thinkpool-pair 0.7.364 → 0.7.365

package/code-event-contract.mjs

@@ -1,118 +1 @@
-/* Canonical ThinkPool Code event contract.
-   Keep this module browser-safe: the bridge and src/pages/code both consume it. */
-
-import { recoveryCodeEvent } from './error-recovery.mjs'
-
-export const EVENT_CLASS = Object.freeze({
-  VOLATILE_PRESENCE: 'volatile-presence',
-  REPLAYABLE_PROGRESS: 'replayable-progress',
-  REPLAYABLE_COMMAND: 'replayable-command',
-  DURABLE_DELIVERY_EVIDENCE: 'durable-delivery-evidence',
-  UNKNOWN: 'unknown',
-})
-
-const V = EVENT_CLASS.VOLATILE_PRESENCE
-const P = EVENT_CLASS.REPLAYABLE_PROGRESS
-const C = EVENT_CLASS.REPLAYABLE_COMMAND
-const E = EVENT_CLASS.DURABLE_DELIVERY_EVIDENCE
-
-// Exhaustive over every kind currently emitted into a Code room, its retained log,
-// or the durable __agent notification stream. `answer`/`control`/etc. are commands
-// replayed by the transcript; they are not durable decision records. Pair control
-// supplies actor-bound decision records and authoritative verification receipts.
-// Adding a producer without adding its kind here is a test/dev error and a
-// fail-closed production value.
-export const CODE_EVENT_REGISTRY = Object.freeze({
-  system: V,
-  thinking_tokens: V,
-  effort: V,
-  mode: V,
-  usage: V,
-  suggestion: V,
-  stalled: V,
-  compact: V,
-  assistant_stream: V,
-  models: V,
-  'model-switch': V,
-  capabilities: V,
-  'update-available': V,
-
-  you: P,
-  assistant: P,
-  tool_result: P,
-  note: P,
-  pool: P,
-  chat: P,
-  whisper: P,
-  compaction: P,
-  'side-started': P,
-  'side-handback': P,
-  answer: C,
-  control: C,
-  'repo-search': C,
-  clear: C,
-  'queue-add': C,
-  'queue-cancel': C,
-  propose: C,
-  'propose-done': C,
-
-  result: E,
-  error: E,
-  mockup: E,
-  image: E,
-  'needs-input': E,
-  'needs-resolved': E,
-  continuation: E,
-  'turn-done': E,
-  'flow-review-receipt': E,
-})
-
-export const CODE_EVENT_KINDS = Object.freeze(Object.keys(CODE_EVENT_REGISTRY))
-
-const strictByDefault = () =>
-  typeof process !== 'undefined' && (process.env?.NODE_ENV === 'test' || process.env?.NODE_ENV === 'development')
-
-export function classifyCodeEvent (eventOrKind, { strict = strictByDefault() } = {}) {
-  const kind = typeof eventOrKind === 'string' ? eventOrKind : eventOrKind?.kind
-  const eventClass = typeof kind === 'string' ? CODE_EVENT_REGISTRY[kind] : null
-  if (!eventClass) {
-    if (strict) throw new TypeError(`Unknown ThinkPool Code event kind: ${String(kind)}`)
-    return Object.freeze({ kind: kind ?? null, known: false, eventClass: EVENT_CLASS.UNKNOWN, durable: false, replayable: false, authorizes: false, completes: false })
-  }
-  return Object.freeze({
-    kind,
-    known: true,
-    eventClass,
-    // A replayable command is historical UI context, not a durable decision fact.
-    // Only delivery evidence currently has the archive-level durability contract.
-    durable: eventClass === E,
-    replayable: eventClass !== V,
-    // Pair control supplies actor-bound authorization. Classification alone never does.
-    authorizes: false,
-    // `completes` means an authority-verified outcome, not a runtime turn boundary.
-    // A successful result can settle execution while remaining unverified.
-    completes: false,
-  })
-}
-
-// Preserve observability without copying an unregistered payload into the replay
-// or archive. This is a bridge-observed delivery failure, not a claim about what
-// the producer meant or a substitute for its event.
-export function unknownCodeEventNotice (eventOrKind) {
-  const rawKind = typeof eventOrKind === 'string' ? eventOrKind : eventOrKind?.kind
-  const unknownKind = typeof rawKind === 'string' ? rawKind.slice(0, 120) : null
-  return {
-    kind: 'error',
-    subtype: 'unknown_event',
-    message: `Unrecognized Code event${unknownKind ? ` "${unknownKind}"` : ''} was rejected; this lane needs recovery.`,
-    unknownKind,
-  }
-}
-
-export const isKnownCodeEventKind = (kind) => Object.hasOwn(CODE_EVENT_REGISTRY, kind)
-
-// Normalize recovery reporting before it enters the durable room log. This is a
-// projection only: adapters retain their existing retry and session behavior.
-export function boundedRecoveryCodeEvent(input) {
-  return recoveryCodeEvent(input)
-}
+import{recoveryCodeEvent as e}from"./error-recovery.mjs";export const EVENT_CLASS=Object.freeze({VOLATILE_PRESENCE:"volatile-presence",REPLAYABLE_PROGRESS:"replayable-progress",REPLAYABLE_COMMAND:"replayable-command",DURABLE_DELIVERY_EVIDENCE:"durable-delivery-evidence",UNKNOWN:"unknown"});const n=EVENT_CLASS.VOLATILE_PRESENCE,t=EVENT_CLASS.REPLAYABLE_PROGRESS,o=EVENT_CLASS.REPLAYABLE_COMMAND,r=EVENT_CLASS.DURABLE_DELIVERY_EVIDENCE;export const CODE_EVENT_REGISTRY=Object.freeze({system:n,thinking_tokens:n,effort:n,mode:n,usage:n,suggestion:n,stalled:n,compact:n,assistant_stream:n,models:n,"model-switch":n,capabilities:n,"update-available":n,you:t,assistant:t,tool_result:t,note:t,pool:t,chat:t,whisper:t,compaction:t,"side-started":t,"side-handback":t,answer:o,control:o,"repo-search":o,clear:o,"queue-add":o,"queue-cancel":o,propose:o,"propose-done":o,result:r,error:r,mockup:r,image:r,"needs-input":r,"needs-resolved":r,continuation:r,"turn-done":r,"flow-review-receipt":r});export const CODE_EVENT_KINDS=Object.freeze(Object.keys(CODE_EVENT_REGISTRY));const s=()=>"undefined"!=typeof process&&("test"===process.env?.NODE_ENV||"development"===process.env?.NODE_ENV);export function classifyCodeEvent(e,{strict:t=s()}={}){const o="string"==typeof e?e:e?.kind,E="string"==typeof o?CODE_EVENT_REGISTRY[o]:null;if(!E){if(t)throw new TypeError(`Unknown ThinkPool Code event kind: ${String(o)}`);return Object.freeze({kind:o??null,known:!1,eventClass:EVENT_CLASS.UNKNOWN,durable:!1,replayable:!1,authorizes:!1,completes:!1})}return Object.freeze({kind:o,known:!0,eventClass:E,durable:E===r,replayable:E!==n,authorizes:!1,completes:!1})}export function unknownCodeEventNotice(e){const n="string"==typeof e?e:e?.kind,t="string"==typeof n?n.slice(0,120):null;return{kind:"error",subtype:"unknown_event",message:`Unrecognized Code event${t?` "${t}"`:""} was rejected; this lane needs recovery.`,unknownKind:t}}export const isKnownCodeEventKind=e=>Object.hasOwn(CODE_EVENT_REGISTRY,e);export function boundedRecoveryCodeEvent(n){return e(n)}

package/codex-app-server.mjs

@@ -1,340 +1 @@
-// codex-app-server.mjs — defensive JSONL/JSON-RPC transport for Codex App Server.
-//
-// App Server is still experimental, so the bridge enables it only for the exact
-// Codex version range whose protocol we have exercised. TP_CODEX_APP_SERVER=0 is
-// the kill switch; `codex exec --json` remains the safe fallback.
-import { execFileSync, spawn } from 'node:child_process'
-import readline from 'node:readline'
-
-export const CODEX_APP_SERVER_ENV = 'TP_CODEX_APP_SERVER'
-export const MIN_CODEX_APP_SERVER_VERSION = Object.freeze([0, 144, 1])
-export const MAX_CODEX_APP_SERVER_VERSION = Object.freeze([0, 145, 0])
-
-const parseVersion = (raw) => {
-  const m = String(raw || '').match(/(?:codex-cli\s+)?(\d+)\.(\d+)\.(\d+)/i)
-  return m ? m.slice(1, 4).map(Number) : null
-}
-
-const atLeast = (actual, minimum) => {
-  for (let i = 0; i < 3; i++) {
-    if (actual[i] > minimum[i]) return true
-    if (actual[i] < minimum[i]) return false
-  }
-  return true
-}
-
-const before = (actual, maximum) => !atLeast(actual, maximum)
-
-const transportError = (message, delivery = 'unknown') => {
-  const error = message instanceof Error ? message : new Error(String(message || 'Codex App Server transport failed'))
-  error.delivery = delivery
-  return error
-}
-
-export function codexAppServerGate({ env = process.env, execFile = execFileSync } = {}) {
-  const setting = String(env?.[CODEX_APP_SERVER_ENV] || '').trim().toLowerCase()
-  if (['0', 'false', 'off'].includes(setting)) {
-    return { enabled: false, reason: `${CODEX_APP_SERVER_ENV} disables App Server`, version: null }
-  }
-  if (setting && !['1', 'true', 'on'].includes(setting)) {
-    return { enabled: false, reason: `${CODEX_APP_SERVER_ENV} has an invalid value`, version: null }
-  }
-  try {
-    const raw = execFile('codex', ['--version'], { encoding: 'utf8', env })
-    const parsed = parseVersion(raw)
-    if (!parsed) return { enabled: false, reason: `unrecognized Codex version: ${String(raw).trim()}`, version: null }
-    const version = parsed.join('.')
-    if (!atLeast(parsed, MIN_CODEX_APP_SERVER_VERSION)) {
-      return { enabled: false, reason: `Codex ${version} is older than ${MIN_CODEX_APP_SERVER_VERSION.join('.')}`, version }
-    }
-    if (!before(parsed, MAX_CODEX_APP_SERVER_VERSION)) {
-      return { enabled: false, reason: `Codex ${version} is newer than the tested App Server protocol (<${MAX_CODEX_APP_SERVER_VERSION.join('.')})`, version }
-    }
-    return { enabled: true, reason: null, version }
-  } catch (error) {
-    return { enabled: false, reason: `could not read Codex version: ${error?.message || error}`, version: null }
-  }
-}
-
-export function buildCodexAppServerArgs({ providerConfig, mcpUrl, writableDirs = [] } = {}) {
-  const args = ['app-server', '--stdio']
-  if (providerConfig) args.push('-c', providerConfig)
-  if (mcpUrl) {
-    args.push('-c', `mcp_servers.thinkpool.url=${JSON.stringify(mcpUrl)}`)
-    // The room prompt promises spawn/read/close_terminal as native room tools.
-    // Fail startup instead of silently running a tool-less Codex turn when the
-    // private loopback MCP handshake is unavailable. Existing MCP approval
-    // policy still owns the room permission card for each call.
-    args.push('-c', 'mcp_servers.thinkpool.required=true')
-  }
-  if (writableDirs.length) args.push('-c', `sandbox_workspace_write.writable_roots=${JSON.stringify(writableDirs)}`)
-  return args
-}
-
-const rpcError = (message, code = -32000) => ({ code, message: String(message || 'App Server request failed') })
-const turnInput = (text, images = []) => [
-  { type: 'text', text: String(text ?? '') },
-  ...images.filter(Boolean).map((imagePath) => ({ type: 'localImage', path: String(imagePath) })),
-]
-
-/**
- * Minimal App Server client. It deliberately accepts unknown notifications and
- * fields: protocol additions must not take down an otherwise usable lane.
- */
-export class CodexAppServerClient {
-  constructor({ cwd, env, args = ['app-server', '--stdio'], spawnImpl = spawn, onNotification, onServerRequest, onClose, initializeTimeoutMs = 3000, threadTimeoutMs = 5000, turnStartTimeoutMs = 5000, controlTimeoutMs = 5000 } = {}) {
-    this.cwd = cwd
-    this.env = env
-    this.args = args
-    this.spawnImpl = spawnImpl
-    this.onNotification = onNotification
-    this.onServerRequest = onServerRequest
-    this.onClose = onClose
-    this.initializeTimeoutMs = initializeTimeoutMs
-    this.threadTimeoutMs = threadTimeoutMs
-    this.turnStartTimeoutMs = turnStartTimeoutMs
-    this.controlTimeoutMs = controlTimeoutMs
-    this.child = null
-    this.nextId = 1
-    this.pending = new Map()
-    this.turnWaiters = new Map()
-    this.completedTurns = new Map()
-    this.mcpStartup = new Map()
-    this.mcpWaiters = new Map()
-    this.closedError = null
-    this.stderrTail = ''
-  }
-
-  get alive() { return !!this.child && !this.closedError }
-
-  async start() {
-    if (this.child) return
-    const child = this.spawnImpl('codex', this.args, { cwd: this.cwd, env: this.env, stdio: ['pipe', 'pipe', 'pipe'] })
-    this.child = child
-    const rl = readline.createInterface({ input: child.stdout, crlfDelay: Infinity })
-    rl.on('line', (line) => this._onLine(line))
-    child.stderr?.on?.('data', (chunk) => {
-      this.stderrTail += String(chunk)
-      if (this.stderrTail.length > 1200) this.stderrTail = this.stderrTail.slice(-1200)
-    })
-    child.stdin?.on?.('error', (error) => this._close(error))
-    child.on('error', (error) => this._close(error))
-    child.on('close', (code) => this._close(new Error(`codex app-server exited ${code ?? 'unknown'}${this.stderrTail ? `: ${this.stderrTail.trim().slice(-300)}` : ''}`)))
-
-    await this.request('initialize', {
-      clientInfo: { name: 'thinkpool-pair', title: 'ThinkPool Code', version: '1' },
-      capabilities: { experimentalApi: true },
-    }, this.initializeTimeoutMs)
-    this.notify('initialized')
-  }
-
-  _write(message) {
-    if (!this.child?.stdin || this.closedError) throw this.closedError || new Error('codex app-server is not running')
-    this.child.stdin.write(`${JSON.stringify(message)}\n`)
-  }
-
-  request(method, params = {}, timeoutMs = 0) {
-    const id = this.nextId++
-    return new Promise((resolve, reject) => {
-      let timer = null
-      if (timeoutMs > 0) timer = setTimeout(() => {
-        this.pending.delete(id)
-        reject(transportError(`${method} timed out after ${timeoutMs}ms`, 'unknown'))
-      }, timeoutMs)
-      this.pending.set(id, { resolve, reject, timer, method })
-      try { this._write({ id, method, params }) }
-      catch (error) {
-        this.pending.delete(id)
-        if (timer) clearTimeout(timer)
-        reject(transportError(error, 'not_sent'))
-      }
-    })
-  }
-
-  notify(method, params) {
-    this._write(params === undefined ? { method } : { method, params })
-  }
-
-  respond(id, result) { this._write({ id, result }) }
-  respondError(id, error) { this._write({ id, error: rpcError(error?.message || error) }) }
-
-  _onLine(line) {
-    if (!String(line).trim()) return
-    let message
-    try { message = JSON.parse(line) } catch { return }
-    if (message.id != null && ('result' in message || 'error' in message) && !message.method) {
-      const pending = this.pending.get(message.id)
-      if (!pending) return
-      this.pending.delete(message.id)
-      if (pending.timer) clearTimeout(pending.timer)
-      if (message.error) {
-        const error = transportError(message.error.message || `${pending.method} failed`, 'rejected')
-        error.code = message.error.code
-        error.data = message.error.data
-        pending.reject(error)
-      }
-      else pending.resolve(message.result)
-      return
-    }
-    if (message.id != null && message.method) {
-      Promise.resolve().then(() => {
-        if (!this.onServerRequest) throw new Error(`Unsupported Codex App Server request: ${message.method}`)
-        return this.onServerRequest(message.method, message.params || {}, message.id)
-      })
-        .then((result) => { try { this.respond(message.id, result ?? {}) } catch { /* peer closed */ } })
-        .catch((error) => { try { this.respondError(message.id, error) } catch { /* peer closed */ } })
-      return
-    }
-    if (!message.method) return
-    if (message.method === 'turn/completed') {
-      const turn = message.params?.turn
-      const turnId = turn?.id
-      if (turnId) {
-        const waiter = this.turnWaiters.get(turnId)
-        if (waiter) { this.turnWaiters.delete(turnId); waiter.resolve(message.params) }
-        else {
-          this.completedTurns.set(turnId, message.params)
-          while (this.completedTurns.size > 32) this.completedTurns.delete(this.completedTurns.keys().next().value)
-        }
-      }
-    }
-    if (message.method === 'mcpServer/startupStatus/updated') {
-      const params = message.params || {}
-      const threadId = String(params.threadId || '')
-      const name = String(params.name || '')
-      if (threadId && name) {
-        const key = `${threadId}\0${name}`
-        this.mcpStartup.set(key, params)
-        const waiter = this.mcpWaiters.get(key)
-        if (waiter && params.status === 'ready') {
-          this.mcpWaiters.delete(key)
-          if (waiter.timer) clearTimeout(waiter.timer)
-          waiter.resolve(params)
-        } else if (waiter && (params.status === 'failed' || params.error || params.failureReason)) {
-          this.mcpWaiters.delete(key)
-          if (waiter.timer) clearTimeout(waiter.timer)
-          waiter.reject(new Error(`Codex MCP server ${name} failed to start: ${params.error || params.failureReason || params.status}`))
-        }
-      }
-    }
-    try { this.onNotification?.(message.method, message.params || {}) } catch { /* consumer isolation */ }
-  }
-
-  _close(error) {
-    if (this.closedError) return
-    this.closedError = transportError(error instanceof Error ? error : String(error || 'codex app-server closed'), 'unknown')
-    this.child = null
-    for (const { reject, timer } of this.pending.values()) { if (timer) clearTimeout(timer); reject(this.closedError) }
-    this.pending.clear()
-    for (const { reject } of this.turnWaiters.values()) reject(this.closedError)
-    this.turnWaiters.clear()
-    this.completedTurns.clear()
-    for (const { reject, timer } of this.mcpWaiters.values()) {
-      if (timer) clearTimeout(timer)
-      reject(this.closedError)
-    }
-    this.mcpWaiters.clear()
-    this.mcpStartup.clear()
-    try { this.onClose?.(this.closedError) } catch { /* consumer isolation */ }
-  }
-
-  async startThread({ threadId, cwd, model, sandbox, approvalPolicy, config } = {}) {
-    const params = { cwd, model, sandbox, approvalPolicy, ...(config ? { config } : {}) }
-    const result = threadId
-      ? await this.request('thread/resume', { ...params, threadId }, this.threadTimeoutMs)
-      : await this.request('thread/start', params, this.threadTimeoutMs)
-    const id = result?.thread?.id || result?.threadId || threadId
-    if (!id) throw new Error('Codex App Server did not return a thread id')
-    return id
-  }
-
-  waitForMcpServer({ threadId, name, timeoutMs = this.threadTimeoutMs } = {}) {
-    const safeThreadId = String(threadId || '')
-    const safeName = String(name || '')
-    if (!safeThreadId || !safeName) return Promise.reject(new Error('Codex MCP readiness needs a thread id and server name'))
-    const key = `${safeThreadId}\0${safeName}`
-    const current = this.mcpStartup.get(key)
-    if (current?.status === 'ready') return Promise.resolve(current)
-    if (current && (current.status === 'failed' || current.error || current.failureReason)) {
-      return Promise.reject(new Error(`Codex MCP server ${safeName} failed to start: ${current.error || current.failureReason || current.status}`))
-    }
-    if (this.mcpWaiters.has(key)) return this.mcpWaiters.get(key).promise
-    let timer = null
-    let resolveWaiter
-    let rejectWaiter
-    const promise = new Promise((resolve, reject) => {
-      resolveWaiter = resolve
-      rejectWaiter = reject
-      if (timeoutMs > 0) timer = setTimeout(() => {
-        this.mcpWaiters.delete(key)
-        reject(new Error(`Codex MCP server ${safeName} did not become ready within ${timeoutMs}ms`))
-      }, timeoutMs)
-    })
-    this.mcpWaiters.set(key, { promise, resolve: resolveWaiter, reject: rejectWaiter, timer })
-    return promise
-  }
-
-  async startTurn({ threadId, input, images, model, effort, approvalPolicy, collaborationMode } = {}) {
-    const result = await this.request('turn/start', {
-      threadId,
-      input: turnInput(input, images),
-      ...(model ? { model } : {}),
-      ...(effort ? { effort } : {}),
-      ...(approvalPolicy ? { approvalPolicy } : {}),
-      ...(collaborationMode ? { collaborationMode } : {}),
-    }, this.turnStartTimeoutMs)
-    const turnId = result?.turn?.id || result?.turnId
-    if (!turnId) throw new Error('Codex App Server did not return a turn id')
-    return turnId
-  }
-
-  waitForTurn(turnId) {
-    if (this.completedTurns.has(turnId)) {
-      const result = this.completedTurns.get(turnId)
-      this.completedTurns.delete(turnId)
-      return Promise.resolve(result)
-    }
-    if (this.turnWaiters.has(turnId)) return Promise.reject(new Error(`Already waiting for Codex turn ${turnId}`))
-    return new Promise((resolve, reject) => this.turnWaiters.set(turnId, { resolve, reject }))
-  }
-
-  async steer({ threadId, turnId, input, images } = {}) {
-    return this.request('turn/steer', {
-      threadId,
-      expectedTurnId: turnId,
-      input: turnInput(input, images),
-    }, this.controlTimeoutMs)
-  }
-
-  interrupt({ threadId, turnId } = {}) {
-    return this.request('turn/interrupt', { threadId, turnId }, this.controlTimeoutMs)
-  }
-
-  compact({ threadId } = {}) {
-    return this.request('thread/compact/start', { threadId }, this.controlTimeoutMs)
-  }
-
-  accountUsage() {
-    return this.request('account/usage/read', null, this.controlTimeoutMs)
-  }
-
-  accountRateLimits() {
-    return this.request('account/rateLimits/read', null, this.controlTimeoutMs)
-  }
-
-  startReview({ threadId, target } = {}) {
-    return this.request('review/start', {
-      threadId,
-      target: target || { type: 'uncommittedChanges' },
-      delivery: 'inline',
-    }, this.turnStartTimeoutMs)
-  }
-
-  end() {
-    const child = this.child
-    this._close(new Error('codex app-server ended'))
-    if (child) { try { child.kill('SIGTERM') } catch { /* noop */ } }
-  }
-}
-
-export function createCodexAppServer(options) { return new CodexAppServerClient(options) }
+import{execFileSync as e,spawn as t}from"node:child_process";import r from"node:readline";export const CODEX_APP_SERVER_ENV="TP_CODEX_APP_SERVER";export const MIN_CODEX_APP_SERVER_VERSION=Object.freeze([0,144,1]);export const MAX_CODEX_APP_SERVER_VERSION=Object.freeze([0,145,0]);const i=(e,t)=>{for(let r=0;r<3;r++){if(e[r]>t[r])return!0;if(e[r]<t[r])return!1}return!0},s=(e,t="unknown")=>{const r=e instanceof Error?e:new Error(String(e||"Codex App Server transport failed"));return r.delivery=t,r};export function codexAppServerGate({env:t=process.env,execFile:r=e}={}){const s=String(t?.[CODEX_APP_SERVER_ENV]||"").trim().toLowerCase();if(["0","false","off"].includes(s))return{enabled:!1,reason:`${CODEX_APP_SERVER_ENV} disables App Server`,version:null};if(s&&!["1","true","on"].includes(s))return{enabled:!1,reason:`${CODEX_APP_SERVER_ENV} has an invalid value`,version:null};try{const e=r("codex",["--version"],{encoding:"utf8",env:t}),s=(e=>{const t=String(e||"").match(/(?:codex-cli\s+)?(\d+)\.(\d+)\.(\d+)/i);return t?t.slice(1,4).map(Number):null})(e);if(!s)return{enabled:!1,reason:`unrecognized Codex version: ${String(e).trim()}`,version:null};const o=s.join(".");return i(s,MIN_CODEX_APP_SERVER_VERSION)?i(s,MAX_CODEX_APP_SERVER_VERSION)?{enabled:!1,reason:`Codex ${o} is newer than the tested App Server protocol (<${MAX_CODEX_APP_SERVER_VERSION.join(".")})`,version:o}:{enabled:!0,reason:null,version:o}:{enabled:!1,reason:`Codex ${o} is older than ${MIN_CODEX_APP_SERVER_VERSION.join(".")}`,version:o}}catch(e){return{enabled:!1,reason:`could not read Codex version: ${e?.message||e}`,version:null}}}export function buildCodexAppServerArgs({providerConfig:e,mcpUrl:t,writableDirs:r=[]}={}){const i=["app-server","--stdio"];return e&&i.push("-c",e),t&&(i.push("-c",`mcp_servers.thinkpool.url=${JSON.stringify(t)}`),i.push("-c","mcp_servers.thinkpool.required=true")),r.length&&i.push("-c",`sandbox_workspace_write.writable_roots=${JSON.stringify(r)}`),i}const o=(e,t=-32e3)=>({code:t,message:String(e||"App Server request failed")}),n=(e,t=[])=>[{type:"text",text:String(e??"")},...t.filter(Boolean).map(e=>({type:"localImage",path:String(e)}))];export class CodexAppServerClient{constructor({cwd:e,env:r,args:i=["app-server","--stdio"],spawnImpl:s=t,onNotification:o,onServerRequest:n,onClose:a,initializeTimeoutMs:d=3e3,threadTimeoutMs:c=5e3,turnStartTimeoutMs:l=5e3,controlTimeoutMs:h=5e3}={}){this.cwd=e,this.env=r,this.args=i,this.spawnImpl=s,this.onNotification=o,this.onServerRequest=n,this.onClose=a,this.initializeTimeoutMs=d,this.threadTimeoutMs=c,this.turnStartTimeoutMs=l,this.controlTimeoutMs=h,this.child=null,this.nextId=1,this.pending=new Map,this.turnWaiters=new Map,this.completedTurns=new Map,this.mcpStartup=new Map,this.mcpWaiters=new Map,this.closedError=null,this.stderrTail=""}get alive(){return!!this.child&&!this.closedError}async start(){if(this.child)return;const e=this.spawnImpl("codex",this.args,{cwd:this.cwd,env:this.env,stdio:["pipe","pipe","pipe"]});this.child=e,r.createInterface({input:e.stdout,crlfDelay:1/0}).on("line",e=>this._onLine(e)),e.stderr?.on?.("data",e=>{this.stderrTail+=String(e),this.stderrTail.length>1200&&(this.stderrTail=this.stderrTail.slice(-1200))}),e.stdin?.on?.("error",e=>this._close(e)),e.on("error",e=>this._close(e)),e.on("close",e=>this._close(new Error(`codex app-server exited ${e??"unknown"}${this.stderrTail?`: ${this.stderrTail.trim().slice(-300)}`:""}`))),await this.request("initialize",{clientInfo:{name:"thinkpool-pair",title:"ThinkPool Code",version:"1"},capabilities:{experimentalApi:!0}},this.initializeTimeoutMs),this.notify("initialized")}_write(e){if(!this.child?.stdin||this.closedError)throw this.closedError||new Error("codex app-server is not running");this.child.stdin.write(`${JSON.stringify(e)}\n`)}request(e,t={},r=0){const i=this.nextId++;return new Promise((o,n)=>{let a=null;r>0&&(a=setTimeout(()=>{this.pending.delete(i),n(s(`${e} timed out after ${r}ms`,"unknown"))},r)),this.pending.set(i,{resolve:o,reject:n,timer:a,method:e});try{this._write({id:i,method:e,params:t})}catch(e){this.pending.delete(i),a&&clearTimeout(a),n(s(e,"not_sent"))}})}notify(e,t){this._write(void 0===t?{method:e}:{method:e,params:t})}respond(e,t){this._write({id:e,result:t})}respondError(e,t){this._write({id:e,error:o(t?.message||t)})}_onLine(e){if(!String(e).trim())return;let t;try{t=JSON.parse(e)}catch{return}if(null!=t.id&&("result"in t||"error"in t)&&!t.method){const e=this.pending.get(t.id);if(!e)return;if(this.pending.delete(t.id),e.timer&&clearTimeout(e.timer),t.error){const r=s(t.error.message||`${e.method} failed`,"rejected");r.code=t.error.code,r.data=t.error.data,e.reject(r)}else e.resolve(t.result);return}if(null!=t.id&&t.method)Promise.resolve().then(()=>{if(!this.onServerRequest)throw new Error(`Unsupported Codex App Server request: ${t.method}`);return this.onServerRequest(t.method,t.params||{},t.id)}).then(e=>{try{this.respond(t.id,e??{})}catch{}}).catch(e=>{try{this.respondError(t.id,e)}catch{}});else if(t.method){if("turn/completed"===t.method){const e=t.params?.turn,r=e?.id;if(r){const e=this.turnWaiters.get(r);if(e)this.turnWaiters.delete(r),e.resolve(t.params);else for(this.completedTurns.set(r,t.params);this.completedTurns.size>32;)this.completedTurns.delete(this.completedTurns.keys().next().value)}}if("mcpServer/startupStatus/updated"===t.method){const e=t.params||{},r=String(e.threadId||""),i=String(e.name||"");if(r&&i){const t=`${r}\0${i}`;this.mcpStartup.set(t,e);const s=this.mcpWaiters.get(t);s&&"ready"===e.status?(this.mcpWaiters.delete(t),s.timer&&clearTimeout(s.timer),s.resolve(e)):s&&("failed"===e.status||e.error||e.failureReason)&&(this.mcpWaiters.delete(t),s.timer&&clearTimeout(s.timer),s.reject(new Error(`Codex MCP server ${i} failed to start: ${e.error||e.failureReason||e.status}`)))}}try{this.onNotification?.(t.method,t.params||{})}catch{}}}_close(e){if(!this.closedError){this.closedError=s(e instanceof Error?e:String(e||"codex app-server closed"),"unknown"),this.child=null;for(const{reject:e,timer:t}of this.pending.values())t&&clearTimeout(t),e(this.closedError);this.pending.clear();for(const{reject:e}of this.turnWaiters.values())e(this.closedError);this.turnWaiters.clear(),this.completedTurns.clear();for(const{reject:e,timer:t}of this.mcpWaiters.values())t&&clearTimeout(t),e(this.closedError);this.mcpWaiters.clear(),this.mcpStartup.clear();try{this.onClose?.(this.closedError)}catch{}}}async startThread({threadId:e,cwd:t,model:r,sandbox:i,approvalPolicy:s,config:o}={}){const n={cwd:t,model:r,sandbox:i,approvalPolicy:s,...o?{config:o}:{}},a=e?await this.request("thread/resume",{...n,threadId:e},this.threadTimeoutMs):await this.request("thread/start",n,this.threadTimeoutMs),d=a?.thread?.id||a?.threadId||e;if(!d)throw new Error("Codex App Server did not return a thread id");return d}waitForMcpServer({threadId:e,name:t,timeoutMs:r=this.threadTimeoutMs}={}){const i=String(e||""),s=String(t||"");if(!i||!s)return Promise.reject(new Error("Codex MCP readiness needs a thread id and server name"));const o=`${i}\0${s}`,n=this.mcpStartup.get(o);if("ready"===n?.status)return Promise.resolve(n);if(n&&("failed"===n.status||n.error||n.failureReason))return Promise.reject(new Error(`Codex MCP server ${s} failed to start: ${n.error||n.failureReason||n.status}`));if(this.mcpWaiters.has(o))return this.mcpWaiters.get(o).promise;let a,d,c=null;const l=new Promise((e,t)=>{a=e,d=t,r>0&&(c=setTimeout(()=>{this.mcpWaiters.delete(o),t(new Error(`Codex MCP server ${s} did not become ready within ${r}ms`))},r))});return this.mcpWaiters.set(o,{promise:l,resolve:a,reject:d,timer:c}),l}async startTurn({threadId:e,input:t,images:r,model:i,effort:s,approvalPolicy:o,collaborationMode:a}={}){const d=await this.request("turn/start",{threadId:e,input:n(t,r),...i?{model:i}:{},...s?{effort:s}:{},...o?{approvalPolicy:o}:{},...a?{collaborationMode:a}:{}},this.turnStartTimeoutMs),c=d?.turn?.id||d?.turnId;if(!c)throw new Error("Codex App Server did not return a turn id");return c}waitForTurn(e){if(this.completedTurns.has(e)){const t=this.completedTurns.get(e);return this.completedTurns.delete(e),Promise.resolve(t)}return this.turnWaiters.has(e)?Promise.reject(new Error(`Already waiting for Codex turn ${e}`)):new Promise((t,r)=>this.turnWaiters.set(e,{resolve:t,reject:r}))}async steer({threadId:e,turnId:t,input:r,images:i}={}){return this.request("turn/steer",{threadId:e,expectedTurnId:t,input:n(r,i)},this.controlTimeoutMs)}interrupt({threadId:e,turnId:t}={}){return this.request("turn/interrupt",{threadId:e,turnId:t},this.controlTimeoutMs)}compact({threadId:e}={}){return this.request("thread/compact/start",{threadId:e},this.controlTimeoutMs)}accountUsage(){return this.request("account/usage/read",null,this.controlTimeoutMs)}accountRateLimits(){return this.request("account/rateLimits/read",null,this.controlTimeoutMs)}startReview({threadId:e,target:t}={}){return this.request("review/start",{threadId:e,target:t||{type:"uncommittedChanges"},delivery:"inline"},this.turnStartTimeoutMs)}end(){const e=this.child;if(this._close(new Error("codex app-server ended")),e)try{e.kill("SIGTERM")}catch{}}}export function createCodexAppServer(e){return new CodexAppServerClient(e)}

package/codex-commands.mjs

@@ -1,83 +1 @@
-// Codex Code-room command policy.
-//
-// This is intentionally NOT a transcription of the interactive `codex` TUI
-// palette. Codex CLI 0.144.1's App Server schema has no slash-command catalog
-// endpoint. Keep only a command which the room can actually execute, and keep
-// bridge-wide controls in bridge.mjs where their shared state semantics live.
-
-/**
- * Commands surfaced from the Codex runtime's system catalog.
- *
- * /compact is bridge-executed today: bridge.mjs clears the native Codex context
- * and carries a bounded room recap into the next fresh thread. App Server also
- * exposes thread/compact/start in 0.144.1, but the bridge path is the supported
- * cross-transport implementation, including exec fallback and the room's
- * durable recap semantics.
- */
-export const CODEX_COMMAND_CATALOG = Object.freeze([])
-
-/**
- * Evidence-backed command matrix for the installed Codex CLI (0.144.1).
- * `surface` means what ThinkPool intentionally advertises; it is not a claim
- * that an interactive terminal palette command works through App Server.
- */
-export const CODEX_COMMAND_MATRIX = Object.freeze([
-  Object.freeze({ name: '/compact', surface: true, runtime: 'native', api: 'thread/compact/start', reason: 'Native App Server compaction; bounded-recap reset remains the exec fallback.' }),
-  Object.freeze({ name: '/model', surface: true, runtime: 'bridge', api: 'model/list', reason: 'Shared picker owns the model argument.' }),
-  Object.freeze({ name: '/clear', surface: true, runtime: 'bridge', api: null, reason: 'Shared reset clears visible lane history and starts a fresh native thread.' }),
-  Object.freeze({ name: '/usage', surface: true, runtime: 'bridge+native', api: 'account/usage/read + account/rateLimits/read', reason: 'Reports lane usage plus redacted provider totals and limits.' }),
-  Object.freeze({ name: '/credits', surface: true, runtime: 'native', api: 'account/rateLimits/read', reason: 'Reports balance/availability only; never account identity.' }),
-  Object.freeze({ name: '/review', surface: true, runtime: 'native', api: 'review/start', reason: 'Ordinary lanes only; Flow and reviewer structural restrictions win.' }),
-])
-
-/**
- * Explicit exclusions: present in an interactive CLI or App Server protocol,
- * but not safe/meaningful Code-room commands. Never add these by inference.
- */
-export const CODEX_COMMAND_EXCLUSIONS = Object.freeze([
-  'profile-global configuration, skills, plugins, marketplaces, and experimental features',
-  'updates, diagnostics/feedback upload, and external-agent import',
-  'credentials, login/logout, identity, and account mutation',
-  'thread archive/delete/fork/name/goal/rollback and hidden-agent controls',
-  'MCP OAuth, filesystem, shell, and interactive command-exec protocol methods',
-  'detached review and review from Flow/reviewer lanes, because visible structural restrictions win',
-])
-
-export function isCodexCompactCommand(text) {
-  return /^\s*\/compact\s*$/i.test(String(text || ''))
-}
-
-export function codexReviewTarget(text) {
-  const body = String(text || '').replace(/^\s*\/review\b/i, '').trim()
-  if (!body) return { type: 'uncommittedChanges' }
-  const base = body.match(/^base\s*:\s*(\S+)$/i)
-  if (base) return { type: 'baseBranch', branch: base[1] }
-  const commit = body.match(/^commit\s*:\s*([a-f0-9]{7,64})$/i)
-  if (commit) return { type: 'commit', sha: commit[1] }
-  return { type: 'custom', instructions: body }
-}
-
-const pct = (value) => Number.isFinite(Number(value)) ? `${Math.round(Number(value))}%` : null
-const reset = (value) => Number.isFinite(Number(value)) ? new Date(Number(value) * 1000).toISOString().replace('T', ' ').slice(0, 16) + 'Z' : null
-
-export function codexLimitReportLine(snapshot) {
-  const limits = snapshot?.rateLimits || null
-  if (!limits) return 'Codex provider limits unavailable'
-  const parts = []
-  if (limits.primary?.usedPercent != null) parts.push(`primary ${pct(limits.primary.usedPercent)}${reset(limits.primary.resetsAt) ? ` · resets ${reset(limits.primary.resetsAt)}` : ''}`)
-  if (limits.secondary?.usedPercent != null) parts.push(`secondary ${pct(limits.secondary.usedPercent)}${reset(limits.secondary.resetsAt) ? ` · resets ${reset(limits.secondary.resetsAt)}` : ''}`)
-  return parts.length ? `Codex limits · ${parts.join(' · ')}` : 'Codex provider limits unavailable'
-}
-
-export function codexCreditsReportLine(snapshot) {
-  const credits = snapshot?.rateLimits?.credits
-  if (!credits) return 'Codex credits unavailable for this account'
-  if (credits.unlimited) return 'Codex credits · unlimited'
-  if (credits.balance != null) return `Codex credits · balance ${String(credits.balance)}`
-  return `Codex credits · ${credits.hasCredits ? 'available' : 'none available'}`
-}
-
-export function codexAccountUsageLine(snapshot) {
-  const total = snapshot?.summary?.lifetimeTokens
-  return Number.isFinite(Number(total)) ? `Codex account usage · ${Number(total).toLocaleString('en-US')} lifetime tokens` : null
-}
+export const CODEX_COMMAND_CATALOG=Object.freeze([]);export const CODEX_COMMAND_MATRIX=Object.freeze([Object.freeze({name:"/compact",surface:!0,runtime:"native",api:"thread/compact/start",reason:"Native App Server compaction; bounded-recap reset remains the exec fallback."}),Object.freeze({name:"/model",surface:!0,runtime:"bridge",api:"model/list",reason:"Shared picker owns the model argument."}),Object.freeze({name:"/clear",surface:!0,runtime:"bridge",api:null,reason:"Shared reset clears visible lane history and starts a fresh native thread."}),Object.freeze({name:"/usage",surface:!0,runtime:"bridge+native",api:"account/usage/read + account/rateLimits/read",reason:"Reports lane usage plus redacted provider totals and limits."}),Object.freeze({name:"/credits",surface:!0,runtime:"native",api:"account/rateLimits/read",reason:"Reports balance/availability only; never account identity."}),Object.freeze({name:"/review",surface:!0,runtime:"native",api:"review/start",reason:"Ordinary lanes only; Flow and reviewer structural restrictions win."})]);export const CODEX_COMMAND_EXCLUSIONS=Object.freeze(["profile-global configuration, skills, plugins, marketplaces, and experimental features","updates, diagnostics/feedback upload, and external-agent import","credentials, login/logout, identity, and account mutation","thread archive/delete/fork/name/goal/rollback and hidden-agent controls","MCP OAuth, filesystem, shell, and interactive command-exec protocol methods","detached review and review from Flow/reviewer lanes, because visible structural restrictions win"]);export function isCodexCompactCommand(e){return/^\s*\/compact\s*$/i.test(String(e||""))}export function codexReviewTarget(e){const t=String(e||"").replace(/^\s*\/review\b/i,"").trim();if(!t)return{type:"uncommittedChanges"};const r=t.match(/^base\s*:\s*(\S+)$/i);if(r)return{type:"baseBranch",branch:r[1]};const a=t.match(/^commit\s*:\s*([a-f0-9]{7,64})$/i);return a?{type:"commit",sha:a[1]}:{type:"custom",instructions:t}}const e=e=>Number.isFinite(Number(e))?`${Math.round(Number(e))}%`:null,t=e=>Number.isFinite(Number(e))?new Date(1e3*Number(e)).toISOString().replace("T"," ").slice(0,16)+"Z":null;export function codexLimitReportLine(r){const a=r?.rateLimits||null;if(!a)return"Codex provider limits unavailable";const n=[];return null!=a.primary?.usedPercent&&n.push(`primary ${e(a.primary.usedPercent)}${t(a.primary.resetsAt)?` · resets ${t(a.primary.resetsAt)}`:""}`),null!=a.secondary?.usedPercent&&n.push(`secondary ${e(a.secondary.usedPercent)}${t(a.secondary.resetsAt)?` · resets ${t(a.secondary.resetsAt)}`:""}`),n.length?`Codex limits · ${n.join(" · ")}`:"Codex provider limits unavailable"}export function codexCreditsReportLine(e){const t=e?.rateLimits?.credits;return t?t.unlimited?"Codex credits · unlimited":null!=t.balance?`Codex credits · balance ${String(t.balance)}`:"Codex credits · "+(t.hasCredits?"available":"none available"):"Codex credits unavailable for this account"}export function codexAccountUsageLine(e){const t=e?.summary?.lifetimeTokens;return Number.isFinite(Number(t))?`Codex account usage · ${Number(t).toLocaleString("en-US")} lifetime tokens`:null}