codex-grok-mcp 0.2.0-beta.1

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "codex-grok-mcp",
+  "version": "0.2.0-beta.1",
+  "description": "Unofficial local MCP bridge from Codex to isolated Grok calls and experimental persistent Grok Bots.",
+  "author": "Fato07",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Fato07/codex-grok-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Fato07/codex-grok-mcp/issues"
+  },
+  "homepage": "https://github.com/Fato07/codex-grok-mcp#readme",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "codex-grok-mcp": "dist/index.js",
+    "codex-grok-bridge": "dist/bridge-companion.js"
+  },
+  "files": [
+    "dist",
+    "plugins/codex-grok-mcp/assets/icon.png",
+    "relay/.dev.vars.example",
+    "relay/README.md",
+    "relay/package-lock.json",
+    "relay/package.json",
+    "relay/src",
+    "relay/test",
+    "relay/tsconfig.json",
+    "relay/vitest.config.ts",
+    "relay/worker-configuration.d.ts",
+    "relay/wrangler.jsonc",
+    "CONTRIBUTING.md",
+    "LICENSE",
+    "README.md",
+    "SECURITY.md"
+  ],
+  "engines": {
+    "node": ">=20.19.2"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "start": "node dist/index.js",
+    "bridge:probe": "node dist/bridge-companion.js probe",
+    "doctor": "node dist/index.js --doctor",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "test:relay": "npm --prefix relay test",
+    "test:all": "npm test && npm run test:relay",
+    "prepublishOnly": "npm run typecheck && npm run test:all",
+    "prepare": "npm run build"
+  },
+  "keywords": [
+    "codex",
+    "grok",
+    "xai",
+    "mcp",
+    "model-context-protocol"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/server": "2.0.0",
+    "ws": "8.21.3",
+    "zod": "4.5.4"
+  },
+  "devDependencies": {
+    "@types/node": "20.19.43",
+    "@types/ws": "8.18.1",
+    "typescript": "7.0.2"
+  }
+}

package/relay/.dev.vars.example

@@ -0,0 +1,2 @@
+# Generate a unique value with: node -e 'process.stdout.write(require("node:crypto").randomBytes(32).toString("base64url"))'
+RELAY_ACCESS_TOKEN=

package/relay/README.md

@@ -0,0 +1,26 @@
+# codex-grok-mcp relay
+
+This Worker forwards end-to-end encrypted WebSocket frames between the Codex client and Grok Bot companion. It accepts native clients only: browser requests carrying an `Origin` header are rejected.
+
+## Configure
+
+Create one deployment-scoped token containing exactly 32 random bytes in base64url form, keep it in your password manager, and set it as a Cloudflare secret:
+
+```sh
+RELAY_TOKEN="$(node -e 'process.stdout.write(require("node:crypto").randomBytes(32).toString("base64url"))')"
+printf 'RELAY_ACCESS_TOKEN=%s\n' "$RELAY_TOKEN" | npx wrangler deploy --secrets-file /dev/stdin
+```
+
+Use that same value as `CODEX_GROK_RELAY_TOKEN` for `codex-grok-mcp pair`. Pairing derives an HMAC-SHA-256 bearer for the random channel; the pair code configures both native clients with that scoped bearer and never includes the deployment master. Do not put either value in `wrangler.jsonc`, logs, URLs, issues, or prompts. This master is for one operator's self-hosted relay, not a multi-tenant public service.
+
+Cloudflare invocation logs and traces are explicitly disabled because the channel is part of the request path. The Worker itself emits no logs.
+
+For local `wrangler dev`, copy `.dev.vars.example` to `.dev.vars`, fill the same secret, and keep that file untracked.
+
+## Verify and deploy
+
+```sh
+npm test
+npm run check
+npx wrangler deploy --dry-run
+```