onadit 0.0.1 → 1.0.0

package/dist/src/providers/claude-input-limit.js

@@ -0,0 +1,32 @@
+/**
+ * Input ceiling for prompts piped to the Claude Code CLI. Companion to
+ * `codex-input-limit.ts` (which also owns the shared, generic
+ * `truncateToBytes` helper).
+ *
+ * Unlike Codex there is no documented CLI parser ceiling; the binding
+ * constraint is the MODEL context window. Both CLI callers pin small fast
+ * models (triage and metadata default to haiku, ~200k-token context), and an
+ * over-context prompt fails the run just like Codex's `input_too_large` — so
+ * an oversized session would otherwise re-fail on every capture/backfill
+ * pass, the same jam class the Codex cap fixed.
+ *
+ * 256 KiB ≈ ≤ ~90k tokens even for dense agent-log text (~3 bytes/token) —
+ * comfortably inside haiku's ~200k context with room for the instruction
+ * prefix, wrapper tags, and the model's output. Matches the Codex budget,
+ * which was lowered for exactly this reason: a ~1 MiB capped prompt was
+ * observed live (2026-07-06) clearing the Codex parser and then failing on
+ * the model's context window; dense text makes byte→token estimates ~3:1,
+ * so generous byte budgets overrun contexts long before they look big.
+ */
+export const CLAUDE_MAX_INPUT_BYTES = 262_144;
+/**
+ * Headroom kept below the ceiling for the truncation marker only. It does NOT
+ * cover the caller's fixed prompt overhead — every caller must subtract its own
+ * instruction prefix and wrapper bytes from `CLAUDE_MAX_INPUT_BYTES` on top of
+ * this margin (a caller that leaned on the margin instead would break the moment
+ * its prefix exceeds 8 KB).
+ */
+export const CLAUDE_INPUT_SAFETY_MARGIN = 8_192;
+/** Marker Claude callers pass to `truncateToBytes` (its default names Codex). */
+export const CLAUDE_TRUNCATION_MARKER = "\n\n[...middle truncated to fit the Claude model context...]\n\n";
+//# sourceMappingURL=claude-input-limit.js.map

package/dist/src/providers/claude-input-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-input-limit.js","sourceRoot":"","sources":["../../../src/providers/claude-input-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEhD,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GACnC,kEAAkE,CAAC"}

package/dist/src/providers/codex-cli-digest.d.ts

@@ -0,0 +1,12 @@
+import type { DigestSummarizer, DigestContent, ConversationEntry, RetryConfig } from "./types.js";
+export declare class CodexCliDigestSummarizer implements DigestSummarizer {
+    private readonly options;
+    readonly retry: RetryConfig;
+    constructor(options?: {
+        cwd?: string;
+        timeoutMs?: number;
+        retry?: Partial<RetryConfig>;
+    });
+    summarize(conversations: ConversationEntry[]): Promise<DigestContent>;
+}
+//# sourceMappingURL=codex-cli-digest.d.ts.map

package/dist/src/providers/codex-cli-digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-digest.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-digest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,WAAW,EACZ,MAAM,YAAY,CAAC;AAuBpB,qBAAa,wBAAyB,YAAW,gBAAgB;IAI7D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;gBAGT,OAAO,GAAE;QACxB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;KACzB;IAKF,SAAS,CAAC,aAAa,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC;CAsD5E"}

package/dist/src/providers/codex-cli-digest.js

@@ -0,0 +1,70 @@
+import { DEFAULT_RETRY_CONFIG } from "./types.js";
+import { DIGEST_PROMPT } from "./anthropic-digest.js";
+import { runCodexCliJson } from "./codex-cli-runner.js";
+const DIGEST_OUTPUT_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: ["summary", "topics"],
+    properties: {
+        summary: { type: "string" },
+        topics: {
+            type: "array",
+            items: { type: "string" },
+        },
+    },
+};
+export class CodexCliDigestSummarizer {
+    options;
+    retry;
+    constructor(options = {}) {
+        this.options = options;
+        this.retry = { ...DEFAULT_RETRY_CONFIG, ...options.retry };
+    }
+    async summarize(conversations) {
+        const conversationText = conversations
+            .map((c, i) => `--- Conversation ${i + 1} ---\nSummary: ${c.summary}\nTopics: ${c.topics.join(", ")}`)
+            .join("\n\n");
+        const prompt = `${DIGEST_PROMPT}\n\n${conversationText}`;
+        let lastError;
+        for (let attempt = 0; attempt <= this.retry.maxRetries; attempt += 1) {
+            if (attempt > 0) {
+                const delay = Math.min(this.retry.baseDelayMs * 2 ** (attempt - 1), this.retry.maxDelayMs);
+                await sleep(delay);
+            }
+            try {
+                const { output } = await runCodexCliJson({
+                    prompt,
+                    schema: DIGEST_OUTPUT_SCHEMA,
+                    ...(this.options.cwd ? { cwd: this.options.cwd } : {}),
+                    ...(this.options.timeoutMs
+                        ? { timeoutMs: this.options.timeoutMs }
+                        : {}),
+                });
+                if (typeof output.summary !== "string") {
+                    throw new Error("Digest output missing string summary");
+                }
+                if (!Array.isArray(output.topics)) {
+                    throw new Error("Digest output topics must be an array");
+                }
+                if (!output.topics.every((t) => typeof t === "string")) {
+                    throw new Error("Digest output topics must be an array of strings");
+                }
+                return { summary: output.summary, topics: output.topics };
+            }
+            catch (error) {
+                lastError = error;
+                if (error instanceof Error &&
+                    (error.message.startsWith("Codex CLI returned malformed JSON") ||
+                        error.message.startsWith("Digest output"))) {
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw lastError;
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=codex-cli-digest.js.map

package/dist/src/providers/codex-cli-digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-digest.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-digest.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC/B,UAAU,EAAE;QACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACF;CACO,CAAC;AAOX,MAAM,OAAO,wBAAwB;IAIhB;IAHV,KAAK,CAAc;IAE5B,YACmB,UAIb,EAAE;QAJW,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,aAAkC;QAChD,MAAM,gBAAgB,GAAG,aAAa;aACnC,GAAG,CACF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,oBAAoB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF;aACA,IAAI,CAAC,MAAM,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,GAAG,aAAa,OAAO,gBAAgB,EAAE,CAAC;QAEzD,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CACtB,CAAC;gBACF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAe;oBACrD,MAAM;oBACN,MAAM,EAAE,oBAAoB;oBAC5B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;wBACxB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;wBACvC,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBAEH,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC1D,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBACtE,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,IACE,KAAK,YAAY,KAAK;oBACtB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,mCAAmC,CAAC;wBAC5D,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,EAC5C,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/providers/codex-cli-metadata-extraction.d.ts

@@ -0,0 +1,15 @@
+import type { MetadataExtractor, ConversationMetadata, RetryConfig, MetadataExtractionProvenance } from "./types.js";
+export declare class CodexCliMetadataExtractor implements MetadataExtractor {
+    private readonly options;
+    readonly retry: RetryConfig;
+    private lastCliTag;
+    private lastModel;
+    constructor(options?: {
+        cwd?: string;
+        timeoutMs?: number;
+        retry?: Partial<RetryConfig>;
+    });
+    extractMetadata(text: string): Promise<ConversationMetadata>;
+    getProvenance(): MetadataExtractionProvenance;
+}
+//# sourceMappingURL=codex-cli-metadata-extraction.d.ts.map

package/dist/src/providers/codex-cli-metadata-extraction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-metadata-extraction.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-metadata-extraction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,oBAAoB,EACpB,WAAW,EACX,4BAA4B,EAC7B,MAAM,YAAY,CAAC;AAkBpB,qBAAa,yBAA0B,YAAW,iBAAiB;IAM/D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,SAAS,CAAqB;gBAGnB,OAAO,GAAE;QACxB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;KACzB;IAKF,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqElE,aAAa,IAAI,4BAA4B;CAU9C"}

package/dist/src/providers/codex-cli-metadata-extraction.js

@@ -0,0 +1,78 @@
+import { DEFAULT_RETRY_CONFIG } from "./types.js";
+import { ConversationMetadataSchema, EXTRACTION_PROMPT, EXTRACTION_OUTPUT_SCHEMA, } from "./openai-metadata-extraction.js";
+import { CODEX_CLI_OVERRIDE_MODEL, CODEX_CLI_OVERRIDE_PROVIDER, } from "./operator-overrides.js";
+import { runCodexCliJson } from "./codex-cli-runner.js";
+import { CODEX_MAX_INPUT_BYTES, CODEX_INPUT_SAFETY_MARGIN, truncateToBytes, } from "./codex-input-limit.js";
+export class CodexCliMetadataExtractor {
+    options;
+    retry;
+    lastCliTag;
+    lastModel;
+    constructor(options = {}) {
+        this.options = options;
+        this.retry = { ...DEFAULT_RETRY_CONFIG, ...options.retry };
+    }
+    async extractMetadata(text) {
+        const escaped = text.replaceAll("</conversation_to_analyze>", "<\\/conversation_to_analyze>");
+        // Same Codex input budget the triage provider caps to: an oversized
+        // conversation overruns Codex — the ~1 MiB parser (`input_too_large`) or,
+        // well before it, the model context window — and re-fails enrichment on
+        // every backfill pass (non-fatal — ingest falls back to rift-basic — but
+        // wasteful). Truncate on the transcript budget = ceiling − fixed
+        // prompt/wrapper overhead − margin (see `codex-input-limit.ts`). Truncation
+        // only removes characters, so it can never re-introduce a raw
+        // `</conversation_to_analyze>` and break the escaping above.
+        const overheadBytes = Buffer.byteLength(EXTRACTION_PROMPT, "utf8") +
+            Buffer.byteLength("\n\n<conversation_to_analyze>\n\n</conversation_to_analyze>", "utf8");
+        const safeText = truncateToBytes(escaped, CODEX_MAX_INPUT_BYTES - overheadBytes - CODEX_INPUT_SAFETY_MARGIN);
+        const prompt = `${EXTRACTION_PROMPT}\n\n<conversation_to_analyze>\n${safeText}\n</conversation_to_analyze>`;
+        let lastError;
+        for (let attempt = 0; attempt <= this.retry.maxRetries; attempt += 1) {
+            if (attempt > 0) {
+                const delay = Math.min(this.retry.baseDelayMs * 2 ** (attempt - 1), this.retry.maxDelayMs);
+                await sleep(delay);
+            }
+            try {
+                const { output, cliTag, model } = await runCodexCliJson({
+                    prompt,
+                    schema: EXTRACTION_OUTPUT_SCHEMA,
+                    ...(this.options.cwd ? { cwd: this.options.cwd } : {}),
+                    ...(this.options.timeoutMs
+                        ? { timeoutMs: this.options.timeoutMs }
+                        : {}),
+                });
+                const parsed = ConversationMetadataSchema.safeParse(output);
+                if (!parsed.success) {
+                    throw new Error(`Extraction output failed validation: ${parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join("; ")}`);
+                }
+                this.lastCliTag = cliTag;
+                this.lastModel = model;
+                return parsed.data;
+            }
+            catch (error) {
+                lastError = error;
+                if (error instanceof Error &&
+                    (error.message.startsWith("Codex CLI returned malformed JSON") ||
+                        error.message.startsWith("Extraction output failed validation"))) {
+                    continue;
+                }
+                throw error;
+            }
+        }
+        throw lastError;
+    }
+    getProvenance() {
+        return {
+            provider: CODEX_CLI_OVERRIDE_PROVIDER,
+            // Honest provenance: the model codex actually ran under. Falls back to
+            // the sentinel only when provenance is read before any extraction ran.
+            model: this.lastModel ?? CODEX_CLI_OVERRIDE_MODEL,
+            version: "1",
+            ...(this.lastCliTag ? { cli_tag: this.lastCliTag } : {}),
+        };
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=codex-cli-metadata-extraction.js.map

package/dist/src/providers/codex-cli-metadata-extraction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-metadata-extraction.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-metadata-extraction.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,OAAO,yBAAyB;IAMjB;IALV,KAAK,CAAc;IACpB,UAAU,CAAqB;IAC/B,SAAS,CAAqB;IAEtC,YACmB,UAIb,EAAE;QAJW,YAAO,GAAP,OAAO,CAIlB;QAEN,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAC7B,4BAA4B,EAC5B,8BAA8B,CAC/B,CAAC;QACF,oEAAoE;QACpE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,iEAAiE;QACjE,4EAA4E;QAC5E,8DAA8D;QAC9D,6DAA6D;QAC7D,MAAM,aAAa,GACjB,MAAM,CAAC,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC;YAC5C,MAAM,CAAC,UAAU,CACf,6DAA6D,EAC7D,MAAM,CACP,CAAC;QACJ,MAAM,QAAQ,GAAG,eAAe,CAC9B,OAAO,EACP,qBAAqB,GAAG,aAAa,GAAG,yBAAyB,CAClE,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,iBAAiB,kCAAkC,QAAQ,8BAA8B,CAAC;QAE5G,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CACtB,CAAC;gBACF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,CAAuB;oBAC5E,MAAM;oBACN,MAAM,EAAE,wBAAwB;oBAChC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;wBACxB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;wBACvC,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrI,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;gBACzB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,OAAO,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,IACE,KAAK,YAAY,KAAK;oBACtB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,mCAAmC,CAAC;wBAC5D,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,qCAAqC,CAAC,CAAC,EAClE,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;IAED,aAAa;QACX,OAAO;YACL,QAAQ,EAAE,2BAA2B;YACrC,uEAAuE;YACvE,uEAAuE;YACvE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,wBAAwB;YACjD,OAAO,EAAE,GAAG;YACZ,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/providers/codex-cli-model.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Codex model resolution for the isolated-CODEX_HOME preflight/exec path.
+ *
+ * Onadit launches `codex exec` with an isolated CODEX_HOME that copies only
+ * `auth.json` (never the user's `config.toml`), so it does NOT inherit the
+ * user's `model = "..."`. Codex then falls back to its own built-in default,
+ * which changes between releases — 0.125.0 moved it to `gpt-5.3-codex`, a
+ * model ChatGPT-auth plans reject, silently breaking every preflight. The
+ * fix: Onadit pins an explicit `--model` on every run and NEVER inherits codex's
+ * implicit default. Resolution order:
+ *   1. Onadit config (`codex_cli.model`) — operator override.
+ *   2. Top-level `model` in the source `~/.codex/config.toml` — the user's
+ *      own proven choice, which the isolated home would otherwise drop.
+ *   3. A previously probe-verified model persisted under the data dir.
+ *   4. The account's live model list (`codex debug models`): balanced models
+ *      first, then fast, then frontier. Each is probed with a tiny real call;
+ *      the first that runs is persisted (verified, not guessed). If none work,
+ *      we throw a clear, actionable error instead of looping on a bad default.
+ *
+ * Models get retired. On 2026-10-14 OpenAI stopped accepting `gpt-5.5` for
+ * ChatGPT-plan Codex, and capture stopped until someone edited config.json by
+ * hand. So a model Codex refuses is recorded and skipped at every step for
+ * REFUSAL_TTL_MS — including an explicit `codex_cli.model` (the owner chose
+ * switching over stopping) — and the switch is recorded for `onadit status`.
+ */
+/** One entry of `codex debug models` — only the fields we pick by. */
+export interface CodexCatalogModel {
+    slug: string;
+    visibility?: string;
+    priority?: number;
+    description?: string;
+}
+export type CodexModelTier = "balanced" | "fast" | "frontier";
+/** The last automatic switch: Codex refused `from`, capture moved to `to`. */
+export interface CodexModelSwitch {
+    from: string;
+    to: string;
+    at: string;
+    /** True when `codex_cli.model` names a model Codex refused, so it needs editing. */
+    from_config: boolean;
+}
+/**
+ * How long a refused model stays skipped. A refusal is usually permanent (a
+ * retired model), but a plan change can bring a model back, so it is retried
+ * after a week rather than banned forever.
+ */
+export declare const REFUSAL_TTL_MS: number;
+/**
+ * Thrown when no model could be resolved from config/source/persisted state
+ * and every catalog candidate was refused. Carries the tried candidates so
+ * the preflight classifier can render an honest, actionable message.
+ */
+export declare class CodexModelUnavailableError extends Error {
+    readonly tried: string[];
+    constructor(tried: string[]);
+}
+/**
+ * Wire the Onadit config's model override + data dir into the resolver. Called
+ * once at daemon/CLI bootstrap. Safe to omit: without it, resolution still
+ * works via the source `config.toml` → persisted → catalog chain.
+ */
+export declare function configureCodexModel(opts: {
+    model?: string | undefined;
+    dataDir?: string | undefined;
+}): void;
+export declare function resetCodexModelCacheForTests(): void;
+/**
+ * Resolve the model to pin on `codex exec`. Memoized for the process so the
+ * source-config read / catalog probe happens at most once per model. `probe`
+ * and `listModels` are injected by the runner (rather than imported) to avoid
+ * a module cycle. `probe` resolves true when the model runs and false when
+ * Codex refuses it; any other failure (auth, network) throws and aborts the
+ * resolution, so it surfaces as itself instead of "no working model".
+ */
+export declare function resolveCodexModel(probe: (model: string) => Promise<boolean>, listModels?: () => Promise<CodexCatalogModel[]>): Promise<string>;
+/**
+ * Codex refused `model`. Record it (so every resolution skips it) and, when it
+ * is the model this process resolved, drop the memo so the next
+ * `resolveCodexModel` picks another one. Concurrent callers refused on the same
+ * model share that single re-resolution instead of each starting their own.
+ */
+export declare function markCodexModelRefused(model: string, now?: Date): void;
+/**
+ * Rough tier from Codex's own description of a model ("Frontier intelligence
+ * for the most demanding work", "Latest workhorse model…", "Fast and
+ * affordable model…"). Wording can change; a misread only changes which model
+ * gets probed first, never whether capture works.
+ */
+export declare function classifyCodexModelTier(description: string | undefined): CodexModelTier;
+/**
+ * Catalog models worth probing, best first: models shown in Codex's picker
+ * (`visibility: "list"`), minus refused ones, ordered by tier and then by
+ * Codex's own priority (lower = more recommended).
+ */
+export declare function orderCodexModelCandidates(catalog: readonly CodexCatalogModel[], isModelRefused?: (model: string) => boolean): string[];
+/**
+ * The last automatic switch, if it happened within `maxAgeMs` — for status.
+ * Reads the data dir directly so the daemon's status route sees switches made
+ * by any process (daemon, `onadit capture`, scripted captures).
+ */
+export declare function readCodexModelSwitch(dataDir: string, nowMs?: number, maxAgeMs?: number): CodexModelSwitch | null;
+/**
+ * Extract the top-level `model = "..."` from a codex `config.toml`. Stops at
+ * the first table header (`[section]`) so a `model` key nested inside a table
+ * (e.g. a profile) is never mistaken for the top-level one. Deliberately tiny
+ * — codex's top-level `model` is always a simple quoted/bare scalar, so we do
+ * not pull in a full TOML parser.
+ */
+export declare function parseTopLevelTomlModel(text: string): string | undefined;
+//# sourceMappingURL=codex-cli-model.d.ts.map

package/dist/src/providers/codex-cli-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-model.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-model.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,sEAAsE;AACtE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,oFAAoF;IACpF,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAA0B,CAAC;AActD;;;;GAIG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBACb,KAAK,EAAE,MAAM,EAAE;CAQ5B;AAYD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B,GAAG,IAAI,CAUP;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAOnD;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAC1C,UAAU,GAAE,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAkB,GAC9D,OAAO,CAAC,MAAM,CAAC,CAiEjB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,IAAI,CAS3E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,cAAc,CAKhB;AAWD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,cAAc,GAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAqB,GACvD,MAAM,EAAE,CAaV;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,KAAK,SAAa,EAClB,QAAQ,SAAiB,GACxB,gBAAgB,GAAG,IAAI,CAKzB;AAqBD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAwBvE"}