@tickernelz/paperclip-pro-adapter-codex-local 2026.925.0

package/dist/server/device-login-runner.test.js

@@ -0,0 +1,201 @@
+import { describe, expect, it, vi } from "vitest";
+import { CODEX_DEVICE_LOGIN_COMMAND, runDeviceLogin, } from "./device-login-runner.js";
+const REAL_SHAPED_URL = "https://auth.openai.com/codex/device";
+const REAL_SHAPED_CODE = "WXYZ-12345";
+const TOKEN_SENTINEL = "SENTINEL_TOKEN_ABC123";
+const AUTH_BYTES = Buffer.from(JSON.stringify({ tokens: { account_id: "acc", refresh_token: TOKEN_SENTINEL } }));
+function createFakeDriver(options = {}) {
+    const disposeCalls = { count: 0 };
+    const driver = {
+        async start(_command, onData) {
+            if (options.execError)
+                throw options.execError;
+            for (const chunk of options.chunks ?? []) {
+                onData(chunk);
+            }
+            if (options.hang) {
+                // Never resolve. The runner must fall back to its timeout or signal.
+                await new Promise(() => { });
+            }
+            return { exitCode: options.exitCode ?? 0 };
+        },
+        async readFile() {
+            if (options.readError)
+                throw options.readError;
+            return options.authBytes ?? AUTH_BYTES;
+        },
+        async dispose() {
+            disposeCalls.count += 1;
+        },
+    };
+    return { driver, disposeCalls };
+}
+describe("runDeviceLogin", () => {
+    it("runner_reports_prompt_then_success", async () => {
+        const { driver, disposeCalls } = createFakeDriver({
+            // The prompt spans two chunks; the runner must join them and fire once.
+            // The chunk boundary falls inside the prompt, after the code preamble.
+            chunks: [
+                `1. Open this link\n${REAL_SHAPED_URL}\n2. Enter this one-time code (expires in 15 minutes)\n`,
+                `${REAL_SHAPED_CODE}\nDone.\n`,
+            ],
+            exitCode: 0,
+        });
+        const onPrompt = vi.fn();
+        const onCredential = vi.fn();
+        const result = await runDeviceLogin(driver, {
+            onPrompt,
+            onCredential,
+            authPath: "/home/.codex/auth.json",
+            timeoutMs: 1000,
+        });
+        expect(result.outcome).toBe("success");
+        expect(result.exitCode).toBe(0);
+        expect(result.promptSurfaced).toBe(true);
+        expect(onPrompt).toHaveBeenCalledTimes(1);
+        expect(onPrompt).toHaveBeenCalledWith({ url: REAL_SHAPED_URL, code: REAL_SHAPED_CODE });
+        expect(onCredential).toHaveBeenCalledTimes(1);
+        expect(onCredential).toHaveBeenCalledWith(AUTH_BYTES);
+        expect(disposeCalls.count).toBe(1);
+    });
+    it("runner_surfaces_prompt_after_a_large_pre_prompt_stream", async () => {
+        // The sandbox streams a large volume of output before the prompt. The runner
+        // bounds the parse buffer, so the memory stays limited. The prompt arrives at
+        // the end of the stream, so the trailing window still holds it and the runner
+        // surfaces it.
+        const noise = "unrelated sandbox log line\n".repeat(20000);
+        const { driver } = createFakeDriver({
+            chunks: [
+                noise,
+                `1. Open this link\n${REAL_SHAPED_URL}\n2. Enter this one-time code (expires in 15 minutes)\n${REAL_SHAPED_CODE}\nDone.\n`,
+            ],
+            exitCode: 0,
+        });
+        const onPrompt = vi.fn();
+        const result = await runDeviceLogin(driver, { onPrompt, timeoutMs: 1000 });
+        expect(result.outcome).toBe("success");
+        expect(result.promptSurfaced).toBe(true);
+        expect(onPrompt).toHaveBeenCalledTimes(1);
+        expect(onPrompt).toHaveBeenCalledWith({ url: REAL_SHAPED_URL, code: REAL_SHAPED_CODE });
+    });
+    it("runner_surfaces_prompt_at_the_start_of_one_large_chunk", async () => {
+        // One stdout callback supplies more than the retained-buffer limit. The
+        // prompt sits near the start, and a large volume of output follows it. The
+        // runner parses the whole chunk before it trims the retained window, so it
+        // still finds the early prompt and never drops it.
+        const trailingNoise = "unrelated sandbox log line\n".repeat(20000);
+        const { driver } = createFakeDriver({
+            chunks: [
+                `1. Open this link\n${REAL_SHAPED_URL}\n2. Enter this one-time code (expires in 15 minutes)\n${REAL_SHAPED_CODE}\nDone.\n${trailingNoise}`,
+            ],
+            exitCode: 0,
+        });
+        const onPrompt = vi.fn();
+        const result = await runDeviceLogin(driver, { onPrompt, timeoutMs: 1000 });
+        expect(result.outcome).toBe("success");
+        expect(result.promptSurfaced).toBe(true);
+        expect(onPrompt).toHaveBeenCalledTimes(1);
+        expect(onPrompt).toHaveBeenCalledWith({ url: REAL_SHAPED_URL, code: REAL_SHAPED_CODE });
+    });
+    it("runner_disposes_sandbox_on_timeout", async () => {
+        const { driver, disposeCalls } = createFakeDriver({ hang: true });
+        const onPrompt = vi.fn();
+        const result = await runDeviceLogin(driver, { onPrompt, timeoutMs: 20 });
+        expect(result.outcome).toBe("timeout");
+        expect(disposeCalls.count).toBe(1);
+    });
+    it("runner_disposes_sandbox_on_cancellation", async () => {
+        const { driver, disposeCalls } = createFakeDriver({ hang: true });
+        const controller = new AbortController();
+        const onPrompt = vi.fn();
+        const promise = runDeviceLogin(driver, {
+            onPrompt,
+            timeoutMs: 5000,
+            signal: controller.signal,
+        });
+        controller.abort();
+        const result = await promise;
+        expect(result.outcome).toBe("cancelled");
+        expect(disposeCalls.count).toBe(1);
+    });
+    it("runner_reports_failure_on_nonzero_exit", async () => {
+        const { driver, disposeCalls } = createFakeDriver({ exitCode: 7 });
+        const onPrompt = vi.fn();
+        const result = await runDeviceLogin(driver, { onPrompt, timeoutMs: 1000 });
+        expect(result.outcome).toBe("failure");
+        expect(result.exitCode).toBe(7);
+        expect(disposeCalls.count).toBe(1);
+    });
+    it("runner_logs_and_result_contain_no_url_code_or_token_sentinel", async () => {
+        const logs = [];
+        const { driver } = createFakeDriver({
+            chunks: [
+                `${REAL_SHAPED_URL}\n${REAL_SHAPED_CODE}\n`,
+                `refresh_token=${TOKEN_SENTINEL}\n`,
+            ],
+            exitCode: 0,
+        });
+        const result = await runDeviceLogin(driver, {
+            onPrompt: () => { },
+            timeoutMs: 1000,
+            log: (line) => {
+                logs.push(line);
+            },
+        });
+        const haystack = `${logs.join("\n")}\n${JSON.stringify(result)}`;
+        expect(haystack).not.toContain(REAL_SHAPED_URL);
+        expect(haystack).not.toContain(REAL_SHAPED_CODE);
+        expect(haystack).not.toContain(TOKEN_SENTINEL);
+    });
+    it("runner_error_messages_contain_no_url_or_code", async () => {
+        const { driver, disposeCalls } = createFakeDriver({
+            // A driver error whose message embeds secret-bearing text. The runner must
+            // never let that message reach its own thrown error.
+            execError: new Error(`network failure while streaming ${REAL_SHAPED_URL} ${REAL_SHAPED_CODE}`),
+        });
+        let caught;
+        try {
+            await runDeviceLogin(driver, { onPrompt: () => { }, timeoutMs: 1000 });
+        }
+        catch (error) {
+            caught = error;
+        }
+        expect(caught).toBeInstanceOf(Error);
+        const message = caught.message;
+        expect(message).not.toContain(REAL_SHAPED_URL);
+        expect(message).not.toContain(REAL_SHAPED_CODE);
+        // The driver is still disposed on the error path.
+        expect(disposeCalls.count).toBe(1);
+    });
+    it("exposes the default login command", () => {
+        expect(CODEX_DEVICE_LOGIN_COMMAND).toContain("codex");
+        expect(CODEX_DEVICE_LOGIN_COMMAND).toContain("--device-auth");
+    });
+    it("uses the parser the caller supplies instead of the Codex parser", async () => {
+        // The caller's parser reads a shape the Codex parser rejects, so a call that
+        // reaches the Codex parser instead would never surface a prompt.
+        const { driver } = createFakeDriver({
+            chunks: ["not a codex prompt, but the caller's own marker\n"],
+            exitCode: 0,
+        });
+        const onPrompt = vi.fn();
+        const parsePrompt = vi.fn((output) => output.includes("marker") ? { url: "https://example.test/device", code: "AAAA-11111" } : null);
+        const result = await runDeviceLogin(driver, { onPrompt, timeoutMs: 1000, parsePrompt });
+        expect(result.outcome).toBe("success");
+        expect(result.promptSurfaced).toBe(true);
+        expect(parsePrompt).toHaveBeenCalled();
+        expect(onPrompt).toHaveBeenCalledWith({ url: "https://example.test/device", code: "AAAA-11111" });
+    });
+    it("uses the Codex parser when the caller supplies none", async () => {
+        const { driver } = createFakeDriver({
+            chunks: [`1. Open this link\n${REAL_SHAPED_URL}\n2. Enter this one-time code (expires in 15 minutes)\n${REAL_SHAPED_CODE}\nDone.\n`],
+            exitCode: 0,
+        });
+        const onPrompt = vi.fn();
+        const result = await runDeviceLogin(driver, { onPrompt, timeoutMs: 1000 });
+        expect(result.outcome).toBe("success");
+        expect(result.promptSurfaced).toBe(true);
+        expect(onPrompt).toHaveBeenCalledWith({ url: REAL_SHAPED_URL, code: REAL_SHAPED_CODE });
+    });
+});
+//# sourceMappingURL=device-login-runner.test.js.map

package/dist/server/device-login-runner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-login-runner.test.js","sourceRoot":"","sources":["../../src/server/device-login-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,0BAA0B,EAC1B,cAAc,GAEf,MAAM,0BAA0B,CAAC;AAElC,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAC/D,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAC5B,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,CAAC,CACjF,CAAC;AAWF,SAAS,gBAAgB,CAAC,OAAO,GAAsB,EAAE;IACvD,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAClC,MAAM,MAAM,GAAuB;QACjC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM;YAC1B,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,OAAO,CAAC,SAAS,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACzC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,qEAAqE;gBACrE,MAAM,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,QAAQ;YACZ,IAAI,OAAO,CAAC,SAAS;gBAAE,MAAM,OAAO,CAAC,SAAS,CAAC;YAC/C,OAAO,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,OAAO;YACX,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC;YAChD,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,EAAE;gBACN,sBAAsB,eAAe,yDAAyD;gBAC9F,GAAG,gBAAgB,WAAW;aAC/B;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE;YAC1C,QAAQ;YACR,YAAY;YACZ,QAAQ,EAAE,wBAAwB;YAClC,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,eAAe;QACf,MAAM,KAAK,GAAG,8BAA8B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;YAClC,MAAM,EAAE;gBACN,KAAK;gBACL,sBAAsB,eAAe,0DAA0D,gBAAgB,WAAW;aAC3H;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,aAAa,GAAG,8BAA8B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;YAClC,MAAM,EAAE;gBACN,sBAAsB,eAAe,0DAA0D,gBAAgB,YAAY,aAAa,EAAE;aAC3I;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE;YACrC,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;YAClC,MAAM,EAAE;gBACN,GAAG,eAAe,KAAK,gBAAgB,IAAI;gBAC3C,iBAAiB,cAAc,IAAI;aACpC;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE;YAC1C,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;YAClB,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;SACF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC;YAChD,2EAA2E;YAC3E,qDAAqD;YACrD,SAAS,EAAE,IAAI,KAAK,CAAC,mCAAmC,eAAe,IAAI,gBAAgB,EAAE,CAAC;SAC/F,CAAC,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAI,MAAgB,CAAC,OAAO,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAChD,kDAAkD;QAClD,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,6EAA6E;QAC7E,iEAAiE;QACjE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;YAClC,MAAM,EAAE,CAAC,mDAAmD,CAAC;YAC7D,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,MAAc,EAAE,EAAE,CAC3C,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,6BAA6B,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAC9F,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,6BAA6B,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;YAClC,MAAM,EAAE,CAAC,sBAAsB,eAAe,0DAA0D,gBAAgB,WAAW,CAAC;YACpI,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/engine-availability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=engine-availability.test.d.ts.map

package/dist/server/engine-availability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-availability.test.d.ts","sourceRoot":"","sources":["../../src/server/engine-availability.test.ts"],"names":[],"mappings":""}

package/dist/server/engine-availability.test.js

@@ -0,0 +1,41 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { resolveCodexExecutionEngineForRun } from "./acp.js";
+import { execute } from "./execute.js";
+import { testEnvironment } from "./test.js";
+const originalVersion = process.version;
+afterEach(() => Object.defineProperty(process, "version", { value: originalVersion }));
+describe("codex engine availability", () => {
+    it.each([undefined, "auto", "acp"])("reports a setup failure for engine=%s without starting a process", async (engine) => {
+        Object.defineProperty(process, "version", { value: "v18.0.0" });
+        const config = { engine };
+        const onSpawn = vi.fn();
+        const result = await execute({ config, onSpawn });
+        expect(result).toMatchObject({
+            exitCode: 1,
+            errorCode: "adapter_engine_unavailable",
+            errorMessage: expect.stringContaining("Node v18.0.0"),
+            resultJson: { executionRecovery: { kind: "bootstrap", providerWorkStarted: false } },
+        });
+        expect(result.errorMessage).toContain(process.execPath);
+        expect(onSpawn).not.toHaveBeenCalled();
+        const diagnostic = await testEnvironment({ config });
+        expect(diagnostic.status).toBe("fail");
+        expect(diagnostic.checks).toContainEqual(expect.objectContaining({
+            code: "adapter_engine_unavailable", level: "error",
+        }));
+    });
+    it("does not apply ACP prerequisites to explicitly selected CLI", async () => {
+        Object.defineProperty(process, "version", { value: "v18.0.0" });
+        await expect(resolveCodexExecutionEngineForRun({ config: { engine: "cli" } }))
+            .resolves.toEqual({ engine: "cli", explicit: true });
+    });
+    it("keeps an unavailable ACP command as a failure, not a CLI selection", async () => {
+        Object.defineProperty(process, "version", { value: "v24.11.0" });
+        const result = await resolveCodexExecutionEngineForRun({
+            config: { agentCommand: "/nonexistent/paperclip-test/acp", command: "/nonexistent/paperclip-test/acp" },
+        });
+        expect(result.engine).toBe("acp");
+        expect(result.unavailableReason).toContain("not available");
+    });
+});
+//# sourceMappingURL=engine-availability.test.js.map

package/dist/server/engine-availability.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-availability.test.js","sourceRoot":"","sources":["../../src/server/engine-availability.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,iCAAiC,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;AACxC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;AAEvF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,kEAAkE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvH,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAW,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,4BAA4B;YACvC,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC;YACrD,UAAU,EAAE,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE;SACrF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,EAAE,MAAM,EAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC/D,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,OAAO;SACnD,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,CAAC,iCAAiC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;aAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC;YACrD,MAAM,EAAE,EAAE,YAAY,EAAE,iCAAiC,EAAE,OAAO,EAAE,iCAAiC,EAAE;SACxG,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/execute.acp-fallback.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execute.acp-fallback.test.d.ts.map

package/dist/server/execute.acp-fallback.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.acp-fallback.test.d.ts","sourceRoot":"","sources":["../../src/server/execute.acp-fallback.test.ts"],"names":[],"mappings":""}

package/dist/server/execute.acp-fallback.test.js

@@ -0,0 +1,123 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+const { ensureAdapterExecutionTargetCommandResolvable, ensureAdapterExecutionTargetRuntimeCommandInstalled, executeCodexAcp, prepareCodexRuntimeConfig, readPaperclipRuntimeSkillEntries, resolveAdapterExecutionTargetCommandForLogs, runAdapterExecutionTargetProcess, tempCodexHome, } = vi.hoisted(() => ({
+    ensureAdapterExecutionTargetCommandResolvable: vi.fn(async () => undefined),
+    ensureAdapterExecutionTargetRuntimeCommandInstalled: vi.fn(async () => undefined),
+    executeCodexAcp: vi.fn(async () => {
+        throw new Error('Transform failed with 1 error: execute.ts:818:0: ERROR: Unexpected "<<"');
+    }),
+    prepareCodexRuntimeConfig: vi.fn(async () => ({ cleanup: vi.fn(async () => undefined), notes: [] })),
+    readPaperclipRuntimeSkillEntries: vi.fn(async () => []),
+    resolveAdapterExecutionTargetCommandForLogs: vi.fn(async () => "codex"),
+    runAdapterExecutionTargetProcess: vi.fn(async () => ({
+        exitCode: 0,
+        signal: null,
+        timedOut: false,
+        stdout: [
+            JSON.stringify({ type: "thread.started", thread_id: "codex-thread-1" }),
+            JSON.stringify({
+                type: "item.completed",
+                item: { type: "agent_message", text: "hello" },
+            }),
+            JSON.stringify({
+                type: "turn.completed",
+                usage: { input_tokens: 1, cached_input_tokens: 0, output_tokens: 1 },
+            }),
+        ].join("\n"),
+        stderr: "",
+        pid: 123,
+        startedAt: new Date().toISOString(),
+    })),
+    tempCodexHome: "/tmp/paperclip-codex-acp-fallback-test-home",
+}));
+vi.mock("./acp.js", () => ({
+    createCodexAcpExecutor: () => executeCodexAcp,
+    resolveCodexExecutionEngineForRun: async (ctx) => ctx.config.engine === "cli"
+        ? { engine: "cli", explicit: true }
+        : ctx.config.engine === "acp"
+            ? { engine: "acp", explicit: true }
+            : { engine: "acp", explicit: false },
+}));
+vi.mock("@tickernelz/paperclip-pro-adapter-utils/execution-target", async () => {
+    const actual = await vi.importActual("@tickernelz/paperclip-pro-adapter-utils/execution-target");
+    return {
+        ...actual,
+        ensureAdapterExecutionTargetCommandResolvable,
+        ensureAdapterExecutionTargetRuntimeCommandInstalled,
+        resolveAdapterExecutionTargetCommandForLogs,
+        runAdapterExecutionTargetProcess,
+    };
+});
+vi.mock("@tickernelz/paperclip-pro-adapter-utils/server-utils", async () => {
+    const actual = await vi.importActual("@tickernelz/paperclip-pro-adapter-utils/server-utils");
+    return {
+        ...actual,
+        readPaperclipRuntimeSkillEntries,
+    };
+});
+vi.mock("./codex-home.js", async () => {
+    const actual = await vi.importActual("./codex-home.js");
+    return {
+        ...actual,
+        evaluateCodexCredentialReadiness: vi.fn(async () => ({
+            managed: true,
+            authMode: "api",
+            ready: true,
+            effectiveHome: tempCodexHome,
+            sharedSourceHome: tempCodexHome,
+        })),
+        isManagedCodexHomePath: vi.fn(() => true),
+        prepareManagedCodexHome: vi.fn(async () => ({ status: "seeded", home: tempCodexHome })),
+        resolveManagedCodexHomeDir: vi.fn(() => tempCodexHome),
+        seedManagedCodexHome: vi.fn(async () => ({ status: "seeded", home: tempCodexHome })),
+    };
+});
+vi.mock("./runtime-config.js", async () => {
+    const actual = await vi.importActual("./runtime-config.js");
+    return {
+        ...actual,
+        prepareCodexRuntimeConfig,
+    };
+});
+import { execute } from "./execute.js";
+function buildContext(config = {}) {
+    return {
+        runId: "run-1",
+        agent: {
+            id: "agent-1",
+            companyId: "company-1",
+            name: "Codex Coder",
+            adapterType: "codex_local",
+            adapterConfig: {},
+        },
+        runtime: {
+            sessionId: null,
+            sessionParams: null,
+            sessionDisplayId: null,
+            taskKey: null,
+        },
+        config: {
+            outputInactivityTimeoutMs: null,
+            env: { OPENAI_API_KEY: "test-key" },
+            ...config,
+        },
+        context: {},
+        onLog: vi.fn(async () => { }),
+    };
+}
+describe("codex_local ACP startup fallback", () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it("does not start CLI after default ACP fails", async () => {
+        const ctx = buildContext();
+        await expect(execute(ctx)).rejects.toThrow('Unexpected "<<"');
+        expect(executeCodexAcp).toHaveBeenCalledTimes(1);
+        expect(runAdapterExecutionTargetProcess).not.toHaveBeenCalled();
+    });
+    it("keeps explicit ACP strict when startup fails", async () => {
+        const ctx = buildContext({ engine: "acp" });
+        await expect(execute(ctx)).rejects.toThrow('Unexpected "<<"');
+        expect(runAdapterExecutionTargetProcess).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=execute.acp-fallback.test.js.map

package/dist/server/execute.acp-fallback.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.acp-fallback.test.js","sourceRoot":"","sources":["../../src/server/execute.acp-fallback.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EACJ,6CAA6C,EAC7C,mDAAmD,EACnD,eAAe,EACf,yBAAyB,EACzB,gCAAgC,EAChC,2CAA2C,EAC3C,gCAAgC,EAChC,aAAa,GACd,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpB,6CAA6C,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;IAC3E,mDAAmD,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;IACjF,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC,CAAC;IACF,yBAAyB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACpG,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IACvD,2CAA2C,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC;IACvE,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACnD,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE;YACN,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;YACvE,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE;aAC/C,CAAC;YACF,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,gBAAgB;gBACtB,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE;aACrE,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,GAAG;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IACH,aAAa,EAAE,6CAA6C;CAC7D,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,sBAAsB,EAAE,GAAG,EAAE,CAAC,eAAe;IAC7C,iCAAiC,EAAE,KAAK,EAAE,GAAwC,EAAE,EAAE,CACpF,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK;QACzB,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;QACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK;YAC7B,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;YACnC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;CACzC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,0DAA0D,CAC3D,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,6CAA6C;QAC7C,mDAAmD;QACnD,2CAA2C;QAC3C,gCAAgC;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,sDAAsD,CACvD,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,gCAAgC;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;IACpC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAmC,iBAAiB,CAAC,CAAC;IAC1F,OAAO;QACL,GAAG,MAAM;QACT,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACnD,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,IAAI;YACX,aAAa,EAAE,aAAa;YAC5B,gBAAgB,EAAE,aAAa;SAChC,CAAC,CAAC;QACH,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACzC,uBAAuB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACvF,0BAA0B,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC;QACtD,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;KACrF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;IACxC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAuC,qBAAqB,CAAC,CAAC;IAClG,OAAO;QACL,GAAG,MAAM;QACT,yBAAyB;KAC1B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,SAAS,YAAY,CAAC,MAAM,GAA4B,EAAE;IACxD,OAAO;QACL,KAAK,EAAE,OAAO;QACd,KAAK,EAAE;YACL,EAAE,EAAE,SAAS;YACb,SAAS,EAAE,WAAW;YACtB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,aAAa;YAC1B,aAAa,EAAE,EAAE;SAClB;QACD,OAAO,EAAE;YACP,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE,IAAI;SACd;QACD,MAAM,EAAE;YACN,yBAAyB,EAAE,IAAI;YAC/B,GAAG,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE;YACnC,GAAG,MAAM;SACV;QACD,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,OAAO,CAAC,GAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvE,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5C,MAAM,MAAM,CAAC,OAAO,CAAC,GAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAEvE,MAAM,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/execute.auth-precedence.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execute.auth-precedence.test.d.ts.map

package/dist/server/execute.auth-precedence.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.auth-precedence.test.d.ts","sourceRoot":"","sources":["../../src/server/execute.auth-precedence.test.ts"],"names":[],"mappings":""}

package/dist/server/execute.auth-precedence.test.js

@@ -0,0 +1,137 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { CODEX_SANDBOX_AUTH_EXISTS_COMMAND, CODEX_SANDBOX_AUTH_PRECEDENCE_WARNING, CODEX_SANDBOX_AUTH_PRECEDENCE_WARNING_LOG_LINE, } from "./auth-precedence.js";
+const { ensureAdapterExecutionTargetCommandResolvable, ensureAdapterExecutionTargetRuntimeCommandInstalled, prepareAdapterExecutionTargetRuntime, resolveAdapterExecutionTargetCommandForLogs, runAdapterExecutionTargetProcess, runAdapterExecutionTargetShellCommand, startAdapterExecutionTargetPaperclipBridge, } = vi.hoisted(() => ({
+    ensureAdapterExecutionTargetCommandResolvable: vi.fn(async () => undefined),
+    ensureAdapterExecutionTargetRuntimeCommandInstalled: vi.fn(async () => undefined),
+    prepareAdapterExecutionTargetRuntime: vi.fn(async () => ({
+        target: { kind: "remote", transport: "sandbox", remoteCwd: "/sandbox/workspace" },
+        workspaceRemoteDir: "/sandbox/workspace",
+        runtimeRootDir: "/sandbox/.paperclip-runtime",
+        assetDirs: { home: "/sandbox/.paperclip-runtime/codex/home" },
+        restoreWorkspace: vi.fn(async () => undefined),
+    })),
+    resolveAdapterExecutionTargetCommandForLogs: vi.fn(async () => "/usr/bin/codex"),
+    runAdapterExecutionTargetProcess: vi.fn(async () => ({
+        exitCode: 0,
+        signal: null,
+        timedOut: false,
+        stdout: "",
+        stderr: "",
+        pid: 123,
+        startedAt: new Date().toISOString(),
+    })),
+    runAdapterExecutionTargetShellCommand: vi.fn(async () => ({
+        exitCode: 0,
+        signal: null,
+        timedOut: false,
+        stdout: "",
+        stderr: "",
+        pid: null,
+        startedAt: new Date().toISOString(),
+    })),
+    startAdapterExecutionTargetPaperclipBridge: vi.fn(async () => null),
+}));
+vi.mock("@tickernelz/paperclip-pro-adapter-utils/execution-target", async () => {
+    const actual = await vi.importActual("@tickernelz/paperclip-pro-adapter-utils/execution-target");
+    return {
+        ...actual,
+        ensureAdapterExecutionTargetCommandResolvable,
+        ensureAdapterExecutionTargetRuntimeCommandInstalled,
+        prepareAdapterExecutionTargetRuntime,
+        resolveAdapterExecutionTargetCommandForLogs,
+        runAdapterExecutionTargetProcess,
+        runAdapterExecutionTargetShellCommand,
+        startAdapterExecutionTargetPaperclipBridge,
+    };
+});
+import { execute } from "./execute.js";
+describe("codex sandbox auth precedence warning", () => {
+    const cleanupDirs = [];
+    afterEach(async () => {
+        vi.clearAllMocks();
+        while (cleanupDirs.length > 0) {
+            const dir = cleanupDirs.pop();
+            if (!dir)
+                continue;
+            await fs.rm(dir, { recursive: true, force: true }).catch(() => undefined);
+        }
+    });
+    it("logs and emits a run event when sandbox login is shadowed by host auth", async () => {
+        const root = await fs.mkdtemp(path.join(os.tmpdir(), "paperclip-codex-auth-precedence-"));
+        cleanupDirs.push(root);
+        const workspaceDir = path.join(root, "workspace");
+        const hostCodexHome = path.join(root, "host-codex-home");
+        await fs.mkdir(workspaceDir, { recursive: true });
+        await fs.mkdir(hostCodexHome, { recursive: true });
+        await fs.writeFile(path.join(hostCodexHome, "auth.json"), JSON.stringify({ OPENAI_API_KEY: "fake-host-auth" }), "utf8");
+        const logs = [];
+        const events = [];
+        await execute({
+            runId: "run-auth-precedence",
+            agent: {
+                id: "agent-1",
+                companyId: "company-1",
+                name: "CodexCoder",
+                adapterType: "codex_local",
+                adapterConfig: { engine: "cli" },
+            },
+            runtime: {
+                sessionId: null,
+                sessionParams: null,
+                sessionDisplayId: null,
+                taskKey: null,
+            },
+            config: {
+                engine: "cli",
+                command: "codex",
+                cwd: workspaceDir,
+                env: { CODEX_HOME: hostCodexHome },
+            },
+            context: {},
+            executionTarget: {
+                kind: "remote",
+                transport: "sandbox",
+                providerKey: "fixture",
+                remoteCwd: "/workspace",
+                runner: { execute: vi.fn() },
+            },
+            onLog: async (stream, chunk) => {
+                logs.push({ stream, chunk });
+            },
+            onEvent: async (event) => {
+                events.push(event);
+            },
+        });
+        // The home asset now ships a curated *staged* allowlist dir (not the raw
+        // host CODEX_HOME) and carries no `exclude` denylist.
+        const runtimeCall = prepareAdapterExecutionTargetRuntime.mock.calls[0]?.[0];
+        const homeAsset = runtimeCall.assets.find((asset) => asset.key === "home");
+        expect(homeAsset).toBeDefined();
+        expect(homeAsset?.localDir).not.toBe(hostCodexHome);
+        expect(homeAsset?.localDir).toContain("paperclip-codex-home-sync");
+        expect(homeAsset?.exclude).toBeUndefined();
+        expect(runAdapterExecutionTargetShellCommand).toHaveBeenCalledWith("run-auth-precedence", expect.objectContaining({ kind: "remote", transport: "sandbox", remoteCwd: "/sandbox/workspace" }), CODEX_SANDBOX_AUTH_EXISTS_COMMAND, expect.objectContaining({ env: {}, timeoutSec: 5 }));
+        expect(logs).toContainEqual({
+            stream: "stderr",
+            chunk: CODEX_SANDBOX_AUTH_PRECEDENCE_WARNING_LOG_LINE,
+        });
+        expect(events).toContainEqual({
+            eventType: "codex.auth_precedence_warning",
+            stream: "system",
+            level: "warn",
+            message: CODEX_SANDBOX_AUTH_PRECEDENCE_WARNING,
+            payload: {
+                configuredApiKey: false,
+                hostAuthJson: true,
+                sandboxAuthJson: true,
+                winner: "host_auth_json",
+                sandboxLoginShadowed: true,
+            },
+        });
+        expect(runAdapterExecutionTargetProcess).toHaveBeenCalledOnce();
+    });
+});
+//# sourceMappingURL=execute.auth-precedence.test.js.map

package/dist/server/execute.auth-precedence.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.auth-precedence.test.js","sourceRoot":"","sources":["../../src/server/execute.auth-precedence.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,8CAA8C,GAC/C,MAAM,sBAAsB,CAAC;AAE9B,MAAM,EACJ,6CAA6C,EAC7C,mDAAmD,EACnD,oCAAoC,EACpC,2CAA2C,EAC3C,gCAAgC,EAChC,qCAAqC,EACrC,0CAA0C,GAC3C,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpB,6CAA6C,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;IAC3E,mDAAmD,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;IACjF,oCAAoC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE;QACjF,kBAAkB,EAAE,oBAAoB;QACxC,cAAc,EAAE,6BAA6B;QAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,wCAAwC,EAAE;QAC7D,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;KAC/C,CAAC,CAAC;IACH,2CAA2C,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC;IAChF,gCAAgC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACnD,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,GAAG;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IACH,qCAAqC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACxD,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,IAAI;QACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IACH,0CAA0C,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;CACpE,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAClC,0DAA0D,CAC3D,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,6CAA6C;QAC7C,mDAAmD;QACnD,oCAAoC;QACpC,2CAA2C;QAC3C,gCAAgC;QAChC,qCAAqC;QACrC,0CAA0C;KAC3C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAC;QAC1F,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,EACpD,MAAM,CACP,CAAC;QAEF,MAAM,IAAI,GAA0D,EAAE,CAAC;QACvE,MAAM,MAAM,GAAsG,EAAE,CAAC;QAErH,MAAM,OAAO,CAAC;YACZ,KAAK,EAAE,qBAAqB;YAC5B,KAAK,EAAE;gBACL,EAAE,EAAE,SAAS;gBACb,SAAS,EAAE,WAAW;gBACtB,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,aAAa;gBAC1B,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;aACjC;YACD,OAAO,EAAE;gBACP,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,IAAI;aACd;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,OAAO;gBAChB,GAAG,EAAE,YAAY;gBACjB,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE;aACnC;YACD,OAAO,EAAE,EAAE;YACX,eAAe,EAAE;gBACf,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,SAAS;gBACpB,WAAW,EAAE,SAAS;gBACtB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;aAC7B;YACD,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;gBAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;SACF,CAAC,CAAC;QAEH,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,WAAW,GAAI,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,EAAE,CAAC,CAAC,CAExF,CAAC;QACF,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,CAAC,qCAAqC,CAAC,CAAC,oBAAoB,CAChE,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,EAClG,iCAAiC,EACjC,MAAM,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CACpD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC;YAC1B,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,8CAA8C;SACtD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC;YAC5B,SAAS,EAAE,+BAA+B;YAC1C,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,qCAAqC;YAC9C,OAAO,EAAE;gBACP,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,IAAI;gBAClB,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,gBAAgB;gBACxB,oBAAoB,EAAE,IAAI;aAC3B;SACF,CAAC,CAAC;QACH,MAAM,CAAC,gCAAgC,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/execute.auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execute.auth.test.d.ts.map

package/dist/server/execute.auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.auth.test.d.ts","sourceRoot":"","sources":["../../src/server/execute.auth.test.ts"],"names":[],"mappings":""}