oh-my-codex 0.15.2 → 0.16.0

package/dist/team/__tests__/team-identity.test.js

@@ -0,0 +1,166 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtemp, rm, writeFile } from 'fs/promises';
+import { join } from 'path';
+import { tmpdir } from 'os';
+import { TEAM_NAME_SAFE_PATTERN } from '../contracts.js';
+import { buildInternalTeamName, resolveTeamIdentityScope, resolveTeamNameForCurrentContext, TeamLookupAmbiguityError } from '../team-identity.js';
+import { initTeamState } from '../state.js';
+const longDisplay = 'this-is-a-very-long-team-display-name-that-would-overflow';
+async function writePhase(cwd, teamName, currentPhase, updatedAt) {
+    await writeFile(join(cwd, '.omx', 'state', 'team', teamName, 'phase.json'), JSON.stringify({
+        current_phase: currentPhase,
+        max_fix_attempts: 3,
+        current_fix_attempt: 0,
+        transitions: [],
+        updated_at: updatedAt,
+    }, null, 2));
+}
+describe('team identity', () => {
+    it('builds stable valid internal names for same display and distinct sessions', () => {
+        const a = buildInternalTeamName(longDisplay, { sessionId: 'session-a', paneId: '', tmuxTarget: '', runId: '', source: 'env-session' });
+        const b = buildInternalTeamName(longDisplay, { sessionId: 'session-b', paneId: '', tmuxTarget: '', runId: '', source: 'env-session' });
+        const a2 = buildInternalTeamName(longDisplay, { sessionId: 'session-a', paneId: '', tmuxTarget: '', runId: '', source: 'env-session' });
+        const runA = buildInternalTeamName('demo', { sessionId: '', paneId: '', tmuxTarget: '', runId: 'run-a', source: 'run-id' });
+        const runB = buildInternalTeamName('demo', { sessionId: '', paneId: '', tmuxTarget: '', runId: 'run-b', source: 'run-id' });
+        assert.notEqual(a, b);
+        assert.notEqual(runA, runB);
+        assert.equal(a, a2);
+        assert.equal(a.length <= 30, true);
+        assert.match(a, TEAM_NAME_SAFE_PATTERN);
+    });
+    it('does not use cwd session.json as the identity source when env is absent', () => {
+        const scope = resolveTeamIdentityScope({ TMUX: '/tmp/tmux,1,0', TMUX_PANE: '%42' });
+        assert.equal(scope.source, 'tmux-pane');
+        assert.equal(scope.paneId, '%42');
+    });
+    it('resolves display names from OMX_TEAM_STATE_ROOT when cwd has no local team state', async () => {
+        const leaderCwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-leader-'));
+        const workerCwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-worker-'));
+        try {
+            await initTeamState('shared-demo-aaaaaaaa', 'task', 'executor', 1, leaderCwd, undefined, { OMX_SESSION_ID: 'session-shared' }, {
+                display_name: 'shared-demo', requested_name: 'shared-demo', identity_source: 'env-session',
+            });
+            assert.equal(resolveTeamNameForCurrentContext('shared-demo', workerCwd, {
+                OMX_SESSION_ID: 'session-shared',
+                OMX_TEAM_STATE_ROOT: join(leaderCwd, '.omx', 'state'),
+            }), 'shared-demo-aaaaaaaa');
+        }
+        finally {
+            await rm(leaderCwd, { recursive: true, force: true });
+            await rm(workerCwd, { recursive: true, force: true });
+        }
+    });
+    it('prefers active display-name candidates over retained terminal states', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-active-'));
+        try {
+            await initTeamState('demo-active', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-active' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await initTeamState('demo-terminal', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-terminal' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await writePhase(cwd, 'demo-terminal', 'complete', '2026-01-01T00:00:00.000Z');
+            assert.equal(resolveTeamNameForCurrentContext('demo', cwd, {}), 'demo-active');
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('prefers active display-name candidates over an exact retained terminal directory', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-exact-terminal-'));
+        try {
+            await initTeamState('demo', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-terminal' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await initTeamState('demo-aaaaaaaa', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-active' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await writePhase(cwd, 'demo', 'complete', '2026-01-01T00:00:00.000Z');
+            assert.equal(resolveTeamNameForCurrentContext('demo', cwd, {}), 'demo-aaaaaaaa');
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('uses current leader identity to break active display-name ties', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-current-'));
+        try {
+            await initTeamState('demo-aaaaaaaa', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-a' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await initTeamState('demo-bbbbbbbb', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-b' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            assert.equal(resolveTeamNameForCurrentContext('demo', cwd, { OMX_SESSION_ID: 'session-b' }), 'demo-bbbbbbbb');
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('uses current leader identity before latest retained terminal state', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-terminal-current-'));
+        try {
+            await initTeamState('demo-old-current', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-current' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await initTeamState('demo-new-other', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-other' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await writePhase(cwd, 'demo-old-current', 'failed', '2026-01-01T00:00:00.000Z');
+            await writePhase(cwd, 'demo-new-other', 'complete', '2026-01-02T00:00:00.000Z');
+            assert.equal(resolveTeamNameForCurrentContext('demo', cwd, { OMX_SESSION_ID: 'session-current' }), 'demo-old-current');
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('resolves the latest retained terminal display-name state only when unambiguous', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-latest-terminal-'));
+        try {
+            await initTeamState('demo-old', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-old' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await initTeamState('demo-new', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-new' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await writePhase(cwd, 'demo-old', 'failed', '2026-01-01T00:00:00.000Z');
+            await writePhase(cwd, 'demo-new', 'complete', '2026-01-03T00:00:00.000Z');
+            assert.equal(resolveTeamNameForCurrentContext('demo', cwd, {}), 'demo-new');
+            await writePhase(cwd, 'demo-old', 'failed', '2026-01-03T00:00:00.000Z');
+            assert.throws(() => resolveTeamNameForCurrentContext('demo', cwd, {}), TeamLookupAmbiguityError);
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('sanitizes unsafe lookup input instead of returning raw path-like names', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-unsafe-'));
+        try {
+            assert.equal(resolveTeamNameForCurrentContext('../../victim', cwd, {}), 'victim');
+            assert.equal(resolveTeamNameForCurrentContext('Demo Team', cwd, {}), 'demo-team');
+            assert.throws(() => resolveTeamNameForCurrentContext('---', cwd, {}), /invalid_team_name/);
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+    it('resolves display names to the current session candidate and fails closed on ambiguity', async () => {
+        const cwd = await mkdtemp(join(tmpdir(), 'omx-team-identity-'));
+        try {
+            await initTeamState('demo-aaaaaaaa', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-a' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            await initTeamState('demo-bbbbbbbb', 'task', 'executor', 1, cwd, undefined, { OMX_SESSION_ID: 'session-b' }, {
+                display_name: 'demo', requested_name: 'demo', identity_source: 'env-session',
+            });
+            assert.equal(resolveTeamNameForCurrentContext('demo', cwd, { OMX_SESSION_ID: 'session-a' }), 'demo-aaaaaaaa');
+            assert.equal(resolveTeamNameForCurrentContext('demo-bbbbbbbb', cwd, {}), 'demo-bbbbbbbb');
+            assert.throws(() => resolveTeamNameForCurrentContext('demo', cwd, {}), TeamLookupAmbiguityError);
+        }
+        finally {
+            await rm(cwd, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=team-identity.test.js.map

package/dist/team/__tests__/team-identity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-identity.test.js","sourceRoot":"","sources":["../../../src/team/__tests__/team-identity.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAClJ,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,GAAG,2DAA2D,CAAC;AAEhF,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,QAAgB,EAAE,YAAoB,EAAE,SAAiB;IAC9F,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;QACzF,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,CAAC;QACnB,mBAAmB,EAAE,CAAC;QACtB,WAAW,EAAE,EAAE;QACf,UAAU,EAAE,SAAS;KACtB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACf,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,GAAG,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QACvI,MAAM,CAAC,GAAG,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QACvI,MAAM,EAAE,GAAG,qBAAqB,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QACxI,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5H,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE5H,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,EAAE;gBAC7H,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa;aAC3F,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CACV,gCAAgC,CAAC,aAAa,EAAE,SAAS,EAAE;gBACzD,cAAc,EAAE,gBAAgB;gBAChC,mBAAmB,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;aACtD,CAAC,EACF,sBAAsB,CACvB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAIH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,EAAE;gBAC9G,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE;gBAClH,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;YAE/E,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QACjF,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAGH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE;gBACzG,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,EAAE;gBAChH,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;YAEtE,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;QACnF,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE;gBAC3G,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE;gBAC3G,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;QAChH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qCAAqC,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE;gBACpH,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,EAAE;gBAChH,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,GAAG,EAAE,kBAAkB,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC;YAChF,MAAM,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;YAEhF,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACzH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE;gBACxG,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE;gBACxG,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC;YACxE,MAAM,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,0BAA0B,CAAC,CAAC;YAE1E,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YAE5E,MAAM,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACnG,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAIH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,cAAc,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAClF,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;YAClF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;QAC7F,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE;gBAC3G,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YACH,MAAM,aAAa,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE;gBAC3G,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa;aAC7E,CAAC,CAAC;YAEH,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;YAC9G,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,eAAe,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;YAC1F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACnG,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/team/__tests__/tmux-session.test.js

@@ -6,7 +6,7 @@ import { PassThrough } from 'node:stream';
 import { chmod, mkdir, mkdtemp, readFile, rm, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { tmpdir } from 'os';
-import { buildClientAttachedReconcileHookName, assertTeamWorkerCliBinaryAvailable, buildWorkerProcessLaunchSpec, buildReconcileHudResizeArgs, buildRegisterClientAttachedReconcileArgs, buildRegisterResizeHookArgs, buildResizeHookName, buildResizeHookTarget, buildScheduleDelayedHudResizeArgs, buildUnregisterClientAttachedReconcileArgs, buildUnregisterResizeHookArgs, buildWorkerStartupCommand, buildHudPaneTarget, chooseTeamLeaderPaneId, createTeamSession, enableMouseScrolling, isMsysOrGitBash, isNativeWindows, isTmuxAvailable, restoreStandaloneHudPane, translatePathForMsys, isWsl2, isWorkerAlive, killWorker, killWorkerByPaneId, teardownWorkerPanes, listTeamSessions, resolveTeamWorkerCli, resolveTeamWorkerLaunchMode, resolveWorkerCliForSend, resolveTeamWorkerCliPlan, buildWorkerSubmitPlan, sanitizeTeamName, shouldAttemptAdaptiveRetry, sendToWorker, sendToWorkerStdin, sleepFractionalSeconds, translateWorkerLaunchArgsForCli, waitForWorkerReady, waitForWorkerReadyAsync, paneIsBootstrapping, dismissTrustPromptIfPresent, mitigateCopyModeUnderlineArtifacts, } from '../tmux-session.js';
+import { buildClientAttachedReconcileHookName, assertTeamWorkerCliBinaryAvailable, buildWorkerProcessLaunchSpec, buildReconcileHudResizeArgs, buildRegisterClientAttachedReconcileArgs, buildRegisterResizeHookArgs, buildResizeHookName, buildResizeHookTarget, buildScheduleDelayedHudResizeArgs, buildUnregisterClientAttachedReconcileArgs, buildUnregisterResizeHookArgs, buildWorkerStartupCommand, buildHudPaneTarget, chooseTeamLeaderPaneId, createTeamSession, enableMouseScrolling, isMsysOrGitBash, isNativeWindows, isTmuxAvailable, restoreStandaloneHudPane, translatePathForMsys, isWsl2, isWorkerAlive, killWorker, killWorkerByPaneId, teardownWorkerPanes, listTeamSessions, resolveTeamWorkerCli, resolveTeamWorkerLaunchMode, resolveWorkerCliForSend, resolveTeamWorkerCliPlan, buildWorkerSubmitPlan, sanitizeTeamName, shouldAttemptAdaptiveRetry, sendToWorker, sendToWorkerStdin, sleepFractionalSeconds, translateWorkerLaunchArgsForCli, waitForWorkerReady, waitForWorkerReadyAsync, paneIsBootstrapping, classifyWorkerStartupInjectSafety, checkWorkerStartupInjectSafety, dismissTrustPromptIfPresent, evaluateStartupDirectTriggerSafetyCapture, mitigateCopyModeUnderlineArtifacts, } from '../tmux-session.js';
 import { HUD_RESIZE_RECONCILE_DELAY_SECONDS, HUD_TMUX_TEAM_HEIGHT_LINES } from '../../hud/constants.js';
 import * as tmuxSessionModule from '../tmux-session.js';
 import { OMX_ENTRY_PATH_ENV, OMX_STARTUP_CWD_ENV } from '../../utils/paths.js';
@@ -261,6 +261,29 @@ describe('HUD resize hook command builders', () => {
         }
     });
 });
+describe('evaluateStartupDirectTriggerSafetyCapture', () => {
+    it('allows startup direct triggers on a ready prompt or Codex viewport', () => {
+        assert.deepEqual(evaluateStartupDirectTriggerSafetyCapture(READY_HELPER_CAPTURE, 'codex'), {
+            safe: true,
+            reason: 'ready_prompt',
+        });
+        assert.deepEqual(evaluateStartupDirectTriggerSafetyCapture(VIEWPORT_WITHOUT_VISIBLE_PROMPT_CAPTURE, 'codex'), {
+            safe: true,
+            reason: 'codex_viewport',
+        });
+    });
+    it('blocks startup direct triggers through trust and Claude bypass prompts', () => {
+        assert.deepEqual(evaluateStartupDirectTriggerSafetyCapture(`Do you trust the contents of this directory?
+Press enter to continue`, 'codex'), {
+            safe: false,
+            reason: 'trust_prompt',
+        });
+        assert.deepEqual(evaluateStartupDirectTriggerSafetyCapture(CLAUDE_BYPASS_PROMPT_CAPTURE, 'claude'), {
+            safe: false,
+            reason: 'claude_bypass_prompt',
+        });
+    });
+});
 describe('sendToWorker validation', () => {
     it('rejects text over 200 chars', async () => {
         await assert.rejects(sendToWorker('omx-team-x', 1, 'a'.repeat(200)), /< 200/i);
@@ -458,6 +481,37 @@ esac
         });
     });
 });
+describe('startup direct trigger safety', () => {
+    it('classifies ready panes as safe and blocks trust, bypass, bootstrapping, and active-task captures', () => {
+        assert.equal(classifyWorkerStartupInjectSafety(READY_HELPER_CAPTURE), 'safe');
+        assert.equal(classifyWorkerStartupInjectSafety('Do you trust the contents of this directory?\nPress enter to continue'), 'trust_prompt');
+        assert.equal(classifyWorkerStartupInjectSafety(CLAUDE_BYPASS_PROMPT_CAPTURE), 'claude_bypass_prompt');
+        assert.equal(classifyWorkerStartupInjectSafety('OpenAI Codex\nmodel: loading'), 'bootstrapping');
+        assert.equal(classifyWorkerStartupInjectSafety('OpenAI Codex\nmodel: test\n• Running tests (esc to interrupt)'), 'active_task');
+    });
+    it('checks visible pane first and refuses direct injection through a trust prompt', async () => {
+        await withMockTmuxFixture('omx-tmux-startup-direct-trust-', (logPath) => `#!/bin/sh
+set -eu
+printf '%s\n' "$*" >> "${logPath}"
+case "$1" in
+  capture-pane)
+    cat <<'EOF'
+Do you trust the contents of this directory?
+Press enter to continue
+EOF
+    exit 0
+    ;;
+  *)
+    exit 0
+    ;;
+esac
+`, async ({ logPath }) => {
+            assert.deepEqual(await checkWorkerStartupInjectSafety('omx-team-x', 1), { safe: false, reason: 'trust_prompt' });
+            const log = await readFile(logPath, 'utf-8');
+            assert.doesNotMatch(log, /send-keys/);
+        });
+    });
+});
 describe('shouldAttemptAdaptiveRetry', () => {
     it('returns false when adaptive retry is disabled', () => {
         assert.equal(shouldAttemptAdaptiveRetry('auto', true, false, '❯ hello', 'hello'), false);
@@ -2711,6 +2765,7 @@ esac
                 assert.match(tmuxLog, /set-option -p -t %1 @omx_pane_instance_id omx-pane-scope/);
                 assert.match(tmuxLog, /set-option -p -t %2 @omx_pane_instance_id omx-pane-scope/);
                 assert.match(tmuxLog, /set-option -p -t %3 @omx_pane_instance_id omx-pane-scope/);
+                assert.match(tmuxLog, /OMX_TMUX_HUD_OWNER=1 .*hud --watch/);
             });
         }
         finally {
@@ -3194,6 +3249,7 @@ esac
                 const tmuxLog = await readFile(logPath, 'utf-8');
                 assert.match(tmuxLog, new RegExp(escapeRegExp(launcherPath)));
                 assert.doesNotMatch(tmuxLog, /'dist\/cli\/omx\.js' hud --watch/);
+                assert.match(tmuxLog, /OMX_TMUX_HUD_OWNER=1 .*hud --watch/);
             });
         }
         finally {
@@ -3236,6 +3292,7 @@ esac
                 const tmuxLog = await readFile(logPath, 'utf-8');
                 assert.match(tmuxLog, /dist\/cli\/omx\.js' hud --watch/);
                 assert.doesNotMatch(tmuxLog, /\/tmp\/codex-host-binary' hud --watch/);
+                assert.match(tmuxLog, /OMX_TMUX_HUD_OWNER=1 .*hud --watch/);
             });
         }
         finally {