@dharma-ai-labs/agent-fabric 0.2.153 → 0.2.155

package/dist/codexSetupNativeWire.test.js

@@ -0,0 +1,243 @@
+import assert from 'node:assert/strict';
+import { randomBytes } from 'node:crypto';
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { resolve } from 'node:path';
+import test from 'node:test';
+import { openCodexAppServerTransport } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-transport';
+import { LocalVault } from '@dharma-ai-labs/agent-fabric-local-vault';
+import { prepareCodexBootstrapHost } from './bootstrapHostScope.js';
+import { openCodexSetupVaultJournal } from './codexSetupVaultJournal.js';
+import { startCodexSetupNativeHost } from './codexSetupNativeHost.js';
+import { createCodexSetupReadinessOwner } from './codexSetupReadiness.js';
+import { bootstrapFromCodexSetup, bootstrapFromCodexSetupScope, loadAgentFabricOnboardingContract } from './index.js';
+import * as cli from './index.js';
+const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+test('native owner composition is exposed through the public CLI library, not a private cross-package import', () => {
+    const publicApi = cli;
+    assert.equal(publicApi.startCodexSetupNativeHost, startCodexSetupNativeHost);
+    assert.equal(publicApi.openCodexSetupVaultJournal, openCodexSetupVaultJournal);
+});
+// Owned stdio child with synthetic native API frames; no provider, model or network.
+const server = `
+const lines = require('node:readline').createInterface({input: process.stdin});
+const send = value => process.stdout.write(JSON.stringify(value) + '\\n');
+let name = '', cwd = '';
+lines.on('line', line => {
+  const value = JSON.parse(line), respond = result => send({id: value.id, result});
+  if (value.method === 'initialize') respond({userAgent: 'native-setup-wire-fixture'});
+  else if (value.method === 'permissionProfile/list') respond({data: [{id: 'dharma_bridge', allowed: true}]});
+  else if (value.method === 'config/read') respond({config: {permissions: {dharma_bridge: {
+    filesystem: {':minimal': 'read', ':workspace_roots': {'.': 'read'}}, network: {enabled: false}}}}});
+  else if (value.method === 'thread/start') {
+    if (value.params.permissions !== 'dharma_bridge' || value.params.dynamicTools.at(-1).name !== 'dharma_setup_reference') process.exit(3);
+    cwd = value.params.cwd; respond({thread: {id: 'synthetic_thread', cwd, name, status: {type: 'idle'}}});
+  } else if (value.method === 'thread/name/set') {name = value.params.name; respond({});}
+  else if (value.method === 'thread/read') respond({thread: {id: 'synthetic_thread', cwd, name, status: {type: 'idle'}}});
+  else if (value.method === 'turn/start') {
+    send({id: 'fixture_call', method: 'item/tool/call', params: {threadId: 'synthetic_thread', turnId: 'synthetic_turn',
+      callId: 'fixture_call', tool: 'dharma_setup_reference', namespace: null,
+      arguments: {operationId: '${id(1)}', setupReference: '${id(2)}'}}});
+    respond({turn: {id: 'synthetic_turn', status: 'inProgress'}});
+  } else if (value.method === 'turn/interrupt') respond({});
+  else if (value.id === 'fixture_call' && value.result) {
+    send({method: 'fixture/disposition', params: value.result});
+    send({method: 'turn/completed', params: {threadId: 'synthetic_thread', turn: {id: 'synthetic_turn', status: 'completed'}}});
+  }
+});
+`;
+async function fixture(run) {
+    const root = await mkdtemp(resolve(tmpdir(), 'fabric-native-setup-wire-'));
+    const workspace = resolve(root, 'source'), now = Date.now();
+    const contract = await loadAgentFabricOnboardingContract();
+    const prepared = prepareCodexBootstrapHost({ workspace, signal: new AbortController().signal, current: async () => true,
+        intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2), organizationId: 'org_demo',
+            recipientMembershipId: id(3), origin: 'https://hq.example', hostContextId: id(4),
+            repositoryFingerprint: `sha256:${'a'.repeat(64)}`, policyRevision: 'policy-v1', scopeDigest: `sha256:${'b'.repeat(64)}`,
+            contractDigest: `sha256:${contract.sha256}`, issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } });
+    const key = randomBytes(32).toString('base64');
+    const store = { backend: 'linux-secret-service', get: async () => key,
+        put: async () => { throw new Error('unexpected fixture key write'); }, delete: async () => { throw new Error('unexpected fixture key deletion'); } };
+    let transport, unsubscribe = () => { };
+    let vault;
+    let readiness;
+    let journalScope;
+    let timer;
+    try {
+        transport = await openCodexAppServerTransport({ command: process.execPath, argv: ['-e', server], cwd: root,
+            environment: process.platform === 'win32' ? { SystemRoot: process.env.SystemRoot } : {}, requestTimeoutMs: 2000,
+            toolCallTimeoutMs: 2000, experimentalApi: true });
+        const owned = transport;
+        const disposition = new Promise((done, fail) => {
+            timer = setTimeout(() => fail(new Error('synthetic_native_disposition_missing')), 5000);
+            unsubscribe = owned.onNotification((raw) => {
+                const event = raw;
+                if (event.method === 'fixture/disposition')
+                    done(event.params);
+            });
+        });
+        const digest = `sha256:${'a'.repeat(64)}`;
+        const observation = { schema: 'dharma.local-codex-setup-readiness/v1',
+            operationId: id(1), organizationId: 'org_demo', membershipId: id(3), deviceId: id(5), workspaceId: id(6),
+            repositoryBindingId: id(7), repositoryAgentId: id(8), endpointId: id(9), sessionBindingId: id(10), sessionId: 'synthetic_thread',
+            repositoryFingerprint: prepared.intent.repositoryFingerprint, policyRevision: prepared.intent.policyRevision,
+            policyHash: digest, manifestHash: digest, catalogHash: digest, bundleId: id(11), bundleHash: digest,
+            activeReceiptHash: digest, roleRevision: 1, roleProfileHash: digest, nativeSkillHash: digest,
+            contractDigest: prepared.intent.contractDigest, cliVersion: '0.2.153', relayPid: 123,
+            relayPolledAt: new Date(now - 500).toISOString(), startupBackend: 'systemd-user', firstLearning: 'no_eligible_history',
+            verifiedAt: new Date(now).toISOString(), expiresAt: prepared.intent.expiresAt };
+        await run({ transport, workspace, name: 'implementer', intent: prepared.intent,
+            openJournal: async (scope) => {
+                journalScope = scope;
+                vault = await LocalVault.open({ root: resolve(root, 'vault'), masterKey: Buffer.from(key, 'base64') }, scope);
+                readiness = createCodexSetupReadinessOwner({ intent: prepared.intent, workspace, scope, vault,
+                    observe: async () => ({ ...observation }) });
+                return openCodexSetupVaultJournal({ root: resolve(root, 'vault'), scope, store });
+            },
+            signal: prepared.scope.signal, current: () => prepared.scope.current(), maximumProviderCostCents: 25,
+            reserve: async () => true, execute: async (_intent, _signal, _current, lease) => {
+                if (!readiness)
+                    throw new Error('fixture_readiness_owner_missing');
+                return readiness.record(lease);
+            },
+            verifyReadiness: async (...args) => readiness ? readiness.verify(...args) : false }, disposition, () => journalScope);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        unsubscribe();
+        prepared.scope.close();
+        try {
+            await transport?.close();
+        }
+        finally {
+            try {
+                await vault?.close();
+            }
+            finally {
+                await rm(root, { recursive: true, force: true });
+            }
+        }
+    }
+}
+test('native registration, encrypted readiness/journal and early-call binding compose over actual owned stdio', async () => {
+    await fixture(async (input, disposition) => {
+        let executed = 0;
+        const execute = input.execute;
+        input.execute = async (...args) => { executed++; return execute(...args); };
+        const host = await startCodexSetupNativeHost(input);
+        try {
+            const result = await disposition;
+            assert.equal(result.success, true);
+            const completed = JSON.parse(result.contentItems[0].text);
+            assert.equal(completed.operationId, id(1));
+            assert.equal(completed.state, 'completed');
+            assert.match(String(completed.readinessReceiptId), /^[a-f0-9-]{36}$/);
+            assert.deepEqual(Object.keys(completed).sort(), ['operationId', 'readinessReceiptId', 'state']);
+            await host.settled;
+            assert.equal(executed, 1);
+        }
+        finally {
+            await host.close();
+        }
+    });
+});
+test('native stdio completion recovers an actual encrypted commit after its acknowledgement is lost', async () => {
+    await fixture(async (input, disposition) => {
+        const openJournal = input.openJournal, execute = input.execute;
+        let executed = 0, committed = 0, reads = 0;
+        input.openJournal = async (scope) => {
+            const journal = await openJournal(scope);
+            return { ...journal,
+                finish: async (...args) => { await journal.finish(...args); committed++; throw new Error('lost-ack-private-canary'); },
+                read: async (...args) => { reads++; return journal.read(...args); } };
+        };
+        input.execute = async (...args) => { executed++; return execute(...args); };
+        const host = await startCodexSetupNativeHost(input);
+        try {
+            const result = await disposition;
+            assert.equal(result.success, true);
+            const completed = JSON.parse(result.contentItems[0].text);
+            assert.equal(completed.operationId, id(1));
+            assert.equal(completed.state, 'completed');
+            assert.match(String(completed.readinessReceiptId), /^[a-f0-9-]{36}$/);
+            assert.deepEqual(Object.keys(completed).sort(), ['operationId', 'readinessReceiptId', 'state']);
+            assert.equal(JSON.stringify(result).includes('lost-ack-private-canary'), false);
+            await host.settled;
+            assert.equal(executed, 1);
+            assert.equal(committed, 1);
+            assert.equal(reads, 1);
+        }
+        finally {
+            await host.close();
+        }
+    });
+});
+test('actual CLI bootstrap guard remains unconfirmed through native registration without consuming a claim', async () => {
+    await fixture(async (input, disposition) => {
+        let bootstrap;
+        input.execute = async (intent, signal, current) => {
+            bootstrap = await bootstrapFromCodexSetup({ intent, signal, current, workspace: input.workspace });
+            return { state: 'unconfirmed', code: 'setup_execution_unconfirmed' };
+        };
+        const host = await startCodexSetupNativeHost(input);
+        try {
+            const result = await disposition;
+            assert.equal(result.success, false);
+            assert.equal(JSON.parse(result.contentItems[0].text).code, 'codex_setup_execution_unconfirmed');
+            await host.settled;
+            assert.ok(bootstrap && typeof bootstrap === 'object' && !Array.isArray(bootstrap));
+            const observed = bootstrap;
+            assert.equal(observed.code, 'codex_setup_host_execution_unqualified');
+            assert.equal(observed.grantRedeemed, false);
+            assert.equal(observed.effects, false);
+        }
+        finally {
+            await host.close();
+        }
+    });
+});
+test('an invented receipt UUID cannot pass the persisted native readiness verifier', async () => {
+    await fixture(async (input, disposition) => {
+        input.execute = async () => ({ state: 'completed', readinessReceiptId: id(99) });
+        const host = await startCodexSetupNativeHost(input);
+        try {
+            const result = await disposition;
+            assert.equal(result.success, false);
+            assert.equal(JSON.parse(result.contentItems[0].text).code, 'codex_setup_execution_unconfirmed');
+            assert.equal(JSON.stringify(result).includes(id(99)), false);
+            await host.settled;
+        }
+        finally {
+            await host.close();
+        }
+    });
+});
+test('actual CLI continuation receives the original native journal scope without ending its owner lifetime', async () => {
+    await fixture(async (input, disposition, journalScope) => {
+        let bootstrap, inherited;
+        input.execute = async (_intent, _signal, _current, _lease, scope) => {
+            inherited = scope;
+            assert.equal(scope, journalScope());
+            bootstrap = await bootstrapFromCodexSetupScope(scope);
+            assert.equal(await scope.current(), true, 'bootstrap settlement must not close native readiness verification');
+            return { state: 'unconfirmed', code: 'setup_execution_unconfirmed' };
+        };
+        const owner = await startCodexSetupNativeHost(input);
+        try {
+            const result = await disposition;
+            assert.equal(result.success, false);
+            await owner.settled;
+            assert.equal(bootstrap?.code, 'codex_setup_host_execution_unqualified');
+            assert.equal(bootstrap?.effects, false);
+            assert.equal(bootstrap?.grantRedeemed, false);
+            assert.ok(inherited);
+            assert.equal(inherited.signal.aborted, true);
+            await assert.rejects(bootstrapFromCodexSetupScope(inherited), { message: 'codex_setup_host_scope_unavailable' });
+        }
+        finally {
+            await owner.close();
+        }
+    });
+});
+//# sourceMappingURL=codexSetupNativeWire.test.js.map

package/dist/codexSetupNativeWire.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupNativeWire.test.js","sourceRoot":"","sources":["../src/codexSetupNativeWire.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AACxC,OAAO,EAAC,OAAO,EAAE,EAAE,EAAC,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,2BAA2B,EAAC,MAAM,6EAA6E,CAAC;AAExH,OAAO,EAAC,UAAU,EAAuD,MAAM,0CAA0C,CAAC;AAC1H,OAAO,EAAC,yBAAyB,EAA0B,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAC,0BAA0B,EAAC,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAC,yBAAyB,EAAC,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAC,8BAA8B,EAAC,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAC,uBAAuB,EAAE,4BAA4B,EAAE,iCAAiC,EAAC,MAAM,YAAY,CAAC;AACpH,OAAO,KAAK,GAAG,MAAM,YAAY,CAAC;AAElC,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;AACtF,IAAI,CAAC,wGAAwG,EAAE,GAAG,EAAE;IAClH,MAAM,SAAS,GAAG,GAA6F,CAAC;IAChH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,0BAA0B,EAAE,0BAA0B,CAAC,CAAC;AACjF,CAAC,CAAC,CAAC;AACH,qFAAqF;AACrF,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;kCAkBmB,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;;;;;;;;CAQlE,CAAC;AAEF,KAAK,UAAU,OAAO,CAAC,GAC8E;IACnG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,iCAAiC,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAC,SAAS,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QACpH,MAAM,EAAE,EAAC,MAAM,EAAE,8BAA8B,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU;YACpH,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;YAChF,qBAAqB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YACvH,cAAc,EAAE,UAAU,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC,CAAC;IAClJ,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAsB,EAAC,OAAO,EAAE,sBAAsB,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG;QACrF,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAA,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;IAClJ,IAAI,SAA8E,EAAE,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC3G,IAAI,KAAmC,CAAC;IACxC,IAAI,SAAwE,CAAC;IAC7E,IAAI,YAA4C,CAAC;IACjD,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,2BAA2B,CAAC,EAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI;YACvG,WAAW,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI;YAC7G,iBAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,MAAM,WAAW,GAAG,IAAI,OAAO,CAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACtD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACxF,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,GAAY,EAAE,EAAE;gBAClD,MAAM,KAAK,GAAG,GAA0C,CAAC;gBACzD,IAAI,KAAK,CAAC,MAAM,KAAK,qBAAqB;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1C,MAAM,WAAW,GAA6B,EAAC,MAAM,EAAE,uCAAuC;YAC5F,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;YACxG,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,kBAAkB;YAChI,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc;YAC5G,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM;YACnG,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM;YAC5F,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG;YACpF,aAAa,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,qBAAqB;YACtH,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAC,CAAC;QACjF,MAAM,GAAG,CAAC,EAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YAC3E,WAAW,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;gBACzB,YAAY,GAAG,KAAK,CAAC;gBACrB,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAC,EAAE,KAAK,CAAC,CAAC;gBAC5G,SAAS,GAAG,8BAA8B,CAAC,EAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK;oBAC1F,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,GAAG,WAAW,EAAC,CAAC,EAAC,CAAC,CAAC;gBAC5C,OAAO,0BAA0B,CAAC,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,wBAAwB,EAAE,EAAE;YACpG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;gBAC9E,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACnE,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,eAAe,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;IACzH,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,WAAW,EAAE,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtE,IAAI,CAAC;YAAA,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC;QAAA,CAAC;gBAAS,CAAC;YACvC,IAAI,CAAC;gBAAA,MAAM,KAAK,EAAE,KAAK,EAAE,CAAC;YAAA,CAAC;oBAAS,CAAC;gBAAA,MAAM,EAAE,CAAC,IAAI,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;YAAA,CAAC;QACvF,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,CAAC,yGAAyG,EAAE,KAAK,IAAI,EAAE;IACzH,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QACzC,IAAI,QAAQ,GAAG,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAChD,KAAK,CAAC,OAAO,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,GAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAsE,CAAC;YAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAA4B,CAAC;YACtF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACvF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACtE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;YAChG,MAAM,IAAI,CAAC,OAAO,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;gBAAS,CAAC;YAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;IAC/G,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QACzC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC/D,IAAI,QAAQ,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;QAC3C,KAAK,CAAC,WAAW,GAAG,KAAK,EAAC,KAAK,EAAC,EAAE;YAChC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO,EAAC,GAAG,OAAO;gBAChB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,GAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAA,CAAC;gBACpH,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC;QACvE,CAAC,CAAC;QACF,KAAK,CAAC,OAAO,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,GAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAsE,CAAC;YAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAA4B,CAAC;YACtF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACvF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACtE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC;YAChG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC,CAAC;YAChF,MAAM,IAAI,CAAC,OAAO,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;gBAAS,CAAC;YAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;IACtH,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QACzC,IAAI,SAAkB,CAAC;QACvB,KAAK,CAAC,OAAO,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YAChD,SAAS,GAAG,MAAM,uBAAuB,CAAC,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAC,CAAC,CAAC;YACjG,OAAO,EAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,6BAA6B,EAAC,CAAC;QACrE,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAsE,CAAC;YAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;YACtI,MAAM,IAAI,CAAC,OAAO,CAAC;YACnB,MAAM,CAAC,EAAE,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACnF,MAAM,QAAQ,GAAG,SAAoC,CAAC;YACtD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;YACtE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrF,CAAC;gBAAS,CAAC;YAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QACzC,KAAK,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAsE,CAAC;YAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;YACjG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7D,MAAM,IAAI,CAAC,OAAO,CAAC;QACrB,CAAC;gBAAS,CAAC;YAAA,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;IACtH,MAAM,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE;QACvD,IAAI,SAA8C,EAAE,SAAyC,CAAC;QAC9F,KAAK,CAAC,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YAClE,SAAS,GAAG,KAAK,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACvD,SAAS,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAA4B,CAAC;YACjF,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,mEAAmE,CAAC,CAAC;YAC/G,OAAO,EAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,6BAA6B,EAAC,CAAC;QACrE,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAiC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,OAAO,CAAC;YACzD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;YACxE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;YACvF,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnE,MAAM,MAAM,CAAC,OAAO,CAAC,4BAA4B,CAAC,SAAS,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;QACjH,CAAC;gBAAS,CAAC;YAAA,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAA,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/codexSetupOwnedConnection.d.ts

@@ -0,0 +1,14 @@
+/** Internal controller connection, not a model-selected command or transport. */
+export declare function openCodexSetupOwnedConnection(input: {
+    workspace: string;
+    deviceHome: string;
+    expectedAccountEmail: string;
+    signal: AbortSignal;
+    current(): Promise<boolean>;
+}): Promise<Readonly<{
+    transport: import("@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-transport").CodexStdioTransport;
+    additionalFilesystemRules: Readonly<Record<string, "read" | "deny">>;
+    current: () => Promise<boolean>;
+    close: () => Promise<void>;
+}>>;
+//# sourceMappingURL=codexSetupOwnedConnection.d.ts.map

package/dist/codexSetupOwnedConnection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupOwnedConnection.d.ts","sourceRoot":"","sources":["../src/codexSetupOwnedConnection.ts"],"names":[],"mappings":"AAOA,iFAAiF;AACjF,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAC;IACpE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAClD;;;;;IAiDA"}

package/dist/codexSetupOwnedConnection.js

@@ -0,0 +1,64 @@
+import { homedir } from 'node:os';
+import { resolve } from 'node:path';
+import { openCodexAppServerTransport } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-transport';
+import { verifyCodexSetupReadOnlyProfile } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
+import { namedCodexEnvironment } from './namedCodexEnvironment.js';
+import { namedCodexFilesystem } from './namedCodexFilesystem.js';
+/** Internal controller connection, not a model-selected command or transport. */
+export async function openCodexSetupOwnedConnection(input) {
+    if (process.platform !== 'linux' || !input.expectedAccountEmail
+        || input.expectedAccountEmail.length > 254 || /[\s\u0000-\u001f\u007f]/.test(input.expectedAccountEmail)) {
+        throw new Error('codex_setup_owned_route_unqualified');
+    }
+    const assert = async () => {
+        if (input.signal.aborted || !await input.current() || input.signal.aborted) {
+            throw new Error('codex_setup_host_scope_unavailable');
+        }
+    };
+    await assert();
+    const environment = namedCodexEnvironment(process.env);
+    const privateRoots = [input.deviceHome, resolve(environment.CODEX_HOME || resolve(homedir(), '.codex'))];
+    if (environment.XDG_RUNTIME_DIR)
+        privateRoots.push(environment.XDG_RUNTIME_DIR);
+    if (environment.DBUS_SESSION_BUS_ADDRESS)
+        privateRoots.push(environment.DBUS_SESSION_BUS_ADDRESS.slice('unix:path='.length));
+    const filesystem = await namedCodexFilesystem({ environment, workspace: input.workspace, privateRoots, writeRoots: [] });
+    await assert();
+    const transport = await openCodexAppServerTransport({ command: 'codex', cwd: input.workspace,
+        environment, experimentalApi: true, toolCallTimeoutMs: 60_000, setupApprovalTimeoutMs: 900_000,
+        argv: ['-c', 'apps._default.enabled=false', '-c', 'default_permissions="dharma_bridge"',
+            '-c', `permissions.dharma_bridge.filesystem=${filesystem.peer}`,
+            '-c', 'permissions.dharma_bridge.network={enabled=false}', 'app-server'] });
+    let closing;
+    const close = () => closing ??= transport.close();
+    const abort = () => { void close().catch(() => { }); };
+    input.signal.addEventListener('abort', abort, { once: true });
+    const current = async () => {
+        if (input.signal.aborted || transport.signal.aborted || !await input.current())
+            return false;
+        const result = await transport.request('account/read', { refreshToken: false });
+        return !input.signal.aborted && !transport.signal.aborted
+            && result?.account?.type === 'chatgpt' && result.account.email === input.expectedAccountEmail
+            && await input.current() && !input.signal.aborted && !transport.signal.aborted;
+    };
+    try {
+        await assert();
+        if (!await current())
+            throw new Error('codex_setup_owned_account_unconfirmed');
+        await verifyCodexSetupReadOnlyProfile(transport, input.workspace, { async step(operation) { await assert(); const result = await operation(); await assert(); return result; } }, filesystem.additionalFilesystemRules);
+        await assert();
+        return Object.freeze({ transport, additionalFilesystemRules: filesystem.additionalFilesystemRules, current,
+            close: async () => { input.signal.removeEventListener('abort', abort); await close(); } });
+    }
+    catch {
+        input.signal.removeEventListener('abort', abort);
+        try {
+            await close();
+        }
+        catch {
+            throw new Error('codex_setup_owned_close_unconfirmed');
+        }
+        throw new Error('codex_setup_owned_connection_unqualified');
+    }
+}
+//# sourceMappingURL=codexSetupOwnedConnection.js.map

package/dist/codexSetupOwnedConnection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupOwnedConnection.js","sourceRoot":"","sources":["../src/codexSetupOwnedConnection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAC;AAChC,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,2BAA2B,EAAC,MAAM,6EAA6E,CAAC;AACxH,OAAO,EAAC,+BAA+B,EAAC,MAAM,2EAA2E,CAAC;AAC1H,OAAO,EAAC,qBAAqB,EAAC,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAC,oBAAoB,EAAC,MAAM,2BAA2B,CAAC;AAE/D,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAGnD;IACC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB;WAC1D,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,EAAE,CAAC;IACf,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,WAAW,CAAC,eAAe;QAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAChF,IAAI,WAAW,CAAC,wBAAwB;QAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7H,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,EAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAC,CAAC,CAAC;IACvH,MAAM,MAAM,EAAE,CAAC;IACf,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,EAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS;QACzF,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,sBAAsB,EAAE,OAAO;QAC9F,IAAI,EAAE,CAAC,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,qCAAqC;YACrF,IAAI,EAAE,wCAAwC,UAAU,CAAC,IAAI,EAAE;YAC/D,IAAI,EAAE,mDAAmD,EAAE,YAAY,CAAC,EAAC,CAAC,CAAC;IAC/E,IAAI,OAAkC,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,EAAE,GAAE,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IACpD,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QAC7F,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAC,YAAY,EAAE,KAAK,EAAC,CAE3E,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO;eACpD,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,oBAAoB;eAC1F,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;IACnF,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC/E,MAAM,+BAA+B,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAC9D,EAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAG,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,CAAA,CAAC,EAAC,EAC1G,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACxC,MAAM,MAAM,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,SAAS,EAAE,yBAAyB,EAAE,UAAU,CAAC,yBAAyB,EAAE,OAAO;YACvG,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC;YAAA,MAAM,KAAK,EAAE,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAAA,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/codexSetupOwnedConnection.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codexSetupOwnedConnection.test.d.ts.map

package/dist/codexSetupOwnedConnection.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupOwnedConnection.test.d.ts","sourceRoot":"","sources":["../src/codexSetupOwnedConnection.test.ts"],"names":[],"mappings":""}

package/dist/codexSetupOwnedConnection.test.js

@@ -0,0 +1,192 @@
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { compileFunction } from 'node:vm';
+import test from 'node:test';
+import ts from 'typescript';
+import { prepareCodexBootstrapHost } from './bootstrapHostScope.js';
+// Actual declarations with explicitly synthetic provider/filesystem boundaries.
+async function declaration(file, name, dependencies) {
+    const source = await readFile(new URL(`../src/${file}`, import.meta.url), 'utf8');
+    const ast = ts.createSourceFile(file, source, ts.ScriptTarget.Latest, true);
+    const matches = ast.statements.filter(node => ts.isFunctionDeclaration(node) && node.name?.text === name);
+    assert.equal(matches.length, 1);
+    const compiled = ts.transpileModule(matches[0].getText(ast), { compilerOptions: {
+            target: ts.ScriptTarget.ES2023, module: ts.ModuleKind.CommonJS
+        }, reportDiagnostics: true });
+    assert.equal(compiled.diagnostics?.filter(d => d.category === ts.DiagnosticCategory.Error).length, 0);
+    return compileFunction(`${compiled.outputText}\nreturn ${name};`, ['exports', ...Object.keys(dependencies)])({}, ...Object.values(dependencies));
+}
+async function connectionFixture() {
+    const signal = new AbortController();
+    let allowed = true, account = 'synthetic@example.test';
+    let launches = 0, closes = 0, profileFails = false, filesystemFails = false;
+    let launch, filesystem;
+    const transport = { signal: new AbortController().signal,
+        async request(method, params) {
+            assert.equal(method, 'account/read');
+            assert.deepEqual(params, { refreshToken: false });
+            return { account: { type: 'chatgpt', email: account } };
+        }, async close() { closes++; } };
+    const open = await declaration('codexSetupOwnedConnection.ts', 'openCodexSetupOwnedConnection', {
+        process: { platform: 'linux', env: { SYNTHETIC_SECRET: 'must-not-be-forwarded' } }, resolve,
+        homedir: () => resolve('synthetic-provider-parent'),
+        namedCodexEnvironment: () => ({ PATH: '/synthetic/public/bin', CODEX_HOME: resolve('synthetic-provider-private') }),
+        namedCodexFilesystem: async (input) => {
+            filesystem = input;
+            if (filesystemFails)
+                throw new Error('synthetic filesystem failure');
+            return { peer: 'synthetic-readonly-profile', additionalFilesystemRules: { synthetic: 'deny' } };
+        },
+        openCodexAppServerTransport: async (input) => { launch = input; launches++; return transport; },
+        verifyCodexSetupReadOnlyProfile: async (_transport, _workspace, scope) => {
+            assert.equal(_transport, transport);
+            await scope.step(async () => { if (profileFails)
+                throw new Error('private vendor exception'); });
+        },
+    });
+    const input = { workspace: resolve('synthetic-source'), deviceHome: resolve('synthetic-device-private'),
+        expectedAccountEmail: 'synthetic@example.test', signal: signal.signal, current: async () => allowed };
+    return { open, input, signal, transport, setAllowed(value) { allowed = value; },
+        setAccount(value) { account = value; }, failProfile() { profileFails = true; }, failFilesystem() { filesystemFails = true; },
+        get counts() { return { launches, closes }; }, get launch() { return launch; }, get filesystem() { return filesystem; } };
+}
+test('owning connection uses fixed official readonly launch and denies private roots', async () => {
+    const f = await connectionFixture(), connection = await f.open({ ...f.input, command: 'foreign', transport: 'foreign' });
+    assert.equal(connection.transport, f.transport);
+    assert.equal(f.launch.command, 'codex');
+    assert.equal(f.launch.environment.SYNTHETIC_SECRET, undefined);
+    assert.deepEqual(f.filesystem.writeRoots, []);
+    assert.ok(f.filesystem.privateRoots.includes(f.input.deviceHome));
+    assert.ok(f.launch.argv.includes('apps._default.enabled=false'));
+    assert.ok(f.launch.argv.includes('permissions.dharma_bridge.network={enabled=false}'));
+    assert.equal(await connection.current(), true);
+    f.setAccount('foreign@example.test');
+    assert.equal(await connection.current(), false);
+    await connection.close();
+    await connection.close();
+    assert.equal(f.counts.closes, 1);
+});
+for (const cause of ['withdrawn', 'cancelled', 'filesystem']) {
+    test(`owning connection stops ${cause} before spawning`, async () => {
+        const f = await connectionFixture();
+        if (cause === 'withdrawn')
+            f.setAllowed(false);
+        if (cause === 'cancelled')
+            f.signal.abort();
+        if (cause === 'filesystem')
+            f.failFilesystem();
+        await assert.rejects(f.open(f.input));
+        assert.equal(f.counts.launches, 0);
+    });
+}
+for (const cause of ['account', 'profile']) {
+    test(`owning connection closes its actual handle on ${cause} failure without exposing vendor details`, async () => {
+        const f = await connectionFixture();
+        if (cause === 'account')
+            f.setAccount('foreign@example.test');
+        else
+            f.failProfile();
+        await assert.rejects(f.open(f.input), /^Error: codex_setup_owned_connection_unqualified$/);
+        assert.deepEqual(f.counts, { launches: 1, closes: 1 });
+    });
+}
+test('owning connection cancellation cooperatively closes only its captured transport', async () => {
+    const f = await connectionFixture(), connection = await f.open(f.input);
+    f.signal.abort();
+    assert.equal(await connection.current(), false);
+    await connection.close();
+    assert.equal(f.counts.closes, 1);
+});
+async function controllerFixture() {
+    const now = Date.now(), id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    let allowed = true, connections = 0, starts = 0, connectionCloses = 0, hostCloses = 0;
+    let started, settle, failStart = false, withdrawAfterStart = false, sourceMatches = true, contractMatches = true;
+    const settled = new Promise(done => { settle = done; });
+    const connection = { transport: { original: true }, additionalFilesystemRules: { private: 'deny' },
+        current: async () => allowed, close: async () => { connectionCloses++; } };
+    const open = await declaration('index.ts', 'openCodexBootstrapNativeHost', { prepareCodexBootstrapHost,
+        currentBootstrapHostScope: () => undefined,
+        preflightBootstrapWorkspaceIdentity: async () => ({ fingerprint: `sha256:${(sourceMatches ? 'a' : 'e').repeat(64)}` }),
+        loadAgentFabricOnboardingContract: async () => ({ sha256: (contractMatches ? 'c' : 'e').repeat(64) }),
+        dharmaHome: () => resolve('synthetic-device-private'),
+        openCodexSetupOwnedConnection: async () => { connections++; return connection; },
+        startCodexBootstrapNativeHost: async (input) => {
+            starts++;
+            started = input;
+            if (failStart)
+                throw new Error('secret provider details');
+            if (withdrawAfterStart)
+                allowed = false;
+            return { threadId: 'fixture-thread', turnId: 'fixture-turn', settled, close: async () => { hostCloses++; settle(); } };
+        } });
+    const input = { workspace: resolve('synthetic-source'), name: 'implementer', signal: new AbortController().signal,
+        current: async () => allowed, reserve: async () => true, maximumProviderCostCents: 25,
+        expectedAccountEmail: 'synthetic@example.test', intent: { schema: 'dharma.codex-setup-intent/v1',
+            operationId: id(1), setupReference: id(2), organizationId: 'org_demo', recipientMembershipId: id(3),
+            hostContextId: id(4), origin: 'https://hq.example', repositoryFingerprint: `sha256:${'a'.repeat(64)}`,
+            scopeDigest: `sha256:${'b'.repeat(64)}`, contractDigest: `sha256:${'c'.repeat(64)}`, policyRevision: 'policy-v1',
+            issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } };
+    return { open, input, connection, settle, get started() { return started; },
+        setAllowed(value) { allowed = value; }, failStart() { failStart = true; }, withdrawAfterStart() { withdrawAfterStart = true; },
+        failSource() { sourceMatches = false; }, failContract() { contractMatches = false; },
+        get counts() { return { connections, starts, connectionCloses, hostCloses }; } };
+}
+test('official controller carries only its owned connection and original budget into native composition', async () => {
+    const f = await controllerFixture(), host = await f.open({ ...f.input, transport: { foreign: true } });
+    assert.equal(f.started.transport, f.connection.transport);
+    assert.equal(f.started.current, f.connection.current);
+    assert.equal(f.started.reserve, f.input.reserve);
+    assert.equal(f.started.maximumProviderCostCents, 25);
+    assert.notEqual(f.started.intent, f.input.intent);
+    assert.deepEqual(f.started.intent, f.input.intent);
+    await host.close();
+    await host.settled;
+    assert.deepEqual(f.counts, { connections: 1, starts: 1, connectionCloses: 1, hostCloses: 1 });
+});
+test('terminal native turn releases its owning connection without caller cleanup', async () => {
+    const f = await controllerFixture(), host = await f.open(f.input);
+    f.settle();
+    await host.settled;
+    assert.equal(f.counts.connectionCloses, 1);
+});
+for (const field of ['name', 'reserve', 'maximumProviderCostCents', 'intent']) {
+    test(`controller rejects invalid ${field} before connection effects`, async () => {
+        const f = await controllerFixture();
+        const changed = field === 'name' ? '../foreign' : field === 'reserve' ? undefined
+            : field === 'maximumProviderCostCents' ? 0 : { ...f.input.intent, setupReference: 'invalid' };
+        await assert.rejects(f.open({ ...f.input, [field]: changed }));
+        assert.equal(f.counts.connections, 0);
+    });
+}
+test('controller refuses withdrawn scope before launching its native connection', async () => {
+    const f = await controllerFixture();
+    f.setAllowed(false);
+    await assert.rejects(f.open(f.input), /codex_setup_owned_start_unqualified/);
+    assert.equal(f.counts.connections, 0);
+});
+for (const cause of ['source', 'contract']) {
+    test(`controller refuses mismatched ${cause} before any provider connection`, async () => {
+        const f = await controllerFixture();
+        if (cause === 'source')
+            f.failSource();
+        else
+            f.failContract();
+        await assert.rejects(f.open(f.input), /codex_setup_owned_start_unqualified/);
+        assert.equal(f.counts.connections, 0);
+    });
+}
+test('controller drains a captured connection after native startup failure', async () => {
+    const f = await controllerFixture();
+    f.failStart();
+    await assert.rejects(f.open(f.input), /^Error: codex_setup_owned_start_unqualified$/);
+    assert.equal(f.counts.connectionCloses, 1);
+});
+test('controller drains both captured owners when authority withdraws during startup', async () => {
+    const f = await controllerFixture();
+    f.withdrawAfterStart();
+    await assert.rejects(f.open(f.input), /^Error: codex_setup_owned_start_unqualified$/);
+    assert.equal(f.counts.connectionCloses, 1);
+    assert.equal(f.counts.hostCloses, 1);
+});
+//# sourceMappingURL=codexSetupOwnedConnection.test.js.map

package/dist/codexSetupOwnedConnection.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupOwnedConnection.test.js","sourceRoot":"","sources":["../src/codexSetupOwnedConnection.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,QAAQ,EAAC,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,eAAe,EAAC,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAC,yBAAyB,EAAC,MAAM,yBAAyB,CAAC;AAElE,gFAAgF;AAChF,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,YAAqC;IAC1F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC;IAC1G,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,eAAe,EAAE;YAC9E,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ;SAAC,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC,CAAC;IAC7F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtG,OAAO,eAAe,CAAC,GAAG,QAAQ,CAAC,UAAU,YAAY,IAAI,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAC1G,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAqD,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IAAC,IAAI,OAAO,GAAG,IAAI,EAAE,OAAO,GAAG,wBAAwB,CAAC;IAC7F,IAAI,QAAQ,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,YAAY,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK,CAAC;IAC5E,IAAI,MAAW,EAAE,UAAe,CAAC;IACjC,MAAM,SAAS,GAAG,EAAC,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;QACrD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,MAAe;YAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAC,YAAY,EAAE,KAAK,EAAC,CAAC,CAAC;YACtF,OAAO,EAAC,OAAO,EAAE,EAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAC,EAAC,CAAC;QACtD,CAAC,EAAE,KAAK,CAAC,KAAK,KAAI,MAAM,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,8BAA8B,EAAE,+BAA+B,EAAE;QAC9F,OAAO,EAAE,EAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,EAAC,gBAAgB,EAAE,uBAAuB,EAAC,EAAC,EAAE,OAAO;QACvF,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;QACnD,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAC,IAAI,EAAE,uBAAuB,EAAE,UAAU,EAAE,OAAO,CAAC,4BAA4B,CAAC,EAAC,CAAC;QACjH,oBAAoB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAC7C,UAAU,GAAG,KAAK,CAAC;YAAC,IAAI,eAAe;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACzF,OAAO,EAAC,IAAI,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,EAAC,SAAS,EAAE,MAAM,EAAC,EAAC,CAAC;QAC9F,CAAC;QACD,2BAA2B,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,GAAE,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,SAAS,CAAC,CAAA,CAAC;QACtG,+BAA+B,EAAE,KAAK,EAAE,UAAmB,EAAE,UAAkB,EAAE,KAAU,EAAE,EAAE;YAC7F,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,GAAE,IAAI,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QACtI,CAAC;KACF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,EAAC,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,0BAA0B,CAAC;QACpG,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAC,CAAC;IACvG,OAAO,EAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,KAAc,IAAG,OAAO,GAAG,KAAK,CAAC,CAAA,CAAC;QACnF,UAAU,CAAC,KAAa,IAAG,OAAO,GAAG,KAAK,CAAC,CAAA,CAAC,EAAE,WAAW,KAAI,YAAY,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,cAAc,KAAI,eAAe,GAAG,IAAI,CAAC,CAAA,CAAC;QAC9H,IAAI,MAAM,KAAI,OAAO,EAAC,QAAQ,EAAE,MAAM,EAAC,CAAC,CAAA,CAAC,EAAE,IAAI,MAAM,KAAI,OAAO,MAAM,CAAC,CAAA,CAAC,EAAE,IAAI,UAAU,KAAI,OAAO,UAAU,CAAC,CAAA,CAAC,EAAC,CAAC;AACrH,CAAC;AAED,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAC,CAAC,CAAC;IACvH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACjH,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,mDAAmD,CAAC,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACtF,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,CAAU,EAAE,CAAC;IACtE,IAAI,CAAC,2BAA2B,KAAK,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACpC,IAAI,KAAK,KAAK,WAAW;YAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,WAAW;YAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5C,IAAI,KAAK,KAAK,YAAY;YAAE,CAAC,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,SAAS,CAAU,EAAE,CAAC;IACpD,IAAI,CAAC,iDAAiD,KAAK,0CAA0C,EAAE,KAAK,IAAI,EAAE;QAChH,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;;YAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACpF,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,mDAAmD,CAAC,CAAC;QAC3F,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IACxG,IAAI,OAAO,GAAG,IAAI,EAAE,WAAW,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,gBAAgB,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC;IACtF,IAAI,OAAY,EAAE,MAAmB,EAAE,SAAS,GAAG,KAAK,EAAE,kBAAkB,GAAG,KAAK,EAAE,aAAa,GAAG,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IACnI,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,IAAI,CAAC,EAAE,GAAE,MAAM,GAAG,IAAI,CAAC,CAAA,CAAC,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,EAAC,SAAS,EAAE,EAAC,QAAQ,EAAE,IAAI,EAAC,EAAE,yBAAyB,EAAE,EAAC,OAAO,EAAE,MAAM,EAAC;QAC3F,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,gBAAgB,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,8BAA8B,EAAE,EAAC,yBAAyB;QACnG,yBAAyB,EAAE,GAAG,EAAE,CAAC,SAAS;QAC1C,mCAAmC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,WAAW,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAC,CAAC;QACpH,iCAAiC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAC,CAAC;QACnG,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;QACrD,6BAA6B,EAAE,KAAK,IAAI,EAAE,GAAE,WAAW,EAAE,CAAC,CAAC,OAAO,UAAU,CAAC,CAAA,CAAC;QAC9E,6BAA6B,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YACtD,MAAM,EAAE,CAAC;YAAC,OAAO,GAAG,KAAK,CAAC;YAAC,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACrF,IAAI,kBAAkB;gBAAE,OAAO,GAAG,KAAK,CAAC;YACxC,OAAO,EAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC;QACrH,CAAC,EAAC,CAAC,CAAC;IACN,MAAM,KAAK,GAAG,EAAC,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;QAC9G,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,EAAE,EAAE;QACrF,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,EAAE,EAAC,MAAM,EAAE,8BAA8B;YAC7F,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC;YACnG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YACrG,WAAW,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,WAAW;YAChH,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;IACpG,OAAO,EAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,OAAO,KAAI,OAAO,OAAO,CAAC,CAAA,CAAC;QACtE,UAAU,CAAC,KAAc,IAAG,OAAO,GAAG,KAAK,CAAC,CAAA,CAAC,EAAE,SAAS,KAAI,SAAS,GAAG,IAAI,CAAC,CAAA,CAAC,EAAE,kBAAkB,KAAI,kBAAkB,GAAG,IAAI,CAAC,CAAA,CAAC;QACjI,UAAU,KAAI,aAAa,GAAG,KAAK,CAAC,CAAA,CAAC,EAAE,YAAY,KAAI,eAAe,GAAG,KAAK,CAAC,CAAA,CAAC;QAChF,IAAI,MAAM,KAAI,OAAO,EAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAC,CAAC,CAAA,CAAC,EAAC,CAAC;AAChF,CAAC;AACD,IAAI,CAAC,mGAAmG,EAAE,KAAK,IAAI,EAAE;IACnH,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAC,OAAO,EAAE,IAAI,EAAC,EAAC,CAAC,CAAC;IACnG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACjH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACvG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,MAAM,IAAI,CAAC,OAAO,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAC,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAC,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC,CAAC,MAAM,EAAE,CAAC;IAAC,MAAM,IAAI,CAAC,OAAO,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,0BAA0B,EAAE,QAAQ,CAAU,EAAE,CAAC;IACvF,IAAI,CAAC,8BAA8B,KAAK,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS;YAC/E,CAAC,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAC,CAAC;QAC9F,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,qCAAqC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACtH,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAU,EAAE,CAAC;IACpD,IAAI,CAAC,iCAAiC,KAAK,iCAAiC,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAAC,IAAI,KAAK,KAAK,QAAQ;YAAE,CAAC,CAAC,UAAU,EAAE,CAAC;;YAAM,CAAC,CAAC,YAAY,EAAE,CAAC;QACnG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,8CAA8C,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,CAAC,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAC5D,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,8CAA8C,CAAC,CAAC;IACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AACnF,CAAC,CAAC,CAAC"}

package/dist/codexSetupPortalCommand.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codexSetupPortalCommand.test.d.ts.map

package/dist/codexSetupPortalCommand.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalCommand.test.d.ts","sourceRoot":"","sources":["../src/codexSetupPortalCommand.test.ts"],"names":[],"mappings":""}