@opengeni/codex 0.2.9 → 0.2.11

package/dist/mcp-sanitize.d.ts

@@ -25,9 +25,10 @@ export declare function remapToolCallRequestBody(body: string, mapper: ToolNameM
  * to the MCP server's original. Only the POST request/response is buffered; the
  * long-lived GET notification SSE stream is passed through untouched.
  *
- * P4 (Part B.1): an optional `namespaceSink` Set accumulates the ORIGINAL-dotted
+ * An optional `namespaceSink` Set accumulates the ORIGINAL-dotted
  * connector namespaces seen across every tools/list this turn (captured before the
- * dot is sanitized away). The worker reads the (live, by-reference) Set after the
- * turn to cache the serving account's connector set — packages/codex stays db-free.
+ * dot is sanitized away). The runtime reads the live by-reference Set only to keep
+ * this turn's `tool_search` description accurate; it is never persisted or used
+ * for inference selection.
  */
 export declare function codexAppsSanitizingFetch(base?: FetchLike, namespaceSink?: Set<string>): FetchLike;

package/dist/opaque-artifact.d.ts

@@ -0,0 +1,4 @@
+/** Stable, content-hiding identity for one opaque provider artifact. */
+export declare function opaqueProviderArtifactFingerprint(item: unknown): string | null;
+/** Exact opaque artifacts present in one normalized provider input array. */
+export declare function opaqueProviderArtifactFingerprints(input: unknown): string[];

package/dist/realtime-v3.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Codex GPT-Live Frameless Bidi (V3) wire adapter.
+ *
+ * These shapes are pinned to openai/codex@fa1d4c40. V3 delegates work with
+ * `delegation.created`; it does not expose the ordinary Realtime V2
+ * `function_call` protocol.
+ */
+export declare const CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT = 128;
+export declare const CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS = 8192;
+export declare const CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES = 500;
+export declare const CODEX_REALTIME_V3_MAX_EVENT_BYTES = 1048576;
+export declare const CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES = 1024;
+export declare const CODEX_REALTIME_V3_MAX_TEXT_BYTES = 131072;
+export type CodexRealtimeInitialItem = {
+    role: "user" | "developer" | "assistant";
+    text: string;
+};
+type ProviderEventIdentity = {
+    providerEventId: string | null;
+};
+export type CodexRealtimeV3Event = (ProviderEventIdentity & {
+    type: "session.started" | "session.updated";
+    sessionId: string;
+    instructions: string | null;
+}) | (ProviderEventIdentity & {
+    type: "input_transcript.added" | "output_transcript.added";
+    itemId: string | null;
+    text: string;
+}) | (ProviderEventIdentity & {
+    type: "output_audio.delta";
+    audio: string;
+    startMs: number | null;
+    endMs: number | null;
+}) | (ProviderEventIdentity & {
+    type: "turn.done";
+    turnId: string;
+    role: "user" | "assistant";
+    transcript: string;
+}) | (ProviderEventIdentity & {
+    type: "delegation.created";
+    delegationItemId: string;
+    inputTranscript: string;
+    offsetMs: number | null;
+}) | (ProviderEventIdentity & {
+    type: "error";
+    message: string;
+});
+export type CodexRealtimeV3ParseFailure = {
+    ok: false;
+    reason: "invalid_json" | "missing_type" | "unsupported_type" | "invalid_shape" | "oversized_event" | "oversized_field";
+    eventType: string | null;
+};
+export type CodexRealtimeV3ParseResult = {
+    ok: true;
+    event: CodexRealtimeV3Event;
+} | CodexRealtimeV3ParseFailure;
+export type CodexRealtimeV3ContextAppendChannel = "speakable" | "commentary";
+export type CodexRealtimeV3DelegationContextAppend = {
+    type: "delegation.context.append";
+    delegation_item_id: string;
+    channel?: CodexRealtimeV3ContextAppendChannel | undefined;
+    content: Array<{
+        type: "input_text";
+        text: string;
+    }>;
+};
+export type CodexRealtimeV3SessionContextAppend = {
+    type: "session.context.append";
+    channel?: CodexRealtimeV3ContextAppendChannel | undefined;
+    content: Array<{
+        type: "input_text";
+        text: string;
+    }>;
+};
+export declare function parseCodexRealtimeV3Event(payload: string): CodexRealtimeV3ParseResult;
+export declare function encodeCodexRealtimeV3DelegationContextAppend(input: {
+    delegationItemId: string;
+    text: string;
+    channel?: CodexRealtimeV3ContextAppendChannel | undefined;
+}): CodexRealtimeV3DelegationContextAppend[];
+export declare function encodeCodexRealtimeV3SessionContextAppend(input: {
+    text: string;
+    channel?: CodexRealtimeV3ContextAppendChannel | undefined;
+}): CodexRealtimeV3SessionContextAppend[];
+export declare function contextAppendChunks(text: string): string[];
+export {};

package/dist/realtime-v3.js

@@ -0,0 +1,25 @@
+import {
+  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,
+  CODEX_REALTIME_V3_MAX_EVENT_BYTES,
+  CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES,
+  CODEX_REALTIME_V3_MAX_TEXT_BYTES,
+  contextAppendChunks,
+  encodeCodexRealtimeV3DelegationContextAppend,
+  encodeCodexRealtimeV3SessionContextAppend,
+  parseCodexRealtimeV3Event
+} from "./chunk-MFVGCR3N.js";
+export {
+  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,
+  CODEX_REALTIME_V3_MAX_EVENT_BYTES,
+  CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES,
+  CODEX_REALTIME_V3_MAX_TEXT_BYTES,
+  contextAppendChunks,
+  encodeCodexRealtimeV3DelegationContextAppend,
+  encodeCodexRealtimeV3SessionContextAppend,
+  parseCodexRealtimeV3Event
+};
+//# sourceMappingURL=realtime-v3.js.map

package/dist/realtime-v3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/realtime.d.ts

@@ -0,0 +1,48 @@
+import { type CodexAuthHeaders } from "./api-client";
+import { CODEX_REALTIME_MODEL, CODEX_REALTIME_VERSION } from "./constants";
+import type { CodexFetch } from "./device-code";
+import { type CodexRealtimeInitialItem } from "./realtime-v3";
+export declare const CODEX_REALTIME_VOICES: readonly ["juniper", "maple", "spruce", "ember", "vale", "breeze", "arbor", "sol", "cove"];
+export type CodexRealtimeVoice = (typeof CODEX_REALTIME_VOICES)[number];
+export type CodexRealtimeCallInput = {
+    /** Browser-created WebRTC offer. It must negotiate an audio media section. */
+    sdp: string;
+    /** This transport intentionally supports only Codex's Frameless/V3 protocol. */
+    version: typeof CODEX_REALTIME_VERSION;
+    /** Server-owned session/thread binding; sent upstream but never returned. */
+    sessionId: string;
+    /** Server-projected ordinary-session history for Frameless V3 bootstrap. */
+    initialItems?: CodexRealtimeInitialItem[] | undefined;
+    instructions?: string | undefined;
+    voice?: CodexRealtimeVoice | undefined;
+};
+export type CodexRealtimeCallResult = {
+    sdp: string;
+    version: typeof CODEX_REALTIME_VERSION;
+    model: typeof CODEX_REALTIME_MODEL;
+};
+export type CodexRealtimeErrorCode = "invalid_request" | "incompatible" | "authentication" | "entitlement" | "rate_limited" | "provider" | "invalid_response" | "network" | "timeout" | "cancelled";
+/** Safe provider failure: it contains no response body, credential, or account identity. */
+export declare class CodexRealtimeError extends Error {
+    readonly code: CodexRealtimeErrorCode;
+    readonly providerStatus: number | null;
+    constructor(code: CodexRealtimeErrorCode, message: string, providerStatus?: number | null);
+}
+export type CodexRealtimeCallOptions = {
+    signal?: AbortSignal | undefined;
+    timeoutMs?: number | undefined;
+};
+/**
+ * Create one native subscription-authenticated Codex GPT-Live V3 WebRTC call.
+ *
+ * There is deliberately no API-key or WebSocket fallback and no transport
+ * retry. A caller may refresh the same connected subscription after one 401,
+ * but this adapter always performs exactly one provider request.
+ */
+export declare function createCodexRealtimeCall(auth: CodexAuthHeaders, input: CodexRealtimeCallInput, fetchImpl?: CodexFetch, options?: CodexRealtimeCallOptions): Promise<CodexRealtimeCallResult>;
+/** Shared pin→active selection for worker turns and direct realtime calls. */
+export declare function selectCodexCredentialId(args: {
+    sessionPinnedCredentialId: string | null;
+    activeCredentialId: string | null;
+    connectedIds: ReadonlySet<string>;
+}): string | null;

package/dist/request-context.d.ts

@@ -49,6 +49,10 @@ export type CodexModelRequestEvent = {
     status?: number;
     willRetry?: boolean;
 };
+export type CodexRequestOpaqueArtifacts = {
+    requestId: string;
+    fingerprints: readonly string[];
+};
 export type CodexRequestContext = {
     clientVersion: string;
     /**
@@ -81,6 +85,8 @@ export type CodexRequestContext = {
     responseTimeoutPolicy?: Partial<CodexResponseTimeoutPolicy>;
     /** Worker-owned durable audit sink; payloads never contain request bodies or auth. */
     onModelRequestEvent?: (event: CodexModelRequestEvent) => Promise<void> | void;
+    /** Exact opaque artifacts on the normalized wire request, never their ciphertext. */
+    onRequestOpaqueArtifacts?: (artifacts: CodexRequestOpaqueArtifacts) => void;
     /** Stable request identity supplied by the owning durable execution. */
     nextRequestId?: () => string;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/codex",
-  "version": "0.2.9",
+  "version": "0.2.11",
   "description": "ChatGPT/Codex subscription auth + transport: device-code login, token refresh, and the Responses-backend fetch. Pure HTTP + transforms; no database dependency.",
   "license": "Apache-2.0",
   "repository": {
@@ -25,6 +25,10 @@
     "./constants": {
       "types": "./dist/constants.d.ts",
       "import": "./dist/constants.js"
+    },
+    "./realtime-v3": {
+      "types": "./dist/realtime-v3.d.ts",
+      "import": "./dist/realtime-v3.js"
     }
   },
   "publishConfig": {

package/src/api-client.ts

@@ -28,7 +28,8 @@ export type ResetCreditFetchFailureReason =
   | "network_error"
   | "timeout";
 
-function subscriptionHeaders(a: CodexAuthHeaders): Record<string, string> {
+/** Server-only headers shared by every ChatGPT/Codex subscription transport. */
+export function codexSubscriptionHeaders(a: CodexAuthHeaders): Record<string, string> {
   return {
     Authorization: `Bearer ${a.accessToken}`,
     ...(a.chatgptAccountId ? { "ChatGPT-Account-ID": a.chatgptAccountId } : {}),
@@ -48,7 +49,7 @@ export async function fetchCodexModels(
   const fetched = await runBoundedCodexOperation(async (signal) => {
     const res = await fetchImpl(
       `${CODEX_RESPONSES_BASE}/models?client_version=${encodeURIComponent(a.clientVersion)}`,
-      { method: "GET", headers: subscriptionHeaders(a), signal },
+      { method: "GET", headers: codexSubscriptionHeaders(a), signal },
     );
     if (!res.ok) {
       await res.arrayBuffer().catch(() => undefined);
@@ -72,7 +73,7 @@ export async function fetchCodexUsage(
   const fetched = await runBoundedCodexOperation(async (signal) => {
     const res = await fetchImpl(`${CODEX_WHAM_BASE}/wham/usage`, {
       method: "GET",
-      headers: subscriptionHeaders(a),
+      headers: codexSubscriptionHeaders(a),
       signal,
     });
     // A 404 may carry a usage-limit body; the route layer normalizes it to a limits state (spec §1.8c).
@@ -102,19 +103,27 @@ export async function fetchCodexRateLimitResetCredits(
   const fetched = await runBoundedCodexOperation(async (signal) => {
     const res = await fetchImpl(`${CODEX_WHAM_BASE}/wham/rate-limit-reset-credits`, {
       method: "GET",
-      headers: subscriptionHeaders(a),
+      headers: codexSubscriptionHeaders(a),
       signal,
     });
     if (!res.ok) {
       // Drain the body without retaining/logging it. Provider error bodies may
       // contain account-specific details and are not part of this contract.
       await res.arrayBuffer().catch(() => undefined);
-      return { ok: false as const, status: res.status, reason: "http_error" as const };
+      return {
+        ok: false as const,
+        status: res.status,
+        reason: "http_error" as const,
+      };
     }
     const details = parseCodexRateLimitResetCreditsDetails(await res.json().catch(() => null));
     return details
       ? { ok: true as const, status: res.status, details }
-      : { ok: false as const, status: res.status, reason: "invalid_response" as const };
+      : {
+          ok: false as const,
+          status: res.status,
+          reason: "invalid_response" as const,
+        };
   }, timeoutMs);
   return fetched.ok ? fetched.value : { ok: false, status: 0, reason: fetched.reason };
 }
@@ -146,7 +155,7 @@ export async function consumeCodexRateLimitResetCredit(
     const res = await fetchImpl(`${CODEX_WHAM_BASE}/wham/rate-limit-reset-credits/consume`, {
       method: "POST",
       headers: {
-        ...subscriptionHeaders(a),
+        ...codexSubscriptionHeaders(a),
         "content-type": "application/json",
       },
       body: JSON.stringify({
@@ -157,12 +166,20 @@ export async function consumeCodexRateLimitResetCredit(
     });
     if (!res.ok) {
       await res.arrayBuffer().catch(() => undefined);
-      return { ok: false as const, status: res.status, reason: "http_error" as const };
+      return {
+        ok: false as const,
+        status: res.status,
+        reason: "http_error" as const,
+      };
     }
     const result = parseCodexRateLimitResetConsumeResponse(await res.json().catch(() => null));
     return result
       ? { ok: true as const, status: res.status, result }
-      : { ok: false as const, status: res.status, reason: "invalid_response" as const };
+      : {
+          ok: false as const,
+          status: res.status,
+          reason: "invalid_response" as const,
+        };
   }, timeoutMs);
   return fetched.ok ? fetched.value : { ok: false, status: 0, reason: fetched.reason };
 }

package/src/constants.ts

@@ -52,7 +52,14 @@ export const CODEX_MODEL_AUTO_COMPACT_TOKEN_LIMIT = Math.floor(
 // 2026-07-09: 0.142.4 filtered every GPT-5.6 slug out of GET /models, while the
 // official Codex 0.144.0+ releases return all three exact slugs above. Keep
 // this pinned to the latest stable Codex release we have verified end-to-end.
-export const CODEX_CLIENT_VERSION = "0.144.6";
+export const CODEX_CLIENT_VERSION = "0.145.0";
+
+// Native ChatGPT/Codex subscription WebRTC call creation. Verified against
+// openai/codex 0.145.0 commit bd2de422aa287b97b06ca6425a10935bcf1b3731.
+export const CODEX_REALTIME_MODEL = "gpt-live-1-boulder-alpha";
+export const CODEX_REALTIME_VERSION = "v3";
+export const CODEX_REALTIME_DEFAULT_VOICE = "cove";
+export const CODEX_REALTIME_CALL_TIMEOUT_MS = 15_000;
 
 export const CODEX_REFRESH_WINDOW_MS = 5 * 60 * 1000; // proactive refresh when within 5 min of exp (spec §1.1)
 export const CODEX_REFRESH_FALLBACK_MS = 8 * 24 * 60 * 60 * 1000; // 8 days when exp is unparseable

package/src/fetch.ts

@@ -13,6 +13,7 @@
 import { randomUUID } from "node:crypto";
 import { CODEX_ORIGINATOR } from "./constants";
 import { normalizeCodexRequestBody } from "./normalize";
+import { opaqueProviderArtifactFingerprints } from "./opaque-artifact";
 import {
   codexRequestStorage,
   type CodexModelRequestEvent,
@@ -489,6 +490,7 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
       // summarizer) still gets a single JSON Response back.
       let callerWantsStream = true;
       let model: string | undefined;
+      let requestOpaqueArtifacts: string[] = [];
       const nextInit: RequestInit = { ...init, headers };
       if (typeof init?.body === "string") {
         try {
@@ -497,10 +499,12 @@ export function codexSubscriptionFetch(base: FetchLike = globalThis.fetch): Fetc
           const normalized = normalizeCodexRequestBody(parsed, ctx.resolveModel);
           model = typeof normalized.model === "string" ? normalized.model : undefined;
           nextInit.body = JSON.stringify(normalized);
+          requestOpaqueArtifacts = opaqueProviderArtifactFingerprints(normalized.input);
         } catch {
           /* leave unparseable bodies untouched (already copied from init) */
         }
       }
+      ctx.onRequestOpaqueArtifacts?.({ requestId, fingerprints: requestOpaqueArtifacts });
       headers.set(
         "Idempotency-Key",
         authenticationAttempt === 0 ? requestId : `${requestId}:auth-${authenticationAttempt}`,

package/src/index.ts

@@ -11,3 +11,6 @@ export * from "./response-timeout";
 export * from "./fetch";
 export * from "./mcp-sanitize";
 export * from "./model-output-truncation";
+export * from "./opaque-artifact";
+export * from "./realtime";
+export * from "./realtime-v3";

package/src/mcp-sanitize.ts

@@ -105,7 +105,7 @@ export class ToolNameMapper {
 /**
  * Drop bad outputSchemas + sanitize tool names on a JSON-RPC tools/list result, in place.
  *
- * P4 (Part B.1): when `namespaceSink` is provided, accumulate each tool's ORIGINAL
+ * When `namespaceSink` is provided, accumulate each tool's ORIGINAL
  * connector namespace (the segment BEFORE the first dot, e.g. `github` from
  * `github.create_issue`) into it — captured HERE because this pass sees the original
  * dotted name BEFORE mapper.sanitize rewrites the dot away. Only dotted names carry a
@@ -264,10 +264,11 @@ export function remapToolCallRequestBody(body: string, mapper: ToolNameMapper):
  * to the MCP server's original. Only the POST request/response is buffered; the
  * long-lived GET notification SSE stream is passed through untouched.
  *
- * P4 (Part B.1): an optional `namespaceSink` Set accumulates the ORIGINAL-dotted
+ * An optional `namespaceSink` Set accumulates the ORIGINAL-dotted
  * connector namespaces seen across every tools/list this turn (captured before the
- * dot is sanitized away). The worker reads the (live, by-reference) Set after the
- * turn to cache the serving account's connector set — packages/codex stays db-free.
+ * dot is sanitized away). The runtime reads the live by-reference Set only to keep
+ * this turn's `tool_search` description accurate; it is never persisted or used
+ * for inference selection.
  */
 export function codexAppsSanitizingFetch(
   base: FetchLike = globalThis.fetch,

package/src/normalize.ts

@@ -69,7 +69,7 @@ export function normalizeCodexRequestBody(
   // strip every item id; PRESERVE call_id. spec §1.6 / verdict §0(b)
   // (This also covers tool_search items: the backend accepts an id-less
   // tool_search_call/output pair correlated by call_id — verified live — and
-  // stripping the account-bound `tsc_…` id here sanitizes BOTH replay paths.)
+  // stripping the provider-stored `tsc_…` id here sanitizes BOTH replay paths.)
   if (Array.isArray(body.input)) {
     for (const item of body.input as unknown[]) {
       if (!item || typeof item !== "object") {

package/src/opaque-artifact.ts

@@ -0,0 +1,29 @@
+import { createHash } from "node:crypto";
+
+/** Stable, content-hiding identity for one opaque provider artifact. */
+export function opaqueProviderArtifactFingerprint(item: unknown): string | null {
+  if (!item || typeof item !== "object") return null;
+  const record = item as Record<string, unknown>;
+  if (record.type !== "reasoning" && record.type !== "compaction") return null;
+  const providerData =
+    record.providerData && typeof record.providerData === "object"
+      ? (record.providerData as Record<string, unknown>)
+      : null;
+  const ciphertext =
+    (typeof record.encrypted_content === "string" && record.encrypted_content) ||
+    (typeof record.encryptedContent === "string" && record.encryptedContent) ||
+    (typeof providerData?.encrypted_content === "string" && providerData.encrypted_content) ||
+    (typeof providerData?.encryptedContent === "string" && providerData.encryptedContent) ||
+    null;
+  if (!ciphertext) return null;
+  return `${record.type}:${createHash("sha256").update(ciphertext).digest("hex")}`;
+}
+
+/** Exact opaque artifacts present in one normalized provider input array. */
+export function opaqueProviderArtifactFingerprints(input: unknown): string[] {
+  if (!Array.isArray(input)) return [];
+  return input.flatMap((item) => {
+    const fingerprint = opaqueProviderArtifactFingerprint(item);
+    return fingerprint ? [fingerprint] : [];
+  });
+}