patchwork-os 1.1.0-beta.4.canary.441 → 1.1.0-beta.4.canary.442

package/dist/drivers/codex/streamParser.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Shape of a parsed NDJSON event from `codex exec --json`.
+ *
+ * Event types confirmed via OpenAI's developer docs (developers.openai.com/
+ * codex/noninteractive, redirects to learn.chatgpt.com/docs/non-interactive-mode):
+ * thread.started, turn.started, turn.completed, turn.failed, item.started,
+ * item.completed, error. The final agent response text lives in an
+ * item.completed event whose item.type === "agent_message" — NOT at the
+ * top level of the event, unlike Claude's stream-json "result" event.
+ *
+ * The exact field shape of the `error` and `turn.failed` event types is not
+ * documented on the pages fetched — parseStreamLine defensively checks a few
+ * plausible field names (`message`, `error`) for both and falls back to
+ * stringifying the event so an error is never silently dropped even if the
+ * real field name differs.
+ */
+export interface CodexEvent {
+    type: "thread.started" | "turn.started" | "turn.completed" | "turn.failed" | "item.started" | "item.completed" | "error" | string;
+    /** Present on type === "thread.started". */
+    thread_id?: string;
+    /** Present on type === "turn.completed". */
+    usage?: {
+        input_tokens?: number;
+        cached_input_tokens?: number;
+        output_tokens?: number;
+        reasoning_output_tokens?: number;
+    };
+    /** Present on type === "item.started" / "item.completed". */
+    item?: {
+        id?: string;
+        type?: string;
+        command?: string;
+        status?: string;
+        /** Present when item.type === "agent_message" on a completed item. */
+        text?: string;
+    };
+    /** Field name unconfirmed for type === "error" — checked defensively. */
+    message?: string;
+    error?: string;
+}
+export interface ParsedLine {
+    kind: "event";
+    event: CodexEvent;
+    /** Extracted response/error text for this event, "" if the event carries none. */
+    text: string;
+}
+export interface RawLine {
+    kind: "raw";
+    text: string;
+}
+export type ParsedStreamLine = ParsedLine | RawLine;
+/**
+ * Parse a single NDJSON line from `codex exec --json`. Returns a raw line
+ * entry for non-JSON lines (defensive — mirrors the Claude parser's
+ * backward-compat handling for unexpected output).
+ */
+export declare function parseStreamLine(line: string): ParsedStreamLine;
+/** Split a chunk into complete lines + a leftover partial. Identical logic to
+ * the Claude driver's splitLines (pure, format-agnostic) — kept as a local
+ * copy rather than a cross-driver import so codex/ has no dependency on
+ * claude/ internals. */
+export declare function splitLines(buf: string, chunk: string): {
+    lines: string[];
+    remainder: string;
+};

package/dist/drivers/codex/streamParser.js

@@ -0,0 +1,38 @@
+/**
+ * Parse a single NDJSON line from `codex exec --json`. Returns a raw line
+ * entry for non-JSON lines (defensive — mirrors the Claude parser's
+ * backward-compat handling for unexpected output).
+ */
+export function parseStreamLine(line) {
+    try {
+        const event = JSON.parse(line);
+        let text = "";
+        if (event.type === "item.completed" &&
+            event.item?.type === "agent_message") {
+            text = typeof event.item.text === "string" ? event.item.text : "";
+        }
+        else if (event.type === "error" || event.type === "turn.failed") {
+            text =
+                typeof event.message === "string"
+                    ? event.message
+                    : typeof event.error === "string"
+                        ? event.error
+                        : JSON.stringify(event);
+        }
+        return { kind: "event", event, text };
+    }
+    catch {
+        return { kind: "raw", text: `${line}\n` };
+    }
+}
+/** Split a chunk into complete lines + a leftover partial. Identical logic to
+ * the Claude driver's splitLines (pure, format-agnostic) — kept as a local
+ * copy rather than a cross-driver import so codex/ has no dependency on
+ * claude/ internals. */
+export function splitLines(buf, chunk) {
+    const combined = buf + chunk;
+    const parts = combined.split("\n");
+    const remainder = parts.pop() ?? "";
+    return { lines: parts, remainder };
+}
+//# sourceMappingURL=streamParser.js.map

package/dist/drivers/codex/streamParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamParser.js","sourceRoot":"","sources":["../../../src/drivers/codex/streamParser.ts"],"names":[],"mappings":"AA+DA;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;QAC7C,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IACE,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAC/B,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe,EACpC,CAAC;YACD,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClE,IAAI;gBACF,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBAC/B,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;wBAC/B,CAAC,CAAC,KAAK,CAAC,KAAK;wBACb,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;wBAGwB;AACxB,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,KAAa;IAEb,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC"}

package/dist/drivers/codex/subprocess.d.ts

@@ -0,0 +1,44 @@
+import type { ProviderDriver, ProviderTaskInput, ProviderTaskResult } from "../types.js";
+/**
+ * Scrub secrets from a string before storing or surfacing it. Same patterns
+ * as the Claude driver's scrubSecrets, plus an OpenAI-shaped API key pattern
+ * (sk-proj-.../sk-...) in case a user has OPENAI_API_KEY-based auth rather
+ * than the default ChatGPT-subscription login.
+ */
+export declare function scrubSecrets(text: string): string;
+/**
+ * Codex subprocess driver — spawns `codex exec` with ChatGPT-subscription
+ * auth (whatever `codex login` already established; no API key handling
+ * here, mirroring how the Claude subprocess driver relies on `claude`'s own
+ * stored subscription auth rather than passing a credential itself).
+ *
+ * FAIL-CLOSED BY DEFAULT — this is a deliberate divergence from the Claude
+ * subprocess driver, whose default (no sandbox opt-in) is
+ * `--dangerously-skip-permissions` (fail-OPEN: full native tool access).
+ * Codex CLI's own non-interactive docs explicitly warn that `codex exec`
+ * does NOT default to something safe for unattended callers — every
+ * restrictive flag below is passed unconditionally unless a caller
+ * explicitly escalates via providerOptions:
+ *
+ *   sandboxMode:    "read-only" (default) | "workspace-write" | "danger-full-access"
+ *   approvalMode:   "never" (default) | "on-request" | "untrusted"
+ *   networkAccess:  false (default) — passed as `-c sandbox.network_access=false`
+ *   webSearch:      false (default) — omitting --search leaves Codex's own
+ *                   default ("cached"); NOT the same as fully disabled, but
+ *                   there is no documented flag to disable it outright as of
+ *                   this writing. Flagged here rather than silently assumed.
+ *
+ * Codex CLI's own cancellation has confirmed upstream bugs (orphaned MCP
+ * stdio subprocesses, shell-wrapper children surviving interrupt — see
+ * openai/codex issues #4337, #7985, #12491, #15379, #20869) — treeKill
+ * (process-group kill, not a direct-child-only kill()) is used from the
+ * start, not added later.
+ */
+export declare class CodexDriver implements ProviderDriver {
+    private readonly binary;
+    private readonly log;
+    readonly name = "codex";
+    constructor(binary: string, log: (msg: string) => void);
+    run(input: ProviderTaskInput): Promise<ProviderTaskResult>;
+    runOutcome(input: ProviderTaskInput): Promise<import("../types.js").ProviderTaskOutcome>;
+}

package/dist/drivers/codex/subprocess.js

@@ -0,0 +1,261 @@
+import { spawn } from "node:child_process";
+import { treeKill } from "../../processTree.js";
+import { ensureCmdShim } from "../../winShim.js";
+import { sanitizeEnv } from "../claude/envSanitizer.js";
+import { truncateToBytes, truncateUtf8Bytes } from "../outputCap.js";
+import { toProviderTaskOutcome } from "../types.js";
+import { parseStreamLine, splitLines } from "./streamParser.js";
+const OUTPUT_CAP = 50 * 1024; // 50KB — matches the Claude subprocess driver's cap
+/**
+ * Scrub secrets from a string before storing or surfacing it. Same patterns
+ * as the Claude driver's scrubSecrets, plus an OpenAI-shaped API key pattern
+ * (sk-proj-.../sk-...) in case a user has OPENAI_API_KEY-based auth rather
+ * than the default ChatGPT-subscription login.
+ */
+export function scrubSecrets(text) {
+    return text
+        .replace(/sk-(proj-)?[A-Za-z0-9_-]{20,}/g, "[REDACTED_API_KEY]")
+        .replace(/Bearer\s+[A-Za-z0-9._-]{16,}/gi, "Bearer [REDACTED]")
+        .replace(/\btoken[=:]\s*[A-Za-z0-9._-]{16,}/gi, "token=[REDACTED]");
+}
+/**
+ * Codex subprocess driver — spawns `codex exec` with ChatGPT-subscription
+ * auth (whatever `codex login` already established; no API key handling
+ * here, mirroring how the Claude subprocess driver relies on `claude`'s own
+ * stored subscription auth rather than passing a credential itself).
+ *
+ * FAIL-CLOSED BY DEFAULT — this is a deliberate divergence from the Claude
+ * subprocess driver, whose default (no sandbox opt-in) is
+ * `--dangerously-skip-permissions` (fail-OPEN: full native tool access).
+ * Codex CLI's own non-interactive docs explicitly warn that `codex exec`
+ * does NOT default to something safe for unattended callers — every
+ * restrictive flag below is passed unconditionally unless a caller
+ * explicitly escalates via providerOptions:
+ *
+ *   sandboxMode:    "read-only" (default) | "workspace-write" | "danger-full-access"
+ *   approvalMode:   "never" (default) | "on-request" | "untrusted"
+ *   networkAccess:  false (default) — passed as `-c sandbox.network_access=false`
+ *   webSearch:      false (default) — omitting --search leaves Codex's own
+ *                   default ("cached"); NOT the same as fully disabled, but
+ *                   there is no documented flag to disable it outright as of
+ *                   this writing. Flagged here rather than silently assumed.
+ *
+ * Codex CLI's own cancellation has confirmed upstream bugs (orphaned MCP
+ * stdio subprocesses, shell-wrapper children surviving interrupt — see
+ * openai/codex issues #4337, #7985, #12491, #15379, #20869) — treeKill
+ * (process-group kill, not a direct-child-only kill()) is used from the
+ * start, not added later.
+ */
+export class CodexDriver {
+    binary;
+    log;
+    name = "codex";
+    constructor(binary, log) {
+        this.binary = binary;
+        this.log = log;
+    }
+    async run(input) {
+        const opts = input.providerOptions ?? {};
+        // Defense-in-depth: reject argv-confusable user-controlled strings.
+        // Spawn is called with an array (no shell), so this is argv defense for
+        // the child's flag parser, not shell-injection defense. Mirrors the
+        // Claude driver's identical guard.
+        if (input.prompt.startsWith("-")) {
+            throw new Error("[CodexDriver] prompt cannot start with '-' (argv injection guard)");
+        }
+        const effectiveBinary = ensureCmdShim(this.binary);
+        const sandboxMode = opts.sandboxMode === "workspace-write" ||
+            opts.sandboxMode === "danger-full-access"
+            ? opts.sandboxMode
+            : "read-only";
+        const approvalMode = opts.approvalMode === "on-request" || opts.approvalMode === "untrusted"
+            ? opts.approvalMode
+            : "never";
+        const networkAccess = opts.networkAccess === true;
+        const webSearch = opts.webSearch === true;
+        const args = [
+            "exec",
+            input.prompt,
+            "--json",
+            "--sandbox",
+            sandboxMode,
+            "--ask-for-approval",
+            approvalMode,
+            "--ignore-user-config",
+            "--ignore-rules",
+            "--skip-git-repo-check",
+            "--ephemeral",
+            "-c",
+            `sandbox.network_access=${networkAccess ? "true" : "false"}`,
+        ];
+        if (webSearch)
+            args.push("--search");
+        // env sanitization: reuse the Claude driver's sanitizeEnv as-is (a
+        // generic cross-provider-secret strip with no Claude-specific coupling —
+        // see envSanitizer.ts's own doc comment). Codex's subscription auth
+        // lives in codex's own config/auth file, not an env var, so no
+        // `preserve` entry is needed for the default (subscription) auth path.
+        const env = sanitizeEnv(process.env);
+        this.log(`[CodexDriver] spawning: ${effectiveBinary} exec <prompt> (workspace: ${input.workspace}, sandbox: ${sandboxMode})`);
+        const child = spawn(effectiveBinary, args, {
+            cwd: input.workspace,
+            env,
+            signal: input.signal,
+            stdio: ["ignore", "pipe", "pipe"],
+            // setsid() — prevents subprocess from opening /dev/tty for interactive
+            // prompts, and makes it its own process-group leader for treeKill.
+            detached: true,
+        });
+        // Node's `signal` option calls `child.kill()` on abort, which only
+        // signals the immediate child — insufficient given Codex's confirmed
+        // upstream orphaned-child-process bugs (see class doc comment).
+        const onAbort = () => treeKill(child);
+        input.signal.addEventListener("abort", onAbort, { once: true });
+        child.once("close", () => {
+            input.signal.removeEventListener("abort", onAbort);
+        });
+        let lineBuf = "";
+        let accumulated = "";
+        let outputBytesSent = 0;
+        let firstAgentMessageAt;
+        let sawError = false;
+        let errorText = "";
+        let resultUsage;
+        const emitText = (text) => {
+            if (text.length === 0)
+                return;
+            accumulated += text;
+            if (outputBytesSent < OUTPUT_CAP) {
+                const { send, bytes } = truncateToBytes(text, OUTPUT_CAP - outputBytesSent);
+                if (bytes > 0) {
+                    input.onChunk?.(send);
+                    outputBytesSent += bytes;
+                }
+            }
+        };
+        const handleLine = (line) => {
+            if (line.trim() === "")
+                return;
+            const parsed = parseStreamLine(line);
+            if (parsed.kind === "raw") {
+                emitText(parsed.text);
+                return;
+            }
+            const { event, text } = parsed;
+            if (event.type === "item.completed" &&
+                event.item?.type === "agent_message") {
+                if (firstAgentMessageAt === undefined)
+                    firstAgentMessageAt = Date.now();
+                emitText(text);
+            }
+            else if (event.type === "turn.completed") {
+                resultUsage = event.usage;
+            }
+            else if (event.type === "error" || event.type === "turn.failed") {
+                sawError = true;
+                errorText = text || errorText;
+            }
+        };
+        child.stdout.setEncoding("utf-8");
+        child.stdout.on("data", (chunk) => {
+            const { lines, remainder } = splitLines(lineBuf, chunk);
+            lineBuf = remainder;
+            for (const line of lines)
+                handleLine(line);
+        });
+        let stderr = "";
+        child.stderr.setEncoding("utf-8");
+        child.stderr.on("data", (chunk) => {
+            if (Buffer.byteLength(stderr, "utf8") < OUTPUT_CAP) {
+                stderr += chunk;
+                if (Buffer.byteLength(stderr, "utf8") > OUTPUT_CAP) {
+                    stderr = truncateUtf8Bytes(stderr, OUTPUT_CAP);
+                }
+            }
+        });
+        const start = Date.now();
+        const stderrTailOf = (s) => s.length > 0 ? scrubSecrets(s.slice(-2048)) : undefined;
+        const startupMsOf = () => firstAgentMessageAt !== undefined
+            ? firstAgentMessageAt - start
+            : undefined;
+        let startupTimedOut = false;
+        const startupHandle = input.startupTimeoutMs
+            ? setTimeout(() => {
+                if (firstAgentMessageAt === undefined) {
+                    startupTimedOut = true;
+                    treeKill(child);
+                }
+            }, input.startupTimeoutMs)
+            : null;
+        let exitCode;
+        try {
+            exitCode = await new Promise((resolve, reject) => {
+                child.on("close", (code) => resolve(code ?? 0));
+                child.on("error", reject);
+            });
+        }
+        catch (err) {
+            if (startupHandle)
+                clearTimeout(startupHandle);
+            const isAbort = (err instanceof Error && err.name === "AbortError") ||
+                input.signal.aborted;
+            if (isAbort) {
+                return {
+                    text: truncateUtf8Bytes(accumulated, OUTPUT_CAP),
+                    exitCode: -1,
+                    durationMs: Date.now() - start,
+                    stderrTail: stderrTailOf(stderr),
+                    wasAborted: true,
+                    startupMs: startupMsOf(),
+                };
+            }
+            throw err;
+        }
+        if (startupHandle)
+            clearTimeout(startupHandle);
+        // Flush any partial line remaining in lineBuf after stdout closes —
+        // mirrors the Claude driver's identical flush-on-close handling.
+        if (lineBuf.trim().length > 0) {
+            handleLine(lineBuf);
+            lineBuf = "";
+        }
+        if (startupTimedOut) {
+            return {
+                text: truncateUtf8Bytes(accumulated, OUTPUT_CAP),
+                exitCode: -1,
+                durationMs: Date.now() - start,
+                stderrTail: stderrTailOf(stderr),
+                wasAborted: true,
+                startupTimedOut: true,
+            };
+        }
+        const effectiveExitCode = sawError ? 1 : exitCode;
+        if (effectiveExitCode !== 0 && stderr) {
+            this.log(`[CodexDriver] stderr: ${stderr.slice(0, 500)}`);
+        }
+        const providerMeta = {};
+        if (typeof resultUsage?.input_tokens === "number" &&
+            typeof resultUsage?.output_tokens === "number") {
+            providerMeta.inputTokens = resultUsage.input_tokens;
+            providerMeta.outputTokens = resultUsage.output_tokens;
+        }
+        if (input.model && !input.model.startsWith("-")) {
+            providerMeta.model = input.model;
+        }
+        return {
+            text: truncateUtf8Bytes(sawError && accumulated.length === 0 ? errorText : accumulated, OUTPUT_CAP),
+            exitCode: effectiveExitCode,
+            errorMessage: sawError
+                ? errorText || "codex exec reported an error"
+                : undefined,
+            durationMs: Date.now() - start,
+            stderrTail: stderrTailOf(stderr),
+            startupMs: startupMsOf(),
+            providerMeta: Object.keys(providerMeta).length > 0 ? providerMeta : undefined,
+        };
+    }
+    async runOutcome(input) {
+        return toProviderTaskOutcome(await this.run(input));
+    }
+}
+//# sourceMappingURL=subprocess.js.map

package/dist/drivers/codex/subprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.js","sourceRoot":"","sources":["../../../src/drivers/codex/subprocess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAMrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEhE,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,oDAAoD;AAKlF;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,OAAO,CAAC,gCAAgC,EAAE,oBAAoB,CAAC;SAC/D,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,CAAC;SAC9D,OAAO,CAAC,qCAAqC,EAAE,kBAAkB,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,OAAO,WAAW;IAIH;IACA;IAJV,IAAI,GAAG,OAAO,CAAC;IAExB,YACmB,MAAc,EACd,GAA0B;QAD1B,WAAM,GAAN,MAAM,CAAQ;QACd,QAAG,GAAH,GAAG,CAAuB;IAC1C,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,KAAwB;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;QAEzC,oEAAoE;QACpE,wEAAwE;QACxE,oEAAoE;QACpE,mCAAmC;QACnC,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,WAAW,GACf,IAAI,CAAC,WAAW,KAAK,iBAAiB;YACtC,IAAI,CAAC,WAAW,KAAK,oBAAoB;YACvC,CAAC,CAAC,IAAI,CAAC,WAAW;YAClB,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,YAAY,GAChB,IAAI,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW;YACrE,CAAC,CAAC,IAAI,CAAC,YAAY;YACnB,CAAC,CAAC,OAAO,CAAC;QACd,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;QAE1C,MAAM,IAAI,GAAG;YACX,MAAM;YACN,KAAK,CAAC,MAAM;YACZ,QAAQ;YACR,WAAW;YACX,WAAW;YACX,oBAAoB;YACpB,YAAY;YACZ,sBAAsB;YACtB,gBAAgB;YAChB,uBAAuB;YACvB,aAAa;YACb,IAAI;YACJ,0BAA0B,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;SAC7D,CAAC;QACF,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAErC,mEAAmE;QACnE,yEAAyE;QACzE,oEAAoE;QACpE,+DAA+D;QAC/D,uEAAuE;QACvE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC,GAAG,CACN,2BAA2B,eAAe,8BAA8B,KAAK,CAAC,SAAS,cAAc,WAAW,GAAG,CACpH,CAAC;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE;YACzC,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,GAAG;YACH,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,uEAAuE;YACvE,mEAAmE;YACnE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,mEAAmE;QACnE,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,mBAAuC,CAAC;QAC5C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,WAES,CAAC;QAEd,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC9B,WAAW,IAAI,IAAI,CAAC;YACpB,IAAI,eAAe,GAAG,UAAU,EAAE,CAAC;gBACjC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CACrC,IAAI,EACJ,UAAU,GAAG,eAAe,CAC7B,CAAC;gBACF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACd,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;oBACtB,eAAe,IAAI,KAAK,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE;YAClC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO;YAC/B,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;YAC/B,IACE,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAC/B,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe,EACpC,CAAC;gBACD,IAAI,mBAAmB,KAAK,SAAS;oBAAE,mBAAmB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxE,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC3C,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC;YAC5B,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAClE,QAAQ,GAAG,IAAI,CAAC;gBAChB,SAAS,GAAG,IAAI,IAAI,SAAS,CAAC;YAChC,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxD,OAAO,GAAG,SAAS,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC;gBAChB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;oBACnD,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,CAAC,CAAS,EAAsB,EAAE,CACrD,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,MAAM,WAAW,GAAG,GAAuB,EAAE,CAC3C,mBAAmB,KAAK,SAAS;YAC/B,CAAC,CAAC,mBAAmB,GAAG,KAAK;YAC7B,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,MAAM,aAAa,GAAG,KAAK,CAAC,gBAAgB;YAC1C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;oBACtC,eAAe,GAAG,IAAI,CAAC;oBACvB,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAC/C,MAAM,OAAO,GACX,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;gBACnD,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC;oBAChD,QAAQ,EAAE,CAAC,CAAC;oBACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;oBAChC,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,WAAW,EAAE;iBACzB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,aAAa;YAAE,YAAY,CAAC,aAAa,CAAC,CAAC;QAE/C,oEAAoE;QACpE,iEAAiE;QACjE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO;gBACL,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC;gBAChD,QAAQ,EAAE,CAAC,CAAC;gBACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;gBAChC,UAAU,EAAE,IAAI;gBAChB,eAAe,EAAE,IAAI;aACtB,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClD,IAAI,iBAAiB,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,IACE,OAAO,WAAW,EAAE,YAAY,KAAK,QAAQ;YAC7C,OAAO,WAAW,EAAE,aAAa,KAAK,QAAQ,EAC9C,CAAC;YACD,YAAY,CAAC,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC;YACpD,YAAY,CAAC,YAAY,GAAG,WAAW,CAAC,aAAa,CAAC;QACxD,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,YAAY,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACnC,CAAC;QAED,OAAO;YACL,IAAI,EAAE,iBAAiB,CACrB,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAC9D,UAAU,CACX;YACD,QAAQ,EAAE,iBAAiB;YAC3B,YAAY,EAAE,QAAQ;gBACpB,CAAC,CAAC,SAAS,IAAI,8BAA8B;gBAC7C,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;YAChC,SAAS,EAAE,WAAW,EAAE;YACxB,YAAY,EACV,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAwB;QACvC,OAAO,qBAAqB,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchwork-os",
-  "version": "1.1.0-beta.4.canary.441",
+  "version": "1.1.0-beta.4.canary.442",
   "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
   "type": "module",
   "main": "dist/index.js",