onadit 0.1.0-beta.45 → 1.0.0

package/dist/src/providers/codex-cli-model.js

@@ -2,35 +2,18 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 /**
- * Codex model resolution for the isolated-CODEX_HOME preflight/exec path.
- *
- * Onadit launches `codex exec` with an isolated CODEX_HOME that copies only
- * `auth.json` (never the user's `config.toml`), so it does NOT inherit the
- * user's `model = "..."`. Codex then falls back to its own built-in default,
- * which changes between releases — 0.125.0 moved it to `gpt-5.3-codex`, a
- * model ChatGPT-auth plans reject, silently breaking every preflight. The
- * fix: Onadit pins an explicit `--model` on every run and NEVER inherits codex's
- * implicit default. Resolution order:
- *   1. Onadit config (`codex_cli.model`) — operator override, authoritative.
- *   2. Top-level `model` in the source `~/.codex/config.toml` — the user's
- *      own proven choice, which the isolated home would otherwise drop.
- *   3. A previously probe-verified model persisted under the data dir.
- *   4. A live probe across known-good candidates; the first that actually
- *      runs is persisted (verified, not guessed). If none work, we throw a
- *      clear, actionable error instead of looping on codex's bad default.
+ * How long a refused model stays skipped. A refusal is usually permanent (a
+ * retired model), but a plan change can bring a model back, so it is retried
+ * after a week rather than banned forever.
  */
-/**
- * Evidence-based known-good fallbacks. Codex 0.125.0's implicit default
- * (`gpt-5.3-codex`) is rejected by ChatGPT-auth plans; `gpt-5.5` is verified
- * working. This list is a last-resort safety net only — operators on a plan
- * where these are unavailable should set `codex_cli.model` rather than extend
- * it, which is exactly what the thrown error tells them to do.
- */
-export const CODEX_MODEL_FALLBACK_CANDIDATES = ["gpt-5.5"];
+export const REFUSAL_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+/** Probe at most this many catalog models per resolution — each is a real call. */
+const MAX_CATALOG_PROBES = 4;
 const PERSISTED_MODEL_FILE = path.join(".internal", "codex-model");
+const MODEL_HISTORY_FILE = path.join(".internal", "codex-model-history.json");
 /**
  * Thrown when no model could be resolved from config/source/persisted state
- * and every fallback candidate failed to run. Carries the tried candidates so
+ * and every catalog candidate was refused. Carries the tried candidates so
  * the preflight classifier can render an honest, actionable message.
  */
 export class CodexModelUnavailableError extends Error {
@@ -45,10 +28,16 @@ export class CodexModelUnavailableError extends Error {
 let configuredModel;
 let configuredDataDir;
 let resolvedModelPromise = null;
+let resolvedModel = null;
+// Set when a refusal invalidates the memoized model; written as the switch
+// record once the next resolution lands on a different model.
+let pendingSwitch = null;
+// Refusals seen by this process — the source of truth when no data dir is set.
+const memoryRefusals = new Map();
 /**
  * Wire the Onadit config's model override + data dir into the resolver. Called
  * once at daemon/CLI bootstrap. Safe to omit: without it, resolution still
- * works via the source `config.toml` → persisted → probe chain.
+ * works via the source `config.toml` → persisted → catalog chain.
  */
 export function configureCodexModel(opts) {
     if (typeof opts.model === "string" && opts.model.trim().length > 0) {
@@ -59,55 +48,148 @@ export function configureCodexModel(opts) {
     }
     // Re-resolve after (re)configuration so a newly-supplied override wins.
     resolvedModelPromise = null;
+    resolvedModel = null;
 }
 export function resetCodexModelCacheForTests() {
     configuredModel = undefined;
     configuredDataDir = undefined;
     resolvedModelPromise = null;
+    resolvedModel = null;
+    pendingSwitch = null;
+    memoryRefusals.clear();
 }
 /**
  * Resolve the model to pin on `codex exec`. Memoized for the process so the
- * source-config read / probe happens at most once. `probe` is injected by the
- * runner (rather than imported) to avoid a module cycle; it returns true when
- * a candidate model actually runs.
+ * source-config read / catalog probe happens at most once per model. `probe`
+ * and `listModels` are injected by the runner (rather than imported) to avoid
+ * a module cycle. `probe` resolves true when the model runs and false when
+ * Codex refuses it; any other failure (auth, network) throws and aborts the
+ * resolution, so it surfaces as itself instead of "no working model".
  */
-export async function resolveCodexModel(probe) {
+export async function resolveCodexModel(probe, listModels = async () => []) {
     if (resolvedModelPromise) {
         return resolvedModelPromise;
     }
     const pending = (async () => {
-        if (configuredModel) {
-            return configuredModel;
+        const now = Date.now();
+        const usable = (model) => model !== undefined && !isRefused(model, now) ? model : undefined;
+        const direct = usable(configuredModel) ??
+            usable(readSourceConfigModel()) ??
+            usable(readPersistedModel(configuredDataDir));
+        if (direct) {
+            return direct;
         }
-        const sourceModel = readSourceConfigModel();
-        if (sourceModel) {
-            return sourceModel;
+        let catalog = [];
+        try {
+            catalog = await listModels();
         }
-        const persisted = readPersistedModel(configuredDataDir);
-        if (persisted) {
-            return persisted;
+        catch {
+            // A Codex without `debug models`, or no network: nothing to pick from.
+            // The thrown error below then tells the user to set codex_cli.model.
         }
-        // Nothing configured/known — actively verify a candidate before committing.
+        const candidates = orderCodexModelCandidates(catalog, (model) => isRefused(model, now)).slice(0, MAX_CATALOG_PROBES);
         const tried = [];
-        for (const candidate of CODEX_MODEL_FALLBACK_CANDIDATES) {
+        for (const candidate of candidates) {
             tried.push(candidate);
             if (await probe(candidate)) {
                 persistModel(configuredDataDir, candidate);
                 return candidate;
             }
+            recordRefusal(candidate, new Date());
         }
         throw new CodexModelUnavailableError(tried);
     })();
     resolvedModelPromise = pending;
-    // On failure, clear the cache so a later call (e.g. after the user sets a
-    // model or auth recovers) can retry instead of returning the stale rejection.
-    pending.catch(() => {
+    pending.then((model) => {
+        if (resolvedModelPromise !== pending)
+            return;
+        resolvedModel = model;
+        if (pendingSwitch && pendingSwitch.from !== model) {
+            recordSwitch({
+                from: pendingSwitch.from,
+                to: model,
+                at: new Date().toISOString(),
+                from_config: configuredModel !== undefined && isRefused(configuredModel, Date.now()),
+            });
+        }
+        pendingSwitch = null;
+    }, () => {
+        // On failure, clear the cache so a later call (e.g. after the user sets a
+        // model or auth recovers) can retry instead of returning the stale rejection.
         if (resolvedModelPromise === pending) {
             resolvedModelPromise = null;
         }
     });
     return pending;
 }
+/**
+ * Codex refused `model`. Record it (so every resolution skips it) and, when it
+ * is the model this process resolved, drop the memo so the next
+ * `resolveCodexModel` picks another one. Concurrent callers refused on the same
+ * model share that single re-resolution instead of each starting their own.
+ */
+export function markCodexModelRefused(model, now = new Date()) {
+    if (!isRefused(model, now.getTime())) {
+        recordRefusal(model, now);
+    }
+    if (resolvedModel === model) {
+        pendingSwitch ??= { from: model };
+        resolvedModelPromise = null;
+        resolvedModel = null;
+    }
+}
+/**
+ * Rough tier from Codex's own description of a model ("Frontier intelligence
+ * for the most demanding work", "Latest workhorse model…", "Fast and
+ * affordable model…"). Wording can change; a misread only changes which model
+ * gets probed first, never whether capture works.
+ */
+export function classifyCodexModelTier(description) {
+    const text = (description ?? "").toLowerCase();
+    if (/frontier|most demanding|most capable/.test(text))
+        return "frontier";
+    if (/\bfast\b|affordable|efficient|\bmini\b|lightweight/.test(text))
+        return "fast";
+    return "balanced";
+}
+// Balanced first (the default level); then fast, which is cheap and finishes
+// well inside the triage timeout; frontier last — slowest, and it uses the most
+// of the user's plan on every hourly run.
+const TIER_RANK = {
+    balanced: 0,
+    fast: 1,
+    frontier: 2,
+};
+/**
+ * Catalog models worth probing, best first: models shown in Codex's picker
+ * (`visibility: "list"`), minus refused ones, ordered by tier and then by
+ * Codex's own priority (lower = more recommended).
+ */
+export function orderCodexModelCandidates(catalog, isModelRefused = () => false) {
+    return catalog
+        .filter((model) => model.visibility === undefined || model.visibility === "list")
+        .filter((model) => !isModelRefused(model.slug))
+        .map((model, index) => ({
+        slug: model.slug,
+        tier: TIER_RANK[classifyCodexModelTier(model.description)],
+        priority: typeof model.priority === "number" ? model.priority : Number.POSITIVE_INFINITY,
+        index,
+    }))
+        .sort((a, b) => a.tier - b.tier || a.priority - b.priority || a.index - b.index)
+        .map((model) => model.slug);
+}
+/**
+ * The last automatic switch, if it happened within `maxAgeMs` — for status.
+ * Reads the data dir directly so the daemon's status route sees switches made
+ * by any process (daemon, `onadit capture`, scripted captures).
+ */
+export function readCodexModelSwitch(dataDir, nowMs = Date.now(), maxAgeMs = REFUSAL_TTL_MS) {
+    const last = readHistory(dataDir).last_switch;
+    if (!last)
+        return null;
+    const at = Date.parse(last.at);
+    return Number.isFinite(at) && nowMs - at < maxAgeMs ? last : null;
+}
 /** The source CODEX_HOME the user actually authenticated, mirroring the runner. */
 function resolveSourceCodexHome() {
     if (typeof process.env["CODEX_HOME"] === "string") {
@@ -191,4 +273,66 @@ function persistModel(dataDir, model) {
         // probe re-runs next cold start. Never fail a capture over it.
     }
 }
+function isRefused(model, nowMs) {
+    const at = memoryRefusals.get(model) ?? readHistory(configuredDataDir).refused[model];
+    if (!at)
+        return false;
+    const refusedAt = Date.parse(at);
+    return Number.isFinite(refusedAt) && nowMs - refusedAt < REFUSAL_TTL_MS;
+}
+function recordRefusal(model, now) {
+    memoryRefusals.set(model, now.toISOString());
+    if (!configuredDataDir)
+        return;
+    const history = readHistory(configuredDataDir);
+    history.refused[model] = now.toISOString();
+    // Drop refusals past their TTL so the file stays a handful of entries.
+    for (const [name, at] of Object.entries(history.refused)) {
+        const refusedAt = Date.parse(at);
+        if (!Number.isFinite(refusedAt) || now.getTime() - refusedAt >= REFUSAL_TTL_MS) {
+            delete history.refused[name];
+        }
+    }
+    writeHistory(configuredDataDir, history);
+}
+function recordSwitch(modelSwitch) {
+    if (!configuredDataDir)
+        return;
+    const history = readHistory(configuredDataDir);
+    history.last_switch = modelSwitch;
+    writeHistory(configuredDataDir, history);
+}
+function readHistory(dataDir) {
+    if (!dataDir)
+        return { refused: {} };
+    try {
+        const parsed = JSON.parse(fs.readFileSync(path.join(dataDir, MODEL_HISTORY_FILE), "utf-8"));
+        const refused = parsed.refused && typeof parsed.refused === "object" ? parsed.refused : {};
+        const last = parsed.last_switch;
+        const lastValid = last &&
+            typeof last.from === "string" &&
+            typeof last.to === "string" &&
+            typeof last.at === "string";
+        return lastValid
+            ? { refused, last_switch: { ...last, from_config: last.from_config === true } }
+            : { refused };
+    }
+    catch {
+        return { refused: {} };
+    }
+}
+function writeHistory(dataDir, history) {
+    const file = path.join(dataDir, MODEL_HISTORY_FILE);
+    try {
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        // Temp + rename: the daemon and `onadit capture` can write at the same time.
+        const tmp = `${file}.${process.pid}.tmp`;
+        fs.writeFileSync(tmp, `${JSON.stringify(history, null, 2)}\n`, "utf-8");
+        fs.renameSync(tmp, file);
+    }
+    catch {
+        // Best-effort, like the persisted model: the in-memory refusal still holds
+        // for this process, and a lost record only costs one refused call later.
+    }
+}
 //# sourceMappingURL=codex-cli-model.js.map

package/dist/src/providers/codex-cli-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"codex-cli-model.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,SAAS,CAAU,CAAC;AAEpE,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,KAAK,CAAW;IACzB,YAAY,KAAe;QACzB,KAAK,CACH,wCAAwC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK;YACrE,gFAAgF,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,IAAI,eAAmC,CAAC;AACxC,IAAI,iBAAqC,CAAC;AAC1C,IAAI,oBAAoB,GAA2B,IAAI,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAGnC;IACC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,wEAAwE;IACxE,oBAAoB,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,eAAe,GAAG,SAAS,CAAC;IAC5B,iBAAiB,GAAG,SAAS,CAAC;IAC9B,oBAAoB,GAAG,IAAI,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA0C;IAE1C,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QAC1B,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,MAAM,WAAW,GAAG,qBAAqB,EAAE,CAAC;QAC5C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACxD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,4EAA4E;QAC5E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,SAAS,IAAI,+BAA+B,EAAE,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,IAAI,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBAC3C,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,EAAE,CAAC;IAEL,oBAAoB,GAAG,OAAO,CAAC;IAC/B,0EAA0E;IAC1E,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;QACjB,IAAI,oBAAoB,KAAK,OAAO,EAAE,CAAC;YACrC,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,SAAS,sBAAsB;IAC7B,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,aAAa,CAAC,CAAC;IACtE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QACD,iDAAiD;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B,EAAE,KAAa;IAC9D,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;AACH,CAAC"}
+{"version":3,"file":"codex-cli-model.js","sourceRoot":"","sources":["../../../src/providers/codex-cli-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA+C7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AACnE,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;AAQ9E;;;;GAIG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,KAAK,CAAW;IACzB,YAAY,KAAe;QACzB,KAAK,CACH,wCAAwC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK;YACrE,gFAAgF,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,IAAI,eAAmC,CAAC;AACxC,IAAI,iBAAqC,CAAC;AAC1C,IAAI,oBAAoB,GAA2B,IAAI,CAAC;AACxD,IAAI,aAAa,GAAkB,IAAI,CAAC;AACxC,2EAA2E;AAC3E,8DAA8D;AAC9D,IAAI,aAAa,GAA4B,IAAI,CAAC;AAClD,+EAA+E;AAC/E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAGnC;IACC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnE,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,wEAAwE;IACxE,oBAAoB,GAAG,IAAI,CAAC;IAC5B,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,eAAe,GAAG,SAAS,CAAC;IAC5B,iBAAiB,GAAG,SAAS,CAAC;IAC9B,oBAAoB,GAAG,IAAI,CAAC;IAC5B,aAAa,GAAG,IAAI,CAAC;IACrB,aAAa,GAAG,IAAI,CAAC;IACrB,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA0C,EAC1C,aAAiD,KAAK,IAAI,EAAE,CAAC,EAAE;IAE/D,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAsB,EAAE,CAC/D,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpE,MAAM,MAAM,GACV,MAAM,CAAC,eAAe,CAAC;YACvB,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC/B,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,GAAwB,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,qEAAqE;QACvE,CAAC;QACD,MAAM,UAAU,GAAG,yBAAyB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9D,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CACtB,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,IAAI,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;gBAC3C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,aAAa,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,EAAE,CAAC;IAEL,oBAAoB,GAAG,OAAO,CAAC;IAC/B,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,oBAAoB,KAAK,OAAO;YAAE,OAAO;QAC7C,aAAa,GAAG,KAAK,CAAC;QACtB,IAAI,aAAa,IAAI,aAAa,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAClD,YAAY,CAAC;gBACX,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,EAAE,EAAE,KAAK;gBACT,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,WAAW,EACT,eAAe,KAAK,SAAS,IAAI,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,EACD,GAAG,EAAE;QACH,0EAA0E;QAC1E,8EAA8E;QAC9E,IAAI,oBAAoB,KAAK,OAAO,EAAE,CAAC;YACrC,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC,CACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IACnE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACrC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;QAC5B,aAAa,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAClC,oBAAoB,GAAG,IAAI,CAAC;QAC5B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAA+B;IAE/B,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACzE,IAAI,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACnF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,0CAA0C;AAC1C,MAAM,SAAS,GAAmC;IAChD,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAqC,EACrC,iBAA6C,GAAG,EAAE,CAAC,KAAK;IAExD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC;SAChF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1D,QAAQ,EACN,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB;QAChF,KAAK;KACN,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SAC/E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAClB,QAAQ,GAAG,cAAc;IAEzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,mFAAmF;AACnF,SAAS,sBAAsB;IAC7B,IAAI,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,aAAa,CAAC,CAAC;IACtE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QACD,iDAAiD;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B;IACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B,EAAE,KAAa;IAC9D,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa;IAC7C,MAAM,EAAE,GACN,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,SAAS,GAAG,cAAc,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,GAAS;IAC7C,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,iBAAiB;QAAE,OAAO;IAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC3C,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,IAAI,cAAc,EAAE,CAAC;YAC/E,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,WAA6B;IACjD,IAAI,CAAC,iBAAiB;QAAE,OAAO;IAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;IAClC,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,OAA2B;IAC9C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CACnC,CAAC;QAChC,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;QAChC,MAAM,SAAS,GACb,IAAI;YACJ,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC;QAC9B,OAAO,SAAS;YACd,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,EAAE;YAC/E,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,OAA0B;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,6EAA6E;QAC7E,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,yEAAyE;IAC3E,CAAC;AACH,CAAC"}

package/dist/src/providers/codex-cli-runner.d.ts

@@ -38,6 +38,16 @@ export declare class CodexCliTimeoutError extends Error {
     readonly signal: NodeJS.Signals | null;
     constructor(timeoutMs: number, signal: NodeJS.Signals | null, detail?: string);
 }
+/**
+ * Thrown when Codex exits refusing the pinned model — retired, or not on the
+ * account's plan ("The 'gpt-5.5' model is not supported when using Codex with
+ * a ChatGPT account."). Found in the FULL output before it is shortened, and
+ * named first in the message, so the recorded error always says it.
+ */
+export declare class CodexModelRejectedError extends Error {
+    readonly model: string;
+    constructor(model: string, reason: string, exitCode: number);
+}
 export declare function runCodexCliJson<T>(options: CodexCliRunOptions): Promise<CodexCliRunResult<T>>;
 /**
  * Cheap, synchronous "is the Codex CLI installed?" probe — resolves the
@@ -56,5 +66,5 @@ export declare function resetCodexCliRunnerCacheForTests(): void;
  * salient `ERROR` lines plus the tail. Short outputs are returned whole.
  */
 export declare function summarizeCodexOutput(stderr: string, stdout: string): string;
-export declare function resolveCodexExecutableForTests(name: string, pathEnv?: string | undefined, fallbackDirs?: readonly string[]): string | undefined;
+export declare function resolveCodexExecutableForTests(name: string, pathEnv?: string | undefined, fallbackDirs?: readonly string[], keepsCodexHome?: (wrapper: string) => boolean): string | undefined;
 //# sourceMappingURL=codex-cli-runner.d.ts.map

package/dist/src/providers/codex-cli-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-cli-runner.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-runner.ts"],"names":[],"mappings":"AA+BA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;CACf;AA2CD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,GACxD,IAAI,CAGN;AA2DD;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC3B,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,SAAK;CAS1E;AAMD,wBAAsB,eAAe,CAAC,CAAC,EACrC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAgG/B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAOvD;AAgLD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAe3E;AAsGD,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAM,GAAG,SAA+B,EACjD,YAAY,GAAE,SAAS,MAAM,EAAmC,GAC/D,MAAM,GAAG,SAAS,CAepB"}
+{"version":3,"file":"codex-cli-runner.d.ts","sourceRoot":"","sources":["../../../src/providers/codex-cli-runner.ts"],"names":[],"mappings":"AAkCA,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;CACf;AAsED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,SAAS,GACxD,IAAI,CAGN;AA2DD;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC3B,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,MAAM,SAAK;CAS1E;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACX,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAK5D;AASD,wBAAsB,eAAe,CAAC,CAAC,EACrC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CA4C/B;AAwFD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAQvD;AAiMD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAe3E;AA4GD,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAM,GAAG,SAA+B,EACjD,YAAY,GAAE,SAAS,MAAM,EAAmC,EAChE,cAAc,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAA+B,GACnE,MAAM,GAAG,SAAS,CA8BpB"}

package/dist/src/providers/codex-cli-runner.js

@@ -2,8 +2,9 @@ import crypto from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { spawn } from "node:child_process";
-import { resetCodexModelCacheForTests, resolveCodexModel, } from "./codex-cli-model.js";
+import { spawn, spawnSync } from "node:child_process";
+import { findCodexModelRejection } from "../diagnostics/codex-preflight.js";
+import { markCodexModelRefused, resetCodexModelCacheForTests, resolveCodexModel, } from "./codex-cli-model.js";
 const SCHEMA_CACHE = new Map();
 let codexVersionPromise = null;
 let isolatedCodexHomePath = null;
@@ -30,9 +31,10 @@ const CODEX_MODEL_PROBE_SCHEMA = {
 };
 /**
  * Does this model actually run under our isolated CODEX_HOME? A tiny real
- * `codex exec` — true on a clean structured response, false on any failure
- * (unsupported model, auth, timeout). Injected into resolveCodexModel so the
- * fallback is verified rather than guessed.
+ * `codex exec` — true on a clean structured response, false when Codex refuses
+ * the model. Any other failure (auth, network, timeout) throws: it is not about
+ * the model, so trying the next one would only hide it. Injected into
+ * resolveCodexModel so the pick is verified rather than guessed.
  */
 async function probeCodexModel(model) {
     try {
@@ -44,9 +46,31 @@ async function probeCodexModel(model) {
         });
         return true;
     }
-    catch {
-        return false;
+    catch (error) {
+        if (error instanceof CodexModelRejectedError) {
+            return false;
+        }
+        throw error;
+    }
+}
+/**
+ * The models this account can use, from `codex debug models`. Signed in, Codex
+ * refreshes the list from OpenAI (well under a second; no model call, no
+ * content), so a retired model is already gone from it. Injected into
+ * resolveCodexModel.
+ */
+async function listCodexCatalog() {
+    const { stdout } = await runCodexCommand(["debug", "models"], {
+        cwd: ensureRuntimeTempDir(),
+        timeoutMs: 30_000,
+    });
+    const models = JSON.parse(stdout).models;
+    if (!Array.isArray(models)) {
+        return [];
     }
+    return models.filter((model) => typeof model === "object" &&
+        model !== null &&
+        typeof model.slug === "string");
 }
 /**
  * `codex exec` options `runCodexCliJson` depends on. A `codex` whose
@@ -140,6 +164,22 @@ export class CodexCliTimeoutError extends Error {
         this.signal = signal;
     }
 }
+/**
+ * Thrown when Codex exits refusing the pinned model — retired, or not on the
+ * account's plan ("The 'gpt-5.5' model is not supported when using Codex with
+ * a ChatGPT account."). Found in the FULL output before it is shortened, and
+ * named first in the message, so the recorded error always says it.
+ */
+export class CodexModelRejectedError extends Error {
+    model;
+    constructor(model, reason, exitCode) {
+        super(`Codex CLI failed (exit ${exitCode}) — Codex rejected the model "${model}": ${reason}`);
+        this.name = "CodexModelRejectedError";
+        this.model = model;
+    }
+}
+/** At most this many model switches inside one call — see runCodexCliJson. */
+const CODEX_MODEL_SWITCH_LIMIT = 3;
 function delay(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -151,12 +191,40 @@ export async function runCodexCliJson(options) {
     // uses `codex exec --help` only — no content, no model call, no auth — and is
     // cached process-wide on success. Mirrors the Claude runner's pre-send probe.
     await ensureCodexExecCompatible(cwd);
-    const schemaPath = ensureSchemaFile(options.schema);
-    const timeoutMs = options.timeoutMs ?? 120_000;
+    const exec = {
+        prompt: options.prompt,
+        cwd,
+        schemaPath: ensureSchemaFile(options.schema),
+        timeoutMs: options.timeoutMs ?? 120_000,
+    };
+    // An explicit model (the probe) is run as asked — never swapped.
+    if (options.model !== undefined) {
+        return runCodexExec(exec, options.model);
+    }
     // Pin an explicit model on every run. Never inherit codex's implicit
     // default — that default changes between releases and silently broke every
     // preflight when 0.125.0 moved it to a ChatGPT-plan-rejected model.
-    const model = options.model ?? (await resolveCodexModel(probeCodexModel));
+    let model = await resolveCodexModel(probeCodexModel, listCodexCatalog);
+    // When Codex refuses the model (OpenAI retired it, or the plan lost it),
+    // record the refusal, pick another model and run again, instead of failing
+    // every capture until someone edits config.json. Bounded: the configured,
+    // source and persisted models are tried unprobed, so each can be refused once
+    // before resolution reaches the probed catalog.
+    for (let switches = 0;; switches++) {
+        try {
+            return await runCodexExec(exec, model);
+        }
+        catch (error) {
+            if (!(error instanceof CodexModelRejectedError) ||
+                switches >= CODEX_MODEL_SWITCH_LIMIT) {
+                throw error;
+            }
+            markCodexModelRefused(model);
+            model = await resolveCodexModel(probeCodexModel, listCodexCatalog);
+        }
+    }
+}
+async function runCodexExec(exec, model) {
     // One bounded retry, and ONLY for timeout/termination (the old "exit null").
     // Triage/preflight calls that get SIGTERM'd are overwhelmingly transient
     // (cold start, brief contention), so a single retry recovers them inside the
@@ -184,13 +252,13 @@ export async function runCodexCliJson(options) {
                 "--model",
                 model,
                 "--output-schema",
-                schemaPath,
+                exec.schemaPath,
                 "--output-last-message",
                 outputPath,
             ], {
-                cwd,
-                timeoutMs,
-                stdinText: options.prompt,
+                cwd: exec.cwd,
+                timeoutMs: exec.timeoutMs,
+                stdinText: exec.prompt,
             });
             const raw = fs.existsSync(outputPath)
                 ? fs.readFileSync(outputPath, "utf-8").trim()
@@ -201,7 +269,7 @@ export async function runCodexCliJson(options) {
             try {
                 return {
                     output: JSON.parse(raw),
-                    cliTag: await resolveCodexCliTag(cwd),
+                    cliTag: await resolveCodexCliTag(exec.cwd),
                     model,
                 };
             }
@@ -241,6 +309,7 @@ export function resetCodexCliRunnerCacheForTests() {
     codexVersionPromise = null;
     codexLaunchSpec = null;
     codexExecCompatible = false;
+    wrapperKeepsCodexHomeCache.clear();
     resetCodexModelCacheForTests();
     cleanupRuntimeTempArtifacts();
 }
@@ -358,6 +427,19 @@ async function runCodexCommandOnce(args, options) {
                 return;
             }
             if (code !== 0) {
+                // Look for a model refusal in the FULL output, before it is shortened:
+                // a burst of reconnect errors can push it out of the summary. Only a
+                // Codex ERROR line naming the pinned model counts, and not one that is
+                // part of the prompt Codex echoes back (a triaged conversation can
+                // quote an old refusal).
+                const model = pinnedModelArg(args);
+                const rejection = model
+                    ? findCodexModelRejection(`${stderr}\n${stdout}`, model, options.stdinText ?? "")
+                    : null;
+                if (model && rejection) {
+                    reject(new CodexModelRejectedError(model, rejection, code));
+                    return;
+                }
                 reject(new Error(`Codex CLI failed (exit ${code})${summary
                     ? ` — ${summary}`
                     : stdinError
@@ -397,6 +479,11 @@ export function summarizeCodexOutput(stderr, stdout) {
         ? combined
         : `…${combined.slice(-CODEX_OUTPUT_SUMMARY_MAX)}`;
 }
+/** The value after `--model` in a codex argv, if any. */
+function pinnedModelArg(args) {
+    const index = args.indexOf("--model");
+    return index >= 0 ? args[index + 1] : undefined;
+}
 function isIgnorableStdinError(error) {
     return ("code" in error &&
         (error.code === "EPIPE" ||
@@ -470,20 +557,94 @@ function resolveCodexLaunchSpec() {
         : { command: stableLaunchPath, prefixArgs: [] };
     return codexLaunchSpec;
 }
-export function resolveCodexExecutableForTests(name, pathEnv = process.env["PATH"], fallbackDirs = CODEX_EXECUTABLE_FALLBACK_DIRS) {
+export function resolveCodexExecutableForTests(name, pathEnv = process.env["PATH"], fallbackDirs = CODEX_EXECUTABLE_FALLBACK_DIRS, keepsCodexHome = wrapperKeepsCodexHome) {
     const searchDirs = [
         ...(pathEnv ? pathEnv.split(path.delimiter) : []),
         ...fallbackDirs,
     ];
-    for (const dir of searchDirs) {
-        if (!dir)
-            continue;
-        const candidate = path.join(dir, name);
-        if (fs.existsSync(candidate)) {
+    const candidates = searchDirs
+        .filter((dir) => dir.length > 0)
+        .map((dir) => path.join(dir, name))
+        .filter((candidate) => fs.existsSync(candidate));
+    const hasRealBinary = candidates.some((candidate) => !isShellScriptWrapper(candidate));
+    for (const candidate of candidates) {
+        // A shell-script wrapper (account routing, proxy settings, a version
+        // manager) is used as before, unless it replaces the CODEX_HOME we set and
+        // a real binary is there to use instead. A wrapper that replaces it makes
+        // triage run with the user's MCP servers and hooks (their noise buried
+        // the real error on 2026-10-14) and saves every triage call in the user's
+        // Codex history, where the next capture picks it up as a conversation.
+        if (!isShellScriptWrapper(candidate) ||
+            !hasRealBinary ||
+            keepsCodexHome(candidate)) {
             return candidate;
         }
     }
-    return undefined;
+    return candidates[0];
+}
+const wrapperKeepsCodexHomeCache = new Map();
+/**
+ * Does this wrapper leave our CODEX_HOME alone? Run `login status` with an
+ * empty CODEX_HOME: Codex itself, or a wrapper that passes it through, answers
+ * "Not logged in"; a wrapper that swaps in the user's own home answers "Logged
+ * in using …". Reads a file, no network, a few milliseconds. When the answer is
+ * unclear the wrapper is kept, as before this check existed. Cached per path.
+ */
+function wrapperKeepsCodexHome(wrapper) {
+    const cached = wrapperKeepsCodexHomeCache.get(wrapper);
+    if (cached !== undefined)
+        return cached;
+    let keeps = true;
+    let emptyHome;
+    try {
+        emptyHome = fs.mkdtempSync(path.join(ensureRuntimeTempDir(), "codex-home-check-"));
+        const result = spawnSync(wrapper, ["login", "status"], {
+            env: { ...process.env, CODEX_HOME: emptyHome },
+            encoding: "utf-8",
+            timeout: 10_000,
+        });
+        if (!result.error) {
+            keeps = !/logged in using/i.test(`${result.stdout ?? ""}\n${result.stderr ?? ""}`);
+        }
+    }
+    catch {
+        // Keep the wrapper.
+    }
+    finally {
+        if (emptyHome)
+            fs.rmSync(emptyHome, { recursive: true, force: true });
+    }
+    wrapperKeepsCodexHomeCache.set(wrapper, keeps);
+    return keeps;
+}
+/**
+ * A `codex` that is a shell script (`#!/bin/sh`, `#!/usr/bin/env bash`, …) is a
+ * wrapper around Codex, not Codex. A node `.js` entry point is not a shell
+ * script.
+ */
+function isShellScriptWrapper(file) {
+    let fd;
+    try {
+        fd = fs.openSync(file, "r");
+        const head = Buffer.alloc(128);
+        const bytesRead = fs.readSync(fd, head, 0, head.length, 0);
+        const firstLine = head.subarray(0, bytesRead).toString("utf-8").split("\n")[0] ?? "";
+        if (!firstLine.startsWith("#!"))
+            return false;
+        // `#!/bin/sh` → sh; `#!/usr/bin/env -S bash -e` → bash; `#!/usr/bin/env node` → node.
+        const [command = "", ...rest] = firstLine.slice(2).trim().split(/\s+/);
+        const interpreter = path.basename(command) === "env"
+            ? (rest.find((arg) => !arg.startsWith("-")) ?? "")
+            : path.basename(command);
+        return /^(sh|bash|zsh|dash|ksh)$/.test(path.basename(interpreter));
+    }
+    catch {
+        return false;
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+    }
 }
 /**
  * Path to a private CODEX_HOME holding ONLY a copy of the operator's