@juspay/neurolink 12.35.4 → 12.36.0

package/dist/cli/commands/setup.js

@@ -322,7 +322,7 @@ async function showWelcomeScreen() {
         chalk.blue("          │"));
     logger.always(chalk.blue("│                                                             │"));
     logger.always(chalk.blue("│  ") +
-        chalk.gray("Universal interface for 8+ AI providers") +
+        chalk.gray("Unified interface for many AI providers") +
         chalk.blue("                   │"));
     logger.always(chalk.blue("│  ") +
         chalk.gray("• Generate text, code, and creative content") +

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * NeuroLink AI Toolkit
  *
- * A unified AI provider interface with support for 14+ providers,
+ * A unified AI provider interface with support for many AI providers,
  * automatic fallback, streaming, MCP tool integration, HITL security,
  * Redis persistence, and enterprise-grade middleware.
  *
@@ -98,7 +98,7 @@ export declare const VERSION = "1.0.0";
  * Quick start factory function for creating AI provider instances.
  *
  * Creates a configured AI provider instance ready for immediate use.
- * Supports 14+ providers: OpenAI, Anthropic, Google AI Studio,
+ * Supports providers including OpenAI, Anthropic, Google AI Studio,
  * Google Vertex, AWS Bedrock, AWS SageMaker, Azure OpenAI, Hugging Face,
  * LiteLLM, Mistral, Ollama, OpenAI Compatible, OpenRouter, and more.
  *

package/dist/index.js

@@ -1,7 +1,7 @@
 /**
  * NeuroLink AI Toolkit
  *
- * A unified AI provider interface with support for 14+ providers,
+ * A unified AI provider interface with support for many AI providers,
  * automatic fallback, streaming, MCP tool integration, HITL security,
  * Redis persistence, and enterprise-grade middleware.
  *
@@ -220,7 +220,7 @@ export const VERSION = "1.0.0";
  * Quick start factory function for creating AI provider instances.
  *
  * Creates a configured AI provider instance ready for immediate use.
- * Supports 14+ providers: OpenAI, Anthropic, Google AI Studio,
+ * Supports providers including OpenAI, Anthropic, Google AI Studio,
  * Google Vertex, AWS Bedrock, AWS SageMaker, Azure OpenAI, Hugging Face,
  * LiteLLM, Mistral, Ollama, OpenAI Compatible, OpenRouter, and more.
  *

package/dist/neurolink.d.ts

@@ -692,7 +692,7 @@ export declare class NeuroLink {
      * Generate AI response with comprehensive feature support.
      *
      * Primary method for AI generation with support for all NeuroLink features:
-     * - Multi-provider support (14+ providers)
+     * - Multi-provider support
      * - MCP tool integration
      * - Structured JSON output with Zod schemas
      * - Conversation memory (Redis or in-memory)

package/dist/neurolink.js

@@ -194,7 +194,7 @@ const isNonRetryableForPool = sharedIsNonRetryableForPool;
 /**
  * NeuroLink - Universal AI Development Platform
  *
- * Main SDK class providing unified access to 14+ AI providers with enterprise features:
+ * Main SDK class providing unified access to many AI providers with enterprise features:
  * - Multi-provider support (OpenAI, Anthropic, Google AI Studio, Google Vertex, AWS Bedrock, etc.)
  * - MCP (Model Context Protocol) tool integration — connect any MCP-compliant server
  * - Human-in-the-Loop (HITL) security workflows for regulated industries
@@ -3231,7 +3231,7 @@ Current user's request: ${currentInput}`;
      * Generate AI response with comprehensive feature support.
      *
      * Primary method for AI generation with support for all NeuroLink features:
-     * - Multi-provider support (14+ providers)
+     * - Multi-provider support
      * - MCP tool integration
      * - Structured JSON output with Zod schemas
      * - Conversation memory (Redis or in-memory)

package/dist/providers/openaiCompatCatalog.d.ts

@@ -1,6 +1,6 @@
 import type { OpenAICompatCatalogEntry } from "../types/index.js";
 /**
- * Config-driven catalog of the 10 OpenAI-compatible providers whose only
+ * Config-driven catalog of the OpenAI-compatible providers whose only
  * differences from each other are expressible as named, closed catalog
  * quirks (messageContentFormat, timeoutErrorClass, responseFormatDowngrade)
  * rather than real code. Each entry fully replaces what used to be a
@@ -11,7 +11,7 @@ import type { OpenAICompatCatalogEntry } from "../types/index.js";
  *
  * The entries themselves are derived from the JSON catalog
  * (src/lib/providers/catalog/<id>.json) via buildCatalogEntries() — that
- * JSON is now the single source of truth for these 10 providers' identity,
+ * JSON is now the single source of truth for these providers' identity,
  * models, error rules and wire config. See
  * src/lib/providers/catalog/loader.ts for the derivation logic and
  * docs/superpowers/plans/2026-08-28-provider-json-catalog-spec.md for the

package/dist/providers/openaiCompatCatalog.js

@@ -1,6 +1,6 @@
 import { buildCatalogEntries } from "./catalog/loader.js";
 /**
- * Config-driven catalog of the 10 OpenAI-compatible providers whose only
+ * Config-driven catalog of the OpenAI-compatible providers whose only
  * differences from each other are expressible as named, closed catalog
  * quirks (messageContentFormat, timeoutErrorClass, responseFormatDowngrade)
  * rather than real code. Each entry fully replaces what used to be a
@@ -11,7 +11,7 @@ import { buildCatalogEntries } from "./catalog/loader.js";
  *
  * The entries themselves are derived from the JSON catalog
  * (src/lib/providers/catalog/<id>.json) via buildCatalogEntries() — that
- * JSON is now the single source of truth for these 10 providers' identity,
+ * JSON is now the single source of truth for these providers' identity,
  * models, error rules and wire config. See
  * src/lib/providers/catalog/loader.ts for the derivation logic and
  * docs/superpowers/plans/2026-08-28-provider-json-catalog-spec.md for the

package/dist/proxy/codexOutboundFallback.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Codex-outbound fallback: request translation, Codex Responses -> ClaudeRequest.
+ *
+ * Named to mirror the existing asymmetry: `codexFallback.ts` is the Claude
+ * engine's fallback _into_ Codex; this file is the Codex engine's fallback
+ * _out_ to the Anthropic OAuth pool or Vertex-Claude. Owns one thing:
+ * untrusted inbound Codex Responses JSON -> a typed `ClaudeRequest`. Does not
+ * own target/model selection, response/stream translation back to Codex wire
+ * format, tool execution, or dispatch/HTTP.
+ *
+ * `parallel_tool_calls` is parsed and validated but not yet consumed here —
+ * `mapCodexToolChoiceToClaude` stays the base bijection this PR ships.
+ * Threading it into `tool_choice.disable_parallel_tool_use` (and the matching
+ * `ClaudeRequest.tool_choice` type change) is the tool-call-fidelity build-order
+ * PR's explicit modification to this same function, not a gap in this one.
+ */
+import type { ClaudeRequest } from "../types/index.js";
+import type { CodexNativeRequest, CodexTranslationError } from "../types/index.js";
+export declare function parseCodexNativeRequest(raw: unknown): {
+    ok: true;
+    value: CodexNativeRequest;
+} | {
+    ok: false;
+    error: CodexTranslationError;
+};
+export declare function translateCodexRequestToClaude(request: CodexNativeRequest, target: {
+    provider: "anthropic" | "vertex";
+    model: string;
+}): {
+    ok: true;
+    value: ClaudeRequest;
+} | {
+    ok: false;
+    error: CodexTranslationError;
+};

package/dist/proxy/codexOutboundFallback.js

@@ -0,0 +1,515 @@
+import { resolveClaudeMaxTokens } from "../utils/tokenLimits.js";
+// ---------------------------------------------------------------------------
+// §3.1 parseCodexNativeRequest — the untrusted-JSON -> typed boundary.
+// ---------------------------------------------------------------------------
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isCodexContentPart(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    if (value.type === "input_text" || value.type === "output_text") {
+        return typeof value.text === "string";
+    }
+    if (value.type === "input_image") {
+        return typeof value.image_url === "string";
+    }
+    return false;
+}
+function isCodexNativeToolDeclaration(value) {
+    if (!isRecord(value) || typeof value.name !== "string") {
+        return false;
+    }
+    if (value.type === "function") {
+        return (typeof value.strict === "boolean" &&
+            isRecord(value.parameters) &&
+            (value.description === undefined || typeof value.description === "string"));
+    }
+    if (value.type === "custom") {
+        return (isRecord(value.format) &&
+            value.format.type === "grammar" &&
+            (value.format.syntax === "lark" || value.format.syntax === "regex") &&
+            typeof value.format.definition === "string" &&
+            (value.description === undefined || typeof value.description === "string"));
+    }
+    return false;
+}
+function isCodexNativeToolNamespace(value) {
+    return (isRecord(value) &&
+        value.type === "namespace" &&
+        typeof value.name === "string" &&
+        typeof value.description === "string" &&
+        Array.isArray(value.tools) &&
+        value.tools.every(isCodexNativeToolDeclaration));
+}
+function isCodexNativeInputItem(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    switch (value.type) {
+        case "message":
+            return ((value.role === "user" ||
+                value.role === "assistant" ||
+                value.role === "developer") &&
+                Array.isArray(value.content) &&
+                value.content.every(isCodexContentPart));
+        case "function_call":
+            return (typeof value.call_id === "string" &&
+                typeof value.name === "string" &&
+                typeof value.arguments === "string");
+        case "function_call_output":
+        case "custom_tool_call_output":
+            return (typeof value.call_id === "string" && typeof value.output === "string");
+        case "custom_tool_call":
+            return (typeof value.call_id === "string" &&
+                typeof value.name === "string" &&
+                typeof value.input === "string");
+        case "reasoning":
+            return true;
+        case "additional_tools":
+            return (value.role === "developer" &&
+                Array.isArray(value.tools) &&
+                value.tools.every(isCodexNativeToolNamespace));
+        default:
+            return false;
+    }
+}
+function isCodexNativeToolChoice(value) {
+    if (value === "auto" || value === "required" || value === "none") {
+        return true;
+    }
+    return (isRecord(value) &&
+        value.type === "function" &&
+        typeof value.name === "string");
+}
+const CODEX_REASONING_EFFORTS = [
+    "none",
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+    "max",
+];
+function isCodexNativeReasoning(value) {
+    return (isRecord(value) &&
+        CODEX_REASONING_EFFORTS.includes(value.effort) &&
+        (value.context === undefined || typeof value.context === "string"));
+}
+export function parseCodexNativeRequest(raw) {
+    if (!isRecord(raw) ||
+        typeof raw.model !== "string" ||
+        typeof raw.stream !== "boolean" ||
+        typeof raw.store !== "boolean" ||
+        !Array.isArray(raw.input) ||
+        !raw.input.every(isCodexNativeInputItem) ||
+        (raw.tool_choice !== undefined &&
+            !isCodexNativeToolChoice(raw.tool_choice)) ||
+        (raw.reasoning !== undefined && !isCodexNativeReasoning(raw.reasoning)) ||
+        (raw.parallel_tool_calls !== undefined &&
+            typeof raw.parallel_tool_calls !== "boolean")) {
+        return {
+            ok: false,
+            error: {
+                code: "MALFORMED_REQUEST",
+                message: "inbound body does not match CodexNativeRequest",
+            },
+        };
+    }
+    return { ok: true, value: raw };
+}
+// ---------------------------------------------------------------------------
+// §3.3 tool_choice — exact inversion of codexFallback.ts's convertClaudeRequestToCodex.
+// ---------------------------------------------------------------------------
+function mapCodexToolChoiceToClaude(choice) {
+    if (choice === undefined) {
+        return undefined;
+    }
+    if (choice === "required") {
+        return { type: "any" };
+    }
+    if (choice === "auto") {
+        return { type: "auto" };
+    }
+    if (choice === "none") {
+        return { type: "none" };
+    }
+    return { type: "tool", name: choice.name };
+}
+// ---------------------------------------------------------------------------
+// §3.4 Tools: flattened across namespaces, split by each declaration's own type.
+// ---------------------------------------------------------------------------
+function mapCodexFunctionToolToClaude(tool) {
+    return {
+        name: tool.name,
+        ...(tool.description ? { description: tool.description } : {}),
+        input_schema: tool.parameters,
+    };
+}
+function mapCodexCustomToolToClaude(tool) {
+    // Lossy, explicitly flagged: no JSON Schema exists for a Lark/regex grammar.
+    // The model is no longer grammar-constrained after this mapping — needs
+    // product sign-off before shipping (§10 of the design).
+    return {
+        name: tool.name,
+        description: [
+            tool.description,
+            `Grammar (${tool.format.syntax}):\n${tool.format.definition}`,
+        ]
+            .filter((s) => Boolean(s))
+            .join("\n\n"),
+        input_schema: {
+            type: "object",
+            properties: {
+                input: {
+                    type: "string",
+                    description: "Raw command text, constrained by the grammar in this tool's description.",
+                },
+            },
+            required: ["input"],
+        },
+    };
+}
+function mapCodexToolDeclarationToClaude(tool) {
+    // Discriminate on the declaration's own `type`, never on which namespace it
+    // came from — the real capture disproves the namespace-implies-kind
+    // assumption (`exec` is `type:"custom"` inside a `type:"function"`-heavy
+    // namespace).
+    return tool.type === "custom"
+        ? mapCodexCustomToolToClaude(tool)
+        : mapCodexFunctionToolToClaude(tool);
+}
+function buildClaudeTools(additionalTools) {
+    if (!additionalTools) {
+        return undefined;
+    }
+    const tools = additionalTools.tools.flatMap((namespace) => namespace.tools.map(mapCodexToolDeclarationToClaude));
+    return tools.length > 0 ? tools : undefined;
+}
+// ---------------------------------------------------------------------------
+// §3.5 Reasoning: reasoning.effort -> thinking.
+// ---------------------------------------------------------------------------
+const REASONING_BUDGET = {
+    low: 4096,
+    medium: 8192,
+    high: 16384,
+    xhigh: 24576,
+    max: 32768,
+};
+function mapCodexReasoningToThinking(reasoning, resolvedMaxTokens) {
+    if (!reasoning ||
+        reasoning.effort === "none" ||
+        reasoning.effort === "minimal") {
+        return undefined;
+    }
+    const table = REASONING_BUDGET[reasoning.effort];
+    // Explicit floor: makes the ">= 1024" invariant correct by construction
+    // rather than an accident of today's model-table minimums.
+    const budget_tokens = Math.max(1024, Math.min(table, resolvedMaxTokens - 1024));
+    return { type: "enabled", budget_tokens };
+}
+// ---------------------------------------------------------------------------
+// §3.6 Non-JSON function_call.arguments — never throws.
+// ---------------------------------------------------------------------------
+function parseInboundToolArguments(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (isRecord(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // fall through — not JSON at all (e.g. exec's raw shell command)
+    }
+    return { input: raw };
+}
+// ---------------------------------------------------------------------------
+// §3.7 Content parts, with the image data-URI fix.
+// ---------------------------------------------------------------------------
+const DATA_URI_RE = /^data:([^;,]+);base64,(.+)$/s;
+// The four image types the Messages API accepts (mirrors
+// SUPPORTED_IMAGE_MEDIA_TYPES in providers/anthropicImageBlocks.ts).
+const ANTHROPIC_IMAGE_MEDIA_TYPES = new Set([
+    "image/jpeg",
+    "image/png",
+    "image/gif",
+    "image/webp",
+]);
+const ANTHROPIC_TOOL_NAME_RE = /^[a-zA-Z0-9_-]{1,64}$/;
+function normalizeImageMediaType(mediaType) {
+    const lower = mediaType.toLowerCase();
+    return lower === "image/jpg" ? "image/jpeg" : lower;
+}
+function toClaudeContentPart(part) {
+    if (part.type === "input_image") {
+        const match = DATA_URI_RE.exec(part.image_url);
+        if (match) {
+            return {
+                type: "image",
+                source: {
+                    type: "base64",
+                    media_type: normalizeImageMediaType(match[1]),
+                    data: match[2],
+                },
+            };
+        }
+        return { type: "image", source: { type: "url", url: part.image_url } };
+    }
+    return { type: "text", text: part.text };
+}
+// ---------------------------------------------------------------------------
+// §4 Role-alternation coalescing.
+// ---------------------------------------------------------------------------
+function coalesceCodexInputToClaudeMessages(items) {
+    const groups = [];
+    let current;
+    const open = (role) => {
+        if (current?.role === role) {
+            return current;
+        }
+        if (current) {
+            groups.push(current);
+        }
+        current = { role, blocks: [] };
+        return current;
+    };
+    for (const item of items) {
+        // additional_tools is handled out-of-band (§3.4). A reasoning item carries
+        // OpenAI-encrypted chain of thought that only the OpenAI backend can read;
+        // Anthropic has no way to consume it, so it is dropped by rule, not by
+        // accident (unknown item types still fail parsing, per A.1).
+        if (item.type === "additional_tools" || item.type === "reasoning") {
+            continue;
+        }
+        if (item.type === "message") {
+            // Developer messages become system blocks (below). An empty message
+            // adds nothing, and on its own would become a content-less turn.
+            if (item.role === "developer" || item.content.length === 0) {
+                continue;
+            }
+            open(item.role).blocks.push(...item.content.map(toClaudeContentPart));
+            continue;
+        }
+        if (item.type === "function_call" || item.type === "custom_tool_call") {
+            open("assistant").blocks.push({
+                type: "tool_use",
+                id: item.call_id,
+                name: item.name,
+                // A custom tool is declared with a single `input` string (§3.4), so
+                // its raw call text maps onto that field unchanged.
+                input: item.type === "function_call"
+                    ? parseInboundToolArguments(item.arguments)
+                    : { input: item.input },
+            });
+            continue;
+        }
+        open("user").blocks.push({
+            type: "tool_result",
+            tool_use_id: item.call_id,
+            content: item.output,
+        });
+    }
+    if (current) {
+        groups.push(current);
+    }
+    // In a user turn the Messages API wants tool_result blocks before any other
+    // content, so a user message that arrives between a call and its output is
+    // moved after the result rather than sent in an order the API rejects.
+    return groups.map((g) => ({
+        role: g.role,
+        content: g.role === "user"
+            ? [
+                ...g.blocks.filter((block) => block.type === "tool_result"),
+                ...g.blocks.filter((block) => block.type !== "tool_result"),
+            ]
+            : g.blocks,
+    }));
+}
+function buildSystemBlocksFromDeveloperMessages(items) {
+    return items
+        .filter((i) => i.type === "message" && i.role === "developer")
+        .flatMap((i) => i.content.map(toClaudeContentPart))
+        .filter((b) => b.type === "text");
+}
+// ---------------------------------------------------------------------------
+// §5 Resumed-session history contract — fail loud, never guess.
+// ---------------------------------------------------------------------------
+// Detects only a missing tools preamble. A client-side prune that drops turns
+// from the middle while resending the preamble passes this check; nothing in
+// the wire format marks such a gap (spec Q6, still open).
+function hasFreshSessionPreamble(items) {
+    return items[0]?.type === "additional_tools";
+}
+// ---------------------------------------------------------------------------
+// Inputs Codex accepts but the Messages API rejects — fail loud, never guess.
+// ---------------------------------------------------------------------------
+function describeUntranslatableItem(item, provider) {
+    if (item.type === "additional_tools") {
+        const badTool = item.tools
+            .flatMap((namespace) => namespace.tools)
+            .find((tool) => !ANTHROPIC_TOOL_NAME_RE.test(tool.name));
+        return badTool
+            ? `tool name ${JSON.stringify(badTool.name)} does not match the Messages API's ${String(ANTHROPIC_TOOL_NAME_RE)}`
+            : undefined;
+    }
+    if (item.type !== "message") {
+        return undefined;
+    }
+    return item.content
+        .map((part) => {
+        if (part.type !== "input_image") {
+            return undefined;
+        }
+        if (item.role === "developer") {
+            return "a developer message carries an image, which a text-only system prompt cannot hold";
+        }
+        if (!part.image_url.startsWith("data:")) {
+            // Claude on Vertex takes only inline (base64) image sources; the
+            // Vertex client in providers/googleVertex fetches URLs for the same reason.
+            return provider === "vertex"
+                ? "Claude on Vertex accepts only base64 image sources, not an image URL"
+                : undefined;
+        }
+        const match = DATA_URI_RE.exec(part.image_url);
+        if (!match) {
+            return "an image data URI is not base64-encoded";
+        }
+        const mediaType = normalizeImageMediaType(match[1]);
+        return ANTHROPIC_IMAGE_MEDIA_TYPES.has(mediaType)
+            ? undefined
+            : `image media type ${mediaType} is not one the Messages API accepts (jpeg, png, gif, webp)`;
+    })
+        .find((reason) => reason !== undefined);
+}
+function toolUseIds(message) {
+    return message?.role === "assistant" && Array.isArray(message.content)
+        ? message.content.flatMap((block) => block.type === "tool_use" ? [block.id] : [])
+        : [];
+}
+function toolResultIds(message) {
+    return message?.role === "user" && Array.isArray(message.content)
+        ? message.content.flatMap((block) => block.type === "tool_result" ? [block.tool_use_id] : [])
+        : [];
+}
+// The Messages API requires every tool call to be answered in the very next
+// user turn, and every tool result to answer a call in the turn before it.
+// History pruned on the client side can break either; this catches it here
+// instead of as an upstream 400.
+function describeToolPairingGap(messages) {
+    return messages
+        .map((message, index) => {
+        const answered = toolResultIds(messages[index + 1]);
+        const unanswered = toolUseIds(message).find((id) => !answered.includes(id));
+        if (unanswered) {
+            return `tool call ${unanswered} has no result in the next user turn`;
+        }
+        const called = toolUseIds(messages[index - 1]);
+        const orphaned = toolResultIds(message).find((id) => !called.includes(id));
+        return orphaned
+            ? `tool result for ${orphaned} answers no call in the preceding assistant turn`
+            : undefined;
+    })
+        .find((reason) => reason !== undefined);
+}
+function lastAssistantMessageUsesTool(messages) {
+    const lastAssistant = [...messages]
+        .reverse()
+        .find((message) => message.role === "assistant");
+    return (Array.isArray(lastAssistant?.content) &&
+        lastAssistant.content.some((block) => block.type === "tool_use"));
+}
+// ---------------------------------------------------------------------------
+// §3.2 translateCodexRequestToClaude — the full field-by-field mapping.
+// ---------------------------------------------------------------------------
+export function translateCodexRequestToClaude(request, target) {
+    // Read from client_metadata, not top-level session_id/thread_id: the real
+    // capture carries neither at top level (only nested in client_metadata),
+    // which is why CodexNativeRequest has no top-level fields for them.
+    if ((request.client_metadata?.session_id !== undefined ||
+        request.client_metadata?.thread_id !== undefined) &&
+        !hasFreshSessionPreamble(request.input)) {
+        return {
+            ok: false,
+            error: {
+                code: "SUSPECTED_PARTIAL_HISTORY",
+                message: "a request with session metadata does not open with the additional_tools preamble; refusing to translate what may be an incremental history as if it were complete",
+            },
+        };
+    }
+    const untranslatable = request.input
+        .map((item) => describeUntranslatableItem(item, target.provider))
+        .find((reason) => reason !== undefined);
+    if (untranslatable) {
+        return {
+            ok: false,
+            error: { code: "UNTRANSLATABLE_REQUEST", message: untranslatable },
+        };
+    }
+    // The spec's cardinality rule: when more than one additional_tools item
+    // appears, the last one wins.
+    const additionalTools = request.input
+        .filter((item) => item.type === "additional_tools")
+        .at(-1);
+    const tools = buildClaudeTools(additionalTools);
+    const toolChoice = mapCodexToolChoiceToClaude(request.tool_choice);
+    const forcesTool = toolChoice?.type === "any" || toolChoice?.type === "tool";
+    if (forcesTool && !tools) {
+        return {
+            ok: false,
+            error: {
+                code: "MALFORMED_REQUEST",
+                message: "tool_choice forces a tool call but the request declares no tools",
+            },
+        };
+    }
+    if (toolChoice?.type === "tool" &&
+        !tools?.some((tool) => tool.name === toolChoice.name)) {
+        return {
+            ok: false,
+            error: {
+                code: "MALFORMED_REQUEST",
+                message: `tool_choice names ${JSON.stringify(toolChoice.name)}, which the request does not declare`,
+            },
+        };
+    }
+    const messages = coalesceCodexInputToClaudeMessages(request.input);
+    if (messages[0]?.role !== "user") {
+        return {
+            ok: false,
+            error: {
+                code: "UNTRANSLATABLE_REQUEST",
+                message: "the translated history does not open with a user turn, which the Messages API requires",
+            },
+        };
+    }
+    const pairingGap = describeToolPairingGap(messages);
+    if (pairingGap) {
+        return {
+            ok: false,
+            error: { code: "UNTRANSLATABLE_REQUEST", message: pairingGap },
+        };
+    }
+    const maxTokens = resolveClaudeMaxTokens(target.model, undefined);
+    const systemBlocks = buildSystemBlocksFromDeveloperMessages(request.input);
+    // Thinking is left off in two cases the Messages API would reject: a forced
+    // tool_choice (the same rule oauthFetch.ts applies), and a history whose
+    // final assistant turn calls a tool, which with thinking on must open with a
+    // thinking block. Codex history carries none that can be translated, since
+    // its reasoning is OpenAI ciphertext.
+    const thinking = forcesTool || lastAssistantMessageUsesTool(messages)
+        ? undefined
+        : mapCodexReasoningToThinking(request.reasoning, maxTokens);
+    const claudeRequest = {
+        model: target.model,
+        messages,
+        max_tokens: maxTokens,
+        ...(systemBlocks.length > 0 ? { system: systemBlocks } : {}),
+        ...(tools ? { tools } : {}),
+        // The Messages API accepts tool_choice only alongside tools.
+        ...(toolChoice && tools ? { tool_choice: toolChoice } : {}),
+        ...(thinking ? { thinking } : {}),
+        stream: request.stream ?? true,
+    };
+    return { ok: true, value: claudeRequest };
+}

package/dist/proxy/otelLogSink.d.ts

@@ -1,4 +1,4 @@
-import { LoggerProvider } from "@opentelemetry/sdk-logs";
+import type { LoggerProvider as LoggerProviderType } from "@opentelemetry/sdk-logs";
 import type { ProxyBodyChunkEmitter, ProxyBodyDeliveryResult } from "../types/index.js";
 /** Explicit opt-in; configuration never silently falls back to file logging. */
 export declare function isProxyOtelOnly(): boolean;
@@ -9,7 +9,7 @@ export declare function isProxyOtelOnly(): boolean;
  */
 export declare function publishProxyOtelBody(captureId: string, body: string, emit: ProxyBodyChunkEmitter): Promise<ProxyBodyDeliveryResult>;
 /** Initialize a log-only provider in every proxy process, including the supervisor. */
-export declare function initializeProxyOtelLogs(role?: string): LoggerProvider | undefined;
+export declare function initializeProxyOtelLogs(role?: string): LoggerProviderType | undefined;
 /** Structured evidence without final-request dashboard fields on auxiliary events. */
 export declare function emitProxyOtelEvent(kind: string, record: Record<string, unknown>): void;
 /** Capture application console diagnostics only inside proxy service processes. */