fix: correlate LiteLLM prompts with native agent turns

[danielkov]

Summary

• correlate LiteLLM and native hook prompts using stable provider turn identities for OpenCode and Codex
• atomically promote LiteLLM rows to the authoritative native source regardless of arrival order
• suppress LiteLLM transcript prompts for Claude and Cursor sessions once their native hook stream is known
• forward agent identity headers in generated LiteLLM config and republish the OpenCode observability plugin
• remain compatible with the currently pinned hooks binary by normalizing legacy Codex turn IDs and extracting OpenCode message IDs from raw events

Rollout Note

Existing customer-managed LiteLLM instances must apply the updated generated config so the new turn identity headers are forwarded to the Gram guardrail. The control plane cannot mutate external LiteLLM configuration.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6e345a5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cubic-dev-ai]

All reported issues were addressed across 4 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[cubic-dev-ai]

All reported issues were addressed across 20 files (changes from recent commits).

<sub>Tip: instead of fixing issues one by one fix them all with cubic

Re-trigger cubic</sub>

[gram-bot]

Auto-approved: review:bypass label applied by @danielkov. Required status checks still gate this merge.

[cubic-dev-ai]

All reported issues were addressed across 11 files (changes from recent commits).

<sub>Tip: Review your code locally with the cubic CLI to iterate faster.

Fix all with cubic | Re-trigger cubic</sub>

review:bypass label removed by @danielkov.

[cubic-dev-ai]

All reported issues were addressed across 6 files (changes from recent commits).

<sub>Tip: Review your code locally with the cubic CLI to iterate faster.

Fix all with cubic | Re-trigger cubic</sub>