@nyssance/codex-acp-v2 0.7.0 → 0.7.2

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 0.7.2 — 2026-09-29
+
+### Added
+
+- Turn correlation v2 (`capabilities._meta.alwith.turns = {version: 2}`): `session/prompt`
+  accepts a host-named receipt in `_meta.alwith.messageId`, and every `state_update` of a
+  prompted turn carries `_meta.alwith.messageId`. A stale `idle` of an older turn is dropped
+  once a newer prompt owns the session.
+
+## 0.7.1 — 2026-09-29
+
+### Changed
+
+- Generated against Codex 0.158.0 (`@openai/codex` `^0.158.0`); the version floor follows.
+- MCP `openai/userVerification` elicitations (signed device challenges) are declined with
+  `cancelled`: ACP has no surface for them and enrollment stays inside Codex.
+- `codexErrorInfo` `flexUnavailable` classifies as `flex_unavailable`, retryable.
+- Replayed `image` user input renders `image:<fileId>` when Codex stored an uploaded file
+  instead of a URL.
+
+## 0.7.0 — 2026-09-29
+
+### Changed
+
+- `session/prompt` returns `{messageId}` (ACP v2, sdk 1.5.1). The id is passed to Codex as
+  `clientUserMessageId`; `user_message` echoes and replays report it as `messageId`
+  (`userMessage.clientId ?? id`). Steering returns `{messageId, _meta.codex.steered}`.
+
 ## 0.6.0 — 2026-09-11
 
 ### Added

package/README.md

@@ -59,7 +59,7 @@ See [`docs/protocol.md`](docs/protocol.md) for the exact wire contract.
 
 ## Requirements
 
-- Codex CLI **0.153.0 or newer** — the app-server types under `src/app-server` are generated
+- Codex CLI **0.158.0 or newer** — the app-server types under `src/app-server` are generated
   from the `@openai/codex` release named in `optionalDependencies`, and the agent checks
   `codex --version` before starting the server; an older Codex fails at startup with an
   upgrade hint.

package/dist/index.js

@@ -21844,7 +21844,7 @@ var package_default = {
   publishConfig: {
     access: "public"
   },
-  version: "0.7.0",
+  version: "0.7.2",
   description: "Native ACP v2 agent for the OpenAI Codex app-server",
   packageManager: "bun@1.4.0",
   engines: {
@@ -21916,7 +21916,7 @@ var package_default = {
     "vscode-jsonrpc": "^9.0.2"
   },
   optionalDependencies: {
-    "@openai/codex": "^0.153.0"
+    "@openai/codex": "^0.158.0"
   }
 };
 
@@ -22084,6 +22084,8 @@ function classifyTurnError(info) {
       return failure2("rate_limit", true);
     case "serverOverloaded":
       return failure2("overloaded", true);
+    case "flexUnavailable":
+      return failure2("flex_unavailable", true);
     case "internalServerError":
       return failure2("internal", true);
     case "unauthorized":
@@ -23556,7 +23558,7 @@ function fromUserInput(input) {
     case "text":
       return input.text.length > 0 ? [{ type: "text", text: input.text }] : [];
     case "image":
-      return [{ type: "text", text: formatUriAsLink("image", input.url) }];
+      return [{ type: "text", text: "url" in input ? formatUriAsLink("image", input.url) : `image:${input.fileId}` }];
     case "localImage":
       return [{ type: "text", text: formatUriAsLink(null, toFileUri(input.path)) }];
     case "skill":
@@ -23904,6 +23906,8 @@ ${details}` : summary)];
       case "mcpServer/event/stream/notification":
       case "account/updated":
       case "account/login/completed":
+      case "account/gatewayOAuth/changed":
+      case "thread/attachment/updated":
       case "app/list/updated":
       case "remoteControl/status/changed":
       case "externalAgentConfig/import/progress":
@@ -24892,6 +24896,10 @@ class CodexElicitationHandler {
   }
   async handleElicitation(params) {
     try {
+      if (params.mode === "openai/userVerification") {
+        logger.log("MCP user verification is not supported over ACP", { server: params.serverName });
+        return cancelled();
+      }
       const context = this.mcpContext(params);
       const messageOnly = isMessageOnlyForm(params);
       if (!messageOnly && this.useAcpElicitation(params)) {
@@ -25955,6 +25963,7 @@ class ClientSession {
   disposed = false;
   output = new AbortController;
   terminalAttempted = false;
+  messageId;
   get signal() {
     return this.output.signal;
   }
@@ -25998,26 +26007,36 @@ class ClientSession {
       return;
     await abortable(this.link.notify(methods.client.elicitation.complete, { elicitationId }), this.output.signal);
   }
-  reportRunning() {
+  reportRunning(messageId) {
+    this.messageId = messageId;
     this.terminalAttempted = false;
     this.turnGeneration += 1;
     this.turnActive = true;
     this.waiting = 0;
     this.state({ sessionUpdate: "state_update", state: "running" });
   }
-  async reportIdle(stopReason, extra) {
+  async reportIdle(stopReason, extra, messageId = this.messageId) {
+    if (messageId !== this.messageId)
+      return;
     if (this.terminalAttempted)
       return;
     this.terminalAttempted = true;
     this.turnActive = false;
     this.waiting = 0;
-    await this.update({
+    await this.update(this.correlated({
       sessionUpdate: "state_update",
       state: "idle",
       stopReason,
       ...extra?.usage === undefined ? {} : { usage: extra.usage },
       ...extra?._meta === undefined ? {} : { _meta: extra._meta }
-    });
+    }));
+  }
+  correlated(update) {
+    if (this.messageId === undefined)
+      return update;
+    const meta = update._meta;
+    const alwith = meta?.["alwith"];
+    return { ...update, _meta: { ...meta, alwith: { ...alwith, messageId: this.messageId } } };
   }
   async waitingOnClient(operation, signal) {
     if (this.disposed)
@@ -26038,7 +26057,7 @@ class ClientSession {
   }
   async state(update) {
     try {
-      await this.update(update);
+      await this.update(this.correlated(update));
     } catch (error40) {
       logger.error("Failed to publish session state", error40, { sessionId: this.sessionId });
     }
@@ -26623,6 +26642,7 @@ function gatewayModel(model, isDefault, template, entry) {
     additionalSpeedTiers: [],
     serviceTiers: [],
     defaultServiceTier: null,
+    availableAccessPrograms: null,
     isDefault
   };
 }
@@ -26767,7 +26787,7 @@ class CodexAgent {
           additionalDirectories: {}
         },
         providers: {},
-        _meta: { alwith: { tools: { version: 1 } }, codex: { archive: true, seedHistory: true, skills: true, plugins: true, providerCatalog: true, rename: true, account: true, fuzzyFileSearch: true } }
+        _meta: { alwith: { tools: { version: 1 }, turns: { version: 2 } }, codex: { archive: true, seedHistory: true, skills: true, plugins: true, providerCatalog: true, rename: true, account: true, fuzzyFileSearch: true } }
       },
       authMethods: authMethods(this.capabilities, this.env)
     };
@@ -27524,7 +27544,7 @@ class CodexAgent {
     return runtime;
   }
   async prompt(params) {
-    return await this.promptInternal(params, false, crypto.randomUUID());
+    return await this.promptInternal(params, false, requestedMessageId(params) ?? crypto.randomUUID());
   }
   async promptInternal(params, allowReentry, messageId) {
     this.assertRoutingAvailable();
@@ -27548,7 +27568,7 @@ class CodexAgent {
     }
     const turn = createActiveTurn(session.id, messageId);
     session.activeTurn = turn;
-    runtime.client.reportRunning();
+    runtime.client.reportRunning(messageId);
     this.runPrompt(runtime, turn, params);
     return { messageId };
   }
@@ -27772,7 +27792,7 @@ class CodexAgent {
     await runtime.bridge.finishOpenToolCalls(reason === "cancelled" ? "cancelled" : reason === "end_turn" ? "completed" : "failed");
     if (runtime.session.activeTurn === turn)
       runtime.session.activeTurn = null;
-    await runtime.client.reportIdle(reason, extra);
+    await runtime.client.reportIdle(reason, extra, turn.clientUserMessageId ?? undefined);
   }
   async reportTurnFailure(runtime, turn, error40) {
     const { stopReason, ...classification } = classifyTurnError(error40.codexErrorInfo);
@@ -27957,6 +27977,15 @@ ${stderr}` : ""}`);
 function mcpServerNames(servers) {
   return servers.flatMap((server) => typeof server.name === "string" ? [sanitizeMcpServerName(server.name)] : []);
 }
+function requestedMessageId(params) {
+  const alwith = params._meta?.["alwith"];
+  if (alwith?.messageId === undefined)
+    return;
+  if (typeof alwith.messageId !== "string" || alwith.messageId.length === 0) {
+    throw RequestError.invalidParams(undefined, "_meta.alwith.messageId must be a non-empty string");
+  }
+  return alwith.messageId;
+}
 function agentMessage(messageId, text2) {
   return { sessionUpdate: "agent_message_chunk", messageId, content: { type: "text", text: text2 } };
 }
@@ -28026,12 +28055,18 @@ function readOnlyThread(thread, cwd) {
     model: thread.model ?? "",
     modelProvider: thread.modelProvider,
     serviceTier: null,
+    disabledPluginIds: [],
     cwd,
+    runtimeWorkspaceRoots: [],
     instructionSources: [],
     approvalPolicy: "on-request",
     approvalsReviewer: "user",
     sandbox: { type: "readOnly", networkAccess: false },
+    activePermissionProfile: null,
     reasoningEffort: thread.reasoningEffort,
+    collaborationMode: null,
+    multiAgentMode: "explicitRequestOnly",
+    initialTurnsPage: null,
     turnsBackwardsCursor: null,
     itemsBackwardsCursor: null
   };

package/package.json

@@ -3,7 +3,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Native ACP v2 agent for the OpenAI Codex app-server",
   "packageManager": "bun@1.4.0",
   "engines": {
@@ -75,6 +75,6 @@
     "vscode-jsonrpc": "^9.0.2"
   },
   "optionalDependencies": {
-    "@openai/codex": "^0.153.0"
+    "@openai/codex": "^0.158.0"
   }
 }