shennian 0.3.85 → 0.3.86

package/dist/src/agents/codex.js

@@ -1,17 +1,1352 @@
-import{spawnSync as A}from"node:child_process";import{createInterface as w}from"node:readline";import{createHash as y,randomUUID as O}from"node:crypto";import h from"node:path";import{AgentAdapter as M,registerAgent as b}from"./adapter.js";import{resolveBuiltinCommand as v,spawnAgentCommand as T}from"./command-spec.js";import{buildAgentProcessEnv as q,buildManagedAgentProcessEnv as D}from"../agent-env.js";import{ensurePlatformInstructionsFile as N}from"./platform-instructions.js";import{CODEX_DESKTOP_SEND_UNAVAILABLE as S}from"@shennian/wire";import{isCodexThreadTailInterrupted as $}from"../native-fusion/codex-files.js";import{resolveManagedAgentAdapterEnforcement as L}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as F}from"../security/managed-agent-runtime.js";import{CODEX_MANAGED_ROOM_DYNAMIC_TOOLS as U,CodexManagedRoomToolBinding as W}from"./codex-managed-room-tools.js";import{assertCodexManagedPermissionProfile as C,CODEX_MANAGED_RUNTIME_SECURITY as z,compileCodexManagedPermissions as B,extractCodexMcpServerNames as G}from"./codex-managed-permissions.js";import{CODEX_APP_SERVER_CLIENT_INFO as H,extractAppServerErrorMessage as J,formatCodexErrorMessage as V,formatTransientCodexStatus as X,isCodexCollabAgentItem as K,isCodexCollabAgentToolName as x,isCodexLegacyCollabAgentItem as Q,isCodexUnsupportedEffortError as Y,isMissingCodexRolloutError as j,isTransientCodexErrorMessage as Z,looksLikeCodexInteractiveAuthPrompt as ee,looksLikeFatalCodexStderr as te,normalizeCodexModelId as I,normalizeCodexReasoningEffort as re,normalizeCodexStderr as E,normalizeTerminalText as se,safeStringify as _,stripGitDirectiveArtifacts as ne}from"./codex-utils.js";import{isCodexUnsupportedEffortError as be,isMissingCodexRolloutError as qe,normalizeCodexModelId as De,normalizeCodexReasoningEffort as Ne}from"./codex-utils.js";F("codex",z);function R(o){const e=o instanceof Error?o.message:String(o);return/already has an active writer|thread-store conflict/i.test(e)}function ie(o){const e=o instanceof Error?o.message:String(o);return/paginated(?:_threads|\s+(?:thread\s+)?history)?.*(?:not supported|unsupported|unavailable)/i.test(e)||/(?:not supported|unsupported|unavailable).*paginated(?:_threads|\s+(?:thread\s+)?history)?/i.test(e)}function oe(o){const e=o instanceof Error?o.message:String(o);return/unknown field [`'"]?excludeTurns/i.test(e)||/excludeTurns.*(?:not supported|unsupported|unavailable)/i.test(e)}function ae(o){const e=o instanceof Error?o.message:String(o);return/(?:method not found|unknown method).*(?:project\/list|project\/create)/i.test(e)||/(?:project\/list|project\/create).*(?:not supported|unsupported|unavailable)/i.test(e)}function de(o,e){const t=h.resolve(e);let r;for(const s of o)if(s.id)for(const i of s.roots??[]){if(!i.path)continue;const n=h.resolve(i.path),a=h.relative(n,t);!(a===""||!a.startsWith("..")&&!h.isAbsolute(a))||n.length<=(r?.rootLength??-1)||(r={id:s.id,rootLength:n.length})}return r?.id}function le(o,e){const t=e?.flatMap(s=>ce(s)).filter(s=>!/^https?:\/\//i.test(s.path)).filter(s=>s.path);return{type:"text",text:pe(o,e),text_elements:[],...t?.length?{local_images:t}:{}}}function ce(o){if(o.kind==="image")return o.previewData?[{path:o.path,data:o.previewData,mimeType:o.mimeType}]:[{path:o.path}];if(o.mimeType.startsWith("video/")){const e=ue(o.path);return e?[{path:e}]:[]}return[]}function ue(o){if(!o||/^https?:\/\//i.test(o))return null;const e=h.extname(o),r=`${e?o.slice(0,-e.length):o}.preview.png`;return A("ffmpeg",["-y","-ss","0","-i",o,"-frames:v","1","-vf","scale=320:-1",r],{stdio:"ignore",timeout:15e3}).status===0?r:null}function pe(o,e){const t=e?.filter(i=>i.kind!=="image").filter(i=>i.path&&!/^https?:\/\//i.test(i.path));if(!t?.length||t.every(i=>o.includes(i.path)))return o;const s=t.map((i,n)=>{const a=i.name||`attachment-${n+1}`,d=i.mimeType?` (${i.mimeType})`:"";return`[${k(a)}${d}](<${i.path}>)`});return[o,"",...s].join(`
-`)}function he(o,e){const t=e?.filter(s=>s.path&&!/^https?:\/\//i.test(s.path)&&!o.includes(s.path));if(!t?.length)return o;const r=t.map((s,i)=>{const n=k(s.name||`attachment-${i+1}`);return s.kind==="image"?`![${n}](<${s.path}>)`:`[${n}](<${s.path}>)`});return[o,"",...r].join(`
-`)}function me(o,e,t){return["queue","--thread",o,"--message",he(e,t)]}function k(o){return o.replace(/[[\]\\]/g,"\\$&")}class ge extends M{options;type="codex";process=null;workDir=null;seq=0;runId="";pendingUsage;agentSessionId=null;hasEmittedText=!1;textTail="";terminalState="open";forceCloseTimer=null;stderrBuf="";rpcSeq=1;pendingRequests=new Map;appServerReady=null;appServerStartupError=null;activeTurnId=null;deltaItemIds=new Set;lastTransientStatus="";agentSystemPrompt="";managedAgentPolicy=null;managedPermissionConfig=null;configurationRestartRequired=!1;managedRoomTools=new W;configuredManagedRoomContextToken=null;configuredManagedRoomExecutor=null;managedRoomToolThreadId=null;preparedExternalOwnerThreadId=null;constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){const t=this.configurationFingerprint();this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),("managedRoomContextToken"in e||"managedRoomExecutor"in e)&&(this.managedRoomTools.deactivateTurn(),this.configuredManagedRoomContextToken=e.managedRoomContextToken?.trim()||null,this.configuredManagedRoomExecutor=e.managedRoomExecutor??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir);const r=this.configurationFingerprint();t!==r&&this.process&&(this.configurationRestartRequired=!0)}configurationFingerprint(){const e=Object.keys(this.extraEnv).sort().map(t=>[t,this.extraEnv[t]??null]);return y("sha256").update(JSON.stringify({sessionId:this.shennianSessionId,externalChannel:this.externalChannel,env:e,managedAgentPolicy:this.managedAgentPolicy})).digest("hex")}buildProcessEnv(e={}){if(!this.managedAgentPolicy)return q({...e,...this.extraEnv});const t=Object.fromEntries(Object.entries(this.extraEnv).filter(([r])=>r!=="SHENNIAN_MANAGED_ROOM_CONTEXT"&&r!=="SHENNIAN_MANAGED_ROOM_IPC_ROOT"));return D({agentType:"codex",providerEnv:t,sessionEnv:t,runtimeEnv:e})}async start(e,t,r){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,r&&(this.agentSessionId=r)}async prepareSend(e,t,r,s,i,n){if(!(!this.agentSessionId||this.activeTurnId)){this.preparedExternalOwnerThreadId=null;try{await this.ensureAppServer(I(t))}catch(a){if(!R(a))throw a;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:a});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(S,{cause:a});this.preparedExternalOwnerThreadId=this.agentSessionId}}}async send(e,t,r,s,i,n){if(n?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");if(n?.source==="room_activation"&&(!this.configuredManagedRoomContextToken||!this.configuredManagedRoomExecutor))throw new Error("codex_managed_room_tool_context_unavailable");this.activeTurnId&&(await this.interruptActiveTurn().catch(()=>{}),await this.killProcess(!0)),this.configurationRestartRequired&&this.process&&await this.killProcess(!0),this.configurationRestartRequired=!1;const a=I(t),d=re(r),l=i?.trim()??"";if(l!==this.agentSystemPrompt&&(this.agentSystemPrompt=l,this.process&&await this.killProcess(!0)),n?.source==="room_activation"&&this.managedRoomTools.configure(this.configuredManagedRoomContextToken,this.configuredManagedRoomExecutor),this.runId=O(),this.seq=0,this.resetRunState(),this.agentSessionId&&this.preparedExternalOwnerThreadId===this.agentSessionId)return this.preparedExternalOwnerThreadId=null,{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)};try{await this.ensureAppServer(a)}catch(p){if(!this.agentSessionId||!R(p))throw p;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:p});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(S,{cause:p});return{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)}}const u=this.agentSessionId;if(!u)throw new Error("codex app-server did not create a thread");this.emitEvent({state:"start",agentSessionId:u});const g=await this.startTurnWithRecovery(u,e,a,d,s),m=this.agentSessionId??u;if(this.activeTurnId=g.turn?.id??null,this.managedPermissionConfig&&this.activeTurnId&&!this.managedRoomTools.bindTurn(m,this.activeTurnId))throw await this.killProcess(),new Error("codex_managed_room_turn_binding_failed");return{deliveryMode:"direct"}}isThreadTailInterrupted(e){return this.options.isThreadTailInterrupted?.(e)??$(e)}async enqueueForExternalOwner(e,t,r){const s=v("codex");if(!s)throw new Error('Command "codex" not found. Is OpenAI Codex CLI installed?');const i=me(e,t,r),n=T(s,i,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv({NO_COLOR:"1"})});return await new Promise((a,d)=>{let l="",u="",g=!1;const m=(c,f)=>{g||(g=!0,clearTimeout(p),c?d(c):a(f))},p=setTimeout(()=>{n.kill("SIGTERM"),m(new Error("Codex Desktop message queue timed out"))},6e4);p.unref?.(),n.stdout?.on("data",c=>{l+=c.toString()}),n.stderr?.on("data",c=>{u+=c.toString()}),n.once("error",c=>m(c)),n.once("close",c=>{const f=`${l}
-${u}`.trim();if(c!==0){m(new Error(f||`codex queue exited with code ${c??"unknown"}`));return}const P=f.match(/Queued message\s+([^\s]+)\s+for thread/i)?.[1];m(void 0,P)})})}async resume(e){await this.killProcess(),this.agentSessionId=e,this.resetTextState()}async setTitle(e,t,r){const s=e.trim(),i=t.replace(/\s+/g," ").trim();!s||!i||(this.agentSessionId=s,r?.trim()&&(this.workDir=r),await this.ensureAppServer(),await this.sendRpc("thread/name/set",{threadId:s,name:i}))}async stop(){this.managedRoomTools.deactivateTurn(),await this.interruptActiveTurn().catch(()=>{}),await this.killProcess()}async getStatus(){const e=this.agentSessionId,t=this.activeTurnId;if(!e||!this.process)return{active:!1,runId:t,runPhase:null,canStop:!1};let r=null;try{r=(await this.sendRpc("thread/read",{threadId:e,includeTurns:!1},5e3)).thread?.status??null}catch{}const s=r?.type==="active"||!!t;return{active:s,runId:t,runPhase:s?this.mapThreadStatusToRunPhase(r):null,canStop:!!(s&&t&&this.process)}}spawnCodex(e){const t=v("codex");if(!t){this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));return}const r=T(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()});this.process=r,w({input:r.stdout}).on("line",n=>{if(n.trim())try{const a=JSON.parse(n);this.handleStreamEvent(a)}catch{this.emitEvent({state:"delta",text:n})}});let i="";r.stderr?.on("data",n=>{i+=n.toString()}),r.on("close",n=>{this.process===r&&(this.process=null,this.clearForceCloseTimer(),this.handleProcessClose(n,i))}),r.on("error",n=>{this.process===r&&(this.process=null,n.code==="ENOENT"?this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?')):this.emit("error",n))})}spawnAppServer(){const e=v("codex");if(!e){this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));return}const t=["app-server","--listen","stdio://"],r=this.options.modelInstructionsFile??N(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,this.agentSystemPrompt);r&&t.push("-c",`model_instructions_file=${JSON.stringify(r)}`);const s=T(e,t,{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:this.buildProcessEnv({NO_COLOR:"1"})});this.process=s,this.stderrBuf="",this.appServerStartupError=null,w({input:s.stdout}).on("line",n=>{if(!n.trim())return;let a;try{a=JSON.parse(n)}catch{this.handleAppServerNonJsonStdout(n);return}this.handleAppServerMessage(a)}),s.stderr?.on("data",n=>{this.stderrBuf+=n.toString()}),s.on("close",n=>{if(this.process!==s)return;const a=this.activeTurnId!=null;this.process=null,this.appServerReady=null,this.activeTurnId=null,this.managedRoomTools.reset(),this.clearConfiguredManagedRoomContext(),this.rejectAllPending(new Error(E(this.stderrBuf)||`codex app-server exited with code ${n}`)),this.terminalState==="open"&&a&&this.handleProcessClose(n,this.stderrBuf)}),s.on("error",n=>{this.process===s&&(this.process=null,this.managedRoomTools.reset(),this.clearConfiguredManagedRoomContext(),this.rejectAllPending(n),n.code==="ENOENT"?this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?')):this.emit("error",n))})}async ensureAppServer(e){return this.appServerReady?this.appServerReady:(this.spawnAppServer(),this.appServerReady=this.initializeAppServer(e).catch(async t=>{throw this.appServerReady=null,await this.killProcess(),t}),this.appServerReady)}async initializeAppServer(e){const t=I(e);if(await this.sendRpc("initialize",{clientInfo:H,capabilities:{experimentalApi:!0}}),this.managedPermissionConfig=this.managedAgentPolicy?await this.buildManagedPermissionConfig():null,this.managedPermissionConfig&&!this.managedRoomTools.isConfigured()&&(this.managedRoomTools.configure(this.configuredManagedRoomContextToken,this.configuredManagedRoomExecutor),!this.managedRoomTools.isConfigured()))throw new Error("codex_managed_room_tool_context_unavailable");if(this.agentSessionId&&this.managedPermissionConfig&&this.agentSessionId!==this.managedRoomToolThreadId){if(!this.managedRoomTools.isConfigured())throw new Error("codex_managed_room_tool_context_unavailable");this.agentSessionId=null}if(this.agentSessionId){const a={threadId:this.agentSessionId,cwd:this.workDir,approvalPolicy:"never",...this.managedPermissionConfig?{config:this.managedPermissionConfig.threadConfig}:{sandbox:"danger-full-access"},persistExtendedHistory:!0,...this.options.hidden?{threadSource:"subagent"}:{},...t?{model:t}:{}};let d;try{d=await this.sendRpc("thread/resume",{...a,excludeTurns:!0})}catch(l){if(!oe(l))throw l;d=await this.sendRpc("thread/resume",a)}this.agentSessionId=d.thread?.id??this.agentSessionId,this.managedPermissionConfig&&(C(d,this.managedPermissionConfig.profileId),this.managedRoomTools.bindThread(this.agentSessionId),this.managedRoomToolThreadId=this.agentSessionId);return}const r=this.options.hidden?void 0:await this.resolveCodexProjectId(),s={cwd:this.workDir,approvalPolicy:"never",...this.managedPermissionConfig?{config:this.managedPermissionConfig.threadConfig}:{sandbox:"danger-full-access"},serviceName:"Shennian",threadSource:this.options.hidden?"subagent":"user",experimentalRawEvents:!1,persistExtendedHistory:!0,...this.managedPermissionConfig?{dynamicTools:U}:{},...r?{projectId:r}:{},...t?{model:t}:{}};let i;if(this.options.hidden&&!this.managedPermissionConfig)i=await this.sendRpc("thread/start",s);else try{i=await this.sendRpc("thread/start",{...s,historyMode:"paginated"})}catch(a){throw ie(a)?new Error("\u5F53\u524D Codex CLI \u4E0D\u652F\u6301\u521B\u5EFA\u53EF\u5728 Codex Desktop \u4E2D\u7EE7\u7EED\u7684\u65B0\u4F1A\u8BDD\uFF0C\u8BF7\u624B\u52A8\u5347\u7EA7 Codex CLI \u540E\u91CD\u8BD5\u3002\u795E\u5FF5\u4E0D\u4F1A\u81EA\u52A8\u5347\u7EA7\uFF0C\u4E5F\u4E0D\u4F1A\u964D\u7EA7\u521B\u5EFA\u4E0D\u53EF\u89C1\u7684 legacy \u4F1A\u8BDD\u3002",{cause:a}):a}const n=i.thread?.id;if(!n)throw new Error("codex app-server thread/start returned no thread id");this.managedPermissionConfig&&(C(i,this.managedPermissionConfig.profileId),this.managedRoomTools.bindThread(n),this.managedRoomToolThreadId=n),this.agentSessionId=n}async buildManagedPermissionConfig(){const e=this.managedAgentPolicy;if(!e)throw new Error("managed_agent_policy_missing");const t=e.adapterPolicy.externalCapabilities.mcp?[]:G(await this.sendRpc("config/read",{cwd:e.adapterPolicy.workDir}));return B(L(e),e.adapterPolicy.workDir,{configuredMcpServerNames:t,shellSubprocessPolicy:e.environmentPolicy.shellSubprocess})}async resolveCodexProjectId(){const e=this.workDir?.trim();if(e)try{const t=[];let r;do{const l=await this.sendRpc("project/list",{limit:100,...r?{cursor:r}:{}});t.push(...l.data??[]),r=l.nextCursor}while(r);const s=de(t,e);if(s)return s;const i=h.resolve(e),n=`shennian-project-${y("sha256").update(i).digest("hex")}`,d=(await this.sendRpc("project/create",{idempotencyKey:n,name:h.basename(i)||i,roots:[{path:i}],metadata:{createdBy:"Shennian"}})).project?.id;if(!d)throw new Error("codex app-server project/create returned no project id");return d}catch(t){throw ae(t)?new Error("\u5F53\u524D Codex CLI \u4E0D\u652F\u6301\u521B\u5EFA\u53EF\u5F52\u5C5E\u5230 Codex Desktop \u9879\u76EE\u7684\u65B0\u4F1A\u8BDD\uFF0C\u8BF7\u624B\u52A8\u5347\u7EA7 Codex CLI \u540E\u91CD\u8BD5\u3002\u795E\u5FF5\u4E0D\u4F1A\u81EA\u52A8\u5347\u7EA7\uFF0C\u4E5F\u4E0D\u4F1A\u76F4\u63A5\u4FEE\u6539 Codex Desktop \u7684\u79C1\u6709\u4FA7\u680F\u7D22\u5F15\u3002",{cause:t}):t}}async startTurnWithRecovery(e,t,r,s,i){try{return await this.startTurn(e,t,r,s,i)}catch(n){if(!j(n))throw n;if(this.managedPermissionConfig){await this.killProcess(!0),this.agentSessionId=null,this.managedRoomToolThreadId=null,await this.ensureAppServer(r);const a=this.agentSessionId;if(!a)throw new Error("codex app-server did not recreate the managed thread",{cause:n});return this.emitEvent({state:"start",agentSessionId:a}),await this.startTurn(a,t,r,s,i)}return await this.killProcess(),await this.ensureAppServer(r),await this.startTurn(e,t,r,s,i)}}async startTurn(e,t,r,s,i){try{return await this.sendRpc("turn/start",{threadId:e,input:[le(t,i)],approvalPolicy:"never",...this.managedPermissionConfig?{}:{sandboxPolicy:{type:"dangerFullAccess"}},...r?{model:r}:{},...s?{effort:s}:{}})}catch(n){throw s&&Y(n)?new Error(`Codex app-server does not accept reasoning effort "${s}" for this turn. Refresh models or upgrade Codex CLI, then retry.`,{cause:n}):n}}async interruptActiveTurn(){const e=this.agentSessionId,t=this.activeTurnId;this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),!(!e||!t||!this.process)&&await this.sendRpc("turn/interrupt",{threadId:e,turnId:t},5e3)}sendRpc(e,t,r=6e4){if(this.appServerStartupError)return Promise.reject(this.appServerStartupError);const s=this.process;if(!s?.stdin)return Promise.reject(new Error("codex app-server is not running"));const i=this.rpcSeq++,n=JSON.stringify({id:i,method:e,params:t});return new Promise((a,d)=>{const l=setTimeout(()=>{this.pendingRequests.delete(i),d(new Error(`codex app-server request timed out: ${e}`))},r);this.pendingRequests.set(i,{resolve:a,reject:d,timer:l}),s.stdin.write(`${n}
-`,u=>{u&&(clearTimeout(l),this.pendingRequests.delete(i),d(u))})})}handleAppServerMessage(e){if(e.method==="item/tool/call"&&e.id!=null){this.handleManagedRoomToolCall(e.id,e.params??{});return}if(e.id!=null){const r=typeof e.id=="number"?this.pendingRequests.get(e.id):void 0;r&&(clearTimeout(r.timer),this.pendingRequests.delete(e.id),e.error?r.reject(new Error(e.error.message||`codex app-server error ${e.error.code??""}`.trim())):r.resolve(e.result))}if(!e.method)return;const t=e.params??{};switch(e.method){case"turn/started":{const r=typeof t.turn=="object"&&t.turn!==null?t.turn:null,s=typeof r?.id=="string"?r.id:null,i=typeof t.threadId=="string"?t.threadId:"";s&&(this.activeTurnId=s,this.managedPermissionConfig&&!this.managedRoomTools.bindTurn(i,s)&&this.emitErrorIfOpen("codex_managed_room_turn_binding_failed"));break}case"thread/status/changed":{const r=typeof t.threadId=="string"?t.threadId:"";if(r&&this.agentSessionId&&r!==this.agentSessionId)break;const s=typeof t.status=="object"&&t.status!==null?t.status:null;s?.type==="active"&&this.emitEvent({state:"heartbeat",runPhase:this.mapThreadStatusToRunPhase(s)});break}case"item/agentMessage/delta":{const r=typeof t.itemId=="string"?t.itemId:"";r&&this.deltaItemIds.add(r),typeof t.delta=="string"&&this.emitText(t.delta);break}case"item/completed":this.handleAppServerCompletedItem(t);break;case"thread/tokenUsage/updated":this.handleAppServerUsage(t);break;case"turn/completed":{const r=typeof t.turn=="object"&&t.turn!==null?t.turn:null,s=typeof r?.id=="string"?r.id:null;(!this.activeTurnId||s===this.activeTurnId)&&(this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),this.emitFinalIfOpen());break}case"error":{const r=J(t);if(Z(r)){this.emitTransientStatus(r);return}this.emitErrorIfOpen(r);break}}}async handleManagedRoomToolCall(e,t){const r=await this.managedRoomTools.execute(t);this.writeAppServerResponse(e,r)}writeAppServerResponse(e,t){const r=this.process;r?.stdin&&r.stdin.write(`${JSON.stringify({id:e,result:t})}
-`)}mapThreadStatusToRunPhase(e){const t=e?.type==="active"&&Array.isArray(e.activeFlags)?e.activeFlags:[];return t.includes("waitingOnApproval")?"waiting_approval":t.includes("waitingOnUserInput")?"waiting_user_input":"thinking"}handleAppServerNonJsonStdout(e){const t=se(e);ee(t)&&this.failAppServerStartup(new Error("Codex \u672A\u767B\u5F55\u3002\u8BF7\u5148\u5728\u8FD9\u53F0\u7535\u8111\u7684\u7EC8\u7AEF\u8FD0\u884C `codex`\uFF0C\u6309\u63D0\u793A\u5B8C\u6210 ChatGPT \u767B\u5F55\u6216\u914D\u7F6E API key\uFF0C\u7136\u540E\u518D\u56DE\u5230\u795E\u5FF5\u53D1\u9001\u6D88\u606F\u3002"))}failAppServerStartup(e){this.appServerStartupError||(this.appServerStartupError=e,this.rejectAllPending(e),this.process?.kill("SIGTERM"))}handleAppServerCompletedItem(e){const t=typeof e.item=="object"&&e.item!==null?e.item:null;if(!(!t||typeof t.type!="string")&&!K(t))switch(t.type){case"agentMessage":{const r=typeof t.id=="string"?t.id:"";if(r&&this.deltaItemIds.has(r))return;typeof t.text=="string"&&this.emitText(t.text,"block");break}case"commandExecution":{const r=typeof t.command=="string"?t.command:"",s=typeof t.aggregatedOutput=="string"?t.aggregatedOutput:"";r&&this.emitEvent({state:"tool-call",name:"command_execution",args:{command:r}}),this.emitEvent({state:"tool-result",name:"command_execution",result:[s,t.exitCode!=null?`
-(exit ${t.exitCode})`:""].join("").trim()});break}case"mcpToolCall":case"dynamicToolCall":{const r=typeof t.tool=="string"?t.tool:t.type;if(x(r))return;const s=typeof t.arguments=="object"&&t.arguments!==null?t.arguments:{};this.emitEvent({state:"tool-call",name:r,args:s}),this.emitEvent({state:"tool-result",name:r,result:_(t.error??t.result??t.contentItems??"")});break}case"fileChange":break;case"approvalRequest":case"approval_request":case"permissionRequest":case"permission_request":case"userInputRequired":case"user_input_required":{this.emitApprovalPending(t);break}}}handleAppServerUsage(e){const t=typeof e.tokenUsage=="object"&&e.tokenUsage!==null?e.tokenUsage:null,r=typeof t?.last=="object"&&t.last!==null?t.last:null,s=typeof t?.total=="object"&&t.total!==null?t.total:null,i=r??s;if(!i)return;const n=typeof i.inputTokens=="number"?i.inputTokens:void 0,a=typeof i.outputTokens=="number"?i.outputTokens:void 0;(n!=null||a!=null)&&(this.pendingUsage={inputTokens:n??0,outputTokens:a??0})}handleCodexItemLine(e){const t=e.item;if(t?.type&&!Q(t))switch(t.type){case"agent_message":case"reasoning":{e.type==="item.completed"&&t.text&&this.emitText(t.text,"block");break}case"command_execution":{if(e.type==="item.started"&&t.command&&this.emitEvent({state:"tool-call",name:"command_execution",args:{command:t.command}}),e.type==="item.completed"){const r=[t.aggregated_output??"",t.exit_code!=null?`
-(exit ${t.exit_code})`:""];this.emitEvent({state:"tool-result",name:"command_execution",result:r.join("").trim()||String(t.status??"")})}break}case"mcp_tool_call":{if(t.tool&&x(t.tool))return;if(e.type==="item.started"&&this.emitEvent({state:"tool-call",name:t.tool??"mcp_tool",args:{server:t.server,...t.arguments&&typeof t.arguments=="object"?t.arguments:{}}}),e.type==="item.completed"){const r=t.error&&typeof t.error=="object"?t.error.message:void 0;this.emitEvent({state:"tool-result",name:t.tool??"mcp_tool",result:r??_(t.result)})}break}case"file_change":break;case"web_search":{e.type==="item.completed"&&t.query&&this.emitText(`[web_search] ${t.query}`,"block");break}case"todo_list":{if(e.type==="item.completed"&&t.items?.length){const r=t.items.map(s=>`- [${s.completed?"x":" "}] ${s.text}`).join(`
-`);this.emitText(r,"block")}break}case"approval_request":case"approvalRequest":case"permission_request":case"permissionRequest":case"user_input_required":case"userInputRequired":{(e.type==="item.started"||e.type==="item.completed")&&this.emitApprovalPending(t);break}case"error":{e.type==="item.completed"&&t.message&&this.emitEvent({state:"error",message:t.message});break}default:break}}handleStreamEvent(e){const t=e.type??e.event;switch(t?.startsWith("item.")&&this.handleCodexItemLine(e),t){case"turn.completed":{const s=e.usage;if(s){const i=s.input_tokens??s.prompt_tokens,n=s.output_tokens??s.completion_tokens;(i!=null||n!=null)&&(this.pendingUsage={inputTokens:i??0,outputTokens:n??0})}this.emitFinalIfOpen();return}case"turn.failed":{const s=typeof e.error=="object"&&e.error?.message?e.error.message:typeof e.error=="string"?e.error:"turn failed";this.emitErrorIfOpen(s);return}case"error":{const s=typeof e.message=="string"?e.message:"";if(s.includes("Reconnecting"))return;this.emitErrorIfOpen(s||(typeof e.error=="string"?e.error:"stream error"));return}case"thread.started":{const s=e.thread_id??e.session_id??e.id;typeof s=="string"&&s&&(this.agentSessionId=s,this.emitEvent({state:"start",agentSessionId:this.agentSessionId}));return}case"turn.started":return}if(t?.startsWith("item."))return;switch(e.type??e.event){case"message":case"text":case"content":{const s=e.content??e.text;s&&this.emitText(s);break}case"function_call":case"tool_call":{if(this.isApprovalLikeName(e.name)){this.emitApprovalPending(e);break}if(e.name&&x(e.name))return;this.emitEvent({state:"tool-call",name:e.name,args:e.arguments??e.input});break}case"function_call_output":case"tool_result":{if(e.name&&x(e.name))return;this.emitEvent({state:"tool-result",name:e.name,result:e.output??e.result});break}case"approval_request":case"approvalRequest":case"permission_request":case"permissionRequest":case"user_input_required":case"userInputRequired":{this.emitApprovalPending(e);break}case"error":break;case"done":case"completed":{e.usage&&(this.pendingUsage={inputTokens:e.usage.prompt_tokens??e.usage.input_tokens??0,outputTokens:e.usage.completion_tokens??e.usage.output_tokens??0}),this.emitFinalIfOpen();break}}}emitEvent(e){if(this.terminalState!=="open"&&e.state!=="final"&&e.state!=="error"&&e.state!=="aborted")return;const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}isApprovalLikeName(e){return typeof e!="string"?!1:/approval|permission|confirm|user[_-]?input|request[_-]?user/i.test(e)}emitApprovalPending(e){const t=typeof e.command=="string"?e.command:"",r=typeof e.title=="string"&&e.title.trim()?e.title:"\u9700\u8981\u7528\u6237\u786E\u8BA4",s=typeof e.prompt=="string"?e.prompt:typeof e.reason=="string"?e.reason:typeof e.message=="string"?e.message:t?`Codex \u8BF7\u6C42\u6267\u884C\u547D\u4EE4\uFF1A${t}`:"Codex \u6B63\u5728\u7B49\u5F85\u7528\u6237\u786E\u8BA4\u540E\u7EE7\u7EED\u3002";this.emitEvent({state:"approval-pending",approval:{title:r,content:s,source:"codex",actionHint:"\u5F53\u524D\u795E\u5FF5\u6682\u4E0D\u652F\u6301\u8FDC\u7A0B\u786E\u8BA4\uFF0C\u8BF7\u56DE\u5230\u8FD0\u884C Codex \u7684\u7535\u8111/\u7EC8\u7AEF\u5B8C\u6210\u786E\u8BA4\u3002"}})}async killProcess(e=!1){const t=this.process;if(this.appServerReady=null,this.activeTurnId=null,this.managedRoomTools.reset(),e||this.clearConfiguredManagedRoomContext(),!t){this.rejectAllPending(new Error("codex app-server stopped"));return}this.process=null,this.clearForceCloseTimer(),t.kill("SIGTERM"),await new Promise(r=>{t.on("close",r),setTimeout(()=>{t.kill("SIGKILL"),r()},3e3)}),this.rejectAllPending(new Error("codex app-server stopped"))}rejectAllPending(e){for(const[t,r]of this.pendingRequests.entries())clearTimeout(r.timer),r.reject(e),this.pendingRequests.delete(t)}handleProcessClose(e,t){const r=E(t);if(e!==0&&e!==null){const s=r||`codex exited with code ${e}`;this.emitErrorIfOpen(s)}else te(r)?this.emitErrorIfOpen(r):this.emitFinalIfOpen();this.pendingUsage=void 0}emitFinalIfOpen(){this.terminalState==="open"&&(this.terminalState="final",this.managedRoomTools.deactivateTurn(),this.clearConfiguredManagedRoomContext(),this.emitEvent({state:"final",usage:this.pendingUsage,agentSessionId:this.agentSessionId??void 0}),this.killProcess().catch(()=>{}))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.managedRoomTools.deactivateTurn(),this.clearConfiguredManagedRoomContext(),this.emitEvent({state:"error",message:V(e)}),this.scheduleProcessClose())}resetRunState(){this.pendingUsage=void 0,this.terminalState="open",this.deltaItemIds.clear(),this.lastTransientStatus="",this.clearForceCloseTimer(),this.resetTextState()}clearConfiguredManagedRoomContext(){this.configuredManagedRoomContextToken=null,this.configuredManagedRoomExecutor=null}emitTransientStatus(e){const t=X(e);!t||t===this.lastTransientStatus||this.terminalState!=="open"||(this.lastTransientStatus=t,this.emitEvent({state:"delta",text:`${t}
-`,thinking:!0}))}resetTextState(){this.hasEmittedText=!1,this.textTail=""}emitText(e,t="delta"){if(!e)return;let r=ne(e);r&&(t==="block"&&this.hasEmittedText&&!r.startsWith(`
-`)&&(this.textTail.endsWith(`
-`)?r=`
-${r}`:this.textTail.endsWith(`
-
-`)||(r=`
-
-${r}`)),this.hasEmittedText=!0,this.textTail=(this.textTail+r).slice(-4),this.emitEvent({state:"delta",text:r}))}scheduleProcessClose(){const e=this.process;!e||this.forceCloseTimer||(this.forceCloseTimer=setTimeout(()=>{this.forceCloseTimer=null,this.process===e&&(e.kill("SIGTERM"),setTimeout(()=>{this.process===e&&e.kill("SIGKILL")},1e3))},250))}clearForceCloseTimer(){this.forceCloseTimer&&(clearTimeout(this.forceCloseTimer),this.forceCloseTimer=null)}}b("codex",()=>new ge);export{ge as CodexAdapter,me as buildCodexQueueArgs,he as buildCodexQueuedText,R as isCodexActiveWriterError,oe as isCodexExcludeTurnsUnsupportedError,ie as isCodexPaginatedHistoryUnsupportedError,ae as isCodexProjectApiUnsupportedError,be as isCodexUnsupportedEffortError,qe as isMissingCodexRolloutError,De as normalizeCodexModelId,Ne as normalizeCodexReasoningEffort,de as selectCodexProjectIdForWorkDir};
+// @arch docs/architecture/cli/agent-adapters.md
+// @arch docs/features/codex-session-ownership.md
+// @arch docs/features/managed-agent-restricted-runtime.md
+// @test src/__tests__/codex-adapter.test.ts
+import { spawnSync } from 'node:child_process';
+import { createInterface } from 'node:readline';
+import { createHash, randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { AgentAdapter, registerAgent, } from './adapter.js';
+import { resolveBuiltinCommand, spawnAgentCommand } from './command-spec.js';
+import { buildAgentProcessEnv, buildManagedAgentProcessEnv } from '../agent-env.js';
+import { ensurePlatformInstructionsFile } from './platform-instructions.js';
+import { CODEX_DESKTOP_SEND_UNAVAILABLE, } from '@shennian/wire';
+import { isCodexThreadTailInterrupted } from '../native-fusion/codex-files.js';
+import { resolveManagedAgentAdapterEnforcement, } from '../security/managed-agent-policy.js';
+import { registerManagedAgentRuntimeSecurity } from '../security/managed-agent-runtime.js';
+import { CODEX_MANAGED_ROOM_DYNAMIC_TOOLS, CodexManagedRoomToolBinding, } from './codex-managed-room-tools.js';
+import { assertCodexManagedPermissionProfile, CODEX_MANAGED_RUNTIME_SECURITY, compileCodexManagedPermissions, extractCodexMcpServerNames, } from './codex-managed-permissions.js';
+import { CODEX_APP_SERVER_CLIENT_INFO, extractAppServerErrorMessage, formatCodexErrorMessage, formatTransientCodexStatus, isCodexCollabAgentItem, isCodexCollabAgentToolName, isCodexLegacyCollabAgentItem, isCodexUnsupportedEffortError, isMissingCodexRolloutError, isTransientCodexErrorMessage, looksLikeCodexInteractiveAuthPrompt, looksLikeFatalCodexStderr, normalizeCodexModelId, normalizeCodexReasoningEffort, normalizeCodexStderr, normalizeTerminalText, safeStringify, stripGitDirectiveArtifacts, } from './codex-utils.js';
+export { isCodexUnsupportedEffortError, isMissingCodexRolloutError, normalizeCodexModelId, normalizeCodexReasoningEffort, } from './codex-utils.js';
+registerManagedAgentRuntimeSecurity('codex', CODEX_MANAGED_RUNTIME_SECURITY);
+export function isCodexActiveWriterError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return /already has an active writer|thread-store conflict/i.test(message);
+}
+export function isCodexPaginatedHistoryUnsupportedError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return (/paginated(?:_threads|\s+(?:thread\s+)?history)?.*(?:not supported|unsupported|unavailable)/i.test(message) ||
+        /(?:not supported|unsupported|unavailable).*paginated(?:_threads|\s+(?:thread\s+)?history)?/i.test(message));
+}
+export function isCodexExcludeTurnsUnsupportedError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return (/unknown field [`'"]?excludeTurns/i.test(message) ||
+        /excludeTurns.*(?:not supported|unsupported|unavailable)/i.test(message));
+}
+export function isCodexProjectApiUnsupportedError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return (/(?:method not found|unknown method).*(?:project\/list|project\/create)/i.test(message) ||
+        /(?:project\/list|project\/create).*(?:not supported|unsupported|unavailable)/i.test(message));
+}
+export function selectCodexProjectIdForWorkDir(projects, workDir) {
+    const normalizedWorkDir = path.resolve(workDir);
+    let bestMatch;
+    for (const project of projects) {
+        if (!project.id)
+            continue;
+        for (const root of project.roots ?? []) {
+            if (!root.path)
+                continue;
+            const normalizedRoot = path.resolve(root.path);
+            const relative = path.relative(normalizedRoot, normalizedWorkDir);
+            const containsWorkDir = relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+            if (!containsWorkDir || normalizedRoot.length <= (bestMatch?.rootLength ?? -1))
+                continue;
+            bestMatch = { id: project.id, rootLength: normalizedRoot.length };
+        }
+    }
+    return bestMatch?.id;
+}
+function buildCodexTextInput(text, attachments) {
+    const images = attachments
+        ?.flatMap((attachment) => codexLocalImageInputs(attachment))
+        .filter((attachment) => !/^https?:\/\//i.test(attachment.path))
+        .filter((attachment) => attachment.path);
+    const textWithFileAttachments = appendFileAttachmentHints(text, attachments);
+    return {
+        type: 'text',
+        text: textWithFileAttachments,
+        text_elements: [],
+        ...(images?.length ? { local_images: images } : {}),
+    };
+}
+function codexLocalImageInputs(attachment) {
+    if (attachment.kind === 'image') {
+        if (attachment.previewData) {
+            return [
+                { path: attachment.path, data: attachment.previewData, mimeType: attachment.mimeType },
+            ];
+        }
+        return [{ path: attachment.path }];
+    }
+    if (attachment.mimeType.startsWith('video/')) {
+        const previewPath = extractVideoPreviewFrame(attachment.path);
+        return previewPath ? [{ path: previewPath }] : [];
+    }
+    return [];
+}
+function extractVideoPreviewFrame(videoPath) {
+    if (!videoPath || /^https?:\/\//i.test(videoPath))
+        return null;
+    const ext = path.extname(videoPath);
+    const stem = ext ? videoPath.slice(0, -ext.length) : videoPath;
+    const previewPath = `${stem}.preview.png`;
+    const result = spawnSync('ffmpeg', ['-y', '-ss', '0', '-i', videoPath, '-frames:v', '1', '-vf', 'scale=320:-1', previewPath], { stdio: 'ignore', timeout: 15_000 });
+    return result.status === 0 ? previewPath : null;
+}
+function appendFileAttachmentHints(text, attachments) {
+    const files = attachments
+        ?.filter((attachment) => attachment.kind !== 'image')
+        .filter((attachment) => attachment.path && !/^https?:\/\//i.test(attachment.path));
+    if (!files?.length)
+        return text;
+    const alreadyVisible = files.every((attachment) => text.includes(attachment.path));
+    if (alreadyVisible)
+        return text;
+    const lines = files.map((attachment, index) => {
+        const label = attachment.name || `attachment-${index + 1}`;
+        const mime = attachment.mimeType ? ` (${attachment.mimeType})` : '';
+        return `[${escapeMarkdownLinkLabel(label)}${mime}](<${attachment.path}>)`;
+    });
+    return [text, '', ...lines].join('\n');
+}
+export function buildCodexQueuedText(text, attachments) {
+    const missing = attachments?.filter((attachment) => attachment.path && !/^https?:\/\//i.test(attachment.path) && !text.includes(attachment.path));
+    if (!missing?.length)
+        return text;
+    const lines = missing.map((attachment, index) => {
+        const label = escapeMarkdownLinkLabel(attachment.name || `attachment-${index + 1}`);
+        return attachment.kind === 'image'
+            ? `![${label}](<${attachment.path}>)`
+            : `[${label}](<${attachment.path}>)`;
+    });
+    return [text, '', ...lines].join('\n');
+}
+export function buildCodexQueueArgs(threadId, text, attachments) {
+    return ['queue', '--thread', threadId, '--message', buildCodexQueuedText(text, attachments)];
+}
+function escapeMarkdownLinkLabel(value) {
+    return value.replace(/[[\]\\]/g, '\\$&');
+}
+export class CodexAdapter extends AgentAdapter {
+    options;
+    type = 'codex';
+    process = null;
+    workDir = null;
+    seq = 0;
+    runId = '';
+    pendingUsage;
+    agentSessionId = null;
+    hasEmittedText = false;
+    textTail = '';
+    terminalState = 'open';
+    forceCloseTimer = null;
+    stderrBuf = '';
+    rpcSeq = 1;
+    pendingRequests = new Map();
+    appServerReady = null;
+    appServerStartupError = null;
+    activeTurnId = null;
+    deltaItemIds = new Set();
+    lastTransientStatus = '';
+    agentSystemPrompt = '';
+    managedAgentPolicy = null;
+    managedPermissionConfig = null;
+    configurationRestartRequired = false;
+    managedRoomTools = new CodexManagedRoomToolBinding();
+    configuredManagedRoomContextToken = null;
+    configuredManagedRoomExecutor = null;
+    managedRoomToolThreadId = null;
+    preparedExternalOwnerThreadId = null;
+    constructor(options = {}) {
+        super();
+        this.options = options;
+    }
+    externalChannel = null;
+    shennianSessionId = null;
+    extraEnv = {};
+    configure(options) {
+        const previousFingerprint = this.configurationFingerprint();
+        this.shennianSessionId = options.sessionId ?? null;
+        this.externalChannel = options.externalChannel ?? null;
+        this.extraEnv = options.env ?? {};
+        if ('managedAgentPolicy' in options) {
+            this.managedAgentPolicy = options.managedAgentPolicy ?? null;
+        }
+        if ('managedRoomContextToken' in options || 'managedRoomExecutor' in options) {
+            // Reconfiguration invalidates the previous turn immediately. The new
+            // token is activated only after any required pre-turn process restart.
+            this.managedRoomTools.deactivateTurn();
+            this.configuredManagedRoomContextToken = options.managedRoomContextToken?.trim() || null;
+            this.configuredManagedRoomExecutor = options.managedRoomExecutor ?? null;
+        }
+        if (this.managedAgentPolicy)
+            this.workDir = this.managedAgentPolicy.adapterPolicy.workDir;
+        const nextFingerprint = this.configurationFingerprint();
+        if (previousFingerprint !== nextFingerprint && this.process) {
+            this.configurationRestartRequired = true;
+        }
+    }
+    configurationFingerprint() {
+        const sortedEnv = Object.keys(this.extraEnv)
+            .sort()
+            .map((key) => [key, this.extraEnv[key] ?? null]);
+        return createHash('sha256')
+            .update(JSON.stringify({
+            sessionId: this.shennianSessionId,
+            externalChannel: this.externalChannel,
+            env: sortedEnv,
+            managedAgentPolicy: this.managedAgentPolicy,
+        }))
+            .digest('hex');
+    }
+    buildProcessEnv(runtimeEnv = {}) {
+        if (!this.managedAgentPolicy) {
+            return buildAgentProcessEnv({ ...runtimeEnv, ...this.extraEnv });
+        }
+        const providerEnv = Object.fromEntries(Object.entries(this.extraEnv).filter(([key]) => key !== 'SHENNIAN_MANAGED_ROOM_CONTEXT' &&
+            key !== 'SHENNIAN_MANAGED_ROOM_IPC_ROOT'));
+        return buildManagedAgentProcessEnv({
+            agentType: 'codex',
+            providerEnv,
+            sessionEnv: providerEnv,
+            runtimeEnv,
+        });
+    }
+    async start(_sessionId, workDir, agentSessionId) {
+        this.workDir = this.managedAgentPolicy?.adapterPolicy.workDir ?? workDir;
+        this.seq = 0;
+        if (agentSessionId)
+            this.agentSessionId = agentSessionId;
+    }
+    async prepareSend(_text, modelId, _reasoningEffort, _attachments, _agentSystemPrompt, context) {
+        if (!this.agentSessionId || this.activeTurnId)
+            return;
+        this.preparedExternalOwnerThreadId = null;
+        try {
+            await this.ensureAppServer(normalizeCodexModelId(modelId));
+        }
+        catch (error) {
+            if (!isCodexActiveWriterError(error))
+                throw error;
+            if (context?.source === 'room_activation') {
+                throw new Error('codex_managed_thread_owned_externally', { cause: error });
+            }
+            if (this.isThreadTailInterrupted(this.agentSessionId)) {
+                throw new Error(CODEX_DESKTOP_SEND_UNAVAILABLE, { cause: error });
+            }
+            this.preparedExternalOwnerThreadId = this.agentSessionId;
+        }
+    }
+    async send(text, modelId, reasoningEffort, attachments, agentSystemPrompt, context) {
+        if (context?.source === 'room_activation' && !this.managedAgentPolicy) {
+            throw new Error('managed_agent_policy_missing');
+        }
+        if (context?.source === 'room_activation' &&
+            (!this.configuredManagedRoomContextToken || !this.configuredManagedRoomExecutor)) {
+            throw new Error('codex_managed_room_tool_context_unavailable');
+        }
+        if (this.activeTurnId) {
+            await this.interruptActiveTurn().catch(() => { });
+            await this.killProcess(true);
+        }
+        if (this.configurationRestartRequired && this.process)
+            await this.killProcess(true);
+        this.configurationRestartRequired = false;
+        const codexModelId = normalizeCodexModelId(modelId);
+        const codexReasoningEffort = normalizeCodexReasoningEffort(reasoningEffort);
+        const nextSystemPrompt = agentSystemPrompt?.trim() ?? '';
+        if (nextSystemPrompt !== this.agentSystemPrompt) {
+            this.agentSystemPrompt = nextSystemPrompt;
+            if (this.process)
+                await this.killProcess(true);
+        }
+        if (context?.source === 'room_activation') {
+            this.managedRoomTools.configure(this.configuredManagedRoomContextToken, this.configuredManagedRoomExecutor);
+        }
+        this.runId = randomUUID();
+        this.seq = 0;
+        this.resetRunState();
+        if (this.agentSessionId && this.preparedExternalOwnerThreadId === this.agentSessionId) {
+            this.preparedExternalOwnerThreadId = null;
+            const queuedSubmissionId = await this.enqueueForExternalOwner(this.agentSessionId, text, attachments);
+            return { deliveryMode: 'external_owner_queue', queuedSubmissionId };
+        }
+        try {
+            await this.ensureAppServer(codexModelId);
+        }
+        catch (error) {
+            if (!this.agentSessionId || !isCodexActiveWriterError(error))
+                throw error;
+            if (context?.source === 'room_activation') {
+                throw new Error('codex_managed_thread_owned_externally', { cause: error });
+            }
+            if (this.isThreadTailInterrupted(this.agentSessionId)) {
+                throw new Error(CODEX_DESKTOP_SEND_UNAVAILABLE, { cause: error });
+            }
+            const queuedSubmissionId = await this.enqueueForExternalOwner(this.agentSessionId, text, attachments);
+            return { deliveryMode: 'external_owner_queue', queuedSubmissionId };
+        }
+        const threadId = this.agentSessionId;
+        if (!threadId)
+            throw new Error('codex app-server did not create a thread');
+        this.emitEvent({ state: 'start', agentSessionId: threadId });
+        const response = await this.startTurnWithRecovery(threadId, text, codexModelId, codexReasoningEffort, attachments);
+        const activeThreadId = this.agentSessionId ?? threadId;
+        this.activeTurnId = response.turn?.id ?? null;
+        if (this.managedPermissionConfig &&
+            this.activeTurnId &&
+            !this.managedRoomTools.bindTurn(activeThreadId, this.activeTurnId)) {
+            await this.killProcess();
+            throw new Error('codex_managed_room_turn_binding_failed');
+        }
+        return { deliveryMode: 'direct' };
+    }
+    isThreadTailInterrupted(threadId) {
+        return this.options.isThreadTailInterrupted?.(threadId) ?? isCodexThreadTailInterrupted(threadId);
+    }
+    async enqueueForExternalOwner(threadId, text, attachments) {
+        const spec = resolveBuiltinCommand('codex');
+        if (!spec)
+            throw new Error('Command "codex" not found. Is OpenAI Codex CLI installed?');
+        const args = buildCodexQueueArgs(threadId, text, attachments);
+        const proc = spawnAgentCommand(spec, args, {
+            cwd: this.workDir ?? undefined,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: this.buildProcessEnv({ NO_COLOR: '1' }),
+        });
+        return await new Promise((resolve, reject) => {
+            let stdout = '';
+            let stderr = '';
+            let settled = false;
+            const finish = (error, queuedSubmissionId) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                if (error)
+                    reject(error);
+                else
+                    resolve(queuedSubmissionId);
+            };
+            const timer = setTimeout(() => {
+                proc.kill('SIGTERM');
+                finish(new Error('Codex Desktop message queue timed out'));
+            }, 60_000);
+            timer.unref?.();
+            proc.stdout?.on('data', (chunk) => {
+                stdout += chunk.toString();
+            });
+            proc.stderr?.on('data', (chunk) => {
+                stderr += chunk.toString();
+            });
+            proc.once('error', (error) => finish(error));
+            proc.once('close', (code) => {
+                const output = `${stdout}\n${stderr}`.trim();
+                if (code !== 0) {
+                    finish(new Error(output || `codex queue exited with code ${code ?? 'unknown'}`));
+                    return;
+                }
+                const submissionId = output.match(/Queued message\s+([^\s]+)\s+for thread/i)?.[1];
+                finish(undefined, submissionId);
+            });
+        });
+    }
+    async resume(agentSessionId) {
+        await this.killProcess();
+        this.agentSessionId = agentSessionId;
+        this.resetTextState();
+    }
+    async setTitle(agentSessionId, title, workDir) {
+        const threadId = agentSessionId.trim();
+        const name = title.replace(/\s+/g, ' ').trim();
+        if (!threadId || !name)
+            return;
+        this.agentSessionId = threadId;
+        if (workDir?.trim())
+            this.workDir = workDir;
+        await this.ensureAppServer();
+        await this.sendRpc('thread/name/set', { threadId, name });
+    }
+    async stop() {
+        this.managedRoomTools.deactivateTurn();
+        await this.interruptActiveTurn().catch(() => { });
+        await this.killProcess();
+    }
+    async getStatus() {
+        const threadId = this.agentSessionId;
+        const activeTurnId = this.activeTurnId;
+        if (!threadId || !this.process) {
+            return { active: false, runId: activeTurnId, runPhase: null, canStop: false };
+        }
+        let status = null;
+        try {
+            const response = (await this.sendRpc('thread/read', { threadId, includeTurns: false }, 5_000));
+            status = response.thread?.status ?? null;
+        }
+        catch {
+            // If the local control channel is still alive but the status read fails,
+            // fall back to activeTurnId. This keeps the stop button available for
+            // the running turn while avoiding false positives for idle sessions.
+        }
+        const active = status?.type === 'active' || Boolean(activeTurnId);
+        return {
+            active,
+            runId: activeTurnId,
+            runPhase: active ? this.mapThreadStatusToRunPhase(status) : null,
+            canStop: Boolean(active && activeTurnId && this.process),
+        };
+    }
+    spawnCodex(args) {
+        const spec = resolveBuiltinCommand('codex');
+        if (!spec) {
+            this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
+            return;
+        }
+        const proc = spawnAgentCommand(spec, args, {
+            cwd: this.workDir ?? undefined,
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: this.buildProcessEnv(),
+        });
+        this.process = proc;
+        const rl = createInterface({ input: proc.stdout });
+        rl.on('line', (line) => {
+            if (!line.trim())
+                return;
+            try {
+                const obj = JSON.parse(line);
+                this.handleStreamEvent(obj);
+            }
+            catch {
+                this.emitEvent({ state: 'delta', text: line });
+            }
+        });
+        let stderrBuf = '';
+        proc.stderr?.on('data', (chunk) => {
+            stderrBuf += chunk.toString();
+        });
+        proc.on('close', (code) => {
+            if (this.process !== proc)
+                return;
+            this.process = null;
+            this.clearForceCloseTimer();
+            this.handleProcessClose(code, stderrBuf);
+        });
+        proc.on('error', (err) => {
+            if (this.process !== proc)
+                return;
+            this.process = null;
+            if (err.code === 'ENOENT') {
+                this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
+            }
+            else {
+                this.emit('error', err);
+            }
+        });
+    }
+    spawnAppServer() {
+        const spec = resolveBuiltinCommand('codex');
+        if (!spec) {
+            this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
+            return;
+        }
+        const args = ['app-server', '--listen', 'stdio://'];
+        const modelInstructionsFile = this.options.modelInstructionsFile ??
+            ensurePlatformInstructionsFile(this.workDir ?? process.cwd(), this.externalChannel, this.shennianSessionId ?? undefined, this.agentSystemPrompt);
+        if (modelInstructionsFile) {
+            args.push('-c', `model_instructions_file=${JSON.stringify(modelInstructionsFile)}`);
+        }
+        const proc = spawnAgentCommand(spec, args, {
+            cwd: this.workDir ?? undefined,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            env: this.buildProcessEnv({ NO_COLOR: '1' }),
+        });
+        this.process = proc;
+        this.stderrBuf = '';
+        this.appServerStartupError = null;
+        const rl = createInterface({ input: proc.stdout });
+        rl.on('line', (line) => {
+            if (!line.trim())
+                return;
+            let msg;
+            try {
+                msg = JSON.parse(line);
+            }
+            catch {
+                this.handleAppServerNonJsonStdout(line);
+                return;
+            }
+            this.handleAppServerMessage(msg);
+        });
+        proc.stderr?.on('data', (chunk) => {
+            this.stderrBuf += chunk.toString();
+        });
+        proc.on('close', (code) => {
+            if (this.process !== proc)
+                return;
+            const hadActiveTurn = this.activeTurnId != null;
+            this.process = null;
+            this.appServerReady = null;
+            this.activeTurnId = null;
+            this.managedRoomTools.reset();
+            this.clearConfiguredManagedRoomContext();
+            this.rejectAllPending(new Error(normalizeCodexStderr(this.stderrBuf) || `codex app-server exited with code ${code}`));
+            if (this.terminalState === 'open' && hadActiveTurn) {
+                this.handleProcessClose(code, this.stderrBuf);
+            }
+        });
+        proc.on('error', (err) => {
+            if (this.process !== proc)
+                return;
+            this.process = null;
+            this.managedRoomTools.reset();
+            this.clearConfiguredManagedRoomContext();
+            this.rejectAllPending(err);
+            if (err.code === 'ENOENT') {
+                this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
+            }
+            else {
+                this.emit('error', err);
+            }
+        });
+    }
+    async ensureAppServer(modelId) {
+        if (this.appServerReady)
+            return this.appServerReady;
+        this.spawnAppServer();
+        this.appServerReady = this.initializeAppServer(modelId).catch(async (error) => {
+            this.appServerReady = null;
+            await this.killProcess();
+            throw error;
+        });
+        return this.appServerReady;
+    }
+    async initializeAppServer(modelId) {
+        const codexModelId = normalizeCodexModelId(modelId);
+        await this.sendRpc('initialize', {
+            clientInfo: CODEX_APP_SERVER_CLIENT_INFO,
+            capabilities: { experimentalApi: true },
+        });
+        this.managedPermissionConfig = this.managedAgentPolicy
+            ? await this.buildManagedPermissionConfig()
+            : null;
+        if (this.managedPermissionConfig && !this.managedRoomTools.isConfigured()) {
+            this.managedRoomTools.configure(this.configuredManagedRoomContextToken, this.configuredManagedRoomExecutor);
+            if (!this.managedRoomTools.isConfigured()) {
+                throw new Error('codex_managed_room_tool_context_unavailable');
+            }
+        }
+        // Dynamic tools are persisted only when a thread is created. A legacy
+        // managed Codex thread therefore cannot be resumed safely: start a fresh
+        // native thread with the host tool surface instead of silently losing Room
+        // access or falling back to the CLI/socket transport.
+        if (this.agentSessionId &&
+            this.managedPermissionConfig &&
+            this.agentSessionId !== this.managedRoomToolThreadId) {
+            if (!this.managedRoomTools.isConfigured()) {
+                throw new Error('codex_managed_room_tool_context_unavailable');
+            }
+            this.agentSessionId = null;
+        }
+        if (this.agentSessionId) {
+            const resumeParams = {
+                threadId: this.agentSessionId,
+                cwd: this.workDir,
+                approvalPolicy: 'never',
+                ...(this.managedPermissionConfig
+                    ? { config: this.managedPermissionConfig.threadConfig }
+                    : { sandbox: 'danger-full-access' }),
+                persistExtendedHistory: true,
+                ...(this.options.hidden ? { threadSource: 'subagent' } : {}),
+                ...(codexModelId ? { model: codexModelId } : {}),
+            };
+            let response;
+            try {
+                response = (await this.sendRpc('thread/resume', {
+                    ...resumeParams,
+                    excludeTurns: true,
+                }));
+            }
+            catch (error) {
+                if (!isCodexExcludeTurnsUnsupportedError(error))
+                    throw error;
+                response = (await this.sendRpc('thread/resume', resumeParams));
+            }
+            this.agentSessionId = response.thread?.id ?? this.agentSessionId;
+            if (this.managedPermissionConfig) {
+                assertCodexManagedPermissionProfile(response, this.managedPermissionConfig.profileId);
+                this.managedRoomTools.bindThread(this.agentSessionId);
+                this.managedRoomToolThreadId = this.agentSessionId;
+            }
+            return;
+        }
+        const projectId = this.options.hidden ? undefined : await this.resolveCodexProjectId();
+        const startParams = {
+            cwd: this.workDir,
+            approvalPolicy: 'never',
+            ...(this.managedPermissionConfig
+                ? { config: this.managedPermissionConfig.threadConfig }
+                : { sandbox: 'danger-full-access' }),
+            serviceName: 'Shennian',
+            threadSource: this.options.hidden ? 'subagent' : 'user',
+            experimentalRawEvents: false,
+            persistExtendedHistory: true,
+            ...(this.managedPermissionConfig
+                ? { dynamicTools: CODEX_MANAGED_ROOM_DYNAMIC_TOOLS }
+                : {}),
+            ...(projectId ? { projectId } : {}),
+            ...(codexModelId ? { model: codexModelId } : {}),
+        };
+        let response;
+        if (this.options.hidden && !this.managedPermissionConfig) {
+            response = (await this.sendRpc('thread/start', startParams));
+        }
+        else {
+            try {
+                response = (await this.sendRpc('thread/start', {
+                    ...startParams,
+                    historyMode: 'paginated',
+                }));
+            }
+            catch (error) {
+                if (!isCodexPaginatedHistoryUnsupportedError(error))
+                    throw error;
+                throw new Error('当前 Codex CLI 不支持创建可在 Codex Desktop 中继续的新会话，请手动升级 Codex CLI 后重试。神念不会自动升级，也不会降级创建不可见的 legacy 会话。', { cause: error });
+            }
+        }
+        const threadId = response.thread?.id;
+        if (!threadId)
+            throw new Error('codex app-server thread/start returned no thread id');
+        if (this.managedPermissionConfig) {
+            assertCodexManagedPermissionProfile(response, this.managedPermissionConfig.profileId);
+            this.managedRoomTools.bindThread(threadId);
+            this.managedRoomToolThreadId = threadId;
+        }
+        this.agentSessionId = threadId;
+    }
+    async buildManagedPermissionConfig() {
+        const compiled = this.managedAgentPolicy;
+        if (!compiled)
+            throw new Error('managed_agent_policy_missing');
+        const mcpServers = compiled.adapterPolicy.externalCapabilities.mcp
+            ? []
+            : extractCodexMcpServerNames(await this.sendRpc('config/read', { cwd: compiled.adapterPolicy.workDir }));
+        return compileCodexManagedPermissions(resolveManagedAgentAdapterEnforcement(compiled), compiled.adapterPolicy.workDir, {
+            configuredMcpServerNames: mcpServers,
+            shellSubprocessPolicy: compiled.environmentPolicy.shellSubprocess,
+        });
+    }
+    async resolveCodexProjectId() {
+        const workDir = this.workDir?.trim();
+        if (!workDir)
+            return undefined;
+        try {
+            const projects = [];
+            let cursor;
+            do {
+                const response = (await this.sendRpc('project/list', {
+                    limit: 100,
+                    ...(cursor ? { cursor } : {}),
+                }));
+                projects.push(...(response.data ?? []));
+                cursor = response.nextCursor;
+            } while (cursor);
+            const existingProjectId = selectCodexProjectIdForWorkDir(projects, workDir);
+            if (existingProjectId)
+                return existingProjectId;
+            const normalizedWorkDir = path.resolve(workDir);
+            const idempotencyKey = `shennian-project-${createHash('sha256')
+                .update(normalizedWorkDir)
+                .digest('hex')}`;
+            const response = (await this.sendRpc('project/create', {
+                idempotencyKey,
+                name: path.basename(normalizedWorkDir) || normalizedWorkDir,
+                roots: [{ path: normalizedWorkDir }],
+                metadata: { createdBy: 'Shennian' },
+            }));
+            const projectId = response.project?.id;
+            if (!projectId)
+                throw new Error('codex app-server project/create returned no project id');
+            return projectId;
+        }
+        catch (error) {
+            if (!isCodexProjectApiUnsupportedError(error))
+                throw error;
+            throw new Error('当前 Codex CLI 不支持创建可归属到 Codex Desktop 项目的新会话，请手动升级 Codex CLI 后重试。神念不会自动升级，也不会直接修改 Codex Desktop 的私有侧栏索引。', { cause: error });
+        }
+    }
+    async startTurnWithRecovery(threadId, text, codexModelId, reasoningEffort, attachments) {
+        try {
+            return await this.startTurn(threadId, text, codexModelId, reasoningEffort, attachments);
+        }
+        catch (error) {
+            if (!isMissingCodexRolloutError(error))
+                throw error;
+            if (this.managedPermissionConfig) {
+                // A binding may outlive its Codex history (for example after a local
+                // cleanup or migration). Recreate the managed thread and replay the
+                // same real message once; never manufacture a placeholder turn merely
+                // to materialize a rollout.
+                await this.killProcess(true);
+                this.agentSessionId = null;
+                this.managedRoomToolThreadId = null;
+                await this.ensureAppServer(codexModelId);
+                const replacementThreadId = this.agentSessionId;
+                if (!replacementThreadId) {
+                    throw new Error('codex app-server did not recreate the managed thread', {
+                        cause: error,
+                    });
+                }
+                this.emitEvent({ state: 'start', agentSessionId: replacementThreadId });
+                return await this.startTurn(replacementThreadId, text, codexModelId, reasoningEffort, attachments);
+            }
+            await this.killProcess();
+            await this.ensureAppServer(codexModelId);
+            return await this.startTurn(threadId, text, codexModelId, reasoningEffort, attachments);
+        }
+    }
+    async startTurn(threadId, text, codexModelId, reasoningEffort, attachments) {
+        try {
+            return (await this.sendRpc('turn/start', {
+                threadId,
+                input: [buildCodexTextInput(text, attachments)],
+                approvalPolicy: 'never',
+                ...(this.managedPermissionConfig ? {} : { sandboxPolicy: { type: 'dangerFullAccess' } }),
+                ...(codexModelId ? { model: codexModelId } : {}),
+                ...(reasoningEffort ? { effort: reasoningEffort } : {}),
+            }));
+        }
+        catch (error) {
+            if (reasoningEffort && isCodexUnsupportedEffortError(error)) {
+                throw new Error(`Codex app-server does not accept reasoning effort "${reasoningEffort}" for this turn. Refresh models or upgrade Codex CLI, then retry.`, { cause: error });
+            }
+            throw error;
+        }
+    }
+    async interruptActiveTurn() {
+        const threadId = this.agentSessionId;
+        const turnId = this.activeTurnId;
+        this.activeTurnId = null;
+        this.managedRoomTools.deactivateTurn();
+        if (!threadId || !turnId || !this.process)
+            return;
+        await this.sendRpc('turn/interrupt', { threadId, turnId }, 5_000);
+    }
+    sendRpc(method, params, timeoutMs = 60_000) {
+        if (this.appServerStartupError)
+            return Promise.reject(this.appServerStartupError);
+        const proc = this.process;
+        if (!proc?.stdin)
+            return Promise.reject(new Error('codex app-server is not running'));
+        const id = this.rpcSeq++;
+        const payload = JSON.stringify({ id, method, params });
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pendingRequests.delete(id);
+                reject(new Error(`codex app-server request timed out: ${method}`));
+            }, timeoutMs);
+            this.pendingRequests.set(id, { resolve, reject, timer });
+            proc.stdin.write(`${payload}\n`, (error) => {
+                if (!error)
+                    return;
+                clearTimeout(timer);
+                this.pendingRequests.delete(id);
+                reject(error);
+            });
+        });
+    }
+    handleAppServerMessage(msg) {
+        if (msg.method === 'item/tool/call' && msg.id != null) {
+            void this.handleManagedRoomToolCall(msg.id, msg.params ?? {});
+            return;
+        }
+        if (msg.id != null) {
+            const pending = typeof msg.id === 'number' ? this.pendingRequests.get(msg.id) : undefined;
+            if (pending) {
+                clearTimeout(pending.timer);
+                this.pendingRequests.delete(msg.id);
+                if (msg.error) {
+                    pending.reject(new Error(msg.error.message || `codex app-server error ${msg.error.code ?? ''}`.trim()));
+                }
+                else {
+                    pending.resolve(msg.result);
+                }
+            }
+        }
+        if (!msg.method)
+            return;
+        const params = msg.params ?? {};
+        switch (msg.method) {
+            case 'turn/started': {
+                const turn = typeof params.turn === 'object' && params.turn !== null
+                    ? params.turn
+                    : null;
+                const turnId = typeof turn?.id === 'string' ? turn.id : null;
+                const threadId = typeof params.threadId === 'string' ? params.threadId : '';
+                if (turnId) {
+                    this.activeTurnId = turnId;
+                    if (this.managedPermissionConfig &&
+                        !this.managedRoomTools.bindTurn(threadId, turnId)) {
+                        this.emitErrorIfOpen('codex_managed_room_turn_binding_failed');
+                    }
+                }
+                break;
+            }
+            case 'thread/status/changed': {
+                const threadId = typeof params.threadId === 'string' ? params.threadId : '';
+                if (threadId && this.agentSessionId && threadId !== this.agentSessionId)
+                    break;
+                const status = typeof params.status === 'object' && params.status !== null
+                    ? params.status
+                    : null;
+                if (status?.type === 'active') {
+                    this.emitEvent({ state: 'heartbeat', runPhase: this.mapThreadStatusToRunPhase(status) });
+                }
+                break;
+            }
+            case 'item/agentMessage/delta': {
+                const itemId = typeof params.itemId === 'string' ? params.itemId : '';
+                if (itemId)
+                    this.deltaItemIds.add(itemId);
+                if (typeof params.delta === 'string')
+                    this.emitText(params.delta);
+                break;
+            }
+            case 'item/completed':
+                this.handleAppServerCompletedItem(params);
+                break;
+            case 'thread/tokenUsage/updated':
+                this.handleAppServerUsage(params);
+                break;
+            case 'turn/completed': {
+                const turn = typeof params.turn === 'object' && params.turn !== null
+                    ? params.turn
+                    : null;
+                const turnId = typeof turn?.id === 'string' ? turn.id : null;
+                if (!this.activeTurnId || turnId === this.activeTurnId) {
+                    this.activeTurnId = null;
+                    this.managedRoomTools.deactivateTurn();
+                    this.emitFinalIfOpen();
+                }
+                break;
+            }
+            case 'error': {
+                const message = extractAppServerErrorMessage(params);
+                if (isTransientCodexErrorMessage(message)) {
+                    this.emitTransientStatus(message);
+                    return;
+                }
+                this.emitErrorIfOpen(message);
+                break;
+            }
+        }
+    }
+    async handleManagedRoomToolCall(id, params) {
+        const result = await this.managedRoomTools.execute(params);
+        this.writeAppServerResponse(id, result);
+    }
+    writeAppServerResponse(id, result) {
+        const proc = this.process;
+        if (!proc?.stdin)
+            return;
+        proc.stdin.write(`${JSON.stringify({ id, result })}\n`);
+    }
+    mapThreadStatusToRunPhase(status) {
+        const flags = status?.type === 'active' && Array.isArray(status.activeFlags) ? status.activeFlags : [];
+        if (flags.includes('waitingOnApproval'))
+            return 'waiting_approval';
+        if (flags.includes('waitingOnUserInput'))
+            return 'waiting_user_input';
+        return 'thinking';
+    }
+    handleAppServerNonJsonStdout(line) {
+        const normalized = normalizeTerminalText(line);
+        if (!looksLikeCodexInteractiveAuthPrompt(normalized))
+            return;
+        this.failAppServerStartup(new Error('Codex 未登录。请先在这台电脑的终端运行 `codex`，按提示完成 ChatGPT 登录或配置 API key，然后再回到神念发送消息。'));
+    }
+    failAppServerStartup(error) {
+        if (this.appServerStartupError)
+            return;
+        this.appServerStartupError = error;
+        this.rejectAllPending(error);
+        this.process?.kill('SIGTERM');
+    }
+    handleAppServerCompletedItem(params) {
+        const item = typeof params.item === 'object' && params.item !== null
+            ? params.item
+            : null;
+        if (!item || typeof item.type !== 'string')
+            return;
+        if (isCodexCollabAgentItem(item))
+            return;
+        switch (item.type) {
+            case 'agentMessage': {
+                const id = typeof item.id === 'string' ? item.id : '';
+                if (id && this.deltaItemIds.has(id))
+                    return;
+                if (typeof item.text === 'string')
+                    this.emitText(item.text, 'block');
+                break;
+            }
+            case 'commandExecution': {
+                const command = typeof item.command === 'string' ? item.command : '';
+                const output = typeof item.aggregatedOutput === 'string' ? item.aggregatedOutput : '';
+                if (command) {
+                    this.emitEvent({ state: 'tool-call', name: 'command_execution', args: { command } });
+                }
+                this.emitEvent({
+                    state: 'tool-result',
+                    name: 'command_execution',
+                    result: [output, item.exitCode != null ? `\n(exit ${item.exitCode})` : '']
+                        .join('')
+                        .trim(),
+                });
+                break;
+            }
+            case 'mcpToolCall':
+            case 'dynamicToolCall': {
+                const tool = typeof item.tool === 'string' ? item.tool : item.type;
+                if (isCodexCollabAgentToolName(tool))
+                    return;
+                const args = typeof item.arguments === 'object' && item.arguments !== null
+                    ? item.arguments
+                    : {};
+                this.emitEvent({ state: 'tool-call', name: tool, args });
+                this.emitEvent({
+                    state: 'tool-result',
+                    name: tool,
+                    result: safeStringify(item.error ?? item.result ?? item.contentItems ?? ''),
+                });
+                break;
+            }
+            case 'fileChange': {
+                // File-change telemetry is useful to the local Codex host, but not to a
+                // remote control surface. Drop it before it enters Shennian's event,
+                // persistence, and relay pipeline.
+                break;
+            }
+            case 'approvalRequest':
+            case 'approval_request':
+            case 'permissionRequest':
+            case 'permission_request':
+            case 'userInputRequired':
+            case 'user_input_required': {
+                this.emitApprovalPending(item);
+                break;
+            }
+        }
+    }
+    handleAppServerUsage(params) {
+        const tokenUsage = typeof params.tokenUsage === 'object' && params.tokenUsage !== null
+            ? params.tokenUsage
+            : null;
+        const last = typeof tokenUsage?.last === 'object' && tokenUsage.last !== null
+            ? tokenUsage.last
+            : null;
+        const total = typeof tokenUsage?.total === 'object' && tokenUsage.total !== null
+            ? tokenUsage.total
+            : null;
+        const usage = last ?? total;
+        if (!usage)
+            return;
+        const input = typeof usage.inputTokens === 'number' ? usage.inputTokens : undefined;
+        const output = typeof usage.outputTokens === 'number' ? usage.outputTokens : undefined;
+        if (input != null || output != null) {
+            this.pendingUsage = {
+                inputTokens: input ?? 0,
+                outputTokens: output ?? 0,
+            };
+        }
+    }
+    handleCodexItemLine(obj) {
+        const item = obj.item;
+        if (!item?.type)
+            return;
+        if (isCodexLegacyCollabAgentItem(item))
+            return;
+        switch (item.type) {
+            case 'agent_message':
+            case 'reasoning': {
+                if (obj.type === 'item.completed' && item.text) {
+                    this.emitText(item.text, 'block');
+                }
+                break;
+            }
+            case 'command_execution': {
+                if (obj.type === 'item.started' && item.command) {
+                    this.emitEvent({
+                        state: 'tool-call',
+                        name: 'command_execution',
+                        args: { command: item.command },
+                    });
+                }
+                if (obj.type === 'item.completed') {
+                    const parts = [
+                        item.aggregated_output ?? '',
+                        item.exit_code != null ? `\n(exit ${item.exit_code})` : '',
+                    ];
+                    this.emitEvent({
+                        state: 'tool-result',
+                        name: 'command_execution',
+                        result: parts.join('').trim() || String(item.status ?? ''),
+                    });
+                }
+                break;
+            }
+            case 'mcp_tool_call': {
+                if (item.tool && isCodexCollabAgentToolName(item.tool))
+                    return;
+                if (obj.type === 'item.started') {
+                    this.emitEvent({
+                        state: 'tool-call',
+                        name: item.tool ?? 'mcp_tool',
+                        args: {
+                            server: item.server,
+                            ...(item.arguments && typeof item.arguments === 'object' ? item.arguments : {}),
+                        },
+                    });
+                }
+                if (obj.type === 'item.completed') {
+                    const errMsg = item.error && typeof item.error === 'object' ? item.error.message : undefined;
+                    this.emitEvent({
+                        state: 'tool-result',
+                        name: item.tool ?? 'mcp_tool',
+                        result: errMsg ?? safeStringify(item.result),
+                    });
+                }
+                break;
+            }
+            case 'file_change': {
+                // Keep legacy exec compatibility aligned with the managed App Server:
+                // file-change telemetry never leaves the local Codex client.
+                break;
+            }
+            case 'web_search': {
+                if (obj.type === 'item.completed' && item.query) {
+                    this.emitText(`[web_search] ${item.query}`, 'block');
+                }
+                break;
+            }
+            case 'todo_list': {
+                if (obj.type === 'item.completed' && item.items?.length) {
+                    const lines = item.items.map((t) => `- [${t.completed ? 'x' : ' '}] ${t.text}`).join('\n');
+                    this.emitText(lines, 'block');
+                }
+                break;
+            }
+            case 'approval_request':
+            case 'approvalRequest':
+            case 'permission_request':
+            case 'permissionRequest':
+            case 'user_input_required':
+            case 'userInputRequired': {
+                if (obj.type === 'item.started' || obj.type === 'item.completed') {
+                    this.emitApprovalPending(item);
+                }
+                break;
+            }
+            case 'error': {
+                if (obj.type === 'item.completed' && item.message) {
+                    this.emitEvent({ state: 'error', message: item.message });
+                }
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    handleStreamEvent(obj) {
+        const topType = obj.type ?? obj.event;
+        if (topType?.startsWith('item.')) {
+            this.handleCodexItemLine(obj);
+        }
+        switch (topType) {
+            case 'turn.completed': {
+                const u = obj.usage;
+                if (u) {
+                    const input = u.input_tokens ?? u.prompt_tokens;
+                    const output = u.output_tokens ?? u.completion_tokens;
+                    if (input != null || output != null) {
+                        this.pendingUsage = {
+                            inputTokens: input ?? 0,
+                            outputTokens: output ?? 0,
+                        };
+                    }
+                }
+                this.emitFinalIfOpen();
+                return;
+            }
+            case 'turn.failed': {
+                const msg = typeof obj.error === 'object' && obj.error?.message
+                    ? obj.error.message
+                    : typeof obj.error === 'string'
+                        ? obj.error
+                        : 'turn failed';
+                this.emitErrorIfOpen(msg);
+                return;
+            }
+            case 'error': {
+                const m = typeof obj.message === 'string' ? obj.message : '';
+                if (m.includes('Reconnecting'))
+                    return;
+                this.emitErrorIfOpen(m || (typeof obj.error === 'string' ? obj.error : 'stream error'));
+                return;
+            }
+            case 'thread.started': {
+                const sid = obj.thread_id ??
+                    obj.session_id ??
+                    obj.id;
+                if (typeof sid === 'string' && sid) {
+                    this.agentSessionId = sid;
+                    this.emitEvent({ state: 'start', agentSessionId: this.agentSessionId });
+                }
+                return;
+            }
+            case 'turn.started':
+                return;
+        }
+        if (topType?.startsWith('item.'))
+            return;
+        const eventType = obj.type ?? obj.event;
+        switch (eventType) {
+            case 'message':
+            case 'text':
+            case 'content': {
+                const text = obj.content ?? obj.text;
+                if (text) {
+                    this.emitText(text);
+                }
+                break;
+            }
+            case 'function_call':
+            case 'tool_call': {
+                if (this.isApprovalLikeName(obj.name)) {
+                    this.emitApprovalPending(obj);
+                    break;
+                }
+                if (obj.name && isCodexCollabAgentToolName(obj.name))
+                    return;
+                this.emitEvent({
+                    state: 'tool-call',
+                    name: obj.name,
+                    args: obj.arguments ?? obj.input,
+                });
+                break;
+            }
+            case 'function_call_output':
+            case 'tool_result': {
+                if (obj.name && isCodexCollabAgentToolName(obj.name))
+                    return;
+                this.emitEvent({
+                    state: 'tool-result',
+                    name: obj.name,
+                    result: obj.output ?? obj.result,
+                });
+                break;
+            }
+            case 'approval_request':
+            case 'approvalRequest':
+            case 'permission_request':
+            case 'permissionRequest':
+            case 'user_input_required':
+            case 'userInputRequired': {
+                this.emitApprovalPending(obj);
+                break;
+            }
+            case 'error': {
+                break;
+            }
+            case 'done':
+            case 'completed': {
+                if (obj.usage) {
+                    this.pendingUsage = {
+                        inputTokens: obj.usage.prompt_tokens ?? obj.usage.input_tokens ?? 0,
+                        outputTokens: obj.usage.completion_tokens ?? obj.usage.output_tokens ?? 0,
+                    };
+                }
+                this.emitFinalIfOpen();
+                break;
+            }
+        }
+    }
+    emitEvent(partial) {
+        // Codex can finish a turn while a long-running command is still shutting
+        // down, then deliver that command's item/completed notification after
+        // turn/completed.  Re-emitting it would make SessionManager mark the
+        // already-finished run busy again, leaving every later message queued.
+        if (this.terminalState !== 'open' &&
+            partial.state !== 'final' &&
+            partial.state !== 'error' &&
+            partial.state !== 'aborted')
+            return;
+        const event = {
+            ...partial,
+            runId: this.runId,
+            seq: this.seq++,
+        };
+        this.emit('agentEvent', event);
+    }
+    isApprovalLikeName(name) {
+        if (typeof name !== 'string')
+            return false;
+        return /approval|permission|confirm|user[_-]?input|request[_-]?user/i.test(name);
+    }
+    emitApprovalPending(source) {
+        const command = typeof source.command === 'string' ? source.command : '';
+        const title = typeof source.title === 'string' && source.title.trim() ? source.title : '需要用户确认';
+        const rawContent = typeof source.prompt === 'string'
+            ? source.prompt
+            : typeof source.reason === 'string'
+                ? source.reason
+                : typeof source.message === 'string'
+                    ? source.message
+                    : command
+                        ? `Codex 请求执行命令：${command}`
+                        : 'Codex 正在等待用户确认后继续。';
+        this.emitEvent({
+            state: 'approval-pending',
+            approval: {
+                title,
+                content: rawContent,
+                source: 'codex',
+                actionHint: '当前神念暂不支持远程确认，请回到运行 Codex 的电脑/终端完成确认。',
+            },
+        });
+    }
+    async killProcess(preserveConfiguredManagedRoomContext = false) {
+        const proc = this.process;
+        this.appServerReady = null;
+        this.activeTurnId = null;
+        this.managedRoomTools.reset();
+        if (!preserveConfiguredManagedRoomContext)
+            this.clearConfiguredManagedRoomContext();
+        if (!proc) {
+            this.rejectAllPending(new Error('codex app-server stopped'));
+            return;
+        }
+        this.process = null;
+        this.clearForceCloseTimer();
+        proc.kill('SIGTERM');
+        await new Promise((resolve) => {
+            proc.on('close', resolve);
+            setTimeout(() => {
+                proc.kill('SIGKILL');
+                resolve();
+            }, 3000);
+        });
+        this.rejectAllPending(new Error('codex app-server stopped'));
+    }
+    rejectAllPending(error) {
+        for (const [id, pending] of this.pendingRequests.entries()) {
+            clearTimeout(pending.timer);
+            pending.reject(error);
+            this.pendingRequests.delete(id);
+        }
+    }
+    handleProcessClose(code, stderrBuf) {
+        const stderr = normalizeCodexStderr(stderrBuf);
+        if (code !== 0 && code !== null) {
+            const msg = stderr || `codex exited with code ${code}`;
+            this.emitErrorIfOpen(msg);
+        }
+        else if (looksLikeFatalCodexStderr(stderr)) {
+            // Codex sometimes surfaces fatal API/auth errors on stderr without
+            // emitting a protocol-level `turn.failed`, and may still exit 0.
+            this.emitErrorIfOpen(stderr);
+        }
+        else {
+            this.emitFinalIfOpen();
+        }
+        this.pendingUsage = undefined;
+    }
+    emitFinalIfOpen() {
+        if (this.terminalState !== 'open')
+            return;
+        this.terminalState = 'final';
+        this.managedRoomTools.deactivateTurn();
+        this.clearConfiguredManagedRoomContext();
+        this.emitEvent({
+            state: 'final',
+            usage: this.pendingUsage,
+            agentSessionId: this.agentSessionId ?? undefined,
+        });
+        // A completed managed turn no longer needs to own Codex's per-thread writer
+        // lock. Release the app-server immediately so Codex Desktop/TUI can resume
+        // the same thread without requiring a daemon restart.
+        void this.killProcess().catch(() => { });
+    }
+    emitErrorIfOpen(message) {
+        if (this.terminalState !== 'open')
+            return;
+        this.terminalState = 'error';
+        this.managedRoomTools.deactivateTurn();
+        this.clearConfiguredManagedRoomContext();
+        this.emitEvent({ state: 'error', message: formatCodexErrorMessage(message) });
+        this.scheduleProcessClose();
+    }
+    resetRunState() {
+        this.pendingUsage = undefined;
+        this.terminalState = 'open';
+        this.deltaItemIds.clear();
+        this.lastTransientStatus = '';
+        this.clearForceCloseTimer();
+        this.resetTextState();
+    }
+    clearConfiguredManagedRoomContext() {
+        this.configuredManagedRoomContextToken = null;
+        this.configuredManagedRoomExecutor = null;
+    }
+    emitTransientStatus(message) {
+        const formatted = formatTransientCodexStatus(message);
+        if (!formatted || formatted === this.lastTransientStatus || this.terminalState !== 'open')
+            return;
+        this.lastTransientStatus = formatted;
+        this.emitEvent({ state: 'delta', text: `${formatted}\n`, thinking: true });
+    }
+    resetTextState() {
+        this.hasEmittedText = false;
+        this.textTail = '';
+    }
+    emitText(text, mode = 'delta') {
+        if (!text)
+            return;
+        let next = stripGitDirectiveArtifacts(text);
+        if (!next)
+            return;
+        if (mode === 'block' && this.hasEmittedText && !next.startsWith('\n')) {
+            if (this.textTail.endsWith('\n')) {
+                next = `\n${next}`;
+            }
+            else if (!this.textTail.endsWith('\n\n')) {
+                next = `\n\n${next}`;
+            }
+        }
+        this.hasEmittedText = true;
+        this.textTail = (this.textTail + next).slice(-4);
+        this.emitEvent({ state: 'delta', text: next });
+    }
+    scheduleProcessClose() {
+        const proc = this.process;
+        if (!proc || this.forceCloseTimer)
+            return;
+        this.forceCloseTimer = setTimeout(() => {
+            this.forceCloseTimer = null;
+            if (this.process !== proc)
+                return;
+            proc.kill('SIGTERM');
+            setTimeout(() => {
+                if (this.process === proc) {
+                    proc.kill('SIGKILL');
+                }
+            }, 1000);
+        }, 250);
+    }
+    clearForceCloseTimer() {
+        if (!this.forceCloseTimer)
+            return;
+        clearTimeout(this.forceCloseTimer);
+        this.forceCloseTimer = null;
+    }
+}
+registerAgent('codex', () => new CodexAdapter());