offrouter-adapter-codex 0.2.0 → 0.2.2

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * offrouter-adapter-codex public surface.
+ * Install / rollback for Codex personal profiles (MCP config entry).
+ */
+export declare const ADAPTER_CODEX_PACKAGE: "offrouter-adapter-codex";
+export { isCodexHarnessProfile, isSafeProfileId, isWorkLikeProfile, listAllowlistedPersonalCodexProfiles, resolveCodexProfileDir, SAFE_PROFILE_ID_RE, } from "./profile.js";
+export type { ResolveCodexProfileDirOptions } from "./profile.js";
+export { CODEX_CONFIG_REL, CODEX_INSTALL_STATE_REL, CodexInstallStateSchema, evaluateInstallProfilePolicy, formatInstallDiffText, installCodexProfile, } from "./install.js";
+export type { CodexInstallOptions, CodexInstallResult, CodexInstallState, InstallChangeKind, InstallFileChange, } from "./install.js";
+export { rollbackCodexProfile } from "./rollback.js";
+export type { CodexRollbackOptions, CodexRollbackResult } from "./rollback.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,qBAAqB,EAAG,yBAAkC,CAAC;AAExE,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,oCAAoC,EACpC,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAElE,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+/**
+ * offrouter-adapter-codex public surface.
+ * Install / rollback for Codex personal profiles (MCP config entry).
+ */
+export const ADAPTER_CODEX_PACKAGE = "offrouter-adapter-codex";
+export { isCodexHarnessProfile, isSafeProfileId, isWorkLikeProfile, listAllowlistedPersonalCodexProfiles, resolveCodexProfileDir, SAFE_PROFILE_ID_RE, } from "./profile.js";
+export { CODEX_CONFIG_REL, CODEX_INSTALL_STATE_REL, CodexInstallStateSchema, evaluateInstallProfilePolicy, formatInstallDiffText, installCodexProfile, } from "./install.js";
+export { rollbackCodexProfile } from "./rollback.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAkC,CAAC;AAExE,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,oCAAoC,EACpC,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAStB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/install.d.ts

@@ -0,0 +1,99 @@
+import { type OffRouterConfig, type PolicyDenialCode } from "offrouter-core";
+import { z } from "zod";
+export declare const CODEX_INSTALL_STATE_REL: ".offrouter/codex-install-state.json";
+export declare const CODEX_CONFIG_REL: "config.toml";
+export declare const CodexInstallStateSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    profile: z.ZodString;
+    harness: z.ZodLiteral<"codex">;
+    installedAt: z.ZodString;
+    configRelative: z.ZodLiteral<"config.toml">;
+    files: z.ZodRecord<z.ZodString, z.ZodObject<{
+        previous: z.ZodNullable<z.ZodString>;
+        hash: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        previous: string | null;
+        hash?: string | undefined;
+    }, {
+        previous: string | null;
+        hash?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    version: 1;
+    profile: string;
+    harness: "codex";
+    installedAt: string;
+    configRelative: "config.toml";
+    files: Record<string, {
+        previous: string | null;
+        hash?: string | undefined;
+    }>;
+}, {
+    version: 1;
+    profile: string;
+    harness: "codex";
+    installedAt: string;
+    configRelative: "config.toml";
+    files: Record<string, {
+        previous: string | null;
+        hash?: string | undefined;
+    }>;
+}>;
+export type CodexInstallState = z.infer<typeof CodexInstallStateSchema>;
+export type InstallChangeKind = "create" | "update" | "unchanged" | "remove";
+export interface InstallFileChange {
+    path: string;
+    relativePath: string;
+    kind: InstallChangeKind;
+    /** Diff-like summary line for human output. */
+    summary: string;
+}
+export interface CodexInstallOptions {
+    profile: string;
+    config: OffRouterConfig;
+    env?: NodeJS.ProcessEnv;
+    homedir?: () => string;
+    dryRun?: boolean;
+}
+export interface CodexInstallResult {
+    ok: boolean;
+    dryRun: boolean;
+    profile: string;
+    profileDir: string;
+    changes: InstallFileChange[];
+    message: string;
+    errorCode?: PolicyDenialCode | "install_error";
+    statePath?: string;
+}
+/**
+ * Produce the desired config.toml content for the OffRouter MCP entry using a
+ * TOML parser (smol-toml) instead of ad hoc string surgery.
+ *
+ * - Missing/empty file => fresh config containing only the MCP entry.
+ * - Existing file already has [mcp_servers.offrouter] with matching
+ *   command/args => return the original bytes unchanged (idempotent).
+ * - Existing file has a conflicting offrouter entry (or none) => set/replace
+ *   the entry and stringify, preserving all other unrelated keys.
+ *
+ * smol-toml does not preserve comments on round-trip; that is accepted as
+ * best-effort per the project rule against ad hoc config parsing.
+ */
+export declare function patchConfigForMcp(existing: string | null): string;
+/**
+ * Use routeRequest with empty candidates so work/unallowlisted profile denials
+ * reuse the same core policy codes users see from route explain / hooks.
+ */
+export declare function evaluateInstallProfilePolicy(profile: string, config: OffRouterConfig): {
+    allowed: boolean;
+    errorCode?: PolicyDenialCode;
+    message?: string;
+};
+/**
+ * Install the OffRouter Codex MCP entry into a single profile directory.
+ */
+export declare function installCodexProfile(options: CodexInstallOptions): Promise<CodexInstallResult>;
+/**
+ * Human-readable diff-like text for an install/uninstall result matrix.
+ */
+export declare function formatInstallDiffText(results: CodexInstallResult[], headline?: string): string;
+//# sourceMappingURL=install.d.ts.map

package/dist/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,uBAAuB,EAClC,qCAA8C,CAAC;AAEjD,eAAO,MAAM,gBAAgB,EAAG,aAAsB,CAAC;AAOvD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAalC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,iBAAiB,CAAC;IACxB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,gBAAgB,GAAG,eAAe,CAAC;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA8BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAuBjE;AA6DD;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,eAAe,GACtB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAuCtE;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA4K7B;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,kBAAkB,EAAE,EAC7B,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CA4BR"}

package/dist/install.js

@@ -0,0 +1,361 @@
+/**
+ * Profile-scoped installer for Codex personal profiles.
+ *
+ * Unlike the Claude adapter (which copies a plugin tree), the Codex adapter
+ * writes ONE MCP server entry into the profile's TOML config file
+ * (profile-scoped) at <profileDir>/config.toml and records rollback metadata
+ * inside the target profile (.offrouter/codex-install-state.json).
+ */
+import { access, mkdir, readFile, writeFile } from "node:fs/promises";
+import { constants } from "node:fs";
+import { createHash } from "node:crypto";
+import { dirname, join } from "node:path";
+import { homedir as osHomedir } from "node:os";
+import { ROUTE_PROTOCOL_VERSION, routeRequest, } from "offrouter-core";
+import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+import { z } from "zod";
+import { isCodexHarnessProfile, isSafeProfileId, isWorkLikeProfile, resolveCodexProfileDir, } from "./profile.js";
+export const CODEX_INSTALL_STATE_REL = ".offrouter/codex-install-state.json";
+export const CODEX_CONFIG_REL = "config.toml";
+/** Table name and command/args for the OffRouter MCP server entry. */
+const OFFROUTER_MCP_SERVER_NAME = "offrouter";
+const OFFROUTER_MCP_COMMAND = "offrouter";
+const OFFROUTER_MCP_ARGS = ["mcp", "serve"];
+export const CodexInstallStateSchema = z.object({
+    version: z.literal(1),
+    profile: z.string().min(1),
+    harness: z.literal("codex"),
+    installedAt: z.string().min(1),
+    configRelative: z.literal(CODEX_CONFIG_REL),
+    files: z.record(z.string().min(1), z.object({
+        previous: z.string().nullable(),
+        hash: z.string().optional(),
+    })),
+});
+async function pathExists(path) {
+    try {
+        await access(path, constants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function sha256(content) {
+    return createHash("sha256").update(content).digest("hex");
+}
+function changeSummary(kind, relativePath) {
+    switch (kind) {
+        case "create":
+            return `+ ${relativePath}`;
+        case "update":
+            return `~ ${relativePath}`;
+        case "unchanged":
+            return `= ${relativePath}`;
+        case "remove":
+            return `- ${relativePath}`;
+        default:
+            return `? ${relativePath}`;
+    }
+}
+/**
+ * Produce the desired config.toml content for the OffRouter MCP entry using a
+ * TOML parser (smol-toml) instead of ad hoc string surgery.
+ *
+ * - Missing/empty file => fresh config containing only the MCP entry.
+ * - Existing file already has [mcp_servers.offrouter] with matching
+ *   command/args => return the original bytes unchanged (idempotent).
+ * - Existing file has a conflicting offrouter entry (or none) => set/replace
+ *   the entry and stringify, preserving all other unrelated keys.
+ *
+ * smol-toml does not preserve comments on round-trip; that is accepted as
+ * best-effort per the project rule against ad hoc config parsing.
+ */
+export function patchConfigForMcp(existing) {
+    if (existing === null || existing.trim() === "") {
+        return stringifyToml(freshOffrouterConfig());
+    }
+    const root = parseToml(existing);
+    const servers = isTomlTable(root.mcp_servers) ? root.mcp_servers : undefined;
+    if (servers !== undefined &&
+        isOffrouterMcpEntry(servers[OFFROUTER_MCP_SERVER_NAME])) {
+        return existing;
+    }
+    const nextRoot = {
+        ...root,
+        mcp_servers: {
+            ...(servers ?? {}),
+            [OFFROUTER_MCP_SERVER_NAME]: offrouterMcpEntry(),
+        },
+    };
+    return stringifyToml(nextRoot);
+}
+function isTomlTable(value) {
+    return (typeof value === "object" && value !== null && !Array.isArray(value));
+}
+/**
+ * True when an existing [mcp_servers.offrouter] entry already matches the
+ * OffRouter command/args. Detects a correct prior install by value (not by
+ * string equality) so a conflicting entry is overwritten.
+ */
+function isOffrouterMcpEntry(value) {
+    if (!isTomlTable(value)) {
+        return false;
+    }
+    if (value.command !== OFFROUTER_MCP_COMMAND) {
+        return false;
+    }
+    const args = value.args;
+    if (!Array.isArray(args) || args.length !== OFFROUTER_MCP_ARGS.length) {
+        return false;
+    }
+    return args.every((item, index) => item === OFFROUTER_MCP_ARGS[index]);
+}
+function offrouterMcpEntry() {
+    return {
+        command: OFFROUTER_MCP_COMMAND,
+        args: [...OFFROUTER_MCP_ARGS],
+    };
+}
+function freshOffrouterConfig() {
+    return {
+        mcp_servers: {
+            [OFFROUTER_MCP_SERVER_NAME]: offrouterMcpEntry(),
+        },
+    };
+}
+function tinyPolicyProbeRequest(profile) {
+    return {
+        requestId: "install-policy-probe",
+        protocolVersion: ROUTE_PROTOCOL_VERSION,
+        harness: { kind: "codex", profile },
+        task: {
+            promptPreview: "install policy probe",
+            promptDigest: "sha256:install-policy-probe",
+            kind: "other",
+            risk: "low",
+        },
+        workspace: { cwd: "/tmp/offrouter-install-probe", trusted: true },
+        constraints: {
+            subscriptionFirst: true,
+            allowApiKeyFallback: false,
+        },
+    };
+}
+/**
+ * Use routeRequest with empty candidates so work/unallowlisted profile denials
+ * reuse the same core policy codes users see from route explain / hooks.
+ */
+export function evaluateInstallProfilePolicy(profile, config) {
+    const decision = routeRequest(tinyPolicyProbeRequest(profile), [], config.policy);
+    const denials = decision.policyDenials ?? [];
+    const hard = denials.find((d) => d.code === "work_profile_denied" ||
+        d.code === "profile_not_allowlisted" ||
+        d.code === "privacy_label_denied");
+    if (hard) {
+        return {
+            allowed: false,
+            errorCode: hard.code,
+            message: hard.message,
+        };
+    }
+    // Empty candidates also sets needsConfiguration + may include
+    // profile_not_allowlisted even for personal unallowlisted. When allowlisted,
+    // only needsConfiguration remains; that is fine for install.
+    const profileDenial = denials.find((d) => d.target === "profile");
+    if (profileDenial) {
+        return {
+            allowed: false,
+            errorCode: profileDenial.code,
+            message: profileDenial.message,
+        };
+    }
+    if (!config.policy.allowlistedProfiles.includes(profile)) {
+        return {
+            allowed: false,
+            errorCode: "profile_not_allowlisted",
+            message: `Profile ${profile} is not allowlisted. Add it explicitly before installing or routing.`,
+        };
+    }
+    return { allowed: true };
+}
+/**
+ * Install the OffRouter Codex MCP entry into a single profile directory.
+ */
+export async function installCodexProfile(options) {
+    const { profile, config, dryRun = false, env = process.env, homedir = osHomedir, } = options;
+    if (!isSafeProfileId(profile)) {
+        return {
+            ok: false,
+            dryRun,
+            profile,
+            profileDir: "",
+            changes: [],
+            message: "Unsafe profile id. Use letters, numbers, dots, underscores, and dashes only.",
+            errorCode: "install_error",
+        };
+    }
+    const profileDir = resolveCodexProfileDir(profile, { env, homedir });
+    const statePath = join(profileDir, CODEX_INSTALL_STATE_REL);
+    const configPath = join(profileDir, CODEX_CONFIG_REL);
+    if (!isCodexHarnessProfile(profile)) {
+        return {
+            ok: false,
+            dryRun,
+            profile,
+            profileDir,
+            changes: [],
+            message: "Codex install supports only profile ids named codex or starting with codex-.",
+            errorCode: "install_error",
+        };
+    }
+    // Work-like profile ids (e.g. codex-work, codex-work-staging) are never
+    // installable, even when allowlisted. This mirrors the filter used by
+    // listAllowlistedPersonalCodexProfiles so explicit and --all-personal
+    // installs apply the same personal-only boundary.
+    if (isWorkLikeProfile(profile)) {
+        return {
+            ok: false,
+            dryRun,
+            profile,
+            profileDir,
+            changes: [],
+            message: `Profile ${profile} looks like a work profile and is never installable, even if allowlisted. Use a personal profile such as codex-personal.`,
+            errorCode: "work_profile_denied",
+        };
+    }
+    const policy = evaluateInstallProfilePolicy(profile, config);
+    if (!policy.allowed) {
+        return {
+            ok: false,
+            dryRun,
+            profile,
+            profileDir,
+            changes: [],
+            message: policy.message ?? `Profile ${profile} is not installable.`,
+            errorCode: policy.errorCode ?? "install_error",
+        };
+    }
+    // Preserve original previous contents across re-installs (idempotent rollback).
+    let priorState = null;
+    if (await pathExists(statePath)) {
+        try {
+            const raw = await readFile(statePath, "utf8");
+            priorState = CodexInstallStateSchema.parse(JSON.parse(raw));
+        }
+        catch (err) {
+            const detail = err instanceof Error ? err.message : String(err);
+            return {
+                ok: false,
+                dryRun,
+                profile,
+                profileDir,
+                changes: [],
+                message: `Invalid install state at ${statePath}: ${detail}`,
+                errorCode: "install_error",
+            };
+        }
+    }
+    const changes = [];
+    // --- config.toml MCP entry ---
+    let current = null;
+    if (await pathExists(configPath)) {
+        current = await readFile(configPath, "utf8");
+    }
+    const priorFile = priorState?.files[CODEX_CONFIG_REL];
+    const previous = priorFile !== undefined ? priorFile.previous : current;
+    const desired = patchConfigForMcp(current);
+    let kind;
+    if (current === null) {
+        kind = "create";
+    }
+    else if (current === desired) {
+        kind = "unchanged";
+    }
+    else {
+        kind = "update";
+    }
+    changes.push({
+        path: configPath,
+        relativePath: CODEX_CONFIG_REL,
+        kind,
+        summary: changeSummary(kind, CODEX_CONFIG_REL),
+    });
+    if (!dryRun && kind !== "unchanged") {
+        await mkdir(dirname(configPath), { recursive: true });
+        await writeFile(configPath, desired, "utf8");
+    }
+    // --- install state metadata ---
+    const state = {
+        version: 1,
+        profile,
+        harness: "codex",
+        installedAt: priorState?.installedAt ?? new Date().toISOString(),
+        configRelative: CODEX_CONFIG_REL,
+        files: {
+            [CODEX_CONFIG_REL]: {
+                previous,
+                hash: sha256(desired),
+            },
+        },
+    };
+    const stateJson = `${JSON.stringify(state, null, 2)}\n`;
+    let stateKind = "create";
+    if (await pathExists(statePath)) {
+        const existing = await readFile(statePath, "utf8");
+        stateKind = existing === stateJson ? "unchanged" : "update";
+    }
+    changes.push({
+        path: statePath,
+        relativePath: CODEX_INSTALL_STATE_REL,
+        kind: stateKind,
+        summary: changeSummary(stateKind, CODEX_INSTALL_STATE_REL),
+    });
+    if (!dryRun && stateKind !== "unchanged") {
+        await mkdir(dirname(statePath), { recursive: true });
+        await writeFile(statePath, stateJson, "utf8");
+    }
+    const wrote = changes.filter((c) => c.kind === "create" || c.kind === "update");
+    const message = dryRun
+        ? `Dry run: would apply ${wrote.length} file change(s) for profile ${profile}.`
+        : `Installed OffRouter Codex MCP entry for profile ${profile} (${wrote.length} file change(s)).`;
+    return {
+        ok: true,
+        dryRun,
+        profile,
+        profileDir,
+        changes,
+        message,
+        statePath,
+    };
+}
+/**
+ * Human-readable diff-like text for an install/uninstall result matrix.
+ */
+export function formatInstallDiffText(results, headline) {
+    const lines = [];
+    if (headline) {
+        lines.push(headline);
+    }
+    for (const result of results) {
+        lines.push(``);
+        lines.push(`## ${result.profile} (${result.ok ? (result.dryRun ? "dry-run" : "applied") : "error"})`);
+        lines.push(`profileDir: ${result.profileDir}`);
+        if (!result.ok) {
+            lines.push(`error: ${result.message}`);
+            continue;
+        }
+        for (const change of result.changes) {
+            if (change.kind === "unchanged")
+                continue;
+            lines.push(change.summary);
+        }
+        const unchanged = result.changes.filter((c) => c.kind === "unchanged").length;
+        if (unchanged > 0) {
+            lines.push(`= ${unchanged} unchanged`);
+        }
+        lines.push(result.message);
+    }
+    return lines.join("\n").trimEnd() + "\n";
+}
+//# sourceMappingURL=install.js.map

package/dist/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EACL,sBAAsB,EACtB,YAAY,GAIb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,MAAM,CAAC,MAAM,uBAAuB,GAClC,qCAA8C,CAAC;AAEjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAsB,CAAC;AAEvD,sEAAsE;AACtE,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAC9C,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAC1C,MAAM,kBAAkB,GAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,CACb,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EACjB,CAAC,CAAC,MAAM,CAAC;QACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC,CACH;CACF,CAAC,CAAC;AAiCH,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,IAAuB,EAAE,YAAoB;IAClE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,KAAK,WAAW;YACd,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B;YACE,OAAO,KAAK,YAAY,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,OAAO,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,GAA4B,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7E,IACE,OAAO,KAAK,SAAS;QACrB,mBAAmB,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,EACvD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAA4B;QACxC,GAAG,IAAI;QACP,WAAW,EAAE;YACX,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YAClB,CAAC,yBAAyB,CAAC,EAAE,iBAAiB,EAAE;SACjD;KACF,CAAC;IACF,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CACrE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,qBAAqB,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,CAAC,GAAG,kBAAkB,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO;QACL,WAAW,EAAE;YACX,CAAC,yBAAyB,CAAC,EAAE,iBAAiB,EAAE;SACjD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO;QACL,SAAS,EAAE,sBAAsB;QACjC,eAAe,EAAE,sBAAsB;QACvC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;QACnC,IAAI,EAAE;YACJ,aAAa,EAAE,sBAAsB;YACrC,YAAY,EAAE,6BAA6B;YAC3C,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,KAAK;SACZ;QACD,SAAS,EAAE,EAAE,GAAG,EAAE,8BAA8B,EAAE,OAAO,EAAE,IAAI,EAAE;QACjE,WAAW,EAAE;YACX,iBAAiB,EAAE,IAAI;YACvB,mBAAmB,EAAE,KAAK;SAC3B;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,MAAuB;IAEvB,MAAM,QAAQ,GAAG,YAAY,CAC3B,sBAAsB,CAAC,OAAO,CAAC,EAC/B,EAAE,EACF,MAAM,CAAC,MAAM,CACd,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAChC,CAAC,CAAC,IAAI,KAAK,yBAAyB;QACpC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CACpC,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI,CAAC,IAAI;YACpB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IACD,8DAA8D;IAC9D,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAClE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,aAAa,CAAC,IAAI;YAC7B,OAAO,EAAE,aAAa,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,yBAAyB;YACpC,OAAO,EAAE,WAAW,OAAO,sEAAsE;SAClG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA4B;IAE5B,MAAM,EACJ,OAAO,EACP,MAAM,EACN,MAAM,GAAG,KAAK,EACd,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,OAAO,GAAG,SAAS,GACpB,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM;YACN,OAAO;YACP,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,EAAE;YACX,OAAO,EACL,8EAA8E;YAChF,SAAS,EAAE,eAAe;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAEtD,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM;YACN,OAAO;YACP,UAAU;YACV,OAAO,EAAE,EAAE;YACX,OAAO,EACL,8EAA8E;YAChF,SAAS,EAAE,eAAe;SAC3B,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,kDAAkD;IAClD,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM;YACN,OAAO;YACP,UAAU;YACV,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,WAAW,OAAO,0HAA0H;YACrJ,SAAS,EAAE,qBAAqB;SACjC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM;YACN,OAAO;YACP,UAAU;YACV,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,WAAW,OAAO,sBAAsB;YACnE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,eAAe;SAC/C,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,IAAI,UAAU,GAA6B,IAAI,CAAC;IAChD,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC9C,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM;gBACN,OAAO;gBACP,UAAU;gBACV,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,4BAA4B,SAAS,KAAK,MAAM,EAAE;gBAC3D,SAAS,EAAE,eAAe;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,gCAAgC;IAChC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAEzD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE3C,IAAI,IAAuB,CAAC;IAC5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,IAAI,GAAG,WAAW,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,gBAAgB;QAC9B,IAAI;QACJ,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC;KAC/C,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAED,iCAAiC;IACjC,MAAM,KAAK,GAAsB;QAC/B,OAAO,EAAE,CAAC;QACV,OAAO;QACP,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,UAAU,EAAE,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAChE,cAAc,EAAE,gBAAgB;QAChC,KAAK,EAAE;YACL,CAAC,gBAAgB,CAAC,EAAE;gBAClB,QAAQ;gBACR,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;aACtB;SACF;KACF,CAAC;IAEF,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACxD,IAAI,SAAS,GAAsB,QAAQ,CAAC;IAC5C,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACnD,SAAS,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,uBAAuB;QACrC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,aAAa,CAAC,SAAS,EAAE,uBAAuB,CAAC;KAC3D,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QACzC,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAClD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,wBAAwB,KAAK,CAAC,MAAM,+BAA+B,OAAO,GAAG;QAC/E,CAAC,CAAC,mDAAmD,OAAO,KAAK,KAAK,CAAC,MAAM,mBAAmB,CAAC;IAEnG,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM;QACN,OAAO;QACP,UAAU;QACV,OAAO;QACP,OAAO;QACP,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA6B,EAC7B,QAAiB;IAEjB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,MAAM,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAC1F,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAC9B,CAAC,MAAM,CAAC;QACT,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,YAAY,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;AAC3C,CAAC"}

package/dist/profile.d.ts

@@ -0,0 +1,27 @@
+import type { OffRouterConfig } from "offrouter-core";
+export declare const SAFE_PROFILE_ID_RE: RegExp;
+export declare function isSafeProfileId(profile: string): boolean;
+export interface ResolveCodexProfileDirOptions {
+    env?: NodeJS.ProcessEnv;
+    homedir?: () => string;
+}
+/**
+ * Resolve the on-disk Codex profile directory for a OffRouter profile id.
+ *
+ * - When OFFROUTER_CODEX_PROFILES_DIR is set: $DIR/<profile>
+ * - profile id `codex` -> CODEX_HOME (if set) else ~/.codex
+ * - otherwise -> ~/.<profile> (e.g. codex-personal -> ~/.codex-personal)
+ */
+export declare function resolveCodexProfileDir(profile: string, options?: ResolveCodexProfileDirOptions): string;
+/**
+ * Personal Codex profiles only: id starts with "codex" or is exactly "codex".
+ */
+export declare function isCodexHarnessProfile(profile: string): boolean;
+export declare function isWorkLikeProfile(profile: string): boolean;
+/**
+ * Allowlisted personal Codex profiles eligible for install --all-personal.
+ * Excludes the bare global `codex` profile (only mutable when explicit) and
+ * work-like ids, and applies deniedProfilePatterns glob filters.
+ */
+export declare function listAllowlistedPersonalCodexProfiles(config: OffRouterConfig): string[];
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,eAAO,MAAM,kBAAkB,QAAiC,CAAC;AAEjE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,MAAM,WAAW,6BAA6B;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC;CACxB;AAUD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,6BAAkC,GAC1C,MAAM,CAiBR;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D;AAQD;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,MAAM,EAAE,eAAe,GACtB,MAAM,EAAE,CAaV"}

package/dist/profile.js

@@ -0,0 +1,71 @@
+/**
+ * Codex profile directory resolution and allowlist helpers.
+ *
+ * Mirrors the Claude adapter's profile isolation model:
+ * - env OFFROUTER_CODEX_PROFILES_DIR set => <root>/<profile>
+ * - profile === "codex" => env CODEX_HOME || ~/.codex   (bare global; only
+ *   mutable when explicitly allowlisted)
+ * - otherwise => ~/.<profile>   (e.g. codex-personal => ~/.codex-personal)
+ */
+import { homedir as osHomedir } from "node:os";
+import { join, resolve } from "node:path";
+export const SAFE_PROFILE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
+export function isSafeProfileId(profile) {
+    return SAFE_PROFILE_ID_RE.test(profile);
+}
+function envValue(env, key) {
+    const v = env?.[key]?.trim();
+    return v || undefined;
+}
+/**
+ * Resolve the on-disk Codex profile directory for a OffRouter profile id.
+ *
+ * - When OFFROUTER_CODEX_PROFILES_DIR is set: $DIR/<profile>
+ * - profile id `codex` -> CODEX_HOME (if set) else ~/.codex
+ * - otherwise -> ~/.<profile> (e.g. codex-personal -> ~/.codex-personal)
+ */
+export function resolveCodexProfileDir(profile, options = {}) {
+    if (!isSafeProfileId(profile)) {
+        throw new Error(`Unsafe profile id "${profile}". Use letters, numbers, dots, underscores, and dashes only.`);
+    }
+    const env = options.env ?? process.env;
+    const home = (options.homedir ?? osHomedir)();
+    const profilesRoot = envValue(env, "OFFROUTER_CODEX_PROFILES_DIR");
+    if (profilesRoot) {
+        return resolve(join(profilesRoot, profile));
+    }
+    if (profile === "codex") {
+        const codexHome = envValue(env, "CODEX_HOME");
+        return resolve(codexHome ?? join(home, ".codex"));
+    }
+    return resolve(join(home, `.${profile}`));
+}
+/**
+ * Personal Codex profiles only: id starts with "codex" or is exactly "codex".
+ */
+export function isCodexHarnessProfile(profile) {
+    return profile === "codex" || profile.startsWith("codex-");
+}
+export function isWorkLikeProfile(profile) {
+    return profile.endsWith("-work") || profile.includes("-work-");
+}
+function matchGlob(pattern, value) {
+    const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+    const re = new RegExp(`^${escaped.replace(/\*/g, ".*")}$`);
+    return re.test(value);
+}
+/**
+ * Allowlisted personal Codex profiles eligible for install --all-personal.
+ * Excludes the bare global `codex` profile (only mutable when explicit) and
+ * work-like ids, and applies deniedProfilePatterns glob filters.
+ */
+export function listAllowlistedPersonalCodexProfiles(config) {
+    return [...config.policy.allowlistedProfiles]
+        .filter((id) => isSafeProfileId(id) &&
+        isCodexHarnessProfile(id) &&
+        id !== "codex" &&
+        !isWorkLikeProfile(id) &&
+        !(config.policy.deniedProfilePatterns ?? []).some((p) => matchGlob(p, id)))
+        .sort((a, b) => a.localeCompare(b));
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;AAEjE,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC;AAOD,SAAS,QAAQ,CACf,GAAkC,EAClC,GAAW;IAEX,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,SAAS,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,UAAyC,EAAE;IAE3C,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,sBAAsB,OAAO,8DAA8D,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IACnE,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,OAAO,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,KAAa;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAClD,MAAuB;IAEvB,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;SAC1C,MAAM,CACL,CAAC,EAAE,EAAE,EAAE,CACL,eAAe,CAAC,EAAE,CAAC;QACnB,qBAAqB,CAAC,EAAE,CAAC;QACzB,EAAE,KAAK,OAAO;QACd,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACtD,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CACjB,CACJ;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/rollback.d.ts

@@ -0,0 +1,23 @@
+import { type InstallFileChange } from "./install.js";
+export interface CodexRollbackOptions {
+    profile: string;
+    env?: NodeJS.ProcessEnv;
+    homedir?: () => string;
+    dryRun?: boolean;
+    /** Optional absolute override of the profile directory (tests). */
+    profileDir?: string;
+}
+export interface CodexRollbackResult {
+    ok: boolean;
+    dryRun: boolean;
+    profile: string;
+    profileDir: string;
+    changes: InstallFileChange[];
+    message: string;
+    errorCode?: "no_install_state" | "invalid_install_state" | "rollback_error";
+}
+/**
+ * Restore files tracked by codex-install-state.json for a profile.
+ */
+export declare function rollbackCodexProfile(options: CodexRollbackOptions): Promise<CodexRollbackResult>;
+//# sourceMappingURL=rollback.d.ts.map

package/dist/rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../src/rollback.ts"],"names":[],"mappings":"AASA,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,cAAc,CAAC;AAGtB,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,gBAAgB,CAAC;CAC7E;AAmID;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CA8G9B"}