@ycodium-ai/agent-codex 0.2.3086 → 0.2.3094

package/dist/index.js

@@ -1381,6 +1381,43 @@ function buildCodexDeveloperInstructions(interactionMode, runtime, browserToolsA
 <runtime_info>In case you're asked: you are running in Ycodium through the Codex harness, as ${toSingleLine(runtime.model)} with ${toSingleLine(runtime.reasoningEffort)} reasoning effort. No need to mention this otherwise.</runtime_info>`;
 }
 
+// src/codexArtifacts.ts
+function imageGenerationArtifacts(input) {
+  if (input.itemType !== "imageGeneration" || input.status !== "completed") return [];
+  if (!isRecord3(input.params)) return [];
+  const item = isRecord3(input.params["item"]) ? input.params["item"] : input.params;
+  const savedPath = item["savedPath"];
+  if (typeof savedPath !== "string" || savedPath.trim().length === 0) return [];
+  return [{ path: savedPath, ...input.itemId ? { toolCallId: input.itemId } : {} }];
+}
+
+// src/codexItemTypes.ts
+function normalizeItemType(value) {
+  if (!value) return "item";
+  return value.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[._/-]/g, " ").replace(/\s+/g, " ").trim().toLowerCase();
+}
+function toCanonicalItemType(raw) {
+  const type = normalizeItemType(raw);
+  if (type.includes("user")) return "user_message";
+  if (type.includes("agent message") || type.includes("assistant")) return "assistant_message";
+  if (type.includes("reasoning") || type.includes("thought")) return "reasoning";
+  if (type.includes("plan") || type.includes("todo")) return "plan";
+  if (type.includes("command")) return "command_execution";
+  if (type.includes("file change") || type.includes("patch") || type.includes("edit")) {
+    return "file_change";
+  }
+  if (type.includes("mcp")) return "mcp_tool_call";
+  if (type.includes("dynamic tool")) return "dynamic_tool_call";
+  if (type.includes("collab")) return "collab_agent_tool_call";
+  if (type.includes("web search")) return "web_search";
+  if (type.includes("image")) return "image_view";
+  if (type.includes("review entered")) return "review_entered";
+  if (type.includes("review exited")) return "review_exited";
+  if (type.includes("compact")) return "context_compaction";
+  if (type.includes("error")) return "error";
+  return "unknown";
+}
+
 // src/events/base.ts
 import * as NodeCrypto from "node:crypto";
 var CODEX_PROVIDER = "codex";
@@ -1657,351 +1694,119 @@ function mapCollabAgentEvent(input) {
   return [];
 }
 
-// src/approvalMapping.ts
-function fileChangeEntries(params) {
-  if (!isRecord3(params)) return [];
-  const item = isRecord3(params["item"]) ? params["item"] : params;
-  const changes = item["changes"] ?? item["fileChanges"] ?? params["fileChanges"];
-  if (!isRecord3(changes) && !Array.isArray(changes)) return [];
-  const entries = Array.isArray(changes) ? changes : Object.entries(changes).map(([path, change]) => ({
-    path,
-    ...isRecord3(change) ? change : {}
-  }));
-  const out = [];
-  for (const entry of entries) {
-    if (!isRecord3(entry)) continue;
-    const path = asString(entry["path"]) ?? asString(entry["file"]);
-    if (!path) continue;
-    out.push({
-      path,
-      kind: (asString(entry["type"]) ?? asString(entry["kind"]) ?? "update").toLowerCase(),
-      movePath: asString(entry["move_path"]) ?? asString(entry["movePath"]),
-      diff: asString(entry["unified_diff"]) ?? asString(entry["unifiedDiff"]),
-      content: asString(entry["content"])
+// src/events/userInput.ts
+function toUserInputQuestions(params) {
+  if (!isRecord3(params)) return void 0;
+  const questions = Array.isArray(params["questions"]) ? params["questions"] : [];
+  const mapped = [];
+  for (const question of questions) {
+    if (!isRecord3(question)) return void 0;
+    const id = asString(question["id"]);
+    const header = asString(question["header"]);
+    const text = asString(question["question"]);
+    const rawOptions = Array.isArray(question["options"]) ? question["options"] : [];
+    const options = [];
+    for (const option of rawOptions) {
+      if (!isRecord3(option)) continue;
+      const label = trimText(option["label"]);
+      if (!label) continue;
+      options.push({
+        ...asString(option["id"]) ? { id: asString(option["id"]) } : {},
+        label,
+        description: trimText(option["description"]) ?? ""
+      });
+    }
+    if (!id || !header || !text || options.length === 0) return void 0;
+    mapped.push({
+      id,
+      header,
+      question: text,
+      options,
+      multiSelect: false
     });
   }
-  return out;
+  return mapped.length > 0 ? mapped : void 0;
 }
-var MAX_DESCRIBED_FILE_CHANGES = 20;
-function describeFileChanges(params) {
-  const entries = fileChangeEntries(params).toSorted(
-    (left, right) => left.path.localeCompare(right.path)
-  );
-  if (entries.length === 0) return void 0;
-  const lines = entries.slice(0, MAX_DESCRIBED_FILE_CHANGES).map(
-    (entry) => entry.movePath ? `${entry.kind} ${entry.path} -> ${entry.movePath}` : `${entry.kind} ${entry.path}`
-  );
-  const remaining = entries.length - lines.length;
-  return remaining > 0 ? `${lines.join("\n")}
-+${remaining} more` : lines.join("\n");
+function toAsyncQuestions(params) {
+  if (!isRecord3(params)) return void 0;
+  const item = isRecord3(params["item"]) ? params["item"] : params;
+  if (item["delivery"] !== "async" || !Array.isArray(item["questions"])) return void 0;
+  const mapped = [];
+  item["questions"].forEach((question, index) => {
+    if (!isRecord3(question)) return;
+    const title = trimText(question["title"]);
+    if (!title) return;
+    const labels = Array.isArray(question["options"]) ? question["options"] : [];
+    const options = labels.map((label) => trimText(label)).filter((label) => label !== void 0).map((label) => ({ label, description: "" }));
+    mapped.push({
+      id: `q${index}`,
+      header: title,
+      question: title,
+      options,
+      allowFreeform: true,
+      multiSelect: false
+    });
+  });
+  return mapped.length > 0 ? mapped : void 0;
 }
-function toApplyPatchFileChanges(params) {
-  const out = [];
-  for (const { path, kind, movePath, diff, content } of fileChangeEntries(params)) {
-    if (kind === "add") {
-      out.push({
-        path,
-        changeKind: "add",
-        ...content !== void 0 ? { content: { kind: "replace", newText: content } } : {}
-      });
-    } else if (kind === "delete") {
-      out.push({
-        path,
-        changeKind: "delete",
-        ...content !== void 0 ? { content: { kind: "replace", oldText: content, newText: "" } } : {}
-      });
-    } else if (movePath) {
-      out.push({
-        path,
-        changeKind: "rename",
-        ...diff ? { content: { kind: "unified", diff } } : {}
-      });
-    } else {
-      out.push({
-        path,
-        changeKind: "modify",
-        ...diff ? { content: { kind: "unified", diff } } : {}
-      });
+function toCodexUserInputAnswers(answers) {
+  if (!isRecord3(answers)) return void 0;
+  const out = {};
+  for (const [questionId, value] of Object.entries(answers)) {
+    if (typeof value === "string") {
+      out[questionId] = { answers: [value] };
+      continue;
+    }
+    if (Array.isArray(value) && value.every((entry) => typeof entry === "string")) {
+      out[questionId] = { answers: [...value] };
+      continue;
     }
+    if (isRecord3(value) && Array.isArray(value["answers"]) && value["answers"].every((entry) => typeof entry === "string")) {
+      out[questionId] = { answers: [...value["answers"]] };
+      continue;
+    }
+    return void 0;
   }
   return out;
 }
-function describeCommandApproval(params) {
-  const record = isRecord3(params) ? params : {};
-  const commandValue = record["command"];
-  const command = Array.isArray(commandValue) ? commandValue.filter((entry) => typeof entry === "string").join(" ") : asString(commandValue) ?? "";
-  const cwd = asString(record["cwd"]);
-  const reason = trimText(record["reason"]);
-  const callId = asString(record["callId"]);
-  return {
-    command,
-    ...cwd ? { cwd } : {},
-    ...reason ? { reason } : {},
-    ...callId ? { callId } : {}
-  };
-}
-function describeFileChangeApproval(params) {
-  const record = isRecord3(params) ? params : {};
-  const reason = trimText(record["reason"]);
-  const grantRoot = asString(record["grantRoot"]);
-  const callId = asString(record["callId"]);
-  const detail = reason ?? describeFileChanges(record) ?? trimText(grantRoot);
-  return {
-    ...reason ? { reason } : {},
-    ...detail ? { detail } : {},
-    ...grantRoot ? { grantRoot } : {},
-    ...callId ? { callId } : {},
-    fileChanges: toApplyPatchFileChanges(record)
-  };
+function toCanonicalUserInputAnswers(answers) {
+  return Object.fromEntries(
+    Object.entries(answers).map(([questionId, value]) => [
+      questionId,
+      value.answers.length === 1 ? value.answers[0] : [...value.answers]
+    ])
+  );
 }
-function describePermissionsApproval(params) {
-  const record = isRecord3(params) ? params : {};
-  const permissions = isRecord3(record["permissions"]) ? record["permissions"] : {};
-  const fileSystem = isRecord3(permissions["fileSystem"]) ? permissions["fileSystem"] : {};
-  const network = isRecord3(permissions["network"]) ? permissions["network"] : {};
-  const pathsOf = (value) => Array.isArray(value) ? value.flatMap((entry) => typeof entry === "string" && entry.length > 0 ? [entry] : []) : [];
-  const read = pathsOf(fileSystem["read"]);
-  const write = pathsOf(fileSystem["write"]);
-  const entries = Array.isArray(fileSystem["entries"]) ? fileSystem["entries"] : [];
-  for (const entry of entries) {
-    if (!isRecord3(entry) || !isRecord3(entry["path"])) continue;
-    const target = entry["path"];
-    const path = target["type"] === "path" ? asString(target["path"]) : target["type"] === "glob_pattern" ? asString(target["pattern"]) : void 0;
-    if (!path) continue;
-    if (entry["access"] === "read") read.push(path);
-    if (entry["access"] === "write") write.push(path);
+
+// src/usage/codexQuota.ts
+var asRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+var asFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : null;
+var asNonEmptyString = (value) => typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+var clampPercent = (value) => Math.min(100, Math.max(0, value));
+var epochSecondsToIso = (value) => {
+  const seconds = asFiniteNumber(value);
+  if (seconds === null) return null;
+  const date = new Date(seconds * 1e3);
+  return Number.isNaN(date.getTime()) ? null : date.toISOString();
+};
+var SESSION_WINDOW_MINUTES = 5 * 60;
+var WEEKLY_WINDOW_MINUTES = 7 * 24 * 60;
+var formatWindowDuration = (minutes) => {
+  if (minutes % (24 * 60) === 0) return `${String(minutes / (24 * 60))}d`;
+  if (minutes % 60 === 0) return `${String(minutes / 60)}h`;
+  return `${String(minutes)}m`;
+};
+var classifyWindow = (minutes, slot) => {
+  if (minutes === SESSION_WINDOW_MINUTES) {
+    return { id: "session", label: { key: "usage.window.session" } };
   }
-  const reason = trimText(record["reason"]);
+  if (minutes === WEEKLY_WINDOW_MINUTES) {
+    return { id: "weekly", label: { key: "usage.window.weekly" } };
+  }
+  if (minutes === null) return { id: slot, label: { key: "usage.window.limit" } };
   return {
-    ...reason ? { reason } : {},
-    read: [...new Set(read)],
-    write: [...new Set(write)],
-    network: network["enabled"] === true
-  };
-}
-function toPermissionsResponse(decision, params, persistent) {
-  if (decision !== "allow") return { permissions: {} };
-  const requested = isRecord3(params) && isRecord3(params["permissions"]) ? params["permissions"] : {};
-  return {
-    permissions: {
-      ...requested["fileSystem"] !== void 0 ? { fileSystem: requested["fileSystem"] } : {},
-      ...requested["network"] !== void 0 ? { network: requested["network"] } : {}
-    },
-    scope: persistent ? "session" : "turn"
-  };
-}
-function describeMcpElicitation(params) {
-  const record = isRecord3(params) ? params : {};
-  const appName = asString(record["appName"]) ?? asString(record["serverName"]) ?? void 0;
-  const serverName = asString(record["serverName"]);
-  const message = trimText(record["message"]);
-  const url = asString(record["url"]) ?? asString(record["authorizationUrl"]);
-  const identity = appName ?? url ?? "unknown";
-  return {
-    ...appName ? { appName } : {},
-    ...serverName ? { serverName } : {},
-    ...message ? { message } : {},
-    ...url ? { url } : {},
-    identity,
-    mode: url ? "url" : "form",
-    ...record["requestedSchema"] !== void 0 ? { schema: record["requestedSchema"] } : {}
-  };
-}
-function persistFromMeta(meta) {
-  if (!isRecord3(meta)) return void 0;
-  const persist = asString(meta["persist"]) ?? asString(meta["persistence"]);
-  if (persist === "session" || persist === "acceptForSession") return "session";
-  if (persist === "always" || persist === "permanent" || persist === "forever" || persist === "persistent" || persist === "acceptAlways") {
-    return "always";
-  }
-  return void 0;
-}
-function toMcpElicitationResponse(decision, params) {
-  const described = describeMcpElicitation(params);
-  if (decision !== "allow" || described.mode === "url") {
-    return {
-      action: decision === "allow" ? "decline" : decision === "cancel" ? "cancel" : "decline"
-    };
-  }
-  const schema = isRecord3(described.schema) ? described.schema : void 0;
-  const properties = schema && isRecord3(schema["properties"]) ? schema["properties"] : {};
-  const required = schema && Array.isArray(schema["required"]) ? schema["required"] : [];
-  const content = {};
-  for (const [key, spec] of Object.entries(properties)) {
-    if (!isRecord3(spec)) continue;
-    if (Array.isArray(spec["oneOf"]) || Array.isArray(spec["enum"])) {
-      const options = Array.isArray(spec["oneOf"]) ? spec["oneOf"] : Array.isArray(spec["enum"]) ? spec["enum"] : [];
-      const first = options[0];
-      content[key] = isRecord3(first) ? first["const"] ?? first["value"] ?? first : first;
-    } else if (spec["type"] === "boolean") {
-      content[key] = true;
-    } else if (typeof spec["default"] !== "undefined") {
-      content[key] = spec["default"];
-    }
-  }
-  for (const key of required) {
-    if (typeof key === "string" && !(key in content)) {
-      return { action: "decline" };
-    }
-  }
-  const persist = persistFromMeta(isRecord3(params) ? params["_meta"] : void 0);
-  return {
-    action: "accept",
-    content,
-    ...persist ? { _meta: { persist } } : {}
-  };
-}
-
-// src/codexArtifacts.ts
-function imageGenerationArtifacts(input) {
-  if (input.itemType !== "imageGeneration" || input.status !== "completed") return [];
-  if (!isRecord3(input.params)) return [];
-  const item = isRecord3(input.params["item"]) ? input.params["item"] : input.params;
-  const savedPath = item["savedPath"];
-  if (typeof savedPath !== "string" || savedPath.trim().length === 0) return [];
-  return [{ path: savedPath, ...input.itemId ? { toolCallId: input.itemId } : {} }];
-}
-
-// src/codexItemTypes.ts
-function normalizeItemType(value) {
-  if (!value) return "item";
-  return value.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[._/-]/g, " ").replace(/\s+/g, " ").trim().toLowerCase();
-}
-function toCanonicalItemType(raw) {
-  const type = normalizeItemType(raw);
-  if (type.includes("user")) return "user_message";
-  if (type.includes("agent message") || type.includes("assistant")) return "assistant_message";
-  if (type.includes("reasoning") || type.includes("thought")) return "reasoning";
-  if (type.includes("plan") || type.includes("todo")) return "plan";
-  if (type.includes("command")) return "command_execution";
-  if (type.includes("file change") || type.includes("patch") || type.includes("edit")) {
-    return "file_change";
-  }
-  if (type.includes("mcp")) return "mcp_tool_call";
-  if (type.includes("dynamic tool")) return "dynamic_tool_call";
-  if (type.includes("collab")) return "collab_agent_tool_call";
-  if (type.includes("web search")) return "web_search";
-  if (type.includes("image")) return "image_view";
-  if (type.includes("review entered")) return "review_entered";
-  if (type.includes("review exited")) return "review_exited";
-  if (type.includes("compact")) return "context_compaction";
-  if (type.includes("error")) return "error";
-  return "unknown";
-}
-
-// src/events/userInput.ts
-function toUserInputQuestions(params) {
-  if (!isRecord3(params)) return void 0;
-  const questions = Array.isArray(params["questions"]) ? params["questions"] : [];
-  const mapped = [];
-  for (const question of questions) {
-    if (!isRecord3(question)) return void 0;
-    const id = asString(question["id"]);
-    const header = asString(question["header"]);
-    const text = asString(question["question"]);
-    const rawOptions = Array.isArray(question["options"]) ? question["options"] : [];
-    const options = [];
-    for (const option of rawOptions) {
-      if (!isRecord3(option)) continue;
-      const label = trimText(option["label"]);
-      if (!label) continue;
-      options.push({
-        ...asString(option["id"]) ? { id: asString(option["id"]) } : {},
-        label,
-        description: trimText(option["description"]) ?? ""
-      });
-    }
-    if (!id || !header || !text || options.length === 0) return void 0;
-    mapped.push({
-      id,
-      header,
-      question: text,
-      options,
-      multiSelect: false
-    });
-  }
-  return mapped.length > 0 ? mapped : void 0;
-}
-function toAsyncQuestions(params) {
-  if (!isRecord3(params)) return void 0;
-  const item = isRecord3(params["item"]) ? params["item"] : params;
-  if (item["delivery"] !== "async" || !Array.isArray(item["questions"])) return void 0;
-  const mapped = [];
-  item["questions"].forEach((question, index) => {
-    if (!isRecord3(question)) return;
-    const title = trimText(question["title"]);
-    if (!title) return;
-    const labels = Array.isArray(question["options"]) ? question["options"] : [];
-    const options = labels.map((label) => trimText(label)).filter((label) => label !== void 0).map((label) => ({ label, description: "" }));
-    mapped.push({
-      id: `q${index}`,
-      header: title,
-      question: title,
-      options,
-      allowFreeform: true,
-      multiSelect: false
-    });
-  });
-  return mapped.length > 0 ? mapped : void 0;
-}
-function toCodexUserInputAnswers(answers) {
-  if (!isRecord3(answers)) return void 0;
-  const out = {};
-  for (const [questionId, value] of Object.entries(answers)) {
-    if (typeof value === "string") {
-      out[questionId] = { answers: [value] };
-      continue;
-    }
-    if (Array.isArray(value) && value.every((entry) => typeof entry === "string")) {
-      out[questionId] = { answers: [...value] };
-      continue;
-    }
-    if (isRecord3(value) && Array.isArray(value["answers"]) && value["answers"].every((entry) => typeof entry === "string")) {
-      out[questionId] = { answers: [...value["answers"]] };
-      continue;
-    }
-    return void 0;
-  }
-  return out;
-}
-function toCanonicalUserInputAnswers(answers) {
-  return Object.fromEntries(
-    Object.entries(answers).map(([questionId, value]) => [
-      questionId,
-      value.answers.length === 1 ? value.answers[0] : [...value.answers]
-    ])
-  );
-}
-
-// src/usage/codexQuota.ts
-var asRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
-var asFiniteNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : null;
-var asNonEmptyString = (value) => typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
-var clampPercent = (value) => Math.min(100, Math.max(0, value));
-var epochSecondsToIso = (value) => {
-  const seconds = asFiniteNumber(value);
-  if (seconds === null) return null;
-  const date = new Date(seconds * 1e3);
-  return Number.isNaN(date.getTime()) ? null : date.toISOString();
-};
-var SESSION_WINDOW_MINUTES = 5 * 60;
-var WEEKLY_WINDOW_MINUTES = 7 * 24 * 60;
-var formatWindowDuration = (minutes) => {
-  if (minutes % (24 * 60) === 0) return `${String(minutes / (24 * 60))}d`;
-  if (minutes % 60 === 0) return `${String(minutes / 60)}h`;
-  return `${String(minutes)}m`;
-};
-var classifyWindow = (minutes, slot) => {
-  if (minutes === SESSION_WINDOW_MINUTES) {
-    return { id: "session", label: { key: "usage.window.session" } };
-  }
-  if (minutes === WEEKLY_WINDOW_MINUTES) {
-    return { id: "weekly", label: { key: "usage.window.weekly" } };
-  }
-  if (minutes === null) return { id: slot, label: { key: "usage.window.limit" } };
-  return {
-    id: `window-${String(minutes)}m`,
-    label: { key: "usage.window.duration", values: { duration: formatWindowDuration(minutes) } }
+    id: `window-${String(minutes)}m`,
+    label: { key: "usage.window.duration", values: { duration: formatWindowDuration(minutes) } }
   };
 };
 var mapWindow = (raw, slot, describe) => {
@@ -2858,23 +2663,218 @@ function mapNotificationToEvents(input) {
   }
 }
 
-// src/events/serverRequests.ts
-function toRequestTypeFromKind(kind) {
-  switch (kind) {
-    case "command":
-      return "command_execution_approval";
-    case "file-read":
-      return "file_read_approval";
-    case "file-change":
-      return "file_change_approval";
-    case "apply-patch":
-      return "apply_patch_approval";
-    case "mcp-elicitation":
-      return "mcp_elicitation_approval";
-    // 契约没有单独的权限审批类型；宿主把 unknown 当 tool 类审批卡片渲染。
-    case "permission":
-    default:
-      return "unknown";
+// src/approvalMapping.ts
+function fileChangeEntries(params) {
+  if (!isRecord3(params)) return [];
+  const item = isRecord3(params["item"]) ? params["item"] : params;
+  const changes = item["changes"] ?? item["fileChanges"] ?? params["fileChanges"];
+  if (!isRecord3(changes) && !Array.isArray(changes)) return [];
+  const entries = Array.isArray(changes) ? changes : Object.entries(changes).map(([path, change]) => ({
+    path,
+    ...isRecord3(change) ? change : {}
+  }));
+  const out = [];
+  for (const entry of entries) {
+    if (!isRecord3(entry)) continue;
+    const path = asString(entry["path"]) ?? asString(entry["file"]);
+    if (!path) continue;
+    out.push({
+      path,
+      kind: (asString(entry["type"]) ?? asString(entry["kind"]) ?? "update").toLowerCase(),
+      movePath: asString(entry["move_path"]) ?? asString(entry["movePath"]),
+      diff: asString(entry["unified_diff"]) ?? asString(entry["unifiedDiff"]),
+      content: asString(entry["content"])
+    });
+  }
+  return out;
+}
+var MAX_DESCRIBED_FILE_CHANGES = 20;
+function describeFileChanges(params) {
+  const entries = fileChangeEntries(params).toSorted(
+    (left, right) => left.path.localeCompare(right.path)
+  );
+  if (entries.length === 0) return void 0;
+  const lines = entries.slice(0, MAX_DESCRIBED_FILE_CHANGES).map(
+    (entry) => entry.movePath ? `${entry.kind} ${entry.path} -> ${entry.movePath}` : `${entry.kind} ${entry.path}`
+  );
+  const remaining = entries.length - lines.length;
+  return remaining > 0 ? `${lines.join("\n")}
++${remaining} more` : lines.join("\n");
+}
+function toApplyPatchFileChanges(params) {
+  const out = [];
+  for (const { path, kind, movePath, diff, content } of fileChangeEntries(params)) {
+    if (kind === "add") {
+      out.push({
+        path,
+        changeKind: "add",
+        ...content !== void 0 ? { content: { kind: "replace", newText: content } } : {}
+      });
+    } else if (kind === "delete") {
+      out.push({
+        path,
+        changeKind: "delete",
+        ...content !== void 0 ? { content: { kind: "replace", oldText: content, newText: "" } } : {}
+      });
+    } else if (movePath) {
+      out.push({
+        path,
+        changeKind: "rename",
+        ...diff ? { content: { kind: "unified", diff } } : {}
+      });
+    } else {
+      out.push({
+        path,
+        changeKind: "modify",
+        ...diff ? { content: { kind: "unified", diff } } : {}
+      });
+    }
+  }
+  return out;
+}
+function describeCommandApproval(params) {
+  const record = isRecord3(params) ? params : {};
+  const commandValue = record["command"];
+  const command = Array.isArray(commandValue) ? commandValue.filter((entry) => typeof entry === "string").join(" ") : asString(commandValue) ?? "";
+  const cwd = asString(record["cwd"]);
+  const reason = trimText(record["reason"]);
+  const callId = asString(record["callId"]);
+  return {
+    command,
+    ...cwd ? { cwd } : {},
+    ...reason ? { reason } : {},
+    ...callId ? { callId } : {}
+  };
+}
+function describeFileChangeApproval(params) {
+  const record = isRecord3(params) ? params : {};
+  const reason = trimText(record["reason"]);
+  const grantRoot = asString(record["grantRoot"]);
+  const callId = asString(record["callId"]);
+  const detail = reason ?? describeFileChanges(record) ?? trimText(grantRoot);
+  return {
+    ...reason ? { reason } : {},
+    ...detail ? { detail } : {},
+    ...grantRoot ? { grantRoot } : {},
+    ...callId ? { callId } : {},
+    fileChanges: toApplyPatchFileChanges(record)
+  };
+}
+function describePermissionsApproval(params) {
+  const record = isRecord3(params) ? params : {};
+  const permissions = isRecord3(record["permissions"]) ? record["permissions"] : {};
+  const fileSystem = isRecord3(permissions["fileSystem"]) ? permissions["fileSystem"] : {};
+  const network = isRecord3(permissions["network"]) ? permissions["network"] : {};
+  const pathsOf = (value) => Array.isArray(value) ? value.flatMap((entry) => typeof entry === "string" && entry.length > 0 ? [entry] : []) : [];
+  const read = pathsOf(fileSystem["read"]);
+  const write = pathsOf(fileSystem["write"]);
+  const entries = Array.isArray(fileSystem["entries"]) ? fileSystem["entries"] : [];
+  for (const entry of entries) {
+    if (!isRecord3(entry) || !isRecord3(entry["path"])) continue;
+    const target = entry["path"];
+    const path = target["type"] === "path" ? asString(target["path"]) : target["type"] === "glob_pattern" ? asString(target["pattern"]) : void 0;
+    if (!path) continue;
+    if (entry["access"] === "read") read.push(path);
+    if (entry["access"] === "write") write.push(path);
+  }
+  const reason = trimText(record["reason"]);
+  return {
+    ...reason ? { reason } : {},
+    read: [...new Set(read)],
+    write: [...new Set(write)],
+    network: network["enabled"] === true
+  };
+}
+function toPermissionsResponse(decision, params, persistent) {
+  if (decision !== "allow") return { permissions: {} };
+  const requested = isRecord3(params) && isRecord3(params["permissions"]) ? params["permissions"] : {};
+  return {
+    permissions: {
+      ...requested["fileSystem"] !== void 0 ? { fileSystem: requested["fileSystem"] } : {},
+      ...requested["network"] !== void 0 ? { network: requested["network"] } : {}
+    },
+    scope: persistent ? "session" : "turn"
+  };
+}
+function describeMcpElicitation(params) {
+  const record = isRecord3(params) ? params : {};
+  const appName = asString(record["appName"]) ?? asString(record["serverName"]) ?? void 0;
+  const serverName = asString(record["serverName"]);
+  const message = trimText(record["message"]);
+  const url = asString(record["url"]) ?? asString(record["authorizationUrl"]);
+  const identity = appName ?? url ?? "unknown";
+  return {
+    ...appName ? { appName } : {},
+    ...serverName ? { serverName } : {},
+    ...message ? { message } : {},
+    ...url ? { url } : {},
+    identity,
+    mode: url ? "url" : "form",
+    ...record["requestedSchema"] !== void 0 ? { schema: record["requestedSchema"] } : {}
+  };
+}
+function persistFromMeta(meta) {
+  if (!isRecord3(meta)) return void 0;
+  const persist = asString(meta["persist"]) ?? asString(meta["persistence"]);
+  if (persist === "session" || persist === "acceptForSession") return "session";
+  if (persist === "always" || persist === "permanent" || persist === "forever" || persist === "persistent" || persist === "acceptAlways") {
+    return "always";
+  }
+  return void 0;
+}
+function toMcpElicitationResponse(decision, params) {
+  const described = describeMcpElicitation(params);
+  if (decision !== "allow" || described.mode === "url") {
+    return {
+      action: decision === "allow" ? "decline" : decision === "cancel" ? "cancel" : "decline"
+    };
+  }
+  const schema = isRecord3(described.schema) ? described.schema : void 0;
+  const properties = schema && isRecord3(schema["properties"]) ? schema["properties"] : {};
+  const required = schema && Array.isArray(schema["required"]) ? schema["required"] : [];
+  const content = {};
+  for (const [key, spec] of Object.entries(properties)) {
+    if (!isRecord3(spec)) continue;
+    if (Array.isArray(spec["oneOf"]) || Array.isArray(spec["enum"])) {
+      const options = Array.isArray(spec["oneOf"]) ? spec["oneOf"] : Array.isArray(spec["enum"]) ? spec["enum"] : [];
+      const first = options[0];
+      content[key] = isRecord3(first) ? first["const"] ?? first["value"] ?? first : first;
+    } else if (spec["type"] === "boolean") {
+      content[key] = true;
+    } else if (typeof spec["default"] !== "undefined") {
+      content[key] = spec["default"];
+    }
+  }
+  for (const key of required) {
+    if (typeof key === "string" && !(key in content)) {
+      return { action: "decline" };
+    }
+  }
+  const persist = persistFromMeta(isRecord3(params) ? params["_meta"] : void 0);
+  return {
+    action: "accept",
+    content,
+    ...persist ? { _meta: { persist } } : {}
+  };
+}
+
+// src/events/serverRequests.ts
+function toRequestTypeFromKind(kind) {
+  switch (kind) {
+    case "command":
+      return "command_execution_approval";
+    case "file-read":
+      return "file_read_approval";
+    case "file-change":
+      return "file_change_approval";
+    case "apply-patch":
+      return "apply_patch_approval";
+    case "mcp-elicitation":
+      return "mcp_elicitation_approval";
+    // 契约没有单独的权限审批类型；宿主把 unknown 当 tool 类审批卡片渲染。
+    case "permission":
+    default:
+      return "unknown";
   }
 }
 function toRequestTypeFromMethod(method) {
@@ -3064,19 +3064,12 @@ function openCommandsOf(booked) {
   };
 }
 
-// src/sessionRuntime.ts
+// src/sessionCollab.ts
 var COLLAB_META_LOOKUP_TIMEOUT_MS = 5e3;
 function metaValue(value) {
   const text = asString(value)?.trim();
   return text === void 0 || text.length === 0 ? void 0 : text;
 }
-function cancelWireFor(pending) {
-  if (pending.kind === "permission") return toPermissionsResponse("cancel", pending.params, false);
-  return pending.kind === "mcp-elicitation" ? toMcpElicitationResponse("cancel", pending.params) : { decision: "cancel" };
-}
-var sleep = (ms) => new Promise((resolve2) => {
-  setTimeout(resolve2, ms);
-});
 function isRootChild(agentPath, agentThreadId, rootThreadId) {
   if (agentThreadId === rootThreadId) return true;
   return agentPath === "/root" || agentPath === "/";
@@ -3090,224 +3083,10 @@ function readSubAgentActivity(method, params) {
     agentPath: asString(item["agentPath"]) ?? void 0
   };
 }
-function pathLeaf2(value) {
-  if (!value) return void 0;
-  const parts = value.split("/").filter((part) => part.length > 0);
-  return parts.at(-1);
-}
-function unconfirmedAnswerError(requestId, delivery) {
-  return new Error(
-    delivery === "closed" ? `could not confirm that codex received the answer to request ${requestId}: the session closed before the write was confirmed` : `could not confirm that codex received the answer to request ${requestId}: writing it to the CLI failed`
-  );
-}
-var CodexSessionRuntime = class {
-  threadId;
-  cwd;
-  session;
-  nativeThreadId;
-  activeTurnId;
-  model;
-  runtimeMode;
-  /** 宿主解好的这一轮的档（座位画的就是它）。缺席 = 宿主没给，按 `runtimeMode` 查表。 */
-  nativeModeId;
-  interactionMode;
-  closed = false;
-  closeCompleted = false;
-  turns = [];
-  pendingApprovals = /* @__PURE__ */ new Map();
-  pendingUserInputs = /* @__PURE__ */ new Map();
-  requestKinds = /* @__PURE__ */ new Map();
-  writeAcks = /* @__PURE__ */ new Map();
-  grants;
-  declineRelay;
-  collabChildren = /* @__PURE__ */ new Map();
-  collabChildMeta = /* @__PURE__ */ new Map();
-  liveForeignTurns = /* @__PURE__ */ new Map();
-  openCommands = /* @__PURE__ */ new Map();
-  collabReceiverTurns = /* @__PURE__ */ new Map();
-  memoryThreadIds = /* @__PURE__ */ new Set();
-  /** 这个会话见过的主额度快照（按字段合并），额度用尽停轮时点名窗口用。 */
-  rateLimits;
-  appServerArgs;
-  hasConfiguredMcpServer;
-  host;
-  attachments;
-  rpc;
-  emit;
-  /**
-   * 对外 requestId 的前缀，每个会话（即每个 app-server 进程）一份。JSON-RPC id 每个进程
-   * 都从 0 数起，宿主按 requestId 记「已接受」，不加前缀的话重启后的新请求会撞上旧请求。
-   */
-  #requestIdPrefix = `codex-${NodeCrypto2.randomUUID()}:`;
-  /** JSON-RPC id → 对外 requestId。`serverRequest/resolved` 里的 id 可能是数字也可能是字符串。 */
-  requestIdFor(jsonRpcId) {
-    return `${this.#requestIdPrefix}${String(jsonRpcId)}`;
-  }
-  /** 这一轮该用哪套三字段组合：只由这一轮的档决定（见 `codexNativeModeFor`）。 */
-  #threadConfig() {
-    return codexThreadConfigForNativeMode(codexNativeModeFor(this.runtimeMode, this.nativeModeId));
-  }
-  /** 同上，沙箱策略那一位。 */
-  #turnSandboxPolicy() {
-    return codexTurnSandboxPolicyForNativeMode(
-      codexNativeModeFor(this.runtimeMode, this.nativeModeId)
-    );
-  }
-  /** 给 CLI 的应答写入失败：带上线程与方法名记一行 warn。 */
-  #warnAnswerWriteFailed(method, jsonRpcId, error) {
-    this.host.log.warn("writing an answer to codex failed", {
-      threadId: this.threadId,
-      method,
-      jsonRpcId,
-      error: error instanceof Error ? error.message : String(error)
-    });
-  }
-  constructor(host, rpc, emit, input, cwd, appServerArgs, grants, declineRelay, attachments) {
-    this.attachments = attachments;
-    this.host = host;
-    this.rpc = rpc;
-    this.emit = emit;
-    this.threadId = input.threadId;
-    this.cwd = cwd;
-    this.runtimeMode = input.runtimeMode;
-    this.nativeModeId = input.nativeModeId;
-    this.appServerArgs = appServerArgs;
-    this.hasConfiguredMcpServer = (input.mcpServers?.length ?? 0) > 0;
-    this.grants = grants ?? createApprovalGrantStore();
-    this.declineRelay = declineRelay ?? createDeclineReasonRelay();
-    const createdAt = nowIso();
-    this.session = {
-      provider: CODEX_DRIVER_KIND,
-      providerInstanceId: host.instanceId,
-      status: "idle",
-      runtimeMode: input.runtimeMode,
-      nativeModeId: codexNativeModeFor(input.runtimeMode, input.nativeModeId),
-      cwd,
-      threadId: input.threadId,
-      createdAt,
-      updatedAt: createdAt,
-      ...input.bindingGeneration === void 0 ? {} : { bindingGeneration: input.bindingGeneration }
-    };
-  }
-  registerWriteAck(jsonRpcId) {
-    return new Promise((resolve2) => {
-      this.writeAcks.set(jsonRpcId, { resolve: resolve2 });
-    });
-  }
-  settleNativeWrite(requestId, status) {
-    const ack = this.writeAcks.get(requestId);
-    if (!ack) return;
-    this.writeAcks.delete(requestId);
-    ack.resolve(status);
-  }
-  failPendingNativeWrites(reason) {
-    for (const [, ack] of this.writeAcks) ack.resolve("closed");
-    this.writeAcks.clear();
-    void reason;
-  }
-  async confirmAfterNativeWrite(jsonRpcId) {
-    const existing = this.writeAcks.get(jsonRpcId);
-    if (existing) {
-      return await new Promise((resolve2) => {
-        const previous = existing.resolve;
-        existing.resolve = (status) => {
-          previous(status);
-          resolve2(status);
-        };
-      });
-    }
-    return await this.registerWriteAck(jsonRpcId);
-  }
-  handleStderrLine(line) {
-    const kind = classifyStderrLine(line);
-    if (kind === "drop") return;
-    if (isFatalStderr(line)) {
-      this.emit({
-        eventId: nextEventId(),
-        provider: CODEX_DRIVER_KIND,
-        threadId: this.threadId,
-        createdAt: nowIso(),
-        type: "runtime.error",
-        payload: { message: line }
-      });
-      return;
-    }
-    if (kind === "error") {
-      this.host.log.error(line, { threadId: this.threadId });
-      return;
-    }
-    this.host.log.warn(line, { threadId: this.threadId });
-  }
-  handleNotification(method, params) {
-    if (this.closed) return;
-    const conversationId = conversationIdFromNotification(params);
-    if (conversationId && conversationId !== this.nativeThreadId && conversationId !== this.threadId) {
-      this.interceptCollab(method, params, conversationId);
-      return;
-    }
-    if (conversationId && this.memoryThreadIds.has(conversationId)) {
-      if (method === "serverRequest" || method === "serverRequest/resolved") {
-        this.dispatchMapped(method, params);
-      }
-      return;
-    }
-    if (method === "thread/started") {
-      const name = isRecord3(params) ? asString(params["name"]) ?? (isRecord3(params["thread"]) ? asString(params["thread"]["name"]) : null) : null;
-      if (isMemoryConsolidationThread(name ?? void 0) && conversationId) {
-        this.memoryThreadIds.add(conversationId);
-        return;
-      }
-    }
-    const activity = readSubAgentActivity(method, params);
-    if (activity?.agentThreadId !== void 0 && !isRootChild(activity.agentPath, activity.agentThreadId, this.nativeThreadId ?? this.threadId)) {
-      this.upsertCollabChild(activity.agentThreadId, { agentPath: activity.agentPath });
-    }
-    this.dispatchMapped(method, params);
-  }
-  dispatchMapped(method, params) {
-    if (method === "serverRequest/resolved") {
-      const rawId = isRecord3(params) ? params["requestId"] : void 0;
-      if (typeof rawId !== "number" && typeof rawId !== "string") return;
-      const resolvedId = this.requestIdFor(rawId);
-      const pending = this.pendingApprovals.get(resolvedId);
-      if (pending === void 0) return;
-      pending.release();
-      this.emit({
-        eventId: nextEventId(),
-        provider: CODEX_DRIVER_KIND,
-        threadId: this.threadId,
-        createdAt: nowIso(),
-        type: "request.resolved",
-        requestId: resolvedId,
-        payload: {
-          requestType: toRequestTypeFromKind(this.requestKinds.get(resolvedId)),
-          resolution: params
-        }
-      });
-      return;
-    }
-    trackOpenCommand(this.openCommands, method, params);
-    if (method === "account/rateLimits/updated" && isRecord3(params)) {
-      this.rateLimits = mergeCodexRateLimits(this.rateLimits, params["rateLimits"]);
-    }
-    for (const event of mapNotificationToEvents({
-      method,
-      params,
-      threadId: this.threadId,
-      providerInstanceId: this.host.instanceId,
-      rateLimits: this.rateLimits
-    })) {
-      this.emit(event);
-    }
-    if (method === "turn/started") {
-      const turnId = turnIdOf(params);
-      if (turnId) this.activeTurnId = turnId;
-    }
-    if (method === "turn/completed") {
-      this.activeTurnId = void 0;
-      const { activeTurnId: _completedTurn, ...idleSession } = this.session;
-      this.session = { ...idleSession, status: "idle", updatedAt: nowIso() };
-    }
+var CodexSessionCollab = class {
+  runtime;
+  constructor(runtime) {
+    this.runtime = runtime;
   }
   interceptCollab(method, params, conversationId) {
     const thread = isRecord3(params) && isRecord3(params["thread"]) ? params["thread"] : void 0;
@@ -3316,8 +3095,9 @@ var CodexSessionRuntime = class {
     const spawn = isRecord3(subAgent) ? subAgent["thread_spawn"] : void 0;
     if (method === "thread/started" && thread !== void 0 && isRecord3(spawn)) {
       const agentPath = asString(spawn["agent_path"]) ?? void 0;
-      const knownPath = agentPath ?? this.collabChildren.get(conversationId)?.agentPath;
-      if (isRootChild(knownPath, conversationId, this.nativeThreadId ?? this.threadId)) return;
+      const knownPath = agentPath ?? this.runtime.collabChildren.get(conversationId)?.agentPath;
+      if (isRootChild(knownPath, conversationId, this.runtime.nativeThreadId ?? this.runtime.threadId))
+        return;
       this.upsertCollabChild(conversationId, {
         agentPath,
         role: asString(spawn["agent_role"]) ?? asString(thread["agentRole"]) ?? void 0,
@@ -3329,13 +3109,18 @@ var CodexSessionRuntime = class {
     if ((method === "item/started" || method === "item/completed") && itemType === "collabAgentToolCall") {
       const item = isRecord3(params) ? isRecord3(params["item"]) ? params["item"] : params : {};
       const receiver = asString(item["receiverThreadId"]) ?? asString(item["agentThreadId"]);
-      if (receiver && this.activeTurnId) this.collabReceiverTurns.set(receiver, this.activeTurnId);
+      if (receiver && this.runtime.activeTurnId)
+        this.runtime.collabReceiverTurns.set(receiver, this.runtime.activeTurnId);
       return;
     }
     const activity = readSubAgentActivity(method, params);
     if (activity !== void 0) {
       const agentThreadId = activity.agentThreadId ?? conversationId;
-      if (isRootChild(activity.agentPath, agentThreadId, this.nativeThreadId ?? this.threadId)) {
+      if (isRootChild(
+        activity.agentPath,
+        agentThreadId,
+        this.runtime.nativeThreadId ?? this.runtime.threadId
+      )) {
         return;
       }
       this.upsertCollabChild(agentThreadId, { agentPath: activity.agentPath });
@@ -3350,16 +3135,16 @@ var CodexSessionRuntime = class {
       this.updateCollabChildMeta(conversationId, { model, effort }, true);
       return;
     }
-    const child = this.collabChildren.get(conversationId);
+    const child = this.runtime.collabChildren.get(conversationId);
     if (method === "turn/started") {
       this.reopenCollabChildMeta(conversationId);
       const turnId = turnIdOf(params);
-      if (turnId) this.liveForeignTurns.set(conversationId, turnId);
+      if (turnId) this.runtime.liveForeignTurns.set(conversationId, turnId);
     }
     if (method === "turn/completed" || method === "thread/closed") {
-      this.liveForeignTurns.delete(conversationId);
+      this.runtime.liveForeignTurns.delete(conversationId);
     }
-    if (method === "thread/closed" && this.collabChildren.has(conversationId)) {
+    if (method === "thread/closed" && this.runtime.collabChildren.has(conversationId)) {
       this.metaOf(conversationId).closed = true;
     }
     if (!child) {
@@ -3406,12 +3191,12 @@ var CodexSessionRuntime = class {
    */
   upsertCollabChild(agentThreadId, identity) {
     const fill = (known, next) => known ?? (next !== void 0 && next.length > 0 ? next : void 0);
-    const existing = this.collabChildren.get(agentThreadId);
+    const existing = this.runtime.collabChildren.get(agentThreadId);
     const agentPath = fill(existing?.agentPath, identity.agentPath);
     const role = fill(existing?.role, identity.role);
     const nickname = fill(existing?.nickname, identity.nickname);
     if (existing === void 0) {
-      const spawnTurnId = this.activeTurnId;
+      const spawnTurnId = this.runtime.activeTurnId;
       const child = {
         agentThreadId,
         ...agentPath ? { agentPath } : {},
@@ -3420,7 +3205,7 @@ var CodexSessionRuntime = class {
         ...spawnTurnId ? { spawnTurnId } : {},
         status: "running"
       };
-      this.collabChildren.set(agentThreadId, child);
+      this.runtime.collabChildren.set(agentThreadId, child);
       this.emitCollab("collabAgent/started", child);
       this.startCollabChildMetaLookup(agentThreadId);
       return;
@@ -3434,19 +3219,19 @@ var CodexSessionRuntime = class {
       ...role ? { role } : {},
       ...nickname ? { nickname } : {}
     };
-    this.collabChildren.set(agentThreadId, merged);
+    this.runtime.collabChildren.set(agentThreadId, merged);
     this.emitCollab("collabAgent/metadata", merged, { status: merged.status });
   }
   metaOf(agentThreadId) {
-    let meta = this.collabChildMeta.get(agentThreadId);
+    let meta = this.runtime.collabChildMeta.get(agentThreadId);
     if (meta === void 0) {
       meta = { lookupStarted: false, closed: false };
-      this.collabChildMeta.set(agentThreadId, meta);
+      this.runtime.collabChildMeta.set(agentThreadId, meta);
     }
     return meta;
   }
   reopenCollabChildMeta(agentThreadId) {
-    const meta = this.collabChildMeta.get(agentThreadId);
+    const meta = this.runtime.collabChildMeta.get(agentThreadId);
     if (meta !== void 0) meta.closed = false;
   }
   /**
@@ -3460,7 +3245,7 @@ var CodexSessionRuntime = class {
     if (model === meta.model && effort === meta.effort) return;
     if (model !== void 0) meta.model = model;
     if (effort !== void 0) meta.effort = effort;
-    const child = this.collabChildren.get(agentThreadId);
+    const child = this.runtime.collabChildren.get(agentThreadId);
     if (child !== void 0 && !meta.closed) this.emitCollab("collabAgent/metadataUpdated", child);
   }
   /**
@@ -3471,12 +3256,12 @@ var CodexSessionRuntime = class {
     const meta = this.metaOf(agentThreadId);
     if (meta.lookupStarted || meta.closed) return;
     meta.lookupStarted = true;
-    void this.rpc.request(
+    void this.runtime.rpc.request(
       "thread/resume",
       { threadId: agentThreadId, excludeTurns: true },
       COLLAB_META_LOOKUP_TIMEOUT_MS
     ).then((response) => {
-      if (this.closed || meta.closed || !isRecord3(response)) return;
+      if (this.runtime.closed || meta.closed || !isRecord3(response)) return;
       const thread = response["thread"];
       if (!isRecord3(thread) || thread["id"] !== agentThreadId) return;
       this.updateCollabChildMeta(
@@ -3487,180 +3272,463 @@ var CodexSessionRuntime = class {
     }).catch(() => void 0);
   }
   emitCollab(method, child, extra) {
-    const meta = this.collabChildMeta.get(child.agentThreadId);
+    const meta = this.runtime.collabChildMeta.get(child.agentThreadId);
     const params = {
       agentThreadId: child.agentThreadId,
       agentPath: child.agentPath,
-      agentRole: child.role ?? pathLeaf2(child.agentPath) ?? "general-purpose",
+      agentRole: child.role ?? pathLeaf(child.agentPath) ?? "general-purpose",
       agentNickname: child.nickname,
       ...meta?.model ? { model: meta.model } : {},
       ...meta?.effort ? { effort: meta.effort } : {},
       ...isRecord3(extra) ? extra : {}
     };
-    for (const event of mapNotificationToEvents({
-      method,
-      params,
-      threadId: this.threadId,
-      providerInstanceId: this.host.instanceId
-    })) {
-      this.emit(event);
+    for (const event of mapNotificationToEvents({
+      method,
+      params,
+      threadId: this.runtime.threadId,
+      providerInstanceId: this.runtime.host.instanceId
+    })) {
+      this.runtime.emit(event);
+    }
+  }
+};
+
+// src/sessionRequests.ts
+function cancelWireFor(pending) {
+  if (pending.kind === "permission") return toPermissionsResponse("cancel", pending.params, false);
+  return pending.kind === "mcp-elicitation" ? toMcpElicitationResponse("cancel", pending.params) : { decision: "cancel" };
+}
+function unconfirmedAnswerError(requestId, delivery) {
+  return new Error(
+    delivery === "closed" ? `could not confirm that codex received the answer to request ${requestId}: the session closed before the write was confirmed` : `could not confirm that codex received the answer to request ${requestId}: writing it to the CLI failed`
+  );
+}
+var CodexSessionRequests = class {
+  runtime;
+  constructor(runtime) {
+    this.runtime = runtime;
+  }
+  /** 给 CLI 的应答写入失败：带上线程与方法名记一行 warn。 */
+  #warnAnswerWriteFailed(method, jsonRpcId, error) {
+    this.runtime.host.log.warn("writing an answer to codex failed", {
+      threadId: this.runtime.threadId,
+      method,
+      jsonRpcId,
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
+  async handleServerRequest(id, method, params) {
+    if (method === "item/commandExecution/requestApproval") {
+      await this.handleApproval(
+        id,
+        method,
+        params,
+        "command",
+        describeCommandApproval(params).command
+      );
+      return;
+    }
+    if (method === "item/fileChange/requestApproval") {
+      const described = describeFileChangeApproval(params);
+      await this.handleApproval(
+        id,
+        method,
+        params,
+        "file-change",
+        described.callId ?? "file-change"
+      );
+      return;
+    }
+    if (method === "mcpServer/elicitation/request") {
+      const described = describeMcpElicitation(params);
+      await this.handleApproval(id, method, params, "mcp-elicitation", described.identity);
+      return;
+    }
+    if (method === "item/permissions/requestApproval") {
+      await this.handleApproval(
+        id,
+        method,
+        params,
+        "permission",
+        isRecord3(params) ? asString(params["itemId"]) ?? "permission" : "permission"
+      );
+      return;
+    }
+    if (method === "item/tool/requestUserInput") {
+      const requestId = this.runtime.requestIdFor(id);
+      const events = mapServerRequestToEvents({
+        requestId,
+        method,
+        params,
+        threadId: this.runtime.threadId,
+        providerInstanceId: this.runtime.host.instanceId
+      });
+      if (events.length === 0) {
+        await this.runtime.rpc.respond(id, {});
+        return;
+      }
+      await new Promise((resolve2) => {
+        this.runtime.pendingUserInputs.set(requestId, {
+          jsonRpcId: id,
+          settle: (result) => {
+            this.runtime.pendingUserInputs.delete(requestId);
+            void this.runtime.rpc.respond(id, result).catch((error) => this.#warnAnswerWriteFailed(method, id, error)).finally(resolve2);
+          }
+        });
+        for (const event of events) this.runtime.emit(event);
+      });
+      return;
+    }
+    await this.runtime.rpc.respondError(id, -32601, `Method not found: ${method}`);
+  }
+  async handleApproval(id, method, params, kind, identity) {
+    const grant = kind === "permission" ? void 0 : this.runtime.grants.lookup(codexApprovalGrantKey(kind, identity));
+    if (grant) {
+      const decision = wireDecisionFromPersist(kind, grant);
+      await this.runtime.rpc.respond(id, { decision });
+      return;
+    }
+    const requestId = this.runtime.requestIdFor(id);
+    const events = mapServerRequestToEvents({
+      requestId,
+      method,
+      params,
+      threadId: this.runtime.threadId,
+      providerInstanceId: this.runtime.host.instanceId
+    });
+    this.runtime.requestKinds.set(requestId, kind);
+    await new Promise((resolve2) => {
+      this.runtime.pendingApprovals.set(requestId, {
+        jsonRpcId: id,
+        method,
+        params,
+        kind,
+        identity,
+        settle: (decision) => {
+          this.runtime.pendingApprovals.delete(requestId);
+          void this.runtime.rpc.respond(id, decision).catch((error) => this.#warnAnswerWriteFailed(method, id, error)).finally(resolve2);
+        },
+        release: () => {
+          this.runtime.pendingApprovals.delete(requestId);
+          resolve2();
+        }
+      });
+      for (const event of events) this.runtime.emit(event);
+    });
+  }
+  async respondToRequest(requestId, decision, reason, persist) {
+    const pending = this.runtime.pendingApprovals.get(requestId);
+    if (!pending) throw new Error(`Unknown pending Codex approval request: ${requestId}`);
+    if (decision === "deny" && reason)
+      this.runtime.declineRelay.queue(this.runtime.threadId, reason);
+    let wire = { decision: decision === "allow" ? "accept" : "decline" };
+    if (decision === "allow" && pending.kind === "mcp-elicitation") {
+      wire = toMcpElicitationResponse("allow", pending.params);
+    }
+    if (pending.kind === "permission") {
+      wire = toPermissionsResponse(decision, pending.params, persist !== void 0);
+    } else if (decision === "allow" && persist) {
+      this.runtime.grants.remember(codexApprovalGrantKey(pending.kind, pending.identity), persist);
+      if (pending.kind !== "mcp-elicitation") {
+        wire = { decision: wireDecisionFromPersist(pending.kind, persist) };
+      }
+    }
+    const ack = this.runtime.registerWriteAck(pending.jsonRpcId);
+    pending.settle(wire);
+    const delivery = await ack.catch(() => "closed");
+    this.runtime.emit({
+      eventId: nextEventId(),
+      provider: CODEX_DRIVER_KIND,
+      threadId: this.runtime.threadId,
+      createdAt: nowIso(),
+      type: "request.resolved",
+      requestId,
+      // requestType 是契约必填；缺了它宿主整条解不动，卡片停在「等待决议」。
+      payload: {
+        requestType: toRequestTypeFromKind(pending.kind),
+        decision,
+        ...reason ? { reason } : {}
+      }
+    });
+    if (delivery !== "written") throw unconfirmedAnswerError(requestId, delivery);
+  }
+  async respondToUserInput(requestId, answers) {
+    const pending = this.runtime.pendingUserInputs.get(requestId);
+    if (!pending) throw new Error(`Unknown pending Codex user input request: ${requestId}`);
+    const mapped = toCodexUserInputAnswers(answers);
+    if (mapped === void 0) {
+      throw new Error(`invalid user input answers for request ${requestId}`);
+    }
+    const ack = this.runtime.registerWriteAck(pending.jsonRpcId);
+    pending.settle({ answers: mapped });
+    const delivery = await ack.catch(() => "closed");
+    this.runtime.emit({
+      eventId: nextEventId(),
+      provider: CODEX_DRIVER_KIND,
+      threadId: this.runtime.threadId,
+      createdAt: nowIso(),
+      type: "user-input.resolved",
+      requestId,
+      // 契约的 answers 是 questionId → 答案 的 record，不是数组。
+      payload: { answers: toCanonicalUserInputAnswers(mapped) }
+    });
+    if (delivery !== "written") throw unconfirmedAnswerError(requestId, delivery);
+  }
+  /** 把还挂着的审批答成「取消」，逐条发 request.resolved。 */
+  cancelPendingApprovals() {
+    for (const [requestId, pending] of this.runtime.pendingApprovals) {
+      pending.settle(cancelWireFor(pending));
+      this.runtime.emit({
+        eventId: nextEventId(),
+        provider: CODEX_DRIVER_KIND,
+        threadId: this.runtime.threadId,
+        createdAt: nowIso(),
+        type: "request.resolved",
+        requestId,
+        payload: { requestType: toRequestTypeFromKind(pending.kind), decision: "cancel" }
+      });
+    }
+  }
+  /** 会话收口时把还挂着的审批答成「取消」：应答形状按审批种类，权限审批不认 decision。 */
+  settlePendingApprovals() {
+    for (const [requestId, pending] of this.runtime.pendingApprovals) {
+      pending.settle(cancelWireFor(pending));
+      this.runtime.pendingApprovals.delete(requestId);
+    }
+  }
+  settlePendingUserInputs(result) {
+    for (const [requestId, pending] of this.runtime.pendingUserInputs) {
+      pending.settle(result);
+      this.runtime.pendingUserInputs.delete(requestId);
+    }
+  }
+};
+async function markProviderRejection(run) {
+  try {
+    return await run();
+  } catch (error) {
+    if (!(error instanceof CodexRpcResponseError)) throw error;
+    const rejected = Object.assign(new Error(error.message), {
+      code: "provider-rejected"
+    });
+    throw rejected;
+  }
+}
+
+// src/sessionRuntime.ts
+var sleep = (ms) => new Promise((resolve2) => {
+  setTimeout(resolve2, ms);
+});
+var CodexSessionRuntime = class {
+  threadId;
+  cwd;
+  session;
+  nativeThreadId;
+  activeTurnId;
+  model;
+  runtimeMode;
+  /** 宿主解好的这一轮的档（座位画的就是它）。缺席 = 宿主没给，按 `runtimeMode` 查表。 */
+  nativeModeId;
+  interactionMode;
+  closed = false;
+  closeCompleted = false;
+  turns = [];
+  pendingApprovals = /* @__PURE__ */ new Map();
+  pendingUserInputs = /* @__PURE__ */ new Map();
+  requestKinds = /* @__PURE__ */ new Map();
+  writeAcks = /* @__PURE__ */ new Map();
+  grants;
+  declineRelay;
+  collabChildren = /* @__PURE__ */ new Map();
+  collabChildMeta = /* @__PURE__ */ new Map();
+  liveForeignTurns = /* @__PURE__ */ new Map();
+  openCommands = /* @__PURE__ */ new Map();
+  collabReceiverTurns = /* @__PURE__ */ new Map();
+  memoryThreadIds = /* @__PURE__ */ new Set();
+  /** 这个会话见过的主额度快照（按字段合并），额度用尽停轮时点名窗口用。 */
+  rateLimits;
+  appServerArgs;
+  hasConfiguredMcpServer;
+  host;
+  attachments;
+  rpc;
+  emit;
+  #collab = new CodexSessionCollab(this);
+  #requests = new CodexSessionRequests(this);
+  /**
+   * 对外 requestId 的前缀，每个会话（即每个 app-server 进程）一份。JSON-RPC id 每个进程
+   * 都从 0 数起，宿主按 requestId 记「已接受」，不加前缀的话重启后的新请求会撞上旧请求。
+   */
+  #requestIdPrefix = `codex-${NodeCrypto2.randomUUID()}:`;
+  /** JSON-RPC id → 对外 requestId。`serverRequest/resolved` 里的 id 可能是数字也可能是字符串。 */
+  requestIdFor(jsonRpcId) {
+    return `${this.#requestIdPrefix}${String(jsonRpcId)}`;
+  }
+  /** 这一轮该用哪套三字段组合：只由这一轮的档决定（见 `codexNativeModeFor`）。 */
+  #threadConfig() {
+    return codexThreadConfigForNativeMode(codexNativeModeFor(this.runtimeMode, this.nativeModeId));
+  }
+  /** 同上，沙箱策略那一位。 */
+  #turnSandboxPolicy() {
+    return codexTurnSandboxPolicyForNativeMode(
+      codexNativeModeFor(this.runtimeMode, this.nativeModeId)
+    );
+  }
+  constructor(host, rpc, emit, input, cwd, appServerArgs, grants, declineRelay, attachments) {
+    this.attachments = attachments;
+    this.host = host;
+    this.rpc = rpc;
+    this.emit = emit;
+    this.threadId = input.threadId;
+    this.cwd = cwd;
+    this.runtimeMode = input.runtimeMode;
+    this.nativeModeId = input.nativeModeId;
+    this.appServerArgs = appServerArgs;
+    this.hasConfiguredMcpServer = (input.mcpServers?.length ?? 0) > 0;
+    this.grants = grants ?? createApprovalGrantStore();
+    this.declineRelay = declineRelay ?? createDeclineReasonRelay();
+    const createdAt = nowIso();
+    this.session = {
+      provider: CODEX_DRIVER_KIND,
+      providerInstanceId: host.instanceId,
+      status: "idle",
+      runtimeMode: input.runtimeMode,
+      nativeModeId: codexNativeModeFor(input.runtimeMode, input.nativeModeId),
+      cwd,
+      threadId: input.threadId,
+      createdAt,
+      updatedAt: createdAt,
+      ...input.bindingGeneration === void 0 ? {} : { bindingGeneration: input.bindingGeneration }
+    };
+  }
+  registerWriteAck(jsonRpcId) {
+    return new Promise((resolve2) => {
+      this.writeAcks.set(jsonRpcId, { resolve: resolve2 });
+    });
+  }
+  settleNativeWrite(requestId, status) {
+    const ack = this.writeAcks.get(requestId);
+    if (!ack) return;
+    this.writeAcks.delete(requestId);
+    ack.resolve(status);
+  }
+  failPendingNativeWrites(reason) {
+    for (const [, ack] of this.writeAcks) ack.resolve("closed");
+    this.writeAcks.clear();
+    void reason;
+  }
+  async confirmAfterNativeWrite(jsonRpcId) {
+    const existing = this.writeAcks.get(jsonRpcId);
+    if (existing) {
+      return await new Promise((resolve2) => {
+        const previous = existing.resolve;
+        existing.resolve = (status) => {
+          previous(status);
+          resolve2(status);
+        };
+      });
     }
+    return await this.registerWriteAck(jsonRpcId);
   }
-  async handleServerRequest(id, method, params) {
-    if (method === "item/commandExecution/requestApproval") {
-      await this.handleApproval(
-        id,
-        method,
-        params,
-        "command",
-        describeCommandApproval(params).command
-      );
+  handleStderrLine(line) {
+    const kind = classifyStderrLine(line);
+    if (kind === "drop") return;
+    if (isFatalStderr(line)) {
+      this.emit({
+        eventId: nextEventId(),
+        provider: CODEX_DRIVER_KIND,
+        threadId: this.threadId,
+        createdAt: nowIso(),
+        type: "runtime.error",
+        payload: { message: line }
+      });
       return;
     }
-    if (method === "item/fileChange/requestApproval") {
-      const described = describeFileChangeApproval(params);
-      await this.handleApproval(
-        id,
-        method,
-        params,
-        "file-change",
-        described.callId ?? "file-change"
-      );
+    if (kind === "error") {
+      this.host.log.error(line, { threadId: this.threadId });
       return;
     }
-    if (method === "mcpServer/elicitation/request") {
-      const described = describeMcpElicitation(params);
-      await this.handleApproval(id, method, params, "mcp-elicitation", described.identity);
+    this.host.log.warn(line, { threadId: this.threadId });
+  }
+  handleNotification(method, params) {
+    if (this.closed) return;
+    const conversationId = conversationIdFromNotification(params);
+    if (conversationId && conversationId !== this.nativeThreadId && conversationId !== this.threadId) {
+      this.#collab.interceptCollab(method, params, conversationId);
       return;
     }
-    if (method === "item/permissions/requestApproval") {
-      await this.handleApproval(
-        id,
-        method,
-        params,
-        "permission",
-        isRecord3(params) ? asString(params["itemId"]) ?? "permission" : "permission"
-      );
+    if (conversationId && this.memoryThreadIds.has(conversationId)) {
+      if (method === "serverRequest" || method === "serverRequest/resolved") {
+        this.dispatchMapped(method, params);
+      }
       return;
     }
-    if (method === "item/tool/requestUserInput") {
-      const requestId = this.requestIdFor(id);
-      const events = mapServerRequestToEvents({
-        requestId,
-        method,
-        params,
-        threadId: this.threadId,
-        providerInstanceId: this.host.instanceId
-      });
-      if (events.length === 0) {
-        await this.rpc.respond(id, {});
+    if (method === "thread/started") {
+      const name = isRecord3(params) ? asString(params["name"]) ?? (isRecord3(params["thread"]) ? asString(params["thread"]["name"]) : null) : null;
+      if (isMemoryConsolidationThread(name ?? void 0) && conversationId) {
+        this.memoryThreadIds.add(conversationId);
         return;
       }
-      await new Promise((resolve2) => {
-        this.pendingUserInputs.set(requestId, {
-          jsonRpcId: id,
-          settle: (result) => {
-            this.pendingUserInputs.delete(requestId);
-            void this.rpc.respond(id, result).catch((error) => this.#warnAnswerWriteFailed(method, id, error)).finally(resolve2);
-          }
-        });
-        for (const event of events) this.emit(event);
-      });
-      return;
     }
-    await this.rpc.respondError(id, -32601, `Method not found: ${method}`);
+    const activity = readSubAgentActivity(method, params);
+    if (activity?.agentThreadId !== void 0 && !isRootChild(activity.agentPath, activity.agentThreadId, this.nativeThreadId ?? this.threadId)) {
+      this.#collab.upsertCollabChild(activity.agentThreadId, { agentPath: activity.agentPath });
+    }
+    this.dispatchMapped(method, params);
   }
-  async handleApproval(id, method, params, kind, identity) {
-    const grant = kind === "permission" ? void 0 : this.grants.lookup(codexApprovalGrantKey(kind, identity));
-    if (grant) {
-      const decision = wireDecisionFromPersist(kind, grant);
-      await this.rpc.respond(id, { decision });
+  dispatchMapped(method, params) {
+    if (method === "serverRequest/resolved") {
+      const rawId = isRecord3(params) ? params["requestId"] : void 0;
+      if (typeof rawId !== "number" && typeof rawId !== "string") return;
+      const resolvedId = this.requestIdFor(rawId);
+      const pending = this.pendingApprovals.get(resolvedId);
+      if (pending === void 0) return;
+      pending.release();
+      this.emit({
+        eventId: nextEventId(),
+        provider: CODEX_DRIVER_KIND,
+        threadId: this.threadId,
+        createdAt: nowIso(),
+        type: "request.resolved",
+        requestId: resolvedId,
+        payload: {
+          requestType: toRequestTypeFromKind(this.requestKinds.get(resolvedId)),
+          resolution: params
+        }
+      });
       return;
     }
-    const requestId = this.requestIdFor(id);
-    const events = mapServerRequestToEvents({
-      requestId,
+    trackOpenCommand(this.openCommands, method, params);
+    if (method === "account/rateLimits/updated" && isRecord3(params)) {
+      this.rateLimits = mergeCodexRateLimits(this.rateLimits, params["rateLimits"]);
+    }
+    for (const event of mapNotificationToEvents({
       method,
       params,
       threadId: this.threadId,
-      providerInstanceId: this.host.instanceId
-    });
-    this.requestKinds.set(requestId, kind);
-    await new Promise((resolve2) => {
-      this.pendingApprovals.set(requestId, {
-        jsonRpcId: id,
-        method,
-        params,
-        kind,
-        identity,
-        settle: (decision) => {
-          this.pendingApprovals.delete(requestId);
-          void this.rpc.respond(id, decision).catch((error) => this.#warnAnswerWriteFailed(method, id, error)).finally(resolve2);
-        },
-        release: () => {
-          this.pendingApprovals.delete(requestId);
-          resolve2();
-        }
-      });
-      for (const event of events) this.emit(event);
-    });
-  }
-  async respondToRequest(requestId, decision, reason, persist) {
-    const pending = this.pendingApprovals.get(requestId);
-    if (!pending) throw new Error(`Unknown pending Codex approval request: ${requestId}`);
-    if (decision === "deny" && reason) this.declineRelay.queue(this.threadId, reason);
-    let wire = { decision: decision === "allow" ? "accept" : "decline" };
-    if (decision === "allow" && pending.kind === "mcp-elicitation") {
-      wire = toMcpElicitationResponse("allow", pending.params);
+      providerInstanceId: this.host.instanceId,
+      rateLimits: this.rateLimits
+    })) {
+      this.emit(event);
     }
-    if (pending.kind === "permission") {
-      wire = toPermissionsResponse(decision, pending.params, persist !== void 0);
-    } else if (decision === "allow" && persist) {
-      this.grants.remember(codexApprovalGrantKey(pending.kind, pending.identity), persist);
-      if (pending.kind !== "mcp-elicitation") {
-        wire = { decision: wireDecisionFromPersist(pending.kind, persist) };
-      }
+    if (method === "turn/started") {
+      const turnId = turnIdOf(params);
+      if (turnId) this.activeTurnId = turnId;
     }
-    const ack = this.registerWriteAck(pending.jsonRpcId);
-    pending.settle(wire);
-    const delivery = await ack.catch(() => "closed");
-    this.emit({
-      eventId: nextEventId(),
-      provider: CODEX_DRIVER_KIND,
-      threadId: this.threadId,
-      createdAt: nowIso(),
-      type: "request.resolved",
-      requestId,
-      // requestType 是契约必填；缺了它宿主整条解不动，卡片停在「等待决议」。
-      payload: {
-        requestType: toRequestTypeFromKind(pending.kind),
-        decision,
-        ...reason ? { reason } : {}
-      }
-    });
-    if (delivery !== "written") throw unconfirmedAnswerError(requestId, delivery);
+    if (method === "turn/completed") {
+      this.activeTurnId = void 0;
+      const { activeTurnId: _completedTurn, ...idleSession } = this.session;
+      this.session = { ...idleSession, status: "idle", updatedAt: nowIso() };
+    }
+  }
+  async handleServerRequest(id, method, params) {
+    return this.#requests.handleServerRequest(id, method, params);
+  }
+  async respondToRequest(requestId, decision, reason, persist) {
+    return this.#requests.respondToRequest(requestId, decision, reason, persist);
   }
   async respondToUserInput(requestId, answers) {
-    const pending = this.pendingUserInputs.get(requestId);
-    if (!pending) throw new Error(`Unknown pending Codex user input request: ${requestId}`);
-    const mapped = toCodexUserInputAnswers(answers);
-    if (mapped === void 0) {
-      throw new Error(`invalid user input answers for request ${requestId}`);
-    }
-    const ack = this.registerWriteAck(pending.jsonRpcId);
-    pending.settle({ answers: mapped });
-    const delivery = await ack.catch(() => "closed");
-    this.emit({
-      eventId: nextEventId(),
-      provider: CODEX_DRIVER_KIND,
-      threadId: this.threadId,
-      createdAt: nowIso(),
-      type: "user-input.resolved",
-      requestId,
-      // 契约的 answers 是 questionId → 答案 的 record，不是数组。
-      payload: { answers: toCanonicalUserInputAnswers(mapped) }
-    });
-    if (delivery !== "written") throw unconfirmedAnswerError(requestId, delivery);
+    return this.#requests.respondToUserInput(requestId, answers);
   }
   async withActiveWriterRecovery(run, allowUnsubscribe) {
     let lastError;
@@ -3854,22 +3922,7 @@ var CodexSessionRuntime = class {
     if (target) {
       await this.rpc.request("turn/interrupt", { threadId: this.nativeThreadId, turnId: target }, 0).catch(() => void 0);
     }
-    this.cancelPendingApprovals();
-  }
-  /** 把还挂着的审批答成「取消」，逐条发 request.resolved。 */
-  cancelPendingApprovals() {
-    for (const [requestId, pending] of this.pendingApprovals) {
-      pending.settle(cancelWireFor(pending));
-      this.emit({
-        eventId: nextEventId(),
-        provider: CODEX_DRIVER_KIND,
-        threadId: this.threadId,
-        createdAt: nowIso(),
-        type: "request.resolved",
-        requestId,
-        payload: { requestType: toRequestTypeFromKind(pending.kind), decision: "cancel" }
-      });
-    }
+    this.#requests.cancelPendingApprovals();
   }
   async compactContext() {
     if (!this.nativeThreadId) return;
@@ -3903,16 +3956,10 @@ var CodexSessionRuntime = class {
   }
   /** 会话收口时把还挂着的审批答成「取消」：应答形状按审批种类，权限审批不认 decision。 */
   settlePendingApprovals() {
-    for (const [requestId, pending] of this.pendingApprovals) {
-      pending.settle(cancelWireFor(pending));
-      this.pendingApprovals.delete(requestId);
-    }
+    return this.#requests.settlePendingApprovals();
   }
   settlePendingUserInputs(result) {
-    for (const [requestId, pending] of this.pendingUserInputs) {
-      pending.settle(result);
-      this.pendingUserInputs.delete(requestId);
-    }
+    return this.#requests.settlePendingUserInputs(result);
   }
   async close() {
     if (this.closeCompleted) return;
@@ -3938,17 +3985,6 @@ var CodexSessionRuntime = class {
     });
   }
 };
-async function markProviderRejection(run) {
-  try {
-    return await run();
-  } catch (error) {
-    if (!(error instanceof CodexRpcResponseError)) throw error;
-    const rejected = Object.assign(new Error(error.message), {
-      code: "provider-rejected"
-    });
-    throw rejected;
-  }
-}
 
 // src/sessions.ts
 import * as NodeFS3 from "node:fs";