@dharma-ai-labs/agent-fabric 0.2.152 → 0.2.154

package/dist/bootstrapGitScope.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bootstrapGitScope.test.d.ts.map

package/dist/bootstrapGitScope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapGitScope.test.d.ts","sourceRoot":"","sources":["../src/bootstrapGitScope.test.ts"],"names":[],"mappings":""}

package/dist/bootstrapGitScope.test.js

@@ -0,0 +1,115 @@
+import assert from 'node:assert/strict';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { readFile } from 'node:fs/promises';
+import { runInNewContext } from 'node:vm';
+import test from 'node:test';
+import ts from 'typescript';
+import { providerProcessEnvironment } from '@dharma-ai-labs/agent-fabric-provider-adapters';
+import { currentBootstrapHostScope, runCodexBootstrapHost } from './bootstrapHostScope.js';
+function input() {
+    const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    const now = Date.now(), digest = `sha256:${'a'.repeat(64)}`;
+    return { workspace: process.cwd(), current: async () => true, signal: new AbortController().signal,
+        intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+            organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+            repositoryFingerprint: digest, policyRevision: 'policy-v1', scopeDigest: digest, contractDigest: digest,
+            hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } };
+}
+async function caller(execFileAsync) {
+    const source = await readFile(new URL('../src/index.ts', import.meta.url), 'utf8');
+    const ast = ts.createSourceFile('index.ts', source, ts.ScriptTarget.Latest, true);
+    const nodes = ast.statements.filter(node => ts.isFunctionDeclaration(node) && node.name?.text === 'gitValue');
+    assert.equal(nodes.length, 1);
+    const result = ts.transpileModule(nodes[0].getText(ast), { compilerOptions: {
+            target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.None
+        }, reportDiagnostics: true });
+    assert.equal(result.diagnostics?.filter(item => item.category === ts.DiagnosticCategory.Error).length, 0);
+    return runInNewContext(`${result.outputText}\ngitValue`, { execFileAsync, currentBootstrapHostScope,
+        providerProcessEnvironment, process, structuredClone }, { timeout: 1000,
+        contextCodeGeneration: { strings: false, wasm: false } });
+}
+test('Git source preflight refuses closed authority before launching a child', async () => {
+    let launches = 0, result = [];
+    const git = await caller(async () => { launches++; return { stdout: 'synthetic-root' }; });
+    await assert.rejects(runCodexBootstrapHost(input(), async ({ scope }) => {
+        scope.close();
+        result = await Promise.allSettled([git(process.cwd(), ['rev-parse', '--show-toplevel'])]);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(result[0]?.status, 'rejected');
+    assert.equal(launches, 0);
+});
+test('Git source preflight withholds a result produced after cancellation', async () => {
+    let result = [];
+    await assert.rejects(runCodexBootstrapHost(input(), async ({ scope }) => {
+        const git = await caller(async () => { scope.close(); return { stdout: 'synthetic-root' }; });
+        result = await Promise.allSettled([git(process.cwd(), ['rev-parse', '--show-toplevel'])]);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(result[0]?.status, 'rejected');
+});
+test('Git source preflight does not swallow cancellation as an absent remote', async () => {
+    let result = [];
+    await assert.rejects(runCodexBootstrapHost(input(), async ({ scope }) => {
+        const git = await caller(async () => { scope.close(); throw new Error('private-child-canary'); });
+        result = await Promise.allSettled([git(process.cwd(), ['config', '--get', 'remote.origin.url'])]);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(result[0]?.status, 'rejected');
+});
+test('Git source preflight snapshots its argv before async qualification', async () => {
+    const args = ['branch', '--show-current'];
+    let launched;
+    const f = input();
+    f.current = async () => { args.splice(0, args.length, 'arbitrary', 'changed'); return true; };
+    const git = await caller(async (_command, argv) => { launched = argv; return { stdout: ' main\n' }; });
+    await runCodexBootstrapHost(f, async () => {
+        args.splice(0, args.length, 'branch', '--show-current');
+        assert.equal(await git(process.cwd(), args), 'main');
+    });
+    assert.deepEqual(Array.from(launched ?? []), ['-C', process.cwd(), 'branch', '--show-current']);
+});
+test('Git source preflight binds the child signal and bounded noninteractive options', async () => {
+    let observed;
+    const git = await caller(async (_command, _args, options) => { observed = options; return { stdout: 'synthetic-root' }; });
+    await runCodexBootstrapHost(input(), async ({ scope }) => {
+        await git(process.cwd(), ['rev-parse', '--show-toplevel']);
+        assert.equal(observed?.signal, scope.signal);
+        assert.equal(observed?.timeout, 10_000);
+        assert.equal(observed?.maxBuffer, 65_536);
+        assert.equal(observed?.windowsHide, true);
+    });
+});
+test('Git source preflight preserves optional values and bounded legacy failure', async () => {
+    const absent = await caller(async () => { throw new Error('synthetic-missing-value'); });
+    assert.equal(await absent(process.cwd(), ['config', '--get', 'remote.origin.url']), null);
+    await runCodexBootstrapHost(input(), async () => {
+        assert.equal(await absent(process.cwd(), ['config', '--get', 'remote.origin.url']), null);
+    });
+    const present = await caller(async () => ({ stdout: ' synthetic-root\n' }));
+    assert.equal(await present(process.cwd(), ['rev-parse', '--show-toplevel']), 'synthetic-root');
+});
+test('Git source preflight cancellation reaches only the owned synthetic child', async () => {
+    // A C-only inert Node child, not Git/WSL or a native onboarding/provider process.
+    let closed, signal;
+    const run = promisify(execFile);
+    const git = await caller(async (_command, _args, options) => {
+        signal = options.signal;
+        const child = run(process.execPath, ['-e', 'setTimeout(() => {}, 10000)'], options);
+        closed = new Promise(resolve => child.child.once('close', () => resolve()));
+        await child;
+        return { stdout: '' };
+    });
+    await assert.rejects(runCodexBootstrapHost(input(), async ({ scope }) => {
+        const timer = setTimeout(() => scope.close(), 100);
+        try {
+            await git(process.cwd(), ['rev-parse', '--show-toplevel']);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(signal?.aborted, true);
+    assert.ok(closed);
+    const timeout = AbortSignal.timeout(2000);
+    await Promise.race([closed, new Promise((_, reject) => timeout.addEventListener('abort', () => reject(new Error('owned child close unconfirmed')), { once: true }))]);
+});
+//# sourceMappingURL=bootstrapGitScope.test.js.map

package/dist/bootstrapGitScope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapGitScope.test.js","sourceRoot":"","sources":["../src/bootstrapGitScope.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,QAAQ,EAAC,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAC,SAAS,EAAC,MAAM,WAAW,CAAC;AACpC,OAAO,EAAC,QAAQ,EAAC,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAC,eAAe,EAAC,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAC,0BAA0B,EAAC,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAC,yBAAyB,EAAE,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAEzF,SAAS,KAAK;IACZ,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IACtF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5D,OAAO,EAAC,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;QAC/F,MAAM,EAAE,EAAC,MAAM,EAAE,8BAAuC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACjG,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;YACtF,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;YACvG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;AAC5H,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,aAA+C;IACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC;IAC9G,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,eAAe,EAAE;YAC1E,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI;SAAC,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1G,OAAO,eAAe,CAAC,GAAG,MAAM,CAAC,UAAU,YAAY,EAAE,EAAC,aAAa,EAAE,yBAAyB;QAChG,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAC,EAAE,EAAC,OAAO,EAAE,IAAI;QACrE,qBAAqB,EAAE,EAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAC,EAAC,CAAkE,CAAC;AAC5H,CAAC;AAED,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,IAAI,QAAQ,GAAG,CAAC,EAAE,MAAM,GAAoC,EAAE,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE,GAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAC,MAAM,EAAE,gBAAgB,EAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QACpE,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3G,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,IAAI,MAAM,GAAoC,EAAE,CAAC;IACjD,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE,GAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAC,MAAM,EAAE,gBAAgB,EAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAC1F,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,IAAI,MAAM,GAAoC,EAAE,CAAC;IACjD,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE,GAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QAChG,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAAC,IAAI,QAA8B,CAAC;IAC9E,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;IAAC,CAAC,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE,GAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAE,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,EAAC,MAAM,EAAE,SAAS,EAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACnG,MAAM,qBAAqB,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;QACxC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAClG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,IAAI,QAA6C,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAE,gBAAgB,EAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACvH,MAAM,qBAAqB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QACrD,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1F,MAAM,qBAAqB,CAAC,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,mBAAmB,EAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACjG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,kFAAkF;IAClF,IAAI,MAAiC,EAAE,MAA+B,CAAC;IACvE,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1D,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAAE,OAAO,CAAC,CAAC;QACpF,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;QAAC,OAAO,EAAC,MAAM,EAAE,EAAE,EAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YAAA,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAAA,CAAC;gBAAS,CAAC;YAAA,YAAY,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC;IAClG,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtK,CAAC,CAAC,CAAC"}

package/dist/bootstrapHostFiles.d.ts

@@ -0,0 +1,5 @@
+import type { BootstrapHostScope } from './bootstrapHostScope.js';
+/** Lifetime fence, not a replacement for the caller's approved path policy. */
+export declare function writeBootstrapHostJson(path: string, value: unknown, scope: BootstrapHostScope): Promise<void>;
+export declare function writeBootstrapHostText(path: string, value: string, scope: BootstrapHostScope, mode: 0o600 | 0o700): Promise<void>;
+//# sourceMappingURL=bootstrapHostFiles.d.ts.map

package/dist/bootstrapHostFiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapHostFiles.d.ts","sourceRoot":"","sources":["../src/bootstrapHostFiles.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,yBAAyB,CAAC;AA6ChE,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,iBAEnG;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,GAAG,KAAK,iBAIvH"}

package/dist/bootstrapHostFiles.js

@@ -0,0 +1,150 @@
+import { lstat, mkdir, open, rename } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { dirname, isAbsolute, resolve } from 'node:path';
+import { types } from 'node:util';
+function captureJson(value) {
+    let count = 0;
+    const seen = new Set();
+    const invalid = () => { throw new Error('codex_setup_host_state_invalid'); };
+    const copy = (item, depth) => {
+        if (++count > 50_000 || depth > 20)
+            return invalid();
+        if (item === null || typeof item === 'boolean')
+            return item;
+        if (typeof item === 'string')
+            return item.length <= 2 * 1024 * 1024 ? item : invalid();
+        if (typeof item === 'number' && Number.isFinite(item))
+            return item;
+        if (!item || typeof item !== 'object' || types.isProxy(item) || seen.has(item))
+            return invalid();
+        const array = Array.isArray(item), prototype = Object.getPrototypeOf(item);
+        if (array ? prototype !== Array.prototype : prototype !== Object.prototype && prototype !== null)
+            return invalid();
+        const fields = Object.getOwnPropertyDescriptors(item);
+        if (Reflect.ownKeys(fields).some(key => typeof key !== 'string'
+            || !Object.hasOwn(fields[key], 'value') || ['__proto__', 'constructor', 'prototype', 'toJSON'].includes(key)))
+            return invalid();
+        seen.add(item);
+        try {
+            if (array) {
+                if (item.length > 50_000 || Object.keys(fields).length !== item.length + 1)
+                    return invalid();
+                return Array.from({ length: item.length }, (_, index) => {
+                    const field = fields[String(index)];
+                    if (!field?.enumerable)
+                        return invalid();
+                    return copy(field.value, depth + 1);
+                });
+            }
+            const result = Object.create(null);
+            for (const [key, field] of Object.entries(fields)) {
+                if (!field.enumerable || key.length > 4096)
+                    return invalid();
+                // Preserve JSON's omission of optional undefined object properties.
+                if (field.value === undefined)
+                    continue;
+                result[key] = copy(field.value, depth + 1);
+            }
+            return result;
+        }
+        finally {
+            seen.delete(item);
+        }
+    };
+    // Copy before any asynchronous admission, without invoking caller accessors.
+    if (Object.getOwnPropertyDescriptor(Object.prototype, 'toJSON')
+        || Object.getOwnPropertyDescriptor(Array.prototype, 'toJSON'))
+        return invalid();
+    const bytes = `${JSON.stringify(copy(value, 0), null, 2)}\n`;
+    if (Buffer.byteLength(bytes) > 2 * 1024 * 1024)
+        return invalid();
+    return bytes;
+}
+/** Lifetime fence, not a replacement for the caller's approved path policy. */
+export async function writeBootstrapHostJson(path, value, scope) {
+    return writeFrozenBootstrapHostFile(path, Buffer.from(captureJson(value)), scope, 0o600);
+}
+export async function writeBootstrapHostText(path, value, scope, mode) {
+    if (typeof value !== 'string' || Buffer.byteLength(value) > 2 * 1024 * 1024 || value.includes('\0')
+        || ![0o600, 0o700].includes(mode))
+        throw new Error('codex_setup_host_state_invalid');
+    return writeFrozenBootstrapHostFile(path, Buffer.from(value), scope, mode);
+}
+async function writeFrozenBootstrapHostFile(path, bytes, scope, mode) {
+    if (!isAbsolute(path) || resolve(path) !== path)
+        throw new Error('codex_setup_host_state_path_invalid');
+    await scope.assert();
+    const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
+    await scope.step(() => mkdir(dirname(path), { recursive: true, mode: 0o700 }));
+    let handle;
+    let identity;
+    const matches = (a, b) => a.isFile() && a.nlink === 1n
+        && a.dev === b.dev && a.ino === b.ino && a.size === b.size && a.birthtimeNs === b.birthtimeNs
+        && a.mtimeNs === b.mtimeNs && a.ctimeNs === b.ctimeNs && a.mode === b.mode && a.uid === b.uid && a.gid === b.gid;
+    const verifyOwned = async () => {
+        if (!identity)
+            throw new Error('codex_setup_host_state_ownership_unconfirmed');
+        let reader;
+        try {
+            await scope.step(async () => {
+                reader = await open(temporary, constants.O_RDONLY
+                    | (constants.O_NOFOLLOW || 0) | (constants.O_NONBLOCK || 0));
+            });
+            const before = await scope.step(() => reader.stat({ bigint: true }));
+            if (!matches(before, identity) || before.size !== BigInt(bytes.length))
+                throw new Error('codex_setup_host_state_ownership_unconfirmed');
+            const retained = Buffer.alloc(bytes.length + 1);
+            let count = 0;
+            while (count < retained.length) {
+                const result = await scope.step(() => reader.read(retained, count, retained.length - count, count));
+                if (!result.bytesRead)
+                    break;
+                count += result.bytesRead;
+            }
+            const after = await scope.step(() => reader.stat({ bigint: true }));
+            const current = await scope.step(() => lstat(temporary, { bigint: true }));
+            if (count !== bytes.length || !retained.subarray(0, count).equals(bytes)
+                || !matches(after, before) || !matches(current, after))
+                throw new Error('codex_setup_host_state_ownership_unconfirmed');
+        }
+        finally {
+            try {
+                await reader?.close();
+            }
+            catch {
+                throw new Error('codex_setup_host_state_cleanup_unconfirmed');
+            }
+        }
+    };
+    try {
+        await scope.step(async () => {
+            handle = await open(temporary, constants.O_CREAT | constants.O_EXCL
+                | constants.O_WRONLY | (constants.O_NOFOLLOW || 0), mode);
+        });
+        await scope.step(() => handle.writeFile(bytes));
+        await scope.step(() => handle.sync());
+        identity = await scope.step(() => handle.stat({ bigint: true }));
+        try {
+            await handle.close();
+        }
+        catch {
+            throw new Error('codex_setup_host_state_cleanup_unconfirmed');
+        }
+        handle = undefined;
+        await verifyOwned();
+        await scope.step(() => rename(temporary, path));
+    }
+    finally {
+        try {
+            await handle?.close();
+        }
+        catch {
+            throw new Error('codex_setup_host_state_cleanup_unconfirmed');
+        }
+        // Preserve failed staging as recovery evidence. No automatic path-based
+        // deletion can establish atomic ownership against a concurrent replacement.
+        // Explicit recovery must separately qualify cleanup; never undo publication.
+    }
+}
+//# sourceMappingURL=bootstrapHostFiles.js.map

package/dist/bootstrapHostFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapHostFiles.js","sourceRoot":"","sources":["../src/bootstrapHostFiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAC,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAC,SAAS,EAAmB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAC,MAAM,WAAW,CAAC;AACvD,OAAO,EAAC,KAAK,EAAC,MAAM,WAAW,CAAC;AAGhC,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,KAAa,EAAW,EAAE;QACrD,IAAI,EAAE,KAAK,GAAG,MAAM,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QACrD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACjG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,OAAO,EAAE,CAAC;QACnH,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ;eAC1D,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAE,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QACnI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC7F,OAAO,KAAK,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;oBACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBACpC,IAAI,CAAC,KAAK,EAAE,UAAU;wBAAE,OAAO,OAAO,EAAE,CAAC;oBACzC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACtC,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC7D,oEAAoE;gBACpE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;oBAAE,SAAS;gBACxC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAA,CAAC;IAChC,CAAC,CAAC;IACF,6EAA6E;IAC7E,IAAI,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC;WAC1D,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,OAAO,EAAE,CAAC;IACjE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,KAAc,EAAE,KAAyB;IAClG,OAAO,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,KAAa,EAAE,KAAyB,EAAE,IAAmB;IACtH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC9F,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACvF,OAAO,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,IAAY,EAAE,KAAa,EAAE,KAAyB,EAAE,IAAY;IAC9G,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACrB,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IAC/D,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAoD,CAAC;IACzD,IAAI,QAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,CAAc,EAAE,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE;WAC3E,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW;WAC1F,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;IACnH,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC/E,IAAI,MAAoD,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAAE,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ;sBAC3E,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,CAAC,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAO,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACxI,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YAC/D,OAAO,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;gBACrG,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,MAAM;gBAC7B,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC;YAC5B,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAO,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;YACzE,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;mBACnE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC5H,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAA,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;YAAA,CAAC;YAAC,MAAM,CAAC;gBAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAAA,CAAC;QACrG,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAAE,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM;kBAC7F,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAAA,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAO,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC;YAAA,MAAM,MAAO,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAAA,CAAC;QACnG,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAA,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAAA,CAAC;QACnG,wEAAwE;QACxE,4EAA4E;QAC5E,6EAA6E;IAC/E,CAAC;AACH,CAAC"}

package/dist/bootstrapHostFiles.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bootstrapHostFiles.test.d.ts.map

package/dist/bootstrapHostFiles.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapHostFiles.test.d.ts","sourceRoot":"","sources":["../src/bootstrapHostFiles.test.ts"],"names":[],"mappings":""}

package/dist/bootstrapHostFiles.test.js

@@ -0,0 +1,127 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, readFile, readdir, rm, writeFile } from 'node:fs/promises';
+import { readFileSync, readdirSync, unlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import test from 'node:test';
+import { prepareCodexBootstrapHost } from './bootstrapHostScope.js';
+import { writeBootstrapHostJson, writeBootstrapHostText } from './bootstrapHostFiles.js';
+async function fixture(t) {
+    const root = await mkdtemp(resolve(tmpdir(), 'fabric-bootstrap-host-json-'));
+    t.after(() => rm(root, { recursive: true, force: true }));
+    const now = Date.now(), digest = `sha256:${'a'.repeat(64)}`;
+    const uuid = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    let allowed = true;
+    const input = { workspace: root, current: async () => allowed,
+        signal: new AbortController().signal, intent: { schema: 'dharma.codex-setup-intent/v1', operationId: uuid(1),
+            setupReference: uuid(2), organizationId: 'org_demo', recipientMembershipId: uuid(3), origin: 'https://hq.example',
+            repositoryFingerprint: digest, policyRevision: 'policy-v1', scopeDigest: digest, contractDigest: digest,
+            hostContextId: uuid(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } };
+    const scope = prepareCodexBootstrapHost(input).scope;
+    t.after(async () => scope.close());
+    return { root, scope, input, path: resolve(root, 'state.json'), setAllowed(value) { allowed = value; } };
+}
+test('withdrawn setup cannot create a local state file', async (t) => {
+    const f = await fixture(t);
+    f.scope.close();
+    await assert.rejects(writeBootstrapHostJson(f.path, { ok: true }, f.scope), { message: 'codex_setup_host_scope_unavailable' });
+    assert.deepEqual(await readdir(f.root), []);
+});
+test('withdrawal after writing prevents publication and preserves partial evidence without cleanup authority', async (t) => {
+    const f = await fixture(t);
+    await writeFile(f.path, 'original\n');
+    await writeFile(resolve(f.root, 'unrelated.tmp'), 'preserve\n');
+    const scoped = prepareCodexBootstrapHost({
+        ...f.input, current: async () => {
+            const temporary = readdirSync(f.root).find(name => name.startsWith('state.json.') && name.endsWith('.tmp'));
+            return !temporary || readFileSync(resolve(f.root, temporary)).length === 0;
+        }
+    }).scope;
+    t.after(async () => scoped.close());
+    await assert.rejects(writeBootstrapHostJson(f.path, { changed: true }, scoped), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(await readFile(f.path, 'utf8'), 'original\n');
+    const files = await readdir(f.root);
+    assert.equal(files.length, 3);
+    assert.equal(files.filter(name => name.startsWith('state.json.') && name.endsWith('.tmp')).length, 1);
+    assert.equal(await readFile(resolve(f.root, 'unrelated.tmp'), 'utf8'), 'preserve\n');
+});
+test('a verified owning scope commits parser-safe local state', async (t) => {
+    const f = await fixture(t);
+    await writeBootstrapHostJson(f.path, { ok: true, counter: 1, optional: undefined }, f.scope);
+    assert.deepEqual(JSON.parse(await readFile(f.path, 'utf8')), { ok: true, counter: 1 });
+    assert.deepEqual(await readdir(f.root), ['state.json']);
+});
+test('serialization hooks are refused without invoking caller code', async (t) => {
+    const f = await fixture(t);
+    const value = { toJSON() { f.setAllowed(false); return { private: 'synthetic-canary' }; } };
+    await assert.rejects(writeBootstrapHostJson(f.path, value, f.scope), { message: 'codex_setup_host_state_invalid' });
+    assert.deepEqual(await readdir(f.root), []);
+});
+test('replacement staging file is neither published nor removed as an owned file', async (t) => {
+    const f = await fixture(t);
+    await writeFile(f.path, 'original\n');
+    let replaced = false, foreignPath = '';
+    const scoped = prepareCodexBootstrapHost({ ...f.input, current: async () => {
+            const temporary = readdirSync(f.root).find(name => name.startsWith('state.json.') && name.endsWith('.tmp'));
+            if (!replaced && temporary && readFileSync(resolve(f.root, temporary)).length > 0) {
+                foreignPath = resolve(f.root, temporary);
+                unlinkSync(foreignPath);
+                writeFileSync(foreignPath, 'foreign-replacement\n');
+                replaced = true;
+            }
+            return true;
+        } }).scope;
+    t.after(async () => scoped.close());
+    await assert.rejects(writeBootstrapHostJson(f.path, { ok: true }, scoped), /codex_setup_host_state_ownership_unconfirmed/);
+    assert.equal(replaced, true);
+    assert.equal(await readFile(f.path, 'utf8'), 'original\n');
+    assert.equal(await readFile(foreignPath, 'utf8'), 'foreign-replacement\n');
+});
+test('JSON snapshot precedes asynchronous admission and rejects getters without invoking them', async (t) => {
+    const f = await fixture(t), value = { approved: true };
+    const scoped = prepareCodexBootstrapHost({ ...f.input, current: async () => { value.approved = false; return true; } }).scope;
+    t.after(async () => scoped.close());
+    await writeBootstrapHostJson(f.path, value, scoped);
+    assert.deepEqual(JSON.parse(await readFile(f.path, 'utf8')), { approved: true });
+    let getters = 0;
+    await assert.rejects(writeBootstrapHostJson(f.path, { get privateField() { getters++; return 'private-canary'; } }, f.scope), /codex_setup_host_state_invalid/);
+    assert.equal(getters, 0);
+    assert.deepEqual(JSON.parse(await readFile(f.path, 'utf8')), { approved: true });
+});
+test('withdrawal after completed rename reports failure without inventing rollback', async (t) => {
+    const f = await fixture(t);
+    await writeFile(f.path, 'original\n');
+    const scoped = prepareCodexBootstrapHost({ ...f.input, current: async () => readFileSync(f.path, 'utf8') === 'original\n' }).scope;
+    t.after(async () => scoped.close());
+    await assert.rejects(writeBootstrapHostJson(f.path, { committed: true }, scoped), { message: 'codex_setup_host_scope_unavailable' });
+    assert.deepEqual(JSON.parse(await readFile(f.path, 'utf8')), { committed: true });
+    assert.deepEqual(await readdir(f.root), ['state.json']);
+});
+test('relative paths are refused before creating a temporary', async (t) => {
+    const f = await fixture(t);
+    await assert.rejects(writeBootstrapHostJson('relative-state.json', {}, f.scope), { message: 'codex_setup_host_state_path_invalid' });
+    assert.deepEqual(await readdir(f.root), []);
+});
+test('serialization errors never reflect private diagnostics and leave no artifact', async (t) => {
+    const f = await fixture(t);
+    await assert.rejects(writeBootstrapHostJson(f.path, { toJSON() { throw new Error('private-serialization-canary'); } }, f.scope), { message: 'codex_setup_host_state_invalid' });
+    assert.deepEqual(await readdir(f.root), []);
+});
+test('non-data and oversized JSON is refused before creating state', async (t) => {
+    const f = await fixture(t), cycle = {};
+    cycle.self = cycle;
+    for (const value of [undefined, { private: () => 'canary' }, { huge: 'x'.repeat(2 * 1024 * 1024 + 1) },
+        cycle, new Proxy({}, { get() { throw new Error('private-canary'); } }), Object.create({ foreign: true })]) {
+        await assert.rejects(writeBootstrapHostJson(f.path, value, f.scope), /codex_setup_host_state_invalid/);
+    }
+    assert.deepEqual(await readdir(f.root), []);
+});
+test('launcher text rejects unsafe modes and non-text input before any filesystem effect', async (t) => {
+    const f = await fixture(t);
+    for (const value of [null, {}, Buffer.from('canary'), 'x'.repeat(2 * 1024 * 1024 + 1), 'text\0tail']) {
+        await assert.rejects(writeBootstrapHostText(f.path, value, f.scope, 0o700), { message: 'codex_setup_host_state_invalid' });
+    }
+    await assert.rejects(writeBootstrapHostText(f.path, 'text', f.scope, 0o777), { message: 'codex_setup_host_state_invalid' });
+    assert.deepEqual(await readdir(f.root), []);
+});
+//# sourceMappingURL=bootstrapHostFiles.test.js.map

package/dist/bootstrapHostFiles.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapHostFiles.test.js","sourceRoot":"","sources":["../src/bootstrapHostFiles.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAC,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAC,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,yBAAyB,EAAC,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAC,sBAAsB,EAAE,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAEvF,KAAK,UAAU,OAAO,CAAC,CAAyC;IAC9D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IACxF,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,MAAM,KAAK,GAAG,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;QAC1D,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAC,MAAM,EAAE,8BAAuC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;YAClH,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;YACjH,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;YACvG,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;IACrD,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACnC,OAAO,EAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,UAAU,CAAC,KAAc,IAAG,OAAO,GAAG,KAAK,CAAC,CAAA,CAAC,EAAC,CAAC;AAChH,CAAC;AAED,IAAI,CAAC,kDAAkD,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACjE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,EAAE,EAAE,IAAI,EAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IAC3H,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wGAAwG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACvH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,YAAY,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,yBAAyB,CAAC;QACvC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5G,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;QAC7E,CAAC;KAAC,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,OAAO,EAAE,IAAI,EAAC,EAAE,MAAM,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IAC/H,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtG,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;AACvF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACxE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3F,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAC,CAAC,CAAC;IACrF,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7E,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,EAAC,MAAM,KAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAC,OAAO,EAAE,kBAAkB,EAAC,CAAC,CAAA,CAAC,EAAC,CAAC;IACtF,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAC,OAAO,EAAE,gCAAgC,EAAC,CAAC,CAAC;IAClH,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClE,IAAI,QAAQ,GAAG,KAAK,EAAE,WAAW,GAAG,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5G,IAAI,CAAC,QAAQ,IAAI,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClF,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACzC,UAAU,CAAC,WAAW,CAAC,CAAC;gBAAC,aAAa,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;gBAAC,QAAQ,GAAG,IAAI,CAAC;YAChG,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,EAAC,CAAC,CAAC,KAAK,CAAC;IACV,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,EAAE,EAAE,IAAI,EAAC,EAAE,MAAM,CAAC,EAAE,8CAA8C,CAAC,CAAC;IACzH,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACxG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,EAAC,QAAQ,EAAE,IAAI,EAAC,CAAC;IACrD,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC,KAAK,CAAC;IAC1H,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAC,QAAQ,EAAE,IAAI,EAAC,CAAC,CAAC;IAC/E,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,IAAI,YAAY,KAAI,OAAO,EAAE,CAAC,CAAC,OAAO,gBAAgB,CAAC,CAAA,CAAC,EAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EACtH,gCAAgC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAC,QAAQ,EAAE,IAAI,EAAC,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,YAAY,EAAC,CAAC,CAAC,KAAK,CAAC;IACjI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,EAAE,MAAM,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACjI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;IAChF,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACvE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,qBAAqB,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAC,OAAO,EAAE,qCAAqC,EAAC,CAAC,CAAC;IACnI,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,MAAM,KAAI,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA,CAAC,EAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EACzH,EAAC,OAAO,EAAE,gCAAgC,EAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7E,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,GAA4B,EAAE,CAAC;IAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;IACpF,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAC,EAAE,EAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,EAAC;QAChG,KAAK,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,EAAC,GAAG,KAAI,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC,CAAC,EAAE,CAAC;QACtG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACnG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;QACrG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,KAAe,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAClF,EAAC,OAAO,EAAE,gCAAgC,EAAC,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,KAAc,CAAC,EAClF,EAAC,OAAO,EAAE,gCAAgC,EAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC"}

package/dist/bootstrapHostScope.d.ts

@@ -0,0 +1,42 @@
+import type { ChildProcess } from 'node:child_process';
+import type { CodexSetupIntent } from './codexSetupAdmission.js';
+export interface CodexBootstrapHostInput {
+    intent: Readonly<CodexSetupIntent>;
+    workspace: string;
+    signal: AbortSignal;
+    /** The owning native host requalifies its binding, package and source policy. */
+    current(): Promise<boolean>;
+    dryRun?: boolean;
+}
+export interface BootstrapHostScope {
+    signal: AbortSignal;
+    current(): Promise<boolean>;
+    assert(): Promise<void>;
+    close(): void;
+    step<T>(operation: () => Promise<T>): Promise<T>;
+}
+export declare function prepareCodexBootstrapHost(input: CodexBootstrapHostInput): {
+    intent: Readonly<CodexSetupIntent>;
+    flags: Map<string, string | boolean>;
+    scope: BootstrapHostScope;
+};
+/** Closed descendants retain the closed scope, never a legacy unscoped fallback. */
+export declare function currentBootstrapHostScope(): BootstrapHostScope | undefined;
+/** Read the original private preparation without entering a nested context. */
+export declare function inspectCodexBootstrapHostPreparation(scope: BootstrapHostScope): Promise<{
+    scope: BootstrapHostScope;
+    intent: Readonly<CodexSetupIntent>;
+    flags: Map<string, string | boolean>;
+}>;
+/** Capture this caller's fresh spawn before any asynchronous post-effect check.
+ * Capturing cleanup remains necessary if cancellation occurred inside spawn. */
+export declare function captureBootstrapHostChild(scope: BootstrapHostScope, child: ChildProcess): void;
+/** Only the original native owner drains captured handles. No raw PID, service
+ * inventory or legacy unscoped authority is used for withdrawal cleanup. */
+export declare function drainBootstrapHostChildren(scope: BootstrapHostScope): Promise<void>;
+export declare function assertBootstrapHostSource(workspace: string, fingerprint: string): Promise<void>;
+export declare function runCodexBootstrapHost<T>(input: CodexBootstrapHostInput, operation: (prepared: ReturnType<typeof prepareCodexBootstrapHost>) => Promise<T>): Promise<T>;
+/** Borrow the original native owner's lifetime; never mint a replacement scope.
+ * The owner, not this continuation, remains responsible for closing it. */
+export declare function runCodexBootstrapHostScope<T>(scope: BootstrapHostScope, operation: (prepared: ReturnType<typeof prepareCodexBootstrapHost>) => Promise<T>): Promise<T>;
+//# sourceMappingURL=bootstrapHostScope.d.ts.map

package/dist/bootstrapHostScope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapHostScope.d.ts","sourceRoot":"","sources":["../src/bootstrapHostScope.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,0BAA0B,CAAC;AAG/D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,iFAAiF;IACjF,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AACD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAClD;AAqBD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,uBAAuB;;;;EAwEvE;AAKD,oFAAoF;AACpF,wBAAgB,yBAAyB,IAAI,kBAAkB,GAAG,SAAS,CAE1E;AAED,+EAA+E;AAC/E,wBAAsB,oCAAoC,CAAC,KAAK,EAAE,kBAAkB;;;;GAOnF;AAED;gFACgF;AAChF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAiB9F;AAED;4EAC4E;AAC5E,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQnF;AAED,wBAAsB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQrG;AAED,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAC3E,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAa/F;AAED;2EAC2E;AAC3E,wBAAsB,0BAA0B,CAAC,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAC3E,SAAS,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAW/F"}