npm - @bitkyc08/opencodex - Versions diffs - 2.14.0 → 2.14.1 - Mend

@bitkyc08/opencodex 2.14.0 → 2.14.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (30) hide show

package/README.md +55 -0
package/gui/dist/assets/index-DWhX3yMp.css +1 -0
package/gui/dist/assets/index-DuaUVm_d.js +76 -0
package/gui/dist/index.html +2 -2
package/package.json +1 -1
package/src/adapters/command-code.ts +31 -2
package/src/adapters/openai-chat-url.ts +11 -0
package/src/adapters/openai-chat.ts +2 -1
package/src/adapters/openai-responses-url.ts +14 -0
package/src/adapters/openai-responses.ts +2 -2
package/src/codex/auth-api.ts +2 -74
package/src/codex/catalog/parsing.ts +10 -6
package/src/codex/catalog/sync.ts +10 -1
package/src/codex/features.ts +14 -3
package/src/codex/model-cache.ts +7 -1
package/src/codex/native-main-claim.ts +13 -2
package/src/generated/compatibility-version.json +35 -19
package/src/lab/ledger/store.ts +0 -18
package/src/lab/subject/installation-salt.ts +13 -2
package/src/providers/registry.ts +5 -5
package/src/router.ts +12 -1
package/src/server/index.ts +1 -1
package/src/server/management/config-routes.ts +51 -16
package/src/server/responses/core.ts +0 -1
package/src/server/responses/fetch-helpers.ts +12 -1
package/src/server/responses/ws-upstream.ts +199 -0
package/src/vision/index.ts +25 -4
package/src/vision/timeout-bounds.ts +9 -0
package/gui/dist/assets/index-BNVYzdn0.css +0 -1
package/gui/dist/assets/index-Co12XTT-.js +0 -76

package/gui/dist/index.html CHANGED Viewed

@@ -16,8 +16,8 @@
         } catch (e) {}
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-Co12XTT-.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-BNVYzdn0.css">
+    <script type="module" crossorigin src="/assets/index-DuaUVm_d.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-DWhX3yMp.css">
   </head>
   <body>
     <div id="root"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@bitkyc08/opencodex",
-  "version": "2.14.0",
+  "version": "2.14.1",
   "description": "Universal provider proxy for OpenAI Codex & Claude Code — use any LLM with Codex CLI/App/SDK and Claude Code",
   "type": "module",
   "main": "./bin/package-main.mjs",

package/src/adapters/command-code.ts CHANGED Viewed

@@ -200,6 +200,8 @@ const MAX_RECENT_COMMIT_LENGTH = 512;
 const MAX_GIT_STATUS_LENGTH = 2048;
 /** Keep collected workspace/git metadata fresh for this long (ms) so repeated requests reuse it. */
 const WORKSPACE_METADATA_TTL_MS = 30_000;
+/** Hard cap on cached workspace metadata entries to prevent unbounded growth across distinct cwds. */
+export const MAX_WORKSPACE_METADATA_ENTRIES = 128;
 /** Derive a bounded project slug from the working directory for the `x-project-slug` header. */
 function projectSlug(cwd: string): string {
@@ -214,7 +216,32 @@ interface GitWorkspaceInfo {
   recentCommits: string[];
 }
-const workspaceMetadataCache = new Map<string, { collectedAt: number; value: GitWorkspaceInfo }>();
+export const workspaceMetadataCache = new Map<string, { collectedAt: number; value: GitWorkspaceInfo }>();
+/**
+ * Evict expired entries first, then the oldest live entry if at capacity.
+ * Called before inserting a new key so the cache never exceeds the cap.
+ */
+export function pruneWorkspaceMetadataCache(now: number): void {
+  // Pass 1: remove expired entries.
+  for (const [key, entry] of workspaceMetadataCache) {
+    if (now - entry.collectedAt >= WORKSPACE_METADATA_TTL_MS) {
+      workspaceMetadataCache.delete(key);
+    }
+  }
+  // Pass 2: if still at capacity, evict the oldest live entry.
+  if (workspaceMetadataCache.size >= MAX_WORKSPACE_METADATA_ENTRIES) {
+    let oldestKey: string | null = null;
+    let oldestAt = Infinity;
+    for (const [key, entry] of workspaceMetadataCache) {
+      if (entry.collectedAt < oldestAt) {
+        oldestAt = entry.collectedAt;
+        oldestKey = key;
+      }
+    }
+    if (oldestKey !== null) workspaceMetadataCache.delete(oldestKey);
+  }
+}
 const execFile = promisify(execFileCallback);
@@ -246,7 +273,9 @@ async function gitWorkspaceInfo(cwd: string | undefined): Promise<GitWorkspaceIn
           .map(commit => commit.slice(0, MAX_RECENT_COMMIT_LENGTH)),
       }
     : fallback;
-  workspaceMetadataCache.set(cwd, { collectedAt: Date.now(), value });
+  const now = Date.now();
+  if (!workspaceMetadataCache.has(cwd)) pruneWorkspaceMetadataCache(now);
+  workspaceMetadataCache.set(cwd, { collectedAt: now, value });
   return value;
 }

package/src/adapters/openai-chat-url.ts ADDED Viewed

@@ -0,0 +1,11 @@
+const TRAILING_SLASHES = /\/+$/;
+const TRAILING_CHAT_COMPLETIONS = /\/chat\/completions\/?$/;
+/** Build the openai-chat send URL from a configured baseUrl.
+ *  Accepts /v1, /v1/, /v1/chat/completions, and /v1/chat/completions/.
+ */
+export function openaiChatCompletionsUrl(baseUrl: string): string {
+  const trimmed = baseUrl.trim().replace(TRAILING_SLASHES, "");
+  const withoutEndpoint = trimmed.replace(TRAILING_CHAT_COMPLETIONS, "");
+  return `${withoutEndpoint}/chat/completions`;
+}

package/src/adapters/openai-chat.ts CHANGED Viewed

@@ -12,6 +12,7 @@ import { identifyRoutedModel } from "./identity";
 import { peekReasoningForCall } from "../responses/reasoning-replay-cache";
 import { buildNonOpenAIToolCatalogNudgeForTools, shouldInjectNonOpenAIToolCatalogNudge } from "./tool-catalog-nudge";
 import { openRouterProviderPayload, resolveOpenRouterRouting } from "../providers/openrouter-routing";
+import { openaiChatCompletionsUrl } from "./openai-chat-url";
 import {
   isTranslatorBudgetExceededError,
   retainTranslatedEventBatch,
@@ -975,7 +976,7 @@ export function createOpenAIChatAdapter(provider: OcxProviderConfig): ProviderAd
       }
       if (parsed.stream) body.stream_options = { include_usage: true };
-      const url = `${provider.baseUrl}/chat/completions`;
+      const url = openaiChatCompletionsUrl(provider.baseUrl);
       const headers: Record<string, string> = { "Content-Type": "application/json" };
       if (hasCredential) headers["Authorization"] = `Bearer ${provider.apiKey}`;
       if (provider.headers) Object.assign(headers, provider.headers);

package/src/adapters/openai-responses-url.ts ADDED Viewed

@@ -0,0 +1,14 @@
+const TRAILING_SLASHES = /\/+$/;
+const TRAILING_RESPONSES = /\/responses\/?$/;
+const TRAILING_V1 = /\/v1\/?$/;
+/** Build the default key-auth openai-responses send URL.
+ *  Accepts /v1, /v1/, /v1/responses, and /v1/responses/.
+ *  Custom `responsesPath` stays on the adapter; this helper is only the legacy /v1/responses branch.
+ */
+export function openaiResponsesUrl(baseUrl: string): string {
+  const trimmed = baseUrl.trim().replace(TRAILING_SLASHES, "");
+  const withoutEndpoint = trimmed.replace(TRAILING_RESPONSES, "");
+  const withoutV1 = withoutEndpoint.replace(TRAILING_V1, "");
+  return `${withoutV1}/v1/responses`;
+}

package/src/adapters/openai-responses.ts CHANGED Viewed

@@ -11,6 +11,7 @@ import { OCX_REASONING_PREFIX } from "../responses/reasoning-envelope";
 import { modelRecordValue } from "../reasoning-effort";
 import type { TranslatorBudget } from "../lib/translator-budget";
 import { rewriteRoutedCustomToolsForUpstream } from "../responses/custom-tool-compat";
+import { openaiResponsesUrl } from "./openai-responses-url";
 // Headers relayed verbatim from the caller in OAuth-passthrough ("forward") mode.
 // Exported so the web-search sidecar reuses the exact same forwarded-auth set for its ChatGPT call.
@@ -1244,8 +1245,7 @@ export function createResponsesPassthroughAdapter(provider: OcxProviderConfig):
         }
       } else {
         if (provider.responsesPath === undefined) {
-          const base = provider.baseUrl.replace(/\/v1\/?$/, "");
-          url = `${base}/v1/responses`;
+          url = openaiResponsesUrl(provider.baseUrl);
         } else {
           const base = provider.baseUrl.replace(/\/$/, "");
           url = `${base}${provider.responsesPath}`;

package/src/codex/auth-api.ts CHANGED Viewed

@@ -82,7 +82,7 @@ export {
   setAccountQuotaFromParsed,
   updateAccountQuota,
 } from "./quota";
-import { extractAccountId, decodeJwtPayload } from "../oauth/chatgpt";
+import { extractAccountId } from "../oauth/chatgpt";
 import { getMainAccountPlan, MAIN_CODEX_ACCOUNT_ID, setMainAccountPlan } from "./main-account";
 import { captureConfigGeneration, registerStateSweepAfterTick } from "../lib/state-store-sweeper";
 import { reconcileLiveStateStores } from "../lib/state-store-registrations";
@@ -147,7 +147,6 @@ function nativeMainProfileBusyResponse(): Response {
   return response;
 }
-const MANUAL_IMPORT_ENV = "OPENCODEX_ENABLE_UNVERIFIED_CODEX_IMPORT";
 const CODEX_CREDENTIAL_PERSISTENCE_ERROR = "Account was saved, but credential setup did not complete. Reauthenticate or remove the account.";
 const CODEX_CREDENTIAL_PERSISTENCE_CODE = "codex_credential_persistence_failed";
@@ -375,10 +374,6 @@ async function readResetCreditJson(
   }
 }
-export function isUnverifiedCodexImportEnabled(): boolean {
-  return process.env[MANUAL_IMPORT_ENV] === "1";
-}
 function manualImportDisabledResponse(): Response {
   return jsonResponse({
     error: "Manual Codex account import is disabled. Use OAuth login to add a pool account.",
@@ -1368,74 +1363,7 @@ export async function handleCodexAuthAPI(
   }
   if (url.pathname === "/api/codex-auth/accounts" && req.method === "POST") {
-    if (!isUnverifiedCodexImportEnabled()) return manualImportDisabledResponse();
-    let body: { id: string; email: string; plan?: unknown; accessToken: string; refreshToken: string; chatgptAccountId: string };
-    try { body = (await req.json()) as typeof body; } catch { return jsonResponse({ error: "Invalid JSON" }, 400); }
-    if (!body.id || !body.email || !body.accessToken || !body.refreshToken || !body.chatgptAccountId) {
-      return jsonResponse({ error: "Missing required fields" }, 400);
-    }
-    if (!isValidCodexAccountId(body.id)) {
-      return jsonResponse({ error: "Invalid account id format" }, 400);
-    }
-    if (body.accessToken.length > 10_000 || body.refreshToken.length > 10_000) {
-      return jsonResponse({ error: "Input too large" }, 400);
-    }
-    const runtimeConfig = getRuntimeConfig(config);
-    const preflightConflict = codexAccountPersistenceConflict(runtimeConfig, body.id, "create");
-    if (preflightConflict) return jsonResponse({ error: preflightConflict }, 400);
-    // 1.1: Duplicate check is scoped by personal vs workspace plan bucket.
-    const plan = codexPlanValue(body.plan);
-    const derivedAccountId = extractAccountId(undefined, body.accessToken) ?? body.chatgptAccountId;
-    const collision = checkAccountIdCollision(derivedAccountId, body.email, plan);
-    if (collision.collision) {
-      return jsonResponse({ error: collision.reason }, 400);
-    }
-    // 4.2: use JWT exp for expiresAt instead of hardcoded 1 hour
-    const payload = decodeJwtPayload(body.accessToken);
-    const exp = typeof payload?.exp === "number" ? payload.exp * 1000 : Date.now() + 3600_000;
-    const warmup = await verifyCodexAccountWarmup(body.id, body.accessToken, derivedAccountId);
-    if (!warmup.ok) return warmup.response;
-    const latestConfig = getRuntimeConfig(config);
-    const commitConflict = codexAccountPersistenceConflict(latestConfig, body.id, "create");
-    if (commitConflict) return jsonResponse({ error: commitConflict }, 400);
-    const addedAccount = withCodexAccountLogLabel(
-      {
-        id: body.id,
-        email: body.email,
-        ...(plan !== undefined ? { plan } : {}),
-        isMain: false,
-      },
-      latestConfig.codexAccounts ?? [],
-    );
-    const persistence = persistNewCodexAccount(
-      config,
-      latestConfig,
-      addedAccount,
-      {
-        credential: {
-          accessToken: body.accessToken,
-          refreshToken: body.refreshToken,
-          expiresAt: exp,
-          chatgptAccountId: derivedAccountId,
-        },
-        validatedAt: warmup.validatedAt,
-      },
-    );
-    reconcileLiveStateStores();
-    if (persistence.status === "publication-failed") markAccountNeedsReauth(body.id);
-    const catalogRefresh = await convergeAccountNamespaceCatalog(
-      latestConfig,
-      persistence.pickerVisibilityChanged,
-      convergeCodexCatalog,
-    );
-    if (persistence.status === "publication-failed") {
-      return jsonResponse({
-        ok: false,
-        ...codexCredentialPersistenceFailure(body.id, catalogRefresh.catalogRefreshPending === true),
-      }, 500);
-    }
-    return jsonResponse({ ok: true, ...catalogRefresh });
+    return manualImportDisabledResponse();
   }
   if (url.pathname === "/api/codex-auth/accounts" && req.method === "DELETE") {

package/src/codex/catalog/parsing.ts CHANGED Viewed

@@ -394,17 +394,21 @@ export function normalizeRoutedCatalogEntry(entry: RawEntry, parallelToolCalls =
   delete entry.supports_reasoning_summaries;
   const isCursorEntry = typeof entry.slug === "string" && entry.slug.startsWith("cursor/");
   // `supports_search_tool` selects Codex's deferred tool-discovery surface; it is not the hosted
-  // web-search capability. OpenCodex can round-trip tool_search when a client sends it, but routed
-  // providers have no provider/model proof that Codex App plugins work through that deferred
-  // surface. Advertising it unconditionally hides the App's compatible direct MCP tools (#1522),
-  // so routed rows fail closed to direct discovery. The sidecar-backed hosted web-search metadata
-  // remains advertised independently for non-Cursor routes.
+  // web-search capability. Routed rows also carry tool_mode=code_mode_only (below), and under code
+  // mode DEFERRED MCP tools remain callable through exec's `tools` global / ALL_TOOLS without any
+  // tool_search round-trip (upstream codex-rs code_mode suite; live canary 2026-08-13: routed
+  // kimi/k3 called tools.mcp__node_repl__js → isError:false). Stamping false here instead forces
+  // every MCP declaration into exec.description — a measured 2.7x turn-1 payload regression
+  // (96,699 → 258,929 chars; devlog/_plan/260813_tool_catalog_deferral/010). So non-Cursor routed
+  // rows advertise deferred discovery; the #1522 reachability concern is covered by the code-mode
+  // path, not by paying the full-catalog tax. Cursor stays false: its runTurn transport bypasses
+  // the web-search sidecar and has no proven deferred path.
   if (isCursorEntry) {
     delete entry.web_search_tool_type;
   } else {
     entry.web_search_tool_type = "text_and_image";
   }
-  entry.supports_search_tool = false;
+  entry.supports_search_tool = !isCursorEntry;
   // Cursor's transport already serializes overlapping tool calls into atomic Responses tool events.
   // Advertising parallel calls lets Codex send the same native capability bit it sends for OpenAI.
   // Opt-in providers (OcxProviderConfig.parallelToolCalls, e.g. xAI) advertise it too: the

package/src/codex/catalog/sync.ts CHANGED Viewed

@@ -310,11 +310,20 @@ export function deriveEntry(
     });
   }
   // Fallback when no template is available (best-effort; strict parser may need more).
+  // Cursor fallback rows mirror normalizeRoutedCatalogEntry: no deferred discovery, no hosted
+  // web-search metadata (runTurn transport bypasses the sidecar). Non-Cursor routed fallbacks
+  // advertise deferred discovery — code mode keeps deferred MCP callable (devlog
+  // 260813_tool_catalog_deferral/010+020); search=false costs a measured 2.7x turn-1 payload.
+  const isCursorFallback = isRouted && model?.provider === "cursor";
   const entry: RawEntry = {
     slug, display_name: routedDisplayName(slug), description: desc,
     shell_type: "shell_command", visibility: "list", supported_in_api: true,
     priority, base_instructions: "You are a helpful coding assistant.",
-    ...(isRouted ? { web_search_tool_type: "text_and_image", supports_search_tool: false } : {}),
+    ...(isRouted
+      ? isCursorFallback
+        ? { supports_search_tool: false }
+        : { web_search_tool_type: "text_and_image", supports_search_tool: true }
+      : {}),
   };
   if (isRouted) {
     applyRoutedCodexToolMode(entry);

package/src/codex/features.ts CHANGED Viewed

@@ -1036,7 +1036,18 @@ export function setMultiAgentModeHintText(value: string | null, configPath?: str
   return setV2StringField("multi_agent_mode_hint_text", value, configPath);
 }
-const modeHintCapabilityCache = new Map<string, boolean | null>();
+export const MODE_HINT_CAPABILITY_CACHE_MAX_ENTRIES = 8;
+export const modeHintCapabilityCache = new Map<string, boolean | null>();
+export function rememberModeHintCapability(cacheKey: string, capability: boolean | null): void {
+  modeHintCapabilityCache.delete(cacheKey);
+  modeHintCapabilityCache.set(cacheKey, capability);
+  while (modeHintCapabilityCache.size > MODE_HINT_CAPABILITY_CACHE_MAX_ENTRIES) {
+    const oldest = modeHintCapabilityCache.keys().next().value;
+    if (oldest === undefined) break;
+    modeHintCapabilityCache.delete(oldest);
+  }
+}
 /**
  * True when the installed Codex runtime binary contains the
@@ -1069,7 +1080,7 @@ export function probeCodexSupportsModeHint(): boolean | null {
         if (!isNativeExecutable(buf)) continue;
         sawBinary = true;
         if (buf.includes(Buffer.from("multi_agent_mode_hint_text", "utf8"))) {
-          modeHintCapabilityCache.set(cacheKey, true);
+          rememberModeHintCapability(cacheKey, true);
           return true;
         }
       } catch {
@@ -1078,7 +1089,7 @@ export function probeCodexSupportsModeHint(): boolean | null {
     }
     // At least one real binary was inspected and none contained the key.
     const result = sawBinary ? false : null;
-    modeHintCapabilityCache.set(cacheKey, result);
+    rememberModeHintCapability(cacheKey, result);
     return result;
   } catch {
     return null;

package/src/codex/model-cache.ts CHANGED Viewed

@@ -47,7 +47,7 @@ export type ModelCacheClearReason = "authority" | "eviction";
 const cache = new Map<string, CacheEntry>();
 let globalCacheGeneration = 0;
-const providerCacheGenerations = new Map<string, number>();
+export const providerCacheGenerations = new Map<string, number>();
 let cacheBytes = 0;
 let oldestCachedProvider: string | undefined;
 let oldestCachedAt: number | null = null;
@@ -235,9 +235,15 @@ export function reconcileModelCacheProviders(
     ...liveModelCounts.keys(),
     ...cache.keys(),
   ]);
+  let revokedRemovedProviderAuthority = false;
   for (const provider of trackedProviders) {
     if (validProviders.has(provider)) continue;
+    if (!revokedRemovedProviderAuthority) {
+      globalCacheGeneration += 1;
+      revokedRemovedProviderAuthority = true;
+    }
     providerCacheGenerations.set(provider, (providerCacheGenerations.get(provider) ?? 0) + 1);
+    providerCacheGenerations.delete(provider);
     deleteCachedProvider(provider);
     failureAt.delete(provider);
     discoveryStatus.delete(provider);

package/src/codex/native-main-claim.ts CHANGED Viewed

@@ -22,7 +22,18 @@ export interface NativeMainClaimOptions {
   env?: NodeJS.ProcessEnv;
 }
-const hardenedIdentities = new Map<string, string>();
+export const NATIVE_MAIN_HARDENED_IDENTITY_MAX_ENTRIES = 32;
+export const hardenedIdentities = new Map<string, string>();
+export function rememberHardenedIdentity(path: string, identity: string): void {
+  hardenedIdentities.delete(path);
+  hardenedIdentities.set(path, identity);
+  while (hardenedIdentities.size > NATIVE_MAIN_HARDENED_IDENTITY_MAX_ENTRIES) {
+    const oldest = hardenedIdentities.keys().next().value;
+    if (oldest === undefined) break;
+    hardenedIdentities.delete(oldest);
+  }
+}
 export function nativeMainClaimPath(context: NativeProfileContext): string {
   return join(context.codexHome, NATIVE_MAIN_CLAIM_DB);
@@ -86,7 +97,7 @@ async function openClaimDatabase(
       // tests stayed green, because nearly every claim test injects `hardenPath`.
       await (options.hardenPath ?? ((target: string) => hardenStableLockFile(target, platform)))(path);
       assertStableLockFile(path, file);
-      hardenedIdentities.set(path, identity);
+      rememberHardenedIdentity(path, identity);
     }
     database = new Database(path, { create: true });
     // Journal-mode negotiation itself may need a database lock. Disable

package/src/generated/compatibility-version.json CHANGED Viewed

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "e26551c48502bd6a0c8d98eaf138efef1fa4c8741b0cea797ecc22cb05e74643"
+      "sha256": "c2501a020b2b8a7c01f0199dc7a1d7763d82181fe7a329bd2b265fd7474ec994"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -50,7 +50,7 @@
     },
     {
       "path": "src/adapters/command-code.ts",
-      "sha256": "15fbd5b5caf01708823e75855e0159965b10b7604ee61c4e5dc9bd94bc143513"
+      "sha256": "7b969b84c92664588d5b427676743b05169ccc9b26b140e244279186b6c08b4a"
     },
     {
       "path": "src/adapters/cursor.ts",
@@ -268,13 +268,21 @@
       "path": "src/adapters/mimo-free.ts",
       "sha256": "d267d57747f6208850c64b695ee0028748ad1e352a1fd488799e6b4abdb736ef"
     },
+    {
+      "path": "src/adapters/openai-chat-url.ts",
+      "sha256": "3309bcebcf21f35e5a395187a06db326173cd0a7a652a5ecb8abc20713eb8f96"
+    },
     {
       "path": "src/adapters/openai-chat.ts",
-      "sha256": "86f37048af20ddbdd635a3e8f60369441c8d9481745fcf071ccbbe4daf7bc54b"
+      "sha256": "7700ec687a4cb7516c9cc975ac6726ab1ad858fe4b39a342aea155bd2be291c4"
+    },
+    {
+      "path": "src/adapters/openai-responses-url.ts",
+      "sha256": "b3acd48b0b8fcda9f2ebedb51ebfd619e1c1d1adaeca2f6965db853e6ffdc6e4"
     },
     {
       "path": "src/adapters/openai-responses.ts",
-      "sha256": "67c8971279554b0e63c2bf85981189f92f27fe3f73a618a8198f7e4980fda14b"
+      "sha256": "78013f261ce7f7b5f06ad8fa02f49c8d5c58ab4a2718d8571d41812cfe71b605"
     },
     {
       "path": "src/adapters/run-turn-queue.ts",
@@ -602,7 +610,7 @@
     },
     {
       "path": "src/codex/auth-api.ts",
-      "sha256": "97574253fcd338991070c295871373254ebf6d5924a41c7aca96cecfc865b3ea"
+      "sha256": "074bef369e3d1e300c051076088e01408183d5e95db1b405a0c0f5301e3a37d7"
     },
     {
       "path": "src/codex/auth-collision.ts",
@@ -666,7 +674,7 @@
     },
     {
       "path": "src/codex/catalog/parsing.ts",
-      "sha256": "630f020fda702d07a90f1ff147a03ca284d69e32482d4e4c3020c25cd988e4ce"
+      "sha256": "b73918da5145d0422484d29bcaf05d00cd044ef1866187ff36168cfcb1aa16d9"
     },
     {
       "path": "src/codex/catalog/provider-fetch.ts",
@@ -674,7 +682,7 @@
     },
     {
       "path": "src/codex/catalog/sync.ts",
-      "sha256": "06b4ffdf20f60e81ba881e2390e099910aaa14da8b95ce4568471e5757af7861"
+      "sha256": "c285b373e030af62e33976ccb7e8b0f6ec2741783e24853404fdf1dfc4c19283"
     },
     {
       "path": "src/codex/codex-write-lock.ts",
@@ -706,7 +714,7 @@
     },
     {
       "path": "src/codex/features.ts",
-      "sha256": "5a3aade98f3aaeb40e8e86c46c1b95f194f67ad27aa12152a0ce1ebf29cae0d2"
+      "sha256": "f6e64aa07c4ac8330df679a2b613fac84029d2fe1b8f0d5e8ace27ea664dda16"
     },
     {
       "path": "src/codex/generation.ts",
@@ -782,7 +790,7 @@
     },
     {
       "path": "src/codex/model-cache.ts",
-      "sha256": "26c3b39ad812d8d102bd418486e9902b56e6280369a03a40cf34b0f4b6b5bd27"
+      "sha256": "f49cb78b3af7487d1da6f9bbb578615a75644f1a176e5ca89096186219456e94"
     },
     {
       "path": "src/codex/native-main-admission.ts",
@@ -794,7 +802,7 @@
     },
     {
       "path": "src/codex/native-main-claim.ts",
-      "sha256": "565253a6bcf94e2444f75bf4bda9bdd713af17ad7330c4677571792cbcd75590"
+      "sha256": "64f5c342243e8420859ba013d987f6d1514b79f57dde662ae721ff9a8da2cf38"
     },
     {
       "path": "src/codex/native-main-lock-file.ts",
@@ -1314,7 +1322,7 @@
     },
     {
       "path": "src/lab/ledger/store.ts",
-      "sha256": "a81290c3d76479d303f66dc75d45f3bbd7b68d3a3f5dc04b5ab20f96a63bf2fb"
+      "sha256": "75d8b2581e5766aa5d2b66432f396456a6b12e2a4a2286745b2ba32bc67bf3a7"
     },
     {
       "path": "src/lab/live/credential-lease.ts",
@@ -1442,7 +1450,7 @@
     },
     {
       "path": "src/lab/subject/installation-salt.ts",
-      "sha256": "6decbe8942ba547b7e59d4e4eeb6216d9b733bb5e2ddc3c601777dc9f58fa2ac"
+      "sha256": "292ae399517d544d12d1d009510baa43fb150b24e4dcccadc6b5d4db151c2911"
     },
     {
       "path": "src/lab/subject/protocol-subject.ts",
@@ -1902,7 +1910,7 @@
     },
     {
       "path": "src/providers/registry.ts",
-      "sha256": "e840dcdf478cfcdee036d8de79a849a4ed303f7f25a01a4caff616d57b0d3855"
+      "sha256": "f2a1b6f538bc7939bb98d9d0187c3350c6c46d9c844a3019a9f56582aa816c12"
     },
     {
       "path": "src/providers/slug-codec.ts",
@@ -1958,7 +1966,7 @@
     },
     {
       "path": "src/router.ts",
-      "sha256": "a431e4b5b86e615cdcb2ccb635b3c285bc8579dc93ec2d41f53af1ebb97cdc5a"
+      "sha256": "8d555a3112f6f5aee67f4768880638f729baa145885bce9bd4e4cd5fcce34f7b"
     },
     {
       "path": "src/routing/analytics.ts",
@@ -2094,7 +2102,7 @@
     },
     {
       "path": "src/server/index.ts",
-      "sha256": "5bd284761bb05a0069f10c6cd6a686b2a600665de5d77e39579936b77747ebca"
+      "sha256": "cdf8ee40eeed9a69cfcb7ab95730b131ba57dad547349f74d585ffca97f171b9"
     },
     {
       "path": "src/server/lifecycle.ts",
@@ -2142,7 +2150,7 @@
     },
     {
       "path": "src/server/management/config-routes.ts",
-      "sha256": "999e5668ca4cfe4f0bade38b11546fc40382c3396d5c50e46cd019f0e0fd50f8"
+      "sha256": "621ca958cebfdf9e4486af305f31b950768b045a666b5dbf4da5ea4c7153a805"
     },
     {
       "path": "src/server/management/context.ts",
@@ -2314,7 +2322,7 @@
     },
     {
       "path": "src/server/responses/core.ts",
-      "sha256": "d3152413a69957fd952e0f6dd8a5e0837aea6d1f0a71f4693580e4176221f317"
+      "sha256": "e115d89db4e94c910ea74976c259260b6dd9f6d0238a82ba16a3fe49b12bfa86"
     },
     {
       "path": "src/server/responses/encrypted-payload.ts",
@@ -2322,7 +2330,7 @@
     },
     {
       "path": "src/server/responses/fetch-helpers.ts",
-      "sha256": "5763bccb7c460cc4031f45c728bce9db14f8af010face733108216232ef07d13"
+      "sha256": "c0dd5255a485b23fcef54378cd1ea2eac40f7824952050f8e9db9c3d02f0e2d2"
     },
     {
       "path": "src/server/responses/passthrough-error.ts",
@@ -2340,6 +2348,10 @@
       "path": "src/server/responses/upstream-error.ts",
       "sha256": "e74ff94134f82d594891242b49d03619771f938bde3dc4b6c96a527510da2546"
     },
+    {
+      "path": "src/server/responses/ws-upstream.ts",
+      "sha256": "f697ac29a3b1965c4d77531abd69ed382d938ed503c951834205cffe6d8e9757"
+    },
     {
       "path": "src/server/search.ts",
       "sha256": "62a6c940ca5d967ea2a766e6d864c6df77e74130c99d0cacf4f4380cb01fbb5a"
@@ -2546,12 +2558,16 @@
     },
     {
       "path": "src/vision/index.ts",
-      "sha256": "187d229d74b6fda82e3ad4117c2bb5f17ccfadb213ef728a48c39ef32f17f510"
+      "sha256": "b3c27892a17ea2176c2b6361830800772a6efea5681fff570b3ca5da77626bbc"
     },
     {
       "path": "src/vision/reasoning.ts",
       "sha256": "7b5ba571d9e727304f9cc053baaf82a5023fd2dad92f7fbf01af7edb8cfca21a"
     },
+    {
+      "path": "src/vision/timeout-bounds.ts",
+      "sha256": "65a3124c6817cda51eb529520652576ffb1e92db433112162c0065104954eaba"
+    },
     {
       "path": "src/web-search/anthropic-executor.ts",
       "sha256": "dc7be63143d4ba70cb5e8127fe2d5231bbabb724ee4715a091bfcc336d48eb32"

package/src/lab/ledger/store.ts CHANGED Viewed

@@ -25,7 +25,6 @@ export interface LedgerStore {
   replay(): ReplayResult;
 }
-const eventIdIndexByLedger = new Map<string, Set<string>>();
 const LEDGER_LOCK_STALE_MS = 60_000;
 const LEDGER_LOCK_WAIT_MS = 5_000;
@@ -157,21 +156,6 @@ function withLedgerLock<T>(ledgerPath: string, fn: () => T): T {
   }
 }
-/** Load or build the in-memory event-id index for a ledger path. */
-function loadEventIdIndex(ledgerPath: string): Set<string> {
-  let index = eventIdIndexByLedger.get(ledgerPath);
-  if (!index) {
-    index = new Set();
-    if (existsSync(ledgerPath)) {
-      for (const event of replayLabLedger(ledgerPath).events) {
-        index.add(event.eventId);
-      }
-    }
-    eventIdIndexByLedger.set(ledgerPath, index);
-  }
-  return index;
-}
 /** Durable append of one validated event as a single JSONL line + fsync. */
 export function appendLabEvent(ledgerPath: string, event: LabEvent): void {
   const validated = validateLabEvent(event);
@@ -192,7 +176,6 @@ export function appendLabEvent(ledgerPath: string, event: LabEvent): void {
   } finally {
     closeSync(fd);
   }
-  loadEventIdIndex(ledgerPath).add(validated.eventId);
 }
 /**
@@ -209,7 +192,6 @@ export function appendLabEventIfAbsent(ledgerPath: string, event: LabEvent): boo
         fresh.add(row.eventId);
       }
     }
-    eventIdIndexByLedger.set(ledgerPath, fresh);
     if (fresh.has(validated.eventId)) return false;
     appendLabEvent(ledgerPath, validated);
     return true;

package/src/lab/subject/installation-salt.ts CHANGED Viewed

@@ -4,9 +4,20 @@ import { dirname } from "node:path";
 import { labInstallationSaltPath, labRoot } from "../paths";
 const SALT_BYTES = 32;
-const installationSaltCache = new Map<string, Uint8Array>();
+export const INSTALLATION_SALT_CACHE_MAX_ENTRIES = 16;
+export const installationSaltCache = new Map<string, Uint8Array>();
 const UNSUPPORTED_DIRECTORY_FSYNC_CODES = new Set(["EINVAL", "ENOTSUP", "EOPNOTSUPP", "ENOSYS"]);
+export function rememberInstallationSalt(path: string, salt: Uint8Array): void {
+  installationSaltCache.delete(path);
+  installationSaltCache.set(path, salt);
+  while (installationSaltCache.size > INSTALLATION_SALT_CACHE_MAX_ENTRIES) {
+    const oldest = installationSaltCache.keys().next().value;
+    if (oldest === undefined) break;
+    installationSaltCache.delete(oldest);
+  }
+}
 function readSaltFile(path: string): Uint8Array {
   const bytes = readFileSync(path);
   if (bytes.byteLength !== SALT_BYTES) {
@@ -17,7 +28,7 @@ function readSaltFile(path: string): Uint8Array {
 function cacheSalt(path: string, salt: Uint8Array): Uint8Array {
   const cached = new Uint8Array(salt);
-  installationSaltCache.set(path, cached);
+  rememberInstallationSalt(path, cached);
   return new Uint8Array(cached);
 }