[Juliusolsson05]

Summary

Pulls the wire-level proxy capture (from claude-code-headless' mitmAddon and codex-headless' ResponsesProxy) into every saved debug bundle, gated on the session having a proxy run dir on disk.

Closes the loop on the three-PR series:

• proxy: bump headless request_shape capture and header filtering #55 — Claude addon emits filtered headers + extended request_shape (raises body cap to 2 MiB).
• codex: capture proxy traffic to disk (parity with Claude mitm) #61 — Codex proxy gets parity capture under `~/.config/cc-shell/proxy/`.
• This PR — bundles include the proxy-events.jsonl from whichever provider ran.

After all three land, opening a debug bundle shows every API request that was sent during the session, including the actual prompt body — with no manual digging through hidden state directories.

What changes

New file: `src/main/storage/proxyEventsReader.ts`

• Finds the latest proxy run dir matching `{cwd, sessionKey}`.
• Reads `proxy-events.jsonl` with a 5 MiB tail cap (longer logs get a synthetic `{kind: 'truncated'}` header line so consumers know they're seeing only the tail).
• Returns nulls on any error — bundle save must never fail because the proxy log is missing.
• Uses the same `sanitizePath` helper the proxy writers use, so reader and writers can't disagree on segment shape.

New IPC: `debug:read-proxy-events`

• Renderer-callable handler in `src/main/ipc/debug.ts`.
• Single new types entry (`ProxyEventsBundleSection`) plus `debugApi.readProxyEvents` exposure.

Bundle assembler: `saveDebugBundle.ts`

• Calls `window.api.readProxyEvents` during assembly.
• Conditionally adds `proxy-events.jsonl` and `proxy-session-meta.json` to the file list when the reader finds something.
• Manifest gains a `proxyRunDir` field pointing at the FULL log on disk for users who hit the tail cap.
• Both callers (autosave + manual) pass `cwd` + `providerSessionId` from session meta.

Bundle layout after this lands

For a Claude/Codex session that ran with proxy:
```
debug-bundles/-/
├── manifest.json ← gains proxyRunDir field
├── state-snapshot.json
├── feed-debug.jsonl
├── work-context.json
├── proxy-semantic.json
├── proxy-events.jsonl ← NEW (wire-level capture)
├── proxy-session-meta.json ← NEW (proxy run metadata)
├── html-raw.html
├── html-clean.html
├── trace/
└── performance/
```

For a session without proxy (legacy or proxy disabled), the layout is unchanged — the new files are conditional.

Verification

• `npm run build:app` ✅
• Existing bundle layout unchanged for sessions without proxy.
• Reader is fault-tolerant: missing run dir, unreadable file, or oversized log all degrade gracefully.

Trade-offs

• Bundle size. A long-running session can have a multi-MB proxy log; tail cap at 5 MiB keeps bundles bounded. Users who need the full log find it at `manifest.proxyRunDir`.
• Privacy. Bundles now include actual prompts and conversation bodies. Authorization headers are structurally excluded by the addon allowlist (PR proxy: bump headless request_shape capture and header filtering #55), but the bundle does carry user prompts. Worth a future toast on bundle-save: "bundle contains conversation prompts."

🤖 Generated with Claude Code