@dharma-ai-labs/agent-fabric 0.2.107 → 0.2.109

package/README.md

@@ -210,5 +210,20 @@ or unavailable evidence.
 - [CLI command contract](https://github.com/dharma-ai-labs/dharma-agent-fabric/blob/main/docs/22-cli-command-contract.md)
 - [Security boundary](https://github.com/dharma-ai-labs/dharma-agent-fabric/blob/main/docs/10-security-privacy-and-threat-model.md)
 
+## Owning-runtime session integration
+
+The library exports `openCooperativeInboxSession` for an integration running in
+the intended Codex session. It requires that runtime's exact active-session hook,
+an enrolled identity, encrypted cooperative binding, signed channel, durable
+single-use replay claim, disclosure authorization and budget reservation. The
+runtime handles each bounded read-only question within its own existing turn.
+It must enforce the question's authorized paths and network limits.
+
+This consumer does not create/resume another thread or wake an idle desktop chat.
+It is not an installed native host hook or a CLI/MCP attachment command. Session
+IDs from environment variables or historical transcripts are not ownership proof.
+See [session routing](../../docs/24-provider-session-routing.md) for the exact
+contract, failure recovery and remaining live qualification boundaries.
+
 Licensed under MIT. Do not report security vulnerabilities in a public issue;
 use the private security-reporting channel in the GitHub repository.

package/dist/codexBoundSession.d.ts

@@ -0,0 +1,42 @@
+import { type SessionQuestionVerifier } from '@dharma-ai-labs/agent-fabric-contracts';
+import type { LocalProviderSessionIdentity, LocalVault } from '@dharma-ai-labs/agent-fabric-local-vault';
+import { type CodexSessionBudget } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
+import type { CodexStdioTransport } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-transport';
+interface CodexBoundSessionInput {
+    vault: LocalVault;
+    bindingId: string;
+    identity: LocalProviderSessionIdentity;
+    openTransport(): Promise<CodexStdioTransport>;
+    verifier: SessionQuestionVerifier;
+    budget: CodexSessionBudget;
+}
+export declare function openCodexBoundSession(input: CodexBoundSessionInput): Promise<{
+    close: () => Promise<void>;
+    assertActive(): Promise<boolean>;
+    runQuestion(request: {
+        question: unknown;
+        now?: Date;
+        timeoutMs?: number;
+    }): Promise<{
+        questionId: string;
+        taskId: string;
+        bindingId: string;
+        targetEndpointId: string;
+        answer: string;
+        answerHash: string;
+    }>;
+}>;
+export declare function runCodexBoundSessionQuestion(input: CodexBoundSessionInput & {
+    question: unknown;
+    now?: Date;
+    timeoutMs?: number;
+}): Promise<{
+    questionId: string;
+    taskId: string;
+    bindingId: string;
+    targetEndpointId: string;
+    answer: string;
+    answerHash: string;
+}>;
+export {};
+//# sourceMappingURL=codexBoundSession.d.ts.map

package/dist/codexBoundSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexBoundSession.d.ts","sourceRoot":"","sources":["../src/codexBoundSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACxH,OAAO,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AACzG,OAAO,EAA0B,KAAK,kBAAkB,EAAE,MAAM,2EAA2E,CAAC;AAC5I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6EAA6E,CAAC;AAEvH,UAAU,sBAAsB;IAC9B,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,4BAA4B,CAAC;IAEvC,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,sBAAsB;;;yBAmC1C;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;GA0BnF;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,sBAAsB,GAAG;IACjF,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;;;;;;;GAmBA"}

package/dist/codexBoundSession.js

@@ -0,0 +1,108 @@
+import { inspectSessionQuestionForBinding } from '@dharma-ai-labs/agent-fabric-contracts';
+import { runCodexBridgeQuestion } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
+export async function openCodexBoundSession(input) {
+    const binding = input.vault.getProviderSessionBinding(input.bindingId, input.identity);
+    if (!binding || binding.provider !== 'codex' || binding.owner !== 'dharma_bridge') {
+        throw new Error('codex_session_binding_unavailable');
+    }
+    if (process.platform !== 'linux')
+        throw new Error('codex_session_sandbox_unqualified');
+    const codexBinding = { ...binding, threadId: binding.sessionId };
+    const lease = input.vault.tryAcquireProviderSessionLease(input.bindingId, input.identity);
+    if (!lease)
+        throw new Error('codex_session_lease_unavailable');
+    const heldLease = lease;
+    let transport;
+    try {
+        transport = await input.openTransport();
+    }
+    catch (error) {
+        lease.release();
+        throw error;
+    }
+    let running = false;
+    let closing = false;
+    let closed = false;
+    let shutdown = null;
+    async function close() {
+        closing = true;
+        if (closed)
+            return;
+        if (shutdown)
+            return shutdown;
+        shutdown = (async () => {
+            // Never release the fence while a provider child could still accept turns.
+            await transport.close();
+            heldLease.release();
+            closed = true;
+        })();
+        try {
+            await shutdown;
+        }
+        finally {
+            shutdown = null;
+        }
+    }
+    return {
+        close,
+        async assertActive() { return !closing && !closed && await heldLease.assertHeld(); },
+        async runQuestion(request) {
+            if (closing)
+                throw new Error('codex_session_closed');
+            if (running)
+                throw new Error('codex_session_busy');
+            const inspected = inspectSessionQuestionForBinding(request.question, codexBinding, input.verifier, request.now ?? new Date());
+            if (!inspected.ok)
+                throw new Error(inspected.reason);
+            running = true;
+            try {
+                const result = await runCodexBridgeQuestion({
+                    transport, binding: codexBinding, question: request.question,
+                    verifier: input.verifier, exclusiveLease: lease, budget: input.budget,
+                    now: request.now, timeoutMs: request.timeoutMs,
+                });
+                if (closing)
+                    throw new Error('codex_session_closed');
+                return result;
+            }
+            catch (error) {
+                // Both failures happen before turn/start; retain an empty thread for retry.
+                const reason = error instanceof Error ? error.message : '';
+                if (!['codex_session_budget_unavailable', 'replayed'].includes(reason)) {
+                    try {
+                        await close();
+                    }
+                    catch { /* Keep the fence and disable dispatch until shutdown is confirmed. */ }
+                }
+                throw error;
+            }
+            finally {
+                running = false;
+            }
+        },
+    };
+}
+export async function runCodexBoundSessionQuestion(input) {
+    const binding = input.vault.getProviderSessionBinding(input.bindingId, input.identity);
+    if (!binding || binding.provider !== 'codex' || binding.owner !== 'dharma_bridge') {
+        throw new Error('codex_session_binding_unavailable');
+    }
+    const codexBinding = { ...binding, threadId: binding.sessionId };
+    const inspected = inspectSessionQuestionForBinding(input.question, codexBinding, input.verifier, input.now ?? new Date());
+    if (!inspected.ok)
+        throw new Error(inspected.reason);
+    const owner = await openCodexBoundSession(input);
+    try {
+        const result = await owner.runQuestion(input);
+        await owner.close();
+        return result;
+    }
+    catch (error) {
+        try {
+            await owner.close();
+        }
+        catch { /* Retain ownership if process termination cannot be confirmed. */ }
+        throw error;
+    }
+}
+//# sourceMappingURL=codexBoundSession.js.map

package/dist/codexBoundSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexBoundSession.js","sourceRoot":"","sources":["../src/codexBoundSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAgC,MAAM,wCAAwC,CAAC;AAExH,OAAO,EAAE,sBAAsB,EAA2B,MAAM,2EAA2E,CAAC;AAa5I,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA6B;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1F,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC;IACxB,IAAI,SAA8B,CAAC;IACnC,IAAI,CAAC;QAAC,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;IAAC,CAAC;IAChD,OAAO,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAE1C,KAAK,UAAU,KAAK;QAClB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,2EAA2E;YAC3E,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YAAC,MAAM,QAAQ,CAAC;QAAC,CAAC;gBACf,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACpF,KAAK,CAAC,WAAW,CAAC,OAA8D;YAC9E,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrD,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAC/E,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACrD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;oBAC1C,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC5D,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;oBACrE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC/C,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4EAA4E;gBAC5E,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,CAAC,kCAAkC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvE,IAAI,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;oBAAC,CAAC;oBACtB,MAAM,CAAC,CAAC,sEAAsE,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAC7E,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/codexBoundSession.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codexBoundSession.test.d.ts.map

package/dist/codexBoundSession.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexBoundSession.test.d.ts","sourceRoot":"","sources":["../src/codexBoundSession.test.ts"],"names":[],"mappings":""}