ryco-cli 0.1.3 → 0.1.4

package/dist/{CodexDriver-D73klBUb.cjs → CodexDriver-C1I8AGHl.cjs}

@@ -1,16 +1,18 @@
 #!/usr/bin/env node
 
-const require_bin = require('./bin.cjs');
-const require_makeManagedServerProvider = require('./makeManagedServerProvider-DVrBJ3h3.cjs');
-const require_sourceControlContextFormatter = require('./sourceControlContextFormatter-CO5cScmF.cjs');
-const require_ProjectCustomSystemPrompt = require('./ProjectCustomSystemPrompt-9Bf13ScV.cjs');
-const require_CodexTextGeneration = require('./CodexTextGeneration-jbe9qfEM.cjs');
+const require_chunk = require("./chunk-jM1PLTSZ.cjs");
+const require_collectUint8StreamText = require("./collectUint8StreamText-CgTEDbi7.cjs");
+const require_Metrics = require("./Metrics-DNOriWhP.cjs");
+const require_bin = require("./bin.cjs");
+const require_makeManagedServerProvider = require("./makeManagedServerProvider-DRMA8nAp.cjs");
+const require_sourceControlContextFormatter = require("./sourceControlContextFormatter-BDZqn-4T.cjs");
+const require_ProjectCustomSystemPrompt = require("./ProjectCustomSystemPrompt-B8SUlNGa.cjs");
+const require_CodexTextGeneration = require("./CodexTextGeneration-Cr97QFv_.cjs");
 let effect = require("effect");
 let effect_unstable_http = require("effect/unstable/http");
 let effect_unstable_process = require("effect/unstable/process");
 let effect_SchemaIssue = require("effect/SchemaIssue");
-effect_SchemaIssue = require_bin.__toESM(effect_SchemaIssue);
-
+effect_SchemaIssue = require_chunk.__toESM(effect_SchemaIssue, 1);
 //#region src/provider/CodexDeveloperInstructions.ts
 const CODEX_PLAN_MODE_DEVELOPER_INSTRUCTIONS = `<collaboration_mode># Plan Mode (Conversational)
 
@@ -145,12 +147,10 @@ The \`request_user_input\` tool is unavailable in Default mode. If you call it w
 
 In Default mode, strongly prefer making reasonable assumptions and executing the user's request rather than stopping to ask questions. If you absolutely must ask a question because the answer cannot be discovered from local context and a reasonable assumption would be risky, ask the user directly with a concise plain-text question. Never write a multiple choice question as a textual assistant message.
 </collaboration_mode>`;
-
 //#endregion
 //#region src/provider/Layers/CodexSessionRuntime.ts
-const PROVIDER$1 = require_bin.ProviderDriverKind.make("codex");
-const ANSI_ESCAPE_CHAR = String.fromCharCode(27);
-const ANSI_ESCAPE_REGEX = new RegExp(`${ANSI_ESCAPE_CHAR}\\[[0-9;]*m`, "g");
+const PROVIDER$1 = require_collectUint8StreamText.ProviderDriverKind.make("codex");
+const ANSI_ESCAPE_REGEX = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
 const CODEX_STDERR_LOG_REGEX = /^\d{4}-\d{2}-\d{2}T\S+\s+(TRACE|DEBUG|INFO|WARN|ERROR)\s+\S+:\s+(.*)$/;
 const BENIGN_ERROR_LOG_SNIPPETS = ["state db missing rollout path for thread", "state db record_discrepancy: find_thread_path_by_id_str_in_subdir, falling_back"];
 const RECOVERABLE_THREAD_RESUME_ERROR_SNIPPETS = [
@@ -234,7 +234,7 @@ function runtimeModeToTurnSandboxPolicy(input) {
 }
 function buildCodexCollaborationMode(input) {
 	if (input.interactionMode === void 0) return;
-	const model = normalizeCodexModelSlug(input.model) ?? require_bin.DEFAULT_MODEL;
+	const model = normalizeCodexModelSlug(input.model) ?? "gpt-5.4";
 	const developerInstructions = require_ProjectCustomSystemPrompt.appendProjectCustomSystemPrompt(require_ProjectCustomSystemPrompt.appendProjectCustomSystemPrompt(input.interactionMode === "plan" ? CODEX_PLAN_MODE_DEVELOPER_INSTRUCTIONS : CODEX_DEFAULT_MODE_DEVELOPER_INSTRUCTIONS, input.tokenReductionInstructions), input.customSystemPrompt);
 	return {
 		mode: input.interactionMode,
@@ -359,16 +359,16 @@ function readRouteFields(notification) {
 		};
 		case "turn/started":
 		case "turn/completed": return {
-			turnId: require_bin.TurnId.make(notification.params.turn.id),
+			turnId: require_collectUint8StreamText.TurnId.make(notification.params.turn.id),
 			itemId: void 0
 		};
 		case "error": return {
-			turnId: require_bin.TurnId.make(notification.params.turnId),
+			turnId: require_collectUint8StreamText.TurnId.make(notification.params.turnId),
 			itemId: void 0
 		};
 		case "turn/diff/updated":
 		case "turn/plan/updated": return {
-			turnId: require_bin.TurnId.make(notification.params.turnId),
+			turnId: require_collectUint8StreamText.TurnId.make(notification.params.turnId),
 			itemId: void 0
 		};
 		case "serverRequest/resolved": return {
@@ -377,8 +377,8 @@ function readRouteFields(notification) {
 		};
 		case "item/started":
 		case "item/completed": return {
-			turnId: require_bin.TurnId.make(notification.params.turnId),
-			itemId: require_bin.ProviderItemId.make(notification.params.item.id)
+			turnId: require_collectUint8StreamText.TurnId.make(notification.params.turnId),
+			itemId: require_collectUint8StreamText.ProviderItemId.make(notification.params.item.id)
 		};
 		case "item/agentMessage/delta":
 		case "item/plan/delta":
@@ -389,8 +389,8 @@ function readRouteFields(notification) {
 		case "item/reasoning/summaryTextDelta":
 		case "item/reasoning/summaryPartAdded":
 		case "item/reasoning/textDelta": return {
-			turnId: require_bin.TurnId.make(notification.params.turnId),
-			itemId: require_bin.ProviderItemId.make(notification.params.itemId)
+			turnId: require_collectUint8StreamText.TurnId.make(notification.params.turnId),
+			itemId: require_collectUint8StreamText.ProviderItemId.make(notification.params.itemId)
 		};
 		default: return {
 			turnId: void 0,
@@ -439,7 +439,7 @@ function parseThreadSnapshot(response) {
 	return {
 		threadId: response.thread.id,
 		turns: response.thread.turns.map((turn) => ({
-			id: require_bin.TurnId.make(turn.id),
+			id: require_collectUint8StreamText.TurnId.make(turn.id),
 			items: turn.items
 		}))
 	};
@@ -485,7 +485,7 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 	const sessionRef = yield* effect.Ref.make(initialSession);
 	const offerEvent = (event) => effect.Queue.offer(events, event).pipe(effect.Effect.asVoid);
 	const emitEvent = (event) => effect.Effect.flatMap(effect.Random.nextUUIDv4, (id) => offerEvent({
-		id: require_bin.EventId.make(id),
+		id: require_collectUint8StreamText.EventId.make(id),
 		provider: PROVIDER$1,
 		...options.providerInstanceId ? { providerInstanceId: options.providerInstanceId } : {},
 		createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -553,7 +553,7 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 		if (providerThreadId && payload.threadId !== providerThreadId) return effect.Effect.void;
 		return updateSession(sessionRef, {
 			status: "running",
-			activeTurnId: require_bin.TurnId.make(payload.turn.id)
+			activeTurnId: require_collectUint8StreamText.TurnId.make(payload.turn.id)
 		});
 	})));
 	yield* client.handleServerNotification("turn/completed", (payload) => currentSessionProviderThreadId.pipe(effect.Effect.flatMap((providerThreadId) => {
@@ -576,9 +576,9 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 		});
 	})));
 	yield* client.handleServerRequest("item/commandExecution/requestApproval", (payload) => effect.Effect.gen(function* () {
-		const requestId = require_bin.ApprovalRequestId.make(yield* effect.Random.nextUUIDv4);
-		const turnId = require_bin.TurnId.make(payload.turnId);
-		const itemId = require_bin.ProviderItemId.make(payload.itemId);
+		const requestId = require_collectUint8StreamText.ApprovalRequestId.make(yield* effect.Random.nextUUIDv4);
+		const turnId = require_collectUint8StreamText.TurnId.make(payload.turnId);
+		const itemId = require_collectUint8StreamText.ProviderItemId.make(payload.itemId);
 		const decision = yield* effect.Deferred.make();
 		yield* effect.Ref.update(pendingApprovalsRef, (current) => {
 			const next = new Map(current);
@@ -619,9 +619,9 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 		}))) };
 	}));
 	yield* client.handleServerRequest("item/fileChange/requestApproval", (payload) => effect.Effect.gen(function* () {
-		const requestId = require_bin.ApprovalRequestId.make(yield* effect.Random.nextUUIDv4);
-		const turnId = require_bin.TurnId.make(payload.turnId);
-		const itemId = require_bin.ProviderItemId.make(payload.itemId);
+		const requestId = require_collectUint8StreamText.ApprovalRequestId.make(yield* effect.Random.nextUUIDv4);
+		const turnId = require_collectUint8StreamText.TurnId.make(payload.turnId);
+		const itemId = require_collectUint8StreamText.ProviderItemId.make(payload.itemId);
 		const decision = yield* effect.Deferred.make();
 		yield* effect.Ref.update(pendingApprovalsRef, (current) => {
 			const next = new Map(current);
@@ -662,9 +662,9 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 		}))) };
 	}));
 	yield* client.handleServerRequest("item/tool/requestUserInput", (payload) => effect.Effect.gen(function* () {
-		const requestId = require_bin.ApprovalRequestId.make(yield* effect.Random.nextUUIDv4);
-		const turnId = require_bin.TurnId.make(payload.turnId);
-		const itemId = require_bin.ProviderItemId.make(payload.itemId);
+		const requestId = require_collectUint8StreamText.ApprovalRequestId.make(yield* effect.Random.nextUUIDv4);
+		const turnId = require_collectUint8StreamText.TurnId.make(payload.turnId);
+		const itemId = require_collectUint8StreamText.ProviderItemId.make(payload.itemId);
 		const answers = yield* effect.Deferred.make();
 		yield* effect.Ref.update(pendingUserInputsRef, (current) => {
 			const next = new Map(current);
@@ -785,7 +785,7 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 			});
 			const rawResponse = yield* client.raw.request("turn/start", params);
 			const response = yield* effect.Schema.decodeUnknownEffect(require_bin.V2TurnStartResponse)(rawResponse).pipe(effect.Effect.mapError((error) => toProtocolParseError("Invalid turn/start response payload", error)));
-			const turnId = require_bin.TurnId.make(response.turn.id);
+			const turnId = require_collectUint8StreamText.TurnId.make(response.turn.id);
 			yield* updateSession(sessionRef, {
 				status: "running",
 				activeTurnId: turnId,
@@ -875,7 +875,6 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 		close
 	};
 });
-
 //#endregion
 //#region src/provider/Layers/CodexAdapter.ts
 /**
@@ -887,7 +886,8 @@ const makeCodexSessionRuntime = (options) => effect.Effect.gen(function* () {
 *
 * @module CodexAdapterLive
 */
-const PROVIDER = require_bin.ProviderDriverKind.make("codex");
+const PROVIDER = require_collectUint8StreamText.ProviderDriverKind.make("codex");
+const PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES = 8 * require_collectUint8StreamText.PROVIDER_SEND_TURN_MAX_IMAGE_BYTES;
 function formatCodexRuntimeErrorDetail(error) {
 	if (!(error.message.includes("Expected \"fast\" | \"flex\"") && error.message.includes("[\"serviceTier\"]"))) return error.message;
 	return `${error.message}. This usually means the installed Codex CLI returned a newer service tier name than Ryco's generated app-server schema knows about. Rebuild effect-codex-app-server before rebuilding the server bundle.`;
@@ -910,7 +910,7 @@ function mapCodexRuntimeError(threadId, method, error) {
 		cause: error
 	});
 }
-const ApprovalDecisionPayload = effect.Schema.Struct({ decision: require_bin.ProviderApprovalDecision });
+const ApprovalDecisionPayload = effect.Schema.Struct({ decision: require_collectUint8StreamText.ProviderApprovalDecision });
 function readPayload(schema, payload) {
 	return effect.Schema.is(schema)(payload) ? payload : void 0;
 }
@@ -918,6 +918,10 @@ function trimText(value) {
 	const trimmed = value?.trim();
 	return trimmed && trimmed.length > 0 ? trimmed : void 0;
 }
+function normalizeFileSizeBytes(size) {
+	if (typeof size === "bigint") return size > BigInt(Number.MAX_SAFE_INTEGER) ? Number.MAX_SAFE_INTEGER : Number(size);
+	return typeof size === "number" && Number.isFinite(size) ? size : 0;
+}
 const FATAL_CODEX_STDERR_SNIPPETS = ["failed to connect to websocket"];
 function isFatalCodexProcessStderrMessage(message) {
 	const normalized = message.toLowerCase();
@@ -1087,10 +1091,10 @@ function contentStreamKindFromMethod(method) {
 	}
 }
 function asRuntimeItemId(itemId) {
-	return require_bin.RuntimeItemId.make(itemId);
+	return require_collectUint8StreamText.RuntimeItemId.make(itemId);
 }
 function asRuntimeRequestId(requestId) {
-	return require_bin.RuntimeRequestId.make(requestId);
+	return require_collectUint8StreamText.RuntimeRequestId.make(requestId);
 }
 function eventRawSource(event) {
 	return event.kind === "request" ? "codex.app-server.request" : "codex.app-server.notification";
@@ -1653,10 +1657,10 @@ function mapToRuntimeEvents(event, canonicalThreadId) {
 * instances with different `homePath`s cannot step on each other.
 */
 const makeCodexAdapter = effect.Effect.fn("makeCodexAdapter")(function* (codexConfig, options) {
-	const boundInstanceId = options?.instanceId ?? require_bin.ProviderInstanceId.make("codex");
+	const boundInstanceId = options?.instanceId ?? require_collectUint8StreamText.ProviderInstanceId.make("codex");
 	const fileSystem = yield* effect.FileSystem.FileSystem;
 	const childProcessSpawner = yield* effect_unstable_process.ChildProcessSpawner.ChildProcessSpawner;
-	const serverConfig = yield* effect.Effect.service(require_bin.ServerConfig);
+	const serverConfig = yield* effect.Effect.service(require_Metrics.ServerConfig);
 	const nativeEventLogger = options?.nativeEventLogger ?? (options?.nativeEventLogPath !== void 0 ? yield* require_bin.makeEventNdjsonLogger(options.nativeEventLogPath, { stream: "native" }) : void 0);
 	const managedNativeEventLogger = options?.nativeEventLogger === void 0 ? nativeEventLogger : void 0;
 	const runtimeEventQueue = yield* effect.Queue.unbounded();
@@ -1669,7 +1673,7 @@ const makeCodexAdapter = effect.Effect.fn("makeCodexAdapter")(function* (codexCo
 		});
 		const existing = sessions.get(input.threadId);
 		if (existing && !existing.stopped) yield* effect.Effect.suspend(() => stopSessionInternal(existing));
-		const tokenMode = input.tokenMode ?? require_bin.DEFAULT_AGENT_TOKEN_MODE;
+		const tokenMode = input.tokenMode ?? "balanced";
 		const tokenReductionInstructions = yield* readTokenReductionInstructions(tokenMode);
 		const runtimeInput = {
 			threadId: input.threadId,
@@ -1724,7 +1728,7 @@ const makeCodexAdapter = effect.Effect.fn("makeCodexAdapter")(function* (codexCo
 		sessionScopeTransferred = true;
 		return started;
 	}));
-	const resolveAttachment = effect.Effect.fn("resolveAttachment")(function* (input, attachment) {
+	const resolveAttachmentForPreflight = effect.Effect.fn("resolveAttachmentForPreflight")(function* (attachment) {
 		const attachmentPath = require_bin.resolveAttachmentPath({
 			attachmentsDir: serverConfig.attachmentsDir,
 			attachment
@@ -1734,7 +1738,68 @@ const makeCodexAdapter = effect.Effect.fn("makeCodexAdapter")(function* (codexCo
 			method: "turn/start",
 			detail: `Invalid attachment id '${attachment.id}'.`
 		});
-		const bytes = yield* fileSystem.readFile(attachmentPath).pipe(effect.Effect.mapError((cause) => new require_bin.ProviderAdapterRequestError({
+		const fileInfo = yield* fileSystem.stat(attachmentPath).pipe(effect.Effect.mapError((cause) => new require_bin.ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Failed to stat attachment file: ${cause.message}.`,
+			cause
+		})));
+		if (fileInfo.type !== "File") return yield* new require_bin.ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Attachment '${attachment.name}' is not a regular file.`
+		});
+		const sizeBytes = normalizeFileSizeBytes(fileInfo.size);
+		if (sizeBytes <= 0) return yield* new require_bin.ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Attachment '${attachment.name}' is empty.`
+		});
+		if (sizeBytes > 10485760) return yield* new require_bin.ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Attachment '${attachment.name}' is ${sizeBytes} bytes; limit is ${require_collectUint8StreamText.PROVIDER_SEND_TURN_MAX_IMAGE_BYTES} bytes.`
+		});
+		return {
+			attachment,
+			path: attachmentPath,
+			sizeBytes
+		};
+	});
+	const preflightAttachments = effect.Effect.fn("preflightAttachments")(function* (input) {
+		const attachments = input.attachments ?? [];
+		if (attachments.length > 8) return yield* new require_bin.ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Turn has ${attachments.length} attachments; limit is 8.`
+		});
+		const resolved = yield* effect.Effect.forEach(attachments, resolveAttachmentForPreflight, { concurrency: 1 });
+		const totalBytes = resolved.reduce((total, entry) => total + entry.sizeBytes, 0);
+		if (totalBytes > PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES) return yield* new require_bin.ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Turn attachments total ${totalBytes} bytes; limit is ${PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES} bytes.`
+		});
+		if (resolved.length > 0) {
+			yield* effect.Effect.annotateCurrentSpan({
+				"provider.attachment_count": resolved.length,
+				"provider.attachment_total_bytes": totalBytes
+			});
+			yield* effect.Effect.logDebug("resolved Codex turn attachments", {
+				threadId: input.threadId,
+				attachmentCount: resolved.length,
+				attachmentTotalBytes: totalBytes,
+				attachmentBytes: resolved.map((entry) => ({
+					id: entry.attachment.id,
+					name: entry.attachment.name,
+					sizeBytes: entry.sizeBytes
+				}))
+			});
+		}
+		return resolved;
+	});
+	const toCodexAttachment = effect.Effect.fn("toCodexAttachment")(function* (resolved) {
+		const bytes = yield* fileSystem.readFile(resolved.path).pipe(effect.Effect.mapError((cause) => new require_bin.ProviderAdapterRequestError({
 			provider: PROVIDER,
 			method: "turn/start",
 			detail: `Failed to read attachment file: ${cause.message}.`,
@@ -1742,11 +1807,12 @@ const makeCodexAdapter = effect.Effect.fn("makeCodexAdapter")(function* (codexCo
 		})));
 		return {
 			type: "image",
-			url: `data:${attachment.mimeType};base64,${Buffer.from(bytes).toString("base64")}`
+			url: `data:${resolved.attachment.mimeType};base64,${Buffer.from(bytes).toString("base64")}`
 		};
 	});
 	const sendTurn = effect.Effect.fn("sendTurn")(function* (input) {
-		const codexAttachments = yield* effect.Effect.forEach(input.attachments ?? [], (attachment) => resolveAttachment(input, attachment), { concurrency: 1 });
+		const resolvedAttachments = yield* preflightAttachments(input);
+		const codexAttachments = yield* effect.Effect.forEach(resolvedAttachments, toCodexAttachment, { concurrency: 1 });
 		const session = yield* requireSession(input.threadId);
 		const reasoningEffort = input.modelSelection?.instanceId === boundInstanceId ? require_bin.getModelSelectionStringOptionValue(input.modelSelection, "reasoningEffort") : void 0;
 		const fastMode = input.modelSelection?.instanceId === boundInstanceId ? require_bin.getModelSelectionBooleanOptionValue(input.modelSelection, "fastMode") : void 0;
@@ -1831,7 +1897,6 @@ const makeCodexAdapter = effect.Effect.fn("makeCodexAdapter")(function* (codexCo
 		}
 	};
 });
-
 //#endregion
 //#region src/provider/Drivers/CodexDriver.ts
 /**
@@ -1857,7 +1922,7 @@ const makeCodexAdapter = effect.Effect.fn("makeCodexAdapter")(function* (codexCo
 *
 * @module provider/Drivers/CodexDriver
 */
-const DRIVER_KIND = require_bin.ProviderDriverKind.make("codex");
+const DRIVER_KIND = require_collectUint8StreamText.ProviderDriverKind.make("codex");
 const UPDATE = require_bin.makePackageManagedProviderMaintenanceResolver({
 	provider: DRIVER_KIND,
 	npmPackageName: "@openai/codex",
@@ -1884,8 +1949,8 @@ const CodexDriver = {
 		displayName: "Codex",
 		supportsMultipleInstances: true
 	},
-	configSchema: require_bin.CodexSettings,
-	defaultConfig: () => effect.Schema.decodeSync(require_bin.CodexSettings)({}),
+	configSchema: require_collectUint8StreamText.CodexSettings,
+	defaultConfig: () => effect.Schema.decodeSync(require_collectUint8StreamText.CodexSettings)({}),
 	create: ({ instanceId, displayName, accentColor, environment, enabled, config }) => effect.Effect.gen(function* () {
 		const spawner = yield* effect_unstable_process.ChildProcessSpawner.ChildProcessSpawner;
 		const httpClient = yield* effect_unstable_http.HttpClient.HttpClient;
@@ -1948,6 +2013,5 @@ const CodexDriver = {
 		};
 	})
 };
-
 //#endregion
-exports.CodexDriver = CodexDriver;
+exports.CodexDriver = CodexDriver;

package/dist/{CodexDriver-BRsJm8XU.mjs → CodexDriver-DbICyzcH.mjs}

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
 
-import { $t as V2ThreadStatusChangedNotification, At as V2AccountUpdatedNotification, B as buildTokenReductionInstructions, Bn as ProviderDriverKind, Bt as V2McpToolCallProgressNotification, Ct as ServerRequest__DynamicToolCallParams, Dt as ToolRequestUserInputParams, Et as ServerRequest__ToolRequestUserInputParams, Ft as V2ErrorNotification, G as makePendingCodexProvider, Gn as RuntimeItemId, Gt as V2ServerRequestResolvedNotification, H as mergeProviderInstanceEnvironment, Hn as ApprovalRequestId, Ht as V2PlanDeltaNotification, It as V2FileChangeOutputDeltaNotification, Jt as V2ThreadRealtimeErrorNotification, Kn as RuntimeRequestId, Kt as V2ThreadNameUpdatedNotification, Lt as V2ItemCompletedNotification, M as enrichProviderSnapshotWithVersionAdvisory, Mn as DEFAULT_AGENT_TOKEN_MODE, Mt as V2CommandExecutionOutputDeltaNotification, Nn as ProviderApprovalDecision, Nt as V2ConfigWarningNotification, On as CodexSettings, Ot as ToolRequestUserInputResponse, P as makePackageManagedProviderMaintenanceResolver, Pt as V2DeprecationNoticeNotification, Qt as V2ThreadStartedNotification, R as resolveProviderMaintenanceCapabilitiesEffect, Rt as V2ItemStartedNotification, St as ServerRequest__CommandExecutionRequestApprovalParams, Tt as ServerRequest__FileChangeRequestApprovalParams, U as buildCodexInitializeParams, Un as EventId, Ut as V2ReasoningSummaryTextDeltaNotification, V as checkRtkAvailability, Vn as ProviderInstanceId, Vt as V2ModelReroutedNotification, W as checkCodexProviderStatus, Wn as ProviderItemId, Wt as V2ReasoningTextDeltaNotification, Xt as V2ThreadRealtimeOutputAudioDeltaNotification, Yn as TurnId, Yt as V2ThreadRealtimeItemAddedNotification, Zt as V2ThreadRealtimeStartedNotification, _t as CodexAppServerRequestError, an as V2TurnStartParams__CollaborationMode, at as ProviderAdapterSessionClosedError, bt as SERVER_NOTIFICATION_METHODS, cn as V2WindowsWorldWritableWarningNotification, ct as ProviderDriverError, dt as resolveCodexHomeLayout, en as V2ThreadTokenUsageUpdatedNotification, ft as expandHomePath, gt as CodexAppServerProtocolParseError, hn as ServerConfig, ht as CodexAppServerProcessExitedError, in as V2TurnStartParams, it as ProviderAdapterRequestError, jt as V2AgentMessageDeltaNotification, kt as V2AccountRateLimitsUpdatedNotification, lt as codexContinuationIdentity, m as makeEventNdjsonLogger, mt as layerChildProcess, nn as V2TurnDiffUpdatedNotification, on as V2TurnStartResponse, ot as ProviderAdapterSessionNotFoundError, p as ProviderEventLoggers, pn as resolveAttachmentPath, pt as CodexAppServerClient, qt as V2ThreadRealtimeClosedNotification, rn as V2TurnPlanUpdatedNotification, rt as ProviderAdapterProcessError, sn as V2WindowsSandboxSetupCompletedNotification, st as ProviderAdapterValidationError, tn as V2TurnCompletedNotification, ut as materializeCodexShadowHome, vn as getModelSelectionBooleanOptionValue, vt as CodexAppServerSpawnError, wn as normalizeModelSlug, wt as ServerRequest__ExecCommandApprovalParams, xt as ServerRequest__ApplyPatchApprovalParams, yn as getModelSelectionStringOptionValue, yt as CodexAppServerTransportError, zn as DEFAULT_MODEL, zt as V2McpServerOauthLoginCompletedNotification } from "./bin.mjs";
-import { t as makeManagedServerProvider } from "./makeManagedServerProvider-B3DH-AMf.mjs";
-import { t as formatSourceControlContextsForAgent } from "./sourceControlContextFormatter-DpXEEmAm.mjs";
-import { t as appendProjectCustomSystemPrompt } from "./ProjectCustomSystemPrompt-QmzOdzXf.mjs";
-import { t as makeCodexTextGeneration } from "./CodexTextGeneration-Bg0r8k7C.mjs";
-import { Deferred, Effect, Exit, Fiber, FileSystem, Layer, Path, Queue, Random, Ref, Schema, Scope, Stream } from "effect";
+import { Fn as ProviderDriverKind, Gt as ProviderApprovalDecision, In as ProviderInstanceId, It as PROVIDER_SEND_TURN_MAX_IMAGE_BYTES, L as CodexSettings, Qn as ApprovalRequestId, _r as TurnId, ar as EventId, dr as ProviderItemId, fr as RuntimeItemId, pr as RuntimeRequestId } from "./collectUint8StreamText-Cgz3T1YG.mjs";
+import { U as ServerConfig } from "./Metrics-BCOc3Ml2.mjs";
+import { $ as ProviderAdapterSessionClosedError, $t as V2TurnStartParams__CollaborationMode, At as V2FileChangeOutputDeltaNotification, Bt as V2ThreadNameUpdatedNotification, Ct as V2AccountRateLimitsUpdatedNotification, Dt as V2ConfigWarningNotification, E as enrichProviderSnapshotWithVersionAdvisory, Et as V2CommandExecutionOutputDeltaNotification, F as checkRtkAvailability, Ft as V2ModelReroutedNotification, Gt as V2ThreadRealtimeStartedNotification, Ht as V2ThreadRealtimeErrorNotification, I as mergeProviderInstanceEnvironment, It as V2PlanDeltaNotification, Jt as V2ThreadTokenUsageUpdatedNotification, Kt as V2ThreadStartedNotification, L as buildCodexInitializeParams, Lt as V2ReasoningSummaryTextDeltaNotification, M as resolveProviderMaintenanceCapabilitiesEffect, Mt as V2ItemStartedNotification, Nt as V2McpServerOauthLoginCompletedNotification, O as makePackageManagedProviderMaintenanceResolver, Ot as V2DeprecationNoticeNotification, P as buildTokenReductionInstructions, Pt as V2McpToolCallProgressNotification, Q as ProviderAdapterRequestError, Qt as V2TurnStartParams, R as checkCodexProviderStatus, Rt as V2ReasoningTextDeltaNotification, St as ToolRequestUserInputResponse, Tt as V2AgentMessageDeltaNotification, Ut as V2ThreadRealtimeItemAddedNotification, Vt as V2ThreadRealtimeClosedNotification, Wt as V2ThreadRealtimeOutputAudioDeltaNotification, Xt as V2TurnDiffUpdatedNotification, Yt as V2TurnCompletedNotification, Z as ProviderAdapterProcessError, Zt as V2TurnPlanUpdatedNotification, _t as ServerRequest__DynamicToolCallParams, at as resolveCodexHomeLayout, bt as ServerRequest__ToolRequestUserInputParams, cn as getModelSelectionStringOptionValue, ct as layerChildProcess, dt as CodexAppServerRequestError, en as V2TurnStartResponse, et as ProviderAdapterSessionNotFoundError, ft as CodexAppServerSpawnError, gt as ServerRequest__CommandExecutionRequestApprovalParams, h as makeEventNdjsonLogger, ht as ServerRequest__ApplyPatchApprovalParams, it as materializeCodexShadowHome, jt as V2ItemCompletedNotification, kt as V2ErrorNotification, lt as CodexAppServerProcessExitedError, m as ProviderEventLoggers, mt as SERVER_NOTIFICATION_METHODS, nn as V2WindowsWorldWritableWarningNotification, nt as ProviderDriverError, ot as expandHomePath, pn as normalizeModelSlug, pt as CodexAppServerTransportError, qt as V2ThreadStatusChangedNotification, rn as resolveAttachmentPath, rt as codexContinuationIdentity, sn as getModelSelectionBooleanOptionValue, st as CodexAppServerClient, tn as V2WindowsSandboxSetupCompletedNotification, tt as ProviderAdapterValidationError, ut as CodexAppServerProtocolParseError, vt as ServerRequest__ExecCommandApprovalParams, wt as V2AccountUpdatedNotification, xt as ToolRequestUserInputParams, yt as ServerRequest__FileChangeRequestApprovalParams, z as makePendingCodexProvider, zt as V2ServerRequestResolvedNotification } from "./bin.mjs";
+import { t as makeManagedServerProvider } from "./makeManagedServerProvider-D43I_B9P.mjs";
+import { t as formatSourceControlContextsForAgent } from "./sourceControlContextFormatter-DEwpnVAH.mjs";
+import { t as appendProjectCustomSystemPrompt } from "./ProjectCustomSystemPrompt-CS1nulhL.mjs";
+import { t as makeCodexTextGeneration } from "./CodexTextGeneration-DV3LOkTX.mjs";
+import { Deferred, Effect, Exit, Fiber, FileSystem, Layer, Queue, Random, Ref, Schema, Scope, Stream } from "effect";
 import { HttpClient } from "effect/unstable/http";
 import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
 import * as SchemaIssue$1 from "effect/SchemaIssue";
-
 //#region src/provider/CodexDeveloperInstructions.ts
 const CODEX_PLAN_MODE_DEVELOPER_INSTRUCTIONS = `<collaboration_mode># Plan Mode (Conversational)
 
@@ -144,12 +145,10 @@ The \`request_user_input\` tool is unavailable in Default mode. If you call it w
 
 In Default mode, strongly prefer making reasonable assumptions and executing the user's request rather than stopping to ask questions. If you absolutely must ask a question because the answer cannot be discovered from local context and a reasonable assumption would be risky, ask the user directly with a concise plain-text question. Never write a multiple choice question as a textual assistant message.
 </collaboration_mode>`;
-
 //#endregion
 //#region src/provider/Layers/CodexSessionRuntime.ts
 const PROVIDER$1 = ProviderDriverKind.make("codex");
-const ANSI_ESCAPE_CHAR = String.fromCharCode(27);
-const ANSI_ESCAPE_REGEX = new RegExp(`${ANSI_ESCAPE_CHAR}\\[[0-9;]*m`, "g");
+const ANSI_ESCAPE_REGEX = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
 const CODEX_STDERR_LOG_REGEX = /^\d{4}-\d{2}-\d{2}T\S+\s+(TRACE|DEBUG|INFO|WARN|ERROR)\s+\S+:\s+(.*)$/;
 const BENIGN_ERROR_LOG_SNIPPETS = ["state db missing rollout path for thread", "state db record_discrepancy: find_thread_path_by_id_str_in_subdir, falling_back"];
 const RECOVERABLE_THREAD_RESUME_ERROR_SNIPPETS = [
@@ -233,7 +232,7 @@ function runtimeModeToTurnSandboxPolicy(input) {
 }
 function buildCodexCollaborationMode(input) {
 	if (input.interactionMode === void 0) return;
-	const model = normalizeCodexModelSlug(input.model) ?? DEFAULT_MODEL;
+	const model = normalizeCodexModelSlug(input.model) ?? "gpt-5.4";
 	const developerInstructions = appendProjectCustomSystemPrompt(appendProjectCustomSystemPrompt(input.interactionMode === "plan" ? CODEX_PLAN_MODE_DEVELOPER_INSTRUCTIONS : CODEX_DEFAULT_MODE_DEVELOPER_INSTRUCTIONS, input.tokenReductionInstructions), input.customSystemPrompt);
 	return {
 		mode: input.interactionMode,
@@ -874,7 +873,6 @@ const makeCodexSessionRuntime = (options) => Effect.gen(function* () {
 		close
 	};
 });
-
 //#endregion
 //#region src/provider/Layers/CodexAdapter.ts
 /**
@@ -887,6 +885,7 @@ const makeCodexSessionRuntime = (options) => Effect.gen(function* () {
 * @module CodexAdapterLive
 */
 const PROVIDER = ProviderDriverKind.make("codex");
+const PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES = 8 * PROVIDER_SEND_TURN_MAX_IMAGE_BYTES;
 function formatCodexRuntimeErrorDetail(error) {
 	if (!(error.message.includes("Expected \"fast\" | \"flex\"") && error.message.includes("[\"serviceTier\"]"))) return error.message;
 	return `${error.message}. This usually means the installed Codex CLI returned a newer service tier name than Ryco's generated app-server schema knows about. Rebuild effect-codex-app-server before rebuilding the server bundle.`;
@@ -917,6 +916,10 @@ function trimText(value) {
 	const trimmed = value?.trim();
 	return trimmed && trimmed.length > 0 ? trimmed : void 0;
 }
+function normalizeFileSizeBytes(size) {
+	if (typeof size === "bigint") return size > BigInt(Number.MAX_SAFE_INTEGER) ? Number.MAX_SAFE_INTEGER : Number(size);
+	return typeof size === "number" && Number.isFinite(size) ? size : 0;
+}
 const FATAL_CODEX_STDERR_SNIPPETS = ["failed to connect to websocket"];
 function isFatalCodexProcessStderrMessage(message) {
 	const normalized = message.toLowerCase();
@@ -1668,7 +1671,7 @@ const makeCodexAdapter = Effect.fn("makeCodexAdapter")(function* (codexConfig, o
 		});
 		const existing = sessions.get(input.threadId);
 		if (existing && !existing.stopped) yield* Effect.suspend(() => stopSessionInternal(existing));
-		const tokenMode = input.tokenMode ?? DEFAULT_AGENT_TOKEN_MODE;
+		const tokenMode = input.tokenMode ?? "balanced";
 		const tokenReductionInstructions = yield* readTokenReductionInstructions(tokenMode);
 		const runtimeInput = {
 			threadId: input.threadId,
@@ -1723,7 +1726,7 @@ const makeCodexAdapter = Effect.fn("makeCodexAdapter")(function* (codexConfig, o
 		sessionScopeTransferred = true;
 		return started;
 	}));
-	const resolveAttachment = Effect.fn("resolveAttachment")(function* (input, attachment) {
+	const resolveAttachmentForPreflight = Effect.fn("resolveAttachmentForPreflight")(function* (attachment) {
 		const attachmentPath = resolveAttachmentPath({
 			attachmentsDir: serverConfig.attachmentsDir,
 			attachment
@@ -1733,7 +1736,68 @@ const makeCodexAdapter = Effect.fn("makeCodexAdapter")(function* (codexConfig, o
 			method: "turn/start",
 			detail: `Invalid attachment id '${attachment.id}'.`
 		});
-		const bytes = yield* fileSystem.readFile(attachmentPath).pipe(Effect.mapError((cause) => new ProviderAdapterRequestError({
+		const fileInfo = yield* fileSystem.stat(attachmentPath).pipe(Effect.mapError((cause) => new ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Failed to stat attachment file: ${cause.message}.`,
+			cause
+		})));
+		if (fileInfo.type !== "File") return yield* new ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Attachment '${attachment.name}' is not a regular file.`
+		});
+		const sizeBytes = normalizeFileSizeBytes(fileInfo.size);
+		if (sizeBytes <= 0) return yield* new ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Attachment '${attachment.name}' is empty.`
+		});
+		if (sizeBytes > 10485760) return yield* new ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Attachment '${attachment.name}' is ${sizeBytes} bytes; limit is ${PROVIDER_SEND_TURN_MAX_IMAGE_BYTES} bytes.`
+		});
+		return {
+			attachment,
+			path: attachmentPath,
+			sizeBytes
+		};
+	});
+	const preflightAttachments = Effect.fn("preflightAttachments")(function* (input) {
+		const attachments = input.attachments ?? [];
+		if (attachments.length > 8) return yield* new ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Turn has ${attachments.length} attachments; limit is 8.`
+		});
+		const resolved = yield* Effect.forEach(attachments, resolveAttachmentForPreflight, { concurrency: 1 });
+		const totalBytes = resolved.reduce((total, entry) => total + entry.sizeBytes, 0);
+		if (totalBytes > PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES) return yield* new ProviderAdapterRequestError({
+			provider: PROVIDER,
+			method: "turn/start",
+			detail: `Turn attachments total ${totalBytes} bytes; limit is ${PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES} bytes.`
+		});
+		if (resolved.length > 0) {
+			yield* Effect.annotateCurrentSpan({
+				"provider.attachment_count": resolved.length,
+				"provider.attachment_total_bytes": totalBytes
+			});
+			yield* Effect.logDebug("resolved Codex turn attachments", {
+				threadId: input.threadId,
+				attachmentCount: resolved.length,
+				attachmentTotalBytes: totalBytes,
+				attachmentBytes: resolved.map((entry) => ({
+					id: entry.attachment.id,
+					name: entry.attachment.name,
+					sizeBytes: entry.sizeBytes
+				}))
+			});
+		}
+		return resolved;
+	});
+	const toCodexAttachment = Effect.fn("toCodexAttachment")(function* (resolved) {
+		const bytes = yield* fileSystem.readFile(resolved.path).pipe(Effect.mapError((cause) => new ProviderAdapterRequestError({
 			provider: PROVIDER,
 			method: "turn/start",
 			detail: `Failed to read attachment file: ${cause.message}.`,
@@ -1741,11 +1805,12 @@ const makeCodexAdapter = Effect.fn("makeCodexAdapter")(function* (codexConfig, o
 		})));
 		return {
 			type: "image",
-			url: `data:${attachment.mimeType};base64,${Buffer.from(bytes).toString("base64")}`
+			url: `data:${resolved.attachment.mimeType};base64,${Buffer.from(bytes).toString("base64")}`
 		};
 	});
 	const sendTurn = Effect.fn("sendTurn")(function* (input) {
-		const codexAttachments = yield* Effect.forEach(input.attachments ?? [], (attachment) => resolveAttachment(input, attachment), { concurrency: 1 });
+		const resolvedAttachments = yield* preflightAttachments(input);
+		const codexAttachments = yield* Effect.forEach(resolvedAttachments, toCodexAttachment, { concurrency: 1 });
 		const session = yield* requireSession(input.threadId);
 		const reasoningEffort = input.modelSelection?.instanceId === boundInstanceId ? getModelSelectionStringOptionValue(input.modelSelection, "reasoningEffort") : void 0;
 		const fastMode = input.modelSelection?.instanceId === boundInstanceId ? getModelSelectionBooleanOptionValue(input.modelSelection, "fastMode") : void 0;
@@ -1830,7 +1895,6 @@ const makeCodexAdapter = Effect.fn("makeCodexAdapter")(function* (codexConfig, o
 		}
 	};
 });
-
 //#endregion
 //#region src/provider/Drivers/CodexDriver.ts
 /**
@@ -1947,6 +2011,5 @@ const CodexDriver = {
 		};
 	})
 };
-
 //#endregion
-export { CodexDriver };
+export { CodexDriver };