kiro-spec-engine 1.45.1 → 1.45.2

package/CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.45.2] - 2026-02-13
+
+### Fixed
+- **AgentSpawner auth fallback**: Added `~/.codex/auth.json` fallback when `CODEX_API_KEY` env var is not set, supporting users who configured auth via `codex auth`
+- **AgentSpawner codex command**: Added `codexCommand` config option (e.g. `"npx @openai/codex"`) for users without global Codex CLI install
+- **OrchestratorConfig**: Added `codexCommand` to known config keys and defaults
+
 ## [1.45.1] - 2026-02-12
 
 ### Fixed

package/lib/orchestrator/agent-spawner.js

@@ -13,6 +13,9 @@
 
 const { EventEmitter } = require('events');
 const { spawn } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
 
 class AgentSpawner extends EventEmitter {
   /**
@@ -45,12 +48,16 @@ class AgentSpawner extends EventEmitter {
   async spawn(specName) {
     const config = await this._orchestratorConfig.getConfig();
 
-    // Validate API key availability (Req 1.2)
+    // Resolve API key: env var → ~/.codex/auth.json fallback
     const apiKeyEnvVar = config.apiKeyEnvVar || 'CODEX_API_KEY';
-    if (!process.env[apiKeyEnvVar]) {
+    let apiKey = process.env[apiKeyEnvVar];
+    if (!apiKey) {
+      apiKey = this._readCodexAuthFile();
+    }
+    if (!apiKey) {
       throw new Error(
-        `Environment variable ${apiKeyEnvVar} is not set. ` +
-        'Cannot start Codex CLI without authentication.'
+        `Cannot find API key. Set environment variable ${apiKeyEnvVar}, ` +
+        'or configure Codex CLI auth via `codex auth` (~/.codex/auth.json).'
       );
     }
 
@@ -72,13 +79,17 @@ class AgentSpawner extends EventEmitter {
       prompt,
     ];
 
+    // Resolve codex command: config → auto-detect
+    const { command, prependArgs } = this._resolveCodexCommand(config);
+
     // Spawn the child process (Req 1.1, 1.2)
-    const env = { ...process.env, [apiKeyEnvVar]: process.env[apiKeyEnvVar] };
-    const child = spawn('codex', args, {
+    const env = { ...process.env, [apiKeyEnvVar]: apiKey };
+    const child = spawn(command, [...prependArgs, ...args], {
       cwd: this._workspaceRoot,
       env,
       stdio: ['ignore', 'pipe', 'pipe'],
       windowsHide: true,
+      shell: command === 'npx',
     });
 
     const now = new Date().toISOString();
@@ -373,6 +384,49 @@ class AgentSpawner extends EventEmitter {
       );
     }
   }
+
+  /**
+   * Read API key from Codex CLI's native auth file (~/.codex/auth.json).
+   * Returns the key string or null if not found.
+   *
+   * @returns {string|null}
+   * @private
+   */
+  _readCodexAuthFile() {
+    try {
+      const authPath = path.join(os.homedir(), '.codex', 'auth.json');
+      if (!fs.existsSync(authPath)) {
+        return null;
+      }
+      const auth = JSON.parse(fs.readFileSync(authPath, 'utf-8'));
+      return auth.OPENAI_API_KEY || auth.CODEX_API_KEY || null;
+    } catch (_err) {
+      return null;
+    }
+  }
+
+  /**
+   * Resolve the codex command and any prepended arguments.
+   *
+   * Priority:
+   * 1. config.codexCommand (user-specified, e.g. "npx @openai/codex" or "codex")
+   * 2. "codex" (default — assumes global install)
+   *
+   * When codexCommand contains spaces (e.g. "npx @openai/codex"),
+   * the first token becomes the command and the rest become prependArgs.
+   *
+   * @param {object} config
+   * @returns {{ command: string, prependArgs: string[] }}
+   * @private
+   */
+  _resolveCodexCommand(config) {
+    const raw = config.codexCommand || 'codex';
+    const parts = raw.trim().split(/\s+/);
+    return {
+      command: parts[0],
+      prependArgs: parts.slice(1),
+    };
+  }
 }
 
 module.exports = { AgentSpawner };

package/lib/orchestrator/orchestrator-config.js

@@ -27,6 +27,7 @@ const KNOWN_KEYS = new Set([
   'apiKeyEnvVar',
   'bootstrapTemplate',
   'codexArgs',
+  'codexCommand',
 ]);
 
 /** @type {import('./orchestrator-config').OrchestratorConfigData} */
@@ -38,6 +39,7 @@ const DEFAULT_CONFIG = Object.freeze({
   apiKeyEnvVar: 'CODEX_API_KEY',
   bootstrapTemplate: null,
   codexArgs: [],
+  codexCommand: null,
 });
 
 class OrchestratorConfig {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kiro-spec-engine",
-  "version": "1.45.1",
+  "version": "1.45.2",
   "description": "kiro-spec-engine (kse) - A CLI tool and npm package for spec-driven development with AI coding assistants. NOT the Kiro IDE desktop application.",
   "main": "index.js",
   "bin": {