@bitkyc08/opencodex 2.66.0 → 2.67.0

package/src/generated/compatibility-version.json

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "582da6b3b7ae39d6e91d09973894d284807f08d2621b958e2bac0b2486e01294"
+      "sha256": "8ba1a91d14b2cc6dbeae4ef2b23e55422532a92a7e082923687a8156bfc38ba6"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -702,11 +702,11 @@
     },
     {
       "path": "src/chat/inbound.ts",
-      "sha256": "287ea4c7585f2243db0a8a7810a4c53284a9ed1c7d928ddb3244394d9037ba95"
+      "sha256": "de18f1857e23a17ef4319c37f12677a1a0d9c3d5d6df4f656360c54a0f878739"
     },
     {
       "path": "src/chat/outbound.ts",
-      "sha256": "685dfbdb6c1768c699935c299dcdcee937bd868d0f8e241126ea75a70d8f5bb0"
+      "sha256": "1dfaa36a3ffee9e23c6016010440db60ac6f8b8b4e320de8992edaa152b71c53"
     },
     {
       "path": "src/claude/agents-inject.ts",
@@ -766,7 +766,7 @@
     },
     {
       "path": "src/claude/desktop-first-party.ts",
-      "sha256": "64e8248d78366417a6dc6c3fbf429daf547582a7e9d75bc79706dc17051d72ce"
+      "sha256": "00fab67c7be4ae5f2d30597dba49fb3cffe419171a35906bee6ff4914fe470a5"
     },
     {
       "path": "src/claude/desktop-gateway-state.ts",
@@ -812,6 +812,10 @@
       "path": "src/claude/desktop-risk.ts",
       "sha256": "0d4cb675a683fc912b9553dec3e83696b44ed6bee7555064b169fee4eebf1955"
     },
+    {
+      "path": "src/claude/first-party-settings.ts",
+      "sha256": "6bb66606a4a9ce1e9e7a4a716c08b604fa2bef80c070ec0594dc235ce4ce681e"
+    },
     {
       "path": "src/claude/gateway-cache.ts",
       "sha256": "0f27d36b7807033440ff0abdd64696ff093eee955eb968c02fe129897ac0aebe"
@@ -840,13 +844,17 @@
       "path": "src/claude/inbound.ts",
       "sha256": "41f6ddd50e2085a53be1e043d29ab9a51ff8ab20a870068fb717216e258538a9"
     },
+    {
+      "path": "src/claude/intercept/client-class.ts",
+      "sha256": "fa3da19537cedeaa402cf1d352090d0a464b48b3641a4512b6dcce0cf0be90e0"
+    },
     {
       "path": "src/claude/intercept/connect-proxy.ts",
       "sha256": "bf0a1be67f7682b1a43b2dee2af4ef65a9e3b45bc88722f6a59dccad214bd308"
     },
     {
       "path": "src/claude/intercept/listener.ts",
-      "sha256": "160162a3fab4b8e1b772c8dea43fa2406e93efa2000f71a9599b9f85de5d893b"
+      "sha256": "2c7958e2d32bbe938b5ff030824bc925427fd67b011a5d3d71add3164657afe8"
     },
     {
       "path": "src/claude/intercept/local-ca.ts",
@@ -886,7 +894,7 @@
     },
     {
       "path": "src/claude/intercept/runtime.ts",
-      "sha256": "2f0985a5e7917f6a9938e2e6318169acd73729ae5849dacd50e8cfd41512cd11"
+      "sha256": "dcb66f1ca0ab15decaa50971981acbd4668261341975d5d130f3c73e754aca6e"
     },
     {
       "path": "src/claude/intercept/settings.ts",
@@ -970,7 +978,7 @@
     },
     {
       "path": "src/cli/capabilities.ts",
-      "sha256": "f0a96d2ffaae257ac32dd87cc47c3dc469abd6a0c21279fa30916cd34fa94a55"
+      "sha256": "0ef018063668e7628285fc3573e0581772a594d2b46fa5fa9772fa95abf1aae5"
     },
     {
       "path": "src/cli/catalog-prewarm.ts",
@@ -986,11 +994,11 @@
     },
     {
       "path": "src/cli/claude-desktop.ts",
-      "sha256": "8f8cb459f7fcdb1ca6d68ffd5585ed627238c9c8eebd241e2cd6f180759da4a4"
+      "sha256": "14e42ac1aa8bc5f95ed7e7a721513dfe82888d1ad35b9ff70aaa51d8c1146523"
     },
     {
       "path": "src/cli/claude.ts",
-      "sha256": "55b3ef17fc3b0a924bcaa5fbf832bc465733086e25ab5a22b150edc98e18a40d"
+      "sha256": "30860912b1588406899a85dfd2a89c148ed374a33425fe0f506ec462b1f477de"
     },
     {
       "path": "src/cli/codex-cli-update.ts",
@@ -1042,7 +1050,7 @@
     },
     {
       "path": "src/cli/ensure-desired-integrations.ts",
-      "sha256": "eaae6885817398bab551fd2159df061e3dc65d76283e62bed858b9a62611f614"
+      "sha256": "71f41f444b7bfcf52f196750dbd9fed1661711751104a888b59f49a83152a4d4"
     },
     {
       "path": "src/cli/export-command.ts",
@@ -1078,7 +1086,7 @@
     },
     {
       "path": "src/cli/integrations.ts",
-      "sha256": "f5047871147e13e4e2ddb602ba9b962676fc202285a147b789fc4bcbb73487a0"
+      "sha256": "6c432f40a7a9a7d2ad6e44e126570f8b04b78470a4933b80094f58cb362595cf"
     },
     {
       "path": "src/cli/interactive-confirm.ts",
@@ -1218,7 +1226,11 @@
     },
     {
       "path": "src/cli/uninstall-client-state.ts",
-      "sha256": "def08adea7264720ac10905c46bc181a22a5a6d24740b9282c7decd5a3ec23c2"
+      "sha256": "ce28b78d78bb46d1cd2454b76a7b71b09257da6f5458d5e4e8ebf9ef8880a567"
+    },
+    {
+      "path": "src/cli/uninstall-integrations.ts",
+      "sha256": "128d76a30a7748dc6bd2fa3e5edc0a5f72e66f4d895e6e8e194b42cdd04acfe2"
     },
     {
       "path": "src/cli/uninstall-plan.ts",
@@ -1710,7 +1722,7 @@
     },
     {
       "path": "src/codex/history-job.ts",
-      "sha256": "61300474610957f3b260bb35dcf4e1d0b762c91c40bc27cca81752f2db985e47"
+      "sha256": "10d657f145189973a46a01aef7ea7546f4e134921e9ebd8d174f01edb83d3aa6"
     },
     {
       "path": "src/codex/history-lock.ts",
@@ -1866,7 +1878,7 @@
     },
     {
       "path": "src/codex/main-account-hard-lock.ts",
-      "sha256": "0bc383d596b439eb1e4ec413680624c5508e66f5f0540d2ff4c7a8c6c53c0c70"
+      "sha256": "adb74b84cfcf77641d9bbddb66e0ee8b2c72c619a18b25c778f4f4b390d57f18"
     },
     {
       "path": "src/codex/main-account-policy-wait.ts",
@@ -2082,7 +2094,7 @@
     },
     {
       "path": "src/codex/quota.ts",
-      "sha256": "56d31259831564630d24249f577234de94355b418d34060dd6dff7468a4f5f43"
+      "sha256": "1807f418299c8853a04c148e79ef17de7267e8fa2a57c9affba4d685cd8476dc"
     },
     {
       "path": "src/codex/refresh.ts",
@@ -2254,7 +2266,7 @@
     },
     {
       "path": "src/combos/resolve.ts",
-      "sha256": "525bea481d4d5a44ca006dce67f382e13801314222099dd322665287d1a9f496"
+      "sha256": "b5b811cde3c386b15cc16008f51176993d060a38a109d142d44899e2abce5788"
     },
     {
       "path": "src/combos/types.ts",
@@ -2310,7 +2322,7 @@
     },
     {
       "path": "src/config/load-degrade.ts",
-      "sha256": "69b7ede87427235f0ee15ab0cc8ee08e44f257ae02834d29a6a31c0b73477a34"
+      "sha256": "a0048c0001df310b6af9971da385e0da203141c8a79f912ea191653ec02af64b"
     },
     {
       "path": "src/config/multi-agent-surface.ts",
@@ -2400,6 +2412,10 @@
       "path": "src/generated/model-metadata.ts",
       "sha256": "0cd6ade32196ee0adbe598564622a95f7313bd05f358ccff1ba114aae454c0c8"
     },
+    {
+      "path": "src/generated/worker-bundles.gen.ts",
+      "sha256": "736f1ee23b6b6c76e58135830a6c1910eca41c9bf8e791825b7efe05bca3727b"
+    },
     {
       "path": "src/github/star-state.ts",
       "sha256": "bc07f465b1b0386b0aac1015e871a32041609986f392394f9019d6d5168a9fb6"
@@ -2462,7 +2478,7 @@
     },
     {
       "path": "src/images/loop.ts",
-      "sha256": "0e56ec45e903468d6820ad3a119dbee452ab340c358c51fc5aa057d2d7342576"
+      "sha256": "40a95b33b99d03d499625fd2a2c3c2948420e412d05bc90a94b7325c9f2d7f13"
     },
     {
       "path": "src/images/plan.ts",
@@ -2490,7 +2506,7 @@
     },
     {
       "path": "src/integrations/aside-profile-context.ts",
-      "sha256": "a1439512e2aabff62b0e06b3afe784f81e90d95970e6491a92d24179355e1255"
+      "sha256": "da5ab655da49e4f8bc25d25f6cbdbc19a30dd43cfc14f2f37ba3717f7ce4b4b2"
     },
     {
       "path": "src/integrations/aside-profile-journal.ts",
@@ -2778,7 +2794,7 @@
     },
     {
       "path": "src/lab/fabric/executor.ts",
-      "sha256": "0ef9546bbbff1ca242ee6f3a2776b08ccd8c35acfe4df2ca805cbe6abce75220"
+      "sha256": "bc0e5136d9d1fe8c2d4af3c3e9727234e039b22c3a4467a00b9f569dab7c0c14"
     },
     {
       "path": "src/lab/fabric/index.ts",
@@ -2802,7 +2818,7 @@
     },
     {
       "path": "src/lab/fabric/producer-isolate.ts",
-      "sha256": "71fb160dc9be4444f11fbef768b62f6e2b0300c09188b362271dd7f61368d0ac"
+      "sha256": "84e44416a63d717610aa58f92a87cb510c6142bb3310fad4a6acec037bc496b8"
     },
     {
       "path": "src/lab/fabric/producer-protocol.ts",
@@ -2810,7 +2826,7 @@
     },
     {
       "path": "src/lab/fabric/scratch.ts",
-      "sha256": "928715d9e299337f855230027593f87aba45dad372e7842a2b31d63461ba3bda"
+      "sha256": "52c7030b0771d7d653fcf8c7d335af7522807be52b2abb73741b6083617b0692"
     },
     {
       "path": "src/lab/fabric/subject.ts",
@@ -3338,7 +3354,7 @@
     },
     {
       "path": "src/lib/shadow-call.ts",
-      "sha256": "08c638e921f815ded6f6d6b41de8aebbf6e2643229a117896ad9ddfb368debd5"
+      "sha256": "c3f6a297abbcb44220ece75242c3c88e7ffa5d34a656e6d2d7ac439aaf23b556"
     },
     {
       "path": "src/lib/sidecar-tracker.ts",
@@ -3456,6 +3472,10 @@
       "path": "src/lib/winsw.ts",
       "sha256": "18a4e6e11f00daf0952ddcdbe858a1461504f185ee55e4443a2d72271a4a270b"
     },
+    {
+      "path": "src/lib/worker-embed.ts",
+      "sha256": "add44e4628cee81e86d91169f34489b4cdb598ae5099ba439da83d9e3d7b5900"
+    },
     {
       "path": "src/lib/workflow-budget.ts",
       "sha256": "f9af21a46313ca4f7d9bb60a3bf79636a844d5726a2ecf3211c3cf947ee59dbf"
@@ -3594,7 +3614,7 @@
     },
     {
       "path": "src/oauth/generic-account-failover.ts",
-      "sha256": "92050fd3de687ff4c8b9c65f0dc8aa3cd5a9b39316ce46cfacfc510f30e3331b"
+      "sha256": "49a755015c0b8605b3d909356ce450bac7e406546b147a89971f4b6a14af0e8c"
     },
     {
       "path": "src/oauth/github-copilot.ts",
@@ -3610,7 +3630,7 @@
     },
     {
       "path": "src/oauth/index.ts",
-      "sha256": "37f83894186e9173f12bae72b4a109d7816994d243a3cff7526ccf10cb8abde6"
+      "sha256": "ac37c447ab24a4573682e866990bbae4d732c755aca071908c7383c038b3681b"
     },
     {
       "path": "src/oauth/key-providers.ts",
@@ -3678,7 +3698,7 @@
     },
     {
       "path": "src/oauth/store.ts",
-      "sha256": "e05a7f2e7b4087883a9ad5e09cbe48939d2971507e9b7f681b6e832d6da2c9cb"
+      "sha256": "883da45cd9804ecdb9c4c4da1a3a9b23f04bb8234ec3d0a919e5009c6dc94537"
     },
     {
       "path": "src/oauth/token-guardian.ts",
@@ -4242,7 +4262,7 @@
     },
     {
       "path": "src/remote-control/workspace-rpc.ts",
-      "sha256": "9aafedba7a17cdf2a3407702979b373c4c74a4547764be834c9029de53867632"
+      "sha256": "60b4b631165664eead9bbc50c371fb50fba4aad5af1b1f7781da813753970eef"
     },
     {
       "path": "src/remote-control/workspace-runtime.ts",
@@ -4458,7 +4478,7 @@
     },
     {
       "path": "src/router.ts",
-      "sha256": "9fa5f7ee947c8ebacc3926eb643b79e4380f3ba6bf519e4deaafcaeaea9744a3"
+      "sha256": "dc29a6f1def3f86344e168ad2ccb2ed344c2107c854b6512894be0a4c04599ae"
     },
     {
       "path": "src/routing/analytics.ts",
@@ -4606,7 +4626,7 @@
     },
     {
       "path": "src/server/chat-completions.ts",
-      "sha256": "0dec780f581fd079c73daaac27634e201d95304be08eceab05ab247e9f757a67"
+      "sha256": "8ade0c4a2a329ea87bcbd66e9bad4efdd10105703de776afe93be8ae2560cdce"
     },
     {
       "path": "src/server/chat-native-eligibility.ts",
@@ -4702,7 +4722,7 @@
     },
     {
       "path": "src/server/index/claude-intercept-lifecycle.ts",
-      "sha256": "423ca51bbc30489478d58cda546e8b7ea021d2db4166501c17aeca56ef64a336"
+      "sha256": "f58d9aada850502eff4def4f7abde0fd90e46afcfa00c9a3447d8774a4202188"
     },
     {
       "path": "src/server/index/link-listener.ts",
@@ -4802,7 +4822,7 @@
     },
     {
       "path": "src/server/management/agent-settings-routes.ts",
-      "sha256": "9a4a2f015c6634b5d8801d9ac71706ce9deb1256634d24314edfdc8a7e3c0d58"
+      "sha256": "3bb3827a99635a5a1dadf1307a720975ae4c713b20c98a814d3cf3a04ffb9d4c"
     },
     {
       "path": "src/server/management/anthropic-reset-grant-routes.ts",
@@ -4850,7 +4870,7 @@
     },
     {
       "path": "src/server/management/context.ts",
-      "sha256": "5fba63ac83bbfdedd9ce90034252119ded812b7a0448187511f850624d579a56"
+      "sha256": "5d1a1e7e891b021501e6c7eb5be1376cb93ee1ab4b3605b5270776b8b68720cc"
     },
     {
       "path": "src/server/management/cursor-integration-routes.ts",
@@ -4894,7 +4914,7 @@
     },
     {
       "path": "src/server/management/native-integration-routes.ts",
-      "sha256": "9345d97ccd8088f605e1f87ef8ecdd89eb50f6fd16469915a68d95bb6b33ca38"
+      "sha256": "685735156a43446202cdb6c7ec015f29fccce0af9b458545324ad99723f11816"
     },
     {
       "path": "src/server/management/oauth-account-routes.ts",
@@ -5258,7 +5278,7 @@
     },
     {
       "path": "src/server/responses/core-normalize.ts",
-      "sha256": "9c228124c0c653cb8beaf1a363ac268783187a791fb3f9875533a9b4f4d27cad"
+      "sha256": "f16d82353e6d0dd45e1881e57ec85fa01791d541925ef5c7e2531a7673948e57"
     },
     {
       "path": "src/server/responses/core-opaque-recovery.ts",
@@ -5374,7 +5394,7 @@
     },
     {
       "path": "src/server/responses/request-prepare.ts",
-      "sha256": "8817239de83c7c1a09a836ca3ff8d3377fb6dd1ab35c7a1f02450c80dc051f1f"
+      "sha256": "9352f56106801fd5eb1b35c2158c16cbe5bb2a4995822aa57bab4a4901774e21"
     },
     {
       "path": "src/server/responses/request-send-budget.ts",
@@ -5414,7 +5434,7 @@
     },
     {
       "path": "src/server/responses/sidecar-execution.ts",
-      "sha256": "36137e9fde152595fe2a7ed8a74aabf587de5e06df44c5249eb32e2a658a4dcb"
+      "sha256": "ed49d956243f0a6249d84f962ab6d70b175bc9b929045d502f2a488e1e20c6b8"
     },
     {
       "path": "src/server/responses/terminal-guard.ts",
@@ -5434,7 +5454,7 @@
     },
     {
       "path": "src/server/search.ts",
-      "sha256": "f4f14fd7dbc402602efd36ab7b88c125c81400598825fe64a0f28dd73fe28f4c"
+      "sha256": "174938cdca7cc912033fea075223dab9e1e18ed6fc71210dc93513733277c6d0"
     },
     {
       "path": "src/server/sse-frame-buffer.ts",
@@ -5658,7 +5678,7 @@
     },
     {
       "path": "src/storage/policy-job.ts",
-      "sha256": "6c2da43d4aef0c5cc0fa10e70148c0e5c98666629f32e785c274e69daf448263"
+      "sha256": "2c666e2f806f11850e7cb0b60b1a8d350b27b5c5c510d7c30f8cb9a5d9abfd6e"
     },
     {
       "path": "src/storage/policy-scheduler.ts",
@@ -5674,7 +5694,7 @@
     },
     {
       "path": "src/storage/restore-job.ts",
-      "sha256": "b3bd80c88d96cd79a57fb964f58b3134a00d556e56bac01f5d4718515306048e"
+      "sha256": "b86105451682fd4687d52b3487d026c0bb6b91c7fec8f7735e8013b561571e4a"
     },
     {
       "path": "src/storage/restore-worker.ts",
@@ -5738,7 +5758,7 @@
     },
     {
       "path": "src/types/config.ts",
-      "sha256": "f1fe1246a995d371b3cfcaa30ed0cc7053eb254a44e3d8126d8e9ed321b3a0cd"
+      "sha256": "a5326aa2dd5a023eb54b25d379c8251a119fbeab7538a0521dd2d8e86fa8fd45"
     },
     {
       "path": "src/types/provider.ts",
@@ -5894,7 +5914,7 @@
     },
     {
       "path": "src/update/transactional-install.mjs",
-      "sha256": "1ee6c7a264f9ead9baf375a83555d1be8ab253f68bbe25ed39ad55e9ef45fef3"
+      "sha256": "d136edda5f71b08c4d9bd0b120c929ca74299f45baa92a8a0a935811aa0d3fef"
     },
     {
       "path": "src/update/tray-update-plan.d.mts",
@@ -6042,7 +6062,7 @@
     },
     {
       "path": "src/web-search/alpha-search.ts",
-      "sha256": "90601eaa2c953b597cc50b94b3e41dc573bd17c50826f663d78bbf84975bd722"
+      "sha256": "e33ad1f93a11d48d71c576ea566208fb88a70e4e6e1edd8926f2c9d9e30210b7"
     },
     {
       "path": "src/web-search/anthropic-executor.ts",
@@ -6052,6 +6072,10 @@
       "path": "src/web-search/backends.ts",
       "sha256": "f9bd7647eb9d45c07c6fbbb36546a14652a2f611da53eda68e91bb35890fb40a"
     },
+    {
+      "path": "src/web-search/devin-executor.ts",
+      "sha256": "45ff3df096d9ef9fe8211c7a9c401d3581950ae7c4e8b78bfdcb90423a1217a0"
+    },
     {
       "path": "src/web-search/exa-executor.ts",
       "sha256": "f3613c1db2259023c62cdeaa998c1dce40eae63ebcdef10e81cb8ddb3df30167"
@@ -6074,7 +6098,7 @@
     },
     {
       "path": "src/web-search/loop.ts",
-      "sha256": "223d6f66c4c973429bd71759e19bab51cb8e53ce3df8d64060ed8c5c34beab4b"
+      "sha256": "f103cb3f4a8f5e11b0217809818f95f3cf9a756c48695ff07294e34a5ea7762b"
     },
     {
       "path": "src/web-search/ollama-executor.ts",

package/src/generated/worker-bundles.gen.ts

@@ -0,0 +1,4 @@
+// Generated by scripts/build-standalone.ts — do not edit by hand.
+// Placeholder for source checkouts; standalone builds overwrite this file
+// with pre-bundled worker sources before compiling.
+export const WORKER_BUNDLES: Record<string, string> = {};

package/src/images/loop.ts

@@ -325,12 +325,19 @@ export interface ImageBridgeDeps {
    * `retryParsed` is the exact iteration-local request the retry will be built from. The loop
    * sends a shallow copy of the outer parsed request, so a rotation that rebinds only the outer
    * object never reaches the wire. Optional so existing callers keep compiling.
+   *
+   * A rotation may cross ACCOUNTS, not just keys, and the attempt row is where an operator reads
+   * which one happened. A rotator that knows which kind it performed returns it alongside the
+   * adapter -- the same `{ adapter, recoveryKind }` shape `onCredentialError` already uses below.
    */
   on429?: (
     retryAfterHeader: string | null,
     responseHeaders?: Headers,
     retryParsed?: OcxParsedRequest,
-  ) => ProviderAdapter | null | Promise<ProviderAdapter | null>;
+  ) =>
+    | { adapter: ProviderAdapter; recoveryKind: AttemptRecoveryKind }
+    | null
+    | Promise<{ adapter: ProviderAdapter; recoveryKind: AttemptRecoveryKind } | null>;
   /** Opt-in same-target 429 policy (key-auth providers). When present, 429 replays on the SAME key before on429 rotation. */
   retryOn429Policy?: Required<RateLimitRetryPolicy> | null;
   /** Called when the bridged Responses stream completes (parity with runTurn / routed paths). */
@@ -668,9 +675,9 @@ export async function runWithImageBridge(deps: ImageBridgeDeps): Promise<Respons
         const rotated = await deps.on429(prepared.response.headers.get("retry-after"), prepared.response.headers, iterParsed);
         if (!rotated) break;
         try { void prepared.response.body?.cancel().catch(() => {}); } catch { /* already closed */ }
-        adapter = rotated;
+        adapter = rotated.adapter;
         yield { type: "heartbeat" };
-        prepared = await fetchOnce(adapter, "key-429");
+        prepared = await fetchOnce(adapter, rotated.recoveryKind);
       }
 
       // Final headers have arrived. Clear only the deadline timer before ANY body read.

package/src/integrations/aside-profile-context.ts

@@ -131,6 +131,23 @@ export function asideRootStore(input: AsideProfilesInput): IntegrationStateStore
   return guardedStore(raw, raw.root);
 }
 
+/** Enumerate persisted owners, not desired/current profiles: uninstall must retain orphaned proof. */
+export function listAsideProfileStores(rootStore: IntegrationStateStore): Array<{ profileId: number; store: IntegrationStateStore }> {
+  const directory = join(rootStore.root, "aside-profiles");
+  storeGuard(rootStore.root, directory)();
+  let names: string[];
+  try { names = readdirSync(directory); }
+  catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") return [];
+    return storeUnsafe();
+  }
+  return names.sort().map(name => {
+    const profileId = Number(name);
+    if (!Number.isSafeInteger(profileId) || profileId < 0 || String(profileId) !== name) storeUnsafe();
+    return { profileId, store: guardedStore(createIntegrationStateStore(join(directory, name)), rootStore.root) };
+  });
+}
+
 export function assertAsideSnapshotEntry(entry: JournalEntry): void {
   if (!entry || entry.clientId !== "aside" || typeof entry.opId !== "string" || !/^[A-Za-z0-9_-]{1,128}$/.test(entry.opId) || !entry.snapshot
     || !["none", "stored", "expired"].includes(entry.snapshot.kind)

package/src/lab/fabric/executor.ts

@@ -15,8 +15,16 @@ import {
   SYNTHETIC_VALUE_PATH,
 } from "./constants";
 import { applySyntheticPatch, parseSyntheticPatchV1 } from "./patch";
-import { fabricProducerIsolationLimits, runIsolatedFabricProducer } from "./producer-isolate";
-import { assertNotUnderUserRepo, createSyntheticScratch, type ScratchTree } from "./scratch";
+import {
+  fabricProducerIsolationLimits,
+  isUnconfirmedProducerTermination,
+  runIsolatedFabricProducer,
+} from "./producer-isolate";
+import {
+  assertNotUnderUserRepo,
+  createSyntheticScratch,
+  type ScratchTree,
+} from "./scratch";
 import {
   buildTaskSubjectV1,
   sandboxProfileDigest,
@@ -24,6 +32,7 @@ import {
   taskSubjectId,
   verifierManifestDigest,
 } from "./subject";
+
 import type {
   FabricExecutionAuthority,
   FabricHarnessProducerKind,
@@ -183,6 +192,9 @@ async function runFabricSyntheticPatchTaskInternal(input: {
   let scratch: ScratchTree | undefined;
   let producerCompletedAt = startedAt;
   let lastActivityAt = startedAt;
+  // Rejected while the producer child might still be running: scratch must not
+  // be removed under it; absence of a termination proof requires manual review.
+  let producerTerminationUnconfirmed = false;
 
   try {
     scratch = createSyntheticScratch(input.configDir);
@@ -236,6 +248,7 @@ async function runFabricSyntheticPatchTaskInternal(input: {
       const completedAt = input.now?.() ?? Date.now();
       usage.elapsedMs = completedAt - startedAt;
       usage.inactiveMs = Math.max(0, completedAt - lastActivityAt);
+      producerTerminationUnconfirmed = isUnconfirmedProducerTermination(error);
       if (error instanceof FabricTaskError) {
         const failure = failureFromError(error);
         return {
@@ -418,7 +431,16 @@ async function runFabricSyntheticPatchTaskInternal(input: {
       }),
     };
   } finally {
-    scratch?.cleanup();
+    if (scratch) {
+      if (producerTerminationUnconfirmed) {
+        // No writes into producer-controlled scratch after uncertain termination.
+        // Age and later pipe closure cannot prove every descendant has exited.
+        // Retain the tree, including across parent exit and later task creation.
+        console.warn("[lab] Producer termination unconfirmed; scratch retained for manual review.");
+      } else {
+        scratch.cleanup();
+      }
+    }
   }
 }