instar 0.28.113 → 0.28.115

package/dist/providers/adapters/openai-codex/transport/agenticSessionHeadless.js

@@ -0,0 +1,191 @@
+/**
+ * AgenticSessionHeadless implementation for the openai-codex adapter.
+ *
+ * Two implementation choices for headless Codex sessions:
+ *   1. `codex exec --json PROMPT` in a tmux session, parse stdout JSONL
+ *      events into CanonicalEvent stream.
+ *   2. `codex app-server` JSON-RPC `thread/start` method (richer, but
+ *      requires running the app-server).
+ *
+ * Phase 4 uses (1) — mirrors the Anthropic adapter's tmux pattern, gives
+ * us live stdout to parse, doesn't require app-server lifecycle
+ * management. The app-server path is reserved for `agenticSessionRpc`.
+ *
+ * Event normalization per the deep-dive (02-codex-deep-dive.md §C):
+ *   - `thread.started` → session-lifecycle (started)
+ *   - `turn.started` → no canonical event (boundary marker only)
+ *   - `turn.completed` → turn-end (with usage)
+ *   - `item.agentMessage.delta` → message-delta
+ *   - `item.commandExecution.*` → tool-call / tool-result
+ *   - `error` → error
+ *   - `turn.failed` → error + session-lifecycle (ended)
+ *
+ * RULE 3.1 RATIONALE
+ *   Criticality: medium — tmux capture-pane format drift would degrade
+ *                event observability for headless Codex sessions; mirrors
+ *                liveOutputStream.ts's tmux-output dependence (also
+ *                registered in 06-state-detector-registry.md).
+ *   Frequency:   per-poll (500ms cadence while session alive) for the
+ *                capture-pane loop; per-session for the `new-session`
+ *                spawn boundary.
+ *   Stability:   stable — tmux CLI is OS-level, slow-drift.
+ *   Fallback:    none for capture-pane parsing (a format change would
+ *                surface as missing events, caught by the
+ *                openaiKeyLeakageCanary at adapter init via the env-scrub
+ *                contract it shares); code fix is remediation for any
+ *                real format change.
+ *   Verdict:     OS-level format stability + sibling canary coverage at
+ *                the spawn boundary (Rule 1a env-scrub via
+ *                openaiKeyLeakageCanary) is the structural coverage. The
+ *                tmux capture-pane loop reads from the pane the
+ *                env-scrubbed new-session spawn produced.
+ */
+import { execFileSync, spawn } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { sessionHandle } from '../../../types.js';
+import { CapabilityFlag } from '../../../capabilities.js';
+import { UnexpectedError } from '../../../errors.js';
+import { OPENAI_CODEX_ID } from '../errors.js';
+import { resolveCliModelFlag } from '../models.js';
+import { normalizeCodexJsonlEvent } from '../observability/eventNormalizer.js';
+import { buildCodexChildEnv, buildCodexTmuxSessionEnv } from './codexSpawn.js';
+class OpenAiCodexAgenticSession {
+    config;
+    capability = CapabilityFlag.AgenticSessionHeadless;
+    constructor(config) {
+        this.config = config;
+    }
+    async start(options) {
+        const sessionId = `ocs-${randomBytes(8).toString('hex')}`;
+        const tmuxName = `instar-${sessionId}`;
+        const cwd = options.workingDirectory ?? this.config.defaultWorkingDirectory ?? process.cwd();
+        const model = resolveCliModelFlag(options.model ?? this.config.defaultModel);
+        const sandbox = this.config.defaultSandboxMode ?? 'workspace-write';
+        const codexArgs = [
+            'exec',
+            '--json',
+            '--skip-git-repo-check',
+            '-s',
+            sandbox,
+            '-m',
+            model,
+            '-C',
+            cwd,
+            options.prompt,
+        ];
+        // Spec 12 Rule 1a — sessionEnv is the explicit allowlist of vars layered
+        // onto the tmux session via `-e VAR=VAL`. OPENAI_API_KEY is NOT among
+        // them: Codex must route through the ChatGPT subscription OAuth token
+        // in ~/.codex/auth.json, not the raw-API-key path. The `this.config.apiKey`
+        // push that used to live here is removed by design.
+        const sessionEnv = buildCodexTmuxSessionEnv({
+            sessionId,
+            codexHome: this.config.codexHome,
+            extraEnv: options.env,
+        });
+        const tmuxArgs = ['new-session', '-d', '-s', tmuxName, '-c', cwd];
+        for (const [k, v] of sessionEnv)
+            tmuxArgs.push('-e', `${k}=${v}`);
+        tmuxArgs.push(this.config.codexPath, ...codexArgs);
+        // tmux itself inherits its parent's env unless we override it. Without
+        // an explicit `env:`, the OPENAI_API_KEY in process.env would flow into
+        // tmux and from tmux into the codex child — defeating the allowlist.
+        // Scrub via buildCodexChildEnv so tmux's own env is clean; the -e flags
+        // above then layer session-specific overrides on top.
+        const tmuxParentEnv = buildCodexChildEnv({ codexHome: this.config.codexHome });
+        try {
+            execFileSync(this.config.tmuxPath, tmuxArgs, {
+                encoding: 'utf-8',
+                env: tmuxParentEnv,
+            });
+            try {
+                execFileSync(this.config.tmuxPath, ['set-option', '-t', `=${tmuxName}:`, 'history-limit', '50000'], { encoding: 'utf-8', timeout: 5000 });
+            }
+            catch {
+                /* nice-to-have */
+            }
+        }
+        catch (err) {
+            throw new UnexpectedError(`Failed to spawn codex tmux session: ${err.message}`, OPENAI_CODEX_ID, err);
+        }
+        const handle = sessionHandle(`${OPENAI_CODEX_ID}/${tmuxName}`);
+        // The events stream tails the tmux pane. Codex `--json` writes JSONL to
+        // stdout, which tmux captures. We tail by polling capture-pane and
+        // parsing newline-delimited JSON entries.
+        const tmuxPath = this.config.tmuxPath;
+        const events = {
+            async *[Symbol.asyncIterator]() {
+                let lastSeenLineIdx = 0;
+                // emit session-lifecycle start
+                yield {
+                    type: 'session-lifecycle',
+                    timestamp: new Date().toISOString(),
+                    providerId: OPENAI_CODEX_ID,
+                    lifecycleKind: 'started',
+                    sessionHandle: handle,
+                };
+                while (true) {
+                    const sessionAlive = await new Promise((resolve) => {
+                        const child = spawn(tmuxPath, ['has-session', '-t', tmuxName], {
+                            stdio: 'ignore',
+                        });
+                        child.on('exit', (code) => resolve(code === 0));
+                        child.on('error', () => resolve(false));
+                    });
+                    let pane = '';
+                    try {
+                        pane = execFileSync(tmuxPath, ['capture-pane', '-p', '-J', '-S', '-1000', '-t', tmuxName], {
+                            encoding: 'utf-8',
+                            timeout: 5000,
+                        });
+                    }
+                    catch {
+                        pane = '';
+                    }
+                    const lines = pane.split('\n');
+                    for (let i = lastSeenLineIdx; i < lines.length; i++) {
+                        const raw = lines[i]?.trim();
+                        if (!raw || !raw.startsWith('{'))
+                            continue;
+                        const ev = normalizeCodexJsonlEvent(raw);
+                        if (ev)
+                            yield ev;
+                    }
+                    lastSeenLineIdx = lines.length;
+                    if (!sessionAlive) {
+                        yield {
+                            type: 'session-lifecycle',
+                            timestamp: new Date().toISOString(),
+                            providerId: OPENAI_CODEX_ID,
+                            lifecycleKind: 'ended',
+                            sessionHandle: handle,
+                        };
+                        return;
+                    }
+                    await new Promise((r) => setTimeout(r, 500));
+                }
+            },
+        };
+        return {
+            handle,
+            events,
+            providerSpecific: {
+                [OPENAI_CODEX_ID]: { tmuxSession: tmuxName, sessionId, model, cwd, sandbox },
+            },
+        };
+    }
+}
+/**
+ * Extract the tmux session name from a SessionHandle issued by this adapter.
+ */
+export function tmuxSessionFromHandle(handle) {
+    const prefix = `${OPENAI_CODEX_ID}/`;
+    if (!handle.startsWith(prefix)) {
+        throw new UnexpectedError(`SessionHandle was not issued by openai-codex: ${handle}`, OPENAI_CODEX_ID);
+    }
+    return handle.slice(prefix.length);
+}
+export function createAgenticSessionHeadless(config) {
+    return new OpenAiCodexAgenticSession(config);
+}
+//# sourceMappingURL=agenticSessionHeadless.js.map

package/dist/providers/adapters/openai-codex/transport/agenticSessionHeadless.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agenticSessionHeadless.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/transport/agenticSessionHeadless.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQ1C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAG/E,MAAM,yBAAyB;IAGA;IAFpB,UAAU,GAAG,cAAc,CAAC,sBAAsB,CAAC;IAE5D,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D,KAAK,CAAC,KAAK,CAAC,OAAsC;QAChD,MAAM,SAAS,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,UAAU,SAAS,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC7F,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;QAEpE,MAAM,SAAS,GAAG;YAChB,MAAM;YACN,QAAQ;YACR,uBAAuB;YACvB,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,KAAK;YACL,IAAI;YACJ,GAAG;YACH,OAAO,CAAC,MAAM;SACf,CAAC;QAEF,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,4EAA4E;QAC5E,oDAAoD;QACpD,MAAM,UAAU,GAAG,wBAAwB,CAAC;YAC1C,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,QAAQ,EAAE,OAAO,CAAC,GAAG;SACtB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC;QAEnD,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE/E,IAAI,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE;gBAC3C,QAAQ,EAAE,OAAO;gBACjB,GAAG,EAAE,aAAa;aACnB,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,YAAY,CACV,IAAI,CAAC,MAAM,CAAC,QAAQ,EACpB,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,QAAQ,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,EAC/D,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACrC,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,uCAAwC,GAAa,CAAC,OAAO,EAAE,EAC/D,eAAe,EACf,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,eAAe,IAAI,QAAQ,EAAE,CAAC,CAAC;QAE/D,wEAAwE;QACxE,mEAAmE;QACnE,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,MAAM,MAAM,GAAkC;YAC5C,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC3B,IAAI,eAAe,GAAG,CAAC,CAAC;gBACxB,+BAA+B;gBAC/B,MAAM;oBACJ,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,UAAU,EAAE,eAAe;oBAC3B,aAAa,EAAE,SAAS;oBACxB,aAAa,EAAE,MAAM;iBACJ,CAAC;gBAEpB,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,YAAY,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;wBAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;4BAC7D,KAAK,EAAE,QAAQ;yBAChB,CAAC,CAAC;wBACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;wBAChD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1C,CAAC,CAAC,CAAC;oBAEH,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,IAAI,CAAC;wBACH,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;4BACzF,QAAQ,EAAE,OAAO;4BACjB,OAAO,EAAE,IAAI;yBACd,CAAC,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,EAAE,CAAC;oBACZ,CAAC;oBAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC/B,KAAK,IAAI,CAAC,GAAG,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;wBACpD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;4BAAE,SAAS;wBAC3C,MAAM,EAAE,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;wBACzC,IAAI,EAAE;4BAAE,MAAM,EAAE,CAAC;oBACnB,CAAC;oBACD,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC;oBAE/B,IAAI,CAAC,YAAY,EAAE,CAAC;wBAClB,MAAM;4BACJ,IAAI,EAAE,mBAAmB;4BACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BACnC,UAAU,EAAE,eAAe;4BAC3B,aAAa,EAAE,OAAO;4BACtB,aAAa,EAAE,MAAM;yBACJ,CAAC;wBACpB,OAAO;oBACT,CAAC;oBACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;SACF,CAAC;QAEF,OAAO;YACL,MAAM;YACN,MAAM;YACN,gBAAgB,EAAE;gBAChB,CAAC,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;aAC7E;SACF,CAAC;IACJ,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAqB;IACzD,MAAM,MAAM,GAAG,GAAG,eAAe,GAAG,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACvB,iDAAiD,MAAM,EAAE,EACzD,eAAe,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,MAAyB;IAEzB,OAAO,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC;AAC/C,CAAC"}

package/dist/providers/adapters/openai-codex/transport/checkLocalProvider.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Reachability + model-existence check for a Codex --oss local provider.
+ *
+ * Called by /local-model before flipping a topic's binding so the
+ * Telegram user gets a clear "fix X then try again" message instead of
+ * a silent session-spawn failure 90 seconds later.
+ *
+ * Why this lives under openai-codex/transport: the local-provider list
+ * (Ollama, LM Studio) is dictated by Codex CLI's --local-provider flag,
+ * not by Instar. If Codex adds another backend, this helper extends.
+ */
+export type LocalProvider = 'ollama' | 'lmstudio';
+export interface LocalProviderCheck {
+    ok: boolean;
+    /** Human-readable reason when ok === false. */
+    reason?: string;
+}
+/**
+ * Check provider reachability + (optionally) model availability.
+ *
+ * - For ollama: GETs /api/version, then if model is provided, /api/tags
+ *   to confirm it's pulled.
+ * - For lmstudio: GETs /v1/models — model list comes back as an array
+ *   under .data; if a model id is requested, we verify it's there.
+ *
+ * Network calls are bounded by a short timeout. Failure modes:
+ *   - Port unreachable → "Ollama not running on localhost:11434…"
+ *   - Model missing → "Ollama is up but model 'X' isn't pulled…"
+ *   - HTTP error → the status surfaces in the reason.
+ */
+export declare function checkLocalProviderReachable(provider: LocalProvider, model?: string): Promise<LocalProviderCheck>;
+//# sourceMappingURL=checkLocalProvider.d.ts.map

package/dist/providers/adapters/openai-codex/transport/checkLocalProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkLocalProvider.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/transport/checkLocalProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAWD;;;;;;;;;;;;GAYG;AACH,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,aAAa,EACvB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,CAAC,CAM7B"}

package/dist/providers/adapters/openai-codex/transport/checkLocalProvider.js

@@ -0,0 +1,99 @@
+/**
+ * Reachability + model-existence check for a Codex --oss local provider.
+ *
+ * Called by /local-model before flipping a topic's binding so the
+ * Telegram user gets a clear "fix X then try again" message instead of
+ * a silent session-spawn failure 90 seconds later.
+ *
+ * Why this lives under openai-codex/transport: the local-provider list
+ * (Ollama, LM Studio) is dictated by Codex CLI's --local-provider flag,
+ * not by Instar. If Codex adds another backend, this helper extends.
+ */
+/**
+ * Default ports for each provider's local API endpoint. Codex CLI talks
+ * to these via its own HTTP client; we mirror them here for pre-flight.
+ */
+const DEFAULT_PORTS = {
+    ollama: 11434,
+    lmstudio: 1234,
+};
+/**
+ * Check provider reachability + (optionally) model availability.
+ *
+ * - For ollama: GETs /api/version, then if model is provided, /api/tags
+ *   to confirm it's pulled.
+ * - For lmstudio: GETs /v1/models — model list comes back as an array
+ *   under .data; if a model id is requested, we verify it's there.
+ *
+ * Network calls are bounded by a short timeout. Failure modes:
+ *   - Port unreachable → "Ollama not running on localhost:11434…"
+ *   - Model missing → "Ollama is up but model 'X' isn't pulled…"
+ *   - HTTP error → the status surfaces in the reason.
+ */
+export async function checkLocalProviderReachable(provider, model) {
+    const port = DEFAULT_PORTS[provider];
+    if (provider === 'ollama') {
+        return checkOllama(port, model);
+    }
+    return checkLmStudio(port, model);
+}
+async function fetchWithTimeout(url, ms) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), ms);
+    try {
+        return await fetch(url, { signal: ctrl.signal });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+async function checkOllama(port, model) {
+    try {
+        const ver = await fetchWithTimeout(`http://localhost:${port}/api/version`, 3000);
+        if (!ver.ok) {
+            return { ok: false, reason: `Ollama on localhost:${port} returned HTTP ${ver.status}. Run \`ollama serve\` and retry.` };
+        }
+    }
+    catch (err) {
+        return { ok: false, reason: `Ollama not running on localhost:${port} (${err instanceof Error ? err.message : String(err)}). Start it with \`ollama serve\` and retry.` };
+    }
+    if (!model)
+        return { ok: true };
+    try {
+        const tagsResp = await fetchWithTimeout(`http://localhost:${port}/api/tags`, 3000);
+        if (!tagsResp.ok) {
+            return { ok: false, reason: `Couldn't list Ollama models (HTTP ${tagsResp.status}). Run \`ollama list\` to see what's available.` };
+        }
+        const tags = await tagsResp.json();
+        const have = (tags.models ?? []).map((m) => m.name).filter(Boolean);
+        if (!have.includes(model)) {
+            const suggest = have.length ? have.slice(0, 5).join(', ') : '(none — run `ollama pull llama3.2:latest`)';
+            return { ok: false, reason: `Ollama is up but model "${model}" isn't pulled. Available: ${suggest}. Run \`ollama pull ${model}\` and retry.` };
+        }
+    }
+    catch (err) {
+        return { ok: false, reason: `Couldn't reach Ollama tags endpoint: ${err instanceof Error ? err.message : String(err)}. Falling back to "reachable but model-check skipped".` };
+    }
+    return { ok: true };
+}
+async function checkLmStudio(port, model) {
+    try {
+        const resp = await fetchWithTimeout(`http://localhost:${port}/v1/models`, 3000);
+        if (!resp.ok) {
+            return { ok: false, reason: `LM Studio on localhost:${port} returned HTTP ${resp.status}. Open LM Studio and start the local server (Server tab), then retry.` };
+        }
+        if (!model)
+            return { ok: true };
+        const list = await resp.json();
+        const have = (list.data ?? []).map((m) => m.id).filter(Boolean);
+        if (!have.includes(model)) {
+            const suggest = have.length ? have.slice(0, 5).join(', ') : '(none — load a model in LM Studio first)';
+            return { ok: false, reason: `LM Studio is up but model "${model}" isn't loaded. Available: ${suggest}.` };
+        }
+        return { ok: true };
+    }
+    catch (err) {
+        return { ok: false, reason: `LM Studio not reachable on localhost:${port} (${err instanceof Error ? err.message : String(err)}). Start the local server in LM Studio (Server tab) and retry.` };
+    }
+}
+//# sourceMappingURL=checkLocalProvider.js.map

package/dist/providers/adapters/openai-codex/transport/checkLocalProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkLocalProvider.js","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/transport/checkLocalProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH;;;GAGG;AACH,MAAM,aAAa,GAAkC;IACnD,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;CACf,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAAuB,EACvB,KAAc;IAEd,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,EAAU;IACrD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAc;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,IAAI,cAAc,EAAE,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,IAAI,kBAAkB,GAAG,CAAC,MAAM,mCAAmC,EAAE,CAAC;QAC3H,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,8CAA8C,EAAE,CAAC;IAC3K,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,IAAI,WAAW,EAAE,IAAI,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,QAAQ,CAAC,MAAM,iDAAiD,EAAE,CAAC;QACtI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA2C,CAAC;QAC5E,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,4CAA4C,CAAC;YACzG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,KAAK,8BAA8B,OAAO,uBAAuB,KAAK,eAAe,EAAE,CAAC;QACjJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wDAAwD,EAAE,CAAC;IACjL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,KAAc;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,IAAI,YAAY,EAAE,IAAI,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,IAAI,kBAAkB,IAAI,CAAC,MAAM,uEAAuE,EAAE,CAAC;QACnK,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAuC,CAAC;QACpE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0CAA0C,CAAC;YACvG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,KAAK,8BAA8B,OAAO,GAAG,EAAE,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gEAAgE,EAAE,CAAC;IAClM,CAAC;AACH,CAAC"}

package/dist/providers/adapters/openai-codex/transport/codexSpawn.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Spawn helper for Codex CLI.
+ *
+ * Codex CLI reads stdin even when the prompt is supplied as a positional
+ * argument — without an explicit EOF it hangs indefinitely. Node's
+ * `execFile` / `exec` don't close stdin for us, so this helper uses
+ * `spawn` and explicitly calls `child.stdin.end()` immediately.
+ *
+ * Empirically observed 2026-05-15: without this fix, oneShotCompletion
+ * hangs for the full timeout window (30-60s) and returns empty. With it,
+ * a Reply-with-PONGXYZ smoke call completes in ~4-5 seconds.
+ *
+ * Used by all transport primitives that spawn `codex exec` (one-shot,
+ * structured one-shot). The agenticSessionHeadless primitive spawns
+ * codex inside tmux, where tmux owns stdin — that path is unaffected.
+ */
+export interface SpawnResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+}
+export interface BuildCodexChildEnvOptions {
+    /**
+     * Explicit OPENAI_API_KEY to pass through to the child process.
+     *
+     * @deprecated Phase A only. The API-key path is forbidden as a routine
+     * path per Spec 12 Rule 1. Phase B refuses construction when this is set.
+     * Use ChatGPT subscription OAuth in `~/.codex/auth.json` instead.
+     * @internal
+     */
+    apiKey?: string;
+    /** Override for CODEX_HOME (caller-provided). */
+    codexHome?: string;
+}
+/**
+ * Build the env for a `codex` child process per Rule 1a.
+ *
+ * Constructs an explicit allowlist (NOT a blocklist) — variables not listed
+ * are dropped. `OPENAI_API_KEY`, `OPENAI_ORG_ID`, `OPENAI_PROJECT_ID` are
+ * defensively hard-deleted even if accidentally allowlisted in the future.
+ *
+ * Exceptions to the strict allowlist:
+ *   - `OPENAI_BASE_URL` from the boot-time snapshot is passed through (Spec 12
+ *     § "Scope clarification — what 'Codex traffic' means": user-installed
+ *     proxies are user-owned compatibility).
+ *   - When `INSTAR_DISABLE_RULE1_OPENAI=1` is set in the parent env, the
+ *     `OPENAI_API_KEY` from parent env is passed through (Spec 12 § "Escape-hatch
+ *     interaction with Rule 1a"). Sunset-date enforcement and audit-log codes
+ *     are layered in by the credential validation cycle.
+ *   - When the caller passes `options.apiKey`, that value is set on the child
+ *     env regardless of the parent env's `OPENAI_API_KEY`. This is the
+ *     deprecated explicit-config path; staged for removal at Phase B.
+ */
+export declare function buildCodexChildEnv(options?: BuildCodexChildEnvOptions): NodeJS.ProcessEnv;
+export interface BuildCodexTmuxSessionEnvOptions {
+    sessionId: string;
+    codexHome?: string;
+    extraEnv?: Readonly<Record<string, string>>;
+}
+export declare function buildCodexTmuxSessionEnv(options: BuildCodexTmuxSessionEnvOptions): Array<[string, string]>;
+export declare function spawnCodexAndWait(binary: string, args: string[], options: {
+    timeoutMs: number;
+    env: NodeJS.ProcessEnv;
+    signal?: AbortSignal;
+}): Promise<SpawnResult>;
+//# sourceMappingURL=codexSpawn.d.ts.map

package/dist/providers/adapters/openai-codex/transport/codexSpawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSpawn.d.ts","sourceRoot":"","sources":["../../../../../src/providers/adapters/openai-codex/transport/codexSpawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAwED,MAAM,WAAW,yBAAyB;IACxC;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,yBAAyB,GAAG,MAAM,CAAC,UAAU,CAuCzF;AA6CD,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7C;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAezB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GAC3E,OAAO,CAAC,WAAW,CAAC,CAyDtB"}

package/dist/providers/adapters/openai-codex/transport/codexSpawn.js

@@ -0,0 +1,246 @@
+/**
+ * Spawn helper for Codex CLI.
+ *
+ * Codex CLI reads stdin even when the prompt is supplied as a positional
+ * argument — without an explicit EOF it hangs indefinitely. Node's
+ * `execFile` / `exec` don't close stdin for us, so this helper uses
+ * `spawn` and explicitly calls `child.stdin.end()` immediately.
+ *
+ * Empirically observed 2026-05-15: without this fix, oneShotCompletion
+ * hangs for the full timeout window (30-60s) and returns empty. With it,
+ * a Reply-with-PONGXYZ smoke call completes in ~4-5 seconds.
+ *
+ * Used by all transport primitives that spawn `codex exec` (one-shot,
+ * structured one-shot). The agenticSessionHeadless primitive spawns
+ * codex inside tmux, where tmux owns stdin — that path is unaffected.
+ */
+import { spawn } from 'node:child_process';
+/**
+ * Rule 1a — env allowlist for Codex child processes.
+ *
+ * Per `specs/provider-portability/12-openai-path-constraints.md`, Codex
+ * spawns MUST NOT inherit `process.env` wholesale. The Codex CLI prefers
+ * `OPENAI_API_KEY` over the stored OAuth token when both are present in
+ * its env; agents running on machines where another project sets the env
+ * var (echo is the canonical example) would silently bill against the
+ * OpenAI API account instead of the ChatGPT subscription.
+ *
+ * This is the explicit allowlist of variables that flow through. Anything
+ * not on this list is dropped. Adding to this list requires a spec
+ * amendment.
+ *
+ * RULE 3.1 RATIONALE
+ *   Criticality: critical — a leak silently bills the user's OpenAI API
+ *                account at full per-token rates; the runaway-cost ceiling
+ *                is the user's funded balance
+ *   Frequency:   per-spawn (every Codex child process construction)
+ *   Stability:   stable — env-allowlist is internal Instar code; the
+ *                Codex CLI's env-var preference contract is the upstream
+ *                surface this defends against, and that's checked by the
+ *                openaiKeyLeakageCanary at adapter init
+ *   Fallback:    none — the structural invariant is "no leak, ever"; a
+ *                detected violation requires a code fix, not self-heal
+ *   Verdict:     deterministic structural construction (allowlist + hard
+ *                deletes), gated by a startup canary that asserts no leak
+ *                under sentinel-injection in the parent env
+ */
+const CODEX_ENV_ALLOWLIST = [
+    // Filesystem / user identity
+    'HOME',
+    'USER',
+    'LOGNAME',
+    // Subprocess execution
+    'PATH',
+    'SHELL',
+    'TMPDIR',
+    // Locale
+    'LANG',
+    'LANGUAGE',
+    'LC_ALL',
+    'LC_CTYPE',
+    'LC_MESSAGES',
+    // Terminal sizing (Codex CLI's TUI honors these)
+    'COLUMNS',
+    'LINES',
+    'ROWS',
+    'TERM',
+    // Codex CLI configuration
+    'CODEX_HOME',
+    'CODEX_DEFAULT_MODEL',
+    'CODEX_DEFAULT_PROFILE',
+    // XDG base-dir conventions (used by codex on Linux)
+    'XDG_CONFIG_HOME',
+    'XDG_DATA_HOME',
+    'XDG_CACHE_HOME',
+    'XDG_STATE_HOME',
+    // Spec 12 kill-switch — passed through so the child can see it
+    'INSTAR_DISABLE_RULE1_OPENAI',
+];
+/**
+ * Boot-time snapshot of OPENAI_BASE_URL. Captured once at module load so a
+ * mid-process mutation of `process.env.OPENAI_BASE_URL` (by a hostile plugin,
+ * a dispatch action, or a future maintainer mistake) cannot reach Codex
+ * spawns. Spec 12 § "Boot-time snapshot."
+ */
+const BOOT_OPENAI_BASE_URL = process.env.OPENAI_BASE_URL;
+/**
+ * Build the env for a `codex` child process per Rule 1a.
+ *
+ * Constructs an explicit allowlist (NOT a blocklist) — variables not listed
+ * are dropped. `OPENAI_API_KEY`, `OPENAI_ORG_ID`, `OPENAI_PROJECT_ID` are
+ * defensively hard-deleted even if accidentally allowlisted in the future.
+ *
+ * Exceptions to the strict allowlist:
+ *   - `OPENAI_BASE_URL` from the boot-time snapshot is passed through (Spec 12
+ *     § "Scope clarification — what 'Codex traffic' means": user-installed
+ *     proxies are user-owned compatibility).
+ *   - When `INSTAR_DISABLE_RULE1_OPENAI=1` is set in the parent env, the
+ *     `OPENAI_API_KEY` from parent env is passed through (Spec 12 § "Escape-hatch
+ *     interaction with Rule 1a"). Sunset-date enforcement and audit-log codes
+ *     are layered in by the credential validation cycle.
+ *   - When the caller passes `options.apiKey`, that value is set on the child
+ *     env regardless of the parent env's `OPENAI_API_KEY`. This is the
+ *     deprecated explicit-config path; staged for removal at Phase B.
+ */
+export function buildCodexChildEnv(options) {
+    const env = {};
+    for (const key of CODEX_ENV_ALLOWLIST) {
+        const value = process.env[key];
+        if (value !== undefined) {
+            env[key] = value;
+        }
+    }
+    if (BOOT_OPENAI_BASE_URL !== undefined) {
+        env.OPENAI_BASE_URL = BOOT_OPENAI_BASE_URL;
+    }
+    // Defensive hard-delete — belt-and-suspenders against any allowlist
+    // expansion mistake that includes an OpenAI-billing variable.
+    delete env.OPENAI_API_KEY;
+    delete env.OPENAI_ORG_ID;
+    delete env.OPENAI_PROJECT_ID;
+    // Kill-switch handling. Spec 12 § "Escape-hatch interaction with Rule 1a".
+    if (process.env.INSTAR_DISABLE_RULE1_OPENAI === '1' &&
+        typeof process.env.OPENAI_API_KEY === 'string' &&
+        process.env.OPENAI_API_KEY.length > 0) {
+        env.OPENAI_API_KEY = process.env.OPENAI_API_KEY;
+    }
+    // Explicit caller-provided key (Phase A deprecated path).
+    if (options?.apiKey) {
+        env.OPENAI_API_KEY = options.apiKey;
+    }
+    if (options?.codexHome) {
+        env.CODEX_HOME = options.codexHome;
+    }
+    return env;
+}
+/**
+ * Build the session-env tuples passed via tmux `-e VAR=VAL` flags for a
+ * Codex tmux session.
+ *
+ * Mirrors `buildCodexChildEnv`'s allowlist-with-defensive-deletes shape but
+ * emits `[key, value]` tuples for tmux's flag format and accepts
+ * session-scoped extras (the agent-level `INSTAR_SESSION_ID` marker, an
+ * optional `CODEX_HOME` override, and caller-supplied env filtered through
+ * a session-extras allowlist).
+ *
+ * Caller-supplied `extraEnv` is filtered against `SESSION_EXTRA_ALLOWLIST`.
+ * `OPENAI_API_KEY` / `OPENAI_ORG_ID` / `OPENAI_PROJECT_ID` are never
+ * emitted as tmux flags regardless of allowlist contents — defensive
+ * hard-block matching the env-allowlist's posture. Spec 12 §
+ * "Compliance boundary at the process edge".
+ *
+ * The tmux `-e VAR=VAL` flag *adds* to the session's env on top of what
+ * tmux itself inherits. Callers passing the result of this function to
+ * `tmux new-session` MUST also pass `env: buildCodexChildEnv(...)` to the
+ * `execFileSync(tmuxPath, ...)` that spawns tmux — otherwise tmux's own
+ * inherited env carries the leak the allowlist exists to defeat.
+ */
+const SESSION_EXTRA_ALLOWLIST = new Set([
+    // Codex CLI configuration knobs that callers may want to override
+    // per-session. Anything not in this set is dropped.
+    'CODEX_DEFAULT_MODEL',
+    'CODEX_DEFAULT_PROFILE',
+    // Locale + terminal overrides — safe to vary per session.
+    'LANG',
+    'LANGUAGE',
+    'LC_ALL',
+    'COLUMNS',
+    'LINES',
+    'ROWS',
+    'TERM',
+]);
+const SESSION_EXTRA_HARD_BLOCK = new Set([
+    'OPENAI_API_KEY',
+    'OPENAI_ORG_ID',
+    'OPENAI_PROJECT_ID',
+]);
+export function buildCodexTmuxSessionEnv(options) {
+    const out = [
+        ['INSTAR_SESSION_ID', options.sessionId],
+    ];
+    if (options.codexHome) {
+        out.push(['CODEX_HOME', options.codexHome]);
+    }
+    if (options.extraEnv) {
+        for (const [k, v] of Object.entries(options.extraEnv)) {
+            if (SESSION_EXTRA_HARD_BLOCK.has(k))
+                continue;
+            if (!SESSION_EXTRA_ALLOWLIST.has(k))
+                continue;
+            out.push([k, v]);
+        }
+    }
+    return out;
+}
+export async function spawnCodexAndWait(binary, args, options) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(binary, args, {
+            env: options.env,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        let timedOut = false;
+        let aborted = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGTERM');
+            setTimeout(() => child.kill('SIGKILL'), 2000).unref();
+        }, options.timeoutMs);
+        timer.unref();
+        const onAbort = () => {
+            aborted = true;
+            child.kill('SIGTERM');
+        };
+        options.signal?.addEventListener('abort', onAbort, { once: true });
+        child.stdout.on('data', (b) => stdoutChunks.push(b));
+        child.stderr.on('data', (b) => stderrChunks.push(b));
+        child.on('error', (err) => {
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', onAbort);
+            reject(err);
+        });
+        child.on('close', (code) => {
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', onAbort);
+            const stdout = Buffer.concat(stdoutChunks).toString('utf-8');
+            const stderr = Buffer.concat(stderrChunks).toString('utf-8');
+            if (aborted) {
+                const e = new Error('Aborted');
+                e.name = 'AbortError';
+                return reject(e);
+            }
+            if (timedOut) {
+                const e = new Error(`Codex timed out after ${options.timeoutMs}ms`);
+                e.signal = 'SIGTERM';
+                e.killed = true;
+                e.stderr = stderr;
+                return reject(e);
+            }
+            resolve({ exitCode: code, stdout, stderr });
+        });
+        // Close stdin immediately so Codex doesn't wait for input.
+        child.stdin.end();
+    });
+}
+//# sourceMappingURL=codexSpawn.js.map