@dharma-ai-labs/agent-fabric 0.2.152 → 0.2.154

package/dist/bootstrapInstallationScope.test.js

@@ -0,0 +1,68 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, readFile, readdir, rm, writeFile } from 'node:fs/promises';
+import { readFileSync, existsSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import test from 'node:test';
+import { loadOrCreateInstallationId } from './index.js';
+import { runCodexBootstrapHost } from './bootstrapHostScope.js';
+async function fixture(t) {
+    const root = await mkdtemp(resolve(tmpdir(), 'dharma-installation-scope-'));
+    t.after(() => rm(root, { recursive: true, force: true }));
+    const now = Date.now(), digest = `sha256:${'a'.repeat(64)}`;
+    const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    return { root, path: resolve(root, 'state', 'installation.json'), input: { workspace: root,
+            signal: new AbortController().signal, current: async () => true, intent: {
+                schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+                organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+                repositoryFingerprint: digest, policyRevision: 'policy-v1', scopeDigest: digest, contractDigest: digest,
+                hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString()
+            } } };
+}
+test('installation creation refuses a closed owning scope before any filesystem effect', async (t) => {
+    const f = await fixture(t);
+    let outcome = [];
+    await assert.rejects(runCodexBootstrapHost(f.input, async (prepared) => {
+        prepared.scope.close();
+        outcome = await Promise.allSettled([loadOrCreateInstallationId(f.path)]);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(outcome[0]?.status, 'rejected');
+    if (outcome[0]?.status === 'rejected')
+        assert.equal(outcome[0].reason.message, 'codex_setup_host_scope_unavailable');
+    assert.deepEqual(await readdir(f.root), []);
+});
+test('installation creation preserves a partial owned file after withdrawal without returning an identity', async (t) => {
+    const f = await fixture(t);
+    let returned = false;
+    await assert.rejects(runCodexBootstrapHost({ ...f.input,
+        current: async () => !existsSync(f.path) || readFileSync(f.path).length === 0 }, async () => { const value = await loadOrCreateInstallationId(f.path); returned = true; return value; }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(returned, false);
+    const value = JSON.parse(await readFile(f.path, 'utf8'));
+    assert.equal(value.schema, 'dharma.installation-identity/v1');
+    assert.match(value.installationId, /^[a-f0-9-]{36}$/);
+    // The cleanup must have closed the acquired handle; this is not a replacement identity.
+    await rm(f.path);
+    assert.deepEqual(await readdir(resolve(f.root, 'state')), []);
+});
+test('installation creation stops after owned acquisition when authority is withdrawn', async (t) => {
+    const f = await fixture(t);
+    await assert.rejects(runCodexBootstrapHost({ ...f.input, current: async () => !existsSync(f.path) }, () => loadOrCreateInstallationId(f.path)), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal((await readFile(f.path)).length, 0);
+    await rm(f.path);
+});
+test('current-scoped installation preserves ordinary durable UUID reuse', async (t) => {
+    const f = await fixture(t);
+    const first = await runCodexBootstrapHost(f.input, () => loadOrCreateInstallationId(f.path));
+    const before = await readFile(f.path, 'utf8');
+    assert.equal(await runCodexBootstrapHost(f.input, () => loadOrCreateInstallationId(f.path)), first);
+    assert.equal(await loadOrCreateInstallationId(f.path), first);
+    assert.equal(await readFile(f.path, 'utf8'), before);
+});
+test('scoped corrupt installation is preserved and parser diagnostics are withheld', async (t) => {
+    const f = await fixture(t), path = resolve(f.root, 'installation.json');
+    const original = '{private-installation-parser-canary';
+    await writeFile(path, original);
+    await assert.rejects(runCodexBootstrapHost(f.input, () => loadOrCreateInstallationId(path)), { message: 'codex_setup_host_installation_failed' });
+    assert.equal(await readFile(path, 'utf8'), original);
+});
+//# sourceMappingURL=bootstrapInstallationScope.test.js.map

package/dist/bootstrapInstallationScope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapInstallationScope.test.js","sourceRoot":"","sources":["../src/bootstrapInstallationScope.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAC,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAC,YAAY,EAAE,UAAU,EAAC,MAAM,SAAS,CAAC;AACjD,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,0BAA0B,EAAC,MAAM,YAAY,CAAC;AACtD,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAE9D,KAAK,UAAU,OAAO,CAAC,CAAyC;IAC9D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IACtF,OAAO,EAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,KAAK,EAAE,EAAC,SAAS,EAAE,IAAI;YACtF,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE;gBACvE,MAAM,EAAE,8BAAuC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC1F,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;gBACtF,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;gBACvG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;aAAC,EAAC,EAAC,CAAC;AAC7H,CAAC;AAED,IAAI,CAAC,kFAAkF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACjG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,OAAO,GAAmC,EAAE,CAAC;IAC7E,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;QACnE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,UAAU;QAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;IACrH,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qGAAqG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACpH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACjD,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK;QACpD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAC,EAChF,KAAK,IAAI,EAAE,GAAE,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAA,CAAC,CAAC,EACrG,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACtD,wFAAwF;IACxF,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iFAAiF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAChG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAC,EAC/F,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAClF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpG,MAAM,CAAC,KAAK,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,qCAAqC,CAAC;IAAC,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,EACzF,EAAC,OAAO,EAAE,sCAAsC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC"}

package/dist/bootstrapLauncherCaller.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bootstrapLauncherCaller.test.d.ts.map

package/dist/bootstrapLauncherCaller.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapLauncherCaller.test.d.ts","sourceRoot":"","sources":["../src/bootstrapLauncherCaller.test.ts"],"names":[],"mappings":""}

package/dist/bootstrapLauncherCaller.test.js

@@ -0,0 +1,91 @@
+import assert from 'node:assert/strict';
+import * as fs from 'node:fs/promises';
+import { existsSync, readFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, resolve } from 'node:path';
+import { runInNewContext } from 'node:vm';
+import test from 'node:test';
+import ts from 'typescript';
+import { currentBootstrapHostScope, runCodexBootstrapHost } from './bootstrapHostScope.js';
+import { writeBootstrapHostText } from './bootstrapHostFiles.js';
+import { stableRepositoryLauncherContents } from './repositoryLaunchers.js';
+async function fixture(t) {
+    const root = await fs.realpath(await fs.mkdtemp(resolve(tmpdir(), 'dharma-launcher-caller-')));
+    t.after(() => fs.rm(root, { recursive: true, force: true }));
+    const now = Date.now(), digest = `sha256:${'a'.repeat(64)}`;
+    const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    return { root, bin: resolve(root, '.dharma', 'bin'), input: { workspace: root,
+            current: async () => true, signal: new AbortController().signal,
+            intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+                organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+                repositoryFingerprint: digest, policyRevision: 'policy-v1', scopeDigest: digest, contractDigest: digest,
+                hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } } };
+}
+// Execute the actual CLI installer declaration with real filesystem effects.
+async function caller() {
+    const source = await fs.readFile(new URL('../src/index.ts', import.meta.url), 'utf8');
+    const ast = ts.createSourceFile('index.ts', source, ts.ScriptTarget.Latest, true);
+    const nodes = ast.statements.filter(node => ts.isFunctionDeclaration(node) && node.name?.text === 'installStableRepositoryLauncher');
+    assert.equal(nodes.length, 1);
+    const output = ts.transpileModule(nodes[0].getText(ast), { compilerOptions: {
+            target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.None
+        }, reportDiagnostics: true });
+    assert.equal(output.diagnostics?.filter(item => item.category === ts.DiagnosticCategory.Error).length, 0);
+    return runInNewContext(`${output.outputText}\ninstallStableRepositoryLauncher`, { ...fs, process, resolve, dirname,
+        currentBootstrapHostScope, writeBootstrapHostText, stableRepositoryLauncherContents, VERSION: '0.2.153' }, { timeout: 1000, contextCodeGeneration: { strings: false, wasm: false } });
+}
+test('actual launcher installer denies a withdrawn owner before creating directories', async (t) => {
+    const f = await fixture(t), install = await caller();
+    await assert.rejects(runCodexBootstrapHost(f.input, async ({ scope }) => {
+        scope.close();
+        return install(f.root);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.deepEqual(await fs.readdir(f.root), []);
+});
+test('actual launcher installer publishes exact pinned bytes under the original owning scope', async (t) => {
+    const f = await fixture(t), install = await caller();
+    const result = await runCodexBootstrapHost(f.input, () => install(f.root));
+    assert.equal(result.shell, '.dharma/bin/dharma');
+    assert.equal(result.windows, '.dharma/bin/dharma.cmd');
+    const expected = stableRepositoryLauncherContents('0.2.153', { platform: process.platform, nodeDirectory: dirname(process.execPath) });
+    assert.equal(await fs.readFile(resolve(f.bin, 'dharma'), 'utf8'), expected.shell);
+    assert.equal(await fs.readFile(resolve(f.bin, 'dharma.cmd'), 'utf8'), expected.windows);
+    assert.deepEqual((await fs.readdir(f.bin)).sort(), ['dharma', 'dharma.cmd']);
+    if (process.platform !== 'win32') {
+        assert.equal((await fs.stat(resolve(f.bin, 'dharma'))).mode & 0o777, 0o700);
+        assert.equal((await fs.stat(resolve(f.bin, 'dharma.cmd'))).mode & 0o777, 0o600);
+    }
+});
+test('actual launcher installer cannot continue to the second file after authority is withdrawn', async (t) => {
+    const f = await fixture(t), install = await caller();
+    await fs.mkdir(f.bin, { recursive: true, mode: 0o700 });
+    await fs.writeFile(resolve(f.bin, 'dharma'), 'prior-shell\n');
+    await fs.writeFile(resolve(f.bin, 'dharma.cmd'), 'prior-cmd\n');
+    const input = { ...f.input, current: async () => readFileSync(resolve(f.bin, 'dharma'), 'utf8') === 'prior-shell\n' };
+    await assert.rejects(runCodexBootstrapHost(input, () => install(f.root)), { message: 'codex_setup_host_scope_unavailable' });
+    assert.match(await fs.readFile(resolve(f.bin, 'dharma'), 'utf8'), /agent-fabric@0\.2\.153/);
+    assert.equal(await fs.readFile(resolve(f.bin, 'dharma.cmd'), 'utf8'), 'prior-cmd\n');
+    // A completed first publication is retained, not falsely reported as rolled back.
+    assert.deepEqual((await fs.readdir(f.bin)).sort(), ['dharma', 'dharma.cmd']);
+});
+test('actual launcher installer rejects an aliased setup directory without writing its target', async (t) => {
+    const f = await fixture(t), other = await fixture(t), install = await caller();
+    await fs.writeFile(resolve(other.root, 'preserve'), 'sibling\n');
+    await fs.symlink(other.root, resolve(f.root, '.dharma'), process.platform === 'win32' ? 'junction' : 'dir');
+    await assert.rejects(runCodexBootstrapHost(f.input, () => install(f.root)), { message: 'codex_setup_host_launcher_path_invalid' });
+    assert.deepEqual(await fs.readdir(other.root), ['preserve']);
+    assert.equal(existsSync(resolve(other.root, 'bin')), false);
+});
+test('actual launcher installer cannot report success after its final publication loses acknowledgement', async (t) => {
+    const f = await fixture(t), install = await caller();
+    const cmd = resolve(f.bin, 'dharma.cmd');
+    await assert.rejects(runCodexBootstrapHost({ ...f.input, current: async () => !existsSync(cmd) }, () => install(f.root)), { message: 'codex_setup_host_scope_unavailable' });
+    assert.match(await fs.readFile(cmd, 'utf8'), /agent-fabric@0\.2\.153/);
+    assert.match(await fs.readFile(resolve(f.bin, 'dharma'), 'utf8'), /agent-fabric@0\.2\.153/);
+});
+test('legacy launcher installation retains its existing supported contents without a native scope', async (t) => {
+    const f = await fixture(t), install = await caller();
+    await install(f.root);
+    assert.match(await fs.readFile(resolve(f.bin, 'dharma'), 'utf8'), /agent-fabric@0\.2\.153/);
+});
+//# sourceMappingURL=bootstrapLauncherCaller.test.js.map

package/dist/bootstrapLauncherCaller.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapLauncherCaller.test.js","sourceRoot":"","sources":["../src/bootstrapLauncherCaller.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAC,UAAU,EAAE,YAAY,EAAC,MAAM,SAAS,CAAC;AACjD,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,OAAO,EAAE,OAAO,EAAC,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAC,eAAe,EAAC,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAC,yBAAyB,EAAE,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAC,gCAAgC,EAAC,MAAM,0BAA0B,CAAC;AAE1E,KAAK,UAAU,OAAO,CAAC,CAAyC;IAC9D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IACtF,OAAO,EAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAC,SAAS,EAAE,IAAI;YACzE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;YAC/D,MAAM,EAAE,EAAC,MAAM,EAAE,8BAAuC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;gBACjG,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;gBACtF,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;gBACvG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,EAAC,CAAC;AAC7H,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,MAAM;IACnB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,iCAAiC,CAAC,CAAC;IACrI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,eAAe,EAAE;YAC1E,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI;SAAC,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1G,OAAO,eAAe,CAAC,GAAG,MAAM,CAAC,UAAU,mCAAmC,EAAE,EAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;QAC/G,yBAAyB,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,OAAO,EAAE,SAAS,EAAC,EACxG,EAAC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAC,EAAC,CAAqE,CAAC;AAC/I,CAAC;AAED,IAAI,CAAC,gFAAgF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC/F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;IACrD,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QACpE,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACvG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,gCAAgC,CAAC,SAAS,EAAE,EAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;IACrI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxF,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC1G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;IACrD,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,eAAe,EAAC,CAAC;IACpH,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IAC3H,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;IACrF,kFAAkF;IAClF,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACxG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;IAC/E,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IACjE,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5G,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,wCAAwC,EAAC,CAAC,CAAC;IACjI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mGAAmG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAClH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EACpH,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6FAA6F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC5G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,CAAC;IACrD,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC"}

package/dist/bootstrapOwnedChildren.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bootstrapOwnedChildren.test.d.ts.map

package/dist/bootstrapOwnedChildren.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapOwnedChildren.test.d.ts","sourceRoot":"","sources":["../src/bootstrapOwnedChildren.test.ts"],"names":[],"mappings":""}

package/dist/bootstrapOwnedChildren.test.js

@@ -0,0 +1,93 @@
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+import { resolve } from 'node:path';
+import test from 'node:test';
+import { captureBootstrapHostChild, drainBootstrapHostChildren, prepareCodexBootstrapHost, runCodexBootstrapHost, runCodexBootstrapHostScope } from './bootstrapHostScope.js';
+import { watchOwnedChild } from './ownedChildLifecycle.js';
+const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+function input() {
+    const now = Date.now(), hash = `sha256:${'a'.repeat(64)}`;
+    return { workspace: resolve('synthetic-source'), signal: new AbortController().signal, current: async () => true,
+        intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+            organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+            repositoryFingerprint: hash, policyRevision: 'policy-v1', scopeDigest: hash, contractDigest: hash,
+            hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } };
+}
+function childFixture() {
+    const child = new EventEmitter();
+    Object.assign(child, { pid: 12345, exitCode: null, signalCode: null });
+    let signals = 0;
+    child.kill = () => { signals++; queueMicrotask(() => child.emit('exit', null, 'SIGTERM')); return true; };
+    return { child, get signals() { return signals; } };
+}
+test('original scope owns a captured child beyond a borrowed continuation, then drains it once', async () => {
+    const prepared = prepareCodexBootstrapHost(input()), f = childFixture();
+    await runCodexBootstrapHostScope(prepared.scope, async () => {
+        captureBootstrapHostChild(prepared.scope, f.child);
+        captureBootstrapHostChild(prepared.scope, f.child);
+    });
+    assert.equal(prepared.scope.signal.aborted, false);
+    assert.equal(f.signals, 0);
+    await Promise.all([drainBootstrapHostChildren(prepared.scope), drainBootstrapHostChildren(prepared.scope)]);
+    assert.equal(f.signals, 1);
+    assert.equal(prepared.scope.signal.aborted, true);
+});
+test('original scope cannot adopt another scope child or capture outside its borrowed frame', async () => {
+    const first = prepareCodexBootstrapHost(input()), second = prepareCodexBootstrapHost(input()), f = childFixture();
+    assert.throws(() => captureBootstrapHostChild(first.scope, f.child), /^Error: codex_setup_host_child_owner_invalid$/);
+    await runCodexBootstrapHostScope(first.scope, async () => captureBootstrapHostChild(first.scope, f.child));
+    await assert.rejects(runCodexBootstrapHostScope(second.scope, async () => captureBootstrapHostChild(second.scope, f.child)), /^Error: codex_setup_host_child_owner_invalid$/);
+    assert.equal(f.signals, 0);
+    await drainBootstrapHostChildren(second.scope);
+    assert.equal(f.signals, 0);
+    await drainBootstrapHostChildren(first.scope);
+    assert.equal(f.signals, 1);
+});
+test('original scope captures an acquired child even when spawn itself triggered withdrawal', async () => {
+    const prepared = prepareCodexBootstrapHost(input()), f = childFixture();
+    await assert.rejects(runCodexBootstrapHostScope(prepared.scope, async () => {
+        prepared.scope.close();
+        captureBootstrapHostChild(prepared.scope, f.child);
+    }), /^Error: codex_setup_host_scope_unavailable$/);
+    await drainBootstrapHostChildren(prepared.scope);
+    assert.equal(f.signals, 1);
+});
+test('original scope drain waits for exit rather than an owned signal error', async () => {
+    const prepared = prepareCodexBootstrapHost(input()), f = childFixture();
+    let settled = false;
+    f.child.kill = () => { f.child.emit('error', new Error('PRIVATE_SIGNAL_CANARY')); return true; };
+    await runCodexBootstrapHostScope(prepared.scope, async () => captureBootstrapHostChild(prepared.scope, f.child));
+    const drain = drainBootstrapHostChildren(prepared.scope).then(() => { settled = true; });
+    await new Promise(done => setImmediate(done));
+    assert.equal(settled, false);
+    f.child.emit('exit', null, 'SIGTERM');
+    await drain;
+    assert.equal(settled, true);
+});
+test('original scope rejects a forged drain and does not signal an uncaptured child', async () => {
+    const original = prepareCodexBootstrapHost(input()), f = childFixture();
+    await assert.rejects(drainBootstrapHostChildren({ ...original.scope }), /^Error: codex_setup_host_child_owner_invalid$/);
+    await drainBootstrapHostChildren(original.scope);
+    assert.equal(f.signals, 0);
+});
+test('direct original scope failure drains only its actual C-only spawned child', async () => {
+    const unrelated = spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'], { stdio: 'ignore' });
+    let owned;
+    try {
+        await assert.rejects(runCodexBootstrapHost(input(), async (prepared) => {
+            owned = spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'], { stdio: 'ignore' });
+            captureBootstrapHostChild(prepared.scope, owned);
+            throw new Error('synthetic continuation failure');
+        }), /^Error: synthetic continuation failure$/);
+        assert.ok(owned && (owned.exitCode !== null || owned.signalCode !== null));
+        assert.equal(unrelated.exitCode, null);
+        assert.equal(unrelated.signalCode, null);
+    }
+    finally {
+        await watchOwnedChild(unrelated).stop({ graceMs: 1000 });
+        if (owned)
+            await watchOwnedChild(owned).stop({ graceMs: 1000 });
+    }
+});
+//# sourceMappingURL=bootstrapOwnedChildren.test.js.map

package/dist/bootstrapOwnedChildren.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapOwnedChildren.test.js","sourceRoot":"","sources":["../src/bootstrapOwnedChildren.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,KAAK,EAAoB,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAC,YAAY,EAAC,MAAM,aAAa,CAAC;AACzC,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,yBAAyB,EAAE,0BAA0B,EAAE,yBAAyB,EACtF,qBAAqB,EAAE,0BAA0B,EAAC,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAC,eAAe,EAAC,MAAM,0BAA0B,CAAC;AAEzD,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;AACtF,SAAS,KAAK;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1D,OAAO,EAAC,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QAC7G,MAAM,EAAE,EAAC,MAAM,EAAE,8BAAuC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACjG,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;YACtF,qBAAqB,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;YACjG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;AAC5H,CAAC;AACD,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,IAAI,YAAY,EAAkB,CAAC;IACjD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAC,CAAC,CAAC;IACrE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,GAAG,GAAG,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA,CAAC,CAAC;IACxG,OAAO,EAAC,KAAK,EAAE,IAAI,OAAO,KAAI,OAAO,OAAO,CAAC,CAAA,CAAC,EAAC,CAAC;AAClD,CAAC;AAED,IAAI,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;IAC1G,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;IACxE,MAAM,0BAA0B,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QAC1D,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACnD,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;IACvG,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;IAClH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,+CAA+C,CAAC,CAAC;IACtH,MAAM,0BAA0B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3G,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EACzH,+CAA+C,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,0BAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;IACvG,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;IACxE,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;QACzE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;IACnD,MAAM,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;IAAC,IAAI,OAAO,GAAG,KAAK,CAAC;IAC7F,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAA,CAAC,CAAC;IAC/F,MAAM,0BAA0B,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,OAAO,GAAG,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC;IACvF,MAAM,IAAI,OAAO,CAAO,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;IACxE,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAC,GAAG,QAAQ,CAAC,KAAK,EAAC,CAAC,EAAE,+CAA+C,CAAC,CAAC;IACvH,MAAM,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAAE,EAAC,KAAK,EAAE,QAAQ,EAAC,CAAC,CAAC;IACpG,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;YACnE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,EAAE,EAAC,KAAK,EAAE,QAAQ,EAAC,CAAC,CAAC;YAC1F,yBAAyB,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC,CAAC,EAAE,yCAAyC,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;YAAS,CAAC;QAAA,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC,CAAC;QAAC,IAAI,KAAK;YAAE,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC,CAAC;IAAA,CAAC;AACpI,CAAC,CAAC,CAAC"}

package/dist/bootstrapPolicyScope.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bootstrapPolicyScope.test.d.ts.map

package/dist/bootstrapPolicyScope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapPolicyScope.test.d.ts","sourceRoot":"","sources":["../src/bootstrapPolicyScope.test.ts"],"names":[],"mappings":""}

package/dist/bootstrapPolicyScope.test.js

@@ -0,0 +1,261 @@
+import assert from 'node:assert/strict';
+import * as fs from 'node:fs/promises';
+import { createHash, generateKeyPairSync, randomUUID } from 'node:crypto';
+import { dirname, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { runInNewContext } from 'node:vm';
+import test from 'node:test';
+import ts from 'typescript';
+import { assertPolicy, loadOrganizationPolicy } from '@dharma-ai-labs/agent-fabric-policy';
+import { signCanonicalObject } from '@dharma-ai-labs/agent-fabric-contracts';
+import { currentBootstrapHostScope, runCodexBootstrapHost } from './bootstrapHostScope.js';
+import { writeBootstrapHostJson } from './bootstrapHostFiles.js';
+import { applyServerEvidencePolicy, pathExistsOrThrow } from './index.js';
+async function fixture(t) {
+    const root = await fs.mkdtemp(resolve(tmpdir(), 'dharma-policy-scope-'));
+    t.after(() => fs.rm(root, { recursive: true, force: true }));
+    await fs.writeFile(resolve(root, 'package.json'), JSON.stringify({ scripts: { test: 'node --test' } }));
+    const now = Date.now(), digest = `sha256:${'a'.repeat(64)}`;
+    const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    return { root, workspaceId: id(5), policyPath: resolve(root, '.dharma', 'approved-policy.json'),
+        input: { workspace: root, current: async () => true, signal: new AbortController().signal,
+            intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+                organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+                repositoryFingerprint: digest, policyRevision: 'policy-v1', scopeDigest: digest, contractDigest: digest,
+                hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } } };
+}
+async function callers(root, overrides = {}) {
+    const source = await fs.readFile(new URL('../src/index.ts', import.meta.url), 'utf8');
+    const ast = ts.createSourceFile('index.ts', source, ts.ScriptTarget.Latest, true);
+    const names = ['materializeWorkspacePolicy', 'workspaceAuthorizationStatePath', 'assertWorkspaceAuthorizationCurrent',
+        'applyWorkspaceAuthorizationAtomically', 'newEvidenceUploadLedger', 'assertEvidenceLedger',
+        'evidenceLedgerForPolicyActivation', 'pathExists', 'acquirePidLock', 'withFileLock', 'writeJsonAtomic'];
+    const declarations = names.map(name => {
+        const nodes = ast.statements.filter(node => ts.isFunctionDeclaration(node) && node.name?.text === name);
+        assert.equal(nodes.length, 1);
+        return nodes[0].getText(ast);
+    });
+    const output = ts.transpileModule(declarations.join('\n'), { compilerOptions: {
+            target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.None
+        }, reportDiagnostics: true });
+    assert.equal(output.diagnostics?.filter(item => item.category === ts.DiagnosticCategory.Error).length, 0);
+    return runInNewContext(`${output.outputText}\n({${names.join(',')}})`, { ...fs, dirname, resolve, createHash, randomUUID,
+        Buffer, process, Date, setTimeout, structuredClone, exports: {}, currentBootstrapHostScope,
+        // VM literals belong to another realm; production callers and the writer
+        // share a realm. Bridge fixture values without replacing actual file IO.
+        writeBootstrapHostJson: (path, value, scope) => writeBootstrapHostJson(path, structuredClone(value), scope),
+        pathExistsOrThrow, assertPolicy, loadOrganizationPolicy, applyServerEvidencePolicy,
+        dharmaHome: () => root, evidenceUploadLedgerPath: () => resolve(root, 'relay', 'evidence-upload-ledger.json'),
+        ...overrides }, { timeout: 1000, contextCodeGeneration: { strings: false, wasm: false } });
+}
+function signed(workspaceId) {
+    const keys = generateKeyPairSync('ed25519'), now = Date.now();
+    const unsigned = { schema: 'dharma.workspace-policy-authorization/v1', organizationId: 'org_demo', workspaceId,
+        policy: { revision: 'signed-test-policy', evidence: { automaticDisclosure: { mode: 'customer_authorized_content',
+                    consentReceiptId: 'synthetic-consent', allowedContentClasses: ['native_provider_payload'] },
+                maximumCapsuleBytes: 1000, maximumDailyUploadBytes: 10000, maximumExpansionBytes: 100,
+                excludePaths: ['**/.env', '**/*.key'], pseudonymizeIdentity: true } },
+        issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString(), keyVersion: 'synthetic' };
+    return { envelope: { ...unsigned, signature: signCanonicalObject(unsigned, keys.privateKey) },
+        publicKey: keys.publicKey.export({ format: 'jwk' }).x };
+}
+test('policy scope refuses materialization and replay inspection before closed-owner reads', async (t) => {
+    const f = await fixture(t);
+    let reads = 0;
+    const c = await callers(f.root, { readFile: async (...args) => { reads++; return fs.readFile(...args); } });
+    for (const replay of [false, true]) {
+        let result = [];
+        await assert.rejects(runCodexBootstrapHost(f.input, async ({ scope }) => {
+            scope.close();
+            result = await Promise.allSettled([replay
+                    ? c.assertWorkspaceAuthorizationCurrent(f.workspaceId, { issuedAt: new Date().toISOString(), signature: 'synthetic' }, false)
+                    : c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'local' })]);
+        }), { message: 'codex_setup_host_scope_unavailable' });
+        assert.equal(result[0]?.status, 'rejected');
+    }
+    assert.equal(reads, 0);
+    await assert.rejects(fs.lstat(f.policyPath), { code: 'ENOENT' });
+});
+test('policy scope cannot swallow cancellation in optional package inspection', async (t) => {
+    const f = await fixture(t);
+    let laterAccess = 0, returned = false;
+    await assert.rejects(runCodexBootstrapHost(f.input, async ({ scope }) => {
+        const c = await callers(f.root, { readFile: async (...args) => {
+                const value = await fs.readFile(...args);
+                scope.close();
+                return value;
+            }, access: async (...args) => { laterAccess++; return fs.access(...args); } });
+        await c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'local' });
+        returned = true;
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(returned, false);
+    assert.equal(laterAccess, 0);
+    await assert.rejects(fs.lstat(f.policyPath), { code: 'ENOENT' });
+});
+test('policy scope snapshots original materialization parameters before asynchronous reads', async (t) => {
+    const f = await fixture(t), input = { workspace: f.root, organizationId: 'org_demo', revision: 'original' };
+    let mutated = false;
+    const c = await callers(f.root, { readFile: async (...args) => {
+            const value = await fs.readFile(...args);
+            if (!mutated) {
+                mutated = true;
+                input.organizationId = 'foreign';
+                input.revision = 'changed';
+            }
+            return value;
+        } });
+    await runCodexBootstrapHost(f.input, async () => {
+        const result = await c.materializeWorkspacePolicy(input);
+        assert.equal(result.policy.organizationId, 'org_demo');
+        assert.equal(result.policy.revision, 'original');
+    });
+});
+test('policy scope stops after native existing-policy load withdraws ownership', async (t) => {
+    const f = await fixture(t), c = await callers(f.root);
+    await c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'original' });
+    let returned = false, laterDirectories = 0;
+    await assert.rejects(runCodexBootstrapHost(f.input, async ({ scope }) => {
+        const bound = await callers(f.root, { mkdir: async (...args) => {
+                if (scope.signal.aborted)
+                    laterDirectories++;
+                return fs.mkdir(...args);
+            }, loadOrganizationPolicy: async (path) => {
+                const value = await loadOrganizationPolicy(path);
+                scope.close();
+                return value;
+            } });
+        await bound.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'new' });
+        returned = true;
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(returned, false);
+    assert.equal(laterDirectories, 0);
+    assert.equal((await loadOrganizationPolicy(f.policyPath)).revision, 'original');
+});
+test('policy scope preserves cancellation classification after replay-state read loss', async (t) => {
+    const f = await fixture(t);
+    let captured;
+    await assert.rejects(runCodexBootstrapHost(f.input, async ({ scope }) => {
+        const c = await callers(f.root, { readFile: async () => {
+                scope.close();
+                throw Object.assign(new Error('private-state-canary'), { code: 'ENOENT' });
+            } });
+        try {
+            await c.assertWorkspaceAuthorizationCurrent(f.workspaceId, { issuedAt: new Date().toISOString(), signature: 'synthetic' }, false);
+        }
+        catch (error) {
+            captured = error;
+            throw error;
+        }
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(captured?.message, 'codex_setup_host_scope_unavailable');
+});
+test('policy scope snapshots signed authorization before replay read', async (t) => {
+    const f = await fixture(t), issuedAt = new Date().toISOString();
+    const state = resolve(f.root, 'registry', 'workspace-authorizations', `${f.workspaceId}.json`);
+    await fs.mkdir(dirname(state), { recursive: true });
+    await fs.writeFile(state, JSON.stringify({ issuedAt, signature: 'original' }));
+    const incoming = { issuedAt, signature: 'original' };
+    const c = await callers(f.root, { readFile: async (...args) => {
+            const value = await fs.readFile(...args);
+            incoming.signature = 'changed';
+            return value;
+        } });
+    await runCodexBootstrapHost(f.input, () => c.assertWorkspaceAuthorizationCurrent(f.workspaceId, incoming));
+});
+test('policy scope refuses unreadable path probes instead of creating replacement authority', async (t) => {
+    const f = await fixture(t), c = await callers(f.root, { access: async () => {
+            throw Object.assign(new Error('private-access-canary'), { code: 'EACCES' });
+        }, pathExistsOrThrow: async () => { throw new Error('private-access-canary'); } });
+    await runCodexBootstrapHost(f.input, async () => {
+        await assert.rejects(c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'local' }), (error) => error.message === 'workspace_policy_materialization_failed' && error.cause === undefined);
+    });
+    await assert.rejects(fs.lstat(f.policyPath), { code: 'ENOENT' });
+});
+test('policy activation scope stops inner replay reads before ledger and policy writes', async (t) => {
+    const f = await fixture(t), c = await callers(f.root);
+    const generated = await c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'original' });
+    const original = await fs.readFile(f.policyPath, 'utf8');
+    const authorization = { issuedAt: new Date().toISOString(), signature: 'synthetic' };
+    let laterReads = 0, laterAccess = 0;
+    await assert.rejects(runCodexBootstrapHost(f.input, async ({ scope }) => {
+        const bound = await callers(f.root, { readFile: async (...args) => {
+                if (scope.signal.aborted)
+                    laterReads++;
+                if (String(args[0]).includes('workspace-authorizations')) {
+                    scope.close();
+                    throw Object.assign(new Error('private-missing-state'), { code: 'ENOENT' });
+                }
+                return fs.readFile(...args);
+            }, access: async (...args) => {
+                if (scope.signal.aborted)
+                    laterAccess++;
+                return fs.access(...args);
+            } });
+        await bound.applyWorkspaceAuthorizationAtomically({ workspaceId: f.workspaceId, authorization,
+            policyPath: f.policyPath, policy: generated.policy });
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(await fs.readFile(f.policyPath, 'utf8'), original);
+    assert.equal(laterReads, 0);
+    assert.equal(laterAccess, 0);
+    const names = await fs.readdir(resolve(f.root, 'registry', 'workspace-authorizations'));
+    assert.deepEqual(names, []);
+});
+test('current policy scope admits an actual signed envelope and persists replay and content ledgers', async (t) => {
+    const f = await fixture(t), c = await callers(f.root), authorization = signed(f.workspaceId);
+    await runCodexBootstrapHost(f.input, async () => {
+        const result = await c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'local',
+            workspaceId: f.workspaceId, serverPolicyAuthorization: authorization.envelope,
+            serverPublicKeyEd25519: authorization.publicKey });
+        assert.equal(result.policy.revision, 'signed-test-policy');
+        assert.equal(result.applied, true);
+    });
+    assert.equal((await loadOrganizationPolicy(f.policyPath)).serverAuthorization?.signature, authorization.envelope.signature);
+    const state = JSON.parse(await fs.readFile(resolve(f.root, 'registry', 'workspace-authorizations', `${f.workspaceId}.json`), 'utf8'));
+    assert.equal(state.signature, authorization.envelope.signature);
+    assert.equal(state.contentLedgerInitialized, true);
+    assert.equal(JSON.parse(await fs.readFile(resolve(f.root, 'relay', 'evidence-upload-ledger.json'), 'utf8')).totalBytes, 0);
+});
+test('policy scope rejects tampered or foreign envelopes without persisting authority', async (t) => {
+    for (const foreign of [false, true]) {
+        const f = await fixture(t), c = await callers(f.root), authorization = signed(f.workspaceId);
+        const envelope = foreign ? { ...authorization.envelope, organizationId: 'org_foreign' }
+            : { ...authorization.envelope, signature: 'tampered' };
+        await runCodexBootstrapHost(f.input, async () => {
+            await assert.rejects(c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'local',
+                workspaceId: f.workspaceId, serverPolicyAuthorization: envelope, serverPublicKeyEd25519: authorization.publicKey }), { message: 'workspace_policy_materialization_failed' });
+        });
+        await assert.rejects(fs.lstat(f.policyPath), { code: 'ENOENT' });
+        await assert.rejects(fs.lstat(resolve(f.root, 'registry')), { code: 'ENOENT' });
+    }
+});
+test('policy scope dry-run verifies a signed envelope without creating any policy or ledger', async (t) => {
+    const f = await fixture(t), c = await callers(f.root), authorization = signed(f.workspaceId);
+    await runCodexBootstrapHost(f.input, async () => {
+        const result = await c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'local',
+            workspaceId: f.workspaceId, serverPolicyAuthorization: authorization.envelope,
+            serverPublicKeyEd25519: authorization.publicKey, dryRun: true });
+        assert.equal(result.policy.revision, 'signed-test-policy');
+        assert.equal(result.applied, false);
+    });
+    assert.deepEqual(await fs.readdir(f.root), ['package.json']);
+});
+test('policy activation scope preserves partial replay evidence but denies the next policy write', async (t) => {
+    const f = await fixture(t), c = await callers(f.root), authorization = signed(f.workspaceId);
+    await c.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'original' });
+    const original = await fs.readFile(f.policyPath, 'utf8');
+    await assert.rejects(runCodexBootstrapHost(f.input, async ({ scope }) => {
+        const bound = await callers(f.root, { writeBootstrapHostJson: async (...args) => {
+                await writeBootstrapHostJson(args[0], structuredClone(args[1]), args[2]);
+                if (args[0].includes('workspace-authorizations'))
+                    scope.close();
+            } });
+        await bound.materializeWorkspacePolicy({ workspace: f.root, organizationId: 'org_demo', revision: 'local',
+            workspaceId: f.workspaceId, serverPolicyAuthorization: authorization.envelope,
+            serverPublicKeyEd25519: authorization.publicKey });
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(await fs.readFile(f.policyPath, 'utf8'), original);
+    const state = JSON.parse(await fs.readFile(resolve(f.root, 'registry', 'workspace-authorizations', `${f.workspaceId}.json`), 'utf8'));
+    assert.equal(state.signature, authorization.envelope.signature);
+    assert.deepEqual(await fs.readdir(resolve(f.root, 'registry', 'workspace-authorizations')), [`${f.workspaceId}.json`]);
+});
+//# sourceMappingURL=bootstrapPolicyScope.test.js.map