@tickernelz/paperclip-pro-adapter-codex-local 2026.925.0

package/dist/server/execute.auth.test.js

@@ -0,0 +1,197 @@
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, describe, expect, it, vi } from "vitest";
+const mockRunTargetShellCommand = vi.hoisted(() => vi.fn());
+vi.mock("@tickernelz/paperclip-pro-adapter-utils/execution-target", async (importOriginal) => ({
+    ...(await importOriginal()),
+    runAdapterExecutionTargetShellCommand: mockRunTargetShellCommand,
+}));
+import { assertCodexCredentialsLaunchable, execute } from "./execute.js";
+describe("codex managed-home auth fail-fast", () => {
+    const cleanupDirs = [];
+    afterEach(async () => {
+        vi.unstubAllEnvs();
+        while (cleanupDirs.length > 0) {
+            const dir = cleanupDirs.pop();
+            if (!dir)
+                continue;
+            await fs.rm(dir, { recursive: true, force: true }).catch(() => undefined);
+        }
+    });
+    it("fails fast when a managed CODEX_HOME has no auth.json and OPENAI_API_KEY is empty", async () => {
+        const root = await fs.mkdtemp(path.join(os.tmpdir(), "paperclip-codex-failfast-"));
+        cleanupDirs.push(root);
+        const paperclipHome = path.join(root, "paperclip-home");
+        const emptySharedHome = path.join(root, "shared-codex-home");
+        const workspaceDir = path.join(root, "workspace");
+        // A managed per-agent home with no credentials seeded into it.
+        const managedAgentHome = path.join(paperclipHome, "instances", "default", "companies", "company-1", "agents", "agent-1", "codex-home");
+        await fs.mkdir(emptySharedHome, { recursive: true });
+        await fs.mkdir(workspaceDir, { recursive: true });
+        // Source home has no auth.json, so nothing is symlinked into the managed home.
+        vi.stubEnv("PAPERCLIP_HOME", paperclipHome);
+        vi.stubEnv("PAPERCLIP_INSTANCE_ID", "default");
+        vi.stubEnv("CODEX_HOME", emptySharedHome);
+        await expect(execute({
+            runId: "run-failfast",
+            agent: {
+                id: "agent-1",
+                companyId: "company-1",
+                name: "CodexCoder",
+                adapterType: "codex_local",
+                adapterConfig: { engine: "cli" },
+            },
+            runtime: {
+                sessionId: null,
+                sessionParams: null,
+                sessionDisplayId: null,
+                taskKey: null,
+            },
+            config: {
+                engine: "cli",
+                command: "codex",
+                cwd: workspaceDir,
+                env: {
+                    CODEX_HOME: managedAgentHome,
+                    OPENAI_API_KEY: "",
+                },
+            },
+            context: {},
+            onLog: async () => { },
+        })).rejects.toThrow(/no Codex credentials provisioned for managed home/);
+        // The managed home must not have been left with a usable auth.json.
+        await expect(fs.access(path.join(managedAgentHome, "auth.json"))).rejects.toBeTruthy();
+    });
+});
+describe("codex sandbox-target credential gate", () => {
+    const cleanupDirs = [];
+    afterEach(async () => {
+        mockRunTargetShellCommand.mockReset();
+        while (cleanupDirs.length > 0) {
+            const dir = cleanupDirs.pop();
+            if (!dir)
+                continue;
+            await fs.rm(dir, { recursive: true, force: true }).catch(() => undefined);
+        }
+    });
+    async function makeCredentiallessManagedHome() {
+        const root = await fs.mkdtemp(path.join(os.tmpdir(), "paperclip-codex-sandbox-gate-"));
+        cleanupDirs.push(root);
+        const paperclipHome = path.join(root, "paperclip-home");
+        const emptySharedHome = path.join(root, "shared-codex-home");
+        await fs.mkdir(emptySharedHome, { recursive: true });
+        const managedAgentHome = path.join(paperclipHome, "instances", "default", "companies", "company-1", "agents", "agent-1", "codex-home");
+        const env = {
+            PAPERCLIP_HOME: paperclipHome,
+            PAPERCLIP_INSTANCE_ID: "default",
+            CODEX_HOME: emptySharedHome,
+        };
+        return { env, managedAgentHome };
+    }
+    const sandboxTarget = {
+        kind: "remote",
+        transport: "sandbox",
+    };
+    it("launches against a sandbox that carries its own Codex login", async () => {
+        const { env, managedAgentHome } = await makeCredentiallessManagedHome();
+        mockRunTargetShellCommand.mockResolvedValue({ exitCode: 0, timedOut: false, stdout: "", stderr: "" });
+        const logs = [];
+        await expect(assertCodexCredentialsLaunchable({
+            runId: "run-sandbox-login",
+            companyId: "company-1",
+            configuredCodexHome: managedAgentHome,
+            configuredApiKey: null,
+            effectiveCodexHome: managedAgentHome,
+            target: sandboxTarget,
+            cwd: "/workspace",
+            env,
+            onLog: async (_stream, line) => {
+                logs.push(line);
+            },
+        })).resolves.toBeUndefined();
+        expect(mockRunTargetShellCommand).toHaveBeenCalledWith("run-sandbox-login", sandboxTarget, 'test -f "$HOME/.codex/auth.json"', expect.objectContaining({ cwd: "/workspace" }));
+        expect(logs.join("")).toContain("sandbox's own Codex login");
+    });
+    it("fails a sandbox run when neither the host nor the sandbox has credentials", async () => {
+        const { env, managedAgentHome } = await makeCredentiallessManagedHome();
+        mockRunTargetShellCommand.mockResolvedValue({ exitCode: 1, timedOut: false, stdout: "", stderr: "" });
+        await expect(assertCodexCredentialsLaunchable({
+            runId: "run-sandbox-nologin",
+            companyId: "company-1",
+            configuredCodexHome: managedAgentHome,
+            configuredApiKey: null,
+            effectiveCodexHome: managedAgentHome,
+            target: sandboxTarget,
+            cwd: "/workspace",
+            env,
+            onLog: async () => { },
+        })).rejects.toThrow(/the sandbox has no Codex login/);
+    });
+    it("proceeds with a warning when the sandbox login probe fails operationally", async () => {
+        const { env, managedAgentHome } = await makeCredentiallessManagedHome();
+        mockRunTargetShellCommand.mockRejectedValue(new Error("transport lost"));
+        const stderrLines = [];
+        await expect(assertCodexCredentialsLaunchable({
+            runId: "run-probe-error",
+            companyId: "company-1",
+            configuredCodexHome: managedAgentHome,
+            configuredApiKey: null,
+            effectiveCodexHome: managedAgentHome,
+            target: sandboxTarget,
+            cwd: "/workspace",
+            env,
+            onLog: async (stream, line) => {
+                if (stream === "stderr")
+                    stderrLines.push(line);
+            },
+        })).resolves.toBeUndefined();
+        expect(stderrLines.join("")).toContain("Could not verify the sandbox's Codex login");
+    });
+    it("treats a probe timeout as unverifiable, not as a missing credential", async () => {
+        const { env, managedAgentHome } = await makeCredentiallessManagedHome();
+        mockRunTargetShellCommand.mockResolvedValue({ exitCode: 0, timedOut: true, stdout: "", stderr: "" });
+        await expect(assertCodexCredentialsLaunchable({
+            runId: "run-probe-timeout",
+            companyId: "company-1",
+            configuredCodexHome: managedAgentHome,
+            configuredApiKey: null,
+            effectiveCodexHome: managedAgentHome,
+            target: sandboxTarget,
+            cwd: "/workspace",
+            env,
+            onLog: async () => { },
+        })).resolves.toBeUndefined();
+    });
+    it("keeps the strict host requirement for non-sandbox targets", async () => {
+        const { env, managedAgentHome } = await makeCredentiallessManagedHome();
+        await expect(assertCodexCredentialsLaunchable({
+            runId: "run-local",
+            companyId: "company-1",
+            configuredCodexHome: managedAgentHome,
+            configuredApiKey: null,
+            effectiveCodexHome: managedAgentHome,
+            target: undefined,
+            cwd: "/workspace",
+            env,
+            onLog: async () => { },
+        })).rejects.toThrow(/Sign in to Codex on the host/);
+        expect(mockRunTargetShellCommand).not.toHaveBeenCalled();
+    });
+    it("does not gate at all when a per-agent OPENAI_API_KEY is configured", async () => {
+        const { env, managedAgentHome } = await makeCredentiallessManagedHome();
+        await expect(assertCodexCredentialsLaunchable({
+            runId: "run-api-key",
+            companyId: "company-1",
+            configuredCodexHome: managedAgentHome,
+            configuredApiKey: "sk-agent",
+            effectiveCodexHome: managedAgentHome,
+            target: sandboxTarget,
+            cwd: "/workspace",
+            env,
+            onLog: async () => { },
+        })).resolves.toBeUndefined();
+        expect(mockRunTargetShellCommand).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=execute.auth.test.js.map

package/dist/server/execute.auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.auth.test.js","sourceRoot":"","sources":["../../src/server/execute.auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,MAAM,yBAAyB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAE5D,EAAE,CAAC,IAAI,CAAC,0DAA0D,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC7F,GAAG,CAAC,MAAM,cAAc,EAA2B,CAAC;IACpD,qCAAqC,EAAE,yBAAyB;CACjE,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,gCAAgC,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEzE,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACnF,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAClD,+DAA+D;QAC/D,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,aAAa,EACb,WAAW,EACX,SAAS,EACT,WAAW,EACX,WAAW,EACX,QAAQ,EACR,SAAS,EACT,YAAY,CACb,CAAC;QACF,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAElD,+EAA+E;QAC/E,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAC5C,EAAE,CAAC,OAAO,CAAC,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAC/C,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAE1C,MAAM,MAAM,CACV,OAAO,CAAC;YACN,KAAK,EAAE,cAAc;YACrB,KAAK,EAAE;gBACL,EAAE,EAAE,SAAS;gBACb,SAAS,EAAE,WAAW;gBACtB,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,aAAa;gBAC1B,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;aACjC;YACD,OAAO,EAAE;gBACP,SAAS,EAAE,IAAI;gBACf,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,IAAI;aACd;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,OAAO;gBAChB,GAAG,EAAE,YAAY;gBACjB,GAAG,EAAE;oBACH,UAAU,EAAE,gBAAgB;oBAC5B,cAAc,EAAE,EAAE;iBACnB;aACF;YACD,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACtB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;QAEvE,oEAAoE;QACpE,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,yBAAyB,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,6BAA6B;QAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC;QACvF,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,aAAa,EACb,WAAW,EACX,SAAS,EACT,WAAW,EACX,WAAW,EACX,QAAQ,EACR,SAAS,EACT,YAAY,CACb,CAAC;QACF,MAAM,GAAG,GAAG;YACV,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,SAAS;YAChC,UAAU,EAAE,eAAe;SACP,CAAC;QACvB,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,SAAS;KAC0D,CAAC;IAEjF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC;QACxE,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACtG,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,MAAM,MAAM,CACV,gCAAgC,CAAC;YAC/B,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,gBAAgB;YACrC,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,gBAAgB;YACpC,MAAM,EAAE,aAAa;YACrB,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;SACF,CAAC,CACH,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAE3B,MAAM,CAAC,yBAAyB,CAAC,CAAC,oBAAoB,CACpD,mBAAmB,EACnB,aAAa,EACb,kCAAkC,EAClC,MAAM,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAC/C,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC;QACxE,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtG,MAAM,MAAM,CACV,gCAAgC,CAAC;YAC/B,KAAK,EAAE,qBAAqB;YAC5B,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,gBAAgB;YACrC,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,gBAAgB;YACpC,MAAM,EAAE,aAAa;YACrB,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACtB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC;QACxE,yBAAyB,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACzE,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,MAAM,MAAM,CACV,gCAAgC,CAAC;YAC/B,KAAK,EAAE,iBAAiB;YACxB,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,gBAAgB;YACrC,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,gBAAgB;YACpC,MAAM,EAAE,aAAa;YACrB,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;gBAC5B,IAAI,MAAM,KAAK,QAAQ;oBAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;SACF,CAAC,CACH,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC;QACxE,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAErG,MAAM,MAAM,CACV,gCAAgC,CAAC;YAC/B,KAAK,EAAE,mBAAmB;YAC1B,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,gBAAgB;YACrC,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,gBAAgB;YACpC,MAAM,EAAE,aAAa;YACrB,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACtB,CAAC,CACH,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC;QAExE,MAAM,MAAM,CACV,gCAAgC,CAAC;YAC/B,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,gBAAgB;YACrC,gBAAgB,EAAE,IAAI;YACtB,kBAAkB,EAAE,gBAAgB;YACpC,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACtB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAClD,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,6BAA6B,EAAE,CAAC;QAExE,MAAM,MAAM,CACV,gCAAgC,CAAC;YAC/B,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,gBAAgB;YACrC,gBAAgB,EAAE,UAAU;YAC5B,kBAAkB,EAAE,gBAAgB;YACpC,MAAM,EAAE,aAAa;YACrB,GAAG,EAAE,YAAY;YACjB,GAAG;YACH,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACtB,CAAC,CACH,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/execute.d.ts

@@ -0,0 +1,40 @@
+import { type AdapterExecutionContext, type AdapterExecutionResult } from "@tickernelz/paperclip-pro-adapter-utils";
+import { readAdapterExecutionTarget } from "@tickernelz/paperclip-pro-adapter-utils/execution-target";
+export declare function firstMeaningfulStderrLine(text: string): string;
+type EnsureCodexSkillsInjectedOptions = {
+    skillsHome?: string;
+    skillsEntries?: Array<{
+        key: string;
+        runtimeName: string;
+        source: string;
+    }>;
+    desiredSkillNames?: string[];
+    linkSkill?: (source: string, target: string) => Promise<void>;
+};
+type ResolvedExecutionTarget = ReturnType<typeof readAdapterExecutionTarget>;
+type MaybeResolvedExecutionTarget = ResolvedExecutionTarget | undefined;
+/**
+ * Execute-time credential gate. A managed home with no host-side credentials
+ * is still launchable when the run targets a sandbox whose image carries its
+ * own Codex login (`~/.codex/auth.json` baked in during image setup): the
+ * inbound auth merge ships the credential-less host home and keeps the
+ * sandbox's credential, so the host is not a required credential source —
+ * on managed cloud hosts a local Codex login never exists at all. The
+ * sandbox is probed before the run is declared unlaunchable; non-sandbox
+ * targets keep the strict host-side requirement.
+ */
+export declare function assertCodexCredentialsLaunchable(input: {
+    runId: string;
+    companyId: string;
+    configuredCodexHome: string | null;
+    configuredApiKey: string | null;
+    effectiveCodexHome: string;
+    target: MaybeResolvedExecutionTarget;
+    cwd: string;
+    env?: NodeJS.ProcessEnv;
+    onLog: AdapterExecutionContext["onLog"];
+}): Promise<void>;
+export declare function ensureCodexSkillsInjected(onLog: AdapterExecutionContext["onLog"], options?: EnsureCodexSkillsInjectedOptions): Promise<void>;
+export declare function execute(ctx: AdapterExecutionContext): Promise<AdapterExecutionResult>;
+export {};
+//# sourceMappingURL=execute.d.ts.map

package/dist/server/execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../src/server/execute.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+B,KAAK,uBAAuB,EAAE,KAAK,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AASjJ,OAAO,EAaL,0BAA0B,EAM3B,MAAM,0DAA0D,CAAC;AA0HlE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM9D;AAgHD,KAAK,gCAAgC,GAAG;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D,CAAC;AA6CF,KAAK,uBAAuB,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC7E,KAAK,4BAA4B,GAAG,uBAAuB,GAAG,SAAS,CAAC;AA8CxE;;;;;;;;;GASG;AACH,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,4BAA4B,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDhB;AA8DD,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,uBAAuB,CAAC,OAAO,CAAC,EACvC,OAAO,GAAE,gCAAqC,iBAgE/C;AAED,wBAAsB,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAwiC3F"}