interface CodexCopresencePosture {
+    readonly sandboxMode: "danger-full-access" | "read-only";
+    readonly approvalPolicy: "never" | "on-request";
+    /** Set when the node asked for full access and is NOT getting it. */
+    readonly downgradeNotice?: string;
+    /** Set when a remembered grant (not this invocation's flag) opened it up. */
+    readonly grantedFromProfile: boolean;
+}
+/**
+ * Resolve the sandbox the co-presence app-server runs under.
+ *
+ * Precedence: this invocation's flag → a grant already recorded on the profile
+ * → read-only. `flags.sandboxMode` alone never opens the sandbox; it only
+ * decides whether staying closed is worth telling the user about.
+ */
+export declare function codexCopresencePosture(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields, displayName?: string): CodexCopresencePosture;
+/** True when an explicit grant should be written to the profile for next time. */
+export declare function shouldPersistCodexFullAccess(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * What `anet node create --runtime codex-app-server` should record, so that a
+ * later `anet node start <name>` is a single command with no flag.
+ *
+ * Shape copied from opencode, which already does exactly this at create time:
+ *
+ *   ...(runtime === "opencode-cli"
+ *     ? { opencodeMode: opts.mode === "copresence" || opts.copresence === "true"
+ *         ? "copresence" : "headless" }
+ *     : {}),
+ *
+ * Deliberately NOT keyed on which alias the operator typed. `codex-tui`,
+ * `codex-appserver` and `codex-app-server` are documented as aliases of one
+ * runtime (agent-node/src/cli.ts); giving one of them a different default would
+ * quietly break that contract, and "I typed the short name" is not a reliable
+ * statement of intent. Opting in stays explicit, exactly as it is for opencode.
+ */
+export declare function codexCopresenceCreateFields(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined): {
+    codexCopresence?: true;
+};
+/**
+ * One line at create time for a node that will start headless.
+ *
+ * NOT keyed on which alias the operator typed: by the time create builds the
+ * profile, `opts.runtime` has already been normalized to `codex-app-server`, so
+ * `codex-tui` is simply not recoverable here — a hint that tried to read it
+ * would never fire. (It didn't; that is how this was found.) Keying on the
+ * runtime instead also keeps the aliases true synonyms.
+ */
+export declare function codexCopresenceCreateHint(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined, displayName: string): string | undefined;

package/dist/src/codex-copresence-recovery.d.ts

@@ -0,0 +1,43 @@
+export interface CodexRecoveryVerification {
+    method: "thread/start" | "thread/resume";
+    threadId: string;
+    verifiedAt: string;
+    historyTurnCount: number;
+    historyFingerprint: string;
+}
+export interface CodexRecoveryBackup {
+    backupDir: string;
+    createdAt: string;
+    stateFiles: string[];
+}
+/** Transaction boundary shared by Windows and POSIX cutovers: the snapshot
+ * cannot begin until every authoritative state writer has quiesced. */
+export declare function quiesceThenSnapshot<T>(quiesce: () => Promise<void>, snapshot: () => T): Promise<T>;
+/** A stored thread is never considered resumed until app-server reads the
+ * exact thread back with persisted history. This is deliberately stricter
+ * than accepting a successful thread/resume RPC response. */
+export declare function verifyCodexThreadHistory(method: "thread/start" | "thread/resume", expectedThreadId: string, readResult: unknown, now?: Date): CodexRecoveryVerification;
+export declare function resumeAndVerifyCodexThread(threadId: string, request: (method: string, params: Record<string, unknown>) => Promise<unknown>): Promise<CodexRecoveryVerification>;
+/** Private, node-local recovery point. config-recovery.json is deliberately
+ * redacted non-credential audit/recovery metadata, not an identity backup.
+ * Identity recovery relies on leaving the original node config and CODEX_HOME
+ * in place. Credentials are never copied into this snapshot. */
+export declare function backupCodexRecoveryState(opts: {
+    nodeDir: string;
+    codexHome: string;
+    now?: Date;
+}): CodexRecoveryBackup;
+export declare function codexTopologyAudit(profile: Record<string, any>, nodeDir: string, cwd: string): {
+    launchMode: string;
+    cwd: string;
+    codexHome: string;
+    remote: any;
+    threadId: any;
+    model: any;
+    flags: any;
+    lastRecoveryVerification: any;
+    lastRecoveryBackup: {
+        createdAt: any;
+        stateFiles: any;
+    } | null;
+};

package/dist/src/codex-copresence-thread.d.ts

@@ -0,0 +1,13 @@
+export type CopresenceThreadPlan = {
+    method: "thread/resume";
+    params: {
+        threadId: string;
+    };
+    bootstrap: false;
+} | {
+    method: "thread/start";
+    params: Record<string, never>;
+    bootstrap: true;
+};
+/** Restarting a node must preserve its conversation; only a virgin node starts one. */
+export declare function copresenceThreadPlan(storedThreadId?: string): CopresenceThreadPlan;

package/dist/src/codex-model-default.d.ts

@@ -0,0 +1,6 @@
+export declare const DEFAULT_CODEX_MODEL = "gpt-5.6-sol";
+export declare const CODEX_MODEL_CHOICES: ReadonlyArray<{
+    readonly id: string;
+    readonly default?: boolean;
+}>;
+export declare function defaultCodexModelForRuntime(runtime: string): string | undefined;

package/dist/src/codex-tui-client-health.d.ts

@@ -0,0 +1,17 @@
+export declare function bridgeClientHealthReceipt(remote: string, threadId: string): string;
+export interface MigratedCodexPendingThread {
+    version: 1;
+    threadId: string;
+    serverUrl: string;
+    marker: string;
+}
+/**
+ * Move a crash-window deferred candidate onto the launcher's new owned
+ * app-server generation. The old URL is an authority supplied by the same
+ * private node config, not by the pending object itself; every mismatch is a
+ * hard stop so restart never guesses or adopts a second thread.
+ */
+export declare function migrateCodexPendingThread(value: unknown, oldServerUrl: unknown, expectedOldMarker: unknown, newServerUrl: string, newMarker: string): MigratedCodexPendingThread;
+export declare function requirePromotedCodexPendingThread(value: unknown, pendingThreadId: string): string;
+export declare function codexTuiLaunchArgs(remote: string, model: string, threadId?: string, dangerFullAccess?: boolean): string[];
+export declare function assertPendingServerQuiesced(serverUrl: unknown, isListening: (port: number) => boolean | Promise<boolean>): Promise<void>;

package/dist/src/commhub-response.d.ts

@@ -0,0 +1 @@
+export declare function parseCommhubToolResult(json: any): any;

package/dist/src/controlled-upload.d.ts

@@ -0,0 +1,83 @@
+/**
+ * #693 — token-bound node controlled local file → Hub /api/upload bridge.
+ *
+ * Security boundary (hard gates):
+ *  1. Cross-host: bytes travel over HTTP multipart; Hub never reads agent FS.
+ *  2. Identity: caller supplies the node's bearer token; ntok binds network.
+ *  3. Path safety: realpath + allowlisted roots; reject NUL, symlink, traversal.
+ *  4. Size ≤ 12 MiB enforced with same-fd fstat + bounded read (no full slurp).
+ *  5. Hub /api/upload is the sole write surface (atomic on hub side).
+ *
+ * Adversarial add-only (#694 DO-NOT-MERGE fixes):
+ *  - TOCTOU: open O_NOFOLLOW → fstat(fd) → read(fd) only; no re-open by path.
+ *  - Bounded read: never allocate/read past CONTROLLED_UPLOAD_MAX_BYTES.
+ *  - NUL guard is live and reachable before any fs call.
+ */
+/** Mirrors server/src/uploads.ts MAX_UPLOAD_BYTES. */
+export declare const CONTROLLED_UPLOAD_MAX_BYTES: number;
+/** Chunk size for bounded streaming read from a single fd. */
+export declare const CONTROLLED_UPLOAD_READ_CHUNK: number;
+export type ControlledUploadErrorCode = "path_required" | "path_nul" | "path_not_found" | "path_untrusted" | "path_symlink" | "path_not_regular" | "path_empty" | "payload_too_large" | "read_failed" | "auth_required" | "hub_url_required" | "upload_failed" | "bad_response" | "missing_file_id";
+export type ControlledUploadFail = {
+    ok: false;
+    error: ControlledUploadErrorCode;
+    message: string;
+};
+export type ControlledUploadOk = {
+    ok: true;
+    file_id: string;
+    name: string;
+    mime: string;
+    size: number;
+    url?: string;
+};
+export type ControlledUploadResult = ControlledUploadOk | ControlledUploadFail;
+export interface ControlledUploadDeps {
+    hubUrl: string;
+    authToken: string;
+    allowedRoots?: string[];
+    alias?: string;
+    nodeDir?: string;
+    fetch?: typeof fetch;
+    home?: string;
+}
+/** Normalize a client filename: basename only, strip controls, cap 255. */
+export declare function normalizeUploadName(input: string | undefined | null, fallback?: string): string;
+export declare function defaultControlledUploadRoots(opts?: {
+    home?: string;
+    alias?: string;
+    nodeDir?: string;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+}): string[];
+/** True iff canonicalPath is strictly inside one of the allowlisted roots. */
+export declare function isPathInsideAllowedRoots(canonicalPath: string, allowedRoots: string[]): boolean;
+/**
+ * Resolve a user-supplied path to a canonical path under an allowlisted root.
+ * Does not open the file for reading — open+fstat+read is a separate same-fd step.
+ */
+export declare function resolveControlledUploadPath(rawPath: string, allowedRoots: string[]): {
+    ok: true;
+    canonicalPath: string;
+} | ControlledUploadFail;
+export type ControlledFileBytes = {
+    ok: true;
+    bytes: Buffer;
+    size: number;
+    canonicalPath: string;
+} | ControlledUploadFail;
+/**
+ * Open → fstat(fd) → bounded read(fd) on the **same fd** (TOCTOU hard gate).
+ * Uses O_NOFOLLOW when available so a symlink swap at open is rejected.
+ * Never uses path-based readFileSync after the initial open.
+ */
+export declare function openFstatBoundedReadControlledFile(canonicalPath: string, allowedRoots: string[], maxBytes?: number): ControlledFileBytes;
+/**
+ * Upload a controlled local file to Hub POST /api/upload.
+ * Returns file_id + metadata for send_reply attachments.
+ * Never falls back to sending a raw path to the Hub.
+ */
+export declare function uploadControlledLocalFile(rawPath: string, deps: ControlledUploadDeps, opts?: {
+    name?: string;
+    mime?: string;
+}): Promise<ControlledUploadResult>;

package/dist/src/copresence-deps.d.ts

@@ -0,0 +1,22 @@
+export interface CopresenceDep {
+    readonly name: string;
+    readonly present: boolean;
+    /** Exact command for this platform, or null when we cannot name one. */
+    readonly install: string | null;
+    readonly why: string;
+}
+export type CommandProbe = (cmd: string) => boolean;
+/** Which agent binary this co-presence lane is built on. */
+export type CopresenceAgent = "codex" | "grok";
+export declare function copresenceDeps(probe: CommandProbe, platform?: NodeJS.Platform, agent?: CopresenceAgent): CopresenceDep[];
+export declare function missingCopresenceDeps(probe: CommandProbe, platform?: NodeJS.Platform, agent?: CopresenceAgent): CopresenceDep[];
+/** One block naming every gap and how to close it — never one gap at a time. */
+export declare function describeMissingDeps(missing: readonly CopresenceDep[], displayName: string): string;
+/**
+ * May we start this hub ourselves?
+ *
+ * Only a loopback hub. A remote URL that refuses the connection is somebody
+ * else's service — spawning a local one would silently point the node at a
+ * DIFFERENT hub than its profile names, which is worse than failing.
+ */
+export declare function isLoopbackHub(hubUrl: string): boolean;