@inetafrica/open-claudia 3.4.12 → 3.4.14

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 3.4.14
+
+- Subscribe to managed call audio only when gateway-authenticated publisher metadata identifies a User. Exclude bots, the current bot's other feeds, and missing or malformed classifications before creating subscriber connections or speech streams.
+- Preserve metadata through the initial room response and live publisher events. Managed calls use that authenticated classification; legacy calls retain their existing display-prefix exclusion because client-supplied metadata is untrusted.
+- Exercise the actual session subscription and offer/answer path for allowed users and rejected bot, self and unknown feeds.
+
+## 3.4.13
+
+- **Codex is now measured the way Claude is.** After each Codex turn the bot reads Codex's own per-request token log (`$CODEX_HOME/sessions/…/rollout-*-<thread>.jsonl`) and uses the last request's size as the live context, instead of the turn's input summed over every tool call. That sum (33M on one turn) tripped auto-compact after almost every substantial Codex turn — 8 needless compactions on 2026-09-05, each a summary run plus a cold restart — while Codex's real window occupancy never exceeded 245k of its 258k window. Codex sessions now compact at 80% of the window Codex reports.
+- **Codex usage was mis-recorded three ways; all fixed.** (1) `turn.completed` usage is per turn by Codex's own definition, but the ledger treated it as a running total and subtracted the previous turn — 9 of 36 Codex turns that day were logged as zero. (2) OpenAI counts cached tokens inside `input_tokens`; the ledger and `/usage` now report uncached input for both providers (the raw comparison read 89.7M vs 4.5k for what was really 2.4M vs 0.8M). (3) Sub-agent threads Codex spawns with `spawn_agent` never appeared anywhere: the day's ten hidden threads read ~240M tokens and took a weekly quota from 75% to 100% in two hours. They are now attributed to the parent turn (`subagentThreads`, `subagentInputTokens`, …) and shown by `/usage`.
+- **Quota and window visibility.** Ledger rows carry `contextWindowTokens`, `requests`, `providerCompactions` (Codex's own compactions) and the plan quota snapshot (`quotaUsedPercent`, `quotaResetsAt`); `/usage` prints window occupancy, sub-agent totals and quota used.
+
 ## 3.4.12
 
 - Keep incoming calls on their per-attempt admission policy when the organization canary setting changes; managed access supplies the assigned gateway and TURN configuration. Owner-only audio calling remains enforced.

package/channels/kazee/call/session.js

@@ -256,8 +256,8 @@ class KazeeCallSession {
     }
     for (const publisher of data.publishers || []) {
       const feedId = Number(publisher.id);
-      if (Number.isSafeInteger(feedId) && feedId > 0 && feedId !== this.publisherId && !this.subscribers.has(feedId) && !String(publisher.display || "").startsWith("open-claudia:")) {
-        await this._subscribe(feedId, publisher.display);
+      if (Number.isSafeInteger(feedId) && feedId > 0 && feedId !== this.publisherId && !this.subscribers.has(feedId)) {
+        await this._subscribe(feedId, publisher.display, publisher.metadata);
       }
     }
     if (data.videoroom === "joined") {
@@ -357,8 +357,21 @@ class KazeeCallSession {
     this.speak(this.greeting).catch((error) => console.error("Kazee call greeting:", error.message));
   }
 
-  async _subscribe(feedId, display) {
-    if (this.subscribers.has(feedId)) return;
+  async _subscribe(feedId, display, metadata) {
+    if (this.closed || feedId === this.publisherId || this.subscribers.has(feedId)) return;
+    if (this.managedRoom) {
+      // Only the enforced gateway owns this metadata. Display remains an email
+      // for presentation, and cannot tell us whether a publisher is another bot.
+      // Missing or malformed classification must not start STT on an unknown feed.
+      const principal = metadata?.kazee;
+      if (!principal || Array.isArray(principal) || principal.version !== 1 ||
+        typeof principal.userId !== "string" || !/^[a-f\d]{24}$/i.test(principal.userId) ||
+        !["User", "Bot"].includes(principal.principalKind) || principal.principalKind === "Bot" ||
+        principal.userId.toLowerCase() === this.botUserId.toLowerCase()) return;
+    } else if (String(display || "").startsWith("open-claudia:")) {
+      // Legacy/direct rooms allow client metadata, so it is not a trusted source.
+      return;
+    }
     // Reserve the slot before the first await: the join response and the async
     // publishers event both list the same feed, and while attach() is in
     // flight the second frame passes the caller's has() check and subscribes

package/core/handlers.js

@@ -1684,6 +1684,16 @@ register({
       `Cost: $${u.costUsd.toFixed(4)}`,
       `Last turn context: ${fmt(u.lastInputTokens)}`,
     ];
+    const occupancy = u.liveContextTokens || u.lastInputTokens || 0;
+    if (u.contextWindowTokens > 0) {
+      lines.push(`Context window: ${fmt(occupancy)} of ${fmt(u.contextWindowTokens)} (${Math.round((100 * occupancy) / u.contextWindowTokens)}%)`);
+    }
+    if (u.subagentThreads > 0) {
+      lines.push(`Provider sub-agents: ${u.subagentThreads} thread${u.subagentThreads === 1 ? "" : "s"} · ${fmt(u.subagentInputTokens || 0)} in / ${fmt(u.subagentOutputTokens || 0)} out (spawned by the model; not in the totals above)`);
+    }
+    if (Number.isFinite(u.quotaUsedPercent)) {
+      lines.push(`Plan quota used: ${u.quotaUsedPercent}%${u.quotaResetsAt ? ` (resets ${String(u.quotaResetsAt).slice(0, 16).replace("T", " ")}Z)` : ""}`);
+    }
     if (u.lastInputTokens > 200000) {
       const threshold = effectiveCompactThreshold(currentState());
       if (threshold === 0) {

package/core/providers/codex-events.js

@@ -102,7 +102,9 @@ function normalizeCodexEvent(rawEvent, state = createCodexParserState()) {
     if (state.terminal) return [];
     state.terminal = true;
     const events = [];
-    const usage = normalizedUsage(rawEvent.usage, "session_total", state.seenUsage);
+    // Per-turn by Codex's own definition ("the usage of tokens during a turn",
+    // exec_events.rs) — not a session total; see runner.normalizeCodexUsage.
+    const usage = normalizedUsage(rawEvent.usage, "turn", state.seenUsage);
     if (usage) events.push(usage);
     events.push({
       type: "result",

package/core/providers/codex-rollout.js

@@ -0,0 +1,312 @@
+"use strict";
+
+// Codex writes one JSONL "rollout" per thread under $CODEX_HOME/sessions/
+// YYYY/MM/DD/rollout-<local start>-<thread id>.jsonl. Every model request
+// appends an event_msg/token_count record whose info.last_token_usage is that
+// single request (input_tokens INCLUDES cached_input_tokens, so it is the
+// window occupancy after the request), plus info.model_context_window and a
+// rate_limits snapshot (the ChatGPT-plan quota). Codex's own compactions land
+// as top-level "compacted" records, and threads the model spawned with
+// spawn_agent get their own rollout whose session_meta carries
+// thread_source "subagent" and parent_thread_id.
+//
+// `codex exec --json` itself only reports the per-turn total (turn.completed),
+// so this reader is how Open Claudia measures Codex the way it measures
+// Claude: peak/last single-request context instead of the turn-summed input,
+// and sub-agent threads the turn total never mentions (probed live
+// 2026-09-05: three parallel sub-agents took a weekly quota from 75% to 100%
+// while the ledger saw none of it).
+
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+
+const DAY_MS = 24 * 60 * 60 * 1000;
+const DEFAULT_LOOKBACK_DAYS = 3;
+// session_meta carries the full base instructions (~22 KB observed on
+// 0.153.4), so the first line is read in chunks until its newline.
+const FIRST_LINE_CHUNK_BYTES = 65536;
+const FIRST_LINE_MAX_BYTES = 4 * 1024 * 1024;
+
+function resolveCodexHome(env = process.env) {
+  const raw = (env && env.CODEX_HOME) || process.env.CODEX_HOME;
+  return raw ? path.resolve(String(raw)) : path.join(os.homedir(), ".codex");
+}
+
+function pad(n) { return String(n).padStart(2, "0"); }
+
+function dayDirs(codexHome, { now = Date.now(), days = DEFAULT_LOOKBACK_DAYS } = {}) {
+  // Rollout directories use the local date; include the UTC date too so a
+  // thread that straddles midnight in either clock is still found.
+  const seen = new Set();
+  const dirs = [];
+  for (let back = 0; back < days; back += 1) {
+    const d = new Date(now - back * DAY_MS);
+    const candidates = [
+      `${d.getFullYear()}/${pad(d.getMonth() + 1)}/${pad(d.getDate())}`,
+      `${d.getUTCFullYear()}/${pad(d.getUTCMonth() + 1)}/${pad(d.getUTCDate())}`,
+    ];
+    for (const rel of candidates) {
+      if (seen.has(rel)) continue;
+      seen.add(rel);
+      const full = path.join(codexHome, "sessions", rel);
+      try { if (fs.statSync(full).isDirectory()) dirs.push(full); } catch (_) {}
+    }
+  }
+  return dirs;
+}
+
+function listRollouts(codexHome, options = {}) {
+  const out = [];
+  for (const dir of dayDirs(codexHome, options)) {
+    let names = [];
+    try { names = fs.readdirSync(dir); } catch (_) { continue; }
+    for (const name of names) {
+      if (!name.startsWith("rollout-") || !name.endsWith(".jsonl")) continue;
+      out.push(path.join(dir, name));
+    }
+  }
+  return out;
+}
+
+function threadIdOf(filePath) {
+  const base = path.basename(filePath, ".jsonl");
+  // rollout-2026-09-05T19-19-01-<uuid>: the uuid is the trailing 36 chars.
+  const match = base.match(/-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/i);
+  return match ? match[1] : null;
+}
+
+function findRolloutFile(threadId, { codexHome = resolveCodexHome(), now = Date.now(), days = DEFAULT_LOOKBACK_DAYS } = {}) {
+  if (!threadId) return null;
+  const suffix = `-${String(threadId)}.jsonl`;
+  for (const file of listRollouts(codexHome, { now, days })) {
+    if (file.endsWith(suffix)) return file;
+  }
+  return null;
+}
+
+function parseTs(value) {
+  const t = Date.parse(String(value || ""));
+  return Number.isFinite(t) ? t : null;
+}
+
+function readSessionMeta(filePath) {
+  let fd = null;
+  try {
+    fd = fs.openSync(filePath, "r");
+    const chunks = [];
+    let total = 0;
+    let firstLine = null;
+    while (total < FIRST_LINE_MAX_BYTES) {
+      const buffer = Buffer.alloc(FIRST_LINE_CHUNK_BYTES);
+      const read = fs.readSync(fd, buffer, 0, FIRST_LINE_CHUNK_BYTES, total);
+      if (read <= 0) break;
+      chunks.push(buffer.subarray(0, read));
+      total += read;
+      const newline = buffer.subarray(0, read).indexOf(0x0a);
+      if (newline >= 0) {
+        firstLine = Buffer.concat(chunks).toString("utf8", 0, total - read + newline);
+        break;
+      }
+    }
+    if (firstLine === null) firstLine = Buffer.concat(chunks).toString("utf8");
+    const record = JSON.parse(firstLine);
+    if (record && record.type === "session_meta" && record.payload) return normalizeSessionMeta(record);
+    return null;
+  } catch (_) {
+    return null;
+  } finally {
+    if (fd !== null) { try { fs.closeSync(fd); } catch (_) {} }
+  }
+}
+
+function normalizeSessionMeta(record) {
+  const p = record.payload || {};
+  return {
+    threadId: p.id || p.session_id || null,
+    timestamp: parseTs(p.timestamp || record.timestamp),
+    threadSource: typeof p.thread_source === "string" ? p.thread_source : (p.thread_source ? "subagent" : null),
+    parentThreadId: p.parent_thread_id || null,
+    agentNickname: p.agent_nickname || null,
+    cliVersion: p.cli_version || null,
+    originator: p.originator || null,
+  };
+}
+
+function num(value) {
+  const n = Number(value);
+  return Number.isFinite(n) ? n : 0;
+}
+
+function usageOf(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  return {
+    input: num(raw.input_tokens),
+    cached: num(raw.cached_input_tokens),
+    cacheWrite: num(raw.cache_write_input_tokens),
+    output: num(raw.output_tokens),
+    reasoning: num(raw.reasoning_output_tokens),
+  };
+}
+
+function emptyTotals() {
+  return { input: 0, cached: 0, cacheWrite: 0, output: 0, reasoning: 0 };
+}
+
+function addTotals(target, usage) {
+  target.input += usage.input;
+  target.cached += usage.cached;
+  target.cacheWrite += usage.cacheWrite;
+  target.output += usage.output;
+  target.reasoning += usage.reasoning;
+  return target;
+}
+
+function rateLimitsOf(raw) {
+  if (!raw || typeof raw !== "object") return null;
+  const primary = raw.primary && typeof raw.primary === "object" ? raw.primary : null;
+  const secondary = raw.secondary && typeof raw.secondary === "object" ? raw.secondary : null;
+  const window = (w) => (w ? {
+    usedPercent: Number.isFinite(Number(w.used_percent)) ? Number(w.used_percent) : null,
+    windowMinutes: Number.isFinite(Number(w.window_minutes)) ? Number(w.window_minutes) : null,
+    resetsAt: Number.isFinite(Number(w.resets_at)) ? new Date(Number(w.resets_at) * 1000).toISOString() : null,
+  } : null);
+  return {
+    planType: raw.plan_type || null,
+    primary: window(primary),
+    secondary: window(secondary),
+    limitReached: raw.rate_limit_reached_type || null,
+  };
+}
+
+// Parse one rollout. `since` (ms epoch) keeps only records from the current
+// turn — a rollout holds the whole thread, every turn since it was created.
+function parseRollout(filePath, { since = 0 } = {}) {
+  let text;
+  try { text = fs.readFileSync(filePath, "utf8"); } catch (_) { return null; }
+  const result = {
+    file: filePath,
+    threadId: threadIdOf(filePath),
+    sessionMeta: null,
+    requests: [],
+    totals: emptyTotals(),
+    peakContextTokens: 0,
+    lastContextTokens: 0,
+    modelContextWindow: null,
+    compactions: 0,
+    rateLimits: null,
+    lastEventAt: null,
+  };
+  let previousFingerprint = null;
+  for (const line of text.split("\n")) {
+    if (!line) continue;
+    let record;
+    try { record = JSON.parse(line); } catch (_) { continue; }
+    if (!record || typeof record !== "object") continue;
+    if (record.type === "session_meta" && !result.sessionMeta) {
+      result.sessionMeta = normalizeSessionMeta(record);
+      if (!result.threadId) result.threadId = result.sessionMeta.threadId;
+      continue;
+    }
+    const ts = parseTs(record.timestamp);
+    if (ts !== null) result.lastEventAt = ts;
+    const inTurn = since ? (ts === null || ts >= since) : true;
+    if (record.type === "compacted") {
+      if (inTurn) result.compactions += 1;
+      continue;
+    }
+    const payload = record.payload;
+    if (!payload || payload.type !== "token_count") continue;
+    const info = payload.info || null;
+    if (info && Number.isFinite(Number(info.model_context_window))) {
+      result.modelContextWindow = Number(info.model_context_window);
+    }
+    const limits = rateLimitsOf(payload.rate_limits);
+    if (limits) result.rateLimits = limits;
+    if (!inTurn || !info) continue;
+    const last = usageOf(info.last_token_usage);
+    if (!last) continue;
+    const total = usageOf(info.total_token_usage) || last;
+    // Codex re-emits token_count for rate-limit refreshes with the same usage;
+    // one request must count once.
+    const fingerprint = JSON.stringify([last, total]);
+    if (fingerprint === previousFingerprint) continue;
+    previousFingerprint = fingerprint;
+    result.requests.push({ ts, ...last });
+    addTotals(result.totals, last);
+    if (last.input > result.peakContextTokens) result.peakContextTokens = last.input;
+    result.lastContextTokens = last.input;
+  }
+  return result;
+}
+
+function findChildRollouts(parentThreadId, { codexHome = resolveCodexHome(), since = 0, now = Date.now(), days = DEFAULT_LOOKBACK_DAYS, exclude = new Set() } = {}) {
+  if (!parentThreadId) return [];
+  const children = [];
+  for (const file of listRollouts(codexHome, { now, days })) {
+    if (exclude.has(file)) continue;
+    const meta = readSessionMeta(file);
+    if (!meta || meta.parentThreadId !== parentThreadId) continue;
+    if (since && meta.timestamp !== null && meta.timestamp < since) continue;
+    children.push({ file, threadId: meta.threadId || threadIdOf(file), meta });
+  }
+  return children;
+}
+
+// Everything the ledger and the compaction gate need for one Codex turn.
+// Returns null when the rollout is not on disk (the caller falls back to the
+// turn total Codex reported).
+function collectCodexTurnUsage({ threadId, since = 0, env = process.env, codexHome = resolveCodexHome(env), now = Date.now(), includeSubagents = true, maxDepth = 2 } = {}) {
+  const file = findRolloutFile(threadId, { codexHome, now });
+  if (!file) return null;
+  const parent = parseRollout(file, { since });
+  if (!parent) return null;
+  const subagents = { threads: 0, requests: 0, totals: emptyTotals(), compactions: 0, threadIds: [] };
+  if (includeSubagents) {
+    const visited = new Set([file]);
+    let frontier = [threadId];
+    for (let depth = 0; depth < maxDepth && frontier.length; depth += 1) {
+      const next = [];
+      for (const parentId of frontier) {
+        for (const child of findChildRollouts(parentId, { codexHome, since, now, exclude: visited })) {
+          visited.add(child.file);
+          const parsed = parseRollout(child.file, { since: 0 });
+          if (!parsed) continue;
+          subagents.threads += 1;
+          subagents.requests += parsed.requests.length;
+          addTotals(subagents.totals, parsed.totals);
+          subagents.compactions += parsed.compactions;
+          subagents.threadIds.push(child.threadId);
+          if (child.threadId) next.push(child.threadId);
+        }
+      }
+      frontier = next;
+    }
+  }
+  return {
+    source: "rollout",
+    file,
+    threadId: parent.threadId || threadId,
+    requests: parent.requests.length,
+    peakContextTokens: parent.peakContextTokens,
+    lastContextTokens: parent.lastContextTokens,
+    modelContextWindow: parent.modelContextWindow,
+    totals: parent.totals,
+    compactions: parent.compactions,
+    rateLimits: parent.rateLimits,
+    subagents,
+  };
+}
+
+module.exports = {
+  DEFAULT_LOOKBACK_DAYS,
+  resolveCodexHome,
+  dayDirs,
+  listRollouts,
+  threadIdOf,
+  findRolloutFile,
+  readSessionMeta,
+  parseRollout,
+  findChildRollouts,
+  collectCodexTurnUsage,
+};

package/core/providers/codex.js

@@ -119,6 +119,12 @@ function createCodexProvider(options = {}) {
     }
   }
 
+  function codexMultiAgentEnabled(settings) {
+    if (settings && settings.multiAgent === false) return false;
+    const raw = String(process.env.CODEX_MULTI_AGENT || "").trim().toLowerCase();
+    return !(raw === "0" || raw === "off" || raw === "false" || raw === "disabled");
+  }
+
   function buildInvocation(context, utility) {
     if (!context || typeof context !== "object") throw providerError("INVALID_PROVIDER_CONTEXT", "provider context must be an object");
     assertSupportedContext(context);
@@ -165,6 +171,12 @@ function createCodexProvider(options = {}) {
     if (preparedHook) args.push(...preparedHook.args);
 
     args.push("-c", `developer_instructions=${JSON.stringify(coreInstructions)}`);
+    // Codex 0.153 ships multi_agent on: the model may spawn parallel sub-agent
+    // threads (spawn_agent) whose usage its turn total never reports. Probed
+    // 2026-09-05: three parallel sub-agents took a weekly Pro quota from 75% to
+    // 100% in two hours. CODEX_MULTI_AGENT=off (or providerSettings.multiAgent
+    // false) disables the feature for every run the bot launches.
+    if (!codexMultiAgentEnabled(settings)) args.push("-c", "features.multi_agent=false");
 
     const effort = context.effort || settings.effort || null;
     if (effort) {

package/core/runner.js

@@ -64,24 +64,36 @@ function usageNumber(usage, ...keys) {
   return 0;
 }
 
+const { collectCodexTurnUsage } = require("./providers/codex-rollout");
+
+// Never let a rollout read break a turn: the ledger falls back to the turn
+// total Codex reported when the file is missing or unreadable.
+function readCodexRollout(options) {
+  try { return collectCodexTurnUsage(options); } catch (_) { return null; }
+}
+
 function usageParts(usage, backend) {
   if (!new Set(["claude", "codex"]).has(backend)) {
     throw Object.assign(new TypeError("usage accounting requires an explicit provider"), { code: "INVALID_PROVIDER" });
   }
-  const input = usageNumber(usage, "input_tokens");
+  const rawInput = usageNumber(usage, "input_tokens");
   const cacheRead = backend === "codex"
     ? usageNumber(usage, "cached_input_tokens", "cache_read_input_tokens")
     : usageNumber(usage, "cache_read_input_tokens", "cached_input_tokens");
   const cacheCreation = usageNumber(usage, "cache_creation_input_tokens");
   const output = usageNumber(usage, "output_tokens");
+  // Codex/OpenAI reports cached input INSIDE input_tokens; Anthropic reports
+  // cache reads BESIDE input_tokens. Normalise so `input` is the uncached
+  // input for both providers (like-for-like in /usage and the ledger — on
+  // 2026-09-05 the raw numbers read 89.7M vs 4.5k for what was really 2.4M vs
+  // 0.8M) while `context` stays the full prefix each provider actually sent.
+  const input = backend === "codex" ? Math.max(0, rawInput - cacheRead) : rawInput;
   return {
     input,
     cacheRead,
     cacheCreation,
     output,
-    // Codex/OpenAI reports cached input as part of input_tokens. Keep the
-    // cache-read field for attribution, but do not add it again to context.
-    context: backend === "codex" ? input : input + cacheRead + cacheCreation,
+    context: backend === "codex" ? rawInput : rawInput + cacheRead + cacheCreation,
   };
 }
 
@@ -109,24 +121,15 @@ function clampUsageDelta(current, previous) {
   };
 }
 
-function snapshotCodexUsage(state, sessionId, usage, options = {}) {
-  if (!state || !sessionId || !usage) return null;
-  const project = options.project || getProjectKey(state);
-  if (!project) return null;
-  const bucket = getUsageForSession(state, project, "codex", sessionId);
-  const previous = bucket.providerUsageSnapshot || null;
-  bucket.providerUsageSnapshot = {
-    input_tokens: usageNumber(usage, "input_tokens"),
-    cached_input_tokens: usageNumber(usage, "cached_input_tokens"),
-    output_tokens: usageNumber(usage, "output_tokens"),
-  };
-  return previous;
-}
-
+// Codex's turn.completed usage is "the usage of tokens during a turn"
+// (codex-rs/exec/src/exec_events.rs) and every `codex exec resume` is its own
+// process, so the number is already per turn. Until 3.4.13 it was treated as a
+// cumulative session total and the previous turn subtracted: any turn smaller
+// than its predecessor was recorded as 0 and the rest were undercounted (9 of
+// 36 Codex turns on 2026-09-05 logged as zero). Pass it through unchanged.
 function normalizeCodexUsage(state, sessionId, usage, options = {}) {
-  const previous = snapshotCodexUsage(state, sessionId, usage, options);
-  if (!previous) return { usage, usageScope: "session_total", rawUsage: usage };
-  return { usage: clampUsageDelta(usage, previous), usageScope: "turn_delta", rawUsage: usage };
+  void state; void sessionId; void options;
+  return { usage, usageScope: "turn", rawUsage: usage };
 }
 
 function applyUsageToState(state, usage, costUsd, opts = {}) {
@@ -147,6 +150,18 @@ function applyUsageToState(state, usage, costUsd, opts = {}) {
   u.lastUsageScope = opts.usageScope || "turn_delta";
   if (Number.isFinite(opts.liveContextTokens)) u.liveContextTokens = opts.liveContextTokens;
   else u.liveContextTokens = parts.context;
+  if (Number.isFinite(opts.contextWindowTokens) && opts.contextWindowTokens > 0) u.contextWindowTokens = opts.contextWindowTokens;
+  if (opts.quota && Number.isFinite(opts.quota.usedPercent)) {
+    u.quotaUsedPercent = opts.quota.usedPercent;
+    u.quotaResetsAt = opts.quota.resetsAt || null;
+  }
+  if (opts.subagents && opts.subagents.threads > 0) {
+    const totals = opts.subagents.totals || {};
+    u.subagentThreads = (u.subagentThreads || 0) + opts.subagents.threads;
+    u.subagentInputTokens = (u.subagentInputTokens || 0) + Math.max(0, (totals.input || 0) - (totals.cached || 0));
+    u.subagentCacheReadTokens = (u.subagentCacheReadTokens || 0) + (totals.cached || 0);
+    u.subagentOutputTokens = (u.subagentOutputTokens || 0) + (totals.output || 0);
+  }
   if (typeof costUsd === "number") u.costUsd += costUsd;
   return parts;
 }
@@ -185,6 +200,23 @@ function logTurnUsage(state, usage, costUsd, announce, opts = {}) {
     costUsd: typeof costUsd === "number" ? costUsd : 0,
   };
   if (typeof opts.coldStart === "boolean") record.coldStart = opts.coldStart;
+  if (opts.contextSource) record.contextSource = opts.contextSource;
+  if (Number.isFinite(opts.contextWindowTokens) && opts.contextWindowTokens > 0) record.contextWindowTokens = opts.contextWindowTokens;
+  if (Number.isFinite(opts.requests) && opts.requests > 0) record.requests = opts.requests;
+  if (Number.isFinite(opts.providerCompactions)) record.providerCompactions = opts.providerCompactions;
+  if (opts.quota && Number.isFinite(opts.quota.usedPercent)) {
+    record.quotaUsedPercent = opts.quota.usedPercent;
+    if (opts.quota.windowMinutes) record.quotaWindowMinutes = opts.quota.windowMinutes;
+    if (opts.quota.resetsAt) record.quotaResetsAt = opts.quota.resetsAt;
+  }
+  if (opts.subagents && opts.subagents.threads > 0) {
+    const totals = opts.subagents.totals || {};
+    record.subagentThreads = opts.subagents.threads;
+    record.subagentRequests = opts.subagents.requests || 0;
+    record.subagentInputTokens = Math.max(0, (totals.input || 0) - (totals.cached || 0));
+    record.subagentCacheReadTokens = totals.cached || 0;
+    record.subagentOutputTokens = totals.output || 0;
+  }
   if (opts.rawUsage && opts.rawUsage !== usage) {
     const raw = usageParts(opts.rawUsage, backend);
     record.rawInputTokens = raw.input;
@@ -207,7 +239,7 @@ function logTurnUsage(state, usage, costUsd, announce, opts = {}) {
     if (announce && usageOwnerOnly) {
       const baseline = result.trend?.baselineAvgContextTokens || 0;
       const rate = result.trend?.latestRate || 0;
-      const contextLabel = hasPeak || usageScope === "turn_delta" ? "Context this turn" : "Session context total";
+      const contextLabel = usageScope === "session_total" && !hasPeak ? "Session context total" : "Context this turn";
       announce([
         "Token usage alert:",
         `${contextLabel}: ${fmtTokens(record.contextTokens)}`,
@@ -948,11 +980,22 @@ function resolveRunCwd(cwd) {
   return fallback;
 }
 
-function effectiveCompactThreshold(state = currentState()) {
+const CODEX_WINDOW_COMPACT_FRACTION = 0.8;
+
+function effectiveCompactThreshold(state = currentState(), opts = {}) {
   const override = state.settings?.compactWindow;
   if (override === 0) return 0;
-  if (Number.isFinite(override) && override > 0) return override;
-  return Number.isFinite(AUTO_COMPACT_TOKENS) ? AUTO_COMPACT_TOKENS : 380000;
+  const base = Number.isFinite(override) && override > 0
+    ? override
+    : (Number.isFinite(AUTO_COMPACT_TOKENS) ? AUTO_COMPACT_TOKENS : 380000);
+  // Codex's window (258k for gpt-6-astra) sits below the default threshold, so
+  // measured honestly the bot would never compact a Codex session — and would
+  // lose the brief that feeds memory. Compact at 80% of the reported window.
+  const window = Number(opts.contextWindowTokens ?? state.sessionUsage?.contextWindowTokens);
+  if (getActiveProvider(state) === "codex" && Number.isFinite(window) && window > 0) {
+    return Math.min(base, Math.floor(window * CODEX_WINDOW_COMPACT_FRACTION));
+  }
+  return base;
 }
 
 function shouldAutoCompact(state = currentState(), opts = {}) {
@@ -1511,13 +1554,32 @@ async function persistForegroundUsage(result, runContext, state = currentState()
       ?? usageParts(usage, runContext.provider).context;
     const usageSessionId = result.sessionId || runContext.sessionId;
     const usageProject = runContext.project?.name || null;
+    let rollout = null;
     if (runContext.provider === "codex") {
       const normalized = normalizeCodexUsage(state, usageSessionId, usage, { project: usageProject });
       usage = normalized.usage;
       usageScope = normalized.usageScope;
       rawUsage = normalized.rawUsage;
-      liveContextTokens = usageParts(rawUsage, "codex").context;
+      // Measure Codex like Claude: the last single-request window occupancy
+      // from its rollout, never the turn-summed input — that sum tripped
+      // auto-compact after almost every substantial turn (8 needless Codex
+      // compactions on 2026-09-05) and hid the sub-agent threads entirely.
+      rollout = readCodexRollout({
+        threadId: usageSessionId,
+        since: (result.timings?.startedAt || Date.now()) - 5000,
+      });
+      liveContextTokens = rollout && rollout.lastContextTokens > 0
+        ? rollout.lastContextTokens
+        : usageParts(rawUsage, "codex").context;
     }
+    const rolloutOpts = rollout ? {
+      contextSource: "rollout_last_request",
+      contextWindowTokens: rollout.modelContextWindow || undefined,
+      requests: rollout.requests,
+      providerCompactions: rollout.compactions,
+      quota: rollout.rateLimits?.primary || null,
+      subagents: rollout.subagents,
+    } : (runContext.provider === "codex" ? { contextSource: "turn_total_fallback" } : {});
     result.usage = usage;
     result.usageScope = usageScope;
     applyUsageToState(state, usage, result.costUsd || 0, {
@@ -1526,6 +1588,7 @@ async function persistForegroundUsage(result, runContext, state = currentState()
       liveContextTokens,
       project: usageProject,
       sessionId: usageSessionId,
+      ...rolloutOpts,
     });
     logTurnUsage(
       state,
@@ -1544,6 +1607,7 @@ async function persistForegroundUsage(result, runContext, state = currentState()
         rawUsage,
         coldStart: usageSessionColdStart(usageSessionId),
         strict: true,
+        ...rolloutOpts,
       },
     );
     saveState({ strict: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "3.4.12",
+  "version": "3.4.14",
   "description": "An always-on, provider-agnostic coding-agent harness for Claude Code and OpenAI Codex via chat",
   "main": "bot.js",
   "bin": {
@@ -11,7 +11,7 @@
     "setup": "node setup.js",
     "start": "node bot.js",
     "pretest": "node test-provider-fixture.js && node test-provider-core-prompt.js && node test-turn-observer.js && node test-provider-prompt-parity.js && node test-provider-env-isolation.js && node test-provider-resume-parity.js && node test-provider-bootstrap.js && node test-provider-registry.js && node test-provider-stream-decoder.js && node test-provider-events.js && node test-provider-claude.js && node test-provider-codex.js && node test-provider-runner.js && node test-provider-refusal-recovery.js && node test-provider-run-lifecycle.js && node test-provider-gateway.js && node test-provider-side-chat.js && node test-single-runtime.js && node test-provider-migration-backup.js && node test-provider-state-migration.js && node test-provider-session-history.js && node test-provider-session-commands.js && node test-provider-compaction.js && node test-provider-scheduler.js && node test-credential-capture.js && node test-cursor-removal.js && node test-utility-provider-policy.js && node test-provider-subagent.js && node test-provider-recall.js && node test-provider-pack-review.js && node test-memory-mutation-queue.js && node test-provider-dream.js && node test-provider-enforcer.js && node test-provider-tool-hooks.js && node test-provider-boot-matrix.js && node test-provider-capabilities.js && node test-provider-language.js && node test-provider-coupling-audit.js && node test-provider-parity-e2e.js && node test-kazee-channel-health.js && node test-kazee-media-caption.js && node test-kazee-typing-join.js && node test-kazee-inbound-dedup.js && node test-typing-phase-push.js && node test-socket-reconnect.js && node test-speech-loopback.js && node test-prompt-budget.js && node test-agency-ledger.js && node test-agency-deliberate.js && node test-guardrail.js && node test-spaces-comment-content.js && node test-boot-health.js && node test-lexical-floor.js && node test-safe-mode.js && node test-logout.js && node test-kazee-call-audio.js && node test-kazee-call-janus.js && node test-kazee-call-webrtc.js && node test-kazee-call-speech.js && node test-kazee-call-manager.js && node test-kazee-call-session.js",
-    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-query.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-mandate-hygiene.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-external-rule-scopes.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-cards.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-people-owner-seed.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-typing-heartbeat.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-say-loopback.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-union.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-subst-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-section-budgets.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-dedup-adjudicator.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-prospective.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-regressions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cost-report.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-mining.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-certification.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-apprenticeship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-attest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-verify-contact.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-loopback-owner-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-intro-adoption.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-grants.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-room-provider-settings.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-store-durability.js"
+    "test": "OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node -e \"require('./vault'); console.log('OK')\" && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-runner-watchdog-static.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-usage-accounting.js && node test-codex-rollout.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-engine.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-discoverer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-query.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-walker-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-score-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cokept-warming.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-project-transcripts-smoke.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-abilities.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-extraction.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-couse.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-transfer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-tiers.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-ability-merge-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-learning-e2e.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-nesting.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-pack-search.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-extractive-injection.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-dedupe.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-read-signal.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tools.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-graph.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tooling-mode.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-manifest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-evolution.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-async.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-unified-identity.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-queue-routing.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-packs.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-persona.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-persona-pipeline.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-relationship-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-relationship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-enforcer.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-mandate-hygiene.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-external-rule-scopes.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-cards.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-identity-prune.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-message-id.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-kazee-group-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-people-owner-seed.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-delivery-contract.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-run-lock.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-typing-heartbeat.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-web-sessions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-poll-recovery.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-409-grace.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-telegram-conflict-heal-guard.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-single-instance.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-streaming-split.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-spaces-autoenable.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-say-loopback.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-journal-union.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-subst-score.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-section-budgets.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-dedup-adjudicator.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-prospective.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-recall-regressions.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-cost-report.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-context.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-approval-mining.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-tool-certification.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-apprenticeship.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-speaker-attest.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-verify-contact.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-loopback-owner-gate.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-intro-adoption.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-grants.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-room-provider-settings.js && OPEN_CLAUDIA_TEST=1 WORKSPACE=/tmp/open-claudia-test CLAUDE_PATH=./test-fixtures/fake-agent-cli.js FAKE_AGENT_KIND=claude AGENT_ENV_PASSTHROUGH=FAKE_AGENT_KIND node test-store-durability.js"
   },
   "files": [
     "bot.js",

package/test-kazee-call-session.js

@@ -462,10 +462,11 @@ async function testManagedRoomCredentials() {
   assert.strictEqual(session.janus.options.token, "root-token");
   assert.strictEqual(session.janus.calls[0].token, "publisher-token");
   await session._consumePublisherFrame({ plugindata: { data: { publishers: [{ id: 41, display: 'canonical-bot@calling.invalid' }, { id: 42, display: 'open-claudia:legacy-bot' }] } } });
-  assert.strictEqual(session.subscribers.size, 0, 'own joined publisher ID is excluded independently of canonical display; legacy bot exclusion remains');
+  assert.strictEqual(session.subscribers.size, 0, 'own joined publisher ID and unclassified managed feeds are excluded independently of display');
 
   session.roomTokenExpiresAt = Date.now() - 1;
-  await Promise.all([session._subscribe(17, "owner"), session._subscribe(18, "other")]);
+  const userMetadata = { kazee: { version: 1, userId: 'a'.repeat(24), principalKind: 'User' } };
+  await Promise.all([session._subscribe(17, "owner", userMetadata), session._subscribe(18, "other", userMetadata)]);
   const subJoin = session.janus.calls.find(body => body.ptype === "subscriber");
   assert.strictEqual(subJoin.token, "subscriber-token");
   assert.strictEqual(subJoin.private_id, 999);
@@ -484,6 +485,66 @@ async function testManagedRoomCredentials() {
   assert.ok(!session.janus.calls.some(body => ["create", "destroy"].includes(body.request)), "server allocated room ownership never transfers to the bot");
 }
 
+async function testTrustedPublisherMetadata() {
+  const botId = 'b'.repeat(24), userId = 'a'.repeat(24);
+  const metadata = (principalKind, id = userId) => ({ kazee: { version: 1, userId: id, principalKind } });
+  const publisher = (id, meta, display = 'speaker@calling.invalid') => ({ id, display, metadata: meta });
+  let initial = [];
+  class MetadataJanus extends FakeJanus {
+    constructor() { super(); this.calls = []; this.listeners = new Map(); }
+    onHandle(handle, listener) { this.listeners.set(handle, listener); }
+    async message(handle, body) {
+      this.calls.push({ handle, ...body });
+      if (body.request === 'join' && body.ptype === 'publisher') return { plugindata: { data: { videoroom: 'joined', id: 41, private_id: 999, publishers: initial } } };
+      if (body.request === 'configure') return { jsep: { type: 'answer', sdp: 'fixture' } };
+      if (body.request === 'join' && body.ptype === 'subscriber') return { plugindata: { data: { videoroom: 'attached' } }, jsep: { type: 'offer', sdp: 'fixture' } };
+      return {};
+    }
+  }
+  const make = managedRoom => new KazeeCallSession({ roomId: 7, chatId: 'chat', callerId: userId, botUserId: botId, managedRoom,
+    roomToken: 'fixture', roomTokenExpiresAt: Date.now() + 300000,
+    iceServers: [{ urls: 'turn:relay:3478', username: 'fixture', credential: 'fixture' }], iceCredentialsExpiresAt: Date.now() + 3600000,
+    JanusClientImpl: MetadataJanus, PeerConnectionImpl: FakePC, SpeechStreamImpl: FakeSpeechStream });
+  const invalid = [undefined, null, {}, { kazee: null }, { kazee: [] },
+    { kazee: { version: 2, userId, principalKind: 'User' } }, { kazee: { version: '1', userId, principalKind: 'User' } },
+    metadata('Human'), metadata('bot'), metadata(undefined), metadata('User', 'invalid'), { kazee: { version: 1, principalKind: 'User' } },
+    { kazee: { version: 1, userId: { $ne: null }, principalKind: 'User' } }];
+  initial = [publisher(41, metadata('User')), publisher(42, metadata('Bot', 'c'.repeat(24)), 'other-bot@calling.invalid'),
+    publisher(43, metadata('User')), publisher(44, metadata('User', botId.toUpperCase())),
+    ...invalid.map((meta, i) => publisher(100 + i, meta))];
+  const managed = make(true);
+  try {
+    await managed.start();
+    assert.deepStrictEqual([...managed.subscribers.keys()], [43], 'initial join reaches real subscription only for a classified human, never self/bot/unknown');
+    assert.strictEqual(managed.subscribers.get(43).started, true, 'authorized human reaches the actual subscriber offer/answer path');
+    const emit = publishers => managed.janus.listeners.get(managed.publisherHandle)({ janus: 'event', plugindata: { data: { publishers } } });
+    await emit([publisher(50, metadata('Bot', 'd'.repeat(24)), 'another-bot@calling.invalid'),
+      publisher(51, metadata('User'), 'open-claudia:display-is-not-managed-authority'),
+      ...invalid.map((meta, i) => publisher(200 + i, meta))]);
+    assert.deepStrictEqual([...managed.subscribers.keys()], [43, 51], 'live publisher metadata survives forwarding; managed classification never falls back to display prefix');
+    assert.strictEqual(managed.subscribers.get(51).display, 'open-claudia:display-is-not-managed-authority', 'presentation remains unchanged');
+    const handles = managed.janus.handles;
+    await managed._subscribe(60, 'unclassified@calling.invalid');
+    await managed._subscribe(61, 'bot@calling.invalid', metadata('Bot'));
+    await managed._subscribe(41, 'own@calling.invalid', metadata('User'));
+    assert.strictEqual(managed.janus.handles, handles, 'the subscription method itself fails closed before creating handles or speech streams');
+    assert.deepStrictEqual(managed.janus.calls.filter(body => body.ptype === 'subscriber').map(body => body.feed), [43, 51]);
+  } finally { await managed.close(); }
+
+  initial = [publisher(41, metadata('User')), publisher(42, metadata('User'), 'open-claudia:legacy-bot'),
+    publisher(43, metadata('Bot'), 'human@calling.invalid')];
+  const legacy = make(false);
+  try {
+    await legacy.start();
+    assert.deepStrictEqual([...legacy.subscribers.keys()], [43], 'legacy metadata cannot hide a human or impersonate one for a prefixed bot; own numeric feed remains excluded');
+    await legacy.janus.listeners.get(legacy.publisherHandle)({ janus: 'event', plugindata: { data: { publishers: [
+      publisher(50, metadata('Bot'), 'untrusted-kind@calling.invalid'), publisher(51, metadata('User'), 'open-claudia:other-bot'),
+      publisher(52, undefined, 'older-client@calling.invalid'),
+    ] } } });
+    assert.deepStrictEqual([...legacy.subscribers.keys()], [43, 50, 52], 'legacy live publishers keep display-prefix behavior regardless of spoofed or absent metadata');
+  } finally { await legacy.close(); }
+}
+
 async function testAssignedRelayTransportLifetime() {
   const { RTCPeerConnection } = require('werift');
   const originalExpiry = Date.now() + 3600000;
@@ -538,6 +599,7 @@ async function testAssignedRelayTransportLifetime() {
 }
 
 (async () => {
+  await testTrustedPublisherMetadata();
   await testAssignedRelayTransportLifetime();
   await testManagedRoomCredentials();
   await testSpeakSerialization();

package/test-provider-codex.js

@@ -134,6 +134,18 @@ const directResume = provider.buildMainInvocation(simpleContext({ sessionId: "th
 assert.ok(directResume.args.includes("--dangerously-bypass-approvals-and-sandbox"));
 assert.ok(directResume.args.indexOf("--dangerously-bypass-approvals-and-sandbox") < directResume.args.indexOf("thread-direct"));
 
+{
+  const before = process.env.CODEX_MULTI_AGENT;
+  delete process.env.CODEX_MULTI_AGENT;
+  assert.ok(!provider.buildMainInvocation(simpleContext({})).args.includes("features.multi_agent=false"), "multi_agent stays as Codex ships it by default");
+  process.env.CODEX_MULTI_AGENT = "off";
+  const noAgents = provider.buildMainInvocation(simpleContext({}));
+  const at = noAgents.args.indexOf("features.multi_agent=false");
+  assert.ok(at > 0 && noAgents.args[at - 1] === "-c", "CODEX_MULTI_AGENT=off passes -c features.multi_agent=false");
+  assert.ok(at < noAgents.args.indexOf("--json"), "the override sits with the other -c overrides, before the exec flags");
+  if (before === undefined) delete process.env.CODEX_MULTI_AGENT; else process.env.CODEX_MULTI_AGENT = before;
+}
+
 const continued = provider.buildMainInvocation(simpleContext({ continueSession: true, sessionId: "thread-continue" }));
 assert.strictEqual(continued.args[1], "resume");
 assert.ok(continued.args.includes("thread-continue"));

package/test-provider-events.js

@@ -203,7 +203,7 @@ assert.deepStrictEqual(normalizeCodexEvent(samples.codex.assistant, codexState),
   { type: "text_final", text: "Hello from Codex" },
 ]);
 assert.deepStrictEqual(normalizeCodexEvent(samples.codex.result, codexState), [
-  { type: "usage", usage: { input_tokens: 20, cached_input_tokens: 5, output_tokens: 4 }, scope: "session_total" },
+  { type: "usage", usage: { input_tokens: 20, cached_input_tokens: 5, output_tokens: 4 }, scope: "turn" },
   { type: "result", text: "", sessionId: "codex-thread-1" },
 ]);
 assert.deepStrictEqual(normalizeCodexEvent(samples.codex.result, codexState), [], "duplicate Codex terminal and usage settle once");

package/test-provider-language.js

@@ -464,7 +464,10 @@ assert.match(pkg.description, /provider-agnostic coding-agent harness/i);
 // tool_name "Bash" and the deny gate caught the probe, so the gate no longer
 // requires unified_exec off. Push approved by Sumeet before release.
 // 3.4.12: Sumeet approved the full calling rollout on 2026-09-05; preserve assigned media configuration across canary changes.
-assert.strictEqual(pkg.version, "3.4.12", "release version must remain unchanged without explicit approval");
+// 3.4.14: bot managed-call consumer (subscribe only to gateway-authenticated User publishers) — part of the Janus calling plan Sumeet approved on 2026-09-05.
+// 3.4.13: Codex usage accounting fix — Sumeet approved the three-bug fix on 2026-09-05 ("Yes");
+// prepared 2026-09-06 for his release go. Rollout-based Codex context, per-turn ledger, sub-agent + quota accounting.
+assert.strictEqual(pkg.version, "3.4.14", "release version must remain unchanged without explicit approval");
 for (const keyword of ["claude", "codex", "coding-agent", "provider-agnostic"]) {
   assert.ok(pkg.keywords.includes(keyword), `package keyword missing: ${keyword}`);
 }

package/test-usage-accounting.js

@@ -9,6 +9,7 @@ const {
   normalizeCodexUsage,
   applyUsageToState,
   shouldAutoCompact,
+  effectiveCompactThreshold,
   peakContextTokens,
   usageSessionColdStart,
 } = require("./core/runner");
@@ -48,7 +49,9 @@ function state(overrides = {}) {
 
 assert.deepStrictEqual(
   usageParts({ input_tokens: 100, cached_input_tokens: 60, output_tokens: 10 }, "codex"),
-  { input: 100, cacheRead: 60, cacheCreation: 0, output: 10, context: 100 },
+  // OpenAI counts cached tokens inside input_tokens: `input` is the uncached
+  // part so it compares like-for-like with Claude; `context` is the full prefix.
+  { input: 40, cacheRead: 60, cacheCreation: 0, output: 10, context: 100 },
 );
 
 assert.deepStrictEqual(
@@ -62,7 +65,7 @@ const first = normalizeCodexUsage(s, "codex-session-1", {
   cached_input_tokens: 700,
   output_tokens: 50,
 }, { project: "alpha" });
-assert.strictEqual(first.usageScope, "session_total");
+assert.strictEqual(first.usageScope, "turn", "Codex turn.completed usage is per turn, never a session total");
 assert.strictEqual(usageParts(first.usage, "codex").context, 1000);
 
 const second = normalizeCodexUsage(s, "codex-session-1", {
@@ -70,13 +73,13 @@ const second = normalizeCodexUsage(s, "codex-session-1", {
   cached_input_tokens: 800,
   output_tokens: 80,
 }, { project: "alpha" });
-assert.strictEqual(second.usageScope, "turn_delta");
+assert.strictEqual(second.usageScope, "turn");
+// No delta against the previous turn: a smaller turn after a bigger one used
+// to be recorded as 0 (9 of 36 Codex turns on 2026-09-05).
 assert.deepStrictEqual(second.usage, {
-  input_tokens: 250,
-  cached_input_tokens: 100,
-  cache_read_input_tokens: 0,
-  cache_creation_input_tokens: 0,
-  output_tokens: 30,
+  input_tokens: 1250,
+  cached_input_tokens: 800,
+  output_tokens: 80,
 });
 
 applyUsageToState(s, second.usage, 0, {
@@ -87,9 +90,9 @@ applyUsageToState(s, second.usage, 0, {
   liveContextTokens: usageParts(second.rawUsage, "codex").context,
 });
 assert.strictEqual(s.sessionUsage.turns, 1);
-assert.strictEqual(s.sessionUsage.inputTokens, 250);
-assert.strictEqual(s.sessionUsage.cacheReadTokens, 100);
-assert.strictEqual(s.sessionUsage.lastInputTokens, 250);
+assert.strictEqual(s.sessionUsage.inputTokens, 450, "uncached input only");
+assert.strictEqual(s.sessionUsage.cacheReadTokens, 800);
+assert.strictEqual(s.sessionUsage.lastInputTokens, 1250);
 assert.strictEqual(s.sessionUsage.liveContextTokens, 1250);
 
 // The same native-looking ID in another project has an independent cumulative
@@ -99,7 +102,7 @@ const otherProject = normalizeCodexUsage(s, "codex-session-1", {
   cached_input_tokens: 1200,
   output_tokens: 100,
 }, { project: "beta" });
-assert.strictEqual(otherProject.usageScope, "session_total");
+assert.strictEqual(otherProject.usageScope, "turn");
 s.currentSession = { name: "beta", dir: "/workspace/beta" };
 s.settings.backend = "claude";
 s.activeSessions.beta = { claude: "claude-beta", codex: "codex-session-1" };
@@ -154,6 +157,36 @@ assert.strictEqual(shouldAutoCompact(state({
   sessionUsage: { liveContextTokens: 250, lastInputTokens: 250, lastCompactedAt: Date.now() },
 })), true);
 
+// Codex is compacted at 80% of the window it reports, because its window
+// (258k on gpt-6-astra) is below the default threshold — measured honestly the
+// bot would otherwise never compact a Codex session.
+{
+  const windowed = state({ sessionUsage: { liveContextTokens: 210000, lastInputTokens: 210000, contextWindowTokens: 258400 } });
+  delete windowed.settings.compactWindow;
+  assert.strictEqual(effectiveCompactThreshold(windowed), 206720, "80% of the reported Codex window");
+  assert.strictEqual(shouldAutoCompact(windowed), true, "210k of a 258k window compacts");
+  windowed.sessionUsage.liveContextTokens = 200000;
+  assert.strictEqual(shouldAutoCompact(windowed), false, "200k of a 258k window does not");
+  windowed.settings.backend = "claude";
+  assert.strictEqual(effectiveCompactThreshold(windowed), 380000, "the Codex window cap never applies to Claude");
+}
+
+// Rollout-derived facts ride along into the session bucket.
+{
+  const enriched = state();
+  applyUsageToState(enriched, { input_tokens: 1000, cached_input_tokens: 900, output_tokens: 10 }, 0, {
+    backend: "codex", project: "alpha", sessionId: "codex-session-1", usageScope: "turn", liveContextTokens: 1000,
+    contextWindowTokens: 258400, quota: { usedPercent: 31, resetsAt: "2026-09-12T13:57:00.000Z" },
+    subagents: { threads: 2, requests: 5, totals: { input: 70000, cached: 50000, output: 300 } },
+  });
+  assert.strictEqual(enriched.sessionUsage.contextWindowTokens, 258400);
+  assert.strictEqual(enriched.sessionUsage.quotaUsedPercent, 31);
+  assert.strictEqual(enriched.sessionUsage.subagentThreads, 2);
+  assert.strictEqual(enriched.sessionUsage.subagentInputTokens, 20000, "sub-agent input is stored uncached");
+  assert.strictEqual(enriched.sessionUsage.subagentCacheReadTokens, 50000);
+  assert.strictEqual(enriched.sessionUsage.subagentOutputTokens, 300);
+}
+
 // peakContextTokens: the live context number must be the LARGEST single API
 // call, not the turn-cumulative sum (the v3.0.0 347k-vs-160k regression).
 assert.strictEqual(peakContextTokens([