@gkorepanov/ccodex 0.3.0

package/dist/observability/rpcRecorder.js

@@ -0,0 +1,100 @@
+import { appendFileSync, chmodSync, existsSync, mkdirSync, renameSync, statSync, unlinkSync, } from "node:fs";
+import { join } from "node:path";
+const secretKey = /authorization|api.?key|secret|password|cookie|^token$|access.?token|refresh.?token|id.?token/i;
+const contentKey = /^(output|stdout|stderr|prompt|input|content|toolOutput|fileContent|env)$/i;
+function sanitize(value, includeContent, key = "") {
+    if (secretKey.test(key))
+        return value == null ? value : "<REDACTED>";
+    if (!includeContent && contentKey.test(key))
+        return value == null ? value : "<CONTENT_REDACTED>";
+    if (Array.isArray(value))
+        return value.map((item) => sanitize(item, includeContent, key));
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([childKey, item]) => [
+            childKey, sanitize(item, includeContent, childKey),
+        ]));
+    }
+    return value;
+}
+function rawBytes(data) {
+    if (typeof data === "string")
+        return Buffer.from(data);
+    if (Array.isArray(data))
+        return Buffer.concat(data);
+    if (data instanceof ArrayBuffer)
+        return Buffer.from(data);
+    return Buffer.from(data);
+}
+function framePayload(data, isBinary) {
+    const bytes = rawBytes(data);
+    if (isBinary)
+        return { encoding: "base64", data: bytes.toString("base64") };
+    const text = bytes.toString("utf8");
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return { encoding: "utf8", data: text };
+    }
+}
+export class RpcRecorder {
+    enabled;
+    includeContent;
+    totalMaxBytes;
+    segmentMaxBytes;
+    path;
+    sequence = 0;
+    failed = false;
+    constructor(config) {
+        this.enabled = config.rpcCapture !== false;
+        this.includeContent = config.rpcCaptureIncludeContent !== false;
+        this.totalMaxBytes = config.rpcCaptureMaxBytes ?? 1_073_741_824;
+        this.segmentMaxBytes = Math.max(1, Math.floor(this.totalMaxBytes / 2));
+        this.path = join(config.dataDir, "rpc.jsonl");
+        if (!this.enabled)
+            return;
+        mkdirSync(config.dataDir, { recursive: true, mode: 0o700 });
+        process.stderr.write(`codex-hybrid: bounded RPC capture enabled at ${this.path}; content=${this.includeContent ? "included" : "redacted"}; totalBudget=${this.totalMaxBytes}.\n`);
+        this.lifecycle("recorder.started", { pid: process.pid });
+    }
+    lifecycle(event, fields = {}) {
+        this.write({ type: "lifecycle", event, ...fields });
+    }
+    connection(event, connectionId, fields = {}) {
+        this.write({ type: "connection", event, connectionId, ...fields });
+    }
+    frame(connectionId, direction, data, isBinary) {
+        this.write({
+            type: "frame",
+            connectionId,
+            direction,
+            binary: isBinary,
+            message: framePayload(data, isBinary),
+        });
+    }
+    write(fields) {
+        if (!this.enabled || this.failed)
+            return;
+        const record = sanitize({
+            ts: new Date().toISOString(),
+            sequence: ++this.sequence,
+            ...fields,
+        }, this.includeContent);
+        const line = `${JSON.stringify(record)}\n`;
+        try {
+            if (existsSync(this.path) && statSync(this.path).size + Buffer.byteLength(line) > this.segmentMaxBytes) {
+                const previous = `${this.path}.1`;
+                if (existsSync(previous))
+                    unlinkSync(previous);
+                renameSync(this.path, previous);
+            }
+            appendFileSync(this.path, line, { mode: 0o600 });
+            chmodSync(this.path, 0o600);
+        }
+        catch (error) {
+            this.failed = true;
+            process.stderr.write(`codex-hybrid: RPC capture disabled after write failure: ${String(error)}\n`);
+        }
+    }
+}
+//# sourceMappingURL=rpcRecorder.js.map

package/dist/observability/rpcRecorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpcRecorder.js","sourceRoot":"","sources":["../../src/observability/rpcRecorder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,GACnF,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAMjC,MAAM,SAAS,GAAG,+FAA+F,CAAC;AAClH,MAAM,UAAU,GAAG,2EAA2E,CAAC;AAE/F,SAAS,QAAQ,CAAC,KAAc,EAAE,cAAuB,EAAE,GAAG,GAAG,EAAE;IACjE,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;IACrE,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YACxE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC;SACnD,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgC;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,IAAgC,EAAE,QAAiB;IACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,OAAO,WAAW;IACL,OAAO,CAAU;IACjB,cAAc,CAAU;IACxB,aAAa,CAAS;IACtB,eAAe,CAAS;IACxB,IAAI,CAAS;IACtB,QAAQ,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAmB,MAAoB;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,wBAAwB,KAAK,KAAK,CAAC;QAChE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,kBAAkB,IAAI,aAAa,CAAC;QAChE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,iBAAiB,IAAI,CAAC,aAAa,KAAK,CAC5J,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IAEM,SAAS,CAAC,KAAa,EAAE,SAAkC,EAAE;QAClE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IAEM,UAAU,CAAC,KAA0B,EAAE,YAAoB,EAAE,SAAkC,EAAE;QACtG,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAEM,KAAK,CACV,YAAoB,EACpB,SAAuB,EACvB,IAAgC,EAChC,QAAiB;QAEjB,IAAI,CAAC,KAAK,CAAC;YACT,IAAI,EAAE,OAAO;YACb,YAAY;YACZ,SAAS;YACT,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,MAA+B;QAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACzC,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,QAAQ,EAAE,EAAE,IAAI,CAAC,QAAQ;YACzB,GAAG,MAAM;SACV,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3C,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;gBACvG,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC;gBAClC,IAAI,UAAU,CAAC,QAAQ,CAAC;oBAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClC,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;CACF"}

package/dist/protocol/cursor.d.ts

@@ -0,0 +1,9 @@
+export declare function queryFingerprint(value: unknown): string;
+export declare class CursorCodec {
+    private readonly key;
+    constructor(key: Buffer);
+    static load(dataDir: string): CursorCodec;
+    encode(scope: string, payload: unknown): string;
+    decode<T>(scope: string, value: string | null | undefined): T | undefined;
+    private sign;
+}

package/dist/protocol/cursor.js

@@ -0,0 +1,72 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { invalidParams } from "./errors.js";
+function stable(value) {
+    if (Array.isArray(value))
+        return value.map(stable);
+    if (!value || typeof value !== "object")
+        return value;
+    return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => [key, stable(item)]));
+}
+export function queryFingerprint(value) {
+    return createHmac("sha256", "codex-hybrid-query-v1").update(JSON.stringify(stable(value))).digest("base64url").slice(0, 16);
+}
+export class CursorCodec {
+    key;
+    constructor(key) {
+        this.key = key;
+    }
+    static load(dataDir) {
+        mkdirSync(dataDir, { recursive: true, mode: 0o700 });
+        const path = join(dataDir, "cursor.key");
+        try {
+            return new CursorCodec(readFileSync(path));
+        }
+        catch (error) {
+            if (!error || typeof error !== "object" || !("code" in error) || error.code !== "ENOENT")
+                throw error;
+        }
+        const key = randomBytes(32);
+        try {
+            writeFileSync(path, key, { flag: "wx", mode: 0o600 });
+            return new CursorCodec(key);
+        }
+        catch (error) {
+            if (!error || typeof error !== "object" || !("code" in error) || error.code !== "EEXIST")
+                throw error;
+            return new CursorCodec(readFileSync(path));
+        }
+    }
+    encode(scope, payload) {
+        const body = Buffer.from(JSON.stringify(payload)).toString("base64url");
+        return `hyb:${scope}:${body}.${this.sign(scope, body)}`;
+    }
+    decode(scope, value) {
+        if (!value)
+            return undefined;
+        const prefix = `hyb:${scope}:`;
+        if (!value.startsWith(prefix))
+            throw invalidParams(`Invalid hybrid ${scope} cursor.`);
+        const encoded = value.slice(prefix.length);
+        const separator = encoded.lastIndexOf(".");
+        if (separator < 1)
+            throw invalidParams(`Invalid hybrid ${scope} cursor.`);
+        const body = encoded.slice(0, separator);
+        const signature = encoded.slice(separator + 1);
+        const expected = Buffer.from(this.sign(scope, body));
+        const actual = Buffer.from(signature);
+        if (actual.length !== expected.length || !timingSafeEqual(actual, expected))
+            throw invalidParams(`Invalid hybrid ${scope} cursor signature.`);
+        try {
+            return JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
+        }
+        catch {
+            throw invalidParams(`Invalid hybrid ${scope} cursor payload.`);
+        }
+    }
+    sign(scope, body) {
+        return createHmac("sha256", this.key).update(`${scope}\0${body}`).digest("base64url");
+    }
+}
+//# sourceMappingURL=cursor.js.map

package/dist/protocol/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/protocol/cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7K,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,UAAU,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9H,CAAC;AAED,MAAM,OAAO,WAAW;IACc;IAApC,YAAoC,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAE5C,MAAM,CAAC,IAAI,CAAC,OAAe;QAChC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,IAAI,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACxG,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACtG,OAAO,IAAI,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,KAAa,EAAE,OAAgB;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxE,OAAO,OAAO,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IAC1D,CAAC;IAEM,MAAM,CAAI,KAAa,EAAE,KAAgC;QAC9D,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,KAAK,GAAG,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,aAAa,CAAC,kBAAkB,KAAK,UAAU,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,aAAa,CAAC,kBAAkB,KAAK,UAAU,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,MAAM,aAAa,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,CAAC;QAC9I,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,aAAa,CAAC,kBAAkB,KAAK,kBAAkB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,KAAa,EAAE,IAAY;QACtC,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxF,CAAC;CACF"}

package/dist/protocol/envelopes.d.ts

@@ -0,0 +1,27 @@
+export type RequestId = string | number;
+export interface RpcRequest {
+    readonly method: string;
+    readonly id: RequestId;
+    readonly params?: unknown;
+}
+export interface RpcNotification {
+    readonly method: string;
+    readonly params?: unknown;
+}
+export interface RpcSuccess {
+    readonly id: RequestId;
+    readonly result: unknown;
+}
+export interface RpcFailure {
+    readonly id: RequestId;
+    readonly error: {
+        readonly code: number;
+        readonly message: string;
+        readonly data?: unknown;
+    };
+}
+export type RpcMessage = RpcRequest | RpcNotification | RpcSuccess | RpcFailure;
+export declare function parseRpcMessage(data: RawData): RpcMessage | undefined;
+export declare function isRequest(message: RpcMessage): message is RpcRequest;
+export declare function isResponse(message: RpcMessage): message is RpcSuccess | RpcFailure;
+import type { RawData } from "ws";

package/dist/protocol/envelopes.js

@@ -0,0 +1,16 @@
+export function parseRpcMessage(data) {
+    try {
+        const value = JSON.parse(data.toString());
+        return value !== null && typeof value === "object" ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function isRequest(message) {
+    return "method" in message && "id" in message;
+}
+export function isResponse(message) {
+    return "id" in message && !("method" in message);
+}
+//# sourceMappingURL=envelopes.js.map

package/dist/protocol/envelopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelopes.js","sourceRoot":"","sources":["../../src/protocol/envelopes.ts"],"names":[],"mappings":"AAyBA,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAY,CAAC;QACrD,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAmB;IAC3C,OAAO,QAAQ,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAmB;IAC5C,OAAO,IAAI,IAAI,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;AACnD,CAAC"}

package/dist/protocol/errors.d.ts

@@ -0,0 +1,11 @@
+import type { CodexErrorInfo } from "../codex/generated/v2/CodexErrorInfo.js";
+export declare class RpcError extends Error {
+    readonly code: number;
+    constructor(code: number, message: string);
+}
+export declare function invalidParams(message: string): RpcError;
+export declare function rpcCodexErrorInfo(code: number): CodexErrorInfo;
+export declare function rpcError(error: unknown): {
+    code: number;
+    message: string;
+};

package/dist/protocol/errors.js

@@ -0,0 +1,24 @@
+export class RpcError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "RpcError";
+    }
+}
+export function invalidParams(message) {
+    return new RpcError(-32602, message);
+}
+export function rpcCodexErrorInfo(code) {
+    if (code === -32601 || code === -32602)
+        return "badRequest";
+    if (code === -32603)
+        return "internalServerError";
+    return "other";
+}
+export function rpcError(error) {
+    if (error instanceof RpcError)
+        return { code: error.code, message: error.message };
+    return { code: -32603, message: error instanceof Error ? error.message : String(error) };
+}
+//# sourceMappingURL=errors.js.map

package/dist/protocol/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/protocol/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEf;IADlB,YACkB,IAAY,EAC5B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QAI5B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,IAAI,QAAQ,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK;QAAE,OAAO,YAAY,CAAC;IAC5D,IAAI,IAAI,KAAK,CAAC,KAAK;QAAE,OAAO,qBAAqB,CAAC;IAClD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3F,CAAC"}

package/dist/runtime/dependencies.d.ts

@@ -0,0 +1,3 @@
+export declare function runtimePlatformKey(): string;
+export declare function pinnedCodexExecutable(): string;
+export declare function bundledClaudeExecutable(): string;

package/dist/runtime/dependencies.js

@@ -0,0 +1,47 @@
+import { existsSync } from "node:fs";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+const require = createRequire(import.meta.url);
+const CLAUDE_PACKAGES = {
+    "darwin-arm64": "@anthropic-ai/claude-agent-sdk-darwin-arm64",
+    "darwin-x64": "@anthropic-ai/claude-agent-sdk-darwin-x64",
+    "linux-arm64-gnu": "@anthropic-ai/claude-agent-sdk-linux-arm64",
+    "linux-arm64-musl": "@anthropic-ai/claude-agent-sdk-linux-arm64-musl",
+    "linux-x64-gnu": "@anthropic-ai/claude-agent-sdk-linux-x64",
+    "linux-x64-musl": "@anthropic-ai/claude-agent-sdk-linux-x64-musl",
+};
+function linuxLibc() {
+    const report = process.report?.getReport();
+    return report?.header?.glibcVersionRuntime ? "gnu" : "musl";
+}
+export function runtimePlatformKey() {
+    if (process.platform === "darwin")
+        return `darwin-${process.arch}`;
+    if (process.platform === "linux")
+        return `linux-${process.arch}-${linuxLibc()}`;
+    return `${process.platform}-${process.arch}`;
+}
+export function pinnedCodexExecutable() {
+    try {
+        return require.resolve("@openai/codex/bin/codex.js");
+    }
+    catch {
+        throw new Error("Pinned @openai/codex@0.144.4 is missing. Reinstall @gkorepanov/ccodex.");
+    }
+}
+export function bundledClaudeExecutable() {
+    const key = runtimePlatformKey();
+    const packageName = CLAUDE_PACKAGES[key];
+    if (!packageName)
+        throw new Error(`CCodex does not support Claude on '${key}'.`);
+    try {
+        const binary = join(dirname(require.resolve(`${packageName}/package.json`)), process.platform === "win32" ? "claude.exe" : "claude");
+        if (existsSync(binary))
+            return binary;
+    }
+    catch {
+        // Emit one stable repair instruction below.
+    }
+    throw new Error(`Claude Agent SDK binary package '${packageName}' is missing. Reinstall @gkorepanov/ccodex with optional dependencies enabled.`);
+}
+//# sourceMappingURL=dependencies.js.map

package/dist/runtime/dependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependencies.js","sourceRoot":"","sources":["../../src/runtime/dependencies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,eAAe,GAAqC;IACxD,cAAc,EAAE,6CAA6C;IAC7D,YAAY,EAAE,2CAA2C;IACzD,iBAAiB,EAAE,4CAA4C;IAC/D,kBAAkB,EAAE,iDAAiD;IACrE,eAAe,EAAE,0CAA0C;IAC3D,gBAAgB,EAAE,+CAA+C;CAClE,CAAC;AAEF,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,EAA+D,CAAC;IACxG,OAAO,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,EAAE,CAAC;IAChF,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,WAAW,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACrI,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,gFAAgF,CAChI,CAAC;AACJ,CAAC"}

package/dist/store/HybridStore.d.ts

@@ -0,0 +1,75 @@
+import type { Thread } from "../codex/generated/v2/Thread.js";
+import type { ThreadListParams } from "../codex/generated/v2/ThreadListParams.js";
+import type { Turn } from "../codex/generated/v2/Turn.js";
+import type { ThreadGoal } from "../codex/generated/v2/ThreadGoal.js";
+import type { TokenUsageBreakdown } from "../codex/generated/v2/TokenUsageBreakdown.js";
+import type { ApprovalsReviewer } from "../codex/generated/v2/ApprovalsReviewer.js";
+export interface ClaudeThreadRecord {
+    readonly thread: Thread;
+    readonly claudeSessionId: string;
+    readonly modelPickerId: string;
+    readonly claudeModelValue: string;
+    readonly serviceTier: string | null;
+    readonly approvalPolicy: unknown;
+    readonly approvalsReviewer: ApprovalsReviewer;
+    readonly sandboxPolicy: unknown;
+    readonly baseInstructions: string | null;
+    readonly developerInstructions: string | null;
+    readonly personality: string | null;
+    readonly resolvedModel: string | null;
+    readonly lastClaudeMessageUuid: string | null;
+    readonly lastCompletedTurnId: string | null;
+    readonly claudeCodeVersion: string | null;
+    readonly reasoningEffort: string | null;
+    readonly reasoningSummary: string | null;
+    readonly collaborationMode: unknown | null;
+    readonly outputSchema: unknown | null;
+    readonly tokenUsageTotal: TokenUsageBreakdown;
+}
+export interface PendingRequestRecord {
+    readonly requestId: string;
+    readonly threadId: string;
+    readonly turnId: string | null;
+    readonly claudeRequestId: string | null;
+    readonly method: string;
+    readonly params: unknown;
+    readonly status: "pending" | "resolved" | "cancelled";
+    readonly response: unknown | null;
+    readonly createdAt: number;
+    readonly resolvedAt: number | null;
+}
+export interface EventPersistence {
+    readonly turn?: Turn;
+    readonly providerEventType?: string | null;
+    readonly providerEventId?: string | null;
+    readonly dedupKey?: string | null;
+}
+export interface HybridStore {
+    createThread(record: ClaudeThreadRecord): void;
+    hasThread(threadId: string): boolean;
+    getThreadRecord(threadId: string, includeTurns?: boolean): ClaudeThreadRecord | undefined;
+    allThreadRecords(): ClaudeThreadRecord[];
+    listThreads(params: ThreadListParams): Thread[];
+    updateThread(record: ClaudeThreadRecord): void;
+    setThreadArchived(threadId: string, archived: boolean): void;
+    deleteThread(threadId: string): void;
+    createTurn(threadId: string, turn: Turn): void;
+    updateTurn(threadId: string, turn: Turn): void;
+    getTurn(threadId: string, turnId: string): Turn | undefined;
+    listTurns(threadId: string): Turn[];
+    setTurnClaudeMessageUuid(threadId: string, turnId: string, messageUuid: string): void;
+    getTurnClaudeMessageUuid(threadId: string, turnId: string): string | undefined;
+    truncateTurns(threadId: string, keepCount: number): void;
+    appendEvent(threadId: string, turnId: string | null, method: string, params: unknown, persistence?: EventPersistence): number;
+    hasProcessedProviderEvent(threadId: string, providerEventId: string): boolean;
+    markProviderEventProcessed(threadId: string, providerEventType: string, providerEventId: string): void;
+    createPendingRequest(request: PendingRequestRecord): void;
+    getPendingRequest(requestId: string): PendingRequestRecord | undefined;
+    findPendingRequestByClaudeId(threadId: string, claudeRequestId: string): PendingRequestRecord | undefined;
+    listPendingRequests(threadId: string): PendingRequestRecord[];
+    resolvePendingRequest(requestId: string, status: "resolved" | "cancelled", response: unknown): void;
+    getGoal(threadId: string): ThreadGoal | undefined;
+    setGoal(goal: ThreadGoal): void;
+    clearGoal(threadId: string): boolean;
+    close(): void;
+}

package/dist/store/HybridStore.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=HybridStore.js.map

package/dist/store/HybridStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HybridStore.js","sourceRoot":"","sources":["../../src/store/HybridStore.ts"],"names":[],"mappings":""}

package/dist/store/memoryStore.d.ts

@@ -0,0 +1,76 @@
+import type { Thread } from "../codex/generated/v2/Thread.js";
+import type { ThreadListParams } from "../codex/generated/v2/ThreadListParams.js";
+import type { Turn } from "../codex/generated/v2/Turn.js";
+import type { ThreadGoal } from "../codex/generated/v2/ThreadGoal.js";
+import type { ClaudeThreadRecord, EventPersistence, HybridStore, PendingRequestRecord } from "./HybridStore.js";
+export declare class MemoryHybridStore implements HybridStore {
+    private readonly records;
+    private readonly turns;
+    private readonly pending;
+    private readonly archived;
+    private readonly goals;
+    private readonly turnMessages;
+    private readonly eventDedup;
+    private readonly providerEvents;
+    private eventSequence;
+    createThread(record: ClaudeThreadRecord): void;
+    hasThread(threadId: string): boolean;
+    getThreadRecord(threadId: string, includeTurns?: boolean): ClaudeThreadRecord | undefined;
+    allThreadRecords(): ClaudeThreadRecord[];
+    listThreads(params: ThreadListParams): Thread[];
+    updateThread(record: ClaudeThreadRecord): void;
+    setThreadArchived(threadId: string, archived: boolean): void;
+    deleteThread(threadId: string): void;
+    createTurn(threadId: string, turn: Turn): void;
+    updateTurn(threadId: string, turn: Turn): void;
+    getTurn(threadId: string, turnId: string): Turn | undefined;
+    listTurns(threadId: string): Turn[];
+    setTurnClaudeMessageUuid(threadId: string, turnId: string, messageUuid: string): void;
+    getTurnClaudeMessageUuid(threadId: string, turnId: string): string | undefined;
+    truncateTurns(threadId: string, keepCount: number): void;
+    appendEvent(threadId: string, _turnId: string | null, _method: string, _params: unknown, persistence?: EventPersistence): number;
+    hasProcessedProviderEvent(threadId: string, providerEventId: string): boolean;
+    markProviderEventProcessed(threadId: string, _providerEventType: string, providerEventId: string): void;
+    createPendingRequest(request: PendingRequestRecord): void;
+    getPendingRequest(requestId: string): PendingRequestRecord | undefined;
+    findPendingRequestByClaudeId(threadId: string, claudeRequestId: string): PendingRequestRecord | undefined;
+    listPendingRequests(threadId: string): PendingRequestRecord[];
+    resolvePendingRequest(requestId: string, status: "resolved" | "cancelled", response: unknown): void;
+    getGoal(threadId: string): ThreadGoal | undefined;
+    setGoal(goal: ThreadGoal): void;
+    clearGoal(threadId: string): boolean;
+    close(): void;
+}
+export declare class LayeredHybridStore implements HybridStore {
+    private readonly durable;
+    private readonly ephemeral;
+    constructor(durable: HybridStore);
+    private owner;
+    createThread(record: ClaudeThreadRecord): void;
+    hasThread(threadId: string): boolean;
+    getThreadRecord(threadId: string, includeTurns?: boolean): ClaudeThreadRecord | undefined;
+    allThreadRecords(): ClaudeThreadRecord[];
+    listThreads(params: ThreadListParams): Thread[];
+    updateThread(record: ClaudeThreadRecord): void;
+    setThreadArchived(threadId: string, archived: boolean): void;
+    deleteThread(threadId: string): void;
+    createTurn(threadId: string, turn: Turn): void;
+    updateTurn(threadId: string, turn: Turn): void;
+    getTurn(threadId: string, turnId: string): Turn | undefined;
+    listTurns(threadId: string): Turn[];
+    setTurnClaudeMessageUuid(threadId: string, turnId: string, messageUuid: string): void;
+    getTurnClaudeMessageUuid(threadId: string, turnId: string): string | undefined;
+    truncateTurns(threadId: string, keepCount: number): void;
+    appendEvent(threadId: string, turnId: string | null, method: string, params: unknown, persistence?: EventPersistence): number;
+    hasProcessedProviderEvent(threadId: string, providerEventId: string): boolean;
+    markProviderEventProcessed(threadId: string, providerEventType: string, providerEventId: string): void;
+    createPendingRequest(request: PendingRequestRecord): void;
+    getPendingRequest(requestId: string): PendingRequestRecord | undefined;
+    findPendingRequestByClaudeId(threadId: string, claudeRequestId: string): PendingRequestRecord | undefined;
+    listPendingRequests(threadId: string): PendingRequestRecord[];
+    resolvePendingRequest(requestId: string, status: "resolved" | "cancelled", response: unknown): void;
+    getGoal(threadId: string): ThreadGoal | undefined;
+    setGoal(goal: ThreadGoal): void;
+    clearGoal(threadId: string): boolean;
+    close(): void;
+}