manifest.json

{
  "version": 2,
  "sizeBudgetLines": 600,
  "generatedPaths": [
    "gui/dist"
  ],
  "absentPaths": [
    {
      "path": "docs/",
      "reason": "the root docs/ folder is retired; ops/docs-and-release.md documents where its material went and that no docs/ tree is tracked"
    },
    {
      "path": "go/",
      "reason": "the Go native-runtime experiment is retired; ops/docs-and-release.md documents that no go/ tree is tracked"
    }
  ],
  "tiers": [
    {
      "id": 1,
      "name": "Foundation",
      "purpose": "What opencodex is, what it owns on disk, and the invariants nothing may break."
    },
    {
      "id": 2,
      "name": "Configuration and catalog",
      "purpose": "Persisted config, the Codex home it writes into, and the model catalog it publishes."
    },
    {
      "id": 3,
      "name": "Data planes and transports",
      "purpose": "The wire surfaces a client actually talks to."
    },
    {
      "id": 4,
      "name": "Providers and adapters",
      "purpose": "Per-vendor contracts and the adapter authority that constructs them."
    },
    {
      "id": 5,
      "name": "Surfaces and clients",
      "purpose": "The dashboard, the management API, and third-party client config ownership."
    },
    {
      "id": 6,
      "name": "Operations and process",
      "purpose": "Background service, docs, release, and design discipline."
    }
  ],
  "docs": [
    {
      "path": "transports/timeouts.md",
      "tier": 3,
      "title": "Upstream Timeouts",
      "scope": "Local header and JSON body deadlines, cancellation and optional OpenCode timeout export.",
      "documents": [
        "src/stall-timeout.ts",
        "src/lib/abort.ts",
        "src/lib/local-upstream.ts",
        "src/lib/bounded-body.ts",
        "src/server/",
        "src/web-search/header-deadline.ts",
        "src/clients/config-export.ts",
        "src/config/schema/leaf-validators.ts",
        "src/types/config.ts"
      ]
    },
    {
      "path": "quota-snapshots.md",
      "tier": 4,
      "title": "Account Quota Snapshots",
      "scope": "Bounded write deferral and cancellation for Codex and provider account quota snapshots.",
      "documents": ["src/codex/quota.ts", "src/providers/account-quota-disk.ts"]
    },
    {
      "path": "providers/generic-account-pool.md",
      "tier": 4,
      "title": "Generic OAuth Account Pool",
      "scope": "Opt-in conversation ownership, request-local selection receipts and bounded release for generic OAuth pools.",
      "documents": ["src/oauth/", "src/server/", "src/types/"]
    },
    {
      "path": "overview.md",
      "tier": 1,
      "title": "Overview",
      "scope": "Product boundary, local state ownership, and the non-negotiable invariants index.",
      "documents": [
        "app/",
        "gui/",
        "src/companion/",
        "scripts/",
        "src/config.ts",
        "src/lib/"
      ]
    },
    {
      "path": "runtime.md",
      "tier": 1,
      "title": "Runtime",
      "scope": "Entrypoints, process lifecycle, CLI surface, and the Remote Hub, sideband, and request-compatibility contracts on that path.",
      "documents": [
        "bin/",
        "src/adapters/",
        "src/chat/",
        "src/claude/",
        "src/cli.ts",
        "src/cli/",
        "src/client/",
        "src/codex/",
        "src/combos/",
        "src/compatibility/",
        "src/config.ts",
        "src/config/",
        "src/generated/",
        "src/github/",
        "src/grok/",
        "src/images/",
        "src/index.ts",
        "src/lab/",
        "src/lib/",
        "src/oauth/",
        "src/providers/",
        "src/reasoning-effort.ts",
        "src/remote/",
        "src/responses/",
        "src/router.ts",
        "src/server/",
        "src/service.ts",
        "src/service/",
        "src/stall-timeout.ts",
        "src/storage/",
        "src/tray/",
        "src/types.ts",
        "src/update/",
        "src/usage/",
        "src/vision/",
        "src/web-search/",
        "src/config/persisted-mutation.ts"
      ]
    },
    {
      "path": "config-ownership.md",
      "tier": 4,
      "title": "Config Ownership Manifest",
      "scope": "Owner marker, uninstall manifest, its cross-process lock, and the uninstall tombstone.",
      "documents": ["src/lib/config-ownership.ts", "src/lib/config-ownership-removal.ts"]
    },
    {
      "path": "config.md",
      "tier": 2,
      "title": "Config Surface",
      "scope": "Persisted config schema, both injection forms, provider validation, and restore.",
      "documents": [
        "src/cli/",
        "src/codex/",
        "src/config.ts",
        "src/config/",
        "src/types.ts",
        "src/types/config.ts"
      ]
    },
    {
      "path": "codex-provider-routing.md",
      "tier": 2,
      "title": "Custom Codex Provider Routing",
      "scope": "Explicit provider-ID routing consent, URL-only publication and recovery.",
      "documents": ["src/codex/provider-routing.ts", "src/cli/codex-provider.ts"]
    },
    {
      "path": "codex-home.md",
      "tier": 2,
      "title": "Codex Home",
      "scope": "CODEX_HOME resolution, the files opencodex manages there, and Codex-home diagnostics.",
      "documents": [
        "src/codex/"
      ]
    },
    {
      "path": "codex-prompts.md",
      "tier": 2,
      "title": "Codex Prompts",
      "scope": "Prompt-layer repair, base import previews and bounded text-probe sources.",
      "documents": [
        "src/codex/",
        "src/server/"
      ]
    },
    {
      "path": "remote-messaging.md",
      "tier": 3,
      "title": "Remote Codex Messaging",
      "scope": "Explicit peer enrollment, connection-bound capabilities, bounded foreground SSH ownership and queued remote replies.",
      "documents": ["src/messaging/", "src/cli/", "src/link/"]
    },
    {
      "path": "local-messaging.md",
      "tier": 3,
      "title": "Local Codex Messaging",
      "scope": "Loaded-session Unix messaging and opt-in stored-queue MCP tools, explicit final-turn reads, receipts and owned helper bounds.",
      "documents": [
        "src/messaging/",
        "src/cli/"
      ]
    },
    {
      "path": "codex-cli-update.md",
      "tier": 2,
      "title": "Codex CLI Update",
      "scope": "Content-bound planning and explicit POSIX/Windows x64 apply with isolated npm, artifact validation, installation leases and readback.",
      "documents": [
        "src/codex/cli-update-plan.ts",
        "src/codex/windows-cli-child.ts",
        "src/codex/windows-cli-child-native.ts",
        "src/codex/windows-cli-child-pipe.ts",
        "src/codex/cli-update-apply.ts",
        "src/codex/cli-update-windows-apply.ts",
        "src/codex/cli-update-windows-observation.ts",
        "src/codex/cli-windows-plan-provenance.ts",
        "src/codex/windows-installation-files.ts",
        "src/codex/windows-npm-execution.ts",
        "src/lib/windows-owner-acl.ts",
        "src/codex/cli-update-job.ts",
        "src/codex/cli-update-job-execution.ts",
        "src/codex/cli-update-job-store-windows.ts",
        "src/codex/cli-update-job-worker.ts",
        "src/codex/cli-update-selection-gate.ts",
        "src/codex/shim.ts",
        "src/codex/cli-update-recovery.ts",
        "src/codex/cli-update-worker-recovery.ts",
        "src/codex/windows-cli-recovery.ts",
        "src/codex/windows-cli-recovery-guardian.ts",
        "src/codex/cli-update-worker.ts",
        "src/server/management/codex-cli-update-routes.ts",
        "src/codex/cli-update-inspection-context.ts",
        "bin/ocx.mjs",
        "src/codex/cli-update-artifacts.ts",
        "src/codex/cli-update-windows-layout.ts",
        "src/codex/cli-update-windows-paths.ts",
        "src/codex/cli-update-files.ts",
        "src/codex/cli-update-lease.ts",
        "src/codex/app-server-processes.ts",
        "src/cli/codex-cli-update.ts"
      ]
    },
    {
      "path": "catalog.md",
      "tier": 2,
      "title": "Model Catalog",
      "scope": "Shared Codex catalog assembly, account namespaces, pool rotation, and effort ladders.",
      "documents": [
        "src/codex/",
        "src/routing/",
        "src/server/"
      ]
    },
    {
      "path": "catalog-vendor-context.md",
      "tier": 2,
      "title": "Custom-provider context estimates",
      "scope": "Bundled model-ID window fallback, ambiguity handling, and inferred-capacity provenance.",
      "documents": [
        "src/codex/catalog/vendor-context.ts",
        "src/codex/catalog/model-hints.ts",
        "src/codex/catalog/parsing.ts",
        "src/codex/catalog/routed-gather.ts",
        "src/codex/catalog/effort.ts"
      ]
    },
    {
      "path": "catalog-effort-clamp.md",
      "tier": 2,
      "title": "Effort-clamp observations",
      "scope": "Persisted effort-clamp observation identity and idempotent sync notices.",
      "documents": ["src/codex/runtime.ts", "src/codex/catalog/effort.ts"]
    },
    {
      "path": "catalog-routed-ownership.md",
      "tier": 2,
      "title": "Routed-row authorship",
      "scope": "Generated routed-row ownership signals and combo catalog description overrides.",
      "documents": ["src/codex/catalog/ownership.ts"]
    },
    {
      "path": "subagents.md",
      "tier": 2,
      "title": "Subagents And Multi-Agent Surface",
      "scope": "Multi-agent surface mode and subagent roster ordering.",
      "documents": [
        "src/codex/",
        "src/providers/",
        "src/server/"
      ]
    },
    {
      "path": "subagent-capacity.md",
      "tier": 2,
      "title": "Subagent Surface And Capacity",
      "scope": "Surface mode, hybrid global flag, concurrent child limits and canonical Codex setting ownership.",
      "documents": [
        "src/codex/"
      ]
    },
    {
      "path": "advisor.md",
      "tier": 2,
      "title": "Advisor Sidecar",
      "scope": "The optional expert consultation sidecar: manual/preflight/adaptive policies, evidence, durable task allowance, metadata activity, and loopback routing.",
      "documents": [
        "src/advisor/",
        "src/server/responses/advisor-slot.ts",
        "src/server/responses/advisor-plan-slot.ts",
        "src/server/advisor-admission-scope.ts",
        "src/server/capture-admission-policy.ts",
        "src/types/admission-policy.ts",
        "src/server/inference/advisor-diagnostics.ts",
        "src/lib/advisor-activation.ts"
      ]
    },
    {
      "path": "transports/byte-accounting.md",
      "tier": 3,
      "title": "Byte Accounting",
      "scope": "Request-copy and stream-buffer byte accounting shared by parsing, SSE rewriting, the adapters, and the translator budget, plus durable spill admission.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/lib/",
        "src/server/",
        "src/responses/"
      ]
    },
    {
      "path": "transports/anthropic-thinking-recovery.md",
      "tier": 3,
      "title": "Anthropic Thinking-Signature Recovery",
      "scope": "One-shot exact signature-binding recovery before output, and successful-retry memo boundaries.",
      "documents": [
        "src/server/responses/anthropic-thinking-recovery.ts",
        "src/adapters/anthropic-rejection-memo.ts",
        "src/adapters/anthropic-replay.ts",
        "src/adapters/anthropic-tool-catalog.ts",
        "src/responses/reasoning-replay-cache.ts"
      ]
    },
    {
      "path": "transports/response-turn-membership.md",
      "tier": 3,
      "title": "Structural Response Turn Membership",
      "scope": "Embedding-owned signing material, dedicated authenticated caller/own-thread scope and pre-parser structural normalization.",
      "documents": [
        "src/responses/turn-membership.ts",
        "src/server/responses/turn-membership.ts",
        "src/bridge/sse.ts",
        "src/server/responses/adapter-delivery.ts",
        "src/server/responses/adapter-dispatch.ts",
        "src/server/responses/request-transport.ts",
        "src/server/auth-cors.ts",
        "src/server/responses/request-prepare.ts"
      ]
    },
    {
      "path": "transports/response-citations.md",
      "tier": 3,
      "title": "Response Citation Projection",
      "scope": "OpenAI-operated outbound citation repair and generated JSON/SSE annotation titles.",
      "documents": ["src/adapters/openai-responses/", "src/bridge/"]
    },
    {
      "path": "transports/max-output-completion.md",
      "tier": 3,
      "title": "Opt-in Responses Text Completion",
      "scope": "Default-off translated Responses text-only token-limit completion and exclusions.",
      "documents": [
        "src/bridge/max-output-completion.ts",
          "src/bridge/sse.ts",
          "src/bridge/response-json.ts",
        "src/config/schema/config-schema.ts",
        "src/types/config.ts",
        "src/server/responses/adapter-delivery.ts",
        "src/server/responses/run-turn-execution.ts"
      ]
    },
    {
      "path": "transports/responses.md",
      "tier": 3,
      "title": "Responses Transport",
      "scope": "The Responses HTTP/SSE endpoint, dispatch, credential and upload boundaries, and core module ownership.",
      "documents": [
        "src/bridge.ts",
        "src/bridge/",
        "src/responses/",
        "src/server/"
      ]
    },
    {
      "path": "transports/native-reasoning-retention.md",
      "tier": 3,
      "title": "Native Reasoning Retention",
      "scope": "Optional native reasoning ciphertext forwarding on model/account switches, configuration and management controls.",
      "documents": [
        "src/config/",
        "src/types/",
        "src/responses/",
        "src/server/",
        "src/adapters/",
        "gui/"
      ]
    },
    {
      "path": "transports/responses-citations.md",
      "tier": 3,
      "title": "Replayed URL Citations",
      "scope": "Destination-gated citation repair for ordinary Responses and every native compact send.",
      "documents": [
        "src/adapters/openai-responses/request-strips.ts",
        "src/adapters/openai-responses/passthrough.ts",
        "src/server/responses/compact.ts"
      ]
    },
    {
      "path": "transports/responses-wire-shapes.md",
      "tier": 3,
      "title": "Responses Wire Shapes",
      "scope": "Mixed-wire model defaults, xAI agent-message continuation, declared-tool membership, and passthrough SSE stream shapes.",
      "documents": [
        "src/adapters/",
        "src/bridge/",
        "src/lib/",
        "src/responses/",
        "src/server/"
      ]
    },
    {
      "path": "transports/responses-failover.md",
      "tier": 3,
      "title": "Responses Failover And Replay",
      "scope": "Upstream reset retry, the ambiguous-resend gate, combo failover and commit boundaries, compaction routing, and output headroom.",
      "documents": [
        "src/lib/",
        "src/server/",
        "src/codex/"
      ]
    },
    {
      "path": "transports/responses-combo-boundaries.md",
      "tier": 3,
      "title": "Combo Streaming Boundaries",
      "scope": "Combo preflight output commitment, turn lease lifetime, and bounded hop warnings. Original client labels on terminal envelopes and failed-turn request identities.",
      "documents": [
        "src/server/"
      ]
    },
    {
      "path": "transports/policy-fallback.md",
      "tier": 3,
      "title": "Policy Candidate Fallback",
      "scope": "Original policy authorization, concrete candidate retries and physical destination deduplication.",
      "documents": [
        "src/server/"
      ]
    },
    {
      "path": "transports/responses-spend.md",
      "tier": 3,
      "title": "Responses Spend Reservations",
      "scope": "Credential-hop and durable spend reservations, and what a spent budget tells the client.",
      "documents": [
        "src/lib/"
      ]
    },
    {
      "path": "transports/streaming-health.md",
      "tier": 3,
      "title": "Streaming Health And WebSocket",
      "scope": "Heartbeat and stall deadlines, plus the opt-in WebSocket transport.",
      "documents": [
        "src/server/"
      ]
    },
    {
      "path": "transports/inventory.md",
      "tier": 3,
      "title": "Transport Inventory",
      "scope": "The per-provider transport table and diagnostic outbound safety.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/images/",
        "src/lib/",
        "src/oauth/",
        "src/providers/",
        "src/server/"
      ]
    },
    {
      "path": "data-planes/images.md",
      "tier": 3,
      "title": "Images Data Plane",
      "scope": "Standalone image generation/edit relay and local hosted Responses image display.",
      "documents": [
        "src/server/"
      ]
    },
    {
      "path": "data-planes/search.md",
      "tier": 3,
      "title": "Search Data Plane",
      "scope": "Hosted search relay and exact account selectors.",
      "documents": []
    },
    {
      "path": "data-planes/inbound-compat.md",
      "tier": 3,
      "title": "Inbound Compatibility Surfaces",
      "scope": "Chat Completions inbound, Anthropic-shaped clients, and JSON-upstream streaming clients.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/server/"
      ]
    },
    {
      "path": "data-planes/claude-tool-loading.md",
      "tier": 3,
      "title": "Append-only Claude Tool Loading",
      "scope": "Physical-adapter tool-loading projection, preserved catalogs, fallback exclusions and opt-in prerequisites.",
      "documents": ["src/claude/", "src/server/responses/"]
    },
    {
      "path": "data-planes/ollama-inbound.md",
      "tier": 3,
      "title": "Ollama-Compatible Inbound",
      "scope": "Ollama-shaped version/tags/show/chat/generate routes translated onto Chat Completions, their admission, native error shape and final request-log ownership.",
      "documents": [
        "src/server/ollama-inbound.ts",
        "src/server/ollama-native-paths.ts",
        "src/server/ollama-route-policy.ts",
        "src/server/native-final-log.ts",
        "src/server/admitted-http-turn.ts",
        "src/server/index/ollama-routes.ts",
        "src/protocols/codecs/ollama.ts"
      ]
    },
    {
      "path": "data-planes/error-detail.md",
      "tier": 3,
      "title": "Proxy-Owned Error Detail",
      "scope": "Closed error codes, upstream condition classification, numeric quota reset, closed failure detail, service tier and model identity bounds on request-log rows; response metadata header normalization and the client Retry-After format. Chat client error envelopes, literal tables, proxy-authored message provenance, collector verdicts and internal evidence channels; fixed undeclared-tool refusals, producer-owned incomplete-event origins and constructor-bounded destination labels, branded original client selectors, bounded combo exclusions and fixed retry-evidence diagnostics. Original model labels on synthetic terminal envelopes and compact/Messages ingress handoffs. Messages error envelopes, construction-registered fixed local-refusal guidance, sliced outcome comparisons and baseline client recovery outcomes across special codes and catch returns, non-2xx passthrough envelopes and unchanged 2xx passthrough bodies and original collector evidence and error-event identity, overflow/native-stream golden parity and normalized Anthropic response headers with full-fraction reset dates and success media types.",
      "documents": [
        "src/usage/error-detail.ts",
        "src/lib/upstream-condition.ts",
        "src/lib/client-retry-after.ts",
        "src/lib/failure-detail.ts",
        "src/lib/upstream-validation-detail.ts",
        "src/lib/response-service-tier.ts",
        "src/lib/model-identity.ts",
        "src/server/safe-response-headers.ts",
        "src/server/request-log-failure-detail.ts",
        "src/lib/client-error-body.ts",
        "src/lib/error-destination.ts",
        "src/combos/resolve.ts",
        "src/lib/upstream-retry.ts",
        "src/server/admission-model-scope.ts",
        "src/server/responses/input-admission.ts",
        "src/oauth/generic-account-failover.ts",
        "src/chat/failure-verdict.ts",
        "src/lib/messages-error-body.ts",
        "src/claude/failure-verdict.ts",
        "src/server/anthropic-rate-limit-headers.ts",
        "src/server/messages-response-headers.ts",
        "src/server/index/startup-warnings.ts",
        "src/server/claude-messages.ts",
        "src/server/messages-native.ts",
        "src/claude/outbound.ts",
        "src/protocols/encoders/messages.ts",
        "src/protocols/encoders/adapter-events.ts",
        "src/lib/messages-sse-error-presentation.ts",
        "src/server/messages-sse-error-filter.ts",
        "src/server/messages-native-tool-guard.ts",
        "src/server/messages-shared.ts",
        "src/server/sse-payload-rewrite.ts"
      ]
    },
    {
      "path": "data-planes/chat-reasoning-details.md",
      "tier": 3,
      "title": "Anthropic Thinking Signatures on the Chat Wire",
      "scope": "The reasoning_details carrier that lets Chat Completions clients round-trip signed Anthropic thinking across tool steps (#7429).",
      "documents": [
        "src/chat/reasoning-details.ts"
      ]
    },
    {
      "path": "data-planes/protocol-paths.md",
      "tier": 3,
      "title": "Protocol Paths",
      "scope": "Shared protocol vocabulary, declared feature dispositions, the ingress-by-upstream baseline, plan/trace shapes, and protocol settings.",
      "documents": [
        "src/protocols/"
      ]
    },
    {
      "path": "providers/anthropic-progress.md",
      "tier": 4,
      "title": "Anthropic progress updates",
      "scope": "Opus 5.5 progress display, visible commentary, and exact signed-block replay.",
      "documents": ["src/adapters/", "src/bridge/", "src/responses/", "src/claude/", "src/types/", "src/server/", "src/web-search/", "src/images/"]
    },
    {
      "path": "providers/anthropic-account-thresholds.md",
      "tier": 4,
      "title": "Anthropic Account Thresholds",
      "scope": "Account-owned usage thresholds, inheritance, routing boundaries and durable policy changes.",
      "documents": [
        "src/oauth/"
      ]
    },
    {
      "path": "providers/meta-muse.md",
      "tier": 4,
      "title": "Meta Muse Login",
      "scope": "CLI credential import, approval lifecycle, explicit recovery, account-free login diagnostics and the runtime plan-refusal classification.",
      "documents": ["src/oauth/meta-muse.ts", "src/oauth/meta-muse-keychain.ts", "src/oauth/meta-muse-errors.ts", "src/oauth/login-cli.ts", "src/providers/meta-muse-plan-refusal.ts"]
    },
    {
      "path": "providers/oauth-reconciliation.md",
      "tier": 4,
      "title": "OAuth Preset Reconciliation",
      "scope": "Operator limits and per-model declarations across startup reconciliation and OAuth upsert.",
      "documents": ["src/oauth/"]
    },
    {
      "path": "providers/antigravity-account-import.md",
      "tier": 4,
      "title": "Antigravity Account Import",
      "scope": "Cockpit Tools import schema, identity check, probe-gated project_id fallback and no-write failure paths.",
      "documents": ["src/oauth/"]
    },
    {
      "path": "providers/claude-cli-replay.md",
      "tier": 4,
      "title": "Claude CLI Replay",
      "scope": "Claude CLI stable replay, canonical tool schemas, capture-only client tool ownership and subscription usage admission.",
      "documents": ["src/adapters/"]
    },
    {
      "path": "providers-and-adapters.md",
      "tier": 4,
      "title": "Providers And Adapters",
      "scope": "Provider and adapter selection, the adapter inventory, live model discovery, and the hosted-search continuation bridge.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/combos/",
        "src/lib/tool-argument-integers.ts",
        "src/oauth/",
        "src/providers/",
        "src/responses/",
        "src/server/",
        "src/types/",
        "src/web-search/"
      ]
    },
    {
      "path": "providers/opengateway.md",
      "tier": 4,
      "title": "OpenGateway",
      "scope": "Preset discovery, paired Responses tool-result projection and bounded empty-completion recovery.",
      "documents": [
        "src/adapters/openai-responses/opengateway-input.ts",
        "src/adapters/openai-responses/passthrough.ts",
        "src/server/responses/opengateway-completion-guard.ts",
        "src/server/responses/passthrough-completion.ts",
        "src/server/responses/passthrough-dispatch.ts",
        "src/codex/catalog/routed-gather.ts"
      ]
    },
    {
      "path": "providers/jev-decision.md",
      "tier": 4,
      "title": "JEV Decision Routing",
      "scope": "JEV Combo decision methods (TypeSafe, self-hosted System One rows, opencodex models), the decision request path, dashboard surfaces, and the content-free statistics projection.",
      "documents": [
        "src/combos/",
        "src/server/",
        "src/usage/",
        "src/lib/decision-quota-sink.ts",
        "src/providers/antigravity-quota-identity.ts",
        "src/providers/quota-decision-antigravity.ts",
        "src/providers/quota-decision-snapshot.ts",
        "src/providers/quota-decision-publication.ts"
      ]
    },
    {
      "path": "providers/anthropic-key-billing.md",
      "tier": 4,
      "title": "Anthropic API-key Billing Recovery",
      "scope": "Exact billing refusal evidence, immutable physical credential ownership, pacing provenance and bounded pre-output key recovery.",
      "documents": [
        "src/providers/anthropic-billing-refusal.ts",
        "src/providers/anthropic-billing-ownership.ts",
        "src/providers/anthropic-billing-recovery.ts",
        "src/providers/request-pacing.ts"
      ]
    },
    {
      "path": "providers/workbuddy.md",
      "tier": 4,
      "title": "WorkBuddy AI Subscription",
      "scope": "Browser login, account-bound refresh and catalogs, fixed-origin Chat transport, tool continuity and display-only credit balances.",
      "documents": [
        "src/oauth/workbuddy.ts",
        "src/providers/workbuddy.ts",
        "src/providers/workbuddy-models.ts",
        "src/providers/workbuddy-credit-balance.ts",
        "src/providers/quota/workbuddy.ts",
        "src/adapters/workbuddy.ts",
        "src/adapters/workbuddy-schema.ts"
      ]
    },
    {
      "path": "providers/dsh-account.md",
      "tier": 4,
      "title": "DeepSeek Harness Account Provider",
      "scope": "Explicit read-only DSH credential import, verified account identity, disabled refresh, pinned inference and probe destinations, and authoritative-empty quota.",
      "documents": [
        "src/oauth/dsh.ts",
        "src/adapters/dsh-account.ts",
        "src/providers/dsh-account-destination.ts",
        "src/providers/quota/dsh-account.ts"
      ]
    },
    {
      "path": "providers/anthropic-account-pool.md",
      "tier": 4,
      "title": "Anthropic Account Pool",
      "scope": "Anthropic OAuth instances (primary and Pool 2), account pause, model routes, quota labels, and pool-bound helpers, quota, reset grants and management surfaces.",
      "documents": [
        "src/oauth/",
        "src/providers/",
        "src/providers/quota/anthropic-account-quota.ts",
        "src/server/management/anthropic-pool-settings.ts",
        "src/sidecar/anthropic-binding.ts"
      ]
    },
    {
      "path": "providers/oauth-code-display-login.md",
      "tier": 4,
      "title": "OAuth Code-Display Login",
      "scope": "Headless code-display OAuth login: flow ownership, expiry, unsupported providers, single-operator store.",
      "documents": ["src/oauth/", "src/server/management/"]
    },
    {
      "path": "providers/openai-tiers.md",
      "tier": 4,
      "title": "OpenAI Provider Account Modes",
      "scope": "Pool/Direct account modes, API-key separation, and the public provider and quota contract.",
      "documents": [
        "src/codex/",
        "src/providers/codex-capacity.ts"
      ]
    },
    {
      "path": "providers/codex-pool-affinity.md",
      "tier": 4,
      "title": "Durable Codex Pool Affinity",
      "scope": "Restart persistence of Codex pool pins and conversation-state issuers: store, fences, single-writer lease, fail-closed recovery.",
      "documents": [
        "src/codex/routing/thread-affinity-store.ts",
        "src/codex/routing/thread-affinity.ts",
        "src/lib/config-ownership.ts"
      ]
    },
    {
      "path": "providers/pool-credit-renewal.md",
      "tier": 4,
      "title": "Pool credit renewal",
      "scope": "Independent credit-evidence renewal for opted-in exhausted Codex pool accounts.",
      "documents": ["src/codex/auth-api/pool-mode-gate.ts"]
    },
    {
      "path": "providers/codex-installation-identity.md",
      "tier": 3,
      "title": "Codex Installation Identity",
      "scope": "Per-account Pool wire installation identity, private secret, existence gates and fail-closed delivery.",
        "documents": ["src/codex/installation-id.ts", "src/codex/auth-context.ts", "src/codex/auth-context-provider.ts", "src/codex/forward-transport-headers.ts", "src/adapters/openai-responses/transport.ts", "src/adapters/openai-responses/passthrough.ts", "src/server/ws-bridge.ts", "src/server/responses/codex-ws-request.ts", "src/server/responses/codex-ws-pool.ts", "src/server/responses/compact.ts", "src/server/responses/passthrough-build-error.ts", "src/server/context-history.ts", "src/server/search.ts", "src/server/images.ts", "src/server/live.ts", "src/server/audio-live.ts", "src/server/audio-dictation.ts", "src/server/index/serve-options.ts", "src/server/index/websocket-handler.ts", "src/server/index/live-sideband.ts", "src/server/claude-messages.ts", "src/codex/affinity-debug.ts"]
    },
    {
      "path": "providers/codex-request-owned-affinity.md",
      "tier": 3,
      "title": "Codex Request-Owned Affinity",
      "scope": "Opt-in conversation affinity for a caller's own ChatGPT bearer in Pool mode, honest selection-time affinity labels, and the persistence exclusion contract.",
      "documents": ["src/codex/request-owned-affinity.ts", "src/codex/request-owned-main-pin.ts", "src/codex/auth-context.ts"]
    },
    {
      "path": "providers/openai-accounts.md",
      "tier": 4,
      "title": "OpenAI Account Identity And Pool Operations",
      "scope": "Migration and restore, wire identity, store concurrency, pool ordering and exclusions, quota observations, and account-bound retention.",
      "documents": [
        "src/codex/",
        "src/config.ts"
      ]
    },
    {
      "path": "providers/codex-round-robin-placement.md",
      "tier": 4,
      "title": "Codex Round-Robin Placement",
      "scope": "Round-robin new-conversation placement preferring accounts under their effective auto-switch threshold, with all-over fallback and bound, failover and lineage boundaries.",
      "documents": ["src/codex/routing/selection.ts"]
    },
    {
      "path": "providers/openai-signed-in-preservation.md",
      "tier": 4,
      "title": "Preserve Signed-In Codex Quota",
      "scope": "Opt-in effective priority bands that spend other pool accounts before the signed-in identity, its identity observation and management API.",
      "documents": ["src/codex/account-preservation.ts", "src/codex/signed-in-identity.ts", "src/codex/auth-api/account-preservation.ts", "src/cli/account-preservation.ts"]
    },
    {
      "path": "providers/cursor.md",
      "tier": 4,
      "title": "Cursor Provider",
      "scope": "Cursor native exec, parameterized models, checkpoints, and active-context usage.",
      "documents": [
        "src/adapters/"
      ]
    },
    {
      "path": "providers/google.md",
      "tier": 4,
      "title": "Google Provider",
      "scope": "Gemini thought-text, response parts, thought-signature replay, and adjacency repair.",
      "documents": []
    },
    {
      "path": "providers/kiro.md",
      "tier": 4,
      "title": "Kiro Provider",
      "scope": "Kiro parallel-tool hints, Responses text controls, structured-output emulation, and reasoning round-trip.",
      "documents": [
        "src/adapters/kiro/",
        "src/responses/"
      ]
    },
    {
      "path": "providers/xai-grok.md",
      "tier": 4,
      "title": "xAI Grok Provider",
      "scope": "Grok Build contract parity and hardening.",
      "documents": [
        "src/oauth/",
        "src/providers/",
        "src/responses/",
        "src/server/"
      ]
    },
    {
      "path": "providers/lm-studio-chat.md",
      "tier": 4,
      "title": "LM Studio Chat instructions",
      "scope": "Preset-scoped single-leading-system normalization, configuration and editor policy.",
      "documents": ["src/adapters/openai-chat/", "src/providers/", "src/config/", "src/types/", "src/server/management/", "src/server/auth-cors.ts"]
    },
    {
      "path": "providers/mistral-chat.md",
      "tier": 4,
      "title": "Canonical Mistral Chat Wire Policy",
      "scope": "Canonical Mistral request-field projection, native effort clamping and typed-content normalization.",
      "documents": ["src/adapters/openai-chat/destination-policy.ts", "src/adapters/openai-chat/native-content.ts"]
    },
    {
      "path": "providers/chat-compat.md",
      "tier": 4,
      "title": "Chat Provider Compatibility",
      "scope": "Cross-vendor Chat Completions behavior: reasoning, tool results, structured output, parallel tools.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/responses/"
      ]
    },
    {
      "path": "providers/completed-tool-blocks.md",
      "tier": 4,
      "title": "Negotiated Completed Tool Blocks",
      "scope": "Explicit response-only block completion, ordered safe-call delivery and terminal ownership.",
      "documents": ["src/adapters/base.ts", "src/adapters/unique-tool-call-ids.ts", "src/adapters/openai-chat.ts", "src/adapters/openai-chat/completed-tool-blocks.ts", "src/adapters/openai-chat/serialized-tool-call-content.ts"]
    },
    {
      "path": "providers/mimo-bare-calls.md",
      "tier": 4,
      "title": "MiMo Bare Tool Calls",
      "scope": "Standalone MiMo bare-block recovery into declared freeform calls, separate from identified-wrapper reconciliation.",
      "documents": ["src/adapters/openai-chat/", "src/adapters/openai-chat.ts"]
    },
    {
      "path": "providers/chat-required-tool-results.md",
      "tier": 4,
      "title": "Mandatory Translated Chat Tool Results",
      "scope": "Translated Chat terminal guard that fails a clean completion missing a mandatory client tool call.",
      "documents": ["src/adapters/openai-chat/required-tool-result.ts"]
    },
    {
      "path": "adapters/registry.md",
      "tier": 4,
      "title": "Adapter Registry Authority",
      "scope": "The single adapter construction authority and contract inheritance.",
      "documents": [
        "src/adapters/",
        "src/server/"
      ]
    },
    {
      "path": "adapters/compatibility-contracts.md",
      "tier": 4,
      "title": "Compatibility Contracts",
      "scope": "Versioned provider compatibility claims and fixture-evidence boundaries.",
      "documents": [
        "src/compatibility/"
      ]
    },
    {
      "path": "adapters/compatibility-lab.md",
      "tier": 4,
      "title": "Compatibility Lab",
      "scope": "Optional Lab evidence, automation, and its core-runtime isolation boundary.",
      "documents": [
        "src/lab/",
        "src/server/index.ts"
      ]
    },
    {
      "path": "cli-management.md",
      "tier": 5,
      "title": "CLI management and discovery",
      "scope": "Terminal help and capability metadata, management-client output and the generated operating reference.",
      "documents": [
        "src/cli/",
        "src/providers/cc-switch-import-bytes.ts",
        "src/providers/cc-switch-import-source.ts",
        "src/providers/cc-switch-import.ts",
        "scripts/generate-ocx-skill-surface.ts",
        "skills/ocx/"
      ]
    },
    {
      "path": "gui-and-management-api.md",
      "tier": 5,
      "title": "GUI And Management API",
      "scope": "Dashboard serving, authentication boundaries, /api/* ownership, and startup safety.",
      "documents": [
        "gui/",
        "src/companion/",
        "src/codex/",
        "src/lib/",
        "src/server/",
        "src/usage/",
        "src/usage/timeline.ts",
        "src/vision/"
      ]
    },
    {
      "path": "provider-completion-diagnostic.md",
      "tier": 5,
      "title": "Provider Completion Diagnostic",
      "scope": "Explicit single-model completion test: consent, applicability gate, send-time authority fingerprint, bounded streaming and metadata comparison.",
      "documents": [
        "gui/",
        "src/cli/",
        "src/server/"
      ]
    },
    {
      "path": "dashboard-and-usage.md",
      "tier": 5,
      "title": "Dashboard Surfaces And Usage",
      "scope": "Dashboard page contracts, usage accounting and request metrics, and per-surface management settings.",
      "documents": [
        "gui/",
        "src/codex/",
        "src/lib/",
        "src/quota/",
        "src/routing/history/",
        "src/server/",
        "src/usage/"
      ]
    },
    {
      "path": "usage-client-attribution.md",
      "tier": 5,
      "title": "Usage Client Attribution",
      "scope": "Privacy-bounded client labels carried from request ingress into usage records.",
      "documents": [
        "src/usage/client.ts",
        "src/usage/source-filter.ts",
        "src/usage/summary.ts",
        "src/server/request-log.ts",
        "src/server/index/",
        "src/server/management/logs-usage-routes.ts",
        "src/server/management/usage-aggregate-cache.ts",
        "src/server/hub-usage.ts",
        "src/client/link-management-relay.ts",
        "src/remote/hub-usage.ts",
        "src/client/hub-client.ts"
      ]
    },
    {
      "path": "quota-pool.md",
      "tier": 5,
      "title": "Quota Pool Producer",
      "scope": "The passive GET /api/quota-pool read GOAT consumes (ocx.quota-pool/1): sources, window mapping, absent-not-zero, and the install identity behind homeId and accountRef.",
      "documents": [
        "src/quota-pool/",
        "src/server/management/quota-pool-routes.ts"
      ]
    },
    {
      "path": "fallback-policy.md",
      "tier": 3,
      "title": "Fallback Policy",
      "scope": "OCX-11 fallback off: what is a model or provider fallback (and what intra-pool rotation is not), scope precedence, the guarded hop sites, the fallback_refused and home_unreachable contracts, and the ocx.fallback/1 state.",
      "documents": [
        "src/routing/",
        "src/types/",
        "src/config/",
        "src/client/",
        "src/server/",
        "src/cli/",
        "src/codex/",
        "src/combos/",
        "src/remote/",
        "gui/"
      ]
    },
    {
      "path": "pricing.md",
      "tier": 5,
      "title": "Model Price Overrides",
      "scope": "User price policies, prompt-length rate selection, persistence and estimate cache invalidation.",
      "documents": [
        "src/config/live-reconcile.ts",
        "src/cli/models-runtime.ts",
        "src/types/provider.ts",
        "src/config/schema/leaf-validators.ts",
        "src/server/management/model-routes.ts",
        "src/usage/cost.ts",
        "src/usage/user-cost-overlays.ts",
        "src/usage/user-cost-validation.ts",
        "gui/src/components/ModelPriceDialog.tsx"
      ]
    },
    {
      "path": "clients/export-model-names.md",
      "tier": 5,
      "title": "Client Export Model Names",
      "scope": "Per-connection naming policy, router-proven aliases and passive export previews.",
      "documents": ["src/clients/config-export.ts", "src/clients/config-export/", "src/integrations/", "src/cli/", "src/server/management/"]
    },
    {
      "path": "clients/omo-export-dialect.md",
      "tier": 5,
      "title": "omo Client Export Dialect",
      "scope": "Opt-in Responses dialect for the managed Pi-based omo export and its refresh lifecycle.",
      "documents": ["src/clients/config-export.ts", "src/types/config.ts", "src/config/schema/leaf-validators.ts", "src/config/schema/config-schema.ts"]
    },
    {
      "path": "clients/integrations.md",
      "tier": 5,
      "title": "Client Integrations",
      "scope": "Third-party client config ownership, snapshots, refresh, disable, and restore.",
      "documents": [
        "src/cli/",
        "src/clients/",
        "src/integrations/",
        "src/lib/"
      ]
    },
    {
      "path": "clients/codex-desktop.md",
      "tier": 5,
      "title": "Codex Desktop Compatibility",
      "scope": "Windows package activation, restart context, and protected compatibility authority persistence.",
      "documents": ["src/codex/", "src/cli/"]
    },
    {
      "path": "clients/chatgpt-desktop.md",
      "tier": 5,
      "title": "ChatGPT Desktop",
      "scope": "Experimental macOS app-server stdout shim, opt-in launch, restore and failure boundaries.",
      "documents": [
        "src/chatgpt/",
        "src/cli/",
        "src/codex/"
      ]
    },
    {
      "path": "clients/claude-desktop.md",
      "tier": 5,
      "title": "Claude Desktop Integration",
      "scope": "Claude Desktop profile ownership and config-library resolution.",
      "documents": [
        "src/claude/",
        "src/cli/",
        "src/client/",
        "src/server/"
      ]
    },
    {
      "path": "clients/claude-desktop-config-reads.md",
      "tier": 5,
      "title": "Claude Desktop Configuration Reads",
      "scope": "Verified regular-file reads of Claude Desktop config-library metadata, profiles and snapshots.",
      "documents": [
        "src/claude/"
      ]
    },
    {
      "path": "clients/claude-desktop-model-visibility.md",
      "tier": 5,
      "title": "Claude Desktop Model Visibility",
      "scope": "Per-client selection of the rows the Claude Desktop 3P model list carries.",
      "documents": [
        "src/claude/",
        "src/server/"
      ]
    },
    {
      "path": "clients/hermes.md",
      "tier": 5,
      "title": "Hermes Profiles",
      "scope": "Hermes profile discovery, per-profile selection, ownership stores, and boundaries.",
      "documents": [
        "src/cli/",
        "src/integrations/",
        "src/server/"
      ]
    },
    {
      "path": "clients/qoder.md",
      "tier": 5,
      "title": "Qoder Client Integration",
      "scope": "Qoder settings.json provider and custom-model ownership, export and loopback placeholder rules.",
      "documents": [
        "src/clients/",
        "src/integrations/"
      ]
    },
    {
      "path": "clients/client-support-matrix.md",
      "tier": 5,
      "title": "Client Support Matrix",
      "scope": "Generated client support page: registry sources, curated protocol and test claims, drift checks.",
      "documents": [
        "scripts/",
        "docs-site/",
        "src/clients/",
        "src/integrations/"
      ]
    },
    {
      "path": "clients/t3code.md",
      "tier": 5,
      "title": "T3 Code Client Integration",
      "scope": "T3 Code settings.json Claude provider-instance ownership, proxy environment, custom models and loopback marker rules.",
      "documents": [
        "src/clients/",
        "src/integrations/"
      ]
    },
    {
      "path": "desktop-shell.md",
      "tier": 6,
      "title": "Desktop shell",
      "scope": "Tauri desktop shell, proxy attachment and sidecar lifecycle, tray controls, bootstrap navigation, and desktop companion presence.",
      "documents": [
        "desktop/",
        "src/server/management/companion-routes.ts"
      ]
    },
    {
      "path": "desktop-recovery.md",
      "tier": 6,
      "title": "Desktop recovery evidence",
      "scope": "Native recovery intent, independently anchored executable and accepted-connection proof, cold-start decisions and installation scope.",
      "documents": [
        "desktop/src-tauri/src/recovery.rs",
        "desktop/src-tauri/src/recovery_activity.rs",
        "desktop/src-tauri/src/recovery_presence.rs",
        "desktop/src-tauri/src/startup.rs",
        "desktop/src-tauri/src/supervisor.rs",
        "src/service/desktop-recovery.ts",
        "src/service/desktop-recovery-process.ts",
        "src/cli/ensure-desktop-cold-start.ts"
      ]
    },
    {
      "path": "desktop-terminal-command.md",
      "tier": 6,
      "title": "Desktop-owned terminal command",
      "scope": "Desktop-owned ocx command on PATH: record and journal, POSIX shim and shell blocks, Windows user Path, private-path ACL policy, and the local Terminal command page.",
      "documents": [
        "desktop/src-tauri/src/cli_command.rs",
        "desktop/src-tauri/src/cli_command_record.rs",
        "desktop/src-tauri/src/cli_command_posix.rs",
        "desktop/src-tauri/src/cli_command_windows.rs",
        "desktop/ui/cli.html",
        "desktop/ui/cli.js"
      ]
    },
    {
      "path": "desktop-start-at-login.md",
      "tier": 6,
      "title": "Desktop Start at Login",
      "scope": "macOS tray Start at Login judgment shared with Startup safety, its parity fixture, click rules, and the guarded launch-origin migration.",
      "documents": [
        "desktop/src-tauri/src/first_run.rs",
        "desktop/src-tauri/src/login_registration.rs",
        "desktop/src-tauri/src/tray_login.rs",
        "src/service/desktop-startup.ts"
      ]
    },
    {
      "path": "ops/service-and-sidecars.md",
      "tier": 6,
      "title": "Background Service And Sidecars",
      "scope": "Service install/repair, platform launchers, tray, and sidecar processes.",
      "documents": [
        "src/lib/",
        "src/server/",
        "src/service-manager-probe.ts",
        "src/sidecar/",
        "src/update/"
      ]
    },
    {
      "path": "ops/desktop-supervision.md",
      "tier": 6,
      "title": "Desktop Supervision",
      "scope": "Durable Desktop ownership read, takeover-consent handling, live-supervision evidence, the Windows probe's trusted system-directory acquisition, and the supervision latch blocking contract consumed by service and update guards.",
      "documents": [
        "bin/ocx.mjs",
        "desktop/src-tauri/src/claim.rs",
        "desktop/src-tauri/src/first_run.rs",
        "desktop/src-tauri/src/identity.rs",
        "desktop/src-tauri/src/ownership.rs",
        "desktop/src-tauri/src/resolve.rs",
        "desktop/src-tauri/src/runtime_stop.rs",
        "desktop/src-tauri/src/startup.rs",
        "src/cli/desktop-runtime-guidance.ts",
        "src/cli/update-restart.ts",
        "src/service/cli.ts",
        "src/service/desktop-command-guard.ts",
        "src/service/desktop-startup.ts",
        "src/service/desktop-supervision.d.mts",
        "src/service/desktop-supervision.mjs",
        "src/service/orchestration.ts",
        "src/service/repair.ts",
        "src/update/index.ts",
        "src/update/restart-ownership.ts"
      ]
    },
    {
      "path": "ops/service-logging.md",
      "tier": 6,
      "title": "Managed Service Logging",
      "scope": "Service-only console timestamps and bounded copy-truncate log retention. Producer bounds for combo positions, target providers and effort diagnostics.",
      "documents": ["src/service/logging.ts", "src/combos/resolve.ts", "src/combos/request.ts", "src/server/responses/core-combo.ts"]
    },
    {
      "path": "ops/service-health-recovery.md",
      "tier": 6,
      "title": "Service Health Recovery",
      "scope": "Opt-in sentinel that turns a hung but listening managed service proxy into an exit its manager restarts.",
      "documents": [
        "src/service/health-sentinel-launch.ts",
        "src/service/health-sentinel-main.ts",
        "src/service/health-sentinel-linux.ts",
        "src/service/health-sentinel-policy.ts",
        "src/service/health-sentinel-probe.ts",
        "src/service/health-sentinel-windows.ts"
      ]
    },
    {
      "path": "ops/update-supervised-recovery.md",
      "tier": 6,
      "title": "Update Supervised Recovery",
      "scope": "Manager-first recovery after a failed post-update service refresh, and the non-zero unsupervised fallback.",
      "documents": [
        "src/update/supervised-recovery.mjs",
        "src/update/mutation-guard.mjs",
          "src/update/guarded-runtime-ops.ts",
          "src/update/guarded-port-reclaim.ts",
          "src/update/guarded-tray-ops.ts",
        "src/update/job-pinned-start.ts",
        "src/update/job-supervised-restart.ts",
        "src/update/job.ts"
      ]
    },
    {
      "path": "ops/plugins.md",
      "tier": 6,
      "title": "Local Plugins",
      "scope": "Plugin loading from OPENCODEX_HOME/plugins and the upstream rewrite slot plugins attach to.",
      "documents": [
        "src/plugins/"
      ]
    },
    {
      "path": "ops/docs-and-release.md",
      "tier": 6,
      "title": "Docs And Release",
      "scope": "Docs site, workflow map, branch policy, release flow, and cross-platform CI.",
      "documents": [
        ".github/",
        "bin/",
        "docs-site/",
        "scripts/",
        "src/cli.ts",
        "src/cli/",
        "src/codex/",
        "src/lib/",
        "src/service.ts"
      ]
    },
    {
      "path": "design-methodology.md",
      "tier": 6,
      "title": "Design Methodology For New Surfaces",
      "scope": "Stage ordering for new GUI, CLI, and user-facing surfaces.",
      "documents": [
        "gui/"
      ]
    },
    {
      "path": "remote-workspace.md",
      "tier": 3,
      "title": "Remote Workspace",
      "scope": "Opt-in workspace identity, executor grants, runtime adapters, management and dashboard integration.",
      "documents": [
        "src/remote-control/"
      ]
    },
    {
      "path": "remote-link.md",
      "tier": 3,
      "title": "Remote Link",
      "scope": "SSH machine-link building blocks: OpenSSH argument policy, ssh_config candidates, tunnel lifecycle reducer, the private link store, and standalone pairing-grant delivery.",
      "documents": [
        "src/link/",
        "src/client/link-home.ts",
        "src/client/link-parity-reporter.ts",
        "src/client/runtime-restart.ts",
        "src/cli/link-apply-restart.ts",
        "src/cli/status-codex-settings.ts",
        "src/cli/status-link.ts",
        "src/client/link-connection.ts",
        "src/local-credentials/",
        "src/server/index/link-management.ts",
        "src/server/management/link-routes.ts",
        "src/server/index/local-control-listener.ts",
        "src/lib/local-control-socket.ts",
        "src/cli/link-local-control.ts",
        "src/server/management/link-enrollment.ts",
        "native/ocx-child/",
        "src/lib/gui-pair-intent.ts",
        "src/lib/windows-owner-acl.ts",
        "src/server/gui-pair-delivery.ts"
      ]
    },
    {
      "path": "companion.md",
      "tier": 5,
      "title": "Companion usage",
      "scope": "Shared timeline filtering, usage/quotas, native and web tray title, and WidgetKit display contracts.",
      "documents": [
        "src/companion/",
        "src/usage/",
        "gui/",
        "app/",
        "desktop/"
      ]
    },
    {
      "path": "config-proxy.md",
      "tier": 2,
      "title": "Proxy Configuration",
      "scope": "Global proxy activation, start flags, and credential-safe CLI output.",
      "documents": []
    },
    {
      "path": "codex-account-controls.md",
      "tier": 5,
      "title": "Codex Account Controls",
      "scope": "Account selection order, custom usage thresholds, and stable account-card editing.",
      "documents": []
    },
    {
      "path": "ops/cross-platform-ci.md",
      "tier": 6,
      "title": "Cross-platform CI",
      "scope": "Test lanes, platform coverage, aggregate gating, and release CI proof.",
      "documents": []
    },
    {
      "path": "ops/test-sandbox-cleanup.md",
      "tier": 6,
      "title": "Test Sandbox Cleanup",
      "scope": "Test-runner home, case-scoped lifecycle teardown, and Bun test lock generation ownership.",
      "documents": [
        "scripts/test-run-lock.ts",
        "scripts/test-run-lock-gate.ts",
        "tests/"
      ]
    },
    {
      "path": "account-auto-pause.md",
      "tier": 2,
      "title": "Account Auto-Pause",
      "scope": "Opt-in permanent account refusal classification, credential fences, durable pause metadata, bounded recovery and resume.",
      "documents": [
        "src/oauth/account-auto-pause.ts",
        "src/oauth/account-auto-pause-policy.ts",
        "src/providers/api-key-pause.ts",
        "src/types/account-auto-pause.ts",
        "src/lib/account-auto-pause-response.ts",
        "src/server/responses/request-transport.ts",
        "src/server/responses/account-auto-pause-recovery.ts",
        "src/codex/account-pause.ts",
        "src/config/schema/account-auto-pause.ts",
        "gui/src/hooks/useProviderAccountPools.ts",
        "src/config/account-auto-pause-revisions.ts",
        "src/oauth/api-key-pool-preserve.ts",
        "gui/src/account-pause-display.ts"
      ]
    },
    {
      "path": "telemetry.md",
      "tier": 5,
      "title": "Telemetry",
      "scope": "Anonymous daily usage telemetry contract, consent state, install identity, ledger aggregation, scheduler, management API, CLI, and Cloudflare Worker collector.",
      "documents": [
        "src/telemetry/",
        "src/types/telemetry.ts",
        "src/server/management/telemetry-routes.ts",
        "src/cli/telemetry.ts",
        "src/config/telemetry-carry.ts",
        "src/server/management/consent-session.ts",
        "src/server/background-lifecycle.ts",
        "services/telemetry-collector/"
      ]
    }
  ],
  "contracts": {
    "version": 1,
    "entries": [
      {
        "id": "paginated-history-writer",
        "owner": {
          "document": "codex-home.md",
          "anchor": "paginated-history-writer-boundary"
        },
        "dependents": [
          "catalog.md",
          "config.md",
          "dashboard-and-usage.md",
          "ops/docs-and-release.md",
          "providers/openai-accounts.md",
          "runtime.md",
          "subagents.md"
        ]
      },
      {
        "id": "request-copy-accounting",
        "owner": {
          "document": "transports/byte-accounting.md",
          "anchor": "request-copy-accounting"
        },
        "dependents": [
          "adapters/registry.md",
          "catalog.md",
          "clients/claude-desktop.md",
          "clients/integrations.md",
          "data-planes/images.md",
          "data-planes/inbound-compat.md",
          "ops/docs-and-release.md",
          "ops/service-and-sidecars.md",
          "overview.md",
          "providers/chat-compat.md",
          "providers/cursor.md",
          "providers/xai-grok.md",
          "runtime.md",
          "subagents.md",
          "transports/inventory.md",
          "transports/streaming-health.md"
        ]
      },
      {
        "id": "stream-buffer-accounting",
        "owner": {
          "document": "transports/byte-accounting.md",
          "anchor": "stream-buffer-accounting"
        },
        "dependents": [
          "adapters/registry.md",
          "catalog.md",
          "clients/claude-desktop.md",
          "clients/integrations.md",
          "data-planes/images.md",
          "data-planes/inbound-compat.md",
          "ops/docs-and-release.md",
          "ops/service-and-sidecars.md",
          "overview.md",
          "providers/chat-compat.md",
          "providers/cursor.md",
          "providers/xai-grok.md",
          "runtime.md",
          "subagents.md",
          "transports/inventory.md",
          "transports/streaming-health.md"
        ]
      }
    ]
  },
  "grace": {
    "undocumentedSourceAreas": [],
    "unboundInvariants": [
      {
        "id": "INV-HOME-01",
        "reason": "no test asserts CODEX_HOME precedence over ~/.codex directly; the closest coverage is WSL home discovery"
      },
      {
        "id": "INV-SLUG-01",
        "reason": "no test constrains routed slug shape; the ten files that mention provider/model consume slugs rather than enforcing the form"
      }
    ],
    "oversizeDocs": [],
    "staleRefs": []
  }
}