npm - @yansigit/opencodex - Versions diffs - 2.35.1-dev.20260828.3 → 2.35.1-dev.20260828.5 - Mend

@yansigit/opencodex 2.35.1-dev.20260828.3 → 2.35.1-dev.20260828.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/gui/dist/assets/{index-Doud7zg9.js → index-Bnyz_191.js} +21 -21
package/gui/dist/index.html +1 -1
package/package.json +3 -1
package/src/config.ts +13 -0
package/src/generated/compatibility-version.json +9 -5
package/src/server/management/agent-settings-routes.ts +30 -2
package/src/server/responses/core.ts +57 -6
package/src/server/responses/v2-routed-delegation-bridge.ts +233 -0
package/src/types/config.ts +2 -0

package/gui/dist/index.html CHANGED Viewed

@@ -16,7 +16,7 @@
         } catch (e) {}
       })();
     </script>
-    <script type="module" crossorigin src="/assets/index-Doud7zg9.js"></script>
+    <script type="module" crossorigin src="/assets/index-Bnyz_191.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-DLkXOXLC.css">
   </head>
   <body>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@yansigit/opencodex",
-  "version": "2.35.1-dev.20260828.3",
+  "version": "2.35.1-dev.20260828.5",
   "description": "Universal provider proxy for OpenAI Codex & Claude Code — use any LLM with Codex CLI/App/SDK and Claude Code",
   "type": "module",
   "main": "./bin/package-main.mjs",
@@ -39,7 +39,9 @@
     "dev:gui": "cd gui && bun run dev",
     "start": "bun run src/cli/index.ts start",
     "test": "bun scripts/test.ts",
+    "test:v2-bridge": "bun scripts/test.ts tests/config.test.ts tests/multi-agent-keep-native-v1.test.ts tests/namespace-tool-compat.test.ts tests/v2-routed-delegation-bridge.test.ts tests/responses-v2-routed-delegation-bridge.test.ts tests/v2-agent-message-failfast.test.ts tests/responses-compaction-routing.test.ts tests/responses-v2-native-parent-override.test.ts tests/passthrough-abort.test.ts tests/ws-upstream.test.ts tests/core-lab-boundary.test.ts",
     "typecheck": "bun x tsc --noEmit",
+    "verify:v2-bridge": "bun run typecheck && bun run test:v2-bridge && cd gui && bun test tests/subagents-ultra-mode.test.tsx && bun run lint:i18n",
     "audit:high": "bun audit --audit-level=high && cd gui && bun audit --audit-level=high",
     "privacy:scan": "bun scripts/privacy-scan.ts",
     "generate:model-metadata": "bun scripts/generate-model-metadata.ts",

package/src/config.ts CHANGED Viewed

@@ -928,6 +928,9 @@ const configSchema = z.object({
   providerContextCaps: z.record(z.string(), z.number().int().positive()).optional(),
   contextCapValue: z.number().int().positive().optional(),
   multiAgentGuidanceEnabled: z.boolean().optional(),
+  // Invalid hand edits disable only this experimental opt-in.
+  v2RoutedDelegationBridge: z.boolean().optional().catch(undefined),
+  // Invalid hand edits disable only this experimental opt-in subtree.
   v2NativeParentOverride: v2NativeParentOverrideSchema.optional().catch(undefined),
   // Invalid optional recovery config must not discard unrelated provider/account state.
   agentTaskRecovery: agentTaskRecoverySchema.optional().catch(undefined),
@@ -2240,6 +2243,15 @@ function agentTaskRecoveryError(value: unknown): string | null {
   return `schema_invalid: agentTaskRecovery${field ? `.${field}` : ""}: ${issue?.message ?? "invalid configuration"}`;
 }
+function v2RoutedDelegationBridgeError(value: unknown): string | null {
+  const raw = rawConfigRecord(value);
+  if (!raw || !Object.hasOwn(raw, "v2RoutedDelegationBridge")) return null;
+  const enabled = raw.v2RoutedDelegationBridge;
+  return enabled === undefined || typeof enabled === "boolean"
+    ? null
+    : "schema_invalid: v2RoutedDelegationBridge: must be a boolean or omitted";
+}
 function v2NativeParentOverrideError(value: unknown): string | null {
   const raw = rawConfigRecord(value);
   if (!raw || !Object.hasOwn(raw, "v2NativeParentOverride") || raw.v2NativeParentOverride === undefined) return null;
@@ -2363,6 +2375,7 @@ export function validateConfigCandidate(value: unknown): { ok: true; config: Ocx
     ?? appOwnedMemoryBudgetError(value)
     ?? upstreamHostCircuitThresholdError(value)
     ?? agentTaskRecoveryError(value)
+    ?? v2RoutedDelegationBridgeError(value)
     ?? v2NativeParentOverrideError(value)
     ?? googleAntigravityStaticCatalogVersionError(value)
     ?? codexAccountPrioritiesError(value)

package/src/generated/compatibility-version.json CHANGED Viewed

@@ -10,7 +10,7 @@
     },
     {
       "path": "package.json",
-      "sha256": "04c678cdcea4e81189fc9b670c41fd01418a6811bad1589d44cbc5af2c82fd4a"
+      "sha256": "a5ca11ad28ee71275c97eac3a5776b910f8836fe6641548e54ab0e4e32a07e40"
     },
     {
       "path": "scripts/model-metadata.source.json",
@@ -1166,7 +1166,7 @@
     },
     {
       "path": "src/config.ts",
-      "sha256": "17b011a9980e50b95e37ea8b15a310bfc6d11c671029530426ea34f0ceb6df5c"
+      "sha256": "4534807abf3722078ae2c6d377885a12d4e6921b376601ea6d76ccc3f677cfb9"
     },
     {
       "path": "src/config/atomic-write.ts",
@@ -2710,7 +2710,7 @@
     },
     {
       "path": "src/server/management/agent-settings-routes.ts",
-      "sha256": "b3ab4de3aa4b3137980f592ed85f202573e6c57ad54371ed164bbfecbd97e437"
+      "sha256": "1fb5e34401044aedbc3164c083d0c1d37857083f3144e296d4e5ad4993bc3cee"
     },
     {
       "path": "src/server/management/api-access.ts",
@@ -2946,7 +2946,7 @@
     },
     {
       "path": "src/server/responses/core.ts",
-      "sha256": "f6acbd947c2abc6a5811406ec993876ae0e10fe56a2ce67507eb778bb46de956"
+      "sha256": "90ce7232996139a594f4055155db1cba61692f680c85e9d6d5601a0657c12c49"
     },
     {
       "path": "src/server/responses/empty-completion-guard.ts",
@@ -2992,6 +2992,10 @@
       "path": "src/server/responses/v2-native-parent-override.ts",
       "sha256": "ec20872a1cf656d0c3d29bebdb8863e80f16140913f725612b617f1e271abada"
     },
+    {
+      "path": "src/server/responses/v2-routed-delegation-bridge.ts",
+      "sha256": "a0ea013323d54c81426a0abc42eef6682d160a9ce71e3fc209c3124034ee514b"
+    },
     {
       "path": "src/server/responses/ws-upstream.ts",
       "sha256": "a892b860cdc50e9f15f23fdb2f286a8e3416eff4ce163650f5226aab4159fd38"
@@ -3162,7 +3166,7 @@
     },
     {
       "path": "src/types/config.ts",
-      "sha256": "e9bd0d48a52e54528593999ad87350bd2e134d662da104d22eaefc7c6c609e1a"
+      "sha256": "2947399e84229ff915fbe1677b4b29ddefafbde0cf42a10bdb130460fa1715fd"
     },
     {
       "path": "src/types/provider.ts",

package/src/server/management/agent-settings-routes.ts CHANGED Viewed

@@ -92,6 +92,17 @@ let grokApplyTestHooks: { now?: () => number; run?: () => Promise<unknown> } | n
 type V2NativeParentOverrideInput = { enabled: boolean; model: string | null };
 type AgentTaskRecoveryInput = { enabled: boolean; model: string | null };
+function persistV2RoutedDelegationBridge(config: OcxConfig, enabled: boolean): { ok: true } | { ok: false; reason: string } {
+  const outcome = mutatePersistedConfig(persisted => {
+    const changed = persisted.v2RoutedDelegationBridge !== enabled;
+    if (changed) persisted.v2RoutedDelegationBridge = enabled;
+    return { changed, value: true };
+  });
+  if (outcome.status === "unavailable") return { ok: false, reason: outcome.reason };
+  config.v2RoutedDelegationBridge = enabled;
+  return { ok: true };
+}
 function agentTaskRecoveryDto(
   config: OcxConfig,
 ): { enabled: boolean; model: string | null } {
@@ -342,6 +353,7 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
       // server-side so no client can present it as an effective V2 limit.
       agentsMaxDepthAppliesWhenV2Disabled: !enabled,
       v2NativeParentOverride,
+      v2RoutedDelegationBridge: config.v2RoutedDelegationBridge === true,
       agentTaskRecovery: agentTaskRecoveryDto(config),
     });
   }
@@ -356,6 +368,7 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
       subagentDeveloperInstructions?: unknown;
       multiAgentModeHintText?: unknown;
       v2NativeParentOverride?: unknown;
+      v2RoutedDelegationBridge?: unknown;
       agentTaskRecovery?: unknown;
     };
     try { body = await readManagementJsonBody(req); } catch (error) { rethrowManagementBodyTooLarge(error); return jsonResponse({ error: "invalid JSON body" }, 400); }
@@ -368,9 +381,10 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
     const wantsSubagentInstructions = body.subagentDeveloperInstructions !== undefined;
     const wantsModeHintText = body.multiAgentModeHintText !== undefined;
     const wantsV2NativeParentOverride = body.v2NativeParentOverride !== undefined;
+    const wantsV2RoutedDelegationBridge = body.v2RoutedDelegationBridge !== undefined;
     const wantsAgentTaskRecovery = body.agentTaskRecovery !== undefined;
-    if (!wantsFlag && !wantsThreads && !wantsMode && !wantsKeepNative && !wantsAgentsEnabled && !wantsMaxDepth && !wantsSubagentInstructions && !wantsModeHintText && !wantsV2NativeParentOverride && !wantsAgentTaskRecovery) {
-      return jsonResponse({ error: "body must set enabled, multiAgentMode, keepNativeChatGptOnV1, maxConcurrentThreadsPerSession, agentsEnabled, agentsMaxDepth, subagentDeveloperInstructions, multiAgentModeHintText, v2NativeParentOverride, and/or agentTaskRecovery" }, 400);
+    if (!wantsFlag && !wantsThreads && !wantsMode && !wantsKeepNative && !wantsAgentsEnabled && !wantsMaxDepth && !wantsSubagentInstructions && !wantsModeHintText && !wantsV2NativeParentOverride && !wantsV2RoutedDelegationBridge && !wantsAgentTaskRecovery) {
+      return jsonResponse({ error: "body must set enabled, multiAgentMode, keepNativeChatGptOnV1, maxConcurrentThreadsPerSession, agentsEnabled, agentsMaxDepth, subagentDeveloperInstructions, multiAgentModeHintText, v2NativeParentOverride, v2RoutedDelegationBridge, and/or agentTaskRecovery" }, 400);
     }
     if (wantsFlag && typeof body.enabled !== "boolean") return jsonResponse({ error: "body.enabled must be a boolean" }, 400);
     if (wantsMode && body.multiAgentMode !== "v1" && body.multiAgentMode !== "default" && body.multiAgentMode !== "v2") {
@@ -379,6 +393,9 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
     if (wantsKeepNative && typeof body.keepNativeChatGptOnV1 !== "boolean") {
       return jsonResponse({ error: "body.keepNativeChatGptOnV1 must be a boolean" }, 400);
     }
+    if (wantsV2RoutedDelegationBridge && typeof body.v2RoutedDelegationBridge !== "boolean") {
+      return jsonResponse({ error: "body.v2RoutedDelegationBridge must be a boolean" }, 400);
+    }
     if (wantsThreads && (typeof body.maxConcurrentThreadsPerSession !== "number" || !Number.isInteger(body.maxConcurrentThreadsPerSession) || body.maxConcurrentThreadsPerSession < 1)) {
       return jsonResponse({ error: "body.maxConcurrentThreadsPerSession must be an integer >= 1" }, 400);
     }
@@ -493,6 +510,12 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
         model: candidate.model === null || candidate.model === undefined ? null : (candidate.model as string).trim(),
       };
     }
+    if (wantsV2RoutedDelegationBridge && !wantsFlag && !wantsThreads && !wantsMode && !wantsKeepNative
+        && !wantsAgentsEnabled && !wantsMaxDepth && !wantsSubagentInstructions && !wantsModeHintText && !wantsV2NativeParentOverride && !wantsAgentTaskRecovery) {
+      const persisted = persistV2RoutedDelegationBridge(config, body.v2RoutedDelegationBridge as boolean);
+      if (!persisted.ok) return jsonResponse({ error: `persisting v2RoutedDelegationBridge failed: ${persisted.reason}` }, 502);
+      return jsonResponse({ ok: true, v2RoutedDelegationBridge: config.v2RoutedDelegationBridge === true });
+    }
     if (agentTaskRecovery && !wantsFlag && !wantsThreads && !wantsMode && !wantsKeepNative
         && !wantsAgentsEnabled && !wantsMaxDepth && !wantsSubagentInstructions && !wantsModeHintText && !wantsV2NativeParentOverride) {
       const persisted = persistAgentTaskRecovery(config, agentTaskRecovery);
@@ -593,6 +616,10 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
       const persisted = persistV2NativeParentOverride(config, v2NativeParentOverride);
       if (!persisted.ok) return jsonResponse({ error: `persisting v2NativeParentOverride failed: ${persisted.reason}` }, 502);
     }
+    if (wantsV2RoutedDelegationBridge) {
+      const persisted = persistV2RoutedDelegationBridge(config, body.v2RoutedDelegationBridge as boolean);
+      if (!persisted.ok) return jsonResponse({ error: `persisting v2RoutedDelegationBridge failed: ${persisted.reason}` }, 502);
+    }
     if (agentTaskRecovery) {
       const persisted = persistAgentTaskRecovery(config, agentTaskRecovery);
       if (!persisted.ok) return jsonResponse({ error: `persisting agentTaskRecovery failed: ${persisted.reason}` }, 502);
@@ -613,6 +640,7 @@ export async function handleAgentSettingsRoutes(ctx: ManagementContext): Promise
       multiAgentModeHintText: getMultiAgentModeHintText(),
       agentsMaxDepthAppliesWhenV2Disabled: !enabled,
       v2NativeParentOverride: v2NativeParentOverrideDto(config, enabled),
+      v2RoutedDelegationBridge: config.v2RoutedDelegationBridge === true,
       agentTaskRecovery: agentTaskRecoveryDto(config),
       warnings,
       catalogRefresh,

package/src/server/responses/core.ts CHANGED Viewed

@@ -244,6 +244,7 @@ import { readBoundedResponseBody } from "../../lib/bounded-body";
 import type { AdmissionLease } from "../../lib/admission";
 import { supportedLadderFor } from "../effort-policy";
 import { isThreadSpawnRequest } from "../effort-policy";
+import { isMultiAgentV2Enabled } from "../../codex/features";
 import {
   applySubagentModelFallback,
   maybePrimeSubagentQuota,
@@ -321,6 +322,12 @@ import type { EffectiveSubagentRoster, SpawnAgentSurface } from "../../codex/cat
 import { buildToolBridgeMaps, collabSurface, injectDeveloperMessage, multiAgentGuidanceText } from "./collaboration";
 import { decideV2NativeParentOverride } from "./v2-native-parent-override";
+import {
+  createV2RoutedDelegationSseRewrite,
+  injectV2RoutedDelegationBridge,
+  rewriteV2RoutedDelegationCallsInJson,
+  type V2RoutedDelegationBridgeContext,
+} from "./v2-routed-delegation-bridge";
 import { mapCodexAuthContextErrorToResponse } from "./codex-auth-error";
 import { hasUnreadableEncryptedAgentTask, looksLikeBackendCiphertext, sanitizeEncryptedContentInPlace } from "./encrypted-payload";
 import { fetchWithHeaderTimeout, providerFetch, safeHostLabel, safeOriginLabel } from "./fetch-helpers";
@@ -2529,11 +2536,13 @@ async function handleResponsesInner(
   // Shadow call intercept: rewrite Codex 0.145.0+ helper calls (gpt-5.6-luna).
   // Ancient clients using gpt-5.4-mini remain configurable via sourceModels.
+  let shadowIntercepted = false;
   const _sci = config.shadowCallIntercept;
   if (_sci?.enabled && _sci.model && shouldInterceptShadowCall(
     parsed.modelId,
     _sci.sourceModels,
   )) {
+    shadowIntercepted = true;
     const _sciOriginal = parsed.modelId;
     parsed.modelId = _sci.model;
     if (parsed._rawBody && typeof parsed._rawBody === "object") {
@@ -2596,6 +2605,28 @@ async function handleResponsesInner(
     }
   }
+  let v2RoutedDelegationBridge: V2RoutedDelegationBridgeContext | undefined;
+  if (
+    inboundWire === "responses"
+    && config.v2RoutedDelegationBridge === true
+    && config.multiAgentMode === "v2"
+    && isMultiAgentV2Enabled()
+    && isCanonicalOpenAiForwardProvider(route.provider)
+    && collabSurface(parsed) === "v2"
+    && !isThreadSpawnRequest(req.headers)
+    && !req.headers.has("x-openai-subagent")
+    && !options.comboAttempt
+    && parsed._compactionRequest !== true
+    && !shadowIntercepted
+  ) {
+    try {
+      v2RoutedDelegationBridge = injectV2RoutedDelegationBridge(parsed);
+      if (v2RoutedDelegationBridge) toolBridgeMaps = buildToolBridgeMaps(parsed, translatorBudget);
+    } catch (error) {
+      return formatErrorResponse(400, "invalid_request_error", error instanceof Error ? error.message : String(error));
+    }
+  }
   const hasUnexpandedPreviousResponse = !!parsed.previousResponseId
     && parsed._previousResponseInputExpanded !== true;
   // Exact account selectors are isolated from Pool-wide quota work. A canonical replay miss must
@@ -3422,7 +3453,12 @@ async function handleResponsesInner(
       && (!parsed.previousResponseId || parsed._previousResponseInputExpanded === true);
     const rememberPassthroughResponse = passthroughRecordEligible
       ? (response: { id?: unknown; output?: unknown; status?: unknown }) =>
-        rememberResponseState(parsed._rawBody, response, undefined, responseStateOptions(true))
+        rememberResponseState(
+          v2RoutedDelegationBridge?.requestStateBody ?? parsed._rawBody,
+          response,
+          undefined,
+          responseStateOptions(true),
+        )
       : undefined;
     if (parsed.previousResponseId && !parsed._previousResponseInputExpanded) {
       console.warn(
@@ -4208,6 +4244,17 @@ async function handleResponsesInner(
           options.responsesTerminalRepairScheduler,
         )
         : upstreamResponse.body;
+      // The bridge owns request-scoped item-id admission. Apply it before the
+      // stream is split so the client, inspector, and continuation cache see
+      // the same authorized event history.
+      const bridgeSseRewrite = createV2RoutedDelegationSseRewrite(v2RoutedDelegationBridge);
+      const normalizedPassthroughSseBody = bridgeSseRewrite
+        ? relaySseWithBlockRewrite(
+          passthroughSseBody,
+          payloadRewriteAsBlockRewrite(bridgeSseRewrite),
+          translatorBudget,
+        )
+        : passthroughSseBody;
       const repairConfig = route.provider.responsesItemIdRepair;
       const snapshotRepairEnabled = hasResponsesSnapshotRepair(route.provider.responsesSnapshotRepair);
       const githubCopilotRepairEnabled = route.providerName === "github-copilot";
@@ -4269,7 +4316,7 @@ async function handleResponsesInner(
       const clientBlockRewrite = blockRewrites.length > 0
         ? composeSseBlockRewrites(...blockRewrites)
         : undefined;
-      const needsClientRewrite = clientBlockRewrite !== undefined;
+      const needsClientRewrite = bridgeSseRewrite !== undefined || clientBlockRewrite !== undefined;
       // #864: win32 rewrite traffic must never enter the tee()+JS-pull chain
       // (Bun#32111 JS-sink segfault — text frames pass, the terminal block is
       // lost). The eager single reader applies the same rewrites inline.
@@ -4318,7 +4365,7 @@ async function handleResponsesInner(
           onFirstOutput: options.onFirstOutput,
           pinCompletedResponseIdToFirstSeen: githubCopilotRepairEnabled,
         });
-        const eagerBody = relaySseEagerBounded(passthroughSseBody, turnAc, {
+        const eagerBody = relaySseEagerBounded(normalizedPassthroughSseBody, turnAc, {
           inspectChunk: chunk => inspector.feed(chunk),
           finishInspection: () => inspector.finish(),
           disposeInspection: () => inspector.dispose(),
@@ -4355,7 +4402,7 @@ async function handleResponsesInner(
           })),
         );
       }
-      const [nativeBody, inspectBody] = passthroughSseBody.tee();
+      const [nativeBody, inspectBody] = normalizedPassthroughSseBody.tee();
       const turnAc = new AbortController();
       const clientGone = new AbortController();
       linkAbortSignal(upstream, turnAc.signal);
@@ -4446,8 +4493,12 @@ async function handleResponsesInner(
           restoreImageGenCallsInJson(text, imageGenCallAliases),
           routedNamespaceToolAliases,
         );
-        const restored = restoreRoutedCustomCallsInJson(
+        const bridgeNormalized = rewriteV2RoutedDelegationCallsInJson(
           restoredNamespace,
+          v2RoutedDelegationBridge,
+        );
+        const restored = restoreRoutedCustomCallsInJson(
+          bridgeNormalized,
           routedCustomToolNames,
           routedCustomToolRepairNames,
           declaredWireToolNames,
@@ -4495,7 +4546,7 @@ async function handleResponsesInner(
       if (rememberPassthroughResponseChecked) {
         try {
           rememberPassthroughResponseChecked(
-            JSON.parse(text) as { id?: unknown; output?: unknown; status?: unknown },
+            JSON.parse(clientJson) as { id?: unknown; output?: unknown; status?: unknown },
           );
         } catch { /* non-JSON despite content-type; recording is best-effort */ }
       }

package/src/server/responses/v2-routed-delegation-bridge.ts ADDED Viewed

@@ -0,0 +1,233 @@
+import { isDeepStrictEqual } from "node:util";
+import type { OcxParsedRequest, OcxTool } from "../../types";
+import type { SsePayloadRewrite } from "../sse-payload-rewrite";
+const MIRROR_NAMESPACE = "ocx_agents";
+const NATIVE_NAMESPACE = "collaboration";
+const MIRRORED_NAMES = new Set(["spawn_agent", "send_message", "followup_task"]);
+const GUIDANCE = "Use this routed-child mirror for collaboration operations.";
+const MAX_SSE_BINDINGS = 128;
+type RecordValue = Record<string, unknown>;
+export interface V2RoutedDelegationBridgeContext {
+  readonly names: ReadonlySet<string>;
+  /** Request snapshot taken before mirror injection, for continuation-cache persistence. */
+  readonly requestStateBody: unknown;
+}
+function isRecord(value: unknown): value is RecordValue {
+  return !!value && typeof value === "object" && !Array.isArray(value);
+}
+function rawToolLists(body: unknown, replayPrefixLength: number): unknown[][] {
+  if (!isRecord(body)) return [];
+  const lists: unknown[][] = [];
+  if (Array.isArray(body.tools)) lists.push(body.tools);
+  if (Array.isArray(body.input)) {
+    for (const item of body.input.slice(Math.max(0, Math.min(replayPrefixLength, body.input.length)))) {
+      if (isRecord(item) && item.type === "additional_tools" && Array.isArray(item.tools)) lists.push(item.tools);
+    }
+  }
+  return lists;
+}
+function requestStateBody(body: unknown): unknown {
+  if (!isRecord(body) || !Array.isArray(body.input)) return body;
+  // Only additional_tools containers are mutated below. Clone that narrow path so the
+  // continuation cache retains the caller's catalog without copying unrelated context.
+  return {
+    ...body,
+    input: body.input.map(item => (
+      isRecord(item) && item.type === "additional_tools" && Array.isArray(item.tools)
+        ? { ...item, tools: [...item.tools] }
+        : item
+    )),
+  };
+}
+function mirrorTool(tool: RecordValue): RecordValue {
+  return { ...tool, description: `${GUIDANCE} ${tool.name}.` };
+}
+function mirrorChildren(group: RecordValue): RecordValue[] {
+  if (!Array.isArray(group.tools)) return [];
+  return group.tools.filter((tool): tool is RecordValue => (
+    isRecord(tool) && tool.type === "function" && typeof tool.name === "string" && MIRRORED_NAMES.has(tool.name)
+  )).map(mirrorTool);
+}
+function mirrorGroup(group: RecordValue): RecordValue {
+  return { type: "namespace", name: MIRROR_NAMESPACE, description: GUIDANCE, tools: mirrorChildren(group) };
+}
+/**
+ * Add request-local plaintext collaboration mirrors to raw and parsed Responses catalogs.
+ * The caller has already proved this request is eligible; this helper owns no routing policy.
+ */
+export function injectV2RoutedDelegationBridge(
+  parsed: OcxParsedRequest,
+): V2RoutedDelegationBridgeContext | undefined {
+  const stateBody = requestStateBody(parsed._rawBody);
+  const lists = rawToolLists(parsed._rawBody, parsed._replayPrefixLen ?? 0);
+  const nativeGroups: Array<{ list: unknown[]; index: number; group: RecordValue }> = [];
+  const existing: Array<{ list: unknown[]; index: number; group: RecordValue }> = [];
+  for (const list of lists) {
+    list.forEach((tool, index) => {
+      if (!isRecord(tool) || tool.type !== "namespace") return;
+      if (tool.name === NATIVE_NAMESPACE) nativeGroups.push({ list, index, group: tool });
+      if (tool.name === MIRROR_NAMESPACE) existing.push({ list, index, group: tool });
+    });
+  }
+  if (nativeGroups.length === 0) return undefined;
+  const names = new Set<string>();
+  for (const { group } of nativeGroups) {
+    for (const child of mirrorChildren(group)) names.add(child.name as string);
+  }
+  if (names.size === 0) return undefined;
+  const expected = nativeGroups.map(({ list, index, group }) => ({ list, index: index + 1, group: mirrorGroup(group) }));
+  const idempotent = existing.length === expected.length && expected.every(candidate => {
+    const actual = candidate.list[candidate.index];
+    return isRecord(actual) && isDeepStrictEqual(actual, candidate.group);
+  });
+  if (existing.length > 0 && !idempotent) {
+    throw new Error("v2 routed delegation bridge namespace collision");
+  }
+  if (!idempotent) {
+    for (const { list, index, group } of [...expected].reverse()) list.splice(index, 0, group);
+  }
+  const mirrorTools: OcxTool[] = [];
+  for (const name of names) {
+    const source = parsed.context.tools?.find(tool => tool.namespace === NATIVE_NAMESPACE && tool.name === name);
+    if (source) {
+      mirrorTools.push({ ...source, namespace: MIRROR_NAMESPACE, description: `${GUIDANCE} ${name}.` });
+      continue;
+    }
+    const raw = nativeGroups.flatMap(entry => mirrorChildren(entry.group)).find(tool => tool.name === name);
+    mirrorTools.push({
+      name,
+      namespace: MIRROR_NAMESPACE,
+      description: `${GUIDANCE} ${name}.`,
+      parameters: isRecord(raw?.parameters) ? raw.parameters : {},
+    });
+  }
+  if (mirrorTools.length > 0) {
+    const present = new Set((parsed.context.tools ?? [])
+      .filter(tool => tool.namespace === MIRROR_NAMESPACE)
+      .map(tool => tool.name));
+    if (mirrorTools.some(tool => !present.has(tool.name))) {
+      parsed.context.tools = [...(parsed.context.tools ?? []), ...mirrorTools.filter(tool => !present.has(tool.name))];
+    }
+  }
+  return names.size > 0 ? { names, requestStateBody: stateBody } : undefined;
+}
+function rewriteValue(
+  value: unknown,
+  active: V2RoutedDelegationBridgeContext,
+  authorizedIds?: ReadonlySet<string>,
+): { value: unknown; changed: boolean } {
+  if (Array.isArray(value)) {
+    let changed = false;
+    const next = value.map(entry => {
+      const rewritten = rewriteValue(entry, active, authorizedIds);
+      changed ||= rewritten.changed;
+      return rewritten.value;
+    });
+    return changed ? { value: next, changed: true } : { value, changed: false };
+  }
+  if (!isRecord(value)) return { value, changed: false };
+  let changed = false;
+  const entries = Object.entries(value).map(([key, entry]) => {
+    const rewritten = rewriteValue(entry, active, authorizedIds);
+    changed ||= rewritten.changed;
+    return [key, rewritten.value];
+  });
+  const next: RecordValue = Object.fromEntries(entries);
+  const armed =
+    value.type === "function_call"
+    && value.namespace === MIRROR_NAMESPACE
+    && typeof value.name === "string"
+    && active.names.has(value.name);
+  if (armed && authorizedIds !== undefined) {
+    if (typeof value.id !== "string" || !authorizedIds.has(value.id)) {
+      const capped = authorizedIds.size >= MAX_SSE_BINDINGS;
+      throw Object.assign(new Error(capped
+        ? `v2 routed delegation bridge exceeded ${MAX_SSE_BINDINGS} SSE call bindings`
+        : "v2 routed delegation bridge received an unbound SSE call"), {
+        ...(capped ? { code: "translation_buffer_limit" } : {}),
+      });
+    }
+  }
+  if (armed) {
+    next.namespace = NATIVE_NAMESPACE;
+    next.encrypted_function_args = [];
+    changed = true;
+  }
+  return changed ? { value: next, changed: true } : { value, changed: false };
+}
+/** Normalize only mirror calls armed by this request in a complete JSON response. */
+export function rewriteV2RoutedDelegationCallsInJson(
+  json: string,
+  active: V2RoutedDelegationBridgeContext | undefined,
+): string {
+  if (!active || active.names.size === 0) return json;
+  let parsed: unknown;
+  try { parsed = JSON.parse(json); } catch { return json; }
+  const rewritten = rewriteValue(parsed, active);
+  return rewritten.changed ? JSON.stringify(rewritten.value) : json;
+}
+/** Stateful payload rewrite for SSE; item ids bind later argument events to their mirror call. */
+export function createV2RoutedDelegationSseRewrite(
+  active: V2RoutedDelegationBridgeContext | undefined,
+): SsePayloadRewrite | undefined {
+  if (!active || active.names.size === 0) return undefined;
+  const admittedIds = new Set<string>();
+  const openArgumentIds = new Set<string>();
+  const bind = (itemId: unknown): void => {
+    if (typeof itemId !== "string" || itemId.trim().length === 0) return;
+    if (admittedIds.has(itemId)) return;
+    if (admittedIds.size >= MAX_SSE_BINDINGS) {
+      throw Object.assign(
+        new Error(`v2 routed delegation bridge exceeded ${MAX_SSE_BINDINGS} SSE call bindings`),
+        { code: "translation_buffer_limit" },
+      );
+    }
+    admittedIds.add(itemId);
+    openArgumentIds.add(itemId);
+  };
+  return payload => {
+    let event: unknown;
+    try { event = JSON.parse(payload); } catch { return payload; }
+    if (!isRecord(event)) return payload;
+    const type = event.type;
+    const item = isRecord(event.item) ? event.item : undefined;
+    const armed = !!item && item.type === "function_call" && item.namespace === MIRROR_NAMESPACE
+      && typeof item.name === "string" && active.names.has(item.name);
+    const added = type === "response.output_item.added";
+    const itemDone = type === "response.output_item.done";
+    if (added && armed) bind(item?.id);
+    const admittedSnapshot = itemDone && armed && typeof item?.id === "string" && admittedIds.has(item.id);
+    const argumentEvent = type === "response.function_call_arguments.delta" || type === "response.function_call_arguments.done";
+    const matchedArgument = argumentEvent && typeof event.item_id === "string" && openArgumentIds.has(event.item_id);
+    const failedTerminal = type === "response.failed" || type === "response.incomplete";
+    const rewritten = rewriteValue(event, active, admittedIds);
+    if (type === "response.function_call_arguments.done" && matchedArgument) openArgumentIds.delete(event.item_id as string);
+    if (itemDone && admittedSnapshot) openArgumentIds.delete(item!.id as string);
+    if (type === "response.completed" || failedTerminal) {
+      admittedIds.clear();
+      openArgumentIds.clear();
+    }
+    if (matchedArgument) {
+      const next = rewritten.changed && isRecord(rewritten.value) ? rewritten.value : { ...event };
+      next.encrypted_function_args = [];
+      return JSON.stringify(next);
+    }
+    return rewritten.changed ? JSON.stringify(rewritten.value) : payload;
+  };
+}

package/src/types/config.ts CHANGED Viewed

@@ -492,6 +492,8 @@ export interface OcxConfig {
    * Routed parents get v2 tools; Sol/Terra can still spawn Grok/Claude (issue #92).
    */
   keepNativeChatGptOnV1?: boolean;
+  /** Experimental plaintext delegation bridge for eligible native V2 roots. */
+  v2RoutedDelegationBridge?: boolean;
   /** Optional v2-native parent override for spawn_agent routing. */
   v2NativeParentOverride?: { enabled?: boolean; model?: string };
   /** Experimental, default-off ChatGPT recovery for encrypted V2 routed tasks. */