fix(chat): reduce combined file size

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>

.env.example

@@ -1414,7 +1414,7 @@ APP_LOG_TO_FILE=true
 
 # Whether call log pipeline capture stores stream chunks when enabled in settings.
 # Only applies when call_log_pipeline_enabled=true.
-# Default: false (opt-in — saves disk: stream chunks are the biggest call-log artifact)
+# Default: true
 # CALL_LOG_PIPELINE_CAPTURE_STREAM_CHUNKS=true
 
 # Maximum call log artifact size for pipeline captures, in KB.
@@ -1893,7 +1893,7 @@ APP_LOG_TO_FILE=true
 
 # Log request shape (content-type + content-length) for large chat payloads.
 # Used by: src/app/api/v1/chat/completions/route.ts. Set to "0" to silence.
-# Default: disabled (opt-in).
+# Default: enabled.
 # OMNIROUTE_LOG_REQUEST_SHAPE=1
 
 # Write raw (untruncated) request/response JSON in call log artifacts.

.gitignore

@@ -72,7 +72,6 @@ yarn-error.log*
 # env files (can opt-in for committing if needed)
 .env*
 !.env.example
-!.env.devin-bridge.example
 !.env.homolog.example
 # Provider API keys (never commit)
 *.api-key
@@ -172,6 +171,7 @@ config/quality/test-impact-map.json
 # GitNexus local index
 .gitnexus
 .worktrees
+bin/omniroute.mjs
 
 # Consistent with .dockerignore / .npmignore
 .omc/
@@ -201,17 +201,12 @@ scripts/i18n/_pending-keys.json
 .codegraph/
 
 # Fumadocs generated source
-/.source/
-
-# Temporary local worktrees used to build unpublished npm tarballs
-/.deploy-build-*/
+.source/
 
 # AI agent local settings and configs
 .agents/
 .antigravitycli/
 .claude/
-!tests/fixtures/devin-bridge/e2e-workspace/.claude/
-!tests/fixtures/devin-bridge/e2e-workspace/.claude/**
 
 # PR Reviews and local feedback files
 pr_reviews*.json
@@ -238,10 +233,7 @@ omniroute.md
 
 # mise configuration
 mise.toml
-# release-green artifacts (.gitignore has no inline comments — a trailing
-# `# ...` becomes part of the pattern, so it must sit on its own line).
-# Already covered by /_*/ above; kept explicit for discoverability.
-_artifacts/
+_artifacts/          # release-green artifacts
 .claude-flow/
 
 # ESLint file cache (npm run lint --cache / complexity ratchets)
@@ -251,8 +243,6 @@ _artifacts/
 
 # CI/local quality artifacts (eslint-results.json, quality-ratchet.md, etc.)
 .artifacts/
-# Isolated Devin bridge workspaces, evidence, and test databases
-.sandbox/
 
 # Homologation E2E suite (npm run homolog) — real-environment credentials + report output
 .env.homolog
@@ -260,12 +250,8 @@ tests/homolog/.auth/
 tests/homolog/ui/.auth/
 homolog-report/
 docker-compose.yml.bak
-.playwright-cli/
-# Playwright screenshot/log output. Today every artifact happens to land inside
-# output/**/.playwright-cli/ (covered above), but anything written directly to
-# output/ would otherwise show up as untracked.
-/output/
 
-# _tasks e um repo git SEPARADO (ver AGENTS.md). _tasks/ (com barra) NAO ignora um
-# SYMLINK _tasks; /_tasks (ancorado) cobre symlink/dir na raiz (incidente 2026-08-08).
+# _tasks e um repo git SEPARADO (ver AGENTS.md). A linha _tasks/ (com barra) NAO
+# ignora um SYMLINK chamado _tasks; /_tasks (ancorado) cobre arquivo/symlink/dir na raiz
+# e impede que um git add -A recapture o symlink (incidente 2026-08-08).
 /_tasks

docs/reference/ENVIRONMENT.md

@@ -736,7 +736,7 @@ The logging system writes to both stdout and rotated log files. All configuratio
 | `CALL_LOGS_TABLE_MAX_ROWS`                | `100000`                   | Max rows in the `call_logs` SQLite table before pruning.                          |
 | `ENABLE_REQUEST_LOGS`                     | _(unset)_                  | Force detailed request logging on or off, overriding the dashboard setting.       |
 | `MAX_PENDING_REQUEST_AGE_MS`              | `3600000` (1 hour)         | Max age for orphaned active request log entries before in-memory cleanup.         |
-| `CALL_LOG_PIPELINE_CAPTURE_STREAM_CHUNKS` | `false`                    | Store stream chunks in pipeline artifacts when `call_log_pipeline_enabled=true`. Opt-in (`true`) — off by default to save disk. |
+| `CALL_LOG_PIPELINE_CAPTURE_STREAM_CHUNKS` | `true`                     | Store stream chunks in pipeline artifacts when `call_log_pipeline_enabled=true`.  |
 | `CALL_LOG_PIPELINE_MAX_SIZE_KB`           | `512`                      | Max pipeline call log artifact size in KB when `call_log_pipeline_enabled=true`.  |
 | `PROXY_LOGS_TABLE_MAX_ROWS`               | `100000`                   | Max rows in the `proxy_logs` SQLite table before pruning.                         |
 | `APP_LOG_ROTATION_CHECK_INTERVAL_MS`      | `60000` (1 min)            | How often `src/lib/logRotation.ts` re-checks the active log file size.            |
@@ -976,7 +976,7 @@ changing them requires a code edit, not an env var:
 | `CURSOR_AGENT_CLI_VERSION`       | _(detect / pin)_    | `open-sse/utils/cursorAgentCliVersion.ts`  | Agent CLI build id (`YYYY.MM.DD-<hash>`) for `x-cursor-client-version: cli-…` on Agent Run.   |
 | `CURSOR_DATA_DIR`                | _(probed)_          | `open-sse/utils/cursorAgentCliVersion.ts`  | Override Cursor Agent CLI data dir (`…/versions/<id>`); same var the official agent uses.    |
 | `CURSOR_TOKEN`                   | _(unset)_           | `scripts/ad-hoc/cursor-tap.cjs`            | Direct Cursor bearer token used by developer tooling.                                        |
-| `OMNIROUTE_LOG_REQUEST_SHAPE`    | disabled (opt-in via `"1"`) | `src/app/api/v1/chat/completions/route.ts` | Log content-type/length markers for large chat payloads when `"1"` is set. Off by default to reduce log noise. |
+| `OMNIROUTE_LOG_REQUEST_SHAPE`    | enabled (`!== "0"`) | `src/app/api/v1/chat/completions/route.ts` | Log content-type/length markers for large chat payloads. Set `"0"` to silence.               |
 | `DEBUG_RESPONSES_SSE_TO_JSON`    | _(unset)_           | `open-sse/handlers/responseTranslator.ts`  | Set `true` to log Responses API SSE→JSON translation details.                                |
 | `NEXT_PUBLIC_OMNIROUTE_E2E_MODE` | _(unset)_           | E2E test harness                           | Set `true` to enable E2E test mode (relaxed auth, test hooks).                               |
 

open-sse/executors/cliproxyapi.ts

@@ -408,12 +408,13 @@ export class CliproxyapiExecutor extends BaseExecutor {
 
     input.log?.info?.("CPA", `CLIProxyAPI → ${url} (model: ${input.model}, shape: ${shape})`);
 
-    // _toolNameMap is an in-memory channel to chatCore for response-side
-    // tool name restoration; never send it over the wire.
+    // _toolNameMap and _namespaceToolIdentityMap are in-memory channels to
+    // chatCore for response-side tool name restoration; never send them over
+    // the wire.
     const wireBody =
       transformedBody && typeof transformedBody === "object"
         ? JSON.stringify(transformedBody, (key, value) =>
-            key === "_toolNameMap" ? undefined : value
+            key === "_toolNameMap" || key === "_namespaceToolIdentityMap" ? undefined : value
           )
         : JSON.stringify(transformedBody);
 

open-sse/handlers/chatCore.ts

@@ -207,7 +207,6 @@ import { stageTrace } from "./chatCore/stageTrace.ts";
 import { attachCompressionUsageReceiptAfterAnalytics as attachCompressionUsageReceiptAfterAnalyticsFor } from "./chatCore/compressionUsageReceipt.ts";
 import { prepareUpstreamBody } from "./chatCore/upstreamBody.ts";
 import { getQuotaScopeLabelForProvider } from "../services/antigravityQuotaFamily.ts";
-
 import {
   getCallLogPipelineCaptureStreamChunks,
   getCallLogPipelineMaxSizeBytes,
@@ -367,9 +366,7 @@ import {
   isTpmExhausted,
   isRpmExhausted,
 } from "../services/geminiRateLimitTracker.ts";
-
 import { isSmallEnoughForSemanticCache } from "../utils/estimateSize.ts";
-
 /**
  * Core chat handler - shared between SSE and Worker
  * Returns { success, response, status, error } for caller to handle fallback
@@ -389,10 +386,8 @@ import { isSmallEnoughForSemanticCache } from "../utils/estimateSize.ts";
  * @param {boolean} options.isCombo - Whether this request is from a combo
  * @param {string} options.connectionId - Connection ID for settings lookup
  */
-
 // extractSystemRoleMessages extracted to chatCore/claudeSystemRole.ts (#3501); re-exported above so
 // existing importers (e.g. tests/unit/system-role-extraction.test.ts) keep resolving it from here.
-
 export async function handleChatCore({
   body,
   modelInfo,
@@ -428,7 +423,6 @@ export async function handleChatCore({
       /* fail open */
     }
   }
-
   // Per-request model-routing metadata (first extracted slice of the request-setup phase).
   const { apiFormat, customModelTargetFormat, requestedModel } = resolveChatCoreRequestSetup(
     modelInfo,
@@ -442,7 +436,6 @@ export async function handleChatCore({
   // (not Math.random) purely to satisfy CodeQL js/insecure-randomness — this id
   // is a log-correlation token, not a security secret.
   const traceId = globalThis.crypto.randomUUID().slice(0, 6);
-
   // Emit request.started event for real-time dashboard
   setImmediate(() => {
     emit("request.started", {
@@ -526,7 +519,6 @@ export async function handleChatCore({
       `long-running goal mode enabled: readinessMax=${agentGoalPolicy.readinessMaxTimeoutMs}ms streamRecovery=${agentGoalPolicy.streamRecoveryEnabled}`
     );
   }
-
   let effectiveServiceTier: EffectiveServiceTier = "standard";
   // Codex service-tier resolvers extracted to chatCore/serviceTier.ts (#3501); bind the per-request
   // provider/credentials once and delegate so the existing call sites stay byte-identical.
@@ -555,7 +547,6 @@ export async function handleChatCore({
       })
     ).catch(() => {});
   };
-
   // Key-health updater extracted to chatCore/keyHealth.ts (#3501); bind the per-request log once
   // and delegate so the existing call sites stay byte-identical.
   const recordKeyHealthStatus = (
@@ -563,11 +554,9 @@ export async function handleChatCore({
     creds: Record<string, unknown> | null | undefined,
     transport?: string
   ): void => recordKeyHealthStatusFor(status, creds, log, transport);
-
   const persistCodexQuotaState = async (headers: Record<string, string> | null, status = 0) => {
     const currentConnectionId = getCurrentConnectionId();
     if (provider !== "codex" || !currentConnectionId || !headers) return;
-
     try {
       const existingProviderData =
         credentials?.providerSpecificData && typeof credentials.providerSpecificData === "object"
@@ -582,28 +571,23 @@ export async function handleChatCore({
         status,
       });
       if (!built) return;
-
       if (built.exhaustionLog) {
         log?.debug?.("CODEX", built.exhaustionLog);
       }
-
       // Invalidate the preflight cache for this connection so the next
       // isModelAvailable check fetches fresh quota data.
       if (status === 429) {
         invalidateCodexQuotaCache(currentConnectionId);
       }
-
       await updateProviderConnection(currentConnectionId, {
         providerSpecificData: built.nextProviderData,
       });
-
       credentials.providerSpecificData = built.nextProviderData;
     } catch (err) {
       const errMessage = err instanceof Error ? err.message : String(err);
       log?.debug?.("CODEX", `Failed to persist codex quota state: ${errMessage}`);
     }
   };
-
   // ── Phase 9.2: Idempotency check ──
   // Resolve the idempotency key once here and reuse it at the Phase 9.2 save site below,
   // rather than re-deriving it. (#3821-review LEDGER-6)
@@ -622,13 +606,11 @@ export async function handleChatCore({
   if (idempotencyHit) {
     return idempotencyHit;
   }
-
   // T07: Inject connectionId into credentials so executors can rotate API keys
   // using providerSpecificData.extraApiKeys (API Key Round-Robin feature)
   if (connectionId && credentials && !credentials.connectionId) {
     credentials.connectionId = connectionId;
   }
-
   // Endpoint/format resolution extracted to chatCore/requestFormat.ts (#3501); pure derivation
   // from the inbound request, destructured so every downstream use stays byte-identical.
   const {
@@ -2264,8 +2246,19 @@ export async function handleChatCore({
   // the latter is a Kiro/Claude passthrough alias channel with string values,
   // while namespace identities carry `{namespace, name}` for the #7936 response
   // seam. Extract first because Kiro merge may reuse `_toolNameMap` below.
+  //
+  // #9780 — prefer the dedicated channel: on a pivot the openai->claude/gemini
+  // step publishes its own alias map on `_toolNameMap`, so that property alone
+  // yields aliases here. The `_toolNameMap` read stays as the fallback for the
+  // non-pivot producers (executors/base.ts, cliproxyapi.ts, antigravity).
+  const namespaceIdentityMap = translatedBody._namespaceToolIdentityMap;
   const requestToolIdentityMap =
-    translatedBody._toolNameMap instanceof Map ? translatedBody._toolNameMap : null;
+    namespaceIdentityMap instanceof Map
+      ? namespaceIdentityMap
+      : translatedBody._toolNameMap instanceof Map
+        ? translatedBody._toolNameMap
+        : null;
+  delete translatedBody._namespaceToolIdentityMap;
   delete translatedBody._toolNameMap;
 
   // Kiro: sanitize tool schemas before dispatch. Kiro returns 400 "Improperly
@@ -5025,7 +5018,6 @@ export async function handleChatCore({
     }),
   };
 }
-
 export function isTokenExpiringSoon(expiresAt, bufferMs = 5 * 60 * 1000) {
   if (!expiresAt) return false;
   const expiresAtMs = new Date(expiresAt).getTime();

open-sse/translator/index.ts

@@ -352,7 +352,27 @@ export function translateRequest(
                   ...(hasProvider ? { _provider: provider } : {}),
                 }
               : credentials;
-          result = fromOpenAI(model, result, stream, translationCredentials);
+          // #9780 — carry the Responses namespace identity map across the pivot.
+          // Target translators return a brand-new object (buildKiroPayload et
+          // al.), dropping the non-enumerable property step 1 attached; the
+          // #7936 seam then gets null and namespace sub-tool calls come back
+          // flattened, which Codex rejects with `unsupported call: <name>`.
+          const identityMap = (result as Record<string, unknown>)._namespaceToolIdentityMap;
+          const translated = fromOpenAI(model, result, stream, translationCredentials);
+          if (
+            identityMap instanceof Map &&
+            translated &&
+            typeof translated === "object" &&
+            !((translated as Record<string, unknown>)._namespaceToolIdentityMap instanceof Map)
+          ) {
+            Object.defineProperty(translated, "_namespaceToolIdentityMap", {
+              value: identityMap,
+              enumerable: false,
+              configurable: true,
+              writable: true,
+            });
+          }
+          result = translated;
         }
       }
     }

open-sse/translator/request/openai-responses.ts

@@ -752,8 +752,19 @@ export function openaiResponsesToOpenAIRequest(
   delete result.prompt_cache_retention;
 
   if (namespaceToolIdentityMap.size > 0) {
-    // chatCore extracts and deletes this transient side channel before dispatch.
+    // chatCore extracts and deletes these transient side channels before dispatch.
     // Non-enumerability keeps internal request metadata off the upstream wire.
+    //
+    // Two properties on purpose (#9780): `_toolNameMap` is also the alias
+    // channel for openai-to-claude/gemini, which overwrite it on a pivot, so
+    // the identity map needs a name of its own. `_toolNameMap` stays populated
+    // for the existing consumers (executors/base.ts, cliproxyapi, antigravity).
+    Object.defineProperty(result, "_namespaceToolIdentityMap", {
+      value: namespaceToolIdentityMap,
+      enumerable: false,
+      configurable: true,
+      writable: true,
+    });
     Object.defineProperty(result, "_toolNameMap", {
       value: namespaceToolIdentityMap,
       enumerable: false,

package-lock.json

@@ -31,7 +31,7 @@
         "clsx": "^2.1.1",
         "commander": "^15.0.0",
         "csv-stringify": "^6.7.0",
-        "dompurify": "^3.4.12",
+        "dompurify": "^3.4.13",
         "express": "^5.2.1",
         "fetch-socks": "^1.3.3",
         "fflate": "^0.8.3",
@@ -17064,9 +17064,9 @@
       "license": "MIT"
     },
     "node_modules/dompurify": {
-      "version": "3.4.12",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
-      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
+      "version": "3.4.13",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.13.tgz",
+      "integrity": "sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -27576,9 +27576,9 @@
       "optional": true
     },
     "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "funding": [
         {
           "type": "github",

package.json

@@ -256,7 +256,7 @@
     "clsx": "^2.1.1",
     "commander": "^15.0.0",
     "csv-stringify": "^6.7.0",
-    "dompurify": "^3.4.12",
+    "dompurify": "^3.4.13",
     "express": "^5.2.1",
     "fetch-socks": "^1.3.3",
     "fflate": "^0.8.3",
@@ -395,7 +395,6 @@
     ]
   },
   "overrides": {
-    "dompurify": "^3.4.12",
     "fast-xml-parser": "^5.10.1",
     "sharp": "^0.35.0",
     "postcss": "^8.5.18",
@@ -454,6 +453,10 @@
     },
     "xmlbuilder2": {
       "js-yaml": "^4.3.1"
+    },
+    "nanoid": "^3.3.17",
+    "monaco-editor": {
+      "dompurify": "^3.4.13"
     }
   }
 }

src/app/api/v1/chat/completions/route.ts

@@ -109,8 +109,8 @@ export async function POST(request) {
   try {
     // One-line marker for diagnosing 413 / Server-Action interceptions.
     // Logs only when Content-Length is present so debug noise stays low for
-    // typical chat payloads. Opt-in via OMNIROUTE_LOG_REQUEST_SHAPE=1.
-    if (process.env.OMNIROUTE_LOG_REQUEST_SHAPE === "1") {
+    // typical chat payloads. Toggle off via OMNIROUTE_LOG_REQUEST_SHAPE=0.
+    if (process.env.OMNIROUTE_LOG_REQUEST_SHAPE !== "0") {
       const ct = request.headers.get("content-type") ?? "";
       const cl = request.headers.get("content-length");
       if (cl && Number(cl) > 256 * 1024) {

src/lib/logEnv.ts

@@ -116,7 +116,7 @@ export function getCallLogsTableMaxRows(): number {
 }
 
 export function getCallLogPipelineCaptureStreamChunks(): boolean {
-  return parseBoolean(process.env.CALL_LOG_PIPELINE_CAPTURE_STREAM_CHUNKS, false);
+  return parseBoolean(process.env.CALL_LOG_PIPELINE_CAPTURE_STREAM_CHUNKS, true);
 }
 
 export function getCallLogPipelineMaxSizeBytes(): number {

tests/unit/9780-namespace-identity-pivot.test.ts

@@ -0,0 +1,155 @@
+// #9780 — the Responses namespace identity map must survive the hub-and-spoke
+// pivot in translator/index.ts. Step 1 flattens namespace sub-tools (#8295) and
+// records `{namespace, name}`; step 2 returns a new object and used to drop it,
+// leaving the #7936 seam with null and Codex rejecting `unsupported call`.
+// A naive copy-through is not an option: openai-to-claude/gemini publish their
+// own alias map on `_toolNameMap`, hence the dedicated channel asserted here.
+import test from "node:test";
+import assert from "node:assert/strict";
+
+await import("../../open-sse/translator/bootstrap.ts");
+const { translateRequest, initState } = await import("../../open-sse/translator/index.ts");
+const { openaiToOpenAIResponsesResponse } = await import(
+  "../../open-sse/translator/response/openai-responses.ts"
+);
+const { FORMATS } = await import("../../open-sse/translator/formats.ts");
+
+type NamespaceIdentity = { namespace: string; name: string };
+
+const NAMESPACE_REQUEST = {
+  model: "any-model",
+  instructions: "coding agent",
+  input: [{ type: "message", role: "user", content: [{ type: "input_text", text: "go" }] }],
+  tools: [
+    {
+      type: "namespace",
+      name: "functions",
+      tools: [
+        {
+          name: "exec",
+          description: "Run a shell command",
+          parameters: {
+            type: "object",
+            properties: { cmd: { type: "string" } },
+            required: ["cmd"],
+          },
+        },
+      ],
+    },
+  ],
+};
+
+function pivot(targetFormat: string): Record<string, unknown> {
+  return translateRequest(
+    "openai-responses",
+    targetFormat,
+    "any-model",
+    structuredClone(NAMESPACE_REQUEST),
+    true,
+    null,
+    null,
+    null
+  ) as Record<string, unknown>;
+}
+
+function identityOf(body: Record<string, unknown>) {
+  const map = body._namespaceToolIdentityMap;
+  assert.ok(map instanceof Map, "expected a _namespaceToolIdentityMap after the pivot");
+  return map as Map<string, NamespaceIdentity>;
+}
+
+test("#9780: namespace identity survives the openai-responses -> kiro pivot", () => {
+  const identity = identityOf(pivot("kiro"));
+
+  assert.equal(identity.size, 1);
+  assert.deepEqual(identity.get("functions__exec"), { namespace: "functions", name: "exec" });
+});
+
+test("#9780: namespace identity survives the openai-responses -> cursor pivot", () => {
+  const identity = identityOf(pivot("cursor"));
+
+  assert.deepEqual(identity.get("functions__exec"), { namespace: "functions", name: "exec" });
+});
+
+// Regression guard: these two appeared to "keep" a map before the fix, but it
+// was the alias map.
+for (const target of ["claude", "gemini"]) {
+  test(`#9780: ${target} pivot keeps its alias map AND the namespace identity`, () => {
+    const body = pivot(target);
+    const identity = identityOf(body);
+
+    assert.deepEqual(identity.get("functions__exec"), { namespace: "functions", name: "exec" });
+
+    // The alias channel must be untouched: string values, not identities.
+    const aliases = body._toolNameMap;
+    assert.ok(aliases instanceof Map, `${target} must still publish its alias map`);
+    for (const value of (aliases as Map<string, unknown>).values()) {
+      assert.equal(typeof value, "string", `${target} alias values must stay strings`);
+    }
+  });
+}
+
+// Same-format requests are never flattened, so an absent map is correct here.
+test("#9780: same-format openai-responses request is not flattened at all", () => {
+  const body = pivot("openai-responses");
+  const tools = body.tools as Array<Record<string, unknown>>;
+
+  assert.equal(tools[0].type, "namespace");
+  assert.equal((tools[0].tools as Array<{ name: string }>)[0].name, "exec");
+  assert.equal(body._namespaceToolIdentityMap, undefined);
+});
+
+test("#9780: the identity channel is non-enumerable and never serializes", () => {
+  const body = pivot("kiro");
+
+  assert.ok(body._namespaceToolIdentityMap instanceof Map);
+  assert.equal(
+    Object.prototype.propertyIsEnumerable.call(body, "_namespaceToolIdentityMap"),
+    false
+  );
+  assert.equal("_namespaceToolIdentityMap" in JSON.parse(JSON.stringify(body)), false);
+});
+
+// End-to-end: request pivot + response seam, i.e. what the Codex adjudicator
+// actually receives. Before the fix every target emitted `functions__exec` with
+// no namespace, which is the reported `unsupported call`.
+for (const target of ["kiro", "cursor", "claude", "gemini"]) {
+  test(`#9780: ${target} round-trip returns the declared name and its namespace`, () => {
+    const body = pivot(target);
+    const state = initState(FORMATS.OPENAI_RESPONSES) as Record<string, unknown>;
+    state.requestToolIdentityMap = body._namespaceToolIdentityMap;
+
+    // The upstream echoes the flattened wire name (#8295).
+    const events = openaiToOpenAIResponsesResponse(
+      {
+        id: "chatcmpl-9780",
+        model: "any-model",
+        choices: [
+          {
+            index: 0,
+            delta: {
+              tool_calls: [
+                {
+                  index: 0,
+                  id: "call_9780",
+                  type: "function",
+                  function: { name: "functions__exec", arguments: '{"cmd":"git status"}' },
+                },
+              ],
+            },
+            finish_reason: "tool_calls",
+          },
+        ],
+        usage: { prompt_tokens: 1, completion_tokens: 1, total_tokens: 2 },
+      },
+      state
+    ) as Array<{ event: string; data: { item?: NamespaceIdentity } }>;
+
+    const added = events.find((e) => e.event === "response.output_item.added")?.data.item;
+    assert.ok(added, "expected response.output_item.added");
+    assert.deepEqual(
+      { name: added.name, namespace: added.namespace },
+      { name: "exec", namespace: "functions" }
+    );
+  });
+}