instar 0.28.113 → 0.28.115

package/dist/providers/adapters/openai-codex/capabilities.js

@@ -0,0 +1,60 @@
+/**
+ * Capability declaration for the openai-codex adapter.
+ *
+ * Declares only what's actually implemented — declared-but-stubbed
+ * counts as a capability-declaration lie under Rule 3.2 / the parity
+ * harness's stub-vs-real check. Asymmetric sub-capabilities reflect
+ * Codex's deep-dive findings (specs/provider-portability/02-codex-deep-
+ * dive.md §C–E):
+ *
+ *   - PublicUsageApi: FALSE (no documented public usage endpoint)
+ *   - PreCompactHook: FALSE (auto-compacts silently; we synthesize)
+ *   - SubagentLifecycleHooks: FALSE (no native subagent hook events)
+ *   - StructuredApprovalEvents: TRUE (app-server requestApproval is structured)
+ *   - NativeIdleBound: FALSE (no native idle-timeout config)
+ */
+import { CapabilityFlag, capabilitySet } from '../../capabilities.js';
+export const openAiCodexCapabilities = capabilitySet([
+    // ── TRANSPORT ────────────────────────────────────────────────────────
+    CapabilityFlag.OneShotCompletion,
+    CapabilityFlag.StructuredOneShot,
+    CapabilityFlag.AgenticSessionHeadless,
+    // ── CAPABILITY ───────────────────────────────────────────────────────
+    CapabilityFlag.ToolAccess,
+    CapabilityFlag.ToolAllowlist,
+    CapabilityFlag.FileSystemAccess,
+    CapabilityFlag.PathAllowlist,
+    CapabilityFlag.BashExecution,
+    CapabilityFlag.WebAccess,
+    // ── OBSERVABILITY ────────────────────────────────────────────────────
+    CapabilityFlag.LiveOutputStream,
+    CapabilityFlag.ConversationLogReader,
+    CapabilityFlag.ConversationLogTailer,
+    CapabilityFlag.HookEventReceiver,
+    CapabilityFlag.SubagentLifecycleObserver,
+    CapabilityFlag.SessionId,
+    CapabilityFlag.UsageMeterProvider,
+    CapabilityFlag.ProcessLifecycle,
+    CapabilityFlag.InteractivePromptObserver,
+    // ── CONTROL ──────────────────────────────────────────────────────────
+    CapabilityFlag.InputInjection,
+    CapabilityFlag.HardKill,
+    CapabilityFlag.Interrupt,
+    CapabilityFlag.StopGateInterceptor,
+    CapabilityFlag.TimeoutBound,
+    CapabilityFlag.IdleBound,
+    CapabilityFlag.AuthCredentialInjection,
+    CapabilityFlag.CredentialStorageProvider,
+    CapabilityFlag.ContextScopeControl,
+    CapabilityFlag.CompactionLifecycle,
+    // ── INTEGRATION ──────────────────────────────────────────────────────
+    CapabilityFlag.ProviderScaffolder,
+    CapabilityFlag.McpToolRegistry,
+    CapabilityFlag.SessionResumeIndex,
+    CapabilityFlag.ConversationLogProvider,
+    // ── ASYMMETRIC SUB-CAPABILITIES (Codex-favorable only) ──────────────
+    CapabilityFlag.StructuredApprovalEvents,
+    // NOT declared (Codex doesn't have these natively):
+    //   PublicUsageApi, PreCompactHook, SubagentLifecycleHooks, NativeIdleBound
+]);
+//# sourceMappingURL=capabilities.js.map

package/dist/providers/adapters/openai-codex/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC;IACnD,wEAAwE;IACxE,cAAc,CAAC,iBAAiB;IAChC,cAAc,CAAC,iBAAiB;IAChC,cAAc,CAAC,sBAAsB;IAErC,wEAAwE;IACxE,cAAc,CAAC,UAAU;IACzB,cAAc,CAAC,aAAa;IAC5B,cAAc,CAAC,gBAAgB;IAC/B,cAAc,CAAC,aAAa;IAC5B,cAAc,CAAC,aAAa;IAC5B,cAAc,CAAC,SAAS;IAExB,wEAAwE;IACxE,cAAc,CAAC,gBAAgB;IAC/B,cAAc,CAAC,qBAAqB;IACpC,cAAc,CAAC,qBAAqB;IACpC,cAAc,CAAC,iBAAiB;IAChC,cAAc,CAAC,yBAAyB;IACxC,cAAc,CAAC,SAAS;IACxB,cAAc,CAAC,kBAAkB;IACjC,cAAc,CAAC,gBAAgB;IAC/B,cAAc,CAAC,yBAAyB;IAExC,wEAAwE;IACxE,cAAc,CAAC,cAAc;IAC7B,cAAc,CAAC,QAAQ;IACvB,cAAc,CAAC,SAAS;IACxB,cAAc,CAAC,mBAAmB;IAClC,cAAc,CAAC,YAAY;IAC3B,cAAc,CAAC,SAAS;IACxB,cAAc,CAAC,uBAAuB;IACtC,cAAc,CAAC,yBAAyB;IACxC,cAAc,CAAC,mBAAmB;IAClC,cAAc,CAAC,mBAAmB;IAElC,wEAAwE;IACxE,cAAc,CAAC,kBAAkB;IACjC,cAAc,CAAC,eAAe;IAC9B,cAAc,CAAC,kBAAkB;IACjC,cAAc,CAAC,uBAAuB;IAEtC,uEAAuE;IACvE,cAAc,CAAC,wBAAwB;IAEvC,oDAAoD;IACpD,4EAA4E;CAC7E,CAAC,CAAC"}

package/dist/providers/adapters/openai-codex/capability/bashExecution.d.ts

@@ -0,0 +1,10 @@
+/**
+ * BashExecution implementation for openai-codex.
+ *
+ * Codex supports two execution tiers: sandboxed via `command/exec` (the
+ * default) and unsandboxed via `process/spawn` (experimental). The
+ * provider distinguishes both — supportsSandboxModes returns true.
+ */
+import type { BashExecution } from '../../../primitives/capability/bashExecution.js';
+export declare function createBashExecution(): BashExecution;
+//# sourceMappingURL=bashExecution.d.ts.map

package/dist/providers/adapters/openai-codex/capability/bashExecution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bashExecution.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/bashExecution.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,iDAAiD,CAAC;AAWzD,wBAAgB,mBAAmB,IAAI,aAAa,CAA2C"}

package/dist/providers/adapters/openai-codex/capability/bashExecution.js

@@ -0,0 +1,17 @@
+/**
+ * BashExecution implementation for openai-codex.
+ *
+ * Codex supports two execution tiers: sandboxed via `command/exec` (the
+ * default) and unsandboxed via `process/spawn` (experimental). The
+ * provider distinguishes both — supportsSandboxModes returns true.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+class OpenAiCodexBashExecution {
+    capability = CapabilityFlag.BashExecution;
+    buildSpec(rules) {
+        return Object.freeze({ __brand: 'BashExecutionSpec', rules });
+    }
+    supportsSandboxModes() { return true; }
+}
+export function createBashExecution() { return new OpenAiCodexBashExecution(); }
+//# sourceMappingURL=bashExecution.js.map

package/dist/providers/adapters/openai-codex/capability/bashExecution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bashExecution.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/bashExecution.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,wBAAwB;IACnB,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC;IACnD,SAAS,CAAC,KAAyB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAsB,CAAC;IACrF,CAAC;IACD,oBAAoB,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;CACjD;AAED,MAAM,UAAU,mBAAmB,KAAoB,OAAO,IAAI,wBAAwB,EAAE,CAAC,CAAC,CAAC"}

package/dist/providers/adapters/openai-codex/capability/fileSystemAccess.d.ts

@@ -0,0 +1,10 @@
+/**
+ * FileSystemAccess implementation for openai-codex.
+ *
+ * Codex supports all three sandbox tiers natively: `read-only`,
+ * `workspace-write`, `danger-full-access` (via `--sandbox <mode>` flag or
+ * `sandbox_mode` in config.toml). This is the cleanest of all providers.
+ */
+import type { FileSystemAccess } from '../../../primitives/capability/fileSystemAccess.js';
+export declare function createFileSystemAccess(): FileSystemAccess;
+//# sourceMappingURL=fileSystemAccess.d.ts.map

package/dist/providers/adapters/openai-codex/capability/fileSystemAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileSystemAccess.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/fileSystemAccess.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAIjB,MAAM,oDAAoD,CAAC;AAiB5D,wBAAgB,sBAAsB,IAAI,gBAAgB,CAA8C"}

package/dist/providers/adapters/openai-codex/capability/fileSystemAccess.js

@@ -0,0 +1,22 @@
+/**
+ * FileSystemAccess implementation for openai-codex.
+ *
+ * Codex supports all three sandbox tiers natively: `read-only`,
+ * `workspace-write`, `danger-full-access` (via `--sandbox <mode>` flag or
+ * `sandbox_mode` in config.toml). This is the cleanest of all providers.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+const SUPPORTED = new Set([
+    'read-only',
+    'workspace-write',
+    'danger-full-access',
+]);
+class OpenAiCodexFileSystemAccess {
+    capability = CapabilityFlag.FileSystemAccess;
+    buildSpec(mode, options) {
+        return Object.freeze({ __brand: 'FileSystemAccessSpec', mode, options });
+    }
+    supportedModes() { return SUPPORTED; }
+}
+export function createFileSystemAccess() { return new OpenAiCodexFileSystemAccess(); }
+//# sourceMappingURL=fileSystemAccess.js.map

package/dist/providers/adapters/openai-codex/capability/fileSystemAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileSystemAccess.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/fileSystemAccess.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,SAAS,GAA6B,IAAI,GAAG,CAAc;IAC/D,WAAW;IACX,iBAAiB;IACjB,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,2BAA2B;IACtB,UAAU,GAAG,cAAc,CAAC,gBAAgB,CAAC;IACtD,SAAS,CAAC,IAAiB,EAAE,OAAiC;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAyB,CAAC;IACnG,CAAC;IACD,cAAc,KAA+B,OAAO,SAAS,CAAC,CAAC,CAAC;CACjE;AAED,MAAM,UAAU,sBAAsB,KAAuB,OAAO,IAAI,2BAA2B,EAAE,CAAC,CAAC,CAAC"}

package/dist/providers/adapters/openai-codex/capability/pathAllowlist.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PathAllowlist implementation for openai-codex.
+ *
+ * Codex's `permissions.<name>.filesystem` named profiles are richer than
+ * Claude's `--add-dir`. Codex supports explicit deny rules natively.
+ */
+import type { PathAllowlist } from '../../../primitives/capability/pathAllowlist.js';
+export declare function createPathAllowlist(): PathAllowlist;
+//# sourceMappingURL=pathAllowlist.d.ts.map

package/dist/providers/adapters/openai-codex/capability/pathAllowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathAllowlist.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/pathAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,iDAAiD,CAAC;AAWzD,wBAAgB,mBAAmB,IAAI,aAAa,CAA2C"}

package/dist/providers/adapters/openai-codex/capability/pathAllowlist.js

@@ -0,0 +1,16 @@
+/**
+ * PathAllowlist implementation for openai-codex.
+ *
+ * Codex's `permissions.<name>.filesystem` named profiles are richer than
+ * Claude's `--add-dir`. Codex supports explicit deny rules natively.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+class OpenAiCodexPathAllowlist {
+    capability = CapabilityFlag.PathAllowlist;
+    buildSpec(rules) {
+        return Object.freeze({ __brand: 'PathAllowlistSpec', rules });
+    }
+    supportsDenyRules() { return true; }
+}
+export function createPathAllowlist() { return new OpenAiCodexPathAllowlist(); }
+//# sourceMappingURL=pathAllowlist.js.map

package/dist/providers/adapters/openai-codex/capability/pathAllowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathAllowlist.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/pathAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,wBAAwB;IACnB,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC;IACnD,SAAS,CAAC,KAAyB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAsB,CAAC;IACrF,CAAC;IACD,iBAAiB,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;CAC9C;AAED,MAAM,UAAU,mBAAmB,KAAoB,OAAO,IAAI,wBAAwB,EAAE,CAAC,CAAC,CAAC"}

package/dist/providers/adapters/openai-codex/capability/toolAccess.d.ts

@@ -0,0 +1,15 @@
+/**
+ * ToolAccess implementation for the openai-codex adapter.
+ *
+ * Codex built-in tool kinds (per the deep-dive 02-codex-deep-dive.md):
+ *   - file read / write / edit (sandboxed by sandbox_mode)
+ *   - bash via command/exec (sandboxed) or process/spawn (unsandboxed)
+ *   - web search / fetch (cached)
+ *   - MCP tool surface
+ *   - image generation (via OpenAI API)
+ *   - code execution
+ *   - subagent spawning
+ */
+import type { ToolAccess } from '../../../primitives/capability/toolAccess.js';
+export declare function createToolAccess(): ToolAccess;
+//# sourceMappingURL=toolAccess.d.ts.map

package/dist/providers/adapters/openai-codex/capability/toolAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolAccess.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/toolAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EACV,UAAU,EAGX,MAAM,8CAA8C,CAAC;AA8BtD,wBAAgB,gBAAgB,IAAI,UAAU,CAE7C"}

package/dist/providers/adapters/openai-codex/capability/toolAccess.js

@@ -0,0 +1,41 @@
+/**
+ * ToolAccess implementation for the openai-codex adapter.
+ *
+ * Codex built-in tool kinds (per the deep-dive 02-codex-deep-dive.md):
+ *   - file read / write / edit (sandboxed by sandbox_mode)
+ *   - bash via command/exec (sandboxed) or process/spawn (unsandboxed)
+ *   - web search / fetch (cached)
+ *   - MCP tool surface
+ *   - image generation (via OpenAI API)
+ *   - code execution
+ *   - subagent spawning
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+const KINDS = new Set([
+    'file-read',
+    'file-write',
+    'file-edit',
+    'bash',
+    'web-fetch',
+    'web-search',
+    'mcp',
+    'subagent-spawn',
+    'task-delegation',
+    'image-generation',
+    'code-execution',
+]);
+const TOOLS = [
+    { name: 'bash', kind: 'bash', enabledByDefault: true, requiresApproval: true },
+    { name: 'apply_patch', kind: 'file-edit', enabledByDefault: true, requiresApproval: true },
+    { name: 'web_search', kind: 'web-search', enabledByDefault: true, requiresApproval: false },
+    { name: 'image_gen', kind: 'image-generation', enabledByDefault: false, requiresApproval: true },
+];
+class OpenAiCodexToolAccess {
+    capability = CapabilityFlag.ToolAccess;
+    supportedToolKinds() { return KINDS; }
+    registeredTools() { return TOOLS; }
+}
+export function createToolAccess() {
+    return new OpenAiCodexToolAccess();
+}
+//# sourceMappingURL=toolAccess.js.map

package/dist/providers/adapters/openai-codex/capability/toolAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolAccess.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/toolAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,KAAK,GAA0B,IAAI,GAAG,CAAW;IACrD,WAAW;IACX,YAAY;IACZ,WAAW;IACX,MAAM;IACN,WAAW;IACX,YAAY;IACZ,KAAK;IACL,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,KAAK,GAAkC;IAC3C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;IAC9E,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE;IAC1F,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE;IAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE;CACjG,CAAC;AAEF,MAAM,qBAAqB;IAChB,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC;IAChD,kBAAkB,KAA4B,OAAO,KAAK,CAAC,CAAC,CAAC;IAC7D,eAAe,KAAoC,OAAO,KAAK,CAAC,CAAC,CAAC;CACnE;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,qBAAqB,EAAE,CAAC;AACrC,CAAC"}

package/dist/providers/adapters/openai-codex/capability/toolAllowlist.d.ts

@@ -0,0 +1,12 @@
+/**
+ * ToolAllowlist implementation for openai-codex.
+ *
+ * Codex enforces MCP server allowlists via `mcp_servers.<id>` config tables
+ * with identity match (command path or URL), which is more strict than
+ * Claude's name-only match. The buildSpec only constructs the portable
+ * shape; the actual codex-side config-write happens in the session-start
+ * primitives when they consume this spec.
+ */
+import type { ToolAllowlist } from '../../../primitives/capability/toolAllowlist.js';
+export declare function createToolAllowlist(): ToolAllowlist;
+//# sourceMappingURL=toolAllowlist.d.ts.map

package/dist/providers/adapters/openai-codex/capability/toolAllowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolAllowlist.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/toolAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,aAAa,EAGd,MAAM,iDAAiD,CAAC;AAUzD,wBAAgB,mBAAmB,IAAI,aAAa,CAA2C"}

package/dist/providers/adapters/openai-codex/capability/toolAllowlist.js

@@ -0,0 +1,18 @@
+/**
+ * ToolAllowlist implementation for openai-codex.
+ *
+ * Codex enforces MCP server allowlists via `mcp_servers.<id>` config tables
+ * with identity match (command path or URL), which is more strict than
+ * Claude's name-only match. The buildSpec only constructs the portable
+ * shape; the actual codex-side config-write happens in the session-start
+ * primitives when they consume this spec.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+class OpenAiCodexToolAllowlist {
+    capability = CapabilityFlag.ToolAllowlist;
+    buildSpec(rules) {
+        return Object.freeze({ __brand: 'ToolAllowlistSpec', rules });
+    }
+}
+export function createToolAllowlist() { return new OpenAiCodexToolAllowlist(); }
+//# sourceMappingURL=toolAllowlist.js.map

package/dist/providers/adapters/openai-codex/capability/toolAllowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolAllowlist.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/toolAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,wBAAwB;IACnB,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC;IACnD,SAAS,CAAC,KAAyB;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAsB,CAAC;IACrF,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,KAAoB,OAAO,IAAI,wBAAwB,EAAE,CAAC,CAAC,CAAC"}

package/dist/providers/adapters/openai-codex/capability/webAccess.d.ts

@@ -0,0 +1,9 @@
+/**
+ * WebAccess implementation for openai-codex.
+ *
+ * Codex `web_search` is on by default and toggleable per profile via
+ * `permissions.<name>.network`.
+ */
+import type { WebAccess } from '../../../primitives/capability/webAccess.js';
+export declare function createWebAccess(): WebAccess;
+//# sourceMappingURL=webAccess.d.ts.map

package/dist/providers/adapters/openai-codex/capability/webAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webAccess.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/webAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,SAAS,EAGV,MAAM,6CAA6C,CAAC;AAWrD,wBAAgB,eAAe,IAAI,SAAS,CAAuC"}

package/dist/providers/adapters/openai-codex/capability/webAccess.js

@@ -0,0 +1,16 @@
+/**
+ * WebAccess implementation for openai-codex.
+ *
+ * Codex `web_search` is on by default and toggleable per profile via
+ * `permissions.<name>.network`.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+class OpenAiCodexWebAccess {
+    capability = CapabilityFlag.WebAccess;
+    buildSpec(rules) {
+        return Object.freeze({ __brand: 'WebAccessSpec', rules });
+    }
+    supportsSearch() { return true; }
+}
+export function createWebAccess() { return new OpenAiCodexWebAccess(); }
+//# sourceMappingURL=webAccess.js.map

package/dist/providers/adapters/openai-codex/capability/webAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webAccess.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/capability/webAccess.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,oBAAoB;IACf,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC;IAC/C,SAAS,CAAC,KAAqB;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAkB,CAAC;IAC7E,CAAC;IACD,cAAc,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;CAC3C;AAED,MAAM,UAAU,eAAe,KAAgB,OAAO,IAAI,oBAAoB,EAAE,CAAC,CAAC,CAAC"}

package/dist/providers/adapters/openai-codex/config.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Configuration shape for the openai-codex adapter.
+ *
+ * Codex CLI auth modes (per `codex --help`, `codex login --help`):
+ *   - ChatGPT subscription: OAuth token stored in `~/.codex/auth.json`,
+ *     refreshed by the CLI. **THIS IS THE ONLY ALLOWED PATH** per spec
+ *     12 (specs/provider-portability/12-openai-path-constraints.md
+ *     Rule 1). Mandatory for all Codex-stack work.
+ *   - API key: `OPENAI_API_KEY` env var, or `codex login --with-api-key`.
+ *     **FORBIDDEN as a routine path** per spec 12 Rule 1. A runaway
+ *     loop on the raw API drains real money fast; the subscription path
+ *     has a session-limit envelope. There is no OpenAI equivalent of
+ *     Anthropic's Agent SDK credit pot — no prepaid middle tier — so
+ *     unlike Anthropic, there is nothing to drain first.
+ *
+ * Phase A migration (this release): `configFromEnv` no longer reads
+ * `OPENAI_API_KEY` into the config. The `apiKey` field remains in the
+ * type for one release paired with `@deprecated` + `@internal` JSDoc
+ * tags so external callers see warnings while still compiling. The
+ * `openai-codex` adapter's `credentials.ts` emits a structured warning
+ * at construction when API-key auth is detected (via env OR auth.json).
+ *
+ * Phase B migration (next release): the `apiKey` field is narrowed to
+ * `apiKey?: never` and adapter construction refuses when API-key auth
+ * is detected. See spec 12's Migration section for the full sequencing.
+ */
+export interface OpenAiCodexConfig {
+    /** Absolute path to the `codex` CLI binary. */
+    codexPath: string;
+    /** Absolute path to the `tmux` binary (used for the interactive REPL fallback). */
+    tmuxPath: string;
+    /**
+     * Default model name. Codex resolves model selection via `--model <name>`,
+     * `--profile <name>`, or `config.toml`. Adapter passes through to CLI.
+     * Examples: `gpt-5.3-codex`, `gpt-5.4`, `gpt-5.2`.
+     */
+    defaultModel?: string;
+    /**
+     * Default sandbox mode for `codex exec`: 'read-only' | 'workspace-write' |
+     * 'danger-full-access'. Read-only is the safe default for one-shot calls.
+     */
+    defaultSandboxMode?: 'read-only' | 'workspace-write' | 'danger-full-access';
+    /**
+     * Default named profile from config.toml. Mutually exclusive with
+     * explicit model + sandbox flags — caller chooses.
+     */
+    defaultProfile?: string;
+    /**
+     * @deprecated v1.0.0 Phase A — Rule 1 of spec 12 forbids API-key auth
+     * on Codex. This field is retained for one release so external callers
+     * see a `@typescript-eslint/no-deprecated` warning while their code
+     * keeps compiling. `configFromEnv` no longer populates it. In Phase B
+     * (next release) this becomes `apiKey?: never` and the field is
+     * deleted in the release after that.
+     * @internal — not part of the public API; do not consume.
+     */
+    apiKey?: string;
+    /** Optional CODEX_HOME override (defaults to `~/.codex`). */
+    codexHome?: string;
+    /** Default timeout for one-shot calls (ms). */
+    defaultOneShotTimeoutMs?: number;
+    /** Default session-spawn timeout (ms). */
+    defaultSessionTimeoutMs?: number;
+    /** Default max-duration for agentic sessions (minutes). */
+    defaultSessionDurationMinutes?: number;
+    /** Default idle-prompt-kill (minutes) for agentic sessions. */
+    defaultIdlePromptKillMinutes?: number;
+    /** Working directory for tools that need one. */
+    defaultWorkingDirectory?: string;
+}
+/**
+ * Build a config from environment variables, with sensible defaults.
+ *
+ * Binary detection: when `CODEX_PATH` is not set, falls back to
+ * `detectCodexPath()` which searches standard install locations
+ * (npm global, Homebrew, nvm, PATH). NEVER hardcode developer-specific
+ * paths here — they leak across installs and break every other machine.
+ *
+ * Phase A migration (spec 12): this function no longer reads
+ * `OPENAI_API_KEY` into the config. The credential validator
+ * (`credentials.ts`) emits a structured warning at adapter construction
+ * if `OPENAI_API_KEY` is observed in env or if `~/.codex/auth.json` is
+ * API-key-shape. Phase B (next release) escalates that warning to
+ * adapter refusal.
+ */
+export declare function configFromEnv(env?: NodeJS.ProcessEnv): OpenAiCodexConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/providers/adapters/openai-codex/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,WAAW,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;IAC5E;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,0CAA0C;IAC1C,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2DAA2D;IAC3D,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,+DAA+D;IAC/D,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,iDAAiD;IACjD,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAqBrF"}

package/dist/providers/adapters/openai-codex/config.js

@@ -0,0 +1,65 @@
+/**
+ * Configuration shape for the openai-codex adapter.
+ *
+ * Codex CLI auth modes (per `codex --help`, `codex login --help`):
+ *   - ChatGPT subscription: OAuth token stored in `~/.codex/auth.json`,
+ *     refreshed by the CLI. **THIS IS THE ONLY ALLOWED PATH** per spec
+ *     12 (specs/provider-portability/12-openai-path-constraints.md
+ *     Rule 1). Mandatory for all Codex-stack work.
+ *   - API key: `OPENAI_API_KEY` env var, or `codex login --with-api-key`.
+ *     **FORBIDDEN as a routine path** per spec 12 Rule 1. A runaway
+ *     loop on the raw API drains real money fast; the subscription path
+ *     has a session-limit envelope. There is no OpenAI equivalent of
+ *     Anthropic's Agent SDK credit pot — no prepaid middle tier — so
+ *     unlike Anthropic, there is nothing to drain first.
+ *
+ * Phase A migration (this release): `configFromEnv` no longer reads
+ * `OPENAI_API_KEY` into the config. The `apiKey` field remains in the
+ * type for one release paired with `@deprecated` + `@internal` JSDoc
+ * tags so external callers see warnings while still compiling. The
+ * `openai-codex` adapter's `credentials.ts` emits a structured warning
+ * at construction when API-key auth is detected (via env OR auth.json).
+ *
+ * Phase B migration (next release): the `apiKey` field is narrowed to
+ * `apiKey?: never` and adapter construction refuses when API-key auth
+ * is detected. See spec 12's Migration section for the full sequencing.
+ */
+import { detectCodexPath, detectTmuxPath } from '../../../core/Config.js';
+/**
+ * Build a config from environment variables, with sensible defaults.
+ *
+ * Binary detection: when `CODEX_PATH` is not set, falls back to
+ * `detectCodexPath()` which searches standard install locations
+ * (npm global, Homebrew, nvm, PATH). NEVER hardcode developer-specific
+ * paths here — they leak across installs and break every other machine.
+ *
+ * Phase A migration (spec 12): this function no longer reads
+ * `OPENAI_API_KEY` into the config. The credential validator
+ * (`credentials.ts`) emits a structured warning at adapter construction
+ * if `OPENAI_API_KEY` is observed in env or if `~/.codex/auth.json` is
+ * API-key-shape. Phase B (next release) escalates that warning to
+ * adapter refusal.
+ */
+export function configFromEnv(env = process.env) {
+    return {
+        codexPath: env['CODEX_PATH'] || detectCodexPath() || 'codex',
+        tmuxPath: env['TMUX_PATH'] || detectTmuxPath() || '/opt/homebrew/bin/tmux',
+        // Default to undefined so resolveCliModelFlag picks the 'balanced' tier
+        // (gpt-5.3-codex) — works on ChatGPT subscription auth. Codex CLI's own
+        // default (gpt-5.2-codex) is API-only after the 2026-04-14 retirement.
+        defaultModel: env['CODEX_DEFAULT_MODEL'],
+        defaultSandboxMode: 'read-only',
+        defaultProfile: env['CODEX_DEFAULT_PROFILE'],
+        // Intentionally NOT reading env['OPENAI_API_KEY'] per spec 12 Rule 1
+        // (Phase A migration). The subscription path is the only allowed
+        // path; API-key auth is forbidden as a routine path. The credential
+        // validator surfaces a structured warning at adapter init when
+        // API-key auth is detected. See header.
+        codexHome: env['CODEX_HOME'],
+        defaultOneShotTimeoutMs: 60_000,
+        defaultSessionTimeoutMs: 30_000,
+        defaultSessionDurationMinutes: 240,
+        defaultIdlePromptKillMinutes: 15,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/providers/adapters/openai-codex/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AA+C1E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,eAAe,EAAE,IAAI,OAAO;QAC5D,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,cAAc,EAAE,IAAI,wBAAwB;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,YAAY,EAAE,GAAG,CAAC,qBAAqB,CAAC;QACxC,kBAAkB,EAAE,WAAW;QAC/B,cAAc,EAAE,GAAG,CAAC,uBAAuB,CAAC;QAC5C,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,+DAA+D;QAC/D,wCAAwC;QACxC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC;QAC5B,uBAAuB,EAAE,MAAM;QAC/B,uBAAuB,EAAE,MAAM;QAC/B,6BAA6B,EAAE,GAAG;QAClC,4BAA4B,EAAE,EAAE;KACjC,CAAC;AACJ,CAAC"}

package/dist/providers/adapters/openai-codex/control/authCredentialInjection.d.ts

@@ -0,0 +1,18 @@
+/**
+ * AuthCredentialInjection implementation for openai-codex.
+ *
+ * Codex supports two paths:
+ *   - OAuth subscription (ChatGPT Plus / Team / Pro): tokens in
+ *     `~/.codex/auth.json`, refreshed by the CLI. Subscription path.
+ *   - API key (sk-...): `OPENAI_API_KEY` env var or `codex login
+ *     --with-api-key`. Direct-usage path.
+ *
+ * Per Rule 1 (Anthropic path constraints — see specs/provider-portability/
+ * 04-anthropic-path-constraints.md), the equivalent at Anthropic is
+ * subscription-floor + SDK-credit-first-drain. For OpenAI we treat API-key
+ * mode similarly because there is no subscription-equivalent flat-rate
+ * surface at OpenAI.
+ */
+import type { AuthCredentialInjection } from '../../../primitives/control/authCredentialInjection.js';
+export declare function createAuthCredentialInjection(): AuthCredentialInjection;
+//# sourceMappingURL=authCredentialInjection.d.ts.map

package/dist/providers/adapters/openai-codex/control/authCredentialInjection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCredentialInjection.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/control/authCredentialInjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EACV,uBAAuB,EAGxB,MAAM,wDAAwD,CAAC;AAuChE,wBAAgB,6BAA6B,IAAI,uBAAuB,CAEvE"}

package/dist/providers/adapters/openai-codex/control/authCredentialInjection.js

@@ -0,0 +1,55 @@
+/**
+ * AuthCredentialInjection implementation for openai-codex.
+ *
+ * Codex supports two paths:
+ *   - OAuth subscription (ChatGPT Plus / Team / Pro): tokens in
+ *     `~/.codex/auth.json`, refreshed by the CLI. Subscription path.
+ *   - API key (sk-...): `OPENAI_API_KEY` env var or `codex login
+ *     --with-api-key`. Direct-usage path.
+ *
+ * Per Rule 1 (Anthropic path constraints — see specs/provider-portability/
+ * 04-anthropic-path-constraints.md), the equivalent at Anthropic is
+ * subscription-floor + SDK-credit-first-drain. For OpenAI we treat API-key
+ * mode similarly because there is no subscription-equivalent flat-rate
+ * surface at OpenAI.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+import { AuthError } from '../../../errors.js';
+import { OPENAI_CODEX_ID } from '../errors.js';
+class OpenAiCodexAuthCredentialInjection {
+    capability = CapabilityFlag.AuthCredentialInjection;
+    buildSpec(credential) {
+        return Object.freeze({ __brand: 'AuthCredentialSpec', credential });
+    }
+    validate(credential) {
+        if (credential.kind === 'api-key') {
+            if (!credential.key || !credential.key.startsWith('sk-')) {
+                return 'OpenAI API key must start with "sk-"';
+            }
+            return null;
+        }
+        if (credential.kind === 'oauth-subscription') {
+            if (!credential.token)
+                return 'OAuth token must not be empty';
+            return null;
+        }
+        if (credential.kind === 'bearer')
+            return null;
+        if (credential.kind === 'none')
+            return null;
+        return 'Unrecognized credential kind';
+    }
+    async probe(_credential, _options) {
+        // Phase 4 baseline: probe is a no-op for the local-CLI path. The CLI
+        // itself returns AuthError on first real call if creds are bad. A
+        // future iteration can issue `codex login --with-api-key` to validate
+        // without spawning a session.
+        if (!_credential || (_credential.kind === 'none')) {
+            throw new AuthError('No credential supplied', OPENAI_CODEX_ID);
+        }
+    }
+}
+export function createAuthCredentialInjection() {
+    return new OpenAiCodexAuthCredentialInjection();
+}
+//# sourceMappingURL=authCredentialInjection.js.map

package/dist/providers/adapters/openai-codex/control/authCredentialInjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authCredentialInjection.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/control/authCredentialInjection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,kCAAkC;IAC7B,UAAU,GAAG,cAAc,CAAC,uBAAuB,CAAC;IAE7D,SAAS,CAAC,UAA8B;QACtC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAuB,CAAC;IAC5F,CAAC;IAED,QAAQ,CAAC,UAA8B;QACrC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO,sCAAsC,CAAC;YAChD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,KAAK;gBAAE,OAAO,+BAA+B,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,WAA+B,EAAE,QAA8B;QACzE,qEAAqE;QACrE,kEAAkE;QAClE,sEAAsE;QACtE,8BAA8B;QAC9B,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,SAAS,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B;IAC3C,OAAO,IAAI,kCAAkC,EAAE,CAAC;AAClD,CAAC"}

package/dist/providers/adapters/openai-codex/control/compactionLifecycle.d.ts

@@ -0,0 +1,27 @@
+/**
+ * CompactionLifecycle implementation for openai-codex.
+ *
+ * Codex has NO native pre-compact hook (per the deep-dive §E). Codex
+ * silently auto-compacts at `effective_window - 13k` tokens. This adapter
+ * SYNTHESIZES the pre-compact signal by tracking
+ * `turn.completed.usage.context_window_used` from the event stream and
+ * emitting a notice when crossing a configurable threshold.
+ *
+ * hasNativePreCompactHook() returns FALSE. Capability flag
+ * `PreCompactHook` is NOT declared for this adapter.
+ *
+ * RULE 3.1 RATIONALE
+ *   Criticality: high (resume continuity, sentinel-state persistence)
+ *   Frequency:   per-session (one notice per pre-compact threshold cross)
+ *   Stability:   semi-stable (Codex's `effective_window - 13k` threshold can change)
+ *   Fallback:    when usage is unavailable, no notice fires; consumer falls back to post-compact observation
+ *   Verdict:     deterministic threshold tracking + canary verifying usage field parsing
+ */
+import type { SessionHandle } from '../../../types.js';
+import type { CompactionLifecycle } from '../../../primitives/control/compactionLifecycle.js';
+/** Called by the event normalizer when a turn.completed event arrives. */
+export declare function trackContextUsage(session: SessionHandle, contextWindowUsed: number): void;
+export declare function createCompactionLifecycle(): CompactionLifecycle;
+/** Reset the "already notified" set; used by tests. */
+export declare function _resetCompactionState(): void;
+//# sourceMappingURL=compactionLifecycle.d.ts.map

package/dist/providers/adapters/openai-codex/control/compactionLifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compactionLifecycle.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/control/compactionLifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAuB,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,KAAK,EACV,mBAAmB,EAGpB,MAAM,oDAAoD,CAAC;AAgB5D,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAazF;AAuED,wBAAgB,yBAAyB,IAAI,mBAAmB,CAE/D;AAED,uDAAuD;AACvD,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}