CodexConnector

CodexConnector is a credential-isolated transport daemon for Codex-compatible subscription inference. Epiphany and Ghostlight remain separate minds. They derive their own exact provider requests, execute their own tools, interpret their own results, and admit their own state.

The connector owns one writable credential/refresh store, authenticated caller admission, bounded transport physiology, exact provider-request receipts, and redacted CultMesh health. It owns no prompt policy or decision authority.

The current source establishes the v2 typed contract before adding the daemon. This is deliberate: the existing Yggdrasil connector already proves the process seam, but its single-caller, fixed-model, stateless, no-tools wire law cannot become the shared contract by inertia.

Contract invariant

Each consumer internally derives an exact typed Codex provider request. The connector verifies and transports those exact bytes and returns a terminal receipt binding their SHA-256. A consumer-native request digest is carried for audit correlation; the connector does not interpret or rederive consumer-native cognition.

Tool calls are typed output. The connector never executes them.