2 KiB
CodexConnector Instructions
CodexConnector is the independent credential and transport boundary for Codex-compatible subscription inference. It is not an agent, scheduler, prompt owner, tool executor, decision store, or consumer runtime.
Keep one Cargo package and one production daemon entrypoint. Add another target only when an independent lifecycle or privilege invariant requires it.
The public daemon owns upstream client identity, authenticated caller admission,
bounded concurrency/replay, provider transport, typed events, and transport
receipts. A private pinned official codex app-server child is the sole
credential-store writer and refresh authority. The daemon may read its
credential only after their private auth RPC completes; it may never write or
repair the store. Consumers own native requests, provider lowering, prompts,
schemas, tool execution, retry between passes, interpretation, decisions, and
state admission.
Keep the feature boundary exact. --no-default-features is the contract-only
surface used where a Mind seals provider request bytes. The default client
surface adds only authenticated framing and socket transport. daemon adds the
service authorities. Contract-only consumers must not compile client crypto or
socket physiology by accident.
Do not link upstream Codex crates into this package. Idunn freezes the official Codex binary as an exact package input. The child receives auth RPC only, never consumer identity, prompts, tools, provider requests, or model output.
Use typed Rust contracts, CultCache state, CultNet transport, and CultMesh/Eve projection. JSON is permitted only at the upstream provider boundary or for published schemas. Never log credentials, prompts, model output, or decrypted request cargo.
Before broad compilation, name the exact package/target/profile, output root, current footprint, and retention decision. Focused library checks and tests are the default. Code and tests must buy consequential behavior; delete mirrors, wrappers, compatibility paths, and self-certifying status surfaces.