shennian 0.3.86 → 0.4.0

package/dist/src/agents/codex.js

@@ -1,1352 +1,17 @@
-// @arch docs/architecture/cli/agent-adapters.md
-// @arch docs/features/codex-session-ownership.md
-// @arch docs/features/managed-agent-restricted-runtime.md
-// @test src/__tests__/codex-adapter.test.ts
-import { spawnSync } from 'node:child_process';
-import { createInterface } from 'node:readline';
-import { createHash, randomUUID } from 'node:crypto';
-import path from 'node:path';
-import { AgentAdapter, registerAgent, } from './adapter.js';
-import { resolveBuiltinCommand, spawnAgentCommand } from './command-spec.js';
-import { buildAgentProcessEnv, buildManagedAgentProcessEnv } from '../agent-env.js';
-import { ensurePlatformInstructionsFile } from './platform-instructions.js';
-import { CODEX_DESKTOP_SEND_UNAVAILABLE, } from '@shennian/wire';
-import { isCodexThreadTailInterrupted } from '../native-fusion/codex-files.js';
-import { resolveManagedAgentAdapterEnforcement, } from '../security/managed-agent-policy.js';
-import { registerManagedAgentRuntimeSecurity } from '../security/managed-agent-runtime.js';
-import { CODEX_MANAGED_ROOM_DYNAMIC_TOOLS, CodexManagedRoomToolBinding, } from './codex-managed-room-tools.js';
-import { assertCodexManagedPermissionProfile, CODEX_MANAGED_RUNTIME_SECURITY, compileCodexManagedPermissions, extractCodexMcpServerNames, } from './codex-managed-permissions.js';
-import { CODEX_APP_SERVER_CLIENT_INFO, extractAppServerErrorMessage, formatCodexErrorMessage, formatTransientCodexStatus, isCodexCollabAgentItem, isCodexCollabAgentToolName, isCodexLegacyCollabAgentItem, isCodexUnsupportedEffortError, isMissingCodexRolloutError, isTransientCodexErrorMessage, looksLikeCodexInteractiveAuthPrompt, looksLikeFatalCodexStderr, normalizeCodexModelId, normalizeCodexReasoningEffort, normalizeCodexStderr, normalizeTerminalText, safeStringify, stripGitDirectiveArtifacts, } from './codex-utils.js';
-export { isCodexUnsupportedEffortError, isMissingCodexRolloutError, normalizeCodexModelId, normalizeCodexReasoningEffort, } from './codex-utils.js';
-registerManagedAgentRuntimeSecurity('codex', CODEX_MANAGED_RUNTIME_SECURITY);
-export function isCodexActiveWriterError(error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return /already has an active writer|thread-store conflict/i.test(message);
-}
-export function isCodexPaginatedHistoryUnsupportedError(error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return (/paginated(?:_threads|\s+(?:thread\s+)?history)?.*(?:not supported|unsupported|unavailable)/i.test(message) ||
-        /(?:not supported|unsupported|unavailable).*paginated(?:_threads|\s+(?:thread\s+)?history)?/i.test(message));
-}
-export function isCodexExcludeTurnsUnsupportedError(error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return (/unknown field [`'"]?excludeTurns/i.test(message) ||
-        /excludeTurns.*(?:not supported|unsupported|unavailable)/i.test(message));
-}
-export function isCodexProjectApiUnsupportedError(error) {
-    const message = error instanceof Error ? error.message : String(error);
-    return (/(?:method not found|unknown method).*(?:project\/list|project\/create)/i.test(message) ||
-        /(?:project\/list|project\/create).*(?:not supported|unsupported|unavailable)/i.test(message));
-}
-export function selectCodexProjectIdForWorkDir(projects, workDir) {
-    const normalizedWorkDir = path.resolve(workDir);
-    let bestMatch;
-    for (const project of projects) {
-        if (!project.id)
-            continue;
-        for (const root of project.roots ?? []) {
-            if (!root.path)
-                continue;
-            const normalizedRoot = path.resolve(root.path);
-            const relative = path.relative(normalizedRoot, normalizedWorkDir);
-            const containsWorkDir = relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
-            if (!containsWorkDir || normalizedRoot.length <= (bestMatch?.rootLength ?? -1))
-                continue;
-            bestMatch = { id: project.id, rootLength: normalizedRoot.length };
-        }
-    }
-    return bestMatch?.id;
-}
-function buildCodexTextInput(text, attachments) {
-    const images = attachments
-        ?.flatMap((attachment) => codexLocalImageInputs(attachment))
-        .filter((attachment) => !/^https?:\/\//i.test(attachment.path))
-        .filter((attachment) => attachment.path);
-    const textWithFileAttachments = appendFileAttachmentHints(text, attachments);
-    return {
-        type: 'text',
-        text: textWithFileAttachments,
-        text_elements: [],
-        ...(images?.length ? { local_images: images } : {}),
-    };
-}
-function codexLocalImageInputs(attachment) {
-    if (attachment.kind === 'image') {
-        if (attachment.previewData) {
-            return [
-                { path: attachment.path, data: attachment.previewData, mimeType: attachment.mimeType },
-            ];
-        }
-        return [{ path: attachment.path }];
-    }
-    if (attachment.mimeType.startsWith('video/')) {
-        const previewPath = extractVideoPreviewFrame(attachment.path);
-        return previewPath ? [{ path: previewPath }] : [];
-    }
-    return [];
-}
-function extractVideoPreviewFrame(videoPath) {
-    if (!videoPath || /^https?:\/\//i.test(videoPath))
-        return null;
-    const ext = path.extname(videoPath);
-    const stem = ext ? videoPath.slice(0, -ext.length) : videoPath;
-    const previewPath = `${stem}.preview.png`;
-    const result = spawnSync('ffmpeg', ['-y', '-ss', '0', '-i', videoPath, '-frames:v', '1', '-vf', 'scale=320:-1', previewPath], { stdio: 'ignore', timeout: 15_000 });
-    return result.status === 0 ? previewPath : null;
-}
-function appendFileAttachmentHints(text, attachments) {
-    const files = attachments
-        ?.filter((attachment) => attachment.kind !== 'image')
-        .filter((attachment) => attachment.path && !/^https?:\/\//i.test(attachment.path));
-    if (!files?.length)
-        return text;
-    const alreadyVisible = files.every((attachment) => text.includes(attachment.path));
-    if (alreadyVisible)
-        return text;
-    const lines = files.map((attachment, index) => {
-        const label = attachment.name || `attachment-${index + 1}`;
-        const mime = attachment.mimeType ? ` (${attachment.mimeType})` : '';
-        return `[${escapeMarkdownLinkLabel(label)}${mime}](<${attachment.path}>)`;
-    });
-    return [text, '', ...lines].join('\n');
-}
-export function buildCodexQueuedText(text, attachments) {
-    const missing = attachments?.filter((attachment) => attachment.path && !/^https?:\/\//i.test(attachment.path) && !text.includes(attachment.path));
-    if (!missing?.length)
-        return text;
-    const lines = missing.map((attachment, index) => {
-        const label = escapeMarkdownLinkLabel(attachment.name || `attachment-${index + 1}`);
-        return attachment.kind === 'image'
-            ? `![${label}](<${attachment.path}>)`
-            : `[${label}](<${attachment.path}>)`;
-    });
-    return [text, '', ...lines].join('\n');
-}
-export function buildCodexQueueArgs(threadId, text, attachments) {
-    return ['queue', '--thread', threadId, '--message', buildCodexQueuedText(text, attachments)];
-}
-function escapeMarkdownLinkLabel(value) {
-    return value.replace(/[[\]\\]/g, '\\$&');
-}
-export class CodexAdapter extends AgentAdapter {
-    options;
-    type = 'codex';
-    process = null;
-    workDir = null;
-    seq = 0;
-    runId = '';
-    pendingUsage;
-    agentSessionId = null;
-    hasEmittedText = false;
-    textTail = '';
-    terminalState = 'open';
-    forceCloseTimer = null;
-    stderrBuf = '';
-    rpcSeq = 1;
-    pendingRequests = new Map();
-    appServerReady = null;
-    appServerStartupError = null;
-    activeTurnId = null;
-    deltaItemIds = new Set();
-    lastTransientStatus = '';
-    agentSystemPrompt = '';
-    managedAgentPolicy = null;
-    managedPermissionConfig = null;
-    configurationRestartRequired = false;
-    managedRoomTools = new CodexManagedRoomToolBinding();
-    configuredManagedRoomContextToken = null;
-    configuredManagedRoomExecutor = null;
-    managedRoomToolThreadId = null;
-    preparedExternalOwnerThreadId = null;
-    constructor(options = {}) {
-        super();
-        this.options = options;
-    }
-    externalChannel = null;
-    shennianSessionId = null;
-    extraEnv = {};
-    configure(options) {
-        const previousFingerprint = this.configurationFingerprint();
-        this.shennianSessionId = options.sessionId ?? null;
-        this.externalChannel = options.externalChannel ?? null;
-        this.extraEnv = options.env ?? {};
-        if ('managedAgentPolicy' in options) {
-            this.managedAgentPolicy = options.managedAgentPolicy ?? null;
-        }
-        if ('managedRoomContextToken' in options || 'managedRoomExecutor' in options) {
-            // Reconfiguration invalidates the previous turn immediately. The new
-            // token is activated only after any required pre-turn process restart.
-            this.managedRoomTools.deactivateTurn();
-            this.configuredManagedRoomContextToken = options.managedRoomContextToken?.trim() || null;
-            this.configuredManagedRoomExecutor = options.managedRoomExecutor ?? null;
-        }
-        if (this.managedAgentPolicy)
-            this.workDir = this.managedAgentPolicy.adapterPolicy.workDir;
-        const nextFingerprint = this.configurationFingerprint();
-        if (previousFingerprint !== nextFingerprint && this.process) {
-            this.configurationRestartRequired = true;
-        }
-    }
-    configurationFingerprint() {
-        const sortedEnv = Object.keys(this.extraEnv)
-            .sort()
-            .map((key) => [key, this.extraEnv[key] ?? null]);
-        return createHash('sha256')
-            .update(JSON.stringify({
-            sessionId: this.shennianSessionId,
-            externalChannel: this.externalChannel,
-            env: sortedEnv,
-            managedAgentPolicy: this.managedAgentPolicy,
-        }))
-            .digest('hex');
-    }
-    buildProcessEnv(runtimeEnv = {}) {
-        if (!this.managedAgentPolicy) {
-            return buildAgentProcessEnv({ ...runtimeEnv, ...this.extraEnv });
-        }
-        const providerEnv = Object.fromEntries(Object.entries(this.extraEnv).filter(([key]) => key !== 'SHENNIAN_MANAGED_ROOM_CONTEXT' &&
-            key !== 'SHENNIAN_MANAGED_ROOM_IPC_ROOT'));
-        return buildManagedAgentProcessEnv({
-            agentType: 'codex',
-            providerEnv,
-            sessionEnv: providerEnv,
-            runtimeEnv,
-        });
-    }
-    async start(_sessionId, workDir, agentSessionId) {
-        this.workDir = this.managedAgentPolicy?.adapterPolicy.workDir ?? workDir;
-        this.seq = 0;
-        if (agentSessionId)
-            this.agentSessionId = agentSessionId;
-    }
-    async prepareSend(_text, modelId, _reasoningEffort, _attachments, _agentSystemPrompt, context) {
-        if (!this.agentSessionId || this.activeTurnId)
-            return;
-        this.preparedExternalOwnerThreadId = null;
-        try {
-            await this.ensureAppServer(normalizeCodexModelId(modelId));
-        }
-        catch (error) {
-            if (!isCodexActiveWriterError(error))
-                throw error;
-            if (context?.source === 'room_activation') {
-                throw new Error('codex_managed_thread_owned_externally', { cause: error });
-            }
-            if (this.isThreadTailInterrupted(this.agentSessionId)) {
-                throw new Error(CODEX_DESKTOP_SEND_UNAVAILABLE, { cause: error });
-            }
-            this.preparedExternalOwnerThreadId = this.agentSessionId;
-        }
-    }
-    async send(text, modelId, reasoningEffort, attachments, agentSystemPrompt, context) {
-        if (context?.source === 'room_activation' && !this.managedAgentPolicy) {
-            throw new Error('managed_agent_policy_missing');
-        }
-        if (context?.source === 'room_activation' &&
-            (!this.configuredManagedRoomContextToken || !this.configuredManagedRoomExecutor)) {
-            throw new Error('codex_managed_room_tool_context_unavailable');
-        }
-        if (this.activeTurnId) {
-            await this.interruptActiveTurn().catch(() => { });
-            await this.killProcess(true);
-        }
-        if (this.configurationRestartRequired && this.process)
-            await this.killProcess(true);
-        this.configurationRestartRequired = false;
-        const codexModelId = normalizeCodexModelId(modelId);
-        const codexReasoningEffort = normalizeCodexReasoningEffort(reasoningEffort);
-        const nextSystemPrompt = agentSystemPrompt?.trim() ?? '';
-        if (nextSystemPrompt !== this.agentSystemPrompt) {
-            this.agentSystemPrompt = nextSystemPrompt;
-            if (this.process)
-                await this.killProcess(true);
-        }
-        if (context?.source === 'room_activation') {
-            this.managedRoomTools.configure(this.configuredManagedRoomContextToken, this.configuredManagedRoomExecutor);
-        }
-        this.runId = randomUUID();
-        this.seq = 0;
-        this.resetRunState();
-        if (this.agentSessionId && this.preparedExternalOwnerThreadId === this.agentSessionId) {
-            this.preparedExternalOwnerThreadId = null;
-            const queuedSubmissionId = await this.enqueueForExternalOwner(this.agentSessionId, text, attachments);
-            return { deliveryMode: 'external_owner_queue', queuedSubmissionId };
-        }
-        try {
-            await this.ensureAppServer(codexModelId);
-        }
-        catch (error) {
-            if (!this.agentSessionId || !isCodexActiveWriterError(error))
-                throw error;
-            if (context?.source === 'room_activation') {
-                throw new Error('codex_managed_thread_owned_externally', { cause: error });
-            }
-            if (this.isThreadTailInterrupted(this.agentSessionId)) {
-                throw new Error(CODEX_DESKTOP_SEND_UNAVAILABLE, { cause: error });
-            }
-            const queuedSubmissionId = await this.enqueueForExternalOwner(this.agentSessionId, text, attachments);
-            return { deliveryMode: 'external_owner_queue', queuedSubmissionId };
-        }
-        const threadId = this.agentSessionId;
-        if (!threadId)
-            throw new Error('codex app-server did not create a thread');
-        this.emitEvent({ state: 'start', agentSessionId: threadId });
-        const response = await this.startTurnWithRecovery(threadId, text, codexModelId, codexReasoningEffort, attachments);
-        const activeThreadId = this.agentSessionId ?? threadId;
-        this.activeTurnId = response.turn?.id ?? null;
-        if (this.managedPermissionConfig &&
-            this.activeTurnId &&
-            !this.managedRoomTools.bindTurn(activeThreadId, this.activeTurnId)) {
-            await this.killProcess();
-            throw new Error('codex_managed_room_turn_binding_failed');
-        }
-        return { deliveryMode: 'direct' };
-    }
-    isThreadTailInterrupted(threadId) {
-        return this.options.isThreadTailInterrupted?.(threadId) ?? isCodexThreadTailInterrupted(threadId);
-    }
-    async enqueueForExternalOwner(threadId, text, attachments) {
-        const spec = resolveBuiltinCommand('codex');
-        if (!spec)
-            throw new Error('Command "codex" not found. Is OpenAI Codex CLI installed?');
-        const args = buildCodexQueueArgs(threadId, text, attachments);
-        const proc = spawnAgentCommand(spec, args, {
-            cwd: this.workDir ?? undefined,
-            stdio: ['ignore', 'pipe', 'pipe'],
-            env: this.buildProcessEnv({ NO_COLOR: '1' }),
-        });
-        return await new Promise((resolve, reject) => {
-            let stdout = '';
-            let stderr = '';
-            let settled = false;
-            const finish = (error, queuedSubmissionId) => {
-                if (settled)
-                    return;
-                settled = true;
-                clearTimeout(timer);
-                if (error)
-                    reject(error);
-                else
-                    resolve(queuedSubmissionId);
-            };
-            const timer = setTimeout(() => {
-                proc.kill('SIGTERM');
-                finish(new Error('Codex Desktop message queue timed out'));
-            }, 60_000);
-            timer.unref?.();
-            proc.stdout?.on('data', (chunk) => {
-                stdout += chunk.toString();
-            });
-            proc.stderr?.on('data', (chunk) => {
-                stderr += chunk.toString();
-            });
-            proc.once('error', (error) => finish(error));
-            proc.once('close', (code) => {
-                const output = `${stdout}\n${stderr}`.trim();
-                if (code !== 0) {
-                    finish(new Error(output || `codex queue exited with code ${code ?? 'unknown'}`));
-                    return;
-                }
-                const submissionId = output.match(/Queued message\s+([^\s]+)\s+for thread/i)?.[1];
-                finish(undefined, submissionId);
-            });
-        });
-    }
-    async resume(agentSessionId) {
-        await this.killProcess();
-        this.agentSessionId = agentSessionId;
-        this.resetTextState();
-    }
-    async setTitle(agentSessionId, title, workDir) {
-        const threadId = agentSessionId.trim();
-        const name = title.replace(/\s+/g, ' ').trim();
-        if (!threadId || !name)
-            return;
-        this.agentSessionId = threadId;
-        if (workDir?.trim())
-            this.workDir = workDir;
-        await this.ensureAppServer();
-        await this.sendRpc('thread/name/set', { threadId, name });
-    }
-    async stop() {
-        this.managedRoomTools.deactivateTurn();
-        await this.interruptActiveTurn().catch(() => { });
-        await this.killProcess();
-    }
-    async getStatus() {
-        const threadId = this.agentSessionId;
-        const activeTurnId = this.activeTurnId;
-        if (!threadId || !this.process) {
-            return { active: false, runId: activeTurnId, runPhase: null, canStop: false };
-        }
-        let status = null;
-        try {
-            const response = (await this.sendRpc('thread/read', { threadId, includeTurns: false }, 5_000));
-            status = response.thread?.status ?? null;
-        }
-        catch {
-            // If the local control channel is still alive but the status read fails,
-            // fall back to activeTurnId. This keeps the stop button available for
-            // the running turn while avoiding false positives for idle sessions.
-        }
-        const active = status?.type === 'active' || Boolean(activeTurnId);
-        return {
-            active,
-            runId: activeTurnId,
-            runPhase: active ? this.mapThreadStatusToRunPhase(status) : null,
-            canStop: Boolean(active && activeTurnId && this.process),
-        };
-    }
-    spawnCodex(args) {
-        const spec = resolveBuiltinCommand('codex');
-        if (!spec) {
-            this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
-            return;
-        }
-        const proc = spawnAgentCommand(spec, args, {
-            cwd: this.workDir ?? undefined,
-            stdio: ['ignore', 'pipe', 'pipe'],
-            env: this.buildProcessEnv(),
-        });
-        this.process = proc;
-        const rl = createInterface({ input: proc.stdout });
-        rl.on('line', (line) => {
-            if (!line.trim())
-                return;
-            try {
-                const obj = JSON.parse(line);
-                this.handleStreamEvent(obj);
-            }
-            catch {
-                this.emitEvent({ state: 'delta', text: line });
-            }
-        });
-        let stderrBuf = '';
-        proc.stderr?.on('data', (chunk) => {
-            stderrBuf += chunk.toString();
-        });
-        proc.on('close', (code) => {
-            if (this.process !== proc)
-                return;
-            this.process = null;
-            this.clearForceCloseTimer();
-            this.handleProcessClose(code, stderrBuf);
-        });
-        proc.on('error', (err) => {
-            if (this.process !== proc)
-                return;
-            this.process = null;
-            if (err.code === 'ENOENT') {
-                this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
-            }
-            else {
-                this.emit('error', err);
-            }
-        });
-    }
-    spawnAppServer() {
-        const spec = resolveBuiltinCommand('codex');
-        if (!spec) {
-            this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
-            return;
-        }
-        const args = ['app-server', '--listen', 'stdio://'];
-        const modelInstructionsFile = this.options.modelInstructionsFile ??
-            ensurePlatformInstructionsFile(this.workDir ?? process.cwd(), this.externalChannel, this.shennianSessionId ?? undefined, this.agentSystemPrompt);
-        if (modelInstructionsFile) {
-            args.push('-c', `model_instructions_file=${JSON.stringify(modelInstructionsFile)}`);
-        }
-        const proc = spawnAgentCommand(spec, args, {
-            cwd: this.workDir ?? undefined,
-            stdio: ['pipe', 'pipe', 'pipe'],
-            env: this.buildProcessEnv({ NO_COLOR: '1' }),
-        });
-        this.process = proc;
-        this.stderrBuf = '';
-        this.appServerStartupError = null;
-        const rl = createInterface({ input: proc.stdout });
-        rl.on('line', (line) => {
-            if (!line.trim())
-                return;
-            let msg;
-            try {
-                msg = JSON.parse(line);
-            }
-            catch {
-                this.handleAppServerNonJsonStdout(line);
-                return;
-            }
-            this.handleAppServerMessage(msg);
-        });
-        proc.stderr?.on('data', (chunk) => {
-            this.stderrBuf += chunk.toString();
-        });
-        proc.on('close', (code) => {
-            if (this.process !== proc)
-                return;
-            const hadActiveTurn = this.activeTurnId != null;
-            this.process = null;
-            this.appServerReady = null;
-            this.activeTurnId = null;
-            this.managedRoomTools.reset();
-            this.clearConfiguredManagedRoomContext();
-            this.rejectAllPending(new Error(normalizeCodexStderr(this.stderrBuf) || `codex app-server exited with code ${code}`));
-            if (this.terminalState === 'open' && hadActiveTurn) {
-                this.handleProcessClose(code, this.stderrBuf);
-            }
-        });
-        proc.on('error', (err) => {
-            if (this.process !== proc)
-                return;
-            this.process = null;
-            this.managedRoomTools.reset();
-            this.clearConfiguredManagedRoomContext();
-            this.rejectAllPending(err);
-            if (err.code === 'ENOENT') {
-                this.emit('error', new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));
-            }
-            else {
-                this.emit('error', err);
-            }
-        });
-    }
-    async ensureAppServer(modelId) {
-        if (this.appServerReady)
-            return this.appServerReady;
-        this.spawnAppServer();
-        this.appServerReady = this.initializeAppServer(modelId).catch(async (error) => {
-            this.appServerReady = null;
-            await this.killProcess();
-            throw error;
-        });
-        return this.appServerReady;
-    }
-    async initializeAppServer(modelId) {
-        const codexModelId = normalizeCodexModelId(modelId);
-        await this.sendRpc('initialize', {
-            clientInfo: CODEX_APP_SERVER_CLIENT_INFO,
-            capabilities: { experimentalApi: true },
-        });
-        this.managedPermissionConfig = this.managedAgentPolicy
-            ? await this.buildManagedPermissionConfig()
-            : null;
-        if (this.managedPermissionConfig && !this.managedRoomTools.isConfigured()) {
-            this.managedRoomTools.configure(this.configuredManagedRoomContextToken, this.configuredManagedRoomExecutor);
-            if (!this.managedRoomTools.isConfigured()) {
-                throw new Error('codex_managed_room_tool_context_unavailable');
-            }
-        }
-        // Dynamic tools are persisted only when a thread is created. A legacy
-        // managed Codex thread therefore cannot be resumed safely: start a fresh
-        // native thread with the host tool surface instead of silently losing Room
-        // access or falling back to the CLI/socket transport.
-        if (this.agentSessionId &&
-            this.managedPermissionConfig &&
-            this.agentSessionId !== this.managedRoomToolThreadId) {
-            if (!this.managedRoomTools.isConfigured()) {
-                throw new Error('codex_managed_room_tool_context_unavailable');
-            }
-            this.agentSessionId = null;
-        }
-        if (this.agentSessionId) {
-            const resumeParams = {
-                threadId: this.agentSessionId,
-                cwd: this.workDir,
-                approvalPolicy: 'never',
-                ...(this.managedPermissionConfig
-                    ? { config: this.managedPermissionConfig.threadConfig }
-                    : { sandbox: 'danger-full-access' }),
-                persistExtendedHistory: true,
-                ...(this.options.hidden ? { threadSource: 'subagent' } : {}),
-                ...(codexModelId ? { model: codexModelId } : {}),
-            };
-            let response;
-            try {
-                response = (await this.sendRpc('thread/resume', {
-                    ...resumeParams,
-                    excludeTurns: true,
-                }));
-            }
-            catch (error) {
-                if (!isCodexExcludeTurnsUnsupportedError(error))
-                    throw error;
-                response = (await this.sendRpc('thread/resume', resumeParams));
-            }
-            this.agentSessionId = response.thread?.id ?? this.agentSessionId;
-            if (this.managedPermissionConfig) {
-                assertCodexManagedPermissionProfile(response, this.managedPermissionConfig.profileId);
-                this.managedRoomTools.bindThread(this.agentSessionId);
-                this.managedRoomToolThreadId = this.agentSessionId;
-            }
-            return;
-        }
-        const projectId = this.options.hidden ? undefined : await this.resolveCodexProjectId();
-        const startParams = {
-            cwd: this.workDir,
-            approvalPolicy: 'never',
-            ...(this.managedPermissionConfig
-                ? { config: this.managedPermissionConfig.threadConfig }
-                : { sandbox: 'danger-full-access' }),
-            serviceName: 'Shennian',
-            threadSource: this.options.hidden ? 'subagent' : 'user',
-            experimentalRawEvents: false,
-            persistExtendedHistory: true,
-            ...(this.managedPermissionConfig
-                ? { dynamicTools: CODEX_MANAGED_ROOM_DYNAMIC_TOOLS }
-                : {}),
-            ...(projectId ? { projectId } : {}),
-            ...(codexModelId ? { model: codexModelId } : {}),
-        };
-        let response;
-        if (this.options.hidden && !this.managedPermissionConfig) {
-            response = (await this.sendRpc('thread/start', startParams));
-        }
-        else {
-            try {
-                response = (await this.sendRpc('thread/start', {
-                    ...startParams,
-                    historyMode: 'paginated',
-                }));
-            }
-            catch (error) {
-                if (!isCodexPaginatedHistoryUnsupportedError(error))
-                    throw error;
-                throw new Error('当前 Codex CLI 不支持创建可在 Codex Desktop 中继续的新会话，请手动升级 Codex CLI 后重试。神念不会自动升级，也不会降级创建不可见的 legacy 会话。', { cause: error });
-            }
-        }
-        const threadId = response.thread?.id;
-        if (!threadId)
-            throw new Error('codex app-server thread/start returned no thread id');
-        if (this.managedPermissionConfig) {
-            assertCodexManagedPermissionProfile(response, this.managedPermissionConfig.profileId);
-            this.managedRoomTools.bindThread(threadId);
-            this.managedRoomToolThreadId = threadId;
-        }
-        this.agentSessionId = threadId;
-    }
-    async buildManagedPermissionConfig() {
-        const compiled = this.managedAgentPolicy;
-        if (!compiled)
-            throw new Error('managed_agent_policy_missing');
-        const mcpServers = compiled.adapterPolicy.externalCapabilities.mcp
-            ? []
-            : extractCodexMcpServerNames(await this.sendRpc('config/read', { cwd: compiled.adapterPolicy.workDir }));
-        return compileCodexManagedPermissions(resolveManagedAgentAdapterEnforcement(compiled), compiled.adapterPolicy.workDir, {
-            configuredMcpServerNames: mcpServers,
-            shellSubprocessPolicy: compiled.environmentPolicy.shellSubprocess,
-        });
-    }
-    async resolveCodexProjectId() {
-        const workDir = this.workDir?.trim();
-        if (!workDir)
-            return undefined;
-        try {
-            const projects = [];
-            let cursor;
-            do {
-                const response = (await this.sendRpc('project/list', {
-                    limit: 100,
-                    ...(cursor ? { cursor } : {}),
-                }));
-                projects.push(...(response.data ?? []));
-                cursor = response.nextCursor;
-            } while (cursor);
-            const existingProjectId = selectCodexProjectIdForWorkDir(projects, workDir);
-            if (existingProjectId)
-                return existingProjectId;
-            const normalizedWorkDir = path.resolve(workDir);
-            const idempotencyKey = `shennian-project-${createHash('sha256')
-                .update(normalizedWorkDir)
-                .digest('hex')}`;
-            const response = (await this.sendRpc('project/create', {
-                idempotencyKey,
-                name: path.basename(normalizedWorkDir) || normalizedWorkDir,
-                roots: [{ path: normalizedWorkDir }],
-                metadata: { createdBy: 'Shennian' },
-            }));
-            const projectId = response.project?.id;
-            if (!projectId)
-                throw new Error('codex app-server project/create returned no project id');
-            return projectId;
-        }
-        catch (error) {
-            if (!isCodexProjectApiUnsupportedError(error))
-                throw error;
-            throw new Error('当前 Codex CLI 不支持创建可归属到 Codex Desktop 项目的新会话，请手动升级 Codex CLI 后重试。神念不会自动升级，也不会直接修改 Codex Desktop 的私有侧栏索引。', { cause: error });
-        }
-    }
-    async startTurnWithRecovery(threadId, text, codexModelId, reasoningEffort, attachments) {
-        try {
-            return await this.startTurn(threadId, text, codexModelId, reasoningEffort, attachments);
-        }
-        catch (error) {
-            if (!isMissingCodexRolloutError(error))
-                throw error;
-            if (this.managedPermissionConfig) {
-                // A binding may outlive its Codex history (for example after a local
-                // cleanup or migration). Recreate the managed thread and replay the
-                // same real message once; never manufacture a placeholder turn merely
-                // to materialize a rollout.
-                await this.killProcess(true);
-                this.agentSessionId = null;
-                this.managedRoomToolThreadId = null;
-                await this.ensureAppServer(codexModelId);
-                const replacementThreadId = this.agentSessionId;
-                if (!replacementThreadId) {
-                    throw new Error('codex app-server did not recreate the managed thread', {
-                        cause: error,
-                    });
-                }
-                this.emitEvent({ state: 'start', agentSessionId: replacementThreadId });
-                return await this.startTurn(replacementThreadId, text, codexModelId, reasoningEffort, attachments);
-            }
-            await this.killProcess();
-            await this.ensureAppServer(codexModelId);
-            return await this.startTurn(threadId, text, codexModelId, reasoningEffort, attachments);
-        }
-    }
-    async startTurn(threadId, text, codexModelId, reasoningEffort, attachments) {
-        try {
-            return (await this.sendRpc('turn/start', {
-                threadId,
-                input: [buildCodexTextInput(text, attachments)],
-                approvalPolicy: 'never',
-                ...(this.managedPermissionConfig ? {} : { sandboxPolicy: { type: 'dangerFullAccess' } }),
-                ...(codexModelId ? { model: codexModelId } : {}),
-                ...(reasoningEffort ? { effort: reasoningEffort } : {}),
-            }));
-        }
-        catch (error) {
-            if (reasoningEffort && isCodexUnsupportedEffortError(error)) {
-                throw new Error(`Codex app-server does not accept reasoning effort "${reasoningEffort}" for this turn. Refresh models or upgrade Codex CLI, then retry.`, { cause: error });
-            }
-            throw error;
-        }
-    }
-    async interruptActiveTurn() {
-        const threadId = this.agentSessionId;
-        const turnId = this.activeTurnId;
-        this.activeTurnId = null;
-        this.managedRoomTools.deactivateTurn();
-        if (!threadId || !turnId || !this.process)
-            return;
-        await this.sendRpc('turn/interrupt', { threadId, turnId }, 5_000);
-    }
-    sendRpc(method, params, timeoutMs = 60_000) {
-        if (this.appServerStartupError)
-            return Promise.reject(this.appServerStartupError);
-        const proc = this.process;
-        if (!proc?.stdin)
-            return Promise.reject(new Error('codex app-server is not running'));
-        const id = this.rpcSeq++;
-        const payload = JSON.stringify({ id, method, params });
-        return new Promise((resolve, reject) => {
-            const timer = setTimeout(() => {
-                this.pendingRequests.delete(id);
-                reject(new Error(`codex app-server request timed out: ${method}`));
-            }, timeoutMs);
-            this.pendingRequests.set(id, { resolve, reject, timer });
-            proc.stdin.write(`${payload}\n`, (error) => {
-                if (!error)
-                    return;
-                clearTimeout(timer);
-                this.pendingRequests.delete(id);
-                reject(error);
-            });
-        });
-    }
-    handleAppServerMessage(msg) {
-        if (msg.method === 'item/tool/call' && msg.id != null) {
-            void this.handleManagedRoomToolCall(msg.id, msg.params ?? {});
-            return;
-        }
-        if (msg.id != null) {
-            const pending = typeof msg.id === 'number' ? this.pendingRequests.get(msg.id) : undefined;
-            if (pending) {
-                clearTimeout(pending.timer);
-                this.pendingRequests.delete(msg.id);
-                if (msg.error) {
-                    pending.reject(new Error(msg.error.message || `codex app-server error ${msg.error.code ?? ''}`.trim()));
-                }
-                else {
-                    pending.resolve(msg.result);
-                }
-            }
-        }
-        if (!msg.method)
-            return;
-        const params = msg.params ?? {};
-        switch (msg.method) {
-            case 'turn/started': {
-                const turn = typeof params.turn === 'object' && params.turn !== null
-                    ? params.turn
-                    : null;
-                const turnId = typeof turn?.id === 'string' ? turn.id : null;
-                const threadId = typeof params.threadId === 'string' ? params.threadId : '';
-                if (turnId) {
-                    this.activeTurnId = turnId;
-                    if (this.managedPermissionConfig &&
-                        !this.managedRoomTools.bindTurn(threadId, turnId)) {
-                        this.emitErrorIfOpen('codex_managed_room_turn_binding_failed');
-                    }
-                }
-                break;
-            }
-            case 'thread/status/changed': {
-                const threadId = typeof params.threadId === 'string' ? params.threadId : '';
-                if (threadId && this.agentSessionId && threadId !== this.agentSessionId)
-                    break;
-                const status = typeof params.status === 'object' && params.status !== null
-                    ? params.status
-                    : null;
-                if (status?.type === 'active') {
-                    this.emitEvent({ state: 'heartbeat', runPhase: this.mapThreadStatusToRunPhase(status) });
-                }
-                break;
-            }
-            case 'item/agentMessage/delta': {
-                const itemId = typeof params.itemId === 'string' ? params.itemId : '';
-                if (itemId)
-                    this.deltaItemIds.add(itemId);
-                if (typeof params.delta === 'string')
-                    this.emitText(params.delta);
-                break;
-            }
-            case 'item/completed':
-                this.handleAppServerCompletedItem(params);
-                break;
-            case 'thread/tokenUsage/updated':
-                this.handleAppServerUsage(params);
-                break;
-            case 'turn/completed': {
-                const turn = typeof params.turn === 'object' && params.turn !== null
-                    ? params.turn
-                    : null;
-                const turnId = typeof turn?.id === 'string' ? turn.id : null;
-                if (!this.activeTurnId || turnId === this.activeTurnId) {
-                    this.activeTurnId = null;
-                    this.managedRoomTools.deactivateTurn();
-                    this.emitFinalIfOpen();
-                }
-                break;
-            }
-            case 'error': {
-                const message = extractAppServerErrorMessage(params);
-                if (isTransientCodexErrorMessage(message)) {
-                    this.emitTransientStatus(message);
-                    return;
-                }
-                this.emitErrorIfOpen(message);
-                break;
-            }
-        }
-    }
-    async handleManagedRoomToolCall(id, params) {
-        const result = await this.managedRoomTools.execute(params);
-        this.writeAppServerResponse(id, result);
-    }
-    writeAppServerResponse(id, result) {
-        const proc = this.process;
-        if (!proc?.stdin)
-            return;
-        proc.stdin.write(`${JSON.stringify({ id, result })}\n`);
-    }
-    mapThreadStatusToRunPhase(status) {
-        const flags = status?.type === 'active' && Array.isArray(status.activeFlags) ? status.activeFlags : [];
-        if (flags.includes('waitingOnApproval'))
-            return 'waiting_approval';
-        if (flags.includes('waitingOnUserInput'))
-            return 'waiting_user_input';
-        return 'thinking';
-    }
-    handleAppServerNonJsonStdout(line) {
-        const normalized = normalizeTerminalText(line);
-        if (!looksLikeCodexInteractiveAuthPrompt(normalized))
-            return;
-        this.failAppServerStartup(new Error('Codex 未登录。请先在这台电脑的终端运行 `codex`，按提示完成 ChatGPT 登录或配置 API key，然后再回到神念发送消息。'));
-    }
-    failAppServerStartup(error) {
-        if (this.appServerStartupError)
-            return;
-        this.appServerStartupError = error;
-        this.rejectAllPending(error);
-        this.process?.kill('SIGTERM');
-    }
-    handleAppServerCompletedItem(params) {
-        const item = typeof params.item === 'object' && params.item !== null
-            ? params.item
-            : null;
-        if (!item || typeof item.type !== 'string')
-            return;
-        if (isCodexCollabAgentItem(item))
-            return;
-        switch (item.type) {
-            case 'agentMessage': {
-                const id = typeof item.id === 'string' ? item.id : '';
-                if (id && this.deltaItemIds.has(id))
-                    return;
-                if (typeof item.text === 'string')
-                    this.emitText(item.text, 'block');
-                break;
-            }
-            case 'commandExecution': {
-                const command = typeof item.command === 'string' ? item.command : '';
-                const output = typeof item.aggregatedOutput === 'string' ? item.aggregatedOutput : '';
-                if (command) {
-                    this.emitEvent({ state: 'tool-call', name: 'command_execution', args: { command } });
-                }
-                this.emitEvent({
-                    state: 'tool-result',
-                    name: 'command_execution',
-                    result: [output, item.exitCode != null ? `\n(exit ${item.exitCode})` : '']
-                        .join('')
-                        .trim(),
-                });
-                break;
-            }
-            case 'mcpToolCall':
-            case 'dynamicToolCall': {
-                const tool = typeof item.tool === 'string' ? item.tool : item.type;
-                if (isCodexCollabAgentToolName(tool))
-                    return;
-                const args = typeof item.arguments === 'object' && item.arguments !== null
-                    ? item.arguments
-                    : {};
-                this.emitEvent({ state: 'tool-call', name: tool, args });
-                this.emitEvent({
-                    state: 'tool-result',
-                    name: tool,
-                    result: safeStringify(item.error ?? item.result ?? item.contentItems ?? ''),
-                });
-                break;
-            }
-            case 'fileChange': {
-                // File-change telemetry is useful to the local Codex host, but not to a
-                // remote control surface. Drop it before it enters Shennian's event,
-                // persistence, and relay pipeline.
-                break;
-            }
-            case 'approvalRequest':
-            case 'approval_request':
-            case 'permissionRequest':
-            case 'permission_request':
-            case 'userInputRequired':
-            case 'user_input_required': {
-                this.emitApprovalPending(item);
-                break;
-            }
-        }
-    }
-    handleAppServerUsage(params) {
-        const tokenUsage = typeof params.tokenUsage === 'object' && params.tokenUsage !== null
-            ? params.tokenUsage
-            : null;
-        const last = typeof tokenUsage?.last === 'object' && tokenUsage.last !== null
-            ? tokenUsage.last
-            : null;
-        const total = typeof tokenUsage?.total === 'object' && tokenUsage.total !== null
-            ? tokenUsage.total
-            : null;
-        const usage = last ?? total;
-        if (!usage)
-            return;
-        const input = typeof usage.inputTokens === 'number' ? usage.inputTokens : undefined;
-        const output = typeof usage.outputTokens === 'number' ? usage.outputTokens : undefined;
-        if (input != null || output != null) {
-            this.pendingUsage = {
-                inputTokens: input ?? 0,
-                outputTokens: output ?? 0,
-            };
-        }
-    }
-    handleCodexItemLine(obj) {
-        const item = obj.item;
-        if (!item?.type)
-            return;
-        if (isCodexLegacyCollabAgentItem(item))
-            return;
-        switch (item.type) {
-            case 'agent_message':
-            case 'reasoning': {
-                if (obj.type === 'item.completed' && item.text) {
-                    this.emitText(item.text, 'block');
-                }
-                break;
-            }
-            case 'command_execution': {
-                if (obj.type === 'item.started' && item.command) {
-                    this.emitEvent({
-                        state: 'tool-call',
-                        name: 'command_execution',
-                        args: { command: item.command },
-                    });
-                }
-                if (obj.type === 'item.completed') {
-                    const parts = [
-                        item.aggregated_output ?? '',
-                        item.exit_code != null ? `\n(exit ${item.exit_code})` : '',
-                    ];
-                    this.emitEvent({
-                        state: 'tool-result',
-                        name: 'command_execution',
-                        result: parts.join('').trim() || String(item.status ?? ''),
-                    });
-                }
-                break;
-            }
-            case 'mcp_tool_call': {
-                if (item.tool && isCodexCollabAgentToolName(item.tool))
-                    return;
-                if (obj.type === 'item.started') {
-                    this.emitEvent({
-                        state: 'tool-call',
-                        name: item.tool ?? 'mcp_tool',
-                        args: {
-                            server: item.server,
-                            ...(item.arguments && typeof item.arguments === 'object' ? item.arguments : {}),
-                        },
-                    });
-                }
-                if (obj.type === 'item.completed') {
-                    const errMsg = item.error && typeof item.error === 'object' ? item.error.message : undefined;
-                    this.emitEvent({
-                        state: 'tool-result',
-                        name: item.tool ?? 'mcp_tool',
-                        result: errMsg ?? safeStringify(item.result),
-                    });
-                }
-                break;
-            }
-            case 'file_change': {
-                // Keep legacy exec compatibility aligned with the managed App Server:
-                // file-change telemetry never leaves the local Codex client.
-                break;
-            }
-            case 'web_search': {
-                if (obj.type === 'item.completed' && item.query) {
-                    this.emitText(`[web_search] ${item.query}`, 'block');
-                }
-                break;
-            }
-            case 'todo_list': {
-                if (obj.type === 'item.completed' && item.items?.length) {
-                    const lines = item.items.map((t) => `- [${t.completed ? 'x' : ' '}] ${t.text}`).join('\n');
-                    this.emitText(lines, 'block');
-                }
-                break;
-            }
-            case 'approval_request':
-            case 'approvalRequest':
-            case 'permission_request':
-            case 'permissionRequest':
-            case 'user_input_required':
-            case 'userInputRequired': {
-                if (obj.type === 'item.started' || obj.type === 'item.completed') {
-                    this.emitApprovalPending(item);
-                }
-                break;
-            }
-            case 'error': {
-                if (obj.type === 'item.completed' && item.message) {
-                    this.emitEvent({ state: 'error', message: item.message });
-                }
-                break;
-            }
-            default:
-                break;
-        }
-    }
-    handleStreamEvent(obj) {
-        const topType = obj.type ?? obj.event;
-        if (topType?.startsWith('item.')) {
-            this.handleCodexItemLine(obj);
-        }
-        switch (topType) {
-            case 'turn.completed': {
-                const u = obj.usage;
-                if (u) {
-                    const input = u.input_tokens ?? u.prompt_tokens;
-                    const output = u.output_tokens ?? u.completion_tokens;
-                    if (input != null || output != null) {
-                        this.pendingUsage = {
-                            inputTokens: input ?? 0,
-                            outputTokens: output ?? 0,
-                        };
-                    }
-                }
-                this.emitFinalIfOpen();
-                return;
-            }
-            case 'turn.failed': {
-                const msg = typeof obj.error === 'object' && obj.error?.message
-                    ? obj.error.message
-                    : typeof obj.error === 'string'
-                        ? obj.error
-                        : 'turn failed';
-                this.emitErrorIfOpen(msg);
-                return;
-            }
-            case 'error': {
-                const m = typeof obj.message === 'string' ? obj.message : '';
-                if (m.includes('Reconnecting'))
-                    return;
-                this.emitErrorIfOpen(m || (typeof obj.error === 'string' ? obj.error : 'stream error'));
-                return;
-            }
-            case 'thread.started': {
-                const sid = obj.thread_id ??
-                    obj.session_id ??
-                    obj.id;
-                if (typeof sid === 'string' && sid) {
-                    this.agentSessionId = sid;
-                    this.emitEvent({ state: 'start', agentSessionId: this.agentSessionId });
-                }
-                return;
-            }
-            case 'turn.started':
-                return;
-        }
-        if (topType?.startsWith('item.'))
-            return;
-        const eventType = obj.type ?? obj.event;
-        switch (eventType) {
-            case 'message':
-            case 'text':
-            case 'content': {
-                const text = obj.content ?? obj.text;
-                if (text) {
-                    this.emitText(text);
-                }
-                break;
-            }
-            case 'function_call':
-            case 'tool_call': {
-                if (this.isApprovalLikeName(obj.name)) {
-                    this.emitApprovalPending(obj);
-                    break;
-                }
-                if (obj.name && isCodexCollabAgentToolName(obj.name))
-                    return;
-                this.emitEvent({
-                    state: 'tool-call',
-                    name: obj.name,
-                    args: obj.arguments ?? obj.input,
-                });
-                break;
-            }
-            case 'function_call_output':
-            case 'tool_result': {
-                if (obj.name && isCodexCollabAgentToolName(obj.name))
-                    return;
-                this.emitEvent({
-                    state: 'tool-result',
-                    name: obj.name,
-                    result: obj.output ?? obj.result,
-                });
-                break;
-            }
-            case 'approval_request':
-            case 'approvalRequest':
-            case 'permission_request':
-            case 'permissionRequest':
-            case 'user_input_required':
-            case 'userInputRequired': {
-                this.emitApprovalPending(obj);
-                break;
-            }
-            case 'error': {
-                break;
-            }
-            case 'done':
-            case 'completed': {
-                if (obj.usage) {
-                    this.pendingUsage = {
-                        inputTokens: obj.usage.prompt_tokens ?? obj.usage.input_tokens ?? 0,
-                        outputTokens: obj.usage.completion_tokens ?? obj.usage.output_tokens ?? 0,
-                    };
-                }
-                this.emitFinalIfOpen();
-                break;
-            }
-        }
-    }
-    emitEvent(partial) {
-        // Codex can finish a turn while a long-running command is still shutting
-        // down, then deliver that command's item/completed notification after
-        // turn/completed.  Re-emitting it would make SessionManager mark the
-        // already-finished run busy again, leaving every later message queued.
-        if (this.terminalState !== 'open' &&
-            partial.state !== 'final' &&
-            partial.state !== 'error' &&
-            partial.state !== 'aborted')
-            return;
-        const event = {
-            ...partial,
-            runId: this.runId,
-            seq: this.seq++,
-        };
-        this.emit('agentEvent', event);
-    }
-    isApprovalLikeName(name) {
-        if (typeof name !== 'string')
-            return false;
-        return /approval|permission|confirm|user[_-]?input|request[_-]?user/i.test(name);
-    }
-    emitApprovalPending(source) {
-        const command = typeof source.command === 'string' ? source.command : '';
-        const title = typeof source.title === 'string' && source.title.trim() ? source.title : '需要用户确认';
-        const rawContent = typeof source.prompt === 'string'
-            ? source.prompt
-            : typeof source.reason === 'string'
-                ? source.reason
-                : typeof source.message === 'string'
-                    ? source.message
-                    : command
-                        ? `Codex 请求执行命令：${command}`
-                        : 'Codex 正在等待用户确认后继续。';
-        this.emitEvent({
-            state: 'approval-pending',
-            approval: {
-                title,
-                content: rawContent,
-                source: 'codex',
-                actionHint: '当前神念暂不支持远程确认，请回到运行 Codex 的电脑/终端完成确认。',
-            },
-        });
-    }
-    async killProcess(preserveConfiguredManagedRoomContext = false) {
-        const proc = this.process;
-        this.appServerReady = null;
-        this.activeTurnId = null;
-        this.managedRoomTools.reset();
-        if (!preserveConfiguredManagedRoomContext)
-            this.clearConfiguredManagedRoomContext();
-        if (!proc) {
-            this.rejectAllPending(new Error('codex app-server stopped'));
-            return;
-        }
-        this.process = null;
-        this.clearForceCloseTimer();
-        proc.kill('SIGTERM');
-        await new Promise((resolve) => {
-            proc.on('close', resolve);
-            setTimeout(() => {
-                proc.kill('SIGKILL');
-                resolve();
-            }, 3000);
-        });
-        this.rejectAllPending(new Error('codex app-server stopped'));
-    }
-    rejectAllPending(error) {
-        for (const [id, pending] of this.pendingRequests.entries()) {
-            clearTimeout(pending.timer);
-            pending.reject(error);
-            this.pendingRequests.delete(id);
-        }
-    }
-    handleProcessClose(code, stderrBuf) {
-        const stderr = normalizeCodexStderr(stderrBuf);
-        if (code !== 0 && code !== null) {
-            const msg = stderr || `codex exited with code ${code}`;
-            this.emitErrorIfOpen(msg);
-        }
-        else if (looksLikeFatalCodexStderr(stderr)) {
-            // Codex sometimes surfaces fatal API/auth errors on stderr without
-            // emitting a protocol-level `turn.failed`, and may still exit 0.
-            this.emitErrorIfOpen(stderr);
-        }
-        else {
-            this.emitFinalIfOpen();
-        }
-        this.pendingUsage = undefined;
-    }
-    emitFinalIfOpen() {
-        if (this.terminalState !== 'open')
-            return;
-        this.terminalState = 'final';
-        this.managedRoomTools.deactivateTurn();
-        this.clearConfiguredManagedRoomContext();
-        this.emitEvent({
-            state: 'final',
-            usage: this.pendingUsage,
-            agentSessionId: this.agentSessionId ?? undefined,
-        });
-        // A completed managed turn no longer needs to own Codex's per-thread writer
-        // lock. Release the app-server immediately so Codex Desktop/TUI can resume
-        // the same thread without requiring a daemon restart.
-        void this.killProcess().catch(() => { });
-    }
-    emitErrorIfOpen(message) {
-        if (this.terminalState !== 'open')
-            return;
-        this.terminalState = 'error';
-        this.managedRoomTools.deactivateTurn();
-        this.clearConfiguredManagedRoomContext();
-        this.emitEvent({ state: 'error', message: formatCodexErrorMessage(message) });
-        this.scheduleProcessClose();
-    }
-    resetRunState() {
-        this.pendingUsage = undefined;
-        this.terminalState = 'open';
-        this.deltaItemIds.clear();
-        this.lastTransientStatus = '';
-        this.clearForceCloseTimer();
-        this.resetTextState();
-    }
-    clearConfiguredManagedRoomContext() {
-        this.configuredManagedRoomContextToken = null;
-        this.configuredManagedRoomExecutor = null;
-    }
-    emitTransientStatus(message) {
-        const formatted = formatTransientCodexStatus(message);
-        if (!formatted || formatted === this.lastTransientStatus || this.terminalState !== 'open')
-            return;
-        this.lastTransientStatus = formatted;
-        this.emitEvent({ state: 'delta', text: `${formatted}\n`, thinking: true });
-    }
-    resetTextState() {
-        this.hasEmittedText = false;
-        this.textTail = '';
-    }
-    emitText(text, mode = 'delta') {
-        if (!text)
-            return;
-        let next = stripGitDirectiveArtifacts(text);
-        if (!next)
-            return;
-        if (mode === 'block' && this.hasEmittedText && !next.startsWith('\n')) {
-            if (this.textTail.endsWith('\n')) {
-                next = `\n${next}`;
-            }
-            else if (!this.textTail.endsWith('\n\n')) {
-                next = `\n\n${next}`;
-            }
-        }
-        this.hasEmittedText = true;
-        this.textTail = (this.textTail + next).slice(-4);
-        this.emitEvent({ state: 'delta', text: next });
-    }
-    scheduleProcessClose() {
-        const proc = this.process;
-        if (!proc || this.forceCloseTimer)
-            return;
-        this.forceCloseTimer = setTimeout(() => {
-            this.forceCloseTimer = null;
-            if (this.process !== proc)
-                return;
-            proc.kill('SIGTERM');
-            setTimeout(() => {
-                if (this.process === proc) {
-                    proc.kill('SIGKILL');
-                }
-            }, 1000);
-        }, 250);
-    }
-    clearForceCloseTimer() {
-        if (!this.forceCloseTimer)
-            return;
-        clearTimeout(this.forceCloseTimer);
-        this.forceCloseTimer = null;
-    }
-}
-registerAgent('codex', () => new CodexAdapter());
+import{spawnSync as O}from"node:child_process";import{createInterface as w}from"node:readline";import{createHash as S,randomUUID as b}from"node:crypto";import p from"node:path";import{AgentAdapter as q,registerAgent as D}from"./adapter.js";import{resolveBuiltinCommand as v,spawnAgentCommand as x}from"./command-spec.js";import{buildAgentProcessEnv as L,buildManagedAgentProcessEnv as N}from"../agent-env.js";import{ensurePlatformInstructionsFile as F}from"./platform-instructions.js";import{CODEX_DESKTOP_SEND_UNAVAILABLE as C}from"@shennian/wire";import{isCodexThreadTailInterrupted as $}from"../native-fusion/codex-files.js";import{resolveManagedAgentAdapterEnforcement as U}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as W}from"../security/managed-agent-runtime.js";import{CODEX_MANAGED_ROOM_DYNAMIC_TOOLS as z,CodexManagedRoomToolBinding as B}from"./codex-managed-room-tools.js";import{assertCodexManagedPermissionProfile as E,CODEX_MANAGED_RUNTIME_SECURITY as G,compileCodexManagedPermissions as J,extractCodexMcpServerNames as H}from"./codex-managed-permissions.js";import{CODEX_APP_SERVER_CLIENT_INFO as V,extractAppServerErrorMessage as R,formatCodexErrorMessage as X,formatTransientCodexStatus as K,isCodexCollabAgentItem as Q,isCodexCollabAgentToolName as y,isCodexLegacyCollabAgentItem as Y,isCodexUnsupportedEffortError as j,isMissingCodexRolloutError as T,isTransientCodexErrorMessage as Z,looksLikeCodexInteractiveAuthPrompt as ee,looksLikeFatalCodexStderr as te,normalizeCodexModelId as I,normalizeCodexReasoningEffort as re,normalizeCodexStderr as _,normalizeTerminalText as se,safeStringify as k,stripGitDirectiveArtifacts as ne}from"./codex-utils.js";import{isCodexUnsupportedEffortError as be,isMissingCodexRolloutError as qe,normalizeCodexModelId as De,normalizeCodexReasoningEffort as Le}from"./codex-utils.js";W("codex",G);function P(o){const e=o instanceof Error?o.message:String(o);return/already has an active writer|thread-store conflict/i.test(e)}function ie(o){const e=o instanceof Error?o.message:String(o);return/paginated(?:_threads|\s+(?:thread\s+)?history)?.*(?:not supported|unsupported|unavailable)/i.test(e)||/(?:not supported|unsupported|unavailable).*paginated(?:_threads|\s+(?:thread\s+)?history)?/i.test(e)}function oe(o){const e=o instanceof Error?o.message:String(o);return/unknown field [`'"]?excludeTurns/i.test(e)||/excludeTurns.*(?:not supported|unsupported|unavailable)/i.test(e)}function ae(o){const e=o instanceof Error?o.message:String(o);return/(?:method not found|unknown method).*(?:project\/list|project\/create)/i.test(e)||/(?:project\/list|project\/create).*(?:not supported|unsupported|unavailable)/i.test(e)}function de(o,e){const t=p.resolve(e);let r;for(const s of o)if(s.id)for(const i of s.roots??[]){if(!i.path)continue;const n=p.resolve(i.path),a=p.relative(n,t);!(a===""||!a.startsWith("..")&&!p.isAbsolute(a))||n.length<=(r?.rootLength??-1)||(r={id:s.id,rootLength:n.length})}return r?.id}function le(o,e){const t=e?.flatMap(s=>ce(s)).filter(s=>!/^https?:\/\//i.test(s.path)).filter(s=>s.path);return{type:"text",text:he(o,e),text_elements:[],...t?.length?{local_images:t}:{}}}function ce(o){if(o.kind==="image")return o.previewData?[{path:o.path,data:o.previewData,mimeType:o.mimeType}]:[{path:o.path}];if(o.mimeType.startsWith("video/")){const e=ue(o.path);return e?[{path:e}]:[]}return[]}function ue(o){if(!o||/^https?:\/\//i.test(o))return null;const e=p.extname(o),r=`${e?o.slice(0,-e.length):o}.preview.png`;return O("ffmpeg",["-y","-ss","0","-i",o,"-frames:v","1","-vf","scale=320:-1",r],{stdio:"ignore",timeout:15e3}).status===0?r:null}function he(o,e){const t=e?.filter(i=>i.kind!=="image").filter(i=>i.path&&!/^https?:\/\//i.test(i.path));if(!t?.length||t.every(i=>o.includes(i.path)))return o;const s=t.map((i,n)=>{const a=i.name||`attachment-${n+1}`,d=i.mimeType?` (${i.mimeType})`:"";return`[${A(a)}${d}](<${i.path}>)`});return[o,"",...s].join(`
+`)}function pe(o,e){const t=e?.filter(s=>s.path&&!/^https?:\/\//i.test(s.path)&&!o.includes(s.path));if(!t?.length)return o;const r=t.map((s,i)=>{const n=A(s.name||`attachment-${i+1}`);return s.kind==="image"?`![${n}](<${s.path}>)`:`[${n}](<${s.path}>)`});return[o,"",...r].join(`
+`)}function me(o,e,t){return["queue","--thread",o,"--message",pe(e,t)]}function A(o){return o.replace(/[[\]\\]/g,"\\$&")}class ge extends q{options;type="codex";process=null;workDir=null;seq=0;runId="";pendingUsage;agentSessionId=null;hasEmittedText=!1;textTail="";terminalState="open";forceCloseTimer=null;stderrBuf="";rpcSeq=1;pendingRequests=new Map;appServerReady=null;appServerStartupError=null;activeTurnId=null;deltaItemIds=new Set;lastTransientStatus="";agentSystemPrompt="";managedAgentPolicy=null;managedPermissionConfig=null;configurationRestartRequired=!1;managedRoomTools=new B;configuredManagedRoomContextToken=null;configuredManagedRoomExecutor=null;managedRoomToolThreadId=null;preparedExternalOwnerThreadId=null;managedTurnReplay=null;managedAsyncRecovery=null;constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){const t=this.configurationFingerprint();this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),("managedRoomContextToken"in e||"managedRoomExecutor"in e)&&(this.managedRoomTools.deactivateTurn(),this.configuredManagedRoomContextToken=e.managedRoomContextToken?.trim()||null,this.configuredManagedRoomExecutor=e.managedRoomExecutor??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir);const r=this.configurationFingerprint();t!==r&&this.process&&(this.configurationRestartRequired=!0)}configurationFingerprint(){const e=Object.keys(this.extraEnv).sort().map(t=>[t,this.extraEnv[t]??null]);return S("sha256").update(JSON.stringify({sessionId:this.shennianSessionId,externalChannel:this.externalChannel,env:e,managedAgentPolicy:this.managedAgentPolicy})).digest("hex")}buildProcessEnv(e={}){if(!this.managedAgentPolicy)return L({...e,...this.extraEnv});const t=Object.fromEntries(Object.entries(this.extraEnv).filter(([r])=>r!=="SHENNIAN_MANAGED_ROOM_CONTEXT"&&r!=="SHENNIAN_MANAGED_ROOM_IPC_ROOT"));return N({agentType:"codex",providerEnv:t,sessionEnv:t,runtimeEnv:e})}async start(e,t,r){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,r&&(this.agentSessionId=r)}async prepareSend(e,t,r,s,i,n){const a=i?.trim()??"";if(a!==this.agentSystemPrompt&&(this.agentSystemPrompt=a,this.process&&await this.killProcess(!0)),!(!this.agentSessionId||this.activeTurnId)){this.preparedExternalOwnerThreadId=null;try{await this.ensureAppServer(I(t))}catch(d){if(!P(d))throw d;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:d});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(C,{cause:d});this.preparedExternalOwnerThreadId=this.agentSessionId}}}async send(e,t,r,s,i,n){if(n?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");if(n?.source==="room_activation"&&(!this.configuredManagedRoomContextToken||!this.configuredManagedRoomExecutor))throw new Error("codex_managed_room_tool_context_unavailable");this.activeTurnId&&(await this.interruptActiveTurn().catch(()=>{}),await this.killProcess(!0)),this.configurationRestartRequired&&this.process&&await this.killProcess(!0),this.configurationRestartRequired=!1;const a=I(t),d=re(r),c=i?.trim()??"";if(c!==this.agentSystemPrompt&&(this.agentSystemPrompt=c,this.process&&await this.killProcess(!0)),n?.source==="room_activation"&&this.managedRoomTools.configure(this.configuredManagedRoomContextToken,this.configuredManagedRoomExecutor),this.runId=b(),this.seq=0,this.resetRunState(),this.agentSessionId&&this.preparedExternalOwnerThreadId===this.agentSessionId)return this.preparedExternalOwnerThreadId=null,{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)};try{await this.ensureAppServer(a)}catch(h){if(!this.agentSessionId||!P(h))throw h;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:h});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(C,{cause:h});return{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)}}const l=this.agentSessionId;if(!l)throw new Error("codex app-server did not create a thread");this.emitEvent({state:"start",agentSessionId:l}),this.managedTurnReplay=this.managedPermissionConfig?{text:e,modelId:a,reasoningEffort:d,attachments:s,recoveryCount:0}:null;const g=await this.startTurnWithRecovery(l,e,a,d,s),m=this.agentSessionId??l;if(this.activeTurnId=g.turn?.id??null,this.managedPermissionConfig&&this.activeTurnId&&!this.managedRoomTools.bindTurn(m,this.activeTurnId))throw await this.killProcess(),new Error("codex_managed_room_turn_binding_failed");return{deliveryMode:"direct"}}isThreadTailInterrupted(e){return this.options.isThreadTailInterrupted?.(e)??$(e)}async enqueueForExternalOwner(e,t,r){const s=v("codex");if(!s)throw new Error('Command "codex" not found. Is OpenAI Codex CLI installed?');const i=me(e,t,r),n=x(s,i,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv({NO_COLOR:"1"})});return await new Promise((a,d)=>{let c="",l="",g=!1;const m=(u,f)=>{g||(g=!0,clearTimeout(h),u?d(u):a(f))},h=setTimeout(()=>{n.kill("SIGTERM"),m(new Error("Codex Desktop message queue timed out"))},6e4);h.unref?.(),n.stdout?.on("data",u=>{c+=u.toString()}),n.stderr?.on("data",u=>{l+=u.toString()}),n.once("error",u=>m(u)),n.once("close",u=>{const f=`${c}
+${l}`.trim();if(u!==0){m(new Error(f||`codex queue exited with code ${u??"unknown"}`));return}const M=f.match(/Queued message\s+([^\s]+)\s+for thread/i)?.[1];m(void 0,M)})})}async resume(e){await this.killProcess(),this.agentSessionId=e,this.resetTextState()}async setTitle(e,t,r){const s=e.trim(),i=t.replace(/\s+/g," ").trim();!s||!i||(this.agentSessionId=s,r?.trim()&&(this.workDir=r),await this.ensureAppServer(),await this.sendRpc("thread/name/set",{threadId:s,name:i}))}async stop(){this.managedRoomTools.deactivateTurn(),await this.interruptActiveTurn().catch(()=>{}),await this.killProcess()}async getStatus(){const e=this.agentSessionId,t=this.activeTurnId;if(!e||!this.process)return{active:!1,runId:t,runPhase:null,canStop:!1};let r=null;try{r=(await this.sendRpc("thread/read",{threadId:e,includeTurns:!1},5e3)).thread?.status??null}catch{}const s=r?.type==="active"||!!t;return{active:s,runId:t,runPhase:s?this.mapThreadStatusToRunPhase(r):null,canStop:!!(s&&t&&this.process)}}spawnCodex(e){const t=v("codex");if(!t){this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));return}const r=x(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()});this.process=r,w({input:r.stdout}).on("line",n=>{if(n.trim())try{const a=JSON.parse(n);this.handleStreamEvent(a)}catch{this.emitEvent({state:"delta",text:n})}});let i="";r.stderr?.on("data",n=>{i+=n.toString()}),r.on("close",n=>{this.process===r&&(this.process=null,this.clearForceCloseTimer(),this.handleProcessClose(n,i))}),r.on("error",n=>{this.process===r&&(this.process=null,n.code==="ENOENT"?this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?')):this.emit("error",n))})}spawnAppServer(){const e=v("codex");if(!e){this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));return}const t=["app-server","--listen","stdio://"],r=this.options.modelInstructionsFile??F(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,this.agentSystemPrompt);r&&t.push("-c",`model_instructions_file=${JSON.stringify(r)}`);const s=x(e,t,{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:this.buildProcessEnv({NO_COLOR:"1"})});this.process=s,this.stderrBuf="",this.appServerStartupError=null,w({input:s.stdout}).on("line",n=>{if(!n.trim())return;let a;try{a=JSON.parse(n)}catch{this.handleAppServerNonJsonStdout(n);return}this.handleAppServerMessage(a)}),s.stderr?.on("data",n=>{this.stderrBuf+=n.toString()}),s.on("close",n=>{if(this.process!==s)return;const a=this.activeTurnId!=null;this.process=null,this.appServerReady=null,this.activeTurnId=null,this.managedRoomTools.reset(),this.clearConfiguredManagedRoomContext(),this.rejectAllPending(new Error(_(this.stderrBuf)||`codex app-server exited with code ${n}`)),this.terminalState==="open"&&a&&this.handleProcessClose(n,this.stderrBuf)}),s.on("error",n=>{this.process===s&&(this.process=null,this.managedRoomTools.reset(),this.clearConfiguredManagedRoomContext(),this.rejectAllPending(n),n.code==="ENOENT"?this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?')):this.emit("error",n))})}async ensureAppServer(e){return this.appServerReady?this.appServerReady:(this.spawnAppServer(),this.appServerReady=this.initializeAppServer(e).catch(async t=>{throw this.appServerReady=null,await this.killProcess(),t}),this.appServerReady)}async initializeAppServer(e){const t=I(e);if(await this.sendRpc("initialize",{clientInfo:V,capabilities:{experimentalApi:!0}}),this.managedPermissionConfig=this.managedAgentPolicy?await this.buildManagedPermissionConfig():null,this.managedPermissionConfig&&!this.managedRoomTools.isConfigured()&&(this.managedRoomTools.configure(this.configuredManagedRoomContextToken,this.configuredManagedRoomExecutor),!this.managedRoomTools.isConfigured()))throw new Error("codex_managed_room_tool_context_unavailable");if(this.agentSessionId&&this.managedPermissionConfig&&this.agentSessionId!==this.managedRoomToolThreadId){if(!this.managedRoomTools.isConfigured())throw new Error("codex_managed_room_tool_context_unavailable");this.agentSessionId=null}if(this.agentSessionId){const a={threadId:this.agentSessionId,cwd:this.workDir,approvalPolicy:"never",...this.managedPermissionConfig?{config:this.managedPermissionConfig.threadConfig}:{sandbox:"danger-full-access"},persistExtendedHistory:!0,...this.options.hidden?{threadSource:"subagent"}:{},...t?{model:t}:{}};let d;try{d=await this.sendRpc("thread/resume",{...a,excludeTurns:!0})}catch(c){if(!oe(c))throw c;d=await this.sendRpc("thread/resume",a)}this.agentSessionId=d.thread?.id??this.agentSessionId,this.managedPermissionConfig&&(E(d,this.managedPermissionConfig.profileId),this.managedRoomTools.bindThread(this.agentSessionId),this.managedRoomToolThreadId=this.agentSessionId);return}const r=this.options.hidden?void 0:await this.resolveCodexProjectId(),s={cwd:this.workDir,approvalPolicy:"never",...this.managedPermissionConfig?{config:this.managedPermissionConfig.threadConfig}:{sandbox:"danger-full-access"},serviceName:"Shennian",threadSource:this.options.hidden?"subagent":"user",experimentalRawEvents:!1,persistExtendedHistory:!0,...this.managedPermissionConfig?{dynamicTools:z}:{},...r?{projectId:r}:{},...t?{model:t}:{}};let i;if(this.options.hidden&&!this.managedPermissionConfig)i=await this.sendRpc("thread/start",s);else try{i=await this.sendRpc("thread/start",{...s,historyMode:"paginated"})}catch(a){throw ie(a)?new Error("\u5F53\u524D Codex CLI \u4E0D\u652F\u6301\u521B\u5EFA\u53EF\u5728 Codex Desktop \u4E2D\u7EE7\u7EED\u7684\u65B0\u4F1A\u8BDD\uFF0C\u8BF7\u624B\u52A8\u5347\u7EA7 Codex CLI \u540E\u91CD\u8BD5\u3002\u795E\u5FF5\u4E0D\u4F1A\u81EA\u52A8\u5347\u7EA7\uFF0C\u4E5F\u4E0D\u4F1A\u964D\u7EA7\u521B\u5EFA\u4E0D\u53EF\u89C1\u7684 legacy \u4F1A\u8BDD\u3002",{cause:a}):a}const n=i.thread?.id;if(!n)throw new Error("codex app-server thread/start returned no thread id");this.managedPermissionConfig&&(E(i,this.managedPermissionConfig.profileId),this.managedRoomTools.bindThread(n),this.managedRoomToolThreadId=n),this.agentSessionId=n}async buildManagedPermissionConfig(){const e=this.managedAgentPolicy;if(!e)throw new Error("managed_agent_policy_missing");const t=e.adapterPolicy.externalCapabilities.mcp?[]:H(await this.sendRpc("config/read",{cwd:e.adapterPolicy.workDir}));return J(U(e),e.adapterPolicy.workDir,{configuredMcpServerNames:t,shellSubprocessPolicy:e.environmentPolicy.shellSubprocess})}async resolveCodexProjectId(){const e=this.workDir?.trim();if(e)try{const t=[];let r;do{const c=await this.sendRpc("project/list",{limit:100,...r?{cursor:r}:{}});t.push(...c.data??[]),r=c.nextCursor}while(r);const s=de(t,e);if(s)return s;const i=p.resolve(e),n=`shennian-project-${S("sha256").update(i).digest("hex")}`,d=(await this.sendRpc("project/create",{idempotencyKey:n,name:p.basename(i)||i,roots:[{path:i}],metadata:{createdBy:"Shennian"}})).project?.id;if(!d)throw new Error("codex app-server project/create returned no project id");return d}catch(t){throw ae(t)?new Error("\u5F53\u524D Codex CLI \u4E0D\u652F\u6301\u521B\u5EFA\u53EF\u5F52\u5C5E\u5230 Codex Desktop \u9879\u76EE\u7684\u65B0\u4F1A\u8BDD\uFF0C\u8BF7\u624B\u52A8\u5347\u7EA7 Codex CLI \u540E\u91CD\u8BD5\u3002\u795E\u5FF5\u4E0D\u4F1A\u81EA\u52A8\u5347\u7EA7\uFF0C\u4E5F\u4E0D\u4F1A\u76F4\u63A5\u4FEE\u6539 Codex Desktop \u7684\u79C1\u6709\u4FA7\u680F\u7D22\u5F15\u3002",{cause:t}):t}}async startTurnWithRecovery(e,t,r,s,i){try{return await this.startTurn(e,t,r,s,i)}catch(n){if(!T(n))throw n;if(this.managedPermissionConfig){this.logManagedThreadLifecycle("rollout.missing",{threadId:e,recovery:"recreate"}),await this.killProcess(!0),this.agentSessionId=null,this.managedRoomToolThreadId=null,await this.ensureAppServer(r);const a=this.agentSessionId;if(!a)throw new Error("codex app-server did not recreate the managed thread",{cause:n});return this.logManagedThreadLifecycle("thread.recreated",{previousThreadId:e,threadId:a}),this.emitEvent({state:"start",agentSessionId:a}),await this.startFreshManagedTurnWithReadinessRetry(a,t,r,s,i)}return await this.killProcess(),await this.ensureAppServer(r),await this.startTurn(e,t,r,s,i)}}async startFreshManagedTurnWithReadinessRetry(e,t,r,s,i){const n=[0,100,300,1e3];let a;for(let d=0;d<n.length;d+=1){const c=n[d];c>0&&await new Promise(l=>setTimeout(l,c));try{const l=await this.startTurn(e,t,r,s,i);return d>0&&this.logManagedThreadLifecycle("rollout.ready",{threadId:e,attempt:d+1}),l}catch(l){if(a=l,!T(l)||d===n.length-1)throw l;this.logManagedThreadLifecycle("rollout.retry",{threadId:e,attempt:d+2,delayMs:n[d+1]})}}throw a}logManagedThreadLifecycle(e,t){console.error(`[codex.managed] ${JSON.stringify({event:e,...t})}`)}async startTurn(e,t,r,s,i){try{return await this.sendRpc("turn/start",{threadId:e,input:[le(t,i)],approvalPolicy:"never",...this.managedPermissionConfig?{}:{sandboxPolicy:{type:"dangerFullAccess"}},...r?{model:r}:{},...s?{effort:s}:{}})}catch(n){throw s&&j(n)?new Error(`Codex app-server does not accept reasoning effort "${s}" for this turn. Refresh models or upgrade Codex CLI, then retry.`,{cause:n}):n}}async interruptActiveTurn(){const e=this.agentSessionId,t=this.activeTurnId;this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),!(!e||!t||!this.process)&&await this.sendRpc("turn/interrupt",{threadId:e,turnId:t},5e3)}sendRpc(e,t,r=6e4){if(this.appServerStartupError)return Promise.reject(this.appServerStartupError);const s=this.process;if(!s?.stdin)return Promise.reject(new Error("codex app-server is not running"));const i=this.rpcSeq++,n=JSON.stringify({id:i,method:e,params:t});return new Promise((a,d)=>{const c=setTimeout(()=>{this.pendingRequests.delete(i),d(new Error(`codex app-server request timed out: ${e}`))},r);this.pendingRequests.set(i,{resolve:a,reject:d,timer:c}),s.stdin.write(`${n}
+`,l=>{l&&(clearTimeout(c),this.pendingRequests.delete(i),d(l))})})}handleAppServerMessage(e){if(e.method==="item/tool/call"&&e.id!=null){this.handleManagedRoomToolCall(e.id,e.params??{});return}if(e.id!=null){const r=typeof e.id=="number"?this.pendingRequests.get(e.id):void 0;r&&(clearTimeout(r.timer),this.pendingRequests.delete(e.id),e.error?r.reject(new Error(e.error.message||`codex app-server error ${e.error.code??""}`.trim())):r.resolve(e.result))}if(!e.method)return;const t=e.params??{};switch(e.method){case"turn/started":{const r=typeof t.turn=="object"&&t.turn!==null?t.turn:null,s=typeof r?.id=="string"?r.id:null,i=typeof t.threadId=="string"?t.threadId:"";s&&(this.activeTurnId=s,this.managedPermissionConfig&&!this.managedRoomTools.bindTurn(i,s)&&this.emitErrorIfOpen("codex_managed_room_turn_binding_failed"));break}case"thread/status/changed":{const r=typeof t.threadId=="string"?t.threadId:"";if(r&&this.agentSessionId&&r!==this.agentSessionId)break;const s=typeof t.status=="object"&&t.status!==null?t.status:null;s?.type==="active"&&this.emitEvent({state:"heartbeat",runPhase:this.mapThreadStatusToRunPhase(s)});break}case"item/agentMessage/delta":{const r=typeof t.itemId=="string"?t.itemId:"";r&&this.deltaItemIds.add(r),typeof t.delta=="string"&&this.emitText(t.delta);break}case"item/completed":this.handleAppServerCompletedItem(t);break;case"thread/tokenUsage/updated":this.handleAppServerUsage(t);break;case"turn/completed":{const r=typeof t.turn=="object"&&t.turn!==null?t.turn:null,s=typeof r?.id=="string"?r.id:null;(!this.activeTurnId||s===this.activeTurnId)&&(this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),this.emitFinalIfOpen());break}case"turn/failed":{const r=R(t);if(this.scheduleManagedAsyncRolloutRecovery(r))return;this.emitErrorIfOpen(r||"turn failed");break}case"error":{const r=R(t);if(Z(r)){this.emitTransientStatus(r);return}if(this.scheduleManagedAsyncRolloutRecovery(r))return;this.emitErrorIfOpen(r);break}}}scheduleManagedAsyncRolloutRecovery(e){if(!this.managedPermissionConfig||!this.managedTurnReplay||!T(new Error(e)))return!1;if(this.managedAsyncRecovery)return!0;if(this.managedTurnReplay.recoveryCount>=2)return!1;this.managedTurnReplay.recoveryCount+=1;const t=this.managedTurnReplay.recoveryCount;return this.logManagedThreadLifecycle("rollout.failed-async",{threadId:this.agentSessionId,recoveryCount:t}),this.managedAsyncRecovery=this.recoverManagedTurnAfterAsyncRolloutFailure().catch(r=>{const s=T(r)?"no rollout found after managed thread recovery":r instanceof Error?r.message:"managed thread recovery failed";this.emitErrorIfOpen(s)}).finally(()=>{this.managedAsyncRecovery=null}),!0}async recoverManagedTurnAfterAsyncRolloutFailure(){const e=this.managedTurnReplay,t=this.agentSessionId;if(!e||!t||this.terminalState!=="open")return;this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),await this.killProcess(!0),this.agentSessionId=null,this.managedRoomToolThreadId=null,await this.ensureAppServer(e.modelId);const r=this.agentSessionId;if(!r)throw new Error("codex app-server did not recreate the managed thread");this.logManagedThreadLifecycle("thread.recreated-async",{previousThreadId:t,threadId:r,recoveryCount:e.recoveryCount}),this.emitEvent({state:"start",agentSessionId:r});const s=await this.startFreshManagedTurnWithReadinessRetry(r,e.text,e.modelId,e.reasoningEffort,e.attachments);if(this.activeTurnId=s.turn?.id??null,this.activeTurnId&&!this.managedRoomTools.bindTurn(r,this.activeTurnId))throw new Error("codex_managed_room_turn_binding_failed")}async handleManagedRoomToolCall(e,t){const r=await this.managedRoomTools.execute(t);if(this.writeAppServerResponse(e,r),r.success&&t.tool==="shennian_room_send"){const s=typeof t.arguments=="object"&&t.arguments!==null?t.arguments:null,i=typeof s?.text=="string"?s.text.trim():"";i&&this.emitText(i,"block")}}writeAppServerResponse(e,t){const r=this.process;r?.stdin&&r.stdin.write(`${JSON.stringify({id:e,result:t})}
+`)}mapThreadStatusToRunPhase(e){const t=e?.type==="active"&&Array.isArray(e.activeFlags)?e.activeFlags:[];return t.includes("waitingOnApproval")?"waiting_approval":t.includes("waitingOnUserInput")?"waiting_user_input":"thinking"}handleAppServerNonJsonStdout(e){const t=se(e);ee(t)&&this.failAppServerStartup(new Error("Codex \u672A\u767B\u5F55\u3002\u8BF7\u5148\u5728\u8FD9\u53F0\u7535\u8111\u7684\u7EC8\u7AEF\u8FD0\u884C `codex`\uFF0C\u6309\u63D0\u793A\u5B8C\u6210 ChatGPT \u767B\u5F55\u6216\u914D\u7F6E API key\uFF0C\u7136\u540E\u518D\u56DE\u5230\u795E\u5FF5\u53D1\u9001\u6D88\u606F\u3002"))}failAppServerStartup(e){this.appServerStartupError||(this.appServerStartupError=e,this.rejectAllPending(e),this.process?.kill("SIGTERM"))}handleAppServerCompletedItem(e){const t=typeof e.item=="object"&&e.item!==null?e.item:null;if(!(!t||typeof t.type!="string")&&!Q(t))switch(t.type){case"agentMessage":{const r=typeof t.id=="string"?t.id:"";if(r&&this.deltaItemIds.has(r))return;typeof t.text=="string"&&this.emitText(t.text,"block");break}case"commandExecution":{const r=typeof t.command=="string"?t.command:"",s=typeof t.aggregatedOutput=="string"?t.aggregatedOutput:"";r&&this.emitEvent({state:"tool-call",name:"command_execution",args:{command:r}}),this.emitEvent({state:"tool-result",name:"command_execution",result:[s,t.exitCode!=null?`
+(exit ${t.exitCode})`:""].join("").trim()});break}case"mcpToolCall":case"dynamicToolCall":{const r=typeof t.tool=="string"?t.tool:t.type;if(y(r))return;const s=typeof t.arguments=="object"&&t.arguments!==null?t.arguments:{};this.emitEvent({state:"tool-call",name:r,args:s}),this.emitEvent({state:"tool-result",name:r,result:k(t.error??t.result??t.contentItems??"")});break}case"fileChange":break;case"approvalRequest":case"approval_request":case"permissionRequest":case"permission_request":case"userInputRequired":case"user_input_required":{this.emitApprovalPending(t);break}}}handleAppServerUsage(e){const t=typeof e.tokenUsage=="object"&&e.tokenUsage!==null?e.tokenUsage:null,r=typeof t?.last=="object"&&t.last!==null?t.last:null,s=typeof t?.total=="object"&&t.total!==null?t.total:null,i=r??s;if(!i)return;const n=typeof i.inputTokens=="number"?i.inputTokens:void 0,a=typeof i.outputTokens=="number"?i.outputTokens:void 0;(n!=null||a!=null)&&(this.pendingUsage={inputTokens:n??0,outputTokens:a??0})}handleCodexItemLine(e){const t=e.item;if(t?.type&&!Y(t))switch(t.type){case"agent_message":case"reasoning":{e.type==="item.completed"&&t.text&&this.emitText(t.text,"block");break}case"command_execution":{if(e.type==="item.started"&&t.command&&this.emitEvent({state:"tool-call",name:"command_execution",args:{command:t.command}}),e.type==="item.completed"){const r=[t.aggregated_output??"",t.exit_code!=null?`
+(exit ${t.exit_code})`:""];this.emitEvent({state:"tool-result",name:"command_execution",result:r.join("").trim()||String(t.status??"")})}break}case"mcp_tool_call":{if(t.tool&&y(t.tool))return;if(e.type==="item.started"&&this.emitEvent({state:"tool-call",name:t.tool??"mcp_tool",args:{server:t.server,...t.arguments&&typeof t.arguments=="object"?t.arguments:{}}}),e.type==="item.completed"){const r=t.error&&typeof t.error=="object"?t.error.message:void 0;this.emitEvent({state:"tool-result",name:t.tool??"mcp_tool",result:r??k(t.result)})}break}case"file_change":break;case"web_search":{e.type==="item.completed"&&t.query&&this.emitText(`[web_search] ${t.query}`,"block");break}case"todo_list":{if(e.type==="item.completed"&&t.items?.length){const r=t.items.map(s=>`- [${s.completed?"x":" "}] ${s.text}`).join(`
+`);this.emitText(r,"block")}break}case"approval_request":case"approvalRequest":case"permission_request":case"permissionRequest":case"user_input_required":case"userInputRequired":{(e.type==="item.started"||e.type==="item.completed")&&this.emitApprovalPending(t);break}case"error":{e.type==="item.completed"&&t.message&&this.emitEvent({state:"error",message:t.message});break}default:break}}handleStreamEvent(e){const t=e.type??e.event;switch(t?.startsWith("item.")&&this.handleCodexItemLine(e),t){case"turn.completed":{const s=e.usage;if(s){const i=s.input_tokens??s.prompt_tokens,n=s.output_tokens??s.completion_tokens;(i!=null||n!=null)&&(this.pendingUsage={inputTokens:i??0,outputTokens:n??0})}this.emitFinalIfOpen();return}case"turn.failed":{const s=typeof e.error=="object"&&e.error?.message?e.error.message:typeof e.error=="string"?e.error:"turn failed";this.emitErrorIfOpen(s);return}case"error":{const s=typeof e.message=="string"?e.message:"";if(s.includes("Reconnecting"))return;this.emitErrorIfOpen(s||(typeof e.error=="string"?e.error:"stream error"));return}case"thread.started":{const s=e.thread_id??e.session_id??e.id;typeof s=="string"&&s&&(this.agentSessionId=s,this.emitEvent({state:"start",agentSessionId:this.agentSessionId}));return}case"turn.started":return}if(t?.startsWith("item."))return;switch(e.type??e.event){case"message":case"text":case"content":{const s=e.content??e.text;s&&this.emitText(s);break}case"function_call":case"tool_call":{if(this.isApprovalLikeName(e.name)){this.emitApprovalPending(e);break}if(e.name&&y(e.name))return;this.emitEvent({state:"tool-call",name:e.name,args:e.arguments??e.input});break}case"function_call_output":case"tool_result":{if(e.name&&y(e.name))return;this.emitEvent({state:"tool-result",name:e.name,result:e.output??e.result});break}case"approval_request":case"approvalRequest":case"permission_request":case"permissionRequest":case"user_input_required":case"userInputRequired":{this.emitApprovalPending(e);break}case"error":break;case"done":case"completed":{e.usage&&(this.pendingUsage={inputTokens:e.usage.prompt_tokens??e.usage.input_tokens??0,outputTokens:e.usage.completion_tokens??e.usage.output_tokens??0}),this.emitFinalIfOpen();break}}}emitEvent(e){if(this.terminalState!=="open"&&e.state!=="final"&&e.state!=="error"&&e.state!=="aborted")return;const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}isApprovalLikeName(e){return typeof e!="string"?!1:/approval|permission|confirm|user[_-]?input|request[_-]?user/i.test(e)}emitApprovalPending(e){const t=typeof e.command=="string"?e.command:"",r=typeof e.title=="string"&&e.title.trim()?e.title:"\u9700\u8981\u7528\u6237\u786E\u8BA4",s=typeof e.prompt=="string"?e.prompt:typeof e.reason=="string"?e.reason:typeof e.message=="string"?e.message:t?`Codex \u8BF7\u6C42\u6267\u884C\u547D\u4EE4\uFF1A${t}`:"Codex \u6B63\u5728\u7B49\u5F85\u7528\u6237\u786E\u8BA4\u540E\u7EE7\u7EED\u3002";this.emitEvent({state:"approval-pending",approval:{title:r,content:s,source:"codex",actionHint:"\u5F53\u524D\u795E\u5FF5\u6682\u4E0D\u652F\u6301\u8FDC\u7A0B\u786E\u8BA4\uFF0C\u8BF7\u56DE\u5230\u8FD0\u884C Codex \u7684\u7535\u8111/\u7EC8\u7AEF\u5B8C\u6210\u786E\u8BA4\u3002"}})}async killProcess(e=!1){const t=this.process;if(this.appServerReady=null,this.activeTurnId=null,this.managedRoomTools.reset(),e||this.clearConfiguredManagedRoomContext(),!t){this.rejectAllPending(new Error("codex app-server stopped"));return}this.process=null,this.clearForceCloseTimer(),t.kill("SIGTERM"),await new Promise(r=>{t.on("close",r),setTimeout(()=>{t.kill("SIGKILL"),r()},3e3)}),this.rejectAllPending(new Error("codex app-server stopped"))}rejectAllPending(e){for(const[t,r]of this.pendingRequests.entries())clearTimeout(r.timer),r.reject(e),this.pendingRequests.delete(t)}handleProcessClose(e,t){const r=_(t);if(e!==0&&e!==null){const s=r||`codex exited with code ${e}`;this.emitErrorIfOpen(s)}else te(r)?this.emitErrorIfOpen(r):this.emitFinalIfOpen();this.pendingUsage=void 0}emitFinalIfOpen(){this.terminalState==="open"&&(this.terminalState="final",this.managedTurnReplay=null,this.managedRoomTools.deactivateTurn(),this.clearConfiguredManagedRoomContext(),this.emitEvent({state:"final",usage:this.pendingUsage,agentSessionId:this.agentSessionId??void 0}),this.killProcess().catch(()=>{}))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.managedTurnReplay=null,this.managedRoomTools.deactivateTurn(),this.clearConfiguredManagedRoomContext(),this.emitEvent({state:"error",message:X(e)}),this.scheduleProcessClose())}resetRunState(){this.pendingUsage=void 0,this.terminalState="open",this.deltaItemIds.clear(),this.lastTransientStatus="",this.clearForceCloseTimer(),this.resetTextState()}clearConfiguredManagedRoomContext(){this.configuredManagedRoomContextToken=null,this.configuredManagedRoomExecutor=null}emitTransientStatus(e){const t=K(e);!t||t===this.lastTransientStatus||this.terminalState!=="open"||(this.lastTransientStatus=t,this.emitEvent({state:"delta",text:`${t}
+`,thinking:!0}))}resetTextState(){this.hasEmittedText=!1,this.textTail=""}emitText(e,t="delta"){if(!e)return;let r=ne(e);r&&(t==="block"&&this.hasEmittedText&&!r.startsWith(`
+`)&&(this.textTail.endsWith(`
+`)?r=`
+${r}`:this.textTail.endsWith(`
+
+`)||(r=`
+
+${r}`)),this.hasEmittedText=!0,this.textTail=(this.textTail+r).slice(-4),this.emitEvent({state:"delta",text:r}))}scheduleProcessClose(){const e=this.process;!e||this.forceCloseTimer||(this.forceCloseTimer=setTimeout(()=>{this.forceCloseTimer=null,this.process===e&&(e.kill("SIGTERM"),setTimeout(()=>{this.process===e&&e.kill("SIGKILL")},1e3))},250))}clearForceCloseTimer(){this.forceCloseTimer&&(clearTimeout(this.forceCloseTimer),this.forceCloseTimer=null)}}D("codex",()=>new ge);export{ge as CodexAdapter,me as buildCodexQueueArgs,pe as buildCodexQueuedText,P as isCodexActiveWriterError,oe as isCodexExcludeTurnsUnsupportedError,ie as isCodexPaginatedHistoryUnsupportedError,ae as isCodexProjectApiUnsupportedError,be as isCodexUnsupportedEffortError,qe as isMissingCodexRolloutError,De as normalizeCodexModelId,Le as normalizeCodexReasoningEffort,de as selectCodexProjectIdForWorkDir};