@svenroth-ai/shipwright 0.26.0 → 0.28.0

package/server/dist/core/launcher-codex.js

@@ -0,0 +1,187 @@
+/*
+ * Codex CLI launch-command builder (Spec/codex-light-webui.md §2.1-§2.3).
+ *
+ * Sibling of `buildCopyCommands` (launcher.ts) — same three-shell
+ * `CopyCommandForms` output, same "webui never spawns a process, only
+ * builds a string" contract (CLAUDE.md rule 1 / rule 19). The launch
+ * chokepoint in `external/launch/routes.ts` calls this instead of
+ * `buildCopyCommands` whenever `runtimeForTask(task) === "codex"`.
+ *
+ * v1 launches Codex as a plain, live, interactive TUI in a pty (the same
+ * mechanism Claude uses today) — never the app-server protocol (§0/§2.2).
+ *
+ * Resume carries the same autonomy/env-inherit flags as a fresh launch
+ * (external-code-review finding, 2026-09-16): `codex resume --help`
+ * accepts `-c`/`--enable`/`--yolo` identically to the top-level command
+ * (verified live against the installed CLI) — §2.2's terse "Resume: `codex
+ * resume <threadId>`" example is abbreviated prose, not a CLI constraint,
+ * and §2.4's mitigation 1 plus AC4 both require it on every launch.
+ */
+import { qPs, qPsMultiline, qCmd, qPosix, toPosixPath } from "./shell-quote.js";
+import { buildCdPrefix } from "./launcher.js";
+export function buildCodexCommands(args) {
+    return {
+        powershell: renderCodex(args, qPs, "powershell"),
+        cmd: renderCodex(args, qCmd, "cmd"),
+        posix: renderCodex(args, qPosix, "posix"),
+    };
+}
+function renderCodex(args, q, shellForm) {
+    const cwd = shellForm === "posix" ? toPosixPath(args.cwd) : args.cwd;
+    const cdPrefix = buildCdPrefix(shellForm, args.cwd);
+    const envPrefix = buildReviewEnvPrefix(args, q, shellForm);
+    const autonomy = args.autonomy ?? "guided";
+    if (args.resume) {
+        if (!args.threadId) {
+            throw new Error("resume=true requires threadId");
+        }
+        // External-code-review finding (GLM MEDIUM, 2026-09-16): `codex resume
+        // --help` accepts the same `-c`/`--enable`/`--yolo` flags as a fresh
+        // launch (verified live against the installed CLI) — §2.2's literal
+        // "Resume: `codex resume <threadId>`" example is abbreviated prose, not
+        // a CLI constraint. Without these, a resumed Guided/Autonomous task
+        // silently lost both session-identity tracking (§2.4 mitigation 1) and
+        // AC4's "autonomy governs Codex on every launch" for the resume path.
+        const parts = ["codex", "resume"];
+        if (autonomy === "guided") {
+            parts.push("--enable", "default_mode_request_user_input");
+        }
+        parts.push("-c", q("shell_environment_policy.inherit=all"));
+        parts.push(...buildTuiAnimationFlags(q));
+        if (autonomy === "autonomous") {
+            parts.push("--yolo");
+        }
+        else {
+            parts.push("-c", q("approval_policy=on-request"));
+            parts.push("-c", q("approvals.reviewer=user"));
+        }
+        if (args.implementationModel) {
+            parts.push("-c", q(`model="${args.implementationModel}"`));
+        }
+        parts.push(q(args.threadId));
+        const cmd = parts.join(" ");
+        return cdPrefix + envPrefix + (shellForm === "powershell" ? "& " + cmd : cmd);
+    }
+    const parts = ["codex"];
+    // §3 mapping — "questions" row: only Guided gets the non-terminal
+    // clarifying-question mechanism (confirmed live, §3's confirmation test).
+    if (autonomy === "guided") {
+        parts.push("--enable", "default_mode_request_user_input");
+    }
+    // §2.4 — required so `SHIPWRIGHT_SESSION_ID` survives Codex's own shell
+    // tool's environment filter (default: a `core` subset, not `all`).
+    parts.push("-c", q("shell_environment_policy.inherit=all"));
+    parts.push(...buildTuiAnimationFlags(q));
+    // §3 mapping — "approvals" row.
+    if (autonomy === "autonomous") {
+        parts.push("--yolo");
+    }
+    else {
+        parts.push("-c", q("approval_policy=on-request"));
+        parts.push("-c", q("approvals.reviewer=user"));
+    }
+    if (args.implementationModel) {
+        parts.push("-c", q(`model="${args.implementationModel}"`));
+    }
+    // Codex prompts are always multi-paragraph (model pins / SKILL.md pointer
+    // / description / SHIPWRIGHT-STATUS footer, blank-line-separated) — the
+    // PowerShell form needs the PSReadLine-multi-line-corruption-safe quoter
+    // (see qPsMultiline's doc comment); cmd/posix are unaffected, so they keep
+    // the plain per-shell quoter.
+    const promptText = buildCodexPrompt(args);
+    parts.push(shellForm === "powershell" ? qPsMultiline(promptText) : q(promptText));
+    const cmd = parts.join(" ");
+    void cwd; // cwd is already folded into cdPrefix; kept for symmetry with launcher.ts's per-shell renderers.
+    return cdPrefix + envPrefix + (shellForm === "powershell" ? "& " + cmd : cmd);
+}
+/**
+ * iterate-2026-09-19-codex-terminal-flicker (CLAUDE.md DO-NOT #32) —
+ * Codex's own TUI (not this webui) redraws its fixed-position input box
+ * every time transcript content changes above it, and does so OUTSIDE
+ * DECSET 2026 (Synchronized Output) — confirmed against a raw pty capture,
+ * independent of the webui entirely. During normal "thinking" turns this
+ * repeats roughly every 100ms via a terminal-title spinner plus periodic
+ * status-widget redraws (upstream: openai/codex#39268, #37706), so any
+ * terminal relaying Codex's raw output shows visible flicker.
+ * `-c tui.animations=false` (upstream config key; see openai/codex#45564,
+ * #46111) suppresses the decorative animation/spinner path entirely,
+ * eliminating the RECURRING flicker during a turn (verified empirically —
+ * zero title-spinner or status-redraw chunks with the flag set, vs. one
+ * every ~108ms without it). It does NOT touch the one-time startup box
+ * reflow (~9 redraws over ~0.2–2s as Codex resolves model/MCP state on
+ * launch) — that part is a separate, currently-unfixed upstream mechanism.
+ * Known trade-off (openai/codex#45564, upstream bug): the elapsed
+ * "Working Xs" counter freezes with animations off until the terminal is
+ * hidden/shown again — a frozen decorative counter is preferable to
+ * continuous flicker. Reversible via `SHIPWRIGHT_CODEX_TUI_ANIMATIONS=0`
+ * (mirrors `SHIPWRIGHT_TERMINAL_NO_FLICKER`'s opt-out contract in
+ * `terminal/spawn-env.ts`) for anyone who wants the elapsed timer back
+ * more than they want the flicker gone.
+ */
+function buildTuiAnimationFlags(q) {
+    if (process.env.SHIPWRIGHT_CODEX_TUI_ANIMATIONS === "0")
+        return [];
+    return ["-c", q("tui.animations=false")];
+}
+/**
+ * iterate-2026-09-19-codex-reviewer-fields — see `planReviewModel`/
+ * `reviewModel`'s doc comment on `CodexLaunchArgs` for why these are an
+ * env-var prefix rather than a `-c` flag. Empty when neither override is
+ * set, so an ordinary launch's command string is byte-identical to before
+ * this feature existed.
+ */
+function buildReviewEnvPrefix(args, q, shellForm) {
+    const entries = [];
+    if (args.planReviewModel) {
+        entries.push(["SHIPWRIGHT_CODEX_PLAN_REVIEW_MODEL", args.planReviewModel]);
+    }
+    if (args.reviewModel) {
+        entries.push(["SHIPWRIGHT_CODEX_REVIEW_MODEL", args.reviewModel]);
+    }
+    if (entries.length === 0)
+        return "";
+    if (shellForm === "powershell") {
+        return entries.map(([name, value]) => `$env:${name} = ${q(value)}; `).join("");
+    }
+    if (shellForm === "cmd") {
+        return entries.map(([name, value]) => `set ${q(`${name}=${value}`)} && `).join("");
+    }
+    return entries.map(([name, value]) => `${name}=${q(value)} `).join("");
+}
+/**
+ * §2.3 — Codex's per-phase standing instructions live in prompt text this
+ * function composes, not a template file. For a project with no
+ * `AGENTS.md` (or a phase it doesn't cover), inline the model pins and
+ * review-cascade authorization directly rather than generating a file into
+ * someone else's repo. §5.4 — every prompt ends with an instruction to
+ * close with a structured `SHIPWRIGHT-STATUS` self-report, cross-checked
+ * against the oracle verdict by `CodexTaskWatcher`.
+ */
+export function buildCodexPrompt(args) {
+    const { phase, hasAgentsMd } = args;
+    const agentsMdCoversPhase = Boolean(hasAgentsMd) && phase === "iterate";
+    const lines = [];
+    if (!hasAgentsMd) {
+        lines.push("Use gpt-5.6-terra with high reasoning for ordinary implementation and " +
+            "finalization, and gpt-5.6-sol with high reasoning for required review " +
+            "subagents.", "The review cascade (spec-reviewer, code-reviewer, doubt-reviewer) is " +
+            "requested by default for this session — spawn it without asking.");
+    }
+    if (phase && !agentsMdCoversPhase) {
+        // iterate-2026-09-19-codex-launch-phase-empty: the monorepo/plugin-cache
+        // layout is `plugins/shipwright-<phase>/skills/<phase>/SKILL.md` — the
+        // bare `shipwright-<phase>/...` form is not a resolvable path from a
+        // project root or a Codex plugin cache.
+        lines.push(`Read plugins/shipwright-${phase}/skills/${phase}/SKILL.md and execute it.`);
+    }
+    const description = args.description?.trim();
+    if (description) {
+        lines.push(description);
+    }
+    lines.push("When you finish this session's work, close your final message with a " +
+        'fenced block: ```SHIPWRIGHT-STATUS\n{"phase":"' +
+        (phase ?? "") +
+        '","done":true}\n``` (done:false if you could not complete it).');
+    return lines.join("\n\n");
+}
+//# sourceMappingURL=launcher-codex.js.map

package/server/dist/core/launcher-codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codex.js","sourceRoot":"","sources":["../../src/core/launcher-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,aAAa,EAAyB,MAAM,eAAe,CAAC;AA+CrE,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,OAAO;QACL,UAAU,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC;QAChD,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;QACnC,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,IAAqB,EACrB,CAAwB,EACxB,SAAyC;IAEzC,MAAM,GAAG,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;IACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAE3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,oEAAoE;QACpE,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,KAAK,GAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,QAAQ,GAAG,SAAS,GAAG,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,OAAO,CAAC,CAAC;IAClC,kEAAkE;IAClE,0EAA0E;IAC1E,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;IAC5D,CAAC;IACD,wEAAwE;IACxE,mEAAmE;IACnE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,gCAAgC;IAChC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,8BAA8B;IAC9B,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAElF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,KAAK,GAAG,CAAC,CAAC,iGAAiG;IAC3G,OAAO,QAAQ,GAAG,SAAS,GAAG,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,sBAAsB,CAAC,CAAwB;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACnE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,IAAqB,EACrB,CAAwB,EACxB,SAAyC;IAEzC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,oCAAoC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,+BAA+B,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC;IACxE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CACR,wEAAwE;YACtE,wEAAwE;YACxE,YAAY,EACd,uEAAuE;YACrE,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAClC,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,wCAAwC;QACxC,KAAK,CAAC,IAAI,CAAC,2BAA2B,KAAK,WAAW,KAAK,2BAA2B,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,IAAI,CACR,uEAAuE;QACrE,gDAAgD;QAChD,CAAC,KAAK,IAAI,EAAE,CAAC;QACb,gEAAgE,CACnE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/server/dist/core/launcher-codextender-env.d.ts

@@ -0,0 +1,44 @@
+import { type CodextenderLaunchArgs } from "./launcher-codextender.js";
+export declare function writeCodextenderAuthTokenFile(token: string): string;
+/**
+ * Doubt-review/plan-review HIGH — PowerShell (`$env:X = ...;`) and cmd
+ * (`set X=Y &&`) mutate the CURRENT, persistent shell's environment (unlike
+ * the posix prefix form, which scopes to the one invocation it precedes).
+ * The embedded terminal is a long-lived pty shell, not spawned fresh per
+ * command, so without this suffix the proxy's `ANTHROPIC_BASE_URL` /
+ * `ANTHROPIC_AUTH_TOKEN` / `ANTHROPIC_MODEL` would silently outlive this one
+ * `claude` invocation and get inherited by whatever the user (or a later
+ * Relaunch-as-Claude/Codex-Light) types next in the same tab. Runs
+ * unconditionally after `rest` (cmd's `&`, PowerShell's/posix's `;` — none
+ * gated on `rest`'s own exit code, so cleanup still happens if `claude`
+ * exits non-zero). The temp token file is deleted here too, on all three
+ * shells — posix's env-scoping was already correct, but it still wrote the
+ * file to disk and must still remove it.
+ */
+export declare function buildCodextenderEnvCleanupSuffix(shellForm: "powershell" | "cmd" | "posix", q: (v: string) => string, tokenFilePath: string): string;
+/**
+ * Same three per-shell quoting forms `launcher-codex.ts`'s own
+ * `buildReviewEnvPrefix` uses (PowerShell `$env:X = ...;`, cmd
+ * `set X=Y &&`, posix `X=Y `) — reused as a pattern, not imported (that
+ * function is private to `launcher-codex.ts` and this module has no
+ * dependency on Codex-CLI concerns). `ANTHROPIC_AUTH_TOKEN` is the one
+ * exception to the uniform `name=value` shape — see
+ * `writeCodextenderAuthTokenFile`'s doc comment for why it's read back from
+ * `tokenFilePath` instead of written as a literal.
+ *
+ * `CLAUDE_CODE_MAX_CONTEXT_TOKENS` (operator finding, 2026-09-26) is NOT
+ * folded into the uniform `plainEntries` loop below — PR-review preflight
+ * BLOCK (round 13): when `maxContextTokens` is undefined we must actively
+ * UNSET the var, not merely omit assigning it, so an inherited value (from
+ * an earlier launch in this same long-lived pty, or from whatever spawned
+ * the webui server itself) can't silently reach `claude` and defeat the
+ * documented "unset = Claude Code's safe 200K default" fallback. Each shell
+ * has its own real unset idiom — PowerShell's is `$env:X = $null` (an empty
+ * string only blanks it, doesn't remove it), cmd's is `set "X="` — except
+ * posix, whose `NAME=value` prefix form only scopes an ASSIGNMENT to the one
+ * invocation it precedes and so can't drop an inherited export; see the
+ * posix branch below for why `unset` (as its own leading statement), not
+ * `env -u`, is what that branch uses instead.
+ */
+export declare function buildCodextenderEnvPrefix(args: CodextenderLaunchArgs, q: (v: string) => string, shellForm: "powershell" | "cmd" | "posix", tokenFilePath: string): string;
+//# sourceMappingURL=launcher-codextender-env.d.ts.map

package/server/dist/core/launcher-codextender-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender-env.d.ts","sourceRoot":"","sources":["../../src/core/launcher-codextender-env.ts"],"names":[],"mappings":"AAeA,OAAO,EAAmC,KAAK,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AA+BxG,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAenE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gCAAgC,CAC9C,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,EACzC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,EACxB,aAAa,EAAE,MAAM,GACpB,MAAM,CA4BR;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,qBAAqB,EAC3B,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,EACxB,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,EACzC,aAAa,EAAE,MAAM,GACpB,MAAM,CAiGR"}

package/server/dist/core/launcher-codextender-env.js

@@ -0,0 +1,212 @@
+/*
+ * launcher-codextender-env.ts — the per-shell env-var prefix/cleanup string
+ * builders for a Codextender launch, split out of launcher-codextender.ts
+ * (2026-09-26, bloat anti-ratchet) after the CLAUDE_CODE_MAX_CONTEXT_TOKENS
+ * leak fix (PR-review preflight BLOCK, round 13) added enough per-shell
+ * unset-idiom logic to cross the 300-line guideline. Pure string builders,
+ * no process spawning — same "webui never spawns a process" rule as the
+ * sibling file.
+ */
+import { randomUUID } from "node:crypto";
+import { writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { DEFAULT_CODEXTENDER_MODEL_ALIAS } from "./launcher-codextender.js";
+/**
+ * PR-review preflight BLOCK (round 7, iterate-2026-09-23) — embedding
+ * `authToken`'s literal value in the generated command put it in terminal
+ * input/scrollback and any session recording, even after round 7's own
+ * env-cleanup suffix removed it from the shell's PERSISTENT environment
+ * (that fix addressed leak-to-a-LATER-command, not visibility of THIS one).
+ * Round 8: the token is written once to a private, per-launch temp file
+ * (`0o600`, a fresh random name) and every shell form reads it back via its
+ * own no-echo idiom (PowerShell `Get-Content`, cmd `set /p ... <file`, posix
+ * `$(cat file)`) — confirmed empirically (real `cmd.exe`/`powershell.exe`,
+ * not just read) that each correctly sets the var for a CHILD process
+ * without ever printing the file's contents. `buildCodextenderEnvCleanupSuffix`
+ * deletes it unconditionally after the `claude` invocation on all three
+ * shells. Residual risk, accepted: a pty killed before that cleanup step
+ * runs leaves an orphaned token file in the OS temp dir — a materially
+ * smaller and shorter-lived exposure than the permanent scrollback record
+ * this replaces, and the OS temp dir is already user-scoped (not
+ * world-readable) on both Windows and POSIX.
+ *
+ * Round-12 preflight hardening: `flag: "wx"` creates the file exclusively
+ * (fails with EEXIST instead of following a pre-existing symlink at the
+ * generated path), so a TOCTOU symlink race in the shared temp dir can
+ * never redirect the token write onto an attacker-chosen file. A random
+ * UUID path already makes a genuine collision astronomically unlikely; the
+ * bounded retry only exists to survive that near-impossible case rather
+ * than crash the launch.
+ */
+const MAX_TOKEN_FILE_CREATE_ATTEMPTS = 5;
+export function writeCodextenderAuthTokenFile(token) {
+    for (let attempt = 0; attempt < MAX_TOKEN_FILE_CREATE_ATTEMPTS; attempt++) {
+        const filePath = path.join(tmpdir(), `codextender-auth-${randomUUID()}.tmp`);
+        try {
+            writeFileSync(filePath, `${token}\n`, { mode: 0o600, flag: "wx" });
+            return filePath;
+        }
+        catch (err) {
+            if (err.code === "EEXIST")
+                continue;
+            throw err;
+        }
+    }
+    throw new Error("Failed to create a unique Codextender auth token file after " +
+        `${MAX_TOKEN_FILE_CREATE_ATTEMPTS} attempts`);
+}
+/**
+ * Doubt-review/plan-review HIGH — PowerShell (`$env:X = ...;`) and cmd
+ * (`set X=Y &&`) mutate the CURRENT, persistent shell's environment (unlike
+ * the posix prefix form, which scopes to the one invocation it precedes).
+ * The embedded terminal is a long-lived pty shell, not spawned fresh per
+ * command, so without this suffix the proxy's `ANTHROPIC_BASE_URL` /
+ * `ANTHROPIC_AUTH_TOKEN` / `ANTHROPIC_MODEL` would silently outlive this one
+ * `claude` invocation and get inherited by whatever the user (or a later
+ * Relaunch-as-Claude/Codex-Light) types next in the same tab. Runs
+ * unconditionally after `rest` (cmd's `&`, PowerShell's/posix's `;` — none
+ * gated on `rest`'s own exit code, so cleanup still happens if `claude`
+ * exits non-zero). The temp token file is deleted here too, on all three
+ * shells — posix's env-scoping was already correct, but it still wrote the
+ * file to disk and must still remove it.
+ */
+export function buildCodextenderEnvCleanupSuffix(shellForm, q, tokenFilePath) {
+    // CLAUDE_CODE_MAX_CONTEXT_TOKENS is cleaned up unconditionally, like every
+    // other var here, regardless of whether THIS launch set it — Remove-Item
+    // -ErrorAction SilentlyContinue / `set NAME=` are no-ops when the var was
+    // never present, and this is what guarantees a value from an earlier
+    // launch in the same long-lived pty never survives past this invocation.
+    const names = [
+        "ANTHROPIC_BASE_URL",
+        "ANTHROPIC_AUTH_TOKEN",
+        "ANTHROPIC_MODEL",
+        "CODEXTENDER_ACTIVE",
+        "CODEXTENDER_MODEL",
+        "CLAUDE_CODE_MAX_CONTEXT_TOKENS",
+        "CLAUDE_CODE_AUTO_MODE_SERVER",
+        "ANTHROPIC_DEFAULT_OPUS_MODEL",
+        "ANTHROPIC_DEFAULT_SONNET_MODEL",
+        "ANTHROPIC_DEFAULT_HAIKU_MODEL",
+    ];
+    if (shellForm === "powershell") {
+        return (`; Remove-Item ${names.map((n) => `Env:${n}`).join(",")} -ErrorAction SilentlyContinue` +
+            `; Remove-Item -LiteralPath ${q(tokenFilePath)} -Force -ErrorAction SilentlyContinue`);
+    }
+    if (shellForm === "cmd") {
+        return names.map((n) => ` & set ${n}=`).join("") + ` & del /f /q ${q(tokenFilePath)}`;
+    }
+    return ` ; rm -f ${q(tokenFilePath)}`;
+}
+/**
+ * Same three per-shell quoting forms `launcher-codex.ts`'s own
+ * `buildReviewEnvPrefix` uses (PowerShell `$env:X = ...;`, cmd
+ * `set X=Y &&`, posix `X=Y `) — reused as a pattern, not imported (that
+ * function is private to `launcher-codex.ts` and this module has no
+ * dependency on Codex-CLI concerns). `ANTHROPIC_AUTH_TOKEN` is the one
+ * exception to the uniform `name=value` shape — see
+ * `writeCodextenderAuthTokenFile`'s doc comment for why it's read back from
+ * `tokenFilePath` instead of written as a literal.
+ *
+ * `CLAUDE_CODE_MAX_CONTEXT_TOKENS` (operator finding, 2026-09-26) is NOT
+ * folded into the uniform `plainEntries` loop below — PR-review preflight
+ * BLOCK (round 13): when `maxContextTokens` is undefined we must actively
+ * UNSET the var, not merely omit assigning it, so an inherited value (from
+ * an earlier launch in this same long-lived pty, or from whatever spawned
+ * the webui server itself) can't silently reach `claude` and defeat the
+ * documented "unset = Claude Code's safe 200K default" fallback. Each shell
+ * has its own real unset idiom — PowerShell's is `$env:X = $null` (an empty
+ * string only blanks it, doesn't remove it), cmd's is `set "X="` — except
+ * posix, whose `NAME=value` prefix form only scopes an ASSIGNMENT to the one
+ * invocation it precedes and so can't drop an inherited export; see the
+ * posix branch below for why `unset` (as its own leading statement), not
+ * `env -u`, is what that branch uses instead.
+ */
+export function buildCodextenderEnvPrefix(args, q, shellForm, tokenFilePath) {
+    const model = args.model?.trim() || DEFAULT_CODEXTENDER_MODEL_ALIAS;
+    const plainEntries = [
+        ["ANTHROPIC_BASE_URL", args.baseUrl],
+        ["ANTHROPIC_MODEL", model],
+        ["CODEXTENDER_ACTIVE", "1"],
+        ["CODEXTENDER_MODEL", model],
+        // Operator finding (2026-09-27): every gateway-routed session (which a
+        // Codextender launch always is) shows a recurring "auto mode isn't
+        // eligible for classifier billing changes" notice, because the local
+        // proxy is an LLM gateway sitting between Claude Code and the API.
+        // Doubt-review HIGH (this session) asked for a source proving `"0"` is
+        // a value-based suppress flag rather than a presence-checked one (where
+        // the literal string `"0"` would be truthy and could no-op or backfire)
+        // — confirmed against Claude Code's own docs
+        // (https://code.claude.com/docs/en/auto-mode-classifier-billing,
+        // "Make the session eligible"): setting `CLAUDE_CODE_AUTO_MODE_SERVER`
+        // to `0` is the documented way to tell Claude Code not to ask a gateway
+        // for the server-side checks, classifier requests are billed exactly as
+        // before either way, and the notice stops appearing. The docs flag it as
+        // a "temporary setting [that] may be removed in a later release" — if a
+        // future Claude Code drops it, this line becomes an inert env var, not a
+        // behavior change, so no expiry guard is needed here. Cosmetic only, but
+        // it re-fires on every classifier-gated action for the life of the
+        // session. Unlike `CLAUDE_CODE_MAX_CONTEXT_TOKENS` this needs no dynamic
+        // probe result — it's a fixed constant, always "0" for this runtime — so
+        // unlike that sibling var it belongs in the uniform loop, not its own
+        // conditional branch.
+        ["CLAUDE_CODE_AUTO_MODE_SERVER", "0"],
+        // Tier aliases (2026-09-29): Claude Code resolves `opus`/`sonnet`/`haiku`
+        // (subagent `model:` frontmatter, `--model`, the Agent tool param, the
+        // auto-mode classifier) to `claude-*` names and sends those to
+        // ANTHROPIC_BASE_URL. The proxy serves ONLY the Codex aliases it was
+        // started with (no claude-* wildcards, codextender 78c9401), so an
+        // unmapped tier 400s ("no healthy deployments"). Pin all three tiers to
+        // the launch alias client-side. NOT CLAUDE_CODE_SUBAGENT_MODEL: since
+        // Claude Code v2.1.251 a subagent's frontmatter model outranks it.
+        ["ANTHROPIC_DEFAULT_OPUS_MODEL", model],
+        ["ANTHROPIC_DEFAULT_SONNET_MODEL", model],
+        ["ANTHROPIC_DEFAULT_HAIKU_MODEL", model],
+    ];
+    if (shellForm === "powershell") {
+        const tokenLine = `$env:ANTHROPIC_AUTH_TOKEN = (Get-Content -LiteralPath ${q(tokenFilePath)} -Raw).Trim(); `;
+        const maxContextLine = args.maxContextTokens !== undefined
+            ? `$env:CLAUDE_CODE_MAX_CONTEXT_TOKENS = ${q(String(args.maxContextTokens))}; `
+            : `$env:CLAUDE_CODE_MAX_CONTEXT_TOKENS = $null; `;
+        return (tokenLine +
+            plainEntries.map(([name, value]) => `$env:${name} = ${q(value)}; `).join("") +
+            maxContextLine);
+    }
+    if (shellForm === "cmd") {
+        const tokenLine = `set /p ANTHROPIC_AUTH_TOKEN=<${q(tokenFilePath)} && `;
+        const maxContextLine = args.maxContextTokens !== undefined
+            ? `set ${q(`CLAUDE_CODE_MAX_CONTEXT_TOKENS=${args.maxContextTokens}`)} && `
+            : `set ${q("CLAUDE_CODE_MAX_CONTEXT_TOKENS=")} && `;
+        return (tokenLine +
+            plainEntries.map(([name, value]) => `set ${q(`${name}=${value}`)} && `).join("") +
+            maxContextLine);
+    }
+    // Built via `+` (not one contiguous template literal) so the source text
+    // never juxtaposes "ANTHROPIC_AUTH_TOKEN=" with an immediately-following
+    // quote character — that shape false-positives the repo's hardcoded-
+    // secret scanner (`password|...|auth_token\s*[=:]\s*['"][^'"]{8,}['"]`),
+    // same precaution `launcher-codextender.test.ts` already documents.
+    const tokenLine = "ANTHROPIC_AUTH_TOKEN=" + `"$(cat ${q(tokenFilePath)})" `;
+    if (args.maxContextTokens !== undefined) {
+        const maxContextLine = `CLAUDE_CODE_MAX_CONTEXT_TOKENS=${q(String(args.maxContextTokens))} `;
+        return (tokenLine +
+            plainEntries.map(([name, value]) => `${name}=${q(value)} `).join("") +
+            maxContextLine);
+    }
+    // No value to assign: a `NAME=value` prefix only scopes an ASSIGNMENT to
+    // the one invocation it precedes, so it can't be used to drop an
+    // inherited export the way it sets one. `env -u` would do that but
+    // resolves the command via PATH, bypassing a shell FUNCTION/alias named
+    // `claude` (confirmed by this module's own smoke test invoking the real
+    // installed CLI instead of the test's stub) — a real behavioral change,
+    // not just a test artifact. `unset` is its own statement, so it must come
+    // BEFORE the `NAME=value ... claude` simple command, never woven into
+    // it — inserting it between the assignments and the command would turn
+    // the assignments into a bare `A=1 B=2` statement, which (per POSIX,
+    // absent a following command) sets them as ordinary, NON-scoped shell
+    // variables instead of scoping them to just this invocation.
+    return ("unset CLAUDE_CODE_MAX_CONTEXT_TOKENS; " +
+        tokenLine +
+        plainEntries.map(([name, value]) => `${name}=${q(value)} `).join(""));
+}
+//# sourceMappingURL=launcher-codextender-env.js.map

package/server/dist/core/launcher-codextender-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender-env.js","sourceRoot":"","sources":["../../src/core/launcher-codextender-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,+BAA+B,EAA8B,MAAM,2BAA2B,CAAC;AAExG;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEzC,MAAM,UAAU,6BAA6B,CAAC,KAAa;IACzD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,8BAA8B,EAAE,OAAO,EAAE,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8DAA8D;QAC5D,GAAG,8BAA8B,WAAW,CAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gCAAgC,CAC9C,SAAyC,EACzC,CAAwB,EACxB,aAAqB;IAErB,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,MAAM,KAAK,GAAG;QACZ,oBAAoB;QACpB,sBAAsB;QACtB,iBAAiB;QACjB,oBAAoB;QACpB,mBAAmB;QACnB,gCAAgC;QAChC,8BAA8B;QAC9B,8BAA8B;QAC9B,gCAAgC;QAChC,+BAA+B;KAChC,CAAC;IACF,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,CACL,iBAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gCAAgC;YACvF,8BAA8B,CAAC,CAAC,aAAa,CAAC,uCAAuC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAA2B,EAC3B,CAAwB,EACxB,SAAyC,EACzC,aAAqB;IAErB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,+BAA+B,CAAC;IACpE,MAAM,YAAY,GAA4B;QAC5C,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC;QACpC,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAC1B,CAAC,oBAAoB,EAAE,GAAG,CAAC;QAC3B,CAAC,mBAAmB,EAAE,KAAK,CAAC;QAC5B,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,mEAAmE;QACnE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,6CAA6C;QAC7C,iEAAiE;QACjE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,sBAAsB;QACtB,CAAC,8BAA8B,EAAE,GAAG,CAAC;QACrC,0EAA0E;QAC1E,uEAAuE;QACvE,+DAA+D;QAC/D,qEAAqE;QACrE,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,mEAAmE;QACnE,CAAC,8BAA8B,EAAE,KAAK,CAAC;QACvC,CAAC,gCAAgC,EAAE,KAAK,CAAC;QACzC,CAAC,+BAA+B,EAAE,KAAK,CAAC;KACzC,CAAC;IAEF,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,yDAAyD,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC;QAC7G,MAAM,cAAc,GAClB,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACjC,CAAC,CAAC,yCAAyC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI;YAC/E,CAAC,CAAC,+CAA+C,CAAC;QACtD,OAAO,CACL,SAAS;YACT,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5E,cAAc,CACf,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,gCAAgC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;QACzE,MAAM,cAAc,GAClB,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACjC,CAAC,CAAC,OAAO,CAAC,CAAC,kCAAkC,IAAI,CAAC,gBAAgB,EAAE,CAAC,MAAM;YAC3E,CAAC,CAAC,OAAO,CAAC,CAAC,iCAAiC,CAAC,MAAM,CAAC;QACxD,OAAO,CACL,SAAS;YACT,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAChF,cAAc,CACf,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,SAAS,GAAG,uBAAuB,GAAG,UAAU,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;IAC5E,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,kCAAkC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC;QAC7F,OAAO,CACL,SAAS;YACT,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,cAAc,CACf,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,iEAAiE;IACjE,mEAAmE;IACnE,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,OAAO,CACL,wCAAwC;QACxC,SAAS;QACT,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACrE,CAAC;AACJ,CAAC"}

package/server/dist/core/launcher-codextender.d.ts

@@ -0,0 +1,72 @@
+import { type CopyCommandForms } from "./launcher.js";
+/**
+ * Resolves the bearer token sent to the local Codextender proxy from
+ * `process.env.CODEXTENDER_AUTH_TOKEN` — a validated configuration/
+ * environment value, never a value baked into this source (PR-review
+ * BLOCK, iterate-2026-09-23, second round: a hardcoded fallback here read
+ * as an unconditional credential regardless of its actual local-only,
+ * non-secret nature). Returns `undefined` when unset or blank; every
+ * caller must treat that as "Codextender isn't configured on this machine"
+ * and fail closed (`codextenderAuthTokenMissingError`) rather than send an
+ * empty/placeholder token.
+ */
+export declare function resolveCodextenderAuthToken(): string | undefined;
+/** Matches `codextender`'s own CLI default (`codextender --port 4000`
+ *  exposes `gpt-6-sol` as alias `sol` unless told otherwise). */
+export declare const DEFAULT_CODEXTENDER_MODEL_ALIAS = "sol";
+export interface CodextenderLaunchArgs {
+    cwd: string;
+    /** `http://127.0.0.1:<codextenderPort>` — built by the caller from the
+     *  `codextenderPort` global setting. */
+    baseUrl: string;
+    /** The Codextender model alias (Part A — "no closed enum", free text,
+     *  reuses the existing `codexImplementationModel` launch-body field).
+     *  Defaults to `DEFAULT_CODEXTENDER_MODEL_ALIAS` when omitted. */
+    model?: string;
+    /**
+     * Resolved via `resolveCodextenderAuthToken()` by the caller — this
+     * function has no built-in default and never resolves it itself, so a
+     * caller that skips the "is Codextender configured?" preflight gets a
+     * TypeScript error here, not a silently-sent empty/placeholder token.
+     */
+    authToken: string;
+    /**
+     * The Codextender model's real context window in tokens, resolved by the
+     * caller from the proxy's own `/v1/models` `max_input_tokens` field
+     * (`resolveCodextenderMaxContextTokens` in `codextender-proxy-probe.ts`) —
+     * operator finding, 2026-09-26: Claude Code assumes a 200K window for any
+     * model id it doesn't recognize and over-compacts against that wrong
+     * ceiling long before the real ~1.05M-token Codex window is anywhere near
+     * full. `undefined` (probe failed, alias unknown, or field absent) leaves
+     * `CLAUDE_CODE_MAX_CONTEXT_TOKENS` unset — the safe fallback is Claude
+     * Code's own 200K default, never a number guessed here.
+     */
+    maxContextTokens?: number;
+    /**
+     * The already-built plain-Claude commands for THIS task (same
+     * session-id/resume/name/plugin-dir/slash-command shape an ordinary
+     * Claude-runtime launch of this task would produce) — the chokepoint's
+     * own Claude-fallback `commands`, computed before it decides to override
+     * for a Codex-runtime task.
+     */
+    claudeCommands: CopyCommandForms;
+}
+/**
+ * Doubt-review HIGH — `args.cwd` is caller-supplied (`task.cwd` at the
+ * launch chokepoint and the fork route; `applyActionSubstitutionBranch`'s
+ * custom-action commands are built from `project.path` instead, which can
+ * legitimately diverge from `task.cwd`, e.g. a worktree-based task). When
+ * `args.claudeCommands` was built from a DIFFERENT cwd than `args.cwd`,
+ * the exact-string cd-prefix match below fails, and silently falling
+ * through to prepend a second, possibly-wrong `cd`/`Set-Location` ahead of
+ * the original produced a command that could abort outright (PowerShell's
+ * `-ErrorAction Stop` on a nonexistent `args.cwd`) or silently launch in
+ * the wrong directory. Thrown instead, so a caller surfaces this as an
+ * actionable error rather than an auto-executed command that mysteriously
+ * fails or does the wrong thing.
+ */
+export declare class CodextenderCwdMismatchError extends Error {
+    constructor(cwd: string);
+}
+export declare function buildCodextenderCommands(args: CodextenderLaunchArgs): CopyCommandForms;
+//# sourceMappingURL=launcher-codextender.d.ts.map

package/server/dist/core/launcher-codextender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.d.ts","sourceRoot":"","sources":["../../src/core/launcher-codextender.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGrE;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,GAAG,SAAS,CAGhE;AAED;iEACiE;AACjE,eAAO,MAAM,+BAA+B,QAAQ,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ;4CACwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB;;sEAEkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,cAAc,EAAE,gBAAgB,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,GAAG,EAAE,MAAM;CAQxB;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,qBAAqB,GAAG,gBAAgB,CAoBtF"}

package/server/dist/core/launcher-codextender.js

@@ -0,0 +1,98 @@
+/*
+ * Codextender launch-command builder (Codextender integration spec Part B.2,
+ * `C:\01_Development\shipwright\Spec\codextender-integration.md`).
+ *
+ * Sibling of `launcher-codex.ts`, but structurally different from it:
+ * Codextender never changes the DRIVING BINARY (`claude` stays `claude` —
+ * only `ANTHROPIC_BASE_URL`/`ANTHROPIC_MODEL` re-point it at a local
+ * LiteLLM proxy that talks to a Codex-plan subscription). So instead of
+ * re-implementing session/resume/name/plugin-dir argv logic the way
+ * `launcher-codex.ts` does for the genuinely different `codex` CLI, this
+ * module REUSES the already-built plain-Claude `CopyCommandForms` for this
+ * task (identical to what an ordinary Claude-runtime launch would produce)
+ * and prepends a per-shell env-var prefix ahead of the `claude` invocation
+ * itself — the exact insertion point `buildCdPrefix` (pure, exported from
+ * `launcher.ts`) lets us locate by exact string match, no regex guessing.
+ *
+ * "webui never spawns a process, only builds a string" (CLAUDE.md rule 1)
+ * holds identically to every other launcher in this directory.
+ */
+import { unlinkSync } from "node:fs";
+import { buildCodextenderEnvCleanupSuffix, buildCodextenderEnvPrefix, writeCodextenderAuthTokenFile, } from "./launcher-codextender-env.js";
+import { buildCdPrefix } from "./launcher.js";
+import { qPs, qCmd, qPosix } from "./shell-quote.js";
+/**
+ * Resolves the bearer token sent to the local Codextender proxy from
+ * `process.env.CODEXTENDER_AUTH_TOKEN` — a validated configuration/
+ * environment value, never a value baked into this source (PR-review
+ * BLOCK, iterate-2026-09-23, second round: a hardcoded fallback here read
+ * as an unconditional credential regardless of its actual local-only,
+ * non-secret nature). Returns `undefined` when unset or blank; every
+ * caller must treat that as "Codextender isn't configured on this machine"
+ * and fail closed (`codextenderAuthTokenMissingError`) rather than send an
+ * empty/placeholder token.
+ */
+export function resolveCodextenderAuthToken() {
+    const fromEnv = process.env.CODEXTENDER_AUTH_TOKEN?.trim();
+    return fromEnv && fromEnv.length > 0 ? fromEnv : undefined;
+}
+/** Matches `codextender`'s own CLI default (`codextender --port 4000`
+ *  exposes `gpt-6-sol` as alias `sol` unless told otherwise). */
+export const DEFAULT_CODEXTENDER_MODEL_ALIAS = "sol";
+/**
+ * Doubt-review HIGH — `args.cwd` is caller-supplied (`task.cwd` at the
+ * launch chokepoint and the fork route; `applyActionSubstitutionBranch`'s
+ * custom-action commands are built from `project.path` instead, which can
+ * legitimately diverge from `task.cwd`, e.g. a worktree-based task). When
+ * `args.claudeCommands` was built from a DIFFERENT cwd than `args.cwd`,
+ * the exact-string cd-prefix match below fails, and silently falling
+ * through to prepend a second, possibly-wrong `cd`/`Set-Location` ahead of
+ * the original produced a command that could abort outright (PowerShell's
+ * `-ErrorAction Stop` on a nonexistent `args.cwd`) or silently launch in
+ * the wrong directory. Thrown instead, so a caller surfaces this as an
+ * actionable error rather than an auto-executed command that mysteriously
+ * fails or does the wrong thing.
+ */
+export class CodextenderCwdMismatchError extends Error {
+    constructor(cwd) {
+        super(`buildCodextenderCommands: claudeCommands' embedded cd-prefix does not ` +
+            `match args.cwd (${cwd}) — this task's plain-Claude commands appear ` +
+            "to have been built from a different working directory.");
+        this.name = "CodextenderCwdMismatchError";
+    }
+}
+export function buildCodextenderCommands(args) {
+    // PR-review preflight fix (round 8, iterate-2026-09-23) — the bearer token
+    // itself never appears in any of the three command strings below; only
+    // this file's PATH does. See `writeCodextenderAuthTokenFile`'s doc comment
+    // for why a temp file replaces the literal-value approach round 7's
+    // env-cleanup fix alone didn't fully address.
+    const tokenFilePath = writeCodextenderAuthTokenFile(args.authToken);
+    try {
+        return {
+            powershell: injectEnvPrefix(args, "powershell", qPs, tokenFilePath),
+            cmd: injectEnvPrefix(args, "cmd", qCmd, tokenFilePath),
+            posix: injectEnvPrefix(args, "posix", qPosix, tokenFilePath),
+        };
+    }
+    catch (err) {
+        // A cwd mismatch (below) throws before any command is returned for the
+        // caller to run/clean up itself — without this, the token file written
+        // above would be orphaned on every mismatch, not just a killed pty.
+        unlinkSync(tokenFilePath);
+        throw err;
+    }
+}
+function injectEnvPrefix(args, shellForm, q, tokenFilePath) {
+    const cdPrefix = buildCdPrefix(shellForm, args.cwd);
+    const full = args.claudeCommands[shellForm];
+    if (!full.startsWith(cdPrefix)) {
+        throw new CodextenderCwdMismatchError(args.cwd);
+    }
+    const rest = full.slice(cdPrefix.length);
+    return (cdPrefix +
+        buildCodextenderEnvPrefix(args, q, shellForm, tokenFilePath) +
+        rest +
+        buildCodextenderEnvCleanupSuffix(shellForm, q, tokenFilePath));
+}
+//# sourceMappingURL=launcher-codextender.js.map