@wlv-zedd/dsh-chatgpt-web 1.0.0 → 1.0.2

package/src/codex-integration-route.ts

@@ -1,515 +1,515 @@
-import { existsSync } from "node:fs";
-import { resolve } from "node:path";
-import {
-  CODEX_REALTIME_WEBRTC_CALL_BASE_URL,
-  MANAGED_COMMENT,
-  MANAGED_ROUTE_COMMENT,
-  MANAGED_MULTI_AGENT_LINE,
-  MANAGED_REMOTE_COMPACTION_LINE,
-  managedAgentMaxDepthLine,
-} from "./codex-integration-shared";
-import type {
-  CodexIntegrationJournal,
-  LegacyCodexIntegrationJournal,
-  LegacyCodexIntegrationJournalV4,
-  LegacyCodexIntegrationJournalV5,
-  LegacyCodexIntegrationJournalV6,
-  LegacyCodexIntegrationJournalV7,
-  LegacyCodexIntegrationJournalV8,
-  LegacyCodexIntegrationJournalV9,
-  ManagedAssignmentKey,
-  ManagedRouteJournal,
-  PreviousAssignment,
-  PreviousFeatureAssignment,
-  PreviousAgentAssignment,
-} from "./codex-integration-shared";
-import {
-  restoreCodexInterruptHook,
-  verifyCodexInterruptHook,
-  verifyCodexInterruptHookRestored,
-} from "./codex-interrupt-hook";
-import {
-  assignments,
-  findFeatureAssignment,
-  findAgentMaxDepthAssignment,
-  findMultiAgentV2Assignment,
-  findTopLevelAssignment,
-  firstTableIndex,
-  insertDocumentLine,
-  managedMultiAgentV2AssignmentLine,
-  parseDocument,
-  removeDocumentLine,
-  removeManagedComment,
-  renderDocument,
-  restoreBooleanFeature,
-  restoreCompatibilityV1Features,
-  restoreCompatibilityV1AgentDepth,
-  restoreManagedFeatures,
-  restoreMultiAgentV2Feature,
-  splitLines,
-  verifyInstalledFeatures,
-  verifyCompatibilityV1Features,
-} from "./codex-integration-document";
-
-function compatibilityV1Evidence(
-  journal: CodexIntegrationJournal | LegacyCodexIntegrationJournalV9 | LegacyCodexIntegrationJournalV8,
-): {
-  previousMultiAgent: PreviousFeatureAssignment;
-  previousMultiAgentV2: PreviousFeatureAssignment;
-  previousAgentMaxDepth: PreviousAgentAssignment;
-  installedAgentMaxDepth: number;
-} | undefined {
-  if (journal.installed.subagent_protocol !== "compatibility-v1") return undefined;
-  if (!journal.previousMultiAgent || !journal.previousMultiAgentV2
-    || !journal.previousAgentMaxDepth || journal.installed.agent_max_depth === undefined) {
-    throw new Error("Codex integration journal is missing the Compatibility V1 feature baseline");
-  }
-  return {
-    previousMultiAgent: journal.previousMultiAgent,
-    previousMultiAgentV2: journal.previousMultiAgentV2,
-    previousAgentMaxDepth: journal.previousAgentMaxDepth,
-    installedAgentMaxDepth: journal.installed.agent_max_depth,
-  };
-}
-
-function restoreOwnedManagedFeatures(text: string, journal: ManagedRouteJournal): string {
-  let restored = text;
-  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
-    const evidence = compatibilityV1Evidence(journal);
-    if (evidence) {
-      const depth = findAgentMaxDepthAssignment(splitLines(restored));
-      if (depth.rawLine === managedAgentMaxDepthLine(evidence.installedAgentMaxDepth)
-        && depth.value === String(evidence.installedAgentMaxDepth)) {
-        restored = restoreCompatibilityV1AgentDepth(
-          restored,
-          evidence.previousAgentMaxDepth,
-          evidence.installedAgentMaxDepth,
-        );
-      }
-      const multiAgentV2 = findMultiAgentV2Assignment(splitLines(restored));
-      const managedV2Line = managedMultiAgentV2AssignmentLine(evidence.previousMultiAgentV2);
-      if (multiAgentV2.rawLine === managedV2Line && multiAgentV2.value === "false") {
-        restored = restoreMultiAgentV2Feature(restored, evidence.previousMultiAgentV2);
-      }
-      const multiAgent = findFeatureAssignment(splitLines(restored), "multi_agent");
-      if (multiAgent.rawLine === MANAGED_MULTI_AGENT_LINE && multiAgent.value === "true") {
-        restored = restoreBooleanFeature(
-          restored,
-          "multi_agent",
-          "true",
-          MANAGED_MULTI_AGENT_LINE,
-          evidence.previousMultiAgent,
-        );
-      }
-    }
-  }
-  if (journal.version === 6) {
-    const current = findMultiAgentV2Assignment(splitLines(restored));
-    const managedLine = managedMultiAgentV2AssignmentLine(journal.previousMultiAgentV2);
-    if (current.rawLine === managedLine && current.value === "false") {
-      restored = restoreMultiAgentV2Feature(restored, journal.previousMultiAgentV2);
-    }
-  }
-  if (journal.version === 5 || journal.version === 6) {
-    const multiAgent = findFeatureAssignment(splitLines(restored), "multi_agent");
-    if (multiAgent.rawLine === MANAGED_MULTI_AGENT_LINE && multiAgent.value === "true") {
-      restored = restoreBooleanFeature(
-        restored,
-        "multi_agent",
-        "true",
-        MANAGED_MULTI_AGENT_LINE,
-        journal.previousMultiAgent,
-      );
-    }
-    const compaction = findFeatureAssignment(splitLines(restored), "remote_compaction_v2");
-    if (compaction.rawLine === MANAGED_REMOTE_COMPACTION_LINE && compaction.value === "false") {
-      restored = restoreBooleanFeature(
-        restored,
-        "remote_compaction_v2",
-        "false",
-        MANAGED_REMOTE_COMPACTION_LINE,
-        journal.previousRemoteCompactionV2,
-      );
-    }
-  }
-  return restored;
-}
-function restoreStillManagedRouteAssignments(text: string, journal: ManagedRouteJournal): string {
-  const document = parseDocument(text);
-  removeManagedComment(document);
-  const current = assignments(document.lines);
-  const target = Object.fromEntries(
-    (Object.keys(current) as ManagedAssignmentKey[]).map(key => {
-      const stillManaged = key === "openai_base_url"
-        ? current[key].present && current[key].value === journal.installed.openai_base_url
-        : !current[key].present;
-      return [key, stillManaged ? journal.previous[key] : current[key]];
-    }),
-  ) as Record<ManagedAssignmentKey, PreviousAssignment>;
-  const currentIndices = Object.values(current)
-    .flatMap(assignment => assignment.index === undefined ? [] : [assignment.index])
-    .sort((left, right) => right - left);
-  for (const index of currentIndices) removeDocumentLine(document, index);
-
-  const previous = (Object.entries(target) as Array<[ManagedAssignmentKey, PreviousAssignment]>)
-    .filter(([, assignment]) => assignment.present)
-    .sort(([, left], [, right]) => (left.index ?? Number.MAX_SAFE_INTEGER) - (right.index ?? Number.MAX_SAFE_INTEGER));
-  for (const [key, assignment] of previous) {
-    if (!assignment.rawLine) throw new Error(`Codex integration journal is missing the prior ${key} line`);
-    const index = Math.min(assignment.index ?? firstTableIndex(document.lines), firstTableIndex(document.lines));
-    insertDocumentLine(document, index, assignment.rawLine);
-  }
-  return renderDocument(document);
-}
-export function managedJournalIsActive(journal: ManagedRouteJournal): boolean {
-  return journal.version === 3 || journal.active;
-}
-
-export function verifyManagedJournalState(text: string, journal: ManagedRouteJournal): void {
-  if (journal.version === 3 || journal.active) verifyInstalledRoute(text, journal);
-  else verifyRestoredRoute(text, journal);
-}
-
-export function replacementBaseline(
-  currentText: string,
-  configExists: boolean,
-  journal: ManagedRouteJournal,
-): string {
-  if (!configExists) return "";
-  if (!managedJournalIsActive(journal)) return currentText;
-
-  if (journal.version === 9 || journal.version === 10) {
-    const withoutHook = journal.version === 10
-      ? restoreCodexInterruptHook(currentText, journal.interruptHook)
-      : currentText;
-    const baseline = restoreOwnedManagedFeatures(withoutHook, journal);
-    const document = parseDocument(baseline);
-    removeManagedComment(document);
-    for (const [key, installedValue, previous] of [
-      ["openai_base_url", journal.installed.openai_base_url, journal.previous.openai_base_url],
-      [
-        "experimental_realtime_webrtc_call_base_url",
-        journal.installed.experimental_realtime_webrtc_call_base_url,
-        journal.previousRealtimeWebrtcCallBaseUrl,
-      ],
-    ] as const) {
-      const current = findTopLevelAssignment(document.lines, key);
-      if (current.value !== installedValue || current.index === undefined) continue;
-      if (previous.present) {
-        if (!previous.rawLine) throw new Error(`Codex integration journal is missing the prior ${key} line`);
-        document.lines[current.index] = previous.rawLine;
-      } else {
-        removeDocumentLine(document, current.index);
-      }
-    }
-    return renderDocument(document);
-  }
-
-  if (journal.version === 7 || journal.version === 8) {
-    const baseline = restoreOwnedManagedFeatures(currentText, journal);
-    const document = parseDocument(baseline);
-    removeManagedComment(document);
-    const current = findTopLevelAssignment(document.lines, "openai_base_url");
-    if (current.value === journal.installed.openai_base_url && current.index !== undefined) {
-      const previous = journal.previous.openai_base_url;
-      if (previous.present) {
-        if (!previous.rawLine) throw new Error("Codex integration journal is missing the prior openai_base_url line");
-        document.lines[current.index] = previous.rawLine;
-      } else {
-        removeDocumentLine(document, current.index);
-      }
-    }
-    return renderDocument(document);
-  }
-
-  let baseline = restoreOwnedManagedFeatures(currentText, journal);
-  baseline = restoreStillManagedRouteAssignments(baseline, journal);
-  return baseline;
-}
-
-export function installRoute(
-  text: string,
-  installedUrl: string,
-  replaceExistingRoute: boolean,
-  replaceExistingRealtimeRoute: boolean,
-): {
-  text: string;
-  previous: CodexIntegrationJournal["previous"];
-  previousRealtimeWebrtcCallBaseUrl: PreviousAssignment;
-} {
-  const document = parseDocument(text);
-  const previous = assignments(document.lines);
-  if (previous.openai_base_url.present && !replaceExistingRoute) {
-    throw new Error(
-      `Codex already configures model routing (openai_base_url=${JSON.stringify(previous.openai_base_url.value)}). `
-      + "Rerun with --replace-codex-route to replace it reversibly. "
-      + "Check whether another Codex extension or wrapper (for example, OpenCodex or Headroom) is replacing the bridge port.",
-    );
-  }
-  const previousRealtimeWebrtcCallBaseUrl = findTopLevelAssignment(
-    document.lines,
-    "experimental_realtime_webrtc_call_base_url",
-  );
-  if (previousRealtimeWebrtcCallBaseUrl.present
-    && previousRealtimeWebrtcCallBaseUrl.value !== CODEX_REALTIME_WEBRTC_CALL_BASE_URL
-    && !replaceExistingRealtimeRoute) {
-    throw new Error(
-      "Codex already configures its realtime WebRTC call route "
-      + `(experimental_realtime_webrtc_call_base_url=${JSON.stringify(previousRealtimeWebrtcCallBaseUrl.value)}). `
-      + "Rerun with --replace-codex-route to replace it reversibly.",
-    );
-  }
-
-  const currentBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
-  if (currentBaseUrl.index !== undefined) {
-    document.lines[currentBaseUrl.index] = `openai_base_url = ${JSON.stringify(installedUrl)}`;
-  } else {
-    insertDocumentLine(document, firstTableIndex(document.lines), `openai_base_url = ${JSON.stringify(installedUrl)}`);
-  }
-  const currentRealtimeUrl = findTopLevelAssignment(document.lines, "experimental_realtime_webrtc_call_base_url");
-  const realtimeLine = `experimental_realtime_webrtc_call_base_url = ${JSON.stringify(CODEX_REALTIME_WEBRTC_CALL_BASE_URL)}`;
-  if (currentRealtimeUrl.index !== undefined) {
-    document.lines[currentRealtimeUrl.index] = realtimeLine;
-  } else {
-    const installedBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
-    insertDocumentLine(document, installedBaseUrl.index! + 1, realtimeLine);
-  }
-  removeManagedComment(document);
-  const installedBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
-  insertDocumentLine(document, installedBaseUrl.index!, MANAGED_ROUTE_COMMENT);
-  return { text: renderDocument(document), previous, previousRealtimeWebrtcCallBaseUrl };
-}
-
-export function verifyInstalledRoute(text: string, journal: ManagedRouteJournal): void {
-  const lines = splitLines(text);
-  const current = assignments(lines);
-  if (current.openai_base_url.value !== journal.installed.openai_base_url) {
-    throw new Error("Codex openai_base_url changed after setup; refusing to overwrite the user's newer value");
-  }
-  const expectedMarker = journal.version === 9 || journal.version === 10
-    ? MANAGED_ROUTE_COMMENT
-    : MANAGED_COMMENT;
-  if (!lines.includes(expectedMarker)) {
-    throw new Error("Managed Codex route marker changed after setup; refusing to overwrite it");
-  }
-  if (journal.version === 9 || journal.version === 10) {
-    const realtime = findTopLevelAssignment(lines, "experimental_realtime_webrtc_call_base_url");
-    const expectedLine = `experimental_realtime_webrtc_call_base_url = ${JSON.stringify(journal.installed.experimental_realtime_webrtc_call_base_url)}`;
-    if (realtime.value !== journal.installed.experimental_realtime_webrtc_call_base_url
-      || realtime.rawLine !== expectedLine) {
-      throw new Error("Codex realtime WebRTC call route changed after setup; refusing to overwrite the user's newer value");
-    }
-  }
-  if (journal.version === 10) verifyCodexInterruptHook(text, journal.interruptHook);
-  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
-    const evidence = compatibilityV1Evidence(journal);
-    if (evidence) {
-      verifyCompatibilityV1Features(
-        text,
-        evidence.previousMultiAgentV2,
-        evidence.installedAgentMaxDepth,
-      );
-    }
-  }
-  if (journal.version !== 7 && journal.version !== 8 && journal.version !== 9 && journal.version !== 10) {
-    if (current.model_provider.present || current.model_catalog_json.present) {
-      throw new Error("Codex model_provider or model_catalog_json changed after setup; refusing to overwrite the user's newer value");
-    }
-    if (journal.version === 5 || journal.version === 6) verifyInstalledFeatures(text, journal);
-  }
-}
-
-function previousAssignmentMatches(current: PreviousAssignment, previous: PreviousAssignment): boolean {
-  return current.present === previous.present
-    && (!current.present || current.value === previous.value);
-}
-
-function previousAssignmentMatchesExactly(current: PreviousAssignment, previous: PreviousAssignment): boolean {
-  return current.present === previous.present
-    && (!current.present || (current.value === previous.value && current.rawLine === previous.rawLine));
-}
-
-export function verifyRestoredRoute(
-  text: string,
-  journal: CodexIntegrationJournal | LegacyCodexIntegrationJournalV9 | LegacyCodexIntegrationJournalV8 | LegacyCodexIntegrationJournalV7 | LegacyCodexIntegrationJournalV6 | LegacyCodexIntegrationJournalV5 | LegacyCodexIntegrationJournalV4,
-): void {
-  const lines = splitLines(text);
-  const current = assignments(lines);
-  const keys = journal.version === 7 || journal.version === 8 || journal.version === 9 || journal.version === 10
-    ? (["openai_base_url"] as const)
-    : (["openai_base_url", "model_provider", "model_catalog_json"] as const);
-  for (const key of keys) {
-    if (!previousAssignmentMatches(current[key], journal.previous[key])) {
-      throw new Error(`Codex ${key} changed while the bridge was disconnected; refusing to overwrite the user's newer value`);
-    }
-  }
-  if (lines.includes(MANAGED_COMMENT) || lines.includes(MANAGED_ROUTE_COMMENT)) {
-    throw new Error("Managed Codex route marker is present while the bridge is disconnected");
-  }
-  if (journal.version === 9 || journal.version === 10) {
-    const realtime = findTopLevelAssignment(lines, "experimental_realtime_webrtc_call_base_url");
-    if (!previousAssignmentMatchesExactly(realtime, journal.previousRealtimeWebrtcCallBaseUrl)) {
-      throw new Error(
-        "Codex realtime WebRTC call route changed while the bridge was disconnected; refusing to overwrite the user's newer value",
-      );
-    }
-  }
-  if (journal.version === 10) verifyCodexInterruptHookRestored(text);
-  if (journal.version === 5 || journal.version === 6) {
-    const previousFeatures: Array<readonly [string, PreviousFeatureAssignment]> = [
-      ["remote_compaction_v2", journal.previousRemoteCompactionV2],
-      ["multi_agent", journal.previousMultiAgent],
-    ];
-    if (journal.version === 6) {
-      previousFeatures.push(["multi_agent_v2", journal.previousMultiAgentV2]);
-    }
-    for (const [key, previous] of previousFeatures) {
-      const current = key === "multi_agent_v2"
-        ? findMultiAgentV2Assignment(lines)
-        : findFeatureAssignment(lines, key);
-      const matches = current.present === previous.present
-        && (current.tableName ?? "features") === (previous.tableName ?? "features")
-        && (!current.present || current.rawLine === previous.rawLine);
-      if (!matches) {
-        throw new Error(
-          `Codex [features].${key} changed while the bridge was disconnected; refusing to overwrite the user's newer value`,
-        );
-      }
-    }
-  }
-  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
-    const evidence = compatibilityV1Evidence(journal);
-    if (evidence) {
-      for (const [key, previous] of [
-        ["multi_agent", evidence.previousMultiAgent],
-        ["multi_agent_v2", evidence.previousMultiAgentV2],
-      ] as const) {
-        const current = key === "multi_agent_v2"
-          ? findMultiAgentV2Assignment(lines)
-          : findFeatureAssignment(lines, key);
-        const matches = current.present === previous.present
-          && (!current.present || (
-            (current.tableName ?? "features") === (previous.tableName ?? "features")
-            && current.rawLine === previous.rawLine
-          ));
-        if (!matches) {
-          throw new Error(
-            `Codex [features].${key} changed while Compatibility V1 was disconnected; refusing to overwrite the user's newer value`,
-          );
-        }
-      }
-      const depth = findAgentMaxDepthAssignment(lines);
-      const previousDepth = evidence.previousAgentMaxDepth;
-      const depthMatches = depth.present === previousDepth.present
-        && (!depth.present || depth.rawLine === previousDepth.rawLine);
-      if (!depthMatches) {
-        throw new Error(
-          "Codex [agents].max_depth changed while Compatibility V1 was disconnected; refusing to overwrite the user's newer value",
-        );
-      }
-    }
-  }
-}
-
-export function assertPreservedPreviousAssignments(
-  actual: CodexIntegrationJournal["previous"],
-  expected: CodexIntegrationJournal["previous"],
-): void {
-  if (!previousAssignmentMatches(actual.openai_base_url, expected.openai_base_url)) {
-    throw new Error("Codex openai_base_url changed while the bridge was disconnected; refusing to replace it");
-  }
-}
-
-export function assertPreservedPreviousRealtimeAssignment(
-  actual: PreviousAssignment,
-  expected: PreviousAssignment,
-): void {
-  if (!previousAssignmentMatchesExactly(actual, expected)) {
-    throw new Error("Codex realtime WebRTC call route changed while the bridge was disconnected; refusing to replace it");
-  }
-}
-
-export function restoreManagedRoute(text: string, journal: ManagedRouteJournal): string {
-  verifyInstalledRoute(text, journal);
-  const withoutHook = journal.version === 10
-    ? restoreCodexInterruptHook(text, journal.interruptHook)
-    : text;
-  const document = parseDocument(withoutHook);
-  removeManagedComment(document);
-  const currentBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
-  if (currentBaseUrl.index === undefined) throw new Error("Managed Codex openai_base_url is missing");
-  const previousBaseUrl = journal.previous.openai_base_url;
-  if (previousBaseUrl.present) {
-    if (!previousBaseUrl.rawLine) throw new Error("Codex integration journal is missing the prior openai_base_url line");
-    document.lines[currentBaseUrl.index] = previousBaseUrl.rawLine;
-  } else {
-    removeDocumentLine(document, currentBaseUrl.index);
-  }
-  if (journal.version === 9 || journal.version === 10) {
-    const currentRealtime = findTopLevelAssignment(document.lines, "experimental_realtime_webrtc_call_base_url");
-    if (currentRealtime.index === undefined) throw new Error("Managed Codex realtime WebRTC call route is missing");
-    const previousRealtime = journal.previousRealtimeWebrtcCallBaseUrl;
-    if (previousRealtime.present) {
-      if (!previousRealtime.rawLine) {
-        throw new Error("Codex integration journal is missing the prior realtime WebRTC call route line");
-      }
-      document.lines[currentRealtime.index] = previousRealtime.rawLine;
-    } else {
-      removeDocumentLine(document, currentRealtime.index);
-    }
-  }
-  if (journal.version !== 7 && journal.version !== 8 && journal.version !== 9 && journal.version !== 10) {
-    const removedAssignments = (["model_provider", "model_catalog_json"] as const)
-      .map(key => ({ key, previous: journal.previous[key] }))
-      .filter(item => item.previous.present)
-      .sort((left, right) => (left.previous.index ?? Number.MAX_SAFE_INTEGER) - (right.previous.index ?? Number.MAX_SAFE_INTEGER));
-    for (const item of removedAssignments) {
-      if (!item.previous.rawLine) throw new Error(`Codex integration journal is missing the prior ${item.key} line`);
-      const index = Math.min(item.previous.index ?? firstTableIndex(document.lines), firstTableIndex(document.lines));
-      insertDocumentLine(document, index, item.previous.rawLine);
-    }
-  }
-  const restoredRoute = renderDocument(document);
-  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
-    const evidence = compatibilityV1Evidence(journal);
-    return evidence
-      ? restoreCompatibilityV1Features(
-          restoredRoute,
-          evidence.previousMultiAgent,
-          evidence.previousMultiAgentV2,
-          evidence.previousAgentMaxDepth,
-          evidence.installedAgentMaxDepth,
-        )
-      : restoredRoute;
-  }
-  return journal.version === 5 || journal.version === 6
-    ? restoreManagedFeatures(restoredRoute, journal)
-    : restoredRoute;
-}
-
-export function restoreLegacyV2(text: string, journal: LegacyCodexIntegrationJournal): string {
-  if (!text.includes(journal.providerBlock)) {
-    throw new Error("Managed legacy Codex provider block changed after setup; refusing migration");
-  }
-  const withoutProvider = text.replace(journal.providerBlock, "").replace(/\n{3,}/g, "\n\n");
-  const document = parseDocument(withoutProvider);
-  for (const key of ["model_provider", "model_catalog_json"] as const) {
-    const current = findTopLevelAssignment(document.lines, key);
-    if (current.value !== journal.installed[key] || current.index === undefined) {
-      throw new Error(`Managed legacy Codex ${key} changed after setup; refusing migration`);
-    }
-    const previous = journal.previous[key];
-    if (previous.present) {
-      if (!previous.rawLine) throw new Error(`Legacy Codex integration journal is missing the prior ${key} line`);
-      document.lines[current.index] = previous.rawLine;
-    } else {
-      removeDocumentLine(document, current.index);
-    }
-  }
-  removeManagedComment(document);
-  const restoredCatalog = findTopLevelAssignment(document.lines, "model_catalog_json");
-  if (restoredCatalog.index !== undefined && restoredCatalog.value && !existsSync(resolve(restoredCatalog.value))) {
-    removeDocumentLine(document, restoredCatalog.index);
-  }
-  return renderDocument(document);
-}
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import {
+  CODEX_REALTIME_WEBRTC_CALL_BASE_URL,
+  MANAGED_COMMENT,
+  MANAGED_ROUTE_COMMENT,
+  MANAGED_MULTI_AGENT_LINE,
+  MANAGED_REMOTE_COMPACTION_LINE,
+  managedAgentMaxDepthLine,
+} from "./codex-integration-shared";
+import type {
+  CodexIntegrationJournal,
+  LegacyCodexIntegrationJournal,
+  LegacyCodexIntegrationJournalV4,
+  LegacyCodexIntegrationJournalV5,
+  LegacyCodexIntegrationJournalV6,
+  LegacyCodexIntegrationJournalV7,
+  LegacyCodexIntegrationJournalV8,
+  LegacyCodexIntegrationJournalV9,
+  ManagedAssignmentKey,
+  ManagedRouteJournal,
+  PreviousAssignment,
+  PreviousFeatureAssignment,
+  PreviousAgentAssignment,
+} from "./codex-integration-shared";
+import {
+  restoreCodexInterruptHook,
+  verifyCodexInterruptHook,
+  verifyCodexInterruptHookRestored,
+} from "./codex-interrupt-hook";
+import {
+  assignments,
+  findFeatureAssignment,
+  findAgentMaxDepthAssignment,
+  findMultiAgentV2Assignment,
+  findTopLevelAssignment,
+  firstTableIndex,
+  insertDocumentLine,
+  managedMultiAgentV2AssignmentLine,
+  parseDocument,
+  removeDocumentLine,
+  removeManagedComment,
+  renderDocument,
+  restoreBooleanFeature,
+  restoreCompatibilityV1Features,
+  restoreCompatibilityV1AgentDepth,
+  restoreManagedFeatures,
+  restoreMultiAgentV2Feature,
+  splitLines,
+  verifyInstalledFeatures,
+  verifyCompatibilityV1Features,
+} from "./codex-integration-document";
+
+function compatibilityV1Evidence(
+  journal: CodexIntegrationJournal | LegacyCodexIntegrationJournalV9 | LegacyCodexIntegrationJournalV8,
+): {
+  previousMultiAgent: PreviousFeatureAssignment;
+  previousMultiAgentV2: PreviousFeatureAssignment;
+  previousAgentMaxDepth: PreviousAgentAssignment;
+  installedAgentMaxDepth: number;
+} | undefined {
+  if (journal.installed.subagent_protocol !== "compatibility-v1") return undefined;
+  if (!journal.previousMultiAgent || !journal.previousMultiAgentV2
+    || !journal.previousAgentMaxDepth || journal.installed.agent_max_depth === undefined) {
+    throw new Error("Codex integration journal is missing the Compatibility V1 feature baseline");
+  }
+  return {
+    previousMultiAgent: journal.previousMultiAgent,
+    previousMultiAgentV2: journal.previousMultiAgentV2,
+    previousAgentMaxDepth: journal.previousAgentMaxDepth,
+    installedAgentMaxDepth: journal.installed.agent_max_depth,
+  };
+}
+
+function restoreOwnedManagedFeatures(text: string, journal: ManagedRouteJournal): string {
+  let restored = text;
+  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
+    const evidence = compatibilityV1Evidence(journal);
+    if (evidence) {
+      const depth = findAgentMaxDepthAssignment(splitLines(restored));
+      if (depth.rawLine === managedAgentMaxDepthLine(evidence.installedAgentMaxDepth)
+        && depth.value === String(evidence.installedAgentMaxDepth)) {
+        restored = restoreCompatibilityV1AgentDepth(
+          restored,
+          evidence.previousAgentMaxDepth,
+          evidence.installedAgentMaxDepth,
+        );
+      }
+      const multiAgentV2 = findMultiAgentV2Assignment(splitLines(restored));
+      const managedV2Line = managedMultiAgentV2AssignmentLine(evidence.previousMultiAgentV2);
+      if (multiAgentV2.rawLine === managedV2Line && multiAgentV2.value === "false") {
+        restored = restoreMultiAgentV2Feature(restored, evidence.previousMultiAgentV2);
+      }
+      const multiAgent = findFeatureAssignment(splitLines(restored), "multi_agent");
+      if (multiAgent.rawLine === MANAGED_MULTI_AGENT_LINE && multiAgent.value === "true") {
+        restored = restoreBooleanFeature(
+          restored,
+          "multi_agent",
+          "true",
+          MANAGED_MULTI_AGENT_LINE,
+          evidence.previousMultiAgent,
+        );
+      }
+    }
+  }
+  if (journal.version === 6) {
+    const current = findMultiAgentV2Assignment(splitLines(restored));
+    const managedLine = managedMultiAgentV2AssignmentLine(journal.previousMultiAgentV2);
+    if (current.rawLine === managedLine && current.value === "false") {
+      restored = restoreMultiAgentV2Feature(restored, journal.previousMultiAgentV2);
+    }
+  }
+  if (journal.version === 5 || journal.version === 6) {
+    const multiAgent = findFeatureAssignment(splitLines(restored), "multi_agent");
+    if (multiAgent.rawLine === MANAGED_MULTI_AGENT_LINE && multiAgent.value === "true") {
+      restored = restoreBooleanFeature(
+        restored,
+        "multi_agent",
+        "true",
+        MANAGED_MULTI_AGENT_LINE,
+        journal.previousMultiAgent,
+      );
+    }
+    const compaction = findFeatureAssignment(splitLines(restored), "remote_compaction_v2");
+    if (compaction.rawLine === MANAGED_REMOTE_COMPACTION_LINE && compaction.value === "false") {
+      restored = restoreBooleanFeature(
+        restored,
+        "remote_compaction_v2",
+        "false",
+        MANAGED_REMOTE_COMPACTION_LINE,
+        journal.previousRemoteCompactionV2,
+      );
+    }
+  }
+  return restored;
+}
+function restoreStillManagedRouteAssignments(text: string, journal: ManagedRouteJournal): string {
+  const document = parseDocument(text);
+  removeManagedComment(document);
+  const current = assignments(document.lines);
+  const target = Object.fromEntries(
+    (Object.keys(current) as ManagedAssignmentKey[]).map(key => {
+      const stillManaged = key === "openai_base_url"
+        ? current[key].present && current[key].value === journal.installed.openai_base_url
+        : !current[key].present;
+      return [key, stillManaged ? journal.previous[key] : current[key]];
+    }),
+  ) as Record<ManagedAssignmentKey, PreviousAssignment>;
+  const currentIndices = Object.values(current)
+    .flatMap(assignment => assignment.index === undefined ? [] : [assignment.index])
+    .sort((left, right) => right - left);
+  for (const index of currentIndices) removeDocumentLine(document, index);
+
+  const previous = (Object.entries(target) as Array<[ManagedAssignmentKey, PreviousAssignment]>)
+    .filter(([, assignment]) => assignment.present)
+    .sort(([, left], [, right]) => (left.index ?? Number.MAX_SAFE_INTEGER) - (right.index ?? Number.MAX_SAFE_INTEGER));
+  for (const [key, assignment] of previous) {
+    if (!assignment.rawLine) throw new Error(`Codex integration journal is missing the prior ${key} line`);
+    const index = Math.min(assignment.index ?? firstTableIndex(document.lines), firstTableIndex(document.lines));
+    insertDocumentLine(document, index, assignment.rawLine);
+  }
+  return renderDocument(document);
+}
+export function managedJournalIsActive(journal: ManagedRouteJournal): boolean {
+  return journal.version === 3 || journal.active;
+}
+
+export function verifyManagedJournalState(text: string, journal: ManagedRouteJournal): void {
+  if (journal.version === 3 || journal.active) verifyInstalledRoute(text, journal);
+  else verifyRestoredRoute(text, journal);
+}
+
+export function replacementBaseline(
+  currentText: string,
+  configExists: boolean,
+  journal: ManagedRouteJournal,
+): string {
+  if (!configExists) return "";
+  if (!managedJournalIsActive(journal)) return currentText;
+
+  if (journal.version === 9 || journal.version === 10) {
+    const withoutHook = journal.version === 10
+      ? restoreCodexInterruptHook(currentText, journal.interruptHook)
+      : currentText;
+    const baseline = restoreOwnedManagedFeatures(withoutHook, journal);
+    const document = parseDocument(baseline);
+    removeManagedComment(document);
+    for (const [key, installedValue, previous] of [
+      ["openai_base_url", journal.installed.openai_base_url, journal.previous.openai_base_url],
+      [
+        "experimental_realtime_webrtc_call_base_url",
+        journal.installed.experimental_realtime_webrtc_call_base_url,
+        journal.previousRealtimeWebrtcCallBaseUrl,
+      ],
+    ] as const) {
+      const current = findTopLevelAssignment(document.lines, key);
+      if (current.value !== installedValue || current.index === undefined) continue;
+      if (previous.present) {
+        if (!previous.rawLine) throw new Error(`Codex integration journal is missing the prior ${key} line`);
+        document.lines[current.index] = previous.rawLine;
+      } else {
+        removeDocumentLine(document, current.index);
+      }
+    }
+    return renderDocument(document);
+  }
+
+  if (journal.version === 7 || journal.version === 8) {
+    const baseline = restoreOwnedManagedFeatures(currentText, journal);
+    const document = parseDocument(baseline);
+    removeManagedComment(document);
+    const current = findTopLevelAssignment(document.lines, "openai_base_url");
+    if (current.value === journal.installed.openai_base_url && current.index !== undefined) {
+      const previous = journal.previous.openai_base_url;
+      if (previous.present) {
+        if (!previous.rawLine) throw new Error("Codex integration journal is missing the prior openai_base_url line");
+        document.lines[current.index] = previous.rawLine;
+      } else {
+        removeDocumentLine(document, current.index);
+      }
+    }
+    return renderDocument(document);
+  }
+
+  let baseline = restoreOwnedManagedFeatures(currentText, journal);
+  baseline = restoreStillManagedRouteAssignments(baseline, journal);
+  return baseline;
+}
+
+export function installRoute(
+  text: string,
+  installedUrl: string,
+  replaceExistingRoute: boolean,
+  replaceExistingRealtimeRoute: boolean,
+): {
+  text: string;
+  previous: CodexIntegrationJournal["previous"];
+  previousRealtimeWebrtcCallBaseUrl: PreviousAssignment;
+} {
+  const document = parseDocument(text);
+  const previous = assignments(document.lines);
+  if (previous.openai_base_url.present && !replaceExistingRoute) {
+    throw new Error(
+      `Codex already configures model routing (openai_base_url=${JSON.stringify(previous.openai_base_url.value)}). `
+      + "Rerun with --replace-codex-route to replace it reversibly. "
+      + "Check whether another Codex extension or wrapper (for example, OpenCodex or Headroom) is replacing the bridge port.",
+    );
+  }
+  const previousRealtimeWebrtcCallBaseUrl = findTopLevelAssignment(
+    document.lines,
+    "experimental_realtime_webrtc_call_base_url",
+  );
+  if (previousRealtimeWebrtcCallBaseUrl.present
+    && previousRealtimeWebrtcCallBaseUrl.value !== CODEX_REALTIME_WEBRTC_CALL_BASE_URL
+    && !replaceExistingRealtimeRoute) {
+    throw new Error(
+      "Codex already configures its realtime WebRTC call route "
+      + `(experimental_realtime_webrtc_call_base_url=${JSON.stringify(previousRealtimeWebrtcCallBaseUrl.value)}). `
+      + "Rerun with --replace-codex-route to replace it reversibly.",
+    );
+  }
+
+  const currentBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
+  if (currentBaseUrl.index !== undefined) {
+    document.lines[currentBaseUrl.index] = `openai_base_url = ${JSON.stringify(installedUrl)}`;
+  } else {
+    insertDocumentLine(document, firstTableIndex(document.lines), `openai_base_url = ${JSON.stringify(installedUrl)}`);
+  }
+  const currentRealtimeUrl = findTopLevelAssignment(document.lines, "experimental_realtime_webrtc_call_base_url");
+  const realtimeLine = `experimental_realtime_webrtc_call_base_url = ${JSON.stringify(CODEX_REALTIME_WEBRTC_CALL_BASE_URL)}`;
+  if (currentRealtimeUrl.index !== undefined) {
+    document.lines[currentRealtimeUrl.index] = realtimeLine;
+  } else {
+    const installedBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
+    insertDocumentLine(document, installedBaseUrl.index! + 1, realtimeLine);
+  }
+  removeManagedComment(document);
+  const installedBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
+  insertDocumentLine(document, installedBaseUrl.index!, MANAGED_ROUTE_COMMENT);
+  return { text: renderDocument(document), previous, previousRealtimeWebrtcCallBaseUrl };
+}
+
+export function verifyInstalledRoute(text: string, journal: ManagedRouteJournal): void {
+  const lines = splitLines(text);
+  const current = assignments(lines);
+  if (current.openai_base_url.value !== journal.installed.openai_base_url) {
+    throw new Error("Codex openai_base_url changed after setup; refusing to overwrite the user's newer value");
+  }
+  const expectedMarker = journal.version === 9 || journal.version === 10
+    ? MANAGED_ROUTE_COMMENT
+    : MANAGED_COMMENT;
+  if (!lines.includes(expectedMarker)) {
+    throw new Error("Managed Codex route marker changed after setup; refusing to overwrite it");
+  }
+  if (journal.version === 9 || journal.version === 10) {
+    const realtime = findTopLevelAssignment(lines, "experimental_realtime_webrtc_call_base_url");
+    const expectedLine = `experimental_realtime_webrtc_call_base_url = ${JSON.stringify(journal.installed.experimental_realtime_webrtc_call_base_url)}`;
+    if (realtime.value !== journal.installed.experimental_realtime_webrtc_call_base_url
+      || realtime.rawLine !== expectedLine) {
+      throw new Error("Codex realtime WebRTC call route changed after setup; refusing to overwrite the user's newer value");
+    }
+  }
+  if (journal.version === 10) verifyCodexInterruptHook(text, journal.interruptHook);
+  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
+    const evidence = compatibilityV1Evidence(journal);
+    if (evidence) {
+      verifyCompatibilityV1Features(
+        text,
+        evidence.previousMultiAgentV2,
+        evidence.installedAgentMaxDepth,
+      );
+    }
+  }
+  if (journal.version !== 7 && journal.version !== 8 && journal.version !== 9 && journal.version !== 10) {
+    if (current.model_provider.present || current.model_catalog_json.present) {
+      throw new Error("Codex model_provider or model_catalog_json changed after setup; refusing to overwrite the user's newer value");
+    }
+    if (journal.version === 5 || journal.version === 6) verifyInstalledFeatures(text, journal);
+  }
+}
+
+function previousAssignmentMatches(current: PreviousAssignment, previous: PreviousAssignment): boolean {
+  return current.present === previous.present
+    && (!current.present || current.value === previous.value);
+}
+
+function previousAssignmentMatchesExactly(current: PreviousAssignment, previous: PreviousAssignment): boolean {
+  return current.present === previous.present
+    && (!current.present || (current.value === previous.value && current.rawLine === previous.rawLine));
+}
+
+export function verifyRestoredRoute(
+  text: string,
+  journal: CodexIntegrationJournal | LegacyCodexIntegrationJournalV9 | LegacyCodexIntegrationJournalV8 | LegacyCodexIntegrationJournalV7 | LegacyCodexIntegrationJournalV6 | LegacyCodexIntegrationJournalV5 | LegacyCodexIntegrationJournalV4,
+): void {
+  const lines = splitLines(text);
+  const current = assignments(lines);
+  const keys = journal.version === 7 || journal.version === 8 || journal.version === 9 || journal.version === 10
+    ? (["openai_base_url"] as const)
+    : (["openai_base_url", "model_provider", "model_catalog_json"] as const);
+  for (const key of keys) {
+    if (!previousAssignmentMatches(current[key], journal.previous[key])) {
+      throw new Error(`Codex ${key} changed while the bridge was disconnected; refusing to overwrite the user's newer value`);
+    }
+  }
+  if (lines.includes(MANAGED_COMMENT) || lines.includes(MANAGED_ROUTE_COMMENT)) {
+    throw new Error("Managed Codex route marker is present while the bridge is disconnected");
+  }
+  if (journal.version === 9 || journal.version === 10) {
+    const realtime = findTopLevelAssignment(lines, "experimental_realtime_webrtc_call_base_url");
+    if (!previousAssignmentMatchesExactly(realtime, journal.previousRealtimeWebrtcCallBaseUrl)) {
+      throw new Error(
+        "Codex realtime WebRTC call route changed while the bridge was disconnected; refusing to overwrite the user's newer value",
+      );
+    }
+  }
+  if (journal.version === 10) verifyCodexInterruptHookRestored(text);
+  if (journal.version === 5 || journal.version === 6) {
+    const previousFeatures: Array<readonly [string, PreviousFeatureAssignment]> = [
+      ["remote_compaction_v2", journal.previousRemoteCompactionV2],
+      ["multi_agent", journal.previousMultiAgent],
+    ];
+    if (journal.version === 6) {
+      previousFeatures.push(["multi_agent_v2", journal.previousMultiAgentV2]);
+    }
+    for (const [key, previous] of previousFeatures) {
+      const current = key === "multi_agent_v2"
+        ? findMultiAgentV2Assignment(lines)
+        : findFeatureAssignment(lines, key);
+      const matches = current.present === previous.present
+        && (current.tableName ?? "features") === (previous.tableName ?? "features")
+        && (!current.present || current.rawLine === previous.rawLine);
+      if (!matches) {
+        throw new Error(
+          `Codex [features].${key} changed while the bridge was disconnected; refusing to overwrite the user's newer value`,
+        );
+      }
+    }
+  }
+  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
+    const evidence = compatibilityV1Evidence(journal);
+    if (evidence) {
+      for (const [key, previous] of [
+        ["multi_agent", evidence.previousMultiAgent],
+        ["multi_agent_v2", evidence.previousMultiAgentV2],
+      ] as const) {
+        const current = key === "multi_agent_v2"
+          ? findMultiAgentV2Assignment(lines)
+          : findFeatureAssignment(lines, key);
+        const matches = current.present === previous.present
+          && (!current.present || (
+            (current.tableName ?? "features") === (previous.tableName ?? "features")
+            && current.rawLine === previous.rawLine
+          ));
+        if (!matches) {
+          throw new Error(
+            `Codex [features].${key} changed while Compatibility V1 was disconnected; refusing to overwrite the user's newer value`,
+          );
+        }
+      }
+      const depth = findAgentMaxDepthAssignment(lines);
+      const previousDepth = evidence.previousAgentMaxDepth;
+      const depthMatches = depth.present === previousDepth.present
+        && (!depth.present || depth.rawLine === previousDepth.rawLine);
+      if (!depthMatches) {
+        throw new Error(
+          "Codex [agents].max_depth changed while Compatibility V1 was disconnected; refusing to overwrite the user's newer value",
+        );
+      }
+    }
+  }
+}
+
+export function assertPreservedPreviousAssignments(
+  actual: CodexIntegrationJournal["previous"],
+  expected: CodexIntegrationJournal["previous"],
+): void {
+  if (!previousAssignmentMatches(actual.openai_base_url, expected.openai_base_url)) {
+    throw new Error("Codex openai_base_url changed while the bridge was disconnected; refusing to replace it");
+  }
+}
+
+export function assertPreservedPreviousRealtimeAssignment(
+  actual: PreviousAssignment,
+  expected: PreviousAssignment,
+): void {
+  if (!previousAssignmentMatchesExactly(actual, expected)) {
+    throw new Error("Codex realtime WebRTC call route changed while the bridge was disconnected; refusing to replace it");
+  }
+}
+
+export function restoreManagedRoute(text: string, journal: ManagedRouteJournal): string {
+  verifyInstalledRoute(text, journal);
+  const withoutHook = journal.version === 10
+    ? restoreCodexInterruptHook(text, journal.interruptHook)
+    : text;
+  const document = parseDocument(withoutHook);
+  removeManagedComment(document);
+  const currentBaseUrl = findTopLevelAssignment(document.lines, "openai_base_url");
+  if (currentBaseUrl.index === undefined) throw new Error("Managed Codex openai_base_url is missing");
+  const previousBaseUrl = journal.previous.openai_base_url;
+  if (previousBaseUrl.present) {
+    if (!previousBaseUrl.rawLine) throw new Error("Codex integration journal is missing the prior openai_base_url line");
+    document.lines[currentBaseUrl.index] = previousBaseUrl.rawLine;
+  } else {
+    removeDocumentLine(document, currentBaseUrl.index);
+  }
+  if (journal.version === 9 || journal.version === 10) {
+    const currentRealtime = findTopLevelAssignment(document.lines, "experimental_realtime_webrtc_call_base_url");
+    if (currentRealtime.index === undefined) throw new Error("Managed Codex realtime WebRTC call route is missing");
+    const previousRealtime = journal.previousRealtimeWebrtcCallBaseUrl;
+    if (previousRealtime.present) {
+      if (!previousRealtime.rawLine) {
+        throw new Error("Codex integration journal is missing the prior realtime WebRTC call route line");
+      }
+      document.lines[currentRealtime.index] = previousRealtime.rawLine;
+    } else {
+      removeDocumentLine(document, currentRealtime.index);
+    }
+  }
+  if (journal.version !== 7 && journal.version !== 8 && journal.version !== 9 && journal.version !== 10) {
+    const removedAssignments = (["model_provider", "model_catalog_json"] as const)
+      .map(key => ({ key, previous: journal.previous[key] }))
+      .filter(item => item.previous.present)
+      .sort((left, right) => (left.previous.index ?? Number.MAX_SAFE_INTEGER) - (right.previous.index ?? Number.MAX_SAFE_INTEGER));
+    for (const item of removedAssignments) {
+      if (!item.previous.rawLine) throw new Error(`Codex integration journal is missing the prior ${item.key} line`);
+      const index = Math.min(item.previous.index ?? firstTableIndex(document.lines), firstTableIndex(document.lines));
+      insertDocumentLine(document, index, item.previous.rawLine);
+    }
+  }
+  const restoredRoute = renderDocument(document);
+  if (journal.version === 8 || journal.version === 9 || journal.version === 10) {
+    const evidence = compatibilityV1Evidence(journal);
+    return evidence
+      ? restoreCompatibilityV1Features(
+          restoredRoute,
+          evidence.previousMultiAgent,
+          evidence.previousMultiAgentV2,
+          evidence.previousAgentMaxDepth,
+          evidence.installedAgentMaxDepth,
+        )
+      : restoredRoute;
+  }
+  return journal.version === 5 || journal.version === 6
+    ? restoreManagedFeatures(restoredRoute, journal)
+    : restoredRoute;
+}
+
+export function restoreLegacyV2(text: string, journal: LegacyCodexIntegrationJournal): string {
+  if (!text.includes(journal.providerBlock)) {
+    throw new Error("Managed legacy Codex provider block changed after setup; refusing migration");
+  }
+  const withoutProvider = text.replace(journal.providerBlock, "").replace(/\n{3,}/g, "\n\n");
+  const document = parseDocument(withoutProvider);
+  for (const key of ["model_provider", "model_catalog_json"] as const) {
+    const current = findTopLevelAssignment(document.lines, key);
+    if (current.value !== journal.installed[key] || current.index === undefined) {
+      throw new Error(`Managed legacy Codex ${key} changed after setup; refusing migration`);
+    }
+    const previous = journal.previous[key];
+    if (previous.present) {
+      if (!previous.rawLine) throw new Error(`Legacy Codex integration journal is missing the prior ${key} line`);
+      document.lines[current.index] = previous.rawLine;
+    } else {
+      removeDocumentLine(document, current.index);
+    }
+  }
+  removeManagedComment(document);
+  const restoredCatalog = findTopLevelAssignment(document.lines, "model_catalog_json");
+  if (restoredCatalog.index !== undefined && restoredCatalog.value && !existsSync(resolve(restoredCatalog.value))) {
+    removeDocumentLine(document, restoredCatalog.index);
+  }
+  return renderDocument(document);
+}