orkestrator 2.26.3-beta → 2.28.0-beta

package/resources/codex-bridge/dist/index.js

@@ -4060,6 +4060,7 @@ var NATIVE_AGENT_APPROVAL_MODES = Object.freeze({
     }
   ]
 });
+var NATIVE_AGENT_RETIRED_DISPATCH_TTL_MS = 24 * 60 * 60 * 1000;
 var SUPPRESSED_COMPOSER_PARAMETERS = Object.freeze({
   claude: Object.freeze(["parameter:thinking", "parameter:context1m"]),
   codex: Object.freeze(["parameter:summary"]),
@@ -4191,6 +4192,7 @@ var PROJECTION_FIELD_SET = new Set([
   "runtimeHealthAuthoritative",
   "notices",
   "recoverableDispatch",
+  "retiredDispatch",
   "backgroundTasks",
   "suggestedPrompt",
   "completionBlockedByBackgroundTasks",
@@ -4214,6 +4216,7 @@ var OPTIONAL_PROJECTION_FIELD_SET = new Set([
   "runtimeHealthAuthoritative",
   "notices",
   "recoverableDispatch",
+  "retiredDispatch",
   "backgroundTasks",
   "suggestedPrompt",
   "completionBlockedByBackgroundTasks",
@@ -5089,6 +5092,7 @@ var SESSION_ACTIVITY_BATCH_LIMITS = {
   maxResponseBytes: 512 * 1024,
   maxAsyncQuestionItemIds: 64,
   maxAsyncQuestionItemIdLength: 2048,
+  maxContentRevisionLength: 256,
   readConcurrency: 4
 };
 var SESSION_ACTIVITY_STATES = new Set(["idle", "working", "waiting", "missing"]);
@@ -5103,6 +5107,7 @@ function parseSessionActivityObservation(value) {
   if (!isRecord(value))
     return;
   const { activity, readyForInput, completionPending, asyncQuestionItemIds, closing } = value;
+  const { contentRevision } = value;
   if (typeof activity !== "string" || !SESSION_ACTIVITY_STATES.has(activity))
     return;
   if (readyForInput !== undefined && typeof readyForInput !== "boolean")
@@ -5111,6 +5116,8 @@ function parseSessionActivityObservation(value) {
     return;
   if (closing !== undefined && typeof closing !== "boolean")
     return;
+  if (contentRevision !== undefined && !isContentRevision(contentRevision))
+    return;
   let itemIds;
   if (asyncQuestionItemIds !== undefined) {
     if (!Array.isArray(asyncQuestionItemIds) || asyncQuestionItemIds.length > SESSION_ACTIVITY_BATCH_LIMITS.maxAsyncQuestionItemIds || !asyncQuestionItemIds.every((itemId) => typeof itemId === "string" && itemId.length > 0 && itemId.length <= SESSION_ACTIVITY_BATCH_LIMITS.maxAsyncQuestionItemIdLength)) {
@@ -5123,9 +5130,13 @@ function parseSessionActivityObservation(value) {
     ...readyForInput !== undefined ? { readyForInput } : {},
     ...completionPending !== undefined ? { completionPending } : {},
     ...itemIds !== undefined ? { asyncQuestionItemIds: itemIds } : {},
-    ...closing !== undefined ? { closing } : {}
+    ...closing !== undefined ? { closing } : {},
+    ...contentRevision !== undefined ? { contentRevision } : {}
   };
 }
+function isContentRevision(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= SESSION_ACTIVITY_BATCH_LIMITS.maxContentRevisionLength;
+}
 function parseSessionActivityBatchRequest(value) {
   if (!isRecord(value))
     return { ok: false, error: "Expected a JSON object" };
@@ -10815,6 +10826,7 @@ var STRONG_REFUSAL_MARKERS = [
   "read-only file system"
 ];
 var SCRIPT_FAILED = "script failed";
+var INTERRUPTED_CELL = /^aborted by user\b/i;
 var MAX_PENDING_CELLS = 256;
 var MAX_CELL_TEXT_CHARS = 64 * 1024;
 var ROLLOUT_POLL_INTERVAL_MS = 200;
@@ -10846,7 +10858,12 @@ function reportsRefusal(output) {
 }
 function codeModeCellOutcome(output) {
   const refused = reportsRefusal(output);
-  return { refused, failed: refused || output.trimStart().toLowerCase().startsWith(SCRIPT_FAILED) };
+  const trimmed = output.trimStart();
+  return {
+    refused,
+    failed: refused || trimmed.toLowerCase().startsWith(SCRIPT_FAILED),
+    interrupted: !refused && INTERRUPTED_CELL.test(trimmed)
+  };
 }
 function defaultWatch(_path, onChange) {
   const timer = setInterval(onChange, ROLLOUT_POLL_INTERVAL_MS);
@@ -10975,7 +10992,9 @@ class RefusedCellTail {
     this.pending.delete(callId);
     const output = cellOutputText(payload.output);
     const completedAtMs = recordTimeMs(record, payload);
-    const { refused, failed } = codeModeCellOutcome(output);
+    const { refused, failed, interrupted } = codeModeCellOutcome(output);
+    if (interrupted)
+      return;
     const unseen = !Number.isFinite(cell.startedAtMs) || !Number.isFinite(completedAtMs) || !this.options.itemStartedBetween(cell.startedAtMs, completedAtMs);
     if (!refused && !unseen)
       return;
@@ -10992,6 +11011,7 @@ class RefusedCellTail {
 }
 
 // ../../bridges/codex-bridge/src/app-server/item-adapter.ts
+import { isAbsolute as isAbsolute5 } from "node:path";
 function isRecord5(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
@@ -11004,6 +11024,20 @@ function durationMs(value) {
 function strArray(value) {
   return Array.isArray(value) ? value.filter((entry) => typeof entry === "string") : [];
 }
+var MAX_IMAGE_GENERATION_INPUTS = 8;
+function imageGenerationInputPaths(value) {
+  if (!Array.isArray(value))
+    return [];
+  const paths = new Set;
+  for (const entry of value) {
+    if (paths.size >= MAX_IMAGE_GENERATION_INPUTS)
+      break;
+    const path = isRecord5(entry) ? str(entry.path) : undefined;
+    if (path && isAbsolute5(path))
+      paths.add(path);
+  }
+  return [...paths];
+}
 var MAX_ASYNC_QUESTIONS = 16;
 var MAX_ASYNC_OPTIONS = 32;
 var MAX_ASYNC_TEXT_LENGTH = 16384;
@@ -11265,13 +11299,15 @@ function adaptAppServerItem(raw) {
     }
     case "imageGeneration": {
       const path = str(raw.savedPath);
+      const inputPaths = imageGenerationInputPaths(raw.inputImages);
       return {
         item: {
           id,
           type: "image",
           text: str(raw.revisedPrompt) ?? "Generated image",
           ...path ? { path } : {},
-          source: "generated"
+          source: "generated",
+          ...inputPaths.length > 0 ? { input_paths: inputPaths } : {}
         }
       };
     }
@@ -12074,6 +12110,13 @@ async function itemToParts(item, cwd, fileChangeContext) {
       return [];
     case "image":
       return [
+        ...(item.input_paths ?? []).map((path) => ({
+          type: "image",
+          content: path.split(/[\\/]/).pop() || "Image",
+          fileUrl: `file://${path}`,
+          filename: path,
+          imageSource: "viewed"
+        })),
         {
           type: "image",
           content: item.text,
@@ -12370,11 +12413,8 @@ async function walkJsonlFiles(dir) {
   }
   return files;
 }
-async function listTranscriptPaths() {
-  const searchRoots = [
-    join8(getCodexHomeDir(), "sessions"),
-    join8(getCodexHomeDir(), "archived_sessions")
-  ];
+async function listTranscriptPaths(codexHome = getCodexHomeDir()) {
+  const searchRoots = [join8(codexHome, "sessions"), join8(codexHome, "archived_sessions")];
   return (await Promise.all(searchRoots.map((root) => walkJsonlFiles(root)))).flat();
 }
 var cachedTranscriptPaths = new Map;
@@ -12999,6 +13039,18 @@ async function replayPersistedRollout(threadId, snapshot, meta, structuredTurns)
   const settleCodeModeCell = (cell, output) => {
     openCells.delete(cell.callId);
     const outcome = output === undefined ? undefined : codeModeCellOutcome(cellOutputText(output));
+    if (outcome?.interrupted) {
+      const { toolState: _claimed, ...stopped } = cell.message.parts[cell.execPartIndex];
+      cell.message.parts[cell.execPartIndex] = stopped;
+      if (!cell.keepExecRow) {
+        dropPart(cell.message, cell.execPartIndex);
+        for (const call of cell.sourceCalls) {
+          if (!call.replaced)
+            dropPart(cell.message, call.partIndex);
+        }
+        return;
+      }
+    }
     if (cell.sawMcpRecord) {
       for (const call of cell.sourceCalls) {
         if (!call.replaced)
@@ -14024,7 +14076,7 @@ async function publishAssistantRows(context, state, turn, options) {
 }
 
 // ../../bridges/codex-bridge/src/app-server-runtime-sessions.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash9, randomUUID as randomUUID6 } from "node:crypto";
 
 // ../protocol/src/agent-mail.ts
 var AGENT_MAIL_MAX_BODY_BYTES = 32 * 1024;
@@ -14087,9 +14139,9 @@ var ORKESTRATOR_ARTIFACT_MCP_SERVER_NAME = "orkestrator-artifacts";
 var ORKESTRATOR_ARTIFACT_MCP_PATH = "/artifact-mcp";
 
 // ../../bridges/codex-bridge/src/engine/app-server-engine.ts
-import { open as open5 } from "node:fs/promises";
+import { open as open6 } from "node:fs/promises";
 import { createHash as createHash8 } from "node:crypto";
-import { isAbsolute as isAbsolute6, join as join13 } from "node:path";
+import { isAbsolute as isAbsolute7, join as join13 } from "node:path";
 
 // ../../bridges/codex-bridge/src/app-server/process-supervisor.ts
 import { execFile as execFile3, spawn as spawn3 } from "node:child_process";
@@ -16724,6 +16776,7 @@ var IGNORED_METHODS = new Set([
   "thread/project/updated",
   "thread/queue/changed",
   "thread/prediction/updated",
+  "thread/readState/changed",
   "autoApprovalReview/strictReviewRequired",
   "mcpServer/event/stream/notification",
   "thread/reverted",
@@ -16828,6 +16881,7 @@ function reduceNotification(notification, generation, handle) {
               turns: [
                 {
                   turnId,
+                  at: new Date().toISOString(),
                   inputTokens: num(last.inputTokens),
                   outputTokens: num(last.outputTokens),
                   cacheReadTokens: num(last.cachedInputTokens),
@@ -18019,7 +18073,7 @@ function coordinatorCapabilityPolicy(mode) {
 
 // ../../bridges/codex-bridge/src/codex-config.ts
 import { realpathSync } from "node:fs";
-import { isAbsolute as isAbsolute5 } from "node:path";
+import { isAbsolute as isAbsolute6 } from "node:path";
 var CODEX_MAX_CONCURRENT_THREADS_ENV = "CODEX_MAX_CONCURRENT_THREADS_PER_SESSION";
 var DEFAULT_CODEX_MAX_CONCURRENT_THREADS = 5;
 var ORKESTRATOR_AGENT_MCP_URL_ENV = "ORKESTRATOR_AGENT_MCP_URL";
@@ -18039,7 +18093,7 @@ function codexNetworkDeniedConfig(policy) {
   };
 }
 function codexProjectTrustConfig(policy, cwd) {
-  if (!policy || policy.projectResources || !cwd || !isAbsolute5(cwd))
+  if (!policy || policy.projectResources || !cwd || !isAbsolute6(cwd))
     return {};
   const roots = new Set([cwd]);
   try {
@@ -18062,7 +18116,7 @@ function codexProjectSkillsConfig(listed) {
       const { path, scope, enabled } = skill ?? {};
       if (enabled === true && typeof scope === "string" && KEPT_SKILL_SCOPES.has(scope))
         continue;
-      if (typeof path !== "string" || !isAbsolute5(path)) {
+      if (typeof path !== "string" || !isAbsolute6(path)) {
         throw new Error("Codex listed a project skill without a path it can be disabled by");
       }
       disabled.add(path);
@@ -18089,6 +18143,14 @@ function codexReadOnlyTurnPolicy(policy) {
   const denied = base.capabilityPolicy?.deny ?? [];
   return { ...base, capabilityPolicy: { deny: [...denied, "network"] } };
 }
+function codexToolHistoryGaps(config) {
+  if (!config || typeof config !== "object" || Array.isArray(config)) {
+    return ["config/read returned no configuration"];
+  }
+  const features = config.features;
+  const value = features && typeof features === "object" && !Array.isArray(features) ? features.incremental_tools : undefined;
+  return value === false ? [] : [`features.incremental_tools is ${JSON.stringify(value ?? null)}, not false`];
+}
 function codexHostedNetworkLockGaps(config, expected = "disabled") {
   if (!config || typeof config !== "object" || Array.isArray(config)) {
     return ["config/read returned no configuration"];
@@ -18102,6 +18164,7 @@ function codexHostedNetworkLockGaps(config, expected = "disabled") {
   if (features && typeof features === "object" && features.standalone_web_search === true) {
     gaps.push("features.standalone_web_search is on");
   }
+  gaps.push(...codexToolHistoryGaps(config));
   return gaps;
 }
 function isCoordinatorReadOnlyEnvironment(env) {
@@ -18128,7 +18191,8 @@ function codexAppServerConfigOverrides(env = process.env) {
   const childLimit = resolveCodexMaxConcurrentThreads(env[CODEX_MAX_CONCURRENT_THREADS_ENV]);
   const overrides = {
     "agents.max_concurrent_threads_per_session": String(childLimit),
-    "features.multi_agent_v2.max_concurrent_threads_per_session": String(childLimit + 1)
+    "features.multi_agent_v2.max_concurrent_threads_per_session": String(childLimit + 1),
+    "features.incremental_tools": "false"
   };
   const rawUrl = env[ORKESTRATOR_AGENT_MCP_URL_ENV]?.trim();
   const token = env[ORKESTRATOR_AGENT_MCP_TOKEN_ENV]?.trim();
@@ -18137,11 +18201,11 @@ function codexAppServerConfigOverrides(env = process.env) {
     const readableRuntimeRoot = env.CODEX_BRIDGE_READABLE_RUNTIME_ROOT?.trim();
     const projectRoot = env.CWD?.trim();
     const attachmentRoot = env[BRIDGE_ATTACHMENT_ROOT_ENV]?.trim();
-    if (!permissionProfile || !/^[A-Za-z0-9_-]+$/.test(permissionProfile) || !readableRuntimeRoot || !isAbsolute5(readableRuntimeRoot) || !projectRoot || !isAbsolute5(projectRoot)) {
+    if (!permissionProfile || !/^[A-Za-z0-9_-]+$/.test(permissionProfile) || !readableRuntimeRoot || !isAbsolute6(readableRuntimeRoot) || !projectRoot || !isAbsolute6(projectRoot)) {
       throw new Error("Coordinator Codex permission profile configuration is invalid");
     }
     overrides.default_permissions = JSON.stringify(permissionProfile);
-    overrides[`permissions.${permissionProfile}.filesystem`] = `{ ":root" = "deny", ":minimal" = "read", ":tmpdir" = "deny", ` + `":slash_tmp" = "deny", ${JSON.stringify(readableRuntimeRoot)} = "read", ` + (attachmentRoot && isAbsolute5(attachmentRoot) ? `${JSON.stringify(attachmentRoot)} = "read", ` : "") + `":workspace_roots" = { "." = "read" } }`;
+    overrides[`permissions.${permissionProfile}.filesystem`] = `{ ":root" = "deny", ":minimal" = "read", ":tmpdir" = "deny", ` + `":slash_tmp" = "deny", ${JSON.stringify(readableRuntimeRoot)} = "read", ` + (attachmentRoot && isAbsolute6(attachmentRoot) ? `${JSON.stringify(attachmentRoot)} = "read", ` : "") + `":workspace_roots" = { "." = "read" } }`;
     overrides[`permissions.${permissionProfile}.network.enabled`] = "false";
     overrides.web_search = JSON.stringify(codexNetworkDeniedSearchMode(codexCoordinatorPolicy(env)));
     overrides["features.standalone_web_search"] = "false";
@@ -18207,6 +18271,106 @@ function codexAppServerConfigOverrides(env = process.env) {
   return overrides;
 }
 
+// ../../bridges/codex-bridge/src/sessions/tool-history-guard.ts
+import { open as open5 } from "node:fs/promises";
+var TOOL_HISTORY_MARKER = '"type":"additional_tools"';
+var MAX_TOOL_HISTORY_LINEAGE_DEPTH = 32;
+async function rolloutDeclaresToolHistory(path, end) {
+  const handle = await open5(path, "r");
+  try {
+    const size = (await handle.stat()).size;
+    const limit = end === undefined ? size : Math.min(end, size);
+    const marker = Buffer.from(TOOL_HISTORY_MARKER);
+    const buffer = Buffer.allocUnsafe(ROLLOUT_CHUNK_BYTES + marker.length);
+    let carried = 0;
+    for (let position = 0;position < limit; ) {
+      const length = Math.min(ROLLOUT_CHUNK_BYTES, limit - position);
+      const { bytesRead } = await handle.read(buffer, carried, length, position);
+      if (bytesRead <= 0)
+        break;
+      const filled = carried + bytesRead;
+      if (buffer.subarray(0, filled).includes(marker))
+        return true;
+      position += bytesRead;
+      carried = Math.min(marker.length - 1, filled);
+      buffer.copy(buffer, 0, filled - carried, filled);
+    }
+    return false;
+  } finally {
+    await handle.close();
+  }
+}
+async function historyBase(path) {
+  const handle = await open5(path, "r");
+  try {
+    const chunks = [];
+    let filled = 0;
+    let complete = false;
+    while (filled < MAX_ROLLOUT_RECORD_BYTES) {
+      const chunk = Buffer.allocUnsafe(ROLLOUT_CHUNK_BYTES);
+      const { bytesRead } = await handle.read(chunk, 0, chunk.length, filled);
+      if (bytesRead <= 0) {
+        complete = true;
+        break;
+      }
+      const newline = chunk.subarray(0, bytesRead).indexOf(10);
+      chunks.push(chunk.subarray(0, newline >= 0 ? newline : bytesRead));
+      filled += bytesRead;
+      if (newline >= 0) {
+        complete = true;
+        break;
+      }
+    }
+    if (!complete)
+      return "unreadable";
+    const line = Buffer.concat(chunks).toString("utf8");
+    if (!line.trim())
+      return null;
+    let record;
+    try {
+      record = JSON.parse(line);
+    } catch {
+      return "unreadable";
+    }
+    if (record.type !== "session_meta" || !record.payload)
+      return null;
+    const base = record.payload.history_base;
+    if (base && typeof base === "object") {
+      if (typeof base.thread_id !== "string")
+        return "unreadable";
+      return {
+        threadId: base.thread_id,
+        ...typeof base.end_byte_offset === "number" ? { endByte: base.end_byte_offset } : {}
+      };
+    }
+    return null;
+  } finally {
+    await handle.close();
+  }
+}
+async function threadToolHistoryVerdict(rolloutPath, resolveRollout) {
+  let path = rolloutPath;
+  let end;
+  for (let depth = 0;depth <= MAX_TOOL_HISTORY_LINEAGE_DEPTH; depth += 1) {
+    if (!path)
+      return "unknown";
+    try {
+      if (await rolloutDeclaresToolHistory(path, end))
+        return "declares";
+      const base = await historyBase(path);
+      if (base === "unreadable")
+        return "unknown";
+      if (!base)
+        return "clean";
+      end = base.endByte;
+      path = await resolveRollout(base.threadId);
+    } catch {
+      return "unknown";
+    }
+  }
+  return "unknown";
+}
+
 // ../../bridges/codex-bridge/src/engine/mcp-tool-availability.ts
 var MCP_TOOL_AVAILABILITY_TIMEOUT_MS = 5000;
 var MCP_TOOL_AVAILABILITY_POLL_MS = 100;
@@ -18627,7 +18791,7 @@ function signedOutAccountRead(error) {
 }
 async function readStoredLoginFingerprint(codexHome) {
   try {
-    const file = await open5(join13(codexHome, "auth.json"), "r");
+    const file = await open6(join13(codexHome, "auth.json"), "r");
     let raw;
     try {
       const bytes = Buffer.alloc(65537);
@@ -18676,6 +18840,9 @@ var MAX_UNKNOWN_METHODS = 16;
 var MAX_UNKNOWN_METHOD_LENGTH = 128;
 var MAX_ACCOUNT_PROOF_TURNS = 1024;
 var MAX_ACCOUNT_PROOF_ID_LENGTH = 256;
+function deniesHostedSearch(config) {
+  return Object.keys(codexNetworkDeniedConfig(config.policy)).length > 0 && codexNetworkDeniedSearchMode(config.policy) === "disabled";
+}
 
 class AppServerEngine {
   options;
@@ -18702,6 +18869,7 @@ class AppServerEngine {
   accountProofInvalidatedSequence = 0;
   accountProofTurns = new Map;
   hostedNetworkLockVerifiedGeneration = null;
+  toolHistoryLockVerifiedGeneration = null;
   accountReloadFingerprint;
   pendingAccountReloadFingerprint;
   accountCheckSequence = 0;
@@ -18742,6 +18910,7 @@ class AppServerEngine {
         this.clearPendingSignIn();
         this.loginSequence++;
         this.hostedNetworkLockVerifiedGeneration = null;
+        this.toolHistoryLockVerifiedGeneration = null;
         this.rejectAllWaiters();
         this.router.abandonGeneration(generation);
       }
@@ -19179,8 +19348,47 @@ class AppServerEngine {
     this.hostedNetworkLockVerifiedGeneration = generation;
     return generation;
   }
+  async assertToolHistoryLock(generation, config) {
+    if (!deniesHostedSearch(config) || config.permissionProfile)
+      return;
+    if (this.toolHistoryLockVerifiedGeneration === generation)
+      return;
+    const result = await this.supervisor.requestOnGeneration(generation, "config/read", { cwd: config.cwd ?? this.options.cwd });
+    const gaps = codexToolHistoryGaps(result?.config);
+    if (gaps.length > 0) {
+      throw new Error(`Codex did not confirm that tool declarations stay out of thread history (${gaps.join("; ")}), so this session, which has web search off, was refused`);
+    }
+    if (!this.supervisor.isReady() || this.supervisor.getGeneration() !== generation) {
+      throw new Error("Codex exited during tool history verification");
+    }
+    this.toolHistoryLockVerifiedGeneration = generation;
+  }
+  async assertNoToolHistory(threadId, config, release) {
+    if (!deniesHostedSearch(config))
+      return;
+    const verdict = await (this.options.toolHistoryVerdict ?? ((id) => this.readToolHistory(id)))(threadId).catch(() => "unknown");
+    if (verdict === "clean")
+      return;
+    if (release) {
+      for (const [handle, binding] of this.bindings) {
+        if (binding.threadId === threadId)
+          this.bindings.delete(handle);
+      }
+      await this.supervisor.request("thread/unsubscribe", { threadId }).catch(() => {
+        return;
+      });
+    }
+    throw new Error(verdict === "declares" ? "This Codex thread was offered web search in an earlier turn and still declares it in its history, so a turn with web search off was refused. Start a new session for it." : "Could not confirm that this Codex thread's history declares no web search, so a turn with web search off was refused.");
+  }
+  async readToolHistory(threadId) {
+    const codexHome = this.options.codexHome;
+    const resolve = async (id) => this.rolloutPaths.get(id) ?? findTranscriptPath(id, () => listTranscriptPaths(codexHome), { allowNegativeCache: false });
+    const path = await resolve(threadId);
+    return path ? threadToolHistoryVerdict(path, resolve) : "unknown";
+  }
   async startThread(options) {
     const generation = await this.assertHostedNetworkLock(options.config);
+    await this.assertToolHistoryLock(generation, options.config);
     const extra = await this.projectResourceThreadConfig(generation, options.config);
     const response = await this.supervisor.requestOnGeneration(generation, "thread/start", this.toThreadParams(options.config, extra));
     this.assertPermissionProfile(response.activePermissionProfile, options.config);
@@ -19188,10 +19396,12 @@ class AppServerEngine {
   }
   async resumeThread(threadId, options) {
     const generation = await this.assertHostedNetworkLock(options.config);
+    await this.assertToolHistoryLock(generation, options.config);
     const extra = await this.projectResourceThreadConfig(generation, options.config);
     const response = await this.supervisor.requestOnGeneration(generation, "thread/resume", { threadId, ...this.toThreadParams(options.config, extra) });
     this.assertPermissionProfile(response.activePermissionProfile, options.config);
     const thread = this.bindThread(response.thread, options.config, response.model);
+    await this.assertNoToolHistory(thread.id ?? threadId, options.config, true);
     thread.turns = this.extractTurns(response.thread);
     return thread;
   }
@@ -19207,6 +19417,8 @@ class AppServerEngine {
   }
   async forkThread(threadId, config, lastTurnId) {
     const generation = await this.assertHostedNetworkLock(config);
+    await this.assertToolHistoryLock(generation, config);
+    await this.assertNoToolHistory(threadId, config, false);
     const extra = await this.projectResourceThreadConfig(generation, config);
     const response = await this.supervisor.requestOnGeneration(generation, "thread/fork", {
       threadId,
@@ -19484,7 +19696,7 @@ class AppServerEngine {
       thread.model = confirmedModel.trim();
     }
     if (thread.id) {
-      if (typeof raw.path === "string" && isAbsolute6(raw.path)) {
+      if (typeof raw.path === "string" && isAbsolute7(raw.path)) {
         this.rolloutPaths.set(thread.id, raw.path);
       }
       this.bindings.set(thread.id, {
@@ -20092,6 +20304,7 @@ class ThreadRegistry {
 
 // ../../bridges/codex-bridge/src/app-server-runtime-sessions.ts
 var SESSION_CLOSING_ERROR = "Session is closing";
+var ACTIVITY_PROCESS = randomUUID6();
 
 class CodexRuntimeSessions {
   ctx;
@@ -20949,7 +21162,8 @@ class CodexRuntimeSessions {
       return { activity: "missing" };
     return {
       activity,
-      ...session.asyncQuestionItemIds.length > 0 ? { asyncQuestionItemIds: [...session.asyncQuestionItemIds] } : {}
+      ...session.asyncQuestionItemIds.length > 0 ? { asyncQuestionItemIds: [...session.asyncQuestionItemIds] } : {},
+      contentRevision: `${ACTIVITY_PROCESS}:${session.contentEpoch}.${session.messageRevision}:${session.asyncQuestionItemIds.length}`
     };
   }
   hasParkedInput(session) {
@@ -21440,7 +21654,7 @@ function parseCommandToken(text, sigils = ["/"]) {
 
 // ../../bridges/codex-bridge/src/prompts/template-discovery.ts
 import { createHash as createHash10 } from "node:crypto";
-import { open as open6, readdir as readdir3, stat as stat7 } from "node:fs/promises";
+import { open as open7, readdir as readdir3, stat as stat7 } from "node:fs/promises";
 import { join as join14 } from "node:path";
 
 // ../../bridges/codex-bridge/src/prompts/template-format.ts
@@ -21595,7 +21809,7 @@ function isReservedName(name) {
 var metadataCache = new Map;
 var METADATA_CACHE_MAX = 1024;
 async function readBounded(absolutePath, maxBytes) {
-  const handle = await open6(absolutePath, "r");
+  const handle = await open7(absolutePath, "r");
   try {
     const info = await handle.stat();
     if (!info.isFile())
@@ -21842,7 +22056,7 @@ async function loadTemplateBody(entry, limits = TEMPLATE_LIMITS) {
 }
 
 // ../../bridges/codex-bridge/src/commands/skill-inventory.ts
-import { isAbsolute as isAbsolute7 } from "node:path";
+import { isAbsolute as isAbsolute8 } from "node:path";
 var SKILL_INVENTORY_LIMITS = Object.freeze({
   maxSkills: 512,
   maxDescriptionBytes: 1000,
@@ -21892,7 +22106,7 @@ function normalizeSkillsList(raw, context) {
       }
       const name = nonEmpty(candidate.name);
       const path = typeof candidate.path === "string" ? candidate.path : undefined;
-      if (!name || !usableSkillName(name) || !path || !isAbsolute7(path)) {
+      if (!name || !usableSkillName(name) || !path || !isAbsolute8(path)) {
         truncated = true;
         continue;
       }
@@ -26082,6 +26296,21 @@ var codexPathOverride = process.env.CODEX_PATH || "codex";
 var BRIDGE_VERSION = "1.0.0";
 var execFile4 = promisify2(execFileCallback2);
 var subscribers = new Set;
+var observers = new Set;
+function observationFrameData(sessionId) {
+  return JSON.stringify(sessionId === undefined ? {} : { sessionId });
+}
+function notifyObservers(event, revision) {
+  for (const observer of observers) {
+    try {
+      Promise.resolve(observer(event, revision, "{}")).catch((error) => {
+        console.error("[codex-bridge] Failed to notify SSE observer:", error);
+      });
+    } catch (error) {
+      console.error("[codex-bridge] Failed to notify SSE observer:", error);
+    }
+  }
+}
 var MAX_REPLAY_SSE_BYTES = 4 * 1024 * 1024;
 var REPLAY_IDLE_RETENTION_MS = 60000;
 var SUPERSEDED_FRAME_BYTES = 64;
@@ -26349,7 +26578,7 @@ function retainedMessageId(type, payload) {
 }
 function emit(event) {
   if (!replayRetentionEnabled) {
-    eventRing.advance();
+    notifyObservers(event, eventRing.advance());
     return;
   }
   const sessionId = event.sessionId;
@@ -26376,6 +26605,7 @@ function emit(event) {
     serialize: () => eager ?? serializeSseEventData({ sessionId, data: payload }),
     bytes
   });
+  notifyObservers(event, revision);
   for (const subscriber of subscribers) {
     try {
       Promise.resolve(subscriber(event, revision, eager ?? "{}")).catch((error) => {
@@ -26704,7 +26934,7 @@ app.get("/global/health", (c) => {
       notificationDepth: health.notificationQueueDepth,
       notificationHighWaterMark: health.notificationQueueHighWaterMark
     },
-    events: { ...eventRing.getStats(), subscribers: subscribers.size }
+    events: { ...eventRing.getStats(), subscribers: subscribers.size, observers: observers.size }
   }, terminal ? 503 : 200);
 });
 app.get("/global/auth-check", (c) => {
@@ -27219,6 +27449,7 @@ app.delete("/session/:id", async (c) => {
 app.get("/event/subscribe", (c) => {
   const cursor = parseEventCursor(c.req.query("since")) ?? parseEventCursor(c.req.header("last-event-id"));
   const sessionFilter = c.req.query("sessionId")?.trim() || null;
+  const observe = c.req.query("observe") === "1";
   return streamSSE(c, async (stream) => {
     let open = true;
     let resolveConnectionClosed;
@@ -27244,10 +27475,10 @@ app.get("/event/subscribe", (c) => {
       return {
         event: event.type,
         id: String(revision),
-        data: serializeData()
+        data: observe ? observationFrameData(event.sessionId) : serializeData()
       };
     };
-    const releaseReplayRetention = acquireReplayRetention();
+    const releaseReplayRetention = observe ? () => {} : acquireReplayRetention();
     const anchorRevision = cursor ?? eventRing.latestRevision;
     let buffered = [];
     let highestSent = anchorRevision;
@@ -27269,7 +27500,7 @@ app.get("/event/subscribe", (c) => {
       highestSent = revision;
       await writeWhileOpen(frameFor(event, revision, () => serializedData));
     };
-    subscribers.add(listener);
+    (observe ? observers : subscribers).add(listener);
     let keepalive;
     try {
       if (sseRouteTestHooks?.afterSubscriberRegistered) {
@@ -27283,7 +27514,8 @@ app.get("/event/subscribe", (c) => {
           status: "connected",
           timestamp: new Date().toISOString(),
           revision: replay?.latestRevision ?? anchorRevision,
-          replayed: replay?.complete === true ? replay.events.length : 0
+          replayed: replay?.complete === true ? replay.events.length : 0,
+          ...observe ? { observe: true } : {}
         })
       });
       if (replay && !replay.complete) {
@@ -27329,6 +27561,8 @@ app.get("/event/subscribe", (c) => {
       }
       buffered = null;
       keepalive = startSseKeepalive(writeWhileOpen, 5000, () => {
+        if (observe)
+          return false;
         if (!sessionFilter)
           return true;
         const activity = appServerRuntime.getActivity(sessionFilter);
@@ -27348,6 +27582,7 @@ app.get("/event/subscribe", (c) => {
       if (keepalive)
         clearInterval(keepalive);
       subscribers.delete(listener);
+      observers.delete(listener);
       releaseReplayRetention();
     }
   });