onadit 0.0.1 → 0.1.0-beta.45

package/dist/src/providers/claude-input-limit.js

@@ -0,0 +1,32 @@
+/**
+ * Input ceiling for prompts piped to the Claude Code CLI. Companion to
+ * `codex-input-limit.ts` (which also owns the shared, generic
+ * `truncateToBytes` helper).
+ *
+ * Unlike Codex there is no documented CLI parser ceiling; the binding
+ * constraint is the MODEL context window. Both CLI callers pin small fast
+ * models (triage and metadata default to haiku, ~200k-token context), and an
+ * over-context prompt fails the run just like Codex's `input_too_large` — so
+ * an oversized session would otherwise re-fail on every capture/backfill
+ * pass, the same jam class the Codex cap fixed.
+ *
+ * 256 KiB ≈ ≤ ~90k tokens even for dense agent-log text (~3 bytes/token) —
+ * comfortably inside haiku's ~200k context with room for the instruction
+ * prefix, wrapper tags, and the model's output. Matches the Codex budget,
+ * which was lowered for exactly this reason: a ~1 MiB capped prompt was
+ * observed live (2026-07-06) clearing the Codex parser and then failing on
+ * the model's context window; dense text makes byte→token estimates ~3:1,
+ * so generous byte budgets overrun contexts long before they look big.
+ */
+export const CLAUDE_MAX_INPUT_BYTES = 262_144;
+/**
+ * Headroom kept below the ceiling for the truncation marker only. It does NOT
+ * cover the caller's fixed prompt overhead — every caller must subtract its own
+ * instruction prefix and wrapper bytes from `CLAUDE_MAX_INPUT_BYTES` on top of
+ * this margin (a caller that leaned on the margin instead would break the moment
+ * its prefix exceeds 8 KB).
+ */
+export const CLAUDE_INPUT_SAFETY_MARGIN = 8_192;
+/** Marker Claude callers pass to `truncateToBytes` (its default names Codex). */
+export const CLAUDE_TRUNCATION_MARKER = "\n\n[...middle truncated to fit the Claude model context...]\n\n";
+//# sourceMappingURL=claude-input-limit.js.map

package/dist/src/providers/claude-input-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-input-limit.js","sourceRoot":"","sources":["../../../src/providers/claude-input-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEhD,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GACnC,kEAAkE,CAAC"}

package/dist/src/providers/codex-cli-digest.d.ts

@@ -0,0 +1,12 @@
+import type { DigestSummarizer, DigestContent, ConversationEntry, RetryConfig } from "./types.js";
+export declare class CodexCliDigestSummarizer implements DigestSummarizer {
+    private readonly options;
+    readonly retry: RetryConfig;
+    constructor(options?: {
+        cwd?: string;
+        timeoutMs?: number;
+        retry?: Partial<RetryConfig>;
+    });
+    summarize(conversations: ConversationEntry[]): Promise<DigestContent>;
+}
+//# sourceMappingURL=codex-cli-digest.d.ts.map

package/dist/src/providers/codex-cli-digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-digest.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-digest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,WAAW,EACZ,MAAM,YAAY,CAAC;AAuBpB,qBAAa,wBAAyB,YAAW,gBAAgB;IAI7D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;gBAGT,OAAO,GAAE;QACxB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;KACzB;IAKF,SAAS,CAAC,aAAa,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;CAsD5E"}

package/dist/src/providers/codex-cli-digest.js

@@ -0,0 +1,70 @@
+import { DEFAULT_RETRY_CONFIG } from "./types.js";
+import { DIGEST_PROMPT } from "./anthropic-digest.js";
+import { runCodexCliJson } from "./codex-cli-runner.js";
+const DIGEST_OUTPUT_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: ["summary", "topics"],
+    properties: {
+        summary: { type: "string" },
+        topics: {
+            type: "array",
+            items: { type: "string" },
+        },
+    },
+};
+export class CodexCliDigestSummarizer {
+    options;
+    retry;
+    constructor(options = {}) {
+        this.options = options;
+        this.retry = { ...DEFAULT_RETRY_CONFIG, ...options.retry };
+    }
+    async summarize(conversations) {
+        const conversationText = conversations
+            .map((c, i) => `--- Conversation ${i + 1} ---\nSummary: ${c.summary}\nTopics: ${c.topics.join(", ")}`)
+            .join("\n\n");
+        const prompt = `${DIGEST_PROMPT}\n\n${conversationText}`;
+        let lastError;
+        for (let attempt = 0; attempt <= this.retry.maxRetries; attempt += 1) {
+            if (attempt > 0) {
+                const delay = Math.min(this.retry.baseDelayMs * 2 ** (attempt - 1), this.retry.maxDelayMs);
+                await sleep(delay);
+            }
+            try {
+                const { output } = await runCodexCliJson({
+                    prompt,
+                    schema: DIGEST_OUTPUT_SCHEMA,
+                    ...(this.options.cwd ? { cwd: this.options.cwd } : {}),
+                    ...(this.options.timeoutMs
+                        ? { timeoutMs: this.options.timeoutMs }
+                        : {}),
+                });
+                if (typeof output.summary !== "string") {
+                    throw new Error("Digest output missing string summary");
+                }
+                if (!Array.isArray(output.topics)) {
+                    throw new Error("Digest output topics must be an array");
+                }
+                if (!output.topics.every((t) => typeof t === "string")) {
+                    throw new Error("Digest output topics must be an array of strings");
+                }
+                return { summary: output.summary, topics: output.topics };
+            }
+            catch (error) {
+                lastError = error;
+                if (error instanceof Error &&
+                    (error.message.startsWith("Codex CLI returned malformed JSON") ||
+                        error.message.startsWith("Digest output"))) {
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw lastError;
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=codex-cli-digest.js.map

package/dist/src/providers/codex-cli-digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-digest.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-digest.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC/B,UAAU,EAAE;QACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACF;CACO,CAAC;AAOX,MAAM,OAAO,wBAAwB;IAIhB;IAHV,KAAK,CAAc;IAE5B,YACmB,UAIb,EAAE;QAJW,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,aAAkC;QAChD,MAAM,gBAAgB,GAAG,aAAa;aACnC,GAAG,CACF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,oBAAoB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF;aACA,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,GAAG,aAAa,OAAO,gBAAgB,EAAE,CAAC;QAEzD,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CACtB,CAAC;gBACF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAe;oBACrD,MAAM;oBACN,MAAM,EAAE,oBAAoB;oBAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;wBACxB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;wBACvC,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBAEH,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBACtE,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,IACE,KAAK,YAAY,KAAK;oBACtB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,mCAAmC,CAAC;wBAC5D,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAC5C,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/providers/codex-cli-metadata-extraction.d.ts

@@ -0,0 +1,15 @@
+import type { MetadataExtractor, ConversationMetadata, RetryConfig, MetadataExtractionProvenance } from "./types.js";
+export declare class CodexCliMetadataExtractor implements MetadataExtractor {
+    private readonly options;
+    readonly retry: RetryConfig;
+    private lastCliTag;
+    private lastModel;
+    constructor(options?: {
+        cwd?: string;
+        timeoutMs?: number;
+        retry?: Partial<RetryConfig>;
+    });
+    extractMetadata(text: string): Promise<ConversationMetadata>;
+    getProvenance(): MetadataExtractionProvenance;
+}
+//# sourceMappingURL=codex-cli-metadata-extraction.d.ts.map

package/dist/src/providers/codex-cli-metadata-extraction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-metadata-extraction.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-metadata-extraction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,WAAW,EACX,4BAA4B,EAC7B,MAAM,YAAY,CAAC;AAkBpB,qBAAa,yBAA0B,YAAW,iBAAiB;IAM/D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,SAAS,CAAqB;gBAGnB,OAAO,GAAE;QACxB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;KACzB;IAKF,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqElE,aAAa,IAAI,4BAA4B;CAU9C"}

package/dist/src/providers/codex-cli-metadata-extraction.js

@@ -0,0 +1,78 @@
+import { DEFAULT_RETRY_CONFIG } from "./types.js";
+import { ConversationMetadataSchema, EXTRACTION_PROMPT, EXTRACTION_OUTPUT_SCHEMA, } from "./openai-metadata-extraction.js";
+import { CODEX_CLI_OVERRIDE_MODEL, CODEX_CLI_OVERRIDE_PROVIDER, } from "./operator-overrides.js";
+import { runCodexCliJson } from "./codex-cli-runner.js";
+import { CODEX_MAX_INPUT_BYTES, CODEX_INPUT_SAFETY_MARGIN, truncateToBytes, } from "./codex-input-limit.js";
+export class CodexCliMetadataExtractor {
+    options;
+    retry;
+    lastCliTag;
+    lastModel;
+    constructor(options = {}) {
+        this.options = options;
+        this.retry = { ...DEFAULT_RETRY_CONFIG, ...options.retry };
+    }
+    async extractMetadata(text) {
+        const escaped = text.replaceAll("</conversation_to_analyze>", "<\\/conversation_to_analyze>");
+        // Same Codex input budget the triage provider caps to: an oversized
+        // conversation overruns Codex — the ~1 MiB parser (`input_too_large`) or,
+        // well before it, the model context window — and re-fails enrichment on
+        // every backfill pass (non-fatal — ingest falls back to rift-basic — but
+        // wasteful). Truncate on the transcript budget = ceiling − fixed
+        // prompt/wrapper overhead − margin (see `codex-input-limit.ts`). Truncation
+        // only removes characters, so it can never re-introduce a raw
+        // `</conversation_to_analyze>` and break the escaping above.
+        const overheadBytes = Buffer.byteLength(EXTRACTION_PROMPT, "utf8") +
+            Buffer.byteLength("\n\n<conversation_to_analyze>\n\n</conversation_to_analyze>", "utf8");
+        const safeText = truncateToBytes(escaped, CODEX_MAX_INPUT_BYTES - overheadBytes - CODEX_INPUT_SAFETY_MARGIN);
+        const prompt = `${EXTRACTION_PROMPT}\n\n<conversation_to_analyze>\n${safeText}\n</conversation_to_analyze>`;
+        let lastError;
+        for (let attempt = 0; attempt <= this.retry.maxRetries; attempt += 1) {
+            if (attempt > 0) {
+                const delay = Math.min(this.retry.baseDelayMs * 2 ** (attempt - 1), this.retry.maxDelayMs);
+                await sleep(delay);
+            }
+            try {
+                const { output, cliTag, model } = await runCodexCliJson({
+                    prompt,
+                    schema: EXTRACTION_OUTPUT_SCHEMA,
+                    ...(this.options.cwd ? { cwd: this.options.cwd } : {}),
+                    ...(this.options.timeoutMs
+                        ? { timeoutMs: this.options.timeoutMs }
+                        : {}),
+                });
+                const parsed = ConversationMetadataSchema.safeParse(output);
+                if (!parsed.success) {
+                    throw new Error(`Extraction output failed validation: ${parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join("; ")}`);
+                }
+                this.lastCliTag = cliTag;
+                this.lastModel = model;
+                return parsed.data;
+            }
+            catch (error) {
+                lastError = error;
+                if (error instanceof Error &&
+                    (error.message.startsWith("Codex CLI returned malformed JSON") ||
+                        error.message.startsWith("Extraction output failed validation"))) {
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw lastError;
+    }
+    getProvenance() {
+        return {
+            provider: CODEX_CLI_OVERRIDE_PROVIDER,
+            // Honest provenance: the model codex actually ran under. Falls back to
+            // the sentinel only when provenance is read before any extraction ran.
+            model: this.lastModel ?? CODEX_CLI_OVERRIDE_MODEL,
+            version: "1",
+            ...(this.lastCliTag ? { cli_tag: this.lastCliTag } : {}),
+        };
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=codex-cli-metadata-extraction.js.map

package/dist/src/providers/codex-cli-metadata-extraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-metadata-extraction.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-metadata-extraction.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,OAAO,yBAAyB;IAMjB;IALV,KAAK,CAAc;IACpB,UAAU,CAAqB;IAC/B,SAAS,CAAqB;IAEtC,YACmB,UAIb,EAAE;QAJW,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAC7B,4BAA4B,EAC5B,8BAA8B,CAC/B,CAAC;QACF,oEAAoE;QACpE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,iEAAiE;QACjE,4EAA4E;QAC5E,8DAA8D;QAC9D,6DAA6D;QAC7D,MAAM,aAAa,GACjB,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC;YAC5C,MAAM,CAAC,UAAU,CACf,6DAA6D,EAC7D,MAAM,CACP,CAAC;QACJ,MAAM,QAAQ,GAAG,eAAe,CAC9B,OAAO,EACP,qBAAqB,GAAG,aAAa,GAAG,yBAAyB,CAClE,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,iBAAiB,kCAAkC,QAAQ,8BAA8B,CAAC;QAE5G,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CACtB,CAAC;gBACF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAuB;oBAC5E,MAAM;oBACN,MAAM,EAAE,wBAAwB;oBAChC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;wBACxB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;wBACvC,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrI,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;gBACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,IACE,KAAK,YAAY,KAAK;oBACtB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,mCAAmC,CAAC;wBAC5D,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,qCAAqC,CAAC,CAAC,EAClE,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;IAED,aAAa;QACX,OAAO;YACL,QAAQ,EAAE,2BAA2B;YACrC,uEAAuE;YACvE,uEAAuE;YACvE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,wBAAwB;YACjD,OAAO,EAAE,GAAG;YACZ,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/providers/codex-cli-model.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Codex model resolution for the isolated-CODEX_HOME preflight/exec path.
+ *
+ * Onadit launches `codex exec` with an isolated CODEX_HOME that copies only
+ * `auth.json` (never the user's `config.toml`), so it does NOT inherit the
+ * user's `model = "..."`. Codex then falls back to its own built-in default,
+ * which changes between releases — 0.125.0 moved it to `gpt-5.3-codex`, a
+ * model ChatGPT-auth plans reject, silently breaking every preflight. The
+ * fix: Onadit pins an explicit `--model` on every run and NEVER inherits codex's
+ * implicit default. Resolution order:
+ *   1. Onadit config (`codex_cli.model`) — operator override, authoritative.
+ *   2. Top-level `model` in the source `~/.codex/config.toml` — the user's
+ *      own proven choice, which the isolated home would otherwise drop.
+ *   3. A previously probe-verified model persisted under the data dir.
+ *   4. A live probe across known-good candidates; the first that actually
+ *      runs is persisted (verified, not guessed). If none work, we throw a
+ *      clear, actionable error instead of looping on codex's bad default.
+ */
+/**
+ * Evidence-based known-good fallbacks. Codex 0.125.0's implicit default
+ * (`gpt-5.3-codex`) is rejected by ChatGPT-auth plans; `gpt-5.5` is verified
+ * working. This list is a last-resort safety net only — operators on a plan
+ * where these are unavailable should set `codex_cli.model` rather than extend
+ * it, which is exactly what the thrown error tells them to do.
+ */
+export declare const CODEX_MODEL_FALLBACK_CANDIDATES: readonly ["gpt-5.5"];
+/**
+ * Thrown when no model could be resolved from config/source/persisted state
+ * and every fallback candidate failed to run. Carries the tried candidates so
+ * the preflight classifier can render an honest, actionable message.
+ */
+export declare class CodexModelUnavailableError extends Error {
+    readonly tried: string[];
+    constructor(tried: string[]);
+}
+/**
+ * Wire the Onadit config's model override + data dir into the resolver. Called
+ * once at daemon/CLI bootstrap. Safe to omit: without it, resolution still
+ * works via the source `config.toml` → persisted → probe chain.
+ */
+export declare function configureCodexModel(opts: {
+    model?: string | undefined;
+    dataDir?: string | undefined;
+}): void;
+export declare function resetCodexModelCacheForTests(): void;
+/**
+ * Resolve the model to pin on `codex exec`. Memoized for the process so the
+ * source-config read / probe happens at most once. `probe` is injected by the
+ * runner (rather than imported) to avoid a module cycle; it returns true when
+ * a candidate model actually runs.
+ */
+export declare function resolveCodexModel(probe: (model: string) => Promise<boolean>): Promise<string>;
+/**
+ * Extract the top-level `model = "..."` from a codex `config.toml`. Stops at
+ * the first table header (`[section]`) so a `model` key nested inside a table
+ * (e.g. a profile) is never mistaken for the top-level one. Deliberately tiny
+ * — codex's top-level `model` is always a simple quoted/bare scalar, so we do
+ * not pull in a full TOML parser.
+ */
+export declare function parseTopLevelTomlModel(text: string): string | undefined;
+//# sourceMappingURL=codex-cli-model.d.ts.map

package/dist/src/providers/codex-cli-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-model.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-model.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,sBAAuB,CAAC;AAIpE;;;;GAIG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBACb,KAAK,EAAE,MAAM,EAAE;CAQ5B;AAMD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B,GAAG,IAAI,CASP;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAInD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACzC,OAAO,CAAC,MAAM,CAAC,CAyCjB;AAqBD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAwBvE"}

package/dist/src/providers/codex-cli-model.js

@@ -0,0 +1,194 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/**
+ * Codex model resolution for the isolated-CODEX_HOME preflight/exec path.
+ *
+ * Onadit launches `codex exec` with an isolated CODEX_HOME that copies only
+ * `auth.json` (never the user's `config.toml`), so it does NOT inherit the
+ * user's `model = "..."`. Codex then falls back to its own built-in default,
+ * which changes between releases — 0.125.0 moved it to `gpt-5.3-codex`, a
+ * model ChatGPT-auth plans reject, silently breaking every preflight. The
+ * fix: Onadit pins an explicit `--model` on every run and NEVER inherits codex's
+ * implicit default. Resolution order:
+ *   1. Onadit config (`codex_cli.model`) — operator override, authoritative.
+ *   2. Top-level `model` in the source `~/.codex/config.toml` — the user's
+ *      own proven choice, which the isolated home would otherwise drop.
+ *   3. A previously probe-verified model persisted under the data dir.
+ *   4. A live probe across known-good candidates; the first that actually
+ *      runs is persisted (verified, not guessed). If none work, we throw a
+ *      clear, actionable error instead of looping on codex's bad default.
+ */
+/**
+ * Evidence-based known-good fallbacks. Codex 0.125.0's implicit default
+ * (`gpt-5.3-codex`) is rejected by ChatGPT-auth plans; `gpt-5.5` is verified
+ * working. This list is a last-resort safety net only — operators on a plan
+ * where these are unavailable should set `codex_cli.model` rather than extend
+ * it, which is exactly what the thrown error tells them to do.
+ */
+export const CODEX_MODEL_FALLBACK_CANDIDATES = ["gpt-5.5"];
+const PERSISTED_MODEL_FILE = path.join(".internal", "codex-model");
+/**
+ * Thrown when no model could be resolved from config/source/persisted state
+ * and every fallback candidate failed to run. Carries the tried candidates so
+ * the preflight classifier can render an honest, actionable message.
+ */
+export class CodexModelUnavailableError extends Error {
+    tried;
+    constructor(tried) {
+        super(`No working Codex model found (tried: ${tried.join(", ") || "none"}). ` +
+            `Set codex_cli.model in your Onadit config to a model your Codex plan supports.`);
+        this.name = "CodexModelUnavailableError";
+        this.tried = tried;
+    }
+}
+let configuredModel;
+let configuredDataDir;
+let resolvedModelPromise = null;
+/**
+ * Wire the Onadit config's model override + data dir into the resolver. Called
+ * once at daemon/CLI bootstrap. Safe to omit: without it, resolution still
+ * works via the source `config.toml` → persisted → probe chain.
+ */
+export function configureCodexModel(opts) {
+    if (typeof opts.model === "string" && opts.model.trim().length > 0) {
+        configuredModel = opts.model.trim();
+    }
+    if (typeof opts.dataDir === "string" && opts.dataDir.trim().length > 0) {
+        configuredDataDir = opts.dataDir.trim();
+    }
+    // Re-resolve after (re)configuration so a newly-supplied override wins.
+    resolvedModelPromise = null;
+}
+export function resetCodexModelCacheForTests() {
+    configuredModel = undefined;
+    configuredDataDir = undefined;
+    resolvedModelPromise = null;
+}
+/**
+ * Resolve the model to pin on `codex exec`. Memoized for the process so the
+ * source-config read / probe happens at most once. `probe` is injected by the
+ * runner (rather than imported) to avoid a module cycle; it returns true when
+ * a candidate model actually runs.
+ */
+export async function resolveCodexModel(probe) {
+    if (resolvedModelPromise) {
+        return resolvedModelPromise;
+    }
+    const pending = (async () => {
+        if (configuredModel) {
+            return configuredModel;
+        }
+        const sourceModel = readSourceConfigModel();
+        if (sourceModel) {
+            return sourceModel;
+        }
+        const persisted = readPersistedModel(configuredDataDir);
+        if (persisted) {
+            return persisted;
+        }
+        // Nothing configured/known — actively verify a candidate before committing.
+        const tried = [];
+        for (const candidate of CODEX_MODEL_FALLBACK_CANDIDATES) {
+            tried.push(candidate);
+            if (await probe(candidate)) {
+                persistModel(configuredDataDir, candidate);
+                return candidate;
+            }
+        }
+        throw new CodexModelUnavailableError(tried);
+    })();
+    resolvedModelPromise = pending;
+    // On failure, clear the cache so a later call (e.g. after the user sets a
+    // model or auth recovers) can retry instead of returning the stale rejection.
+    pending.catch(() => {
+        if (resolvedModelPromise === pending) {
+            resolvedModelPromise = null;
+        }
+    });
+    return pending;
+}
+/** The source CODEX_HOME the user actually authenticated, mirroring the runner. */
+function resolveSourceCodexHome() {
+    if (typeof process.env["CODEX_HOME"] === "string") {
+        return process.env["CODEX_HOME"];
+    }
+    return path.join(os.homedir(), ".codex");
+}
+function readSourceConfigModel() {
+    const configPath = path.join(resolveSourceCodexHome(), "config.toml");
+    let text;
+    try {
+        text = fs.readFileSync(configPath, "utf-8");
+    }
+    catch {
+        return undefined;
+    }
+    return parseTopLevelTomlModel(text);
+}
+/**
+ * Extract the top-level `model = "..."` from a codex `config.toml`. Stops at
+ * the first table header (`[section]`) so a `model` key nested inside a table
+ * (e.g. a profile) is never mistaken for the top-level one. Deliberately tiny
+ * — codex's top-level `model` is always a simple quoted/bare scalar, so we do
+ * not pull in a full TOML parser.
+ */
+export function parseTopLevelTomlModel(text) {
+    for (const rawLine of text.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (line.startsWith("[")) {
+            break;
+        }
+        if (line.length === 0 || line.startsWith("#")) {
+            continue;
+        }
+        const match = /^model\s*=\s*(.+)$/.exec(line);
+        if (!match) {
+            continue;
+        }
+        const value = (match[1] ?? "").trim();
+        const quoted = /^"([^"]*)"|^'([^']*)'/.exec(value);
+        if (quoted) {
+            const inner = quoted[1] ?? quoted[2] ?? "";
+            return inner.length > 0 ? inner : undefined;
+        }
+        // Bare value: strip any trailing inline comment.
+        const bare = value.replace(/\s+#.*$/, "").trim();
+        return bare.length > 0 ? bare : undefined;
+    }
+    return undefined;
+}
+function persistedModelPath(dataDir) {
+    if (!dataDir) {
+        return undefined;
+    }
+    return path.join(dataDir, PERSISTED_MODEL_FILE);
+}
+function readPersistedModel(dataDir) {
+    const file = persistedModelPath(dataDir);
+    if (!file) {
+        return undefined;
+    }
+    try {
+        const value = fs.readFileSync(file, "utf-8").trim();
+        return value.length > 0 ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function persistModel(dataDir, model) {
+    const file = persistedModelPath(dataDir);
+    if (!file) {
+        return;
+    }
+    try {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, `${model}\n`, "utf-8");
+    }
+    catch {
+        // Persistence is a best-effort optimisation; a failure just means the
+        // probe re-runs next cold start. Never fail a capture over it.
+    }
+}
+//# sourceMappingURL=codex-cli-model.js.map

package/dist/src/providers/codex-cli-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-model.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,SAAS,CAAU,CAAC;AAEpE,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,KAAK,CAAW;IACzB,YAAY,KAAe;QACzB,KAAK,CACH,wCAAwC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK;YACrE,gFAAgF,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,IAAI,eAAmC,CAAC;AACxC,IAAI,iBAAqC,CAAC;AAC1C,IAAI,oBAAoB,GAA2B,IAAI,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAGnC;IACC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,wEAAwE;IACxE,oBAAoB,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,eAAe,GAAG,SAAS,CAAC;IAC5B,iBAAiB,GAAG,SAAS,CAAC;IAC9B,oBAAoB,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA0C;IAE1C,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QAC1B,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;QAC5C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACxD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,4EAA4E;QAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,SAAS,IAAI,+BAA+B,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,IAAI,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBAC3C,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,EAAE,CAAC;IAEL,oBAAoB,GAAG,OAAO,CAAC;IAC/B,0EAA0E;IAC1E,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;QACjB,IAAI,oBAAoB,KAAK,OAAO,EAAE,CAAC;YACrC,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,SAAS,sBAAsB;IAC7B,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,aAAa,CAAC,CAAC;IACtE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QACD,iDAAiD;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B,EAAE,KAAa;IAC9D,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;AACH,CAAC"}

package/dist/src/providers/codex-cli-runner.d.ts

@@ -0,0 +1,60 @@
+export interface CodexCliRunOptions {
+    prompt: string;
+    schema: Record<string, unknown>;
+    cwd?: string;
+    timeoutMs?: number;
+    /**
+     * Explicit model to pin via `--model`. When omitted, the runner resolves
+     * one (config → source config.toml → persisted → probe) — see
+     * codex-cli-model.ts. Passing it skips resolution (used by the probe itself
+     * to avoid re-entrancy).
+     */
+    model?: string;
+}
+export interface CodexCliRunResult<T> {
+    output: T;
+    cliTag: string;
+    /** The model actually pinned for this run — for honest provenance. */
+    model: string;
+}
+/**
+ * Test seam: replace the spawn-based `exec --help` probe so callers can unit-
+ * test the "reject before sending content" behavior without spawning codex.
+ * Returns null when compatible, else a leak-free reason. Resets the success
+ * cache so the next call re-probes through the override.
+ */
+export declare function setCodexExecProbeForTests(fn: ((cwd: string) => Promise<string | null>) | undefined): void;
+/**
+ * Thrown ONLY when the runner's own timeout timer fires and kills the Codex
+ * CLI process (`code === null`, signal SIGTERM) — i.e. the "took too long"
+ * case. A signal termination we did NOT initiate (external SIGKILL, OOM,
+ * manual interrupt) is deliberately NOT this error; see `runCodexCommand`.
+ * Typed (and carrying `timeoutMs`/`signal`) so callers can apply a bounded
+ * retry to it specifically, and so the recorded message is diagnosable
+ * instead of the opaque "exit null".
+ */
+export declare class CodexCliTimeoutError extends Error {
+    readonly timeoutMs: number;
+    readonly signal: NodeJS.Signals | null;
+    constructor(timeoutMs: number, signal: NodeJS.Signals | null, detail?: string);
+}
+export declare function runCodexCliJson<T>(options: CodexCliRunOptions): Promise<CodexCliRunResult<T>>;
+/**
+ * Cheap, synchronous "is the Codex CLI installed?" probe — resolves the
+ * `codex` executable on PATH (plus the Homebrew/usr-local fallbacks the
+ * runner already searches). Used to decide, per import, whether AI metadata
+ * extraction is available or whether to fall back to BasicMetadataExtractor.
+ * Detects install only, NOT auth — an installed-but-unauthenticated Codex
+ * still passes here and fails later at extraction time.
+ */
+export declare function isCodexCliAvailable(): boolean;
+export declare function resetCodexCliRunnerCacheForTests(): void;
+/**
+ * Summarise codex output for diagnosis. The old first-500-chars slice captured
+ * only the startup banner and hid the actual cause, which lands at the END of
+ * the stream (the failing model name, the exit reason). Instead keep the
+ * salient `ERROR` lines plus the tail. Short outputs are returned whole.
+ */
+export declare function summarizeCodexOutput(stderr: string, stdout: string): string;
+export declare function resolveCodexExecutableForTests(name: string, pathEnv?: string | undefined, fallbackDirs?: readonly string[]): string | undefined;
+//# sourceMappingURL=codex-cli-runner.d.ts.map

package/dist/src/providers/codex-cli-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-runner.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-runner.ts"],"names":[],"mappings":"AA+BA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;CACf;AA2CD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,GACxD,IAAI,CAGN;AA2DD;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC3B,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,SAAK;CAS1E;AAMD,wBAAsB,eAAe,CAAC,CAAC,EACrC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAgG/B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAOvD;AAgLD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAe3E;AAsGD,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAM,GAAG,SAA+B,EACjD,YAAY,GAAE,SAAS,MAAM,EAAmC,GAC/D,MAAM,GAAG,SAAS,CAepB"}