@bitkyc08/opencodex 2.14.0 → 2.14.2

package/src/config.ts

@@ -1,6 +1,6 @@
 import { execFileSync } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
-import { chmodSync, copyFileSync, existsSync, linkSync, lstatSync, mkdirSync, readFileSync, realpathSync, renameSync, truncateSync, unlinkSync, writeFileSync } from "node:fs";
+import { chmodSync, constants as fsConstants, copyFileSync, existsSync, linkSync, lstatSync, mkdirSync, readFileSync, realpathSync, renameSync, truncateSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { Database } from "bun:sqlite";
@@ -373,7 +373,21 @@ export class OpenAiTierBackupRollbackError extends Error {
 }
 
 export class OpenAiTierBackupCollisionError extends Error {
-  constructor() { super("Existing OpenAI tier backup differs from the current config"); this.name = "OpenAiTierBackupCollisionError"; }
+  readonly configPath?: string;
+  constructor(configPath?: string) {
+    super("Existing OpenAI tier backup differs from the current config");
+    this.name = "OpenAiTierBackupCollisionError";
+    this.configPath = configPath;
+  }
+}
+
+export class OpenAiTierRollbackPreserveError extends Error {
+  readonly code?: "missing" | "not-rollback" | "mismatch" | "exhausted";
+  constructor(message: string, options?: ErrorOptions & { code?: OpenAiTierRollbackPreserveError["code"] }) {
+    super(message, options);
+    this.name = "OpenAiTierRollbackPreserveError";
+    this.code = options?.code;
+  }
 }
 
 export class OpenAiTierBackupSecretResidualError extends Error {
@@ -461,7 +475,7 @@ export function backupConfigBeforeOpenAiTierMigration(
       // point would be surprising and potentially destructive.
       const backupBytes = io.read(backup);
       if (classifyOpenAiTierBackup(backupBytes) === "rollback") {
-        throw new OpenAiTierBackupCollisionError();
+        throw new OpenAiTierBackupCollisionError(source);
       }
       console.warn("[openai-provider-migration] Replacing stale pre-migration backup (post-migration config was rewritten since last migration).");
       io.unlink(backup);
@@ -516,7 +530,7 @@ export function backupConfigBeforeOpenAiTierMigration(
     } catch (cause) {
       if (!isAlreadyExistsError(cause)) throw cause;
       const winner = io.read(backup);
-      if (!sameBytes(original, winner)) throw new OpenAiTierBackupCollisionError();
+      if (!sameBytes(original, winner)) throw new OpenAiTierBackupCollisionError(source);
       scrubUnpublishedTemp();
       return "reused";
     }
@@ -552,6 +566,67 @@ export function backupConfigBeforeOpenAiTierMigration(
   }
 }
 
+export interface OpenAiTierRollbackPreserveIO {
+  exists(path: string): boolean;
+  read(path: string): Uint8Array;
+  copyExclusive(source: string, destination: string): void;
+  unlink(path: string): void;
+}
+
+const DEFAULT_ROLLBACK_PRESERVE_IO: OpenAiTierRollbackPreserveIO = {
+  exists: existsSync,
+  read: target => readFileSync(target),
+  copyExclusive: (source, destination) => {
+    copyFileSync(source, destination, fsConstants.COPYFILE_EXCL);
+  },
+  unlink: unlinkSync,
+};
+
+const OPENAI_TIER_ROLLBACK_PRESERVE_ATTEMPTS = 16;
+
+/**
+ * Copy a rollback-classified `.pre-openai-tiers-v2.bak` to a unique
+ * `.pre-openai-tiers-v1-rollback.<timestamp>[suffix].bak` path, then unlink the
+ * blocking v2 name. The original bytes are copied with no-replace publication;
+ * the v2 path is removed only after the copy is verified. Shared by startup
+ * migration recovery and `ocx init` cleanup so the two paths cannot drift.
+ */
+export function preserveOpenAiTierRollbackSnapshot(
+  configPath = getConfigPath(),
+  io: OpenAiTierRollbackPreserveIO = DEFAULT_ROLLBACK_PRESERVE_IO,
+): string {
+  const backup = `${configPath}.pre-openai-tiers-v2.bak`;
+  if (!io.exists(backup)) {
+    throw new OpenAiTierRollbackPreserveError("OpenAI tier rollback backup is missing", { code: "missing" });
+  }
+  const original = io.read(backup);
+  if (classifyOpenAiTierBackup(original) !== "rollback") {
+    throw new OpenAiTierRollbackPreserveError("OpenAI tier backup is not a rollback snapshot", { code: "not-rollback" });
+  }
+  for (let attempt = 0; attempt < OPENAI_TIER_ROLLBACK_PRESERVE_ATTEMPTS; attempt++) {
+    const preserved = `${configPath}.pre-openai-tiers-v1-rollback.${Date.now()}${attempt ? `-${attempt}` : ""}.bak`;
+    try {
+      io.copyExclusive(backup, preserved);
+    } catch (error) {
+      if (isAlreadyExistsError(error)) continue;
+      throw error;
+    }
+    let copied: Uint8Array;
+    try {
+      copied = io.read(preserved);
+    } catch (error) {
+      throw new OpenAiTierRollbackPreserveError("Failed to read preserved rollback snapshot", { cause: error, code: "mismatch" });
+    }
+    if (!sameBytes(original, copied)) {
+      try { io.unlink(preserved); } catch { /* keep the original backup; incomplete copy is best-effort */ }
+      throw new OpenAiTierRollbackPreserveError("Preserved rollback snapshot does not match source bytes", { code: "mismatch" });
+    }
+    io.unlink(backup);
+    return preserved;
+  }
+  throw new OpenAiTierRollbackPreserveError("Unable to find a unique rollback snapshot path", { code: "exhausted" });
+}
+
 /**
  * Expand a leading `~` to the home directory in user-supplied paths
  * (OPENCODEX_HOME/CODEX_HOME set from GUIs/service files where no shell expanded it).

package/src/generated/compatibility-version.json

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "e26551c48502bd6a0c8d98eaf138efef1fa4c8741b0cea797ecc22cb05e74643"
+      "sha256": "e9ef4aa5a62aa64f795882518ae1821b3b49b5ce002310f3b1b5e5b512abdc05"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -50,7 +50,7 @@
     },
     {
       "path": "src/adapters/command-code.ts",
-      "sha256": "15fbd5b5caf01708823e75855e0159965b10b7604ee61c4e5dc9bd94bc143513"
+      "sha256": "e92d27e7988deaad93169778a57ca0afbf2f94b1ea14ba382618ea7617f14e3f"
     },
     {
       "path": "src/adapters/cursor.ts",
@@ -158,7 +158,7 @@
     },
     {
       "path": "src/adapters/cursor/request-builder.ts",
-      "sha256": "d2a9a7fe975c4c858df2bcb5b2b2c5ba43a931b1a959a18dcc504613fabc1eb1"
+      "sha256": "b2c76bb40171e70827c0119c28f246f41332dbc6965035abe37054220795ea30"
     },
     {
       "path": "src/adapters/cursor/thread-continuity.ts",
@@ -166,7 +166,7 @@
     },
     {
       "path": "src/adapters/cursor/tool-definitions.ts",
-      "sha256": "66f6c5c6b6f25c0d58cd63f6a23b8e3bf4192ac8f3608b1cfe37c9bec7d5901c"
+      "sha256": "be643963a3f36fe2c68bafb3f3a82ba5e9b59114d689f79cf83383c5852ff34f"
     },
     {
       "path": "src/adapters/cursor/transport-retry.ts",
@@ -262,19 +262,27 @@
     },
     {
       "path": "src/adapters/kiro.ts",
-      "sha256": "a134e30227b79c9ee6c64124f40f86150b06b5f1175dde565f31f14679a499e8"
+      "sha256": "c396bcf9810a1381f71957f95ed8399a13e240f5dc6be878c8836dfa7ca66f52"
     },
     {
       "path": "src/adapters/mimo-free.ts",
       "sha256": "d267d57747f6208850c64b695ee0028748ad1e352a1fd488799e6b4abdb736ef"
     },
+    {
+      "path": "src/adapters/openai-chat-url.ts",
+      "sha256": "3309bcebcf21f35e5a395187a06db326173cd0a7a652a5ecb8abc20713eb8f96"
+    },
     {
       "path": "src/adapters/openai-chat.ts",
-      "sha256": "86f37048af20ddbdd635a3e8f60369441c8d9481745fcf071ccbbe4daf7bc54b"
+      "sha256": "1fcd9a2da1e675026fa2ac03b396cefa7cd62e3c1baf27844bbe7fd589c70275"
+    },
+    {
+      "path": "src/adapters/openai-responses-url.ts",
+      "sha256": "b3acd48b0b8fcda9f2ebedb51ebfd619e1c1d1adaeca2f6965db853e6ffdc6e4"
     },
     {
       "path": "src/adapters/openai-responses.ts",
-      "sha256": "67c8971279554b0e63c2bf85981189f92f27fe3f73a618a8198f7e4980fda14b"
+      "sha256": "9c8d4483c0dacf3bf0562f08fe61b43d3c3107f1a978d66fc916c3da5dfe1d17"
     },
     {
       "path": "src/adapters/run-turn-queue.ts",
@@ -282,7 +290,7 @@
     },
     {
       "path": "src/adapters/tool-catalog-nudge.ts",
-      "sha256": "b20b726a97b85e4199ad2bcf2dfebf4040b392224e9f3b9671b00abb2c54ca81"
+      "sha256": "bf2bc3f1860ef7264df4a2f438df55cc46326c31e1a16e37f1d92b5446b5937b"
     },
     {
       "path": "src/adapters/upstream-http-error.ts",
@@ -290,7 +298,7 @@
     },
     {
       "path": "src/bridge.ts",
-      "sha256": "20c2c4b1f40828b01a223e64c415dd34c98acb0fcd78ece6dab7bfee333a5b22"
+      "sha256": "137c6d4b5cc3e7c932fed242b5200469171ae786b4835bec7f667f15a1d79a75"
     },
     {
       "path": "src/chat/inbound.ts",
@@ -458,7 +466,7 @@
     },
     {
       "path": "src/cli/init.ts",
-      "sha256": "211045465b1ecf46b0653234b8339425d42ee2fbcbdf216525ec6ed57ab20b3e"
+      "sha256": "753945880735c59dd35f3e2143a9b032945769f3ef9d8f5859c64b4493db39d0"
     },
     {
       "path": "src/cli/integrations.ts",
@@ -602,7 +610,7 @@
     },
     {
       "path": "src/codex/auth-api.ts",
-      "sha256": "97574253fcd338991070c295871373254ebf6d5924a41c7aca96cecfc865b3ea"
+      "sha256": "074bef369e3d1e300c051076088e01408183d5e95db1b405a0c0f5301e3a37d7"
     },
     {
       "path": "src/codex/auth-collision.ts",
@@ -630,7 +638,7 @@
     },
     {
       "path": "src/codex/catalog.ts",
-      "sha256": "b3a69c6d7093c4acd570f02e2704d8e3c804c14114e461444d208e9d69db1670"
+      "sha256": "ae99f51a899f5fdd753b1bd605b47d8f658885648cf26e5d1d001b5f75bb8134"
     },
     {
       "path": "src/codex/catalog/account-models.ts",
@@ -646,7 +654,7 @@
     },
     {
       "path": "src/codex/catalog/effort.ts",
-      "sha256": "f76a68fa34639b16c044990af869b4be5e6dd326741b7c0e3f0f9655f22f4da3"
+      "sha256": "c859382789a4edf333b0e269dac54ff3a29cb205de9d07e36979a20c93fbef02"
     },
     {
       "path": "src/codex/catalog/filesystem-evidence.ts",
@@ -658,23 +666,23 @@
     },
     {
       "path": "src/codex/catalog/metadata.ts",
-      "sha256": "49066e273177f772fa0adc6ee9ecb8258e3b9591d244d01fc3f6fdf0d2e695a6"
+      "sha256": "da2aff0057e1b98d62e481043b2f16fb9679b4df4226e9754963b7262fde2691"
     },
     {
       "path": "src/codex/catalog/native-models.ts",
-      "sha256": "86d7789553db1b2d70f7183c39fab59921dd704403370a0a8a7909adeff78e02"
+      "sha256": "3d8a70d56fee1cf503da01c62608b338c3ec293114d1825c0bd1f96f817cda99"
     },
     {
       "path": "src/codex/catalog/parsing.ts",
-      "sha256": "630f020fda702d07a90f1ff147a03ca284d69e32482d4e4c3020c25cd988e4ce"
+      "sha256": "2c3e16a4615e98d0bea0acee6994661eddeb7df80488a44d4bec253bb7ca1e79"
     },
     {
       "path": "src/codex/catalog/provider-fetch.ts",
-      "sha256": "9f2bb70bcc8efe942b13c7b94cb06387948a2db8baba9042114787f3a5de8931"
+      "sha256": "61c35c9a09ada9c79f2b2979612e6ef618d735afa0b33d5f5915b5ab2e39ccde"
     },
     {
       "path": "src/codex/catalog/sync.ts",
-      "sha256": "06b4ffdf20f60e81ba881e2390e099910aaa14da8b95ce4568471e5757af7861"
+      "sha256": "6f2846d1b03ffb21b73381ba833703f14b303532c0ef028945cd463ecc639beb"
     },
     {
       "path": "src/codex/codex-write-lock.ts",
@@ -706,7 +714,7 @@
     },
     {
       "path": "src/codex/features.ts",
-      "sha256": "5a3aade98f3aaeb40e8e86c46c1b95f194f67ad27aa12152a0ce1ebf29cae0d2"
+      "sha256": "f6e64aa07c4ac8330df679a2b613fac84029d2fe1b8f0d5e8ace27ea664dda16"
     },
     {
       "path": "src/codex/generation.ts",
@@ -782,7 +790,7 @@
     },
     {
       "path": "src/codex/model-cache.ts",
-      "sha256": "26c3b39ad812d8d102bd418486e9902b56e6280369a03a40cf34b0f4b6b5bd27"
+      "sha256": "f49cb78b3af7487d1da6f9bbb578615a75644f1a176e5ca89096186219456e94"
     },
     {
       "path": "src/codex/native-main-admission.ts",
@@ -794,7 +802,7 @@
     },
     {
       "path": "src/codex/native-main-claim.ts",
-      "sha256": "565253a6bcf94e2444f75bf4bda9bdd713af17ad7330c4677571792cbcd75590"
+      "sha256": "64f5c342243e8420859ba013d987f6d1514b79f57dde662ae721ff9a8da2cf38"
     },
     {
       "path": "src/codex/native-main-lock-file.ts",
@@ -958,7 +966,7 @@
     },
     {
       "path": "src/config.ts",
-      "sha256": "dbbabcdc1f62870ed69ecc6da675b7f82705d3f97179ad4841ad4ca368cd5932"
+      "sha256": "d98507303396605a2f698448295572038d6f30f3593af58910d04ecec918e9b8"
     },
     {
       "path": "src/generated/model-metadata.ts",
@@ -1314,7 +1322,7 @@
     },
     {
       "path": "src/lab/ledger/store.ts",
-      "sha256": "a81290c3d76479d303f66dc75d45f3bbd7b68d3a3f5dc04b5ab20f96a63bf2fb"
+      "sha256": "75d8b2581e5766aa5d2b66432f396456a6b12e2a4a2286745b2ba32bc67bf3a7"
     },
     {
       "path": "src/lab/live/credential-lease.ts",
@@ -1442,7 +1450,7 @@
     },
     {
       "path": "src/lab/subject/installation-salt.ts",
-      "sha256": "6decbe8942ba547b7e59d4e4eeb6216d9b733bb5e2ddc3c601777dc9f58fa2ac"
+      "sha256": "292ae399517d544d12d1d009510baa43fb150b24e4dcccadc6b5d4db151c2911"
     },
     {
       "path": "src/lab/subject/protocol-subject.ts",
@@ -1466,7 +1474,7 @@
     },
     {
       "path": "src/lib/app-owned-memory-stores.ts",
-      "sha256": "d4852d93145f8a765bf0374bd37e734970e2eb50bb559ea8a42f3921aa05e8c9"
+      "sha256": "947c1cd5bdff6e15de778a76eb4d2d4cf103bf482354d2736003807b2e8d409c"
     },
     {
       "path": "src/lib/app-owned-memory.ts",
@@ -1644,6 +1652,10 @@
       "path": "src/lib/token-estimate.ts",
       "sha256": "2c3cc4b8193166ca100197ca22202b06ac98c02547ffe32f3e0f8720190b9897"
     },
+    {
+      "path": "src/lib/tool-argument-integers.ts",
+      "sha256": "f0a2d8dea66735881d7aebf98ebe3b2657fb6422f540289e0aba1721d17ec990"
+    },
     {
       "path": "src/lib/translator-budget.ts",
       "sha256": "872d5d35eb0d2ee099fc4ab4bf3b9331c6207d4282f61f2c1b11a5a36c00d981"
@@ -1774,7 +1786,7 @@
     },
     {
       "path": "src/oauth/nous.ts",
-      "sha256": "76013229a77a53b3eab34d14f73e84ecef693f4e7939e37414570cb5ff751549"
+      "sha256": "49fb089b01a8a118e575069d2308912b7fd661ef882913193b0e9f4d8df28201"
     },
     {
       "path": "src/oauth/pkce.ts",
@@ -1818,7 +1830,7 @@
     },
     {
       "path": "src/providers/base-url-choices.ts",
-      "sha256": "ec5f3f084616f79dde7149d1bb5dc88bb9b3c406cd08698e499863c15c375c7f"
+      "sha256": "f75c050dd851d38fd90335def782699aea43f89930dfff95060fa88d9724a9a6"
     },
     {
       "path": "src/providers/codex-capacity.ts",
@@ -1826,7 +1838,7 @@
     },
     {
       "path": "src/providers/command-code-efforts.ts",
-      "sha256": "437845ad99e09307450889f149dd7770a69770dbcd4d024506f560e739804292"
+      "sha256": "279cf80e7d2a3e2019f23bb8761f4cb7a6a58d0ce754b974e1b3d759c76bbff1"
     },
     {
       "path": "src/providers/context-cap.ts",
@@ -1868,13 +1880,21 @@
       "path": "src/providers/model-discovery.ts",
       "sha256": "298d6f169883bfd5de3b6059fb3ae71c07328d0cec85cf4e188b80e78a50edc6"
     },
+    {
+      "path": "src/providers/model-rename-migration.ts",
+      "sha256": "cc3bd468dba3387eff13aedaa1fc48e68ea328fb5bc77c02d17bd84dce5e6393"
+    },
+    {
+      "path": "src/providers/model-rename-startup.ts",
+      "sha256": "8a143284d736759bf63c8cb296c19e61dec9596dfc781d8dd87038778153f55f"
+    },
     {
       "path": "src/providers/openai-sidecar.ts",
       "sha256": "d07ec55e8600563fa9cbdb9e535cfecb8163b8235aa44547c9359f6ca8ce62d1"
     },
     {
       "path": "src/providers/openai-tier-startup.ts",
-      "sha256": "5dc89dd548d71a5f5e25b85a5f924125f4faeb74c23a327f74294eb40ba414d0"
+      "sha256": "41256c1ef4b2271168a52dcfb3ab986077cfa8edc0386230a01f5b196155ca42"
     },
     {
       "path": "src/providers/openai-tiers.ts",
@@ -1898,11 +1918,11 @@
     },
     {
       "path": "src/providers/quota.ts",
-      "sha256": "d2d0f30c3e8dad900c8dce0ba0278a975f809b5e39830def8d59fe8663aefa99"
+      "sha256": "fa2d207d569be34fd50fd72b90389e3e4147c5101cce4318629f3f21172a5e9a"
     },
     {
       "path": "src/providers/registry.ts",
-      "sha256": "e840dcdf478cfcdee036d8de79a849a4ed303f7f25a01a4caff616d57b0d3855"
+      "sha256": "cfa71c40b3f93b2e21e62838ddbfb42ff93577b077f6aadbe34158089aedb307"
     },
     {
       "path": "src/providers/slug-codec.ts",
@@ -1946,11 +1966,11 @@
     },
     {
       "path": "src/responses/spill-store.ts",
-      "sha256": "f16559b63a214861cbbc47908653b831ae7ade2aa88f1cfd3c0907373d668f99"
+      "sha256": "c0cd3343d0803eb6d14203f19d6ee38f33110042d8aa896cc9f60bd422ca8f21"
     },
     {
       "path": "src/responses/state.ts",
-      "sha256": "7d5586e7b48ced98e9ca38ee077fc828a53ab2425651c258688b43fb608542e7"
+      "sha256": "59952393060143aae734770fbf78761a8cc69e5b6335c6452bdf5ac7da686bb4"
     },
     {
       "path": "src/responses/tool-groups.ts",
@@ -1958,7 +1978,7 @@
     },
     {
       "path": "src/router.ts",
-      "sha256": "a431e4b5b86e615cdcb2ccb635b3c285bc8579dc93ec2d41f53af1ebb97cdc5a"
+      "sha256": "8d555a3112f6f5aee67f4768880638f729baa145885bce9bd4e4cd5fcce34f7b"
     },
     {
       "path": "src/routing/analytics.ts",
@@ -2094,7 +2114,7 @@
     },
     {
       "path": "src/server/index.ts",
-      "sha256": "5bd284761bb05a0069f10c6cd6a686b2a600665de5d77e39579936b77747ebca"
+      "sha256": "cff5571eb50f6ec315fa2f3ddd835d3bdd25b59c94a5b991771f066ad3e3ffc2"
     },
     {
       "path": "src/server/lifecycle.ts",
@@ -2130,7 +2150,7 @@
     },
     {
       "path": "src/server/management/api-key-usage.ts",
-      "sha256": "37ef0b22cb1b7b2a03177c39cf609ebe40183aeadeab11462a17e67cc2e6848f"
+      "sha256": "86a9fbebb6986d115b46e32da123b706d9ee773881bfa5e13b9d87554d89001f"
     },
     {
       "path": "src/server/management/body.ts",
@@ -2142,7 +2162,7 @@
     },
     {
       "path": "src/server/management/config-routes.ts",
-      "sha256": "999e5668ca4cfe4f0bade38b11546fc40382c3396d5c50e46cd019f0e0fd50f8"
+      "sha256": "621ca958cebfdf9e4486af305f31b950768b045a666b5dbf4da5ea4c7153a805"
     },
     {
       "path": "src/server/management/context.ts",
@@ -2162,7 +2182,7 @@
     },
     {
       "path": "src/server/management/logs-usage-routes.ts",
-      "sha256": "bcd6c00783c78a3dd1a5b71a482f15595fefcf07610506729e309bd312b3e2f2"
+      "sha256": "645c8902e0d3b589a5b20a7d607fb9b40197f34a4c73945a4bf9fd91336bf15e"
     },
     {
       "path": "src/server/management/model-routes.ts",
@@ -2182,7 +2202,7 @@
     },
     {
       "path": "src/server/management/provider-routes.ts",
-      "sha256": "d5a5a4980f1a5cf56a994a8d2b454c86c376ec9161b3e67903b1fc768bf59cf2"
+      "sha256": "af98e4f45ae93adcc5e66e2b51f0dc08c0a3406924b5a63b97698dcdc1eeeb1d"
     },
     {
       "path": "src/server/management/request-history-routes.ts",
@@ -2218,7 +2238,7 @@
     },
     {
       "path": "src/server/management/usage-summary-cache.ts",
-      "sha256": "fb1b889f645afb2efb02f49d78f3390c504d073867af627ace9d29f97318fc9f"
+      "sha256": "a8a386202dac11802e51c3bef85ce868363f80ed05aef9db3775109e40a2aba2"
     },
     {
       "path": "src/server/management/vision-sidecar-options.ts",
@@ -2306,7 +2326,7 @@
     },
     {
       "path": "src/server/responses/collaboration.ts",
-      "sha256": "e3bcb01890c2d5e3b2f5032de223a537455c21bf06a134e4f5c828c6b56dc243"
+      "sha256": "bfeef4d9bf5538d850446d5805769779518b62f8ef33693ecfd1c48f8545093e"
     },
     {
       "path": "src/server/responses/compact.ts",
@@ -2314,7 +2334,7 @@
     },
     {
       "path": "src/server/responses/core.ts",
-      "sha256": "d3152413a69957fd952e0f6dd8a5e0837aea6d1f0a71f4693580e4176221f317"
+      "sha256": "c67fdae5470a8d0c234e24d7d062bf351ec35c911550363c8d73199f4059fc95"
     },
     {
       "path": "src/server/responses/encrypted-payload.ts",
@@ -2322,7 +2342,7 @@
     },
     {
       "path": "src/server/responses/fetch-helpers.ts",
-      "sha256": "5763bccb7c460cc4031f45c728bce9db14f8af010face733108216232ef07d13"
+      "sha256": "c0dd5255a485b23fcef54378cd1ea2eac40f7824952050f8e9db9c3d02f0e2d2"
     },
     {
       "path": "src/server/responses/passthrough-error.ts",
@@ -2340,6 +2360,10 @@
       "path": "src/server/responses/upstream-error.ts",
       "sha256": "e74ff94134f82d594891242b49d03619771f938bde3dc4b6c96a527510da2546"
     },
+    {
+      "path": "src/server/responses/ws-upstream.ts",
+      "sha256": "f697ac29a3b1965c4d77531abd69ed382d938ed503c951834205cffe6d8e9757"
+    },
     {
       "path": "src/server/search.ts",
       "sha256": "62a6c940ca5d967ea2a766e6d864c6df77e74130c99d0cacf4f4380cb01fbb5a"
@@ -2358,7 +2382,7 @@
     },
     {
       "path": "src/server/startup-health-cache.ts",
-      "sha256": "2ef39b33ec79cd6f8d1bf9040ce1510c32142a643d7a9e2ba56690fe23995da5"
+      "sha256": "0193264ad0f951085d774e052342385aa5043fa2b0dbd5fba224a4b790604f1f"
     },
     {
       "path": "src/server/system-env.ts",
@@ -2514,7 +2538,7 @@
     },
     {
       "path": "src/usage/log.ts",
-      "sha256": "b96cacb9e6eaac59eeaee8f5124a985cc0d14169364401eec80a10a8d3a24a76"
+      "sha256": "db69314bab2520a05889a3cef8c1de042ecdcdb67792f687399eb23c140e2c75"
     },
     {
       "path": "src/usage/summary.ts",
@@ -2546,12 +2570,16 @@
     },
     {
       "path": "src/vision/index.ts",
-      "sha256": "187d229d74b6fda82e3ad4117c2bb5f17ccfadb213ef728a48c39ef32f17f510"
+      "sha256": "b3c27892a17ea2176c2b6361830800772a6efea5681fff570b3ca5da77626bbc"
     },
     {
       "path": "src/vision/reasoning.ts",
       "sha256": "7b5ba571d9e727304f9cc053baaf82a5023fd2dad92f7fbf01af7edb8cfca21a"
     },
+    {
+      "path": "src/vision/timeout-bounds.ts",
+      "sha256": "65a3124c6817cda51eb529520652576ffb1e92db433112162c0065104954eaba"
+    },
     {
       "path": "src/web-search/anthropic-executor.ts",
       "sha256": "dc7be63143d4ba70cb5e8127fe2d5231bbabb724ee4715a091bfcc336d48eb32"

package/src/lab/ledger/store.ts

@@ -25,7 +25,6 @@ export interface LedgerStore {
   replay(): ReplayResult;
 }
 
-const eventIdIndexByLedger = new Map<string, Set<string>>();
 const LEDGER_LOCK_STALE_MS = 60_000;
 const LEDGER_LOCK_WAIT_MS = 5_000;
 
@@ -157,21 +156,6 @@ function withLedgerLock<T>(ledgerPath: string, fn: () => T): T {
   }
 }
 
-/** Load or build the in-memory event-id index for a ledger path. */
-function loadEventIdIndex(ledgerPath: string): Set<string> {
-  let index = eventIdIndexByLedger.get(ledgerPath);
-  if (!index) {
-    index = new Set();
-    if (existsSync(ledgerPath)) {
-      for (const event of replayLabLedger(ledgerPath).events) {
-        index.add(event.eventId);
-      }
-    }
-    eventIdIndexByLedger.set(ledgerPath, index);
-  }
-  return index;
-}
-
 /** Durable append of one validated event as a single JSONL line + fsync. */
 export function appendLabEvent(ledgerPath: string, event: LabEvent): void {
   const validated = validateLabEvent(event);
@@ -192,7 +176,6 @@ export function appendLabEvent(ledgerPath: string, event: LabEvent): void {
   } finally {
     closeSync(fd);
   }
-  loadEventIdIndex(ledgerPath).add(validated.eventId);
 }
 
 /**
@@ -209,7 +192,6 @@ export function appendLabEventIfAbsent(ledgerPath: string, event: LabEvent): boo
         fresh.add(row.eventId);
       }
     }
-    eventIdIndexByLedger.set(ledgerPath, fresh);
     if (fresh.has(validated.eventId)) return false;
     appendLabEvent(ledgerPath, validated);
     return true;

package/src/lab/subject/installation-salt.ts

@@ -4,9 +4,20 @@ import { dirname } from "node:path";
 import { labInstallationSaltPath, labRoot } from "../paths";
 
 const SALT_BYTES = 32;
-const installationSaltCache = new Map<string, Uint8Array>();
+export const INSTALLATION_SALT_CACHE_MAX_ENTRIES = 16;
+export const installationSaltCache = new Map<string, Uint8Array>();
 const UNSUPPORTED_DIRECTORY_FSYNC_CODES = new Set(["EINVAL", "ENOTSUP", "EOPNOTSUPP", "ENOSYS"]);
 
+export function rememberInstallationSalt(path: string, salt: Uint8Array): void {
+  installationSaltCache.delete(path);
+  installationSaltCache.set(path, salt);
+  while (installationSaltCache.size > INSTALLATION_SALT_CACHE_MAX_ENTRIES) {
+    const oldest = installationSaltCache.keys().next().value;
+    if (oldest === undefined) break;
+    installationSaltCache.delete(oldest);
+  }
+}
+
 function readSaltFile(path: string): Uint8Array {
   const bytes = readFileSync(path);
   if (bytes.byteLength !== SALT_BYTES) {
@@ -17,7 +28,7 @@ function readSaltFile(path: string): Uint8Array {
 
 function cacheSalt(path: string, salt: Uint8Array): Uint8Array {
   const cached = new Uint8Array(salt);
-  installationSaltCache.set(path, cached);
+  rememberInstallationSalt(path, cached);
   return new Uint8Array(cached);
 }
 

package/src/lib/app-owned-memory-stores.ts

@@ -34,6 +34,10 @@ import {
   evictOldestUsageSummaryForBudget,
   usageSummaryRetainedStoreSnapshot,
 } from "../server/management/usage-summary-cache";
+import {
+  discardRetainedUsageSnapshot,
+  retainedUsageSnapshotStats,
+} from "../usage/log";
 import {
   cursorBlobRetainedStoreSnapshot,
   evictOldestCursorBlobForBudget,
@@ -57,6 +61,18 @@ function ringSnapshot(metrics: { entries: number; bytes: number; oldestAt: numbe
   };
 }
 
+/** The retained usage tail is a single all-or-nothing entry: evicting it drops the whole tail. */
+function usageSnapshotRetainedStoreSnapshot(): RetainedStoreSnapshot {
+  const stats = retainedUsageSnapshotStats();
+  return {
+    count: stats.count,
+    bytes: stats.bytes,
+    evictableBytes: stats.bytes,
+    pinnedBytes: 0,
+    oldestAt: stats.oldestAt,
+  };
+}
+
 function providerDebugSnapshot(): RetainedStoreSnapshot {
   return ringSnapshot(debugBufferMetrics());
 }
@@ -134,6 +150,12 @@ export const APP_OWNED_RETAINED_STORE_REGISTRATIONS = [
     snapshot: usageSummaryRetainedStoreSnapshot,
     evictOldest: evictOldestUsageSummaryForBudget,
   },
+  {
+    id: "usage_snapshot",
+    category: "caches",
+    snapshot: usageSnapshotRetainedStoreSnapshot,
+    evictOldest: discardRetainedUsageSnapshot,
+  },
   {
     id: "cursor_blobs",
     category: "blobs",