instar 0.28.113 → 0.28.115

package/dist/providers/adapters/openai-codex/control/stopGateInterceptor.js

@@ -0,0 +1,49 @@
+/**
+ * StopGateInterceptor implementation for openai-codex.
+ *
+ * Codex's Stop hook contract is intentionally Claude-compatible (per the
+ * deep-dive §B): same JSON shape, same `{"decision":"block","reason":"..."}`
+ * semantics. This primitive registers a handler against the HookEventReceiver
+ * for `stop` events and translates the handler's decision back into the
+ * hook reply.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+import { createHookEventReceiver } from '../observability/hookEventReceiver.js';
+class OpenAiCodexStopGateInterceptor {
+    capability = CapabilityFlag.StopGateInterceptor;
+    handlers = new Map();
+    async register(session, handler, options) {
+        this.handlers.set(session, handler);
+        const receiver = createHookEventReceiver();
+        const sub = (async () => {
+            for await (const event of receiver.subscribe({ kinds: ['stop'], session, signal: options?.signal })) {
+                const h = this.handlers.get(session);
+                if (!h)
+                    continue;
+                const ctx = {
+                    session,
+                    recentOutput: typeof event.payload === 'object' && event.payload && 'recentOutput' in event.payload
+                        ? String(event.payload.recentOutput ?? '')
+                        : '',
+                    rawPayload: (event.payload ?? {}),
+                    timestamp: event.timestamp,
+                };
+                const decision = await h(ctx);
+                if (decision.kind === 'continue') {
+                    await receiver.reply(event.id, { decision: 'block', reason: decision.reason, stopReason: decision.reason });
+                }
+                else {
+                    await receiver.reply(event.id, { decision: 'approve' });
+                }
+            }
+        })();
+        void sub;
+        return async () => {
+            this.handlers.delete(session);
+        };
+    }
+}
+export function createStopGateInterceptor() {
+    return new OpenAiCodexStopGateInterceptor();
+}
+//# sourceMappingURL=stopGateInterceptor.js.map

package/dist/providers/adapters/openai-codex/control/stopGateInterceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stopGateInterceptor.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/control/stopGateInterceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAEhF,MAAM,8BAA8B;IACzB,UAAU,GAAG,cAAc,CAAC,mBAAmB,CAAC;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IAEtE,KAAK,CAAC,QAAQ,CACZ,OAAsB,EACtB,OAAwB,EACxB,OAA6B;QAE7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;gBACpG,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,MAAM,GAAG,GAAoB;oBAC3B,OAAO;oBACP,YAAY,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,cAAc,IAAI,KAAK,CAAC,OAAO;wBACjG,CAAC,CAAC,MAAM,CAAE,KAAK,CAAC,OAAsC,CAAC,YAAY,IAAI,EAAE,CAAC;wBAC1E,CAAC,CAAC,EAAE;oBACN,UAAU,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAsC;oBACtE,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACjC,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9G,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,KAAK,GAAG,CAAC;QAET,OAAO,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,8BAA8B,EAAE,CAAC;AAC9C,CAAC"}

package/dist/providers/adapters/openai-codex/control/timeoutBound.d.ts

@@ -0,0 +1,10 @@
+/**
+ * TimeoutBound implementation for openai-codex.
+ *
+ * Codex has per-subagent `job_max_runtime_seconds` but no top-level
+ * session-timeout config. Adapter enforces externally: records a deadline
+ * per session, fires HardKill when reached.
+ */
+import type { TimeoutBound } from '../../../primitives/control/timeoutBound.js';
+export declare function createTimeoutBound(): TimeoutBound;
+//# sourceMappingURL=timeoutBound.d.ts.map

package/dist/providers/adapters/openai-codex/control/timeoutBound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeoutBound.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/control/timeoutBound.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,6CAA6C,CAAC;AAiDrD,wBAAgB,kBAAkB,IAAI,YAAY,CAEjD"}

package/dist/providers/adapters/openai-codex/control/timeoutBound.js

@@ -0,0 +1,45 @@
+/**
+ * TimeoutBound implementation for openai-codex.
+ *
+ * Codex has per-subagent `job_max_runtime_seconds` but no top-level
+ * session-timeout config. Adapter enforces externally: records a deadline
+ * per session, fires HardKill when reached.
+ */
+import { CapabilityFlag } from '../../../capabilities.js';
+class OpenAiCodexTimeoutBound {
+    capability = CapabilityFlag.TimeoutBound;
+    deadlines = new Map();
+    async setDeadline(session, durationMinutes, options) {
+        await this.clearDeadline(session);
+        const ms = durationMinutes * 60_000;
+        const expiryAction = options?.expiryAction ?? 'hard-kill';
+        const timer = setTimeout(() => {
+            // Best-effort: caller wires the kill action. This primitive just
+            // tracks the deadline; HardKill is invoked by an external watchdog
+            // observing the deadline state.
+            this.deadlines.delete(session);
+        }, ms);
+        timer.unref();
+        this.deadlines.set(session, { deadlineAt: Date.now() + ms, expiryAction, timer });
+    }
+    async getDeadline(session, _options) {
+        const d = this.deadlines.get(session);
+        if (!d)
+            return null;
+        return {
+            deadlineAt: new Date(d.deadlineAt).toISOString(),
+            remainingMs: Math.max(0, d.deadlineAt - Date.now()),
+        };
+    }
+    async clearDeadline(session, _options) {
+        const d = this.deadlines.get(session);
+        if (d) {
+            clearTimeout(d.timer);
+            this.deadlines.delete(session);
+        }
+    }
+}
+export function createTimeoutBound() {
+    return new OpenAiCodexTimeoutBound();
+}
+//# sourceMappingURL=timeoutBound.js.map

package/dist/providers/adapters/openai-codex/control/timeoutBound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeoutBound.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/control/timeoutBound.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAQ1D,MAAM,uBAAuB;IAClB,UAAU,GAAG,cAAc,CAAC,YAAY,CAAC;IACjC,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEhE,KAAK,CAAC,WAAW,CACf,OAAsB,EACtB,eAAuB,EACvB,OAA6B;QAE7B,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,eAAe,GAAG,MAAM,CAAC;QACpC,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,WAAW,CAAC;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,iEAAiE;YACjE,mEAAmE;YACnE,gCAAgC;YAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAsB,EAAE,QAA8B;QACtE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,OAAO;YACL,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;YAChD,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAsB,EAAE,QAA8B;QACxE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC;YACN,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,uBAAuB,EAAE,CAAC;AACvC,CAAC"}

package/dist/providers/adapters/openai-codex/credentials.d.ts

@@ -0,0 +1,91 @@
+/**
+ * credentials.ts — Spec 12 Rule 1 enforcement for the openai-codex
+ * adapter.
+ *
+ * Implements the credential-shape validation requirements from
+ * specs/provider-portability/12-openai-path-constraints.md. Detects
+ * API-key auth (env var OR auth.json) and classifies the result with
+ * structured error codes that the routing layer consumes.
+ *
+ * Enforcement modes (controlled by `INSTAR_RULE1_ENFORCE` env var):
+ *   - 'warn' (default for v1.0.0 Phase A): emit a structured warning
+ *     at adapter init when API-key auth is detected, but do not refuse.
+ *   - 'hard' (Phase B opt-in for v1.0.0; default in v1.1): refuse
+ *     adapter construction with security_violation. Returns the
+ *     CODEX_AUTH_APIKEY_DETECTED error code.
+ *   - 'disabled' (escape hatch via INSTAR_DISABLE_RULE1_OPENAI=1):
+ *     skip validation entirely; log loudly every minute. Sunsets on
+ *     the hardcoded date constant.
+ *
+ * Hard sunset: RULE1_KILLSWITCH_SUNSET_DATE. After this date the
+ * escape hatch is ignored and the adapter always refuses API-key auth.
+ * Release-cut workflow fails two weeks before to force a deliberate
+ * decision on whether to extend.
+ */
+/**
+ * Sunset date for the Rule 1 escape hatch. After this date,
+ * `INSTAR_DISABLE_RULE1_OPENAI=1` is ignored and `validate()` always
+ * refuses API-key auth. Release-cut workflow fails two weeks before
+ * to force a deliberate decision.
+ */
+export declare const RULE1_KILLSWITCH_SUNSET_DATE = "2026-12-01";
+/** Structured error codes per spec 12 "Credential-shape validation". */
+export type Rule1ErrorCode = 'CODEX_AUTH_APIKEY_DETECTED' | 'CODEX_AUTH_FILE_MISSING' | 'CODEX_AUTH_FILE_UNREADABLE' | 'CODEX_AUTH_FILE_MALFORMED' | 'CODEX_AUTH_OAUTH_REFRESH_FAILED' | 'CODEX_KILLSWITCH_EXPIRED' | 'CODEX_AUTH_UNKNOWN_FAILURE';
+/** Error class per spec 12 "Error class for routing". */
+export type Rule1ErrorClass = 'security_violation' | 'user_config_error' | 'transient' | 'unknown';
+export interface Rule1ValidationResult {
+    ok: boolean;
+    code?: Rule1ErrorCode;
+    errorClass?: Rule1ErrorClass;
+    /** Human-readable detail for logs + dashboard remediation card. */
+    detail?: string;
+    /** Where the violation came from, for the audit log. */
+    source?: 'env' | 'auth-file' | 'killswitch';
+}
+export type Rule1EnforcementMode = 'warn' | 'hard' | 'disabled';
+/**
+ * Resolve the enforcement mode from env + sunset date.
+ *
+ *  - INSTAR_DISABLE_RULE1_OPENAI=1 → 'disabled' (until sunset)
+ *  - INSTAR_RULE1_ENFORCE=hard → 'hard'
+ *  - INSTAR_RULE1_ENFORCE=warn → 'warn' (Phase A default)
+ *  - unset → 'warn' (Phase A default for v1.0.0)
+ *  - after sunset → escape hatch ignored, returns the requested mode
+ *    (or 'warn' default) but `isKillswitchExpired()` returns true so
+ *    callers can refuse regardless.
+ */
+export declare function resolveEnforcementMode(env?: NodeJS.ProcessEnv, now?: Date): Rule1EnforcementMode;
+export declare function isKillswitchExpired(now?: Date): boolean;
+/**
+ * Detect API-key shape in the auth file at `~/.codex/auth.json`. Returns
+ * true when the file contains any field that looks like an API key
+ * (sk-prefixed string under common field names). Returns false when the
+ * file is OAuth-shape OR missing.
+ */
+export declare function authFileIsApiKeyShape(authPath?: string): boolean;
+/**
+ * Validate Codex credentials per spec 12 Rule 1. Inspects env +
+ * auth.json. Returns a structured result the adapter can act on.
+ *
+ * Phase A behavior: when API-key is detected and mode is 'warn', the
+ * result has `ok: false` + `errorClass: 'security_violation'` but the
+ * caller's policy decides whether to refuse or just warn. This keeps
+ * the validator decoupled from the enforcement decision.
+ */
+export declare function validateRule1(env?: NodeJS.ProcessEnv, authPath?: string, now?: Date): Rule1ValidationResult;
+/**
+ * Emit a structured warning to stderr when API-key auth is detected and
+ * the enforcement mode is 'warn' (Phase A). Returns the validation
+ * result so the caller can decide whether to also refuse (mode 'hard').
+ *
+ * Side effect: writes a telemetry event to .instar/security.jsonl if the
+ * stateDir is provided.
+ */
+export declare function checkAndWarn(options: {
+    env?: NodeJS.ProcessEnv;
+    authPath?: string;
+    stateDir?: string;
+    now?: Date;
+    logger?: (msg: string) => void;
+}): Rule1ValidationResult;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/providers/adapters/openai-codex/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAMH;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,eAAe,CAAC;AAEzD,wEAAwE;AACxE,MAAM,MAAM,cAAc,GACtB,4BAA4B,GAC5B,yBAAyB,GACzB,4BAA4B,GAC5B,2BAA2B,GAC3B,iCAAiC,GACjC,0BAA0B,GAC1B,4BAA4B,CAAC;AAEjC,yDAAyD;AACzD,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,mBAAmB,GACnB,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,MAAM,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,YAAY,CAAC;CAC7C;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAEhE;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,GAAG,GAAE,IAAiB,GACrB,oBAAoB,CAQtB;AAED,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,IAAiB,GAAG,OAAO,CAEnE;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAoBhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,GAAE,IAAiB,GACrB,qBAAqB,CAqCvB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC,GAAG,qBAAqB,CAuCxB"}

package/dist/providers/adapters/openai-codex/credentials.js

@@ -0,0 +1,178 @@
+/**
+ * credentials.ts — Spec 12 Rule 1 enforcement for the openai-codex
+ * adapter.
+ *
+ * Implements the credential-shape validation requirements from
+ * specs/provider-portability/12-openai-path-constraints.md. Detects
+ * API-key auth (env var OR auth.json) and classifies the result with
+ * structured error codes that the routing layer consumes.
+ *
+ * Enforcement modes (controlled by `INSTAR_RULE1_ENFORCE` env var):
+ *   - 'warn' (default for v1.0.0 Phase A): emit a structured warning
+ *     at adapter init when API-key auth is detected, but do not refuse.
+ *   - 'hard' (Phase B opt-in for v1.0.0; default in v1.1): refuse
+ *     adapter construction with security_violation. Returns the
+ *     CODEX_AUTH_APIKEY_DETECTED error code.
+ *   - 'disabled' (escape hatch via INSTAR_DISABLE_RULE1_OPENAI=1):
+ *     skip validation entirely; log loudly every minute. Sunsets on
+ *     the hardcoded date constant.
+ *
+ * Hard sunset: RULE1_KILLSWITCH_SUNSET_DATE. After this date the
+ * escape hatch is ignored and the adapter always refuses API-key auth.
+ * Release-cut workflow fails two weeks before to force a deliberate
+ * decision on whether to extend.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+/**
+ * Sunset date for the Rule 1 escape hatch. After this date,
+ * `INSTAR_DISABLE_RULE1_OPENAI=1` is ignored and `validate()` always
+ * refuses API-key auth. Release-cut workflow fails two weeks before
+ * to force a deliberate decision.
+ */
+export const RULE1_KILLSWITCH_SUNSET_DATE = '2026-12-01';
+/**
+ * Resolve the enforcement mode from env + sunset date.
+ *
+ *  - INSTAR_DISABLE_RULE1_OPENAI=1 → 'disabled' (until sunset)
+ *  - INSTAR_RULE1_ENFORCE=hard → 'hard'
+ *  - INSTAR_RULE1_ENFORCE=warn → 'warn' (Phase A default)
+ *  - unset → 'warn' (Phase A default for v1.0.0)
+ *  - after sunset → escape hatch ignored, returns the requested mode
+ *    (or 'warn' default) but `isKillswitchExpired()` returns true so
+ *    callers can refuse regardless.
+ */
+export function resolveEnforcementMode(env = process.env, now = new Date()) {
+    const explicit = env['INSTAR_RULE1_ENFORCE']?.trim().toLowerCase();
+    if (env['INSTAR_DISABLE_RULE1_OPENAI'] === '1' && !isKillswitchExpired(now)) {
+        return 'disabled';
+    }
+    if (explicit === 'hard')
+        return 'hard';
+    if (explicit === 'warn')
+        return 'warn';
+    return 'warn';
+}
+export function isKillswitchExpired(now = new Date()) {
+    return now.toISOString().slice(0, 10) >= RULE1_KILLSWITCH_SUNSET_DATE;
+}
+/**
+ * Detect API-key shape in the auth file at `~/.codex/auth.json`. Returns
+ * true when the file contains any field that looks like an API key
+ * (sk-prefixed string under common field names). Returns false when the
+ * file is OAuth-shape OR missing.
+ */
+export function authFileIsApiKeyShape(authPath) {
+    const p = authPath ?? path.join(os.homedir(), '.codex', 'auth.json');
+    if (!fs.existsSync(p))
+        return false;
+    try {
+        const raw = fs.readFileSync(p, 'utf-8');
+        const parsed = JSON.parse(raw);
+        // Codex CLI's OAuth shape uses tokens/access_token/refresh_token.
+        // API-key shape uses fields like `api_key`, `apiKey`, `OPENAI_API_KEY`.
+        const apiKeyFields = ['api_key', 'apiKey', 'OPENAI_API_KEY', 'openai_api_key'];
+        for (const field of apiKeyFields) {
+            const v = parsed?.[field];
+            if (typeof v === 'string' && v.startsWith('sk-'))
+                return true;
+        }
+        return false;
+    }
+    catch {
+        // Malformed file — treat as ambiguous; caller decides. Return false
+        // here (no positive API-key detection); the auth-file probe will
+        // surface CODEX_AUTH_FILE_MALFORMED separately if invoked.
+        return false;
+    }
+}
+/**
+ * Validate Codex credentials per spec 12 Rule 1. Inspects env +
+ * auth.json. Returns a structured result the adapter can act on.
+ *
+ * Phase A behavior: when API-key is detected and mode is 'warn', the
+ * result has `ok: false` + `errorClass: 'security_violation'` but the
+ * caller's policy decides whether to refuse or just warn. This keeps
+ * the validator decoupled from the enforcement decision.
+ */
+export function validateRule1(env = process.env, authPath, now = new Date()) {
+    // Killswitch expired AND escape hatch present → refuse the hatch.
+    if (env['INSTAR_DISABLE_RULE1_OPENAI'] === '1' && isKillswitchExpired(now)) {
+        return {
+            ok: false,
+            code: 'CODEX_KILLSWITCH_EXPIRED',
+            errorClass: 'security_violation',
+            source: 'killswitch',
+            detail: `INSTAR_DISABLE_RULE1_OPENAI escape hatch expired on ${RULE1_KILLSWITCH_SUNSET_DATE}. Switch to subscription auth via 'codex login' (no flags) — the API-key flow is no longer permitted by spec 12 Rule 1.`,
+        };
+    }
+    // Env var present → Rule 1 violation regardless of auth.json shape.
+    // Codex CLI silently prefers OPENAI_API_KEY over OAuth when both are
+    // present, so the env var alone is enough to trigger.
+    if (env['OPENAI_API_KEY']) {
+        return {
+            ok: false,
+            code: 'CODEX_AUTH_APIKEY_DETECTED',
+            errorClass: 'security_violation',
+            source: 'env',
+            detail: `OPENAI_API_KEY is set in this process's environment. Spec 12 Rule 1 forbids API-key auth on Codex. Unset the env var and run 'codex login' (no flags) to authenticate via ChatGPT subscription.`,
+        };
+    }
+    // Auth file API-key shape → Rule 1 violation.
+    if (authFileIsApiKeyShape(authPath)) {
+        return {
+            ok: false,
+            code: 'CODEX_AUTH_APIKEY_DETECTED',
+            errorClass: 'security_violation',
+            source: 'auth-file',
+            detail: `~/.codex/auth.json contains an API key. Spec 12 Rule 1 forbids API-key auth on Codex. Run 'codex login' (no flags) to re-authenticate via ChatGPT subscription.`,
+        };
+    }
+    return { ok: true };
+}
+/**
+ * Emit a structured warning to stderr when API-key auth is detected and
+ * the enforcement mode is 'warn' (Phase A). Returns the validation
+ * result so the caller can decide whether to also refuse (mode 'hard').
+ *
+ * Side effect: writes a telemetry event to .instar/security.jsonl if the
+ * stateDir is provided.
+ */
+export function checkAndWarn(options) {
+    const env = options.env ?? process.env;
+    const now = options.now ?? new Date();
+    const log = options.logger ?? ((msg) => console.warn(msg));
+    const mode = resolveEnforcementMode(env, now);
+    const result = validateRule1(env, options.authPath, now);
+    if (mode === 'disabled') {
+        log(`[codex.rule1] ⚠️  INSTAR_DISABLE_RULE1_OPENAI=1 is set — API-key auth is permitted but spec 12 Rule 1 violation is suppressed. This escape hatch sunsets on ${RULE1_KILLSWITCH_SUNSET_DATE}.`);
+        return { ok: true };
+    }
+    if (result.ok)
+        return result;
+    // Always warn — both 'warn' and 'hard' modes emit visible logs. 'hard'
+    // additionally refuses (caller's responsibility — checkAndWarn doesn't
+    // throw; it returns the result for routing).
+    log(`[codex.rule1] ⚠️  Spec 12 Rule 1 violation (${result.code}, source=${result.source}): ${result.detail}`);
+    // Telemetry: append to .instar/security.jsonl when stateDir is provided.
+    if (options.stateDir) {
+        try {
+            const securityLog = path.join(options.stateDir, 'security.jsonl');
+            const entry = JSON.stringify({
+                ts: now.toISOString(),
+                kind: 'codex.rule1.violation',
+                code: result.code,
+                errorClass: result.errorClass,
+                source: result.source,
+                mode,
+            }) + '\n';
+            fs.appendFileSync(securityLog, entry, { mode: 0o600 });
+        }
+        catch {
+            // Best-effort telemetry; never block the adapter on a log write.
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=credentials.js.map

package/dist/providers/adapters/openai-codex/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,YAAY,CAAC;AA+BzD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAyB,OAAO,CAAC,GAAG,EACpC,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,GAAG,CAAC,6BAA6B,CAAC,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAY,IAAI,IAAI,EAAE;IACxD,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,4BAA4B,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAiB;IACrD,MAAM,CAAC,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,kEAAkE;QAClE,wEAAwE;QACxE,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QAC/E,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,iEAAiE;QACjE,2DAA2D;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAyB,OAAO,CAAC,GAAG,EACpC,QAAiB,EACjB,MAAY,IAAI,IAAI,EAAE;IAEtB,kEAAkE;IAClE,IAAI,GAAG,CAAC,6BAA6B,CAAC,KAAK,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,0BAA0B;YAChC,UAAU,EAAE,oBAAoB;YAChC,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,uDAAuD,4BAA4B,yHAAyH;SACrN,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,sDAAsD;IACtD,IAAI,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,4BAA4B;YAClC,UAAU,EAAE,oBAAoB;YAChC,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,iMAAiM;SAC1M,CAAC;IACJ,CAAC;IAED,8CAA8C;IAC9C,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,4BAA4B;YAClC,UAAU,EAAE,oBAAoB;YAChC,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,iKAAiK;SAC1K,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,OAM5B;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEzD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,GAAG,CAAC,+JAA+J,4BAA4B,GAAG,CAAC,CAAC;QACpM,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE7B,uEAAuE;IACvE,uEAAuE;IACvE,6CAA6C;IAC7C,GAAG,CAAC,+CAA+C,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9G,yEAAyE;IACzE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC3B,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE;gBACrB,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,IAAI;aACL,CAAC,GAAG,IAAI,CAAC;YACV,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/providers/adapters/openai-codex/errors.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Adapter-specific error helpers for openai-codex.
+ *
+ * Maps raw failures (codex CLI non-zero exit, OpenAI API HTTP errors,
+ * Codex JSONL `error` events) to the canonical ProviderError hierarchy.
+ */
+import { type ProviderError } from '../../errors.js';
+import type { ProviderId } from '../../types.js';
+export declare const OPENAI_CODEX_ID: ProviderId;
+/**
+ * Map a raw `execFile`-style error from spawning `codex exec` into a
+ * canonical provider error.
+ */
+export declare function mapExecError(err: Error & {
+    code?: string | number;
+    signal?: string;
+    killed?: boolean;
+    path?: string;
+}, stderr?: string): ProviderError;
+/**
+ * Map an OpenAI API JSON error envelope (as emitted in Codex JSONL `error`
+ * events or as a direct HTTP response body) to a canonical error.
+ */
+export declare function mapApiError(status: number | undefined, body: string): ProviderError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/providers/adapters/openai-codex/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAQL,KAAK,aAAa,EACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,eAAO,MAAM,eAAe,EAAqB,UAAU,CAAC;AAE5D;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,KAAK,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACzF,MAAM,SAAK,GACV,aAAa,CAiCf;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAsCnF"}

package/dist/providers/adapters/openai-codex/errors.js

@@ -0,0 +1,74 @@
+/**
+ * Adapter-specific error helpers for openai-codex.
+ *
+ * Maps raw failures (codex CLI non-zero exit, OpenAI API HTTP errors,
+ * Codex JSONL `error` events) to the canonical ProviderError hierarchy.
+ */
+import { AbortError, AuthError, NetworkError, QuotaError, RateLimitError, TimeoutError, UnexpectedError, } from '../../errors.js';
+export const OPENAI_CODEX_ID = 'openai-codex';
+/**
+ * Map a raw `execFile`-style error from spawning `codex exec` into a
+ * canonical provider error.
+ */
+export function mapExecError(err, stderr = '') {
+    if (err.name === 'AbortError') {
+        return new AbortError('Codex exec aborted', OPENAI_CODEX_ID, err);
+    }
+    if (err.signal === 'SIGTERM' || err.killed) {
+        return new TimeoutError(`codex CLI killed: ${err.message}`, OPENAI_CODEX_ID, 0, { cause: err });
+    }
+    if (err.code === 'ENOENT') {
+        return new UnexpectedError(`codex CLI binary not found: ${err.path ?? '(unknown)'}`, OPENAI_CODEX_ID, err);
+    }
+    const message = stderr ? stderr.slice(0, 500) : err.message;
+    if (/unauthor|forbidden|invalid.*token|invalid.*key|401|403/i.test(stderr)) {
+        return new AuthError(message, OPENAI_CODEX_ID, err);
+    }
+    if (/rate.?limit|429|too many requests/i.test(stderr)) {
+        return new RateLimitError(message, OPENAI_CODEX_ID, { cause: err });
+    }
+    if (/quota|usage.?limit|insufficient_quota/i.test(stderr)) {
+        return new QuotaError(message, OPENAI_CODEX_ID, { cause: err });
+    }
+    if (/network|ECONN|ETIMEDOUT|dns/i.test(stderr)) {
+        return new NetworkError(message, OPENAI_CODEX_ID, err);
+    }
+    return new UnexpectedError(message, OPENAI_CODEX_ID, err);
+}
+/**
+ * Map an OpenAI API JSON error envelope (as emitted in Codex JSONL `error`
+ * events or as a direct HTTP response body) to a canonical error.
+ */
+export function mapApiError(status, body) {
+    // Try to extract a more specific error type from the OpenAI JSON envelope.
+    let errorType = '';
+    let errorMessage = body.slice(0, 300);
+    try {
+        const parsed = JSON.parse(body);
+        errorType = parsed.error?.type ?? parsed.type ?? '';
+        errorMessage = parsed.error?.message ?? parsed.message ?? errorMessage;
+    }
+    catch {
+        // body wasn't JSON — keep raw slice
+    }
+    if (errorType === 'invalid_request_error' || status === 400) {
+        if (/not supported.*ChatGPT account/i.test(errorMessage)) {
+            return new AuthError(`Codex subscription auth rejected model: ${errorMessage}`, OPENAI_CODEX_ID);
+        }
+        return new UnexpectedError(errorMessage, OPENAI_CODEX_ID);
+    }
+    if (status === 401 || status === 403 || /unauthorized|forbidden/i.test(errorType)) {
+        return new AuthError(errorMessage, OPENAI_CODEX_ID);
+    }
+    if (status === 429 || /rate.?limit/i.test(errorType)) {
+        return new RateLimitError(errorMessage, OPENAI_CODEX_ID, {});
+    }
+    if (/quota|insufficient_quota/i.test(errorType)) {
+        return new QuotaError(errorMessage, OPENAI_CODEX_ID, { limitKind: 'unknown' });
+    }
+    if (status === 408 || status === 504 || /timeout/i.test(errorType)) {
+        return new TimeoutError(errorMessage, OPENAI_CODEX_ID, 0);
+    }
+    return new UnexpectedError(errorMessage, OPENAI_CODEX_ID);
+}
+//# sourceMappingURL=errors.js.map

package/dist/providers/adapters/openai-codex/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,cAAc,EACd,YAAY,EACZ,eAAe,GAEhB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,CAAC,MAAM,eAAe,GAAG,cAA4B,CAAC;AAE5D;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAyF,EACzF,MAAM,GAAG,EAAE;IAEX,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,IAAI,UAAU,CAAC,oBAAoB,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3C,OAAO,IAAI,YAAY,CACrB,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAClC,eAAe,EACf,CAAC,EACD,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,eAAe,CACxB,+BAA+B,GAAG,CAAC,IAAI,IAAI,WAAW,EAAE,EACxD,eAAe,EACf,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC5D,IAAI,yDAAyD,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,OAAO,IAAI,UAAU,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAA0B,EAAE,IAAY;IAClE,2EAA2E;IAC3E,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAI7B,CAAC;QACF,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACpD,YAAY,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IAED,IAAI,SAAS,KAAK,uBAAuB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5D,IAAI,iCAAiC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,OAAO,IAAI,SAAS,CAClB,2CAA2C,YAAY,EAAE,EACzD,eAAe,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,SAAS,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,cAAc,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,UAAU,CAAC,YAAY,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,YAAY,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AAC5D,CAAC"}

package/dist/providers/adapters/openai-codex/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * openai-codex adapter — entry point.
+ *
+ * First non-Anthropic adapter. Mirrors the anthropic-headless adapter
+ * shape but uses Codex CLI's surface (`codex exec`, JSONL events, app-
+ * server, `.codex/`, `~/.codex/`). Per the deep-dive, 35 of 36 universal
+ * primitives map cleanly; the asymmetric ones (PreCompactHook,
+ * SubagentLifecycleHooks, PublicUsageApi, NativeIdleBound) are NOT
+ * declared in capabilities.ts so the registry honestly reports them as
+ * unavailable on this adapter. StructuredApprovalEvents IS declared
+ * because the Codex app-server emits structured approval requests.
+ *
+ * Usage:
+ *
+ *   import { createOpenAiCodexAdapter } from
+ *     './providers/adapters/openai-codex/index.js';
+ *   import { registry } from './providers/registry.js';
+ *
+ *   await registry.register(createOpenAiCodexAdapter({ ... }));
+ */
+import type { ProviderAdapter } from '../../registry.js';
+import { type OpenAiCodexConfig } from './config.js';
+/**
+ * Create the openai-codex adapter with the given config (or environment
+ * defaults if omitted).
+ */
+export declare function createOpenAiCodexAdapter(partialConfig?: Partial<OpenAiCodexConfig>): ProviderAdapter;
+export type { OpenAiCodexConfig } from './config.js';
+export { configFromEnv } from './config.js';
+export { OPENAI_CODEX_ID } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/adapters/openai-codex/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/providers/adapters/openai-codex/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIzD,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AA0CpE;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,aAAa,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAC7C,eAAe,CAgFjB;AAED,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}