codex-channel-bgos 0.2.0

package/dist/outbox.js

@@ -0,0 +1,88 @@
+/**
+ * Durable outbound spool for the BGOS channel.
+ *
+ * When an outbound send fails 3 times against the safe network-error class
+ * (see outbound.ts classifyOutboundError), the payload is appended here so a
+ * later reconnect / 60s replay tick can retry it. This is safe ONLY for the
+ * provably-undelivered network-error class: the backend message insert is not
+ * idempotent, so ambiguous failures (timeouts, 5xx) are never spooled.
+ *
+ * File: `$CODEX_BGOS_HOME/bgos_outbox.jsonl` (default `~/.codex-bgos/bgos_outbox.jsonl`),
+ * one JSON object per line. Cap 200 entries (drop-oldest). Entries older than
+ * 24h are dropped on read. All writes are best-effort: a spool hiccup must
+ * never crash the daemon.
+ */
+import { appendFileSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+const MAX_ENTRIES = 200;
+const MAX_AGE_MS = 24 * 60 * 60 * 1000;
+function outboxPath() {
+    const root = process.env.CODEX_BGOS_HOME ?? join(homedir(), ".codex-bgos");
+    return join(root, "bgos_outbox.jsonl");
+}
+/** Read the spool, dropping entries older than 24h. Never throws. */
+export function loadOutbox() {
+    let raw;
+    try {
+        raw = readFileSync(outboxPath(), "utf8");
+    }
+    catch {
+        return [];
+    }
+    const now = Date.now();
+    const out = [];
+    for (const line of raw.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        try {
+            const entry = JSON.parse(trimmed);
+            if (entry &&
+                typeof entry.ts === "number" &&
+                now - entry.ts <= MAX_AGE_MS &&
+                entry.payload) {
+                out.push(entry);
+            }
+        }
+        catch {
+            // skip malformed line
+        }
+    }
+    return out;
+}
+/** Append one entry, then compact to the newest MAX_ENTRIES. Never throws. */
+export function appendOutbox(entry) {
+    try {
+        const target = outboxPath();
+        mkdirSync(dirname(target), { recursive: true });
+        appendFileSync(target, JSON.stringify(entry) + "\n", { mode: 0o600 });
+        // Compact if we may have exceeded the cap.
+        const entries = loadOutbox();
+        if (entries.length > MAX_ENTRIES) {
+            rewriteOutbox(entries.slice(entries.length - MAX_ENTRIES));
+        }
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** Atomically replace the spool with `entries` (tmp + rename). Never throws. */
+export function rewriteOutbox(entries) {
+    try {
+        const target = outboxPath();
+        mkdirSync(dirname(target), { recursive: true });
+        const body = entries.map((e) => JSON.stringify(e)).join("\n");
+        const tmp = `${target}.${process.pid}.tmp`;
+        writeFileSync(tmp, body ? body + "\n" : "", { mode: 0o600 });
+        renameSync(tmp, target);
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** Empty the spool. Never throws. */
+export function clearOutbox() {
+    rewriteOutbox([]);
+}
+//# sourceMappingURL=outbox.js.map

package/dist/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../src/outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,cAAc,EACd,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAW1C,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,SAAS,UAAU;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;AACzC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,UAAU;IACxB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;YACjD,IACE,KAAK;gBACL,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;gBAC5B,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,UAAU;gBAC5B,KAAK,CAAC,OAAO,EACb,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,2CAA2C;QAC3C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACjC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAC3C,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,WAAW;IACzB,aAAa,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC"}

package/dist/pair-cli.d.ts

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+import { type AgentCatalogEntry, type PairExchangeResponse } from "./types.js";
+/**
+ * CLI entry point for `codex-pair-bgos`.
+ *
+ * Two modes:
+ *   - Pair-code mode: `codex-pair-bgos <CODE>`, POST /integrations/pair-exchange
+ *     with the code, a device label, the daemon version, and the local agent
+ *     catalog, then persist the returned token.
+ *   - Token mode: `codex-pair-bgos --token -` (reads the token from stdin) or
+ *     `--token <value>` (scripting; shell-history caveat documented). Validates
+ *     via GET /integrations/me (learns pairing_id/user_id), then persists.
+ *
+ * The secrets file is written ATOMICALLY (tmp + rename, 0600) in both modes.
+ *
+ * Exit codes:
+ *   0 success
+ *   1 network error
+ *   2 invalid/consumed/expired code, or invalid token (401)
+ */
+export interface PairResult {
+    pairing: PairExchangeResponse;
+    tokenFile: string;
+}
+export interface PairCliOptions {
+    baseUrl: string;
+    code: string;
+    deviceLabel?: string;
+    agentCatalog?: AgentCatalogEntry[];
+    secretsDir?: string;
+}
+export declare function pairBgos(opts: PairCliOptions): Promise<PairResult>;
+export interface PairWithTokenOptions {
+    baseUrl: string;
+    token: string;
+    secretsDir?: string;
+}
+/**
+ * Token mode: validate an existing pairing token via GET /integrations/me
+ * (learns pairing_id/user_id), then persist the secrets file atomically.
+ * Throws PairingRevokedError (mapped from 401) for an invalid token.
+ */
+export declare function pairBgosWithToken(opts: PairWithTokenOptions): Promise<PairResult>;
+//# sourceMappingURL=pair-cli.d.ts.map

package/dist/pair-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-cli.d.ts","sourceRoot":"","sources":["../src/pair-cli.ts"],"names":[],"mappings":";AAOA,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAiCD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAsBxE;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,UAAU,CAAC,CAuBrB"}

package/dist/pair-cli.js

@@ -0,0 +1,182 @@
+#!/usr/bin/env node
+import { hostname } from "node:os";
+import { mkdir, rename, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { BgosApi } from "./bgos-api.js";
+import { getPackageVersion } from "./version.js";
+import { PairingRevokedError, } from "./types.js";
+function defaultSecretsDir() {
+    // Respect CODEX_BGOS_HOME so pairing writes the token where `start` reads it
+    // (every other module resolves the home the same way). Falls back to
+    // ~/.codex-bgos when the override is unset.
+    const override = process.env.CODEX_BGOS_HOME?.trim();
+    if (override) {
+        const root = override.startsWith("~")
+            ? join(process.env.HOME ?? ".", override.slice(1))
+            : override;
+        return join(root, "secrets");
+    }
+    return join(process.env.HOME ?? process.env.USERPROFILE ?? ".", ".codex-bgos", "secrets");
+}
+/** Atomically persist the secrets file (tmp + rename, 0600). */
+async function writeSecretsAtomic(secretsDir, payload) {
+    await mkdir(secretsDir, { recursive: true });
+    const tokenFile = join(secretsDir, "bgos.json");
+    const tmp = `${tokenFile}.${process.pid}.tmp`;
+    await writeFile(tmp, JSON.stringify(payload, null, 2), { mode: 0o600 });
+    await rename(tmp, tokenFile);
+    return tokenFile;
+}
+export async function pairBgos(opts) {
+    const label = opts.deviceLabel ?? `${hostname()} (Codex)`;
+    const res = await BgosApi.pairExchange(opts.baseUrl, {
+        code: opts.code,
+        deviceLabel: label,
+        agentCatalog: opts.agentCatalog,
+        // Tag the pairing so it lands under the Codex card (assistants get
+        // created with code='codex'). Without this the backend defaults to
+        // 'openclaw' and the pairing surfaces in the wrong card.
+        integration: "codex",
+        daemonVersion: getPackageVersion(),
+    });
+    const secretsDir = opts.secretsDir ?? defaultSecretsDir();
+    const tokenFile = await writeSecretsAtomic(secretsDir, {
+        baseUrl: opts.baseUrl.replace(/\/+$/, ""),
+        pairingToken: res.pairing_token,
+        pairingId: res.pairing_id,
+        userId: res.user_id,
+        pairedAt: new Date().toISOString(),
+    });
+    return { pairing: res, tokenFile };
+}
+/**
+ * Token mode: validate an existing pairing token via GET /integrations/me
+ * (learns pairing_id/user_id), then persist the secrets file atomically.
+ * Throws PairingRevokedError (mapped from 401) for an invalid token.
+ */
+export async function pairBgosWithToken(opts) {
+    const api = new BgosApi({
+        baseUrl: opts.baseUrl.replace(/\/+$/, ""),
+        pairingToken: opts.token,
+        reconnect: { initialDelayMs: 1000, maxDelayMs: 30000 },
+    });
+    const me = await api.whoami();
+    const secretsDir = opts.secretsDir ?? defaultSecretsDir();
+    const tokenFile = await writeSecretsAtomic(secretsDir, {
+        baseUrl: opts.baseUrl.replace(/\/+$/, ""),
+        pairingToken: opts.token,
+        pairingId: me.pairing_id,
+        userId: me.user_id,
+        pairedAt: new Date().toISOString(),
+    });
+    return {
+        pairing: {
+            pairing_token: opts.token,
+            pairing_id: me.pairing_id,
+            user_id: me.user_id,
+        },
+        tokenFile,
+    };
+}
+const DEFAULT_BASE_URL = "https://api.brandgrowthos.ai";
+function parseAgentCatalog(raw) {
+    if (!raw)
+        return undefined;
+    const entries = raw
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean)
+        .map((entry) => {
+        const [route, name] = entry.split(":").map((p) => p.trim());
+        if (!route)
+            return null;
+        return { agent_route: route, name: name || route };
+    })
+        .filter((a) => a !== null);
+    return entries.length ? entries : undefined;
+}
+function takeFlag(argv, flag) {
+    const idx = argv.indexOf(flag);
+    if (idx < 0)
+        return undefined;
+    const val = argv[idx + 1];
+    argv.splice(idx, 2);
+    return val;
+}
+/** Read a single line/blob from stdin (used for `--token -`). */
+async function readStdin() {
+    const chunks = [];
+    for await (const c of process.stdin)
+        chunks.push(c);
+    return Buffer.concat(chunks).toString("utf8").trim();
+}
+async function main() {
+    const argv = process.argv.slice(2);
+    const deviceLabel = takeFlag(argv, "--device-label");
+    const baseUrl = takeFlag(argv, "--base-url") ??
+        process.env.BGOS_BASE_URL ??
+        DEFAULT_BASE_URL;
+    const tokenFlag = takeFlag(argv, "--token");
+    // ---- Token mode ---------------------------------------------------
+    if (tokenFlag !== undefined) {
+        try {
+            let token = tokenFlag;
+            if (token === "-") {
+                token = await readStdin();
+            }
+            if (!token) {
+                process.stderr.write("No token provided on stdin.\n");
+                process.exit(2);
+            }
+            const { pairing, tokenFile } = await pairBgosWithToken({ baseUrl, token });
+            process.stdout.write(`Token accepted. Secret written to ${tokenFile}\n`);
+            process.stdout.write(`pairing_id=${pairing.pairing_id} user_id=${pairing.user_id}\n`);
+            process.exit(0);
+        }
+        catch (err) {
+            const e = err;
+            if (err instanceof PairingRevokedError || e?.response?.status === 401) {
+                process.stderr.write("Token rejected (401): invalid or revoked.\n");
+                process.exit(2);
+            }
+            process.stderr.write(`Token validation failed: ${e?.message ?? String(err)}\n`);
+            process.exit(1);
+        }
+    }
+    // ---- Pair-code mode -----------------------------------------------
+    const code = argv.find((a) => !a.startsWith("--"));
+    if (!code) {
+        process.stderr.write("usage: codex-pair-bgos <CODE> [--device-label NAME] [--base-url URL]\n" +
+            "       codex-pair-bgos --token -   (reads a pairing token from stdin)\n");
+        process.exit(2);
+    }
+    try {
+        const { pairing, tokenFile } = await pairBgos({
+            baseUrl,
+            code,
+            deviceLabel,
+            agentCatalog: parseAgentCatalog(process.env.CODEX_BGOS_AGENTS),
+        });
+        process.stdout.write(`Paired. Secret written to ${tokenFile}\n`);
+        process.stdout.write(`pairing_id=${pairing.pairing_id} user_id=${pairing.user_id}\n`);
+        process.exit(0);
+    }
+    catch (err) {
+        const e = err;
+        const status = e?.response?.status;
+        if (status === 400 || status === 404 || status === 410) {
+            process.stderr.write(`Pair code rejected (${status}): ${JSON.stringify(e.response?.data ?? "expired or consumed")}\n`);
+            process.exit(2);
+        }
+        process.stderr.write(`Pair failed: ${e?.message ?? String(err)}\n`);
+        process.exit(1);
+    }
+}
+// Run when invoked as a CLI (not when imported as a library).
+const invokedAsCli = typeof process !== "undefined" &&
+    Array.isArray(process.argv) &&
+    /pair-cli(?:\.[mc]?[jt]s)?$/.test(process.argv[1] ?? "");
+if (invokedAsCli) {
+    void main();
+}
+//# sourceMappingURL=pair-cli.js.map

package/dist/pair-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-cli.js","sourceRoot":"","sources":["../src/pair-cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,mBAAmB,GAGpB,MAAM,YAAY,CAAC;AAkCpB,SAAS,iBAAiB;IACxB,6EAA6E;IAC7E,qEAAqE;IACrE,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YACnC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC,QAAQ,CAAC;QACb,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CACT,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,EAClD,aAAa,EACb,SAAS,CACV,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,OAAgC;IAEhC,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC9C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAoB;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,QAAQ,EAAE,UAAU,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE;QACnD,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,mEAAmE;QACnE,mEAAmE;QACnE,yDAAyD;QACzD,WAAW,EAAE,OAAO;QACpB,aAAa,EAAE,iBAAiB,EAAE;KACnC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE;QACrD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;QACtB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,YAAY,EAAE,IAAI,CAAC,KAAK;QACxB,SAAS,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE;KACvD,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE;QACrD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,YAAY,EAAE,IAAI,CAAC,KAAK;QACxB,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,MAAM,EAAE,EAAE,CAAC,OAAO;QAClB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE;YACP,aAAa,EAAE,IAAI,CAAC,KAAK;YACzB,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,OAAO,EAAE,EAAE,CAAC,OAAO;SACpB;QACD,SAAS;KACV,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AAExD,SAAS,iBAAiB,CAAC,GAAuB;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC;IACrD,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc,EAAE,IAAY;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACrD,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,gBAAgB,CAAC;IACnB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE5C,sEAAsE;IACtE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,KAAK,GAAG,SAAS,CAAC;YACtB,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAClB,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,SAAS,IAAI,CAAC,CAAC;YACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,cAAc,OAAO,CAAC,UAAU,YAAY,OAAO,CAAC,OAAO,IAAI,CAChE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA2D,CAAC;YACtE,IAAI,GAAG,YAAY,mBAAmB,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wEAAwE;YACtE,yEAAyE,CAC5E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC;YAC5C,OAAO;YACP,IAAI;YACJ,WAAW;YACX,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAC/D,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,SAAS,IAAI,CAAC,CAAC;QACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,cAAc,OAAO,CAAC,UAAU,YAAY,OAAO,CAAC,OAAO,IAAI,CAChE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAA2E,CAAC;QACtF,MAAM,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC;QACnC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,qBAAqB,CAAC,IAAI,CACjG,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,YAAY,GAChB,OAAO,OAAO,KAAK,WAAW;IAC9B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3D,IAAI,YAAY,EAAE,CAAC;IACjB,KAAK,IAAI,EAAE,CAAC;AACd,CAAC"}

package/dist/pending-unknown-store.d.ts

@@ -0,0 +1,26 @@
+export interface PendingUnknownEntry {
+    /** BGOS inbound message id left unconsumed. */
+    id: number;
+    /** Epoch ms when first recorded. */
+    at: number;
+}
+/** Read the persisted pending set. Never throws; returns [] on any error. */
+export declare function loadPendingUnknown(): PendingUnknownEntry[];
+/**
+ * Record an id as pending-unknown. Idempotent (a repeated poll re-fetch of the
+ * same unconsumed id does not duplicate the entry). Bounded to MAX_PENDING by
+ * dropping the oldest entries.
+ */
+export declare function recordPendingUnknown(id: number): void;
+/** Remove an id from the pending set (it has now been consumed). No-op when
+ *  the id is absent. Never throws. */
+export declare function clearPendingUnknown(id: number): void;
+/** Lowest still-pending unknown id, or null when the set is empty. Used by
+ *  saveLastId to clamp the disk cursor. */
+export declare function lowestPendingUnknown(): number | null;
+/** Count + oldest timestamp, for the adapter's visible stuck telemetry. */
+export declare function pendingUnknownStats(): {
+    count: number;
+    oldestAt: number | null;
+};
+//# sourceMappingURL=pending-unknown-store.d.ts.map

package/dist/pending-unknown-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-unknown-store.d.ts","sourceRoot":"","sources":["../src/pending-unknown-store.ts"],"names":[],"mappings":"AAkCA,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;CACZ;AAWD,6EAA6E;AAC7E,wBAAgB,kBAAkB,IAAI,mBAAmB,EAAE,CA6B1D;AAeD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAUrD;AAED;sCACsC;AACtC,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAKpD;AAED;2CAC2C;AAC3C,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAMpD;AAED,2EAA2E;AAC3E,wBAAgB,mBAAmB,IAAI;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAMhF"}

package/dist/pending-unknown-store.js

@@ -0,0 +1,135 @@
+/**
+ * Durable set of inbound message ids that arrived for an assistant NOT yet in
+ * the route map and were therefore left UNCONSUMED by the inbound handler.
+ *
+ * Why this exists (silent-loss fix). The disk cursor (bgos_last_id) advances
+ * monotonically as KNOWN messages are consumed. A sibling known message with a
+ * HIGHER id than an unconsumed unknown-assistant message would push the cursor
+ * PAST the hole, so inboundSince(cursor) would never return the unknown message
+ * again, even after its route later heals. Worst on multi-assistant pairings
+ * (one bound sibling advancing the cursor past a not-yet-bound sibling's
+ * message) and null agent_route assistants.
+ *
+ * Persisting the pending ids lets saveLastId CLAMP the cursor so it never
+ * advances past the LOWEST still-pending unknown id, keeping the inbound window
+ * re-fetchable until identity heals. ProcessedIdsCache dedupes the already
+ * consumed ids above the hole, so re-fetching the window is safe.
+ *
+ * File: `$CODEX_BGOS_HOME/bgos_pending_unknown.json` (default `~/.codex-bgos/...`).
+ * Format: JSON array of `{ id: number, at: number }` (epoch ms), insertion
+ * order. Atomic writes (tmp + rename, mode 0600), same pattern as
+ * last-id-store. All errors swallowed: a persistence hiccup must never crash
+ * the adapter.
+ *
+ * Bounded to MAX_PENDING (drop-oldest). A genuinely-never-bound assistant that
+ * floods the lane can therefore hold the cursor back by at most the newest
+ * MAX_PENDING ids, never forever: the oldest pending ids age out and the cursor
+ * is free to advance past them. This is the "cap the clamp" guard; the adapter
+ * surfaces a visible heartbeat lastError while the set is stuck so the bounded
+ * loss is never silent.
+ */
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+/** Bound on the pending set (drop-oldest). Caps how far the clamp can hold the
+ *  cursor back so a never-binding assistant cannot wedge it forever. */
+const MAX_PENDING = 50;
+function pendingPath() {
+    const root = process.env.CODEX_BGOS_HOME ?? join(homedir(), ".codex-bgos");
+    return join(root, "bgos_pending_unknown.json");
+}
+/** Read the persisted pending set. Never throws; returns [] on any error. */
+export function loadPendingUnknown() {
+    let raw;
+    try {
+        raw = readFileSync(pendingPath(), "utf8");
+    }
+    catch {
+        return [];
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return [];
+        const out = [];
+        for (const e of parsed) {
+            if (e &&
+                typeof e === "object" &&
+                Number.isInteger(e.id) &&
+                e.id > 0 &&
+                typeof e.at === "number") {
+                out.push({
+                    id: e.id,
+                    at: e.at,
+                });
+            }
+        }
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+/** Atomically persist the pending set (tmp + rename). Never throws. */
+function writePending(entries) {
+    try {
+        const target = pendingPath();
+        mkdirSync(dirname(target), { recursive: true });
+        const tmp = `${target}.${process.pid}.tmp`;
+        writeFileSync(tmp, JSON.stringify(entries), { mode: 0o600 });
+        renameSync(tmp, target);
+    }
+    catch {
+        /* swallow: persistence hiccup must never crash the adapter */
+    }
+}
+/**
+ * Record an id as pending-unknown. Idempotent (a repeated poll re-fetch of the
+ * same unconsumed id does not duplicate the entry). Bounded to MAX_PENDING by
+ * dropping the oldest entries.
+ */
+export function recordPendingUnknown(id) {
+    if (!Number.isInteger(id) || id <= 0)
+        return;
+    const entries = loadPendingUnknown();
+    if (entries.some((e) => e.id === id))
+        return;
+    entries.push({ id, at: Date.now() });
+    const bounded = entries.length > MAX_PENDING
+        ? entries.slice(entries.length - MAX_PENDING)
+        : entries;
+    writePending(bounded);
+}
+/** Remove an id from the pending set (it has now been consumed). No-op when
+ *  the id is absent. Never throws. */
+export function clearPendingUnknown(id) {
+    const entries = loadPendingUnknown();
+    const next = entries.filter((e) => e.id !== id);
+    if (next.length === entries.length)
+        return;
+    writePending(next);
+}
+/** Lowest still-pending unknown id, or null when the set is empty. Used by
+ *  saveLastId to clamp the disk cursor. */
+export function lowestPendingUnknown() {
+    const entries = loadPendingUnknown();
+    if (entries.length === 0)
+        return null;
+    let lowest = entries[0].id;
+    for (const e of entries)
+        if (e.id < lowest)
+            lowest = e.id;
+    return lowest;
+}
+/** Count + oldest timestamp, for the adapter's visible stuck telemetry. */
+export function pendingUnknownStats() {
+    const entries = loadPendingUnknown();
+    if (entries.length === 0)
+        return { count: 0, oldestAt: null };
+    let oldest = entries[0].at;
+    for (const e of entries)
+        if (e.at < oldest)
+            oldest = e.at;
+    return { count: entries.length, oldestAt: oldest };
+}
+//# sourceMappingURL=pending-unknown-store.js.map

package/dist/pending-unknown-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-unknown-store.js","sourceRoot":"","sources":["../src/pending-unknown-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAS1C;wEACwE;AACxE,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;AACjD,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB;IAChC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,MAAM,GAAG,GAA0B,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IACE,CAAC;gBACD,OAAO,CAAC,KAAK,QAAQ;gBACrB,MAAM,CAAC,SAAS,CAAE,CAAyB,CAAC,EAAE,CAAC;gBAC9C,CAAyB,CAAC,EAAE,GAAG,CAAC;gBACjC,OAAQ,CAAyB,CAAC,EAAE,KAAK,QAAQ,EACjD,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC;oBACP,EAAE,EAAG,CAAyB,CAAC,EAAE;oBACjC,EAAE,EAAG,CAAyB,CAAC,EAAE;iBAClC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAS,YAAY,CAAC,OAA8B;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAC3C,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO;IAC7C,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QAAE,OAAO;IAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,WAAW;QAC1B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC;IACd,YAAY,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED;sCACsC;AACtC,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO;IAC3C,YAAY,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED;2CAC2C;AAC3C,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM;YAAE,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9D,IAAI,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM;YAAE,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC"}

package/dist/processed-ids.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Bounded FIFO cache of processed message IDs. Used to dedup inbound_message
+ * events that may arrive twice via independent paths:
+ *
+ *   - Live WS push receives msg N
+ *   - WS reconnect / poll triggerBackfill() refetches inbound since the disk
+ *     cursor, re-emitting msg N if the cursor lagged behind the live emit
+ *   - Two integration sockets briefly subscribed to assistant:<id> during a
+ *     disconnect/reconnect race, both delivering the same payload
+ *   - Backend transport-level retry
+ *
+ * Without dedup, the daemon dispatches each duplicate to Codex and posts the
+ * reply again. Ported from codex-channel-bgos/src/processed-ids.ts (originally
+ * openclaw-channel-bgos; observed in prod 2026-05-10: chat 917 had four
+ * assistant replies for two user questions, including identical-text pairs 1.3s
+ * apart). The Set is bounded by `capacity` (FIFO eviction by insertion order) so
+ * memory does not grow unbounded for long-running daemons.
+ */
+export declare class ProcessedIdsCache {
+    private readonly seen;
+    private readonly capacity;
+    constructor(capacity: number);
+    /**
+     * Returns true if this is the FIRST time we have seen this id (caller
+     * should proceed to dispatch). Returns false if it is a duplicate (caller
+     * should silently skip).
+     *
+     * Note: re-marking an already-cached id does NOT promote it. Eviction
+     * order is strict insertion order, which is fine for our sliding-window
+     * use case: we do not care about LRU semantics, only "did we see this
+     * recently."
+     */
+    markIfFirstTime(messageId: number): boolean;
+    size(): number;
+}
+//# sourceMappingURL=processed-ids.d.ts.map

package/dist/processed-ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processed-ids.d.ts","sourceRoot":"","sources":["../src/processed-ids.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAc;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,QAAQ,EAAE,MAAM;IAK5B;;;;;;;;;OASG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAgB3C,IAAI,IAAI,MAAM;CAGf"}

package/dist/processed-ids.js

@@ -0,0 +1,55 @@
+/**
+ * Bounded FIFO cache of processed message IDs. Used to dedup inbound_message
+ * events that may arrive twice via independent paths:
+ *
+ *   - Live WS push receives msg N
+ *   - WS reconnect / poll triggerBackfill() refetches inbound since the disk
+ *     cursor, re-emitting msg N if the cursor lagged behind the live emit
+ *   - Two integration sockets briefly subscribed to assistant:<id> during a
+ *     disconnect/reconnect race, both delivering the same payload
+ *   - Backend transport-level retry
+ *
+ * Without dedup, the daemon dispatches each duplicate to Codex and posts the
+ * reply again. Ported from codex-channel-bgos/src/processed-ids.ts (originally
+ * openclaw-channel-bgos; observed in prod 2026-05-10: chat 917 had four
+ * assistant replies for two user questions, including identical-text pairs 1.3s
+ * apart). The Set is bounded by `capacity` (FIFO eviction by insertion order) so
+ * memory does not grow unbounded for long-running daemons.
+ */
+export class ProcessedIdsCache {
+    seen;
+    capacity;
+    constructor(capacity) {
+        this.capacity = Math.max(1, capacity | 0);
+        this.seen = new Set();
+    }
+    /**
+     * Returns true if this is the FIRST time we have seen this id (caller
+     * should proceed to dispatch). Returns false if it is a duplicate (caller
+     * should silently skip).
+     *
+     * Note: re-marking an already-cached id does NOT promote it. Eviction
+     * order is strict insertion order, which is fine for our sliding-window
+     * use case: we do not care about LRU semantics, only "did we see this
+     * recently."
+     */
+    markIfFirstTime(messageId) {
+        if (this.seen.has(messageId)) {
+            return false;
+        }
+        this.seen.add(messageId);
+        if (this.seen.size > this.capacity) {
+            // Set iteration is insertion order in JS: the first value is the
+            // oldest entry. Drop it.
+            const oldest = this.seen.values().next().value;
+            if (oldest !== undefined) {
+                this.seen.delete(oldest);
+            }
+        }
+        return true;
+    }
+    size() {
+        return this.seen.size;
+    }
+}
+//# sourceMappingURL=processed-ids.js.map

package/dist/processed-ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processed-ids.js","sourceRoot":"","sources":["../src/processed-ids.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAc;IAClB,QAAQ,CAAS;IAElC,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,CAAC;IAED;;;;;;;;;OASG;IACH,eAAe,CAAC,SAAiB;QAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,iEAAiE;YACjE,yBAAyB;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YACrE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF"}

package/dist/reply-markers.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Parse a Codex text reply for BGOS outbound markers and strip them from the
+ * user-visible text. Codex emits a single text stream, so, like OpenClaw, the
+ * agent-facing surface uses marker syntax (documented in agent-hints.ts and
+ * AGENTS.md):
+ *
+ *   MEDIA:/abs/path                 one file per line -> outbound files[]
+ *   STATUS: <text>                  set the agent status line (empty clears)
+ *   [[BGOS_BUTTONS]] ... [[/...]]   inline option buttons (Label | value, <=6)
+ *   [[BGOS_ASK]] ... [[/BGOS_ASK]]  blocking multi-question modal (<=4 questions)
+ *
+ * tool_progress is NOT a marker: Codex streams real tool events, so the daemon
+ * drives that card from run() events (see event-mapper.ts), not from the reply.
+ */
+export interface ButtonOption {
+    text: string;
+    callbackData: string;
+}
+export interface ParsedButtons {
+    options: ButtonOption[];
+}
+export interface AskQuestion {
+    text: string;
+    options: ButtonOption[];
+    allowFreeText: boolean;
+    allowSkip: boolean;
+}
+export interface ParsedAsk {
+    questions: AskQuestion[];
+}
+export interface ParsedStatus {
+    text: string;
+}
+export interface ParsedReply {
+    cleanText: string;
+    media: string[];
+    buttons: ParsedButtons | null;
+    ask: ParsedAsk | null;
+    status: ParsedStatus | null;
+}
+export declare function parseReply(input: string): ParsedReply;
+//# sourceMappingURL=reply-markers.d.ts.map

package/dist/reply-markers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply-markers.d.ts","sourceRoot":"","sources":["../src/reply-markers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,WAAW,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;CAC7B;AA4ED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,CAoCrD"}