agentplane 0.3.14 → 0.3.16

package/dist/commands/workflow-playbook.command.js

@@ -1,11 +1,8 @@
-import { execFile } from "node:child_process";
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
-import { promisify } from "node:util";
-import { atomicWriteFile, resolveProject } from "@agentplaneorg/core";
+import { atomicWriteFile, resolveProject, runProcess } from "@agentplaneorg/core";
 import { mapCoreError } from "../cli/error-map.js";
-const execFileAsync = promisify(execFile);
 const AGENTPLANE_BIN = fileURLToPath(new URL("../../bin/agentplane.js", import.meta.url));
 const MAX_LOG_CHARS = 8000;
 function truncate(text) {
@@ -63,7 +60,9 @@ async function runWorkflowPlaybookCommand(opts) {
     let stdout = "";
     let stderr = "";
     try {
-        const result = await execFileAsync(command, args, {
+        const result = await runProcess({
+            command,
+            args,
             cwd: opts.repoRoot,
             env: {
                 ...process.env,
@@ -71,9 +70,11 @@ async function runWorkflowPlaybookCommand(opts) {
             },
             encoding: "utf8",
             maxBuffer: 10 * 1024 * 1024,
+            reject: false,
         });
-        stdout = String(result.stdout ?? "");
-        stderr = String(result.stderr ?? "");
+        exitCode = result.exitCode;
+        stdout = String(result.stdout);
+        stderr = String(result.stderr);
     }
     catch (err) {
         const failed = err;

package/dist/harness/hooks-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hooks-lifecycle.d.ts","sourceRoot":"","sources":["../../src/harness/hooks-lifecycle.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,YAAY,GAAG,WAAW,GAAG,eAAe,CAAC;AAErF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,UAAU,CAAC,CAyDtB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7C,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CAclD"}
+{"version":3,"file":"hooks-lifecycle.d.ts","sourceRoot":"","sources":["../../src/harness/hooks-lifecycle.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,QAAQ,GAAG,cAAc,GAAG,YAAY,GAAG,WAAW,GAAG,eAAe,CAAC;AAErF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,UAAU,CAAC,CA6DtB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7C,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CAclD"}

package/dist/harness/hooks-lifecycle.js

@@ -1,4 +1,4 @@
-import { spawn } from "node:child_process";
+import { startProcess } from "@agentplaneorg/core";
 export async function runLifecycleHook(opts) {
     if (!opts.policy.command || opts.policy.command.trim().length === 0) {
         return {
@@ -10,9 +10,13 @@ export async function runLifecycleHook(opts) {
         };
     }
     return await new Promise((resolve) => {
-        const child = spawn("sh", ["-lc", opts.policy.command], {
+        const child = startProcess({
+            command: "sh",
+            args: ["-lc", opts.policy.command],
             cwd: opts.cwd,
-            stdio: ["ignore", "pipe", "pipe"],
+            stdin: "ignore",
+            stdout: "pipe",
+            stderr: "pipe",
         });
         let output = "";
         let finished = false;
@@ -20,7 +24,7 @@ export async function runLifecycleHook(opts) {
             if (finished)
                 return;
             finished = true;
-            child.kill("SIGKILL");
+            void child.kill("SIGKILL");
             resolve({
                 ok: !opts.policy.blocking,
                 hook: opts.hook,
@@ -29,13 +33,13 @@ export async function runLifecycleHook(opts) {
                 output,
             });
         }, Math.max(1, opts.policy.timeoutMs));
-        child.stdout.on("data", (chunk) => {
+        child.stdout?.on("data", (chunk) => {
             output += String(chunk);
         });
-        child.stderr.on("data", (chunk) => {
+        child.stderr?.on("data", (chunk) => {
             output += String(chunk);
         });
-        child.on("close", (code) => {
+        void child.on("close", (code) => {
             if (finished)
                 return;
             finished = true;

package/dist/meta/release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../../src/meta/release.ts"],"names":[],"mappings":"AA8BA,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAsBpD"}
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../../src/meta/release.ts"],"names":[],"mappings":"AA+BA,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,IAAI,CA4BpD"}

package/dist/meta/release.js

@@ -1,7 +1,7 @@
-import { execFileSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { runProcessSync } from "@agentplaneorg/core";
 import { getVersion } from "./version.js";
 let cachedReleaseDate;
 function findGitRootSync(startDir) {
@@ -36,10 +36,14 @@ export function getReleaseCommitDate() {
         return cachedReleaseDate;
     }
     try {
-        const out = execFileSync("git", ["-C", gitRoot, "show", "-s", "--format=%cs", tag], {
+        const out = String(runProcessSync({
+            command: "git",
+            args: ["-C", gitRoot, "show", "-s", "--format=%cs", tag],
             encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
-        }).trim();
+            stdin: "ignore",
+            stdout: "pipe",
+            stderr: "ignore",
+        }).stdout).trim();
         cachedReleaseDate = out || null;
         return cachedReleaseDate;
     }

package/dist/policy/engine.d.ts

@@ -1,6 +1,6 @@
 import type { AgentplaneConfig } from "@agentplaneorg/core";
 import { type PolicyActionDescriptor } from "./taxonomy.js";
-import type { PolicyAction, PolicyContext, PolicyProblem } from "./types.js";
+import type { PolicyAction, PolicyContext, PolicyProblem } from "./model.js";
 export type PolicyDecision = {
     ok: boolean;
     action: PolicyActionDescriptor;

package/dist/policy/evaluate.d.ts

@@ -1,3 +1,3 @@
-import type { PolicyContext, PolicyResult } from "./types.js";
+import type { PolicyContext, PolicyResult } from "./model.js";
 export declare function evaluatePolicy(ctx: PolicyContext): PolicyResult;
 //# sourceMappingURL=evaluate.d.ts.map

package/dist/policy/{types.d.ts → model.d.ts}

@@ -36,4 +36,4 @@ export type PolicyContext = {
     };
     requireClean?: boolean;
 };
-//# sourceMappingURL=types.d.ts.map
+//# sourceMappingURL=model.d.ts.map

package/dist/policy/{types.d.ts.map → model.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/policy/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,MAAM,YAAY,GAAG,cAAc,CAAC;AAE1C,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,YAAY,CAAC;IAErB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IAGf,GAAG,EAAE;QACH,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QAChC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IAEF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,KAAK,CAAC,EAAE;QACN,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/policy/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,MAAM,YAAY,GAAG,cAAc,CAAC;AAE1C,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,YAAY,CAAC;IAErB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IAGf,GAAG,EAAE;QACH,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QAChC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IAEF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,KAAK,CAAC,EAAE;QACN,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC"}

package/dist/policy/result.d.ts

@@ -1,4 +1,4 @@
-import type { PolicyProblem, PolicyResult } from "./types.js";
+import type { PolicyProblem, PolicyResult } from "./model.js";
 export declare function okResult(): PolicyResult;
 export declare function usageError(message: string): PolicyProblem;
 export declare function gitError(message: string): PolicyProblem;

package/dist/policy/rules/allowlist.d.ts

@@ -1,3 +1,3 @@
-import type { PolicyContext, PolicyResult } from "../types.js";
+import type { PolicyContext, PolicyResult } from "../model.js";
 export declare function allowlistRule(ctx: PolicyContext): PolicyResult;
 //# sourceMappingURL=allowlist.d.ts.map

package/dist/policy/rules/branch-pr-base.d.ts

@@ -1,3 +1,3 @@
-import type { PolicyContext, PolicyResult } from "../types.js";
+import type { PolicyContext, PolicyResult } from "../model.js";
 export declare function branchPrBaseRule(ctx: PolicyContext): PolicyResult;
 //# sourceMappingURL=branch-pr-base.d.ts.map

package/dist/policy/rules/clean-tree.d.ts

@@ -1,3 +1,3 @@
-import type { PolicyContext, PolicyResult } from "../types.js";
+import type { PolicyContext, PolicyResult } from "../model.js";
 export declare function cleanTreeRule(ctx: PolicyContext): PolicyResult;
 //# sourceMappingURL=clean-tree.d.ts.map

package/dist/policy/rules/commit-subject.d.ts

@@ -1,3 +1,3 @@
-import type { PolicyContext, PolicyResult } from "../types.js";
+import type { PolicyContext, PolicyResult } from "../model.js";
 export declare function commitSubjectRule(ctx: PolicyContext): PolicyResult;
 //# sourceMappingURL=commit-subject.d.ts.map

package/dist/policy/rules/protected-paths.d.ts

@@ -1,3 +1,3 @@
-import type { PolicyContext, PolicyResult } from "../types.js";
+import type { PolicyContext, PolicyResult } from "../model.js";
 export declare function protectedPathsRule(ctx: PolicyContext): PolicyResult;
 //# sourceMappingURL=protected-paths.d.ts.map

package/dist/runner/adapters/base.d.ts

@@ -0,0 +1,42 @@
+import type { SupervisedProcessResult } from "../process-supervision.js";
+import type { RunnerRunRepository } from "../run-repository.js";
+import type { RunnerContextBundle, RunnerInvocation, RunnerResult } from "../types.js";
+export declare function assertAdapterBundle(opts: {
+    adapterId: string;
+    label: string;
+    bundle: RunnerContextBundle;
+}): void;
+export declare function assertAdapterInvocation(opts: {
+    adapterId: string;
+    label: string;
+    invocation: RunnerInvocation;
+    requireBootstrap?: boolean;
+    minArgvLength?: number;
+}): void;
+export declare function writeRunnerExecutionState(opts: {
+    repository: RunnerRunRepository;
+    result: RunnerResult;
+    processResult: SupervisedProcessResult;
+    command: string;
+}): Promise<void>;
+export declare function writeRunnerResultState(opts: {
+    repository: RunnerRunRepository;
+    result: RunnerResult;
+}): Promise<void>;
+export declare function appendRunnerExecutionEvent(opts: {
+    repository: RunnerRunRepository;
+    invocation: RunnerInvocation;
+    result: RunnerResult;
+    processResult: SupervisedProcessResult;
+    message: string;
+    outputPaths: string[];
+}): Promise<void>;
+export declare function appendRunnerResultEvent(opts: {
+    repository: RunnerRunRepository;
+    invocation: RunnerInvocation;
+    result: RunnerResult;
+    type: "runner_execute_error" | "runner_execute_finish";
+    message: string;
+    outputPaths: string[];
+}): Promise<void>;
+//# sourceMappingURL=base.d.ts.map

package/dist/runner/adapters/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/runner/adapters/base.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIvF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;CAC7B,GAAG,IAAI,CAYP;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,gBAAgB,CAAC;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,IAAI,CA2BP;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,uBAAuB,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,YAAY,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,UAAU,EAAE,mBAAmB,CAAC;IAChC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,uBAAuB,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhB;AAED,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,UAAU,EAAE,mBAAmB,CAAC;IAChC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhB"}

package/dist/runner/adapters/base.js

@@ -0,0 +1,107 @@
+import { evolveRunnerRunState } from "../artifacts.js";
+import { buildInvocationEventData } from "./runtime-shared.js";
+export function assertAdapterBundle(opts) {
+    if (opts.bundle.execution.adapter_id !== opts.adapterId) {
+        throw new Error(`${opts.label} adapter cannot prepare bundle for adapter_id=${JSON.stringify(opts.bundle.execution.adapter_id)}`);
+    }
+    if (!opts.bundle.execution.artifact_paths.bundle_path.trim()) {
+        throw new Error(`${opts.label} adapter requires a non-empty bundle path`);
+    }
+    if (!opts.bundle.execution.artifact_paths.run_dir.trim()) {
+        throw new Error(`${opts.label} adapter requires a non-empty run dir`);
+    }
+}
+export function assertAdapterInvocation(opts) {
+    const { invocation } = opts;
+    if (invocation.adapter_id !== opts.adapterId) {
+        throw new Error(`${opts.label} adapter cannot execute invocation for adapter_id=${JSON.stringify(invocation.adapter_id)}`);
+    }
+    const requiredPaths = [
+        ["bundle_path", invocation.bundle_path],
+        ["run_dir", invocation.run_dir],
+        ["state_path", invocation.state_path],
+        ["events_path", invocation.events_path],
+        ["result_path", invocation.result_path],
+        ["trace_path", invocation.trace_path],
+        ["stderr_path", invocation.stderr_path],
+    ];
+    if (opts.requireBootstrap) {
+        requiredPaths.push(["bootstrap_path", invocation.bootstrap_path]);
+    }
+    for (const [field, value] of requiredPaths) {
+        if (!value?.trim()) {
+            throw new Error(`${opts.label} adapter invocation is missing ${field}`);
+        }
+    }
+    if (opts.minArgvLength !== undefined && invocation.argv.length < opts.minArgvLength) {
+        throw new Error(`${opts.label} adapter invocation is missing normalized argv metadata`);
+    }
+}
+export async function writeRunnerExecutionState(opts) {
+    const stateAfter = await opts.repository.readState();
+    if (!stateAfter)
+        return;
+    await opts.repository.writeState(evolveRunnerRunState({
+        state: stateAfter,
+        status: opts.result.status,
+        result: opts.result,
+        supervision: {
+            ...stateAfter.supervision,
+            pid: opts.processResult.pid,
+            command: opts.command,
+            started_at: opts.processResult.started_at,
+            heartbeat_at: opts.processResult.heartbeat_at,
+            exit_signal: opts.processResult.exit_signal,
+            timeout_reason: opts.processResult.timeout_reason,
+            timeout_requested_at: opts.processResult.timeout_requested_at,
+            terminate_sent_at: opts.processResult.terminate_sent_at,
+            kill_sent_at: opts.processResult.kill_sent_at,
+            force_killed: opts.processResult.force_killed,
+        },
+    }));
+}
+export async function writeRunnerResultState(opts) {
+    const stateAfter = await opts.repository.readState();
+    if (!stateAfter)
+        return;
+    await opts.repository.writeState(evolveRunnerRunState({
+        state: stateAfter,
+        status: opts.result.status,
+        result: opts.result,
+    }));
+}
+export async function appendRunnerExecutionEvent(opts) {
+    await opts.repository.appendEvent({
+        at: opts.result.ended_at,
+        type: "runner_execute_finish",
+        message: opts.message,
+        data: {
+            ...buildInvocationEventData(opts.invocation),
+            pid: opts.processResult.pid,
+            exit_signal: opts.processResult.exit_signal,
+            cancel_requested_at: opts.processResult.cancel_requested_at,
+            cancel_signal: opts.processResult.cancel_signal,
+            timeout_reason: opts.processResult.timeout_reason,
+            timeout_requested_at: opts.processResult.timeout_requested_at,
+            terminate_sent_at: opts.processResult.terminate_sent_at,
+            kill_sent_at: opts.processResult.kill_sent_at,
+            force_killed: opts.processResult.force_killed,
+            exit_code: opts.result.exit_code,
+            output_paths: opts.outputPaths,
+            metrics: opts.result.metrics,
+        },
+    });
+}
+export async function appendRunnerResultEvent(opts) {
+    await opts.repository.appendEvent({
+        at: opts.result.ended_at,
+        type: opts.type,
+        message: opts.message,
+        data: {
+            ...buildInvocationEventData(opts.invocation),
+            exit_code: opts.result.exit_code,
+            output_paths: opts.outputPaths,
+            metrics: opts.result.metrics,
+        },
+    });
+}

package/dist/runner/adapters/codex-preparation.d.ts

@@ -0,0 +1,7 @@
+import type { RunnerAdapterCapabilities, RunnerContextBundle, RunnerInvocation } from "../types.js";
+export declare const CODEX_RUN_PROFILE_CAPABILITIES: RunnerAdapterCapabilities;
+export declare function buildCodexInvocation(opts: {
+    adapterId: "codex";
+    bundle: RunnerContextBundle;
+}): RunnerInvocation;
+//# sourceMappingURL=codex-preparation.d.ts.map

package/dist/runner/adapters/codex-preparation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-preparation.d.ts","sourceRoot":"","sources":["../../../src/runner/adapters/codex-preparation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAOpG,eAAO,MAAM,8BAA8B,EAAE,yBAe5C,CAAC;AAoBF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,mBAAmB,CAAC;CAC7B,GAAG,gBAAgB,CA4CnB"}

package/dist/runner/adapters/codex-preparation.js

@@ -0,0 +1,86 @@
+import path from "node:path";
+import { exitCodeForError } from "../../cli/exit-codes.js";
+import { CliError } from "../../shared/errors.js";
+import { buildRecipeRunnerEnv, readRecipeRunProfile } from "./recipe-run-profile.js";
+const CODEX_LAST_MESSAGE_FILENAME = "codex-last-message.md";
+const CODEX_SANDBOX_VALUES = new Set(["read-only", "workspace-write", "danger-full-access"]);
+const SUPPORTED_CODEX_SANDBOXES = [...CODEX_SANDBOX_VALUES];
+export const CODEX_RUN_PROFILE_CAPABILITIES = {
+    adapter_id: "codex",
+    fields: {
+        sandbox: {
+            level: "native",
+            channel: "argv",
+            supported_values: SUPPORTED_CODEX_SANDBOXES,
+            note: "Recipe sandbox is enforced through codex --sandbox argv mapping.",
+        },
+        writes_artifacts_to: {
+            level: "advisory",
+            channel: "env",
+            note: "Recipe artifact prefixes are exported through env and enforced post-run against external manifest artifacts and evidence paths.",
+        },
+    },
+};
+function resolveCodexSandbox(value) {
+    const normalized = typeof value === "string" ? value.trim() : "";
+    if (!normalized)
+        return "danger-full-access";
+    if (CODEX_SANDBOX_VALUES.has(normalized))
+        return normalized;
+    throw new CliError({
+        exitCode: exitCodeForError("E_RUNTIME"),
+        code: "E_RUNTIME",
+        message: `Codex runner does not support recipe sandbox ${JSON.stringify(normalized)}; ` +
+            `supported values: ${SUPPORTED_CODEX_SANDBOXES.join(", ")}.`,
+        context: {
+            adapter_id: "codex",
+            requested_sandbox: normalized,
+            supported_sandboxes: SUPPORTED_CODEX_SANDBOXES,
+        },
+    });
+}
+export function buildCodexInvocation(opts) {
+    const { execution } = opts.bundle;
+    const runProfile = readRecipeRunProfile(opts.bundle.recipe);
+    const sandbox = resolveCodexSandbox(runProfile?.sandbox);
+    const recipeEnv = buildRecipeRunnerEnv(opts.bundle.recipe);
+    const lastMessagePath = path.join(execution.artifact_paths.run_dir, CODEX_LAST_MESSAGE_FILENAME);
+    return {
+        adapter_id: opts.adapterId,
+        run_id: execution.run_id,
+        run_dir: execution.artifact_paths.run_dir,
+        bundle_path: execution.artifact_paths.bundle_path,
+        state_path: execution.artifact_paths.state_path,
+        events_path: execution.artifact_paths.events_path,
+        result_path: execution.artifact_paths.result_path,
+        trace_path: execution.artifact_paths.trace_path,
+        stderr_path: execution.artifact_paths.stderr_path,
+        trace_policy: execution.trace_policy,
+        timeout_policy: execution.timeout_policy,
+        bootstrap_path: execution.artifact_paths.bootstrap_path,
+        output_last_message_path: lastMessagePath,
+        argv: [
+            "codex",
+            "-a",
+            "never",
+            "exec",
+            "--json",
+            "--output-last-message",
+            lastMessagePath,
+            "-C",
+            opts.bundle.repository.git_root,
+            "-s",
+            sandbox,
+            "-",
+        ],
+        env: {
+            AGENTPLANE_RUNNER_ADAPTER: opts.adapterId,
+            AGENTPLANE_RUNNER_MODE: execution.mode,
+            AGENTPLANE_RUNNER_API_VERSION: opts.bundle.runner_api_version,
+            AGENTPLANE_RUNNER_TARGET: opts.bundle.target.kind,
+            AGENTPLANE_RUNNER_RESULT_PATH: execution.artifact_paths.result_path,
+            ...recipeEnv,
+        },
+        dry_run: execution.mode === "dry_run",
+    };
+}

package/dist/runner/adapters/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/runner/adapters/codex.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACb,MAAM,aAAa,CAAC;AAIrB,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAmKrB,qBAAa,kBAAmB,YAAW,aAAa;IACtD,QAAQ,CAAC,EAAE,EAAG,OAAO,CAAU;IAE/B,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,yBAAyB;IAI7E,OAAO,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiD/D,OAAO,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;CAkN7D"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/runner/adapters/codex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,YAAY,EACb,MAAM,aAAa,CAAC;AAGrB,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AA8FrB,qBAAa,kBAAmB,YAAW,aAAa;IACtD,QAAQ,CAAC,EAAE,EAAG,OAAO,CAAU;IAE/B,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,yBAAyB;IAI7E,OAAO,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAK/D,OAAO,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;CA2K7D"}