@darkhunt-security/endpoint-codex 0.9.17 → 0.9.18

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "darkhunt-guard",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "hooks": "./hooks/hooks.json",
   "description": "Darkhunt endpoint plugin for Codex CLI \u2014 full session trace capture and PreToolUse guardrails.",
   "author": {

package/commands/status.md

@@ -34,5 +34,10 @@ What the fields mean, and what to say:
   export is being rejected — check `last pass` to tell those apart.
 - **last pass FAILED** — read out the cause. Checkpoints are held on failure, so nothing
   has been lost; it will re-ship once the cause is fixed.
+- **held N transcript(s) waiting on the platform** — a pass could not reach Darkhunt, so
+  those sessions are queued on this machine with their checkpoints held. The forwarder
+  retries on its own for about an hour after a failure, and every later hook retries
+  them too, so this clears itself once the platform answers. Say since when they have
+  been held; nothing is lost while it is non-zero.
 
 Do not run anything else, and do not offer to change the configuration unless asked.

package/dist/bin/backfill.mjs

@@ -18274,6 +18274,9 @@ function liveTranscripts(beat, now = Date.now()) {
   return [...paths];
 }
 
+// packages/core/dist/emit/emitter.js
+import { createHash as createHash2 } from "node:crypto";
+
 // packages/core/dist/emit/ids.js
 import { createHash, randomBytes } from "node:crypto";
 var SPAN_ID_HEX = 16;
@@ -18313,6 +18316,20 @@ var SeededIdGenerator = class {
 };
 
 // packages/core/dist/emit/emitter.js
+var PAYLOAD_LIMIT = 128 * 1024;
+function capPayload(value, limit = PAYLOAD_LIMIT) {
+  if (value === void 0 || value === null)
+    return value;
+  const text = typeof value === "string" ? value : JSON.stringify(value);
+  if (text === void 0 || text.length <= limit)
+    return value;
+  const digest = createHash2("sha256").update(text).digest("hex").slice(0, 16);
+  const marker = `\u2026 [truncated by darkhunt: ${text.length} chars total, sha256:${digest}]`;
+  return `${text.slice(0, Math.max(0, limit - marker.length))}${marker}`;
+}
+function capText(text, limit = PAYLOAD_LIMIT) {
+  return capPayload(text, limit);
+}
 var TOOL_SUMMARY_LIMIT = 2e3;
 function summarize(output) {
   const text = typeof output === "string" ? output : JSON.stringify(output ?? null);
@@ -18439,7 +18456,7 @@ var SessionEmitter = class {
         // A subagent's first record is the task it was given, and it has already been
         // absorbed by the time this fires — so the child trace opens with its brief
         // rather than empty.
-        ...this.lastUserText ? { input: this.lastUserText } : {},
+        ...this.lastUserText ? { input: capText(this.lastUserText) } : {},
         ...this.options.userId !== void 0 ? { userId: this.options.userId } : {}
       }));
       this.sidechains.push(owner);
@@ -18480,7 +18497,7 @@ var SessionEmitter = class {
       case "thinking": {
         this.openGeneration(record, owner);
         const host = this.generation ?? owner;
-        this.seeded(["thinking", record.uuid], () => host.span("thinking", { startTime: record.ts, output: record.text })).end({ endTime: record.ts });
+        this.seeded(["thinking", record.uuid], () => host.span("thinking", { startTime: record.ts, output: capPayload(record.text) })).end({ endTime: record.ts });
         break;
       }
       case "tool_call": {
@@ -18491,8 +18508,8 @@ var SessionEmitter = class {
           startTime: record.ts,
           ...record.toolName !== void 0 ? { toolName: record.toolName } : {},
           ...record.toolCallId !== void 0 ? { toolCallId: record.toolCallId } : {},
-          toolArguments: record.input,
-          input: record.input
+          toolArguments: capPayload(record.input),
+          input: capPayload(record.input)
         }));
         if (record.toolCallId)
           this.toolSpans.set(record.toolCallId, span);
@@ -18504,7 +18521,7 @@ var SessionEmitter = class {
         const span = record.toolCallId ? this.toolSpans.get(record.toolCallId) : void 0;
         if (span) {
           span.end({
-            output: record.output,
+            output: capPayload(record.output),
             endTime: record.ts,
             ...record.isError ? { level: "ERROR" } : {},
             ...record.errorKind !== void 0 ? { statusMessage: record.errorKind } : {}
@@ -18518,7 +18535,7 @@ var SessionEmitter = class {
         this.endGeneration();
         this.seeded(["compaction", record.uuid], () => owner.span("compaction", {
           startTime: record.ts,
-          ...record.text ? { output: record.text } : {}
+          ...record.text ? { output: capPayload(record.text) } : {}
         })).end({ endTime: record.ts });
         break;
       case "permission_grant": {
@@ -18580,7 +18597,7 @@ var SessionEmitter = class {
         ...this.title !== void 0 ? { name: this.title } : {},
         // The pass's result. Paired with the `input` set when the trace opened, this is
         // what stops the consumer inferring the trace's I/O from a descendant.
-        ...this.lastAssistantText !== void 0 ? { output: this.lastAssistantText } : {}
+        ...this.lastAssistantText !== void 0 ? { output: capText(this.lastAssistantText) } : {}
       });
       this.trace.end();
       this.trace = void 0;
@@ -18663,7 +18680,7 @@ var SessionEmitter = class {
         // What the agent was asked. `TraceArgs.input` is construction-only — the SDK's
         // `update()` carries output alone — which is why `ingest` absorbs the user turn
         // before it calls this.
-        ...this.lastUserText ? { input: this.lastUserText } : {},
+        ...this.lastUserText ? { input: capText(this.lastUserText) } : {},
         tags: [this.options.vendor, ...this.options.agentId ? ["subagent"] : []],
         metadata: {
           ...this.meta,
@@ -18732,7 +18749,7 @@ var SessionEmitter = class {
   buildInputMessages() {
     const messages = [];
     if (this.lastUserText !== void 0) {
-      messages.push({ role: "user", content: this.lastUserText });
+      messages.push({ role: "user", content: capText(this.lastUserText) });
     }
     for (const result2 of this.pendingToolResults) {
       messages.push({ role: "tool", content: result2 });
@@ -18742,7 +18759,7 @@ var SessionEmitter = class {
   endGeneration() {
     if (!this.generation)
       return;
-    const output = this.outputText.join("\n");
+    const output = capText(this.outputText.join("\n"));
     if (output)
       this.lastAssistantText = output;
     this.generation.end({
@@ -18784,6 +18801,25 @@ function loadCheckpoints(scope) {
     return {};
   }
 }
+function laggingTranscripts(checkpoints, now = statSize) {
+  const paths = [];
+  for (const [path, checkpoint] of Object.entries(checkpoints)) {
+    if (path === SPOOL_KEY)
+      continue;
+    const size = now(path);
+    if (size === void 0 || size === checkpoint.offset)
+      continue;
+    paths.push(path);
+  }
+  return paths;
+}
+function statSize(path) {
+  try {
+    return statSync2(path).size;
+  } catch {
+    return void 0;
+  }
+}
 function orphanedScopes(vendor, scope) {
   const suffix = ".checkpoints.json";
   try {
@@ -18887,6 +18923,7 @@ function readNewLines(path, offset, maxBytes = DEFAULT_MAX_BYTES) {
 import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync4, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join7 } from "node:path";
 var STALE_MS = 5 * 60 * 1e3;
+var HEARTBEAT_MS = 60 * 1e3;
 function acquireLock(scope) {
   mkdirSync3(CONFIG_DIR, { recursive: true, mode: 448 });
   const path = join7(CONFIG_DIR, `${scope}.forwarder.lock`);
@@ -18908,7 +18945,17 @@ function acquireLock(scope) {
   } catch {
     return null;
   }
-  return () => rmSync(path, { force: true });
+  const beat = setInterval(() => {
+    try {
+      writeFileSync3(path, JSON.stringify({ pid: process.pid, ts: Date.now() }), { mode: 384 });
+    } catch {
+    }
+  }, HEARTBEAT_MS);
+  beat.unref();
+  return () => {
+    clearInterval(beat);
+    rmSync(path, { force: true });
+  };
 }
 function isAlive(pid, kill = (p, s) => {
   process.kill(p, s);
@@ -19009,6 +19056,61 @@ function saveHealth(scope, health) {
   }
 }
 
+// packages/core/dist/forwarder/pending.js
+import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync6, renameSync as renameSync4, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "node:fs";
+import { join as join9 } from "node:path";
+var MAX_PENDING_PATHS = 256;
+function pendingPath(scope) {
+  return join9(CONFIG_DIR, `${scope}.pending.json`);
+}
+function loadPending(scope) {
+  try {
+    const backlog = JSON.parse(readFileSync6(pendingPath(scope), "utf8"));
+    if (!Array.isArray(backlog.paths))
+      return void 0;
+    return backlog;
+  } catch {
+    return void 0;
+  }
+}
+function pendingTranscripts(scope) {
+  const backlog = loadPending(scope);
+  if (!backlog)
+    return [];
+  return backlog.paths.filter((path) => {
+    try {
+      return existsSync3(path);
+    } catch {
+      return false;
+    }
+  });
+}
+function savePending(scope, paths, now = /* @__PURE__ */ new Date()) {
+  try {
+    const at = now.toISOString();
+    const previous = loadPending(scope);
+    const merged = [.../* @__PURE__ */ new Set([...previous?.paths ?? [], ...paths])];
+    const kept = merged.slice(Math.max(0, merged.length - MAX_PENDING_PATHS));
+    if (kept.length === 0)
+      return;
+    write(scope, { since: previous?.since ?? at, at, paths: kept });
+  } catch {
+  }
+}
+function clearPending(scope) {
+  try {
+    rmSync2(pendingPath(scope), { force: true });
+  } catch {
+  }
+}
+function write(scope, backlog) {
+  mkdirSync5(CONFIG_DIR, { recursive: true, mode: 448 });
+  const target = pendingPath(scope);
+  const tmp = `${target}.tmp`;
+  writeFileSync5(tmp, JSON.stringify(backlog), { mode: 384 });
+  renameSync4(tmp, target);
+}
+
 // packages/core/dist/forwarder/run.js
 import { readdirSync as readdirSync2, statSync as statSync4 } from "node:fs";
 
@@ -21844,7 +21946,14 @@ async function runForwarder(mapper, options = {}) {
       }
     }
     const drain = options.paths ? { paths: options.paths } : drainSpool(mapper, checkpoints);
-    const named = options.paths ? drain.paths : [.../* @__PURE__ */ new Set([...drain.paths, ...liveTranscripts(loadBeat(config.scope))])];
+    const named = options.paths ? drain.paths : [
+      .../* @__PURE__ */ new Set([
+        ...drain.paths,
+        ...liveTranscripts(loadBeat(config.scope)),
+        ...pendingTranscripts(config.scope),
+        ...laggingTranscripts(checkpoints)
+      ])
+    ];
     const paths = [...new Set(named.flatMap((path) => [path, ...related(mapper, path)]))];
     if (paths.length === 0) {
       if (drain.checkpoint)
@@ -21941,13 +22050,16 @@ async function runForwarder(mapper, options = {}) {
     result2.emitted = { transcripts: result2.transcripts, records: result2.records };
     if (watch.failures() > 0) {
       result2.ok = false;
+      result2.retryable = true;
       result2.error = watch.reason() ?? "span export failed";
       result2.transcripts = 0;
       result2.records = 0;
+      savePending(config.scope, paths);
     } else {
       if (drain.checkpoint)
         staged[SPOOL_KEY] = drain.checkpoint;
       saveCheckpoints(config.scope, staged);
+      clearPending(config.scope);
     }
     const previous = loadHealth(config.scope);
     saveHealth(config.scope, {
@@ -22012,13 +22124,16 @@ function discoverTranscripts(mapper) {
   return found;
 }
 
+// packages/core/dist/forwarder/retry.js
+var CLAIM_STALE_MS = 45 * 60 * 1e3;
+
 // packages/core/dist/cli/status.js
 var SESSION_HOOK_STALE_MS = 30 * 60 * 1e3;
 
 // packages/core/dist/cli/enroll.js
 import { homedir as homedir3 } from "node:os";
-import { join as join9 } from "node:path";
-var CLI_CREDENTIALS_PATH = join9(homedir3(), ".darkhunt", "credentials.json");
+import { join as join10 } from "node:path";
+var CLI_CREDENTIALS_PATH = join10(homedir3(), ".darkhunt", "credentials.json");
 
 // packages/core/dist/cli/backfill.js
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Map([
@@ -22251,8 +22366,8 @@ async function runPasses(groups, pass, say2) {
 }
 
 // adapters/codex/dist/transcript.js
-import { readFileSync as readFileSync6 } from "node:fs";
-import { basename, join as join10 } from "node:path";
+import { readFileSync as readFileSync7 } from "node:fs";
+import { basename, join as join11 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 function str(value) {
   return typeof value === "string" ? value : void 0;
@@ -22396,7 +22511,7 @@ function stripSuffix(path) {
 var codexTranscript = {
   vendor: "codex",
   sessionRoots() {
-    return [join10(homedir4(), ".codex", "sessions")];
+    return [join11(homedir4(), ".codex", "sessions")];
   },
   /**
    * `~/.codex/auth.json` -> the `email` claim of `tokens.id_token`.
@@ -22418,7 +22533,7 @@ var codexTranscript = {
    */
   resolveUserId() {
     try {
-      return emailFromAuth(readFileSync6(join10(homedir4(), ".codex", "auth.json"), "utf8"));
+      return emailFromAuth(readFileSync7(join11(homedir4(), ".codex", "auth.json"), "utf8"));
     } catch {
       return void 0;
     }

package/dist/bin/enroll.mjs

@@ -60,12 +60,16 @@ async function readStdin(stream) {
   return Buffer.concat(chunks).toString("utf8");
 }
 
+// packages/core/dist/emit/emitter.js
+var PAYLOAD_LIMIT = 128 * 1024;
+
 // packages/core/dist/forwarder/tail.js
 var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
 var LINE_CEILING = 64 * 1024 * 1024;
 
 // packages/core/dist/forwarder/lock.js
 var STALE_MS = 5 * 60 * 1e3;
+var HEARTBEAT_MS = 60 * 1e3;
 var DEFAULT_LOCK_WAIT_MS = 60 * 1e3;
 
 // node_modules/@darkhunt-security/telemetry/package.json
@@ -994,6 +998,9 @@ var VALIDATORS = Object.freeze({
 // node_modules/@darkhunt-security/telemetry/dist/client.js
 var LIB_VERSION = package_default.version;
 
+// packages/core/dist/forwarder/retry.js
+var CLAIM_STALE_MS = 45 * 60 * 1e3;
+
 // packages/core/dist/cli/init.js
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 function init(argv) {

package/dist/bin/forwarder.mjs

@@ -18260,6 +18260,9 @@ function liveTranscripts(beat, now = Date.now()) {
   return [...paths];
 }
 
+// packages/core/dist/emit/emitter.js
+import { createHash as createHash2 } from "node:crypto";
+
 // packages/core/dist/emit/ids.js
 import { createHash, randomBytes } from "node:crypto";
 var SPAN_ID_HEX = 16;
@@ -18299,6 +18302,20 @@ var SeededIdGenerator = class {
 };
 
 // packages/core/dist/emit/emitter.js
+var PAYLOAD_LIMIT = 128 * 1024;
+function capPayload(value, limit = PAYLOAD_LIMIT) {
+  if (value === void 0 || value === null)
+    return value;
+  const text = typeof value === "string" ? value : JSON.stringify(value);
+  if (text === void 0 || text.length <= limit)
+    return value;
+  const digest = createHash2("sha256").update(text).digest("hex").slice(0, 16);
+  const marker = `\u2026 [truncated by darkhunt: ${text.length} chars total, sha256:${digest}]`;
+  return `${text.slice(0, Math.max(0, limit - marker.length))}${marker}`;
+}
+function capText(text, limit = PAYLOAD_LIMIT) {
+  return capPayload(text, limit);
+}
 var TOOL_SUMMARY_LIMIT = 2e3;
 function summarize(output) {
   const text = typeof output === "string" ? output : JSON.stringify(output ?? null);
@@ -18425,7 +18442,7 @@ var SessionEmitter = class {
         // A subagent's first record is the task it was given, and it has already been
         // absorbed by the time this fires — so the child trace opens with its brief
         // rather than empty.
-        ...this.lastUserText ? { input: this.lastUserText } : {},
+        ...this.lastUserText ? { input: capText(this.lastUserText) } : {},
         ...this.options.userId !== void 0 ? { userId: this.options.userId } : {}
       }));
       this.sidechains.push(owner);
@@ -18466,7 +18483,7 @@ var SessionEmitter = class {
       case "thinking": {
         this.openGeneration(record, owner);
         const host = this.generation ?? owner;
-        this.seeded(["thinking", record.uuid], () => host.span("thinking", { startTime: record.ts, output: record.text })).end({ endTime: record.ts });
+        this.seeded(["thinking", record.uuid], () => host.span("thinking", { startTime: record.ts, output: capPayload(record.text) })).end({ endTime: record.ts });
         break;
       }
       case "tool_call": {
@@ -18477,8 +18494,8 @@ var SessionEmitter = class {
           startTime: record.ts,
           ...record.toolName !== void 0 ? { toolName: record.toolName } : {},
           ...record.toolCallId !== void 0 ? { toolCallId: record.toolCallId } : {},
-          toolArguments: record.input,
-          input: record.input
+          toolArguments: capPayload(record.input),
+          input: capPayload(record.input)
         }));
         if (record.toolCallId)
           this.toolSpans.set(record.toolCallId, span);
@@ -18490,7 +18507,7 @@ var SessionEmitter = class {
         const span = record.toolCallId ? this.toolSpans.get(record.toolCallId) : void 0;
         if (span) {
           span.end({
-            output: record.output,
+            output: capPayload(record.output),
             endTime: record.ts,
             ...record.isError ? { level: "ERROR" } : {},
             ...record.errorKind !== void 0 ? { statusMessage: record.errorKind } : {}
@@ -18504,7 +18521,7 @@ var SessionEmitter = class {
         this.endGeneration();
         this.seeded(["compaction", record.uuid], () => owner.span("compaction", {
           startTime: record.ts,
-          ...record.text ? { output: record.text } : {}
+          ...record.text ? { output: capPayload(record.text) } : {}
         })).end({ endTime: record.ts });
         break;
       case "permission_grant": {
@@ -18566,7 +18583,7 @@ var SessionEmitter = class {
         ...this.title !== void 0 ? { name: this.title } : {},
         // The pass's result. Paired with the `input` set when the trace opened, this is
         // what stops the consumer inferring the trace's I/O from a descendant.
-        ...this.lastAssistantText !== void 0 ? { output: this.lastAssistantText } : {}
+        ...this.lastAssistantText !== void 0 ? { output: capText(this.lastAssistantText) } : {}
       });
       this.trace.end();
       this.trace = void 0;
@@ -18649,7 +18666,7 @@ var SessionEmitter = class {
         // What the agent was asked. `TraceArgs.input` is construction-only — the SDK's
         // `update()` carries output alone — which is why `ingest` absorbs the user turn
         // before it calls this.
-        ...this.lastUserText ? { input: this.lastUserText } : {},
+        ...this.lastUserText ? { input: capText(this.lastUserText) } : {},
         tags: [this.options.vendor, ...this.options.agentId ? ["subagent"] : []],
         metadata: {
           ...this.meta,
@@ -18718,7 +18735,7 @@ var SessionEmitter = class {
   buildInputMessages() {
     const messages = [];
     if (this.lastUserText !== void 0) {
-      messages.push({ role: "user", content: this.lastUserText });
+      messages.push({ role: "user", content: capText(this.lastUserText) });
     }
     for (const result of this.pendingToolResults) {
       messages.push({ role: "tool", content: result });
@@ -18728,7 +18745,7 @@ var SessionEmitter = class {
   endGeneration() {
     if (!this.generation)
       return;
-    const output = this.outputText.join("\n");
+    const output = capText(this.outputText.join("\n"));
     if (output)
       this.lastAssistantText = output;
     this.generation.end({
@@ -18770,6 +18787,25 @@ function loadCheckpoints(scope) {
     return {};
   }
 }
+function laggingTranscripts(checkpoints, now = statSize) {
+  const paths = [];
+  for (const [path, checkpoint] of Object.entries(checkpoints)) {
+    if (path === SPOOL_KEY)
+      continue;
+    const size = now(path);
+    if (size === void 0 || size === checkpoint.offset)
+      continue;
+    paths.push(path);
+  }
+  return paths;
+}
+function statSize(path) {
+  try {
+    return statSync2(path).size;
+  } catch {
+    return void 0;
+  }
+}
 function orphanedScopes(vendor, scope) {
   const suffix = ".checkpoints.json";
   try {
@@ -18853,6 +18889,7 @@ function readNewLines(path, offset, maxBytes = DEFAULT_MAX_BYTES) {
 import { existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync4, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
 import { join as join7 } from "node:path";
 var STALE_MS = 5 * 60 * 1e3;
+var HEARTBEAT_MS = 60 * 1e3;
 function acquireLock(scope) {
   mkdirSync3(CONFIG_DIR, { recursive: true, mode: 448 });
   const path = join7(CONFIG_DIR, `${scope}.forwarder.lock`);
@@ -18874,7 +18911,17 @@ function acquireLock(scope) {
   } catch {
     return null;
   }
-  return () => rmSync(path, { force: true });
+  const beat = setInterval(() => {
+    try {
+      writeFileSync3(path, JSON.stringify({ pid: process.pid, ts: Date.now() }), { mode: 384 });
+    } catch {
+    }
+  }, HEARTBEAT_MS);
+  beat.unref();
+  return () => {
+    clearInterval(beat);
+    rmSync(path, { force: true });
+  };
 }
 function isAlive(pid, kill = (p, s) => {
   process.kill(p, s);
@@ -18975,6 +19022,65 @@ function saveHealth(scope, health) {
   }
 }
 
+// packages/core/dist/forwarder/pending.js
+import { existsSync as existsSync3, mkdirSync as mkdirSync5, readFileSync as readFileSync6, renameSync as renameSync4, rmSync as rmSync2, writeFileSync as writeFileSync5 } from "node:fs";
+import { join as join9 } from "node:path";
+var MAX_PENDING_PATHS = 256;
+function pendingPath(scope) {
+  return join9(CONFIG_DIR, `${scope}.pending.json`);
+}
+function loadPending(scope) {
+  try {
+    const backlog = JSON.parse(readFileSync6(pendingPath(scope), "utf8"));
+    if (!Array.isArray(backlog.paths))
+      return void 0;
+    return backlog;
+  } catch {
+    return void 0;
+  }
+}
+function pendingTranscripts(scope) {
+  const backlog = loadPending(scope);
+  if (!backlog)
+    return [];
+  return backlog.paths.filter((path) => {
+    try {
+      return existsSync3(path);
+    } catch {
+      return false;
+    }
+  });
+}
+function savePending(scope, paths, now = /* @__PURE__ */ new Date()) {
+  try {
+    const at = now.toISOString();
+    const previous = loadPending(scope);
+    const merged = [.../* @__PURE__ */ new Set([...previous?.paths ?? [], ...paths])];
+    const kept = merged.slice(Math.max(0, merged.length - MAX_PENDING_PATHS));
+    if (kept.length === 0)
+      return;
+    write(scope, { since: previous?.since ?? at, at, paths: kept });
+  } catch {
+  }
+}
+function clearPending(scope) {
+  try {
+    rmSync2(pendingPath(scope), { force: true });
+  } catch {
+  }
+}
+function write(scope, backlog) {
+  mkdirSync5(CONFIG_DIR, { recursive: true, mode: 448 });
+  const target = pendingPath(scope);
+  const tmp = `${target}.tmp`;
+  writeFileSync5(tmp, JSON.stringify(backlog), { mode: 384 });
+  renameSync4(tmp, target);
+}
+
+// packages/core/dist/forwarder/retry.js
+import { existsSync as existsSync4, mkdirSync as mkdirSync6, readFileSync as readFileSync7, rmSync as rmSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join10 } from "node:path";
+
 // packages/core/dist/forwarder/run.js
 import { readdirSync as readdirSync2, statSync as statSync4 } from "node:fs";
 
@@ -21810,7 +21916,14 @@ async function runForwarder(mapper, options = {}) {
       }
     }
     const drain = options.paths ? { paths: options.paths } : drainSpool(mapper, checkpoints);
-    const named = options.paths ? drain.paths : [.../* @__PURE__ */ new Set([...drain.paths, ...liveTranscripts(loadBeat(config.scope))])];
+    const named = options.paths ? drain.paths : [
+      .../* @__PURE__ */ new Set([
+        ...drain.paths,
+        ...liveTranscripts(loadBeat(config.scope)),
+        ...pendingTranscripts(config.scope),
+        ...laggingTranscripts(checkpoints)
+      ])
+    ];
     const paths = [...new Set(named.flatMap((path) => [path, ...related(mapper, path)]))];
     if (paths.length === 0) {
       if (drain.checkpoint)
@@ -21907,13 +22020,16 @@ async function runForwarder(mapper, options = {}) {
     result.emitted = { transcripts: result.transcripts, records: result.records };
     if (watch.failures() > 0) {
       result.ok = false;
+      result.retryable = true;
       result.error = watch.reason() ?? "span export failed";
       result.transcripts = 0;
       result.records = 0;
+      savePending(config.scope, paths);
     } else {
       if (drain.checkpoint)
         staged[SPOOL_KEY] = drain.checkpoint;
       saveCheckpoints(config.scope, staged);
+      clearPending(config.scope);
     }
     const previous = loadHealth(config.scope);
     saveHealth(config.scope, {
@@ -21965,17 +22081,103 @@ function discoverTranscripts(mapper) {
   return found;
 }
 
+// packages/core/dist/forwarder/retry.js
+var RETRY_DELAYS_MS = [
+  3e4,
+  6e4,
+  12e4,
+  3e5,
+  6e5,
+  9e5,
+  18e5
+];
+var CLAIM_STALE_MS = 45 * 60 * 1e3;
+function retryClaimPath(scope) {
+  return join10(CONFIG_DIR, `${scope}.forwarder-retry.lock`);
+}
+function claimRetry(scope, now = Date.now()) {
+  const path = retryClaimPath(scope);
+  try {
+    mkdirSync6(CONFIG_DIR, { recursive: true, mode: 448 });
+    if (existsSync4(path)) {
+      try {
+        const held = JSON.parse(readFileSync7(path, "utf8"));
+        if (isAlive(held.pid) && now - held.ts < CLAIM_STALE_MS)
+          return null;
+      } catch {
+      }
+      rmSync3(path, { force: true });
+    }
+    const stamp = () => {
+      writeFileSync6(path, JSON.stringify({ pid: process.pid, ts: Date.now() }), { mode: 384 });
+    };
+    stamp();
+    return {
+      renew: () => {
+        try {
+          stamp();
+        } catch {
+        }
+      },
+      release: () => rmSync3(path, { force: true })
+    };
+  } catch {
+    return null;
+  }
+}
+function retriesEnabled() {
+  const flag = process.env["DARKHUNT_FORWARDER_RETRY"];
+  return flag !== "0" && flag !== "off" && flag !== "false";
+}
+function scopeOf(mapper, options) {
+  try {
+    return loadLocalConfig(mapper.vendor, options.profile !== void 0 ? { profile: options.profile } : {}).scope;
+  } catch {
+    return mapper.vendor;
+  }
+}
+async function runForwarderWithRetry(mapper, options = {}) {
+  const pass = options.pass ?? ((m, o) => runForwarder(m, o));
+  const sleep2 = options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const forwarding = {
+    ...options.paths !== void 0 ? { paths: options.paths } : {},
+    ...options.profile !== void 0 ? { profile: options.profile } : {}
+  };
+  let last = await pass(mapper, forwarding);
+  if (!last.retryable || !retriesEnabled())
+    return last;
+  const claim = claimRetry(scopeOf(mapper, options));
+  if (!claim)
+    return last;
+  try {
+    const delays = options.delaysMs ?? RETRY_DELAYS_MS;
+    for (const [index, delay] of delays.entries()) {
+      options.onRetry?.(last, index + 1, delay);
+      await sleep2(delay);
+      claim.renew();
+      last = await pass(mapper, forwarding);
+      if (last.lockBusy)
+        continue;
+      if (!last.retryable)
+        return last;
+    }
+    return last;
+  } finally {
+    claim.release();
+  }
+}
+
 // packages/core/dist/cli/status.js
 var SESSION_HOOK_STALE_MS = 30 * 60 * 1e3;
 
 // packages/core/dist/cli/enroll.js
 import { homedir as homedir3 } from "node:os";
-import { join as join9 } from "node:path";
-var CLI_CREDENTIALS_PATH = join9(homedir3(), ".darkhunt", "credentials.json");
+import { join as join11 } from "node:path";
+var CLI_CREDENTIALS_PATH = join11(homedir3(), ".darkhunt", "credentials.json");
 
 // adapters/codex/dist/transcript.js
-import { readFileSync as readFileSync6 } from "node:fs";
-import { basename, join as join10 } from "node:path";
+import { readFileSync as readFileSync8 } from "node:fs";
+import { basename, join as join12 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 function str(value) {
   return typeof value === "string" ? value : void 0;
@@ -22119,7 +22321,7 @@ function stripSuffix(path) {
 var codexTranscript = {
   vendor: "codex",
   sessionRoots() {
-    return [join10(homedir4(), ".codex", "sessions")];
+    return [join12(homedir4(), ".codex", "sessions")];
   },
   /**
    * `~/.codex/auth.json` -> the `email` claim of `tokens.id_token`.
@@ -22141,7 +22343,7 @@ var codexTranscript = {
    */
   resolveUserId() {
     try {
-      return emailFromAuth(readFileSync6(join10(homedir4(), ".codex", "auth.json"), "utf8"));
+      return emailFromAuth(readFileSync8(join12(homedir4(), ".codex", "auth.json"), "utf8"));
     } catch {
       return void 0;
     }
@@ -22353,7 +22555,7 @@ var codexTranscript = {
 
 // adapters/codex/bin/forwarder.mjs
 try {
-  await runForwarder(codexTranscript);
+  await runForwarderWithRetry(codexTranscript);
 } catch {
   process.exit(1);
 }

package/dist/bin/guard.mjs

@@ -396,12 +396,16 @@ async function readStdin(stream) {
   return Buffer.concat(chunks).toString("utf8");
 }
 
+// packages/core/dist/emit/emitter.js
+var PAYLOAD_LIMIT = 128 * 1024;
+
 // packages/core/dist/forwarder/tail.js
 var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
 var LINE_CEILING = 64 * 1024 * 1024;
 
 // packages/core/dist/forwarder/lock.js
 var STALE_MS = 5 * 60 * 1e3;
+var HEARTBEAT_MS = 60 * 1e3;
 var DEFAULT_LOCK_WAIT_MS = 60 * 1e3;
 
 // node_modules/@darkhunt-security/telemetry/package.json
@@ -1330,6 +1334,9 @@ var VALIDATORS = Object.freeze({
 // node_modules/@darkhunt-security/telemetry/dist/client.js
 var LIB_VERSION = package_default.version;
 
+// packages/core/dist/forwarder/retry.js
+var CLAIM_STALE_MS = 45 * 60 * 1e3;
+
 // packages/core/dist/cli/status.js
 var SESSION_HOOK_STALE_MS = 30 * 60 * 1e3;
 

package/dist/bin/init.mjs

@@ -52,12 +52,16 @@ var SPOOL_DIR = join4(CONFIG_DIR, "spool");
 // packages/core/dist/runtime/beat.js
 var BEAT_LIVE_MS = 30 * 60 * 1e3;
 
+// packages/core/dist/emit/emitter.js
+var PAYLOAD_LIMIT = 128 * 1024;
+
 // packages/core/dist/forwarder/tail.js
 var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
 var LINE_CEILING = 64 * 1024 * 1024;
 
 // packages/core/dist/forwarder/lock.js
 var STALE_MS = 5 * 60 * 1e3;
+var HEARTBEAT_MS = 60 * 1e3;
 var DEFAULT_LOCK_WAIT_MS = 60 * 1e3;
 
 // node_modules/@darkhunt-security/telemetry/package.json
@@ -986,6 +990,9 @@ var VALIDATORS = Object.freeze({
 // node_modules/@darkhunt-security/telemetry/dist/client.js
 var LIB_VERSION = package_default.version;
 
+// packages/core/dist/forwarder/retry.js
+var CLAIM_STALE_MS = 45 * 60 * 1e3;
+
 // packages/core/dist/cli/init.js
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 function init(argv) {

package/dist/bin/spool.mjs

@@ -198,12 +198,16 @@ async function readStdin(stream) {
   return Buffer.concat(chunks).toString("utf8");
 }
 
+// packages/core/dist/emit/emitter.js
+var PAYLOAD_LIMIT = 128 * 1024;
+
 // packages/core/dist/forwarder/tail.js
 var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
 var LINE_CEILING = 64 * 1024 * 1024;
 
 // packages/core/dist/forwarder/lock.js
 var STALE_MS = 5 * 60 * 1e3;
+var HEARTBEAT_MS = 60 * 1e3;
 var DEFAULT_LOCK_WAIT_MS = 60 * 1e3;
 
 // node_modules/@darkhunt-security/telemetry/package.json
@@ -1132,6 +1136,9 @@ var VALIDATORS = Object.freeze({
 // node_modules/@darkhunt-security/telemetry/dist/client.js
 var LIB_VERSION = package_default.version;
 
+// packages/core/dist/forwarder/retry.js
+var CLAIM_STALE_MS = 45 * 60 * 1e3;
+
 // packages/core/dist/cli/status.js
 var SESSION_HOOK_STALE_MS = 30 * 60 * 1e3;
 

package/dist/bin/status.mjs

@@ -3,8 +3,8 @@ import { createRequire as __dhCreateRequire } from 'node:module';
 const require = __dhCreateRequire(import.meta.url);
 
 // adapters/codex/bin/status.mjs
-import { readFileSync as readFileSync8 } from "node:fs";
-import { dirname, join as join12 } from "node:path";
+import { readFileSync as readFileSync9 } from "node:fs";
+import { dirname, join as join13 } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // packages/core/dist/config/local.js
@@ -173,6 +173,9 @@ function loadBeat(scope) {
   }
 }
 
+// packages/core/dist/emit/emitter.js
+var PAYLOAD_LIMIT = 128 * 1024;
+
 // packages/core/dist/forwarder/checkpoint.js
 import { copyFileSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join6 } from "node:path";
@@ -193,6 +196,7 @@ var LINE_CEILING = 64 * 1024 * 1024;
 
 // packages/core/dist/forwarder/lock.js
 var STALE_MS = 5 * 60 * 1e3;
+var HEARTBEAT_MS = 60 * 1e3;
 var DEFAULT_LOCK_WAIT_MS = 60 * 1e3;
 
 // packages/core/dist/forwarder/health.js
@@ -209,6 +213,35 @@ function loadHealth(scope) {
   }
 }
 
+// packages/core/dist/forwarder/pending.js
+import { existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync5, renameSync as renameSync4, rmSync, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join8 } from "node:path";
+function pendingPath(scope) {
+  return join8(CONFIG_DIR, `${scope}.pending.json`);
+}
+function loadPending(scope) {
+  try {
+    const backlog = JSON.parse(readFileSync5(pendingPath(scope), "utf8"));
+    if (!Array.isArray(backlog.paths))
+      return void 0;
+    return backlog;
+  } catch {
+    return void 0;
+  }
+}
+function pendingTranscripts(scope) {
+  const backlog = loadPending(scope);
+  if (!backlog)
+    return [];
+  return backlog.paths.filter((path) => {
+    try {
+      return existsSync2(path);
+    } catch {
+      return false;
+    }
+  });
+}
+
 // node_modules/@darkhunt-security/telemetry/package.json
 var package_default = {
   name: "@darkhunt-security/telemetry",
@@ -1135,9 +1168,12 @@ var VALIDATORS = Object.freeze({
 // node_modules/@darkhunt-security/telemetry/dist/client.js
 var LIB_VERSION = package_default.version;
 
+// packages/core/dist/forwarder/retry.js
+var CLAIM_STALE_MS = 45 * 60 * 1e3;
+
 // packages/core/dist/cli/status.js
-import { existsSync as existsSync2, readFileSync as readFileSync5, readdirSync as readdirSync2, statSync as statSync3 } from "node:fs";
-import { join as join8 } from "node:path";
+import { existsSync as existsSync3, readFileSync as readFileSync6, readdirSync as readdirSync2, statSync as statSync3 } from "node:fs";
+import { join as join9 } from "node:path";
 var SESSION_HOOK_STALE_MS = 30 * 60 * 1e3;
 function countSubagents(mapper, checkpoints) {
   if (!mapper?.subagentOf || !mapper.sessionRoots)
@@ -1152,7 +1188,7 @@ function countSubagents(mapper, checkpoints) {
       return;
     }
     for (const entry of entries) {
-      const full = join8(dir, entry.name);
+      const full = join9(dir, entry.name);
       if (entry.isDirectory()) {
         walk(full);
         continue;
@@ -1177,16 +1213,19 @@ function status(vendor, mapper) {
   for (const [path, cp] of Object.entries(checkpoints)) {
     if (path === "::spool::")
       continue;
-    const size = existsSync2(path) ? statSync3(path).size : 0;
+    const size = existsSync3(path) ? statSync3(path).size : 0;
     transcripts.push({ path, shipped: cp.offset, size, lag: Math.max(0, size - cp.offset) });
   }
   const subagents = countSubagents(mapper, checkpoints);
   const lastPass = loadHealth(config.scope);
+  const backlog = loadPending(config.scope);
+  const heldTranscripts = pendingTranscripts(config.scope).length;
+  const pending = backlog && heldTranscripts > 0 ? { transcripts: heldTranscripts, since: backlog.since, at: backlog.at } : void 0;
   const spool = spoolPath(vendor);
   let spoolEvents = 0;
   let spoolLastAt;
-  if (existsSync2(spool)) {
-    const lines = readFileSync5(spool, "utf8").split("\n").filter(Boolean);
+  if (existsSync3(spool)) {
+    const lines = readFileSync6(spool, "utf8").split("\n").filter(Boolean);
     spoolEvents = lines.length;
     const last = lines[lines.length - 1];
     if (last) {
@@ -1224,19 +1263,20 @@ function status(vendor, mapper) {
     transcripts,
     totalLag: transcripts.reduce((sum, t) => sum + t.lag, 0),
     ...lastPass !== void 0 ? { lastPass } : {},
+    ...pending !== void 0 ? { pending } : {},
     ...subagents !== void 0 ? { subagents } : {},
-    lockHeld: existsSync2(spool.replace(/spool\/.*$/, `${config.scope}.forwarder.lock`))
+    lockHeld: existsSync3(spool.replace(/spool\/.*$/, `${config.scope}.forwarder.lock`))
   };
 }
 
 // packages/core/dist/cli/enroll.js
 import { homedir as homedir3 } from "node:os";
-import { join as join9 } from "node:path";
-var CLI_CREDENTIALS_PATH = join9(homedir3(), ".darkhunt", "credentials.json");
+import { join as join10 } from "node:path";
+var CLI_CREDENTIALS_PATH = join10(homedir3(), ".darkhunt", "credentials.json");
 
 // adapters/codex/dist/transcript.js
-import { readFileSync as readFileSync6 } from "node:fs";
-import { basename, join as join10 } from "node:path";
+import { readFileSync as readFileSync7 } from "node:fs";
+import { basename, join as join11 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 function str(value) {
   return typeof value === "string" ? value : void 0;
@@ -1380,7 +1420,7 @@ function stripSuffix(path) {
 var codexTranscript = {
   vendor: "codex",
   sessionRoots() {
-    return [join10(homedir4(), ".codex", "sessions")];
+    return [join11(homedir4(), ".codex", "sessions")];
   },
   /**
    * `~/.codex/auth.json` -> the `email` claim of `tokens.id_token`.
@@ -1402,7 +1442,7 @@ var codexTranscript = {
    */
   resolveUserId() {
     try {
-      return emailFromAuth(readFileSync6(join10(homedir4(), ".codex", "auth.json"), "utf8"));
+      return emailFromAuth(readFileSync7(join11(homedir4(), ".codex", "auth.json"), "utf8"));
     } catch {
       return void 0;
     }
@@ -1613,14 +1653,14 @@ var codexTranscript = {
 };
 
 // adapters/codex/bin/lib/launchers.mjs
-import { chmodSync, existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
+import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 var LAUNCHERS = {
   "darkhunt-codex-spool": "spool.mjs",
   "darkhunt-codex-guard": "guard.mjs"
 };
-var BIN_DIR = join11(homedir5(), ".local", "bin");
+var BIN_DIR = join12(homedir5(), ".local", "bin");
 var script = (target) => `#!/bin/sh
 # Installed by darkhunt endpoint-plugins. Resolves the newest installed
 # plugin version at run time; do not hard-code a version here.
@@ -1632,14 +1672,14 @@ function launcherState(binDir = BIN_DIR, path = process.env["PATH"] ?? "") {
   const missing = [];
   const stale = [];
   for (const [name, target] of Object.entries(LAUNCHERS)) {
-    const file = join11(binDir, name);
-    if (!existsSync3(file)) {
+    const file = join12(binDir, name);
+    if (!existsSync4(file)) {
       missing.push(name);
       continue;
     }
     let body = "";
     try {
-      body = readFileSync7(file, "utf8");
+      body = readFileSync8(file, "utf8");
     } catch {
     }
     if (body !== script(target)) stale.push(name);
@@ -1674,10 +1714,10 @@ try {
   const s = status("codex", codexTranscript);
   const n = (x) => x.toLocaleString();
   console.log(`darkhunt endpoint status \u2014 codex`);
-  const root = join12(dirname(fileURLToPath(import.meta.url)), "..", "..");
+  const root = join13(dirname(fileURLToPath(import.meta.url)), "..", "..");
   let installed = "unknown";
   try {
-    installed = JSON.parse(readFileSync8(join12(root, "package.json"), "utf8")).version;
+    installed = JSON.parse(readFileSync9(join13(root, "package.json"), "utf8")).version;
   } catch {
   }
   console.log(`  plugin       ${installed}   ${root}`);
@@ -1725,6 +1765,11 @@ try {
       );
     }
   }
+  if (s.pending) {
+    console.log(
+      `  held         ${s.pending.transcripts} transcript(s) waiting on the platform  since ${s.pending.since}`
+    );
+  }
   if (s.transcripts.length === 0) {
     console.log("  transcripts  none shipped yet");
   } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkhunt-security/endpoint-codex",
-  "version": "0.9.17",
+  "version": "0.9.18",
   "type": "module",
   "description": "Darkhunt endpoint adapter for Codex CLI: hook codec, rollout transcript mapper, plugin manifest.",
   "bin": {
@@ -14,7 +14,7 @@
   ],
   "devDependencies": {
     "@darkhunt-security/endpoint-contracts": "0.9.3",
-    "@darkhunt-security/endpoint-core": "0.9.3"
+    "@darkhunt-security/endpoint-core": "0.9.4"
   },
   "publishConfig": {
     "access": "public",