humanish 0.97.0 → 0.99.0

package/dist/restricted-codex-participant-policy.d.ts

@@ -0,0 +1,39 @@
+import { type CuaTurn } from "./computer-use.js";
+import type { ActorExecutionProfile, ParticipantClosingReport } from "./actor-contract.js";
+export declare const PARTICIPANT_PROFILE: Readonly<ActorExecutionProfile>;
+export declare const PARTICIPANT_LIMITS: Readonly<{
+    instructions: number;
+    hint: number;
+    history: number;
+    historyTurns: 8;
+    narration: 2000;
+    output: number;
+    actions: 4;
+    requestMs: 180000;
+    cleanupMs: 5000;
+}>;
+export declare const PARTICIPANT_TURN_SCHEMA: Record<string, unknown>;
+export declare const PARTICIPANT_CLOSING_SCHEMA: {
+    type: string;
+    additionalProperties: boolean;
+    required: string[];
+    properties: {
+        summary: {
+            type: string;
+            minLength: number;
+            maxLength: number;
+        };
+        frictionReports: {
+            type: string;
+            maxItems: number;
+            items: {
+                type: string;
+                minLength: number;
+                maxLength: number;
+            };
+        };
+    };
+};
+/** Humanish output schema, not a provider-wire parser. Reject the whole proposal. */
+export declare function parseParticipantTurn(value: unknown): CuaTurn;
+export declare function parseParticipantClosing(value: unknown): ParticipantClosingReport;

package/dist/restricted-codex-participant-policy.js

@@ -0,0 +1,69 @@
+import { z } from "zod";
+import { browserControlActionSchema, validateBrowserControlAction } from "./browser-control-protocol.js";
+import { validClosingReport } from "./computer-use.js";
+export const PARTICIPANT_PROFILE = Object.freeze({
+    schema: "humanish.actor-execution-profile.v1", transport: "codex-app-server", authentication: "chatgpt-account",
+    billing: "account-unknown", requestedModel: "gpt-6-astra", reasoningEffort: "low", cliVersion: "0.154.0",
+    toolPolicy: "restricted-codex-v1", participantSchema: "humanish.restricted-participant-turn.v1", memoryPolicy: "recent-eight-16k-v1"
+});
+export const PARTICIPANT_LIMITS = Object.freeze({ instructions: 64 * 1024, hint: 8 * 1024, history: 16 * 1024,
+    historyTurns: 8, narration: 2000, output: 256 * 1024, actions: 4, requestMs: 180_000, cleanupMs: 5000 });
+const envelope = z.strictObject({ schema: z.literal(PARTICIPANT_PROFILE.participantSchema),
+    narration: z.string().max(PARTICIPANT_LIMITS.narration), done: z.boolean(),
+    outcome: z.enum(["reached", "not_reached", "blocked"]).nullable(),
+    actions: z.array(browserControlActionSchema).max(PARTICIPANT_LIMITS.actions) });
+/** Strict structured output requires all object keys. Null selects the existing
+ * executor default for click.button/wait.ms; it is never a new browser action. */
+function outputSchema(value) {
+    if (Array.isArray(value))
+        return value.map(outputSchema);
+    if (value === null || typeof value !== "object")
+        return value;
+    const result = Object.fromEntries(Object.entries(value).filter(([key]) => key !== "$schema")
+        .map(([key, v]) => [key === "oneOf" ? "anyOf" : key, outputSchema(v)]));
+    if (result.type === "object" && result.properties) {
+        const properties = result.properties;
+        const required = result.required;
+        for (const key of Object.keys(properties))
+            if (!required.includes(key))
+                properties[key] = { anyOf: [properties[key], { type: "null" }] };
+        result.required = Object.keys(properties);
+    }
+    return result;
+}
+export const PARTICIPANT_TURN_SCHEMA = outputSchema(z.toJSONSchema(envelope, { io: "input" }));
+export const PARTICIPANT_CLOSING_SCHEMA = {
+    type: "object", additionalProperties: false, required: ["summary", "frictionReports"], properties: {
+        summary: { type: "string", minLength: 1, maxLength: 4000 },
+        frictionReports: { type: "array", maxItems: 8, items: { type: "string", minLength: 1, maxLength: 2000 } }
+    }
+};
+/** Humanish output schema, not a provider-wire parser. Reject the whole proposal. */
+export function parseParticipantTurn(value) {
+    if (Buffer.byteLength(JSON.stringify(value) ?? "") > PARTICIPANT_LIMITS.output)
+        throw new Error("invalid_response");
+    const source = value;
+    const normalized = source && Array.isArray(source.actions) ? { ...source, actions: source.actions.map((action) => {
+            if (!action || typeof action !== "object" || Array.isArray(action))
+                return action;
+            const result = { ...action };
+            if (result.kind === "click" && result.button === null)
+                delete result.button;
+            if (result.kind === "wait" && result.ms === null)
+                delete result.ms;
+            return result;
+        }) } : value;
+    const v = envelope.parse(normalized);
+    if (Buffer.byteLength(v.narration) > PARTICIPANT_LIMITS.narration ||
+        (v.done ? v.actions.length !== 0 || v.outcome === null || !v.narration.trim() : v.actions.length === 0 || v.outcome !== null)) {
+        throw new Error("invalid_response");
+    }
+    return { actions: v.actions.map(validateBrowserControlAction), pendingSafetyChecks: [], done: v.done,
+        ...(v.narration ? { message: v.narration } : {}), ...(v.outcome === null ? {} : { outcome: v.outcome }) };
+}
+export function parseParticipantClosing(value) {
+    if (!validClosingReport(value))
+        throw new Error("invalid_response");
+    return { summary: value.summary, frictionReports: [...value.frictionReports] };
+}
+//# sourceMappingURL=restricted-codex-participant-policy.js.map

package/dist/restricted-codex-participant-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-codex-participant-policy.js","sourceRoot":"","sources":["../src/restricted-codex-participant-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AACzG,OAAO,EAAE,kBAAkB,EAAgB,MAAM,mBAAmB,CAAC;AAGrE,MAAM,CAAC,MAAM,mBAAmB,GAAoC,MAAM,CAAC,MAAM,CAAC;IAChF,MAAM,EAAE,qCAAqC,EAAE,SAAS,EAAE,kBAAkB,EAAE,cAAc,EAAE,iBAAiB;IAC/G,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS;IACxG,UAAU,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,yCAAyC,EAAE,YAAY,EAAE,qBAAqB;CACrI,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI;IAC3G,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3G,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,CAAC;IACxF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1E,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAClF;kFACkF;AAClF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC;SACzF,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAqC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAoB,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACzI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAA4B,CAAC;AAC1H,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE;QACjG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;QAC1D,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;KAC1G;CACF,CAAC;AACF,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,KAAuC,CAAC;IACvD,MAAM,UAAU,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAe,EAAE,EAAE;YACxH,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YAClF,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAA6B,CAAC;YACxD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC;YAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACb,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC,SAAS;QAC/D,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QAChI,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QAClG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AAC9G,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/restricted-codex-participant-run.d.ts

@@ -0,0 +1,20 @@
+import type { LabConfig } from "./lab-config.js";
+import { type LabOutcome } from "./lab-engine.js";
+import type { DesktopSession, DesktopReleaseResult } from "./desktop-session.js";
+import type { AutomaticAnalysisHooks } from "./automatic-analysis-completion.js";
+import { type ParticipantProviderCloseResult, type RestrictedParticipantOptions } from "./restricted-codex-participant.js";
+/** Internal, explicit single-participant consumer. Uses the existing producer and
+ * its automatic-completion boundary; never allocates or discovers a desktop. */
+export declare function runRestrictedParticipantStudy(options: {
+    cwd: string;
+    config: LabConfig;
+    desktop: DesktopSession;
+    participant?: RestrictedParticipantOptions;
+    signal?: AbortSignal;
+    runId?: string;
+    automaticAnalysis?: AutomaticAnalysisHooks;
+}): Promise<{
+    outcome: LabOutcome;
+    providerCleanup: ParticipantProviderCloseResult;
+    desktopCleanup: DesktopReleaseResult;
+}>;

package/dist/restricted-codex-participant-run.js

@@ -0,0 +1,78 @@
+import { runLab } from "./lab-engine.js";
+import { runCuaActorSession } from "./computer-use-actor.js";
+import { createRestrictedCodexParticipant } from "./restricted-codex-participant.js";
+import { CuaProviderError } from "./cua-provider-error.js";
+/** Internal, explicit single-participant consumer. Uses the existing producer and
+ * its automatic-completion boundary; never allocates or discovers a desktop. */
+export async function runRestrictedParticipantStudy(options) {
+    let participant;
+    let providerCleanup = { status: "unconfirmed" };
+    let desktopCleanup = { status: "unconfirmed", reason: "release_unavailable" };
+    let cleanupUncertain = false;
+    let finalized = false;
+    let finalizing;
+    const finish = () => finalizing ??= (async () => {
+        try {
+            if (participant)
+                providerCleanup = await participant.close();
+        }
+        catch {
+            providerCleanup = { status: "unconfirmed" };
+        }
+        let timer;
+        try {
+            desktopCleanup = await Promise.race([Promise.resolve().then(() => options.desktop.close()), new Promise(resolve => {
+                    timer = setTimeout(() => resolve({ status: "unconfirmed", reason: "release_unavailable" }), 10_000);
+                })]);
+        }
+        catch {
+            desktopCleanup = { status: "unconfirmed", reason: "release_failed" };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        cleanupUncertain ||= providerCleanup.status !== "confirmed" || desktopCleanup.status !== "released";
+        finalized = true;
+    })();
+    try {
+        const config = options.config;
+        if (config.subject.source !== "local-app" || config.actors.length !== 1 || config.actors[0]?.type !== "openai-computer-use" ||
+            (config.actors[0].model !== undefined && config.actors[0].model !== "gpt-6-astra") ||
+            (config.actors[0].reasoningEffort !== undefined && config.actors[0].reasoningEffort !== "low") ||
+            (config.actors[0]?.count ?? 1) !== 1 || (config.execution?.concurrency ?? 1) !== 1 ||
+            config.actors[0]?.lanes?.length ||
+            config.actors[0]?.maxOutputTokens !== undefined || config.execution?.caps?.maxUsd !== undefined ||
+            config.execution?.caps?.maxTotalUsd !== undefined || config.scenario?.caps?.maxUsd !== undefined || config.scenario?.caps?.maxTotalUsd !== undefined ||
+            !Number.isFinite(config.execution?.timeoutMs) || config.execution.timeoutMs < 1 || config.execution.timeoutMs > 600_000 ||
+            (config.review?.analysis !== false && (!config.review?.analysis || config.review.analysis.provider !== "codex"))) {
+            throw new CuaProviderError("request_rejected", { dispatched: false, usageComplete: false, cleanup: "confirmed" });
+        }
+        participant = createRestrictedCodexParticipant(options.participant);
+        const outcome = await runLab(config, { cwd: options.cwd, dryRun: false, open: false,
+            ...(options.runId === undefined ? {} : { runId: options.runId }),
+            automaticAnalysis: { ...options.automaticAnalysis, onStart: () => {
+                    if (!finalized || cleanupUncertain || providerCleanup.status !== "confirmed" || desktopCleanup.status !== "released")
+                        throw new Error("participant_cleanup_unconfirmed");
+                    return options.automaticAnalysis?.onStart?.();
+                } },
+            cuaHooks: { env: {}, buildExecutor: async () => options.desktop.executor,
+                buildProvider: async () => participant.provider,
+                runSession: async (input) => {
+                    try {
+                        const result = await runCuaActorSession({ ...input, ...(options.signal === undefined ? {} : { signal: options.signal }) });
+                        cleanupUncertain ||= result.trace.providerRequests?.some(r => r.cleanup !== "confirmed") === true;
+                        return result;
+                    }
+                    finally {
+                        await finish();
+                    }
+                } }
+        });
+        await finish();
+        return { outcome, providerCleanup, desktopCleanup };
+    }
+    finally {
+        await finish();
+    }
+}
+//# sourceMappingURL=restricted-codex-participant-run.js.map

package/dist/restricted-codex-participant-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-codex-participant-run.js","sourceRoot":"","sources":["../src/restricted-codex-participant-run.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAmB,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,OAAO,EAAE,gCAAgC,EAA0E,MAAM,mCAAmC,CAAC;AAC7J,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAGnD;IACC,IAAI,WAA4E,CAAC;IACjF,IAAI,eAAe,GAAmC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAChF,IAAI,cAAc,GAAyB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACpG,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,UAAqC,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAkB,EAAE,CAAC,UAAU,KAAK,CAAC,KAAK,IAAI,EAAE;QAC7D,IAAI,CAAC;YAAC,IAAI,WAAW;gBAAE,eAAe,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QACrE,MAAM,CAAC;YAAC,eAAe,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAAC,CAAC;QACtD,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,CAAuB,OAAO,CAAC,EAAE;oBACtI,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;gBACtG,CAAC,CAAC,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YAAC,cAAc,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAAC,CAAC;gBACzE,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAChC,gBAAgB,KAAK,eAAe,CAAC,MAAM,KAAK,WAAW,IAAI,cAAc,CAAC,MAAM,KAAK,UAAU,CAAC;QACpG,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,qBAAqB;YACzH,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,aAAa,CAAC;YAClF,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC;YAC9F,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC;YAClF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS;YAC/F,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,KAAK,SAAS;YACpJ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,SAAU,CAAC,SAAU,GAAG,CAAC,IAAI,MAAM,CAAC,SAAU,CAAC,SAAU,GAAG,OAAO;YAC3H,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC;YACnH,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,WAAW,GAAG,gCAAgC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;YACjF,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,iBAAiB,EAAE,EAAE,GAAG,OAAO,CAAC,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE;oBAC/D,IAAI,CAAC,SAAS,IAAI,gBAAgB,IAAI,eAAe,CAAC,MAAM,KAAK,WAAW,IAAI,cAAc,CAAC,MAAM,KAAK,UAAU;wBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACzK,OAAO,OAAO,CAAC,iBAAiB,EAAE,OAAO,EAAE,EAAE,CAAC;gBAChD,CAAC,EAAE;YACH,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ;gBACtE,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,WAAY,CAAC,QAAQ;gBAChD,UAAU,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;oBACxB,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;wBAC3H,gBAAgB,KAAK,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,KAAK,IAAI,CAAC;wBAClG,OAAO,MAAM,CAAC;oBAChB,CAAC;4BAAS,CAAC;wBAAC,MAAM,MAAM,EAAE,CAAC;oBAAC,CAAC;gBAC/B,CAAC,EAAE;SACN,CAAC,CAAC;QACH,MAAM,MAAM,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;IACtD,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,EAAE,CAAC;IAAC,CAAC;AAC/B,CAAC"}

package/dist/restricted-codex-participant.d.ts

@@ -0,0 +1,14 @@
+import { type CuaProvider } from "./computer-use.js";
+import { type RestrictedCodexSessionOptions } from "./restricted-codex-session.js";
+export type ParticipantProviderCloseResult = {
+    status: "confirmed" | "unconfirmed";
+};
+export interface RestrictedParticipantOptions {
+    session?: RestrictedCodexSessionOptions;
+    requestTimeoutMs?: number;
+}
+/** Fresh single turns over an already-owned executor. No desktop or login acquisition here. */
+export declare function createRestrictedCodexParticipant(options?: RestrictedParticipantOptions): {
+    provider: CuaProvider;
+    close(): Promise<ParticipantProviderCloseResult>;
+};

package/dist/restricted-codex-participant.js

@@ -0,0 +1,178 @@
+import { describeCuaAction } from "./computer-use.js";
+import { CuaProviderError, isCuaProviderError } from "./cua-provider-error.js";
+import { validateBrowserControlPng } from "./browser-control-protocol.js";
+import { runRestrictedCodexSession } from "./restricted-codex-session.js";
+import { PARTICIPANT_PROFILE, PARTICIPANT_LIMITS as L, PARTICIPANT_TURN_SCHEMA, PARTICIPANT_CLOSING_SCHEMA, parseParticipantTurn, parseParticipantClosing } from "./restricted-codex-participant-policy.js";
+const codeOf = (code) => {
+    if (code === "cancelled" || code === "timeout" || code === "refusal")
+        return code === "refusal" ? "refused" : code;
+    if (code === "codex_cleanup_failed")
+        return "cleanup_unconfirmed";
+    if (code === "codex_busy")
+        return "busy";
+    if (code === "codex_protocol_error" || code === "codex_tool_call")
+        return "protocol_error";
+    if (code === "invalid_response" || code === "response_too_large" || code === "output_incomplete")
+        return "invalid_response";
+    if (code === "invalid_request")
+        return "request_rejected";
+    if (code === "codex_process_failed")
+        return "process_failed";
+    return "unavailable";
+};
+const noDispatch = () => ({ dispatched: false, usageComplete: false, cleanup: "confirmed" });
+/** Fresh single turns over an already-owned executor. No desktop or login acquisition here. */
+export function createRestrictedCodexParticipant(options = {}) {
+    const timeoutMs = options.requestTimeoutMs ?? L.requestMs;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > L.requestMs)
+        throw new CuaProviderError("request_rejected", noDispatch());
+    let closed = false, failedCleanup = false, incompleteUsage = false, omitted = 0;
+    let instructions;
+    let history = [];
+    let controller;
+    let pending;
+    let closing;
+    let abortAt;
+    let cleanupTimer;
+    const revoke = () => {
+        closed = true;
+        abortAt ??= performance.now();
+        controller?.abort();
+        cleanupTimer ??= setTimeout(() => { if (pending)
+            failedCleanup = true; }, Math.max(0, L.cleanupMs - (performance.now() - abortAt)));
+    };
+    const trim = () => {
+        while (history.length > L.historyTurns || Buffer.byteLength(JSON.stringify(history)) > L.history) {
+            history.shift();
+            omitted++;
+        }
+    };
+    async function execute(req, signal, debrief, own) {
+        let receipt = noDispatch();
+        let usage;
+        const onAbort = () => { revoke(); own.abort(); };
+        signal.addEventListener("abort", onAbort, { once: true });
+        if (signal.aborted)
+            onAbort();
+        try {
+            if (own.signal.aborted || closed)
+                throw new CuaProviderError("cancelled", receipt);
+            if (typeof req.instructions !== "string" || Buffer.byteLength(req.instructions) > L.instructions ||
+                (req.contextHint !== undefined && (typeof req.contextHint !== "string" || Buffer.byteLength(req.contextHint) > L.hint)) ||
+                req.previousResponseId !== undefined || (req.acknowledgedSafetyChecks?.length ?? 0) > 0 ||
+                (instructions !== undefined && instructions !== req.instructions))
+                throw new CuaProviderError("request_rejected", receipt);
+            const frame = req.observation.screenshot;
+            try {
+                if (!Buffer.isBuffer(frame))
+                    throw new Error();
+                validateBrowserControlPng(frame);
+            }
+            catch {
+                throw new CuaProviderError("request_rejected", receipt);
+            }
+            instructions ??= req.instructions;
+            const last = history.at(-1);
+            if (last && req.previousExecution !== undefined) {
+                if (req.previousExecution.actions.length !== last.actions.length || req.previousExecution.actions.some((a, i) => a.index !== i || !["completed", "skipped", "not_dispatched", "outcome_uncertain"].includes(a.status))) {
+                    throw new CuaProviderError("request_rejected", receipt);
+                }
+                last.execution = { actions: req.previousExecution.actions.map(a => ({ ...a })) };
+            }
+            trim();
+            const result = await runRestrictedCodexSession({ model: PARTICIPANT_PROFILE.requestedModel,
+                instructions: `${instructions}\n\nYou are the study participant. Use only the current screenshot and explicit recent history. Describe your experience as public participant speech, never private reasoning. History contains proposals and input acknowledgments, not independent proof of success. A completed input does not prove its application outcome. Never use tools or request integrations. ${debrief ? "The interaction has ended. Give only a closing summary and frictionReports about what you observed; do not propose actions." : "Return the supplied JSON schema. Continue with one to four browser actions, or explicitly finish with no actions and your outcome. Preserve uncertainty and do not invent observations."}`,
+                evidence: JSON.stringify({ phase: debrief ? "closing" : "interaction", width: frame.readUInt32BE(16), height: frame.readUInt32BE(20),
+                    contextHint: req.contextHint ?? null, memoryPolicy: PARTICIPANT_PROFILE.memoryPolicy, omittedTurns: omitted, history }),
+                images: [{ evidenceId: "current-frame", dataUrl: `data:image/png;base64,${frame.toString("base64")}` }],
+                schema: debrief ? PARTICIPANT_CLOSING_SCHEMA : PARTICIPANT_TURN_SCHEMA, maxOutputTokens: null, timeoutMs, signal: own.signal }, options.session);
+            receipt = { dispatched: result.dispatched, usageComplete: result.usageComplete,
+                cleanup: result.errorCode === "codex_cleanup_failed" ? "unconfirmed" : "confirmed" };
+            usage = result.usage ?? undefined;
+            if (receipt.cleanup === "unconfirmed") {
+                failedCleanup = true;
+                closed = true;
+            }
+            if (result.dispatched && !result.usageComplete && !debrief)
+                incompleteUsage = true;
+            if (closed || own.signal.aborted)
+                throw new CuaProviderError(receipt.cleanup === "unconfirmed" ? "cleanup_unconfirmed" : "cancelled", receipt, usage);
+            if (result.status !== "completed" || result.errorCode !== null)
+                throw new CuaProviderError(codeOf(result.errorCode), receipt, usage);
+            let turn;
+            try {
+                turn = debrief ? { actions: [], pendingSafetyChecks: [], done: true, closingReport: parseParticipantClosing(result.output) }
+                    : parseParticipantTurn(result.output);
+            }
+            catch {
+                throw new CuaProviderError("invalid_response", receipt, usage);
+            }
+            if (!debrief) {
+                history.push({ narration: turn.message ?? "", actions: turn.actions.map(describeCuaAction) });
+                trim();
+            }
+            return { ...turn, ...(usage === undefined ? {} : { usage }), providerRequest: receipt };
+        }
+        catch (error) {
+            if (isCuaProviderError(error))
+                throw error;
+            failedCleanup = true;
+            closed = true;
+            incompleteUsage = true;
+            throw new CuaProviderError("process_failed", { dispatched: "unknown", usageComplete: false, cleanup: "unconfirmed" }, usage);
+        }
+        finally {
+            signal.removeEventListener("abort", onAbort);
+        }
+    }
+    const start = (req, signal, debrief) => {
+        if (closed)
+            return Promise.reject(new CuaProviderError("request_rejected", noDispatch()));
+        if (pending)
+            return Promise.reject(new CuaProviderError("busy", noDispatch()));
+        const own = new AbortController();
+        controller = own;
+        const task = execute(req, signal, debrief, own);
+        pending = task;
+        void task.finally(() => { if (pending === task) {
+            pending = undefined;
+            controller = undefined;
+            clearTimeout(cleanupTimer);
+        } }).catch(() => undefined);
+        return task;
+    };
+    const provider = {
+        id: "restricted-codex-participant", version: PARTICIPANT_PROFILE.requestedModel, requiresFrame: true, requestPolicy: "fail_closed",
+        executionProfile: PARTICIPANT_PROFILE, modelSettings: { reasoningEffort: "low" },
+        capabilities: { headless: true, structuredTrace: true, lanes: ["computer-use"], producesScreenshots: true, byoModel: false,
+            preGrantableApprovals: false, inProcessTools: false, license: "proprietary" },
+        get interactionUsageIncomplete() { return incompleteUsage; }, get historyTurnsOmitted() { return omitted; },
+        nextTurn: (req, signal) => start(req, signal, false), debrief: (req, signal) => start(req, signal, true)
+    };
+    return { provider, close: () => {
+            if (closing)
+                return closing;
+            revoke();
+            history = [];
+            instructions = undefined;
+            closing = (async () => {
+                let timer;
+                try {
+                    const settled = !pending || await Promise.race([pending.then(() => true, () => true), new Promise(resolve => {
+                            timer = setTimeout(() => resolve(false), Math.max(0, L.cleanupMs - (performance.now() - abortAt)));
+                        })]);
+                    if (!settled)
+                        failedCleanup = true;
+                    return { status: failedCleanup ? "unconfirmed" : "confirmed" };
+                }
+                finally {
+                    clearTimeout(timer);
+                    clearTimeout(cleanupTimer);
+                    history = [];
+                    instructions = undefined;
+                }
+            })();
+            return closing;
+        } };
+}
+//# sourceMappingURL=restricted-codex-participant.js.map

package/dist/restricted-codex-participant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-codex-participant.js","sourceRoot":"","sources":["../src/restricted-codex-participant.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAuD,MAAM,mBAAmB,CAAC;AAC3G,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAA6B,MAAM,yBAAyB,CAAC;AAC1G,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAsC,MAAM,+BAA+B,CAAC;AAE9G,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,IAAI,CAAC,EAAE,uBAAuB,EAAE,0BAA0B,EACxG,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAKlG,MAAM,MAAM,GAAG,CAAC,IAA6C,EAAwB,EAAE;IACrF,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACnH,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,qBAAqB,CAAC;IAClE,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,gBAAgB,CAAC;IAC3F,IAAI,IAAI,KAAK,kBAAkB,IAAI,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,kBAAkB,CAAC;IAC5H,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,kBAAkB,CAAC;IAC1D,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,gBAAgB,CAAC;IAC7D,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AACF,MAAM,UAAU,GAAG,GAA2B,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;AAErH,+FAA+F;AAC/F,MAAM,UAAU,gCAAgC,CAAC,UAAwC,EAAE;IAGzF,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,SAAS,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,SAAS;QAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/I,IAAI,MAAM,GAAG,KAAK,EAAE,aAAa,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC;IAChF,IAAI,YAAgC,CAAC;IACrC,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAuC,CAAC;IAC5C,IAAI,OAAqC,CAAC;IAC1C,IAAI,OAA4D,CAAC;IACjE,IAAI,OAA2B,CAAC;IAChC,IAAI,YAAuD,CAAC;IAC5D,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,MAAM,GAAG,IAAI,CAAC;QACd,OAAO,KAAK,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9B,UAAU,EAAE,KAAK,EAAE,CAAC;QACpB,YAAY,KAAK,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO;YAAE,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACtI,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACnI,CAAC,CAAC;IACF,KAAK,UAAU,OAAO,CAAC,GAAmB,EAAE,MAAmB,EAAE,OAAgB,EAAE,GAAoB;QACrG,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;QAC3B,IAAI,KAAkC,CAAC;QACvC,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACnF,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY;gBAC9F,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;gBACvH,GAAG,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;gBACvF,CAAC,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YAC7H,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC;YACzC,IAAI,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YACzF,MAAM,CAAC;gBAAC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YAClE,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,IAAI,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAChD,IAAI,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9G,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBACxG,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACnF,CAAC;YACD,IAAI,EAAE,CAAC;YACP,MAAM,MAAM,GAA0B,MAAM,yBAAyB,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,cAAc;gBAC/G,YAAY,EAAE,GAAG,YAAY,8WAA8W,OAAO,CAAC,CAAC,CAAC,6HAA6H,CAAC,CAAC,CAAC,yLAAyL,EAAE;gBAChtB,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,KAAM,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAM,CAAC,YAAY,CAAC,EAAE,CAAC;oBACpI,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,YAAY,EAAE,mBAAmB,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;gBACzH,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,yBAAyB,KAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACxG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,uBAAuB,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAC7H,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa;gBAC5E,OAAO,EAAE,MAAM,CAAC,SAAS,KAAK,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvF,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;YAClC,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;gBAAC,aAAa,GAAG,IAAI,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,OAAO;gBAAE,eAAe,GAAG,IAAI,CAAC;YACnF,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACtJ,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACrI,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;oBAC1H,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;gBAAC,IAAI,EAAE,CAAC;YAAC,CAAC;YACxH,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,aAAa,GAAG,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,eAAe,GAAG,IAAI,CAAC;YAC5D,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/H,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAmB,EAAE,MAAmB,EAAE,OAAgB,EAAoB,EAAE;QAC7F,IAAI,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,kBAAkB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1F,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;QAAC,UAAU,GAAG,GAAG,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,GAAG,IAAI,CAAC;QACf,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAAC,OAAO,GAAG,SAAS,CAAC;YAAC,UAAU,GAAG,SAAS,CAAC;YAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvJ,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,QAAQ,GAAgB;QAC5B,EAAE,EAAE,8BAA8B,EAAE,OAAO,EAAE,mBAAmB,CAAC,cAAc,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa;QAClI,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;QAChF,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK;YACxH,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE;QAC/E,IAAI,0BAA0B,KAAK,OAAO,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,mBAAmB,KAAK,OAAO,OAAO,CAAC,CAAC,CAAC;QAC3G,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;KACzG,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,MAAM,EAAE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;YAAC,YAAY,GAAG,SAAS,CAAC;YACjD,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,IAAI,KAAgD,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,CAAQ,OAAO,CAAC,EAAE;4BACjH,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAQ,CAAC,CAAC,CAAC,CAAC;wBACtG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACL,IAAI,CAAC,OAAO;wBAAE,aAAa,GAAG,IAAI,CAAC;oBACnC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAoC,CAAC;gBACnG,CAAC;wBAAS,CAAC;oBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,YAAY,CAAC,YAAY,CAAC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;oBAAC,YAAY,GAAG,SAAS,CAAC;gBAAC,CAAC;YACxG,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC,EAAE,CAAC;AACN,CAAC"}

package/dist/restricted-codex-session.d.ts

@@ -10,8 +10,8 @@ export interface RestrictedCodexSessionOptions {
     arch?: string;
     spawnFn?: RestrictedCodexSpawn;
 }
-/** The gate covers all factories and readiness checks in this process. It does not
- * promise to serialize unrelated Codex applications using the same host login. */
+/** Each call owns a separate process, home and thread. An unresolved child blocks
+ * new work, but ordinary participant turns may run concurrently. */
 export declare function runRestrictedCodexSession(request: RestrictedCodexRequest, options?: RestrictedCodexSessionOptions, readinessOnly?: boolean): Promise<RestrictedCodexResult>;
 export declare function checkRestrictedCodexSessionReadiness(input?: {
     signal?: AbortSignal;

package/dist/restricted-codex-session.js

@@ -2,6 +2,7 @@ import { spawn } from "node:child_process";
 import { constants } from "node:fs";
 import { access, chmod, lstat, mkdir, mkdtemp, open, readdir, realpath, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
+import { createRequire } from "node:module";
 import path from "node:path";
 import { CODEX_IMAGE, CODEX_MAX_OUTPUT_BYTES, RESTRICTED_CODEX_ANALYSIS_IDENTITY, RESTRICTED_CODEX_ANALYSIS_MODELS, admitsRestrictedCodexConfig, admitsRestrictedCodexThread, codexRecord, restrictedCodexConfig, restrictedCodexFailure, restrictedCodexRequestError, restrictedCodexUsage } from "./restricted-codex-policy.js";
 import { RestrictedCodexDeadline, RestrictedCodexStop, RestrictedCodexTransport, closeOwnedCodexProcess, ownCodexProcess } from "./restricted-codex-transport.js";
@@ -12,14 +13,16 @@ function childEnvironment(source, home, scratch) {
             result[key] = source[key];
     return result;
 }
-async function isNativeExecutable(file) {
+async function isNativeExecutable(file, platform) {
     try {
         await access(file, constants.X_OK);
         const handle = await open(file, "r");
         try {
             const buffer = Buffer.alloc(4);
             const read = await handle.read(buffer, 0, 4, 0);
-            return read.bytesRead === 4 && buffer.equals(Buffer.from([0x7f, 0x45, 0x4c, 0x46]));
+            return read.bytesRead === 4 && (platform === "darwin"
+                ? ["cffaedfe", "feedfacf", "cafebabe", "bebafeca", "cafebabf"].includes(buffer.toString("hex"))
+                : buffer.equals(Buffer.from([0x7f, 0x45, 0x4c, 0x46])));
         }
         finally {
             await handle.close();
@@ -32,6 +35,7 @@ async function isNativeExecutable(file) {
 /** Resolve PATH without running a shell. The npm launcher is resolved to its
  * native optional package so cleanup owns the real app-server child. */
 async function resolveExecutable(options, env) {
+    const platform = options.platform ?? process.platform;
     let selected = options.executable;
     if (selected === undefined) {
         for (const directory of (env.PATH ?? "").split(path.delimiter).filter(entry => path.isAbsolute(entry))) {
@@ -53,14 +57,23 @@ async function resolveExecutable(options, env) {
     catch {
         throw new RestrictedCodexStop("codex_unavailable");
     }
-    if (await isNativeExecutable(resolved))
+    if (await isNativeExecutable(resolved, platform))
         return resolved;
     if (path.basename(resolved) === "codex.js" && path.basename(path.dirname(resolved)) === "bin") {
         const packageRoot = path.dirname(path.dirname(resolved));
-        const triple = "x86_64-unknown-linux-musl";
-        for (const candidate of [path.join(packageRoot, "node_modules", "@openai", "codex-linux-x64", "vendor", triple, "bin", "codex"),
-            path.join(packageRoot, "vendor", triple, "bin", "codex")]) {
-            if (await isNativeExecutable(candidate))
+        const triple = platform === "darwin" ? "aarch64-apple-darwin" : "x86_64-unknown-linux-musl";
+        const nativePackage = platform === "darwin" ? "codex-darwin-arm64" : "codex-linux-x64";
+        const candidates = [];
+        try {
+            // Match the npm launcher's resolution: optional packages may be hoisted or
+            // linked by the package manager rather than nested inside @openai/codex.
+            const manifest = createRequire(resolved).resolve(`@openai/${nativePackage}/package.json`);
+            candidates.push(path.join(path.dirname(manifest), "vendor", triple, "bin", "codex"));
+        }
+        catch { /* Older packages may bundle the native executable directly. */ }
+        candidates.push(path.join(packageRoot, "vendor", triple, "bin", "codex"));
+        for (const candidate of candidates) {
+            if (await isNativeExecutable(candidate, platform))
                 return realpath(candidate);
         }
     }
@@ -98,27 +111,20 @@ async function checkVersion(file, env, cwd, spawnFn, deadline) {
         }
     }
 }
-let activeSession = false;
-let unclosedChild = false;
+const unclosedChildren = new Set();
 function retainUnclosedChild(closed) {
-    unclosedChild = true;
-    void closed.then(() => { unclosedChild = false; });
+    unclosedChildren.add(closed);
+    void closed.then(() => { unclosedChildren.delete(closed); });
 }
-/** The gate covers all factories and readiness checks in this process. It does not
- * promise to serialize unrelated Codex applications using the same host login. */
+/** Each call owns a separate process, home and thread. An unresolved child blocks
+ * new work, but ordinary participant turns may run concurrently. */
 export async function runRestrictedCodexSession(request, options = {}, readinessOnly = false) {
     const error = restrictedCodexRequestError(request);
     if (error)
         return restrictedCodexFailure(error);
-    if (activeSession || unclosedChild)
+    if (unclosedChildren.size)
         return restrictedCodexFailure("codex_busy");
-    activeSession = true;
-    try {
-        return await executeRestrictedCodexSession(request, options, readinessOnly);
-    }
-    finally {
-        activeSession = false;
-    }
+    return executeRestrictedCodexSession(request, options, readinessOnly);
 }
 async function writeRecoveryMarker(work, sourceEnv, reason) {
     const cache = sourceEnv.XDG_CACHE_HOME ?? path.join(sourceEnv.HOME ?? homedir(), ".cache");
@@ -162,7 +168,8 @@ async function executeRestrictedCodexSession(request, options = {}, readinessOnl
     const admissionError = restrictedCodexRequestError(request);
     if (admissionError)
         return restrictedCodexFailure(admissionError);
-    if ((options.platform ?? process.platform) !== "linux" || (options.arch ?? process.arch) !== "x64")
+    const platform = options.platform ?? process.platform, arch = options.arch ?? process.arch;
+    if (!(platform === "linux" && arch === "x64") && !(platform === "darwin" && arch === "arm64"))
         return restrictedCodexFailure("codex_unsupported_platform");
     const deadline = new RestrictedCodexDeadline(request.timeoutMs, request.signal);
     const sourceEnv = options.env ?? process.env;
@@ -318,7 +325,7 @@ async function executeRestrictedCodexSession(request, options = {}, readinessOnl
             clientInfo: { name: "humanish_analysis", version: "1.0.0" }, capabilities: { experimentalApi: true }
         });
         if (typeof initialize.userAgent !== "string" || !initialize.userAgent.includes(`/0.154.0 `)
-            || initialize.codexHome !== home || initialize.platformOs !== "linux" || initialize.platformFamily !== "unix")
+            || initialize.codexHome !== home || initialize.platformOs !== (platform === "darwin" ? "macos" : "linux") || initialize.platformFamily !== "unix")
             throw new RestrictedCodexStop("codex_unsupported_version");
         transport.notify("initialized", {});
         const effective = await transport.rpc("config/read", { includeLayers: true, cwd });
@@ -368,12 +375,13 @@ async function executeRestrictedCodexSession(request, options = {}, readinessOnl
         }
     }
     catch (error) {
-        result = restrictedCodexFailure(deadline.code ?? (error instanceof RestrictedCodexStop ? error.code : "codex_process_failed"), dispatched, usage);
+        const code = error instanceof RestrictedCodexStop ? error.code : "codex_process_failed";
+        result = restrictedCodexFailure(code === "codex_cleanup_failed" ? code : deadline.code ?? code, dispatched, usage);
     }
     finally {
         // Deadline remains authoritative until acceptance; teardown has its own small grace.
         deadline.close();
-        let cleaned = !unclosedChild;
+        let cleaned = result.errorCode !== "codex_cleanup_failed";
         if (transport) {
             const cleanupTurn = turnId ?? earlyTurnId;
             cleaned = await transport.close(dispatched && !completed && threadId && cleanupTurn
@@ -404,7 +412,7 @@ async function executeRestrictedCodexSession(request, options = {}, readinessOnl
         }
         if (work && cleaned && !authReplaced)
             await rm(work, { recursive: true, force: true }).catch(() => { cleaned = false; });
-        if (work && unclosedChild)
+        if (work && !cleaned && !authReplaced)
             await writeRecoveryMarker(work, sourceEnv, "process_cleanup_unconfirmed").catch(() => undefined);
         if (!cleaned)
             result = restrictedCodexFailure("codex_cleanup_failed", dispatched, usage);