@uvl000/claude-trace 3.0.13-workflowexp.1

package/dist/config/codex-config-overlay.js

@@ -0,0 +1,352 @@
+"use strict";
+/**
+ * @file Persistent Codex CLI config overlay for reverse-proxy interception.
+ *
+ * Codex reads API base URLs from `$CODEX_HOME/config.toml` and optional profile
+ * files (`*.config.toml`). This module builds a writable overlay at
+ * `~/.claude-trace/codex-config-overlay/` that rewrites all base URLs to the local
+ * trace proxy while symlinking auth and other non-config files from the real
+ * `$CODEX_HOME`. WebSocket support is disabled in custom providers for MVP logging.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RESERVED_BUILTIN_PROVIDERS = void 0;
+exports.getCodexConfigOverlayDir = getCodexConfigOverlayDir;
+exports.isPersistentCodexOverlayDir = isPersistentCodexOverlayDir;
+exports.resolveUserCodexHome = resolveUserCodexHome;
+exports.resolveCodexConfigPath = resolveCodexConfigPath;
+exports.readCodexConfig = readCodexConfig;
+exports.readCodexAuth = readCodexAuth;
+exports.isChatGptAuthMode = isChatGptAuthMode;
+exports.hasChatGptAuth = hasChatGptAuth;
+exports.syncCodexConfigOverlay = syncCodexConfigOverlay;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const smol_toml_1 = require("smol-toml");
+/** Primary Codex configuration filename within `$CODEX_HOME`. */
+const CONFIG_FILE = "config.toml";
+/**
+ * Built-in Codex provider ids whose base URLs are managed by Codex itself.
+ * Custom providers in `model_providers` are rewritten; these are skipped.
+ */
+const RESERVED_BUILTIN_PROVIDERS = new Set(["openai", "ollama", "lmstudio"]);
+exports.RESERVED_BUILTIN_PROVIDERS = RESERVED_BUILTIN_PROVIDERS;
+/**
+ * Creates a directory symlink (junction on Windows, dir symlink elsewhere).
+ *
+ * @param sourcePath - Existing directory to link from.
+ * @param overlayPath - Destination path inside the overlay.
+ */
+function linkDirectory(sourcePath, overlayPath) {
+    const absoluteSource = path.resolve(sourcePath);
+    if (process.platform === "win32") {
+        fs.symlinkSync(absoluteSource, overlayPath, "junction");
+        return;
+    }
+    fs.symlinkSync(absoluteSource, overlayPath, "dir");
+}
+/**
+ * Symlinks a file, falling back to copy when symlink creation fails.
+ *
+ * @param sourcePath - Existing file in the user's real `$CODEX_HOME`.
+ * @param overlayPath - Destination path inside the overlay.
+ */
+function linkOrCopyFile(sourcePath, overlayPath) {
+    try {
+        if (process.platform === "win32") {
+            fs.symlinkSync(path.resolve(sourcePath), overlayPath, "file");
+        }
+        else {
+            fs.symlinkSync(sourcePath, overlayPath, "file");
+        }
+    }
+    catch {
+        fs.copyFileSync(sourcePath, overlayPath);
+    }
+}
+/**
+ * Links a file or directory into the overlay if the destination does not exist.
+ *
+ * @param sourcePath - Path to the source file or directory.
+ * @param overlayPath - Corresponding path inside the overlay directory.
+ */
+function linkEntry(sourcePath, overlayPath) {
+    if (fs.existsSync(overlayPath)) {
+        return;
+    }
+    const stat = fs.lstatSync(sourcePath);
+    if (stat.isDirectory()) {
+        linkDirectory(sourcePath, overlayPath);
+        return;
+    }
+    linkOrCopyFile(sourcePath, overlayPath);
+}
+/**
+ * Attempts to link one entry and records the outcome in `result`.
+ *
+ * @param entryLabel - Human-readable name recorded in the sync result.
+ * @param sourcePath - Source file or directory path.
+ * @param overlayPath - Destination path inside the overlay.
+ * @param result - Mutable sync result accumulator.
+ */
+function tryLinkEntryWithResult(entryLabel, sourcePath, overlayPath, result) {
+    if (!fs.existsSync(sourcePath)) {
+        return;
+    }
+    try {
+        linkEntry(sourcePath, overlayPath);
+        result.linked.push(entryLabel);
+    }
+    catch (error) {
+        const err = error;
+        result.skipped.push({ entry: entryLabel, reason: err.message });
+    }
+}
+/**
+ * Returns the persistent overlay directory path for Codex config.
+ *
+ * @returns Absolute path under `~/.claude-trace/codex-config-overlay/`.
+ */
+function getCodexConfigOverlayDir() {
+    return path.join(os.homedir(), ".claude-trace", "codex-config-overlay");
+}
+/**
+ * Returns true when `dir` is the canonical persistent Codex overlay directory.
+ *
+ * @param dir - Directory path to check, or `null`.
+ */
+function isPersistentCodexOverlayDir(dir) {
+    if (!dir) {
+        return false;
+    }
+    return path.resolve(dir) === path.resolve(getCodexConfigOverlayDir());
+}
+/**
+ * Resolves the user's real Codex home directory.
+ *
+ * @param env - Environment map; defaults to `process.env`.
+ * @returns `CODEX_HOME` if set, otherwise `~/.codex`.
+ */
+function resolveUserCodexHome(env = process.env) {
+    return env.CODEX_HOME || path.join(os.homedir(), ".codex");
+}
+/**
+ * Returns the path to `config.toml` if it exists, otherwise `null`.
+ *
+ * @param codexHome - Codex home directory; defaults to {@link resolveUserCodexHome}.
+ */
+function resolveCodexConfigPath(codexHome) {
+    const home = codexHome || resolveUserCodexHome();
+    const configPath = path.join(home, CONFIG_FILE);
+    return fs.existsSync(configPath) ? configPath : null;
+}
+/**
+ * Reads and parses Codex `config.toml`, returning an empty object on missing/error.
+ *
+ * @param codexHome - Codex home directory; defaults to {@link resolveUserCodexHome}.
+ */
+function readCodexConfig(codexHome) {
+    const configPath = resolveCodexConfigPath(codexHome);
+    if (!configPath) {
+        return {};
+    }
+    try {
+        return (0, smol_toml_1.parse)(fs.readFileSync(configPath, "utf-8"));
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Reads and parses Codex `auth.json`, returning `null` when missing or invalid.
+ *
+ * @param codexHome - Codex home directory; defaults to {@link resolveUserCodexHome}.
+ */
+function readCodexAuth(codexHome) {
+    const home = codexHome || resolveUserCodexHome();
+    const authPath = path.join(home, "auth.json");
+    if (!fs.existsSync(authPath)) {
+        return null;
+    }
+    try {
+        return JSON.parse(fs.readFileSync(authPath, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Returns true when `auth.json` explicitly selects ChatGPT OAuth.
+ *
+ * Only checks the `auth_mode` field when it is present; older auth files
+ * without `auth_mode` fall through to {@link hasChatGptAuth} heuristics.
+ *
+ * @param codexHome - Codex home directory; defaults to {@link resolveUserCodexHome}.
+ */
+function isChatGptAuthMode(codexHome) {
+    const auth = readCodexAuth(codexHome);
+    return auth?.auth_mode === "chatgpt";
+}
+/**
+ * Detects whether the user has ChatGPT OAuth credentials (vs OpenAI API key auth).
+ *
+ * Prefers an explicit `auth_mode: "chatgpt"` in `auth.json`. When `auth_mode` is
+ * absent, falls back to a legacy content heuristic for older Codex installs.
+ *
+ * @param codexHome - Codex home directory; defaults to {@link resolveUserCodexHome}.
+ */
+function hasChatGptAuth(codexHome) {
+    if (isChatGptAuthMode(codexHome)) {
+        return true;
+    }
+    const auth = readCodexAuth(codexHome);
+    if (auth && "auth_mode" in auth) {
+        // Explicit non-ChatGPT auth_mode — do not apply legacy heuristics.
+        return false;
+    }
+    const home = codexHome || resolveUserCodexHome();
+    const authPath = path.join(home, "auth.json");
+    if (!fs.existsSync(authPath)) {
+        return false;
+    }
+    try {
+        const raw = fs.readFileSync(authPath, "utf-8");
+        return /chatgpt|chat\.openai/i.test(raw);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Rewrites all API base URLs in a Codex config to point at the local trace proxy.
+ *
+ * Sets `openai_base_url` and `chatgpt_base_url` to `proxyUrl`, rewrites custom
+ * `model_providers` base URLs, and disables WebSockets (not yet supported for logging).
+ *
+ * @param config - Parsed Codex configuration to rewrite.
+ * @param proxyUrl - Local trace proxy base URL (e.g. `http://127.0.0.1:PORT`).
+ * @returns New config object with proxy URLs applied.
+ */
+function rewriteConfigForProxy(config, proxyUrl) {
+    const proxyBase = proxyUrl.replace(/\/$/, "");
+    const rewritten = { ...config };
+    rewritten.openai_base_url = proxyBase;
+    rewritten.chatgpt_base_url = proxyBase;
+    if (config.model_providers) {
+        const providers = {};
+        for (const [id, provider] of Object.entries(config.model_providers)) {
+            // Built-in providers use Codex-internal routing; only custom providers are rewritten.
+            if (RESERVED_BUILTIN_PROVIDERS.has(id)) {
+                continue;
+            }
+            providers[id] = {
+                ...provider,
+                base_url: proxyBase,
+                supports_websockets: false,
+            };
+        }
+        rewritten.model_providers = providers;
+    }
+    return rewritten;
+}
+/**
+ * Writes the rewritten main `config.toml` into the overlay directory.
+ *
+ * @param overlayDir - Writable overlay directory.
+ * @param config - Rewritten configuration to persist.
+ */
+function writeOverlayConfig(overlayDir, config) {
+    fs.mkdirSync(overlayDir, { recursive: true });
+    fs.writeFileSync(path.join(overlayDir, CONFIG_FILE), (0, smol_toml_1.stringify)(config));
+}
+/**
+ * Rewrites and copies all `*.config.toml` profile files into the overlay.
+ *
+ * Codex supports named profiles as separate TOML files alongside the main config.
+ *
+ * @param sourceHome - User's real `$CODEX_HOME` directory.
+ * @param overlayDir - Writable overlay directory.
+ * @param proxyUrl - Local trace proxy base URL.
+ */
+function syncProfileConfigs(sourceHome, overlayDir, proxyUrl) {
+    if (!fs.existsSync(sourceHome)) {
+        return;
+    }
+    for (const entry of fs.readdirSync(sourceHome)) {
+        if (!entry.endsWith(".config.toml")) {
+            continue;
+        }
+        const sourcePath = path.join(sourceHome, entry);
+        try {
+            const profileConfig = (0, smol_toml_1.parse)(fs.readFileSync(sourcePath, "utf-8"));
+            const rewritten = rewriteConfigForProxy(profileConfig, proxyUrl);
+            fs.writeFileSync(path.join(overlayDir, entry), (0, smol_toml_1.stringify)(rewritten));
+        }
+        catch {
+            // Skip unparseable profile files rather than failing the whole overlay sync.
+        }
+    }
+}
+/**
+ * Builds or refreshes the Codex config overlay.
+ *
+ * 1. Rewrites main `config.toml` and all `*.config.toml` profiles with proxy URLs.
+ * 2. Symlinks remaining `$CODEX_HOME` entries (auth, sessions, etc.) into the overlay.
+ *
+ * @param sourceHome - User's real `$CODEX_HOME` directory.
+ * @param overlayDir - Writable overlay directory to populate.
+ * @param proxyUrl - Local trace proxy base URL (e.g. `http://127.0.0.1:PORT`).
+ * @returns Summary of linked and skipped non-config entries.
+ */
+function syncCodexConfigOverlay(sourceHome, overlayDir, proxyUrl) {
+    const result = { linked: [], skipped: [] };
+    fs.mkdirSync(overlayDir, { recursive: true });
+    const sourceConfig = readCodexConfig(sourceHome);
+    const rewritten = rewriteConfigForProxy(sourceConfig, proxyUrl);
+    writeOverlayConfig(overlayDir, rewritten);
+    syncProfileConfigs(sourceHome, overlayDir, proxyUrl);
+    if (fs.existsSync(sourceHome)) {
+        for (const entry of fs.readdirSync(sourceHome)) {
+            // Config files are rewritten above; everything else is symlinked.
+            if (entry === CONFIG_FILE || entry.endsWith(".config.toml")) {
+                continue;
+            }
+            tryLinkEntryWithResult(entry, path.join(sourceHome, entry), path.join(overlayDir, entry), result);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=codex-config-overlay.js.map

package/dist/config/codex-config-overlay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-config-overlay.js","sourceRoot":"","sources":["../../src/config/codex-config-overlay.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6IH,4DAEC;AAOD,kEAKC;AAQD,oDAEC;AAOD,wDAIC;AAOD,0CAWC;AAOD,sCAYC;AAUD,8CAGC;AAUD,wCAuBC;AA0FD,wDA8BC;AAzXD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,yCAA6C;AAG7C,iEAAiE;AACjE,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC;;;GAGG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AA+WpE,gEAA0B;AArUnC;;;;;GAKG;AACH,SAAS,aAAa,CAAC,UAAkB,EAAE,WAAmB;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QACxD,OAAO;IACR,CAAC;IACD,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,UAAkB,EAAE,WAAmB;IAC9D,IAAI,CAAC;QACJ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAClC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACP,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,UAAkB,EAAE,WAAmB;IACzD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO;IACR,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACvC,OAAO;IACR,CAAC;IACD,cAAc,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC9B,UAAkB,EAClB,UAAkB,EAClB,WAAmB,EACnB,MAAyB;IAEzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO;IACR,CAAC;IAED,IAAI,CAAC;QACJ,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,sBAAsB,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,SAAgB,2BAA2B,CAAC,GAAkB;IAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,OAAO,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,SAAkB;IACxD,MAAM,IAAI,GAAG,SAAS,IAAI,oBAAoB,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChD,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,SAAkB;IACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,IAAA,iBAAK,EAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAgB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,SAAkB;IAC/C,MAAM,IAAI,GAAG,SAAS,IAAI,oBAAoB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAc,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAAC,SAAkB;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,SAAkB;IAChD,IAAI,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACjC,mEAAmE;QACnE,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,IAAI,oBAAoB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,MAAmB,EAAE,QAAgB;IACnE,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAgB,EAAE,GAAG,MAAM,EAAE,CAAC;IAE7C,SAAS,CAAC,eAAe,GAAG,SAAS,CAAC;IACtC,SAAS,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAEvC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAuC,EAAE,CAAC;QACzD,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YACrE,sFAAsF;YACtF,IAAI,0BAA0B,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxC,SAAS;YACV,CAAC;YACD,SAAS,CAAC,EAAE,CAAC,GAAG;gBACf,GAAG,QAAQ;gBACX,QAAQ,EAAE,SAAS;gBACnB,mBAAmB,EAAE,KAAK;aAC1B,CAAC;QACH,CAAC;QACD,SAAS,CAAC,eAAe,GAAG,SAAS,CAAC;IACvC,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,UAAkB,EAAE,MAAmB;IAClE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,IAAA,qBAAS,EAAC,MAAM,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,UAAkB,EAAE,UAAkB,EAAE,QAAgB;IACnF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChC,OAAO;IACR,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrC,SAAS;QACV,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC;YACJ,MAAM,aAAa,GAAG,IAAA,iBAAK,EAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAgB,CAAC;YACjF,MAAM,SAAS,GAAG,qBAAqB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACjE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,IAAA,qBAAS,EAAC,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACR,6EAA6E;QAC9E,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,sBAAsB,CACrC,UAAkB,EAClB,UAAkB,EAClB,QAAgB;IAEhB,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE9D,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAChE,kBAAkB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC1C,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAErD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,kEAAkE;YAClE,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC7D,SAAS;YACV,CAAC;YACD,sBAAsB,CACrB,KAAK,EACL,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAC5B,MAAM,CACN,CAAC;QACH,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @file index.ts
+ * @description Public package entry point for programmatic use of claude-trace.
+ *
+ * Re-exports the traffic logger (V1 interceptor), HTML generator, and shared
+ * types so consumers can embed logging or report generation without invoking
+ * the CLI binaries directly.
+ */
+export { ClaudeTrafficLogger, initializeInterceptor, getLogger, InterceptorConfig } from "./intercept/interceptor";
+export { HTMLGenerator } from "./report/html-generator";
+export { RawPair, ClaudeData, HTMLGenerationData, TemplateReplacements } from "./types";
+export * from "./intercept/interceptor";
+export * from "./report/html-generator";
+export * from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACnH,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAGxF,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,37 @@
+"use strict";
+/**
+ * @file index.ts
+ * @description Public package entry point for programmatic use of claude-trace.
+ *
+ * Re-exports the traffic logger (V1 interceptor), HTML generator, and shared
+ * types so consumers can embed logging or report generation without invoking
+ * the CLI binaries directly.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HTMLGenerator = exports.getLogger = exports.initializeInterceptor = exports.ClaudeTrafficLogger = void 0;
+// Main exports for the package
+var interceptor_1 = require("./intercept/interceptor");
+Object.defineProperty(exports, "ClaudeTrafficLogger", { enumerable: true, get: function () { return interceptor_1.ClaudeTrafficLogger; } });
+Object.defineProperty(exports, "initializeInterceptor", { enumerable: true, get: function () { return interceptor_1.initializeInterceptor; } });
+Object.defineProperty(exports, "getLogger", { enumerable: true, get: function () { return interceptor_1.getLogger; } });
+var html_generator_1 = require("./report/html-generator");
+Object.defineProperty(exports, "HTMLGenerator", { enumerable: true, get: function () { return html_generator_1.HTMLGenerator; } });
+// Re-export everything for convenience
+__exportStar(require("./intercept/interceptor"), exports);
+__exportStar(require("./report/html-generator"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;AAEH,+BAA+B;AAC/B,uDAAmH;AAA1G,kHAAA,mBAAmB,OAAA;AAAE,oHAAA,qBAAqB,OAAA;AAAE,wGAAA,SAAS,OAAA;AAC9D,0DAAwD;AAA/C,+GAAA,aAAa,OAAA;AAGtB,uCAAuC;AACvC,0DAAwC;AACxC,0DAAwC;AACxC,0CAAwB"}

package/dist/intercept/forward-proxy.d.ts

@@ -0,0 +1,77 @@
+/**
+ * @file forward-proxy.ts
+ * @description Independent HTTP/HTTPS forward proxy for vibe-coding-proxy.
+ *
+ * Unlike the existing reverse proxy, this server is configured through
+ * HTTP_PROXY/HTTPS_PROXY and does not spawn or manage any coding CLI process.
+ * HTTPS traffic is tunneled by default; only allowlisted hosts are decrypted
+ * with the local MITM CA so model API JSON can be logged.
+ */
+import { type ProxyLogPaths } from "./proxy-log-writer";
+/** Configuration for {@link ForwardProxyServer}. */
+export interface ForwardProxyConfig {
+    /** TCP host to bind; defaults to loopback for safety. */
+    host?: string;
+    /** TCP port to bind; `0` lets the OS pick an ephemeral port. */
+    port?: number;
+    /** Directory for JSONL, JSON, and HTML logs. */
+    logDirectory?: string;
+    /** Base name for log files. */
+    logBaseName?: string;
+    /** Log metadata for non-target traffic as well. */
+    includeAllRequests?: boolean;
+    /** Open generated HTML when the proxy stops. */
+    openBrowser?: boolean;
+    /** Keep sensitive headers unredacted in logs. */
+    logSensitiveHeaders?: boolean;
+    /** URL prefixes that should be decrypted and fully logged. */
+    targetUrls?: string[];
+    /** Hostnames that should be decrypted and fully logged. */
+    mitmHosts?: string[];
+    /** Disable MITM; HTTPS CONNECT is tunneled only. */
+    disableMitm?: boolean;
+    /** Persistent local CA directory. */
+    caDir?: string;
+}
+/** Resolved listen address returned by {@link ForwardProxyServer.start}. */
+export interface ForwardProxyInfo {
+    host: string;
+    port: number;
+    url: string;
+    logs: ProxyLogPaths;
+    caCertPath?: string;
+}
+/**
+ * HTTP forward proxy with optional allowlist-scoped HTTPS MITM logging.
+ */
+export declare class ForwardProxyServer {
+    private readonly config;
+    private readonly targets;
+    private readonly logger;
+    private readonly ca;
+    private readonly server;
+    private readonly mitmHttpServer;
+    private readonly mitmSocketHosts;
+    private started;
+    private stopped;
+    /** @param config - Bind, logging, target matching, and MITM options. */
+    constructor(config?: ForwardProxyConfig);
+    /**
+     * Start the forward proxy and return the URL clients should use.
+     * @returns Listen information, log paths, and CA certificate path when MITM is enabled.
+     */
+    start(): Promise<ForwardProxyInfo>;
+    /** Stop the proxy and finalize logging output. */
+    stop(): void;
+    /** Handle non-CONNECT requests sent through HTTP_PROXY. */
+    private handlePlainHttpRequest;
+    /** Handle HTTPS CONNECT by tunneling or starting allowlist-scoped MITM. */
+    private handleConnect;
+    /** Handle HTTP requests after CONNECT TLS has been decrypted. */
+    private handleMitmHttpRequest;
+    /** Open a raw TCP tunnel for non-MITM CONNECT targets. */
+    private tunnelConnect;
+    /** Forward a buffered HTTP request upstream while streaming the response back. */
+    private forwardHttpExchange;
+}
+//# sourceMappingURL=forward-proxy.d.ts.map

package/dist/intercept/forward-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward-proxy.d.ts","sourceRoot":"","sources":["../../src/intercept/forward-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxE,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IAClC,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gDAAgD;IAChD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,oDAAoD;IACpD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAwBD;;GAEG;AACH,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAED;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA2B;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiC;IACjE,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAS;IAExB,wEAAwE;gBAC5D,MAAM,GAAE,kBAAuB;IA0C3C;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC;IA+BxC,kDAAkD;IAClD,IAAI,IAAI,IAAI;IAcZ,2DAA2D;IAC3D,OAAO,CAAC,sBAAsB;IAY9B,2EAA2E;IAC3E,OAAO,CAAC,aAAa;IAqCrB,iEAAiE;IACjE,OAAO,CAAC,qBAAqB;IAa7B,0DAA0D;IAC1D,OAAO,CAAC,aAAa;IA+BrB,kFAAkF;IAClF,OAAO,CAAC,mBAAmB;CA6E3B"}