codex-openai-proxy 0.1.0-rc.0

package/dist/http/server.js

@@ -0,0 +1,254 @@
+import { randomUUID } from "node:crypto";
+import { createServer, } from "node:http";
+import { HttpError, writeError, writeJson } from "./errors.js";
+import { UNRESTRICTED_POLICY_REQUIREMENTS, } from "../core/policy.js";
+import { handleChatCompletion } from "./chat.js";
+import { ContinuationCoordinator, ResponseStore, } from "../continuation/state.js";
+/** Creates a loopback proxy with bounded concurrency and request lifetimes. */
+export function createProxyServer(options, log) {
+    let ready = false;
+    let transport;
+    let requirements = UNRESTRICTED_POLICY_REQUIREMENTS;
+    let continuations;
+    const continuationStore = new ResponseStore(options.stateDir);
+    let active = 0;
+    const controllers = new Set();
+    const sockets = new Set();
+    const server = createServer((request, response) => {
+        const started = Date.now();
+        const requestId = randomUUID();
+        response.setHeader("x-request-id", requestId);
+        // Parse the request target once; routing and every log line reuse it.
+        let url;
+        try {
+            url = new URL(request.url ?? "/", "http://loopback.invalid");
+        }
+        catch {
+            url = undefined;
+        }
+        const logRequest = (status) => {
+            log("info", "http_request", {
+                request_id: requestId,
+                method: request.method,
+                path: url?.pathname ?? "[invalid-path]",
+                status,
+                duration_ms: Date.now() - started,
+            });
+        };
+        const authorityError = validateRequestAuthority(request);
+        if (authorityError) {
+            writeError(response, authorityError);
+            logRequest(authorityError.status);
+            return;
+        }
+        // Reject before allocating per-request resources when capacity is full.
+        if (active >= options.maxRequests) {
+            const overloaded = new HttpError(429, "The proxy is handling too many requests.", "rate_limit_error", "overloaded");
+            writeError(response, overloaded);
+            logRequest(overloaded.status);
+            return;
+        }
+        active += 1;
+        const controller = new AbortController();
+        controllers.add(controller);
+        const timer = setTimeout(() => controller.abort(new Error("request timeout")), options.requestTimeoutMs);
+        timer.unref();
+        let finished = false;
+        const finish = () => {
+            if (finished)
+                return;
+            finished = true;
+            request.off("aborted", abortRequest);
+            clearTimeout(timer);
+            controllers.delete(controller);
+            active -= 1;
+            logRequest(response.statusCode);
+        };
+        const abortRequest = () => {
+            controller.abort(new Error("client disconnected"));
+            finish();
+        };
+        request.once("aborted", abortRequest);
+        response.once("finish", finish);
+        response.once("close", () => {
+            if (!response.writableFinished)
+                abortRequest();
+        });
+        void route(request, response, ready, options.bodyLimitBytes, controller.signal, transport, continuations, options.root, requirements, options.implicitToolContinuation, log, requestId, url).catch((cause) => {
+            const error = cause instanceof HttpError
+                ? cause
+                : controller.signal.aborted
+                    ? new HttpError(408, "The request timed out.", "invalid_request_error", "request_timeout")
+                    : new HttpError(500, "An internal error occurred.", "server_error", "internal_error");
+            if (!(cause instanceof HttpError))
+                log.failure("request_failed", { request_id: requestId }, cause);
+            writeError(response, error);
+        });
+    });
+    server.requestTimeout = options.requestTimeoutMs;
+    server.headersTimeout = Math.min(options.requestTimeoutMs, 60_000);
+    server.keepAliveTimeout = 5_000;
+    server.on("connection", (socket) => {
+        sockets.add(socket);
+        socket.once("close", () => sockets.delete(socket));
+    });
+    return {
+        server,
+        setReady(value) {
+            ready = value;
+        },
+        setTransport(value, nextRequirements) {
+            // Update requirements before the same-transport short-circuit so a refresh
+            // of managed policy against an unchanged transport still takes effect.
+            requirements = nextRequirements ?? UNRESTRICTED_POLICY_REQUIREMENTS;
+            if (transport === value)
+                return;
+            continuations?.dispose();
+            if (transport && transport !== value)
+                transport.close(new Error("app-server transport replaced"));
+            transport = value;
+            continuations = value
+                ? new ContinuationCoordinator(continuationStore, value, options.toolTimeoutMs)
+                : undefined;
+        },
+        listen: () => new Promise((resolve, reject) => {
+            const onError = (error) => reject(error);
+            server.once("error", onError);
+            server.listen({ host: options.host, port: options.port, exclusive: true }, () => {
+                server.off("error", onError);
+                const address = server.address();
+                if (address === null || typeof address === "string")
+                    return reject(new Error("Listener did not return a TCP address."));
+                resolve({ address: address.address, port: address.port });
+            });
+        }),
+        close: () => new Promise((resolve, reject) => {
+            continuations?.dispose();
+            transport?.close(new Error("proxy shutting down"));
+            continuations = undefined;
+            transport = undefined;
+            controllers.forEach((controller) => controller.abort(new Error("server shutting down")));
+            server.close((error) => (error ? reject(error) : resolve()));
+            server.closeIdleConnections();
+            const force = setTimeout(() => {
+                sockets.forEach((socket) => socket.destroy());
+                server.closeAllConnections();
+            }, options.shutdownTimeoutMs);
+            force.unref();
+        }),
+    };
+}
+/** Routes the intentionally small public HTTP surface. */
+async function route(request, response, ready, bodyLimit, signal, transport, continuations, root, requirements, implicitToolContinuation, log, requestId, url) {
+    if (request.method === "GET" && url?.pathname === "/health") {
+        writeJson(response, 200, { status: "ok" });
+        return;
+    }
+    if (request.method === "GET" && url?.pathname === "/ready") {
+        writeJson(response, ready ? 200 : 503, {
+            status: ready ? "ready" : "not_ready",
+        });
+        return;
+    }
+    if (request.method === "POST" && url?.pathname === "/v1/chat/completions") {
+        const contentType = request.headers["content-type"]
+            ?.split(";", 1)[0]
+            ?.trim()
+            .toLowerCase();
+        if (contentType !== "application/json")
+            throw new HttpError(415, "Content-Type must be application/json.", "invalid_request_error", "unsupported_media_type");
+        const body = await readJsonBody(request, bodyLimit, signal);
+        if (!ready)
+            throw new HttpError(503, "The app-server is not ready.", "server_error", "app_server_not_ready");
+        if (!transport || !continuations)
+            throw new HttpError(503, "The app-server transport is unavailable.", "server_error", "app_server_not_ready");
+        await handleChatCompletion(body, response, {
+            rpc: transport,
+            log,
+            requestId,
+            signal,
+            continuations,
+            root,
+            requirements,
+            implicitToolContinuation,
+        });
+        return;
+    }
+    throw new HttpError(404, "The requested route was not found.", "not_found_error", "route_not_found");
+}
+/** Rejects hostile authorities and every browser-originated request. */
+function validateRequestAuthority(request) {
+    if (!isAllowedHost(request.headers.host))
+        return new HttpError(403, "The Host header must identify a loopback address.", "invalid_request_error", "invalid_host_header", "host");
+    // The proxy has no browser authentication surface. Rejecting Origin entirely
+    // keeps cross-origin and browser form traffic fail-closed, while ordinary CLI
+    // and server-side HTTP clients (which omit Origin) remain compatible.
+    if (request.headers.origin !== undefined)
+        return new HttpError(403, "Browser-originated requests are not accepted.", "invalid_request_error", "invalid_origin_header", "origin");
+    return undefined;
+}
+/** Accepts only explicit loopback HTTP authorities with an optional valid port. */
+function isAllowedHost(host) {
+    if (host === undefined)
+        return false;
+    const match = /^(localhost|127\.0\.0\.1|\[::1\])(?::([0-9]+))?$/i.exec(host);
+    if (!match)
+        return false;
+    if (match[2] === undefined)
+        return true;
+    const port = Number(match[2]);
+    return Number.isInteger(port) && port >= 1 && port <= 65_535;
+}
+/** Creates the stable error returned when a request body exceeds its limit. */
+function bodyTooLargeError() {
+    return new HttpError(413, "Request body is too large.", "invalid_request_error", "body_too_large");
+}
+/** Reads and parses a size-limited, abortable JSON request body. */
+async function readJsonBody(request, limit, signal) {
+    const declared = Number(request.headers["content-length"]);
+    if (Number.isFinite(declared) && declared > limit)
+        throw bodyTooLargeError();
+    const chunks = await new Promise((resolve, reject) => {
+        const result = [];
+        let size = 0;
+        const cleanup = () => {
+            request.off("data", onData);
+            request.off("end", onEnd);
+            request.off("error", onError);
+            signal.removeEventListener("abort", onAbort);
+        };
+        const fail = (error) => {
+            cleanup();
+            request.pause();
+            reject(error);
+        };
+        const onData = (raw) => {
+            const chunk = Buffer.isBuffer(raw) ? raw : Buffer.from(raw);
+            size += chunk.length;
+            if (size > limit) {
+                fail(bodyTooLargeError());
+                return;
+            }
+            result.push(chunk);
+        };
+        const onEnd = () => {
+            cleanup();
+            resolve(result);
+        };
+        const onError = () => fail(new HttpError(400, "The request body could not be read.", "invalid_request_error", "invalid_body"));
+        const onAbort = () => fail(signal.reason);
+        request.on("data", onData);
+        request.once("end", onEnd);
+        request.once("error", onError);
+        signal.addEventListener("abort", onAbort, { once: true });
+        if (signal.aborted)
+            onAbort();
+    });
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    }
+    catch {
+        throw new HttpError(400, "The request body is not valid JSON.", "invalid_request_error", "invalid_json");
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/http/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/http/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,YAAY,GAIb,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAI/D,OAAO,EACL,gCAAgC,GAEjC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EACL,uBAAuB,EACvB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAkBlC,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAC/B,OAAqB,EACrB,GAAW;IAEX,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,SAAuC,CAAC;IAC5C,IAAI,YAAY,GAAG,gCAAgC,CAAC;IACpD,IAAI,aAAkD,CAAC;IACvD,MAAM,iBAAiB,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAC9C,sEAAsE;QACtE,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,MAAc,EAAQ,EAAE;YAC1C,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE;gBAC1B,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,GAAG,EAAE,QAAQ,IAAI,gBAAgB;gBACvC,MAAM;gBACN,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aAClC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,cAAc,EAAE,CAAC;YACnB,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACrC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,IAAI,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,SAAS,CAC9B,GAAG,EACH,0CAA0C,EAC1C,kBAAkB,EAClB,YAAY,CACb,CAAC;YACF,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACjC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EACpD,OAAO,CAAC,gBAAgB,CACzB,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACrC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,IAAI,CAAC,CAAC;YACZ,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC;QACF,MAAM,YAAY,GAAG,GAAS,EAAE;YAC9B,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACnD,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAC1B,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAAE,YAAY,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,KAAK,KAAK,CACR,OAAO,EACP,QAAQ,EACR,KAAK,EACL,OAAO,CAAC,cAAc,EACtB,UAAU,CAAC,MAAM,EACjB,SAAS,EACT,aAAa,EACb,OAAO,CAAC,IAAI,EACZ,YAAY,EACZ,OAAO,CAAC,wBAAwB,EAChC,GAAG,EACH,SAAS,EACT,GAAG,CACJ,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,MAAM,KAAK,GACT,KAAK,YAAY,SAAS;gBACxB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;oBACzB,CAAC,CAAC,IAAI,SAAS,CACX,GAAG,EACH,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,CAClB;oBACH,CAAC,CAAC,IAAI,SAAS,CACX,GAAG,EACH,6BAA6B,EAC7B,cAAc,EACd,gBAAgB,CACjB,CAAC;YACV,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC;gBAC/B,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;YAClE,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACjD,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAChC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,QAAQ,CAAC,KAAK;YACZ,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,YAAY,CACV,KAAmC,EACnC,gBAAqC;YAErC,2EAA2E;YAC3E,uEAAuE;YACvE,YAAY,GAAG,gBAAgB,IAAI,gCAAgC,CAAC;YACpE,IAAI,SAAS,KAAK,KAAK;gBAAE,OAAO;YAChC,aAAa,EAAE,OAAO,EAAE,CAAC;YACzB,IAAI,SAAS,IAAI,SAAS,KAAK,KAAK;gBAClC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC9D,SAAS,GAAG,KAAK,CAAC;YAClB,aAAa,GAAG,KAAK;gBACnB,CAAC,CAAC,IAAI,uBAAuB,CACzB,iBAAiB,EACjB,KAAK,EACL,OAAO,CAAC,aAAa,CACtB;gBACH,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CACX,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CACX,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAC3D,GAAG,EAAE;gBACH,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACjD,OAAO,MAAM,CACX,IAAI,KAAK,CAAC,wCAAwC,CAAC,CACpD,CAAC;gBACJ,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC,CACF,CAAC;QACJ,CAAC,CAAC;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,aAAa,EAAE,OAAO,EAAE,CAAC;YACzB,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YACnD,aAAa,GAAG,SAAS,CAAC;YAC1B,SAAS,GAAG,SAAS,CAAC;YACtB,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACjC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CACpD,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9C,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/B,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,KAAK,UAAU,KAAK,CAClB,OAAwB,EACxB,QAAwB,EACxB,KAAc,EACd,SAAiB,EACjB,MAAmB,EACnB,SAAuC,EACvC,aAAkD,EAClD,IAAY,EACZ,YAAgC,EAChC,wBAAiC,EACjC,GAAW,EACX,SAAiB,EACjB,GAAoB;IAEpB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5D,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC3D,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YACrC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;SACtC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,EAAE,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QAC1E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;YACjD,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClB,EAAE,IAAI,EAAE;aACP,WAAW,EAAE,CAAC;QACjB,IAAI,WAAW,KAAK,kBAAkB;YACpC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,wCAAwC,EACxC,uBAAuB,EACvB,wBAAwB,CACzB,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,8BAA8B,EAC9B,cAAc,EACd,sBAAsB,CACvB,CAAC;QACJ,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa;YAC9B,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,0CAA0C,EAC1C,cAAc,EACd,sBAAsB,CACvB,CAAC;QACJ,MAAM,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE;YACzC,GAAG,EAAE,SAAS;YACd,GAAG;YACH,SAAS;YACT,MAAM;YACN,aAAa;YACb,IAAI;YACJ,YAAY;YACZ,wBAAwB;SACzB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,oCAAoC,EACpC,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,wBAAwB,CAC/B,OAAwB;IAExB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QACtC,OAAO,IAAI,SAAS,CAClB,GAAG,EACH,mDAAmD,EACnD,uBAAuB,EACvB,qBAAqB,EACrB,MAAM,CACP,CAAC;IACJ,6EAA6E;IAC7E,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;QACtC,OAAO,IAAI,SAAS,CAClB,GAAG,EACH,+CAA+C,EAC/C,uBAAuB,EACvB,uBAAuB,EACvB,QAAQ,CACT,CAAC;IACJ,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,IAAwB;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC;AAC/D,CAAC;AAED,+EAA+E;AAC/E,SAAS,iBAAiB;IACxB,OAAO,IAAI,SAAS,CAClB,GAAG,EACH,4BAA4B,EAC5B,uBAAuB,EACvB,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,YAAY,CACzB,OAAwB,EACxB,KAAa,EACb,MAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,KAAK;QAAE,MAAM,iBAAiB,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;YACpC,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAQ,EAAE;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5D,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE,CACzB,IAAI,CACF,IAAI,SAAS,CACX,GAAG,EACH,qCAAqC,EACrC,uBAAuB,EACvB,cAAc,CACf,CACF,CAAC;QACJ,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,qCAAqC,EACrC,uBAAuB,EACvB,cAAc,CACf,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "codex-openai-proxy",
+  "version": "0.1.0-rc.0",
+  "description": "A localhost-only OpenAI Chat Completions proxy for Codex app-server",
+  "license": "MIT",
+  "author": "John Chen",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/CIVITAS-John/codex-app-server-to-proxy.git"
+  },
+  "homepage": "https://github.com/CIVITAS-John/codex-app-server-to-proxy#readme",
+  "bugs": {
+    "url": "https://github.com/CIVITAS-John/codex-app-server-to-proxy/issues"
+  },
+  "keywords": [
+    "codex",
+    "openai",
+    "chat-completions",
+    "proxy",
+    "cli",
+    "app-server"
+  ],
+  "type": "module",
+  "bin": {
+    "codex-openai-proxy": "dist/bin.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "protocol/schemas",
+    "protocol/VERSION.json"
+  ],
+  "scripts": {
+    "build": "node scripts/clean-dist.mjs && tsc -p tsconfig.json",
+    "check": "npm run format:check && npm run lint && npm run check:protocol && npm test",
+    "check:protocol": "node scripts/check-protocol-clean.mjs",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "generate:protocol": "node scripts/generate-protocol.mjs",
+    "lint": "eslint .",
+    "prepack": "npm run build",
+    "serve": "node dist/bin.js serve",
+    "start": "npm run build && npm run serve",
+    "test": "npm run build --silent && npm run test:typecheck --silent && vitest run",
+    "test:package": "node scripts/package-smoke.mjs",
+    "test:live": "npm run build --silent && npm run test:typecheck --silent && vitest run --config vitest.live.config.js",
+    "test:typecheck": "tsc -p tsconfig.test.json",
+    "spike:offline": "node scripts/offline-spike.mjs"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.0.0",
+    "@types/node": "^20.19.43",
+    "@vitest/coverage-v8": "^4.1.10",
+    "eslint": "^9.0.0",
+    "fast-check": "^4.9.0",
+    "prettier": "^3.0.0",
+    "typescript": "^5.0.0",
+    "typescript-eslint": "^8.0.0",
+    "vitest": "^4.1.10"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@openai/codex": "0.144.5"
+  }
+}

package/protocol/VERSION.json

@@ -0,0 +1,10 @@
+{
+  "codexPackage": "@openai/codex",
+  "codexVersion": "0.144.5",
+  "versionSource": "package.json dependencies.@openai/codex",
+  "generatedAt": "2026-07-16",
+  "experimental": true,
+  "typescriptCommand": "@openai/codex app-server generate-ts --experimental --out protocol/generated/typescript",
+  "jsonSchemaCommand": "@openai/codex app-server generate-json-schema --experimental --out protocol/generated/json-schema",
+  "executableSource": "The exact @openai/codex runtime dependency owns the executable used for generation and default startup; --codex-path overrides must report the same version."
+}

package/protocol/schemas/response-mapping.schema.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-openai-proxy.invalid/response-mapping.schema.json",
+  "title": "Durable continuation store",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "records"],
+  "properties": {
+    "version": { "const": 0 },
+    "records": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/record" }
+    }
+  },
+  "$defs": {
+    "record": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["responseId", "threadId", "state", "model", "cwd", "toolsHash", "policyHash", "createdAt", "expiresAt"],
+      "properties": {
+        "responseId": { "type": "string", "minLength": 1 },
+        "threadId": { "type": "string", "minLength": 1 },
+        "state": { "enum": ["ready", "pending_tool", "expired", "superseded", "corrupt"] },
+        "model": { "type": "string", "minLength": 1 },
+        "cwd": { "type": "string", "minLength": 1 },
+        "toolsHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "policyHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "createdAt": { "type": "number" },
+        "expiresAt": { "type": "number" },
+        "callIds": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": { "type": "string" }
+        }
+      }
+    }
+  }
+}

package/protocol/schemas/x-codex.schema.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-openai-proxy.invalid/x-codex.schema.json",
+  "title": "x_codex request extension",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "cwd": { "type": "string", "minLength": 1 },
+    "sandbox": { "enum": ["read-only", "workspace-write", "danger-full-access"] },
+    "web_search": { "enum": ["disabled", "cached", "indexed", "live"] }
+  }
+}