octoflow-core 1.0.0

package/dist/adapters/agents/backends/codex-cli.js

@@ -0,0 +1,195 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { sanitizePath } from "../../../utils/sanitize.js";
+import { APPROVAL_POSTURE_CODEX_CLI } from "../approval-posture.js";
+import { buildCliExecutionPlan } from "./cli-runner.js";
+import {
+  getAdditionalWritableRoots,
+  mapCodexApprovalPolicy,
+  mapCodexSandboxMode
+} from "./security-flags.js";
+import {
+  BACKEND_METADATA,
+  createCliBackendBase,
+  getCliVersion,
+  isCliInstalledAsync,
+  readCliConfigModel
+} from "./shared.js";
+const META = BACKEND_METADATA["codex-cli"];
+const CLI_CMD = META.cli ?? "codex";
+const CAPABILITIES = {
+  streaming: true,
+  sessionPersistence: true,
+  workingDirectory: true,
+  forceMode: true,
+  // Codex has no --system-prompt flag; the system prompt is delivered via
+  // the prompt envelope on stdin.
+  systemPrompt: false,
+  planning: true,
+  tools: true,
+  structuredOutput: true,
+  mcp: true,
+  approvalCallback: APPROVAL_POSTURE_CODEX_CLI
+};
+function writeOutputSchemaFile(schema) {
+  const serialized = typeof schema === "string" ? schema : JSON.stringify(schema);
+  const hash = crypto.createHash("sha1").update(serialized).digest("hex").slice(0, 12);
+  const filePath = path.join(os.tmpdir(), `octoflow-codex-schema-${hash}.json`);
+  fs.writeFileSync(filePath, serialized, "utf8");
+  return filePath;
+}
+function writeMcpToCodexConfig(mcpConfigPath, workspaceDir) {
+  let mcpJson;
+  try {
+    mcpJson = JSON.parse(
+      fs.readFileSync(mcpConfigPath, "utf8")
+    );
+  } catch {
+    return void 0;
+  }
+  const servers = mcpJson.mcpServers ?? {};
+  if (Object.keys(servers).length === 0) return void 0;
+  const lines = [];
+  for (const [name, srv] of Object.entries(servers)) {
+    lines.push(`[mcp.servers.${name}]`);
+    if (srv.command) lines.push(`command = ${JSON.stringify(srv.command)}`);
+    if (srv.args?.length) {
+      lines.push(
+        `args = [${srv.args.map((a) => JSON.stringify(a)).join(", ")}]`
+      );
+    }
+    if (srv.env && Object.keys(srv.env).length > 0) {
+      lines.push(`[mcp.servers.${name}.env]`);
+      for (const [k, v] of Object.entries(srv.env)) {
+        lines.push(`${k} = ${JSON.stringify(v)}`);
+      }
+    }
+    lines.push("");
+  }
+  const codexDir = path.join(workspaceDir, ".codex");
+  const tomlPath = path.join(codexDir, "config.toml");
+  try {
+    fs.mkdirSync(codexDir, { recursive: true });
+    fs.writeFileSync(tomlPath, lines.join("\n"), "utf8");
+  } catch {
+    return void 0;
+  }
+  return () => {
+    try {
+      fs.unlinkSync(tomlPath);
+    } catch {
+    }
+    return Promise.resolve();
+  };
+}
+const permission = ({ policy }) => {
+  const approvalPolicy = mapCodexApprovalPolicy(policy);
+  if (approvalPolicy && approvalPolicy !== "never") {
+    return { globalArgs: ["--ask-for-approval", approvalPolicy] };
+  }
+  if (approvalPolicy === "never") {
+    return { args: ["--full-auto"] };
+  }
+  return void 0;
+};
+const sandbox = ({ request, policy }) => {
+  const mode = request.readOnly ? "read-only" : mapCodexSandboxMode(policy);
+  return mode ? { globalArgs: ["--sandbox", mode] } : void 0;
+};
+const workspace = ({ workspace: workspace2 }) => workspace2 ? { globalArgs: ["-C", workspace2] } : void 0;
+const extraDirs = ({ policy }) => {
+  const args = [];
+  for (const directory of getAdditionalWritableRoots(policy)) {
+    const sanitized = sanitizePath(directory);
+    if (sanitized) args.push("--add-dir", sanitized);
+  }
+  return args.length > 0 ? { globalArgs: args } : void 0;
+};
+const webSearchHint = ({ request }) => {
+  const probe = `${request.systemPrompt ?? ""} ${request.prompt}`;
+  if (/web[_-]?search|search.*web|research.*online/i.test(probe)) {
+    return { globalArgs: ["--search"] };
+  }
+  return void 0;
+};
+const session = ({ request }) => request.isResume && request.sessionId ? { args: ["resume", request.sessionId] } : void 0;
+const streamFormat = () => ({ args: ["--json"] });
+const mcp = ({ request, workspace: workspace2 }) => {
+  if (!request.mcpConfigPath || !workspace2) return void 0;
+  const cleanup = writeMcpToCodexConfig(request.mcpConfigPath, workspace2);
+  return cleanup ? { cleanup } : void 0;
+};
+const outputSchema = ({ request }) => {
+  if (request.outputSchema === void 0) return void 0;
+  const schemaFile = writeOutputSchemaFile(request.outputSchema);
+  return {
+    args: ["--output-schema", schemaFile],
+    cleanup: async () => {
+      try {
+        await fs.promises.unlink(schemaFile);
+      } catch {
+      }
+    }
+  };
+};
+const model = ({ request }) => {
+  const m = request.requestedModel || request.configModel;
+  return m ? { args: ["-m", m] } : void 0;
+};
+const ephemeral = ({ request }) => request.ephemeral ? { globalArgs: ["--ephemeral"] } : void 0;
+const skipGitRepoCheck = ({ request }) => request.skipGitRepoCheck ? { globalArgs: ["--skip-git-repo-check"] } : void 0;
+const stdinMarker = () => ({ args: ["-"] });
+const CODEX_DESCRIPTOR = {
+  name: "codex-cli",
+  streamParserName: "codex",
+  subcommand: "exec",
+  // The exec subcommand emits one event per line; --json picks the
+  // structured stream parser that the runner consumes.
+  defaultStdinIsEnvelope: true,
+  capabilities: CAPABILITIES,
+  features: {
+    permission,
+    sandbox,
+    workspace,
+    extraDirs,
+    webSearchHint,
+    session,
+    streamFormat,
+    mcp,
+    model,
+    outputSchema,
+    ephemeral,
+    skipGitRepoCheck,
+    stdinMarker
+  }
+};
+function createCodexBackend() {
+  return {
+    ...createCliBackendBase(META, CAPABILITIES, "codex", {
+      resolveInstalled: () => isCliInstalledAsync(CLI_CMD),
+      resolveVersion: () => getCliVersion(`${CLI_CMD} --version`),
+      // Read model from ~/.codex/config.toml so the bridge honours whatever
+      // the user has configured (e.g. gpt-5.5) rather than guessing.
+      resolveConfigModel: () => readCliConfigModel("codex-cli")
+    }),
+    validateModel(modelName) {
+      return typeof modelName === "string" && modelName.length > 0;
+    },
+    generateSessionId() {
+      return "";
+    },
+    buildExecutionPlan(request) {
+      return buildCliExecutionPlan(CLI_CMD, CODEX_DESCRIPTOR, request);
+    },
+    extractSessionId(_output) {
+      return null;
+    }
+  };
+}
+export {
+  CODEX_DESCRIPTOR,
+  createCodexBackend
+};
+//# sourceMappingURL=codex-cli.js.map

package/dist/adapters/agents/backends/codex-cli.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/adapters/agents/backends/codex-cli.ts"],
+  "sourcesContent": ["import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nimport type {\n  Backend,\n  BackendCapabilities,\n} from '../../../domain/contracts/backends.js';\nimport type {\n  CliBackendDescriptor,\n  CliFeatureHandler,\n} from '../../../domain/contracts/cli-backends.js';\nimport { sanitizePath } from '../../../utils/sanitize.js';\nimport { APPROVAL_POSTURE_CODEX_CLI } from '../approval-posture.js';\nimport { buildCliExecutionPlan } from './cli-runner.js';\nimport {\n  getAdditionalWritableRoots,\n  mapCodexApprovalPolicy,\n  mapCodexSandboxMode,\n} from './security-flags.js';\nimport {\n  BACKEND_METADATA,\n  createCliBackendBase,\n  getCliVersion,\n  isCliInstalledAsync,\n  readCliConfigModel,\n} from './shared.js';\n\nconst META = BACKEND_METADATA['codex-cli'];\nconst CLI_CMD = META.cli ?? 'codex';\n\nconst CAPABILITIES: BackendCapabilities = {\n  streaming: true,\n  sessionPersistence: true,\n  workingDirectory: true,\n  forceMode: true,\n  // Codex has no --system-prompt flag; the system prompt is delivered via\n  // the prompt envelope on stdin.\n  systemPrompt: false,\n  planning: true,\n  tools: true,\n  structuredOutput: true,\n  mcp: true,\n  approvalCallback: APPROVAL_POSTURE_CODEX_CLI,\n};\n\nfunction writeOutputSchemaFile(schema: object | string): string {\n  const serialized =\n    typeof schema === 'string' ? schema : JSON.stringify(schema);\n  const hash = crypto\n    .createHash('sha1')\n    .update(serialized)\n    .digest('hex')\n    .slice(0, 12);\n  const filePath = path.join(os.tmpdir(), `octoflow-codex-schema-${hash}.json`);\n  fs.writeFileSync(filePath, serialized, 'utf8');\n  return filePath;\n}\n\n/**\n * Codex reads `<cwd>/.codex/config.toml` for project-level config when run\n * with `-C <cwd>`. Codex has no `--mcp-config` flag, so OctoFlow's MCP JSON is\n * translated into TOML and dropped at the project-level path. Returns a\n * cleanup function that removes the written file.\n */\nfunction writeMcpToCodexConfig(\n  mcpConfigPath: string,\n  workspaceDir: string\n): (() => Promise<void>) | undefined {\n  let mcpJson: {\n    mcpServers?: Record<\n      string,\n      { command?: string; args?: string[]; env?: Record<string, string> }\n    >;\n  };\n  try {\n    mcpJson = JSON.parse(\n      fs.readFileSync(mcpConfigPath, 'utf8')\n    ) as typeof mcpJson;\n  } catch {\n    return undefined;\n  }\n  const servers = mcpJson.mcpServers ?? {};\n  if (Object.keys(servers).length === 0) return undefined;\n\n  const lines: string[] = [];\n  for (const [name, srv] of Object.entries(servers)) {\n    lines.push(`[mcp.servers.${name}]`);\n    if (srv.command) lines.push(`command = ${JSON.stringify(srv.command)}`);\n    if (srv.args?.length) {\n      lines.push(\n        `args = [${srv.args.map((a) => JSON.stringify(a)).join(', ')}]`\n      );\n    }\n    if (srv.env && Object.keys(srv.env).length > 0) {\n      lines.push(`[mcp.servers.${name}.env]`);\n      for (const [k, v] of Object.entries(srv.env)) {\n        lines.push(`${k} = ${JSON.stringify(v)}`);\n      }\n    }\n    lines.push('');\n  }\n\n  const codexDir = path.join(workspaceDir, '.codex');\n  const tomlPath = path.join(codexDir, 'config.toml');\n  try {\n    fs.mkdirSync(codexDir, { recursive: true });\n    fs.writeFileSync(tomlPath, lines.join('\\n'), 'utf8');\n  } catch {\n    return undefined;\n  }\n\n  return () => {\n    try {\n      fs.unlinkSync(tomlPath);\n    } catch {\n      /* ignore */\n    }\n    return Promise.resolve();\n  };\n}\n\nconst permission: CliFeatureHandler = ({ policy }) => {\n  const approvalPolicy = mapCodexApprovalPolicy(policy);\n  // 'never' is delivered via --full-auto (subsumes approval+sandbox in one).\n  if (approvalPolicy && approvalPolicy !== 'never') {\n    return { globalArgs: ['--ask-for-approval', approvalPolicy] };\n  }\n  if (approvalPolicy === 'never') {\n    // Codex exposes --full-auto on the exec subcommand, not as a global flag.\n    return { args: ['--full-auto'] };\n  }\n  return undefined;\n};\n\nconst sandbox: CliFeatureHandler = ({ request, policy }) => {\n  const mode = request.readOnly ? 'read-only' : mapCodexSandboxMode(policy);\n  return mode ? { globalArgs: ['--sandbox', mode] } : undefined;\n};\n\nconst workspace: CliFeatureHandler = ({ workspace }) =>\n  workspace ? { globalArgs: ['-C', workspace] } : undefined;\n\nconst extraDirs: CliFeatureHandler = ({ policy }) => {\n  const args: string[] = [];\n  for (const directory of getAdditionalWritableRoots(policy)) {\n    const sanitized = sanitizePath(directory);\n    if (sanitized) args.push('--add-dir', sanitized);\n  }\n  return args.length > 0 ? { globalArgs: args } : undefined;\n};\n\nconst webSearchHint: CliFeatureHandler = ({ request }) => {\n  const probe = `${request.systemPrompt ?? ''} ${request.prompt}`;\n  if (/web[_-]?search|search.*web|research.*online/i.test(probe)) {\n    return { globalArgs: ['--search'] };\n  }\n  return undefined;\n};\n\nconst session: CliFeatureHandler = ({ request }) =>\n  request.isResume && request.sessionId\n    ? { args: ['resume', request.sessionId] }\n    : undefined;\n\nconst streamFormat: CliFeatureHandler = () => ({ args: ['--json'] });\n\nconst mcp: CliFeatureHandler = ({ request, workspace }) => {\n  if (!request.mcpConfigPath || !workspace) return undefined;\n  const cleanup = writeMcpToCodexConfig(request.mcpConfigPath, workspace);\n  return cleanup ? { cleanup } : undefined;\n};\n\nconst outputSchema: CliFeatureHandler = ({ request }) => {\n  if (request.outputSchema === undefined) return undefined;\n  const schemaFile = writeOutputSchemaFile(request.outputSchema);\n  return {\n    args: ['--output-schema', schemaFile],\n    cleanup: async () => {\n      try {\n        await fs.promises.unlink(schemaFile);\n      } catch {\n        /* idempotent */\n      }\n    },\n  };\n};\n\n// Model resolution priority:\n//   1. requestedModel \u2014 set by the caller via createAgent({ model }) or sendMessage({ model })\n//   2. configModel    \u2014 read from ~/.codex/config.toml at backend creation time\n//   3. (no flag)      \u2014 codex selects the account-level default (required for ChatGPT accounts)\n//\n// ChatGPT accounts don't accept specific model IDs; omitting -m lets codex\n// pick its own default. API-key accounts with a configured model get the right\n// model without the caller needing to pass it explicitly.\nconst model: CliFeatureHandler = ({ request }) => {\n  const m = request.requestedModel || request.configModel;\n  return m ? { args: ['-m', m] } : undefined;\n};\n\nconst ephemeral: CliFeatureHandler = ({ request }) =>\n  request.ephemeral ? { globalArgs: ['--ephemeral'] } : undefined;\n\nconst skipGitRepoCheck: CliFeatureHandler = ({ request }) =>\n  request.skipGitRepoCheck\n    ? { globalArgs: ['--skip-git-repo-check'] }\n    : undefined;\n\nconst stdinMarker: CliFeatureHandler = () => ({ args: ['-'] });\n\nexport const CODEX_DESCRIPTOR: CliBackendDescriptor = {\n  name: 'codex-cli',\n  streamParserName: 'codex',\n  subcommand: 'exec',\n  // The exec subcommand emits one event per line; --json picks the\n  // structured stream parser that the runner consumes.\n  defaultStdinIsEnvelope: true,\n  capabilities: CAPABILITIES,\n  features: {\n    permission,\n    sandbox,\n    workspace,\n    extraDirs,\n    webSearchHint,\n    session,\n    streamFormat,\n    mcp,\n    model,\n    outputSchema,\n    ephemeral,\n    skipGitRepoCheck,\n    stdinMarker,\n  },\n};\n\nexport function createCodexBackend(): Backend {\n  return {\n    ...createCliBackendBase(META, CAPABILITIES, 'codex', {\n      resolveInstalled: () => isCliInstalledAsync(CLI_CMD),\n      resolveVersion: () => getCliVersion(`${CLI_CMD} --version`),\n      // Read model from ~/.codex/config.toml so the bridge honours whatever\n      // the user has configured (e.g. gpt-5.5) rather than guessing.\n      resolveConfigModel: () => readCliConfigModel('codex-cli'),\n    }),\n\n    validateModel(modelName: string): boolean {\n      return typeof modelName === 'string' && modelName.length > 0;\n    },\n\n    generateSessionId(): string {\n      return '';\n    },\n\n    buildExecutionPlan(request) {\n      return buildCliExecutionPlan(CLI_CMD, CODEX_DESCRIPTOR, request);\n    },\n\n    extractSessionId(_output: string): string | null {\n      return null;\n    },\n  };\n}\n"],
+  "mappings": "AAAA,OAAO,YAAY;AACnB,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AAUjB,SAAS,oBAAoB;AAC7B,SAAS,kCAAkC;AAC3C,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,OAAO,iBAAiB,WAAW;AACzC,MAAM,UAAU,KAAK,OAAO;AAE5B,MAAM,eAAoC;AAAA,EACxC,WAAW;AAAA,EACX,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,WAAW;AAAA;AAAA;AAAA,EAGX,cAAc;AAAA,EACd,UAAU;AAAA,EACV,OAAO;AAAA,EACP,kBAAkB;AAAA,EAClB,KAAK;AAAA,EACL,kBAAkB;AACpB;AAEA,SAAS,sBAAsB,QAAiC;AAC9D,QAAM,aACJ,OAAO,WAAW,WAAW,SAAS,KAAK,UAAU,MAAM;AAC7D,QAAM,OAAO,OACV,WAAW,MAAM,EACjB,OAAO,UAAU,EACjB,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AACd,QAAM,WAAW,KAAK,KAAK,GAAG,OAAO,GAAG,yBAAyB,IAAI,OAAO;AAC5E,KAAG,cAAc,UAAU,YAAY,MAAM;AAC7C,SAAO;AACT;AAQA,SAAS,sBACP,eACA,cACmC;AACnC,MAAI;AAMJ,MAAI;AACF,cAAU,KAAK;AAAA,MACb,GAAG,aAAa,eAAe,MAAM;AAAA,IACvC;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,UAAU,QAAQ,cAAc,CAAC;AACvC,MAAI,OAAO,KAAK,OAAO,EAAE,WAAW,EAAG,QAAO;AAE9C,QAAM,QAAkB,CAAC;AACzB,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjD,UAAM,KAAK,gBAAgB,IAAI,GAAG;AAClC,QAAI,IAAI,QAAS,OAAM,KAAK,aAAa,KAAK,UAAU,IAAI,OAAO,CAAC,EAAE;AACtE,QAAI,IAAI,MAAM,QAAQ;AACpB,YAAM;AAAA,QACJ,WAAW,IAAI,KAAK,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,MAC9D;AAAA,IACF;AACA,QAAI,IAAI,OAAO,OAAO,KAAK,IAAI,GAAG,EAAE,SAAS,GAAG;AAC9C,YAAM,KAAK,gBAAgB,IAAI,OAAO;AACtC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,GAAG,GAAG;AAC5C,cAAM,KAAK,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,EAAE;AAAA,MAC1C;AAAA,IACF;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AAEA,QAAM,WAAW,KAAK,KAAK,cAAc,QAAQ;AACjD,QAAM,WAAW,KAAK,KAAK,UAAU,aAAa;AAClD,MAAI;AACF,OAAG,UAAU,UAAU,EAAE,WAAW,KAAK,CAAC;AAC1C,OAAG,cAAc,UAAU,MAAM,KAAK,IAAI,GAAG,MAAM;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAO,MAAM;AACX,QAAI;AACF,SAAG,WAAW,QAAQ;AAAA,IACxB,QAAQ;AAAA,IAER;AACA,WAAO,QAAQ,QAAQ;AAAA,EACzB;AACF;AAEA,MAAM,aAAgC,CAAC,EAAE,OAAO,MAAM;AACpD,QAAM,iBAAiB,uBAAuB,MAAM;AAEpD,MAAI,kBAAkB,mBAAmB,SAAS;AAChD,WAAO,EAAE,YAAY,CAAC,sBAAsB,cAAc,EAAE;AAAA,EAC9D;AACA,MAAI,mBAAmB,SAAS;AAE9B,WAAO,EAAE,MAAM,CAAC,aAAa,EAAE;AAAA,EACjC;AACA,SAAO;AACT;AAEA,MAAM,UAA6B,CAAC,EAAE,SAAS,OAAO,MAAM;AAC1D,QAAM,OAAO,QAAQ,WAAW,cAAc,oBAAoB,MAAM;AACxE,SAAO,OAAO,EAAE,YAAY,CAAC,aAAa,IAAI,EAAE,IAAI;AACtD;AAEA,MAAM,YAA+B,CAAC,EAAE,WAAAA,WAAU,MAChDA,aAAY,EAAE,YAAY,CAAC,MAAMA,UAAS,EAAE,IAAI;AAElD,MAAM,YAA+B,CAAC,EAAE,OAAO,MAAM;AACnD,QAAM,OAAiB,CAAC;AACxB,aAAW,aAAa,2BAA2B,MAAM,GAAG;AAC1D,UAAM,YAAY,aAAa,SAAS;AACxC,QAAI,UAAW,MAAK,KAAK,aAAa,SAAS;AAAA,EACjD;AACA,SAAO,KAAK,SAAS,IAAI,EAAE,YAAY,KAAK,IAAI;AAClD;AAEA,MAAM,gBAAmC,CAAC,EAAE,QAAQ,MAAM;AACxD,QAAM,QAAQ,GAAG,QAAQ,gBAAgB,EAAE,IAAI,QAAQ,MAAM;AAC7D,MAAI,+CAA+C,KAAK,KAAK,GAAG;AAC9D,WAAO,EAAE,YAAY,CAAC,UAAU,EAAE;AAAA,EACpC;AACA,SAAO;AACT;AAEA,MAAM,UAA6B,CAAC,EAAE,QAAQ,MAC5C,QAAQ,YAAY,QAAQ,YACxB,EAAE,MAAM,CAAC,UAAU,QAAQ,SAAS,EAAE,IACtC;AAEN,MAAM,eAAkC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE;AAElE,MAAM,MAAyB,CAAC,EAAE,SAAS,WAAAA,WAAU,MAAM;AACzD,MAAI,CAAC,QAAQ,iBAAiB,CAACA,WAAW,QAAO;AACjD,QAAM,UAAU,sBAAsB,QAAQ,eAAeA,UAAS;AACtE,SAAO,UAAU,EAAE,QAAQ,IAAI;AACjC;AAEA,MAAM,eAAkC,CAAC,EAAE,QAAQ,MAAM;AACvD,MAAI,QAAQ,iBAAiB,OAAW,QAAO;AAC/C,QAAM,aAAa,sBAAsB,QAAQ,YAAY;AAC7D,SAAO;AAAA,IACL,MAAM,CAAC,mBAAmB,UAAU;AAAA,IACpC,SAAS,YAAY;AACnB,UAAI;AACF,cAAM,GAAG,SAAS,OAAO,UAAU;AAAA,MACrC,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACF;AAUA,MAAM,QAA2B,CAAC,EAAE,QAAQ,MAAM;AAChD,QAAM,IAAI,QAAQ,kBAAkB,QAAQ;AAC5C,SAAO,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI;AACnC;AAEA,MAAM,YAA+B,CAAC,EAAE,QAAQ,MAC9C,QAAQ,YAAY,EAAE,YAAY,CAAC,aAAa,EAAE,IAAI;AAExD,MAAM,mBAAsC,CAAC,EAAE,QAAQ,MACrD,QAAQ,mBACJ,EAAE,YAAY,CAAC,uBAAuB,EAAE,IACxC;AAEN,MAAM,cAAiC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE;AAErD,MAAM,mBAAyC;AAAA,EACpD,MAAM;AAAA,EACN,kBAAkB;AAAA,EAClB,YAAY;AAAA;AAAA;AAAA,EAGZ,wBAAwB;AAAA,EACxB,cAAc;AAAA,EACd,UAAU;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,qBAA8B;AAC5C,SAAO;AAAA,IACL,GAAG,qBAAqB,MAAM,cAAc,SAAS;AAAA,MACnD,kBAAkB,MAAM,oBAAoB,OAAO;AAAA,MACnD,gBAAgB,MAAM,cAAc,GAAG,OAAO,YAAY;AAAA;AAAA;AAAA,MAG1D,oBAAoB,MAAM,mBAAmB,WAAW;AAAA,IAC1D,CAAC;AAAA,IAED,cAAc,WAA4B;AACxC,aAAO,OAAO,cAAc,YAAY,UAAU,SAAS;AAAA,IAC7D;AAAA,IAEA,oBAA4B;AAC1B,aAAO;AAAA,IACT;AAAA,IAEA,mBAAmB,SAAS;AAC1B,aAAO,sBAAsB,SAAS,kBAAkB,OAAO;AAAA,IACjE;AAAA,IAEA,iBAAiB,SAAgC;AAC/C,aAAO;AAAA,IACT;AAAA,EACF;AACF;",
+  "names": ["workspace"]
+}

package/dist/adapters/agents/backends/cursor-cli.d.ts

@@ -0,0 +1,5 @@
+import type { Backend } from '../../../domain/contracts/backends.js';
+import type { CliBackendDescriptor } from '../../../domain/contracts/cli-backends.js';
+export declare const CURSOR_DESCRIPTOR: CliBackendDescriptor;
+export declare function createCursorBackend(): Backend;
+//# sourceMappingURL=cursor-cli.d.ts.map

package/dist/adapters/agents/backends/cursor-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-cli.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/backends/cursor-cli.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,OAAO,EAGR,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,2CAA2C,CAAC;AA2InD,eAAO,MAAM,iBAAiB,EAAE,oBAgB/B,CAAC;AAEF,wBAAgB,mBAAmB,IAAI,OAAO,CA2B7C"}

package/dist/adapters/agents/backends/cursor-cli.js

@@ -0,0 +1,142 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { APPROVAL_POSTURE_CURSOR_CLI } from "../approval-posture.js";
+import { buildCliExecutionPlan } from "./cli-runner.js";
+import { mapCursorSandboxMode, shouldForceCursor } from "./security-flags.js";
+import {
+  BACKEND_METADATA,
+  createCliBackendBase,
+  getCliVersion,
+  isCliInstalledAsync,
+  readCliConfigModel
+} from "./shared.js";
+const META = BACKEND_METADATA["cursor-cli"];
+const CLI_CMD = META.cli ?? "cursor";
+const CAPABILITIES = {
+  streaming: true,
+  sessionPersistence: true,
+  workingDirectory: true,
+  forceMode: true,
+  systemPrompt: false,
+  planning: true,
+  tools: true,
+  mcp: true,
+  approvalCallback: APPROVAL_POSTURE_CURSOR_CLI
+};
+function createMcpWorkspace(mcpContent = '{"mcpServers":{}}') {
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "octoflow-cursor-"));
+  const cursorDir = path.join(tmpDir, ".cursor");
+  fs.mkdirSync(cursorDir, { recursive: true });
+  fs.writeFileSync(path.join(cursorDir, "mcp.json"), mcpContent);
+  return tmpDir;
+}
+function readMcpContent(request) {
+  if (!request.mcpConfigPath) return void 0;
+  try {
+    return fs.readFileSync(request.mcpConfigPath, "utf8");
+  } catch {
+    return void 0;
+  }
+}
+const permission = ({ request, policy }) => {
+  const args = [];
+  if (request.readOnly) args.push("--mode", "plan");
+  if (shouldForceCursor(policy)) args.push("--force");
+  return args.length > 0 ? { args } : void 0;
+};
+const sandbox = ({ policy }) => {
+  const mode = mapCursorSandboxMode(policy);
+  return mode ? { args: ["--sandbox", mode] } : void 0;
+};
+const workspace = ({ request, workspace: workspace2 }) => {
+  const mcpContent = readMcpContent(request);
+  if (workspace2 && mcpContent) {
+    try {
+      const cursorDir = path.join(workspace2, ".cursor");
+      fs.mkdirSync(cursorDir, { recursive: true });
+      fs.writeFileSync(path.join(cursorDir, "mcp.json"), mcpContent);
+    } catch {
+    }
+  }
+  let tempWorkspace;
+  if (!workspace2 && !request.worktree) {
+    tempWorkspace = createMcpWorkspace(mcpContent ?? '{"mcpServers":{}}');
+  }
+  const effective = workspace2 ?? tempWorkspace;
+  if (!effective) return void 0;
+  return {
+    args: ["--workspace", effective],
+    cwdOverride: effective,
+    ...tempWorkspace ? {
+      cleanup: () => {
+        try {
+          fs.rmSync(tempWorkspace, { recursive: true, force: true });
+        } catch {
+        }
+        return Promise.resolve();
+      }
+    } : {}
+  };
+};
+const worktree = ({ request }) => {
+  if (!request.worktree) return void 0;
+  const args = ["--worktree"];
+  if (typeof request.worktree === "string") args.push(request.worktree);
+  return { args };
+};
+const session = ({ sessionId }) => ({
+  args: ["--resume", sessionId]
+});
+const model = ({ request }) => {
+  const m = request.requestedModel || request.configModel;
+  return m ? { args: ["--model", m] } : void 0;
+};
+const mcp = () => void 0;
+const CURSOR_DESCRIPTOR = {
+  name: "cursor-cli",
+  streamParserName: "cursor",
+  prelude: ["-p", "--trust", "--approve-mcps"],
+  tail: ["--output-format", "stream-json", "--stream-partial-output"],
+  defaultStdinIsEnvelope: true,
+  capabilities: CAPABILITIES,
+  features: {
+    permission,
+    sandbox,
+    workspace,
+    worktree,
+    session,
+    model,
+    mcp
+  }
+};
+function createCursorBackend() {
+  return {
+    ...createCliBackendBase(META, CAPABILITIES, "cursor", {
+      resolveInstalled: () => isCliInstalledAsync(CLI_CMD),
+      resolveVersion: () => getCliVersion(`${CLI_CMD} --version`),
+      // Read model from ~/.cursor/settings.json when the user has configured
+      // a preferred model. Falls back to META.defaultModel ('auto') when
+      // no settings file or no model key.
+      resolveConfigModel: () => readCliConfigModel("cursor-cli")
+    }),
+    validateModel(modelName) {
+      return typeof modelName === "string" && modelName.length > 0;
+    },
+    generateSessionId() {
+      return crypto.randomUUID();
+    },
+    buildExecutionPlan(request) {
+      return buildCliExecutionPlan(CLI_CMD, CURSOR_DESCRIPTOR, request);
+    },
+    extractSessionId(_output) {
+      return null;
+    }
+  };
+}
+export {
+  CURSOR_DESCRIPTOR,
+  createCursorBackend
+};
+//# sourceMappingURL=cursor-cli.js.map

package/dist/adapters/agents/backends/cursor-cli.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/adapters/agents/backends/cursor-cli.ts"],
+  "sourcesContent": ["import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nimport type {\n  Backend,\n  BackendCapabilities,\n  BackendRunRequest,\n} from '../../../domain/contracts/backends.js';\nimport type {\n  CliBackendDescriptor,\n  CliFeatureHandler,\n} from '../../../domain/contracts/cli-backends.js';\nimport { APPROVAL_POSTURE_CURSOR_CLI } from '../approval-posture.js';\nimport { buildCliExecutionPlan } from './cli-runner.js';\nimport { mapCursorSandboxMode, shouldForceCursor } from './security-flags.js';\nimport {\n  BACKEND_METADATA,\n  createCliBackendBase,\n  getCliVersion,\n  isCliInstalledAsync,\n  readCliConfigModel,\n} from './shared.js';\n\nconst META = BACKEND_METADATA['cursor-cli'];\nconst CLI_CMD = META.cli ?? 'cursor';\n\nconst CAPABILITIES: BackendCapabilities = {\n  streaming: true,\n  sessionPersistence: true,\n  workingDirectory: true,\n  forceMode: true,\n  systemPrompt: false,\n  planning: true,\n  tools: true,\n  mcp: true,\n  approvalCallback: APPROVAL_POSTURE_CURSOR_CLI,\n};\n\n/**\n * Create a minimal temp workspace with a `.cursor/mcp.json`.\n *\n * Cursor loads every MCP server in `~/.cursor/mcp.json` and the workspace\n * `.cursor/mcp.json` on startup. Providing an empty file prevents loading\n * the global config and the cold-start delays it causes (60\u2013120 s).\n */\nfunction createMcpWorkspace(mcpContent: string = '{\"mcpServers\":{}}'): string {\n  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'octoflow-cursor-'));\n  const cursorDir = path.join(tmpDir, '.cursor');\n  fs.mkdirSync(cursorDir, { recursive: true });\n  fs.writeFileSync(path.join(cursorDir, 'mcp.json'), mcpContent);\n  return tmpDir;\n}\n\nfunction readMcpContent(request: BackendRunRequest): string | undefined {\n  if (!request.mcpConfigPath) return undefined;\n  try {\n    return fs.readFileSync(request.mcpConfigPath, 'utf8');\n  } catch {\n    return undefined;\n  }\n}\n\nconst permission: CliFeatureHandler = ({ request, policy }) => {\n  const args: string[] = [];\n  if (request.readOnly) args.push('--mode', 'plan');\n  if (shouldForceCursor(policy)) args.push('--force');\n  return args.length > 0 ? { args } : undefined;\n};\n\nconst sandbox: CliFeatureHandler = ({ policy }) => {\n  const mode = mapCursorSandboxMode(policy);\n  return mode ? { args: ['--sandbox', mode] } : undefined;\n};\n\n/**\n * Cursor's workspace and MCP delivery are inseparable: the only supported\n * place to drop a per-run MCP config is `<workspace>/.cursor/mcp.json`. When\n * the caller provides no workspace and no worktree, we materialize a temp\n * workspace so the MCP config can land there without polluting the user's\n * global Cursor config. The temp directory's lifecycle is owned by the\n * cleanup function returned by this handler.\n */\nconst workspace: CliFeatureHandler = ({ request, workspace }) => {\n  const mcpContent = readMcpContent(request);\n\n  if (workspace && mcpContent) {\n    try {\n      const cursorDir = path.join(workspace, '.cursor');\n      fs.mkdirSync(cursorDir, { recursive: true });\n      fs.writeFileSync(path.join(cursorDir, 'mcp.json'), mcpContent);\n    } catch {\n      /* best-effort */\n    }\n  }\n\n  let tempWorkspace: string | undefined;\n  if (!workspace && !request.worktree) {\n    tempWorkspace = createMcpWorkspace(mcpContent ?? '{\"mcpServers\":{}}');\n  }\n\n  const effective = workspace ?? tempWorkspace;\n  if (!effective) return undefined;\n\n  return {\n    args: ['--workspace', effective],\n    cwdOverride: effective,\n    ...(tempWorkspace\n      ? {\n          cleanup: () => {\n            try {\n              fs.rmSync(tempWorkspace, { recursive: true, force: true });\n            } catch {\n              /* ignore */\n            }\n            return Promise.resolve();\n          },\n        }\n      : {}),\n  };\n};\n\nconst worktree: CliFeatureHandler = ({ request }) => {\n  if (!request.worktree) return undefined;\n  const args = ['--worktree'];\n  if (typeof request.worktree === 'string') args.push(request.worktree);\n  return { args };\n};\n\n// Cursor uses UUID-based session ids: an unknown UUID creates a new session,\n// a known one resumes it. --resume is therefore always passed.\nconst session: CliFeatureHandler = ({ sessionId }) => ({\n  args: ['--resume', sessionId],\n});\n\n// Model resolution priority:\n//   1. requestedModel \u2014 set by the caller via createAgent({ model }) or sendMessage({ model })\n//   2. configModel    \u2014 read from ~/.cursor/settings.json at backend creation time\n//   3. (no flag)      \u2014 let the cursor CLI use its own current default\n//\n// Omitting --model when no model is known lets Cursor pick the best available\n// model for the account rather than pinning a hardcoded 'auto' alias.\nconst model: CliFeatureHandler = ({ request }) => {\n  const m = request.requestedModel || request.configModel;\n  return m ? { args: ['--model', m] } : undefined;\n};\n\n// Marker so feature-matrix introspection records cursor's MCP support; the\n// actual delivery is bundled into the workspace handler.\nconst mcp: CliFeatureHandler = () => undefined;\n\nexport const CURSOR_DESCRIPTOR: CliBackendDescriptor = {\n  name: 'cursor-cli',\n  streamParserName: 'cursor',\n  prelude: ['-p', '--trust', '--approve-mcps'],\n  tail: ['--output-format', 'stream-json', '--stream-partial-output'],\n  defaultStdinIsEnvelope: true,\n  capabilities: CAPABILITIES,\n  features: {\n    permission,\n    sandbox,\n    workspace,\n    worktree,\n    session,\n    model,\n    mcp,\n  },\n};\n\nexport function createCursorBackend(): Backend {\n  return {\n    ...createCliBackendBase(META, CAPABILITIES, 'cursor', {\n      resolveInstalled: () => isCliInstalledAsync(CLI_CMD),\n      resolveVersion: () => getCliVersion(`${CLI_CMD} --version`),\n      // Read model from ~/.cursor/settings.json when the user has configured\n      // a preferred model. Falls back to META.defaultModel ('auto') when\n      // no settings file or no model key.\n      resolveConfigModel: () => readCliConfigModel('cursor-cli'),\n    }),\n\n    validateModel(modelName: string): boolean {\n      return typeof modelName === 'string' && modelName.length > 0;\n    },\n\n    generateSessionId(): string {\n      return crypto.randomUUID();\n    },\n\n    buildExecutionPlan(request) {\n      return buildCliExecutionPlan(CLI_CMD, CURSOR_DESCRIPTOR, request);\n    },\n\n    extractSessionId(_output: string): string | null {\n      return null;\n    },\n  };\n}\n"],
+  "mappings": "AAAA,OAAO,YAAY;AACnB,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AAWjB,SAAS,mCAAmC;AAC5C,SAAS,6BAA6B;AACtC,SAAS,sBAAsB,yBAAyB;AACxD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,OAAO,iBAAiB,YAAY;AAC1C,MAAM,UAAU,KAAK,OAAO;AAE5B,MAAM,eAAoC;AAAA,EACxC,WAAW;AAAA,EACX,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,cAAc;AAAA,EACd,UAAU;AAAA,EACV,OAAO;AAAA,EACP,KAAK;AAAA,EACL,kBAAkB;AACpB;AASA,SAAS,mBAAmB,aAAqB,qBAA6B;AAC5E,QAAM,SAAS,GAAG,YAAY,KAAK,KAAK,GAAG,OAAO,GAAG,kBAAkB,CAAC;AACxE,QAAM,YAAY,KAAK,KAAK,QAAQ,SAAS;AAC7C,KAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AAC3C,KAAG,cAAc,KAAK,KAAK,WAAW,UAAU,GAAG,UAAU;AAC7D,SAAO;AACT;AAEA,SAAS,eAAe,SAAgD;AACtE,MAAI,CAAC,QAAQ,cAAe,QAAO;AACnC,MAAI;AACF,WAAO,GAAG,aAAa,QAAQ,eAAe,MAAM;AAAA,EACtD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,aAAgC,CAAC,EAAE,SAAS,OAAO,MAAM;AAC7D,QAAM,OAAiB,CAAC;AACxB,MAAI,QAAQ,SAAU,MAAK,KAAK,UAAU,MAAM;AAChD,MAAI,kBAAkB,MAAM,EAAG,MAAK,KAAK,SAAS;AAClD,SAAO,KAAK,SAAS,IAAI,EAAE,KAAK,IAAI;AACtC;AAEA,MAAM,UAA6B,CAAC,EAAE,OAAO,MAAM;AACjD,QAAM,OAAO,qBAAqB,MAAM;AACxC,SAAO,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE,IAAI;AAChD;AAUA,MAAM,YAA+B,CAAC,EAAE,SAAS,WAAAA,WAAU,MAAM;AAC/D,QAAM,aAAa,eAAe,OAAO;AAEzC,MAAIA,cAAa,YAAY;AAC3B,QAAI;AACF,YAAM,YAAY,KAAK,KAAKA,YAAW,SAAS;AAChD,SAAG,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;AAC3C,SAAG,cAAc,KAAK,KAAK,WAAW,UAAU,GAAG,UAAU;AAAA,IAC/D,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,CAACA,cAAa,CAAC,QAAQ,UAAU;AACnC,oBAAgB,mBAAmB,cAAc,mBAAmB;AAAA,EACtE;AAEA,QAAM,YAAYA,cAAa;AAC/B,MAAI,CAAC,UAAW,QAAO;AAEvB,SAAO;AAAA,IACL,MAAM,CAAC,eAAe,SAAS;AAAA,IAC/B,aAAa;AAAA,IACb,GAAI,gBACA;AAAA,MACE,SAAS,MAAM;AACb,YAAI;AACF,aAAG,OAAO,eAAe,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,QAC3D,QAAQ;AAAA,QAER;AACA,eAAO,QAAQ,QAAQ;AAAA,MACzB;AAAA,IACF,IACA,CAAC;AAAA,EACP;AACF;AAEA,MAAM,WAA8B,CAAC,EAAE,QAAQ,MAAM;AACnD,MAAI,CAAC,QAAQ,SAAU,QAAO;AAC9B,QAAM,OAAO,CAAC,YAAY;AAC1B,MAAI,OAAO,QAAQ,aAAa,SAAU,MAAK,KAAK,QAAQ,QAAQ;AACpE,SAAO,EAAE,KAAK;AAChB;AAIA,MAAM,UAA6B,CAAC,EAAE,UAAU,OAAO;AAAA,EACrD,MAAM,CAAC,YAAY,SAAS;AAC9B;AASA,MAAM,QAA2B,CAAC,EAAE,QAAQ,MAAM;AAChD,QAAM,IAAI,QAAQ,kBAAkB,QAAQ;AAC5C,SAAO,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI;AACxC;AAIA,MAAM,MAAyB,MAAM;AAE9B,MAAM,oBAA0C;AAAA,EACrD,MAAM;AAAA,EACN,kBAAkB;AAAA,EAClB,SAAS,CAAC,MAAM,WAAW,gBAAgB;AAAA,EAC3C,MAAM,CAAC,mBAAmB,eAAe,yBAAyB;AAAA,EAClE,wBAAwB;AAAA,EACxB,cAAc;AAAA,EACd,UAAU;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,sBAA+B;AAC7C,SAAO;AAAA,IACL,GAAG,qBAAqB,MAAM,cAAc,UAAU;AAAA,MACpD,kBAAkB,MAAM,oBAAoB,OAAO;AAAA,MACnD,gBAAgB,MAAM,cAAc,GAAG,OAAO,YAAY;AAAA;AAAA;AAAA;AAAA,MAI1D,oBAAoB,MAAM,mBAAmB,YAAY;AAAA,IAC3D,CAAC;AAAA,IAED,cAAc,WAA4B;AACxC,aAAO,OAAO,cAAc,YAAY,UAAU,SAAS;AAAA,IAC7D;AAAA,IAEA,oBAA4B;AAC1B,aAAO,OAAO,WAAW;AAAA,IAC3B;AAAA,IAEA,mBAAmB,SAAS;AAC1B,aAAO,sBAAsB,SAAS,mBAAmB,OAAO;AAAA,IAClE;AAAA,IAEA,iBAAiB,SAAgC;AAC/C,aAAO;AAAA,IACT;AAAA,EACF;AACF;",
+  "names": ["workspace"]
+}

package/dist/adapters/agents/backends/gemini-api.d.ts

@@ -0,0 +1,4 @@
+import type { ApiJsonObject, Backend, BackendToolDef, GeminiApiBackendConfig } from '../../../domain/contracts/backends.js';
+export declare function toGeminiTools(tools: BackendToolDef[]): ApiJsonObject[];
+export declare function createGeminiApiBackend(config?: GeminiApiBackendConfig): Backend;
+//# sourceMappingURL=gemini-api.d.ts.map

package/dist/adapters/agents/backends/gemini-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-api.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/backends/gemini-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,OAAO,EAIP,cAAc,EACd,sBAAsB,EACvB,MAAM,uCAAuC,CAAC;AA0E/C,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,aAAa,EAAE,CAWtE;AA6CD,wBAAgB,sBAAsB,CACpC,MAAM,GAAE,sBAA2B,GAClC,OAAO,CA6OT"}