borgmcp 1.1.14 → 2.0.1

package/dist/codex-remote.js

@@ -1 +1,394 @@
-import{mkdirSync as R,chmodSync as k,readdirSync as D,rmSync as S,writeFileSync as v,readFileSync as _}from"node:fs";import{homedir as $}from"node:os";import{join as m}from"node:path";import{randomBytes as T}from"node:crypto";import{spawn as w}from"node:child_process";import{CodexAppServerClient as N}from"./codex-app-server.js";import{codexBorgSessionConfigArgs as M,BORG_SESSION_ENV as P}from"./launch-gate.js";import{codexAppServerSocketConfigArgs as O}from"./codex-wake-resolve.js";import{BORG_AGENT_KIND_ENV as I,BORG_CODEX_REMOTE_WAKE_ENV as y,codexAgentKindConfigArgs as z,codexRemoteWakeConfigArgs as B}from"./agent-runtime.js";const F=m($(),".config","borgmcp","codex-remote"),H=3e4,A=16384;function d(r){let e=String(r).replace(/\x1B\[[0-?]*[ -/]*[@-~]/g,"");return e=e.replace(/\b((?:authorization\s*:\s*)?bearer)\s+[^\s,;]+/gi,"$1 <REDACTED>"),e=e.replace(/\b([a-z][a-z0-9+.-]*:\/\/)([^/\s:@]+):([^@\s/]+)@/gi,"$1<REDACTED>@"),e=e.replace(/([?&](?:access_token|auth_token|id_token|refresh_token|session_token|token|api_key|apikey|secret|password)=)[^&#\s]*/gi,"$1<REDACTED>"),e=e.replace(/\b((?:[a-z0-9_-]*(?:token|secret|password)|api[_-]?key)\s*[:=]\s*)(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s,;]+)/gi,"$1<REDACTED>"),e=e.replace(/\beyJ[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\b/g,"<REDACTED>"),e=e.replace(/(^|[\s("'=])(?:file:\/\/)?\/(?:Users|home|private|tmp|var|etc|opt|Volumes)\/[^\s"'`<>)}\]]+/gm,"$1<REDACTED_PATH>"),e=e.replace(/\b[A-Za-z]:\\(?:Users|Documents and Settings|ProgramData|Temp)\\[^\s"'`<>)}\]]+/g,"<REDACTED_PATH>"),e.slice(-A)}function Q(r,e){return U(r)?r:["--cd",e,...r]}function U(r){return r.some(e=>e==="--cd"||e.startsWith("--cd=")||e==="-C")}function C(r){try{return process.kill(r,0),!0}catch(e){return e?.code==="EPERM"}}function ee(r,e={}){if(!r)return null;const s=e.isAlive??C,o=e.readPidFile??(i=>_(i,"utf-8")),a=r.replace(/\.sock$/,".pid");try{const i=Number.parseInt(o(a).trim(),10);return Number.isNaN(i)?null:s(i)}catch{return null}}function p(r){try{S(r,{force:!0})}catch{}}function V(r,e){let s;try{s=D(r)}catch{return}for(const o of s){if(!o.endsWith(".pid"))continue;const a=m(r,o),i=m(r,o.replace(/\.pid$/,".sock"));let t;try{t=Number.parseInt(_(a,"utf-8").trim(),10)}catch{p(a);continue}(Number.isNaN(t)||!e(t))&&(p(i),p(a))}}function f(r){return{args:[],env:{},warning:r}}function X(r){return r.error?`process error: ${d(r.error)}`:r.exitCode!=null?`exit code ${r.exitCode}`:r.signal?`signal ${r.signal}`:"unknown exit status"}function b(r){const e=d(r).trim();return e?` Stderr: ${e}`:""}async function re(r){const e=r.runtimeDir??F,s=r.isAlive??C,o=r.readyTimeoutMs??H,a=r.pollIntervalMs??250;try{R(e,{recursive:!0,mode:448}),k(e,448),V(e,s)}catch(n){return f(`Codex remote-wake disabled: could not prepare ${e} (${n?.message??n}); run borg_regen manually.`)}const i=(r.socketId??(()=>T(16).toString("hex")))(),t=m(e,`${i}.sock`),l=m(e,`${i}.pid`);let c;try{c=r.spawnAppServer(t)}catch(n){return p(t),f(`Codex remote-wake disabled: could not start \`codex app-server\` (${d(String(n?.message??n))}) \u2014 confirm the Codex executable is installed and available on PATH. Remote wake is unavailable for this session; run borg_regen manually to catch up.`)}if(c.pid!=null)try{v(l,String(c.pid))}catch{}const g=()=>{try{c.kill()}catch{}p(t),p(l)},x=Math.max(1,Math.ceil(o/a));let u=!1,h;for(let n=0;n<x&&!u;n++){try{u=await r.probeReady(t)}catch{u=!1}if(!u){const E=c.diagnostics?.();if(E?.exited){h=E;break}}!u&&n<x-1&&await r.sleep(a)}if(!u){const n=h??c.diagnostics?.();return g(),n?.exited?f(`Codex remote-wake disabled: \`codex app-server\` exited before becoming ready (${X(n)}).${b(n.stderr)} Run borg_regen manually to catch up.`):f(`Codex remote-wake disabled: \`codex app-server\` remained running but did not become ready at ${d(t)} within ${o}ms.${b(n?.stderr??"")} Run borg_regen manually to catch up.`)}return{args:["--remote",`unix://${t}`],env:{[y]:"1"},server:{pid:c.pid,socketPath:t,cleanup:g}}}function te(){return{spawnAppServer:r=>{const e=w("codex",["app-server",...M(),...z(),...B(),...O(r),"--listen",`unix://${r}`],{stdio:["ignore","ignore","pipe"],shell:!1,env:{...process.env,[P]:"1",[I]:"codex",[y]:"1"}});let s="",o=!1,a=null,i=null,t=null;return e.stderr?.setEncoding("utf8"),e.stderr?.on("data",l=>{s=`${s}${String(l)}`.slice(-A)}),e.once("close",(l,c)=>{o=!0,a=l,i=c}),e.once("error",l=>{o=!0,t=d(l.message)}),{pid:e.pid,kill:()=>{try{e.kill()}catch{}},diagnostics:()=>({exited:o,exitCode:a,signal:i,error:t==null?null:d(t),stderr:d(s)})}},probeReady:async r=>{const e=new N(r);try{return await e.connect(),await e.loadedThreadIds(),!0}catch{return!1}finally{try{e.close()}catch{}}},sleep:r=>new Promise(e=>setTimeout(e,r))}}export{F as DEFAULT_CODEX_REMOTE_DIR,ee as checkCodexBridgeHealthy,te as defaultCodexRemoteDeps,C as defaultIsAlive,re as prepareCodexRemoteLaunch,Q as withCodexCwdArg};
+import { mkdirSync, chmodSync, readdirSync, rmSync, writeFileSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { CodexAppServerClient } from './codex-app-server.js';
+import { codexBorgSessionConfigArgs, BORG_SESSION_ENV } from './launch-gate.js';
+import { codexAppServerSocketConfigArgs } from './codex-wake-resolve.js';
+import { BORG_AGENT_KIND_ENV, BORG_CODEX_REMOTE_WAKE_ENV, codexAgentKindConfigArgs, codexRemoteWakeConfigArgs, } from './agent-runtime.js';
+export const DEFAULT_CODEX_REMOTE_DIR = join(homedir(), '.config', 'borgmcp', 'codex-remote');
+const DEFAULT_CODEX_REMOTE_READY_TIMEOUT_MS = 30_000;
+const MAX_CODEX_APP_SERVER_STDERR_CHARS = 16_384;
+/**
+ * Keep app-server failure details useful without copying credentials or local
+ * filesystem locations into the parent process warning.
+ */
+function sanitizeCodexDiagnostic(input) {
+    let sanitized = String(input).replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '');
+    sanitized = sanitized.replace(/\b((?:authorization\s*:\s*)?bearer)\s+[^\s,;]+/gi, '$1 <REDACTED>');
+    sanitized = sanitized.replace(/\b([a-z][a-z0-9+.-]*:\/\/)([^/\s:@]+):([^@\s/]+)@/gi, '$1<REDACTED>@');
+    sanitized = sanitized.replace(/([?&](?:access_token|auth_token|id_token|refresh_token|session_token|token|api_key|apikey|secret|password)=)[^&#\s]*/gi, '$1<REDACTED>');
+    sanitized = sanitized.replace(/\b((?:[a-z0-9_-]*(?:token|secret|password)|api[_-]?key)\s*[:=]\s*)(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s,;]+)/gi, '$1<REDACTED>');
+    sanitized = sanitized.replace(/\beyJ[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\b/g, '<REDACTED>');
+    sanitized = sanitized.replace(/(^|[\s("'=])(?:file:\/\/)?\/(?:Users|home|private|tmp|var|etc|opt|Volumes)\/[^\s"'`<>)}\]]+/gm, '$1<REDACTED_PATH>');
+    sanitized = sanitized.replace(/\b[A-Za-z]:\\(?:Users|Documents and Settings|ProgramData|Temp)\\[^\s"'`<>)}\]]+/g, '<REDACTED_PATH>');
+    return sanitized.slice(-MAX_CODEX_APP_SERVER_STDERR_CHARS);
+}
+export function withCodexCwdArg(args, cwd) {
+    if (hasCodexCwdArg(args))
+        return args;
+    return ['--cd', cwd, ...args];
+}
+/** Resolve the project directory Codex itself will use for this launch.
+ * Relative explicit paths are interpreted from the wrapper's current working
+ * directory, matching Codex's CLI path resolution. The final occurrence wins,
+ * matching clap's override behavior for repeated options. */
+export function resolveCodexLaunchCwd(args, fallbackCwd) {
+    const baseCwd = resolve(fallbackCwd);
+    let selected = baseCwd;
+    for (let index = 0; index < args.length; index += 1) {
+        const arg = args[index];
+        if (arg === '--')
+            break;
+        if (arg === '--cd' || arg === '-C') {
+            const value = args[index + 1];
+            if (value !== undefined && value.length > 0) {
+                selected = resolve(baseCwd, value);
+                index += 1;
+            }
+            continue;
+        }
+        if (arg.startsWith('--cd=')) {
+            const value = arg.slice('--cd='.length);
+            if (value.length > 0)
+                selected = resolve(baseCwd, value);
+            continue;
+        }
+        if (arg.startsWith('-C') && arg.length > 2) {
+            const value = arg.slice(2).replace(/^=/, '');
+            if (value.length > 0)
+                selected = resolve(baseCwd, value);
+        }
+    }
+    return selected;
+}
+function hasCodexCwdArg(args) {
+    for (const arg of args) {
+        if (arg === '--')
+            return false;
+        if (arg === '--cd' || arg.startsWith('--cd=') || arg === '-C' || (arg.startsWith('-C') && arg.length > 2)) {
+            return true;
+        }
+    }
+    return false;
+}
+export function defaultIsAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        // EPERM ⇒ the process exists but we can't signal it (still alive).
+        return err?.code === 'EPERM';
+    }
+}
+/**
+ * gh#633: process-liveness probe for the borg-owned codex app-server — the
+ * transport-agnostic analogue of the claude tail-F Monitor's pgrep check
+ * (checkInboxMonitorHealthy / stream-status.ts:48). Codex drones wake via this
+ * app-server bridge, NOT a tail-F Monitor, so wake_path_client_monitor_armed is
+ * false-by-design for them; the HOP-2 wake-path-deaf classifier mis-read that
+ * as deaf (gh#633). This gives HOP-2 the codex wake path's ACTUAL health.
+ *
+ * Uses the app-server PIDFILE (written at spawn, beside the socket) +
+ * process.kill(pid, 0) — NOT pgrep. The codex TUI is also launched
+ * `codex --remote unix://<socketPath>`, so a `pgrep -f <socketPath>` would ALSO
+ * match the live TUI and FALSE-ARM when the app-server has crashed but the TUI
+ * still runs (the deaf-but-alive case). The pidfile holds the EXACT app-server
+ * pid, so kill(0) reflects the app-server's liveness specifically — and it's
+ * cheaper than pgrep (no subprocess). Mirrors pruneStaleSockets' pid check.
+ *
+ * Tri-state (mirrors checkInboxMonitorHealthy's boolean|null contract):
+ *   - true:  pidfile resolves to a LIVE pid → app-server (bridge) is up → armed.
+ *   - false: pidfile resolves to a DEAD pid → an unclean exit (crash/kill -9)
+ *            left a stale pidfile (cleanup never ran) → bridge down → HOP-2
+ *            correctly flags a genuinely-deaf codex drone (no SLI-lie).
+ *   - null:  pidfile missing / unreadable / unparseable → cannot determine →
+ *            caller maps null→armed (false-deaf-avoidance, same as the claude
+ *            monitor branch). A CLEAN app-server exit removes the pidfile, but
+ *            then the drone is shutting down → the silent-stall watchdog
+ *            backstops it via a separate layer.
+ *
+ * Residual (negligible, gh#633 / Coordinator 6f28fe3f): PID reuse — if the
+ * crashed app-server's pid is recycled by an unrelated process before the next
+ * launch's pruneStaleSockets removes the stale pidfile, kill(0) reports alive →
+ * a brief false-arm. The window is tiny (exact-pid reuse during the crash gap)
+ * and self-heals on the next launch's prune; far smaller than existsSync's
+ * always-on stale-file masking.
+ */
+export function checkCodexBridgeHealthy(socketPath, deps = {}) {
+    if (!socketPath)
+        return null;
+    const isAlive = deps.isAlive ?? defaultIsAlive;
+    const readPidFile = deps.readPidFile ?? ((pidPath) => readFileSync(pidPath, 'utf-8'));
+    const pidPath = socketPath.replace(/\.sock$/, '.pid');
+    try {
+        const pid = Number.parseInt(readPidFile(pidPath).trim(), 10);
+        if (Number.isNaN(pid))
+            return null;
+        return isAlive(pid);
+    }
+    catch {
+        return null;
+    }
+}
+function safeRm(p) {
+    try {
+        rmSync(p, { force: true });
+    }
+    catch {
+        // best-effort
+    }
+}
+/**
+ * Remove sockets in the owned dir whose owning app-server pid is no longer
+ * alive (crashed prior launches), leaving live concurrent sessions' sockets
+ * untouched. Operates ONLY inside the borg-owned runtime dir.
+ */
+function pruneStaleSockets(runtimeDir, isAlive) {
+    let entries;
+    try {
+        entries = readdirSync(runtimeDir);
+    }
+    catch {
+        return;
+    }
+    for (const name of entries) {
+        if (!name.endsWith('.pid'))
+            continue;
+        const pidPath = join(runtimeDir, name);
+        const sockPath = join(runtimeDir, name.replace(/\.pid$/, '.sock'));
+        let pid;
+        try {
+            pid = Number.parseInt(readFileSync(pidPath, 'utf-8').trim(), 10);
+        }
+        catch {
+            safeRm(pidPath);
+            continue;
+        }
+        if (Number.isNaN(pid) || !isAlive(pid)) {
+            safeRm(sockPath);
+            safeRm(pidPath);
+        }
+    }
+}
+function failLoud(reason) {
+    return { args: [], env: {}, warning: reason };
+}
+function formatExitReason(diagnostics) {
+    if (diagnostics.error)
+        return `process error: ${sanitizeCodexDiagnostic(diagnostics.error)}`;
+    if (diagnostics.exitCode != null)
+        return `exit code ${diagnostics.exitCode}`;
+    if (diagnostics.signal)
+        return `signal ${diagnostics.signal}`;
+    return 'unknown exit status';
+}
+function formatStderr(stderr) {
+    const trimmed = sanitizeCodexDiagnostic(stderr).trim();
+    return trimmed ? ` Stderr: ${trimmed}` : '';
+}
+/**
+ * Start a borg-owned per-launch Codex app-server, probe it for readiness, and
+ * return the `--remote` launch args + an owned handle (or a fail-loud warning).
+ * Async + lifecycle-owning: the caller MUST call `result.server?.cleanup()` on
+ * TUI exit.
+ */
+export async function prepareCodexRemoteLaunch(deps) {
+    const runtimeDir = deps.runtimeDir ?? DEFAULT_CODEX_REMOTE_DIR;
+    const isAlive = deps.isAlive ?? defaultIsAlive;
+    const readyTimeoutMs = deps.readyTimeoutMs ?? DEFAULT_CODEX_REMOTE_READY_TIMEOUT_MS;
+    const pollIntervalMs = deps.pollIntervalMs ?? 250;
+    // 1. 0700 owned dir + prune crashed prior sockets (concurrent-safe via pid liveness).
+    try {
+        mkdirSync(runtimeDir, { recursive: true, mode: 0o700 });
+        chmodSync(runtimeDir, 0o700); // enforce 0700 even if it pre-existed with looser perms
+        pruneStaleSockets(runtimeDir, isAlive);
+    }
+    catch (err) {
+        return failLoud(`Codex remote-wake disabled: could not prepare ${runtimeDir} (${err?.message ?? err}); run borg_regen manually.`);
+    }
+    // 2. unique, non-predictable socket path inside the owned dir.
+    const id = (deps.socketId ?? (() => randomBytes(16).toString('hex')))();
+    const socketPath = join(runtimeDir, `${id}.sock`);
+    const pidPath = join(runtimeDir, `${id}.pid`);
+    // 3. spawn the long-lived app-server.
+    let child;
+    try {
+        child = deps.spawnAppServer(socketPath);
+    }
+    catch (err) {
+        safeRm(socketPath);
+        return failLoud(`Codex remote-wake disabled: could not start \`codex app-server\` (${sanitizeCodexDiagnostic(String(err?.message ?? err))}) — ` +
+            `confirm the Codex executable is installed and available on PATH. ` +
+            `Remote wake is unavailable for this session; run borg_regen manually to catch up.`);
+    }
+    if (child.pid != null) {
+        try {
+            writeFileSync(pidPath, String(child.pid));
+        }
+        catch {
+            // pidfile is only for stale-prune; launch still proceeds.
+        }
+    }
+    const cleanup = () => {
+        try {
+            child.kill();
+        }
+        catch {
+            // best-effort
+        }
+        safeRm(socketPath);
+        safeRm(pidPath);
+    };
+    // 4. readiness via a real protocol round-trip — bounded attempts (no clock dep).
+    const attempts = Math.max(1, Math.ceil(readyTimeoutMs / pollIntervalMs));
+    let ready = false;
+    let exitDiagnostics;
+    for (let i = 0; i < attempts && !ready; i++) {
+        try {
+            ready = await deps.probeReady(socketPath);
+        }
+        catch {
+            ready = false;
+        }
+        if (!ready) {
+            const diagnostics = child.diagnostics?.();
+            if (diagnostics?.exited) {
+                exitDiagnostics = diagnostics;
+                break;
+            }
+        }
+        if (!ready && i < attempts - 1)
+            await deps.sleep(pollIntervalMs);
+    }
+    if (!ready) {
+        const diagnostics = exitDiagnostics ?? child.diagnostics?.();
+        cleanup();
+        if (diagnostics?.exited) {
+            return failLoud(`Codex remote-wake disabled: \`codex app-server\` exited before becoming ready ` +
+                `(${formatExitReason(diagnostics)}).${formatStderr(diagnostics.stderr)} ` +
+                `Run borg_regen manually to catch up.`);
+        }
+        return failLoud(`Codex remote-wake disabled: \`codex app-server\` remained running but did not become ready ` +
+            `at ${sanitizeCodexDiagnostic(socketPath)} within ${readyTimeoutMs}ms.${formatStderr(diagnostics?.stderr ?? '')} ` +
+            `Run borg_regen manually to catch up.`);
+    }
+    // 5. ready → owned remote launch.
+    return {
+        args: ['--remote', `unix://${socketPath}`],
+        env: { [BORG_CODEX_REMOTE_WAKE_ENV]: '1' },
+        server: { pid: child.pid, socketPath, cleanup },
+    };
+}
+/**
+ * Production deps for prepareCodexRemoteLaunch — spawn the real `codex
+ * app-server` child + probe it with the real CodexAppServerClient. Shared by
+ * claude.ts and assimilate-deps.ts so there's ONE wiring.
+ *
+ * The readiness probe uses Codex app-server RPCs ONLY (connect + thread/loaded/
+ * list) — it never calls a Borg coordination endpoint — so it can never advance
+ * last_seen/last_regen_at and mask a deaf Codex (the gh#46/gh#406 signal-truth
+ * invariant; the app-server socket is the wake-DELIVERY wire, not a liveness
+ * signal).
+ */
+export function defaultCodexRemoteDeps() {
+    return {
+        spawnAppServer: (socketPath) => {
+            // gh#851: this app-server — NOT the `codex --remote` TUI — spawns the
+            // borg-mcp MCP child, so the BORG_SESSION activation marker (gh#673) must
+            // ride HERE too, or the child gates dormant. Load-bearing = the `-c
+            // mcp_servers.borg.env.BORG_SESSION="1"` override (codex MCP children read
+            // only the pinned env, injected via the app-server's -c — same V2b
+            // mechanism the TUI launch uses, applied at the app-server boundary). The
+            // env BORG_SESSION=1 is a defensive belt (inherited env never reaches the
+            // codex MCP child by itself). Still activation-only per the launch-gate
+            // SR-BINDING — never a security/access signal.
+            //
+            // gh#855: pin THIS app-server's live socket into the same child env via the
+            // same `-c` channel, so the waking borg-mcp child is authoritative about
+            // its OWN socket and re-resolves the loaded thread FRESH each wake — a
+            // missed/stale launch probe can no longer cause permanent deafness. The
+            // socketPath is borg-generated (randomBytes), never user input, TOML-quoted
+            // exactly like the BORG_SESSION override — zero injection surface.
+            const child = spawn('codex', [
+                'app-server',
+                ...codexBorgSessionConfigArgs(),
+                ...codexAgentKindConfigArgs(),
+                ...codexRemoteWakeConfigArgs(),
+                ...codexAppServerSocketConfigArgs(socketPath),
+                '--listen',
+                `unix://${socketPath}`,
+            ], {
+                stdio: ['ignore', 'ignore', 'pipe'],
+                shell: false,
+                env: {
+                    ...process.env,
+                    [BORG_SESSION_ENV]: '1',
+                    [BORG_AGENT_KIND_ENV]: 'codex',
+                    [BORG_CODEX_REMOTE_WAKE_ENV]: '1',
+                },
+            });
+            let stderr = '';
+            let exited = false;
+            let exitCode = null;
+            let signal = null;
+            let error = null;
+            child.stderr?.setEncoding('utf8');
+            child.stderr?.on('data', (chunk) => {
+                stderr = `${stderr}${String(chunk)}`.slice(-MAX_CODEX_APP_SERVER_STDERR_CHARS);
+            });
+            // `close` follows stdio drain; using it instead of `exit` keeps the final
+            // stderr chunk available when readiness reports the child failure.
+            child.once('close', (code, exitSignal) => {
+                exited = true;
+                exitCode = code;
+                signal = exitSignal;
+            });
+            child.once('error', (childError) => {
+                exited = true;
+                error = sanitizeCodexDiagnostic(childError.message);
+            });
+            return {
+                pid: child.pid,
+                kill: () => {
+                    try {
+                        child.kill();
+                    }
+                    catch {
+                        // best-effort
+                    }
+                },
+                diagnostics: () => ({
+                    exited,
+                    exitCode,
+                    signal,
+                    error: error == null ? null : sanitizeCodexDiagnostic(error),
+                    stderr: sanitizeCodexDiagnostic(stderr),
+                }),
+            };
+        },
+        probeReady: async (socketPath) => {
+            const probe = new CodexAppServerClient(socketPath);
+            try {
+                await probe.connect();
+                await probe.loadedThreadIds();
+                return true;
+            }
+            catch {
+                return false;
+            }
+            finally {
+                try {
+                    probe.close();
+                }
+                catch {
+                    // best-effort
+                }
+            }
+        },
+        sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    };
+}
+//# sourceMappingURL=codex-remote.js.map

package/dist/codex-remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-remote.js","sourceRoot":"","sources":["../src/codex-remote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAgE5B,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AAC9F,MAAM,qCAAqC,GAAG,MAAM,CAAC;AACrD,MAAM,iCAAiC,GAAG,MAAM,CAAC;AAEjD;;;GAGG;AACH,SAAS,uBAAuB,CAAC,KAAa;IAC5C,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IACtE,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kDAAkD,EAClD,eAAe,CAChB,CAAC;IACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,qDAAqD,EACrD,eAAe,CAChB,CAAC;IACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,wHAAwH,EACxH,cAAc,CACf,CAAC;IACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,0GAA0G,EAC1G,cAAc,CACf,CAAC;IACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,iEAAiE,EACjE,YAAY,CACb,CAAC;IACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,+FAA+F,EAC/F,mBAAmB,CACpB,CAAC;IACF,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kFAAkF,EAClF,iBAAiB,CAClB,CAAC;IACF,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,iCAAiC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,GAAW;IACzD,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;6DAG6D;AAC7D,MAAM,UAAU,qBAAqB,CAAC,IAAc,EAAE,WAAmB;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,QAAQ,GAAG,OAAO,CAAC;IACvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM;QACxB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACnC,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,IAAc;IACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1G,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,mEAAmE;QACnE,OAAO,GAAG,EAAE,IAAI,KAAK,OAAO,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAyB,EACzB,OAGI,EAAE;IAEN,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC/C,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,IAAI,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,UAAkB,EAAE,OAAiC;IAC9E,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,OAAO,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjB,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAkC;IAC1D,IAAI,WAAW,CAAC,KAAK;QAAE,OAAO,kBAAkB,uBAAuB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7F,IAAI,WAAW,CAAC,QAAQ,IAAI,IAAI;QAAE,OAAO,aAAa,WAAW,CAAC,QAAQ,EAAE,CAAC;IAC7E,IAAI,WAAW,CAAC,MAAM;QAAE,OAAO,UAAU,WAAW,CAAC,MAAM,EAAE,CAAC;IAC9D,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,OAAO,CAAC,CAAC,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAA4B;IAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,wBAAwB,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,qCAAqC,CAAC;IACpF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC;IAElD,sFAAsF;IACtF,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,wDAAwD;QACtF,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,QAAQ,CACb,iDAAiD,UAAU,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,6BAA6B,CACjH,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAE9C,sCAAsC;IACtC,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,CAAC,UAAU,CAAC,CAAC;QACnB,OAAO,QAAQ,CACb,qEAAqE,uBAAuB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM;YAC7H,mEAAmE;YACnE,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,CAAC;QACnB,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,iFAAiF;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC,CAAC,CAAC;IACzE,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,eAAkD,CAAC;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1C,IAAI,WAAW,EAAE,MAAM,EAAE,CAAC;gBACxB,eAAe,GAAG,WAAW,CAAC;gBAC9B,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,WAAW,GAAG,eAAe,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,CAAC;QACV,IAAI,WAAW,EAAE,MAAM,EAAE,CAAC;YACxB,OAAO,QAAQ,CACb,gFAAgF;gBAC9E,IAAI,gBAAgB,CAAC,WAAW,CAAC,KAAK,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG;gBACzE,sCAAsC,CACzC,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CACb,6FAA6F;YAC3F,MAAM,uBAAuB,CAAC,UAAU,CAAC,WAAW,cAAc,MAAM,YAAY,CAAC,WAAW,EAAE,MAAM,IAAI,EAAE,CAAC,GAAG;YAClH,sCAAsC,CACzC,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,OAAO;QACL,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,UAAU,EAAE,CAAC;QAC1C,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE;QAC1C,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB;IAIpC,OAAO;QACL,cAAc,EAAE,CAAC,UAAU,EAAE,EAAE;YAC7B,sEAAsE;YACtE,0EAA0E;YAC1E,oEAAoE;YACpE,2EAA2E;YAC3E,mEAAmE;YACnE,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,+CAA+C;YAC/C,EAAE;YACF,4EAA4E;YAC5E,yEAAyE;YACzE,uEAAuE;YACvE,wEAAwE;YACxE,4EAA4E;YAC5E,mEAAmE;YACnE,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,EACP;gBACE,YAAY;gBACZ,GAAG,0BAA0B,EAAE;gBAC/B,GAAG,wBAAwB,EAAE;gBAC7B,GAAG,yBAAyB,EAAE;gBAC9B,GAAG,8BAA8B,CAAC,UAAU,CAAC;gBAC7C,UAAU;gBACV,UAAU,UAAU,EAAE;aACvB,EACD;gBACE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;gBACnC,KAAK,EAAE,KAAK;gBACZ,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,CAAC,gBAAgB,CAAC,EAAE,GAAG;oBACvB,CAAC,mBAAmB,CAAC,EAAE,OAAO;oBAC9B,CAAC,0BAA0B,CAAC,EAAE,GAAG;iBAClC;aACF,CACF,CAAC;YACF,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,MAAM,GAAkB,IAAI,CAAC;YACjC,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;gBAClD,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,iCAAiC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YACH,0EAA0E;YAC1E,mEAAmE;YACnE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE;gBACvC,MAAM,GAAG,IAAI,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,GAAG,UAAU,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE;gBACjC,MAAM,GAAG,IAAI,CAAC;gBACd,KAAK,GAAG,uBAAuB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,IAAI,EAAE,GAAG,EAAE;oBACT,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,EAAE,CAAC;oBACf,CAAC;oBAAC,MAAM,CAAC;wBACP,cAAc;oBAChB,CAAC;gBACH,CAAC;gBACD,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;oBAClB,MAAM;oBACN,QAAQ;oBACR,MAAM;oBACN,KAAK,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC;oBAC5D,MAAM,EAAE,uBAAuB,CAAC,MAAM,CAAC;iBACxC,CAAC;aACH,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC/B,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC"}

package/dist/codex-wake-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-wake-resolve.d.ts","sourceRoot":"","sources":["../src/codex-wake-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,kFAAkF;AAClF,eAAO,MAAM,gCAAgC,iCAAiC,CAAC;AAE/E,wFAAwF;AACxF,wBAAgB,2BAA2B,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAG/F;AAED;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3E;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAUhG;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,EACnE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAC1B,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI,GACrD;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAWlD;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EACzD,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAIT;AAID,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AACxC,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAc,CAAC;AACjD;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAI,GAAG,MAAM,CAIvE;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAC9B,eAAe,EAAE,MAAM,EACvB,GAAG,EAAE,MAAM,EACX,QAAQ,SAAwB,GAC/B,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,OAAO,CAGT"}

package/dist/codex-wake-resolve.js

@@ -1 +1,127 @@
-const u="BORG_CODEX_APP_SERVER_SOCKET";function a(t=process.env){const e=t[u];return e&&e.length>0?e:null}function f(t){return["-c",`mcp_servers.borg.env.${u}="${t}"`]}function E(t,e){if(t.length===0)return null;if(t.length===1)return t[0].id;const r=t.filter(o=>o.cwd===e.cwd),n=r.length>0?r:t;let c=n[0];for(const o of n)(o.updatedAt??0)>(c.updatedAt??0)&&(c=o);return c.id}function i(t,e){const r={};let n=!1;for(const[c,o]of Object.entries(t)){if(e(o.socketPath)===!1){n=!0;continue}r[c]=o}return{targets:r,changed:n}}function d(t,e){return!t||t.socketPath!==e.socketPath||t.threadId!==e.threadId}const p=5e3,_=6e4,s=45*6e4,x=1e3;function A(t,e=0){const r=Math.max(0,t),n=p*2**r;return Math.min(n,_)+e}function R(t,e,r=s){return e-t>=r}function l(t,e,r){return t===null?!0:e-t>=r}export{u as BORG_CODEX_APP_SERVER_SOCKET_ENV,p as WAKE_RETRY_BASE_MS,_ as WAKE_RETRY_CAP_MS,s as WAKE_RETRY_MAX_AGE_MS,x as WAKE_RETRY_MAX_ATTEMPTS,f as codexAppServerSocketConfigArgs,a as codexAppServerSocketFromEnv,E as pickFreshThread,i as pruneDeadWakeTargets,l as shouldFireHeartbeat,A as wakeRetryBackoffMs,R as wakeRetryExpired,d as wakeTargetChanged};
+/**
+ * gh#855 — pure helpers for FRESH codex wake-target re-resolution.
+ *
+ * Root cause of codex deaf-when-idle: the wake target (socket + thread) was
+ * resolved once at launch and never refreshed, so a missed/stale launch probe
+ * left the drone permanently deaf. Phase 1 makes the waking borg-mcp child
+ * authoritative about its OWN live app-server socket — the socket is injected
+ * into the child's pinned env at spawn (codex-remote.ts, via the #851 `-c
+ * mcp_servers.borg.env.X` channel) — and re-resolves the loaded thread FRESH on
+ * every wake (loadedThreadIds is a re-runnable RPC).
+ *
+ * These are the pure pieces; the IO orchestration lives in codex-app-wake.ts.
+ */
+/** Pinned-env var carrying THIS drone's live app-server socket (set at spawn). */
+export const BORG_CODEX_APP_SERVER_SOCKET_ENV = 'BORG_CODEX_APP_SERVER_SOCKET';
+/** The live app-server socket for this borg-mcp child, or null (un-upgraded launch). */
+export function codexAppServerSocketFromEnv(env = process.env) {
+    const v = env[BORG_CODEX_APP_SERVER_SOCKET_ENV];
+    return v && v.length > 0 ? v : null;
+}
+/**
+ * The per-launch codex config override that pins THIS app-server's live socket
+ * into the borg-mcp child's [mcp_servers.borg.env] — the same `-c` channel the
+ * #851 BORG_SESSION marker rides (codex MCP children read only the pinned env,
+ * never inherited env). The socketPath is borg-generated (randomBytes under
+ * ~/.config/borgmcp/codex-remote), never user input; TOML-quoted exactly like
+ * the BORG_SESSION override, so there is zero injection surface.
+ */
+export function codexAppServerSocketConfigArgs(socketPath) {
+    return ['-c', `mcp_servers.borg.env.${BORG_CODEX_APP_SERVER_SOCKET_ENV}="${socketPath}"`];
+}
+/**
+ * Pick the loaded thread to wake on the live socket. Each borg-owned app-server
+ * is fresh-per-launch / single-session, so the common case is exactly one loaded
+ * thread. When more than one is loaded, prefer the thread whose cwd matches this
+ * drone's working directory (sibling worktrees have distinct cwds), then the
+ * newest by updatedAt — always deterministic. No loaded thread → null (no wake
+ * this cycle; the next wake retries, so a transient empty list never causes
+ * permanent deafness).
+ */
+export function pickFreshThread(threads, opts) {
+    if (threads.length === 0)
+        return null;
+    if (threads.length === 1)
+        return threads[0].id;
+    const cwdMatches = threads.filter((t) => t.cwd === opts.cwd);
+    const pool = cwdMatches.length > 0 ? cwdMatches : threads;
+    let best = pool[0];
+    for (const t of pool) {
+        if ((t.updatedAt ?? 0) > (best.updatedAt ?? 0))
+            best = t;
+    }
+    return best.id;
+}
+/**
+ * Pure prune: drop wake-target entries whose app-server socket is positively
+ * dead (liveness === false), so the file self-heals. Keeps alive (true) and
+ * indeterminate (null) entries — false-deaf-avoidance, mirroring
+ * checkCodexBridgeHealthy's tri-state. Returns the surviving map + whether
+ * anything changed (so the caller writes only on change).
+ */
+export function pruneDeadWakeTargets(targets, socketLiveness) {
+    const out = {};
+    let changed = false;
+    for (const [key, t] of Object.entries(targets)) {
+        if (socketLiveness(t.socketPath) === false) {
+            changed = true;
+            continue;
+        }
+        out[key] = t;
+    }
+    return { targets: out, changed };
+}
+/**
+ * Whether the freshly-resolved target differs from what's already recorded —
+ * so the self-healing cache write happens only on change (no file thrash on a
+ * busy cube re-resolving the same socket+thread every wake).
+ */
+export function wakeTargetChanged(existing, fresh) {
+    return (!existing || existing.socketPath !== fresh.socketPath || existing.threadId !== fresh.threadId);
+}
+// ─── gh#857 Phase 2: durable retry + heartbeat (pure helpers) ───────────────
+/** Base backoff for the first retry of a dropped/deferred wake. */
+export const WAKE_RETRY_BASE_MS = 5_000;
+/** Backoff ceiling — a wedged thread is retried at most this often. */
+export const WAKE_RETRY_CAP_MS = 60_000;
+/**
+ * Age cap: a pending wake older than this is given up (dropped from the queue).
+ * Generous on purpose — the WI-2 heartbeat is the backstop beyond it, and the
+ * server read-cursor means the next delivery (heartbeat or a fresh entry) drains
+ * everything anyway, so an aged-out single wake is never a permanent miss.
+ */
+export const WAKE_RETRY_MAX_AGE_MS = 45 * 60_000;
+/**
+ * Hard iteration ceiling for the retry-drain loop — a defensive belt ALONGSIDE
+ * the time-based age cap. In prod the age cap (real clock) terminates the loop in
+ * ~45-50 attempts; this ceiling only matters if the clock fails to advance
+ * (pathological / a non-advancing injected clock in tests) where a time-only
+ * guard would hot-spin forever. Set far above any real attempt count.
+ */
+export const WAKE_RETRY_MAX_ATTEMPTS = 1000;
+/**
+ * Exponential backoff (ms) for the Nth retry of a pending wake (0-based),
+ * doubling from WAKE_RETRY_BASE_MS, saturating at WAKE_RETRY_CAP_MS, plus
+ * caller-supplied jitter so co-located sibling drones don't retry in lockstep.
+ */
+export function wakeRetryBackoffMs(attempts, jitter = 0) {
+    const n = Math.max(0, attempts);
+    const exp = WAKE_RETRY_BASE_MS * 2 ** n;
+    return Math.min(exp, WAKE_RETRY_CAP_MS) + jitter;
+}
+/** True once a pending wake has outlived the age cap (give up; heartbeat backstops). */
+export function wakeRetryExpired(firstEnqueuedAt, now, maxAgeMs = WAKE_RETRY_MAX_AGE_MS) {
+    return now - firstEnqueuedAt >= maxAgeMs;
+}
+/**
+ * WI-2 double-fire avoidance: the periodic heartbeat fires only when no wake (or
+ * prior heartbeat) delivery landed within the cadence window — so an active cube
+ * with flowing per-entry wakes doesn't get redundant heartbeat injections. A
+ * never-delivered seat (null) always fires.
+ */
+export function shouldFireHeartbeat(lastDeliveredAt, now, cadenceMs) {
+    if (lastDeliveredAt === null)
+        return true;
+    return now - lastDeliveredAt >= cadenceMs;
+}
+//# sourceMappingURL=codex-wake-resolve.js.map

package/dist/codex-wake-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-wake-resolve.js","sourceRoot":"","sources":["../src/codex-wake-resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAE/E,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9E,MAAM,CAAC,GAAG,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,UAAkB;IAC/D,OAAO,CAAC,IAAI,EAAE,wBAAwB,gCAAgC,KAAK,UAAU,GAAG,CAAC,CAAC;AAC5F,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAA0B,EAAE,IAAqB;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA0B,EAC1B,cAAsD;IAEtD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,IAAI,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,KAAK,EAAE,CAAC;YAC3C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAyD,EACzD,KAA+C;IAE/C,OAAO,CACL,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAC9F,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACxC,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AACjD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAE5C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAM,GAAG,CAAC;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,kBAAkB,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,MAAM,CAAC;AACnD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAC9B,eAAuB,EACvB,GAAW,EACX,QAAQ,GAAG,qBAAqB;IAEhC,OAAO,GAAG,GAAG,eAAe,IAAI,QAAQ,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,eAA8B,EAC9B,GAAW,EACX,SAAiB;IAEjB,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,GAAG,GAAG,eAAe,IAAI,SAAS,CAAC;AAC5C,CAAC"}

package/dist/config-utils.d.ts

@@ -64,8 +64,8 @@ export declare function removeUserPromptSubmitHook(): boolean;
  * Detect whether the borg MCP server is already registered in the Claude
  * Code CLI config (`~/.claude.json` `mcpServers.borg`).
  *
- * Per gh#79: when a user re-runs `borg setup` to refresh OAuth (the
- * canonical re-run reason), the setup wizard's "Add borg to Claude Code?"
+ * Per gh#79: when a user re-runs `borg setup` (the canonical re-run
+ * reason), the setup wizard's "Add borg to Claude Code?"
  * prompt is redundant — the answer is deterministic ("already
  * configured"). This detect lets the wizard silently skip Step 1 entirely
  * when borg is present. Per the dispatch's Queen-implicit anti-scope,

package/dist/config-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-utils.d.ts","sourceRoot":"","sources":["../src/config-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA8EH;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,gEAAgE;AAChE,wBAAgB,mCAAmC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEhF;AAoQD;;;GAGG;AACH,wBAAgB,4BAA4B,IAAI,OAAO,CAgBtD;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,IAAI,OAAO,CAgB1D;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAkChD;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,IAAI,OAAO,CA2BjD;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,OAAO,CAkCpD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,GAAE,MAA2B,GACtC,OAAO,CAaT;AAED,wBAAgB,0BAA0B,CACxC,UAAU,GAAE,MAA0B,GACrC,OAAO,CAqBT;AAED;;;GAGG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAItC;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,IAAI,CAyBnC;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CA8BxC;AAsCD,wBAAgB,wBAAwB,IAAI,OAAO,CAElD;AAED,wBAAgB,4BAA4B,IAAI,OAAO,CAEtD;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,cAAc,GAAG,kBAAkB,GAAG,MAAM,EACvD,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,MAAyB,GACnC,OAAO,CAiBT;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,SAAS,GAAE,MAAyB,GAAG,OAAO,CAE/F;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CAAC,SAAS,GAAE,MAAyB,GAAG,OAAO,CAEnG;AAID;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,GAAE,MAA6B,GACxC,OAAO,CAaT;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAgB3C"}