@opengeni/codex 0.2.16 → 0.2.17

package/dist/request-context.d.ts

@@ -53,6 +53,7 @@ export type CodexRequestOpaqueArtifacts = {
     requestId: string;
     fingerprints: readonly string[];
 };
+export type CodexRequestPreparationPhase = "transport_entry" | "credential_ready" | "wire_request_ready";
 export type CodexRequestContext = {
     clientVersion: string;
     /**
@@ -89,6 +90,8 @@ export type CodexRequestContext = {
      * swallowed by the transport and it must never receive request bodies/auth.
      */
     onModelRequestDiagnostic?: (event: CodexModelRequestEvent) => void;
+    /** Bounded synchronous checkpoints for pre-network request preparation. */
+    onRequestPreparationDiagnostic?: (phase: CodexRequestPreparationPhase) => void;
     /** Worker-owned durable audit sink; payloads never contain request bodies or auth. */
     onModelRequestEvent?: (event: CodexModelRequestEvent) => Promise<void> | void;
     /** Exact opaque artifacts on the normalized wire request, never their ciphertext. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/codex",
-  "version": "0.2.16",
+  "version": "0.2.17",
   "description": "ChatGPT/Codex subscription auth + transport: device-code login, token refresh, and the Responses-backend fetch. Pure HTTP + transforms; no database dependency.",
   "license": "Apache-2.0",
   "repository": {

package/src/fetch.ts

@@ -17,11 +17,23 @@ import { opaqueProviderArtifactFingerprints } from "./opaque-artifact";
 import {
   codexRequestStorage,
   type CodexModelRequestEvent,
+  type CodexRequestPreparationPhase,
   type CodexRequestContext,
   type CodexResponseTimeoutPolicy,
   type CodexTokenSnapshot,
   type CodexUsageHeaderSnapshot,
 } from "./request-context";
+
+function emitRequestPreparationDiagnostic(
+  ctx: CodexRequestContext,
+  phase: CodexRequestPreparationPhase,
+): void {
+  try {
+    ctx.onRequestPreparationDiagnostic?.(phase);
+  } catch {
+    // Diagnostic observers are non-blocking and cannot affect transport.
+  }
+}
 import {
   CODEX_RESPONSE_TIMEOUT_ERROR_TYPE,
   CodexResponseTimeoutError,
@@ -614,6 +626,7 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
     if (!ctx) {
       return base(input, init); // not a codex turn — passthrough, untouched
     }
+    emitRequestPreparationDiagnostic(ctx, "transport_entry");
 
     const rawUrl =
       typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
@@ -700,7 +713,10 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
         throw new Error("Model request could not be prepared");
       }
       if (!bodyAlreadyNormalized) {
-        ctx.onRequestOpaqueArtifacts?.({ requestId, fingerprints: requestOpaqueArtifacts });
+        ctx.onRequestOpaqueArtifacts?.({
+          requestId,
+          fingerprints: requestOpaqueArtifacts,
+        });
       }
       headers.set(
         "Idempotency-Key",
@@ -726,6 +742,7 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
         policy,
         terminalOutcome: null,
       };
+      emitRequestPreparationDiagnostic(ctx, "wire_request_ready");
       await emitRequestEvent(audit, {
         phase: "started",
         responseObserved: false,
@@ -827,7 +844,9 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
     };
 
     try {
-      let res = await attempt(await ctx.getToken(), 0);
+      const token = await ctx.getToken();
+      emitRequestPreparationDiagnostic(ctx, "credential_ready");
+      let res = await attempt(token, 0);
       if (res.status === 401) {
         res = await attempt(await ctx.refresh(), 1); // single refresh-on-401 retry (spec §1.9)
       }

package/src/request-context.ts

@@ -67,6 +67,11 @@ export type CodexRequestOpaqueArtifacts = {
   fingerprints: readonly string[];
 };
 
+export type CodexRequestPreparationPhase =
+  | "transport_entry"
+  | "credential_ready"
+  | "wire_request_ready";
+
 export type CodexRequestContext = {
   clientVersion: string;
   /**
@@ -103,6 +108,8 @@ export type CodexRequestContext = {
    * swallowed by the transport and it must never receive request bodies/auth.
    */
   onModelRequestDiagnostic?: (event: CodexModelRequestEvent) => void;
+  /** Bounded synchronous checkpoints for pre-network request preparation. */
+  onRequestPreparationDiagnostic?: (phase: CodexRequestPreparationPhase) => void;
   /** Worker-owned durable audit sink; payloads never contain request bodies or auth. */
   onModelRequestEvent?: (event: CodexModelRequestEvent) => Promise<void> | void;
   /** Exact opaque artifacts on the normalized wire request, never their ciphertext. */