[CmdletBinding()]

param(

[Parameter(Position=0)][string]$Message = '',

[string]$Thread = '',

[switch]$Latest,

[switch]$DryRun,

[switch]$ShowTarget,

[string]$CodexExe = $env:CODEX_EXE

)

Set-StrictMode -Version 2.0

$ErrorActionPreference = 'Stop'

function Stop-QueueHelper([string]$Message) {

# Only our fixed diagnostics are safe to print; native filesystem exceptions

# can contain private directories, session names or the command line.

$failure = New-Object System.InvalidOperationException $Message

$failure.Data['SafeQueueMessage'] = $true

throw $failure

}

function ConvertTo-NativeArgument([string]$Value) {

# Windows CRT quoting for .NET Framework / Windows PowerShell 5.1:

# double backslashes before a quote and before the closing quote.

$escaped = [regex]::Replace($Value, '(\\*)"', '$1$1\"')

$escaped = [regex]::Replace($escaped, '(\\+)$', '$1$1')

return '"' + $escaped + '"'

}

function Invoke-CodexNative([string]$Exe, [string[]]$Arguments, [switch]$Probe) {

# Avoid cmd.exe and PowerShell's legacy native-argument serialization: quotes,

# Unicode, newlines, trailing slashes and shell metacharacters must stay data.

$info = New-Object System.Diagnostics.ProcessStartInfo

$info.FileName = $Exe

$info.UseShellExecute = $false

# Set-Location does not update .NET's process cwd. Use the shell's filesystem

# location for both help and submission, including relative CODEX_HOME values.

$location = Get-Location

if ($location.Provider.Name -ne 'FileSystem') { Stop-QueueHelper 'Run this helper from a filesystem directory.' }

$info.WorkingDirectory = $location.ProviderPath

if ($null -ne $info.PSObject.Properties['ArgumentList']) {

foreach ($argument in $Arguments) { $info.ArgumentList.Add($argument) }

} else {

$info.Arguments = (($Arguments | ForEach-Object { ConvertTo-NativeArgument $_ }) -join ' ')

}

$info.RedirectStandardOutput = [bool]$Probe

$info.RedirectStandardError = [bool]$Probe

$process = New-Object System.Diagnostics.Process

$process.StartInfo = $info

try {

[void]$process.Start()

if ($Probe) {

$stdout = $process.StandardOutput.ReadToEndAsync()

$stderr = $process.StandardError.ReadToEndAsync()

if (-not $process.WaitForExit(10000)) {

$process.Kill()

Stop-QueueHelper 'Codex queue help timed out; select the matching app-bundled CLI with -CodexExe.'

}

$process.WaitForExit()

return [pscustomobject]@{ ExitCode = $process.ExitCode; Output = $stdout.Result }

}

$process.WaitForExit()

return $process.ExitCode

} finally {

$process.Dispose()

}

}

function Test-CodexQueue([string]$Path) {

# A successful generic help response is not enough: check queue-specific flags.

if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) { return $false }

if ($env:OS -eq 'Windows_NT' -and [IO.Path]::GetExtension($Path) -ine '.exe') { return $false }

try {

$nativePath = (Get-Item -LiteralPath $Path).FullName

$probe = Invoke-CodexNative $nativePath @('queue', '--help') -Probe

return $probe.ExitCode -eq 0 -and $probe.Output.Contains('--thread') -and $probe.Output.Contains('--message')

} catch { return $false }

}

function Resolve-CodexExe([string]$Explicit, [string]$CodexHomeDir) {

# Pinning is authoritative: do not fall back after an invalid explicit choice.

if (-not [string]::IsNullOrEmpty($Explicit)) {

if (-not (Test-CodexQueue $Explicit)) {

Stop-QueueHelper 'Selected CLI does not support queue --thread/--message. On Windows, -CodexExe must name a native .exe, not a command shim.'

}

return (Get-Item -LiteralPath $Explicit).FullName

}

$candidates = New-Object 'System.Collections.Generic.List[string]'

if ($env:LOCALAPPDATA) {

$binRoot = Join-Path $env:LOCALAPPDATA 'OpenAI\Codex\bin'

$bundled = @(Get-ChildItem -LiteralPath $binRoot -Directory -ErrorAction SilentlyContinue |

ForEach-Object { Get-Item -LiteralPath (Join-Path $_.FullName 'codex.exe') -ErrorAction SilentlyContinue } |

Sort-Object LastWriteTimeUtc, FullName -Descending)

foreach ($file in $bundled) { $candidates.Add($file.FullName) }

}

foreach ($root in @($CodexHomeDir, (Join-Path $HOME '.codex'))) {

$candidates.Add((Join-Path $root 'packages\standalone\current\bin\codex.exe'))

$candidates.Add((Join-Path $root 'packages\standalone\current\codex.exe'))

}

# Inspect PATH components before resolving them: Get-Command loses whether a

# candidate came from a relative entry. Local executables need explicit pinning.

foreach ($entry in ($env:PATH -split [IO.Path]::PathSeparator)) {

$directory = $entry

if ($directory.Length -ge 2 -and $directory.StartsWith('"') -and $directory.EndsWith('"')) {

$directory = $directory.Substring(1, $directory.Length - 2)

}

if ($env:OS -eq 'Windows_NT') {

# A drive-qualified root or UNC share is absolute; C:relative and \rooted are not.

if ($directory -notmatch '^(?:[a-zA-Z]:[\\/]|[\\/]{2}[^\\/]+[\\/][^\\/]+)') { continue }

} elseif (-not $directory.StartsWith('/')) { continue }

foreach ($name in @('codex.exe', 'codex')) {

$candidates.Add((Join-Path $directory $name))

}

}

foreach ($candidate in $candidates) {

if (Test-CodexQueue $candidate) { return (Get-Item -LiteralPath $candidate).FullName }

}

Stop-QueueHelper 'No queue-capable native Codex CLI found. Install/update Codex or supply -CodexExe.'

}

function Resolve-LatestThread([string]$CodexHomeDir) {

# Scan only the effective store. Fail on incomplete reads instead of silently

# selecting from another account/home. Deterministic filename order breaks ties.

$sessions = Join-Path $CodexHomeDir 'sessions'

if (-not (Test-Path -LiteralPath $sessions -PathType Container)) {

Stop-QueueHelper 'No sessions directory under the effective CODEX_HOME.'

}

$uuid = '[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}'

$pattern = '^rollout-.+-(' + $uuid + ')(_' + $uuid + ')?\.jsonl$'

# Reparse points are excluded: a linked rollout must not select a thread or

# path outside the effective session store.

$latestFile = Get-ChildItem -LiteralPath $sessions -Recurse -File -Filter 'rollout-*.jsonl' |

Where-Object { $_.Name -match $pattern -and -not ($_.Attributes -band [IO.FileAttributes]::ReparsePoint) } |

Sort-Object LastWriteTimeUtc, FullName -Descending |

Select-Object -First 1

if ($null -eq $latestFile -or $latestFile.Name -notmatch $pattern) {

Stop-QueueHelper 'No recognized rollout thread found; specify -Thread explicitly.'

}

return $Matches[1]

}

try {

if ([string]::IsNullOrEmpty($Thread) -and -not $Latest) {

Stop-QueueHelper 'Choose -Thread <id-or-exact-name> or explicitly opt in with -Latest.'

}

if (-not [string]::IsNullOrEmpty($Thread) -and $Latest) { Stop-QueueHelper '-Thread and -Latest are mutually exclusive.' }

if (-not $DryRun -and [string]::IsNullOrEmpty($Message)) { Stop-QueueHelper 'A nonempty message is required.' }

if ($Message.IndexOf([char]0) -ge 0 -or $Thread.IndexOf([char]0) -ge 0) { Stop-QueueHelper 'NUL characters cannot be passed to the native CLI.' }

if ($ShowTarget) {

if (-not $DryRun) { Stop-QueueHelper '-ShowTarget requires -DryRun.' }

if ([Console]::IsOutputRedirected -or [Console]::IsErrorRedirected) {

Stop-QueueHelper '-ShowTarget requires a local terminal, not redirected output.'

}

}

$codexHomeDir = if ([string]::IsNullOrEmpty($env:CODEX_HOME)) { Join-Path $HOME '.codex' } else { $env:CODEX_HOME }

# Anchor relative paths before filesystem cmdlets, including Windows PowerShell

# 5.1 literal paths after Set-Location. The native child's environment stays intact.

if (-not [IO.Path]::IsPathRooted($codexHomeDir)) {

$location = Get-Location

if ($location.Provider.Name -ne 'FileSystem') { Stop-QueueHelper 'Run this helper from a filesystem directory.' }

$codexHomeDir = [IO.Path]::GetFullPath((Join-Path $location.ProviderPath $codexHomeDir))

}

if ($Latest) {

$Thread = Resolve-LatestThread $codexHomeDir

Write-Warning '-Latest may select a different project or a subagent, not the foreground chat.'

}

$exe = Resolve-CodexExe $CodexExe $codexHomeDir

if ($DryRun) {

if ($ShowTarget) {

# JSON escaping keeps control characters in session names from acting on

# the terminal. Explicit local display is separate from diagnostic logs.

[Console]::WriteLine('Codex: ' + (ConvertTo-Json -InputObject $exe -Compress))

[Console]::WriteLine('Thread: ' + (ConvertTo-Json -InputObject $Thread -Compress))

} else {

Write-Output 'Codex: queue-capable CLI (path hidden)' 'Thread: selected (value hidden)'

}

Write-Output 'Dry run only; no message was queued. Daemon/provider health is not checked.'

exit 0

}

# Preserve the CLI's exit code. Never retry an ambiguous queue result automatically.

$code = Invoke-CodexNative $exe @('queue', "--thread=$Thread", "--message=$Message")

exit $code

} catch {

$safeMessage = 'Queue helper failed. Check CODEX_HOME, directory access and the native CLI; inspect the queue before retrying.'

if ($_.Exception.Data.Contains('SafeQueueMessage')) { $safeMessage = $_.Exception.Message }

[Console]::Error.WriteLine($safeMessage)

exit 1

}