@songsid/agend 2.1.6-beta.8 → 2.1.6

package/dist/backend/codex.d.ts

@@ -7,7 +7,35 @@ export declare class CodexBackend implements CliBackend {
     private readonly isolatedCodexHome;
     /** Which subscription this instance runs on, or null for the shared login. */
     private credentialProfile;
+    /** Set only after preTrust wrote and read back this instance's private config. */
+    private authorizedTrust;
     constructor(instanceDir: string);
+    /**
+     * Compute and (on first call for an existing instance) migrate to a SHORT
+     * persistent CODEX_HOME under `~/.agend/cx/<8-char-hash>/`.
+     *
+     * Background (#953): codex 0.157.0 added `app-server-control.sock` under
+     * CODEX_HOME. For instances with long `-t<topic_id>` suffixes the full path
+     * exceeds the Unix socket SUN_LEN (~107 chars). codex canonicalises the path
+     * before binding the socket, so a symlink workaround does not help — the real
+     * path must be short.
+     *
+     * Migration steps (each is idempotent; half-completed states self-heal):
+     *  1. If shortHome does not exist AND legacyHome is a real directory (not a
+     *     symlink) → atomic renameSync. On EXDEV or any other error, fall back
+     *     safely: keep using the legacy long path (instance can still start, just
+     *     without the short-path fix).
+     *  2. If shortHome exists but legacyHome is missing → recreate the backward-
+     *     compat symlink (self-heal for rename-succeeded-but-symlink-failed crash).
+     *  3. If both shortHome and legacyHome (as symlink) exist → nothing to do.
+     *  4. New instance (no legacyHome) → create shortHome directly.
+     *
+     * Fail-safe guarantee: migration failure must never make the instance worse.
+     * The caller always receives a valid path it can use as CODEX_HOME.
+     */
+    /** Exposed for fleet-manager to delete the short home on instance removal. */
+    static shortHomeFor(instanceDir: string): string;
+    private static resolveShortHome;
     supportsQueuedInput(): boolean;
     /**
      * Codex's input row, from live captures on codex-cli 0.153.4: `› Ask Codex to
@@ -26,6 +54,8 @@ export declare class CodexBackend implements CliBackend {
      * (updatePickerDialog) before any delivery path reads this pattern.
      */
     getBottomReadyPattern(): RegExp | null;
+    /** Observed on real Codex 0.156.0: the live input row precedes its footer. */
+    isDeliveryInputReadyPane(pane: string): boolean;
     /** Live status chrome that must veto the broad prompt/context ready match. */
     getBusyPattern(): RegExp;
     /**
@@ -127,9 +157,14 @@ export declare class CodexBackend implements CliBackend {
      */
     private cleanSharedConfig;
     getReadyPattern(): RegExp;
+    /** A proxy reply filters chrome per line; whole-pane readiness is separate. */
+    isProxyReplyChromeLine(line: string): boolean;
     getErrorPatterns(): ErrorPattern[];
     getStartupDialogs(): StartupDialog[];
+    private trustHoldDialog;
     private updatePickerDialog;
+    private usageLimitLunaReserveDialog;
+    private unknownSelectionHoldDialog;
     getRuntimeDialogs(): RuntimeDialog[];
     getInputUnavailableTransients(): InputUnavailableTransient[];
     getContextUsage(): number | null;
@@ -171,6 +206,23 @@ export declare class CodexBackend implements CliBackend {
      * fallback keeps `/model` usable before the first TUI catalog refresh.
      */
     listModels(): Promise<ModelOption[]>;
+    /**
+     * Make codex refetch its account catalog into models_cache.json.
+     *
+     * listModels() only reads that file; codex writes it. Measured on 0.156.0:
+     * `codex debug models` fetches the catalog when the cache is older than
+     * codex's own TTL (about five minutes — a 4-minute-old cache was served as
+     * is, a 6-minute-old one was refetched) and rewrites the file with a new
+     * `fetched_at`. `--bundled` would skip the fetch, so it is not passed.
+     *
+     * What this does NOT force: a cache codex fetched in the last ~5 minutes is
+     * trusted by codex and returned unchanged. There is no flag to bypass that,
+     * and a list at most five minutes old is not the staleness this exists for.
+     *
+     * Targets the same CODEX_HOME listModels() reads, so the refetch lands in the
+     * file that is read next.
+     */
+    refreshModelCatalog(): Promise<void>;
     probeCLIEnv(): Promise<{
         version?: string;
         models: ModelOption[];