@wjarka/cezarion 0.10.0-pr30.54

package/dist/core/codex-app-server-transport.d.ts

@@ -0,0 +1,35 @@
+import { type ChildProcessWithoutNullStreams } from 'node:child_process';
+export interface CodexAppServerMessage {
+    id?: number | string;
+    method?: string;
+    params?: Record<string, unknown>;
+    result?: unknown;
+    error?: unknown;
+}
+export declare function resolveCodexExecutable(override?: string): string;
+export declare function buildCodexAppServerEnv(extraEnv?: Record<string, string>): NodeJS.ProcessEnv;
+/** Spawn the authenticated host's app-server with the same least-privilege env used by runs. */
+export declare function spawnCodexAppServer(bin: string, cwd: string, extraEnv?: Record<string, string>): ChildProcessWithoutNullStreams;
+/** Minimal newline-JSON request correlator shared by runs and short-lived discovery. */
+export declare class CodexAppServerRpc {
+    readonly child: ChildProcessWithoutNullStreams;
+    private nextId;
+    private readonly pending;
+    constructor(child: ChildProcessWithoutNullStreams);
+    allocateId(): number;
+    request(method: string, params: unknown): Promise<Record<string, unknown>>;
+    notify(method: string, params: unknown): void;
+    respond(message: unknown): void;
+    dispatchResponse(message: CodexAppServerMessage): boolean;
+    initialize(): Promise<void>;
+    rejectPending(message?: string): void;
+    private write;
+}
+/**
+ * Close stdin, then escalate SIGTERM→SIGKILL for a server that ignores EOF.
+ * `onSignal` fires when the watchdog actually signals: the caller needs to
+ * know a non-zero exit was its own doing, not a codex failure (#703).
+ */
+export declare function endCodexAppServer(child: ChildProcessWithoutNullStreams, onTimers?: (term: NodeJS.Timeout, kill: NodeJS.Timeout | undefined) => void, onSignal?: () => void): void;
+export declare function waitForCodexAppServerExit(child: ChildProcessWithoutNullStreams): Promise<number | null>;
+export declare function codexSpawnError(error: unknown, bin: string): Error;

package/dist/core/codex-app-server-transport.js

@@ -0,0 +1,150 @@
+import { spawn as nodeSpawn } from 'node:child_process';
+import { trackChildExit } from './agent-runner.js';
+import { buildChildEnv } from './agent-env.js';
+import { EOF_KILL_GRACE_MS, EOF_TERM_GRACE_MS, KILL_GRACE_MS } from './claude-cli-runner.js';
+export function resolveCodexExecutable(override) {
+    return override ?? process.env.CEZ_CODEX_BIN ?? 'codex';
+}
+export function buildCodexAppServerEnv(extraEnv) {
+    return buildChildEnv({ backend: 'codex', extraEnv });
+}
+/** Spawn the authenticated host's app-server with the same least-privilege env used by runs. */
+export function spawnCodexAppServer(bin, cwd, extraEnv) {
+    try {
+        return nodeSpawn(bin, ['app-server'], {
+            cwd,
+            env: buildCodexAppServerEnv(extraEnv),
+        });
+    }
+    catch (error) {
+        throw codexSpawnError(error, bin);
+    }
+}
+/** Minimal newline-JSON request correlator shared by runs and short-lived discovery. */
+export class CodexAppServerRpc {
+    child;
+    nextId = 1;
+    pending = new Map();
+    constructor(child) {
+        this.child = child;
+    }
+    allocateId() {
+        return this.nextId++;
+    }
+    request(method, params) {
+        const id = this.allocateId();
+        const promise = new Promise((resolve, reject) => {
+            this.pending.set(id, { resolve, reject });
+        });
+        this.write({ id, method, params });
+        return promise;
+    }
+    notify(method, params) {
+        this.write({ method, params });
+    }
+    respond(message) {
+        this.write(message);
+    }
+    dispatchResponse(message) {
+        if (typeof message.id !== 'number' || (message.result === undefined && message.error === undefined))
+            return false;
+        const pending = this.pending.get(message.id);
+        if (!pending)
+            return false;
+        this.pending.delete(message.id);
+        if (message.error)
+            pending.reject(new Error(codexErrorText(message.error)));
+        else
+            pending.resolve(message.result ?? {});
+        return true;
+    }
+    async initialize() {
+        await this.request('initialize', {
+            clientInfo: { name: 'cezar', title: 'cezar', version: '0.1.0' },
+            capabilities: { experimentalApi: true },
+        });
+        this.notify('initialized', {});
+    }
+    rejectPending(message = 'codex app-server exited') {
+        for (const request of this.pending.values())
+            request.reject(new Error(message));
+        this.pending.clear();
+    }
+    write(message) {
+        if (this.child.stdin.destroyed)
+            return;
+        try {
+            this.child.stdin.write(`${JSON.stringify(message)}\n`);
+        }
+        catch {
+            // The read/exit path owns settlement when stdin disappears.
+        }
+    }
+}
+/**
+ * Close stdin, then escalate SIGTERM→SIGKILL for a server that ignores EOF.
+ * `onSignal` fires when the watchdog actually signals: the caller needs to
+ * know a non-zero exit was its own doing, not a codex failure (#703).
+ */
+export function endCodexAppServer(child, onTimers, onSignal) {
+    try {
+        child.stdin.end();
+    }
+    catch {
+        // already gone
+    }
+    // Real termination, not `child.killed` — the latter is set by the SIGTERM
+    // this very watchdog sends, which would then suppress its own SIGKILL for an
+    // app-server that handles the signal instead of dying from it (#844).
+    const hasExited = trackChildExit(child);
+    let killTimer;
+    const termTimer = setTimeout(() => {
+        if (!hasExited()) {
+            onSignal?.();
+            child.kill('SIGTERM');
+        }
+        killTimer = setTimeout(() => {
+            if (!hasExited()) {
+                onSignal?.();
+                child.kill('SIGKILL');
+            }
+        }, EOF_KILL_GRACE_MS);
+        killTimer.unref?.();
+        onTimers?.(termTimer, killTimer);
+    }, EOF_TERM_GRACE_MS);
+    termTimer.unref?.();
+    onTimers?.(termTimer, killTimer);
+}
+export function waitForCodexAppServerExit(child) {
+    if (child.exitCode != null)
+        return Promise.resolve(child.exitCode);
+    return new Promise((resolve) => {
+        let done = false;
+        const finish = (code) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(safety);
+            resolve(code);
+        };
+        child.once('close', (code) => finish(code));
+        child.once('exit', (code) => finish(code));
+        child.once('error', () => finish(child.exitCode ?? null));
+        const safety = setTimeout(() => finish(child.exitCode ?? null), EOF_TERM_GRACE_MS + EOF_KILL_GRACE_MS + KILL_GRACE_MS + 5_000);
+        safety.unref?.();
+    });
+}
+export function codexSpawnError(error, bin) {
+    const code = error?.code;
+    if (code === 'ENOENT') {
+        return new Error(`\`${bin}\` not found on PATH — install the Codex CLI (npm i -g @openai/codex) and run \`codex\` once to log in`);
+    }
+    return error instanceof Error ? error : new Error(String(error));
+}
+function codexErrorText(error) {
+    if (error && typeof error === 'object' && 'message' in error) {
+        return String(error.message);
+    }
+    return typeof error === 'string' ? error : JSON.stringify(error);
+}
+//# sourceMappingURL=codex-app-server-transport.js.map

package/dist/core/codex-app-server-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-app-server-transport.js","sourceRoot":"","sources":["../../src/core/codex-app-server-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAuC,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAe7F,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACtD,OAAO,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAiC;IACtE,OAAO,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,GAAW,EACX,QAAiC;IAEjC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE;YACpC,GAAG;YACH,GAAG,EAAE,sBAAsB,CAAC,QAAQ,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,OAAO,iBAAiB;IAIP,KAAK;IAHlB,MAAM,GAAG,CAAC,CAAC;IACF,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE7D,YAAqB,KAAqC;qBAArC,KAAK;IAAmC,CAAC;IAE9D,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,MAAe;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACvE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,MAAe;QACpC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,OAAgB;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,gBAAgB,CAAC,OAA8B;QAC7C,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAClH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;YACvE,OAAO,CAAC,OAAO,CAAE,OAAO,CAAC,MAAkC,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;YAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YAC/D,YAAY,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,aAAa,CAAC,OAAO,GAAG,yBAAyB;QAC/C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,OAAgB;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS;YAAE,OAAO;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAqC,EACrC,QAA2E,EAC3E,QAAqB;IAErB,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,0EAA0E;IAC1E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,SAAqC,CAAC;IAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;QAChC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,QAAQ,EAAE,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QACD,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,QAAQ,EAAE,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IACpB,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAqC;IAC7E,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE;YACrC,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,UAAU,CACvB,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,EACpC,iBAAiB,GAAG,iBAAiB,GAAG,aAAa,GAAG,KAAK,CAC9D,CAAC;QACF,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,GAAW;IACzD,MAAM,IAAI,GAAI,KAA2C,EAAE,IAAI,CAAC;IAChE,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,KAAK,CACd,KAAK,GAAG,wGAAwG,CACjH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAE,KAA8B,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC"}

package/dist/core/codex-model-catalog.d.ts

@@ -0,0 +1,10 @@
+import type { ChildProcessWithoutNullStreams } from 'node:child_process';
+import type { ModelOption } from './runner-model-catalog.ts';
+export interface CodexModelDiscoveryOptions {
+    cwd: string;
+    bin?: string;
+    timeoutMs?: number;
+    spawn?: (bin: string, cwd: string) => ChildProcessWithoutNullStreams;
+}
+/** Discover the visible catalog exposed by the authenticated host Codex CLI. */
+export declare function discoverCodexModels(options: CodexModelDiscoveryOptions): Promise<ModelOption[]>;

package/dist/core/codex-model-catalog.js

@@ -0,0 +1,110 @@
+import { z } from 'zod';
+import { readNdjson } from './ndjson.js';
+import { CodexAppServerRpc, endCodexAppServer, resolveCodexExecutable, spawnCodexAppServer, } from './codex-app-server-transport.js';
+const modelSchema = z.object({
+    model: z.string(),
+    displayName: z.string().optional(),
+    description: z.string().optional(),
+    hidden: z.boolean().optional(),
+}).passthrough();
+const pageSchema = z.object({
+    data: z.array(modelSchema),
+    nextCursor: z.string().nullable().optional(),
+}).passthrough();
+const DEFAULT_DISCOVERY_TIMEOUT_MS = 5_000;
+const MAX_MODEL_PAGES = 25;
+const MAX_MODELS = 500;
+/** Discover the visible catalog exposed by the authenticated host Codex CLI. */
+export async function discoverCodexModels(options) {
+    const child = (options.spawn ?? spawnCodexAppServer)(resolveCodexExecutable(options.bin), options.cwd);
+    const rpc = new CodexAppServerRpc(child);
+    let readerError;
+    const reader = (async () => {
+        try {
+            for await (const line of readNdjson(child.stdout)) {
+                let message;
+                try {
+                    message = JSON.parse(line);
+                }
+                catch {
+                    throw new Error('Codex model discovery returned malformed NDJSON');
+                }
+                rpc.dispatchResponse(message);
+            }
+        }
+        catch (error) {
+            readerError = error instanceof Error ? error : new Error(String(error));
+            rpc.rejectPending(readerError.message);
+        }
+    })();
+    const exited = new Promise((_, reject) => {
+        const fail = (detail) => {
+            const error = new Error(detail);
+            rpc.rejectPending(error.message);
+            reject(error);
+        };
+        child.once('error', () => fail('Codex model discovery child failed'));
+        child.once('exit', (code) => fail(`Codex model discovery child exited (${code ?? 'unknown'})`));
+    });
+    const timeoutMs = options.timeoutMs ?? DEFAULT_DISCOVERY_TIMEOUT_MS;
+    let timeout;
+    const deadline = new Promise((_, reject) => {
+        timeout = setTimeout(() => {
+            const error = new Error('Codex model discovery timed out');
+            rpc.rejectPending(error.message);
+            reject(error);
+        }, timeoutMs);
+        timeout.unref?.();
+    });
+    try {
+        return await Promise.race([
+            discoverPages(rpc),
+            exited,
+            deadline,
+        ]);
+    }
+    finally {
+        if (timeout)
+            clearTimeout(timeout);
+        endCodexAppServer(child);
+        void reader.catch(() => undefined);
+        if (readerError)
+            rpc.rejectPending(readerError.message);
+    }
+}
+async function discoverPages(rpc) {
+    await rpc.initialize();
+    const models = [];
+    const ids = new Set();
+    const cursors = new Set();
+    let cursor = null;
+    for (let pageNumber = 0; pageNumber < MAX_MODEL_PAGES; pageNumber += 1) {
+        const raw = await rpc.request('model/list', { cursor, includeHidden: false });
+        const parsed = pageSchema.safeParse(raw);
+        if (!parsed.success)
+            throw new Error('Codex model discovery returned malformed model data');
+        for (const model of parsed.data.data) {
+            const id = model.model.trim();
+            if (!id || model.hidden || ids.has(id))
+                continue;
+            if (models.length >= MAX_MODELS)
+                throw new Error('Codex model discovery exceeded the size limit');
+            ids.add(id);
+            models.push({
+                id,
+                label: model.displayName?.trim() || id,
+                description: model.description ?? '',
+            });
+        }
+        const nextCursor = parsed.data.nextCursor ?? null;
+        if (nextCursor === null)
+            return models;
+        if (!nextCursor || cursors.has(nextCursor)) {
+            throw new Error('Codex model discovery returned a cursor loop');
+        }
+        cursors.add(nextCursor);
+        cursor = nextCursor;
+    }
+    throw new Error('Codex model discovery exceeded the page limit');
+}
+//# sourceMappingURL=codex-model-catalog.js.map

package/dist/core/codex-model-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-model-catalog.js","sourceRoot":"","sources":["../../src/core/codex-model-catalog.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,iCAAiC,CAAC;AAUzC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAC3C,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IAC3E,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAClD,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,EACnC,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,WAA8B,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,OAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACrE,CAAC;gBACD,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,uCAAuC,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,4BAA4B,CAAC;IACpE,IAAI,OAAmC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YACxB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC3D,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,aAAa,CAAC,GAAG,CAAC;YAClB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,WAAW;YAAE,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAsB;IACjD,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;IACvB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,MAAM,GAAkB,IAAI,CAAC;IAEjC,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,eAAe,EAAE,UAAU,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAE5F,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACjD,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAClG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC;gBACV,EAAE;gBACF,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE;gBACtC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;aACrC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QAClD,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QACvC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACnE,CAAC"}

package/dist/core/codex-ui-mapper.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Pure codex app-server JSON-RPC → protocol-v2 mapper. `mapCodexNotification`
+ * folds one parsed JSONL frame into `UiEvent`s plus the next mapper state;
+ * the runner calls it ALONGSIDE the v1 path (v1 events keep flowing
+ * unchanged).
+ *
+ * Contract: `.ai/analysis/cockpit-ui-redesign/agent-event-protocols.md` §3
+ * (wire format) and §7.1 "Codex (app-server)" (the mapping). Golden fixtures
+ * replaying wire-faithful frame sequences live in `__fixtures__/codex/`.
+ *
+ * Robustness rule: input is untrusted wire data — the mapper never throws;
+ * responses, server→client requests (handled by the session transport) and
+ * unknown methods map to zero events.
+ *
+ * State is explicit and treated as immutable: callers thread the returned
+ * `state` into the next call. Ids are deterministic — codex items and turns
+ * carry stable wire ids which are reused verbatim (`turn_<n>` is minted only
+ * when a turn frame arrives without one) — so replaying a stored transcript
+ * reproduces the exact event sequence.
+ *
+ * Status map (§7.1, kills v1's regex-on-status hack): `inProgress→running`,
+ * `completed→completed`, `failed→failed`, `declined→declined`.
+ */
+import type { TokenUsage, UiEvent } from './ui-events.ts';
+/** The two reasoning delta channels, accumulated separately — see
+ *  `CodexUiMapperState.reasonings`. */
+export interface ReasoningAccumulator {
+    /** `item/reasoning/textDelta` — the raw chain of thought. */
+    readonly text: string;
+    /** `item/reasoning/summaryDelta` + `summaryTextDelta` — the condensed summary. */
+    readonly summary: string;
+}
+interface CodexCollabTask {
+    readonly itemId: string;
+    readonly prompt?: string;
+    readonly model?: string;
+}
+export interface CodexUiMapperState {
+    /** True once `session.started` was emitted (thread/started notification or
+     *  the runner's `codexSessionStarted` after the thread/start result —
+     *  whichever lands first wins; the other is deduplicated). */
+    readonly sessionStarted: boolean;
+    /** Fallback counter for turn frames that arrive without a wire turn id. */
+    readonly turnSeq: number;
+    readonly currentTurnId: string | null;
+    /** Fresh `tokenUsage.last` received while the current turn is active.
+     * Consumed exactly once by its matching turn end; cumulative `total` is
+     * never used as a persisted per-turn delta. */
+    readonly pendingTurnUsage: TokenUsage | null;
+    /** Item ids already introduced — a delta for an unknown id synthesizes an
+     *  `item.started` first so consumers always have something to upsert. */
+    readonly knownItems: ReadonlySet<string>;
+    /** Accumulated `outputDelta` text per commandExecution item, attached to
+     *  the final snapshot when the wire `item/completed` carries no output. */
+    readonly outputs: ReadonlyMap<string, string>;
+    /** Accumulated reasoning deltas per reasoning item, attached to the final
+     *  snapshot when the wire `item/completed` carries no `content`. Deltas are
+     *  live-only (never persisted), so without this the reasoning text is
+     *  unrecoverable on replay and the row reads back empty (#528).
+     *
+     *  Kept PER CHANNEL: `item/reasoning/textDelta` streams the raw chain of
+     *  thought while `summaryDelta`/`summaryTextDelta` stream the condensed
+     *  summary, and codex emits both when raw reasoning is enabled. One shared
+     *  bucket would concatenate the two into `"<raw CoT><summary>"` and persist
+     *  that garble over the clean wire `summary`.
+     *
+     *  Turn-scoped, and reset by `turn/started`: an interrupted item is never
+     *  completed, so without the reset its text would both leak into a later
+     *  turn that reuses the id and pin whole chains of thought in memory. */
+    readonly reasonings: ReadonlyMap<string, ReasoningAccumulator>;
+    /** True once `turn/plan/updated` has spoken IN THE CURRENT TURN. Both that
+     *  notification and the `plan`/`todoList` item arm write `plan.updated`, so
+     *  without a precedence rule the last frame wins and a prose plan item would
+     *  flatten the real checklist into one entry. The authoritative channel
+     *  latches this and the item arm stands down (see `mapItemLifecycle`).
+     *
+     *  Turn-scoped, and reset by `turn/started`: a plan belongs to a turn (hence
+     *  `turn/plan/updated`), so a latch that outlived its turn would gag the item
+     *  arm for the rest of the session and strand the dock on a stale checklist. */
+    readonly planFromNotification: boolean;
+    /** The open review-mode item's id, or `null` when review mode is not active.
+     *
+     *  Codex announces review mode as two disjoint frames (`enteredReviewMode`,
+     *  `exitedReviewMode`) with different ids. Mapped literally that is two
+     *  childless `task` items — which the Agents dock would read as two separate
+     *  sub-agents that each did nothing (spec
+     *  `.ai/specs/2026-07-20-grouped-subagent-display.md` §"Codex-mapper fix",
+     *  #474). This latch folds the pair into ONE item with a running→completed
+     *  lifecycle: the entered frame opens it, the exited frame completes that
+     *  same id. An unpaired exit falls back to its own item, so a stream that
+     *  starts mid-review still renders. */
+    readonly reviewItemId: string | null;
+    /** Child thread → stable task item created by a Codex collaboration spawn.
+     * Installed 0.144.6 uses `collabAgentToolCall`; newer protocol revisions use
+     * `collabToolCall`. Both carry the receiver ids used for child attribution. */
+    readonly collabTasks: ReadonlyMap<string, CodexCollabTask>;
+}
+export interface CodexUiMapping {
+    events: UiEvent[];
+    state: CodexUiMapperState;
+}
+export declare function createCodexUiState(): CodexUiMapperState;
+/**
+ * Codex confirms the thread via the `thread/start`/`thread/resume` RESULT
+ * (a response frame the mapper cannot attribute), so the runner calls this
+ * once the thread id is known. Deduplicated against the `thread/started`
+ * notification — whichever arrives first emits `session.started`.
+ */
+export declare function codexSessionStarted(threadId: string, state: CodexUiMapperState): CodexUiMapping;
+/** Fold one parsed JSON-RPC frame into v2 events. Never throws. */
+export declare function mapCodexNotification(frame: unknown, state: CodexUiMapperState): CodexUiMapping;
+export {};