# Secret-free, repository-owned Agent CLI provider catalog.
# Authentication and credentials remain owned by each external CLI.
version: "1"

providers:
  - id: codex
    command: codex
    version_probe:
      args: ["--version"]
      timeout_ms: 5000
    authentication:
      args: ["login", "status"]
      timeout_ms: 10000
      unauthenticated_pattern: "(?i)(not logged in|login required|unauthenticated)"
    capabilities:
      - approval_bypass
      - cancel
      - resume
      - run
      - status
      - unattended
      - writable_root_confinement

  - id: claude
    command: claude
    version_probe:
      args: ["--version"]
      timeout_ms: 5000
    authentication:
      args: ["auth", "status"]
      timeout_ms: 10000
      unauthenticated_pattern: "(?i)(not logged in|login required|unauthenticated)"
    capabilities:
      - approval_bypass
      - cancel
      - run
      - status
      - unattended
      - writable_root_confinement

models:
  - id: gpt-5.6-sol
    provider: codex
    target: gpt-5.6-sol
  - id: claude-opus-4-8
    provider: claude
    target: claude-opus-4-8

profiles:
  - id: claude-headless
    provider: claude
    model: claude-opus-4-8
    args:
      - "--print"
      - "--verbose"
      - "--output-format"
      - "stream-json"
      - "--dangerously-skip-permissions"
      - "--model"
      - "{{model}}"
    output_format: claude-json
    max_concurrency: 1
    capabilities:
      - approval_bypass
      - cancel
      - run
      - status
      - unattended
      - writable_root_confinement

  - id: codex-headless
    provider: codex
    model: gpt-5.6-sol
    args:
      - "exec"
      - "--json"
      - "--dangerously-bypass-approvals-and-sandbox"
      - "--skip-git-repo-check"
      - "--model"
      - "{{model}}"
    resume_args:
      - "exec"
      - "resume"
      - "--json"
      - "--dangerously-bypass-approvals-and-sandbox"
      - "--skip-git-repo-check"
      - "--model"
      - "{{model}}"
    mode: codex-exec
    output_format: codex-json
    persistent: true
    max_concurrency: 1
    capabilities:
      - approval_bypass
      - cancel
      - resume
      - run
      - status
      - unattended
      - writable_root_confinement

  # The authenticated smoke uses the same production profile contract with a
  # distinct stable ID so evidence cannot be confused with normal work.
  - id: codex-smoke
    provider: codex
    model: gpt-5.6-sol
    args:
      - "exec"
      - "--json"
      - "--dangerously-bypass-approvals-and-sandbox"
      - "--skip-git-repo-check"
      - "--model"
      - "{{model}}"
    resume_args:
      - "exec"
      - "resume"
      - "--json"
      - "--dangerously-bypass-approvals-and-sandbox"
      - "--skip-git-repo-check"
      - "--model"
      - "{{model}}"
    mode: codex-exec
    output_format: codex-json
    persistent: true
    max_concurrency: 1
    capabilities:
      - approval_bypass
      - cancel
      - resume
      - run
      - status
      - unattended
      - writable_root_confinement