negotium 0.18.2 → 0.19.1

package/dist/canonical-mcp-bridge.js

@@ -3,11 +3,12 @@ import {
   canonicalMcpBridgeEnv,
   registerCanonicalMcpBridgeEnvProvider,
   revokeCanonicalMcpBridgeTurn
-} from "./chunk-r0xs3t81.js";
+} from "./chunk-f7p0h1gs.js";
+import"./chunk-2mx7fq49.js";
 export {
   revokeCanonicalMcpBridgeTurn,
   registerCanonicalMcpBridgeEnvProvider,
   canonicalMcpBridgeEnv
 };
 
-//# debugId=80784E7A72C3AC2064756E2164756E21
+//# debugId=C5FA8F0580D154DB64756E2164756E21

package/dist/canonical-mcp-bridge.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "80784E7A72C3AC2064756E2164756E21",
+  "debugId": "C5FA8F0580D154DB64756E2164756E21",
   "names": []
 }

package/dist/chunk-22mtr8np.js

@@ -0,0 +1,200 @@
+// @bun
+import {
+  ACTIVE_QUERY_STALE_MS,
+  AGENTS_PROMPTS_DIR,
+  AGENT_HEALTH_SERVER,
+  BASHRS_SPILL_ROOT,
+  BASH_RS_BIN,
+  BASH_RS_VERSION,
+  BG_BASH_BASE_PORT,
+  BG_BASH_MAX_PORT,
+  BINARIES_DIR,
+  BINARY_EXTENSION,
+  BROWSER_DIR,
+  BROWSER_PROFILES_DIR,
+  BROWSER_RS_BIN,
+  BROWSER_RS_MIN_SECURE_VERSION,
+  BROWSER_RS_VERSION,
+  CANONICAL_MCP_PROXY_SERVER,
+  CLAUDE_EXECUTABLE,
+  COMPACTION_LOG_SERVER,
+  CRON_WORKSPACE_DIR,
+  DATA_DIR,
+  DEBUG_FILE,
+  DECISION_SERVER,
+  DEFAULT_OUTPUT_LANGUAGE,
+  DEFAULT_TOPIC_EFFORT,
+  DM_CMD_DIR,
+  DM_RESP_DIR,
+  DM_WORKSPACE_DIR,
+  FALLBACK_AGENT,
+  FALLBACK_MODEL,
+  FASTER_WHISPER_WRAPPER,
+  FFMPEG_BIN,
+  FFPROBE_BIN,
+  FILE_EXTENSIONS_REGEX,
+  FILE_TAG_REGEX,
+  LOG_DIR,
+  MAX_TELL_DEPTH,
+  MLX_WHISPER_BIN,
+  MODEL_DEEPSEEK_V4_FLASH,
+  MODEL_DEEPSEEK_V4_PRO,
+  MODEL_FABLE,
+  MODEL_HAIKU,
+  MODEL_OPUS,
+  MODEL_SONNET,
+  NEGOTIUM_PORT,
+  NODE_CONTROL_TOKEN,
+  NODE_ID,
+  PDFTOTEXT_BIN,
+  PLAYWRIGHT_BASE_PORT,
+  PLAYWRIGHT_MAX_PORT,
+  PLAYWRIGHT_MCP_BIN,
+  PLAYWRIGHT_PORTS_DIR,
+  PROGRESS_DIR,
+  PROJECT_ROOT,
+  PYTHON_BIN,
+  RESOURCES_DIR,
+  RUNTIME_DIR,
+  RUNTIME_MCP_SECRET,
+  RUN_DIR,
+  SECRETS_DIR,
+  SESSIONS_DB,
+  SESSION_ASKS_DIR,
+  SESSION_COMM_SERVER,
+  SESSION_INBOX_DIR,
+  SESSION_WORKSPACE_DIR,
+  SHARED_WIKI_DIR,
+  SNIPPETS_API_URL,
+  STATE_DIR,
+  SYSTEM_HEALTH_SERVER,
+  TASK_SERVER,
+  TESSERACT_BIN,
+  TOKEN_STATS_SERVER,
+  TOPIC_WORKSPACE_DIR,
+  TSCONFIG_PATH,
+  TSX_BIN,
+  TSX_LOADER,
+  UPLOADS_DIR,
+  USERS_LOG_DIR,
+  VAULT_DIR,
+  VAULT_MASTER_KEY,
+  VAULT_SERVER,
+  WHISPER_BACKEND,
+  WHISPER_MODEL,
+  WHISPER_MODEL_MLX,
+  WIKI_SERVER,
+  WORKSPACE_DIR,
+  codexAuthFilePath,
+  envText,
+  getCleanEnv,
+  hostname,
+  isProductionEnv,
+  resolveBashRsBin,
+  resolveBrowserMcpBin,
+  resolveBrowserProxy,
+  resolveBrowserRsBin,
+  resolveOutputLanguage,
+  resolveTopicWorkspaceDir
+} from "./chunk-y8rtedjb.js";
+import"./chunk-2mx7fq49.js";
+export {
+  resolveTopicWorkspaceDir,
+  resolveOutputLanguage,
+  resolveBrowserRsBin,
+  resolveBrowserProxy,
+  resolveBrowserMcpBin,
+  resolveBashRsBin,
+  isProductionEnv,
+  hostname,
+  getCleanEnv,
+  envText,
+  codexAuthFilePath,
+  WORKSPACE_DIR,
+  WIKI_SERVER,
+  WHISPER_MODEL_MLX,
+  WHISPER_MODEL,
+  WHISPER_BACKEND,
+  VAULT_SERVER,
+  VAULT_MASTER_KEY,
+  VAULT_DIR,
+  USERS_LOG_DIR,
+  UPLOADS_DIR,
+  TSX_LOADER,
+  TSX_BIN,
+  TSCONFIG_PATH,
+  TOPIC_WORKSPACE_DIR,
+  TOKEN_STATS_SERVER,
+  TESSERACT_BIN,
+  TASK_SERVER,
+  SYSTEM_HEALTH_SERVER,
+  STATE_DIR,
+  SNIPPETS_API_URL,
+  SHARED_WIKI_DIR,
+  SESSION_WORKSPACE_DIR,
+  SESSION_INBOX_DIR,
+  SESSION_COMM_SERVER,
+  SESSION_ASKS_DIR,
+  SESSIONS_DB,
+  SECRETS_DIR,
+  RUN_DIR,
+  RUNTIME_MCP_SECRET,
+  RUNTIME_DIR,
+  RESOURCES_DIR,
+  PYTHON_BIN,
+  PROJECT_ROOT,
+  PROGRESS_DIR,
+  PLAYWRIGHT_PORTS_DIR,
+  PLAYWRIGHT_MCP_BIN,
+  PLAYWRIGHT_MAX_PORT,
+  PLAYWRIGHT_BASE_PORT,
+  PDFTOTEXT_BIN,
+  NODE_ID,
+  NODE_CONTROL_TOKEN,
+  NEGOTIUM_PORT,
+  MODEL_SONNET,
+  MODEL_OPUS,
+  MODEL_HAIKU,
+  MODEL_FABLE,
+  MODEL_DEEPSEEK_V4_PRO,
+  MODEL_DEEPSEEK_V4_FLASH,
+  MLX_WHISPER_BIN,
+  MAX_TELL_DEPTH,
+  LOG_DIR,
+  FILE_TAG_REGEX,
+  FILE_EXTENSIONS_REGEX,
+  FFPROBE_BIN,
+  FFMPEG_BIN,
+  FASTER_WHISPER_WRAPPER,
+  FALLBACK_MODEL,
+  FALLBACK_AGENT,
+  DM_WORKSPACE_DIR,
+  DM_RESP_DIR,
+  DM_CMD_DIR,
+  DEFAULT_TOPIC_EFFORT,
+  DEFAULT_OUTPUT_LANGUAGE,
+  DECISION_SERVER,
+  DEBUG_FILE,
+  DATA_DIR,
+  CRON_WORKSPACE_DIR,
+  COMPACTION_LOG_SERVER,
+  CLAUDE_EXECUTABLE,
+  CANONICAL_MCP_PROXY_SERVER,
+  BROWSER_RS_VERSION,
+  BROWSER_RS_MIN_SECURE_VERSION,
+  BROWSER_RS_BIN,
+  BROWSER_PROFILES_DIR,
+  BROWSER_DIR,
+  BINARY_EXTENSION,
+  BINARIES_DIR,
+  BG_BASH_MAX_PORT,
+  BG_BASH_BASE_PORT,
+  BASH_RS_VERSION,
+  BASH_RS_BIN,
+  BASHRS_SPILL_ROOT,
+  AGENT_HEALTH_SERVER,
+  AGENTS_PROMPTS_DIR,
+  ACTIVE_QUERY_STALE_MS
+};
+
+//# debugId=5CB107C13A2F117D64756E2164756E21

package/dist/chunk-22mtr8np.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "5CB107C13A2F117D64756E2164756E21",
+  "names": []
+}

package/dist/chunk-2mx7fq49.js

@@ -0,0 +1,6 @@
+// @bun
+var __require = import.meta.require;
+
+export { __require };
+
+//# debugId=F2113E8A5115C63264756E2164756E21

package/dist/chunk-2mx7fq49.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "F2113E8A5115C63264756E2164756E21",
+  "names": []
+}

package/dist/{chunk-r0xs3t81.js → chunk-f7p0h1gs.js}

@@ -1,6 +1,4 @@
 // @bun
-var __require = import.meta.require;
-
 // ../../packages/core/src/mcp/canonical-bridge-config.ts
 var registrations = [];
 var turnLeases = new Map;
@@ -51,6 +49,6 @@ function revokeCanonicalMcpBridgeTurn(scope) {
   return leases.size;
 }
 
-export { __require, registerCanonicalMcpBridgeEnvProvider, canonicalMcpBridgeEnv, revokeCanonicalMcpBridgeTurn };
+export { registerCanonicalMcpBridgeEnvProvider, canonicalMcpBridgeEnv, revokeCanonicalMcpBridgeTurn };
 
-//# debugId=FD5EF234163D263564756E2164756E21
+//# debugId=7358D06F0893D4D064756E2164756E21

package/dist/{chunk-r0xs3t81.js.map → chunk-f7p0h1gs.js.map}

@@ -4,7 +4,7 @@
   "sourcesContent": [
     "import type { PeerRuntimeBridgeContext } from \"#types\";\n\nexport type CanonicalMcpSurface = \"task\" | \"decision\" | \"wiki\";\n\nexport interface CanonicalMcpBridgeScope {\n  surface: CanonicalMcpSurface;\n  userId: string;\n  topicId: string;\n  queryId: string;\n  peerBridge: PeerRuntimeBridgeContext;\n}\n\nexport interface CanonicalMcpBridgeEnvLease {\n  env: Record<string, string>;\n  /** Revoke the capability immediately. Must be safe to call more than once. */\n  revoke(): void;\n}\n\nexport type CanonicalMcpBridgeEnvProvider = (\n  scope: CanonicalMcpBridgeScope,\n) => CanonicalMcpBridgeEnvLease | undefined;\n\nconst registrations: Array<{ id: symbol; provider: CanonicalMcpBridgeEnvProvider }> = [];\nconst turnLeases = new Map<string, Set<() => void>>();\n\nfunction turnKey(\n  scope: Pick<CanonicalMcpBridgeScope, \"userId\" | \"topicId\" | \"queryId\" | \"peerBridge\">,\n): string {\n  return JSON.stringify([\n    scope.userId,\n    scope.topicId,\n    scope.queryId,\n    scope.peerBridge.hubCellId,\n    scope.peerBridge.hostTopicId,\n    scope.peerBridge.hostQueryId,\n  ]);\n}\n\n/** Placement adapters install a scoped capability issuer without exposing\n * their hub discovery or authentication model to generic core. */\nexport function registerCanonicalMcpBridgeEnvProvider(\n  provider: CanonicalMcpBridgeEnvProvider,\n): () => void {\n  const registration = { id: Symbol(\"canonical-mcp-bridge\"), provider };\n  registrations.push(registration);\n  let disposed = false;\n  return () => {\n    if (disposed) return;\n    disposed = true;\n    const index = registrations.findIndex((entry) => entry.id === registration.id);\n    if (index >= 0) registrations.splice(index, 1);\n  };\n}\n\nexport function canonicalMcpBridgeEnv(\n  scope: CanonicalMcpBridgeScope,\n): Record<string, string> | undefined {\n  const lease = registrations.at(-1)?.provider(scope);\n  if (!lease) return undefined;\n  const key = turnKey(scope);\n  const leases = turnLeases.get(key) ?? new Set<() => void>();\n  leases.add(lease.revoke);\n  turnLeases.set(key, leases);\n  return lease.env;\n}\n\n/** Revoke every canonical MCP capability issued while building one placed turn. */\nexport function revokeCanonicalMcpBridgeTurn(\n  scope: Pick<CanonicalMcpBridgeScope, \"userId\" | \"topicId\" | \"queryId\" | \"peerBridge\">,\n): number {\n  const key = turnKey(scope);\n  const leases = turnLeases.get(key);\n  if (!leases) return 0;\n  turnLeases.delete(key);\n  for (const revoke of leases) {\n    try {\n      revoke();\n    } catch {\n      // Revocation is best-effort across independently owned bridge adapters;\n      // continue so one broken disposer cannot preserve sibling capabilities.\n    }\n  }\n  return leases.size;\n}\n"
   ],
-  "mappings": ";;;;AAsBA,IAAM,gBAAgF,CAAC;AACvF,IAAM,aAAa,IAAI;AAEvB,SAAS,OAAO,CACd,OACQ;AAAA,EACR,OAAO,KAAK,UAAU;AAAA,IACpB,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM,WAAW;AAAA,IACjB,MAAM,WAAW;AAAA,IACjB,MAAM,WAAW;AAAA,EACnB,CAAC;AAAA;AAKI,SAAS,qCAAqC,CACnD,UACY;AAAA,EACZ,MAAM,eAAe,EAAE,IAAI,OAAO,sBAAsB,GAAG,SAAS;AAAA,EACpE,cAAc,KAAK,YAAY;AAAA,EAC/B,IAAI,WAAW;AAAA,EACf,OAAO,MAAM;AAAA,IACX,IAAI;AAAA,MAAU;AAAA,IACd,WAAW;AAAA,IACX,MAAM,QAAQ,cAAc,UAAU,CAAC,UAAU,MAAM,OAAO,aAAa,EAAE;AAAA,IAC7E,IAAI,SAAS;AAAA,MAAG,cAAc,OAAO,OAAO,CAAC;AAAA;AAAA;AAI1C,SAAS,qBAAqB,CACnC,OACoC;AAAA,EACpC,MAAM,QAAQ,cAAc,GAAG,EAAE,GAAG,SAAS,KAAK;AAAA,EAClD,IAAI,CAAC;AAAA,IAAO;AAAA,EACZ,MAAM,MAAM,QAAQ,KAAK;AAAA,EACzB,MAAM,SAAS,WAAW,IAAI,GAAG,KAAK,IAAI;AAAA,EAC1C,OAAO,IAAI,MAAM,MAAM;AAAA,EACvB,WAAW,IAAI,KAAK,MAAM;AAAA,EAC1B,OAAO,MAAM;AAAA;AAIR,SAAS,4BAA4B,CAC1C,OACQ;AAAA,EACR,MAAM,MAAM,QAAQ,KAAK;AAAA,EACzB,MAAM,SAAS,WAAW,IAAI,GAAG;AAAA,EACjC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,WAAW,OAAO,GAAG;AAAA,EACrB,WAAW,UAAU,QAAQ;AAAA,IAC3B,IAAI;AAAA,MACF,OAAO;AAAA,MACP,MAAM;AAAA,EAIV;AAAA,EACA,OAAO,OAAO;AAAA;",
-  "debugId": "FD5EF234163D263564756E2164756E21",
+  "mappings": ";;AAsBA,IAAM,gBAAgF,CAAC;AACvF,IAAM,aAAa,IAAI;AAEvB,SAAS,OAAO,CACd,OACQ;AAAA,EACR,OAAO,KAAK,UAAU;AAAA,IACpB,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM,WAAW;AAAA,IACjB,MAAM,WAAW;AAAA,IACjB,MAAM,WAAW;AAAA,EACnB,CAAC;AAAA;AAKI,SAAS,qCAAqC,CACnD,UACY;AAAA,EACZ,MAAM,eAAe,EAAE,IAAI,OAAO,sBAAsB,GAAG,SAAS;AAAA,EACpE,cAAc,KAAK,YAAY;AAAA,EAC/B,IAAI,WAAW;AAAA,EACf,OAAO,MAAM;AAAA,IACX,IAAI;AAAA,MAAU;AAAA,IACd,WAAW;AAAA,IACX,MAAM,QAAQ,cAAc,UAAU,CAAC,UAAU,MAAM,OAAO,aAAa,EAAE;AAAA,IAC7E,IAAI,SAAS;AAAA,MAAG,cAAc,OAAO,OAAO,CAAC;AAAA;AAAA;AAI1C,SAAS,qBAAqB,CACnC,OACoC;AAAA,EACpC,MAAM,QAAQ,cAAc,GAAG,EAAE,GAAG,SAAS,KAAK;AAAA,EAClD,IAAI,CAAC;AAAA,IAAO;AAAA,EACZ,MAAM,MAAM,QAAQ,KAAK;AAAA,EACzB,MAAM,SAAS,WAAW,IAAI,GAAG,KAAK,IAAI;AAAA,EAC1C,OAAO,IAAI,MAAM,MAAM;AAAA,EACvB,WAAW,IAAI,KAAK,MAAM;AAAA,EAC1B,OAAO,MAAM;AAAA;AAIR,SAAS,4BAA4B,CAC1C,OACQ;AAAA,EACR,MAAM,MAAM,QAAQ,KAAK;AAAA,EACzB,MAAM,SAAS,WAAW,IAAI,GAAG;AAAA,EACjC,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,WAAW,OAAO,GAAG;AAAA,EACrB,WAAW,UAAU,QAAQ;AAAA,IAC3B,IAAI;AAAA,MACF,OAAO;AAAA,MACP,MAAM;AAAA,EAIV;AAAA,EACA,OAAO,OAAO;AAAA;",
+  "debugId": "7358D06F0893D4D064756E2164756E21",
   "names": []
 }

package/dist/{chunk-44ajn328.js → chunk-m7qc729a.js}

@@ -23,7 +23,7 @@ import { createRequire } from "module";
 import { dirname, join } from "path";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.18.2";
+var NEGOTIUM_VERSION = "0.19.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 var moduleRequire = createRequire(import.meta.url);
@@ -158,4 +158,4 @@ export {
   createCodexAppServerForker
 };
 
-//# debugId=BEFB3E8C582938DC64756E2164756E21
+//# debugId=BBE91265DAC3F7C064756E2164756E21

package/dist/chunk-m7qc729a.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../../../packages/core/src/agents/codex-app-server.ts", "../../../packages/core/src/agents/codex-native-multi-agent.ts", "../../../packages/core/src/version.ts"],
+  "sourcesContent": [
+    "import { type ChildProcessWithoutNullStreams, spawn } from \"node:child_process\";\nimport { codexCliScriptPath } from \"#agents/codex-native-multi-agent\";\nimport { hostedCodexHomePath } from \"#agents/execution-host\";\nimport { latestCodexRolloutPath } from \"#agents/rollout/codex\";\nimport { NEGOTIUM_VERSION } from \"#version\";\n\ninterface CodexAppServerForkResult {\n  forkId: string;\n  rolloutPath: string;\n}\n\ninterface CodexAppServerForkHost {\n  spawnServer(): ChildProcessWithoutNullStreams;\n  findRolloutPath(threadId: string): string | undefined;\n  timeoutMs: number;\n}\n\ntype JsonRpcResponse = {\n  id?: number;\n  result?: { thread?: { id?: unknown } };\n  error?: { message?: unknown };\n};\n\nexport function createCodexAppServerForker(host: CodexAppServerForkHost) {\n  return async (parentThreadId: string): Promise<CodexAppServerForkResult> => {\n    const child = host.spawnServer();\n\n    return await new Promise<CodexAppServerForkResult>((resolve, reject) => {\n      let settled = false;\n      let stdoutBuffer = \"\";\n      let stderr = \"\";\n      const timer = setTimeout(\n        () => finish(new Error(\"Codex thread fork timed out\")),\n        host.timeoutMs,\n      );\n\n      const finish = (error?: Error, result?: CodexAppServerForkResult) => {\n        if (settled) return;\n        settled = true;\n        clearTimeout(timer);\n        try {\n          child.stdin.end();\n          child.kill();\n        } catch {\n          // The app server may already have exited after stdin closed.\n        }\n        if (error) reject(error);\n        else if (result) resolve(result);\n        else reject(new Error(\"Codex thread fork returned no result\"));\n      };\n\n      const send = (message: Record<string, unknown>) => {\n        child.stdin.write(`${JSON.stringify(message)}\\n`);\n      };\n\n      child.stderr.on(\"data\", (chunk) => {\n        if (stderr.length < 8_192) stderr += String(chunk);\n      });\n      child.on(\"error\", (error) => finish(error));\n      child.on(\"exit\", (code, signal) => {\n        if (settled) return;\n        const detail = signal ? `signal ${signal}` : `code ${code ?? 1}`;\n        finish(\n          new Error(\n            `Codex app server exited with ${detail}${stderr.trim() ? `: ${stderr.trim()}` : \"\"}`,\n          ),\n        );\n      });\n      child.stdout.on(\"data\", (chunk) => {\n        stdoutBuffer += String(chunk);\n        for (;;) {\n          const newline = stdoutBuffer.indexOf(\"\\n\");\n          if (newline < 0) break;\n          const line = stdoutBuffer.slice(0, newline);\n          stdoutBuffer = stdoutBuffer.slice(newline + 1);\n          let message: JsonRpcResponse;\n          try {\n            message = JSON.parse(line) as JsonRpcResponse;\n          } catch {\n            continue;\n          }\n\n          if (message.id === 1) {\n            if (message.error) {\n              finish(new Error(String(message.error.message || \"Codex initialization failed\")));\n              return;\n            }\n            send({ method: \"initialized\" });\n            send({ id: 2, method: \"thread/fork\", params: { threadId: parentThreadId } });\n            continue;\n          }\n          if (message.id !== 2) continue;\n          if (message.error) {\n            finish(new Error(String(message.error.message || \"Codex thread fork failed\")));\n            return;\n          }\n          const forkId = message.result?.thread?.id;\n          if (typeof forkId !== \"string\" || !forkId) {\n            finish(new Error(\"Codex thread fork returned no thread id\"));\n            return;\n          }\n          const rolloutPath = host.findRolloutPath(forkId);\n          if (!rolloutPath) {\n            finish(new Error(`Codex thread fork rollout was not found for ${forkId}`));\n            return;\n          }\n          finish(undefined, { forkId, rolloutPath });\n          return;\n        }\n      });\n\n      send({\n        id: 1,\n        method: \"initialize\",\n        params: {\n          clientInfo: { name: \"negotium\", version: NEGOTIUM_VERSION },\n        },\n      });\n    });\n  };\n}\n\nconst forkCodexThread = createCodexAppServerForker({\n  spawnServer() {\n    return spawn(process.execPath, [codexCliScriptPath(), \"app-server\", \"--stdio\"], {\n      env: { ...process.env, CODEX_HOME: hostedCodexHomePath() },\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n      // Background stdio server — no console window on Windows. Ignored on POSIX.\n      windowsHide: true,\n    });\n  },\n  findRolloutPath: latestCodexRolloutPath,\n  timeoutMs: 15_000,\n});\n\nexport async function forkCodexSession(parentThreadId: string): Promise<CodexAppServerForkResult> {\n  return await forkCodexThread(parentThreadId);\n}\n",
+    "import { type ChildProcess, spawn } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport {\n  chmodSync,\n  copyFileSync,\n  existsSync,\n  mkdtempSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { NEGOTIUM_VERSION } from \"#version\";\n\ntype CodexModel = Record<string, unknown>;\ntype CodexModelCache = {\n  client_version?: unknown;\n  models?: unknown;\n};\n\nconst moduleRequire = createRequire(import.meta.url);\nconst codexSdkPackagePath = moduleRequire.resolve(\"@openai/codex-sdk/package.json\");\nconst codexSdkRequire = createRequire(codexSdkPackagePath);\nconst bundledCodexPackagePath = codexSdkRequire.resolve(\"@openai/codex/package.json\");\n\nfunction readPackageVersion(packageJsonPath: string): string {\n  const parsed = JSON.parse(readFileSync(packageJsonPath, \"utf8\")) as { version?: unknown };\n  if (typeof parsed.version !== \"string\" || !parsed.version.trim()) {\n    throw new Error(`Codex package has no valid version: ${packageJsonPath}`);\n  }\n  return parsed.version;\n}\n\nexport const BUNDLED_CODEX_VERSION = readPackageVersion(bundledCodexPackagePath);\nconst SAFE_BUNDLED_CODEX_VERSION = BUNDLED_CODEX_VERSION.replace(/[^a-zA-Z0-9._-]/g, \"_\");\nconst NEGOTIUM_MODEL_CACHE = `negotium-models-cache-${SAFE_BUNDLED_CODEX_VERSION}.json`;\nconst NEGOTIUM_MODEL_CATALOG = `negotium-model-catalog-${SAFE_BUNDLED_CODEX_VERSION}.json`;\n\nexport function codexCliScriptPath(): string {\n  return join(dirname(bundledCodexPackagePath), \"bin\", \"codex.js\");\n}\n\nfunction parseCodexModelCache(contents: string, sourcePath: string): CodexModelCache {\n  let parsed: CodexModelCache;\n  try {\n    parsed = JSON.parse(contents) as CodexModelCache;\n  } catch (error) {\n    throw new Error(`Codex model cache is invalid JSON: ${sourcePath}`, { cause: error });\n  }\n  if (!Array.isArray(parsed.models) || parsed.models.length === 0) {\n    throw new Error(`Codex model cache has no models: ${sourcePath}`);\n  }\n  return parsed;\n}\n\nfunction readCodexModelCache(cachePath: string): {\n  contents: string;\n  parsed: CodexModelCache;\n} {\n  const contents = readFileSync(cachePath, \"utf8\");\n  return { contents, parsed: parseCodexModelCache(contents, cachePath) };\n}\n\nfunction readCompatibleCodexModelCache(cachePath: string): {\n  contents: string;\n  parsed: CodexModelCache;\n} {\n  const cache = readCodexModelCache(cachePath);\n  if (cache.parsed.client_version !== BUNDLED_CODEX_VERSION) {\n    const found =\n      typeof cache.parsed.client_version === \"string\"\n        ? cache.parsed.client_version\n        : \"missing or invalid\";\n    throw new Error(\n      `Codex model cache version ${found} does not match Negotium's bundled Codex ${BUNDLED_CODEX_VERSION}: ${cachePath}`,\n    );\n  }\n  return cache;\n}\n\nfunction writePrivateFileAtomic(path: string, contents: string): void {\n  if (existsSync(path) && readFileSync(path, \"utf8\") === contents) return;\n\n  const tempPath = `${path}.${process.pid}.${randomUUID()}.tmp`;\n  try {\n    writeFileSync(tempPath, contents, { encoding: \"utf8\", mode: 0o600 });\n    renameSync(tempPath, path);\n    chmodSync(path, 0o600);\n  } finally {\n    try {\n      unlinkSync(tempPath);\n    } catch {\n      // renameSync normally consumed the temporary file.\n    }\n  }\n}\n\nexport function bundledCodexModelCachePath(authFilePath: string): string {\n  return join(dirname(authFilePath), NEGOTIUM_MODEL_CACHE);\n}\n\nasync function bootstrapCodexModelCache(codexHome: string, cachePath: string): Promise<void> {\n  const child = spawn(process.execPath, [codexCliScriptPath(), \"app-server\", \"--stdio\"], {\n    env: { ...process.env, CODEX_HOME: codexHome },\n    stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    // Background stdio server — no console window on Windows. Ignored on POSIX.\n    windowsHide: true,\n  });\n\n  const refreshed = new Promise<void>((resolve, reject) => {\n    let settled = false;\n    let stdoutBuffer = \"\";\n    let stderr = \"\";\n    const timer = setTimeout(\n      () => finish(new Error(\"timed out while refreshing the Codex model catalog\")),\n      15_000,\n    );\n\n    const finish = (error?: Error) => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      try {\n        child.stdin.end();\n        child.kill();\n      } catch {\n        // The app server may already have exited after stdin closed.\n      }\n      if (error) reject(error);\n      else if (!existsSync(cachePath)) reject(new Error(\"Codex did not create its model cache\"));\n      else resolve();\n    };\n\n    const send = (message: Record<string, unknown>) => {\n      child.stdin.write(`${JSON.stringify(message)}\\n`);\n    };\n\n    child.stderr.on(\"data\", (chunk) => {\n      if (stderr.length < 4_096) stderr += String(chunk);\n    });\n    child.on(\"error\", (error) => finish(error));\n    child.on(\"exit\", (code, signal) => {\n      if (!settled) {\n        finish(\n          new Error(\n            `Codex model catalog refresh exited with ${signal ? `signal ${signal}` : `code ${code ?? 1}`}${stderr.trim() ? `: ${stderr.trim()}` : \"\"}`,\n          ),\n        );\n      }\n    });\n    child.stdout.on(\"data\", (chunk) => {\n      stdoutBuffer += String(chunk);\n      for (;;) {\n        const newline = stdoutBuffer.indexOf(\"\\n\");\n        if (newline < 0) break;\n        const line = stdoutBuffer.slice(0, newline);\n        stdoutBuffer = stdoutBuffer.slice(newline + 1);\n        let message: { id?: number; error?: { message?: string } };\n        try {\n          message = JSON.parse(line) as typeof message;\n        } catch {\n          continue;\n        }\n        if (message.id === 1) {\n          if (message.error) {\n            finish(new Error(message.error.message || \"Codex initialization failed\"));\n            return;\n          }\n          send({ method: \"initialized\" });\n          send({ id: 2, method: \"model/list\", params: { includeHidden: true } });\n        } else if (message.id === 2) {\n          if (message.error) {\n            finish(new Error(message.error.message || \"Codex model listing failed\"));\n          } else {\n            finish();\n          }\n          return;\n        }\n      }\n    });\n\n    send({\n      id: 1,\n      method: \"initialize\",\n      params: {\n        clientInfo: { name: \"negotium\", version: NEGOTIUM_VERSION },\n        capabilities: { experimentalApi: true },\n      },\n    });\n  });\n\n  try {\n    await refreshed;\n  } finally {\n    // `child.kill()` only signals. The caller deletes CODEX_HOME right after we\n    // return, and Windows cannot delete a directory the child still holds open\n    // (EBUSY), so wait for the process to actually exit first.\n    await waitForChildExit(child, CODEX_BOOTSTRAP_EXIT_WAIT_MS);\n  }\n}\n\nconst CODEX_BOOTSTRAP_EXIT_WAIT_MS = 3_000;\n\nfunction waitForChildExit(child: ChildProcess, timeoutMs: number): Promise<void> {\n  if (child.exitCode !== null || child.signalCode !== null) return Promise.resolve();\n  return new Promise((resolve) => {\n    const timer = setTimeout(resolve, timeoutMs);\n    timer.unref?.();\n    child.once(\"exit\", () => {\n      clearTimeout(timer);\n      resolve();\n    });\n  });\n}\n\n/**\n * Remove the temporary CODEX_HOME. On Windows a just-exited child (or an\n * antivirus scan of the files it wrote) can keep the directory busy for a\n * moment, so retry, and never let cleanup of a throwaway directory fail a turn\n * whose result was already read. POSIX keeps the original behaviour: unlinking\n * open files works there, and a genuine failure still surfaces.\n */\nfunction removeIsolatedCodexHome(dir: string): void {\n  if (process.platform !== \"win32\") {\n    rmSync(dir, { recursive: true, force: true });\n    return;\n  }\n  try {\n    rmSync(dir, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 });\n  } catch {\n    // Best effort: the OS temp cleaner will reclaim it.\n  }\n}\n\nasync function bootstrapIsolatedCodexModelCache(\n  authFilePath: string,\n  bootstrap: (codexHome: string, cachePath: string) => Promise<void>,\n): Promise<string> {\n  const sourceHome = dirname(authFilePath);\n  const isolatedHome = mkdtempSync(join(tmpdir(), \"negotium-codex-models-\"));\n  const isolatedCachePath = join(isolatedHome, \"models_cache.json\");\n\n  try {\n    const isolatedAuthPath = join(isolatedHome, \"auth.json\");\n    copyFileSync(authFilePath, isolatedAuthPath);\n    chmodSync(isolatedAuthPath, 0o600);\n\n    // Preserve custom provider configuration while keeping the bundled CLI's\n    // cache write completely outside the user's shared CODEX_HOME.\n    const sourceConfigPath = join(sourceHome, \"config.toml\");\n    if (existsSync(sourceConfigPath)) {\n      const isolatedConfigPath = join(isolatedHome, \"config.toml\");\n      copyFileSync(sourceConfigPath, isolatedConfigPath);\n      chmodSync(isolatedConfigPath, 0o600);\n    }\n\n    await bootstrap(isolatedHome, isolatedCachePath);\n    return readCompatibleCodexModelCache(isolatedCachePath).contents;\n  } finally {\n    removeIsolatedCodexHome(isolatedHome);\n  }\n}\n\nexport async function ensureCodexModelCache(\n  authFilePath: string,\n  bootstrap: (codexHome: string, cachePath: string) => Promise<void> = bootstrapCodexModelCache,\n): Promise<string> {\n  const codexHome = dirname(authFilePath);\n  const configuredCachePath = process.env.NEGOTIUM_CODEX_MODELS_CACHE_FILE;\n  if (configuredCachePath) {\n    if (!existsSync(configuredCachePath)) {\n      throw new Error(`Configured Codex model cache does not exist: ${configuredCachePath}`);\n    }\n    readCompatibleCodexModelCache(configuredCachePath);\n    return configuredCachePath;\n  }\n\n  // The global Codex CLI owns models_cache.json and may update it to a schema\n  // newer than the SDK bundled by Negotium. Snapshot a cache generated for our\n  // exact bundled version so later global CLI updates cannot break turns.\n  const bundledCachePath = bundledCodexModelCachePath(authFilePath);\n  const sharedCachePath = join(codexHome, \"models_cache.json\");\n  if (existsSync(sharedCachePath)) {\n    try {\n      const shared = readCompatibleCodexModelCache(sharedCachePath);\n      // Keep model metadata fresh while the global CLI remains compatible.\n      writePrivateFileAtomic(bundledCachePath, shared.contents);\n      return bundledCachePath;\n    } catch {\n      // A compatible private snapshot is safer than failing because another\n      // process briefly exposed an incomplete shared-cache write.\n    }\n  }\n\n  if (existsSync(bundledCachePath)) {\n    try {\n      readCompatibleCodexModelCache(bundledCachePath);\n      return bundledCachePath;\n    } catch {\n      // Re-bootstrap below instead of passing a corrupt or version-mismatched\n      // private snapshot into this SDK version.\n    }\n  }\n\n  const refreshedContents = await bootstrapIsolatedCodexModelCache(authFilePath, bootstrap);\n  writePrivateFileAtomic(bundledCachePath, refreshedContents);\n  return bundledCachePath;\n}\n\n/**\n * Codex can resolve model metadata before `features.multi_agent=false`, so a\n * model-advertised v1/v2 value may still register native collaboration tools.\n * Feed Codex an authoritative copy of its own catalog with only that field\n * disabled. Runtime MCP delegation remains available independently.\n */\nexport function writeCodexCatalogWithNativeMultiAgentDisabled(\n  authFilePath: string,\n  sourcePath: string,\n): string {\n  const codexHome = dirname(authFilePath);\n  const outputPath = join(codexHome, NEGOTIUM_MODEL_CATALOG);\n\n  const parsed = readCodexModelCache(sourcePath).parsed;\n\n  const models = (parsed.models as unknown[]).map((model, index): CodexModel => {\n    if (!model || typeof model !== \"object\" || Array.isArray(model)) {\n      throw new Error(`Codex model cache entry ${index} is invalid: ${sourcePath}`);\n    }\n    return { ...(model as CodexModel), multi_agent_version: \"disabled\" };\n  });\n  const contents = `${JSON.stringify({ models }, null, 2)}\\n`;\n  writePrivateFileAtomic(outputPath, contents);\n  return outputPath;\n}\n",
+    "export const NEGOTIUM_VERSION = \"0.19.1\";\n"
+  ],
+  "mappings": ";;;;;;;AAAA;;;ACEA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA;AAEA;;;ACfO,IAAM,mBAAmB;;;ADwBhC,IAAM,gBAAgB,cAAc,YAAY,GAAG;AACnD,IAAM,sBAAsB,cAAc,QAAQ,gCAAgC;AAClF,IAAM,kBAAkB,cAAc,mBAAmB;AACzD,IAAM,0BAA0B,gBAAgB,QAAQ,4BAA4B;AAEpF,SAAS,kBAAkB,CAAC,iBAAiC;AAAA,EAC3D,MAAM,SAAS,KAAK,MAAM,aAAa,iBAAiB,MAAM,CAAC;AAAA,EAC/D,IAAI,OAAO,OAAO,YAAY,YAAY,CAAC,OAAO,QAAQ,KAAK,GAAG;AAAA,IAChE,MAAM,IAAI,MAAM,uCAAuC,iBAAiB;AAAA,EAC1E;AAAA,EACA,OAAO,OAAO;AAAA;AAGT,IAAM,wBAAwB,mBAAmB,uBAAuB;AAC/E,IAAM,6BAA6B,sBAAsB,QAAQ,oBAAoB,GAAG;AACxF,IAAM,uBAAuB,yBAAyB;AACtD,IAAM,yBAAyB,0BAA0B;AAElD,SAAS,kBAAkB,GAAW;AAAA,EAC3C,OAAO,KAAK,QAAQ,uBAAuB,GAAG,OAAO,UAAU;AAAA;;;ADpB1D,SAAS,0BAA0B,CAAC,MAA8B;AAAA,EACvE,OAAO,OAAO,mBAA8D;AAAA,IAC1E,MAAM,QAAQ,KAAK,YAAY;AAAA,IAE/B,OAAO,MAAM,IAAI,QAAkC,CAAC,SAAS,WAAW;AAAA,MACtE,IAAI,UAAU;AAAA,MACd,IAAI,eAAe;AAAA,MACnB,IAAI,SAAS;AAAA,MACb,MAAM,QAAQ,WACZ,MAAM,OAAO,IAAI,MAAM,6BAA6B,CAAC,GACrD,KAAK,SACP;AAAA,MAEA,MAAM,SAAS,CAAC,OAAe,WAAsC;AAAA,QACnE,IAAI;AAAA,UAAS;AAAA,QACb,UAAU;AAAA,QACV,aAAa,KAAK;AAAA,QAClB,IAAI;AAAA,UACF,MAAM,MAAM,IAAI;AAAA,UAChB,MAAM,KAAK;AAAA,UACX,MAAM;AAAA,QAGR,IAAI;AAAA,UAAO,OAAO,KAAK;AAAA,QAClB,SAAI;AAAA,UAAQ,QAAQ,MAAM;AAAA,QAC1B;AAAA,iBAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA;AAAA,MAG/D,MAAM,OAAO,CAAC,YAAqC;AAAA,QACjD,MAAM,MAAM,MAAM,GAAG,KAAK,UAAU,OAAO;AAAA,CAAK;AAAA;AAAA,MAGlD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU;AAAA,QACjC,IAAI,OAAO,SAAS;AAAA,UAAO,UAAU,OAAO,KAAK;AAAA,OAClD;AAAA,MACD,MAAM,GAAG,SAAS,CAAC,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1C,MAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AAAA,QACjC,IAAI;AAAA,UAAS;AAAA,QACb,MAAM,SAAS,SAAS,UAAU,WAAW,QAAQ,QAAQ;AAAA,QAC7D,OACE,IAAI,MACF,gCAAgC,SAAS,OAAO,KAAK,IAAI,KAAK,OAAO,KAAK,MAAM,IAClF,CACF;AAAA,OACD;AAAA,MACD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU;AAAA,QACjC,gBAAgB,OAAO,KAAK;AAAA,QAC5B,UAAS;AAAA,UACP,MAAM,UAAU,aAAa,QAAQ;AAAA,CAAI;AAAA,UACzC,IAAI,UAAU;AAAA,YAAG;AAAA,UACjB,MAAM,OAAO,aAAa,MAAM,GAAG,OAAO;AAAA,UAC1C,eAAe,aAAa,MAAM,UAAU,CAAC;AAAA,UAC7C,IAAI;AAAA,UACJ,IAAI;AAAA,YACF,UAAU,KAAK,MAAM,IAAI;AAAA,YACzB,MAAM;AAAA,YACN;AAAA;AAAA,UAGF,IAAI,QAAQ,OAAO,GAAG;AAAA,YACpB,IAAI,QAAQ,OAAO;AAAA,cACjB,OAAO,IAAI,MAAM,OAAO,QAAQ,MAAM,WAAW,6BAA6B,CAAC,CAAC;AAAA,cAChF;AAAA,YACF;AAAA,YACA,KAAK,EAAE,QAAQ,cAAc,CAAC;AAAA,YAC9B,KAAK,EAAE,IAAI,GAAG,QAAQ,eAAe,QAAQ,EAAE,UAAU,eAAe,EAAE,CAAC;AAAA,YAC3E;AAAA,UACF;AAAA,UACA,IAAI,QAAQ,OAAO;AAAA,YAAG;AAAA,UACtB,IAAI,QAAQ,OAAO;AAAA,YACjB,OAAO,IAAI,MAAM,OAAO,QAAQ,MAAM,WAAW,0BAA0B,CAAC,CAAC;AAAA,YAC7E;AAAA,UACF;AAAA,UACA,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAAA,UACvC,IAAI,OAAO,WAAW,YAAY,CAAC,QAAQ;AAAA,YACzC,OAAO,IAAI,MAAM,yCAAyC,CAAC;AAAA,YAC3D;AAAA,UACF;AAAA,UACA,MAAM,cAAc,KAAK,gBAAgB,MAAM;AAAA,UAC/C,IAAI,CAAC,aAAa;AAAA,YAChB,OAAO,IAAI,MAAM,+CAA+C,QAAQ,CAAC;AAAA,YACzE;AAAA,UACF;AAAA,UACA,OAAO,WAAW,EAAE,QAAQ,YAAY,CAAC;AAAA,UACzC;AAAA,QACF;AAAA,OACD;AAAA,MAED,KAAK;AAAA,QACH,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,YAAY,EAAE,MAAM,YAAY,SAAS,iBAAiB;AAAA,QAC5D;AAAA,MACF,CAAC;AAAA,KACF;AAAA;AAAA;AAIL,IAAM,kBAAkB,2BAA2B;AAAA,EACjD,WAAW,GAAG;AAAA,IACZ,OAAO,MAAM,QAAQ,UAAU,CAAC,mBAAmB,GAAG,cAAc,SAAS,GAAG;AAAA,MAC9E,KAAK,KAAK,QAAQ,KAAK,YAAY,oBAAoB,EAAE;AAAA,MACzD,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAE9B,aAAa;AAAA,IACf,CAAC;AAAA;AAAA,EAEH,iBAAiB;AAAA,EACjB,WAAW;AACb,CAAC;AAED,eAAsB,gBAAgB,CAAC,gBAA2D;AAAA,EAChG,OAAO,MAAM,gBAAgB,cAAc;AAAA;",
+  "debugId": "BBE91265DAC3F7C064756E2164756E21",
+  "names": []
+}