@sleep2agi/agent-network 2.3.0-preview.9 → 2.3.0-preview.90

package/dist/bin/goal-wake-log-render.d.ts

@@ -0,0 +1,31 @@
+export interface WakeLogEntryShape {
+    ts?: string;
+    status?: string;
+    summary?: string;
+    task_id?: string;
+}
+export interface WakeLogGoalShape {
+    goal_id: string;
+    progress_log?: WakeLogEntryShape[];
+}
+export interface WakeLogRenderOpts {
+    /** Trim to the last N entries. undefined = all. */
+    tail?: number;
+}
+/**
+ * Format progress_log as a JSON object suitable for `--json` output.
+ * Pure. Never reads/writes filesystem. Legacy goals without
+ * progress_log render as empty array (not error).
+ */
+export declare function renderWakeLogJson(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): {
+    goal_id: string;
+    total: number;
+    returned: number;
+    entries: WakeLogEntryShape[];
+};
+/**
+ * Format progress_log as a table for human console output.
+ * Column layout mirrors printGoalShow so the two commands read
+ * consistently. Empty log renders a single "(none)" line, not an error.
+ */
+export declare function renderWakeLogText(goal: WakeLogGoalShape, opts?: WakeLogRenderOpts): string;

package/dist/src/active-network-task.d.ts

@@ -0,0 +1,28 @@
+export interface ActiveNetworkTask {
+    taskId: string;
+    from: string;
+    startedAt: number;
+}
+/** 运行时崩溃没来得及删标记时的兜底:超过这个年龄的标记当不存在。 */
+export declare const ACTIVE_NETWORK_TASK_MAX_AGE_MS: number;
+export declare function parseActiveNetworkTask(raw: string | null | undefined, now: number, maxAgeMs?: number): ActiveNetworkTask | null;
+export type OutboundTool = "commhub_send_task" | "commhub_send_message";
+export type OutboundRewrite = {
+    kind: "pass";
+} | {
+    kind: "progress_of_active_task";
+    taskId: string;
+    from: string;
+    text: string;
+};
+/**
+ * 只在「目标 alias 恰好是当前网络任务的发起方」时改写;发给别人的照常放行——
+ * 模型替任务派活给第三方是合法的协作,不能一刀切。
+ */
+export declare function decideOutboundRewrite(tool: OutboundTool, args: {
+    alias?: unknown;
+    task?: unknown;
+    message?: unknown;
+} | null | undefined, active: ActiveNetworkTask | null): OutboundRewrite;
+/** outbound-only 模式下模型不能自选 high(#1770 第三条):降为 normal,其余原样。 */
+export declare function clampOutboundPriority(priority: unknown, outboundOnly: boolean): "high" | "normal" | "low" | undefined;

package/dist/src/batch-workdir.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolve one batch workdir before any mkdir/chdir loop starts.
+ *
+ * Node does not expand shell tildes. Leaving `~/team` relative means every
+ * iteration can resolve it from the previous node's cwd and create paths such
+ * as `/work/~/team/~/team`. Only the current user's `~` form is supported;
+ * `~other` is rejected instead of being written as a literal directory.
+ */
+export declare function normalizeBatchWorkdir(input: string, cwd?: string, home?: string): string;

package/dist/src/bootstrap-password-db.d.ts

@@ -0,0 +1,13 @@
+export interface BootstrapPasswordUpdateInvocation {
+    argv: string[];
+    env: NodeJS.ProcessEnv;
+    script: string;
+}
+/**
+ * Resolve the database selected for the local Hub into an explicit absolute
+ * path before launching the bootstrap helper. The helper must never infer a
+ * database from its own HOME/cwd: those can differ from the parent process.
+ */
+export declare function resolveBootstrapDatabasePath(env: NodeJS.ProcessEnv, home: string, cwd: string): string;
+export declare const BOOTSTRAP_PASSWORD_UPDATE_SCRIPT: string;
+export declare function buildBootstrapPasswordUpdateInvocation(userId: string, dbPath: string, baseEnv?: NodeJS.ProcessEnv): BootstrapPasswordUpdateInvocation;

package/dist/src/channel-attachments.d.ts

@@ -0,0 +1,29 @@
+interface AttachmentDescriptor {
+    type?: unknown;
+    file_id?: unknown;
+    path?: unknown;
+    mime?: unknown;
+    name?: unknown;
+    size?: unknown;
+}
+export interface ChannelAttachmentDeps {
+    hubUrl: string;
+    authToken: string;
+    cacheDir: string;
+    fetch?: typeof fetch;
+    maxBytes?: number;
+}
+export interface ChannelAttachmentResult {
+    paths: string[];
+    failures: Array<{
+        fileId: string;
+        code: string;
+        message: string;
+    }>;
+}
+export declare function readableAttachmentsFromInbox(message: any): AttachmentDescriptor[];
+export declare function channelAttachmentCacheDir(home: string, alias: string): string;
+export declare function downloadChannelAttachments(message: any, deps: ChannelAttachmentDeps): Promise<ChannelAttachmentResult>;
+export declare const downloadChannelImageAttachments: typeof downloadChannelAttachments;
+export declare function appendChannelAttachmentPaths(content: string, paths: readonly string[]): string;
+export {};

package/dist/src/channel-meta.d.ts

@@ -0,0 +1,10 @@
+/** One inbound inbox row → the meta Claude Code renders as `<channel …>` attrs.
+ *
+ * Pure so the attribute set is assertable; it used to be inline in the SSE
+ * handler, where nothing could see it. */
+export declare function inboundChannelMeta(msg: {
+    id: string;
+    from_session?: string | null;
+    priority?: string | null;
+    created_at?: string | null;
+}): Record<string, string>;

package/dist/src/channel-task-trace.d.ts

@@ -0,0 +1,14 @@
+export declare function sendChannelTaskWithTrace(input: {
+    alias: string;
+    task: string;
+    priority?: string;
+    fromAlias: string;
+    networkId?: string | null;
+    /** Structured task metadata forwarded verbatim, e.g. { attachments: [...] }.
+     *  Omitted from the outbound body when absent, so a call without it is
+     *  unchanged. */
+    meta?: Record<string, unknown>;
+}, deps: {
+    send: (args: Record<string, unknown>) => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/claude-vendor-env.d.ts

@@ -0,0 +1,28 @@
+export declare const CLAUDE_VENDOR_ENV_KEYS: readonly ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
+export type PlainSecretEnvRewrite = {
+    key: string;
+    refName: string;
+    value: string;
+};
+/**
+ * Plan the values that the node-create writer will move into its line-oriented
+ * `.env` file. This is deliberately side-effect free: callers can run it as a
+ * preflight before creating a node directory, changing process.env, or writing
+ * config.json. Keeping the line-break rejection here makes it cover every
+ * caller of the dotenv writer, including the no-name interactive wizard.
+ */
+export declare function planPlainSecretEnvRewrites(input: {
+    env: unknown;
+    nodeId: string;
+}): PlainSecretEnvRewrite[];
+/**
+ * Persist the exact Anthropic-compatible vendor environment used by an
+ * explicit claude-agent-sdk create. Explicit --env values retain precedence;
+ * ambient shell values only fill missing known keys. Other environment values
+ * are intentionally ignored so node create never snapshots the whole shell.
+ */
+export declare function collectClaudeVendorEnvForCreate(input: {
+    runtime: string;
+    explicitEnv: readonly string[];
+    shellEnv: Readonly<Record<string, string | undefined>>;
+}): string[];

package/dist/src/cli-args.d.ts

@@ -0,0 +1,8 @@
+export type ParsedCliOptions = {
+    [key: string]: string | string[];
+    _channels: string[];
+    _envs: string[];
+};
+export declare const BOOLEAN_FLAGS: Set<string>;
+export declare function parseCliOptions(argv: string[]): ParsedCliOptions;
+export declare function positionalArgs(argv: string[]): string[];

package/dist/src/cli-version-display.d.ts

@@ -0,0 +1,16 @@
+/**
+ * #1645 —— `anet doctor` 原先对三个 runtime CLI **只检查「在不在」**:
+ *
+ *   try { execSync("codex --version", …); check("Codex CLI", true); } catch { … }
+ *
+ * 于是一个**装着、但太旧**的 CLI 会拿到一个 ✅。实测过一次:`codex-cli 0.149.1`
+ * 解不动上游 models 响应(`unknown variant \`max\``,它只认到 `xhigh`),
+ * rmcp worker 致命退出,用户看到的是 300s 超时 —— 而 doctor 说一切正常。
+ *
+ * 🔴 **这里只把版本摆出来,不做最低版本判定。**
+ *    「多少版本才够」由上游返回什么决定,不是我们能钉死的常量;猜一个下限,
+ *    会在别人升级 CLI、上游又改动之后变成误报。而一个会误报的检查,
+ *    第一周就会被人关掉。摆出实际版本,让读的人自己对得上号,是这一格
+ *    现在能诚实做到的全部。
+ */
+export declare function formatCliVersion(raw: unknown): string;

package/dist/src/client-task-trace.d.ts

@@ -0,0 +1,9 @@
+export declare function sendClientTaskWithTrace(input: {
+    alias: string;
+    fromAlias: string;
+    parentTaskId?: string | null;
+    networkId?: string | null;
+}, dependencies: {
+    send: () => Promise<any>;
+    log: (line: string) => void;
+}): Promise<any>;

package/dist/src/client.js

@@ -1 +1 @@
-const a0_0x5920d3=a0_0x16ff;(function(_0x2ba291,_0x1e2095){const _0x4ffd6f=a0_0x16ff,_0x24cf74=_0x2ba291();while(!![]){try{const _0x494620=parseInt(_0x4ffd6f(0x210))/0x1*(parseInt(_0x4ffd6f(0x206))/0x2)+-parseInt(_0x4ffd6f(0x22d))/0x3+parseInt(_0x4ffd6f(0x1e6))/0x4*(-parseInt(_0x4ffd6f(0x21e))/0x5)+parseInt(_0x4ffd6f(0x220))/0x6*(parseInt(_0x4ffd6f(0x22c))/0x7)+-parseInt(_0x4ffd6f(0x215))/0x8*(-parseInt(_0x4ffd6f(0x1d8))/0x9)+-parseInt(_0x4ffd6f(0x20f))/0xa*(-parseInt(_0x4ffd6f(0x20b))/0xb)+-parseInt(_0x4ffd6f(0x20e))/0xc;if(_0x494620===_0x1e2095)break;else _0x24cf74['push'](_0x24cf74['shift']());}catch(_0x1fb59b){_0x24cf74['push'](_0x24cf74['shift']());}}}(a0_0x1d84,0x5cc6a));function a0_0x16ff(_0x2bd2c0,_0x1bf401){_0x2bd2c0=_0x2bd2c0-0x1d8;const _0x1d84fe=a0_0x1d84();let _0x16ff51=_0x1d84fe[_0x2bd2c0];return _0x16ff51;}import{EventEmitter as a0_0x302ef1}from'events';function a0_0x1d84(){const _0x4a5a59=['application/json,\x20text/event-stream','alias','705krKHwc','get_all_status','351228KPOtwm','s...','match','token','broadcast','url','call','SSE\x20reconnecting\x20in\x20','POST','tools/call','text/event-stream','signal','28SICtSD','140412SGeGSj','disconnected','send_task','connected','read','531JsuzXG','disconnect','toTimeString','heartbeatInterval','report_status','inbox\x20error:\x20','data:\x20','/mcp','stringify','slice','sdk','processInbox','now','normal','10936cbUyUZ','offline','min','getReader','cwd','parse','catch','Bearer\x20','registered','message','SSE\x20error:\x20','status','toString','resumeId','content','connect','new_task','from_session','log','new_message','send_reply','getAllStatus','messages','AbortError','autoConnect','sseAbort','connectSSE','text','sleep','type','startsWith','/events/','8anUVCl','emit','agent','completed','send_message','11YGRDNc','Authorization','reconnectDelay','8968332JGzJBc','4836790IREQic','184529cLDiAv','split','heartbeatTimer','name','send','14064aPspDd','body','running','2.0','idle','decode','sdk-'];a0_0x1d84=function(){return _0x4a5a59;};return a0_0x1d84();}import{hostname as a0_0x2755ad}from'os';class T extends a0_0x302ef1{['url'];[a0_0x5920d3(0x21d)];['token'];[a0_0x5920d3(0x208)];[a0_0x5920d3(0x1f3)];['heartbeatInterval'];[a0_0x5920d3(0x20d)];[a0_0x5920d3(0x212)];[a0_0x5920d3(0x1ff)];['running']=!0x1;constructor(_0x5f2f64){const _0x12a96f=a0_0x5920d3;super();if(this[_0x12a96f(0x225)]=_0x5f2f64[_0x12a96f(0x225)]['replace'](/\/$/,''),this[_0x12a96f(0x21d)]=_0x5f2f64[_0x12a96f(0x21d)],this[_0x12a96f(0x223)]=_0x5f2f64[_0x12a96f(0x223)],this[_0x12a96f(0x208)]=_0x5f2f64['agent']||_0x12a96f(0x1e2),this[_0x12a96f(0x1f3)]=_0x12a96f(0x21b)+_0x5f2f64[_0x12a96f(0x21d)]+'-'+Date[_0x12a96f(0x1e4)]()[_0x12a96f(0x1f2)](0x24),this[_0x12a96f(0x1db)]=_0x5f2f64['heartbeatInterval']??0x2bf20,this[_0x12a96f(0x20d)]=_0x5f2f64[_0x12a96f(0x20d)]??0xbb8,_0x5f2f64[_0x12a96f(0x1fe)]!==!0x1)this['connect']();}[a0_0x5920d3(0x1f8)](_0x1c820b){const _0x51a463=a0_0x5920d3;console[_0x51a463(0x1f8)]('['+new Date()[_0x51a463(0x1da)]()[_0x51a463(0x1e1)](0x0,0x8)+']\x20[commhub:'+this['alias']+']\x20'+_0x1c820b);}async[a0_0x5920d3(0x226)](_0x510e92,_0x16eb96){const _0xde81c6=a0_0x5920d3;let _0x29b431={'Content-Type':'application/json','Accept':_0xde81c6(0x21c)};if(this[_0xde81c6(0x223)])_0x29b431[_0xde81c6(0x20c)]=_0xde81c6(0x1ed)+this[_0xde81c6(0x223)];let _0x362ba8=await(await fetch(this[_0xde81c6(0x225)]+_0xde81c6(0x1df),{'method':_0xde81c6(0x228),'headers':_0x29b431,'body':JSON[_0xde81c6(0x1e0)]({'jsonrpc':_0xde81c6(0x218),'id':Date[_0xde81c6(0x1e4)](),'method':_0xde81c6(0x229),'params':{'name':_0x510e92,'arguments':_0x16eb96}})}))[_0xde81c6(0x201)](),_0x2e5516=_0x362ba8[_0xde81c6(0x222)](/data: (.+)/),_0x3d67c1=_0x2e5516?JSON[_0xde81c6(0x1eb)](_0x2e5516[0x1]):JSON['parse'](_0x362ba8),_0x2607c=_0x3d67c1?.['result']?.[_0xde81c6(0x1f4)]?.[0x0]?.[_0xde81c6(0x201)];return _0x2607c?JSON[_0xde81c6(0x1eb)](_0x2607c):_0x3d67c1;}async[a0_0x5920d3(0x1f5)](){const _0x3747bf=a0_0x5920d3;if(this[_0x3747bf(0x217)])return;this[_0x3747bf(0x217)]=!0x0,await this['status'](_0x3747bf(0x219)),this[_0x3747bf(0x1f8)](_0x3747bf(0x1ee)),this['heartbeatTimer']=setInterval(()=>{const _0xd4119b=_0x3747bf;this[_0xd4119b(0x1f1)](_0xd4119b(0x219))[_0xd4119b(0x1ec)](_0x19410a=>this[_0xd4119b(0x1f8)]('heartbeat\x20failed:\x20'+_0x19410a[_0xd4119b(0x1ef)]));},this[_0x3747bf(0x1db)]),this['connectSSE']();}async[a0_0x5920d3(0x1d9)](){const _0x3b0abc=a0_0x5920d3;if(this[_0x3b0abc(0x217)]=!0x1,this[_0x3b0abc(0x1ff)]?.['abort'](),this[_0x3b0abc(0x212)])clearInterval(this[_0x3b0abc(0x212)]);await this[_0x3b0abc(0x1f1)](_0x3b0abc(0x1e7))[_0x3b0abc(0x1ec)](()=>{}),this[_0x3b0abc(0x1f8)](_0x3b0abc(0x22e));}async[a0_0x5920d3(0x214)](_0x172e8d,_0x4ee915,_0x520465=a0_0x5920d3(0x1e5)){const _0x496136=a0_0x5920d3;return this[_0x496136(0x226)](_0x496136(0x22f),{'alias':_0x172e8d,'task':_0x4ee915,'priority':_0x520465,'from_session':this[_0x496136(0x21d)]});}async[a0_0x5920d3(0x1ef)](_0x5dd07a,_0x1d1ce3){const _0x5f1bab=a0_0x5920d3;return this[_0x5f1bab(0x226)](_0x5f1bab(0x20a),{'alias':_0x5dd07a,'message':_0x1d1ce3,'from_session':this['alias']});}async['reply'](_0x12a01c,_0x87fda4,_0x466014=a0_0x5920d3(0x209)){const _0x2d5f9a=a0_0x5920d3;return this[_0x2d5f9a(0x226)](_0x2d5f9a(0x1fa),{'in_reply_to':_0x12a01c,'text':_0x87fda4,'status':_0x466014});}async[a0_0x5920d3(0x1f1)](_0x26fef4,_0xd4c06c){const _0x120180=a0_0x5920d3;return this[_0x120180(0x226)](_0x120180(0x1dc),{'resume_id':this[_0x120180(0x1f3)],'alias':this[_0x120180(0x21d)],'status':_0x26fef4,'server':a0_0x2755ad(),'hostname':a0_0x2755ad(),'agent':this[_0x120180(0x208)],'project_dir':process[_0x120180(0x1ea)](),..._0xd4c06c});}async[a0_0x5920d3(0x1fb)](){const _0x1d9c4e=a0_0x5920d3;return this[_0x1d9c4e(0x226)](_0x1d9c4e(0x21f),{});}async[a0_0x5920d3(0x224)](_0x58200f,_0x22c77d){const _0x50a4ec=a0_0x5920d3;return this[_0x50a4ec(0x226)](_0x50a4ec(0x224),{'message':_0x58200f,'filter_server':_0x22c77d?.['server'],'filter_status':_0x22c77d?.[_0x50a4ec(0x1f1)]});}async[a0_0x5920d3(0x200)](){const _0x47cb57=a0_0x5920d3;let _0x560cc2=encodeURIComponent(this['alias']),_0x4841a1=this[_0x47cb57(0x225)]+_0x47cb57(0x205)+_0x560cc2,_0x12cd58=this[_0x47cb57(0x20d)];while(this[_0x47cb57(0x217)]){try{this[_0x47cb57(0x1ff)]=new AbortController();let _0x35d2c6={'Accept':_0x47cb57(0x22a)};if(this[_0x47cb57(0x223)])_0x35d2c6['Authorization']=_0x47cb57(0x1ed)+this[_0x47cb57(0x223)];let _0x34a2cc=await fetch(_0x4841a1,{'headers':_0x35d2c6,'signal':this[_0x47cb57(0x1ff)][_0x47cb57(0x22b)]});if(!_0x34a2cc['ok']||!_0x34a2cc[_0x47cb57(0x216)]){this['log']('SSE\x20failed:\x20'+_0x34a2cc['status']),await this[_0x47cb57(0x202)](_0x12cd58),_0x12cd58=Math['min'](_0x12cd58*1.5,0xea60);continue;}_0x12cd58=this[_0x47cb57(0x20d)];let _0x54d9bc=_0x34a2cc['body'][_0x47cb57(0x1e9)](),_0x44e986=new TextDecoder(),_0x214d83='';while(this[_0x47cb57(0x217)]){let {done:_0x3256bd,value:_0x33943a}=await _0x54d9bc[_0x47cb57(0x231)]();if(_0x3256bd)break;_0x214d83+=_0x44e986[_0x47cb57(0x21a)](_0x33943a,{'stream':!0x0});let _0x5eac3f=_0x214d83[_0x47cb57(0x211)]('\x0a');_0x214d83=_0x5eac3f['pop']()||'';for(let _0x1dc067 of _0x5eac3f){if(!_0x1dc067[_0x47cb57(0x204)](_0x47cb57(0x1de)))continue;try{let _0x8c8d76=JSON[_0x47cb57(0x1eb)](_0x1dc067[_0x47cb57(0x1e1)](0x6));if(_0x8c8d76[_0x47cb57(0x203)]==='connected'){this[_0x47cb57(0x1f8)]('SSE\x20connected'),this[_0x47cb57(0x207)](_0x47cb57(0x230));continue;}if(_0x8c8d76[_0x47cb57(0x203)]===_0x47cb57(0x1f6)||_0x8c8d76[_0x47cb57(0x203)]===_0x47cb57(0x1f9)||_0x8c8d76[_0x47cb57(0x203)]===_0x47cb57(0x224))await this[_0x47cb57(0x1e3)]();}catch{}}}}catch(_0x169a25){if(_0x169a25[_0x47cb57(0x213)]===_0x47cb57(0x1fd))break;this[_0x47cb57(0x207)]('error',_0x169a25),this[_0x47cb57(0x1f8)](_0x47cb57(0x1f0)+_0x169a25[_0x47cb57(0x1ef)]);}if(this[_0x47cb57(0x217)])this[_0x47cb57(0x207)](_0x47cb57(0x22e)),this[_0x47cb57(0x1f8)](_0x47cb57(0x227)+_0x12cd58/0x3e8+_0x47cb57(0x221)),await this['sleep'](_0x12cd58),_0x12cd58=Math[_0x47cb57(0x1e8)](_0x12cd58*1.5,0xea60);}}async['processInbox'](){const _0x60277b=a0_0x5920d3;try{let _0x30d1eb=(await this[_0x60277b(0x226)]('get_inbox',{'alias':this[_0x60277b(0x21d)],'limit':0xa}))?.[_0x60277b(0x1fc)]||[];for(let _0x8a5294 of _0x30d1eb)await this[_0x60277b(0x226)]('ack_inbox',{'alias':this[_0x60277b(0x21d)],'message_id':_0x8a5294['id']}),this[_0x60277b(0x1f8)]('←\x20'+_0x8a5294[_0x60277b(0x1f7)]+':\x20'+_0x8a5294[_0x60277b(0x1f4)][_0x60277b(0x1e1)](0x0,0x3c)),this[_0x60277b(0x207)]('task',_0x8a5294),this[_0x60277b(0x207)](_0x60277b(0x1ef),_0x8a5294);}catch(_0x1597fe){this[_0x60277b(0x1f8)](_0x60277b(0x1dd)+_0x1597fe['message']);}}[a0_0x5920d3(0x202)](_0x11d201){return new Promise(_0x3186f5=>setTimeout(_0x3186f5,_0x11d201));}}var $=T;export{$ as default,T as CommHub};
+const a0_0x50df69=a0_0x6d08;(function(_0x31dedc,_0x58d114){const _0x29e3c0=a0_0x6d08,_0x16fb4f=_0x31dedc();while(!![]){try{const _0x1d2a7d=parseInt(_0x29e3c0(0x1c4))/0x1*(-parseInt(_0x29e3c0(0x1d0))/0x2)+-parseInt(_0x29e3c0(0x1d2))/0x3*(-parseInt(_0x29e3c0(0x1a8))/0x4)+parseInt(_0x29e3c0(0x1a0))/0x5+parseInt(_0x29e3c0(0x16b))/0x6+parseInt(_0x29e3c0(0x1c3))/0x7+-parseInt(_0x29e3c0(0x1b0))/0x8+-parseInt(_0x29e3c0(0x1ae))/0x9*(parseInt(_0x29e3c0(0x1da))/0xa);if(_0x1d2a7d===_0x58d114)break;else _0x16fb4f['push'](_0x16fb4f['shift']());}catch(_0x1b50af){_0x16fb4f['push'](_0x16fb4f['shift']());}}}(a0_0x5250,0x35a3c));function a0_0x6d08(_0x41486a,_0x42ad7c){_0x41486a=_0x41486a-0x15d;const _0x525039=a0_0x5250();let _0x6d08c9=_0x525039[_0x41486a];return _0x6d08c9;}import{EventEmitter as a0_0x522963}from'events';function a0_0x5250(){const _0x4159cb=['lifecycleTracking','token','\x20transport=','reply','cwd','<unknown>','1457034CqJdlj','getReader','POST','get_all_status','send_message','<pending>','pop','toAlias','Bearer\x20','messages','application/json','agent','error_message','sdk-','Authorization','sleep','/events/','mcp_http','send_reply','\x20duration_ms=','resumeId','\x20lifecycle=','match','\x20task_id=','parentTaskId','emit','heartbeatInterval','completed','duration_ms','SSE\x20failed:\x20','send','new_task','body','disconnected','message_id','heartbeat\x20failed:\x20','unknown\x20error','getAllStatus','application/json,\x20text/event-stream','connected','\x20from=','reconnectDelay','send_task','normal','s...','server','delivered','CommHub\x20response\x20omitted\x20task_id','message','stringify','error_code','[REDACTED]','parse','495785rseDXk','get_inbox','type','url','<missing>','disconnect','tools/call','sdk','5316VIntJT','task.send.failed','error','json',']\x20[commhub:','not_tracked','9tzykLE','SSE\x20connected','2293328JJAHwR','fromAlias','processInbox','SSE\x20reconnecting\x20in\x20','\x20to=','lifecycle_tracking','task.send.delivered','transport','\x20parent_task_id=','task_id','catch','failed','sseAbort','task.ack','min','content','call','alias','/mcp','1398845gJPrQQ','1sMyzmX','offline','startsWith','task.replied','data:\x20','parent_task_id','toTimeString','missing_task_id','heartbeatTimer','log','status','split','397778CRkVvl','now','957XDNPzz','slice','\x20error=','connect','autoConnect','send_rejected','idle','to_alias','2605190OHdgkD','replace','\x20network_id=','text','task','running','network_id','string','networkId','connectSSE','send_failed'];a0_0x5250=function(){return _0x4159cb;};return a0_0x5250();}import{hostname as a0_0x21b1e0}from'os';var K=/(?:atok|ntok|utok|ghp|github_pat)_[A-Za-z0-9_-]+|Bearer\s+\S+/gi,L=(_0x2ad2cb,_0x44ae8d)=>(_0x2ad2cb??_0x44ae8d)[a0_0x50df69(0x1db)](/[\r\n\x00-\x1f\x7f]/g,'\x20')['slice'](0x0,0xf0);function N(_0xb6c746){const _0x73a7b=a0_0x50df69;return(_0xb6c746 instanceof Error?_0xb6c746[_0x73a7b(0x19b)]:String(_0xb6c746??_0x73a7b(0x18f)))[_0x73a7b(0x1db)](K,_0x73a7b(0x19e))[_0x73a7b(0x1db)](/[\r\n\x00-\x1f\x7f]/g,'\x20')[_0x73a7b(0x1d3)](0x0,0xf0);}function O(_0x491582,_0xbe8889=process.env.ANET_TASK_TRACE_FORMAT===a0_0x50df69(0x1ab)){const _0x5446ec=a0_0x50df69;if(_0xbe8889)return JSON['stringify'](_0x491582);let _0x483fea=L(_0x491582[_0x5446ec(0x1c9)],_0x5446ec(0x1a4)),_0x376ee3=L(_0x491582['task_id'],_0x5446ec(0x170)),_0x3ecec0=_0x491582[_0x5446ec(0x19d)]?_0x5446ec(0x1d4)+_0x491582[_0x5446ec(0x19d)]+':'+(_0x491582[_0x5446ec(0x177)]??''):'';return'[commhub:task]\x20'+_0x491582[_0x5446ec(0x1ce)]+_0x5446ec(0x193)+L(_0x491582['from_alias'],_0x5446ec(0x16a))+_0x5446ec(0x1b4)+L(_0x491582[_0x5446ec(0x1d9)],_0x5446ec(0x16a))+_0x5446ec(0x182)+_0x376ee3+_0x5446ec(0x1b8)+_0x483fea+_0x5446ec(0x1dc)+L(_0x491582[_0x5446ec(0x160)],_0x5446ec(0x16a))+_0x5446ec(0x167)+_0x491582['transport']+_0x5446ec(0x17e)+_0x491582[_0x5446ec(0x187)]+_0x5446ec(0x180)+_0x491582[_0x5446ec(0x1b5)]+_0x3ecec0;}function U(_0x1c9827){const _0x2694d2=a0_0x50df69;return{'event':{'sending':'task.send.start','delivered':_0x2694d2(0x1b6),'failed':_0x2694d2(0x1a9),'acked':_0x2694d2(0x1bd),'started':'task.started','replied':_0x2694d2(0x1c7),'expired':'task.expired'}[_0x1c9827[_0x2694d2(0x1ce)]],..._0x1c9827};}function j(_0x4a8db1){const _0x5199fa=a0_0x50df69;let _0x32a36e=_0x4a8db1?.[_0x5199fa(0x1b9)]||_0x4a8db1?.[_0x5199fa(0x18d)]||_0x4a8db1?.['id'];if(_0x32a36e)return String(_0x32a36e);let _0x16a0d1=_0x4a8db1?.[_0x5199fa(0x1bf)]?.[0x0]?.[_0x5199fa(0x15d)];if(typeof _0x16a0d1!==_0x5199fa(0x161))return null;try{let _0x522ec6=JSON[_0x5199fa(0x19f)](_0x16a0d1);return _0x522ec6?.[_0x5199fa(0x1b9)]||_0x522ec6?.[_0x5199fa(0x18d)]||_0x522ec6?.['id']||null;}catch{return null;}}async function X(_0x184542,_0x5a5a2d){const _0x208c13=a0_0x50df69;let _0x4d187a=_0x5a5a2d['now']??Date[_0x208c13(0x1d1)],_0x2df1b7=_0x4d187a(),_0x11e44f=(_0x40653f,_0x5d868a,_0x415f0b,_0x287a1c)=>{const _0x1f3b2a=_0x208c13;_0x5a5a2d[_0x1f3b2a(0x1cd)](O(U({'from_alias':_0x184542['fromAlias'],'to_alias':_0x184542[_0x1f3b2a(0x172)],'task_id':_0x5d868a,'parent_task_id':_0x184542[_0x1f3b2a(0x183)],'network_id':_0x184542['networkId'],'transport':_0x184542[_0x1f3b2a(0x1b7)],'status':_0x40653f,'duration_ms':_0x4d187a()-_0x2df1b7,'lifecycle_tracking':_0x184542[_0x1f3b2a(0x165)],..._0x415f0b!==void 0x0?{'error_code':_0x287a1c||_0x1f3b2a(0x164),'error_message':N(_0x415f0b)}:{}})));};_0x11e44f('sending',null);try{let _0x5b4f99=await _0x5a5a2d['send'](),_0x2e0ce8=j(_0x5b4f99);if(_0x2e0ce8)_0x11e44f(_0x208c13(0x199),_0x2e0ce8);else{if(_0x5b4f99?.['ok']===!0x1||_0x5b4f99?.[_0x208c13(0x1aa)])_0x11e44f('failed',_0x2e0ce8,_0x5b4f99?.[_0x208c13(0x1aa)]||'CommHub\x20rejected\x20task',_0x208c13(0x1d7));else _0x11e44f(_0x208c13(0x1bb),null,_0x208c13(0x19a),_0x208c13(0x1cb));}return _0x5b4f99;}catch(_0x43d20b){throw _0x11e44f(_0x208c13(0x1bb),null,_0x43d20b,_0x208c13(0x164)),_0x43d20b;}}async function Y(_0x37120d,_0x134c0c){const _0x1a2310=a0_0x50df69;return X({'fromAlias':_0x37120d[_0x1a2310(0x1b1)],'toAlias':_0x37120d[_0x1a2310(0x1c1)],'parentTaskId':_0x37120d[_0x1a2310(0x183)]||null,'networkId':_0x37120d[_0x1a2310(0x162)]||null,'transport':_0x1a2310(0x17c),'lifecycleTracking':_0x1a2310(0x1ad)},_0x134c0c);}class $ extends a0_0x522963{[a0_0x50df69(0x1a3)];['alias'];[a0_0x50df69(0x166)];[a0_0x50df69(0x176)];[a0_0x50df69(0x17f)];[a0_0x50df69(0x185)];[a0_0x50df69(0x194)];[a0_0x50df69(0x1cc)];[a0_0x50df69(0x1bc)];[a0_0x50df69(0x15f)]=!0x1;constructor(_0x1a8091){const _0x52b8ae=a0_0x50df69;super();if(this[_0x52b8ae(0x1a3)]=_0x1a8091[_0x52b8ae(0x1a3)][_0x52b8ae(0x1db)](/\/$/,''),this[_0x52b8ae(0x1c1)]=_0x1a8091[_0x52b8ae(0x1c1)],this[_0x52b8ae(0x166)]=_0x1a8091[_0x52b8ae(0x166)],this[_0x52b8ae(0x176)]=_0x1a8091['agent']||_0x52b8ae(0x1a7),this[_0x52b8ae(0x17f)]=_0x52b8ae(0x178)+_0x1a8091['alias']+'-'+Date['now']()['toString'](0x24),this[_0x52b8ae(0x185)]=_0x1a8091[_0x52b8ae(0x185)]??0x2bf20,this[_0x52b8ae(0x194)]=_0x1a8091[_0x52b8ae(0x194)]??0xbb8,_0x1a8091[_0x52b8ae(0x1d6)]!==!0x1)this[_0x52b8ae(0x1d5)]();}[a0_0x50df69(0x1cd)](_0x48a12b){const _0xc28632=a0_0x50df69;console[_0xc28632(0x1cd)]('['+new Date()[_0xc28632(0x1ca)]()[_0xc28632(0x1d3)](0x0,0x8)+_0xc28632(0x1ac)+this[_0xc28632(0x1c1)]+']\x20'+_0x48a12b);}async[a0_0x50df69(0x1c0)](_0x5e3876,_0x1bf066){const _0x16eec7=a0_0x50df69;let _0x4d30d6={'Content-Type':_0x16eec7(0x175),'Accept':_0x16eec7(0x191)};if(this['token'])_0x4d30d6[_0x16eec7(0x179)]=_0x16eec7(0x173)+this[_0x16eec7(0x166)];let _0x3daef6=await(await fetch(this[_0x16eec7(0x1a3)]+_0x16eec7(0x1c2),{'method':_0x16eec7(0x16d),'headers':_0x4d30d6,'body':JSON[_0x16eec7(0x19c)]({'jsonrpc':'2.0','id':Date[_0x16eec7(0x1d1)](),'method':_0x16eec7(0x1a6),'params':{'name':_0x5e3876,'arguments':_0x1bf066}})}))[_0x16eec7(0x15d)](),_0x5aabf2=_0x3daef6[_0x16eec7(0x181)](/data: (.+)/),_0xfd3606=_0x5aabf2?JSON[_0x16eec7(0x19f)](_0x5aabf2[0x1]):JSON[_0x16eec7(0x19f)](_0x3daef6),_0x49eec2=_0xfd3606?.['result']?.[_0x16eec7(0x1bf)]?.[0x0]?.['text'];return _0x49eec2?JSON[_0x16eec7(0x19f)](_0x49eec2):_0xfd3606;}async['connect'](){const _0x38a21f=a0_0x50df69;if(this[_0x38a21f(0x15f)])return;this[_0x38a21f(0x15f)]=!0x0,await this['status'](_0x38a21f(0x1d8)),this[_0x38a21f(0x1cd)]('registered'),this[_0x38a21f(0x1cc)]=setInterval(()=>{const _0x405b98=_0x38a21f;this[_0x405b98(0x1ce)](_0x405b98(0x1d8))[_0x405b98(0x1ba)](_0x58eb65=>this[_0x405b98(0x1cd)](_0x405b98(0x18e)+_0x58eb65[_0x405b98(0x19b)]));},this['heartbeatInterval']),this[_0x38a21f(0x163)]();}async[a0_0x50df69(0x1a5)](){const _0x58681b=a0_0x50df69;if(this['running']=!0x1,this['sseAbort']?.['abort'](),this[_0x58681b(0x1cc)])clearInterval(this[_0x58681b(0x1cc)]);await this[_0x58681b(0x1ce)](_0x58681b(0x1c5))[_0x58681b(0x1ba)](()=>{}),this[_0x58681b(0x1cd)]('disconnected');}async[a0_0x50df69(0x189)](_0x505321,_0x169084,_0x1b7eeb=a0_0x50df69(0x196)){const _0x1dbb6b=a0_0x50df69;return Y({'alias':_0x505321,'fromAlias':this[_0x1dbb6b(0x1c1)]},{'log':_0x22f647=>console[_0x1dbb6b(0x1cd)](_0x22f647),'send':()=>this[_0x1dbb6b(0x1c0)](_0x1dbb6b(0x195),{'alias':_0x505321,'task':_0x169084,'priority':_0x1b7eeb,'from_session':this[_0x1dbb6b(0x1c1)]})});}async[a0_0x50df69(0x19b)](_0x3e7b83,_0x3f59d9){const _0x2dadd6=a0_0x50df69;return this[_0x2dadd6(0x1c0)](_0x2dadd6(0x16f),{'alias':_0x3e7b83,'message':_0x3f59d9,'from_session':this[_0x2dadd6(0x1c1)]});}async[a0_0x50df69(0x168)](_0x31d5d0,_0x70a516,_0x2c415c=a0_0x50df69(0x186)){const _0x1c272a=a0_0x50df69;return this[_0x1c272a(0x1c0)](_0x1c272a(0x17d),{'in_reply_to':_0x31d5d0,'text':_0x70a516,'status':_0x2c415c});}async['status'](_0x2851b5,_0x5c729f){const _0x3cee08=a0_0x50df69;return this[_0x3cee08(0x1c0)]('report_status',{'resume_id':this[_0x3cee08(0x17f)],'alias':this[_0x3cee08(0x1c1)],'status':_0x2851b5,'server':a0_0x21b1e0(),'hostname':a0_0x21b1e0(),'agent':this[_0x3cee08(0x176)],'project_dir':process[_0x3cee08(0x169)](),..._0x5c729f});}async[a0_0x50df69(0x190)](){const _0x4f5444=a0_0x50df69;return this[_0x4f5444(0x1c0)](_0x4f5444(0x16e),{});}async['broadcast'](_0x3bdb2,_0x314cd5){const _0x39ee39=a0_0x50df69;return this['call']('broadcast',{'message':_0x3bdb2,'filter_server':_0x314cd5?.[_0x39ee39(0x198)],'filter_status':_0x314cd5?.['status']});}async[a0_0x50df69(0x163)](){const _0x1576f9=a0_0x50df69;let _0x4192de=encodeURIComponent(this[_0x1576f9(0x1c1)]),_0x1688c3=this[_0x1576f9(0x1a3)]+_0x1576f9(0x17b)+_0x4192de,_0x567e55=this[_0x1576f9(0x194)];while(this[_0x1576f9(0x15f)]){try{this[_0x1576f9(0x1bc)]=new AbortController();let _0x1ff880={'Accept':'text/event-stream'};if(this[_0x1576f9(0x166)])_0x1ff880[_0x1576f9(0x179)]=_0x1576f9(0x173)+this[_0x1576f9(0x166)];let _0x42c074=await fetch(_0x1688c3,{'headers':_0x1ff880,'signal':this['sseAbort']['signal']});if(!_0x42c074['ok']||!_0x42c074[_0x1576f9(0x18b)]){this[_0x1576f9(0x1cd)](_0x1576f9(0x188)+_0x42c074[_0x1576f9(0x1ce)]),await this[_0x1576f9(0x17a)](_0x567e55),_0x567e55=Math[_0x1576f9(0x1be)](_0x567e55*1.5,0xea60);continue;}_0x567e55=this[_0x1576f9(0x194)];let _0xf34c41=_0x42c074['body'][_0x1576f9(0x16c)](),_0xa47661=new TextDecoder(),_0x367c07='';while(this['running']){let {done:_0x9b584e,value:_0x4aab12}=await _0xf34c41['read']();if(_0x9b584e)break;_0x367c07+=_0xa47661['decode'](_0x4aab12,{'stream':!0x0});let _0x33faf6=_0x367c07[_0x1576f9(0x1cf)]('\x0a');_0x367c07=_0x33faf6[_0x1576f9(0x171)]()||'';for(let _0x3ae793 of _0x33faf6){if(!_0x3ae793[_0x1576f9(0x1c6)](_0x1576f9(0x1c8)))continue;try{let _0x27fc14=JSON['parse'](_0x3ae793[_0x1576f9(0x1d3)](0x6));if(_0x27fc14[_0x1576f9(0x1a2)]===_0x1576f9(0x192)){this[_0x1576f9(0x1cd)](_0x1576f9(0x1af)),this['emit'](_0x1576f9(0x192));continue;}if(_0x27fc14['type']===_0x1576f9(0x18a)||_0x27fc14[_0x1576f9(0x1a2)]==='new_message'||_0x27fc14[_0x1576f9(0x1a2)]==='broadcast')await this[_0x1576f9(0x1b2)]();}catch{}}}}catch(_0x2d2c44){if(_0x2d2c44['name']==='AbortError')break;this['emit']('error',_0x2d2c44),this[_0x1576f9(0x1cd)]('SSE\x20error:\x20'+_0x2d2c44[_0x1576f9(0x19b)]);}if(this[_0x1576f9(0x15f)])this[_0x1576f9(0x184)](_0x1576f9(0x18c)),this['log'](_0x1576f9(0x1b3)+_0x567e55/0x3e8+_0x1576f9(0x197)),await this[_0x1576f9(0x17a)](_0x567e55),_0x567e55=Math[_0x1576f9(0x1be)](_0x567e55*1.5,0xea60);}}async[a0_0x50df69(0x1b2)](){const _0xdcacf9=a0_0x50df69;try{let _0x3b2f6a=(await this[_0xdcacf9(0x1c0)](_0xdcacf9(0x1a1),{'alias':this['alias'],'limit':0xa}))?.[_0xdcacf9(0x174)]||[];for(let _0x3eff35 of _0x3b2f6a)await this[_0xdcacf9(0x1c0)]('ack_inbox',{'alias':this['alias'],'message_id':_0x3eff35['id']}),this[_0xdcacf9(0x1cd)]('←\x20'+_0x3eff35['from_session']+':\x20'+_0x3eff35[_0xdcacf9(0x1bf)][_0xdcacf9(0x1d3)](0x0,0x3c)),this[_0xdcacf9(0x184)](_0xdcacf9(0x15e),_0x3eff35),this[_0xdcacf9(0x184)](_0xdcacf9(0x19b),_0x3eff35);}catch(_0x280555){this[_0xdcacf9(0x1cd)]('inbox\x20error:\x20'+_0x280555[_0xdcacf9(0x19b)]);}}['sleep'](_0x1c9c72){return new Promise(_0x5675d8=>setTimeout(_0x5675d8,_0x1c9c72));}}var F=$;export{F as default,$ as CommHub};

package/dist/src/codex-copresence-preflight.d.ts

@@ -0,0 +1,65 @@
+export interface CodexHomeInheritedFile {
+    readonly name: string;
+    readonly mode: number;
+    /** Why a node needs it — printed when staged, so the action is legible. */
+    readonly because: string;
+}
+export declare const CODEX_HOME_INHERITED_FILES: readonly CodexHomeInheritedFile[];
+export interface StatLike {
+    readonly mtimeMs: number;
+}
+export type StatFn = (path: string) => StatLike | null;
+export interface CodexHomeStageStep {
+    readonly name: string;
+    readonly src: string;
+    readonly dst: string;
+    readonly mode: number;
+    readonly reason: "missing" | "host-newer";
+    readonly because: string;
+}
+/**
+ * What to copy from the host CODEX_HOME into the node's, right now.
+ *
+ * Pure: takes the stat function so the ordering rules are testable without a
+ * filesystem. A node file that is NEWER than the host's is left alone — codex
+ * refreshes its own copy in place, and clobbering it would throw away a fresher
+ * token than the one we hold.
+ */
+export declare function codexHomeStagePlan(hostHome: string, nodeHome: string, stat: StatFn, join: (a: string, b: string) => string, files?: readonly CodexHomeInheritedFile[]): CodexHomeStageStep[];
+export type CodexTuiBlocker = "sign-in" | "update-prompt" | "trust-prompt";
+export type CodexTuiPaneState = CodexTuiBlocker | "not-painted" | "usable";
+/**
+ * Classify the TUI, from two different reads of the same pane.
+ *
+ * They answer different questions and need different tmux flags — the same
+ * distinction `waitForTmuxPaneText` documents one screenful up:
+ *
+ *   onScreen  (capture-pane, no -S)  → "is it sitting on a prompt right now"
+ *             A prompt that was already answered stays in scrollback forever,
+ *             so reading history here would report a fixed node as blocked.
+ *
+ *   everSeen  (capture-pane -S -N)   → "did the TUI ever paint"
+ *             The banner is printed once and scrolls away — an MCP error burst
+ *             was enough to push it off screen in under a minute — so reading
+ *             only the current screen here would report a working node as dead.
+ *
+ * 🔴 And "the pane has text" answers neither. An earlier version of this used
+ * "≥3 non-empty lines ⇒ ready" and passed a node parked on the sign-in page.
+ * Measured timeline for that start:
+ *
+ *     t≈3s   22 non-empty lines   ← launcher output, TUI not up yet
+ *     t≈6s    0 non-empty lines   ← codex clears the screen and takes over
+ *     t≈9s   10 non-empty lines   ← the sign-in page finally paints
+ *
+ * The rule fired at t≈3s, six seconds before the thing it was meant to catch
+ * existed.
+ */
+export declare function codexTuiPaneState(onScreen: string, everSeen?: string): CodexTuiPaneState;
+/**
+ * What the operator should read when a node came up but cannot work. Names the
+ * blocker AND where to look — a launcher that only says "not ready" sends
+ * someone hunting through three tmux sessions.
+ */
+export declare function describeCodexTuiBlocker(blocker: CodexTuiBlocker, displayName: string, tuiSession: string): string;
+/** The TUI never painted at all — a distinct failure from being blocked. */
+export declare function describeCodexTuiNotPainted(displayName: string, tuiSession: string, waitedMs: number): string;

package/dist/src/codex-copresence-profile.d.ts

@@ -0,0 +1,125 @@
+export interface CodexCopresenceProfileFields {
+    readonly runtime?: string;
+    readonly codexCopresence?: boolean;
+    readonly codexCopresenceFullAccess?: boolean;
+    readonly flags?: Record<string, unknown>;
+    /** Absolute project directory to launch the codex TUI in. Passed as
+     *  `-C <dir>` to `codex resume`. Also cross-checked against hub-reported
+     *  `session.project_dir` in Phase 4.3. */
+    readonly codexProjectDir?: string;
+    /** Which launch adapter to use in Phase 3.2. `"codex-standard"` = stock
+     *  `codex app-server` + `codex resume`; `"codex-custom-wrapper"` = TMHR狗-class
+     *  custom LLM API wrapper (hosted tool / compaction / image-output compat).
+     *  Unknown / absent → Phase 0 fail-closed (unknown adapters must not fall
+     *  through to a default that might not fit the node's real topology). */
+    readonly codexLaunchAdapter?: "codex-standard" | "codex-custom-wrapper";
+    /** Alias of the peer that will verify this node's identity in Phase 6.
+     *  Peer MUST be (a) registered in the same network, (b) online at resume
+     *  time, (c) not this node itself. Identity attestation uses a fresh
+     *  Hub outbound `send_task` from THIS node's Bridge to <codexProbePeer>
+     *  carrying a nonce; peer echoes the nonce back; CLI cross-checks Hub's
+     *  recorded `from_name / from_node_id / to_name / to_node_id`.
+     *
+     *  🔴 self-loop is deliberately not accepted here — it cannot prove
+     *  cross-node routing closure (design v7 Phase 6 = D, per TMHR
+     *  06cfb29a). Single-node users cannot run `anet node resume` in
+     *  this initial cut; tracked at #1527. */
+    readonly codexProbePeer?: string;
+}
+/** #1521 — the three fields `anet node resume <alias>` will require on a
+ *  codex-copresence node once the resume dispatcher lands (#1528, Draft).
+ *  In this PR, only shape-level enumeration exists (see
+ *  `missingCodexResumeFields` below); no CLI code reads that enumeration
+ *  and the operator-facing remediation flow is deliberately deferred
+ *  along with its real caller. */
+export type CodexResumeRequiredField = "codexProjectDir" | "codexLaunchAdapter" | "codexProbePeer";
+export declare const CODEX_RESUME_REQUIRED_FIELDS: readonly CodexResumeRequiredField[];
+/** Enumerate which of the three resume-required fields are absent /
+ *  wrong-shaped on this profile. Returns [] when all three are present
+ *  and well-shaped.
+ *
+ *  🔴 SHAPE-ONLY validation:
+ *    - codexProjectDir : string starting with `/`. This is a CHEAP typo
+ *      filter, NOT the security gate. Phase 0 (in #1528) MUST additionally
+ *      `realpath`/canonicalize + reject NUL, `/`, and any untrusted target
+ *      before passing this value to `codex resume -C <dir>` (per TMHR
+ *      4bab8196: "startsWith('/') 不是最终安全门").
+ *    - codexLaunchAdapter : enum membership.
+ *    - codexProbePeer : Hub exact-alias lookup, so value MUST equal its own
+ *      trim. Values with leading/trailing whitespace would fail Hub lookup
+ *      100% of the time; rejecting them at the shape layer is a witnessed-red
+ *      canary rather than a permissive pass-through (per TMHR 048d0061 R2:
+ *      "不要 pin 一个必然在 Hub exact lookup 阶段失败的 well-shaped 值").
+ *      Liveness (registered + online + non-self) is a separate hub-side
+ *      check in Phase 0.
+ *
+ *  Deliberately NOT included: an operator-facing diagnostic helper. An
+ *  earlier draft included `codexResumeMissingConfigHint` that referenced
+ *  a `anet node config apply` verb which does not exist in the tree —
+ *  TMHR 4bab8196 blocked it as the exact "存在 ≠ 会执行" antipattern.
+ *  The diagnostic lands with its real caller in a later PR that either
+ *  (a) implements `anet node config apply` first, or (b) reworks the
+ *  diagnostic to reference existing commands only. */
+export declare function missingCodexResumeFields(profile: CodexCopresenceProfileFields): CodexResumeRequiredField[];
+export declare const CODEX_COPRESENCE_RUNTIME = "codex-app-server";
+/**
+ * Should this `anet node start` bring up the co-presence stack?
+ *
+ * The flag still works for a one-off; the profile field is what makes the
+ * second start a single command.
+ */
+export declare function codexCopresenceRequested(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * True when a plain `anet node start` just became enough for this node — i.e.
+ * the flag was passed and the profile had not recorded it yet. Callers persist
+ * `codexCopresence: true` and tell the user they can drop the flag.
+ */
+export declare function shouldPersistCodexCopresence(flagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+export interface CodexCopresencePosture {
+    readonly sandboxMode: "danger-full-access" | "read-only";
+    readonly approvalPolicy: "never" | "on-request";
+    /** Set when the node asked for full access and is NOT getting it. */
+    readonly downgradeNotice?: string;
+    /** Set when a remembered grant (not this invocation's flag) opened it up. */
+    readonly grantedFromProfile: boolean;
+}
+/**
+ * Resolve the sandbox the co-presence app-server runs under.
+ *
+ * Precedence: this invocation's flag → a grant already recorded on the profile
+ * → read-only. `flags.sandboxMode` alone never opens the sandbox; it only
+ * decides whether staying closed is worth telling the user about.
+ */
+export declare function codexCopresencePosture(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields, displayName?: string): CodexCopresencePosture;
+/** True when an explicit grant should be written to the profile for next time. */
+export declare function shouldPersistCodexFullAccess(dangerFlagPassed: boolean, profile: CodexCopresenceProfileFields): boolean;
+/**
+ * What `anet node create --runtime codex-app-server` should record, so that a
+ * later `anet node start <name>` is a single command with no flag.
+ *
+ * Shape copied from opencode, which already does exactly this at create time:
+ *
+ *   ...(runtime === "opencode-cli"
+ *     ? { opencodeMode: opts.mode === "copresence" || opts.copresence === "true"
+ *         ? "copresence" : "headless" }
+ *     : {}),
+ *
+ * Deliberately NOT keyed on which alias the operator typed. `codex-tui`,
+ * `codex-appserver` and `codex-app-server` are documented as aliases of one
+ * runtime (agent-node/src/cli.ts); giving one of them a different default would
+ * quietly break that contract, and "I typed the short name" is not a reliable
+ * statement of intent. Opting in stays explicit, exactly as it is for opencode.
+ */
+export declare function codexCopresenceCreateFields(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined): {
+    codexCopresence?: true;
+};
+/**
+ * One line at create time for a node that will start headless.
+ *
+ * NOT keyed on which alias the operator typed: by the time create builds the
+ * profile, `opts.runtime` has already been normalized to `codex-app-server`, so
+ * `codex-tui` is simply not recoverable here — a hint that tried to read it
+ * would never fire. (It didn't; that is how this was found.) Keying on the
+ * runtime instead also keeps the aliases true synonyms.
+ */
+export declare function codexCopresenceCreateHint(normalizedRuntime: string | undefined, copresenceOpt: string | boolean | undefined, displayName: string): string | undefined;

package/dist/src/codex-copresence-recovery.d.ts

@@ -0,0 +1,43 @@
+export interface CodexRecoveryVerification {
+    method: "thread/start" | "thread/resume";
+    threadId: string;
+    verifiedAt: string;
+    historyTurnCount: number;
+    historyFingerprint: string;
+}
+export interface CodexRecoveryBackup {
+    backupDir: string;
+    createdAt: string;
+    stateFiles: string[];
+}
+/** Transaction boundary shared by Windows and POSIX cutovers: the snapshot
+ * cannot begin until every authoritative state writer has quiesced. */
+export declare function quiesceThenSnapshot<T>(quiesce: () => Promise<void>, snapshot: () => T): Promise<T>;
+/** A stored thread is never considered resumed until app-server reads the
+ * exact thread back with persisted history. This is deliberately stricter
+ * than accepting a successful thread/resume RPC response. */
+export declare function verifyCodexThreadHistory(method: "thread/start" | "thread/resume", expectedThreadId: string, readResult: unknown, now?: Date): CodexRecoveryVerification;
+export declare function resumeAndVerifyCodexThread(threadId: string, request: (method: string, params: Record<string, unknown>) => Promise<unknown>): Promise<CodexRecoveryVerification>;
+/** Private, node-local recovery point. config-recovery.json is deliberately
+ * redacted non-credential audit/recovery metadata, not an identity backup.
+ * Identity recovery relies on leaving the original node config and CODEX_HOME
+ * in place. Credentials are never copied into this snapshot. */
+export declare function backupCodexRecoveryState(opts: {
+    nodeDir: string;
+    codexHome: string;
+    now?: Date;
+}): CodexRecoveryBackup;
+export declare function codexTopologyAudit(profile: Record<string, any>, nodeDir: string, cwd: string): {
+    launchMode: string;
+    cwd: string;
+    codexHome: string;
+    remote: any;
+    threadId: any;
+    model: any;
+    flags: any;
+    lastRecoveryVerification: any;
+    lastRecoveryBackup: {
+        createdAt: any;
+        stateFiles: any;
+    } | null;
+};

package/dist/src/codex-copresence-thread.d.ts

@@ -0,0 +1,13 @@
+export type CopresenceThreadPlan = {
+    method: "thread/resume";
+    params: {
+        threadId: string;
+    };
+    bootstrap: false;
+} | {
+    method: "thread/start";
+    params: Record<string, never>;
+    bootstrap: true;
+};
+/** Restarting a node must preserve its conversation; only a virgin node starts one. */
+export declare function copresenceThreadPlan(storedThreadId?: string): CopresenceThreadPlan;

package/dist/src/codex-lifecycle-account.d.ts

@@ -0,0 +1,104 @@
+import type { ReceiptCheck } from "./codex-lifecycle-receipt.js";
+import type { RestartOutcome } from "./codex-lifecycle-restart.js";
+export declare const SOURCE_KIND = "codex-login-profile";
+/** `--source` 只接受 `codex-login:<profile-id>`。路径、`env:`、`-`(stdin)、绝对/相对路径都拒绝,错误里说清为什么。 */
+export declare function parseSourceRef(raw: string): {
+    kind: typeof SOURCE_KIND;
+    profileId: string;
+};
+export declare function shortHash(value: string, length?: number): string;
+/** host_id:machine-id(有则用)+ hostname 的不可逆摘要;registry entry 绑定它,拷到别的机器就不认。 */
+export declare function hostIdOf(machineId: string | null, hostname: string): string;
+export interface ChatgptAuthShape {
+    auth_mode?: unknown;
+    tokens?: {
+        account_id?: unknown;
+    } | null;
+    OPENAI_API_KEY?: unknown;
+}
+/** 只认 ChatGPT 登录:auth_mode=chatgpt 且 tokens.account_id 是 36 位 uuid;指纹 = sha256(account_id) 前 16 位。 */
+export declare function accountFingerprint(auth: ChatgptAuthShape): string;
+export interface RegistryEntry {
+    schema_version: 1;
+    profile_id: string;
+    provider: "openai-chatgpt";
+    host_id: string;
+    /** 由 registry 目录解析的相对引用;从不是绝对路径。 */
+    credential_ref: string;
+    account_fingerprint: string;
+    created_at: string;
+    last_model_probe_at: string | null;
+    last_model_probe_status: ProbeStatus | null;
+    revoked: boolean;
+    disabled: boolean;
+}
+export interface Registry {
+    schema_version: 1;
+    host_id: string;
+    profiles: Record<string, RegistryEntry>;
+}
+export type ProbeStatus = "ok" | "auth" | "quota" | "model" | "unknown";
+export declare function credentialRefFor(profileId: string): string;
+export declare function credentialPath(registryDir: string, entry: RegistryEntry): string;
+export declare function readRegistry(registryDir: string, hostId: string): Registry;
+export declare function writeRegistry(registryDir: string, reg: Registry): void;
+/** 解析一个 profile:必须存在、未 revoked/disabled、host_id 一致、凭据文件在且 0600。返回凭据路径(只在进程内用,不进 receipt)。 */
+export declare function resolveProfile(registryDir: string, reg: Registry, profileId: string, hostId: string): {
+    entry: RegistryEntry;
+    credentialFile: string;
+};
+/** 把一次 fresh 模型请求的结果归类;归不进已知类的一律 unknown(unknown 也 STOP,不猜)。 */
+export declare function classifyProbe(exitCode: number | null, stdout: string, stderr: string, expected?: string): ProbeStatus;
+export declare function backupRefFor(receiptId: string): string;
+/** rollback 只认 `receipt:<id>`,且只在该节点的 receipts/ 目录里解析;调用方不能另指文件。 */
+export declare function backupPathFor(nodeDir: string, backupRef: string): string;
+export interface InstallActions {
+    /** 目标节点 before 核对:返回 fail 的 key(空 = 可继续)。 */
+    preflightBlocks(): Promise<string[]>;
+    /** 目标当前 auth 指纹(没有 auth.json → null)。 */
+    currentFingerprint(): Promise<string | null>;
+    /** 在隔离 staging HOME 里用该 profile 发一次 fresh 模型请求。 */
+    probe(): Promise<{
+        status: ProbeStatus;
+        detail: string;
+    }>;
+    /** 备份目标 auth.json → backup_ref(0600)。 */
+    backup(): Promise<{
+        backupRef: string;
+    }>;
+    /** 把 profile 凭据装进目标 CODEX_HOME(0600,原子)。 */
+    install(): Promise<void>;
+    /** 完整重启(PR-B 状态机),返回其 outcome。 */
+    restart(): Promise<RestartOutcome>;
+    /** 从 backup_ref 恢复 auth.json。 */
+    restore(backupRef: string): Promise<void>;
+    /** 探针在 registry 里的回写(时间 + 状态)。 */
+    recordProbe(status: ProbeStatus): Promise<void>;
+}
+export interface InstallInput {
+    profileId: string;
+    sourceFingerprint: string;
+}
+export interface InstallOutcome {
+    checks: ReceiptCheck[];
+    stoppedAt: string;
+    rolledBack: boolean;
+    backupRef: string | null;
+}
+/**
+ * account install 状态机:preflight → fresh 探针(401/quota/模型不兼容/unknown 都 STOP,目标一字未动)→ 备份 → 安装 →
+ * 完整重启(含 verify)→ 目标指纹 == 源指纹。安装后任一步失败 → 恢复备份 + 再重启一次(回滚),receipt 记两段。
+ */
+export declare function runAccountInstall(input: InstallInput, a: InstallActions): Promise<InstallOutcome>;
+export interface RollbackActions {
+    /** 读原 install receipt;返回它的 backup_ref 与当时的 target_previous_fingerprint。 */
+    readInstallReceipt(): Promise<{
+        backupRef: string;
+        targetPreviousFingerprint: string | null;
+    } | null>;
+    backupExists(backupRef: string): Promise<boolean>;
+    restore(backupRef: string): Promise<void>;
+    restart(): Promise<RestartOutcome>;
+    currentFingerprint(): Promise<string | null>;
+}
+export declare function runRollback(a: RollbackActions): Promise<InstallOutcome>;

package/dist/src/codex-lifecycle-canary.d.ts

@@ -0,0 +1,20 @@
+/**
+ * #1856 PR-E — `anet node codex canary <alias>...`:批量只读体检,**顺序跑、第一个 FAIL 即停**。
+ * 批量重启 / 换账号之前先 canary;后面的节点一个都不碰,汇总里明确写"未跑"。纯逻辑,verify 由调用方注入。
+ */
+export interface CanaryNodeResult {
+    readonly alias: string;
+    readonly verdict: "PASS" | "FAIL";
+    readonly blocking: readonly string[];
+    readonly receiptPath: string | null;
+    readonly ms: number;
+}
+export interface CanarySummary {
+    readonly verdict: "PASS" | "FAIL";
+    readonly ran: readonly CanaryNodeResult[];
+    /** 因前面 FAIL 而没跑的节点(顺序保留)。 */
+    readonly skipped: readonly string[];
+    readonly stoppedAt: string | null;
+}
+export declare function runCanary(aliases: readonly string[], verifyOne: (alias: string) => Promise<Omit<CanaryNodeResult, "alias" | "ms">>, now?: () => number): Promise<CanarySummary>;
+export declare function formatCanarySummary(s: CanarySummary): string;