@songsid/agend 2.1.7-beta.6 → 2.1.7-beta.8

package/dist/backend/codex-session-lookup.d.ts

@@ -1,6 +1,6 @@
 import Database from "better-sqlite3";
 /** Columns the lookup depends on; any missing one means "schema unreadable". */
-export declare const CODEX_THREAD_COLUMNS: readonly ["id", "cwd", "source", "archived", "has_user_event", "recency_at_ms", "updated_at_ms"];
+export declare const CODEX_THREAD_COLUMNS: readonly ["id", "cwd", "source", "archived", "has_user_event", "first_user_message", "rollout_path", "recency_at_ms", "updated_at_ms"];
 export type ExactCwdSession = {
     kind: "found";
     id: string;
@@ -36,8 +36,37 @@ export declare function openCodexStateReadonly(path: string): Database.Database;
  * Newest interactive thread recorded for exactly this directory. Exact
  * equality only: a prefix or LIKE match would take a subdirectory's (or a
  * similarly named sibling's) session.
+ *
+ * "Has anything in it" was checked against real Codex data (#1017), not
+ * inferred from a column name:
+ * - `has_user_event` does NOT mean that. Real 0.157 sessions with a first
+ *   message and millions of tokens carry 0. Filtering on it matched no real
+ *   session, so every restart silently started a new conversation.
+ * - `tokens_used > 0` drops real sessions too: a provider that reports no
+ *   token usage leaves it at 0, as does a restart during the first turn.
+ * - A non-empty `first_user_message` proves content, but an empty one does
+ *   not prove the opposite: a real 38-turn session (0.156.1) and `/goal`-first
+ *   sessions (openai/codex#28423) have empty list metadata. For those the
+ *   rollout decides whether a turn ever ran. A thread nobody used (e.g. an
+ *   untouched fork) holds only `session_meta`/`thread_settings_applied`; any
+ *   turn — however its first input was delivered, including hidden goal
+ *   context — writes `task_started`, a `turn_context` or a `response_item`.
+ * tests/fixtures/codex-real-threads.json holds the real rows behind this.
  */
-export declare function findExactCwdCodexSession(stateDbPath: string, workingDirectory: string, open?: (path: string) => Database.Database): ExactCwdSession;
+export declare function findExactCwdCodexSession(stateDbPath: string, workingDirectory: string, open?: (path: string) => Database.Database, rolloutHasTurn?: (path: string) => boolean): ExactCwdSession;
+/**
+ * Whether a Codex rollout (JSONL) may hold a conversation. Read-only, in
+ * chunks, stopping at the first entry that is not part of an untouched thread
+ * — in real rollouts a turn entry follows the ~22 KB session_meta line.
+ *
+ * "No" needs proof: the file has the known untouched shape and nothing else
+ * (`session_meta` + `thread_settings_applied`). Every other entry — a turn,
+ * an entry type from a newer Codex, a line this code cannot parse — counts
+ * as yes: resuming a doubtful thread fails loudly, skipping a real one
+ * silently loses the conversation. A missing or unreadable rollout cannot be
+ * resumed, so it counts as no.
+ */
+export declare function rolloutRecordsTurn(path: string): boolean;
 /**
  * The directory's git common dir: a string for a repo, null for "not a git
  * repository", "unknown" for anything else (timeout, git missing, …).

package/dist/backend/codex-session-lookup.js

@@ -12,12 +12,13 @@
  * docs/design/984-codex-exact-cwd-resume.zh-TW.md.
  */
 import { execFileSync } from "node:child_process";
-import { realpathSync } from "node:fs";
+import { closeSync, openSync, readSync, realpathSync } from "node:fs";
 import { resolve } from "node:path";
+import { StringDecoder } from "node:string_decoder";
 import Database from "better-sqlite3";
 /** Columns the lookup depends on; any missing one means "schema unreadable". */
 export const CODEX_THREAD_COLUMNS = [
-    "id", "cwd", "source", "archived", "has_user_event", "recency_at_ms", "updated_at_ms",
+    "id", "cwd", "source", "archived", "has_user_event", "first_user_message", "rollout_path", "recency_at_ms", "updated_at_ms",
 ];
 const SESSION_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 /**
@@ -41,8 +42,24 @@ function cwdCandidates(workingDirectory) {
  * Newest interactive thread recorded for exactly this directory. Exact
  * equality only: a prefix or LIKE match would take a subdirectory's (or a
  * similarly named sibling's) session.
+ *
+ * "Has anything in it" was checked against real Codex data (#1017), not
+ * inferred from a column name:
+ * - `has_user_event` does NOT mean that. Real 0.157 sessions with a first
+ *   message and millions of tokens carry 0. Filtering on it matched no real
+ *   session, so every restart silently started a new conversation.
+ * - `tokens_used > 0` drops real sessions too: a provider that reports no
+ *   token usage leaves it at 0, as does a restart during the first turn.
+ * - A non-empty `first_user_message` proves content, but an empty one does
+ *   not prove the opposite: a real 38-turn session (0.156.1) and `/goal`-first
+ *   sessions (openai/codex#28423) have empty list metadata. For those the
+ *   rollout decides whether a turn ever ran. A thread nobody used (e.g. an
+ *   untouched fork) holds only `session_meta`/`thread_settings_applied`; any
+ *   turn — however its first input was delivered, including hidden goal
+ *   context — writes `task_started`, a `turn_context` or a `response_item`.
+ * tests/fixtures/codex-real-threads.json holds the real rows behind this.
  */
-export function findExactCwdCodexSession(stateDbPath, workingDirectory, open = openCodexStateReadonly) {
+export function findExactCwdCodexSession(stateDbPath, workingDirectory, open = openCodexStateReadonly, rolloutHasTurn = rolloutRecordsTurn) {
     let db = null;
     try {
         db = open(stateDbPath);
@@ -51,15 +68,27 @@ export function findExactCwdCodexSession(stateDbPath, workingDirectory, open = o
         if (missing.length > 0)
             return { kind: "unreadable", reason: `threads schema missing: ${missing.join(", ")}` };
         const [first, second = first] = cwdCandidates(workingDirectory);
-        const row = db.prepare(`
-      SELECT id FROM threads
+        // Every thread of this directory, newest first, until one has content —
+        // no page limit, so a run of empty threads cannot hide an older session.
+        const rows = db.prepare(`
+      SELECT id, has_user_event, first_user_message, rollout_path FROM threads
       WHERE cwd IN (?, ?)
         AND source = 'cli'
         AND archived = 0
-        AND has_user_event = 1
       ORDER BY recency_at_ms DESC, updated_at_ms DESC, id DESC
-      LIMIT 1
-    `).get(first, second);
+    `).iterate(first, second);
+        let row;
+        for (const r of rows) {
+            // Any sign of content is enough; only a thread with none is skipped.
+            // has_user_event = 1 is what the #984 lookup accepted, so keeping it
+            // means this lookup never resumes less than that one did.
+            if (r.has_user_event === 1
+                || (typeof r.first_user_message === "string" && r.first_user_message !== "")
+                || (typeof r.rollout_path === "string" && rolloutHasTurn(r.rollout_path))) {
+                row = r;
+                break;
+            }
+        }
         if (!row)
             return { kind: "none" };
         // A malformed id means the schema no longer means what we think it does.
@@ -79,6 +108,74 @@ export function findExactCwdCodexSession(stateDbPath, workingDirectory, open = o
         catch { /* already closed */ }
     }
 }
+/** Rollouts are read in chunks of this size until a turn entry or the end. */
+const ROLLOUT_CHUNK_BYTES = 256 * 1024;
+/**
+ * The entries of a thread nobody used. Real untouched threads (e.g. a fork)
+ * hold exactly `session_meta` and `event_msg:thread_settings_applied`.
+ */
+function isUntouchedThreadEntry(entry) {
+    return entry.type === "session_meta"
+        || (entry.type === "event_msg" && entry.payload?.type === "thread_settings_applied");
+}
+/**
+ * Whether a Codex rollout (JSONL) may hold a conversation. Read-only, in
+ * chunks, stopping at the first entry that is not part of an untouched thread
+ * — in real rollouts a turn entry follows the ~22 KB session_meta line.
+ *
+ * "No" needs proof: the file has the known untouched shape and nothing else
+ * (`session_meta` + `thread_settings_applied`). Every other entry — a turn,
+ * an entry type from a newer Codex, a line this code cannot parse — counts
+ * as yes: resuming a doubtful thread fails loudly, skipping a real one
+ * silently loses the conversation. A missing or unreadable rollout cannot be
+ * resumed, so it counts as no.
+ */
+export function rolloutRecordsTurn(path) {
+    let fd = null;
+    try {
+        fd = openSync(path, "r");
+        const buf = Buffer.alloc(ROLLOUT_CHUNK_BYTES);
+        // A multi-byte character may straddle two chunks; the decoder holds it.
+        const decoder = new StringDecoder("utf8");
+        let pending = "";
+        let position = 0;
+        let recognised = false;
+        for (;;) {
+            const read = readSync(fd, buf, 0, ROLLOUT_CHUNK_BYTES, position);
+            position += read;
+            const text = pending + (read === 0 ? decoder.end() : decoder.write(buf.subarray(0, read)));
+            const lines = text.split("\n");
+            pending = read === 0 ? "" : lines.pop() ?? "";
+            for (const line of lines) {
+                if (!line.trim())
+                    continue;
+                let entry;
+                try {
+                    entry = JSON.parse(line);
+                }
+                catch {
+                    return true;
+                } // unparseable: not provably empty
+                if (!isUntouchedThreadEntry(entry))
+                    return true;
+                if (entry.type === "session_meta")
+                    recognised = true;
+            }
+            if (read === 0)
+                return !recognised;
+        }
+    }
+    catch {
+        return false;
+    }
+    finally {
+        if (fd !== null)
+            try {
+                closeSync(fd);
+            }
+            catch { /* already closed */ }
+    }
+}
 export const defaultGitCommonDir = dir => {
     try {
         return execFileSync("git", ["-C", dir, "rev-parse", "--path-format=absolute", "--git-common-dir"], {

package/dist/backend/codex-session-lookup.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-session-lookup.js","sourceRoot":"","sources":["../../src/backend/codex-session-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe;CAC7E,CAAC;AAEX,MAAM,aAAa,GAAG,iEAAiE,CAAC;AAexF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,gBAAwB;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;IAClG,OAAO,IAAI,IAAI,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,gBAAwB,EACxB,OAA4C,sBAAsB;IAElE,IAAI,EAAE,GAA6B,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAE,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,GAAG,EAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtH,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC/G,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;KAQtB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAgC,CAAC;QACrD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,yEAAyE;QACzE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA0C,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,MAAM,mBAAmB,GAAiB,GAAG,CAAC,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE;YACjG,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA2D,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,gBAAwB,EACxB,uBAA0C,EAC1C,eAA6B,mBAAmB;IAEhD,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,UAAU,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,QAA4B;IACnF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC3E,IAAI,QAAQ,EAAE,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,0BAA0B;YAClC,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,OAAO,EAAE,sCAAsC,MAAM,CAAC,MAAM,uKAAuK;SACpO,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,OAAO,EAAE,sCAAsC,MAAM,CAAC,MAAM,uFAAuF;KACpJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"codex-session-lookup.js","sourceRoot":"","sources":["../../src/backend/codex-session-lookup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe;CACnH,CAAC;AAEX,MAAM,aAAa,GAAG,iEAAiE,CAAC;AAexF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,gBAAwB;IAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,+CAA+C,CAAC,CAAC;IAClG,OAAO,IAAI,IAAI,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,gBAAwB,EACxB,OAA4C,sBAAsB,EAClE,iBAA4C,kBAAkB;IAE9D,IAAI,EAAE,GAA6B,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAE,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC,GAAG,EAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtH,MAAM,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC/G,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAChE,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;KAMvB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAmH,CAAC;QAC5I,IAAI,GAAgC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,qEAAqE;YACrE,qEAAqE;YACrE,0DAA0D;YAC1D,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC;mBACrB,CAAC,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ,IAAI,CAAC,CAAC,kBAAkB,KAAK,EAAE,CAAC;mBACzE,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBAAC,GAAG,GAAG,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;QAClG,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,yEAAyE;QACzE,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA0C,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5E,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEvC;;;GAGG;AACH,SAAS,sBAAsB,CAAC,KAAuD;IACrF,OAAO,KAAK,CAAC,IAAI,KAAK,cAAc;WAC/B,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,yBAAyB,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC9C,wEAAwE;QACxE,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;YACjE,QAAQ,IAAI,IAAI,CAAC;YACjB,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,KAAuD,CAAC;gBAC5D,IAAI,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,IAAI,CAAC;gBAAC,CAAC,CAAC,kCAAkC;gBAC3G,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAChD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;oBAAE,UAAU,GAAG,IAAI,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,CAAC,UAAU,CAAC;QACrC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,IAAI;YAAE,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,MAAM,mBAAmB,GAAiB,GAAG,CAAC,EAAE;IACrD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE;YACjG,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA2D,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,gBAAwB,EACxB,uBAA0C,EAC1C,eAA6B,mBAAmB;IAEhD,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,UAAU,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,QAA4B;IACnF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC3E,IAAI,QAAQ,EAAE,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,0BAA0B;YAClC,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,OAAO,EAAE,sCAAsC,MAAM,CAAC,MAAM,uKAAuK;SACpO,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM,CAAC,MAAM;QACpB,OAAO,EAAE,sCAAsC,MAAM,CAAC,MAAM,uFAAuF;KACpJ,CAAC;AACJ,CAAC"}

package/dist/backend/codex.d.ts

@@ -113,6 +113,14 @@ export declare class CodexBackend implements CliBackend {
      * rather than preserved. TOML rejects duplicate keys, so replace in place.
      */
     private disableStartupUpdateCheck;
+    /**
+     * Suppress Codex's rate-limit model-switch reminder for unattended instances.
+     * Codex documents this as `notice.hide_rate_limit_model_nudge` (a boolean in
+     * the `[notice]` table). This changes only the per-instance config; the
+     * runtime holdOnly dialog remains as defense-in-depth for older or changed
+     * CLI behavior. No model option is selected automatically.
+     */
+    private hideRateLimitModelNudge;
     /**
      * Ensure Codex's TUI status line shows context usage: the Context item is
      * both what /ctx scrapes and the footer AgEnD's readiness proofs rely on.

package/dist/backend/codex.js

@@ -109,6 +109,87 @@ function tomlTable(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value) && !(value instanceof Date)
         ? value : null;
 }
+/**
+ * Set one boolean inside a TOML table while leaving unrelated config text
+ * intact. Existing tables keep their layout; when the table isn't declared,
+ * use the equivalent dotted key in the root table. Table headers embedded in
+ * multiline strings are ignored.
+ */
+function setTomlTableBoolean(content, table, key) {
+    const lines = content.split(/(?<=\n)/);
+    let multiline = null;
+    const headers = [];
+    for (let index = 0; index < lines.length; index++) {
+        const line = lines[index];
+        if (!multiline) {
+            const header = line.match(/^\s*(?:\[([^\[\]]+)\]|\[\[([^\[\]]+)\]\])\s*(?:#.*)?(?:\r?\n)?$/);
+            if (header)
+                headers.push({ index, name: (header[1] ?? header[2]).trim(), isArray: header[2] !== undefined });
+        }
+        for (const delimiter of ['"""', "'''"]) {
+            if (multiline && multiline !== delimiter)
+                continue;
+            let count = 0;
+            let pos = 0;
+            while ((pos = line.indexOf(delimiter, pos)) !== -1) {
+                if (delimiter === "'''" || pos === 0 || line[pos - 1] !== "\\")
+                    count++;
+                pos += delimiter.length;
+            }
+            if (count % 2 === 1)
+                multiline = multiline === delimiter ? null : delimiter;
+        }
+    }
+    const assignment = new RegExp(`^(\\s*${key}\\s*=\\s*)(?:true|false)(\\s*(?:#.*)?)(\\r?\\n?)$`);
+    const tableIndex = headers.findIndex(header => header.name === table && !header.isArray);
+    if (tableIndex >= 0) {
+        const start = headers[tableIndex].index + 1;
+        const end = headers[tableIndex + 1]?.index ?? lines.length;
+        for (let index = start; index < end; index++) {
+            const existing = lines[index].match(assignment);
+            if (existing) {
+                lines[index] = `${existing[1]}true${existing[2]}${existing[3]}`;
+                return lines.join("");
+            }
+        }
+        if (end > 0 && !lines[end - 1].endsWith("\n"))
+            lines[end - 1] += "\n";
+        lines.splice(end, 0, `${key} = true\n`);
+        return lines.join("");
+    }
+    // Inline tables cannot be extended with dotted keys, so update the simple
+    // root-level `notice = { ... }` form in place when it is present.
+    const rootEnd = headers[0]?.index ?? lines.length;
+    const dottedAssignment = new RegExp(`^(\\s*${table}\\s*\\.\\s*${key}\\s*=\\s*)(?:true|false)(\\s*(?:#.*)?)(\\r?\\n?)$`);
+    for (let index = 0; index < rootEnd; index++) {
+        const existing = lines[index].match(dottedAssignment);
+        if (existing) {
+            lines[index] = `${existing[1]}true${existing[2]}${existing[3]}`;
+            return lines.join("");
+        }
+        const inline = lines[index].match(new RegExp(`^(\\s*${table}\\s*=\\s*\\{)(.*)(\\})(\\s*(?:#.*)?)(\\r?\\n?)$`));
+        if (inline) {
+            const option = new RegExp(`(${key}\\s*=\\s*)(?:true|false)`);
+            const body = option.test(inline[2])
+                ? inline[2].replace(option, "$1true")
+                : `${inline[2].trim().length > 0 ? `${inline[2]}, ` : inline[2]}${key} = true`;
+            lines[index] = `${inline[1]}${body}${inline[3]}${inline[4]}${inline[5]}`;
+            return lines.join("");
+        }
+    }
+    // A dotted assignment is valid in the root table and can extend an implicit
+    // parent table created by `[notice.child]` without duplicating `[notice]`.
+    const line = `${table}.${key} = true\n`;
+    if (rootEnd === 0)
+        lines.unshift(line);
+    else if (lines[rootEnd - 1].endsWith("\n"))
+        lines.splice(rootEnd, 0, line);
+    else {
+        lines[rootEnd - 1] += "\n";
+        lines.splice(rootEnd, 0, line);
+    }
+    return lines.join("");
+}
 const CODEX_CONTEXT_STATUS_ITEM_RE = /^context-(?:remaining|usage|used)$/;
 /** The TUI's effective status_line items: null when unset, "invalid" when unusable. */
 function effectiveTuiStatusLine(content) {
@@ -867,6 +948,7 @@ export class CodexBackend {
         atomicWritePrivate(join(this.isolatedCodexHome, "config.toml"), content);
         this.enableContextStatusLine();
         this.disableStartupUpdateCheck();
+        this.hideRateLimitModelNudge();
         // Write fleet instructions into AGENTS.md (additive via marker block)
         if (config.instructions) {
             try {
@@ -930,6 +1012,30 @@ export class CodexBackend {
         }
         catch { /* best effort */ }
     }
+    /**
+     * Suppress Codex's rate-limit model-switch reminder for unattended instances.
+     * Codex documents this as `notice.hide_rate_limit_model_nudge` (a boolean in
+     * the `[notice]` table). This changes only the per-instance config; the
+     * runtime holdOnly dialog remains as defense-in-depth for older or changed
+     * CLI behavior. No model option is selected automatically.
+     */
+    hideRateLimitModelNudge() {
+        const configPath = join(this.isolatedCodexHome, "config.toml");
+        let content = "";
+        try {
+            content = readFileSync(configPath, "utf-8");
+        }
+        catch {
+            return;
+        }
+        const updated = setTomlTableBoolean(content, "notice", "hide_rate_limit_model_nudge");
+        if (updated !== content) {
+            try {
+                atomicWritePrivate(configPath, updated);
+            }
+            catch { /* best effort */ }
+        }
+    }
     /**
      * Ensure Codex's TUI status line shows context usage: the Context item is
      * both what /ctx scrapes and the footer AgEnD's readiness proofs rely on.