approval-md 0.0.1 → 0.2.0

package/dist/src/cli/gloss-attach.js

@@ -0,0 +1,107 @@
+/**
+ * Attaching the model gloss to a request, for every channel that renders one
+ * (APRV-144, APRV-164, APRV-197).
+ *
+ * `cli/gloss.ts` decides how a sentence is obtained; this decides which
+ * material is worth asking about and where the answer is hung. It lived inside
+ * `cli/channel-telegram.ts` until APRV-197, when a second surface needed it:
+ * Carter, deciding requests on the CLI channel, read the raw claimed summary
+ * and nothing else, because the only code that had ever attached a gloss was
+ * the Telegram listener. One reading aid implemented twice would be two reading
+ * aids that drift, so the listener and the terminal walker now call the same
+ * function over the same payload views.
+ *
+ * The safety argument is unchanged and belongs here rather than at either call
+ * site. This runs at RENDER time, on a `ChannelRequest` the tagger has already
+ * finished building: the gate resolved the class, the budgets and the payload
+ * binding without this field existing, the payload hash was computed over bytes
+ * that do not contain it, and the log will record a decision that never
+ * mentions it. Nothing anywhere branches on the content of a gloss; the only
+ * thing that turns on it is whether one more line appears.
+ *
+ * What APRV-197 adds is an {@link GlossOutcome}. Absence used to be silent by
+ * design, and that was right for one request and wrong for a thousand: with the
+ * timeout set where APRV-144 set it, the subprocess missed EVERY time and the
+ * result was indistinguishable from the feature never having shipped. The
+ * outcome is returned so a caller can count, and count is all it is for — no
+ * caller retries, waits longer, or renders anything different because of it.
+ */
+import { changePayloadView, commandPayloadView, emailPayloadFields, } from "../channels/payload-view.js";
+import { claimed } from "../channels/contract.js";
+import { glossAuthor, glossFor, GLOSS_EDIT_INSTRUCTION, GLOSS_EMAIL_INSTRUCTION, GLOSS_INSTRUCTION, } from "./gloss.js";
+/**
+ * The request, plus a model's one-sentence gloss of its payload when one can be
+ * had.
+ *
+ * Every payload kind the renderer can read gets one (APRV-164): a command, a
+ * file change, an email. The kind is derived exactly as the WYSIWYS rendering
+ * derives it, from the structure of the bytes, so the sentence is about the
+ * material the approver is being shown and the two can never be about different
+ * payloads. An opaque payload gets none.
+ *
+ * Returns the request UNCHANGED for every flavour of "no answer". Losing the
+ * gloss costs one line on a prompt, which is why no failure here is allowed to
+ * cost anything more.
+ */
+export function attachGloss(request, run) {
+    const asked = glossMaterial(request.fullPayload.value?.value);
+    if (asked === null)
+        return { request, outcome: "opaque" };
+    const result = glossFor(asked.instruction, asked.material, run);
+    if (result === null)
+        return { request, outcome: "absent" };
+    return {
+        request: { ...request, gloss: claimed(result.text, glossAuthor(result)) },
+        outcome: "attached",
+    };
+}
+/**
+ * The instruction and the material for one payload, or `null` for an opaque one.
+ *
+ * The material is assembled from the same structural views the canonical
+ * rendering is built from, and it is deliberately plain: labelled lines and the
+ * text itself, in the order the prompt shows them. Nothing here reads a
+ * self-declared kind field, for the reason `core/wysiwys.ts` gives at length —
+ * a payload that chose its own presentation would have chosen its own gloss too.
+ */
+export function glossMaterial(value) {
+    const command = commandPayloadView(value);
+    if (command !== null) {
+        // Byte for byte what APRV-144 sent: the command alone, under the command
+        // instruction. A prompt that drifted here would change a shipped behaviour
+        // for no reason beyond the refactor that touched it.
+        return { instruction: GLOSS_INSTRUCTION, material: command.command };
+    }
+    const change = changePayloadView(value);
+    if (change !== null) {
+        const labels = change.labels.map((field) => `${field.label}: ${field.text}`);
+        const body = change.before === null
+            ? ["new content:", change.after]
+            : ["before:", change.before, "after:", change.after];
+        return { instruction: GLOSS_EDIT_INSTRUCTION, material: [...labels, ...body].join("\n") };
+    }
+    const email = emailPayloadFields(value);
+    if (email !== null) {
+        return {
+            instruction: GLOSS_EMAIL_INSTRUCTION,
+            material: email.map((field) => `${field.label}: ${field.text}`).join("\n"),
+        };
+    }
+    return null;
+}
+/**
+ * The stderr line that turns chronic silence into a visible fault (APRV-197 #3).
+ *
+ * One line, at the end of a walk or a dispatch cycle, and only when a model was
+ * actually asked and did not answer. It names the ceiling because that is the
+ * number an operator can act on, and it says the decision is unaffected because
+ * the first thing a reader of an approval tool's stderr needs to know is
+ * whether the thing they just approved was compromised by this. It was not:
+ * nothing downstream of a gloss exists.
+ */
+export function glossAbsenceLine(surface, absent, asked, timeoutMs) {
+    return (`approval: ${surface}: ${absent} of ${asked} request(s) got no model gloss ` +
+        `(the \`claude -p\` subprocess was missing, failed, or exceeded ${timeoutMs}ms) — ` +
+        "the prompts are unaffected; a gloss is a reading aid the runtime never reads\n");
+}
+//# sourceMappingURL=gloss-attach.js.map

package/dist/src/cli/gloss-attach.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gloss-attach.js","sourceRoot":"","sources":["../../../src/cli/gloss-attach.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,OAAO,EAAuB,MAAM,yBAAyB,CAAC;AACvE,OAAO,EACL,WAAW,EACX,QAAQ,EACR,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AAoBpB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,OAAuB,EAAE,GAAgB;IACnE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC3D,OAAO;QACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE;QACzE,OAAO,EAAE,UAAU;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAc;IAEd,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,yEAAyE;QACzE,2EAA2E;QAC3E,qDAAqD;QACrD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,GACR,MAAM,CAAC,MAAM,KAAK,IAAI;YACpB,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC;YAChC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,WAAW,EAAE,uBAAuB;YACpC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC3E,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,MAAc,EACd,KAAa,EACb,SAAiB;IAEjB,OAAO,CACL,aAAa,OAAO,KAAK,MAAM,OAAO,KAAK,iCAAiC;QAC5E,kEAAkE,SAAS,QAAQ;QACnF,gFAAgF,CACjF,CAAC;AACJ,CAAC"}

package/dist/src/cli/gloss-codex-child.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Process-group supervisor for the synchronous Codex gloss runner (APRV-254).
+ *
+ * The public runner waits synchronously because GlossRunner is synchronous.
+ * This small child can still supervise Codex asynchronously, which lets it
+ * terminate the complete detached process group when the CLI times out or
+ * exceeds its output allowance. It never prints stderr or process errors.
+ */
+export {};

package/dist/src/cli/gloss-codex-child.js

@@ -0,0 +1,149 @@
+/**
+ * Process-group supervisor for the synchronous Codex gloss runner (APRV-254).
+ *
+ * The public runner waits synchronously because GlossRunner is synchronous.
+ * This small child can still supervise Codex asynchronously, which lets it
+ * terminate the complete detached process group when the CLI times out or
+ * exceeds its output allowance. It never prints stderr or process errors.
+ */
+import { spawn } from "node:child_process";
+const OUTPUT_LIMIT_BYTES = 64 * 1024;
+const EXIT_TIMEOUT = 124;
+const EXIT_OUTPUT_LIMIT = 125;
+const EXIT_SPAWN = 126;
+function positiveInteger(raw) {
+    if (raw === undefined || !/^\d+$/u.test(raw))
+        return null;
+    const value = Number(raw);
+    return Number.isSafeInteger(value) && value > 0 ? value : null;
+}
+const executable = process.argv[2];
+const timeoutMs = positiveInteger(process.argv[3]);
+const cwd = process.argv[4];
+const instruction = process.argv[5];
+const argsJson = process.argv[6];
+if (executable === undefined ||
+    timeoutMs === null ||
+    cwd === undefined ||
+    instruction === undefined ||
+    argsJson === undefined) {
+    process.exit(EXIT_SPAWN);
+}
+let prefixArgs;
+try {
+    const parsed = JSON.parse(argsJson);
+    if (!Array.isArray(parsed) || parsed.some((value) => typeof value !== "string")) {
+        process.exit(EXIT_SPAWN);
+    }
+    prefixArgs = parsed;
+}
+catch {
+    process.exit(EXIT_SPAWN);
+}
+let child = null;
+let terminal = false;
+function killTree() {
+    const pid = child?.pid;
+    if (pid === undefined)
+        return;
+    try {
+        if (process.platform === "win32") {
+            const killer = spawn("taskkill", ["/pid", String(pid), "/t", "/f"], {
+                stdio: "ignore",
+                windowsHide: true,
+            });
+            killer.unref();
+        }
+        else {
+            process.kill(-pid, "SIGKILL");
+        }
+    }
+    catch {
+        try {
+            child?.kill("SIGKILL");
+        }
+        catch {
+            // The process has already exited.
+        }
+    }
+}
+function finish(code) {
+    if (terminal)
+        return;
+    terminal = true;
+    clearTimeout(timer);
+    if (code !== 0)
+        killTree();
+    process.exitCode = code;
+}
+process.on("SIGTERM", () => {
+    killTree();
+    process.exit(EXIT_TIMEOUT);
+});
+process.on("SIGINT", () => {
+    killTree();
+    process.exit(EXIT_TIMEOUT);
+});
+const chunks = [];
+let outputBytes = 0;
+let overflow = false;
+try {
+    child = spawn(executable, [...prefixArgs, instruction], {
+        cwd,
+        detached: process.platform !== "win32",
+        env: process.env,
+        stdio: ["pipe", "pipe", "ignore"],
+        windowsHide: true,
+    });
+}
+catch {
+    process.exit(EXIT_SPAWN);
+}
+const timer = setTimeout(() => {
+    killTree();
+    finish(EXIT_TIMEOUT);
+}, timeoutMs);
+timer.unref();
+child.on("error", () => finish(EXIT_SPAWN));
+child.stdin?.on("error", () => finish(EXIT_SPAWN));
+child.stdout?.on("data", (chunk) => {
+    if (overflow)
+        return;
+    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    outputBytes += bytes.byteLength;
+    if (outputBytes > OUTPUT_LIMIT_BYTES) {
+        overflow = true;
+        killTree();
+        return;
+    }
+    chunks.push(bytes);
+});
+child.on("close", (code, signal) => {
+    if (terminal)
+        return;
+    if (overflow) {
+        finish(EXIT_OUTPUT_LIMIT);
+        return;
+    }
+    if (signal !== null || code === null) {
+        finish(EXIT_SPAWN);
+        return;
+    }
+    if (code !== 0) {
+        finish(code > 0 && code < 124 ? code : 123);
+        return;
+    }
+    // A launcher may exit successfully while leaving native descendants alive.
+    // The detached group belongs solely to this one-shot invocation.
+    killTree();
+    const output = Buffer.concat(chunks);
+    process.stdout.write(output, (error) => finish(error == null ? 0 : EXIT_SPAWN));
+});
+let input = Buffer.alloc(0);
+process.stdin.on("data", (chunk) => {
+    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    input = Buffer.concat([input, bytes]);
+});
+process.stdin.on("end", () => child?.stdin?.end(input));
+process.stdin.resume();
+//# sourceMappingURL=gloss-codex-child.js.map

package/dist/src/cli/gloss-codex-child.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gloss-codex-child.js","sourceRoot":"","sources":["../../../src/cli/gloss-codex-child.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAE9D,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5B,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjC,IACE,UAAU,KAAK,SAAS;IACxB,SAAS,KAAK,IAAI;IAClB,GAAG,KAAK,SAAS;IACjB,WAAW,KAAK,SAAS;IACzB,QAAQ,KAAK,SAAS,EACtB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC3B,CAAC;AAED,IAAI,UAAoB,CAAC;AACzB,IAAI,CAAC;IACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IACD,UAAU,GAAG,MAAkB,CAAC;AAClC,CAAC;AAAC,MAAM,CAAC;IACP,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC3B,CAAC;AAED,IAAI,KAAK,GAAwB,IAAI,CAAC;AACtC,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,SAAS,QAAQ;IACf,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,CAAC;IACvB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO;IAC9B,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;gBAClE,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,IAAI,IAAI,KAAK,CAAC;QAAE,QAAQ,EAAE,CAAC;IAC3B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;IACzB,QAAQ,EAAE,CAAC;IACX,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;IACxB,QAAQ,EAAE,CAAC;IACX,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAa,EAAE,CAAC;AAC5B,IAAI,WAAW,GAAG,CAAC,CAAC;AACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,IAAI,CAAC;IACH,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,WAAW,CAAC,EAAE;QACtD,GAAG;QACH,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;QACtC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;QACjC,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;AACL,CAAC;AAAC,MAAM,CAAC;IACP,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;IAC5B,QAAQ,EAAE,CAAC;IACX,MAAM,CAAC,YAAY,CAAC,CAAC;AACvB,CAAC,EAAE,SAAS,CAAC,CAAC;AACd,KAAK,CAAC,KAAK,EAAE,CAAC;AAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAC5C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AACnD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;IAClD,IAAI,QAAQ;QAAE,OAAO;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;IAChC,IAAI,WAAW,GAAG,kBAAkB,EAAE,CAAC;QACrC,QAAQ,GAAG,IAAI,CAAC;QAChB,QAAQ,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC;AACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;IACjC,IAAI,QAAQ;QAAE,OAAO;IACrB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,2EAA2E;IAC3E,iEAAiE;IACjE,QAAQ,EAAE,CAAC;IACX,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEH,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACxD,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC"}

package/dist/src/cli/gloss-codex.d.ts

@@ -0,0 +1,24 @@
+/** Provider-specific Codex CLI runner for optional model glosses (APRV-254). */
+import { type GlossRunner } from "./gloss.js";
+export type CodexGlossUnavailableReason = "invalid-model" | "invalid-prompt" | "unsupported-platform" | "spawn-error" | "timeout" | "output-too-large" | "nonzero-exit" | "invalid-output" | "unsafe-output" | "cleanup-failed";
+export interface CodexGlossRunnerOptions {
+    /** Test seam. Production callers omit this and run the installed `codex`. */
+    readonly executable?: string;
+    /** Test seam. Production callers always receive the shared 20-second cap. */
+    readonly timeoutMs?: number;
+    /** Receives only a fixed reason code, never subprocess output. */
+    readonly diagnostic?: (reason: CodexGlossUnavailableReason) => void;
+}
+/**
+ * Build a synchronous Codex gloss runner using the CLI's saved authentication.
+ *
+ * The invocation starts in a new empty directory with a named read-only
+ * permission profile, command network disabled, project instructions
+ * suppressed, host skill discovery skipped, and selected known
+ * tool/integration features disabled.
+ * Codex 0.152.1 has no universal deny-all tool switch: host-managed and global
+ * base instructions still apply, the under-development discovery switch is
+ * version-specific, and the CLI owns any auth-state maintenance.
+ * The caller must present that practical isolation boundary to the operator.
+ */
+export declare function codexGlossRunnerFor(model: string, passphraseEnv?: string | null, options?: CodexGlossRunnerOptions): GlossRunner;

package/dist/src/cli/gloss-codex.js

@@ -0,0 +1,255 @@
+/** Provider-specific Codex CLI runner for optional model glosses (APRV-254). */
+import { spawnSync } from "node:child_process";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { childEnvironment } from "../core/child-env.js";
+import { GLOSS_EDIT_INSTRUCTION, GLOSS_EMAIL_INSTRUCTION, GLOSS_INSTRUCTION, GLOSS_MAX_INPUT_CHARS, GLOSS_TRUNCATION_NOTE, GLOSS_TIMEOUT_MS, normalizeGlossModelId, } from "./gloss.js";
+const OUTPUT_LIMIT_BYTES = 64 * 1024;
+const HELPER_PATH = fileURLToPath(new URL("./gloss-codex-child.js", import.meta.url));
+const SUPERVISOR_GRACE_MS = 250;
+const CODEX_ENABLED_FEATURES = ["skip_host_skill_discovery"];
+const CODEX_DISABLED_FEATURES = [
+    "apps",
+    "auth_elicitation",
+    "browser_use",
+    "browser_use_external",
+    "browser_use_full_cdp_access",
+    "code_mode",
+    "code_mode_host",
+    "computer_use",
+    "goals",
+    "hooks",
+    "image_generation",
+    "in_app_browser",
+    "in_app_local_automation",
+    "memories",
+    "multi_agent",
+    "multi_agent_v2",
+    "plugins",
+    "remote_plugin",
+    "skill_mcp_dependency_install",
+    "skill_search",
+    "shell_tool",
+    "sleep_tool",
+    "tool_call_mcp_elicitation",
+    "tool_suggest",
+    "unified_exec",
+    "view_image",
+    "workspace_dependencies",
+];
+const CODEX_CONFIG = [
+    'project_doc_max_bytes=0',
+    'project_doc_fallback_filenames=[]',
+    'project_root_markers=[]',
+    // Enabling skip_host_skill_discovery otherwise emits Codex's known
+    // under-development-feature notice as an error item before the turn. This
+    // suppresses that startup notice only; every emitted JSONL error remains a
+    // hard failure in parseSuccessfulAnswer.
+    'suppress_unstable_features_warning=true',
+    'approval_policy="never"',
+    'default_permissions="gloss"',
+    'permissions.gloss.filesystem={":minimal"="read",":workspace_roots"={"."="read"}}',
+    'permissions.gloss.network.enabled=false',
+    'web_search="disabled"',
+    'mcp_servers={}',
+    'hooks={}',
+    'plugins={}',
+    'history.persistence="none"',
+    'check_for_update_on_startup=false',
+    'analytics.enabled=false',
+    'otel.exporter="none"',
+    'notify=[]',
+];
+const KNOWN_INSTRUCTIONS = new Set([
+    GLOSS_INSTRUCTION,
+    GLOSS_EDIT_INSTRUCTION,
+    GLOSS_EMAIL_INSTRUCTION,
+]);
+function report(options, reason) {
+    try {
+        options.diagnostic?.(reason);
+    }
+    catch {
+        // Diagnostics cannot make a reading aid load-bearing.
+    }
+    return null;
+}
+function splitPrompt(prompt) {
+    const separator = prompt.indexOf("\n\n");
+    if (separator < 0)
+        return null;
+    const instruction = prompt.slice(0, separator);
+    if (!KNOWN_INSTRUCTIONS.has(instruction))
+        return null;
+    const material = prompt.slice(separator + 2);
+    const largestCappedMaterial = GLOSS_MAX_INPUT_CHARS + GLOSS_TRUNCATION_NOTE.length + 2;
+    if (material.length > largestCappedMaterial)
+        return null;
+    return { instruction, material };
+}
+function codexArgs(model, cwd) {
+    const args = [
+        "exec",
+        "--strict-config",
+        "--ignore-user-config",
+        "--ignore-rules",
+        "--ephemeral",
+        "--skip-git-repo-check",
+        "--json",
+        "-C",
+        cwd,
+        "-m",
+        model,
+    ];
+    for (const config of CODEX_CONFIG)
+        args.push("-c", config);
+    for (const feature of CODEX_ENABLED_FEATURES)
+        args.push("--enable", feature);
+    for (const feature of CODEX_DISABLED_FEATURES)
+        args.push("--disable", feature);
+    return args;
+}
+function object(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function parseSuccessfulAnswer(stdout, model) {
+    let completedTurns = 0;
+    let answer = null;
+    let terminal = false;
+    const lines = stdout.split(/\r?\n/u).filter((line) => line.trim().length > 0);
+    if (lines.length === 0)
+        return null;
+    for (const line of lines) {
+        let event;
+        try {
+            event = object(JSON.parse(line));
+        }
+        catch {
+            return null;
+        }
+        if (event === null || typeof event.type !== "string")
+            return null;
+        if (terminal)
+            return null;
+        if (event.type === "thread.started" || event.type === "turn.started")
+            continue;
+        if (event.type === "error" || event.type === "turn.failed")
+            return null;
+        if (event.type === "turn.completed") {
+            completedTurns += 1;
+            terminal = true;
+            continue;
+        }
+        if (event.type !== "item.started" &&
+            event.type !== "item.updated" &&
+            event.type !== "item.completed") {
+            return null;
+        }
+        const item = object(event.item);
+        if (item === null || (item.type !== "reasoning" && item.type !== "agent_message")) {
+            return null;
+        }
+        if (event.type === "item.completed" && item.type === "agent_message") {
+            if (typeof item.text !== "string" || item.text.trim().length === 0)
+                return null;
+            answer = item.text;
+        }
+    }
+    return completedTurns === 1 && answer !== null
+        ? { text: answer, provenance: { provider: "codex", requestedModel: model } }
+        : null;
+}
+/**
+ * Build a synchronous Codex gloss runner using the CLI's saved authentication.
+ *
+ * The invocation starts in a new empty directory with a named read-only
+ * permission profile, command network disabled, project instructions
+ * suppressed, host skill discovery skipped, and selected known
+ * tool/integration features disabled.
+ * Codex 0.152.1 has no universal deny-all tool switch: host-managed and global
+ * base instructions still apply, the under-development discovery switch is
+ * version-specific, and the CLI owns any auth-state maintenance.
+ * The caller must present that practical isolation boundary to the operator.
+ */
+export function codexGlossRunnerFor(model, passphraseEnv = null, options = {}) {
+    const requestedModel = normalizeGlossModelId(model);
+    return (prompt) => {
+        if (requestedModel === null)
+            return report(options, "invalid-model");
+        if (process.platform === "win32")
+            return report(options, "unsupported-platform");
+        const parts = splitPrompt(prompt);
+        if (parts === null)
+            return report(options, "invalid-prompt");
+        const configuredTimeout = options.timeoutMs ?? GLOSS_TIMEOUT_MS;
+        const timeoutMs = Number.isSafeInteger(configuredTimeout) && configuredTimeout > 0
+            ? configuredTimeout
+            : GLOSS_TIMEOUT_MS;
+        let cwd;
+        try {
+            cwd = mkdtempSync(join(tmpdir(), "approval-md-codex-gloss-"));
+        }
+        catch {
+            return report(options, "spawn-error");
+        }
+        let answer = null;
+        let reason = null;
+        try {
+            const childDeadline = Math.max(1, timeoutMs - Math.min(SUPERVISOR_GRACE_MS, Math.floor(timeoutMs / 4)));
+            const result = spawnSync(process.execPath, [
+                HELPER_PATH,
+                options.executable ?? "codex",
+                String(childDeadline),
+                cwd,
+                parts.instruction,
+                JSON.stringify(codexArgs(requestedModel, cwd)),
+            ], {
+                encoding: "utf8",
+                env: childEnvironment({ passphraseEnv }).env,
+                input: parts.material,
+                timeout: timeoutMs,
+                killSignal: "SIGTERM",
+                maxBuffer: OUTPUT_LIMIT_BYTES,
+            });
+            if (result.error !== undefined) {
+                const code = result.error.code;
+                reason = code === "ETIMEDOUT" ? "timeout" : code === "ENOBUFS" ? "output-too-large" : "spawn-error";
+            }
+            else if (result.status === 124) {
+                reason = "timeout";
+            }
+            else if (result.status === 125) {
+                reason = "output-too-large";
+            }
+            else if (result.status === 126) {
+                reason = "spawn-error";
+            }
+            else if (result.status !== 0) {
+                reason = "nonzero-exit";
+            }
+            else if (typeof result.stdout !== "string") {
+                reason = "invalid-output";
+            }
+            else {
+                answer = parseSuccessfulAnswer(result.stdout, requestedModel);
+                if (answer === null)
+                    reason = "unsafe-output";
+            }
+        }
+        catch {
+            reason = "spawn-error";
+        }
+        try {
+            rmSync(cwd, { recursive: true, force: true });
+        }
+        catch {
+            return report(options, "cleanup-failed");
+        }
+        return reason === null ? answer : report(options, reason);
+    };
+}
+//# sourceMappingURL=gloss-codex.js.map

package/dist/src/cli/gloss-codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gloss-codex.js","sourceRoot":"","sources":["../../../src/cli/gloss-codex.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,GAGtB,MAAM,YAAY,CAAC;AAEpB,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,wBAAwB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtF,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,sBAAsB,GAAG,CAAC,2BAA2B,CAAU,CAAC;AAEtE,MAAM,uBAAuB,GAAG;IAC9B,MAAM;IACN,kBAAkB;IAClB,aAAa;IACb,sBAAsB;IACtB,6BAA6B;IAC7B,WAAW;IACX,gBAAgB;IAChB,cAAc;IACd,OAAO;IACP,OAAO;IACP,kBAAkB;IAClB,gBAAgB;IAChB,yBAAyB;IACzB,UAAU;IACV,aAAa;IACb,gBAAgB;IAChB,SAAS;IACT,eAAe;IACf,8BAA8B;IAC9B,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,2BAA2B;IAC3B,cAAc;IACd,cAAc;IACd,YAAY;IACZ,wBAAwB;CAChB,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,yBAAyB;IACzB,mCAAmC;IACnC,yBAAyB;IACzB,mEAAmE;IACnE,0EAA0E;IAC1E,2EAA2E;IAC3E,yCAAyC;IACzC,yCAAyC;IACzC,yBAAyB;IACzB,6BAA6B;IAC7B,kFAAkF;IAClF,yCAAyC;IACzC,uBAAuB;IACvB,gBAAgB;IAChB,UAAU;IACV,YAAY;IACZ,4BAA4B;IAC5B,mCAAmC;IACnC,yBAAyB;IACzB,sBAAsB;IACtB,WAAW;CACH,CAAC;AAEX,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,iBAAiB;IACjB,sBAAsB;IACtB,uBAAuB;CACxB,CAAC,CAAC;AAuBH,SAAS,MAAM,CAAC,OAAgC,EAAE,MAAmC;IACnF,IAAI,CAAC;QACH,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,qBAAqB,GAAG,qBAAqB,GAAG,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC;IACvF,IAAI,QAAQ,CAAC,MAAM,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,GAAW;IAC3C,MAAM,IAAI,GAAG;QACX,MAAM;QACN,iBAAiB;QACjB,sBAAsB;QACtB,gBAAgB;QAChB,aAAa;QACb,uBAAuB;QACvB,QAAQ;QACR,IAAI;QACJ,GAAG;QACH,IAAI;QACJ,KAAK;KACN,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3D,KAAK,MAAM,OAAO,IAAI,sBAAsB;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7E,KAAK,MAAM,OAAO,IAAI,uBAAuB;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAMD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAoB;QACvB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAAa;IAC1D,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACpC,cAAc,IAAI,CAAC,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IACE,KAAK,CAAC,IAAI,KAAK,cAAc;YAC7B,KAAK,CAAC,IAAI,KAAK,cAAc;YAC7B,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAC/B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,CAAC,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACrE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChF,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,cAAc,KAAK,CAAC,IAAI,MAAM,KAAK,IAAI;QAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE;QAC5E,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,aAAa,GAAkB,IAAI,EACnC,OAAO,GAA4B,EAAE;IAErC,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,CAAC,MAAc,EAAsB,EAAE;QAC5C,IAAI,cAAc,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAE7D,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;QAChE,MAAM,SAAS,GACb,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,GAAG,CAAC;YAC9D,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,gBAAgB,CAAC;QACvB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,MAAM,GAAuB,IAAI,CAAC;QACtC,IAAI,MAAM,GAAuC,IAAI,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxG,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,CAAC,QAAQ,EAChB;gBACE,WAAW;gBACX,OAAO,CAAC,UAAU,IAAI,OAAO;gBAC7B,MAAM,CAAC,aAAa,CAAC;gBACrB,GAAG;gBACH,KAAK,CAAC,WAAW;gBACjB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;aAC/C,EACD;gBACE,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,gBAAgB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,GAAG;gBAC5C,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,kBAAkB;aAC9B,CACF,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAI,MAAM,CAAC,KAA+B,CAAC,IAAI,CAAC;gBAC1D,MAAM,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC;YACtG,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjC,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjC,MAAM,GAAG,kBAAkB,CAAC;YAC9B,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjC,MAAM,GAAG,aAAa,CAAC;YACzB,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,GAAG,cAAc,CAAC;YAC1B,CAAC;iBAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,GAAG,gBAAgB,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;gBAC9D,IAAI,MAAM,KAAK,IAAI;oBAAE,MAAM,GAAG,eAAe,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,aAAa,CAAC;QACzB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/cli/gloss-options.d.ts

@@ -0,0 +1,42 @@
+/** Shared provider selection for the three optional gloss surfaces (APRV-255). */
+import { type ParsedFlags } from "./args.js";
+import { codexGlossRunnerFor, type CodexGlossUnavailableReason } from "./gloss-codex.js";
+import { type GlossProvider, type GlossRunner } from "./gloss.js";
+/** A validated operator selection. It is safe to hand directly to a runner factory. */
+export interface GlossOptions {
+    readonly enabled: boolean;
+    readonly provider: GlossProvider;
+    readonly model: string;
+}
+export type GlossOptionsResult = {
+    readonly ok: true;
+    readonly options: GlossOptions;
+} | {
+    readonly ok: false;
+    readonly message: string;
+};
+/**
+ * Resolve the flags shared by `up`, Telegram listen and the terminal channel.
+ *
+ * The caller supplies its historical default: Telegram and `up` pass `true`,
+ * while the terminal channel passes `false`. `--no-gloss` wins a tie so an
+ * explicit request to remove a model from the path can never accidentally
+ * spawn one. Provider and model values are validated even when disabled;
+ * otherwise a typo could wait unnoticed until a later invocation adds
+ * `--gloss`.
+ */
+export declare function parseGlossOptions(flags: ParsedFlags, enabledByDefault: boolean): GlossOptionsResult;
+type ClaudeRunnerFactory = (passphraseEnv: string | null, model: string) => GlossRunner;
+type CodexRunnerFactory = typeof codexGlossRunnerFor;
+/** Fixed reason codes only; subprocess output must never reach this callback. */
+export type GlossDiagnostic = (reason: CodexGlossUnavailableReason) => void;
+export interface GlossRunnerFactoryOptions {
+    readonly passphraseEnv?: string | null;
+    readonly diagnostic?: GlossDiagnostic;
+    /** Test seams. Production callers use the provider implementations above. */
+    readonly claudeRunnerFor?: ClaudeRunnerFactory;
+    readonly codexRunnerFor?: CodexRunnerFactory;
+}
+/** Construct exactly the selected runner, or no runner when glossing is disabled. */
+export declare function glossRunnerFromOptions(selection: GlossOptions, factoryOptions?: GlossRunnerFactoryOptions): GlossRunner | undefined;
+export {};