onadit 0.0.1 → 1.0.0

package/dist/src/providers/codex-cli-model.js

@@ -0,0 +1,338 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+/**
+ * How long a refused model stays skipped. A refusal is usually permanent (a
+ * retired model), but a plan change can bring a model back, so it is retried
+ * after a week rather than banned forever.
+ */
+export const REFUSAL_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+/** Probe at most this many catalog models per resolution — each is a real call. */
+const MAX_CATALOG_PROBES = 4;
+const PERSISTED_MODEL_FILE = path.join(".internal", "codex-model");
+const MODEL_HISTORY_FILE = path.join(".internal", "codex-model-history.json");
+/**
+ * Thrown when no model could be resolved from config/source/persisted state
+ * and every catalog candidate was refused. Carries the tried candidates so
+ * the preflight classifier can render an honest, actionable message.
+ */
+export class CodexModelUnavailableError extends Error {
+    tried;
+    constructor(tried) {
+        super(`No working Codex model found (tried: ${tried.join(", ") || "none"}). ` +
+            `Set codex_cli.model in your Onadit config to a model your Codex plan supports.`);
+        this.name = "CodexModelUnavailableError";
+        this.tried = tried;
+    }
+}
+let configuredModel;
+let configuredDataDir;
+let resolvedModelPromise = null;
+let resolvedModel = null;
+// Set when a refusal invalidates the memoized model; written as the switch
+// record once the next resolution lands on a different model.
+let pendingSwitch = null;
+// Refusals seen by this process — the source of truth when no data dir is set.
+const memoryRefusals = new Map();
+/**
+ * Wire the Onadit config's model override + data dir into the resolver. Called
+ * once at daemon/CLI bootstrap. Safe to omit: without it, resolution still
+ * works via the source `config.toml` → persisted → catalog chain.
+ */
+export function configureCodexModel(opts) {
+    if (typeof opts.model === "string" && opts.model.trim().length > 0) {
+        configuredModel = opts.model.trim();
+    }
+    if (typeof opts.dataDir === "string" && opts.dataDir.trim().length > 0) {
+        configuredDataDir = opts.dataDir.trim();
+    }
+    // Re-resolve after (re)configuration so a newly-supplied override wins.
+    resolvedModelPromise = null;
+    resolvedModel = null;
+}
+export function resetCodexModelCacheForTests() {
+    configuredModel = undefined;
+    configuredDataDir = undefined;
+    resolvedModelPromise = null;
+    resolvedModel = null;
+    pendingSwitch = null;
+    memoryRefusals.clear();
+}
+/**
+ * Resolve the model to pin on `codex exec`. Memoized for the process so the
+ * source-config read / catalog probe happens at most once per model. `probe`
+ * and `listModels` are injected by the runner (rather than imported) to avoid
+ * a module cycle. `probe` resolves true when the model runs and false when
+ * Codex refuses it; any other failure (auth, network) throws and aborts the
+ * resolution, so it surfaces as itself instead of "no working model".
+ */
+export async function resolveCodexModel(probe, listModels = async () => []) {
+    if (resolvedModelPromise) {
+        return resolvedModelPromise;
+    }
+    const pending = (async () => {
+        const now = Date.now();
+        const usable = (model) => model !== undefined && !isRefused(model, now) ? model : undefined;
+        const direct = usable(configuredModel) ??
+            usable(readSourceConfigModel()) ??
+            usable(readPersistedModel(configuredDataDir));
+        if (direct) {
+            return direct;
+        }
+        let catalog = [];
+        try {
+            catalog = await listModels();
+        }
+        catch {
+            // A Codex without `debug models`, or no network: nothing to pick from.
+            // The thrown error below then tells the user to set codex_cli.model.
+        }
+        const candidates = orderCodexModelCandidates(catalog, (model) => isRefused(model, now)).slice(0, MAX_CATALOG_PROBES);
+        const tried = [];
+        for (const candidate of candidates) {
+            tried.push(candidate);
+            if (await probe(candidate)) {
+                persistModel(configuredDataDir, candidate);
+                return candidate;
+            }
+            recordRefusal(candidate, new Date());
+        }
+        throw new CodexModelUnavailableError(tried);
+    })();
+    resolvedModelPromise = pending;
+    pending.then((model) => {
+        if (resolvedModelPromise !== pending)
+            return;
+        resolvedModel = model;
+        if (pendingSwitch && pendingSwitch.from !== model) {
+            recordSwitch({
+                from: pendingSwitch.from,
+                to: model,
+                at: new Date().toISOString(),
+                from_config: configuredModel !== undefined && isRefused(configuredModel, Date.now()),
+            });
+        }
+        pendingSwitch = null;
+    }, () => {
+        // On failure, clear the cache so a later call (e.g. after the user sets a
+        // model or auth recovers) can retry instead of returning the stale rejection.
+        if (resolvedModelPromise === pending) {
+            resolvedModelPromise = null;
+        }
+    });
+    return pending;
+}
+/**
+ * Codex refused `model`. Record it (so every resolution skips it) and, when it
+ * is the model this process resolved, drop the memo so the next
+ * `resolveCodexModel` picks another one. Concurrent callers refused on the same
+ * model share that single re-resolution instead of each starting their own.
+ */
+export function markCodexModelRefused(model, now = new Date()) {
+    if (!isRefused(model, now.getTime())) {
+        recordRefusal(model, now);
+    }
+    if (resolvedModel === model) {
+        pendingSwitch ??= { from: model };
+        resolvedModelPromise = null;
+        resolvedModel = null;
+    }
+}
+/**
+ * Rough tier from Codex's own description of a model ("Frontier intelligence
+ * for the most demanding work", "Latest workhorse model…", "Fast and
+ * affordable model…"). Wording can change; a misread only changes which model
+ * gets probed first, never whether capture works.
+ */
+export function classifyCodexModelTier(description) {
+    const text = (description ?? "").toLowerCase();
+    if (/frontier|most demanding|most capable/.test(text))
+        return "frontier";
+    if (/\bfast\b|affordable|efficient|\bmini\b|lightweight/.test(text))
+        return "fast";
+    return "balanced";
+}
+// Balanced first (the default level); then fast, which is cheap and finishes
+// well inside the triage timeout; frontier last — slowest, and it uses the most
+// of the user's plan on every hourly run.
+const TIER_RANK = {
+    balanced: 0,
+    fast: 1,
+    frontier: 2,
+};
+/**
+ * Catalog models worth probing, best first: models shown in Codex's picker
+ * (`visibility: "list"`), minus refused ones, ordered by tier and then by
+ * Codex's own priority (lower = more recommended).
+ */
+export function orderCodexModelCandidates(catalog, isModelRefused = () => false) {
+    return catalog
+        .filter((model) => model.visibility === undefined || model.visibility === "list")
+        .filter((model) => !isModelRefused(model.slug))
+        .map((model, index) => ({
+        slug: model.slug,
+        tier: TIER_RANK[classifyCodexModelTier(model.description)],
+        priority: typeof model.priority === "number" ? model.priority : Number.POSITIVE_INFINITY,
+        index,
+    }))
+        .sort((a, b) => a.tier - b.tier || a.priority - b.priority || a.index - b.index)
+        .map((model) => model.slug);
+}
+/**
+ * The last automatic switch, if it happened within `maxAgeMs` — for status.
+ * Reads the data dir directly so the daemon's status route sees switches made
+ * by any process (daemon, `onadit capture`, scripted captures).
+ */
+export function readCodexModelSwitch(dataDir, nowMs = Date.now(), maxAgeMs = REFUSAL_TTL_MS) {
+    const last = readHistory(dataDir).last_switch;
+    if (!last)
+        return null;
+    const at = Date.parse(last.at);
+    return Number.isFinite(at) && nowMs - at < maxAgeMs ? last : null;
+}
+/** The source CODEX_HOME the user actually authenticated, mirroring the runner. */
+function resolveSourceCodexHome() {
+    if (typeof process.env["CODEX_HOME"] === "string") {
+        return process.env["CODEX_HOME"];
+    }
+    return path.join(os.homedir(), ".codex");
+}
+function readSourceConfigModel() {
+    const configPath = path.join(resolveSourceCodexHome(), "config.toml");
+    let text;
+    try {
+        text = fs.readFileSync(configPath, "utf-8");
+    }
+    catch {
+        return undefined;
+    }
+    return parseTopLevelTomlModel(text);
+}
+/**
+ * Extract the top-level `model = "..."` from a codex `config.toml`. Stops at
+ * the first table header (`[section]`) so a `model` key nested inside a table
+ * (e.g. a profile) is never mistaken for the top-level one. Deliberately tiny
+ * — codex's top-level `model` is always a simple quoted/bare scalar, so we do
+ * not pull in a full TOML parser.
+ */
+export function parseTopLevelTomlModel(text) {
+    for (const rawLine of text.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (line.startsWith("[")) {
+            break;
+        }
+        if (line.length === 0 || line.startsWith("#")) {
+            continue;
+        }
+        const match = /^model\s*=\s*(.+)$/.exec(line);
+        if (!match) {
+            continue;
+        }
+        const value = (match[1] ?? "").trim();
+        const quoted = /^"([^"]*)"|^'([^']*)'/.exec(value);
+        if (quoted) {
+            const inner = quoted[1] ?? quoted[2] ?? "";
+            return inner.length > 0 ? inner : undefined;
+        }
+        // Bare value: strip any trailing inline comment.
+        const bare = value.replace(/\s+#.*$/, "").trim();
+        return bare.length > 0 ? bare : undefined;
+    }
+    return undefined;
+}
+function persistedModelPath(dataDir) {
+    if (!dataDir) {
+        return undefined;
+    }
+    return path.join(dataDir, PERSISTED_MODEL_FILE);
+}
+function readPersistedModel(dataDir) {
+    const file = persistedModelPath(dataDir);
+    if (!file) {
+        return undefined;
+    }
+    try {
+        const value = fs.readFileSync(file, "utf-8").trim();
+        return value.length > 0 ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function persistModel(dataDir, model) {
+    const file = persistedModelPath(dataDir);
+    if (!file) {
+        return;
+    }
+    try {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, `${model}\n`, "utf-8");
+    }
+    catch {
+        // Persistence is a best-effort optimisation; a failure just means the
+        // probe re-runs next cold start. Never fail a capture over it.
+    }
+}
+function isRefused(model, nowMs) {
+    const at = memoryRefusals.get(model) ?? readHistory(configuredDataDir).refused[model];
+    if (!at)
+        return false;
+    const refusedAt = Date.parse(at);
+    return Number.isFinite(refusedAt) && nowMs - refusedAt < REFUSAL_TTL_MS;
+}
+function recordRefusal(model, now) {
+    memoryRefusals.set(model, now.toISOString());
+    if (!configuredDataDir)
+        return;
+    const history = readHistory(configuredDataDir);
+    history.refused[model] = now.toISOString();
+    // Drop refusals past their TTL so the file stays a handful of entries.
+    for (const [name, at] of Object.entries(history.refused)) {
+        const refusedAt = Date.parse(at);
+        if (!Number.isFinite(refusedAt) || now.getTime() - refusedAt >= REFUSAL_TTL_MS) {
+            delete history.refused[name];
+        }
+    }
+    writeHistory(configuredDataDir, history);
+}
+function recordSwitch(modelSwitch) {
+    if (!configuredDataDir)
+        return;
+    const history = readHistory(configuredDataDir);
+    history.last_switch = modelSwitch;
+    writeHistory(configuredDataDir, history);
+}
+function readHistory(dataDir) {
+    if (!dataDir)
+        return { refused: {} };
+    try {
+        const parsed = JSON.parse(fs.readFileSync(path.join(dataDir, MODEL_HISTORY_FILE), "utf-8"));
+        const refused = parsed.refused && typeof parsed.refused === "object" ? parsed.refused : {};
+        const last = parsed.last_switch;
+        const lastValid = last &&
+            typeof last.from === "string" &&
+            typeof last.to === "string" &&
+            typeof last.at === "string";
+        return lastValid
+            ? { refused, last_switch: { ...last, from_config: last.from_config === true } }
+            : { refused };
+    }
+    catch {
+        return { refused: {} };
+    }
+}
+function writeHistory(dataDir, history) {
+    const file = path.join(dataDir, MODEL_HISTORY_FILE);
+    try {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        // Temp + rename: the daemon and `onadit capture` can write at the same time.
+        const tmp = `${file}.${process.pid}.tmp`;
+        fs.writeFileSync(tmp, `${JSON.stringify(history, null, 2)}\n`, "utf-8");
+        fs.renameSync(tmp, file);
+    }
+    catch {
+        // Best-effort, like the persisted model: the in-memory refusal still holds
+        // for this process, and a lost record only costs one refused call later.
+    }
+}
+//# sourceMappingURL=codex-cli-model.js.map

package/dist/src/providers/codex-cli-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-model.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA+C7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AACnE,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;AAQ9E;;;;GAIG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,KAAK,CAAW;IACzB,YAAY,KAAe;QACzB,KAAK,CACH,wCAAwC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK;YACrE,gFAAgF,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,IAAI,eAAmC,CAAC;AACxC,IAAI,iBAAqC,CAAC;AAC1C,IAAI,oBAAoB,GAA2B,IAAI,CAAC;AACxD,IAAI,aAAa,GAAkB,IAAI,CAAC;AACxC,2EAA2E;AAC3E,8DAA8D;AAC9D,IAAI,aAAa,GAA4B,IAAI,CAAC;AAClD,+EAA+E;AAC/E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAGnC;IACC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,wEAAwE;IACxE,oBAAoB,GAAG,IAAI,CAAC;IAC5B,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,eAAe,GAAG,SAAS,CAAC;IAC5B,iBAAiB,GAAG,SAAS,CAAC;IAC9B,oBAAoB,GAAG,IAAI,CAAC;IAC5B,aAAa,GAAG,IAAI,CAAC;IACrB,aAAa,GAAG,IAAI,CAAC;IACrB,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA0C,EAC1C,aAAiD,KAAK,IAAI,EAAE,CAAC,EAAE;IAE/D,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAsB,EAAE,CAC/D,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpE,MAAM,MAAM,GACV,MAAM,CAAC,eAAe,CAAC;YACvB,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC/B,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,GAAwB,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,qEAAqE;QACvE,CAAC;QACD,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9D,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CACtB,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,IAAI,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBAC3C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,EAAE,CAAC;IAEL,oBAAoB,GAAG,OAAO,CAAC;IAC/B,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,oBAAoB,KAAK,OAAO;YAAE,OAAO;QAC7C,aAAa,GAAG,KAAK,CAAC;QACtB,IAAI,aAAa,IAAI,aAAa,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAClD,YAAY,CAAC;gBACX,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,EAAE,EAAE,KAAK;gBACT,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,WAAW,EACT,eAAe,KAAK,SAAS,IAAI,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,EACD,GAAG,EAAE;QACH,0EAA0E;QAC1E,8EAA8E;QAC9E,IAAI,oBAAoB,KAAK,OAAO,EAAE,CAAC;YACrC,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACnE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;QAC5B,aAAa,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAClC,oBAAoB,GAAG,IAAI,CAAC;QAC5B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAA+B;IAE/B,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACzE,IAAI,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,0CAA0C;AAC1C,MAAM,SAAS,GAAmC;IAChD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAqC,EACrC,iBAA6C,GAAG,EAAE,CAAC,KAAK;IAExD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC;SAChF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1D,QAAQ,EACN,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB;QAChF,KAAK;KACN,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SAC/E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAClB,QAAQ,GAAG,cAAc;IAEzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,SAAS,sBAAsB;IAC7B,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,aAAa,CAAC,CAAC;IACtE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QACD,iDAAiD;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B,EAAE,KAAa;IAC9D,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa;IAC7C,MAAM,EAAE,GACN,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,SAAS,GAAG,cAAc,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,GAAS;IAC7C,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,iBAAiB;QAAE,OAAO;IAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC3C,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,cAAc,EAAE,CAAC;YAC/E,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,WAA6B;IACjD,IAAI,CAAC,iBAAiB;QAAE,OAAO;IAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;IAClC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CACnC,CAAC;QAChC,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;QAChC,MAAM,SAAS,GACb,IAAI;YACJ,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC;QAC9B,OAAO,SAAS;YACd,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,EAAE;YAC/E,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,OAA0B;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,6EAA6E;QAC7E,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,yEAAyE;IAC3E,CAAC;AACH,CAAC"}

package/dist/src/providers/codex-cli-runner.d.ts

@@ -0,0 +1,70 @@
+export interface CodexCliRunOptions {
+    prompt: string;
+    schema: Record<string, unknown>;
+    cwd?: string;
+    timeoutMs?: number;
+    /**
+     * Explicit model to pin via `--model`. When omitted, the runner resolves
+     * one (config → source config.toml → persisted → probe) — see
+     * codex-cli-model.ts. Passing it skips resolution (used by the probe itself
+     * to avoid re-entrancy).
+     */
+    model?: string;
+}
+export interface CodexCliRunResult<T> {
+    output: T;
+    cliTag: string;
+    /** The model actually pinned for this run — for honest provenance. */
+    model: string;
+}
+/**
+ * Test seam: replace the spawn-based `exec --help` probe so callers can unit-
+ * test the "reject before sending content" behavior without spawning codex.
+ * Returns null when compatible, else a leak-free reason. Resets the success
+ * cache so the next call re-probes through the override.
+ */
+export declare function setCodexExecProbeForTests(fn: ((cwd: string) => Promise<string | null>) | undefined): void;
+/**
+ * Thrown ONLY when the runner's own timeout timer fires and kills the Codex
+ * CLI process (`code === null`, signal SIGTERM) — i.e. the "took too long"
+ * case. A signal termination we did NOT initiate (external SIGKILL, OOM,
+ * manual interrupt) is deliberately NOT this error; see `runCodexCommand`.
+ * Typed (and carrying `timeoutMs`/`signal`) so callers can apply a bounded
+ * retry to it specifically, and so the recorded message is diagnosable
+ * instead of the opaque "exit null".
+ */
+export declare class CodexCliTimeoutError extends Error {
+    readonly timeoutMs: number;
+    readonly signal: NodeJS.Signals | null;
+    constructor(timeoutMs: number, signal: NodeJS.Signals | null, detail?: string);
+}
+/**
+ * Thrown when Codex exits refusing the pinned model — retired, or not on the
+ * account's plan ("The 'gpt-5.5' model is not supported when using Codex with
+ * a ChatGPT account."). Found in the FULL output before it is shortened, and
+ * named first in the message, so the recorded error always says it.
+ */
+export declare class CodexModelRejectedError extends Error {
+    readonly model: string;
+    constructor(model: string, reason: string, exitCode: number);
+}
+export declare function runCodexCliJson<T>(options: CodexCliRunOptions): Promise<CodexCliRunResult<T>>;
+/**
+ * Cheap, synchronous "is the Codex CLI installed?" probe — resolves the
+ * `codex` executable on PATH (plus the Homebrew/usr-local fallbacks the
+ * runner already searches). Used to decide, per import, whether AI metadata
+ * extraction is available or whether to fall back to BasicMetadataExtractor.
+ * Detects install only, NOT auth — an installed-but-unauthenticated Codex
+ * still passes here and fails later at extraction time.
+ */
+export declare function isCodexCliAvailable(): boolean;
+export declare function resetCodexCliRunnerCacheForTests(): void;
+/**
+ * Summarise codex output for diagnosis. The old first-500-chars slice captured
+ * only the startup banner and hid the actual cause, which lands at the END of
+ * the stream (the failing model name, the exit reason). Instead keep the
+ * salient `ERROR` lines plus the tail. Short outputs are returned whole.
+ */
+export declare function summarizeCodexOutput(stderr: string, stdout: string): string;
+export declare function resolveCodexExecutableForTests(name: string, pathEnv?: string | undefined, fallbackDirs?: readonly string[], keepsCodexHome?: (wrapper: string) => boolean): string | undefined;
+//# sourceMappingURL=codex-cli-runner.d.ts.map

package/dist/src/providers/codex-cli-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-cli-runner.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-runner.ts"],"names":[],"mappings":"AAkCA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;CACf;AAsED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,GACxD,IAAI,CAGN;AA2DD;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC3B,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,SAAK;CAS1E;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAK5D;AASD,wBAAsB,eAAe,CAAC,CAAC,EACrC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CA4C/B;AAwFD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAQvD;AAiMD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAe3E;AA4GD,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAM,GAAG,SAA+B,EACjD,YAAY,GAAE,SAAS,MAAM,EAAmC,EAChE,cAAc,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAA+B,GACnE,MAAM,GAAG,SAAS,CA8BpB"}