agent-relay-server 0.94.1 → 0.94.3

package/docs/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Relay API",
-    "version": "0.94.1",
+    "version": "0.94.3",
     "description": "Real-time message bus for inter-agent communication. Agent-first: this spec is designed for machine consumption — agents can self-discover the full API surface via GET /api/spec.",
     "license": {
       "name": "MIT",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay-server",
-  "version": "0.94.1",
+  "version": "0.94.3",
   "description": "Lightweight HTTP message relay for inter-agent communication across machines",
   "module": "src/index.ts",
   "type": "module",
@@ -34,7 +34,7 @@
     "CONTRIBUTING.md"
   ],
   "dependencies": {
-    "agent-relay-sdk": "0.2.74",
+    "agent-relay-sdk": "0.2.75",
     "ajv": "^8.20.0"
   },
   "scripts": {

package/runner/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-relay-runner",
   "description": "Thin Agent Relay runner bridge for Claude Code",
-  "version": "0.94.1",
+  "version": "0.94.3",
   "agentRelayContracts": {
     "providerPluginProtocol": 1
   }

package/src/codex-wham-quota.ts

@@ -1,7 +1,7 @@
 import { readFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { credentialAccountKey } from "agent-relay-sdk/provider-quota";
+import { resolveStableCodexQuotaIdentity } from "agent-relay-sdk/provider-quota";
 import { quotaStateFromProbeMetrics } from "agent-relay-sdk/context-probe";
 import { errMessage, isRecord, stringValue } from "agent-relay-sdk";
 import { codexWhamQuotaEnabled } from "./config";
@@ -119,11 +119,12 @@ async function readCodexWhamAuth(path: string): Promise<CodexWhamAuth | undefine
     const tokens = isRecord(parsed) && isRecord(parsed.tokens) ? parsed.tokens : undefined;
     const accessToken = stringValue(tokens?.access_token);
     const accountId = stringValue(tokens?.account_id);
-    if (!accessToken || !accountId) return undefined;
+    const identity = resolveStableCodexQuotaIdentity({ authPayload: parsed });
+    if (!accessToken || !accountId || !identity) return undefined;
     return {
       accessToken,
       accountId,
-      accountKey: credentialAccountKey(accountId),
+      accountKey: identity.accountKey,
     };
   } catch {
     return undefined;

package/src/db/migrations.ts

@@ -23,6 +23,7 @@ import { ensureContinuationArchiveSearchSchema } from "./continuation-archives.t
 import { ensureCrashReportsSchema } from "./crash-reports.ts";
 import { ensureTerminalEventsSchema } from "./terminal-events.ts";
 import { seedBundledProvisioningAssets } from "./provisioning-registry.ts";
+import { provisioningAssetsColumnNames, provisioningAssetsNeedsRebuild, rebuildProvisioningAssetsTable } from "./provisioning-assets-migration.ts";
 import { normalizeReactionEmoji } from "./mappers.ts";
 import { normalizeProviderQuotaAccountKeys } from "./provider-quotas.ts";
 import { projectRootsMissingIssueRepo, setProjectIssueRepo } from "./projects.ts";
@@ -584,9 +585,7 @@ export function applyMigrations(): void {
       UNIQUE(kind, name, provider)
     )
   `);
-  getDb().run("CREATE INDEX IF NOT EXISTS idx_provisioning_assets_kind ON provisioning_assets(kind, enabled)");
-  const provisioningAssetCols = getDb().query("PRAGMA table_info(provisioning_assets)").all() as any[];
-  const provisioningAssetColNames = provisioningAssetCols.map((c: any) => c.name);
+  let provisioningAssetColNames = provisioningAssetsColumnNames();
   const provisioningAssetAddColumns = [
     ["capability_id", "capability_id TEXT"],
     ["source_type", "source_type TEXT"],
@@ -629,11 +628,12 @@ export function applyMigrations(): void {
     getDb().run("UPDATE provisioning_assets SET imported_at = coalesce(imported_at, created_at)");
   });
   backfillCapabilities(existingCapabilities);
+  if (provisioningAssetsNeedsRebuild()) rebuildProvisioningAssetsTable();
+  getDb().run("CREATE INDEX IF NOT EXISTS idx_provisioning_assets_kind ON provisioning_assets(kind, enabled)");
   getDb().run("CREATE INDEX IF NOT EXISTS idx_provisioning_assets_capability ON provisioning_assets(capability_id, provider, enabled)");
   getDb().run(`
     CREATE UNIQUE INDEX IF NOT EXISTS idx_provisioning_assets_capability_provider
     ON provisioning_assets(capability_id, provider)
-    WHERE capability_id IS NOT NULL
   `);
   seedBundledProvisioningAssets();
   if (!agentColNames.includes("spawned_by")) {

package/src/db/provider-quotas.ts

@@ -1,4 +1,5 @@
 import { DAY_MS, QUOTA_HISTORY_RETENTION_MS } from "../config";
+import { credentialAccountKey } from "agent-relay-sdk/provider-quota";
 import { parseJson } from "../utils";
 import { getDb } from "./connection.ts";
 import { deriveProviderQuotaBurn } from "./provider-quota-burn.ts";
@@ -98,6 +99,7 @@ function quotaRowsForProvider(provider: string): ProviderQuotaRow[] {
 function supersededAccountKeys(provider: string, accountKey: string, rawAccountKey: string, sourceAgentId: string | undefined): string[] {
   const candidates = new Set<string>();
   if (rawAccountKey && rawAccountKey !== accountKey) candidates.add(rawAccountKey);
+  if (provider === "codex" && accountKey.startsWith("account:")) candidates.add(credentialAccountKey(accountKey.slice("account:".length)));
   const host = hostFromAccountKey(accountKey) ?? sourceAgentHost(sourceAgentId);
   if (host) {
     candidates.add(`host:${host}:${provider}`);
@@ -607,9 +609,7 @@ export function normalizeProviderQuotaAccountKeys(now = Date.now()): number {
   let changes = 0;
   for (const row of getDb().query("SELECT * FROM provider_quotas").all() as ProviderQuotaRow[]) {
     const accountKey = canonicalProviderQuotaAccountKey(row.provider, row.account_key);
-    if (accountKey !== row.account_key) {
-      changes += mergeProviderQuotaRows(row.provider, accountKey, [row.account_key], now);
-    }
+    changes += mergeProviderQuotaRows(row.provider, accountKey, accountKey === row.account_key ? supersededAccountKeys(row.provider, accountKey, row.account_key, undefined) : [row.account_key], now);
   }
   changes += pruneUnstableProviderQuotaRecords();
   changes += pruneProviderQuotaRecords(undefined, undefined, now - DAY_MS);

package/src/db/provisioning-assets-migration.ts

@@ -0,0 +1,85 @@
+import { getDb } from "./connection.ts";
+
+export function provisioningAssetsColumnNames(): string[] {
+  return (getDb().query("PRAGMA table_info(provisioning_assets)").all() as Array<{ name: string }>).map((col) => col.name);
+}
+
+export function provisioningAssetsNeedsRebuild(): boolean {
+  const columns = getDb().query("PRAGMA table_info(provisioning_assets)").all() as Array<{ name: string; notnull: number }>;
+  const capabilityId = columns.find((col) => col.name === "capability_id");
+  if (!capabilityId || capabilityId.notnull !== 1) return true;
+
+  const indexes = getDb().query("PRAGMA index_list(provisioning_assets)").all() as Array<{ name: string; unique: number; partial: number }>;
+  for (const index of indexes) {
+    if (index.unique !== 1 || index.partial !== 0) continue;
+    const indexColumns = (getDb().query(`PRAGMA index_info(${JSON.stringify(index.name)})`).all() as Array<{ name: string }>).map((col) => col.name);
+    if (indexColumns.join(",") === "capability_id,provider") return false;
+  }
+
+  return true;
+}
+
+export function rebuildProvisioningAssetsTable(): void {
+  getDb()
+    .transaction(() => {
+      getDb().run("DROP TABLE IF EXISTS provisioning_assets_rebuild");
+      getDb().run(`
+        CREATE TABLE provisioning_assets_rebuild (
+          id TEXT PRIMARY KEY,
+          capability_id TEXT NOT NULL REFERENCES provisioning_capabilities(id) ON DELETE CASCADE,
+          kind TEXT NOT NULL,
+          name TEXT NOT NULL,
+          provider TEXT NOT NULL DEFAULT 'any',
+          definition TEXT NOT NULL,
+          enabled INTEGER NOT NULL DEFAULT 1,
+          source_type TEXT,
+          source_url TEXT,
+          source_ref TEXT,
+          resolved_ref TEXT,
+          source_subpath TEXT,
+          version_constraint TEXT,
+          approval_status TEXT NOT NULL DEFAULT 'approved',
+          validation_status TEXT NOT NULL DEFAULT 'valid',
+          validation_errors TEXT NOT NULL DEFAULT '[]',
+          provenance TEXT NOT NULL DEFAULT '{}',
+          imported_at INTEGER,
+          created_at INTEGER NOT NULL,
+          updated_at INTEGER NOT NULL,
+          UNIQUE(kind, name, provider),
+          UNIQUE(capability_id, provider)
+        )
+      `);
+      getDb().run(`
+        INSERT INTO provisioning_assets_rebuild (
+          id, capability_id, kind, name, provider, definition, enabled,
+          source_type, source_url, source_ref, resolved_ref, source_subpath, version_constraint,
+          approval_status, validation_status, validation_errors, provenance, imported_at,
+          created_at, updated_at
+        )
+        SELECT
+          id,
+          capability_id,
+          kind,
+          name,
+          provider,
+          definition,
+          enabled,
+          source_type,
+          source_url,
+          source_ref,
+          resolved_ref,
+          source_subpath,
+          version_constraint,
+          coalesce(approval_status, 'approved'),
+          coalesce(validation_status, 'valid'),
+          coalesce(validation_errors, '[]'),
+          coalesce(provenance, '{}'),
+          coalesce(imported_at, created_at),
+          created_at,
+          updated_at
+        FROM provisioning_assets
+      `);
+      getDb().run("DROP TABLE provisioning_assets");
+      getDb().run("ALTER TABLE provisioning_assets_rebuild RENAME TO provisioning_assets");
+    })();
+}

package/src/db/schema.ts

@@ -990,29 +990,15 @@ export function initDb(path: string = "agent-relay.db"): Database {
 
     CREATE TABLE IF NOT EXISTS provisioning_assets (
       id TEXT PRIMARY KEY,
-      capability_id TEXT NOT NULL REFERENCES provisioning_capabilities(id) ON DELETE CASCADE,
       kind TEXT NOT NULL,
       name TEXT NOT NULL,
       provider TEXT NOT NULL DEFAULT 'any',
       definition TEXT NOT NULL,
       enabled INTEGER NOT NULL DEFAULT 1,
-      source_type TEXT,
-      source_url TEXT,
-      source_ref TEXT,
-      resolved_ref TEXT,
-      source_subpath TEXT,
-      version_constraint TEXT,
-      approval_status TEXT NOT NULL DEFAULT 'approved',
-      validation_status TEXT NOT NULL DEFAULT 'valid',
-      validation_errors TEXT NOT NULL DEFAULT '[]',
-      provenance TEXT NOT NULL DEFAULT '{}',
-      imported_at INTEGER,
       created_at INTEGER NOT NULL,
       updated_at INTEGER NOT NULL,
-      UNIQUE(kind, name, provider),
-      UNIQUE(capability_id, provider)
+      UNIQUE(kind, name, provider)
     );
-    CREATE INDEX IF NOT EXISTS idx_provisioning_assets_kind ON provisioning_assets(kind, enabled);
   `);
 
   ensureContinuationArchiveSearchSchema();