wendkeep 0.38.2 → 0.38.3

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to **wendkeep** are documented here. Format based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this project follows
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.38.3] — 2026-07-12
+
+### Fixed
+
+- Sessões do Codex Desktop voltam a ser criadas quando `SessionStart` ou o primeiro `UserPromptSubmit` não fornecem `transcript_path`: o resolvedor usa o UUID canônico de `CODEX_THREAD_ID` e associa o rollout à mesma entrada assim que o transcript materializa.
+- A barreira cross-provider permanece fail-closed: quando `CODEX_THREAD_ID` e `session_meta.payload.session_id` estão presentes, divergência entre eles adia a escrita em vez de contaminar outra sessão.
+
 ## [0.38.2] — 2026-07-12
 
 ### Fixed

package/hooks/session-identity.mjs

@@ -39,10 +39,41 @@ function compatible(provider, transcriptProvider) {
     || (provider === 'claude' && transcriptProvider === 'anthropic');
 }
 
+function canonicalUuid(value = '') {
+  const id = String(value || '').trim().toLowerCase();
+  return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(id) ? id : '';
+}
+
 export function resolveSessionIdentity(vaultBase, input = {}, provider = detectProvider()) {
   const transcriptPath = input.transcript_path || input.transcriptPath || '';
   const inspected = inspectTranscriptIdentity(transcriptPath);
   const hookId = input.session_id || input.sessionId || '';
+  const codexThreadId = canonicalUuid(input.codex_thread_id || input.codexThreadId || process.env.CODEX_THREAD_ID || '');
+
+  // Codex Desktop exposes the stable canonical conversation through
+  // CODEX_THREAD_ID even when SessionStart/UserPromptSubmit omit transcript_path.
+  // This is safer than the hook session_id (which may rotate on resume). Once the
+  // rollout materializes, require both canonical sources to agree.
+  const transcriptConversationId = canonicalUuid(inspected.canonicalConversationId);
+  if (provider === 'codex' && transcriptConversationId && codexThreadId
+    && transcriptConversationId !== codexThreadId) {
+    return {
+      state: 'deferred', provider, transcriptPath,
+      diagnostics: [`CODEX_THREAD_ID diverge do session_id do transcript (${codexThreadId} != ${transcriptConversationId})`],
+    };
+  }
+  if (provider === 'codex' && !inspected.canonicalConversationId && codexThreadId) {
+    return {
+      state: 'resolved',
+      provider,
+      canonicalConversationId: codexThreadId,
+      hookSessionId: hookId,
+      transcriptPath,
+      transcriptId: transcriptPath ? basename(transcriptPath, '.jsonl') : codexThreadId,
+      parentConversationId: '',
+      diagnostics: [],
+    };
+  }
 
   // Claude: input.session_id já é o id canônico e estável da conversa — idêntico
   // ao sessionId que cada linha do transcript grava. Numa sessão nova o arquivo

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wendkeep",
-  "version": "0.38.2",
+  "version": "0.38.3",
   "description": "A persistent-memory harness for AI coding agents on your Obsidian vault: turn-by-turn session capture plus a native, zero-dependency spec→change→verify→archive loop (sensor-gated, independent verdict, mutation discrimination). Local-first, agent-agnostic (Claude Code, Codex, Cursor…).",
   "type": "module",
   "bin": {
@@ -46,6 +46,6 @@
     "url": "https://github.com/rogersialves/wendkeep/issues"
   },
   "devDependencies": {
-    "wendkeep": "^0.38.1"
+    "wendkeep": "^0.38.2"
   }
 }