shennian 0.4.10 → 0.4.13

package/dist/src/agents/acp/events.js

@@ -0,0 +1,3 @@
+function n(t){if(typeof t=="string")return t;try{return JSON.stringify(t)}catch{return String(t)}}function r(t){return t.type==="text"?t.text:t.type==="resource_link"?t.name||t.uri:t.type==="resource"?"text"in t.resource?t.resource.text:`[${t.resource.mimeType??"resource"}]`:`[${t.type}: ${t.mimeType}]`}function o(t){return t?.length?t.map(e=>e.type==="content"?r(e.content):e.type==="diff"?`${e.path}
+${e.newText}`:`[terminal: ${e.terminalId}]`).join(`
+`):""}function l(t,e){switch(t.sessionUpdate){case"agent_message_chunk":return[e({state:"delta",text:r(t.content)})];case"agent_thought_chunk":return[e({state:"delta",text:r(t.content),thinking:!0})];case"tool_call":return[e({state:"tool-call",toolCallId:t.toolCallId,toolStatus:"running",name:t.title,args:typeof t.rawInput=="object"&&t.rawInput!==null?t.rawInput:t.rawInput===void 0?void 0:{input:t.rawInput}})];case"tool_call_update":{if(t.status!=="completed"&&t.status!=="failed")return[];const s=o(t.content)||(t.rawOutput===void 0?t.status:n(t.rawOutput));return[e({state:"tool-result",toolCallId:t.toolCallId,toolStatus:t.status,name:t.title??t.toolCallId,result:s})]}case"usage_update":return[e({state:"notify",title:"Context usage",text:`${t.used}/${t.size}`})];case"plan":case"plan_update":return[e({state:"notify",title:"Plan updated",text:n(t)})];case"session_info_update":return t.title?[e({state:"notify",title:"Session",text:t.title})]:[];default:return[]}}export{l as mapAcpSessionUpdate};

package/dist/src/agents/acp/manifests.d.ts

@@ -0,0 +1,63 @@
+import { z } from 'zod';
+import type { AcpAgentManifest } from './types.js';
+export declare const ACP_MANIFEST_SCHEMA_ID = "https://shennian.net/schemas/acp-agent-manifest-v1.json";
+export declare const ACP_MANIFEST_DIRECTORY = "acp-agents.d";
+declare const manifestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    id: z.ZodString;
+    name: z.ZodString;
+    protocol: z.ZodLiteral<"acp">;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    homepage: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    clientCapabilities: z.ZodOptional<z.ZodObject<{
+        readTextFile: z.ZodDefault<z.ZodBoolean>;
+        writeTextFile: z.ZodDefault<z.ZodBoolean>;
+        terminal: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        terminal: boolean;
+        readTextFile: boolean;
+        writeTextFile: boolean;
+    }, {
+        terminal?: boolean | undefined;
+        readTextFile?: boolean | undefined;
+        writeTextFile?: boolean | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    id: string;
+    schemaVersion: 1;
+    name: string;
+    args: string[];
+    protocol: "acp";
+    command: string;
+    enabled: boolean;
+    homepage?: string | undefined;
+    clientCapabilities?: {
+        terminal: boolean;
+        readTextFile: boolean;
+        writeTextFile: boolean;
+    } | undefined;
+}, {
+    id: string;
+    schemaVersion: 1;
+    name: string;
+    protocol: "acp";
+    command: string;
+    args?: string[] | undefined;
+    enabled?: boolean | undefined;
+    homepage?: string | undefined;
+    clientCapabilities?: {
+        terminal?: boolean | undefined;
+        readTextFile?: boolean | undefined;
+        writeTextFile?: boolean | undefined;
+    } | undefined;
+}>;
+export type AcpManifestDocument = z.infer<typeof manifestSchema>;
+export declare function getAcpManifestDirectory(): string;
+export declare function validateAcpManifest(input: unknown): AcpManifestDocument;
+export declare function readAcpManifests(directory?: string): AcpAgentManifest[];
+export declare function writeAcpManifest(document: AcpManifestDocument, directory?: string): string;
+export declare function removeAcpManifest(id: string, directory?: string): boolean;
+export declare function validateAcpId(id: string): string;
+export {};

package/dist/src/agents/acp/manifests.js

@@ -0,0 +1,2 @@
+import o from"node:fs";import c from"node:path";import{z as n}from"zod";import{resolveShennianPath as u}from"../../config/index.js";const w="https://shennian.net/schemas/acp-agent-manifest-v1.json",h="acp-agents.d",S=64*1024,f=n.object({schemaVersion:n.literal(1),id:n.string().regex(/^[a-z0-9][a-z0-9._-]{0,63}$/),name:n.string().trim().min(1).max(80),protocol:n.literal("acp"),command:n.string().trim().min(1).max(4096),args:n.array(n.string().max(4096)).max(64).default([]),enabled:n.boolean().default(!0),homepage:n.string().url().refine(t=>new URL(t).protocol==="https:").optional(),clientCapabilities:n.object({readTextFile:n.boolean().default(!1),writeTextFile:n.boolean().default(!1),terminal:n.boolean().default(!1)}).strict().optional()}).strict();function m(){return u(h)}function d(t){const e=f.parse(t);if(e.command.includes("\0")||e.args.some(i=>i.includes("\0")))throw new Error("ACP manifest command contains NUL");if(!c.isAbsolute(e.command)&&c.basename(e.command)!==e.command)throw new Error("ACP manifest command must be absolute or a plain command name");return e}function C(t=m()){let e;try{e=o.readdirSync(t).filter(s=>s.endsWith(".json")).sort()}catch{return[]}const i=[],r=new Set;for(const s of e){const l=c.join(t,s);try{const p=o.statSync(l);if(!p.isFile()||p.size>S)continue;const a=d(JSON.parse(o.readFileSync(l,"utf8")));if(!a.enabled||r.has(a.id))continue;r.add(a.id),i.push({id:a.id,name:a.name,homepage:a.homepage,source:"local",launch:{command:a.command,args:a.args},...a.clientCapabilities?{clientCapabilities:a.clientCapabilities}:{}})}catch{}}return i}function M(t,e=m()){const i=d(t);o.mkdirSync(e,{recursive:!0,mode:448}),process.platform!=="win32"&&o.chmodSync(e,448);const r=c.join(e,`${i.id}.json`),s=`${r}.tmp-${process.pid}`;try{o.writeFileSync(s,`${JSON.stringify(i,null,2)}
+`,{mode:384,flag:"wx"}),o.renameSync(s,r),process.platform!=="win32"&&o.chmodSync(r,384)}finally{try{o.unlinkSync(s)}catch{}}return r}function j(t,e=m()){const i=g(t);try{return o.unlinkSync(c.join(e,`${i}.json`)),!0}catch{return!1}}function g(t){return f.shape.id.parse(t)}export{h as ACP_MANIFEST_DIRECTORY,w as ACP_MANIFEST_SCHEMA_ID,m as getAcpManifestDirectory,C as readAcpManifests,j as removeAcpManifest,g as validateAcpId,d as validateAcpManifest,M as writeAcpManifest};

package/dist/src/agents/acp/metrics.d.ts

@@ -0,0 +1,24 @@
+export declare function recordAcpScan(input: {
+    durationMs: number;
+    candidateCount: number;
+    installedCount: number;
+    cacheHits: number;
+    handshakeFailures: number;
+    handshakeFailuresByKind: Record<string, number>;
+}): void;
+export declare function recordAcpAuthFailure(): void;
+export declare function recordAcpImportResult(ok: boolean): void;
+export declare function getAcpLocalMetrics(): {
+    handshakeFailuresByKind: {
+        [x: string]: number;
+    };
+    scans: number;
+    lastScanDurationMs: number;
+    lastCandidateCount: number;
+    lastInstalledCount: number;
+    cacheHits: number;
+    handshakeFailures: number;
+    authFailures: number;
+    importSuccess: number;
+    importFailure: number;
+};

package/dist/src/agents/acp/metrics.js

@@ -0,0 +1 @@
+const a={scans:0,lastScanDurationMs:0,lastCandidateCount:0,lastInstalledCount:0,cacheHits:0,handshakeFailures:0,handshakeFailuresByKind:{},authFailures:0,importSuccess:0,importFailure:0};function n(e){a.scans+=1,a.lastScanDurationMs=Math.max(0,Math.round(e.durationMs)),a.lastCandidateCount=e.candidateCount,a.lastInstalledCount=e.installedCount,a.cacheHits+=e.cacheHits,a.handshakeFailures+=e.handshakeFailures;for(const[s,t]of Object.entries(e.handshakeFailuresByKind))a.handshakeFailuresByKind[s]=(a.handshakeFailuresByKind[s]??0)+t}function r(){a.authFailures+=1}function i(e){e?a.importSuccess+=1:a.importFailure+=1}function c(){return{...a,handshakeFailuresByKind:{...a.handshakeFailuresByKind}}}export{c as getAcpLocalMetrics,r as recordAcpAuthFailure,i as recordAcpImportResult,n as recordAcpScan};

package/dist/src/agents/acp/package-commands.d.ts

@@ -0,0 +1,4 @@
+export declare function deriveInstalledPackageCommands(hints?: {
+    npm?: string;
+    uv?: string;
+}): string[];

package/dist/src/agents/acp/package-commands.js

@@ -0,0 +1 @@
+import i from"node:fs";import d from"node:os";import r from"node:path";import{spawnSync as h}from"node:child_process";const p=/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/i,m=/^[a-zA-Z0-9._-]{1,128}$/;let u;function w(t){return[...new Set([...S(t?.npm),..._(t?.uv)])]}function S(t){if(!t||!p.test(t))return[];if(u??=j(),!u)return[];try{const o=r.join(u,...t.split("/"),"package.json"),s=i.statSync(o);if(!s.isFile()||s.size>256*1024)return[];const n=JSON.parse(i.readFileSync(o,"utf8")),e=t.split("/").at(-1)??"";return(typeof n.bin=="string"?[e]:Object.keys(n.bin??{})).filter(c=>m.test(c))}catch{return[]}}function j(){const t=h("npm",["root","--global"],{encoding:"utf8",stdio:["ignore","pipe","ignore"],timeout:3e3,windowsHide:!0}),o=t.status===0?t.stdout.trim():"";return o&&r.isAbsolute(o)?o:null}function _(t){if(!t||!p.test(t))return[];const o=t.toLowerCase().replace(/[-_.]+/g,"-"),s=[r.join(d.homedir(),".local","share","uv","tools",o),r.join(d.homedir(),".local","share","uv","tools",t)],n=[];for(const e of s)for(const l of b(e))try{const f=i.readFileSync(l,"utf8").match(/\[console_scripts\]([\s\S]*?)(?:\n\[|$)/)?.[1]??"";for(const y of f.split(/\r?\n/)){const a=y.split("=",1)[0]?.trim()??"";m.test(a)&&n.push(a)}}catch{}return n}function b(t){const o=[];let s=[];try{s=i.readdirSync(r.join(t,"lib")).filter(n=>n.startsWith("python")).slice(0,8)}catch{}for(const n of s){const e=r.join(t,"lib",n,"site-packages");let l=[];try{l=i.readdirSync(e).filter(c=>c.endsWith(".dist-info")).slice(0,32)}catch{}for(const c of l){const f=r.join(e,c,"entry_points.txt");try{i.statSync(f).isFile()&&i.statSync(f).size<=64*1024&&o.push(f)}catch{}}}return o}export{w as deriveInstalledPackageCommands};

package/dist/src/agents/acp/process-client.d.ts

@@ -0,0 +1,39 @@
+import * as acp from '@agentclientprotocol/sdk';
+import type { InitializeResponse, RequestPermissionRequest, RequestPermissionResponse, SessionNotification } from '@agentclientprotocol/sdk';
+import type { AcpLaunchSpec } from './types.js';
+export type AcpProcessClientHandlers = {
+    onSessionUpdate(params: SessionNotification): void | Promise<void>;
+    onPermission(params: RequestPermissionRequest): Promise<RequestPermissionResponse>;
+};
+export declare class AcpProcessClient {
+    private readonly launch;
+    private readonly handlers;
+    private readonly environment;
+    private readonly clientCapabilities;
+    private readonly timeouts;
+    private process;
+    private connection;
+    private initialization;
+    private stderr;
+    private clientServices;
+    constructor(launch: AcpLaunchSpec, handlers: AcpProcessClientHandlers, environment?: NodeJS.ProcessEnv, clientCapabilities?: {
+        readTextFile?: boolean;
+        writeTextFile?: boolean;
+        terminal?: boolean;
+        terminalAuth?: boolean;
+    }, timeouts?: {
+        initializeMs?: number;
+        sessionMs?: number;
+        authMs?: number;
+    });
+    get capabilities(): NonNullable<InitializeResponse['agentCapabilities']>;
+    get initializeResponse(): InitializeResponse | null;
+    listSessions(cwd?: string, cursor?: string | null): Promise<acp.ListSessionsResponse>;
+    authenticate(methodId: string): Promise<void>;
+    logout(): Promise<void>;
+    closeSession(sessionId: string): Promise<void>;
+    deleteSession(sessionId: string): Promise<void>;
+    get agent(): acp.ClientContext;
+    start(cwd: string): Promise<InitializeResponse>;
+    close(): Promise<void>;
+}

package/dist/src/agents/acp/process-client.js

@@ -0,0 +1 @@
+import{spawn as m}from"node:child_process";import{Readable as d,Transform as p,Writable as S}from"node:stream";import*as n from"@agentclientprotocol/sdk";import{AcpClientServices as f}from"./client-services.js";import{terminateProcessTree as h}from"./process-tree.js";class _{launch;handlers;environment;clientCapabilities;timeouts;process=null;connection=null;initialization=null;stderr="";clientServices=null;constructor(i,t,s=process.env,r={},o={}){this.launch=i,this.handlers=t,this.environment=s,this.clientCapabilities=r,this.timeouts=o}get capabilities(){return this.initialization?.agentCapabilities??{}}get initializeResponse(){return this.initialization}async listSessions(i,t){return a(this.agent.request(n.methods.agent.session.list,{cwd:i,cursor:t}),this.timeouts.sessionMs??8e3,"ACP session list timed out")}async authenticate(i){await a(this.agent.request(n.methods.agent.authenticate,{methodId:i}),this.timeouts.authMs??12e4,"ACP authentication timed out")}async logout(){await a(this.agent.request(n.methods.agent.logout,{}),8e3,"ACP logout timed out")}async closeSession(i){await a(this.agent.request(n.methods.agent.session.close,{sessionId:i}),8e3,"ACP session close timed out")}async deleteSession(i){await a(this.agent.request(n.methods.agent.session.delete,{sessionId:i}),8e3,"ACP session delete timed out")}get agent(){if(!this.connection)throw new Error("ACP process is not connected");return this.connection.agent}async start(i){if(this.connection)return this.initialization;const t=m(this.launch.command,this.launch.args??[],{cwd:i,env:{...this.environment,...this.launch.env},stdio:["pipe","pipe","pipe"],detached:process.platform!=="win32",windowsHide:!0});this.process=t,t.stderr.on("data",e=>{this.stderr.length<16384&&(this.stderr+=e.toString())}),this.clientServices=Object.values(this.clientCapabilities).some(Boolean)?new f(i,this.clientCapabilities):null;let s=n.client({name:"Shennian"}).onRequest(n.methods.client.session.requestPermission,({params:e})=>this.handlers.onPermission(e)).onNotification(n.methods.client.session.update,({params:e})=>this.handlers.onSessionUpdate(e));this.clientServices?.enabled.readTextFile&&(s=s.onRequest(n.methods.client.fs.readTextFile,({params:e})=>this.clientServices.readTextFile(e))),this.clientServices?.enabled.writeTextFile&&(s=s.onRequest(n.methods.client.fs.writeTextFile,({params:e})=>this.clientServices.writeTextFile(e))),this.clientServices?.enabled.terminal&&(s=s.onRequest(n.methods.client.terminal.create,({params:e})=>this.clientServices.createTerminal(e)).onRequest(n.methods.client.terminal.output,({params:e})=>this.clientServices.terminalOutput(e)).onRequest(n.methods.client.terminal.waitForExit,({params:e})=>this.clientServices.waitForTerminalExit(e)).onRequest(n.methods.client.terminal.kill,({params:e})=>this.clientServices.killTerminal(e)).onRequest(n.methods.client.terminal.release,({params:e})=>this.clientServices.releaseTerminal(e)));const r=new p({transform:C(()=>h(t,!0))});t.stdout.pipe(r);const o=n.ndJsonStream(S.toWeb(t.stdin),d.toWeb(r)),l=s.connect(o);this.connection=l,t.once("error",e=>l.close(e)),t.once("exit",(e,u)=>{l.close(new Error(`ACP agent exited (${e??u??"unknown"})`))});try{const e=await a(l.agent.request(n.methods.agent.initialize,{protocolVersion:n.PROTOCOL_VERSION,clientCapabilities:{...this.clientServices?.capabilities??{},...this.clientCapabilities.terminalAuth?{auth:{terminal:!0}}:{}},clientInfo:{name:"Shennian",version:"0.4.13"}}),this.timeouts.initializeMs??8e3,"ACP initialize timed out");if(e.protocolVersion!==n.PROTOCOL_VERSION)throw new Error(`Unsupported ACP protocol version ${e.protocolVersion}`);return this.initialization=e,e}catch(e){throw await this.close(),e}}async close(){const i=this.connection,t=this.process;this.connection=null,this.process=null,this.initialization=null,this.clientServices?.close(),this.clientServices=null,i?.close(),t&&t.exitCode===null&&t.signalCode===null&&(h(t),setTimeout(()=>h(t,!0),2e3).unref?.())}}const g=4*1024*1024,w=64*1024*1024;function C(c){let i=0,t=0;return function(s,r,o){i+=s.length;for(const l of s)t=l===10?0:t+1;if(i>w||t>g){c(),o(new Error("ACP output exceeded safety limit"));return}o(null,s)}}async function a(c,i,t){let s;try{return await Promise.race([c,new Promise((r,o)=>{s=setTimeout(()=>o(new Error(t)),i)})])}finally{s&&clearTimeout(s)}}export{_ as AcpProcessClient};

package/dist/src/agents/acp/process-tree.d.ts

@@ -0,0 +1,2 @@
+import { type ChildProcess } from 'node:child_process';
+export declare function terminateProcessTree(child: ChildProcess, force?: boolean): void;

package/dist/src/agents/acp/process-tree.js

@@ -0,0 +1 @@
+import{spawn as i}from"node:child_process";function s(e,r=!1){if(!(!e.pid||e.exitCode!==null||e.signalCode!==null)){if(process.platform==="win32"){i("taskkill",["/PID",String(e.pid),"/T",...r?["/F"]:[]],{stdio:"ignore",windowsHide:!0}).unref();return}try{process.kill(-e.pid,r?"SIGKILL":"SIGTERM")}catch{e.kill(r?"SIGKILL":"SIGTERM")}}}export{s as terminateProcessTree};

package/dist/src/agents/acp/types.d.ts

@@ -0,0 +1,31 @@
+import type { AcpAgentType } from '@shennian/wire';
+import type { AgentCapabilities, AuthMethod, Implementation } from '@agentclientprotocol/sdk';
+export type AcpLaunchSpec = {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+};
+export type AcpAgentManifest = {
+    id: string;
+    name: string;
+    launch: AcpLaunchSpec;
+    /** Original command before platform shim wrapping; used to append terminal-auth args safely. */
+    authLaunch?: AcpLaunchSpec;
+    homepage?: string;
+    source?: 'registry' | 'local';
+    packageHints?: {
+        npm?: string;
+        uv?: string;
+    };
+    clientCapabilities?: {
+        readTextFile?: boolean;
+        writeTextFile?: boolean;
+        terminal?: boolean;
+    };
+};
+export type AcpInitialization = {
+    agentInfo?: Implementation | null;
+    authMethods: AuthMethod[];
+    capabilities: AgentCapabilities;
+};
+export declare function acpAgentType(id: string): AcpAgentType;

package/dist/src/agents/acp/types.js

@@ -0,0 +1 @@
+function n(e){return`acp:${e}`}export{n as acpAgentType};

package/dist/src/agents/acp/watcher.d.ts

@@ -0,0 +1,22 @@
+export declare class AcpDiscoveryWatcher {
+    private readonly refresh;
+    private readonly options;
+    private watcher;
+    private debounceTimer;
+    private intervalTimer;
+    private catalogTimer;
+    private running;
+    private rerun;
+    constructor(refresh: () => Promise<void>, options?: {
+        directory?: string;
+        intervalMs?: number;
+        catalogIntervalMs?: number;
+        debounceMs?: number;
+    });
+    start(): void;
+    stop(): void;
+    /** Public so platform watcher adapters and deterministic tests share one debounce path. */
+    notifyManifestChanged(): void;
+    private schedule;
+    private trigger;
+}

package/dist/src/agents/acp/watcher.js

@@ -0,0 +1 @@
+import t from"node:fs";import{getAcpManifestDirectory as r}from"./manifests.js";const s=720*60*1e3,n=360*60*1e3,h=500;class a{refresh;options;watcher=null;debounceTimer=null;intervalTimer=null;catalogTimer=null;running=null;rerun=!1;constructor(e,i={}){this.refresh=e,this.options=i}start(){if(this.watcher||this.intervalTimer)return;const e=this.options.directory??r();t.mkdirSync(e,{recursive:!0,mode:448}),process.platform!=="win32"&&t.chmodSync(e,448),this.watcher=t.watch(e,{persistent:!1},()=>this.notifyManifestChanged()),this.watcher.on("error",()=>{this.watcher?.close(),this.watcher=null}),this.intervalTimer=setInterval(()=>this.trigger(),this.options.intervalMs??s),this.intervalTimer.unref?.(),this.catalogTimer=setInterval(()=>this.trigger(),this.options.catalogIntervalMs??n),this.catalogTimer.unref?.()}stop(){this.watcher?.close(),this.watcher=null,this.debounceTimer&&clearTimeout(this.debounceTimer),this.intervalTimer&&clearInterval(this.intervalTimer),this.catalogTimer&&clearInterval(this.catalogTimer),this.debounceTimer=null,this.intervalTimer=null,this.catalogTimer=null}notifyManifestChanged(){this.schedule()}schedule(){this.debounceTimer&&clearTimeout(this.debounceTimer),this.debounceTimer=setTimeout(()=>{this.debounceTimer=null,this.trigger()},this.options.debounceMs??h),this.debounceTimer.unref?.()}trigger(){if(this.running){this.rerun=!0;return}this.running=this.refresh().catch(()=>{}).finally(()=>{this.running=null,this.rerun&&(this.rerun=!1,this.trigger())})}}export{a as AcpDiscoveryWatcher};

package/dist/src/agents/adapter.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from 'node:events';
-import type { AgentType, ChatAttachmentMeta, ExternalChannelSessionStatus, SessionRunPhase } from '@shennian/wire';
+import type { AgentType, ChatAttachmentMeta, ExternalChannelSessionStatus, SessionRunPhase, ModelInfo } from '@shennian/wire';
 import type { CompiledManagedAgentPolicy } from '../security/managed-agent-policy.js';
 import type { ManagedRoomExecutor } from '../room/managed-room-ipc.js';
 export type AgentEvent = {
@@ -10,16 +10,31 @@ export type AgentEvent = {
     thinking?: boolean;
     runPhase?: SessionRunPhase;
     name?: string;
+    toolCallId?: string;
+    toolStatus?: 'running' | 'completed' | 'failed';
     args?: Record<string, unknown>;
     result?: string;
     durationMs?: number;
     message?: string;
+    errorCode?: 'acp_auth_required';
     approval?: {
         title?: string;
         content?: string;
         source?: string;
         actionHint?: string;
     };
+    permission?: {
+        id: string;
+        sessionId?: string;
+        agentSessionId?: string;
+        runId?: string;
+        toolCallId: string;
+        options: Array<{
+            id: string;
+            name: string;
+            kind: 'allow_once' | 'allow_always' | 'reject_once' | 'reject_always';
+        }>;
+    };
     usage?: {
         inputTokens: number;
         outputTokens: number;
@@ -33,7 +48,23 @@ export type AgentSendResult = {
     queuedSubmissionId?: string;
 };
 export type AgentSendContext = {
-    source: 'room_activation';
+    source: 'room_activation' | 'upgrade_recovery';
+    /** Marks internal recovery input; it must never be persisted as user-authored text. */
+    recovery?: 'upgrade';
+};
+export type ImportedAgentMessage = {
+    /** Stable within repeated imports of the same provider session. */
+    sourceId: string;
+    role: 'user' | 'agent';
+    payload: string;
+};
+export type AgentSessionOptions = {
+    models: ModelInfo[];
+    modes: Array<{
+        id: string;
+        name: string;
+        description?: string;
+    }>;
 };
 export type AgentStartOptions = {
     /** Test-only callers can disable provider-native history persistence. */
@@ -41,12 +72,56 @@ export type AgentStartOptions = {
     /** Keep an internal orchestration session out of the provider's user-facing task list. */
     nativeSessionVisibility?: 'user' | 'internal';
 };
+export type AgentRecoveryCapabilities = {
+    inspectTerminal: boolean;
+    reattachRun: boolean;
+    resumeRun: boolean;
+    resumeSession: boolean;
+};
+export type AgentRecoveryInput = {
+    sessionId: string;
+    shennianRunId: string;
+    workDir: string;
+    agentSessionId: string | null;
+    modelId?: string | null;
+    reasoningEffort?: string | null;
+    providerRunId: string | null;
+    lastObservedEventSeq: number;
+    continueDispatchState: 'none' | 'intent' | 'accepted';
+    systemPrompt?: string | null;
+    sendContext?: AgentSendContext;
+    /** Durable provider-level de-duplication fence, invoked immediately before Continue. */
+    beforeContinueDispatch?: () => void;
+};
+export type AgentRecoveryInspection = {
+    state: 'terminal' | 'active' | 'interrupted' | 'unknown';
+    providerRunId?: string | null;
+    runPhase?: SessionRunPhase | null;
+};
+export type AgentRecoveryResult = {
+    result: 'terminal_reconciled';
+} | {
+    result: 'reattached';
+} | {
+    result: 'resumed';
+} | {
+    result: 'continued';
+} | {
+    result: 'interrupted_by_upgrade';
+    reason: 'resume_unsupported' | 'missing_agent_session';
+} | {
+    result: 'recovery_failed';
+    reason: 'continue_dispatch_outcome_unknown' | 'provider_session_missing' | 'provider_identity_mismatch' | 'authentication_required' | 'permission_context_unavailable' | 'provider_error';
+    message?: string;
+};
 export interface AgentAdapterEvents {
     agentEvent: [event: AgentEvent];
     error: [error: Error];
 }
 export declare abstract class AgentAdapter extends EventEmitter<AgentAdapterEvents> {
     abstract readonly type: AgentType;
+    /** Explicit fail-closed default; resumable adapters must opt in. */
+    get recoveryCapabilities(): AgentRecoveryCapabilities;
     configure?(options: {
         sessionId?: string;
         externalChannel?: ExternalChannelSessionStatus | null;
@@ -62,11 +137,30 @@ export declare abstract class AgentAdapter extends EventEmitter<AgentAdapterEven
         canStop?: boolean;
     }>;
     setTitle?(agentSessionId: string, title: string, workDir?: string): Promise<void>;
+    respondToPermission?(permissionId: string, optionId: string): Promise<void>;
+    authenticate?(methodId: string): Promise<void>;
+    hasPendingAuthenticationRetry?(): boolean;
+    resumeAfterExternalAuthentication?(): Promise<void>;
+    getSessionOptions?(): AgentSessionOptions;
+    logout?(): Promise<void>;
+    listExternalSessions?(options?: {
+        cwd?: string;
+    }): Promise<import('@shennian/wire').AcpExternalSessionInfo[]>;
+    loadExternalSession?(agentSessionId: string): Promise<ImportedAgentMessage[]>;
+    closeExternalSession?(agentSessionId: string): Promise<void>;
+    deleteExternalSession?(agentSessionId: string): Promise<void>;
     abstract start(sessionId: string, workDir: string, agentSessionId?: string | null, options?: AgentStartOptions): Promise<void>;
     prepareSend?(text: string, modelId?: string, reasoningEffort?: string, attachments?: ChatAttachmentMeta[], systemPrompt?: string | null, context?: AgentSendContext): Promise<void>;
     abstract send(text: string, modelId?: string, reasoningEffort?: string, attachments?: ChatAttachmentMeta[], systemPrompt?: string | null, context?: AgentSendContext): Promise<void | AgentSendResult>;
     abstract resume(agentSessionId: string): Promise<void>;
     abstract stop(): Promise<void>;
+    inspectInterruptedRun(input: AgentRecoveryInput): Promise<AgentRecoveryInspection>;
+    /**
+     * The coordinator starts this adapter with the exact persisted native
+     * Session before calling recoverInterruptedRun. No original prompt/history
+     * is accepted by this API, so a recovery cannot accidentally replay it.
+     */
+    recoverInterruptedRun(input: AgentRecoveryInput): Promise<AgentRecoveryResult>;
 }
 export declare function registerAgent(type: AgentType, factory: () => AgentAdapter): void;
 export declare function unregisterAgent(type: AgentType): void;

package/dist/src/agents/adapter.js

@@ -1 +1 @@
-import{EventEmitter as r}from"node:events";class s extends r{}const n=new Map;function g(e,t){n.set(e,t)}function i(e){n.delete(e)}function c(e){const t=n.get(e);return t?t():null}function p(){return[...n.keys()]}export{s as AgentAdapter,c as createAgent,p as getRegisteredAgents,g as registerAgent,i as unregisterAgent};
+import{EventEmitter as o}from"node:events";import{RECOVERY_CONTINUE_TEXT as u}from"../session/run-recovery/schema.js";class l extends o{get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!1}}async inspectInterruptedRun(e){if(!this.getStatus)return{state:"interrupted",providerRunId:e.providerRunId};const r=await this.getStatus().catch(()=>null);return r?.active?{state:"active",providerRunId:r.runId??e.providerRunId,runPhase:r.runPhase}:{state:"interrupted",providerRunId:e.providerRunId}}async recoverInterruptedRun(e){const r=await this.inspectInterruptedRun(e);if(r.state==="terminal"&&this.recoveryCapabilities.inspectTerminal)return{result:"terminal_reconciled"};if(r.state==="active"&&this.recoveryCapabilities.reattachRun)return{result:"reattached"};if(!e.agentSessionId)return{result:"interrupted_by_upgrade",reason:"missing_agent_session"};if(!this.recoveryCapabilities.resumeSession)return{result:"interrupted_by_upgrade",reason:"resume_unsupported"};if(e.continueDispatchState!=="none")return{result:"recovery_failed",reason:"continue_dispatch_outcome_unknown"};try{return e.beforeContinueDispatch?.(),await this.send(u,e.modelId??void 0,e.reasoningEffort??void 0,void 0,e.systemPrompt,e.sendContext),{result:"continued"}}catch(i){const a=i instanceof Error?i.message:String(i),n=a.toLowerCase();return{result:"recovery_failed",reason:n.includes("auth")||n.includes("login")?"authentication_required":n.includes("permission")||n.includes("capability")?"permission_context_unavailable":n.includes("session")&&n.includes("not")?"provider_session_missing":"provider_error",message:a.slice(0,500)}}}}const s=new Map;function p(t,e){s.set(t,e)}function f(t){s.delete(t)}function g(t){const e=s.get(t);return e?e():null}function m(){return[...s.keys()]}export{l as AgentAdapter,g as createAgent,m as getRegisteredAgents,p as registerAgent,f as unregisterAgent};

package/dist/src/agents/claude.d.ts

@@ -9,6 +9,12 @@ export declare function supportsClaudeReasoningEffort(): boolean;
 export declare class ClaudeAdapter extends AgentAdapter {
     private readonly options;
     readonly type: "claude";
+    get recoveryCapabilities(): {
+        inspectTerminal: boolean;
+        reattachRun: boolean;
+        resumeRun: boolean;
+        resumeSession: boolean;
+    };
     private process;
     private agentSessionId;
     private sessionId;
@@ -51,3 +57,11 @@ export declare function resolveClaudeManagedInternalAccess(): {
     readPaths: string[];
     unixSockets: string[];
 };
+/**
+ * Resolve the smallest useful read boundary for the installed Shennian CLI.
+ * npm's bin entry is a symlink into dist/bin, while runtime dependencies such
+ * as commander live under the package-root node_modules directory. Allowing
+ * only the entry point or dist therefore makes every Room CLI call fail inside
+ * Claude's native sandbox.
+ */
+export declare function resolveClaudeShennianCliReadPaths(commandPath: string): string[];

package/dist/src/agents/claude.js

@@ -1,8 +1,8 @@
-import g from"node:fs";import h from"node:path";import{createInterface as y}from"node:readline";import{randomUUID as c}from"node:crypto";import{AgentAdapter as S,registerAgent as E}from"./adapter.js";import{resolveBuiltinCommand as m,spawnAgentCommand as x,spawnResolvedCommandSync as I}from"./command-spec.js";import{buildAgentProcessEnv as p,buildManagedAgentProcessEnv as v}from"../agent-env.js";import{buildPlatformInstructions as f}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as P}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as k}from"../security/managed-agent-runtime.js";import{resolveManagedRoomIpcPaths as w}from"../daemon-ipc/paths.js";import{CLAUDE_MANAGED_RUNTIME_SECURITY as C,compileClaudeManagedPermissions as A}from"./claude-managed-permissions.js";k("claude",C);function _(n){return n?.trim()||"default"}const M=new Set(["low","medium","high","xhigh","max"]),l=new Map;function R(n){const e=n?.trim();if(e){if(M.has(e))return e;throw new Error(`Unsupported Claude reasoning effort "${e}". Supported values: low, medium, high, xhigh, max.`)}}function Q(){l.clear()}function T(n){const e=n.trim();return e?!e.includes("claude.ai connectors are disabled because"):!1}function O(){const n=m("claude");if(!n)return!1;const e=`${n.kind}:${n.path}:${n.command}:${n.args.join("\0")}`;if(l.has(e))return l.get(e)??!1;try{const t=I(n,["--help"],{encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:3e3,env:p()}),s=`${t.stdout??""}
-${t.stderr??""}`,a=/(?:^|\s)--effort(?:\s|,|<)/.test(s);return l.set(e,a),a}catch{return l.set(e,!1),!1}}class D extends S{options;type="claude";process=null;agentSessionId=null;sessionId=null;workDir=null;seq=0;runId="";hasEmittedText=!1;terminalState="open";persistNativeSession=!0;managedAgentPolicy=null;constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,s,a){this.sessionId=e,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=a?.persistNativeSession!==!1,s&&(this.agentSessionId=s)}async send(e,t,s,a,u,r){if(r?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=c(),this.resetRunState();const i=["-p",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]];this.persistNativeSession||i.push("--no-session-persistence");const d=this.options.systemPrompt??f(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,u);d&&i.push("--append-system-prompt",d),this.options.hidden&&i.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&i.push("--dangerously-skip-permissions"),i.push("--model",_(t));const o=R(s);o&&O()&&i.push("--effort",o),this.agentSessionId&&i.push("--resume",this.agentSessionId),this.spawnAndParse(i)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.runId=c(),this.resetRunState();const t=["--resume",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]],s=this.options.systemPrompt??f(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0);s&&t.push("--append-system-prompt",s),this.options.hidden&&t.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&t.push("--dangerously-skip-permissions"),this.spawnAndParse(t)}async stop(){await this.killProcess()}spawnAndParse(e){const t=m("claude");if(!t){this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?'));return}const s=x(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()});this.process=s,y({input:s.stdout}).on("line",r=>{if(r.trim())try{const i=JSON.parse(r);this.handleStreamEvent(i)}catch{}});let u="";s.stderr?.on("data",r=>{const i=r.toString();if(u+=i,this.terminalState==="open")for(const d of i.split(`
-`)){const o=d.trim();T(o)&&this.emitEvent({state:"delta",text:o+`
-`})}}),s.on("close",r=>{this.process===s&&(this.process=null,this.handleProcessClose(r,u))}),s.on("error",r=>{this.process===s&&(this.process=null,r.code==="ENOENT"?this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?')):this.emit("error",r))})}buildManagedPermissionConfig(){const e=this.managedAgentPolicy;if(!e)return null;const t=N();return A(P(e),e.adapterPolicy.workDir,{internalReadPaths:t.readPaths,internalUnixSockets:t.unixSockets,shellSubprocessPolicy:e.environmentPolicy.shellSubprocess})}buildProcessEnv(){return this.managedAgentPolicy?v({agentType:"claude",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}}):p(this.extraEnv)}handleStreamEvent(e){if(e.type==="system"&&e.subtype==="init"&&e.session_id){this.agentSessionId=e.session_id,this.emitEvent({state:"start",agentSessionId:this.agentSessionId});return}if(e.type==="system"&&e.subtype==="api_retry"&&e.error==="authentication_failed"){this.emitErrorIfOpen({state:"error",message:'Claude authentication failed. Run "claude auth login" and retry.'});return}if(e.type==="assistant"){if(e.message?.content){for(const t of e.message.content)if(t.type==="text"&&t.text){const s=this.hasEmittedText?`
+import c from"node:fs";import o from"node:path";import{createInterface as y}from"node:readline";import{randomUUID as p}from"node:crypto";import{AgentAdapter as S,registerAgent as E}from"./adapter.js";import{resolveBuiltinCommand as m,spawnAgentCommand as x,spawnResolvedCommandSync as P}from"./command-spec.js";import{buildAgentProcessEnv as f,buildManagedAgentProcessEnv as v}from"../agent-env.js";import{buildPlatformInstructions as g}from"./platform-instructions.js";import{resolveManagedAgentAdapterEnforcement as I}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as C}from"../security/managed-agent-runtime.js";import{resolveManagedRoomIpcPaths as k}from"../daemon-ipc/paths.js";import{CLAUDE_MANAGED_RUNTIME_SECURITY as w,compileClaudeManagedPermissions as A}from"./claude-managed-permissions.js";C("claude",w);function _(n){return n?.trim()||"default"}const R=new Set(["low","medium","high","xhigh","max"]),h=new Map;function T(n){const e=n?.trim();if(e){if(R.has(e))return e;throw new Error(`Unsupported Claude reasoning effort "${e}". Supported values: low, medium, high, xhigh, max.`)}}function Q(){h.clear()}function M(n){const e=n.trim();return e?!e.includes("claude.ai connectors are disabled because"):!1}function O(){const n=m("claude");if(!n)return!1;const e=`${n.kind}:${n.path}:${n.command}:${n.args.join("\0")}`;if(h.has(e))return h.get(e)??!1;try{const t=P(n,["--help"],{encoding:"utf-8",stdio:["ignore","pipe","pipe"],timeout:3e3,env:f()}),s=`${t.stdout??""}
+${t.stderr??""}`,a=/(?:^|\s)--effort(?:\s|,|<)/.test(s);return h.set(e,a),a}catch{return h.set(e,!1),!1}}class N extends S{options;type="claude";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;agentSessionId=null;sessionId=null;workDir=null;seq=0;runId="";hasEmittedText=!1;terminalState="open";persistNativeSession=!0;managedAgentPolicy=null;constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir)}async start(e,t,s,a){this.sessionId=e,this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=a?.persistNativeSession!==!1,s&&(this.agentSessionId=s)}async send(e,t,s,a,l,r){if(r?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");await this.killProcess(),this.runId=p(),this.resetRunState();const i=["-p",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]];this.persistNativeSession||i.push("--no-session-persistence");const u=this.options.systemPrompt??g(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,l);u&&i.push("--append-system-prompt",u),this.options.hidden&&i.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&i.push("--dangerously-skip-permissions"),i.push("--model",_(t));const d=T(s);d&&O()&&i.push("--effort",d),this.agentSessionId&&i.push("--resume",this.agentSessionId),this.spawnAndParse(i)}async resume(e){await this.killProcess(),this.agentSessionId=e,this.runId=p(),this.resetRunState();const t=["--resume",e,"--output-format","stream-json","--verbose",...this.buildManagedPermissionConfig()?.args??[]],s=this.options.systemPrompt??g(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0);s&&t.push("--append-system-prompt",s),this.options.hidden&&t.push("--name","Shennian Manager Substrate"),!this.managedAgentPolicy&&process.getuid?.()!==0&&t.push("--dangerously-skip-permissions"),this.spawnAndParse(t)}async stop(){await this.killProcess()}spawnAndParse(e){const t=m("claude");if(!t){this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?'));return}const s=x(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()});this.process=s,y({input:s.stdout}).on("line",r=>{if(r.trim())try{const i=JSON.parse(r);this.handleStreamEvent(i)}catch{}});let l="";s.stderr?.on("data",r=>{const i=r.toString();if(l+=i,this.terminalState==="open")for(const u of i.split(`
+`)){const d=u.trim();M(d)&&this.emitEvent({state:"delta",text:d+`
+`})}}),s.on("close",r=>{this.process===s&&(this.process=null,this.handleProcessClose(r,l))}),s.on("error",r=>{this.process===s&&(this.process=null,r.code==="ENOENT"?this.emit("error",new Error('Command "claude" not found. Is Claude Code CLI installed?')):this.emit("error",r))})}buildManagedPermissionConfig(){const e=this.managedAgentPolicy;if(!e)return null;const t=D();return A(I(e),e.adapterPolicy.workDir,{internalReadPaths:t.readPaths,internalUnixSockets:t.unixSockets,shellSubprocessPolicy:e.environmentPolicy.shellSubprocess})}buildProcessEnv(){return this.managedAgentPolicy?v({agentType:"claude",providerEnv:this.extraEnv,sessionEnv:this.extraEnv,runtimeEnv:{NO_COLOR:"1"}}):f(this.extraEnv)}handleStreamEvent(e){if(e.type==="system"&&e.subtype==="init"&&e.session_id){this.agentSessionId=e.session_id,this.emitEvent({state:"start",agentSessionId:this.agentSessionId});return}if(e.type==="system"&&e.subtype==="api_retry"&&e.error==="authentication_failed"){this.emitErrorIfOpen({state:"error",message:'Claude authentication failed. Run "claude auth login" and retry.'});return}if(e.type==="assistant"){if(e.message?.content){for(const t of e.message.content)if(t.type==="text"&&t.text){const s=this.hasEmittedText?`
 
 `:"";this.emitEvent({state:"delta",text:s+t.text}),this.hasEmittedText=!0}else t.type==="thinking"&&t.thinking?this.emitEvent({state:"delta",text:t.thinking,thinking:!0}):t.type==="tool_use"&&this.emitEvent({state:"tool-call",name:t.name,args:t.input});return}if(e.subtype==="text"&&e.text){const t=this.hasEmittedText?`
 
-`:"";this.emitEvent({state:"delta",text:t+e.text}),this.hasEmittedText=!0}else e.subtype==="thinking"&&e.thinking?this.emitEvent({state:"delta",text:e.thinking,thinking:!0}):e.subtype==="tool_use"&&this.emitEvent({state:"tool-call",name:e.name,args:e.input});return}if(e.type==="result")if(e.subtype==="tool_result"){const t=typeof e.content=="string"?e.content:JSON.stringify(e.content);this.emitEvent({state:"tool-result",name:e.name,result:t})}else if(e.subtype==="success"){e.session_id&&(this.agentSessionId=e.session_id);const t=e.usage??e.message?.usage;this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:t?{inputTokens:t.input_tokens,outputTokens:t.output_tokens}:void 0})}else e.subtype==="error"&&this.emitErrorIfOpen({state:"error",message:e.error??e.result??"unknown error"})}handleProcessClose(e,t){if(e!==0&&e!==null){const s=t.trim()||`claude exited with code ${e}`;this.emitErrorIfOpen({state:"error",message:s});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0})}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="final",this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.emitEvent(e))}resetRunState(){this.seq=0,this.hasEmittedText=!1,this.terminalState="open"}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}async killProcess(){const e=this.process;e&&(this.process=null,e.kill("SIGTERM"),await new Promise(t=>{e.on("close",t),setTimeout(()=>{e.kill("SIGKILL"),t()},3e3)}))}}function N(){const n=w(),e=[n.secretFile],t=n.transport==="unix_socket"?[n.endpoint]:[];n.transport==="unix_socket"&&e.push(n.endpoint);const s=m("pi");if(s?.path){e.push(s.path);try{const a=g.realpathSync(s.path);e.push(a,h.dirname(a),h.dirname(h.dirname(a)))}catch{}}return{readPaths:[...new Set(e)].sort(),unixSockets:[...new Set(t)].sort()}}E("claude",()=>new D);export{D as ClaudeAdapter,_ as normalizeClaudeModelId,R as normalizeClaudeReasoningEffort,Q as resetClaudeCapabilityCacheForTests,N as resolveClaudeManagedInternalAccess,T as shouldForwardClaudeStderrLine,O as supportsClaudeReasoningEffort};
+`:"";this.emitEvent({state:"delta",text:t+e.text}),this.hasEmittedText=!0}else e.subtype==="thinking"&&e.thinking?this.emitEvent({state:"delta",text:e.thinking,thinking:!0}):e.subtype==="tool_use"&&this.emitEvent({state:"tool-call",name:e.name,args:e.input});return}if(e.type==="result")if(e.subtype==="tool_result"){const t=typeof e.content=="string"?e.content:JSON.stringify(e.content);this.emitEvent({state:"tool-result",name:e.name,result:t})}else if(e.subtype==="success"){e.session_id&&(this.agentSessionId=e.session_id);const t=e.usage??e.message?.usage;this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0,usage:t?{inputTokens:t.input_tokens,outputTokens:t.output_tokens}:void 0})}else e.subtype==="error"&&this.emitErrorIfOpen({state:"error",message:e.error??e.result??"unknown error"})}handleProcessClose(e,t){if(e!==0&&e!==null){const s=t.trim()||`claude exited with code ${e}`;this.emitErrorIfOpen({state:"error",message:s});return}this.emitFinalIfOpen({state:"final",agentSessionId:this.agentSessionId??void 0})}emitFinalIfOpen(e){this.terminalState==="open"&&(this.terminalState="final",this.emitEvent(e))}emitErrorIfOpen(e){this.terminalState==="open"&&(this.terminalState="error",this.emitEvent(e))}resetRunState(){this.seq=0,this.hasEmittedText=!1,this.terminalState="open"}emitEvent(e){const t={...e,runId:this.runId,seq:this.seq++};this.emit("agentEvent",t)}async killProcess(){const e=this.process;e&&(this.process=null,e.kill("SIGTERM"),await new Promise(t=>{e.on("close",t),setTimeout(()=>{e.kill("SIGKILL"),t()},3e3)}))}}function D(){const n=k(),e=[n.secretFile],t=n.transport==="unix_socket"?[n.endpoint]:[];n.transport==="unix_socket"&&e.push(n.endpoint);const s=m("pi");return s?.path&&e.push(...F(s.path)),{readPaths:[...new Set(e)].sort(),unixSockets:[...new Set(t)].sort()}}function F(n){const e=o.normalize(n.trim());if(!e||!o.isAbsolute(e))return[];const t=[e];try{const s=c.realpathSync(e);t.push(s,o.dirname(s),o.dirname(o.dirname(s)));let a=o.dirname(s);for(let l=0;l<8;l+=1){const r=o.join(a,"package.json");try{if(JSON.parse(c.readFileSync(r,"utf8")).name==="shennian"){t.push(a);break}}catch{}const i=o.dirname(a);if(i===a)break;a=i}}catch{}return[...new Set(t)].sort()}E("claude",()=>new N);export{N as ClaudeAdapter,_ as normalizeClaudeModelId,T as normalizeClaudeReasoningEffort,Q as resetClaudeCapabilityCacheForTests,D as resolveClaudeManagedInternalAccess,F as resolveClaudeShennianCliReadPaths,M as shouldForwardClaudeStderrLine,O as supportsClaudeReasoningEffort};

package/dist/src/agents/codex.d.ts

@@ -20,6 +20,12 @@ export declare function buildCodexQueueArgs(threadId: string, text: string, atta
 export declare class CodexAdapter extends AgentAdapter {
     private readonly options;
     readonly type: "codex";
+    get recoveryCapabilities(): {
+        inspectTerminal: boolean;
+        reattachRun: boolean;
+        resumeRun: boolean;
+        resumeSession: boolean;
+    };
     private process;
     private workDir;
     private seq;

package/dist/src/agents/codex.js

@@ -1,6 +1,6 @@
 import{spawnSync as b}from"node:child_process";import{createInterface as S}from"node:readline";import{createHash as w,randomUUID as O}from"node:crypto";import g from"node:path";import{AgentAdapter as q,registerAgent as N}from"./adapter.js";import{resolveBuiltinCommand as T,spawnAgentCommand as x}from"./command-spec.js";import{buildAgentProcessEnv as D,buildManagedAgentProcessEnv as L}from"../agent-env.js";import{ensurePlatformInstructionsFile as F}from"./platform-instructions.js";import{CODEX_DESKTOP_SEND_UNAVAILABLE as C}from"@shennian/wire";import{isCodexThreadTailInterrupted as $}from"../native-fusion/codex-files.js";import{resolveManagedAgentAdapterEnforcement as U}from"../security/managed-agent-policy.js";import{registerManagedAgentRuntimeSecurity as W}from"../security/managed-agent-runtime.js";import{CODEX_MANAGED_ROOM_DYNAMIC_TOOLS as z,CodexManagedRoomToolBinding as B}from"./codex-managed-room-tools.js";import{assertCodexManagedPermissionProfile as R,CODEX_MANAGED_RUNTIME_SECURITY as G,compileCodexManagedPermissions as V,extractCodexMcpServerNames as J}from"./codex-managed-permissions.js";import{CODEX_APP_SERVER_CLIENT_INFO as H,extractAppServerErrorMessage as E,formatCodexErrorMessage as X,formatTransientCodexStatus as K,isCodexCollabAgentItem as Q,isCodexCollabAgentToolName as v,isCodexLegacyCollabAgentItem as Y,isCodexUnsupportedEffortError as j,isMissingCodexRolloutError as y,isTransientCodexErrorMessage as Z,looksLikeCodexInteractiveAuthPrompt as ee,looksLikeFatalCodexStderr as te,normalizeCodexModelId as I,normalizeCodexReasoningEffort as re,normalizeCodexStderr as _,normalizeTerminalText as se,safeStringify as k,stripGitDirectiveArtifacts as ne}from"./codex-utils.js";import{isCodexUnsupportedEffortError as Oe,isMissingCodexRolloutError as qe,normalizeCodexModelId as Ne,normalizeCodexReasoningEffort as De}from"./codex-utils.js";W("codex",G);function P(o){const e=o instanceof Error?o.message:String(o);return/already has an active writer|thread-store conflict/i.test(e)}function ie(o){const e=o instanceof Error?o.message:String(o);return/paginated(?:_threads|\s+(?:thread\s+)?history)?.*(?:not supported|unsupported|unavailable)/i.test(e)||/(?:not supported|unsupported|unavailable).*paginated(?:_threads|\s+(?:thread\s+)?history)?/i.test(e)}function oe(o){const e=o instanceof Error?o.message:String(o);return/unknown field [`'"]?excludeTurns/i.test(e)||/excludeTurns.*(?:not supported|unsupported|unavailable)/i.test(e)}function ae(o){const e=o instanceof Error?o.message:String(o);return/(?:method not found|unknown method).*(?:project\/list|project\/create)/i.test(e)||/(?:project\/list|project\/create).*(?:not supported|unsupported|unavailable)/i.test(e)}function de(o,e){const t=g.resolve(e);let r;for(const s of o)if(s.id)for(const i of s.roots??[]){if(!i.path)continue;const n=g.resolve(i.path),a=g.relative(n,t);!(a===""||!a.startsWith("..")&&!g.isAbsolute(a))||n.length<=(r?.rootLength??-1)||(r={id:s.id,rootLength:n.length})}return r?.id}function le(o,e){const t=e?.flatMap(s=>ce(s)).filter(s=>!/^https?:\/\//i.test(s.path)).filter(s=>s.path);return{type:"text",text:he(o,e),text_elements:[],...t?.length?{local_images:t}:{}}}function ce(o){if(o.kind==="image")return o.previewData?[{path:o.path,data:o.previewData,mimeType:o.mimeType}]:[{path:o.path}];if(o.mimeType.startsWith("video/")){const e=ue(o.path);return e?[{path:e}]:[]}return[]}function ue(o){if(!o||/^https?:\/\//i.test(o))return null;const e=g.extname(o),r=`${e?o.slice(0,-e.length):o}.preview.png`;return b("ffmpeg",["-y","-ss","0","-i",o,"-frames:v","1","-vf","scale=320:-1",r],{stdio:"ignore",timeout:15e3}).status===0?r:null}function he(o,e){const t=e?.filter(i=>i.kind!=="image").filter(i=>i.path&&!/^https?:\/\//i.test(i.path));if(!t?.length||t.every(i=>o.includes(i.path)))return o;const s=t.map((i,n)=>{const a=i.name||`attachment-${n+1}`,d=i.mimeType?` (${i.mimeType})`:"";return`[${A(a)}${d}](<${i.path}>)`});return[o,"",...s].join(`
 `)}function pe(o,e){const t=e?.filter(s=>s.path&&!/^https?:\/\//i.test(s.path)&&!o.includes(s.path));if(!t?.length)return o;const r=t.map((s,i)=>{const n=A(s.name||`attachment-${i+1}`);return s.kind==="image"?`![${n}](<${s.path}>)`:`[${n}](<${s.path}>)`});return[o,"",...r].join(`
-`)}function me(o,e,t){return["queue","--thread",o,"--message",pe(e,t)]}function A(o){return o.replace(/[[\]\\]/g,"\\$&")}class ge extends q{options;type="codex";process=null;workDir=null;seq=0;runId="";pendingUsage;agentSessionId=null;hasEmittedText=!1;textTail="";terminalState="open";forceCloseTimer=null;stderrBuf="";rpcSeq=1;pendingRequests=new Map;appServerReady=null;appServerStartupError=null;activeTurnId=null;deltaItemIds=new Set;lastTransientStatus="";agentSystemPrompt="";managedAgentPolicy=null;managedPermissionConfig=null;configurationRestartRequired=!1;managedRoomTools=new B;configuredManagedRoomContextToken=null;configuredManagedRoomExecutor=null;managedRoomToolThreadId=null;preparedExternalOwnerThreadId=null;managedTurnReplay=null;managedAsyncRecovery=null;persistNativeSession=!0;nativeSessionVisibility="user";constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){const t=this.configurationFingerprint();this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),("managedRoomContextToken"in e||"managedRoomExecutor"in e)&&(this.managedRoomTools.deactivateTurn(),this.configuredManagedRoomContextToken=e.managedRoomContextToken?.trim()||null,this.configuredManagedRoomExecutor=e.managedRoomExecutor??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir);const r=this.configurationFingerprint();t!==r&&this.process&&(this.configurationRestartRequired=!0)}configurationFingerprint(){const e=Object.keys(this.extraEnv).sort().map(t=>[t,this.extraEnv[t]??null]);return w("sha256").update(JSON.stringify({sessionId:this.shennianSessionId,externalChannel:this.externalChannel,env:e,managedAgentPolicy:this.managedAgentPolicy})).digest("hex")}buildProcessEnv(e={}){if(!this.managedAgentPolicy)return D({...e,...this.extraEnv});const t=Object.fromEntries(Object.entries(this.extraEnv).filter(([r])=>r!=="SHENNIAN_MANAGED_ROOM_CONTEXT"&&r!=="SHENNIAN_MANAGED_ROOM_IPC_ROOT"));return L({agentType:"codex",providerEnv:t,sessionEnv:t,runtimeEnv:e})}async start(e,t,r,s){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=s?.persistNativeSession!==!1,this.nativeSessionVisibility=s?.nativeSessionVisibility??"user",r&&(this.agentSessionId=r)}async prepareSend(e,t,r,s,i,n){const a=i?.trim()??"";if(a!==this.agentSystemPrompt&&(this.agentSystemPrompt=a,this.process&&await this.killProcess(!0)),!(!this.agentSessionId||this.activeTurnId)){this.preparedExternalOwnerThreadId=null;try{await this.ensureAppServer(I(t))}catch(d){if(!P(d))throw d;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:d});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(C,{cause:d});this.preparedExternalOwnerThreadId=this.agentSessionId}}}async send(e,t,r,s,i,n){if(n?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");if(n?.source==="room_activation"&&(!this.configuredManagedRoomContextToken||!this.configuredManagedRoomExecutor))throw new Error("codex_managed_room_tool_context_unavailable");this.activeTurnId&&(await this.interruptActiveTurn().catch(()=>{}),await this.killProcess(!0)),this.configurationRestartRequired&&this.process&&await this.killProcess(!0),this.configurationRestartRequired=!1;const a=I(t),d=re(r),c=i?.trim()??"";if(c!==this.agentSystemPrompt&&(this.agentSystemPrompt=c,this.process&&await this.killProcess(!0)),n?.source==="room_activation"&&this.managedRoomTools.configure(this.configuredManagedRoomContextToken,this.configuredManagedRoomExecutor),this.runId=O(),this.seq=0,this.resetRunState(),this.agentSessionId&&this.preparedExternalOwnerThreadId===this.agentSessionId)return this.preparedExternalOwnerThreadId=null,{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)};try{await this.ensureAppServer(a)}catch(h){if(!this.agentSessionId||!P(h))throw h;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:h});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(C,{cause:h});return{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)}}const l=this.agentSessionId;if(!l)throw new Error("codex app-server did not create a thread");this.emitEvent({state:"start",agentSessionId:l}),this.managedTurnReplay=this.managedPermissionConfig?{text:e,modelId:a,reasoningEffort:d,attachments:s,recoveryCount:0}:null;const p=await this.startTurnWithRecovery(l,e,a,d,s),m=this.agentSessionId??l;if(this.activeTurnId=p.turn?.id??null,this.managedRoomToolThreadId===m&&this.activeTurnId&&!this.managedRoomTools.bindTurn(m,this.activeTurnId))throw await this.killProcess(),new Error("codex_managed_room_turn_binding_failed");return{deliveryMode:"direct"}}isThreadTailInterrupted(e){return this.options.isThreadTailInterrupted?.(e)??$(e)}async enqueueForExternalOwner(e,t,r){const s=T("codex");if(!s)throw new Error('Command "codex" not found. Is OpenAI Codex CLI installed?');const i=me(e,t,r),n=x(s,i,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv({NO_COLOR:"1"})});return await new Promise((a,d)=>{let c="",l="",p=!1;const m=(u,f)=>{p||(p=!0,clearTimeout(h),u?d(u):a(f))},h=setTimeout(()=>{n.kill("SIGTERM"),m(new Error("Codex Desktop message queue timed out"))},6e4);h.unref?.(),n.stdout?.on("data",u=>{c+=u.toString()}),n.stderr?.on("data",u=>{l+=u.toString()}),n.once("error",u=>m(u)),n.once("close",u=>{const f=`${c}
+`)}function me(o,e,t){return["queue","--thread",o,"--message",pe(e,t)]}function A(o){return o.replace(/[[\]\\]/g,"\\$&")}class ge extends q{options;type="codex";get recoveryCapabilities(){return{inspectTerminal:!1,reattachRun:!1,resumeRun:!1,resumeSession:!0}}process=null;workDir=null;seq=0;runId="";pendingUsage;agentSessionId=null;hasEmittedText=!1;textTail="";terminalState="open";forceCloseTimer=null;stderrBuf="";rpcSeq=1;pendingRequests=new Map;appServerReady=null;appServerStartupError=null;activeTurnId=null;deltaItemIds=new Set;lastTransientStatus="";agentSystemPrompt="";managedAgentPolicy=null;managedPermissionConfig=null;configurationRestartRequired=!1;managedRoomTools=new B;configuredManagedRoomContextToken=null;configuredManagedRoomExecutor=null;managedRoomToolThreadId=null;preparedExternalOwnerThreadId=null;managedTurnReplay=null;managedAsyncRecovery=null;persistNativeSession=!0;nativeSessionVisibility="user";constructor(e={}){super(),this.options=e}externalChannel=null;shennianSessionId=null;extraEnv={};configure(e){const t=this.configurationFingerprint();this.shennianSessionId=e.sessionId??null,this.externalChannel=e.externalChannel??null,this.extraEnv=e.env??{},"managedAgentPolicy"in e&&(this.managedAgentPolicy=e.managedAgentPolicy??null),("managedRoomContextToken"in e||"managedRoomExecutor"in e)&&(this.managedRoomTools.deactivateTurn(),this.configuredManagedRoomContextToken=e.managedRoomContextToken?.trim()||null,this.configuredManagedRoomExecutor=e.managedRoomExecutor??null),this.managedAgentPolicy&&(this.workDir=this.managedAgentPolicy.adapterPolicy.workDir);const r=this.configurationFingerprint();t!==r&&this.process&&(this.configurationRestartRequired=!0)}configurationFingerprint(){const e=Object.keys(this.extraEnv).sort().map(t=>[t,this.extraEnv[t]??null]);return w("sha256").update(JSON.stringify({sessionId:this.shennianSessionId,externalChannel:this.externalChannel,env:e,managedAgentPolicy:this.managedAgentPolicy})).digest("hex")}buildProcessEnv(e={}){if(!this.managedAgentPolicy)return D({...e,...this.extraEnv});const t=Object.fromEntries(Object.entries(this.extraEnv).filter(([r])=>r!=="SHENNIAN_MANAGED_ROOM_CONTEXT"&&r!=="SHENNIAN_MANAGED_ROOM_IPC_ROOT"));return L({agentType:"codex",providerEnv:t,sessionEnv:t,runtimeEnv:e})}async start(e,t,r,s){this.workDir=this.managedAgentPolicy?.adapterPolicy.workDir??t,this.seq=0,this.persistNativeSession=s?.persistNativeSession!==!1,this.nativeSessionVisibility=s?.nativeSessionVisibility??"user",r&&(this.agentSessionId=r)}async prepareSend(e,t,r,s,i,n){const a=i?.trim()??"";if(a!==this.agentSystemPrompt&&(this.agentSystemPrompt=a,this.process&&await this.killProcess(!0)),!(!this.agentSessionId||this.activeTurnId)){this.preparedExternalOwnerThreadId=null;try{await this.ensureAppServer(I(t))}catch(d){if(!P(d))throw d;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:d});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(C,{cause:d});this.preparedExternalOwnerThreadId=this.agentSessionId}}}async send(e,t,r,s,i,n){if(n?.source==="room_activation"&&!this.managedAgentPolicy)throw new Error("managed_agent_policy_missing");if(n?.source==="room_activation"&&(!this.configuredManagedRoomContextToken||!this.configuredManagedRoomExecutor))throw new Error("codex_managed_room_tool_context_unavailable");this.activeTurnId&&(await this.interruptActiveTurn().catch(()=>{}),await this.killProcess(!0)),this.configurationRestartRequired&&this.process&&await this.killProcess(!0),this.configurationRestartRequired=!1;const a=I(t),d=re(r),c=i?.trim()??"";if(c!==this.agentSystemPrompt&&(this.agentSystemPrompt=c,this.process&&await this.killProcess(!0)),n?.source==="room_activation"&&this.managedRoomTools.configure(this.configuredManagedRoomContextToken,this.configuredManagedRoomExecutor),this.runId=O(),this.seq=0,this.resetRunState(),this.agentSessionId&&this.preparedExternalOwnerThreadId===this.agentSessionId)return this.preparedExternalOwnerThreadId=null,{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)};try{await this.ensureAppServer(a)}catch(h){if(!this.agentSessionId||!P(h))throw h;if(n?.source==="room_activation")throw new Error("codex_managed_thread_owned_externally",{cause:h});if(this.isThreadTailInterrupted(this.agentSessionId))throw new Error(C,{cause:h});return{deliveryMode:"external_owner_queue",queuedSubmissionId:await this.enqueueForExternalOwner(this.agentSessionId,e,s)}}const l=this.agentSessionId;if(!l)throw new Error("codex app-server did not create a thread");this.emitEvent({state:"start",agentSessionId:l}),this.managedTurnReplay=this.managedPermissionConfig?{text:e,modelId:a,reasoningEffort:d,attachments:s,recoveryCount:0}:null;const p=await this.startTurnWithRecovery(l,e,a,d,s),m=this.agentSessionId??l;if(this.activeTurnId=p.turn?.id??null,this.managedRoomToolThreadId===m&&this.activeTurnId&&!this.managedRoomTools.bindTurn(m,this.activeTurnId))throw await this.killProcess(),new Error("codex_managed_room_turn_binding_failed");return{deliveryMode:"direct"}}isThreadTailInterrupted(e){return this.options.isThreadTailInterrupted?.(e)??$(e)}async enqueueForExternalOwner(e,t,r){const s=T("codex");if(!s)throw new Error('Command "codex" not found. Is OpenAI Codex CLI installed?');const i=me(e,t,r),n=x(s,i,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv({NO_COLOR:"1"})});return await new Promise((a,d)=>{let c="",l="",p=!1;const m=(u,f)=>{p||(p=!0,clearTimeout(h),u?d(u):a(f))},h=setTimeout(()=>{n.kill("SIGTERM"),m(new Error("Codex Desktop message queue timed out"))},6e4);h.unref?.(),n.stdout?.on("data",u=>{c+=u.toString()}),n.stderr?.on("data",u=>{l+=u.toString()}),n.once("error",u=>m(u)),n.once("close",u=>{const f=`${c}
 ${l}`.trim();if(u!==0){m(new Error(f||`codex queue exited with code ${u??"unknown"}`));return}const M=f.match(/Queued message\s+([^\s]+)\s+for thread/i)?.[1];m(void 0,M)})})}async resume(e){await this.killProcess(),this.agentSessionId=e,this.resetTextState()}async setTitle(e,t,r){const s=e.trim(),i=t.replace(/\s+/g," ").trim();!s||!i||(this.agentSessionId=s,r?.trim()&&(this.workDir=r),await this.ensureAppServer(),await this.sendRpc("thread/name/set",{threadId:s,name:i}))}async stop(){this.managedRoomTools.deactivateTurn(),await this.interruptActiveTurn().catch(()=>{}),await this.killProcess()}async getStatus(){const e=this.agentSessionId,t=this.activeTurnId;if(!e||!this.process)return{active:!1,runId:t,runPhase:null,canStop:!1};let r=null;try{r=(await this.sendRpc("thread/read",{threadId:e,includeTurns:!1},5e3)).thread?.status??null}catch{}const s=r?.type==="active"||!!t;return{active:s,runId:t,runPhase:s?this.mapThreadStatusToRunPhase(r):null,canStop:!!(s&&t&&this.process)}}spawnCodex(e){const t=T("codex");if(!t){this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));return}const r=x(t,e,{cwd:this.workDir??void 0,stdio:["ignore","pipe","pipe"],env:this.buildProcessEnv()});this.process=r,S({input:r.stdout}).on("line",n=>{if(n.trim())try{const a=JSON.parse(n);this.handleStreamEvent(a)}catch{this.emitEvent({state:"delta",text:n})}});let i="";r.stderr?.on("data",n=>{i+=n.toString()}),r.on("close",n=>{this.process===r&&(this.process=null,this.clearForceCloseTimer(),this.handleProcessClose(n,i))}),r.on("error",n=>{this.process===r&&(this.process=null,n.code==="ENOENT"?this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?')):this.emit("error",n))})}spawnAppServer(){const e=T("codex");if(!e){this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?'));return}const t=["app-server","--listen","stdio://"],r=this.options.modelInstructionsFile??F(this.workDir??process.cwd(),this.externalChannel,this.shennianSessionId??void 0,this.agentSystemPrompt);r&&t.push("-c",`model_instructions_file=${JSON.stringify(r)}`);const s=x(e,t,{cwd:this.workDir??void 0,stdio:["pipe","pipe","pipe"],env:this.buildProcessEnv({NO_COLOR:"1"})});this.process=s,this.stderrBuf="",this.appServerStartupError=null,S({input:s.stdout}).on("line",n=>{if(!n.trim())return;let a;try{a=JSON.parse(n)}catch{this.handleAppServerNonJsonStdout(n);return}this.handleAppServerMessage(a)}),s.stderr?.on("data",n=>{this.stderrBuf+=n.toString()}),s.on("close",n=>{if(this.process!==s)return;const a=this.activeTurnId!=null;this.process=null,this.appServerReady=null,this.activeTurnId=null,this.managedRoomTools.reset(),this.clearConfiguredManagedRoomContext(),this.rejectAllPending(new Error(_(this.stderrBuf)||`codex app-server exited with code ${n}`)),this.terminalState==="open"&&a&&this.handleProcessClose(n,this.stderrBuf)}),s.on("error",n=>{this.process===s&&(this.process=null,this.managedRoomTools.reset(),this.clearConfiguredManagedRoomContext(),this.rejectAllPending(n),n.code==="ENOENT"?this.emit("error",new Error('Command "codex" not found. Is OpenAI Codex CLI installed?')):this.emit("error",n))})}async ensureAppServer(e){return this.appServerReady?this.appServerReady:(this.spawnAppServer(),this.appServerReady=this.initializeAppServer(e).catch(async t=>{throw this.appServerReady=null,await this.killProcess(),t}),this.appServerReady)}async initializeAppServer(e){const t=I(e);await this.sendRpc("initialize",{clientInfo:H,capabilities:{experimentalApi:!0}}),this.managedPermissionConfig=this.managedAgentPolicy?await this.buildManagedPermissionConfig():null;const r=!!(this.configuredManagedRoomContextToken||this.configuredManagedRoomExecutor);if(this.managedPermissionConfig&&r&&!this.managedRoomTools.isConfigured()&&(this.managedRoomTools.configure(this.configuredManagedRoomContextToken,this.configuredManagedRoomExecutor),!this.managedRoomTools.isConfigured()))throw new Error("codex_managed_room_tool_context_unavailable");if(this.agentSessionId&&this.managedPermissionConfig&&r&&this.agentSessionId!==this.managedRoomToolThreadId){if(!this.managedRoomTools.isConfigured())throw new Error("codex_managed_room_tool_context_unavailable");this.agentSessionId=null}if(this.agentSessionId){const c={threadId:this.agentSessionId,cwd:this.workDir,approvalPolicy:"never",...this.managedPermissionConfig?{config:this.managedPermissionConfig.threadConfig}:{sandbox:"danger-full-access"},persistExtendedHistory:!0,...this.options.hidden||this.nativeSessionVisibility==="internal"||!this.persistNativeSession?{threadSource:"subagent"}:{},...t?{model:t}:{}};let l;try{l=await this.sendRpc("thread/resume",{...c,excludeTurns:!0})}catch(p){if(!oe(p))throw p;l=await this.sendRpc("thread/resume",c)}this.agentSessionId=l.thread?.id??this.agentSessionId,this.managedPermissionConfig&&(R(l,this.managedPermissionConfig.profileId),r&&(this.managedRoomTools.bindThread(this.agentSessionId),this.managedRoomToolThreadId=this.agentSessionId));return}const s=this.options.hidden||this.nativeSessionVisibility==="internal"||!this.persistNativeSession,i=s?void 0:await this.resolveCodexProjectId(),n={cwd:this.workDir,approvalPolicy:"never",...this.managedPermissionConfig?{config:this.managedPermissionConfig.threadConfig}:{sandbox:"danger-full-access"},serviceName:"Shennian",threadSource:s?"subagent":"user",experimentalRawEvents:!1,persistExtendedHistory:!0,...this.managedPermissionConfig&&r?{dynamicTools:z}:{},...i?{projectId:i}:{},...t?{model:t}:{}};let a;if(s&&!this.managedPermissionConfig)a=await this.sendRpc("thread/start",n);else try{a=await this.sendRpc("thread/start",{...n,historyMode:"paginated"})}catch(c){throw ie(c)?new Error("\u5F53\u524D Codex CLI \u4E0D\u652F\u6301\u521B\u5EFA\u53EF\u5728 Codex Desktop \u4E2D\u7EE7\u7EED\u7684\u65B0\u4F1A\u8BDD\uFF0C\u8BF7\u624B\u52A8\u5347\u7EA7 Codex CLI \u540E\u91CD\u8BD5\u3002\u795E\u5FF5\u4E0D\u4F1A\u81EA\u52A8\u5347\u7EA7\uFF0C\u4E5F\u4E0D\u4F1A\u964D\u7EA7\u521B\u5EFA\u4E0D\u53EF\u89C1\u7684 legacy \u4F1A\u8BDD\u3002",{cause:c}):c}const d=a.thread?.id;if(!d)throw new Error("codex app-server thread/start returned no thread id");this.managedPermissionConfig&&(R(a,this.managedPermissionConfig.profileId),r&&(this.managedRoomTools.bindThread(d),this.managedRoomToolThreadId=d)),this.agentSessionId=d}async buildManagedPermissionConfig(){const e=this.managedAgentPolicy;if(!e)throw new Error("managed_agent_policy_missing");const t=e.adapterPolicy.externalCapabilities.mcp?[]:J(await this.sendRpc("config/read",{cwd:e.adapterPolicy.workDir}));return V(U(e),e.adapterPolicy.workDir,{configuredMcpServerNames:t,shellSubprocessPolicy:e.environmentPolicy.shellSubprocess})}async resolveCodexProjectId(){const e=this.workDir?.trim();if(e)try{const t=[];let r;do{const c=await this.sendRpc("project/list",{limit:100,...r?{cursor:r}:{}});t.push(...c.data??[]),r=c.nextCursor}while(r);const s=de(t,e);if(s)return s;const i=g.resolve(e),n=`shennian-project-${w("sha256").update(i).digest("hex")}`,d=(await this.sendRpc("project/create",{idempotencyKey:n,name:g.basename(i)||i,roots:[{path:i}],metadata:{createdBy:"Shennian"}})).project?.id;if(!d)throw new Error("codex app-server project/create returned no project id");return d}catch(t){throw ae(t)?new Error("\u5F53\u524D Codex CLI \u4E0D\u652F\u6301\u521B\u5EFA\u53EF\u5F52\u5C5E\u5230 Codex Desktop \u9879\u76EE\u7684\u65B0\u4F1A\u8BDD\uFF0C\u8BF7\u624B\u52A8\u5347\u7EA7 Codex CLI \u540E\u91CD\u8BD5\u3002\u795E\u5FF5\u4E0D\u4F1A\u81EA\u52A8\u5347\u7EA7\uFF0C\u4E5F\u4E0D\u4F1A\u76F4\u63A5\u4FEE\u6539 Codex Desktop \u7684\u79C1\u6709\u4FA7\u680F\u7D22\u5F15\u3002",{cause:t}):t}}async startTurnWithRecovery(e,t,r,s,i){try{return await this.startTurn(e,t,r,s,i)}catch(n){if(!y(n))throw n;if(this.managedPermissionConfig){this.logManagedThreadLifecycle("rollout.missing",{threadId:e,recovery:"recreate"}),await this.killProcess(!0),this.agentSessionId=null,this.managedRoomToolThreadId=null,await this.ensureAppServer(r);const a=this.agentSessionId;if(!a)throw new Error("codex app-server did not recreate the managed thread",{cause:n});return this.logManagedThreadLifecycle("thread.recreated",{previousThreadId:e,threadId:a}),this.emitEvent({state:"start",agentSessionId:a}),await this.startFreshManagedTurnWithReadinessRetry(a,t,r,s,i)}return await this.killProcess(),await this.ensureAppServer(r),await this.startTurn(e,t,r,s,i)}}async startFreshManagedTurnWithReadinessRetry(e,t,r,s,i){const n=[0,100,300,1e3];let a;for(let d=0;d<n.length;d+=1){const c=n[d];c>0&&await new Promise(l=>setTimeout(l,c));try{const l=await this.startTurn(e,t,r,s,i);return d>0&&this.logManagedThreadLifecycle("rollout.ready",{threadId:e,attempt:d+1}),l}catch(l){if(a=l,!y(l)||d===n.length-1)throw l;this.logManagedThreadLifecycle("rollout.retry",{threadId:e,attempt:d+2,delayMs:n[d+1]})}}throw a}logManagedThreadLifecycle(e,t){console.error(`[codex.managed] ${JSON.stringify({event:e,...t})}`)}async startTurn(e,t,r,s,i){try{return await this.sendRpc("turn/start",{threadId:e,input:[le(t,i)],approvalPolicy:"never",...this.managedPermissionConfig?{}:{sandboxPolicy:{type:"dangerFullAccess"}},...r?{model:r}:{},...s?{effort:s}:{}})}catch(n){throw s&&j(n)?new Error(`Codex app-server does not accept reasoning effort "${s}" for this turn. Refresh models or upgrade Codex CLI, then retry.`,{cause:n}):n}}async interruptActiveTurn(){const e=this.agentSessionId,t=this.activeTurnId;this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),!(!e||!t||!this.process)&&await this.sendRpc("turn/interrupt",{threadId:e,turnId:t},5e3)}sendRpc(e,t,r=6e4){if(this.appServerStartupError)return Promise.reject(this.appServerStartupError);const s=this.process;if(!s?.stdin)return Promise.reject(new Error("codex app-server is not running"));const i=this.rpcSeq++,n=JSON.stringify({id:i,method:e,params:t});return new Promise((a,d)=>{const c=setTimeout(()=>{this.pendingRequests.delete(i),d(new Error(`codex app-server request timed out: ${e}`))},r);this.pendingRequests.set(i,{resolve:a,reject:d,timer:c}),s.stdin.write(`${n}
 `,l=>{l&&(clearTimeout(c),this.pendingRequests.delete(i),d(l))})})}handleAppServerMessage(e){if(e.method==="item/tool/call"&&e.id!=null){this.handleManagedRoomToolCall(e.id,e.params??{});return}if(e.id!=null){const r=typeof e.id=="number"?this.pendingRequests.get(e.id):void 0;r&&(clearTimeout(r.timer),this.pendingRequests.delete(e.id),e.error?r.reject(new Error(e.error.message||`codex app-server error ${e.error.code??""}`.trim())):r.resolve(e.result))}if(!e.method)return;const t=e.params??{};switch(e.method){case"turn/started":{const r=typeof t.turn=="object"&&t.turn!==null?t.turn:null,s=typeof r?.id=="string"?r.id:null,i=typeof t.threadId=="string"?t.threadId:"";s&&(this.activeTurnId=s,this.managedRoomToolThreadId===i&&!this.managedRoomTools.bindTurn(i,s)&&this.emitErrorIfOpen("codex_managed_room_turn_binding_failed"));break}case"thread/status/changed":{const r=typeof t.threadId=="string"?t.threadId:"";if(r&&this.agentSessionId&&r!==this.agentSessionId)break;const s=typeof t.status=="object"&&t.status!==null?t.status:null;s?.type==="active"&&this.emitEvent({state:"heartbeat",runPhase:this.mapThreadStatusToRunPhase(s)});break}case"item/agentMessage/delta":{const r=typeof t.itemId=="string"?t.itemId:"";r&&this.deltaItemIds.add(r),typeof t.delta=="string"&&this.emitText(t.delta);break}case"item/completed":this.handleAppServerCompletedItem(t);break;case"thread/tokenUsage/updated":this.handleAppServerUsage(t);break;case"turn/completed":{const r=typeof t.turn=="object"&&t.turn!==null?t.turn:null,s=typeof r?.id=="string"?r.id:null;(!this.activeTurnId||s===this.activeTurnId)&&(this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),this.emitFinalIfOpen());break}case"turn/failed":{const r=E(t);if(this.scheduleManagedAsyncRolloutRecovery(r))return;this.emitErrorIfOpen(r||"turn failed");break}case"error":{const r=E(t);if(Z(r)){this.emitTransientStatus(r);return}if(this.scheduleManagedAsyncRolloutRecovery(r))return;this.emitErrorIfOpen(r);break}}}scheduleManagedAsyncRolloutRecovery(e){if(!this.managedPermissionConfig||!this.managedTurnReplay||!y(new Error(e)))return!1;if(this.managedAsyncRecovery)return!0;if(this.managedTurnReplay.recoveryCount>=2)return!1;this.managedTurnReplay.recoveryCount+=1;const t=this.managedTurnReplay.recoveryCount;return this.logManagedThreadLifecycle("rollout.failed-async",{threadId:this.agentSessionId,recoveryCount:t}),this.managedAsyncRecovery=this.recoverManagedTurnAfterAsyncRolloutFailure().catch(r=>{const s=y(r)?"no rollout found after managed thread recovery":r instanceof Error?r.message:"managed thread recovery failed";this.emitErrorIfOpen(s)}).finally(()=>{this.managedAsyncRecovery=null}),!0}async recoverManagedTurnAfterAsyncRolloutFailure(){const e=this.managedTurnReplay,t=this.agentSessionId;if(!e||!t||this.terminalState!=="open")return;this.activeTurnId=null,this.managedRoomTools.deactivateTurn(),await this.killProcess(!0),this.agentSessionId=null,this.managedRoomToolThreadId=null,await this.ensureAppServer(e.modelId);const r=this.agentSessionId;if(!r)throw new Error("codex app-server did not recreate the managed thread");this.logManagedThreadLifecycle("thread.recreated-async",{previousThreadId:t,threadId:r,recoveryCount:e.recoveryCount}),this.emitEvent({state:"start",agentSessionId:r});const s=await this.startFreshManagedTurnWithReadinessRetry(r,e.text,e.modelId,e.reasoningEffort,e.attachments);if(this.activeTurnId=s.turn?.id??null,this.managedRoomToolThreadId===r&&this.activeTurnId&&!this.managedRoomTools.bindTurn(r,this.activeTurnId))throw new Error("codex_managed_room_turn_binding_failed")}async handleManagedRoomToolCall(e,t){const r=await this.managedRoomTools.execute(t);if(this.writeAppServerResponse(e,r),r.success&&t.tool==="shennian_room_send"){const s=typeof t.arguments=="object"&&t.arguments!==null?t.arguments:null,i=typeof s?.text=="string"?s.text.trim():"";i&&this.emitText(i,"block")}}writeAppServerResponse(e,t){const r=this.process;r?.stdin&&r.stdin.write(`${JSON.stringify({id:e,result:t})}
 `)}mapThreadStatusToRunPhase(e){const t=e?.type==="active"&&Array.isArray(e.activeFlags)?e.activeFlags:[];return t.includes("waitingOnApproval")?"waiting_approval":t.includes("waitingOnUserInput")?"waiting_user_input":"thinking"}handleAppServerNonJsonStdout(e){const t=se(e);ee(t)&&this.failAppServerStartup(new Error("Codex \u672A\u767B\u5F55\u3002\u8BF7\u5148\u5728\u8FD9\u53F0\u7535\u8111\u7684\u7EC8\u7AEF\u8FD0\u884C `codex`\uFF0C\u6309\u63D0\u793A\u5B8C\u6210 ChatGPT \u767B\u5F55\u6216\u914D\u7F6E API key\uFF0C\u7136\u540E\u518D\u56DE\u5230\u795E\u5FF5\u53D1\u9001\u6D88\u606F\u3002"))}failAppServerStartup(e){this.appServerStartupError||(this.appServerStartupError=e,this.rejectAllPending(e),this.process?.kill("SIGTERM"))}handleAppServerCompletedItem(e){const t=typeof e.item=="object"&&e.item!==null?e.item:null;if(!(!t||typeof t.type!="string")&&!Q(t))switch(t.type){case"agentMessage":{const r=typeof t.id=="string"?t.id:"";if(r&&this.deltaItemIds.has(r))return;typeof t.text=="string"&&this.emitText(t.text,"block");break}case"commandExecution":{const r=typeof t.command=="string"?t.command:"",s=typeof t.aggregatedOutput=="string"?t.aggregatedOutput:"";r&&this.emitEvent({state:"tool-call",name:"command_execution",args:{command:r}}),this.emitEvent({state:"tool-result",name:"command_execution",result:[s,t.exitCode!=null?`

package/dist/src/agents/command-spec.d.ts

@@ -19,6 +19,11 @@ export declare function resetCommandSpecCache(): void;
 export declare function getProcessPlatform(): NodeJS.Platform;
 export declare function windowsPathToWsl(input: string): string | undefined;
 export declare function commandExists(command: string): boolean;
+/** Stable, non-secret identity used to invalidate local capability caches. */
+export declare function resolveCommandFileIdentity(command: string): {
+    pathHash: string;
+    fingerprint: string;
+} | null;
 export declare function resolveBuiltinCommand(type: BuiltinAgentType): ResolvedCommandSpec | null;
 export declare function buildLaunchSpec(spec: ResolvedCommandSpec, runtimeArgs: string[], cwd?: string): LaunchSpec;
 export declare function spawnResolvedCommand(spec: ResolvedCommandSpec, runtimeArgs: string[], options?: Omit<SpawnOptions, 'cwd'> & {