@volter/supercode-orchestrator 0.5.207 → 0.5.208

package/board/codex-pane-inputs.mjs

@@ -0,0 +1,44 @@
+// Only declared profile inputs cross machines. A Codex home, environment,
+// configuration, login, memory and rollout are never copied from the board.
+import { existsSync, readFileSync, readdirSync, realpathSync, statSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+import { hermesModel } from '../worker-route.mjs';
+import { skillSources } from '../hermes-home.mjs';
+
+export function codexPaneInputs(profile, worker, vault) {
+  if (worker?.harness !== 'codex' || hermesModel(profile)?.provider !== 'openai-codex' || worker.home === 'user')
+    throw new Error('remote headful Codex requires the login-free openai-codex profile route');
+  if (Object.hasOwn(worker.env ?? {}, 'CODEX_HOME'))
+    throw new Error('remote headful Codex owns its destination home; worker.env.CODEX_HOME cannot override it');
+  const forward = vault.get('HERMES_CODEX_BASE_URL') ?? process.env.HERMES_CODEX_BASE_URL;
+  if (!forward) throw new Error('remote headful Codex requires HERMES_CODEX_BASE_URL; no pane was launched');
+  const files = [];
+  let bytes = 0;
+  const add = (path, content, mode = 0o600) => {
+    bytes += content.length;
+    if (bytes > 8 * 1024 * 1024 || files.length >= 4096) throw new Error('the remote Codex profile inputs exceed their transfer bound');
+    files.push({ path, base64: content.toString('base64'), mode: mode & 0o777 });
+  };
+  add('AGENTS.md', existsSync(join(profile.dir, 'AGENTS.md')) ? readFileSync(join(profile.dir, 'AGENTS.md')) : Buffer.alloc(0));
+  for (const [name, source] of skillSources(profile.dir)) {
+    const root = realpathSync(source);
+    const walk = (folder, path, ancestors) => {
+      const real = realpathSync(folder), part = relative(root, real);
+      if (part === '..' || part.startsWith(`..${sep}`)) throw new Error(`skill ${name} links outside its declared directory; remote Codex inputs were refused`);
+      if (ancestors.has(real)) throw new Error(`skill ${name} has a directory cycle`);
+      const next = new Set([...ancestors, real]);
+      for (const entry of readdirSync(folder).sort()) {
+        const from = join(folder, entry), into = `${path}/${entry}`, selected = realpathSync(from), rel = relative(root, selected);
+        if (rel === '..' || rel.startsWith(`..${sep}`)) throw new Error(`skill ${name} links outside its declared directory`);
+        const info = statSync(from);
+        if (info.isDirectory()) walk(from, into, next);
+        else if (info.isFile()) {
+          if (info.size > 8 * 1024 * 1024 - bytes) throw new Error(`skill ${name} exceeds the remote profile byte bound`);
+          add(into, readFileSync(from), info.mode);
+        } else throw new Error(`skill ${name} has an unsupported input file`);
+      }
+    };
+    walk(source, `skills/${name}`, new Set());
+  }
+  return { forward, files };
+}