npm - @bitkyc08/opencodex - Versions diffs - 2.35.0 → 2.36.0-preview.20260830 - Mend

@bitkyc08/opencodex 2.35.0 → 2.36.0-preview.20260830

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (155) hide show

package/gui/dist/assets/index-Cy7Z_pl0.css +1 -0
package/gui/dist/assets/index-DPl4nBMA.js +112 -0
package/gui/dist/index.html +2 -2
package/package.json +2 -1
package/src/AGENTS.md +2 -1
package/src/adapters/agentrouter.ts +50 -0
package/src/adapters/anthropic.ts +1 -51
package/src/adapters/cursor/call-id.ts +76 -8
package/src/adapters/cursor/checkpoint-store.ts +6 -1
package/src/adapters/cursor/cursor-errors.ts +44 -0
package/src/adapters/cursor/native-exec.ts +13 -0
package/src/adapters/cursor/protobuf-request.ts +651 -29
package/src/adapters/cursor/tool-result-normalize.ts +3 -3
package/src/adapters/cursor/transport-retry.ts +5 -1
package/src/adapters/cursor.ts +15 -1
package/src/adapters/empty-tool-output-annotation.ts +43 -0
package/src/adapters/exec-tool-result-normalize.ts +70 -5
package/src/adapters/google.ts +22 -2
package/src/adapters/kiro.ts +26 -2
package/src/adapters/ollama-native-url.ts +111 -0
package/src/adapters/ollama-native.ts +1131 -0
package/src/adapters/openai-chat.ts +30 -7
package/src/adapters/openai-responses.ts +72 -4
package/src/adapters/registry.ts +7 -0
package/src/adapters/xai-web-search.ts +58 -0
package/src/claude/desktop-3p.ts +21 -1
package/src/claude/desktop-policy.ts +149 -0
package/src/cli/account.ts +16 -2
package/src/cli/claude-desktop.ts +13 -3
package/src/cli/combo.ts +8 -5
package/src/cli/doctor.ts +77 -11
package/src/cli/help.ts +1 -1
package/src/cli/index.ts +16 -0
package/src/cli/models.ts +20 -3
package/src/cli/registry.ts +2 -1
package/src/cli/status.ts +140 -2
package/src/cli/storage.ts +10 -1
package/src/codex/account-runtime-state.ts +39 -5
package/src/codex/account-store.ts +393 -13
package/src/codex/account-usability.ts +11 -4
package/src/codex/app-server-processes.ts +46 -5
package/src/codex/auth-context.ts +160 -32
package/src/codex/catalog/bundled.ts +7 -5
package/src/codex/catalog/metadata.ts +1 -1
package/src/codex/catalog/parsing.ts +57 -1
package/src/codex/catalog/provider-fetch.ts +61 -4
package/src/codex/catalog/sync.ts +4 -3
package/src/codex/convergence.ts +3 -2
package/src/codex/data/upstream-models.json +40 -8
package/src/codex/inject-coordination.ts +111 -14
package/src/codex/integration-record.ts +12 -2
package/src/codex/main-account.ts +225 -1
package/src/codex/model-entitlements.ts +339 -27
package/src/codex/prompt-layers.ts +346 -7
package/src/codex/prompt-text-probe.ts +272 -21
package/src/codex/routing.ts +693 -132
package/src/codex/runtime.ts +12 -0
package/src/codex/subagent-model-fallback.ts +62 -24
package/src/codex/user-identity.ts +33 -25
package/src/combos/index.ts +1 -0
package/src/combos/reset-window.ts +46 -0
package/src/combos/resolve.ts +84 -2
package/src/combos/types.ts +5 -2
package/src/config/atomic-write.ts +104 -22
package/src/config/provider-validation.ts +11 -0
package/src/config.ts +75 -3
package/src/generated/compatibility-version.json +207 -131
package/src/generated/model-metadata.ts +1 -1
package/src/grok/catalog.ts +71 -0
package/src/grok/effort.ts +83 -0
package/src/grok/inject.ts +952 -127
package/src/grok/models.ts +56 -0
package/src/grok/status.ts +21 -8
package/src/grok/sync.ts +10 -18
package/src/images/loop.ts +6 -3
package/src/integrations/native/ownership-preflight.ts +4 -1
package/src/lab/fabric/producer-isolate.ts +36 -3
package/src/lib/destination-policy.ts +93 -7
package/src/lib/redact.ts +6 -1
package/src/lib/shadow-call.ts +38 -3
package/src/lib/test-home-guard.ts +18 -3
package/src/lib/upstream-retry.ts +43 -6
package/src/lib/windows-secret-acl.ts +66 -0
package/src/lib/windows-text.ts +28 -2
package/src/lib/windows-user-principal.ts +35 -23
package/src/oauth/account-quota-rank.ts +107 -0
package/src/oauth/anthropic-routing.ts +125 -30
package/src/oauth/chatgpt.ts +5 -1
package/src/oauth/generic-account-failover.ts +114 -7
package/src/oauth/index.ts +15 -8
package/src/oauth/store.ts +16 -0
package/src/providers/account-quota-disk.ts +79 -0
package/src/providers/command-code-efforts.ts +24 -0
package/src/providers/derive.ts +6 -0
package/src/providers/key-failover.ts +33 -1
package/src/providers/kiro-usage.ts +272 -0
package/src/providers/ollama-show.ts +311 -0
package/src/providers/openai-sidecar.ts +5 -0
package/src/providers/quota-routing-cache.ts +32 -0
package/src/providers/quota-types.ts +36 -0
package/src/providers/quota-wire.ts +102 -0
package/src/providers/quota.ts +208 -147
package/src/providers/registry.ts +68 -8
package/src/providers/slug-codec.ts +12 -4
package/src/providers/vercel-gateway-routing.ts +108 -0
package/src/router.ts +22 -12
package/src/server/auth-cors.ts +26 -0
package/src/server/catalog-download.ts +73 -0
package/src/server/chat-native.ts +12 -2
package/src/server/gui-static.ts +4 -1
package/src/server/index.ts +132 -9
package/src/server/management/agent-settings-routes.ts +38 -5
package/src/server/management/codex-prompt-routes.ts +7 -1
package/src/server/management/combo-routes.ts +10 -1
package/src/server/management/config-routes.ts +9 -1
package/src/server/management/context.ts +5 -0
package/src/server/management/model-routes.ts +16 -6
package/src/server/management/native-integration-routes.ts +12 -17
package/src/server/management/oauth-account-routes.ts +13 -0
package/src/server/management/provider-routes.ts +32 -5
package/src/server/management/routing-profile-routes.ts +15 -0
package/src/server/management/shadow-call-validation.ts +29 -0
package/src/server/management-api.ts +7 -3
package/src/server/request-log.ts +3 -5
package/src/server/responses/agent-task-recovery-cache.ts +8 -0
package/src/server/responses/agent-task-recovery.ts +52 -20
package/src/server/responses/codex-auth-error.ts +26 -0
package/src/server/responses/compact.ts +345 -10
package/src/server/responses/core.ts +736 -108
package/src/server/responses/empty-completion-guard.ts +16 -0
package/src/server/responses/fetch-helpers.ts +42 -0
package/src/server/responses/policy-fallback.ts +11 -6
package/src/server/responses-undeclared-tool-guard.ts +16 -3
package/src/server/startup-health-cache.ts +59 -13
package/src/service-manager-probe.ts +115 -9
package/src/service.ts +139 -40
package/src/storage/cleanup.ts +10 -0
package/src/storage/storage-mutation-coordinator.ts +14 -3
package/src/tray/windows-tray.ps1 +10 -4
package/src/tray/windows.ts +30 -2
package/src/types/config.ts +27 -14
package/src/types/provider.ts +54 -0
package/src/types/tools.ts +13 -3
package/src/types.ts +4 -0
package/src/usage/summary.ts +421 -177
package/src/vision/anthropic-describe.ts +3 -3
package/src/vision/describe.ts +5 -3
package/src/web-search/anthropic-executor.ts +9 -2
package/src/web-search/exa-executor.ts +3 -3
package/src/web-search/executor.ts +8 -3
package/src/web-search/gemini-executor.ts +3 -3
package/src/web-search/loop.ts +11 -3
package/src/web-search/xai-executor.ts +3 -3
package/gui/dist/assets/index-DNdRKXK9.js +0 -112
package/gui/dist/assets/index-DQ-Ie18T.css +0 -1

package/gui/dist/index.html CHANGED Viewed

@@ -16,8 +16,8 @@
         } catch (e) {}
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-DNdRKXK9.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-DQ-Ie18T.css">
+    <script type="module" crossorigin src="/assets/index-DPl4nBMA.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-Cy7Z_pl0.css">
   </head>
   <body>
     <div id="root"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@bitkyc08/opencodex",
-  "version": "2.35.0",
+  "version": "2.36.0-preview.20260830",
   "description": "Universal provider proxy for OpenAI Codex & Claude Code — use any LLM with Codex CLI/App/SDK and Claude Code",
   "type": "module",
   "main": "./bin/package-main.mjs",
@@ -39,6 +39,7 @@
     "dev:gui": "cd gui && bun run dev",
     "start": "bun run src/cli/index.ts start",
     "test": "bun scripts/test.ts",
+    "test:changed": "bun scripts/test.ts --changed=dev",
     "typecheck": "bun x tsc --noEmit",
     "audit:high": "bun audit --audit-level=high && cd gui && bun audit --audit-level=high",
     "privacy:scan": "bun scripts/privacy-scan.ts",

package/src/AGENTS.md CHANGED Viewed

@@ -23,6 +23,7 @@ This file applies to `src/` and inherits the repository-wide rules in `/AGENTS.m
 - Place focused regression coverage near the existing tests for the affected subsystem.
 - For focused behavior, run the relevant `bun test tests/<name>.test.ts` and `bun run typecheck`.
-- For shared routing, adapters, config, OAuth, or server behavior, also run `bun run test`.
+- If the change set is broader than one file, run `bun run test:changed` instead of the full suite.
+- Run `bun run test` only before marking a PR review-ready, or when the user explicitly asks for the full suite.
 - For logging, requests, credentials, account data, or fixtures, also run `bun run privacy:scan`.
 - Update `docs-site/` when the change affects user-visible behavior or configuration.

package/src/adapters/agentrouter.ts ADDED Viewed

@@ -0,0 +1,50 @@
+export const AGENTROUTER_LANGUAGE_PREAMBLE =
+  "[Instruction: Process the user request below and respond in the appropriate language.]";
+/** Match only AgentRouter itself or one of its subdomains, never a lookalike hostname. */
+export function isAgentRouterEndpoint(baseUrl: string): boolean {
+  try {
+    const { hostname } = new URL(baseUrl);
+    return hostname === "agentrouter.org" || hostname.endsWith(".agentrouter.org");
+  } catch {
+    return false;
+  }
+}
+/** Supply AgentRouter's stable Codex admission identity unless the operator set one. */
+export function agentRouterDefaultHeaders(
+  baseUrl: string,
+  configuredHeaders?: Record<string, string>,
+): Record<string, string> {
+  if (!isAgentRouterEndpoint(baseUrl)) return {};
+  const hasOriginator = Object.keys(configuredHeaders ?? {}).some(name => name.toLowerCase() === "originator");
+  return hasOriginator ? {} : { originator: "codex_cli_rs" };
+}
+/** Prepend the compatibility marker as a distinct block on the first user turn. */
+export function applyAgentRouterLanguageFraming(messages: unknown[]): void {
+  const firstUser = messages.find(
+    (message): message is { role: string; content: unknown } =>
+      typeof message === "object" && message !== null && (message as { role?: unknown }).role === "user",
+  );
+  if (!firstUser) return;
+  const preamble = { type: "text", text: AGENTROUTER_LANGUAGE_PREAMBLE };
+  if (typeof firstUser.content === "string") {
+    firstUser.content = firstUser.content === ""
+      ? [preamble]
+      : [preamble, { type: "text", text: firstUser.content }];
+    return;
+  }
+  if (!Array.isArray(firstUser.content)) return;
+  const [head] = firstUser.content as { type?: unknown; text?: unknown }[];
+  if (head?.type === "text" && head.text === AGENTROUTER_LANGUAGE_PREAMBLE) return;
+  (firstUser.content as unknown[]).unshift(preamble);
+}
+/** Frame only an owned copy so translated and passthrough callers remain unchanged. */
+export function frameAgentRouterMessages(baseUrl: string, messages: unknown): unknown {
+  if (!isAgentRouterEndpoint(baseUrl) || !Array.isArray(messages)) return messages;
+  const copy = structuredClone(messages) as unknown[];
+  applyAgentRouterLanguageFraming(copy);
+  return copy;
+}

package/src/adapters/anthropic.ts CHANGED Viewed

@@ -28,6 +28,7 @@ import { buildNonOpenAIToolCatalogNudgeForTools } from "./tool-catalog-nudge";
 import { decodeServerSentEvents } from "../lib/sse-decoder";
 import { isTranslatorBudgetExceededError, retainTranslatedEventBatch, type TranslatorBudget } from "../lib/translator-budget";
 import { isReasoningEffortOmitted, modelRecordValue } from "../reasoning-effort";
+import { applyAgentRouterLanguageFraming, isAgentRouterEndpoint } from "./agentrouter";
 /** Map a user content part to an Anthropic content block (text or image source). */
 function toAnthropicContentPart(p: OcxContentPart): unknown {
@@ -647,57 +648,6 @@ function orphanToolResultText(msg: OcxToolResultMessage): string {
  * user content, so an Anthropic `system` string cannot reach it — the framing has to sit in the
  * first user turn.
  */
-const AGENTROUTER_LANGUAGE_PREAMBLE =
-  "[Instruction: Process the user request below and respond in the appropriate language.]";
-/**
- * Exact host match, not a substring.
- *
- * A `hostname.includes("agentrouter")` test also matches `notagentrouter.example` and
- * `agentrouter.org.attacker.example`, which would let an unrelated destination silently
- * receive an injected instruction block. A prompt mutation keyed on a provider's identity
- * must be keyed on that identity exactly.
- */
-function isAgentRouterEndpoint(baseUrl: string): boolean {
-  try {
-    const { hostname } = new URL(baseUrl);
-    return hostname === "agentrouter.org" || hostname.endsWith(".agentrouter.org");
-  } catch {
-    return false;
-  }
-}
-/**
- * Prepend the framing as its OWN text block instead of splicing it into the user's string.
- *
- * The distinction matters: rewriting `content` to `${marker}\n\n${original}` edits what the
- * user wrote, and every downstream consumer — logs, retries, an upstream that echoes the turn —
- * then sees a sentence the user never typed as if they had. A separate leading block carries the
- * same signal to the filter while the original text survives byte-for-byte.
- *
- * Only the first user turn is framed, because only the first is what the gateway rejects.
- */
-function applyAgentRouterLanguageFraming(messages: unknown[]): void {
-  const firstUser = messages.find(
-    (m): m is { role: string; content: unknown } =>
-      typeof m === "object" && m !== null && (m as { role?: unknown }).role === "user",
-  );
-  if (!firstUser) return;
-  const preamble = { type: "text", text: AGENTROUTER_LANGUAGE_PREAMBLE };
-  if (typeof firstUser.content === "string") {
-    firstUser.content = firstUser.content === ""
-      ? [preamble]
-      : [preamble, { type: "text", text: firstUser.content }];
-    return;
-  }
-  if (!Array.isArray(firstUser.content)) return;
-  // Idempotence is keyed on the LEADING block being exactly the marker. A substring test would
-  // let a user who quotes the marker later in their own prompt suppress the framing entirely.
-  const [head] = firstUser.content as { type?: unknown; text?: unknown }[];
-  if (head?.type === "text" && head.text === AGENTROUTER_LANGUAGE_PREAMBLE) return;
-  (firstUser.content as unknown[]).unshift(preamble);
-}
 function messagesToAnthropicFormat(
   parsed: OcxParsedRequest,
   toolNames: { toWire: (name: string) => string },

package/src/adapters/cursor/call-id.ts CHANGED Viewed

@@ -1,3 +1,5 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
 /**
  * Reversible single-line codec for Cursor composite tool-call ids.
  *
@@ -5,22 +7,73 @@
  * literal newline ("call-<uuid>-<n>\nfc_<uuid>_<n>"). OpenCodex forwards ids
  * verbatim, so that newline leaked into Responses-visible `call_id` values,
  * where line-oriented clients (logging, splitting, validation) break. The codec
- * encodes only ids containing CR/LF into a versioned single-line form and
- * decodes both that form and legacy raw multi-line ids back to the exact
- * upstream bytes before anything is serialized toward Cursor.
+ * encodes ids containing CR/LF into a versioned single-line form. It also
+ * escapes ids already in that form's reserved namespace so encoding remains
+ * injective. Both forms decode back to the exact upstream bytes before
+ * anything is serialized toward Cursor. Every encoded value carries a keyed tag
+ * generated by this process. Prefix and base64 shape alone are never provenance:
+ * an opaque upstream id may equal any stateless encoder output.
+ *
+ * The process key is intentionally ephemeral. After restart, the decoder leaves
+ * values from the prior process unchanged rather than guessing from attacker- or
+ * provider-controlled text. This keeps provenance state constant-size instead of
+ * retaining an unbounded id map.
  */
 const CALL_ID_PREFIX = "ocxc1_";
+/** Escape namespace for ids that already sit in a reserved namespace. */
+const CALL_ID_ESCAPE_PREFIX = "ocxc1e_";
+const CALL_ID_PROVENANCE_DOMAIN = "opencodex:cursor-call-id:v1\0";
+const CALL_ID_PROVENANCE_SEPARATOR = ".";
+const CALL_ID_PROVENANCE_TAG_BYTES = 16;
+let callIdProvenanceKey: Uint8Array = randomBytes(32);
 /** True when the id needs encoding to survive line-oriented consumers. */
 function needsEncoding(id: string): boolean {
   return id.includes("\n") || id.includes("\r");
 }
+/** True when the id sits in a namespace this codec owns and must be escaped. */
+function isReserved(id: string): boolean {
+  return id.startsWith(CALL_ID_PREFIX) || id.startsWith(CALL_ID_ESCAPE_PREFIX);
+}
+function provenanceTag(prefix: string, payload: string): Buffer {
+  return createHmac("sha256", callIdProvenanceKey)
+    .update(CALL_ID_PROVENANCE_DOMAIN)
+    .update(prefix)
+    .update(payload)
+    .digest()
+    .subarray(0, CALL_ID_PROVENANCE_TAG_BYTES);
+}
+function encodeWithProvenance(prefix: string, id: string): string {
+  const payload = Buffer.from(id, "utf8").toString("base64url");
+  const tag = provenanceTag(prefix, payload).toString("base64url");
+  return `${prefix}${payload}${CALL_ID_PROVENANCE_SEPARATOR}${tag}`;
+}
+function hasValidProvenance(prefix: string, payload: string, tag: string): boolean {
+  let received: Buffer;
+  try {
+    received = Buffer.from(tag, "base64url");
+  } catch {
+    return false;
+  }
+  if (
+    received.byteLength !== CALL_ID_PROVENANCE_TAG_BYTES
+    || received.toString("base64url") !== tag
+  ) return false;
+  return timingSafeEqual(received, provenanceTag(prefix, payload));
+}
 /** Encode a Cursor wire call id into a single-line Responses-safe id. */
 export function encodeCursorCallId(id: string): string {
-  if (!needsEncoding(id)) return id;
-  return CALL_ID_PREFIX + Buffer.from(id, "utf8").toString("base64url");
+  // CR/LF content is the codec's actual job, so it wins the primary namespace.
+  if (needsEncoding(id)) return encodeWithProvenance(CALL_ID_PREFIX, id);
+  // A reserved id carries no newline; it only needs to stop looking like our output.
+  if (isReserved(id)) return encodeWithProvenance(CALL_ID_ESCAPE_PREFIX, id);
+  return id;
 }
 /**
@@ -30,15 +83,30 @@ export function encodeCursorCallId(id: string): string {
  * through rather than corrupting pairing.
  */
 export function decodeCursorCallId(id: string): string {
-  if (!id.startsWith(CALL_ID_PREFIX)) return id;
-  const payload = id.slice(CALL_ID_PREFIX.length);
-  if (payload.length === 0) return id;
+  const escaped = id.startsWith(CALL_ID_ESCAPE_PREFIX);
+  if (!escaped && !id.startsWith(CALL_ID_PREFIX)) return id;
+  const prefix = escaped ? CALL_ID_ESCAPE_PREFIX : CALL_ID_PREFIX;
+  const encoded = id.slice(prefix.length);
+  const separator = encoded.indexOf(CALL_ID_PROVENANCE_SEPARATOR);
+  if (separator <= 0 || separator !== encoded.lastIndexOf(CALL_ID_PROVENANCE_SEPARATOR)) return id;
+  const payload = encoded.slice(0, separator);
+  const tag = encoded.slice(separator + CALL_ID_PROVENANCE_SEPARATOR.length);
+  if (!hasValidProvenance(prefix, payload, tag)) return id;
   try {
     const decoded = Buffer.from(payload, "base64url").toString("utf8");
     // Round-trip guard: only trust payloads our encoder could have produced.
     if (Buffer.from(decoded, "utf8").toString("base64url") !== payload) return id;
+    // Each namespace admits exactly what its encoder puts there. An `ocxc1_` payload
+    // that decodes to newline-free text is NOT our output — it is an opaque upstream
+    // id that merely looks like ours, and unwrapping it would change the id.
+    if (escaped ? !isReserved(decoded) : !needsEncoding(decoded)) return id;
     return decoded;
   } catch {
     return id;
   }
 }
+/** Simulates process restart without reloading the module. */
+export function resetCursorCallIdProvenanceForTests(): void {
+  callIdProvenanceKey = randomBytes(32);
+}

package/src/adapters/cursor/checkpoint-store.ts CHANGED Viewed

@@ -23,7 +23,12 @@ export type CursorCheckpointInvalidationReason =
   | "trailing_tool_result"
   | "force_fresh"
   | "upstream_invalid_argument"
-  | "lineage_mismatch";
+  | "lineage_mismatch"
+  /**
+   * The checkpoint's own roots leave no room for the uncovered suffix inside Cursor's root envelope.
+   * Resuming would send history the model cannot see; a full replay prunes coherently instead.
+   */
+  | "envelope_exhausted";
 export interface CursorCheckpointSnapshot {
   ref: string;

package/src/adapters/cursor/cursor-errors.ts CHANGED Viewed

@@ -71,6 +71,50 @@ export class CursorUnexpectedCancelError extends Error {
   }
 }
+/**
+ * The assembled root-blob envelope exceeded what Cursor's external workers accept.
+ *
+ * Raised locally, BEFORE the request is sent. Cursor rejects an oversized replay set with a late
+ * `invalid_argument` only after hydrating every blob, so the upstream failure arrives with no
+ * usable measurement — that is why this carries the counts it measured. Never retryable: replaying
+ * the same over-envelope request reproduces it exactly.
+ *
+ * The measurement is taken on the FINAL root set, after checkpoint and suffix assembly. Bounding
+ * an intermediate set is what let 192 checkpoint roots plus a two-root suffix emit 194 (#1527).
+ */
+export class CursorRootEnvelopeLimitError extends Error {
+  public readonly code = "cursor_root_envelope_limit";
+  public readonly status = 400;
+  constructor(
+    public readonly rootCount: number,
+    public readonly rootBytes: number,
+    public readonly maxRootCount: number,
+    public readonly maxRootBytes: number,
+  ) {
+    super(
+      // No "Cursor invalid request:" prefix here: `safeCursorErrorMessage` adds it for
+      // invalid-argument classes, and carrying it in the message produced it twice.
+      "the assembled conversation exceeds the replay envelope "
+      + `(${rootCount} root blobs / ${rootBytes} bytes against a limit of ${maxRootCount} / ${maxRootBytes}). `
+      + "Start a new conversation or reduce the pending tool output.",
+    );
+    this.name = "CursorRootEnvelopeLimitError";
+  }
+}
+/**
+ * The envelope failure is local and deterministic; a retry cannot change the outcome.
+ *
+ * A companion `CursorRootMeasurementError` was drafted for the case where a root blob's size
+ * cannot be read, then deleted: an unmeasurable root is legitimate (a resumed conversation
+ * references ids Cursor minted and this process never stored), so the guard counts it instead of
+ * failing. There is no reachable second case, and an unreachable error class cannot be tested.
+ */
+export function isCursorRootEnvelopeError(value: unknown): boolean {
+  return value instanceof CursorRootEnvelopeLimitError;
+}
 export function isCursorBenignCancelError(value: unknown): boolean {
   // An unexpected cancel is never benign, however it is spelled. This class is raised only when
   // the transport knows WE did not request the cancel, so its provenance outranks the code match

package/src/adapters/cursor/native-exec.ts CHANGED Viewed

@@ -403,6 +403,19 @@ export function storeCursorBlob(data: Uint8Array, requestScope?: CursorBlobReque
   return blobId;
 }
+/**
+ * Stored byte length of one blob, or null when it is not in the store.
+ *
+ * Size only, never content: the envelope guard needs to measure the FINAL root set, which mixes
+ * roots minted this turn with roots carried inside a checkpoint. Reading them back through a
+ * hydration path would both defeat the request-scope sealing and log served bytes for a request
+ * that may never be sent.
+ */
+export function cursorBlobByteLength(blobId: Uint8Array): number | null {
+  const entry = blobs.get(key(blobId));
+  return entry ? entry.data.byteLength : null;
+}
 /**
  * Serve-time integrity for content-addressed blobs (devlog 260826_cursor_responses_gap 080):
  * a raw 32-byte blob id IS the SHA-256 of its bytes, so served data whose digest mismatches