appsec-agent 2.8.0 → 3.0.1

package/dist/src/providers/claude_role_spec.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Map RoleSpec to Claude Agent SDK Options (golden-parity path for migrated roles).
+ *
+ * Author: Sam Li
+ */
+import { Options } from '@anthropic-ai/claude-agent-sdk';
+import type { RoleSpec } from './role_spec';
+/** Convert a RoleSpec into Claude SDK Options. */
+export declare function roleSpecToClaudeOptions(spec: RoleSpec): Options;
+//# sourceMappingURL=claude_role_spec.d.ts.map

package/dist/src/providers/claude_role_spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude_role_spec.d.ts","sourceRoot":"","sources":["../../../src/providers/claude_role_spec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAmB,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA2B5C,kDAAkD;AAClD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAkD/D"}

package/dist/src/providers/claude_role_spec.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Map RoleSpec to Claude Agent SDK Options (golden-parity path for migrated roles).
+ *
+ * Author: Sam Li
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.roleSpecToClaudeOptions = roleSpecToClaudeOptions;
+function mcpNamespacedTools(spec) {
+    if (!spec.mcp)
+        return [];
+    return spec.mcp.toolNames.map((tool) => `mcp__${spec.mcp.name}__${tool}`);
+}
+function resolveClaudeTools(spec) {
+    if (spec.allowedTools) {
+        return [...spec.allowedTools];
+    }
+    if (spec.noTools) {
+        return [];
+    }
+    return capabilitiesToClaudeTools(spec.capabilities);
+}
+function capabilitiesToClaudeTools(capabilities) {
+    const tools = [];
+    if (capabilities.read)
+        tools.push('Read');
+    if (capabilities.grep)
+        tools.push('Grep');
+    if (capabilities.write)
+        tools.push('Write');
+    if (capabilities.shell)
+        tools.push('Bash');
+    if (capabilities.graphviz)
+        tools.push('Graphviz');
+    return tools;
+}
+/** Convert a RoleSpec into Claude SDK Options. */
+function roleSpecToClaudeOptions(spec) {
+    let tools = resolveClaudeTools(spec);
+    if (spec.mcp) {
+        tools = [...tools, ...mcpNamespacedTools(spec)];
+    }
+    const options = {
+        permissionMode: spec.permissionMode ?? 'default',
+    };
+    if (spec.agentName) {
+        options.agents = {
+            [spec.agentName]: {
+                description: spec.agentDescription ?? spec.agentName,
+                prompt: spec.systemPrompt,
+                tools,
+                model: spec.model,
+                maxTurns: spec.maxTurns,
+            },
+        };
+    }
+    else {
+        options.systemPrompt = spec.systemPrompt;
+        options.maxTurns = spec.maxTurns;
+        if (tools.length > 0) {
+            options.allowedTools = tools;
+        }
+    }
+    if (spec.outputSchema) {
+        options.outputFormat = {
+            type: 'json_schema',
+            schema: spec.outputSchema,
+        };
+    }
+    if (spec.mcp) {
+        const httpEntry = {
+            type: 'http',
+            url: spec.mcp.url,
+        };
+        if (spec.mcp.bearer) {
+            httpEntry.headers = { Authorization: `Bearer ${spec.mcp.bearer}` };
+        }
+        options.mcpServers = {
+            ...(options.mcpServers ?? {}),
+            [spec.mcp.name]: httpEntry,
+        };
+    }
+    return options;
+}
+//# sourceMappingURL=claude_role_spec.js.map

package/dist/src/providers/claude_role_spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude_role_spec.js","sourceRoot":"","sources":["../../../src/providers/claude_role_spec.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AA+BH,0DAkDC;AA5ED,SAAS,kBAAkB,CAAC,IAAc;IACxC,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACzB,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,GAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAc;IACxC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,yBAAyB,CAAC,YAAsC;IACvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,YAAY,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,YAAY,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,YAAY,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,YAAY,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kDAAkD;AAClD,SAAgB,uBAAuB,CAAC,IAAc;IACpD,IAAI,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,KAAK,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAY;QACvB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,SAAS;KACjD,CAAC;IAEF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,GAAG;YACf,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;gBAChB,WAAW,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,SAAS;gBACpD,MAAM,EAAE,IAAI,CAAC,YAAY;gBACzB,KAAK;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACL;SACrB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,YAAY,GAAG;YACrB,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,IAAI,CAAC,YAAY;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAoE;YACjF,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG;SAClB,CAAC;QACF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,CAAC,UAAU,GAAG;YACnB,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;YAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/providers/codex_model.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Codex model id resolution from Claude-style model aliases.
+ *
+ * Author: Sam Li
+ */
+/** Map Claude family aliases / prefixes to Codex model ids. */
+export declare function resolveCodexModel(claudeModel?: string): string;
+export declare function estimateCodexCostUsd(model: string, usage: {
+    input_tokens: number;
+    output_tokens: number;
+}): number;
+//# sourceMappingURL=codex_model.d.ts.map

package/dist/src/providers/codex_model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_model.d.ts","sourceRoot":"","sources":["../../../src/providers/codex_model.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAuB9D;AAWD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACrD,MAAM,CAKR"}

package/dist/src/providers/codex_model.js

@@ -0,0 +1,45 @@
+"use strict";
+/**
+ * Codex model id resolution from Claude-style model aliases.
+ *
+ * Author: Sam Li
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCodexModel = resolveCodexModel;
+exports.estimateCodexCostUsd = estimateCodexCostUsd;
+const CLAUDE_FAMILY_ALIASES = ['sonnet', 'opus', 'haiku'];
+/** Map Claude family aliases / prefixes to Codex model ids. */
+function resolveCodexModel(claudeModel) {
+    const raw = (claudeModel ?? 'opus').toLowerCase().trim();
+    if (CLAUDE_FAMILY_ALIASES.includes(raw)) {
+        const map = {
+            opus: 'o3',
+            sonnet: 'gpt-4.1',
+            haiku: 'gpt-4.1-mini',
+        };
+        return map[raw] ?? 'o3';
+    }
+    for (const family of CLAUDE_FAMILY_ALIASES) {
+        if (raw.startsWith(`${family}-`)) {
+            return resolveCodexModel(family);
+        }
+    }
+    if (raw.startsWith('gpt-') || /^o\d/.test(raw)) {
+        return raw;
+    }
+    return 'o3';
+}
+/** Per-million-token USD rates for Codex cost estimation (approximate; spike defaults). */
+const CODEX_COST_PER_MILLION = {
+    o3: { input: 10, output: 40 },
+    'gpt-4.1': { input: 2, output: 8 },
+    'gpt-4.1-mini': { input: 0.4, output: 1.6 },
+};
+const DEFAULT_RATES = { input: 2, output: 8 };
+function estimateCodexCostUsd(model, usage) {
+    const rates = CODEX_COST_PER_MILLION[model] ?? DEFAULT_RATES;
+    const inputCost = (usage.input_tokens / 1_000_000) * rates.input;
+    const outputCost = (usage.output_tokens / 1_000_000) * rates.output;
+    return inputCost + outputCost;
+}
+//# sourceMappingURL=codex_model.js.map

package/dist/src/providers/codex_model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_model.js","sourceRoot":"","sources":["../../../src/providers/codex_model.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAKH,8CAuBC;AAWD,oDAQC;AA7CD,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAEnE,+DAA+D;AAC/D,SAAgB,iBAAiB,CAAC,WAAoB;IACpD,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEzD,IAAI,qBAAqB,CAAC,QAAQ,CAAC,GAA6C,CAAC,EAAE,CAAC;QAClF,MAAM,GAAG,GAA2B;YAClC,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,cAAc;SACtB,CAAC;QACF,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,MAAM,sBAAsB,GAAsD;IAChF,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7B,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;IAClC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;CAC5C,CAAC;AAEF,MAAM,aAAa,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AAE9C,SAAgB,oBAAoB,CAClC,KAAa,EACb,KAAsD;IAEtD,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC;IAC7D,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;IACjE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACpE,OAAO,SAAS,GAAG,UAAU,CAAC;AAChC,CAAC"}

package/dist/src/providers/codex_provider.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Codex provider: maps RoleSpec to @openai/codex-sdk and normalizes events to QueryMessage.
+ *
+ * Author: Sam Li
+ */
+import type { Input, ThreadEvent, TurnOptions } from '@openai/codex-sdk';
+import { ModelProvider } from './types';
+import type { QueryMessage } from './query_message';
+import type { RoleSpec } from './role_spec';
+import { roleSpecToCodexThreadOptions } from './codex_role_spec';
+export { roleSpecToCodexThreadOptions } from './codex_role_spec';
+export interface CodexStreamClient {
+    startThread(options?: ReturnType<typeof roleSpecToCodexThreadOptions>): {
+        runStreamed(input: Input, turnOptions?: TurnOptions): Promise<{
+            events: AsyncGenerator<ThreadEvent>;
+        }>;
+    };
+}
+export type CodexClientFactory = (spec: RoleSpec, codexHome: string) => CodexStreamClient;
+export declare class CodexProvider extends ModelProvider {
+    private readonly clientFactory;
+    readonly provider: "codex";
+    constructor(clientFactory?: CodexClientFactory);
+    run(params: {
+        prompt: string;
+        roleSpec: RoleSpec;
+    }): AsyncGenerator<QueryMessage>;
+}
+export declare const defaultCodexProvider: CodexProvider;
+//# sourceMappingURL=codex_provider.d.ts.map

package/dist/src/providers/codex_provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_provider.d.ts","sourceRoot":"","sources":["../../../src/providers/codex_provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,iBAAiB,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAGL,4BAA4B,EAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEjE,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,4BAA4B,CAAC,GAAG;QACtE,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;YAC5D,MAAM,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;SACrC,CAAC,CAAC;KACJ,CAAC;CACH;AAED,MAAM,MAAM,kBAAkB,GAAG,CAC/B,IAAI,EAAE,QAAQ,EACd,SAAS,EAAE,MAAM,KACd,iBAAiB,CAAC;AAyBvB,qBAAa,aAAc,SAAQ,aAAa;IAI5C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAHhC,QAAQ,CAAC,QAAQ,EAAG,OAAO,CAAU;gBAGlB,aAAa,GAAE,kBAA8C;IAKzE,GAAG,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,QAAQ,CAAC;KACpB,GAAG,cAAc,CAAC,YAAY,CAAC;CA8FjC;AAED,eAAO,MAAM,oBAAoB,eAAsB,CAAC"}

package/dist/src/providers/codex_provider.js

@@ -0,0 +1,170 @@
+"use strict";
+/**
+ * Codex provider: maps RoleSpec to @openai/codex-sdk and normalizes events to QueryMessage.
+ *
+ * Author: Sam Li
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultCodexProvider = exports.CodexProvider = exports.roleSpecToCodexThreadOptions = void 0;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const codex_sdk_1 = require("@openai/codex-sdk");
+const types_1 = require("./types");
+const codex_model_1 = require("./codex_model");
+const structured_output_1 = require("./structured_output");
+const codex_role_spec_1 = require("./codex_role_spec");
+var codex_role_spec_2 = require("./codex_role_spec");
+Object.defineProperty(exports, "roleSpecToCodexThreadOptions", { enumerable: true, get: function () { return codex_role_spec_2.roleSpecToCodexThreadOptions; } });
+function createIsolatedCodexHome() {
+    return fs.mkdtempSync(path.join(os.tmpdir(), 'codex-home-'));
+}
+function buildCodexEnv(codexHome) {
+    const env = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value !== undefined) {
+            env[key] = value;
+        }
+    }
+    env.CODEX_HOME = codexHome;
+    return env;
+}
+function defaultCodexClientFactory(spec, codexHome) {
+    const { threadOptions, clientOptions } = (0, codex_role_spec_1.buildCodexRunOptions)(spec);
+    return new codex_sdk_1.Codex({
+        ...clientOptions,
+        env: buildCodexEnv(codexHome),
+    });
+}
+class CodexProvider extends types_1.ModelProvider {
+    clientFactory;
+    provider = 'codex';
+    constructor(clientFactory = defaultCodexClientFactory) {
+        super();
+        this.clientFactory = clientFactory;
+    }
+    async *run(params) {
+        const { prompt, roleSpec } = params;
+        const codexHome = createIsolatedCodexHome();
+        try {
+            const { threadOptions } = (0, codex_role_spec_1.buildCodexRunOptions)(roleSpec);
+            const client = this.clientFactory(roleSpec, codexHome);
+            const thread = client.startThread(threadOptions);
+            const turnOptions = roleSpec.outputSchema
+                ? { outputSchema: roleSpec.outputSchema }
+                : undefined;
+            const { events } = await thread.runStreamed((0, codex_role_spec_1.buildCodexInput)(roleSpec, prompt), turnOptions);
+            let assistantText = '';
+            let streamedLength = 0;
+            let usage = null;
+            let turnFailed = null;
+            for await (const event of events) {
+                switch (event.type) {
+                    case 'item.updated':
+                    case 'item.completed': {
+                        const item = event.item;
+                        if (item.type === 'agent_message') {
+                            assistantText = item.text;
+                            if (event.type === 'item.updated' && item.text.length > streamedLength) {
+                                const delta = item.text.slice(streamedLength);
+                                streamedLength = item.text.length;
+                                yield {
+                                    type: 'stream_event',
+                                    event: {
+                                        type: 'content_block_delta',
+                                        delta: { type: 'text_delta', text: delta },
+                                    },
+                                };
+                            }
+                            if (event.type === 'item.completed') {
+                                yield {
+                                    type: 'assistant',
+                                    message: { content: [{ type: 'text', text: item.text }] },
+                                };
+                            }
+                        }
+                        break;
+                    }
+                    case 'turn.completed':
+                        usage = {
+                            input_tokens: event.usage.input_tokens,
+                            output_tokens: event.usage.output_tokens,
+                        };
+                        break;
+                    case 'turn.failed':
+                        turnFailed = event.error.message;
+                        break;
+                    case 'error':
+                        turnFailed = event.message;
+                        break;
+                    default:
+                        break;
+                }
+            }
+            const model = (0, codex_model_1.resolveCodexModel)(roleSpec.model);
+            const result = {
+                type: 'result',
+                is_error: turnFailed !== null,
+                error_message: turnFailed ?? undefined,
+            };
+            if (usage) {
+                result.usage = usage;
+                const cost = (0, codex_model_1.estimateCodexCostUsd)(model, usage);
+                if (cost > 0) {
+                    result.total_cost_usd = cost;
+                }
+            }
+            if (roleSpec.outputSchema && !turnFailed) {
+                const validation = (0, structured_output_1.parseAndValidateStructuredOutput)(assistantText, roleSpec.outputSchema);
+                if (validation.ok) {
+                    result.structured_output = validation.value;
+                }
+                else {
+                    result.is_error = true;
+                    result.errors = validation.errors;
+                    result.error_message = validation.errors.join('; ');
+                }
+            }
+            yield result;
+        }
+        finally {
+            fs.rmSync(codexHome, { recursive: true, force: true });
+        }
+    }
+}
+exports.CodexProvider = CodexProvider;
+exports.defaultCodexProvider = new CodexProvider();
+//# sourceMappingURL=codex_provider.js.map

package/dist/src/providers/codex_provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_provider.js","sourceRoot":"","sources":["../../../src/providers/codex_provider.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAE7B,iDAA0C;AAC1C,mCAAwC;AAGxC,+CAAwE;AACxE,2DAAuE;AACvE,uDAI2B;AAE3B,qDAAiE;AAAxD,+HAAA,4BAA4B,OAAA;AAerC,SAAS,uBAAuB;IAC9B,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAc,EAAE,SAAiB;IAClE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,IAAA,sCAAoB,EAAC,IAAI,CAAC,CAAC;IACpE,OAAO,IAAI,iBAAK,CAAC;QACf,GAAG,aAAa;QAChB,GAAG,EAAE,aAAa,CAAC,SAAS,CAAC;KAC9B,CAAsB,CAAC;AAC1B,CAAC;AAED,MAAa,aAAc,SAAQ,qBAAa;IAI3B;IAHV,QAAQ,GAAG,OAAgB,CAAC;IAErC,YACmB,gBAAoC,yBAAyB;QAE9E,KAAK,EAAE,CAAC;QAFS,kBAAa,GAAb,aAAa,CAAgD;IAGhF,CAAC;IAED,KAAK,CAAC,CAAC,GAAG,CAAC,MAGV;QACC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QACpC,MAAM,SAAS,GAAG,uBAAuB,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,IAAA,sCAAoB,EAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,WAAW,GAA4B,QAAQ,CAAC,YAAY;gBAChE,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE;gBACzC,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAA,iCAAe,EAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;YAE5F,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,IAAI,cAAc,GAAG,CAAC,CAAC;YACvB,IAAI,KAAK,GAA2D,IAAI,CAAC;YACzE,IAAI,UAAU,GAAkB,IAAI,CAAC;YAErC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnB,KAAK,cAAc,CAAC;oBACpB,KAAK,gBAAgB,CAAC,CAAC,CAAC;wBACtB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;wBACxB,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;4BAClC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC;4BAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gCACvE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gCAC9C,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gCAClC,MAAM;oCACJ,IAAI,EAAE,cAAc;oCACpB,KAAK,EAAE;wCACL,IAAI,EAAE,qBAAqB;wCAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE;qCAC3C;iCACc,CAAC;4BACpB,CAAC;4BACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gCACpC,MAAM;oCACJ,IAAI,EAAE,WAAW;oCACjB,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE;iCAC1C,CAAC;4BACpB,CAAC;wBACH,CAAC;wBACD,MAAM;oBACR,CAAC;oBACD,KAAK,gBAAgB;wBACnB,KAAK,GAAG;4BACN,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;4BACtC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa;yBACzC,CAAC;wBACF,MAAM;oBACR,KAAK,aAAa;wBAChB,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;wBACjC,MAAM;oBACR,KAAK,OAAO;wBACV,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC;wBAC3B,MAAM;oBACR;wBACE,MAAM;gBACV,CAAC;YACH,CAAC;YAED,MAAM,KAAK,GAAG,IAAA,+BAAiB,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,MAAM,GAAkB;gBAC5B,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,UAAU,KAAK,IAAI;gBAC7B,aAAa,EAAE,UAAU,IAAI,SAAS;aACvC,CAAC;YAEF,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;gBACrB,MAAM,IAAI,GAAG,IAAA,kCAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAChD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;oBACb,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAA,oDAAgC,EAAC,aAAa,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC1F,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,CAAC,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;oBACvB,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;oBAClC,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;YAED,MAAM,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;CACF;AA1GD,sCA0GC;AAEY,QAAA,oBAAoB,GAAG,IAAI,aAAa,EAAE,CAAC"}

package/dist/src/providers/codex_role_spec.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Map RoleSpec to @openai/codex-sdk client/thread options (incl. MCP wiring).
+ *
+ * Author: Sam Li
+ */
+import type { CodexOptions, ThreadOptions } from '@openai/codex-sdk';
+import type { RoleSpec } from './role_spec';
+/** Map RoleSpec capabilities to Codex sandbox / approval settings. */
+export declare function roleSpecToCodexThreadOptions(spec: RoleSpec): ThreadOptions;
+export declare function roleSpecToCodexClientOptions(spec: RoleSpec): CodexOptions;
+export declare function buildCodexRunOptions(spec: RoleSpec): {
+    threadOptions: ThreadOptions;
+    clientOptions: CodexOptions;
+};
+export declare function buildCodexInput(spec: RoleSpec, prompt: string): string;
+//# sourceMappingURL=codex_role_spec.d.ts.map

package/dist/src/providers/codex_role_spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_role_spec.d.ts","sourceRoot":"","sources":["../../../src/providers/codex_role_spec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,sEAAsE;AACtE,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,QAAQ,GAAG,aAAa,CAc1E;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,CA0BzE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG;IACpD,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,YAAY,CAAC;CAC7B,CASA;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtE"}

package/dist/src/providers/codex_role_spec.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * Map RoleSpec to @openai/codex-sdk client/thread options (incl. MCP wiring).
+ *
+ * Author: Sam Li
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.roleSpecToCodexThreadOptions = roleSpecToCodexThreadOptions;
+exports.roleSpecToCodexClientOptions = roleSpecToCodexClientOptions;
+exports.buildCodexRunOptions = buildCodexRunOptions;
+exports.buildCodexInput = buildCodexInput;
+const codex_model_1 = require("./codex_model");
+/** Map RoleSpec capabilities to Codex sandbox / approval settings. */
+function roleSpecToCodexThreadOptions(spec) {
+    const readOnly = !spec.capabilities.write &&
+        !spec.capabilities.shell &&
+        !spec.capabilities.graphviz &&
+        !spec.mcp;
+    return {
+        model: (0, codex_model_1.resolveCodexModel)(spec.model),
+        workingDirectory: spec.workingDirectory ?? process.cwd(),
+        skipGitRepoCheck: true,
+        sandboxMode: readOnly ? 'read-only' : 'workspace-write',
+        approvalPolicy: spec.permissionMode === 'bypassPermissions' ? 'never' : 'on-request',
+    };
+}
+function roleSpecToCodexClientOptions(spec) {
+    const options = {
+        apiKey: process.env.CODEX_API_KEY,
+        baseUrl: process.env.CODEX_BASE_URL,
+    };
+    if (!spec.mcp) {
+        return options;
+    }
+    const serverConfig = {
+        url: spec.mcp.url,
+        enabled: true,
+    };
+    if (spec.mcp.bearer) {
+        serverConfig.http_headers = { Authorization: `Bearer ${spec.mcp.bearer}` };
+    }
+    options.config = {
+        mcp_servers: {
+            [spec.mcp.name]: serverConfig,
+        },
+        sandbox_workspace_write: { network_access: true },
+    };
+    return options;
+}
+function buildCodexRunOptions(spec) {
+    const threadOptions = roleSpecToCodexThreadOptions(spec);
+    if (spec.mcp && threadOptions.sandboxMode === 'read-only') {
+        threadOptions.sandboxMode = 'workspace-write';
+    }
+    return {
+        threadOptions,
+        clientOptions: roleSpecToCodexClientOptions(spec),
+    };
+}
+function buildCodexInput(spec, prompt) {
+    return `${spec.systemPrompt}\n\n---\n\n${prompt}`;
+}
+//# sourceMappingURL=codex_role_spec.js.map

package/dist/src/providers/codex_role_spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex_role_spec.js","sourceRoot":"","sources":["../../../src/providers/codex_role_spec.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAOH,oEAcC;AAED,oEA0BC;AAED,oDAYC;AAED,0CAEC;AA/DD,+CAAkD;AAElD,sEAAsE;AACtE,SAAgB,4BAA4B,CAAC,IAAc;IACzD,MAAM,QAAQ,GACZ,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK;QACxB,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK;QACxB,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ;QAC3B,CAAC,IAAI,CAAC,GAAG,CAAC;IAEZ,OAAO;QACL,KAAK,EAAE,IAAA,+BAAiB,EAAC,IAAI,CAAC,KAAK,CAAC;QACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE;QACxD,gBAAgB,EAAE,IAAI;QACtB,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB;QACvD,cAAc,EAAE,IAAI,CAAC,cAAc,KAAK,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;KACrF,CAAC;AACJ,CAAC;AAED,SAAgB,4BAA4B,CAAC,IAAc;IACzD,MAAM,OAAO,GAAiB;QAC5B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa;QACjC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;KACpC,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAA4B;QAC5C,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG;QACjB,OAAO,EAAE,IAAI;KACd,CAAC;IACF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACpB,YAAY,CAAC,YAAY,GAAG,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,OAAO,CAAC,MAAM,GAAG;QACf,WAAW,EAAE;YACX,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,YAAY;SAC9B;QACD,uBAAuB,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;KACxB,CAAC;IAE5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAAc;IAIjD,MAAM,aAAa,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QAC1D,aAAa,CAAC,WAAW,GAAG,iBAAiB,CAAC;IAChD,CAAC;IACD,OAAO;QACL,aAAa;QACb,aAAa,EAAE,4BAA4B,CAAC,IAAI,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,IAAc,EAAE,MAAc;IAC5D,OAAO,GAAG,IAAI,CAAC,YAAY,cAAc,MAAM,EAAE,CAAC;AACpD,CAAC"}

package/dist/src/providers/query_message.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Normalized stream message types shared by all model providers.
+ *
+ * Author: Sam Li
+ */
+/** Message types yielded by providers; same shape as Claude SDK for compatibility. */
+export type StreamEventMessage = {
+    type: 'stream_event';
+    event: {
+        type: string;
+        delta?: {
+            type: string;
+            text?: string;
+        };
+    };
+};
+export type AssistantMessage = {
+    type: 'assistant';
+    message: {
+        content: Array<{
+            type: 'text';
+            text: string;
+        }>;
+    };
+};
+export type ResultMessage = {
+    type: 'result';
+    is_error: boolean;
+    num_turns?: number;
+    total_cost_usd?: number;
+    subtype?: string;
+    errors?: unknown[];
+    error_message?: string;
+    structured_output?: unknown;
+    usage?: {
+        input_tokens?: number;
+        output_tokens?: number;
+    };
+};
+/** Passthrough for SDK-only types (e.g. tool_progress) when using Anthropic. */
+export type QueryMessage = StreamEventMessage | AssistantMessage | ResultMessage | {
+    type: string;
+    [key: string]: unknown;
+};
+//# sourceMappingURL=query_message.d.ts.map

package/dist/src/providers/query_message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_message.d.ts","sourceRoot":"","sources":["../../../src/providers/query_message.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAClE,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CAC7D,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,KAAK,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3D,CAAC;AACF,gFAAgF;AAChF,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,gBAAgB,GAChB,aAAa,GACb;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC"}

package/dist/src/providers/query_message.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Normalized stream message types shared by all model providers.
+ *
+ * Author: Sam Li
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=query_message.js.map

package/dist/src/providers/query_message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query_message.js","sourceRoot":"","sources":["../../../src/providers/query_message.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/src/providers/resolve_provider.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Resolve the active model provider from AGENT_PROVIDER env / CLI.
+ *
+ * Author: Sam Li
+ */
+import { ModelProvider } from './types';
+export type ProviderId = 'claude' | 'codex';
+export declare function normalizeProviderId(raw: string | undefined): ProviderId;
+export declare function resolveProvider(): ModelProvider;
+//# sourceMappingURL=resolve_provider.d.ts.map

package/dist/src/providers/resolve_provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve_provider.d.ts","sourceRoot":"","sources":["../../../src/providers/resolve_provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAGxC,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAI5C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAQvE;AAED,wBAAgB,eAAe,IAAI,aAAa,CAS/C"}

package/dist/src/providers/resolve_provider.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Resolve the active model provider from AGENT_PROVIDER env / CLI.
+ *
+ * Author: Sam Li
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeProviderId = normalizeProviderId;
+exports.resolveProvider = resolveProvider;
+const claude_provider_1 = require("./claude_provider");
+const VALID_PROVIDERS = ['claude', 'codex'];
+function normalizeProviderId(raw) {
+    const id = (raw ?? 'claude').toLowerCase().trim();
+    if (VALID_PROVIDERS.includes(id)) {
+        return id;
+    }
+    throw new Error(`Invalid provider "${raw}". Valid values: ${VALID_PROVIDERS.join(', ')}`);
+}
+function resolveProvider() {
+    const id = normalizeProviderId(process.env.AGENT_PROVIDER);
+    if (id === 'codex') {
+        // Lazy-load so Claude-only test runs do not require @openai/codex-sdk resolution.
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const { defaultCodexProvider } = require('./codex_provider');
+        return defaultCodexProvider;
+    }
+    return claude_provider_1.defaultClaudeProvider;
+}
+//# sourceMappingURL=resolve_provider.js.map

package/dist/src/providers/resolve_provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve_provider.js","sourceRoot":"","sources":["../../../src/providers/resolve_provider.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AASH,kDAQC;AAED,0CASC;AAzBD,uDAA0D;AAI1D,MAAM,eAAe,GAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE1D,SAAgB,mBAAmB,CAAC,GAAuB;IACzD,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAgB,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAgB,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,oBAAoB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzE,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe;IAC7B,MAAM,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,kFAAkF;QAClF,iEAAiE;QACjE,MAAM,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAsC,CAAC;QAClG,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,uCAAqB,CAAC;AAC/B,CAAC"}

package/dist/src/providers/role_spec.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Provider-neutral role specification (emerges from threat_modeler spike, Phase 3).
+ *
+ * Author: Sam Li
+ */
+export interface RoleCapabilities {
+    read?: boolean;
+    write?: boolean;
+    grep?: boolean;
+    shell?: boolean;
+    graphviz?: boolean;
+}
+export interface RoleMcpConfig {
+    url: string;
+    name: string;
+    bearer?: string;
+    toolNames: string[];
+}
+/** Neutral role description consumed by ClaudeProvider and CodexProvider. */
+export interface RoleSpec {
+    /** Role key for error messages and provider routing (e.g. threat_modeler). */
+    roleId: string;
+    systemPrompt: string;
+    maxTurns: number;
+    /** When set, ClaudeProvider emits the named subagent shape. */
+    agentName?: string;
+    agentDescription?: string;
+    capabilities: RoleCapabilities;
+    /** When set, overrides capability-derived Claude/Codex tool lists (e.g. diff noTools → Write only). */
+    allowedTools?: string[];
+    noTools?: boolean;
+    permissionMode?: 'bypassPermissions' | 'default';
+    mcp?: RoleMcpConfig;
+    outputSchema?: Record<string, unknown>;
+    model?: string;
+    /** Codex working directory; Claude ignores (uses process cwd). */
+    workingDirectory?: string;
+}
+//# sourceMappingURL=role_spec.d.ts.map

package/dist/src/providers/role_spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role_spec.d.ts","sourceRoot":"","sources":["../../../src/providers/role_spec.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,6EAA6E;AAC7E,MAAM,WAAW,QAAQ;IACvB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,gBAAgB,CAAC;IAC/B,uGAAuG;IACvG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACjD,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B"}

package/dist/src/providers/role_spec.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * Provider-neutral role specification (emerges from threat_modeler spike, Phase 3).
+ *
+ * Author: Sam Li
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=role_spec.js.map