shieldcortex 3.2.3 → 3.3.1

package/dist/defence/trust/env-detector.d.ts

@@ -11,7 +11,7 @@
 import type { DefenceSource } from '../types.js';
 export interface EnvDetectionResult {
     source: DefenceSource;
-    method: 'env:CLAUDE_CODE_ENTRYPOINT' | 'env:CLAUDE_AGENT_CONTEXT' | 'env:SHIELDCORTEX_AGENT_SOURCE' | 'default';
+    method: 'env:CLAUDE_CODE_ENTRYPOINT' | 'env:CLAUDE_AGENT_CONTEXT' | 'env:CODEX_INTERNAL_ORIGINATOR_OVERRIDE' | 'env:CODEX_THREAD_ID' | 'env:SHIELDCORTEX_AGENT_SOURCE' | 'default';
     confidence: 'high' | 'medium' | 'low';
 }
 /**
@@ -21,8 +21,9 @@ export interface EnvDetectionResult {
  * 1. SHIELDCORTEX_AGENT_SOURCE — explicit override (e.g. "agent:user-spawned>task-1")
  * 2. CLAUDE_CODE_ENTRYPOINT=subagent — Claude Code sub-agent
  * 3. CLAUDE_AGENT_CONTEXT — generic agent context marker
- * 4. CLAUDE_CODE_ENTRYPOINT present (any value) — direct Claude Code CLI
- * 5. No recognised env vars → agent:unknown (trust ~0.3, treated as untrusted agent)
+ * 4. Codex origin / thread vars — Codex CLI or VS Code extension
+ * 5. CLAUDE_CODE_ENTRYPOINT present (any value) — direct Claude Code CLI
+ * 6. No recognised env vars → agent:unknown (trust ~0.3, treated as untrusted agent)
  */
 export declare function inferSourceFromEnvironment(): EnvDetectionResult;
 /**

package/dist/defence/trust/env-detector.js

@@ -15,8 +15,9 @@
  * 1. SHIELDCORTEX_AGENT_SOURCE — explicit override (e.g. "agent:user-spawned>task-1")
  * 2. CLAUDE_CODE_ENTRYPOINT=subagent — Claude Code sub-agent
  * 3. CLAUDE_AGENT_CONTEXT — generic agent context marker
- * 4. CLAUDE_CODE_ENTRYPOINT present (any value) — direct Claude Code CLI
- * 5. No recognised env vars → agent:unknown (trust ~0.3, treated as untrusted agent)
+ * 4. Codex origin / thread vars — Codex CLI or VS Code extension
+ * 5. CLAUDE_CODE_ENTRYPOINT present (any value) — direct Claude Code CLI
+ * 6. No recognised env vars → agent:unknown (trust ~0.3, treated as untrusted agent)
  */
 export function inferSourceFromEnvironment() {
     // 1. Explicit ShieldCortex source override (for integrators)
@@ -52,7 +53,24 @@ export function inferSourceFromEnvironment() {
             confidence: 'medium',
         };
     }
-    // 4. Direct Claude Code CLI (entrypoint present but not subagent)
+    // 4. Codex CLI / IDE extension
+    const codexOrigin = process.env.CODEX_INTERNAL_ORIGINATOR_OVERRIDE;
+    if (codexOrigin) {
+        const identifier = codexOrigin === 'codex_vscode' ? 'codex-vscode' : `codex:${codexOrigin}`;
+        return {
+            source: { type: 'cli', identifier },
+            method: 'env:CODEX_INTERNAL_ORIGINATOR_OVERRIDE',
+            confidence: 'high',
+        };
+    }
+    if (process.env.CODEX_THREAD_ID || process.env.CODEX_CI) {
+        return {
+            source: { type: 'cli', identifier: process.env.CODEX_THREAD_ID ? 'codex-cli' : 'codex-ci' },
+            method: 'env:CODEX_THREAD_ID',
+            confidence: 'medium',
+        };
+    }
+    // 5. Direct Claude Code CLI (entrypoint present but not subagent)
     if (process.env.CLAUDE_CODE_ENTRYPOINT) {
         return {
             source: { type: 'cli', identifier: 'mcp' },
@@ -60,7 +78,7 @@ export function inferSourceFromEnvironment() {
             confidence: 'high',
         };
     }
-    // 5. No recognised env vars — unknown caller (use 'agent' type for lower trust)
+    // 6. No recognised env vars — unknown caller (use 'agent' type for lower trust)
     return {
         source: { type: 'agent', identifier: 'unknown' },
         method: 'default',

package/dist/index.d.ts

@@ -39,6 +39,9 @@
  *   shieldcortex copilot install         # Configure MCP server for VS Code + Cursor
  *   shieldcortex copilot uninstall       # Remove MCP server configuration
  *   shieldcortex copilot status          # Check MCP server configuration
+ *   shieldcortex codex install           # Configure MCP server for Codex CLI + VS Code extension
+ *   shieldcortex codex uninstall         # Remove Codex MCP configuration
+ *   shieldcortex codex status            # Check Codex MCP configuration
  *   shieldcortex license activate <key>  # Activate a licence key
  *   shieldcortex license status          # Show current licence tier and features
  *   shieldcortex license deactivate      # Remove licence

package/dist/index.js

@@ -39,6 +39,9 @@
  *   shieldcortex copilot install         # Configure MCP server for VS Code + Cursor
  *   shieldcortex copilot uninstall       # Remove MCP server configuration
  *   shieldcortex copilot status          # Check MCP server configuration
+ *   shieldcortex codex install           # Configure MCP server for Codex CLI + VS Code extension
+ *   shieldcortex codex uninstall         # Remove Codex MCP configuration
+ *   shieldcortex codex status            # Check Codex MCP configuration
  *   shieldcortex license activate <key>  # Activate a licence key
  *   shieldcortex license status          # Show current licence tier and features
  *   shieldcortex license deactivate      # Remove licence
@@ -61,6 +64,7 @@ import { setupClaudeMd } from './setup/claude-md.js';
 import { handleHookCommand } from './setup/hooks.js';
 import { handleOpenClawCommand } from './setup/openclaw.js';
 import { handleCopilotCommand } from './setup/copilot.js';
+import { handleCodexCommand } from './setup/codex.js';
 import { createRequire } from 'module';
 import { execSync } from 'child_process';
 import { disposeModel, preloadModel } from './embeddings/index.js';
@@ -387,6 +391,7 @@ ${bold}COMMANDS${reset}
   ${cyan}uninstall${reset}             Remove ShieldCortex from your project
   ${cyan}openclaw${reset} <action>     Manage OpenClaw hook integration
   ${cyan}copilot${reset} <action>      Set up VS Code / Cursor MCP integration
+  ${cyan}codex${reset} <action>        Set up Codex CLI / VS Code MCP integration
   ${cyan}graph${reset} backfill        Backfill knowledge graph from memories
   ${cyan}hook${reset} <action>         Manage hooks (start, stop, status)
   ${cyan}service${reset} <action>      Manage background service
@@ -473,6 +478,11 @@ ${bold}DOCS${reset}
         await handleCopilotCommand(process.argv[3] || '');
         return;
     }
+    // Handle "codex" subcommand (Codex CLI + VS Code MCP setup)
+    if (process.argv[2] === 'codex') {
+        await handleCodexCommand(process.argv[3] || '');
+        return;
+    }
     // Handle "service" subcommand before normal mode parsing
     if (process.argv[2] === 'service') {
         await handleServiceCommand(process.argv[3] || '', process.argv.slice(4));
@@ -668,7 +678,7 @@ ${bold}DOCS${reset}
     // Guard: if an unknown subcommand was given, show help instead of silently starting MCP
     const knownCommands = new Set([
         'doctor', 'quickstart', 'setup', 'install', 'migrate', 'uninstall', 'hook',
-        'openclaw', 'clawdbot', 'copilot', 'service', 'config', 'status',
+        'openclaw', 'clawdbot', 'copilot', 'codex', 'service', 'config', 'status',
         'graph', 'license', 'licence', 'audit', 'iron-dome', 'scan', 'cloud',
         'scan-skill', 'scan-skills', 'dashboard', 'api', 'worker',
     ]);

package/dist/setup/codex.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Codex MCP installer.
+ *
+ * Configures ShieldCortex as an MCP server for Codex by updating
+ * ~/.codex/config.toml. Codex CLI and the Codex IDE extension share this
+ * configuration, so one install covers both on the same machine.
+ */
+export declare function installCodex(): Promise<void>;
+export declare function uninstallCodex(): Promise<void>;
+export declare function codexStatus(): Promise<void>;
+export declare function handleCodexCommand(subcommand: string): Promise<void>;

package/dist/setup/codex.js

@@ -0,0 +1,161 @@
+/**
+ * Codex MCP installer.
+ *
+ * Configures ShieldCortex as an MCP server for Codex by updating
+ * ~/.codex/config.toml. Codex CLI and the Codex IDE extension share this
+ * configuration, so one install covers both on the same machine.
+ */
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { fileURLToPath } from 'url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const SERVER_NAME = 'shieldcortex-memory';
+const MCP_ENTRY = path.resolve(__dirname, '..', 'index.js');
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function getCodexConfigPath() {
+    return path.join(os.homedir(), '.codex', 'config.toml');
+}
+function readConfig() {
+    const configPath = getCodexConfigPath();
+    if (!fs.existsSync(configPath))
+        return '';
+    return fs.readFileSync(configPath, 'utf-8');
+}
+function writeConfig(content) {
+    const configPath = getCodexConfigPath();
+    fs.mkdirSync(path.dirname(configPath), { recursive: true });
+    fs.writeFileSync(configPath, content.endsWith('\n') ? content : `${content}\n`, 'utf-8');
+}
+function escapeTomlString(value) {
+    return value.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+}
+function buildServerBlock() {
+    return [
+        `[mcp_servers.${SERVER_NAME}]`,
+        'command = "node"',
+        `args = ["${escapeTomlString(MCP_ENTRY)}"]`,
+        '',
+    ].join('\n');
+}
+function parseSections(content) {
+    const lines = content.split(/\r?\n/);
+    const sections = [];
+    let current = { header: null, lines: [] };
+    for (const line of lines) {
+        const headerMatch = line.match(/^\[([^\]]+)\]\s*$/);
+        if (headerMatch) {
+            sections.push(current);
+            current = { header: headerMatch[1], lines: [line] };
+            continue;
+        }
+        current.lines.push(line);
+    }
+    sections.push(current);
+    return sections;
+}
+function normalizeContent(content) {
+    const trimmed = content.replace(/\n{3,}/g, '\n\n').trimEnd();
+    return trimmed.length > 0 ? `${trimmed}\n` : '';
+}
+function hasServerBlock(content) {
+    return new RegExp(`^\\[mcp_servers\\.${escapeRegExp(SERVER_NAME)}\\]\\r?$`, 'm').test(content);
+}
+function upsertServerBlock(content) {
+    const block = buildServerBlock().trimEnd();
+    const sections = parseSections(content);
+    const output = [];
+    let insertionIndex = -1;
+    let found = false;
+    for (const section of sections) {
+        if (section.header === `mcp_servers.${SERVER_NAME}`) {
+            if (insertionIndex === -1)
+                insertionIndex = output.length;
+            found = true;
+            continue;
+        }
+        const rendered = section.lines.join('\n').trimEnd();
+        if (rendered.length > 0)
+            output.push(rendered);
+    }
+    if (insertionIndex === -1)
+        insertionIndex = output.length;
+    output.splice(insertionIndex, 0, block);
+    const normalized = normalizeContent(output.join('\n\n'));
+    if (found) {
+        return { content: normalized, changed: normalized !== content };
+    }
+    return { content: normalized, changed: normalized !== content };
+}
+function removeServerBlock(content) {
+    const sections = parseSections(content);
+    const filtered = sections.filter((section) => section.header !== `mcp_servers.${SERVER_NAME}`);
+    if (filtered.length === sections.length) {
+        return { content, changed: false };
+    }
+    const normalized = normalizeContent(filtered
+        .map((section) => section.lines.join('\n').trimEnd())
+        .filter(Boolean)
+        .join('\n\n'));
+    return { content: normalized, changed: true };
+}
+export async function installCodex() {
+    if (!fs.existsSync(MCP_ENTRY)) {
+        console.error('ShieldCortex MCP entry point not found. Package may be corrupted.');
+        console.error(`Expected: ${MCP_ENTRY}`);
+        process.exit(1);
+    }
+    const existing = readConfig();
+    const result = upsertServerBlock(existing);
+    writeConfig(result.content);
+    if (result.changed) {
+        console.log(`✓ Codex — configured ShieldCortex in ${getCodexConfigPath()}`);
+    }
+    else {
+        console.log('· Codex — already configured');
+    }
+    console.log();
+    console.log('This Codex config is shared by the Codex CLI and IDE extension.');
+    console.log('Restart Codex / VS Code if it was already open.');
+}
+export async function uninstallCodex() {
+    const existing = readConfig();
+    const result = removeServerBlock(existing);
+    if (!result.changed) {
+        console.log('ShieldCortex MCP server was not configured for Codex.');
+        return;
+    }
+    writeConfig(result.content);
+    console.log(`✓ Codex — removed ShieldCortex from ${getCodexConfigPath()}`);
+}
+export async function codexStatus() {
+    const content = readConfig();
+    console.log(`Codex config: ${getCodexConfigPath()}`);
+    console.log(`  Exists: ${content.length > 0 ? 'yes' : 'no'}`);
+    console.log(`  Configured: ${hasServerBlock(content) ? 'yes' : 'no'}`);
+    console.log(`  MCP entry: ${MCP_ENTRY}`);
+    console.log(`  Entry exists: ${fs.existsSync(MCP_ENTRY) ? 'yes' : 'no'}`);
+}
+export async function handleCodexCommand(subcommand) {
+    console.log();
+    switch (subcommand) {
+        case 'install':
+            await installCodex();
+            break;
+        case 'uninstall':
+            await uninstallCodex();
+            break;
+        case 'status':
+            await codexStatus();
+            break;
+        default:
+            console.log('Usage: shieldcortex codex <install|uninstall|status>');
+            console.log();
+            console.log('Configures ShieldCortex in ~/.codex/config.toml for Codex CLI');
+            console.log('and the Codex VS Code extension.');
+            process.exit(1);
+    }
+}

package/dist/setup/quickstart.js

@@ -11,6 +11,7 @@ import path from 'path';
 import { setupClaudeMd } from './claude-md.js';
 import { handleOpenClawCommand } from './openclaw.js';
 import { handleCopilotCommand } from './copilot.js';
+import { handleCodexCommand } from './codex.js';
 function detectEnvironment() {
     const home = os.homedir();
     const platform = process.platform;
@@ -18,6 +19,7 @@ function detectEnvironment() {
         fs.existsSync(path.join(home, '.claude.json'));
     const openclaw = fs.existsSync(path.join(home, '.openclaw'));
     const cursor = fs.existsSync(path.join(home, '.cursor'));
+    const codex = fs.existsSync(path.join(home, '.codex'));
     const vscodeDirs = platform === 'darwin'
         ? [
             path.join(home, 'Library', 'Application Support', 'Code', 'User'),
@@ -33,7 +35,7 @@ function detectEnvironment() {
                 path.join(home, '.config', 'Code - Insiders', 'User'),
             ];
     const copilot = cursor || vscodeDirs.some((dir) => fs.existsSync(dir));
-    return { claude, openclaw, copilot, cursor };
+    return { claude, openclaw, copilot, cursor, codex };
 }
 function printAutoGuide() {
     const env = detectEnvironment();
@@ -42,7 +44,7 @@ function printAutoGuide() {
     lines.push('ShieldCortex Quickstart');
     lines.push('────────────────────────────────────────────────────');
     lines.push('Goal: give your agent memory you can inspect and security you can trust.');
-    lines.push(`Detected: Claude=${env.claude ? 'yes' : 'no'} · OpenClaw=${env.openclaw ? 'yes' : 'no'} · Copilot/Cursor=${env.copilot ? 'yes' : 'no'}`);
+    lines.push(`Detected: Claude=${env.claude ? 'yes' : 'no'} · OpenClaw=${env.openclaw ? 'yes' : 'no'} · Codex=${env.codex ? 'yes' : 'no'} · Copilot/Cursor=${env.copilot ? 'yes' : 'no'}`);
     lines.push('');
     lines.push('Best paths:');
     lines.push('');
@@ -64,6 +66,12 @@ function printAutoGuide() {
         lines.push('  shieldcortex quickstart copilot');
         lines.push('');
     }
+    if (env.codex) {
+        lines.push('Codex CLI / VS Code');
+        lines.push('  Register ShieldCortex once for Codex MCP in the CLI and IDE extension:');
+        lines.push('  shieldcortex quickstart codex');
+        lines.push('');
+    }
     lines.push('Security-only');
     lines.push('  Scan prompts, tools, and environments without adopting memory first:');
     lines.push('  shieldcortex quickstart security');
@@ -72,6 +80,7 @@ function printAutoGuide() {
     lines.push('  shieldcortex setup');
     lines.push('  shieldcortex openclaw install');
     lines.push('  shieldcortex copilot install');
+    lines.push('  shieldcortex codex install');
     lines.push('  shieldcortex dashboard');
     lines.push('');
     console.log(lines.join('\n'));
@@ -105,11 +114,14 @@ export async function handleQuickstartCommand(target) {
         case 'copilot':
             await handleCopilotCommand('install');
             return;
+        case 'codex':
+            await handleCodexCommand('install');
+            return;
         case 'security':
             printSecurityGuide();
             return;
         default:
-            console.error('Usage: shieldcortex quickstart [claude|openclaw|copilot|security]');
+            console.error('Usage: shieldcortex quickstart [claude|openclaw|copilot|codex|security]');
             process.exit(1);
     }
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "shieldcortex",
-  "version": "3.2.3",
-  "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, OpenClaw, LangChain, and MCP agents.",
+  "version": "3.3.1",
+  "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -63,6 +63,8 @@
     "memory-decay",
     "context-persistence",
     "claude-code-memory",
+    "codex",
+    "codex-vscode",
     "claude-memory",
     "openclaw",
     "semantic-search",