cyrus-codex-runner 0.2.64-test.6 → 0.2.64

package/dist/backend/types.d.ts

@@ -0,0 +1,210 @@
+import type { EventEmitter } from "node:events";
+import type { ApprovalMode, ModelReasoningEffort, SandboxMode, WebSearchMode } from "@openai/codex-sdk";
+import type { CodexConfigOverrides } from "../types.js";
+/**
+ * Backend-neutral item shape consumed by {@link CodexEventMapper}.
+ *
+ * The {@link AppServerCodexBackend} translates the app-server protocol's
+ * camelCase item payloads into this normalized shape. The mapper depends only
+ * on this type — never on a concrete transport's wire format (Dependency
+ * Inversion).
+ */
+export type NormalizedCodexItem = {
+    type: "agent_message";
+    id: string;
+    text: string;
+} | {
+    type: "reasoning";
+    id: string;
+    text?: string;
+} | {
+    type: "user_message";
+    id: string;
+} | {
+    type: "command_execution";
+    id: string;
+    command: string;
+    aggregated_output: string;
+    exit_code?: number;
+    status: "in_progress" | "completed" | "failed";
+} | {
+    type: "file_change";
+    id: string;
+    changes: {
+        path: string;
+        kind: "add" | "delete" | "update";
+    }[];
+    status: "completed" | "failed";
+} | {
+    type: "mcp_tool_call";
+    id: string;
+    server: string;
+    tool: string;
+    arguments: unknown;
+    result?: {
+        content?: unknown[];
+        structured_content?: unknown;
+    };
+    error?: {
+        message: string;
+    };
+    status: "in_progress" | "completed" | "failed";
+} | {
+    type: "web_search";
+    id: string;
+    query: string;
+    action?: Record<string, unknown>;
+} | {
+    type: "todo_list";
+    id: string;
+    items: {
+        text: string;
+        completed: boolean;
+    }[];
+} | {
+    type: "error";
+    id: string;
+    message: string;
+} | {
+    type: "unknown";
+    id: string;
+};
+/** Token usage for a completed turn, in backend-neutral form. */
+export interface NormalizedUsage {
+    input_tokens: number;
+    output_tokens: number;
+    cached_input_tokens: number;
+}
+/**
+ * Backend-neutral lifecycle/stream event. Both backends emit this; the mapper
+ * turns it into Cyrus `SDKMessage`s.
+ */
+export type NormalizedCodexEvent = {
+    kind: "thread-started";
+    threadId: string;
+} | {
+    kind: "turn-started";
+} | {
+    kind: "item-started";
+    item: NormalizedCodexItem;
+} | {
+    kind: "item-completed";
+    item: NormalizedCodexItem;
+} | {
+    kind: "turn-completed";
+    usage: NormalizedUsage;
+} | {
+    kind: "turn-failed";
+    message: string;
+} | {
+    kind: "error";
+    message: string;
+};
+/** A single piece of user input for a turn or a steer. */
+export type CodexUserInput = {
+    type: "text";
+    text: string;
+} | {
+    type: "local_image";
+    path: string;
+};
+/** A single filesystem access grant in a Codex permission profile. */
+export type CodexFileSystemAccess = "read" | "write" | "deny";
+/**
+ * Resolved per-thread sandbox decision.
+ * - `workspace-mode`: the coarse Codex sandbox mode (broad reads, writes limited
+ *   to cwd + `writableRoots` + tmp). The default when there are no explicit Cyrus
+ *   sandbox settings — sent via `thread/start.sandbox` + `config.sandbox_workspace_write`.
+ * - `profile`: a granular per-thread permission profile (restricted reads) derived
+ *   from Cyrus sandbox settings. `filesystem` is a flattened map of path →
+ *   read/write/deny, where keys are either absolute paths or Codex special-path
+ *   tokens (`:minimal` = platform defaults, `:workspace_roots` = cwd/worktree,
+ *   `:tmpdir`, `:slash_tmp`). Sent via `thread/start.permissions` (the profile id)
+ *   + `config.permissions.<id>` (the profile body); the profile persists per-thread
+ *   and cannot be combined with `thread/start.sandbox`.
+ */
+export type ResolvedCodexSandbox = {
+    kind: "workspace-mode";
+    mode: SandboxMode;
+    writableRoots: string[];
+    networkAccess: boolean;
+} | {
+    kind: "profile";
+    profileId: string;
+    filesystem: Record<string, CodexFileSystemAccess>;
+    networkAccess: boolean;
+};
+/**
+ * Fully-resolved, transport-neutral run configuration produced by
+ * {@link CodexConfigBuilder}; the backend maps it onto `thread/start` +
+ * `turn/start` params for the app-server.
+ */
+export interface ResolvedCodexConfig {
+    model?: string;
+    sandbox: ResolvedCodexSandbox;
+    workingDirectory?: string;
+    approvalPolicy: ApprovalMode;
+    skipGitRepoCheck: boolean;
+    modelReasoningEffort?: ModelReasoningEffort;
+    webSearchMode?: WebSearchMode;
+    /** Maps to Codex `developer_instructions` (appended system prompt). */
+    developerInstructions?: string;
+    /** Global Codex config overrides (e.g. `mcp_servers`). */
+    configOverrides?: CodexConfigOverrides;
+    /** Environment override; when set the child does not inherit ambient env. */
+    env?: Record<string, string>;
+    codexHome: string;
+    codexPath?: string;
+    outputSchema?: unknown;
+    /** Existing thread id to resume rather than start fresh. */
+    resumeSessionId?: string;
+}
+/** Events emitted by a {@link CodexBackend}. */
+export interface CodexBackendEvents {
+    event: (event: NormalizedCodexEvent) => void;
+}
+export declare interface CodexBackend {
+    on<K extends keyof CodexBackendEvents>(event: K, listener: CodexBackendEvents[K]): this;
+    emit<K extends keyof CodexBackendEvents>(event: K, ...args: Parameters<CodexBackendEvents[K]>): boolean;
+}
+/**
+ * Transport strategy for driving Codex.
+ *
+ * Implementations are responsible only for (a) establishing/maintaining a
+ * Codex session and (b) translating their wire protocol into
+ * {@link NormalizedCodexEvent}s. Config assembly, skill staging, MCP
+ * translation, and SDKMessage mapping live in dedicated collaborators.
+ */
+export interface CodexBackend extends EventEmitter {
+    /**
+     * Whether this backend can inject input into an already-running turn
+     * (`turn/steer`). When false, mid-turn input must be delivered as a new turn.
+     */
+    readonly supportsSteer: boolean;
+    /**
+     * Open the session: connect/spawn as needed, then start or resume the thread.
+     * Resolves with the resolved thread id (may differ from a requested resume id
+     * only if the backend allocates one). Implementations should emit a
+     * `thread-started` event when the id is known.
+     */
+    open(config: ResolvedCodexConfig): Promise<{
+        threadId: string;
+    }>;
+    /**
+     * Run a single turn with the given input. Resolves when the turn reaches a
+     * terminal state (a `turn-completed` or `turn-failed` event has been emitted).
+     */
+    runTurn(input: CodexUserInput[]): Promise<void>;
+    /**
+     * Inject input into the currently-active turn. Only present when
+     * {@link supportsSteer} is true. Rejects if no turn is active.
+     */
+    steer?(input: CodexUserInput[]): Promise<void>;
+    /** Whether a turn is currently in flight. */
+    isTurnActive(): boolean;
+    /** Cancel the active turn (if any) without tearing down the session. */
+    interrupt(): Promise<void>;
+    /** Tear down the session and release all resources. */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/backend/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EACX,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,aAAa,EACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAC5B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACpC;IACA,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;CAC9C,GACD;IACA,IAAI,EAAE,aAAa,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;KAAE,EAAE,CAAC;IAC/D,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;CAC9B,GACD;IACA,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/D,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;CAC9C,GACD;IACA,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,GACD;IACA,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAC7C,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,iEAAiE;AACjE,MAAM,WAAW,eAAe;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAC7B;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,0DAA0D;AAC1D,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,sEAAsE;AACtE,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9D;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,oBAAoB,GAC7B;IACA,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,WAAW,CAAC;IAClB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;CACtB,GACD;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAClD,aAAa,EAAE,OAAO,CAAC;CACtB,CAAC;AAEL;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,oBAAoB,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,YAAY,CAAC;IAC7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC7C;AAED,MAAM,CAAC,OAAO,WAAW,YAAY;IACpC,EAAE,CAAC,CAAC,SAAS,MAAM,kBAAkB,EACpC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAC7B,IAAI,CAAC;IACR,IAAI,CAAC,CAAC,SAAS,MAAM,kBAAkB,EACtC,KAAK,EAAE,CAAC,EACR,GAAG,IAAI,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GACxC,OAAO,CAAC;CACX;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IACjD;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAEhC;;;;;OAKG;IACH,IAAI,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEjE;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhD;;;OAGG;IACH,KAAK,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C,6CAA6C;IAC7C,YAAY,IAAI,OAAO,CAAC;IAExB,wEAAwE;IACxE,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3B,uDAAuD;IACvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB"}

package/dist/backend/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/backend/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/backend/types.ts"],"names":[],"mappings":""}

package/dist/config/CodexConfigBuilder.d.ts

@@ -0,0 +1,40 @@
+import type { ResolvedCodexConfig } from "../backend/types.js";
+import type { CodexRunnerConfig } from "../types.js";
+/**
+ * Assembles a transport-neutral {@link ResolvedCodexConfig} from a
+ * {@link CodexRunnerConfig}. Single responsibility: configuration resolution
+ * (model fallback, sandbox, reasoning effort, MCP translation, env, home dir).
+ * Produces no side effects beyond ensuring the Codex home directory exists.
+ */
+export declare class CodexConfigBuilder {
+    private readonly config;
+    constructor(config: CodexRunnerConfig);
+    build(): Promise<ResolvedCodexConfig>;
+    /**
+     * Network intent for the sandbox. Defaults to enabled (so common remote
+     * workflows — git/gh — work without danger-full-access); honors an explicit
+     * `sandbox_workspace_write.network_access` in the passed-through overrides.
+     */
+    private resolveNetworkAccess;
+    private getAdditionalDirectories;
+    private resolveCodexHome;
+    private buildEnvOverride;
+    /**
+     * Global Codex config overrides — currently just MCP servers. Sandbox
+     * (writable/readable roots, network) is owned by {@link resolveCodexSandbox}
+     * and `developer_instructions` is surfaced on
+     * {@link ResolvedCodexConfig.developerInstructions}, so neither is injected
+     * here. Any caller-supplied `sandbox_workspace_write` is dropped (its
+     * `network_access` is folded into the sandbox decision via
+     * {@link resolveNetworkAccess}) to keep a single source of truth.
+     */
+    private buildConfigOverrides;
+    /**
+     * If the configured model is unreachable via the OpenAI API, swap to the
+     * fallback model before starting. Skipped when there is no API key (Codex
+     * native auth handles access) or when the user has a ChatGPT subscription.
+     */
+    private resolveModelWithFallback;
+    private hasCodexSubscription;
+}
+//# sourceMappingURL=CodexConfigBuilder.d.ts.map

package/dist/config/CodexConfigBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodexConfigBuilder.d.ts","sourceRoot":"","sources":["../../src/config/CodexConfigBuilder.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,KAAK,EAGX,iBAAiB,EACjB,MAAM,aAAa,CAAC;AAWrB;;;;;GAKG;AACH,qBAAa,kBAAkB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,iBAAiB;IAEhD,KAAK,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAoC3C;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,wBAAwB;IAYhC,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,gBAAgB;IAgBxB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IA6B5B;;;;OAIG;YACW,wBAAwB;YAqCxB,oBAAoB;CAuBlC"}

package/dist/config/CodexConfigBuilder.js

@@ -0,0 +1,182 @@
+import { mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { buildCodexMcpServersConfig } from "./mcpConfigTranslator.js";
+import { resolveCodexSandbox } from "./sandboxPolicy.js";
+function getDefaultReasoningEffortForModel(model) {
+    // All gpt-5 variants (including plain "gpt-5") reject xhigh; pin to "high".
+    return /^gpt-5/i.test(model || "") ? "high" : undefined;
+}
+/**
+ * Assembles a transport-neutral {@link ResolvedCodexConfig} from a
+ * {@link CodexRunnerConfig}. Single responsibility: configuration resolution
+ * (model fallback, sandbox, reasoning effort, MCP translation, env, home dir).
+ * Produces no side effects beyond ensuring the Codex home directory exists.
+ */
+export class CodexConfigBuilder {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async build() {
+        await this.resolveModelWithFallback();
+        const codexHome = this.resolveCodexHome();
+        const reasoningEffort = this.config.modelReasoningEffort ??
+            getDefaultReasoningEffortForModel(this.config.model);
+        const webSearchMode = this.config.webSearchMode ??
+            (this.config.includeWebSearch ? "live" : undefined);
+        return {
+            model: this.config.model,
+            sandbox: resolveCodexSandbox({
+                mode: this.config.sandbox || "workspace-write",
+                workingDirectory: this.config.workingDirectory,
+                writableRoots: this.getAdditionalDirectories(),
+                networkAccess: this.resolveNetworkAccess(),
+                sandboxSettings: this.config.sandboxSettings,
+            }),
+            workingDirectory: this.config.workingDirectory,
+            approvalPolicy: this.config.askForApproval || "never",
+            skipGitRepoCheck: this.config.skipGitRepoCheck ?? true,
+            modelReasoningEffort: reasoningEffort,
+            webSearchMode,
+            developerInstructions: (this.config.appendSystemPrompt ?? "").trim() || undefined,
+            configOverrides: this.buildConfigOverrides(),
+            env: this.buildEnvOverride(codexHome),
+            codexHome,
+            codexPath: this.config.codexPath,
+            outputSchema: this.config.outputSchema,
+            resumeSessionId: this.config.resumeSessionId,
+        };
+    }
+    /**
+     * Network intent for the sandbox. Defaults to enabled (so common remote
+     * workflows — git/gh — work without danger-full-access); honors an explicit
+     * `sandbox_workspace_write.network_access` in the passed-through overrides.
+     */
+    resolveNetworkAccess() {
+        const sww = this.config.configOverrides?.sandbox_workspace_write;
+        if (sww &&
+            typeof sww === "object" &&
+            !Array.isArray(sww) &&
+            typeof sww.network_access === "boolean") {
+            return sww.network_access;
+        }
+        return true;
+    }
+    getAdditionalDirectories() {
+        const workingDirectory = this.config.workingDirectory;
+        const uniqueDirectories = new Set();
+        for (const directory of this.config.allowedDirectories || []) {
+            if (!directory || directory === workingDirectory) {
+                continue;
+            }
+            uniqueDirectories.add(directory);
+        }
+        return [...uniqueDirectories];
+    }
+    resolveCodexHome() {
+        const codexHome = this.config.codexHome ||
+            process.env.CODEX_HOME ||
+            join(homedir(), ".codex");
+        mkdirSync(codexHome, { recursive: true });
+        return codexHome;
+    }
+    buildEnvOverride(codexHome) {
+        if (!this.config.codexHome) {
+            return undefined;
+        }
+        const env = {};
+        for (const [key, value] of Object.entries(process.env)) {
+            if (typeof value === "string") {
+                env[key] = value;
+            }
+        }
+        env.CODEX_HOME = codexHome;
+        return env;
+    }
+    /**
+     * Global Codex config overrides — currently just MCP servers. Sandbox
+     * (writable/readable roots, network) is owned by {@link resolveCodexSandbox}
+     * and `developer_instructions` is surfaced on
+     * {@link ResolvedCodexConfig.developerInstructions}, so neither is injected
+     * here. Any caller-supplied `sandbox_workspace_write` is dropped (its
+     * `network_access` is folded into the sandbox decision via
+     * {@link resolveNetworkAccess}) to keep a single source of truth.
+     */
+    buildConfigOverrides() {
+        const { sandbox_workspace_write: _dropped, ...rest } = this.config.configOverrides ?? {};
+        const configOverrides = { ...rest };
+        const mcpServers = buildCodexMcpServersConfig({
+            workingDirectory: this.config.workingDirectory,
+            mcpConfigPath: this.config.mcpConfigPath,
+            mcpConfig: this.config.mcpConfig,
+            allowedTools: this.config.allowedTools,
+        });
+        if (mcpServers) {
+            const existingMcpServers = configOverrides.mcp_servers;
+            configOverrides.mcp_servers =
+                existingMcpServers &&
+                    typeof existingMcpServers === "object" &&
+                    !Array.isArray(existingMcpServers)
+                    ? {
+                        ...existingMcpServers,
+                        ...mcpServers,
+                    }
+                    : mcpServers;
+        }
+        return Object.keys(configOverrides).length > 0
+            ? configOverrides
+            : undefined;
+    }
+    /**
+     * If the configured model is unreachable via the OpenAI API, swap to the
+     * fallback model before starting. Skipped when there is no API key (Codex
+     * native auth handles access) or when the user has a ChatGPT subscription.
+     */
+    async resolveModelWithFallback() {
+        const model = this.config.model;
+        const fallback = this.config.fallbackModel;
+        if (!model || !fallback || fallback === model)
+            return;
+        const apiKey = process.env.OPENAI_API_KEY;
+        if (!apiKey)
+            return;
+        if (await this.hasCodexSubscription())
+            return;
+        const baseUrl = (process.env.OPENAI_BASE_URL ||
+            process.env.OPENAI_API_BASE ||
+            "https://api.openai.com/v1").replace(/\/+$/, "");
+        try {
+            const response = await fetch(`${baseUrl}/models/${encodeURIComponent(model)}`, {
+                method: "GET",
+                headers: { Authorization: `Bearer ${apiKey}` },
+                signal: AbortSignal.timeout(10_000),
+            });
+            if (response.status === 404) {
+                console.log(`[CodexRunner] Model "${model}" not found (404), falling back to "${fallback}"`);
+                this.config.model = fallback;
+            }
+        }
+        catch {
+            // Network error or timeout — proceed with the original model and let
+            // the backend surface any downstream failure.
+        }
+    }
+    async hasCodexSubscription() {
+        const codexBin = this.config.codexPath || "codex";
+        try {
+            const { execFile } = await import("node:child_process");
+            const { promisify } = await import("node:util");
+            const execFileAsync = promisify(execFile);
+            const { stdout, stderr } = await execFileAsync(codexBin, ["login", "status"], { timeout: 5_000 });
+            const result = /logged in using chatgpt/i.test(stdout + stderr);
+            console.log(`[CodexRunner] hasCodexSubscription: ${result} (stdout: "${stdout.trim()}"${stderr.trim() ? `, stderr: "${stderr.trim()}"` : ""})`);
+            return result;
+        }
+        catch (error) {
+            console.warn(`[CodexRunner] hasCodexSubscription error (returning false): ${error instanceof Error ? error.message : String(error)}`);
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=CodexConfigBuilder.js.map

package/dist/config/CodexConfigBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodexConfigBuilder.js","sourceRoot":"","sources":["../../src/config/CodexConfigBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,SAAS,iCAAiC,CACzC,KAAc;IAEd,4EAA4E;IAC5E,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IACD;IAA7B,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D,KAAK,CAAC,KAAK;QACV,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,eAAe,GACpB,IAAI,CAAC,MAAM,CAAC,oBAAoB;YAChC,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,aAAa,GAClB,IAAI,CAAC,MAAM,CAAC,aAAa;YACzB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAErD,OAAO;YACN,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,OAAO,EAAE,mBAAmB,CAAC;gBAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,iBAAiB;gBAC9C,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAC9C,aAAa,EAAE,IAAI,CAAC,wBAAwB,EAAE;gBAC9C,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE;gBAC1C,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;aAC5C,CAAC;YACF,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAC9C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO;YACrD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI;YACtD,oBAAoB,EAAE,eAAe;YACrC,aAAa;YACb,qBAAqB,EACpB,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,oBAAoB,EAAE;YAC5C,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YACrC,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;SAC5C,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,oBAAoB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,uBAAuB,CAAC;QACjE,IACC,GAAG;YACH,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACnB,OAAQ,GAAoC,CAAC,cAAc,KAAK,SAAS,EACxE,CAAC;YACF,OAAQ,GAAmC,CAAC,cAAc,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,wBAAwB;QAC/B,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACtD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC5C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;YAC9D,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBAClD,SAAS;YACV,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,GAAG,iBAAiB,CAAC,CAAC;IAC/B,CAAC;IAEO,gBAAgB;QACvB,MAAM,SAAS,GACd,IAAI,CAAC,MAAM,CAAC,SAAS;YACrB,OAAO,CAAC,GAAG,CAAC,UAAU;YACtB,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,gBAAgB,CACvB,SAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAClB,CAAC;QACF,CAAC;QACD,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;QAC3B,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;;;;;;OAQG;IACK,oBAAoB;QAC3B,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GACnD,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;QACnC,MAAM,eAAe,GAAyB,EAAE,GAAG,IAAI,EAAE,CAAC;QAE1D,MAAM,UAAU,GAAG,0BAA0B,CAAC;YAC7C,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAC9C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;SACtC,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,kBAAkB,GAAG,eAAe,CAAC,WAAW,CAAC;YACvD,eAAe,CAAC,WAAW;gBAC1B,kBAAkB;oBAClB,OAAO,kBAAkB,KAAK,QAAQ;oBACtC,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;oBACjC,CAAC,CAAC;wBACA,GAAI,kBAAuD;wBAC3D,GAAG,UAAU;qBACb;oBACF,CAAC,CAAC,UAAU,CAAC;QAChB,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC;YAC7C,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,SAAS,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,wBAAwB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO;QAEtD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,MAAM,IAAI,CAAC,oBAAoB,EAAE;YAAE,OAAO;QAE9C,MAAM,OAAO,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,eAAe;YAC3B,OAAO,CAAC,GAAG,CAAC,eAAe;YAC3B,2BAA2B,CAC3B,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAEtB,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC3B,GAAG,OAAO,WAAW,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAChD;gBACC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;gBAC9C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACnC,CACD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CACV,wBAAwB,KAAK,uCAAuC,QAAQ,GAAG,CAC/E,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC;YAC9B,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,qEAAqE;YACrE,8CAA8C;QAC/C,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,oBAAoB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;QAClD,IAAI,CAAC;YACJ,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAC7C,QAAQ,EACR,CAAC,OAAO,EAAE,QAAQ,CAAC,EACnB,EAAE,OAAO,EAAE,KAAK,EAAE,CAClB,CAAC;YACF,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CACV,uCAAuC,MAAM,cAAc,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAClI,CAAC;YACF,OAAO,MAAM,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CACX,+DAA+D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvH,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;CACD"}

package/dist/config/mcpConfigTranslator.d.ts

@@ -0,0 +1,17 @@
+import type { McpServerConfig } from "cyrus-core";
+import type { CodexConfigOverrides } from "../types.js";
+/** Inputs the MCP translator needs from a runner config. */
+export interface McpTranslationInput {
+    workingDirectory?: string;
+    mcpConfigPath?: string | string[];
+    mcpConfig?: Record<string, McpServerConfig>;
+    allowedTools?: string[];
+}
+/**
+ * Translate Cyrus MCP server configs (file-based + inline) and Cyrus
+ * `allowedTools` semantics into Codex-native `mcp_servers` config overrides.
+ *
+ * Reference: {@link https://platform.openai.com/docs/docs-mcp}
+ */
+export declare function buildCodexMcpServersConfig(input: McpTranslationInput): Record<string, CodexConfigOverrides> | undefined;
+//# sourceMappingURL=mcpConfigTranslator.d.ts.map

package/dist/config/mcpConfigTranslator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpConfigTranslator.d.ts","sourceRoot":"","sources":["../../src/config/mcpConfigTranslator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAUxD,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAqPD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACzC,KAAK,EAAE,mBAAmB,GACxB,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,GAAG,SAAS,CA2FlD"}