@svenroth-ai/shipwright 0.26.0 → 0.28.0

package/server/dist/core/codex-task-watcher.js

@@ -0,0 +1,252 @@
+/*
+ * core/codex-task-watcher.ts — Codex Light §5.1 `CodexTaskWatcher`: the
+ * plain module (no new process) that ties the completion oracle (§1) to
+ * the live pty (§4) into the actual runtime behavior AC5/AC6 need.
+ *
+ * On every `tick()`, for each live Codex-runtime task whose pty has been
+ * silent ≥ `stallTimeoutMs` (Settings-configurable, default 15 min, floor
+ * 5 min — §5's Settings field), calls the oracle CLI (`codex-oracle-
+ * runner.ts`) and classifies per the spec's table:
+ *
+ *   not_done + silent      → auto-nudge, capped at one attempt per stall
+ *                            EPISODE (a fresh `lastDataAt` starts a new one)
+ *   delivery_pending, delivery_state absent/"indeterminate" → case 13
+ *                            proper; keep re-polling every tick, never nudge
+ *   delivery_pending, delivery_state === "error" → surface distinctly to
+ *                            Inbox, never re-poll as "still pending" forever
+ *                            (§5.1's correction — do NOT branch on the
+ *                            verdict string alone)
+ *   done                   → label done; the pty is left running (§4 —
+ *                            marking done never kills the process)
+ *   no_oracle               → one self-check nudge per episode, then
+ *                            Inbox-only once that nudge is spent (§5.4's
+ *                            self-report can still resolve it — see below)
+ *
+ * `snapshot()` exposes the resulting notices for the Inbox aggregator
+ * (`external/inbox/_codex.ts`) — an ephemeral, in-memory side-channel, not
+ * persisted to `sdk-sessions.json`; a server restart just re-derives it.
+ *
+ * Each `checkTask()` pass also attempts §4's `threadId` discovery
+ * (`core/codex-thread-discovery.ts`) for any Codex task that doesn't have
+ * one yet — a fresh launch never learns its own thread id from the launch
+ * command (v1 has no `--session-id`-equivalent flag), so without this the
+ * resume branch in `runtime-chokepoint.ts` could never fire. `tick()`'s
+ * reentrancy guard (below) also protects this from a cross-tick race.
+ *
+ * §5.3 Guided-mode approval/structured-error TEXT detection does NOT live
+ * here — it runs as an Inbox post-pass (`external/inbox/_codex.ts`'s
+ * `appendCodexTerminalSignals`, over `core/codex-terminal-signal-detect.ts`).
+ *
+ * §5.4's structured self-report (`codex-status-report.ts`) is consulted
+ * only in the `no_oracle` branch of `classify()` below — see that branch's
+ * own comment for why.
+ */
+import { parseShipwrightStatusReport } from "./codex-status-report.js";
+import { DEFAULT_STALL_TIMEOUT_MS, DEFAULT_LAUNCH_CONFIRM_TIMEOUT_MS, } from "./codex-task-watcher-types.js";
+// Types/interfaces/constants live in `codex-task-watcher-types.ts` (split to
+// stay under the 300-line guideline); re-exported here so every existing
+// import site (`from "./codex-task-watcher.js"`) is unaffected.
+export { DEFAULT_STALL_TIMEOUT_MS, DEFAULT_LAUNCH_CONFIRM_TIMEOUT_MS, } from "./codex-task-watcher-types.js";
+const WAKER_PROMPT = "\n[Shipwright] Still there? If you're finished, wrap up and close with your " +
+    "SHIPWRIGHT-STATUS block. If not, please continue.\n";
+const SELF_CHECK_PROMPT = "\n[Shipwright] This phase has no automated completion check — please confirm " +
+    "your status directly: are you done, or still working? Close with your " +
+    "SHIPWRIGHT-STATUS block either way.\n";
+export class CodexTaskWatcher {
+    deps;
+    episodes = new Map();
+    notices = new Map();
+    nowFn;
+    stallTimeoutMs;
+    launchConfirmTimeoutMs;
+    /** Reentrancy guard (doubt-review finding) — `index.ts`'s `setInterval`
+     *  never awaits the prior tick, and one tick can outlive 60s with a
+     *  handful of stalled tasks (N sequential up-to-30s oracle calls). Two
+     *  OVERLAPPING ticks would each build their own `claimedThreadIds` from
+     *  `store.list()` and miss the other's in-flight §4 discovery, risking
+     *  two tasks in the same cwd permanently claiming the same threadId (no
+     *  re-validation once set). Skipping an overlapping tick is always safe
+     *  — the next one 60s later just re-evaluates the same tasks. */
+    ticking = false;
+    constructor(deps) {
+        this.deps = deps;
+        this.nowFn = deps.now ?? Date.now;
+        this.stallTimeoutMs = deps.stallTimeoutMs ?? DEFAULT_STALL_TIMEOUT_MS;
+        this.launchConfirmTimeoutMs = deps.launchConfirmTimeoutMs ?? DEFAULT_LAUNCH_CONFIRM_TIMEOUT_MS;
+    }
+    async resolveStallTimeoutMs() {
+        return typeof this.stallTimeoutMs === "function" ? await this.stallTimeoutMs() : this.stallTimeoutMs;
+    }
+    async resolveLaunchConfirmTimeoutMs() {
+        return typeof this.launchConfirmTimeoutMs === "function"
+            ? await this.launchConfirmTimeoutMs()
+            : this.launchConfirmTimeoutMs;
+    }
+    /** Ephemeral, in-memory Inbox feed — see the module header. */
+    snapshot() {
+        return [...this.notices.values()];
+    }
+    async tick() {
+        if (this.ticking)
+            return; // reentrancy guard — see the field doc above
+        this.ticking = true;
+        try {
+            const allTasks = this.deps.store.list();
+            // §4 discovery de-dup — a rollout file already claimed by one task (in
+            // the store, or by an earlier task this same tick) is never handed to
+            // a second one, guarding the rare case of two Codex tasks launched in
+            // the same cwd within the same discovery window. The `ticking` guard
+            // above is what makes "this same tick" the only case that can ever
+            // happen — see its doc for why a cross-tick race would otherwise slip
+            // past this Set entirely.
+            const claimedThreadIds = new Set(allTasks.map((t) => t.threadId).filter((id) => Boolean(id)));
+            const tasks = allTasks.filter((t) => t.runtime === "codex" &&
+                (t.state === "active" || t.state === "awaiting_external_start"));
+            // Resolved ONCE per tick, not per task — the production getter
+            // re-reads settings.json on every call, so per-task was an N+1 read
+            // (code-review finding). A live edit still lands next tick either way.
+            const stallTimeoutMs = await this.resolveStallTimeoutMs();
+            const launchConfirmTimeoutMs = await this.resolveLaunchConfirmTimeoutMs();
+            for (const task of tasks) {
+                await this.checkTask(task, claimedThreadIds, stallTimeoutMs, launchConfirmTimeoutMs);
+            }
+        }
+        finally {
+            this.ticking = false;
+        }
+    }
+    async checkTask(task, claimedThreadIds, stallTimeoutMs, launchConfirmTimeoutMs) {
+        const lastDataAt = this.deps.ptyManager.getLastDataAt(task.taskId);
+        if (lastDataAt === null) {
+            // pty gone (PR #466 preflight finding) — any notice describes a
+            // state that no longer exists; don't leave it in the Inbox forever.
+            this.episodes.delete(task.taskId);
+            this.notices.delete(task.taskId);
+            return;
+        }
+        if (!task.threadId && this.deps.discoverThreadId && task.launchedAt) {
+            const threadId = await this.deps.discoverThreadId({
+                cwd: task.cwd,
+                sinceIso: task.launchedAt,
+                excludeThreadIds: claimedThreadIds,
+            });
+            if (threadId) {
+                claimedThreadIds.add(threadId);
+                this.deps.store.patch(task.taskId, { threadId });
+                await this.deps.store.persist();
+                task = { ...task, threadId };
+            }
+        }
+        const now = this.nowFn();
+        const silenceMs = now - lastDataAt;
+        // §5.2 — launch-confirmation timeout: distinct, shorter window, only
+        // while still awaiting the handshake and nothing has ever streamed.
+        // Disposition (external-code-review, OpenAI MEDIUM, accepted not fixed):
+        // `lastDataAt` is PtyManager's generic "any bytes" idle timer (ADR-068-A1)
+        // — a shell-prompt echo counts the same as a real Codex frame. Accepted:
+        // AC8's CLI check closes the common case; `codex-terminal-signal-detect.ts`
+        // already accepts the same fragile-TUI-matching gap elsewhere.
+        if (task.state === "awaiting_external_start") {
+            if (silenceMs >= launchConfirmTimeoutMs) {
+                this.setNotice(task.taskId, "launch_confirmation_failed", "Codex never produced output after launch — the terminal may not have started correctly.");
+            }
+            return;
+        }
+        // Doubt-review finding: reaching here means state left
+        // awaiting_external_start, so a stale launch_confirmation_failed
+        // banner must not keep sitting in the Inbox for a healthy run.
+        if (this.notices.get(task.taskId)?.kind === "launch_confirmation_failed") {
+            this.notices.delete(task.taskId);
+        }
+        const prev = this.episodes.get(task.taskId);
+        if (!prev || prev.lastSeenDataAt !== lastDataAt) {
+            this.episodes.set(task.taskId, { lastSeenDataAt: lastDataAt, nudged: false });
+            // A fresh episode's nudge notice is stale — mirrors the two clears above.
+            if (this.notices.get(task.taskId)?.kind === "nudge_sent") {
+                this.notices.delete(task.taskId);
+            }
+        }
+        if (silenceMs < stallTimeoutMs)
+            return;
+        const project = this.deps.getProjectById(task.projectId);
+        if (!project)
+            return;
+        const outcome = await this.deps.runOracle({
+            projectRoot: project.path,
+            phase: task.phase ?? "",
+            session: task.sessionUuid,
+            since: task.launchedAt,
+        });
+        if (outcome.kind !== "ok")
+            return; // engine-unavailable/failed — try again next tick
+        await this.classify(task, outcome.result.verdict, outcome.result.evidence);
+    }
+    async classify(task, verdict, evidence) {
+        const episode = this.episodes.get(task.taskId);
+        // External-code-review (GLM MEDIUM): a delivery_error notice, once
+        // set, was never cleared unless the task reached "done" — mirrors the
+        // launch_confirmation_failed clearing fix in checkTask() above.
+        const isDeliveryError = verdict === "delivery_pending" && evidence.delivery_state === "error";
+        if (!isDeliveryError && this.notices.get(task.taskId)?.kind === "delivery_error") {
+            this.notices.delete(task.taskId);
+        }
+        if (verdict === "done") {
+            await this.markDone(task.taskId);
+            return;
+        }
+        if (verdict === "delivery_pending") {
+            if (evidence.delivery_state === "error") {
+                this.setNotice(task.taskId, "delivery_error", "Codex's PR delivery failed (CI failed or the PR was closed) — needs your attention.");
+            }
+            // absent / "indeterminate" — case 13 proper: keep re-polling, never nudge.
+            //
+            // Disposition (external-code-review, GLM MEDIUM, accepted not
+            // fixed): re-polls the oracle every 60s tick while stalled+pending
+            // — §1.6/§5.1's "low-frequency" language could read as wanting a
+            // slower interval. Accepted: spec's "Open items" #4 names this
+            // interval a build-time call, and 60s matches the watcher's one
+            // existing tick rather than a second timer for an unspecified value.
+            return;
+        }
+        if (!episode || episode.nudged) {
+            if (verdict === "no_oracle") {
+                // §5.4 (external-code-review, OpenAI MEDIUM): the self-report's
+                // one behavior-changing use — no_oracle has no other completion
+                // signal, so a well-formed done:true report still on-screen after
+                // the spent nudge counts as real completion. Every OTHER verdict
+                // still defers to the oracle on disagreement, per §5.4.
+                const selfReport = parseShipwrightStatusReport(this.deps.peekTerminalText?.(task.taskId) ?? "");
+                if (selfReport?.done) {
+                    await this.markDone(task.taskId);
+                    return;
+                }
+                this.setNotice(task.taskId, "no_oracle_unresolved", "This phase has no automated completion check and the self-check nudge didn't resolve it.");
+            }
+            return;
+        }
+        // not_done or no_oracle — one nudge per episode. A watched task
+        // (attachCount !== 0) gets neither, by design (doubt-review, low):
+        // someone already has the terminal open.
+        if (this.deps.ptyManager.attachCount(task.taskId) !== 0)
+            return;
+        this.deps.ptyManager.write(task.taskId, verdict === "no_oracle" ? SELF_CHECK_PROMPT : WAKER_PROMPT);
+        episode.nudged = true;
+        this.setNotice(task.taskId, "nudge_sent", verdict === "no_oracle"
+            ? "Sent a self-check nudge — no automated completion check exists for this phase."
+            : "Sent a nudge — the completion oracle reports this run isn't done yet.");
+    }
+    setNotice(taskId, kind, detail) {
+        this.notices.set(taskId, { taskId, kind, detail, at: this.nowFn() });
+    }
+    // Shared by an oracle "done" verdict and a §5.4 self-report completion.
+    // boardColumn synced alongside state (doubt-review finding) — mirrors
+    // POST /tasks/:id/close's AC-6 fix; otherwise a task dragged to a
+    // non-Done column stays stranded/locked once auto-completed.
+    async markDone(taskId) {
+        this.episodes.delete(taskId);
+        this.notices.delete(taskId);
+        this.deps.store.patch(taskId, { state: "done", boardColumn: "done" });
+        await this.deps.store.persist();
+    }
+}
+//# sourceMappingURL=codex-task-watcher.js.map

package/server/dist/core/codex-task-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-task-watcher.js","sourceRoot":"","sources":["../../src/core/codex-task-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAIH,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EACL,wBAAwB,EACxB,iCAAiC,GAKlC,MAAM,+BAA+B,CAAC;AAEvC,6EAA6E;AAC7E,yEAAyE;AACzE,gEAAgE;AAChE,OAAO,EACL,wBAAwB,EACxB,iCAAiC,GAMlC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,YAAY,GAChB,8EAA8E;IAC9E,qDAAqD,CAAC;AACxD,MAAM,iBAAiB,GACrB,+EAA+E;IAC/E,wEAAwE;IACxE,uCAAuC,CAAC;AAE1C,MAAM,OAAO,gBAAgB;IAgBE;IAfZ,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IAChD,KAAK,CAAe;IACpB,cAAc,CAA4C;IAC1D,sBAAsB,CAA4C;IACnF;;;;;;;qEAOiE;IACzD,OAAO,GAAG,KAAK,CAAC;IAExB,YAA6B,IAA0B;QAA1B,SAAI,GAAJ,IAAI,CAAsB;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACtE,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,iCAAiC,CAAC;IACjG,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,OAAO,OAAO,IAAI,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,6BAA6B;QACzC,OAAO,OAAO,IAAI,CAAC,sBAAsB,KAAK,UAAU;YACtD,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,EAAE;YACrC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAClC,CAAC;IAED,+DAA+D;IAC/D,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,6CAA6C;QACvE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACxC,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,sEAAsE;YACtE,0BAA0B;YAC1B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAC1E,CAAC;YACF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,KAAK,OAAO;gBACrB,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,yBAAyB,CAAC,CAClE,CAAC;YACF,+DAA+D;YAC/D,oEAAoE;YACpE,uEAAuE;YACvE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC1D,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;YAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,sBAAsB,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,IAAkB,EAClB,gBAA6B,EAC7B,cAAsB,EACtB,sBAA8B;QAE9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,gEAAgE;YAChE,oEAAoE;YACpE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBAChD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,IAAI,CAAC,UAAU;gBACzB,gBAAgB,EAAE,gBAAgB;aACnC,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACb,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAChC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,GAAG,UAAU,CAAC;QAEnC,qEAAqE;QACrE,oEAAoE;QACpE,yEAAyE;QACzE,2EAA2E;QAC3E,yEAAyE;QACzE,4EAA4E;QAC5E,+DAA+D;QAC/D,IAAI,IAAI,CAAC,KAAK,KAAK,yBAAyB,EAAE,CAAC;YAC7C,IAAI,SAAS,IAAI,sBAAsB,EAAE,CAAC;gBACxC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,EACtD,yFAAyF,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO;QACT,CAAC;QACD,uDAAuD;QACvD,iEAAiE;QACjE,+DAA+D;QAC/D,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9E,0EAA0E;YAC1E,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,SAAS,GAAG,cAAc;YAAE,OAAO;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACxC,WAAW,EAAE,OAAO,CAAC,IAAI;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YACvB,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,KAAK,EAAE,IAAI,CAAC,UAAU;SACvB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,CAAC,kDAAkD;QACrF,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,IAAkB,EAClB,OAAsB,EACtB,QAAwB;QAExB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE/C,mEAAmE;QACnE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,eAAe,GAAG,OAAO,KAAK,kBAAkB,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC;QAC9F,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACjF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;gBACxC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAC1C,qFAAqF,CAAC,CAAC;YAC3F,CAAC;YACD,2EAA2E;YAC3E,EAAE;YACF,8DAA8D;YAC9D,mEAAmE;YACnE,iEAAiE;YACjE,+DAA+D;YAC/D,gEAAgE;YAChE,qEAAqE;YACrE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;gBAC5B,gEAAgE;gBAChE,gEAAgE;gBAChE,kEAAkE;gBAClE,iEAAiE;gBACjE,wDAAwD;gBACxD,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChG,IAAI,UAAU,EAAE,IAAI,EAAE,CAAC;oBACrB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACjC,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,EAChD,0FAA0F,CAAC,CAAC;YAChG,CAAC;YACD,OAAO;QACT,CAAC;QACD,gEAAgE;QAChE,mEAAmE;QACnE,yCAAyC;QACzC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO;QAChE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACpG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EACtC,OAAO,KAAK,WAAW;YACrB,CAAC,CAAC,gFAAgF;YAClF,CAAC,CAAC,uEAAuE,CAAC,CAAC;IACjF,CAAC;IAEO,SAAS,CAAC,MAAc,EAAE,IAA4B,EAAE,MAAc;QAC5E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,kEAAkE;IAClE,6DAA6D;IACrD,KAAK,CAAC,QAAQ,CAAC,MAAc;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;CACF"}

package/server/dist/core/codex-terminal-signal-detect.d.ts

@@ -0,0 +1,7 @@
+/** A pending Codex approval request (command exec or patch apply) in the
+ *  trailing text of a live embedded terminal, or `null`. */
+export declare function extractCodexApprovalPrompt(visibleText: string): string | null;
+/** A Codex-reported structured error/turn-abort in the trailing text of a
+ *  live embedded terminal, or `null`. */
+export declare function extractCodexErrorText(visibleText: string): string | null;
+//# sourceMappingURL=codex-terminal-signal-detect.d.ts.map

package/server/dist/core/codex-terminal-signal-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-terminal-signal-detect.d.ts","sourceRoot":"","sources":["../../src/core/codex-terminal-signal-detect.ts"],"names":[],"mappings":"AAuFA;4DAC4D;AAC5D,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS7E;AAED;yCACyC;AACzC,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAaxE"}

package/server/dist/core/codex-terminal-signal-detect.js

@@ -0,0 +1,113 @@
+/*
+ * codex-terminal-signal-detect.ts — Codex Light §5.3 "Guided-mode approvals
+ * and structured errors": pure detectors over the visible-viewport text of
+ * a Codex-runtime embedded terminal, mirroring `terminal-prompt-detect.ts`'s
+ * shape (bottom-anchored, bounded, best-effort) but keyed to Codex's own
+ * strings instead of Claude's.
+ *
+ * Evidence: `codex-task-watcher.ts`'s module header previously scoped this
+ * detector OUT as "no verified plain-pty-TUI text pattern to build a
+ * detector from yet" — the spec's own §3 confirmation test only exercised
+ * `request_user_input` over the APP-SERVER protocol (Stage 2, not v1). That
+ * gap is now closed for the plain-pty case: the exact strings below were
+ * extracted directly from the real, installed `codex-cli 0.147.0` Windows
+ * binary (`@openai/codex-win32-x64`'s `codex.exe`, via a printable-string
+ * scan), the same evidence tier `codex-thread-discovery.ts` used for the
+ * rollout-file naming convention. One honest gap remains, smaller than that
+ * one: these strings are confirmed to exist verbatim in the binary, not
+ * (yet) observed in an actual rendered pty capture of a live approval
+ * dialog — ratatui box-drawing/wrapping around them is unverified. The
+ * detectors are therefore deliberately conservative (a short, literal
+ * heading match within a bottom-anchored recency window, no footer-shape
+ * assumptions) so a wrapped border cannot produce a false NEGATIVE beyond
+ * "missed this tick, the next poll on unchanged text still forms a false
+ * positive risk that a real capture might have avoided" — and the anchor
+ * strings are distinctive enough (only Codex's own approval elicitation or
+ * error footer would ever emit them) that a false POSITIVE is effectively
+ * impossible.
+ *
+ * Independent of the silence-timer/oracle loop (§5.3's own wording) — wired
+ * as an Inbox post-pass (`external/inbox/_codex.ts`), not into
+ * `CodexTaskWatcher.tick()`, exactly like `terminal_prompt`'s own
+ * `appendTerminalPrompts` post-pass.
+ */
+/** Recency window — how many trailing lines of visible text count as "the
+ *  current bottom-most content" for either signal. A live dialog or error
+ *  footer is always the last thing Codex printed; older scrollback above
+ *  this window is deliberately never scanned (an old, since-scrolled-past
+ *  approval/error must not resurrect itself as "still pending"). */
+const RECENCY_WINDOW_LINES = 40;
+/** Codex's two known approval-elicitation headings (command exec, patch
+ *  apply) — verified verbatim in the real codex.exe binary. */
+const APPROVAL_HEADING = /Allow Codex to (run `|apply proposed code changes\?)/i;
+/** Codex's generic turn-ending error footer — shown for a turn abort,
+ *  Ctrl-C interrupt, high load, rate limit, etc.; the one constant across
+ *  all of them. Verified verbatim in the real codex.exe binary. */
+const ERROR_FOOTER = /Something went wrong\??\s*Hit\s*`?\/feedback`?\s*to report the issue/i;
+const MAX_BLOCK_LINES = 24;
+/** Mirrors terminal-prompt-detect.ts's MAX_QUESTION_TEXT_LEN cap — keeps a
+ *  pathological viewport from leaking unbounded text into the Inbox. */
+const MAX_SIGNAL_TEXT_LEN = 4000;
+function isBlank(line) {
+    return line.trim().length === 0;
+}
+function recencyLines(visibleText) {
+    const lines = visibleText.split("\n");
+    const startIndex = Math.max(0, lines.length - RECENCY_WINDOW_LINES);
+    return { lines: lines.slice(startIndex), startIndex };
+}
+/** Collect a bounded block around the matched heading line — from the
+ *  heading down to the next blank-line gap or the hard cap, so the block
+ *  captures the command/heading plus its immediately-following option
+ *  list without pulling in unrelated scrollback. */
+function collectBlock(lines, headingIndex) {
+    const block = [];
+    let blankRun = 0;
+    for (let i = headingIndex; i < lines.length && block.length < MAX_BLOCK_LINES; i++) {
+        const line = lines[i];
+        if (isBlank(line)) {
+            blankRun++;
+            if (blankRun >= 2)
+                break;
+        }
+        else {
+            blankRun = 0;
+        }
+        block.push(line);
+    }
+    while (block.length > 0 && isBlank(block[block.length - 1]))
+        block.pop();
+    const text = block.join("\n");
+    return text.length > MAX_SIGNAL_TEXT_LEN ? text.slice(0, MAX_SIGNAL_TEXT_LEN) : text;
+}
+/** A pending Codex approval request (command exec or patch apply) in the
+ *  trailing text of a live embedded terminal, or `null`. */
+export function extractCodexApprovalPrompt(visibleText) {
+    if (!visibleText)
+        return null;
+    const { lines } = recencyLines(visibleText);
+    for (let i = lines.length - 1; i >= 0; i--) {
+        if (APPROVAL_HEADING.test(lines[i])) {
+            return collectBlock(lines, i);
+        }
+    }
+    return null;
+}
+/** A Codex-reported structured error/turn-abort in the trailing text of a
+ *  live embedded terminal, or `null`. */
+export function extractCodexErrorText(visibleText) {
+    if (!visibleText)
+        return null;
+    const { lines } = recencyLines(visibleText);
+    for (let i = lines.length - 1; i >= 0; i--) {
+        if (ERROR_FOOTER.test(lines[i])) {
+            // The error line itself is usually self-contained ("<cause>.
+            // Something went wrong? Hit `/feedback` ...") — a few lines of
+            // leading context in case the cause wrapped onto the prior line.
+            const from = Math.max(0, i - 2);
+            return collectBlock(lines, from);
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=codex-terminal-signal-detect.js.map

package/server/dist/core/codex-terminal-signal-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-terminal-signal-detect.js","sourceRoot":"","sources":["../../src/core/codex-terminal-signal-detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH;;;;oEAIoE;AACpE,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;+DAC+D;AAC/D,MAAM,gBAAgB,GAAG,uDAAuD,CAAC;AAEjF;;mEAEmE;AACnE,MAAM,YAAY,GAAG,uEAAuE,CAAC;AAE7F,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B;wEACwE;AACxE,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,oBAAoB,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,CAAC;AACxD,CAAC;AAED;;;oDAGoD;AACpD,SAAS,YAAY,CAAC,KAAe,EAAE,YAAoB;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;QACnF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,QAAQ,EAAE,CAAC;YACX,IAAI,QAAQ,IAAI,CAAC;gBAAE,MAAM;QAC3B,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;yCACyC;AACzC,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,6DAA6D;YAC7D,+DAA+D;YAC/D,iEAAiE;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/server/dist/core/codex-thread-discovery.d.ts

@@ -0,0 +1,21 @@
+export interface CodexThreadDiscoveryDeps {
+    readdir: (dir: string) => Promise<string[]>;
+    /** Reads just the head of a file — rollout files can be large, but `session_meta` is always the very first line. */
+    readHead: (filePath: string, maxBytes: number) => Promise<string>;
+    homeDir: () => string;
+}
+export declare function codexSessionsRoot(deps: Pick<CodexThreadDiscoveryDeps, "homeDir">): string;
+export interface DiscoverCodexThreadIdArgs {
+    cwd: string;
+    /** ISO-8601 — only rollout files at/after this instant are considered. */
+    sinceIso: string;
+    /** Skip these thread ids — already claimed by another task this process knows about. */
+    excludeThreadIds?: ReadonlySet<string>;
+}
+/**
+ * Best-effort, filename-first discovery of the thread id a fresh Codex
+ * launch produced. Returns `null` (not an error) when nothing matches yet.
+ */
+export declare function discoverCodexThreadId(args: DiscoverCodexThreadIdArgs, deps: CodexThreadDiscoveryDeps): Promise<string | null>;
+export declare const defaultCodexThreadDiscoveryDeps: CodexThreadDiscoveryDeps;
+//# sourceMappingURL=codex-thread-discovery.d.ts.map

package/server/dist/core/codex-thread-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-thread-discovery.d.ts","sourceRoot":"","sources":["../../src/core/codex-thread-discovery.ts"],"names":[],"mappings":"AAkDA,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,oHAAoH;IACpH,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,EAAE,MAAM,MAAM,CAAC;CACvB;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,GAAG,MAAM,CAEzF;AA2BD,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACxC;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,EAC/B,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqDxB;AAED,eAAO,MAAM,+BAA+B,EAAE,wBAa7C,CAAC"}

package/server/dist/core/codex-thread-discovery.js

@@ -0,0 +1,169 @@
+/*
+ * core/codex-thread-discovery.ts — Codex Light §4's missing piece: how a
+ * fresh Codex launch's `threadId` actually gets captured. v1 launches Codex
+ * as a plain interactive TUI in a pty (§2.2) — there is no app-server call
+ * (deferred to Stage 2) and no `--session-id`-equivalent flag Codex accepts
+ * at the top level (`codex --help`, verified live against an installed
+ * Codex CLI: no such flag exists), so the id must be DISCOVERED after the
+ * fact, filename-first — the exact pattern CLAUDE.md rule 3 already uses
+ * for Claude's own JSONL discovery.
+ *
+ * Verified live (2026-09-16, codex-cli 0.147.0) against a real installed
+ * Codex CLI: every session — interactive or subagent — writes a rollout
+ * file to `~/.codex/sessions/<local-YYYY>/<local-MM>/<local-DD>/rollout-
+ * <local-ISO-with-dashes-for-colons>-<thread-id>.jsonl`, whose FIRST line
+ * is always `{"type":"session_meta","payload":{"id":"<thread-id>","cwd":
+ * "<abs-path>",...}}` — the thread id is in the filename AND the first
+ * line's payload, mirroring the filename-first + first-line-sanity-check
+ * shape Claude's own discovery already uses. `cwd` is the launch working
+ * directory verbatim (OS-native separators), letting us match a rollout
+ * file to the task that spawned it without Codex ever needing to accept a
+ * caller-supplied id.
+ *
+ * Consumed by `CodexTaskWatcher` (`codex-task-watcher.ts`): on every tick,
+ * a live Codex task with no `threadId` yet gets one discovery attempt;
+ * `null` is not an error (the rollout file may not have flushed to disk
+ * yet, or Codex may still be starting up) — the caller just retries next
+ * tick. Once found, `threadId` is patched onto the task record and the
+ * §4 resume branch (`runtime-chokepoint.ts`'s `resume = Boolean(task.
+ * threadId)`) starts working on the task's next launch.
+ *
+ * Known, accepted limitation (doubt-review, disposition: documented, not
+ * fixed): matching is purely (cwd, launch-time window) — there is no
+ * possession/identity proof tying a candidate rollout file to THIS
+ * webui-spawned pty specifically. An operator manually running `codex` in
+ * the same project directory, in another terminal, within the same
+ * discovery window would produce an indistinguishable rollout file; if it
+ * happens to be the earliest unclaimed match, it gets bound to the wrong
+ * task (and, once `threadId` is set, discovery never re-runs for that
+ * task, so the mistake is not self-correcting). Accepted because it needs
+ * an external actor deliberately racing the exact window, has no
+ * destructive blast radius (a wrong `threadId` just makes `codex resume`
+ * on the Resume button open the wrong-but-still-real thread, not corrupt
+ * anything), and there is no stronger signal Codex's CLI exposes to
+ * disambiguate against in v1.
+ */
+import fsPromises from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const ROLLOUT_RE = /^rollout-(\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2})-([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})\.jsonl$/;
+/**
+ * Disposition (doubt-review, low-severity, accepted not fixed): if a
+ * rollout file's first `session_meta` JSON line ever exceeds this many
+ * bytes, `JSON.parse` on the truncated head throws, the candidate is
+ * skipped, and — with no larger-buffer retry — that task's discovery
+ * fails identically on every later tick (permanent, not degrading: the
+ * `resume` branch never fires and every "Resume" click silently
+ * relaunches fresh). Accepted because the verified real `session_meta`
+ * line (module header) is compact, and 4KB is a generous margin over it;
+ * revisit with a retry-on-parse-failure if a future Codex CLI version
+ * ever grows this payload.
+ */
+const HEAD_BYTES = 4096;
+export function codexSessionsRoot(deps) {
+    return path.join(deps.homeDir(), ".codex", "sessions");
+}
+function normalizeCwd(p) {
+    return p.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+}
+/** The launch day plus a one-day hedge either side, against a local-midnight folder-boundary race. */
+function dayFolders(since) {
+    const days = [-1, 0, 1].map((offset) => {
+        const d = new Date(since.getTime());
+        d.setDate(d.getDate() + offset);
+        const y = String(d.getFullYear());
+        const m = String(d.getMonth() + 1).padStart(2, "0");
+        const day = String(d.getDate()).padStart(2, "0");
+        return path.join(y, m, day);
+    });
+    return [...new Set(days)];
+}
+function parseFilenameTimestamp(stamp) {
+    // "2026-09-16T07-32-17" -> "2026-09-16T07:32:17" (local — no zone suffix,
+    // matching how `new Date()` already parses a zone-less ISO string: local).
+    const iso = stamp.replace(/T(\d{2})-(\d{2})-(\d{2})$/, "T$1:$2:$3");
+    const t = new Date(iso).getTime();
+    return Number.isNaN(t) ? 0 : t;
+}
+/**
+ * Best-effort, filename-first discovery of the thread id a fresh Codex
+ * launch produced. Returns `null` (not an error) when nothing matches yet.
+ */
+export async function discoverCodexThreadId(args, deps) {
+    const since = new Date(args.sinceIso);
+    if (Number.isNaN(since.getTime()))
+        return null;
+    const sinceMs = since.getTime() - 5_000; // small clock-skew grace
+    const wantCwd = normalizeCwd(args.cwd);
+    const root = codexSessionsRoot(deps);
+    const candidates = [];
+    for (const folder of dayFolders(since)) {
+        const dir = path.join(root, folder);
+        let names;
+        try {
+            names = await deps.readdir(dir);
+        }
+        catch {
+            continue;
+        }
+        for (const name of names) {
+            const m = ROLLOUT_RE.exec(name);
+            if (!m)
+                continue;
+            const threadId = m[2];
+            if (args.excludeThreadIds?.has(threadId))
+                continue;
+            const ts = parseFilenameTimestamp(m[1]);
+            if (ts < sinceMs)
+                continue;
+            candidates.push({ ts, threadId, file: path.join(dir, name) });
+        }
+    }
+    candidates.sort((a, b) => a.ts - b.ts);
+    for (const candidate of candidates) {
+        let head;
+        try {
+            head = await deps.readHead(candidate.file, HEAD_BYTES);
+        }
+        catch {
+            continue;
+        }
+        const firstLine = head.split("\n", 1)[0];
+        let parsed;
+        try {
+            parsed = JSON.parse(firstLine);
+        }
+        catch {
+            continue;
+        }
+        if (!parsed || typeof parsed !== "object")
+            continue;
+        if (parsed.type !== "session_meta")
+            continue;
+        const payload = parsed.payload;
+        if (!payload || typeof payload !== "object")
+            continue;
+        const id = payload.id;
+        const cwd = payload.cwd;
+        if (typeof id === "string" && typeof cwd === "string" && normalizeCwd(cwd) === wantCwd) {
+            return id;
+        }
+    }
+    return null;
+}
+export const defaultCodexThreadDiscoveryDeps = {
+    readdir: (dir) => fsPromises.readdir(dir),
+    readHead: async (filePath, maxBytes) => {
+        const fh = await fsPromises.open(filePath, "r");
+        try {
+            const buf = Buffer.alloc(maxBytes);
+            const { bytesRead } = await fh.read(buf, 0, maxBytes, 0);
+            return buf.toString("utf-8", 0, bytesRead);
+        }
+        finally {
+            await fh.close();
+        }
+    },
+    homeDir: () => os.homedir(),
+};
+//# sourceMappingURL=codex-thread-discovery.js.map

package/server/dist/core/codex-thread-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-thread-discovery.js","sourceRoot":"","sources":["../../src/core/codex-thread-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,UAAU,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,MAAM,UAAU,GACd,sIAAsI,CAAC;AACzI;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,MAAM,UAAU,iBAAiB,CAAC,IAA+C;IAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,sGAAsG;AACtG,SAAS,UAAU,CAAC,KAAW;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,2BAA2B,EAAE,WAAW,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA+B,EAC/B,IAA8B;IAE9B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,yBAAyB;IAClE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,UAAU,GAAqD,EAAE,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACnD,MAAM,EAAE,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,EAAE,GAAG,OAAO;gBAAE,SAAS;YAC3B,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAEvC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACpD,IAAK,MAAkC,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC1E,MAAM,OAAO,GAAI,MAAkC,CAAC,OAAO,CAAC;QAC5D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,SAAS;QACtD,MAAM,EAAE,GAAI,OAAmC,CAAC,EAAE,CAAC;QACnD,MAAM,GAAG,GAAI,OAAmC,CAAC,GAAG,CAAC;QACrD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;YACvF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAA6B;IACvE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;IACzC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE;CAC5B,CAAC"}

package/server/dist/core/codextender-auth-file-sweep.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Default reclamation age (10 min) — deliberately much shorter than
+ * `snapshot-tmp-sweep.ts`'s 1h default: this file holds a LIVE credential,
+ * not just terminal cell-state, and a normal launch's own cleanup deletes it
+ * within seconds of the `claude` invocation exiting.
+ */
+export declare const DEFAULT_CODEXTENDER_AUTH_TMP_MAX_AGE_MS: number;
+export interface CodextenderAuthFileSweepDeps {
+    readdir: (dir: string) => Promise<string[]>;
+    stat: (p: string) => Promise<{
+        mtimeMs: number;
+    }>;
+    unlink: (p: string) => Promise<void>;
+}
+export interface CodextenderAuthFileSweepOpts {
+    dir: string;
+    /** Reclaim tmp files whose mtime is older than this. Default 10 min. */
+    maxAgeMs?: number;
+    deps?: Partial<CodextenderAuthFileSweepDeps>;
+    /** Injected for tests. Defaults to Date.now. */
+    now?: () => number;
+    logWarn?: (msg: string) => void;
+    logInfo?: (msg: string) => void;
+}
+export interface CodextenderAuthFileSweepResult {
+    /** stale credential files unlinked. */
+    deleted: number;
+    /** stat/unlink failures (kept going). */
+    errors: number;
+    /** files younger than the cutoff, left in place (still in use). */
+    preserved: number;
+}
+/**
+ * Age-gated sweep of orphaned `codextender-auth-*.tmp` credential files.
+ * Best-effort: dir-read failure and per-file failures are non-fatal (they
+ * log a warn and never throw) — the same posture `sweepOrphanSnapshotTmp`
+ * takes, for the same reason (a sweep failure must never crash boot or the
+ * periodic timer).
+ */
+export declare function sweepOrphanCodextenderAuthFiles(opts: CodextenderAuthFileSweepOpts): Promise<CodextenderAuthFileSweepResult>;
+//# sourceMappingURL=codextender-auth-file-sweep.d.ts.map