@sleep2agi/agent-network 2.3.0-preview.8 → 2.3.0-preview.80

package/dist/bin/goal-wake-log-render.d.ts

@@ -0,0 +1,31 @@
+export interface WakeLogEntryShape {
+    ts?: string;
+    status?: string;
+    summary?: string;
+    task_id?: string;
+}
+export interface WakeLogGoalShape {
+    goal_id: string;
+    progress_log?: WakeLogEntryShape[];
+}
+export interface WakeLogRenderOpts {
+    /** Trim to the last N entries. undefined = all. */
+    tail?: number;
+}
+/**
+ * Format progress_log as a JSON object suitable for `--json` output.
+ * Pure. Never reads/writes filesystem. Legacy goals without
+ * progress_log render as empty array (not error).
+ */
+export declare function renderWakeLogJson(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): {
+    goal_id: string;
+    total: number;
+    returned: number;
+    entries: WakeLogEntryShape[];
+};
+/**
+ * Format progress_log as a table for human console output.
+ * Column layout mirrors printGoalShow so the two commands read
+ * consistently. Empty log renders a single "(none)" line, not an error.
+ */
+export declare function renderWakeLogText(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): string;

package/dist/src/active-network-task.d.ts

@@ -0,0 +1,28 @@
+export interface ActiveNetworkTask {
+    taskId: string;
+    from: string;
+    startedAt: number;
+}
+/** 运行时崩溃没来得及删标记时的兜底:超过这个年龄的标记当不存在。 */
+export declare const ACTIVE_NETWORK_TASK_MAX_AGE_MS: number;
+export declare function parseActiveNetworkTask(raw: string | null | undefined, now: number, maxAgeMs?: number): ActiveNetworkTask | null;
+export type OutboundTool = "commhub_send_task" | "commhub_send_message";
+export type OutboundRewrite = {
+    kind: "pass";
+} | {
+    kind: "progress_of_active_task";
+    taskId: string;
+    from: string;
+    text: string;
+};
+/**
+ * 只在「目标 alias 恰好是当前网络任务的发起方」时改写;发给别人的照常放行——
+ * 模型替任务派活给第三方是合法的协作,不能一刀切。
+ */
+export declare function decideOutboundRewrite(tool: OutboundTool, args: {
+    alias?: unknown;
+    task?: unknown;
+    message?: unknown;
+} | null | undefined, active: ActiveNetworkTask | null): OutboundRewrite;
+/** outbound-only 模式下模型不能自选 high(#1770 第三条):降为 normal,其余原样。 */
+export declare function clampOutboundPriority(priority: unknown, outboundOnly: boolean): "high" | "normal" | "low" | undefined;

package/dist/src/batch-workdir.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolve one batch workdir before any mkdir/chdir loop starts.
+ *
+ * Node does not expand shell tildes. Leaving `~/team` relative means every
+ * iteration can resolve it from the previous node's cwd and create paths such
+ * as `/work/~/team/~/team`. Only the current user's `~` form is supported;
+ * `~other` is rejected instead of being written as a literal directory.
+ */
+export declare function normalizeBatchWorkdir(input: string, cwd?: string, home?: string): string;

package/dist/src/bootstrap-password-db.d.ts

@@ -0,0 +1,13 @@
+export interface BootstrapPasswordUpdateInvocation {
+    argv: string[];
+    env: NodeJS.ProcessEnv;
+    script: string;
+}
+/**
+ * Resolve the database selected for the local Hub into an explicit absolute
+ * path before launching the bootstrap helper. The helper must never infer a
+ * database from its own HOME/cwd: those can differ from the parent process.
+ */
+export declare function resolveBootstrapDatabasePath(env: NodeJS.ProcessEnv, home: string, cwd: string): string;
+export declare const BOOTSTRAP_PASSWORD_UPDATE_SCRIPT: string;
+export declare function buildBootstrapPasswordUpdateInvocation(userId: string, dbPath: string, baseEnv?: NodeJS.ProcessEnv): BootstrapPasswordUpdateInvocation;

package/dist/src/channel-attachments.d.ts

@@ -0,0 +1,29 @@
+interface AttachmentDescriptor {
+    type?: unknown;
+    file_id?: unknown;
+    path?: unknown;
+    mime?: unknown;
+    name?: unknown;
+    size?: unknown;
+}
+export interface ChannelAttachmentDeps {
+    hubUrl: string;
+    authToken: string;
+    cacheDir: string;
+    fetch?: typeof fetch;
+    maxBytes?: number;
+}
+export interface ChannelAttachmentResult {
+    paths: string[];
+    failures: Array<{
+        fileId: string;
+        code: string;
+        message: string;
+    }>;
+}
+export declare function readableAttachmentsFromInbox(message: any): AttachmentDescriptor[];
+export declare function channelAttachmentCacheDir(home: string, alias: string): string;
+export declare function downloadChannelAttachments(message: any, deps: ChannelAttachmentDeps): Promise<ChannelAttachmentResult>;
+export declare const downloadChannelImageAttachments: typeof downloadChannelAttachments;
+export declare function appendChannelAttachmentPaths(content: string, paths: readonly string[]): string;
+export {};

package/dist/src/channel-meta.d.ts

@@ -0,0 +1,10 @@
+/** One inbound inbox row → the meta Claude Code renders as `<channel …>` attrs.
+ *
+ * Pure so the attribute set is assertable; it used to be inline in the SSE
+ * handler, where nothing could see it. */
+export declare function inboundChannelMeta(msg: {
+    id: string;
+    from_session?: string | null;
+    priority?: string | null;
+    created_at?: string | null;
+}): Record<string, string>;

package/dist/src/channel-task-trace.d.ts

@@ -0,0 +1,14 @@
+export declare function sendChannelTaskWithTrace(input: {
+    alias: string;
+    task: string;
+    priority?: string;
+    fromAlias: string;
+    networkId?: string | null;
+    /** Structured task metadata forwarded verbatim, e.g. { attachments: [...] }.
+     *  Omitted from the outbound body when absent, so a call without it is
+     *  unchanged. */
+    meta?: Record<string, unknown>;
+}, deps: {
+    send: (args: Record<string, unknown>) => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/claude-vendor-env.d.ts

@@ -0,0 +1,28 @@
+export declare const CLAUDE_VENDOR_ENV_KEYS: readonly ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
+export type PlainSecretEnvRewrite = {
+    key: string;
+    refName: string;
+    value: string;
+};
+/**
+ * Plan the values that the node-create writer will move into its line-oriented
+ * `.env` file. This is deliberately side-effect free: callers can run it as a
+ * preflight before creating a node directory, changing process.env, or writing
+ * config.json. Keeping the line-break rejection here makes it cover every
+ * caller of the dotenv writer, including the no-name interactive wizard.
+ */
+export declare function planPlainSecretEnvRewrites(input: {
+    env: unknown;
+    nodeId: string;
+}): PlainSecretEnvRewrite[];
+/**
+ * Persist the exact Anthropic-compatible vendor environment used by an
+ * explicit claude-agent-sdk create. Explicit --env values retain precedence;
+ * ambient shell values only fill missing known keys. Other environment values
+ * are intentionally ignored so node create never snapshots the whole shell.
+ */
+export declare function collectClaudeVendorEnvForCreate(input: {
+    runtime: string;
+    explicitEnv: readonly string[];
+    shellEnv: Readonly<Record<string, string | undefined>>;
+}): string[];

package/dist/src/cli-args.d.ts

@@ -0,0 +1,8 @@
+export type ParsedCliOptions = {
+    [key: string]: string | string[];
+    _channels: string[];
+    _envs: string[];
+};
+export declare const BOOLEAN_FLAGS: Set<string>;
+export declare function parseCliOptions(argv: string[]): ParsedCliOptions;
+export declare function positionalArgs(argv: string[]): string[];

package/dist/src/cli-version-display.d.ts

@@ -0,0 +1,16 @@
+/**
+ * #1645 —— `anet doctor` 原先对三个 runtime CLI **只检查「在不在」**:
+ *
+ *   try { execSync("codex --version", …); check("Codex CLI", true); } catch { … }
+ *
+ * 于是一个**装着、但太旧**的 CLI 会拿到一个 ✅。实测过一次:`codex-cli 0.149.1`
+ * 解不动上游 models 响应(`unknown variant \`max\``,它只认到 `xhigh`),
+ * rmcp worker 致命退出,用户看到的是 300s 超时 —— 而 doctor 说一切正常。
+ *
+ * 🔴 **这里只把版本摆出来,不做最低版本判定。**
+ *    「多少版本才够」由上游返回什么决定,不是我们能钉死的常量;猜一个下限,
+ *    会在别人升级 CLI、上游又改动之后变成误报。而一个会误报的检查,
+ *    第一周就会被人关掉。摆出实际版本,让读的人自己对得上号,是这一格
+ *    现在能诚实做到的全部。
+ */
+export declare function formatCliVersion(raw: unknown): string;

package/dist/src/client-task-trace.d.ts

@@ -0,0 +1,9 @@
+export declare function sendClientTaskWithTrace(input: {
+    alias: string;
+    fromAlias: string;
+    parentTaskId?: string | null;
+    networkId?: string | null;
+}, dependencies: {
+    send: () => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/client.js

@@ -1 +1 @@
-function a0_0x1a4b(_0x5ed33c,_0x30db5b){_0x5ed33c=_0x5ed33c-0x1af;const _0x540cb8=a0_0x540c();let _0x1a4b8b=_0x540cb8[_0x5ed33c];return _0x1a4b8b;}function a0_0x540c(){const _0x3398ef=['token','application/json,\x20text/event-stream','url','3914220FIWCCn','send','/mcp','reply','normal','startsWith','sleep','11863380WleNBg','call','disconnected','task','autoConnect','content','heartbeatTimer','reconnectDelay','1545160KwkaFo','155352EoYLMU','resumeId','registered','slice','6095826qgqwrY','now','completed','toString','getReader','1593675CrzaxG','SSE\x20connected','Authorization','running','sseAbort','log','356WNFEnM','match','name','/events/','heartbeatInterval','processInbox','send_reply','abort','pop','message','offline','connect','AbortError','new_message','4924LlUXBE','text','2.0','emit','report_status','broadcast','sdk','type','status','min','error','get_all_status','Bearer\x20','cwd','sdk-','read','idle','connected','catch','agent','connectSSE','4lWDeOd','alias','parse','new_task','231oYXYZH','application/json','SSE\x20reconnecting\x20in\x20','text/event-stream','result','signal','stringify'];a0_0x540c=function(){return _0x3398ef;};return a0_0x540c();}const a0_0x999825=a0_0x1a4b;(function(_0x4c66d1,_0x418324){const _0x1d1d05=a0_0x1a4b,_0xd91cc0=_0x4c66d1();while(!![]){try{const _0x1f6b79=-parseInt(_0x1d1d05(0x1db))/0x1*(parseInt(_0x1d1d05(0x1cd))/0x2)+parseInt(_0x1d1d05(0x1c7))/0x3+-parseInt(_0x1d1d05(0x1f0))/0x4*(-parseInt(_0x1d1d05(0x1bd))/0x5)+parseInt(_0x1d1d05(0x1fe))/0x6+parseInt(_0x1d1d05(0x1f4))/0x7*(-parseInt(_0x1d1d05(0x1be))/0x8)+-parseInt(_0x1d1d05(0x1c2))/0x9+parseInt(_0x1d1d05(0x1b5))/0xa;if(_0x1f6b79===_0x418324)break;else _0xd91cc0['push'](_0xd91cc0['shift']());}catch(_0x32d0bb){_0xd91cc0['push'](_0xd91cc0['shift']());}}}(a0_0x540c,0x76400));import{EventEmitter as a0_0x5183e4}from'events';import{hostname as a0_0x40be42}from'os';class T extends a0_0x5183e4{[a0_0x999825(0x1fd)];[a0_0x999825(0x1f1)];['token'];[a0_0x999825(0x1ee)];[a0_0x999825(0x1bf)];[a0_0x999825(0x1d1)];[a0_0x999825(0x1bc)];[a0_0x999825(0x1bb)];[a0_0x999825(0x1cb)];[a0_0x999825(0x1ca)]=!0x1;constructor(_0x4f27da){const _0xac7ce3=a0_0x999825;super();if(this[_0xac7ce3(0x1fd)]=_0x4f27da[_0xac7ce3(0x1fd)]['replace'](/\/$/,''),this[_0xac7ce3(0x1f1)]=_0x4f27da['alias'],this['token']=_0x4f27da[_0xac7ce3(0x1fb)],this[_0xac7ce3(0x1ee)]=_0x4f27da[_0xac7ce3(0x1ee)]||_0xac7ce3(0x1e1),this[_0xac7ce3(0x1bf)]=_0xac7ce3(0x1e9)+_0x4f27da['alias']+'-'+Date[_0xac7ce3(0x1c3)]()[_0xac7ce3(0x1c5)](0x24),this[_0xac7ce3(0x1d1)]=_0x4f27da[_0xac7ce3(0x1d1)]??0x2bf20,this[_0xac7ce3(0x1bc)]=_0x4f27da[_0xac7ce3(0x1bc)]??0xbb8,_0x4f27da[_0xac7ce3(0x1b9)]!==!0x1)this[_0xac7ce3(0x1d8)]();}[a0_0x999825(0x1cc)](_0x9d2f4){const _0x25f00c=a0_0x999825;console[_0x25f00c(0x1cc)]('['+new Date()['toTimeString']()[_0x25f00c(0x1c1)](0x0,0x8)+']\x20[commhub:'+this[_0x25f00c(0x1f1)]+']\x20'+_0x9d2f4);}async[a0_0x999825(0x1b6)](_0x2d02b7,_0x5e23f1){const _0x582642=a0_0x999825;let _0x1f8b3d={'Content-Type':_0x582642(0x1f5),'Accept':_0x582642(0x1fc)};if(this[_0x582642(0x1fb)])_0x1f8b3d[_0x582642(0x1c9)]=_0x582642(0x1e7)+this[_0x582642(0x1fb)];let _0x13e135=await(await fetch(this[_0x582642(0x1fd)]+_0x582642(0x1b0),{'method':'POST','headers':_0x1f8b3d,'body':JSON[_0x582642(0x1fa)]({'jsonrpc':_0x582642(0x1dd),'id':Date[_0x582642(0x1c3)](),'method':'tools/call','params':{'name':_0x2d02b7,'arguments':_0x5e23f1}})}))[_0x582642(0x1dc)](),_0x38ecf4=_0x13e135[_0x582642(0x1ce)](/data: (.+)/),_0x23767f=_0x38ecf4?JSON[_0x582642(0x1f2)](_0x38ecf4[0x1]):JSON[_0x582642(0x1f2)](_0x13e135),_0x56f3dc=_0x23767f?.[_0x582642(0x1f8)]?.[_0x582642(0x1ba)]?.[0x0]?.['text'];return _0x56f3dc?JSON[_0x582642(0x1f2)](_0x56f3dc):_0x23767f;}async[a0_0x999825(0x1d8)](){const _0x183084=a0_0x999825;if(this[_0x183084(0x1ca)])return;this[_0x183084(0x1ca)]=!0x0,await this[_0x183084(0x1e3)](_0x183084(0x1eb)),this['log'](_0x183084(0x1c0)),this['heartbeatTimer']=setInterval(()=>{const _0x153a01=_0x183084;this[_0x153a01(0x1e3)](_0x153a01(0x1eb))['catch'](_0xf3a729=>this[_0x153a01(0x1cc)]('heartbeat\x20failed:\x20'+_0xf3a729[_0x153a01(0x1d6)]));},this[_0x183084(0x1d1)]),this[_0x183084(0x1ef)]();}async['disconnect'](){const _0x3cdf0b=a0_0x999825;if(this['running']=!0x1,this[_0x3cdf0b(0x1cb)]?.[_0x3cdf0b(0x1d4)](),this[_0x3cdf0b(0x1bb)])clearInterval(this[_0x3cdf0b(0x1bb)]);await this['status'](_0x3cdf0b(0x1d7))[_0x3cdf0b(0x1ed)](()=>{}),this['log'](_0x3cdf0b(0x1b7));}async[a0_0x999825(0x1af)](_0x3f7ba0,_0x566f3b,_0x3da99c=a0_0x999825(0x1b2)){const _0x241cdf=a0_0x999825;return this[_0x241cdf(0x1b6)]('send_task',{'alias':_0x3f7ba0,'task':_0x566f3b,'priority':_0x3da99c,'from_session':this[_0x241cdf(0x1f1)]});}async['message'](_0x13f328,_0x254f4e){const _0x1d713b=a0_0x999825;return this[_0x1d713b(0x1b6)]('send_message',{'alias':_0x13f328,'message':_0x254f4e,'from_session':this[_0x1d713b(0x1f1)]});}async[a0_0x999825(0x1b1)](_0xe7466a,_0x478922,_0x2f203e=a0_0x999825(0x1c4)){const _0x21f4a5=a0_0x999825;return this[_0x21f4a5(0x1b6)](_0x21f4a5(0x1d3),{'in_reply_to':_0xe7466a,'text':_0x478922,'status':_0x2f203e});}async['status'](_0x5c6444,_0x5095b1){const _0x449cc6=a0_0x999825;return this[_0x449cc6(0x1b6)](_0x449cc6(0x1df),{'resume_id':this[_0x449cc6(0x1bf)],'alias':this[_0x449cc6(0x1f1)],'status':_0x5c6444,'server':a0_0x40be42(),'hostname':a0_0x40be42(),'agent':this[_0x449cc6(0x1ee)],'project_dir':process[_0x449cc6(0x1e8)](),..._0x5095b1});}async['getAllStatus'](){const _0x1f1762=a0_0x999825;return this[_0x1f1762(0x1b6)](_0x1f1762(0x1e6),{});}async[a0_0x999825(0x1e0)](_0x581001,_0x5c146d){const _0x229538=a0_0x999825;return this['call'](_0x229538(0x1e0),{'message':_0x581001,'filter_server':_0x5c146d?.['server'],'filter_status':_0x5c146d?.[_0x229538(0x1e3)]});}async[a0_0x999825(0x1ef)](){const _0x468c96=a0_0x999825;let _0x243ca8=encodeURIComponent(this['alias']),_0x13ba31=this[_0x468c96(0x1fd)]+_0x468c96(0x1d0)+_0x243ca8,_0x320db5=this[_0x468c96(0x1bc)];while(this[_0x468c96(0x1ca)]){try{this['sseAbort']=new AbortController();let _0x5c46cb={'Accept':_0x468c96(0x1f7)};if(this['token'])_0x5c46cb[_0x468c96(0x1c9)]=_0x468c96(0x1e7)+this[_0x468c96(0x1fb)];let _0x2a4087=await fetch(_0x13ba31,{'headers':_0x5c46cb,'signal':this[_0x468c96(0x1cb)][_0x468c96(0x1f9)]});if(!_0x2a4087['ok']||!_0x2a4087['body']){this['log']('SSE\x20failed:\x20'+_0x2a4087[_0x468c96(0x1e3)]),await this[_0x468c96(0x1b4)](_0x320db5),_0x320db5=Math[_0x468c96(0x1e4)](_0x320db5*1.5,0xea60);continue;}_0x320db5=this[_0x468c96(0x1bc)];let _0x24dc80=_0x2a4087['body'][_0x468c96(0x1c6)](),_0x2e483c=new TextDecoder(),_0x1c1ce3='';while(this[_0x468c96(0x1ca)]){let {done:_0x20fc68,value:_0x1314c0}=await _0x24dc80[_0x468c96(0x1ea)]();if(_0x20fc68)break;_0x1c1ce3+=_0x2e483c['decode'](_0x1314c0,{'stream':!0x0});let _0x45d15e=_0x1c1ce3['split']('\x0a');_0x1c1ce3=_0x45d15e[_0x468c96(0x1d5)]()||'';for(let _0x234929 of _0x45d15e){if(!_0x234929[_0x468c96(0x1b3)]('data:\x20'))continue;try{let _0x37ea62=JSON[_0x468c96(0x1f2)](_0x234929[_0x468c96(0x1c1)](0x6));if(_0x37ea62[_0x468c96(0x1e2)]===_0x468c96(0x1ec)){this['log'](_0x468c96(0x1c8)),this[_0x468c96(0x1de)](_0x468c96(0x1ec));continue;}if(_0x37ea62['type']===_0x468c96(0x1f3)||_0x37ea62[_0x468c96(0x1e2)]===_0x468c96(0x1da)||_0x37ea62[_0x468c96(0x1e2)]==='broadcast')await this[_0x468c96(0x1d2)]();}catch{}}}}catch(_0x26936b){if(_0x26936b[_0x468c96(0x1cf)]===_0x468c96(0x1d9))break;this[_0x468c96(0x1de)](_0x468c96(0x1e5),_0x26936b),this[_0x468c96(0x1cc)]('SSE\x20error:\x20'+_0x26936b[_0x468c96(0x1d6)]);}if(this[_0x468c96(0x1ca)])this[_0x468c96(0x1de)](_0x468c96(0x1b7)),this[_0x468c96(0x1cc)](_0x468c96(0x1f6)+_0x320db5/0x3e8+'s...'),await this['sleep'](_0x320db5),_0x320db5=Math[_0x468c96(0x1e4)](_0x320db5*1.5,0xea60);}}async[a0_0x999825(0x1d2)](){const _0x578893=a0_0x999825;try{let _0x2392a8=(await this['call']('get_inbox',{'alias':this['alias'],'limit':0xa}))?.['messages']||[];for(let _0x4474fc of _0x2392a8)await this[_0x578893(0x1b6)]('ack_inbox',{'alias':this[_0x578893(0x1f1)],'message_id':_0x4474fc['id']}),this[_0x578893(0x1cc)]('←\x20'+_0x4474fc['from_session']+':\x20'+_0x4474fc[_0x578893(0x1ba)]['slice'](0x0,0x3c)),this[_0x578893(0x1de)](_0x578893(0x1b8),_0x4474fc),this['emit'](_0x578893(0x1d6),_0x4474fc);}catch(_0x1c4649){this[_0x578893(0x1cc)]('inbox\x20error:\x20'+_0x1c4649['message']);}}['sleep'](_0x5b8686){return new Promise(_0x304075=>setTimeout(_0x304075,_0x5b8686));}}var $=T;export{$ as default,T as CommHub};
+const a0_0x162b24=a0_0x4374;(function(_0x332f59,_0x2e54f1){const _0x4e3089=a0_0x4374,_0x3937d0=_0x332f59();while(!![]){try{const _0x5272f8=parseInt(_0x4e3089(0x11f))/0x1*(-parseInt(_0x4e3089(0xc6))/0x2)+-parseInt(_0x4e3089(0xdd))/0x3+parseInt(_0x4e3089(0x121))/0x4*(-parseInt(_0x4e3089(0xd3))/0x5)+parseInt(_0x4e3089(0x125))/0x6+-parseInt(_0x4e3089(0x113))/0x7+parseInt(_0x4e3089(0xe0))/0x8*(parseInt(_0x4e3089(0x132))/0x9)+-parseInt(_0x4e3089(0x101))/0xa*(-parseInt(_0x4e3089(0xbe))/0xb);if(_0x5272f8===_0x2e54f1)break;else _0x3937d0['push'](_0x3937d0['shift']());}catch(_0x370ca0){_0x3937d0['push'](_0x3937d0['shift']());}}}(a0_0x3edb,0x88359));import{EventEmitter as a0_0x27807f}from'events';import{hostname as a0_0x520ff0}from'os';var K=/(?:atok|ntok|utok|ghp|github_pat)_[A-Za-z0-9_-]+|Bearer\s+\S+/gi,L=(_0x4be9be,_0x332394)=>(_0x4be9be??_0x332394)['replace'](/[\r\n\x00-\x1f\x7f]/g,'\x20')['slice'](0x0,0xf0);function N(_0x3d7f6f){const _0x47c7b3=a0_0x4374;return(_0x3d7f6f instanceof Error?_0x3d7f6f[_0x47c7b3(0xef)]:String(_0x3d7f6f??_0x47c7b3(0xf1)))[_0x47c7b3(0xda)](K,_0x47c7b3(0x102))[_0x47c7b3(0xda)](/[\r\n\x00-\x1f\x7f]/g,'\x20')['slice'](0x0,0xf0);}function O(_0xb11477,_0x38f5ab=process.env.ANET_TASK_TRACE_FORMAT===a0_0x162b24(0xf9)){const _0x58690b=a0_0x162b24;if(_0x38f5ab)return JSON['stringify'](_0xb11477);let _0x403737=L(_0xb11477['parent_task_id'],_0x58690b(0xc9)),_0x1c0ebd=L(_0xb11477[_0x58690b(0x119)],'<pending>'),_0x4f4cff=_0xb11477[_0x58690b(0xfd)]?_0x58690b(0xbb)+_0xb11477[_0x58690b(0xfd)]+':'+(_0xb11477['error_message']??''):'';return _0x58690b(0x115)+_0xb11477[_0x58690b(0x124)]+_0x58690b(0xca)+L(_0xb11477[_0x58690b(0xc8)],_0x58690b(0x129))+_0x58690b(0xd0)+L(_0xb11477[_0x58690b(0xd7)],'<unknown>')+_0x58690b(0x10d)+_0x1c0ebd+_0x58690b(0x10c)+_0x403737+_0x58690b(0x10f)+L(_0xb11477['network_id'],_0x58690b(0x129))+'\x20transport='+_0xb11477['transport']+_0x58690b(0xdb)+_0xb11477[_0x58690b(0xff)]+'\x20lifecycle='+_0xb11477[_0x58690b(0x130)]+_0x4f4cff;}function U(_0x1fe6a5){const _0xbce298=a0_0x162b24;return{'event':{'sending':_0xbce298(0xdc),'delivered':'task.send.delivered','failed':_0xbce298(0xe5),'acked':_0xbce298(0x114),'started':'task.started','replied':_0xbce298(0xb8),'expired':'task.expired'}[_0x1fe6a5[_0xbce298(0x124)]],..._0x1fe6a5};}function j(_0x57c89b){const _0x240cf0=a0_0x162b24;let _0x1fced9=_0x57c89b?.['task_id']||_0x57c89b?.[_0x240cf0(0x11d)]||_0x57c89b?.['id'];if(_0x1fced9)return String(_0x1fced9);let _0x28f9c8=_0x57c89b?.[_0x240cf0(0xd2)]?.[0x0]?.[_0x240cf0(0x134)];if(typeof _0x28f9c8!==_0x240cf0(0xf6))return null;try{let _0x247683=JSON['parse'](_0x28f9c8);return _0x247683?.['task_id']||_0x247683?.['message_id']||_0x247683?.['id']||null;}catch{return null;}}async function X(_0x2c76b4,_0x4d1210){const _0xdc8e1b=a0_0x162b24;let _0x38beb3=_0x4d1210['now']??Date[_0xdc8e1b(0xcc)],_0x4e608a=_0x38beb3(),_0x3e7eb1=(_0x5efa61,_0x32c170,_0x8cdb82,_0x5b019f)=>{const _0x3ae2fb=_0xdc8e1b;_0x4d1210['log'](O(U({'from_alias':_0x2c76b4['fromAlias'],'to_alias':_0x2c76b4[_0x3ae2fb(0x110)],'task_id':_0x32c170,'parent_task_id':_0x2c76b4['parentTaskId'],'network_id':_0x2c76b4[_0x3ae2fb(0xea)],'transport':_0x2c76b4[_0x3ae2fb(0xd1)],'status':_0x5efa61,'duration_ms':_0x38beb3()-_0x4e608a,'lifecycle_tracking':_0x2c76b4[_0x3ae2fb(0x11c)],..._0x8cdb82!==void 0x0?{'error_code':_0x5b019f||'send_failed','error_message':N(_0x8cdb82)}:{}})));};_0x3e7eb1('sending',null);try{let _0x54b8a6=await _0x4d1210[_0xdc8e1b(0xcd)](),_0x87c771=j(_0x54b8a6);if(_0x87c771)_0x3e7eb1(_0xdc8e1b(0x12a),_0x87c771);else{if(_0x54b8a6?.['ok']===!0x1||_0x54b8a6?.[_0xdc8e1b(0x127)])_0x3e7eb1(_0xdc8e1b(0x12f),_0x87c771,_0x54b8a6?.[_0xdc8e1b(0x127)]||_0xdc8e1b(0x100),_0xdc8e1b(0xfa));else _0x3e7eb1(_0xdc8e1b(0x12f),null,_0xdc8e1b(0xf7),_0xdc8e1b(0xfb));}return _0x54b8a6;}catch(_0x29a54b){throw _0x3e7eb1(_0xdc8e1b(0x12f),null,_0x29a54b,_0xdc8e1b(0xf4)),_0x29a54b;}}async function Y(_0xd80b11,_0x2809cd){const _0x3357fe=a0_0x162b24;return X({'fromAlias':_0xd80b11[_0x3357fe(0x133)],'toAlias':_0xd80b11['alias'],'parentTaskId':_0xd80b11[_0x3357fe(0x109)]||null,'networkId':_0xd80b11['networkId']||null,'transport':_0x3357fe(0x112),'lifecycleTracking':_0x3357fe(0x131)},_0x2809cd);}class $ extends a0_0x27807f{[a0_0x162b24(0xfc)];[a0_0x162b24(0xba)];[a0_0x162b24(0x122)];[a0_0x162b24(0x108)];[a0_0x162b24(0xc7)];['heartbeatInterval'];[a0_0x162b24(0x123)];['heartbeatTimer'];[a0_0x162b24(0xd5)];['running']=!0x1;constructor(_0x332e5c){const _0x4da888=a0_0x162b24;super();if(this[_0x4da888(0xfc)]=_0x332e5c[_0x4da888(0xfc)]['replace'](/\/$/,''),this[_0x4da888(0xba)]=_0x332e5c[_0x4da888(0xba)],this[_0x4da888(0x122)]=_0x332e5c[_0x4da888(0x122)],this[_0x4da888(0x108)]=_0x332e5c[_0x4da888(0x108)]||'sdk',this['resumeId']='sdk-'+_0x332e5c[_0x4da888(0xba)]+'-'+Date[_0x4da888(0xcc)]()['toString'](0x24),this[_0x4da888(0xc4)]=_0x332e5c[_0x4da888(0xc4)]??0x2bf20,this[_0x4da888(0x123)]=_0x332e5c[_0x4da888(0x123)]??0xbb8,_0x332e5c[_0x4da888(0xe8)]!==!0x1)this[_0x4da888(0xd4)]();}[a0_0x162b24(0xcf)](_0x12b61f){const _0x6c3629=a0_0x162b24;console[_0x6c3629(0xcf)]('['+new Date()[_0x6c3629(0xcb)]()[_0x6c3629(0xd6)](0x0,0x8)+_0x6c3629(0xe3)+this[_0x6c3629(0xba)]+']\x20'+_0x12b61f);}async[a0_0x162b24(0xf5)](_0x52d279,_0x40629d){const _0x3d2c6d=a0_0x162b24;let _0xbb1ec8={'Content-Type':_0x3d2c6d(0x10b),'Accept':'application/json,\x20text/event-stream'};if(this[_0x3d2c6d(0x122)])_0xbb1ec8['Authorization']=_0x3d2c6d(0xeb)+this['token'];let _0x519092=await(await fetch(this[_0x3d2c6d(0xfc)]+_0x3d2c6d(0x10a),{'method':_0x3d2c6d(0x11a),'headers':_0xbb1ec8,'body':JSON[_0x3d2c6d(0xc3)]({'jsonrpc':_0x3d2c6d(0xe6),'id':Date[_0x3d2c6d(0xcc)](),'method':_0x3d2c6d(0xbf),'params':{'name':_0x52d279,'arguments':_0x40629d}})}))[_0x3d2c6d(0x134)](),_0x1d67bf=_0x519092['match'](/data: (.+)/),_0x15909d=_0x1d67bf?JSON[_0x3d2c6d(0xec)](_0x1d67bf[0x1]):JSON[_0x3d2c6d(0xec)](_0x519092),_0x1ca3da=_0x15909d?.[_0x3d2c6d(0x107)]?.[_0x3d2c6d(0xd2)]?.[0x0]?.[_0x3d2c6d(0x134)];return _0x1ca3da?JSON[_0x3d2c6d(0xec)](_0x1ca3da):_0x15909d;}async[a0_0x162b24(0xd4)](){const _0x5a7323=a0_0x162b24;if(this[_0x5a7323(0x103)])return;this[_0x5a7323(0x103)]=!0x0,await this['status']('idle'),this[_0x5a7323(0xcf)](_0x5a7323(0xe1)),this['heartbeatTimer']=setInterval(()=>{const _0x26c2c3=_0x5a7323;this[_0x26c2c3(0x124)](_0x26c2c3(0x128))[_0x26c2c3(0x120)](_0x3f225e=>this[_0x26c2c3(0xcf)](_0x26c2c3(0xce)+_0x3f225e[_0x26c2c3(0xef)]));},this['heartbeatInterval']),this[_0x5a7323(0x106)]();}async[a0_0x162b24(0x118)](){const _0x1c4840=a0_0x162b24;if(this[_0x1c4840(0x103)]=!0x1,this['sseAbort']?.['abort'](),this['heartbeatTimer'])clearInterval(this[_0x1c4840(0x12d)]);await this['status'](_0x1c4840(0xc2))[_0x1c4840(0x120)](()=>{}),this[_0x1c4840(0xcf)]('disconnected');}async[a0_0x162b24(0xcd)](_0x39449a,_0x255fa7,_0x58ae8d=a0_0x162b24(0xde)){const _0x49e7fb=a0_0x162b24;return Y({'alias':_0x39449a,'fromAlias':this[_0x49e7fb(0xba)]},{'log':_0x3b8a1e=>console[_0x49e7fb(0xcf)](_0x3b8a1e),'send':()=>this[_0x49e7fb(0xf5)]('send_task',{'alias':_0x39449a,'task':_0x255fa7,'priority':_0x58ae8d,'from_session':this[_0x49e7fb(0xba)]})});}async['message'](_0x6bc9db,_0x9341c7){const _0x1cd904=a0_0x162b24;return this[_0x1cd904(0xf5)]('send_message',{'alias':_0x6bc9db,'message':_0x9341c7,'from_session':this['alias']});}async[a0_0x162b24(0xed)](_0x1effb7,_0x461000,_0x297735=a0_0x162b24(0xf0)){const _0x2e86df=a0_0x162b24;return this['call'](_0x2e86df(0x10e),{'in_reply_to':_0x1effb7,'text':_0x461000,'status':_0x297735});}async[a0_0x162b24(0x124)](_0x2ed2cb,_0x2082a1){const _0x5b9671=a0_0x162b24;return this['call']('report_status',{'resume_id':this[_0x5b9671(0xc7)],'alias':this['alias'],'status':_0x2ed2cb,'server':a0_0x520ff0(),'hostname':a0_0x520ff0(),'agent':this[_0x5b9671(0x108)],'project_dir':process[_0x5b9671(0xbd)](),..._0x2082a1});}async['getAllStatus'](){const _0xcd9bbe=a0_0x162b24;return this[_0xcd9bbe(0xf5)](_0xcd9bbe(0xe2),{});}async[a0_0x162b24(0xc0)](_0x536c3b,_0x16f1e9){const _0x1efcd9=a0_0x162b24;return this[_0x1efcd9(0xf5)]('broadcast',{'message':_0x536c3b,'filter_server':_0x16f1e9?.[_0x1efcd9(0xe4)],'filter_status':_0x16f1e9?.['status']});}async['connectSSE'](){const _0x59ce77=a0_0x162b24;let _0x3ba488=encodeURIComponent(this[_0x59ce77(0xba)]),_0x2b39ef=this['url']+_0x59ce77(0xf8)+_0x3ba488,_0xcca5d5=this['reconnectDelay'];while(this[_0x59ce77(0x103)]){try{this[_0x59ce77(0xd5)]=new AbortController();let _0x112931={'Accept':_0x59ce77(0x135)};if(this[_0x59ce77(0x122)])_0x112931[_0x59ce77(0xc1)]=_0x59ce77(0xeb)+this[_0x59ce77(0x122)];let _0x3f5fe8=await fetch(_0x2b39ef,{'headers':_0x112931,'signal':this[_0x59ce77(0xd5)]['signal']});if(!_0x3f5fe8['ok']||!_0x3f5fe8[_0x59ce77(0xbc)]){this[_0x59ce77(0xcf)](_0x59ce77(0x11e)+_0x3f5fe8[_0x59ce77(0x124)]),await this[_0x59ce77(0xc5)](_0xcca5d5),_0xcca5d5=Math[_0x59ce77(0x11b)](_0xcca5d5*1.5,0xea60);continue;}_0xcca5d5=this[_0x59ce77(0x123)];let _0x4d0441=_0x3f5fe8['body'][_0x59ce77(0x116)](),_0x5e1922=new TextDecoder(),_0x67b194='';while(this[_0x59ce77(0x103)]){let {done:_0x46529e,value:_0x5a02ff}=await _0x4d0441[_0x59ce77(0xee)]();if(_0x46529e)break;_0x67b194+=_0x5e1922['decode'](_0x5a02ff,{'stream':!0x0});let _0x35bd36=_0x67b194[_0x59ce77(0x12e)]('\x0a');_0x67b194=_0x35bd36['pop']()||'';for(let _0x55bba5 of _0x35bd36){if(!_0x55bba5[_0x59ce77(0xd8)](_0x59ce77(0x12b)))continue;try{let _0x544150=JSON['parse'](_0x55bba5[_0x59ce77(0xd6)](0x6));if(_0x544150[_0x59ce77(0x12c)]===_0x59ce77(0x126)){this[_0x59ce77(0xcf)]('SSE\x20connected'),this[_0x59ce77(0xe7)](_0x59ce77(0x126));continue;}if(_0x544150['type']==='new_task'||_0x544150[_0x59ce77(0x12c)]===_0x59ce77(0xfe)||_0x544150['type']===_0x59ce77(0xc0))await this[_0x59ce77(0x105)]();}catch{}}}}catch(_0x10831a){if(_0x10831a['name']===_0x59ce77(0xdf))break;this[_0x59ce77(0xe7)](_0x59ce77(0x127),_0x10831a),this[_0x59ce77(0xcf)](_0x59ce77(0x111)+_0x10831a[_0x59ce77(0xef)]);}if(this['running'])this[_0x59ce77(0xe7)](_0x59ce77(0xb9)),this[_0x59ce77(0xcf)](_0x59ce77(0x117)+_0xcca5d5/0x3e8+_0x59ce77(0xd9)),await this['sleep'](_0xcca5d5),_0xcca5d5=Math[_0x59ce77(0x11b)](_0xcca5d5*1.5,0xea60);}}async[a0_0x162b24(0x105)](){const _0x34b8c2=a0_0x162b24;try{let _0x1fd97a=(await this[_0x34b8c2(0xf5)](_0x34b8c2(0xf3),{'alias':this[_0x34b8c2(0xba)],'limit':0xa}))?.[_0x34b8c2(0xe9)]||[];for(let _0x258423 of _0x1fd97a)await this['call'](_0x34b8c2(0xf2),{'alias':this[_0x34b8c2(0xba)],'message_id':_0x258423['id']}),this['log']('←\x20'+_0x258423[_0x34b8c2(0x104)]+':\x20'+_0x258423[_0x34b8c2(0xd2)][_0x34b8c2(0xd6)](0x0,0x3c)),this['emit']('task',_0x258423),this['emit'](_0x34b8c2(0xef),_0x258423);}catch(_0x5570a0){this[_0x34b8c2(0xcf)]('inbox\x20error:\x20'+_0x5570a0[_0x34b8c2(0xef)]);}}['sleep'](_0x4c7a6f){return new Promise(_0xbecdc4=>setTimeout(_0xbecdc4,_0x4c7a6f));}}function a0_0x4374(_0x453330,_0xf89ad0){_0x453330=_0x453330-0xb8;const _0x3edb44=a0_0x3edb();let _0x43740c=_0x3edb44[_0x453330];return _0x43740c;}var F=$;function a0_0x3edb(){const _0xede001=['task.send.failed','2.0','emit','autoConnect','messages','networkId','Bearer\x20','parse','reply','read','message','completed','unknown\x20error','ack_inbox','get_inbox','send_failed','call','string','CommHub\x20response\x20omitted\x20task_id','/events/','json','send_rejected','missing_task_id','url','error_code','new_message','duration_ms','CommHub\x20rejected\x20task','5780FVZnEm','[REDACTED]','running','from_session','processInbox','connectSSE','result','agent','parentTaskId','/mcp','application/json','\x20parent_task_id=','\x20task_id=','send_reply','\x20network_id=','toAlias','SSE\x20error:\x20','mcp_http','4484382sTxLgC','task.ack','[commhub:task]\x20','getReader','SSE\x20reconnecting\x20in\x20','disconnect','task_id','POST','min','lifecycleTracking','message_id','SSE\x20failed:\x20','5088JdgEzi','catch','244tdSVeV','token','reconnectDelay','status','3660312SrPvJi','connected','error','idle','<unknown>','delivered','data:\x20','type','heartbeatTimer','split','failed','lifecycle_tracking','not_tracked','15813uIbKUD','fromAlias','text','text/event-stream','task.replied','disconnected','alias','\x20error=','body','cwd','45012DcooiM','tools/call','broadcast','Authorization','offline','stringify','heartbeatInterval','sleep','364RYchaV','resumeId','from_alias','<missing>','\x20from=','toTimeString','now','send','heartbeat\x20failed:\x20','log','\x20to=','transport','content','41415NSbqtj','connect','sseAbort','slice','to_alias','startsWith','s...','replace','\x20duration_ms=','task.send.start','3023397neqzQK','normal','AbortError','3016VUmapD','registered','get_all_status',']\x20[commhub:','server'];a0_0x3edb=function(){return _0xede001;};return a0_0x3edb();}export{F as default,$ as CommHub};

package/dist/src/codex-copresence-preflight.d.ts

@@ -0,0 +1,65 @@
+export interface CodexHomeInheritedFile {
+    readonly name: string;
+    readonly mode: number;
+    /** Why a node needs it — printed when staged, so the action is legible. */
+    readonly because: string;
+}
+export declare const CODEX_HOME_INHERITED_FILES: readonly CodexHomeInheritedFile[];
+export interface StatLike {
+    readonly mtimeMs: number;
+}
+export type StatFn = (path: string) => StatLike | null;
+export interface CodexHomeStageStep {
+    readonly name: string;
+    readonly src: string;
+    readonly dst: string;
+    readonly mode: number;
+    readonly reason: "missing" | "host-newer";
+    readonly because: string;
+}
+/**
+ * What to copy from the host CODEX_HOME into the node's, right now.
+ *
+ * Pure: takes the stat function so the ordering rules are testable without a
+ * filesystem. A node file that is NEWER than the host's is left alone — codex
+ * refreshes its own copy in place, and clobbering it would throw away a fresher
+ * token than the one we hold.
+ */
+export declare function codexHomeStagePlan(hostHome: string, nodeHome: string, stat: StatFn, join: (a: string, b: string) => string, files?: readonly CodexHomeInheritedFile[]): CodexHomeStageStep[];
+export type CodexTuiBlocker = "sign-in" | "update-prompt" | "trust-prompt";
+export type CodexTuiPaneState = CodexTuiBlocker | "not-painted" | "usable";
+/**
+ * Classify the TUI, from two different reads of the same pane.
+ *
+ * They answer different questions and need different tmux flags — the same
+ * distinction `waitForTmuxPaneText` documents one screenful up:
+ *
+ *   onScreen  (capture-pane, no -S)  → "is it sitting on a prompt right now"
+ *             A prompt that was already answered stays in scrollback forever,
+ *             so reading history here would report a fixed node as blocked.
+ *
+ *   everSeen  (capture-pane -S -N)   → "did the TUI ever paint"
+ *             The banner is printed once and scrolls away — an MCP error burst
+ *             was enough to push it off screen in under a minute — so reading
+ *             only the current screen here would report a working node as dead.
+ *
+ * 🔴 And "the pane has text" answers neither. An earlier version of this used
+ * "≥3 non-empty lines ⇒ ready" and passed a node parked on the sign-in page.
+ * Measured timeline for that start:
+ *
+ *     t≈3s   22 non-empty lines   ← launcher output, TUI not up yet
+ *     t≈6s    0 non-empty lines   ← codex clears the screen and takes over
+ *     t≈9s   10 non-empty lines   ← the sign-in page finally paints
+ *
+ * The rule fired at t≈3s, six seconds before the thing it was meant to catch
+ * existed.
+ */
+export declare function codexTuiPaneState(onScreen: string, everSeen?: string): CodexTuiPaneState;
+/**
+ * What the operator should read when a node came up but cannot work. Names the
+ * blocker AND where to look — a launcher that only says "not ready" sends
+ * someone hunting through three tmux sessions.
+ */
+export declare function describeCodexTuiBlocker(blocker: CodexTuiBlocker, displayName: string, tuiSession: string): string;
+/** The TUI never painted at all — a distinct failure from being blocked. */
+export declare function describeCodexTuiNotPainted(displayName: string, tuiSession: string, waitedMs: number): string;

package/dist/src/codex-copresence-profile.d.ts

@@ -0,0 +1,125 @@
+export interface CodexCopresenceProfileFields {
+    readonly runtime?: string;
+    readonly codexCopresence?: boolean;
+    readonly codexCopresenceFullAccess?: boolean;
+    readonly flags?: Record<string, unknown>;
+    /** Absolute project directory to launch the codex TUI in. Passed as
+     *  `-C <dir>` to `codex resume`. Also cross-checked against hub-reported
+     *  `session.project_dir` in Phase 4.3. */
+    readonly codexProjectDir?: string;
+    /** Which launch adapter to use in Phase 3.2. `"codex-standard"` = stock
+     *  `codex app-server` + `codex resume`; `"codex-custom-wrapper"` = TMHR狗-class
+     *  custom LLM API wrapper (hosted tool / compaction / image-output compat).
+     *  Unknown / absent → Phase 0 fail-closed (unknown adapters must not fall
+     *  through to a default that might not fit the node's real topology). */
+    readonly codexLaunchAdapter?: "codex-standard" | "codex-custom-wrapper";
+    /** Alias of the peer that will verify this node's identity in Phase 6.
+     *  Peer MUST be (a) registered in the same network, (b) online at resume
+     *  time, (c) not this node itself. Identity attestation uses a fresh
+     *  Hub outbound `send_task` from THIS node's Bridge to <codexProbePeer>
+     *  carrying a nonce; peer echoes the nonce back; CLI cross-checks Hub's
+     *  recorded `from_name / from_node_id / to_name / to_node_id`.
+     *
+     *  🔴 self-loop is deliberately not accepted here — it cannot prove
+     *  cross-node routing closure (design v7 Phase 6 = D, per TMHR
+     *  06cfb29a). Single-node users cannot run `anet node resume` in
+     *  this initial cut; tracked at #1527. */
+    readonly codexProbePeer?: string;
+}
+/** #1521 — the three fields `anet node resume <alias>` will require on a
+ *  codex-copresence node once the resume dispatcher lands (#1528, Draft).
+ *  In this PR, only shape-level enumeration exists (see
+ *  `missingCodexResumeFields` below); no CLI code reads that enumeration
+ *  and the operator-facing remediation flow is deliberately deferred
+ *  along with its real caller. */
+export type CodexResumeRequiredField = "codexProjectDir" | "codexLaunchAdapter" | "codexProbePeer";
+export declare const CODEX_RESUME_REQUIRED_FIELDS: readonly CodexResumeRequiredField[];
+/** Enumerate which of the three resume-required fields are absent /
+ *  wrong-shaped on this profile. Returns [] when all three are present
+ *  and well-shaped.
+ *
+ *  🔴 SHAPE-ONLY validation:
+ *    - codexProjectDir : string starting with `/`. This is a CHEAP typo
+ *      filter, NOT the security gate. Phase 0 (in #1528) MUST additionally
+ *      `realpath`/canonicalize + reject NUL, `/`, and any untrusted target
+ *      before passing this value to `codex resume -C <dir>` (per TMHR
+ *      4bab8196: "startsWith('/') 不是最终安全门").
+ *    - codexLaunchAdapter : enum membership.
+ *    - codexProbePeer : Hub exact-alias lookup, so value MUST equal its own
+ *      trim. Values with leading/trailing whitespace would fail Hub lookup
+ *      100% of the time; rejecting them at the shape layer is a witnessed-red
+ *      canary rather than a permissive pass-through (per TMHR 048d0061 R2:
+ *      "不要 pin 一个必然在 Hub exact lookup 阶段失败的 well-shaped 值").
+ *      Liveness (registered + online + non-self) is a separate hub-side
+ *      check in Phase 0.
+ *
+ *  Deliberately NOT included: an operator-facing diagnostic helper. An
+ *  earlier draft included `codexResumeMissingConfigHint` that referenced
+ *  a `anet node config apply` verb which does not exist in the tree —
+ *  TMHR 4bab8196 blocked it as the exact "存在 ≠ 会执行" antipattern.
+ *  The diagnostic lands with its real caller in a later PR that either
+ *  (a) implements `anet node config apply` first, or (b) reworks the
+ *  diagnostic to reference existing commands only. */
+export declare function missingCodexResumeFields(profile: CodexCopresenceProfileFields): CodexResumeRequiredField[];
+export declare const CODEX_COPRESENCE_RUNTIME = "codex-app-server";
+/**
+ * Should this `anet node start` bring up the co-presence stack?
+ *
+ * The flag still works for a one-off; the profile field is what makes the
+ * second start a single command.
+ */
+export declare function codexCopresenceRequested(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * True when a plain `anet node start` just became enough for this node — i.e.
+ * the flag was passed and the profile had not recorded it yet. Callers persist
+ * `codexCopresence: true` and tell the user they can drop the flag.
+ */
+export declare function shouldPersistCodexCopresence(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+export interface CodexCopresencePosture {
+    readonly sandboxMode: "danger-full-access" | "read-only";
+    readonly approvalPolicy: "never" | "on-request";
+    /** Set when the node asked for full access and is NOT getting it. */
+    readonly downgradeNotice?: string;
+    /** Set when a remembered grant (not this invocation's flag) opened it up. */
+    readonly grantedFromProfile: boolean;
+}
+/**
+ * Resolve the sandbox the co-presence app-server runs under.
+ *
+ * Precedence: this invocation's flag → a grant already recorded on the profile
+ * → read-only. `flags.sandboxMode` alone never opens the sandbox; it only
+ * decides whether staying closed is worth telling the user about.
+ */
+export declare function codexCopresencePosture(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields, displayName?: string): CodexCopresencePosture;
+/** True when an explicit grant should be written to the profile for next time. */
+export declare function shouldPersistCodexFullAccess(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * What `anet node create --runtime codex-app-server` should record, so that a
+ * later `anet node start <name>` is a single command with no flag.
+ *
+ * Shape copied from opencode, which already does exactly this at create time:
+ *
+ *   ...(runtime === "opencode-cli"
+ *     ? { opencodeMode: opts.mode === "copresence" || opts.copresence === "true"
+ *         ? "copresence" : "headless" }
+ *     : {}),
+ *
+ * Deliberately NOT keyed on which alias the operator typed. `codex-tui`,
+ * `codex-appserver` and `codex-app-server` are documented as aliases of one
+ * runtime (agent-node/src/cli.ts); giving one of them a different default would
+ * quietly break that contract, and "I typed the short name" is not a reliable
+ * statement of intent. Opting in stays explicit, exactly as it is for opencode.
+ */
+export declare function codexCopresenceCreateFields(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined): {
+    codexCopresence?: true;
+};
+/**
+ * One line at create time for a node that will start headless.
+ *
+ * NOT keyed on which alias the operator typed: by the time create builds the
+ * profile, `opts.runtime` has already been normalized to `codex-app-server`, so
+ * `codex-tui` is simply not recoverable here — a hint that tried to read it
+ * would never fire. (It didn't; that is how this was found.) Keying on the
+ * runtime instead also keeps the aliases true synonyms.
+ */
+export declare function codexCopresenceCreateHint(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined, displayName: string): string | undefined;

package/dist/src/codex-copresence-recovery.d.ts

@@ -0,0 +1,43 @@
+export interface CodexRecoveryVerification {
+    method: "thread/start" | "thread/resume";
+    threadId: string;
+    verifiedAt: string;
+    historyTurnCount: number;
+    historyFingerprint: string;
+}
+export interface CodexRecoveryBackup {
+    backupDir: string;
+    createdAt: string;
+    stateFiles: string[];
+}
+/** Transaction boundary shared by Windows and POSIX cutovers: the snapshot
+ * cannot begin until every authoritative state writer has quiesced. */
+export declare function quiesceThenSnapshot<T>(quiesce: () => Promise<void>, snapshot: () => T): Promise<T>;
+/** A stored thread is never considered resumed until app-server reads the
+ * exact thread back with persisted history. This is deliberately stricter
+ * than accepting a successful thread/resume RPC response. */
+export declare function verifyCodexThreadHistory(method: "thread/start" | "thread/resume", expectedThreadId: string, readResult: unknown, now?: Date): CodexRecoveryVerification;
+export declare function resumeAndVerifyCodexThread(threadId: string, request: (method: string, params: Record<string, unknown>) => Promise<unknown>): Promise<CodexRecoveryVerification>;
+/** Private, node-local recovery point. config-recovery.json is deliberately
+ * redacted non-credential audit/recovery metadata, not an identity backup.
+ * Identity recovery relies on leaving the original node config and CODEX_HOME
+ * in place. Credentials are never copied into this snapshot. */
+export declare function backupCodexRecoveryState(opts: {
+    nodeDir: string;
+    codexHome: string;
+    now?: Date;
+}): CodexRecoveryBackup;
+export declare function codexTopologyAudit(profile: Record<string, any>, nodeDir: string, cwd: string): {
+    launchMode: string;
+    cwd: string;
+    codexHome: string;
+    remote: any;
+    threadId: any;
+    model: any;
+    flags: any;
+    lastRecoveryVerification: any;
+    lastRecoveryBackup: {
+        createdAt: any;
+        stateFiles: any;
+    } | null;
+};

package/dist/src/codex-copresence-thread.d.ts

@@ -0,0 +1,13 @@
+export type CopresenceThreadPlan = {
+    method: "thread/resume";
+    params: {
+        threadId: string;
+    };
+    bootstrap: false;
+} | {
+    method: "thread/start";
+    params: Record<string, never>;
+    bootstrap: true;
+};
+/** Restarting a node must preserve its conversation; only a virgin node starts one. */
+export declare function copresenceThreadPlan(storedThreadId?: string): CopresenceThreadPlan;

package/dist/src/codex-model-default.d.ts

@@ -0,0 +1,6 @@
+export declare const DEFAULT_CODEX_MODEL = "gpt-5.6-sol";
+export declare const CODEX_MODEL_CHOICES: ReadonlyArray<{
+    readonly id: string;
+    readonly default?: boolean;
+}>;
+export declare function defaultCodexModelForRuntime(runtime: string): string | undefined;

package/dist/src/codex-tui-client-health.d.ts

@@ -0,0 +1,17 @@
+export declare function bridgeClientHealthReceipt(remote: string, threadId: string): string;
+export interface MigratedCodexPendingThread {
+    version: 1;
+    threadId: string;
+    serverUrl: string;
+    marker: string;
+}
+/**
+ * Move a crash-window deferred candidate onto the launcher's new owned
+ * app-server generation. The old URL is an authority supplied by the same
+ * private node config, not by the pending object itself; every mismatch is a
+ * hard stop so restart never guesses or adopts a second thread.
+ */
+export declare function migrateCodexPendingThread(value: unknown, oldServerUrl: unknown, expectedOldMarker: unknown, newServerUrl: string, newMarker: string): MigratedCodexPendingThread;
+export declare function requirePromotedCodexPendingThread(value: unknown, pendingThreadId: string): string;
+export declare function codexTuiLaunchArgs(remote: string, model: string, threadId?: string, dangerFullAccess?: boolean): string[];
+export declare function assertPendingServerQuiesced(serverUrl: unknown, isListening: (port: number) => boolean | Promise<boolean>): Promise<void>;

package/dist/src/commhub-response.d.ts

@@ -0,0 +1 @@
+export declare function parseCommhubToolResult(json: any): any;

package/dist/src/controlled-upload.d.ts

@@ -0,0 +1,83 @@
+/**
+ * #693 — token-bound node controlled local file → Hub /api/upload bridge.
+ *
+ * Security boundary (hard gates):
+ *  1. Cross-host: bytes travel over HTTP multipart; Hub never reads agent FS.
+ *  2. Identity: caller supplies the node's bearer token; ntok binds network.
+ *  3. Path safety: realpath + allowlisted roots; reject NUL, symlink, traversal.
+ *  4. Size ≤ 12 MiB enforced with same-fd fstat + bounded read (no full slurp).
+ *  5. Hub /api/upload is the sole write surface (atomic on hub side).
+ *
+ * Adversarial add-only (#694 DO-NOT-MERGE fixes):
+ *  - TOCTOU: open O_NOFOLLOW → fstat(fd) → read(fd) only; no re-open by path.
+ *  - Bounded read: never allocate/read past CONTROLLED_UPLOAD_MAX_BYTES.
+ *  - NUL guard is live and reachable before any fs call.
+ */
+/** Mirrors server/src/uploads.ts MAX_UPLOAD_BYTES. */
+export declare const CONTROLLED_UPLOAD_MAX_BYTES: number;
+/** Chunk size for bounded streaming read from a single fd. */
+export declare const CONTROLLED_UPLOAD_READ_CHUNK: number;
+export type ControlledUploadErrorCode = "path_required" | "path_nul" | "path_not_found" | "path_untrusted" | "path_symlink" | "path_not_regular" | "path_empty" | "payload_too_large" | "read_failed" | "auth_required" | "hub_url_required" | "upload_failed" | "bad_response" | "missing_file_id";
+export type ControlledUploadFail = {
+    ok: false;
+    error: ControlledUploadErrorCode;
+    message: string;
+};
+export type ControlledUploadOk = {
+    ok: true;
+    file_id: string;
+    name: string;
+    mime: string;
+    size: number;
+    url?: string;
+};
+export type ControlledUploadResult = ControlledUploadOk | ControlledUploadFail;
+export interface ControlledUploadDeps {
+    hubUrl: string;
+    authToken: string;
+    allowedRoots?: string[];
+    alias?: string;
+    nodeDir?: string;
+    fetch?: typeof fetch;
+    home?: string;
+}
+/** Normalize a client filename: basename only, strip controls, cap 255. */
+export declare function normalizeUploadName(input: string | undefined | null, fallback?: string): string;
+export declare function defaultControlledUploadRoots(opts?: {
+    home?: string;
+    alias?: string;
+    nodeDir?: string;
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+}): string[];
+/** True iff canonicalPath is strictly inside one of the allowlisted roots. */
+export declare function isPathInsideAllowedRoots(canonicalPath: string, allowedRoots: string[]): boolean;
+/**
+ * Resolve a user-supplied path to a canonical path under an allowlisted root.
+ * Does not open the file for reading — open+fstat+read is a separate same-fd step.
+ */
+export declare function resolveControlledUploadPath(rawPath: string, allowedRoots: string[]): {
+    ok: true;
+    canonicalPath: string;
+} | ControlledUploadFail;
+export type ControlledFileBytes = {
+    ok: true;
+    bytes: Buffer;
+    size: number;
+    canonicalPath: string;
+} | ControlledUploadFail;
+/**
+ * Open → fstat(fd) → bounded read(fd) on the **same fd** (TOCTOU hard gate).
+ * Uses O_NOFOLLOW when available so a symlink swap at open is rejected.
+ * Never uses path-based readFileSync after the initial open.
+ */
+export declare function openFstatBoundedReadControlledFile(canonicalPath: string, allowedRoots: string[], maxBytes?: number): ControlledFileBytes;
+/**
+ * Upload a controlled local file to Hub POST /api/upload.
+ * Returns file_id + metadata for send_reply attachments.
+ * Never falls back to sending a raw path to the Hub.
+ */
+export declare function uploadControlledLocalFile(rawPath: string, deps: ControlledUploadDeps, opts?: {
+    name?: string;
+    mime?: string;
+}): Promise<ControlledUploadResult>;