@dharma-ai-labs/agent-fabric 0.2.153 → 0.2.155

package/dist/repositoryKnowledgeScope.test.js

@@ -0,0 +1,316 @@
+import assert from 'node:assert/strict';
+import * as fs from 'node:fs/promises';
+import * as syncFs from 'node:fs';
+import * as crypto from 'node:crypto';
+import * as path from 'node:path';
+import * as url from 'node:url';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { runInNewContext } from 'node:vm';
+import test from 'node:test';
+import ts from 'typescript';
+import { currentBootstrapHostScope, runCodexBootstrapHost } from './bootstrapHostScope.js';
+const skill = '.agents/skills/dharma-agent-fabric';
+function input(workspace) {
+    const id = (n) => `${String(n).padStart(8, '0')}-1111-4111-8111-111111111111`;
+    const now = Date.now(), digest = `sha256:${'a'.repeat(64)}`;
+    return { workspace, current: async () => true, signal: new AbortController().signal,
+        intent: { schema: 'dharma.codex-setup-intent/v1', operationId: id(1), setupReference: id(2),
+            organizationId: 'org_demo', recipientMembershipId: id(3), origin: 'https://hq.example',
+            repositoryFingerprint: digest, policyRevision: 'policy-v1', scopeDigest: digest, contractDigest: digest,
+            hostContextId: id(4), issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() } };
+}
+async function fixture(t) {
+    const workspace = await fs.mkdtemp(path.join(tmpdir(), 'dharma-knowledge-scope-'));
+    t.after(() => fs.rm(workspace, { recursive: true, force: true }));
+    await fs.mkdir(path.join(workspace, skill), { recursive: true });
+    await fs.writeFile(path.join(workspace, skill, '.dharma-agent-fabric.json'), JSON.stringify({ managedBy: 'dharma-agent-fabric', workspaceId: 'synthetic' }));
+    return { workspace, organizationId: 'org_demo', repositoryAgentId: 'synthetic', now: new Date('2026-10-01T00:00:00.000Z') };
+}
+async function module(overrides = {}) {
+    const location = new URL('../src/repositoryKnowledge.ts', import.meta.url), require = createRequire(location);
+    const source = (await fs.readFile(location, 'utf8')).replaceAll('import.meta.url', JSON.stringify(location.href));
+    const result = ts.transpileModule(source, { compilerOptions: { target: ts.ScriptTarget.ES2023,
+            module: ts.ModuleKind.CommonJS }, reportDiagnostics: true });
+    assert.equal(result.diagnostics?.filter(item => item.category === ts.DiagnosticCategory.Error).length, 0);
+    const exports = {};
+    runInNewContext(result.outputText, { exports, Buffer, Date, process, require: (name) => {
+            if (name === 'node:fs')
+                return syncFs;
+            if (name === 'node:fs/promises')
+                return { ...fs, ...overrides };
+            if (name === 'node:crypto')
+                return crypto;
+            if (name === 'node:path')
+                return path;
+            if (name === 'node:url')
+                return url;
+            if (name === 'node:module')
+                return { createRequire: () => require };
+            if (name === './bootstrapHostScope.js')
+                return { currentBootstrapHostScope };
+            return require(name);
+        } }, { timeout: 1000, contextCodeGeneration: { strings: false, wasm: false } });
+    return exports;
+}
+for (const scoped of [true, false])
+    for (const cleanup of [true, false]) {
+        test(`knowledge preserves replaced staging despite reused dev/ino (${scoped ? 'scoped' : 'legacy'}, ${cleanup ? 'cleanup' : 'publication'})`, async (t) => {
+            const f = await fixture(t);
+            let staging = '', foreign = '', acquired, unlinks = 0, links = 0;
+            const api = await module({ open: async (...args) => {
+                    const handle = await fs.open(...args);
+                    if (!(Number(args[1]) & syncFs.constants.O_CREAT))
+                        return handle;
+                    staging = String(args[0]);
+                    const close = handle.close.bind(handle);
+                    handle.close = async () => {
+                        acquired = await handle.stat({ bigint: true });
+                        await close();
+                        const original = await fs.readFile(staging);
+                        foreign = 'x'.repeat(original.length);
+                        await fs.unlink(staging);
+                        await fs.writeFile(staging, foreign);
+                    };
+                    return handle;
+                }, lstat: async (name, options) => {
+                    const actual = await fs.lstat(name, options);
+                    if (String(name) !== staging || !acquired || !options?.bigint)
+                        return actual;
+                    return Object.assign(Object.create(Object.getPrototypeOf(actual)), actual, { dev: acquired.dev, ino: acquired.ino });
+                }, unlink: async (...args) => { unlinks++; return fs.unlink(...args); },
+                link: async (...args) => {
+                    links++;
+                    if (cleanup)
+                        throw new Error('fixture link failure');
+                    return fs.link(...args);
+                } });
+            const operation = () => api.initializeRepositoryKnowledge(f);
+            const error = await (scoped ? runCodexBootstrapHost(input(f.workspace), operation) : operation()).then(() => null, (failure) => failure);
+            assert.equal(await fs.readFile(staging, 'utf8'), foreign);
+            assert.equal(unlinks, 0);
+            assert.equal(links, 0);
+            await assert.rejects(fs.stat(path.join(f.workspace, skill, '.repository-knowledge-init.json')), { code: 'ENOENT' });
+            assert.equal(error?.message, 'repository_knowledge_cleanup_unconfirmed');
+        });
+    }
+test('knowledge verifies content even when an in-place edit reports unchanged metadata', async (t) => {
+    const f = await fixture(t);
+    let staging = '', foreign = '', acquired, unlinks = 0, links = 0;
+    const api = await module({ open: async (...args) => {
+            const handle = await fs.open(...args);
+            if (Number(args[1]) & syncFs.constants.O_CREAT) {
+                staging = String(args[0]);
+                const close = handle.close.bind(handle);
+                handle.close = async () => {
+                    acquired = await handle.stat({ bigint: true });
+                    await close();
+                    foreign = 'x'.repeat(Number(acquired.size));
+                    await fs.writeFile(staging, foreign);
+                };
+            }
+            else if (String(args[0]) === staging)
+                handle.stat = (async () => acquired);
+            return handle;
+        }, lstat: async (name, options) => String(name) === staging && acquired && options?.bigint ? acquired : fs.lstat(name, options),
+        unlink: async (...args) => { unlinks++; return fs.unlink(...args); },
+        link: async (...args) => { links++; return fs.link(...args); } });
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge(f)), { message: 'repository_knowledge_cleanup_unconfirmed' });
+    assert.equal(await fs.readFile(staging, 'utf8'), foreign);
+    assert.equal(unlinks, 0);
+    assert.equal(links, 0);
+});
+test('knowledge closes its staging reader after read withdrawal without publication or cleanup', async (t) => {
+    const f = await fixture(t);
+    let staging = '', readersClosed = 0, unlinks = 0, links = 0;
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), async ({ scope }) => {
+        const api = await module({ open: async (...args) => {
+                const handle = await fs.open(...args);
+                if (Number(args[1]) & syncFs.constants.O_CREAT)
+                    staging = String(args[0]);
+                else if (String(args[0]) === staging) {
+                    const read = handle.read.bind(handle), close = handle.close.bind(handle);
+                    handle.read = (async (...values) => { const result = await Reflect.apply(read, handle, values); scope.close(); return result; });
+                    handle.close = async () => { readersClosed++; return close(); };
+                }
+                return handle;
+            }, unlink: async (...args) => { unlinks++; return fs.unlink(...args); },
+            link: async (...args) => { links++; return fs.link(...args); } });
+        await api.initializeRepositoryKnowledge(f);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(readersClosed, 1);
+    assert.equal(unlinks, 0);
+    assert.equal(links, 0);
+    assert.equal(JSON.parse(await fs.readFile(staging, 'utf8')).organizationId, 'org_demo');
+});
+test('knowledge scope refuses workspace metadata before IO when original host is closed', async (t) => {
+    const f = await fixture(t);
+    let stats = 0;
+    const api = await module({ lstat: async (...args) => { stats++; return fs.lstat(...args); } });
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), async ({ scope }) => {
+        scope.close();
+        await api.initializeRepositoryKnowledge(f);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(stats, 0);
+});
+test('knowledge scope stops after withdrawn workspace metadata without resolving another path', async (t) => {
+    const f = await fixture(t);
+    let stats = 0, resolutions = 0;
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), async ({ scope }) => {
+        const api = await module({ lstat: async (...args) => {
+                stats++;
+                const value = await fs.lstat(...args);
+                scope.close();
+                return value;
+            }, realpath: async (...args) => { resolutions++; return fs.realpath(...args); } });
+        await api.readRepositoryKnowledge(f);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(stats, 1);
+    assert.equal(resolutions, 0);
+});
+test('knowledge scope closes acquired marker handle after withdrawal without reading', async (t) => {
+    const f = await fixture(t);
+    let reads = 0, closes = 0;
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), async ({ scope }) => {
+        const api = await module({ open: async (...args) => {
+                const handle = await fs.open(...args), close = handle.close.bind(handle), read = handle.read.bind(handle);
+                handle.close = async () => { closes++; return close(); };
+                handle.read = ((...values) => { reads++; return Reflect.apply(read, handle, values); });
+                scope.close();
+                return handle;
+            } });
+        await api.readRepositoryKnowledge(f);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(reads, 0);
+    assert.equal(closes, 1);
+});
+test('knowledge scope snapshots identity and timestamp before workspace inspection yields', async (t) => {
+    const f = await fixture(t), intended = { ...f, now: new Date(f.now) };
+    const api = await module({ lstat: async (...args) => {
+            const value = await fs.lstat(...args);
+            f.organizationId = 'org_foreign';
+            f.now.setTime(0);
+            return value;
+        } });
+    const actual = await runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge(f));
+    assert.equal(actual.catalog.organizationId, intended.organizationId);
+    assert.equal(actual.catalog.initializedAt, intended.now.toISOString());
+});
+test('knowledge scope retains interrupted generated staging after write and closes only its handle', async (t) => {
+    const f = await fixture(t);
+    let links = 0, syncs = 0, closes = 0;
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), async ({ scope }) => {
+        const api = await module({ open: async (...args) => {
+                const handle = await fs.open(...args);
+                if (!(Number(args[1]) & syncFs.constants.O_CREAT))
+                    return handle;
+                const write = handle.writeFile.bind(handle), sync = handle.sync.bind(handle), close = handle.close.bind(handle);
+                handle.writeFile = async (...values) => { const value = await write(...values); scope.close(); return value; };
+                handle.sync = async () => { syncs++; return sync(); };
+                handle.close = async () => { closes++; return close(); };
+                return handle;
+            }, link: async (...args) => { links++; return fs.link(...args); } });
+        await api.initializeRepositoryKnowledge(f);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(links, 0);
+    assert.equal(syncs, 0);
+    assert.equal(closes, 1);
+    assert.equal((await fs.readdir(path.join(f.workspace, skill))).filter(name => name.startsWith('.knowledge-init-')).length, 1);
+    await assert.rejects(fs.stat(path.join(f.workspace, skill, 'knowledge')), { code: 'ENOENT' });
+});
+test('knowledge scope preserves published intent when link result withdraws host authority', async (t) => {
+    const f = await fixture(t);
+    let links = 0, unlinks = 0, directories = 0;
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), async ({ scope }) => {
+        const api = await module({ link: async (...args) => {
+                links++;
+                await fs.link(...args);
+                scope.close();
+            }, unlink: async (...args) => { unlinks++; return fs.unlink(...args); },
+            mkdir: async (...args) => { directories++; return fs.mkdir(...args); } });
+        await api.initializeRepositoryKnowledge(f);
+    }), { message: 'codex_setup_host_scope_unavailable' });
+    assert.equal(links, 1);
+    assert.equal(unlinks, 0);
+    assert.equal(directories, 0);
+    assert.equal(JSON.parse(await fs.readFile(path.join(f.workspace, skill, '.repository-knowledge-init.json'), 'utf8')).organizationId, f.organizationId);
+});
+test('knowledge scope never invokes a native error code accessor or discloses native diagnostics', async (t) => {
+    const f = await fixture(t);
+    let getters = 0;
+    const api = await module({ lstat: async () => {
+            throw Object.defineProperty(new Error('private native canary'), 'code', {
+                get: () => { getters++; throw new Error('private getter canary'); }
+            });
+        } });
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), () => api.readRepositoryKnowledge(f)), { message: 'repository_knowledge_storage_unavailable' });
+    assert.equal(getters, 0);
+});
+test('knowledge scope initializes and reuses byte-identical unsigned catalog under its original identity', async (t) => {
+    const f = await fixture(t), api = await module();
+    const first = await runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge(f));
+    const catalog = path.join(f.workspace, skill, 'knowledge', 'CATALOG.json'), bytes = await fs.readFile(catalog);
+    const second = await runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge({ ...f, now: new Date('2026-10-02T00:00:00.000Z') }));
+    assert.equal(first.disposition, 'initialized');
+    assert.equal(second.disposition, 'reused');
+    assert.deepEqual(second.catalog, first.catalog);
+    assert.deepEqual(await fs.readFile(catalog), bytes);
+    assert.equal(second.catalog.provenance.authority, 'unsigned');
+});
+test('knowledge scope snapshots input without invoking identity accessors', async (t) => {
+    const f = await fixture(t);
+    let getters = 0, stats = 0;
+    Object.defineProperty(f, 'organizationId', { get: () => { getters++; throw new Error('private input canary'); } });
+    const api = await module({ lstat: async (...args) => { stats++; return fs.lstat(...args); } });
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge(f)), { message: 'repository_knowledge_input_invalid' });
+    assert.equal(getters, 0);
+    assert.equal(stats, 0);
+});
+test('knowledge scope retains an unowned staging collision without cleanup or publication', async (t) => {
+    const f = await fixture(t);
+    let foreignPath = '', unlinks = 0;
+    const api = await module({ open: async (...args) => {
+            if (!(Number(args[1]) & syncFs.constants.O_CREAT))
+                return fs.open(...args);
+            foreignPath = String(args[0]);
+            await fs.writeFile(foreignPath, 'foreign');
+            throw Object.assign(new Error('private collision canary'), { code: 'EEXIST' });
+        }, unlink: async (...args) => { unlinks++; return fs.unlink(...args); } });
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge(f)), { message: 'repository_knowledge_storage_unavailable' });
+    assert.equal(unlinks, 0);
+    assert.equal(await fs.readFile(foreignPath, 'utf8'), 'foreign');
+});
+test('knowledge scope preserves foreign staging replacement after its acquired handle closes', async (t) => {
+    const f = await fixture(t);
+    let foreignPath = '', unlinks = 0;
+    const api = await module({ open: async (...args) => {
+            const handle = await fs.open(...args);
+            if (!(Number(args[1]) & syncFs.constants.O_CREAT))
+                return handle;
+            foreignPath = String(args[0]);
+            const close = handle.close.bind(handle);
+            handle.close = async () => { await close(); await fs.unlink(foreignPath); await fs.writeFile(foreignPath, 'foreign'); };
+            return handle;
+        }, link: async () => { throw new Error('private link canary'); },
+        unlink: async (...args) => { unlinks++; return fs.unlink(...args); } });
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge(f)), { message: 'repository_knowledge_cleanup_unconfirmed' });
+    assert.equal(unlinks, 0);
+    assert.equal(await fs.readFile(foreignPath, 'utf8'), 'foreign');
+});
+test('knowledge scope does not unlink generated evidence after uncertain staging close', async (t) => {
+    const f = await fixture(t);
+    let closes = 0, unlinks = 0;
+    const api = await module({ open: async (...args) => {
+            const handle = await fs.open(...args);
+            if (!(Number(args[1]) & syncFs.constants.O_CREAT))
+                return handle;
+            const close = handle.close.bind(handle);
+            handle.close = async () => { closes++; await close(); throw new Error('private close canary'); };
+            return handle;
+        }, unlink: async (...args) => { unlinks++; return fs.unlink(...args); } });
+    await assert.rejects(runCodexBootstrapHost(input(f.workspace), () => api.initializeRepositoryKnowledge(f)), { message: 'repository_knowledge_cleanup_unconfirmed' });
+    assert.equal(closes, 1);
+    assert.equal(unlinks, 0);
+    assert.equal((await fs.readdir(path.join(f.workspace, skill))).filter(name => name.startsWith('.knowledge-init-')).length, 1);
+});
+//# sourceMappingURL=repositoryKnowledgeScope.test.js.map

package/dist/repositoryKnowledgeScope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositoryKnowledgeScope.test.js","sourceRoot":"","sources":["../src/repositoryKnowledgeScope.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAC,eAAe,EAAC,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAC,yBAAyB,EAAE,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAEzF,MAAM,KAAK,GAAG,oCAAoC,CAAC;AACnD,SAAS,KAAK,CAAC,SAAiB;IAC9B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,8BAA8B,CAAC;IACtF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5D,OAAO,EAAC,SAAS,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;QAChF,MAAM,EAAE,EAAC,MAAM,EAAE,8BAAuC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACjG,cAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB;YACtF,qBAAqB,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;YACvG,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAC,EAAC,CAAC;AAC5H,CAAC;AACD,KAAK,UAAU,OAAO,CAAC,CAAyC;IAC9D,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,2BAA2B,CAAC,EACzE,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAE,qBAAqB,EAAE,WAAW,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC;IAChF,OAAO,EAAC,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAC,CAAC;AAC5H,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,YAAqC,EAAE;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClH,MAAM,MAAM,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,EAAC,eAAe,EAAE,EAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM;YACzF,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAC,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1G,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,EAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE;YAC5F,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC;YACtC,IAAI,IAAI,KAAK,kBAAkB;gBAAE,OAAO,EAAC,GAAG,EAAE,EAAE,GAAG,SAAS,EAAC,CAAC;YAC9D,IAAI,IAAI,KAAK,aAAa;gBAAE,OAAO,MAAM,CAAC;YAC1C,IAAI,IAAI,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;YACtC,IAAI,IAAI,KAAK,UAAU;gBAAE,OAAO,GAAG,CAAC;YACpC,IAAI,IAAI,KAAK,aAAa;gBAAE,OAAO,EAAC,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,EAAC,CAAC;YAClE,IAAI,IAAI,KAAK,yBAAyB;gBAAE,OAAO,EAAC,yBAAyB,EAAC,CAAC;YAC3E,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC,EAAC,EAAE,EAAC,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAC,EAAC,CAAC,CAAC;IAC3E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;IAAE,KAAK,MAAM,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,gEAAgE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,GAAG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;YACtJ,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,QAAwC,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YAC7H,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;oBAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;oBACtC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;wBAAE,OAAO,MAAM,CAAC;oBACjE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;oBAAC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACnE,MAAM,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;wBACxB,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;wBAC5D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;wBAAC,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACnF,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;wBAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACjE,CAAC,CAAC;oBACF,OAAO,MAAM,CAAC;gBAChB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAoC,EAAE,OAAa,EAAE,EAAE;oBACtE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,MAAM;wBAAE,OAAO,MAAM,CAAC;oBAC7E,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAC,CAAC,CAAC;gBACrH,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAkC,EAAE,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC;gBACnG,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;oBAClD,KAAK,EAAE,CAAC;oBAAC,IAAI,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBACzF,CAAC,EAAC,CAAC,CAAC;YACJ,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,OAAc,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;YAChJ,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjD,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,iCAAiC,CAAC,CAAC,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,CAAC,CAAC;YAClH,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,0CAA0C,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;AAED,IAAI,CAAC,kFAAkF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACjG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,QAAwC,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IAC7H,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC/C,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnE,MAAM,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE;oBACxB,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;oBAAC,MAAM,KAAK,EAAE,CAAC;oBAC5D,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpF,CAAC,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO;gBAAE,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,QAAS,CAAuB,CAAC;YACpG,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAoC,EAAE,OAAa,EAAE,EAAE,CACtE,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,IAAI,QAAQ,IAAI,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;QAC9F,MAAM,EAAE,KAAK,EAAE,GAAG,IAAkC,EAAE,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC;QAChG,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IAC3F,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EACxG,EAAC,OAAO,EAAE,0CAA0C,EAAC,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC9G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0FAA0F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACzG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,OAAO,GAAG,EAAE,EAAE,aAAa,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IACxF,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;gBAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO;oBAAE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;qBACrE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACzE,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,GAAG,MAAa,EAAE,EAAE,GAAE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,CAAA,CAAC,CAAuB,CAAC;oBAC5J,MAAM,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE,GAAE,aAAa,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAkC,EAAE,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC;YACnG,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;QAC3F,MAAM,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mFAAmF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAClG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAiC,EAAE,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACxH,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QAC/E,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACxG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAiC,EAAE,EAAE;gBAC9E,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,KAAK,CAAC;YAC9E,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAoC,EAAE,EAAE,GAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;QAChH,MAAM,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,gFAAgF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC/F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IACtD,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;gBAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1G,MAAM,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE,GAAE,MAAM,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;gBACvD,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAa,EAAE,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA,CAAC,CAAuB,CAAC;gBACnH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,MAAM,CAAC;YAC/B,CAAC,EAAC,CAAC,CAAC;QACJ,MAAM,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,qFAAqF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACpG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,EAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAC,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAiC,EAAE,EAAE;YAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC,CAAC,cAAc,GAAG,aAAa,CAAC;YAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAC1G,CAAC,EAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAQ,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,8FAA8F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC7G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;gBAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;oBAAE,OAAO,MAAM,CAAC;gBACjE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChH,MAAM,CAAC,SAAS,GAAG,KAAK,EAAE,GAAG,MAA2C,EAAE,EAAE,GAAE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,CAAA,CAAC,CAAC;gBAClJ,MAAM,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC;gBAAC,MAAM,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE,GAAE,MAAM,EAAE,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAA,CAAC,CAAC;gBAC5G,OAAO,MAAM,CAAC;YAChB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;QAC9F,MAAM,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9H,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,sFAAsF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACrG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC;IACxE,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAC,KAAK,EAAC,EAAE,EAAE;QAC/E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;gBAC5E,KAAK,EAAE,CAAC;gBAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjD,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAkC,EAAE,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC;YACnG,KAAK,EAAE,KAAK,EAAE,GAAG,IAAiC,EAAE,EAAE,GAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;QACpG,MAAM,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,EAAE,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,iCAAiC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;AACzJ,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,4FAA4F,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IAC3G,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,OAAO,GAAG,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YAAE,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE;gBACpH,GAAG,EAAE,GAAG,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA,CAAC;aAAC,CAAC,CAAC;QAAA,CAAC,EAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAClG,EAAC,OAAO,EAAE,0CAA0C,EAAC,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oGAAoG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACnH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;IACjD,MAAM,KAAK,GAAQ,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAQ,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CACvE,GAAG,CAAC,6BAA6B,CAAC,EAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAC,CAAC,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC3F,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACrG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACpF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;IACvD,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAC,GAAG,EAAE,GAAG,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAiC,EAAE,EAAE,GAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACxH,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EACxG,EAAC,OAAO,EAAE,oCAAoC,EAAC,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACpG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,WAAW,GAAG,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;YAC5E,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3E,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC1E,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,CAAC,CAAC;QAC/E,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAkC,EAAE,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACtG,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EACxG,EAAC,OAAO,EAAE,0CAA0C,EAAC,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;AAC5F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACvG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,WAAW,GAAG,EAAE,EAAE,OAAO,GAAG,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAO,MAAM,CAAC;YACjE,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE,GAAE,MAAM,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA,CAAC,CAAC;YACtH,OAAO,MAAM,CAAC;QAChB,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAA,CAAC;QAC9D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAkC,EAAE,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACnG,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EACxG,EAAC,OAAO,EAAE,0CAA0C,EAAC,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;AAC5F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;IACjG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAAC,IAAI,MAAM,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAgC,EAAE,EAAE;YAC5E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAO,MAAM,CAAC;YACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,GAAG,KAAK,IAAI,EAAE,GAAE,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAA,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAChH,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAkC,EAAE,EAAE,GAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;IACtG,MAAM,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EACxG,EAAC,OAAO,EAAE,0CAA0C,EAAC,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAChI,CAAC,CAAC,CAAC"}

package/dist/repositoryOnboardingCaller.test.js

@@ -8,6 +8,8 @@ import test from 'node:test';
 import ts from 'typescript';
 import { appendRecoveredWorkspace, resolveRegistryRecoveryProjection } from './workspaceRegistryRecovery.js';
 import { bootstrapGrantMode } from './privateGrantInput.js';
+import { assertBootstrapHostSource, currentBootstrapHostScope, runCodexBootstrapHost } from './bootstrapHostScope.js';
+import { parseNamedCodexSkillObservation } from './namedCodexSkillDiscovery.js';
 // Execute the actual function body, parsed by TypeScript rather than extracted
 // by text matching. All I/O boundaries are injected: no enrollment, paid work,
 // secret-store writes, daemon processes, or external requests can occur.
@@ -21,7 +23,9 @@ async function caller(name, dependencies) {
         reportDiagnostics: true,
     });
     assert.equal(compiled.diagnostics?.filter(item => item.category === ts.DiagnosticCategory.Error).length, 0);
-    return runInNewContext(`${compiled.outputText}\n${name}`, dependencies, {
+    return runInNewContext(`${compiled.outputText}\n${name}`, {
+        assertBootstrapHostSource, currentBootstrapHostScope, parseNamedCodexSkillObservation, ...dependencies,
+    }, {
         timeout: 1000, contextCodeGeneration: { strings: false, wasm: false },
     });
 }
@@ -99,10 +103,40 @@ function bootstrapDependencies(onboarding) {
         requireCompletedBootstrapEvidence: () => undefined,
         summarizeBootstrapOrganizationApi: () => ({ ok: true }),
         loadAgentFabricOnboardingContract: async () => ({ markdown: '# fixture', sha256: 'a'.repeat(64) }),
-        namedSessionCommand: async () => { await record('named_session'); return { ok: true, state: 'running' }; },
+        namedSessionCommand: async (action, flags) => {
+            await record(`named_session:${action}`);
+            return { ok: true, state: 'running', name: String(flags.get('name')), bindingId: 'fixture_binding',
+                sessionId: 'fixture_session', organizationId: 'org_fixture', repositoryBindingId: 'fixture_repository',
+                workspaceId: String(flags.get('workspace-id')), endpointId: 'fixture_endpoint', membershipId: 'fixture_member',
+                deviceId: 'fixture_device', provider: 'codex',
+                nativeSkill: { schema: 'dharma.named-codex-skill-observation/v1', nativeDiscovered: true,
+                    bundleId: '11111111-1111-4111-8111-111111111111', bundleHash: `sha256:${'a'.repeat(64)}`,
+                    manifestHash: `sha256:${'b'.repeat(64)}`, catalogHash: `sha256:${'c'.repeat(64)}`,
+                    skillsHash: `sha256:${'d'.repeat(64)}`, observedAt: new Date().toISOString() } };
+        },
     };
     return { dependencies, calls };
 }
+test('host onboarding cannot replace absent accepted enrollment with a legacy login', async () => {
+    const f = bootstrapDependencies({});
+    let logins = 0;
+    f.dependencies.login = async () => { logins++; return { status: 'pending' }; };
+    const onboard = await caller('onboard', f.dependencies);
+    const workspace = resolve('/fixture', 'onboard');
+    const flags = new Map([['workspace', workspace],
+        ['organization-id', 'org_fixture'], ['policy-revision', 'policy-v1']]);
+    const uuid = '11111111-1111-4111-8111-111111111111', digest = `sha256:${'a'.repeat(64)}`;
+    const now = Date.now();
+    await assert.rejects(runCodexBootstrapHost({ workspace, signal: new AbortController().signal, current: async () => true,
+        intent: { schema: 'dharma.codex-setup-intent/v1', operationId: uuid, setupReference: uuid,
+            organizationId: 'org_fixture', recipientMembershipId: uuid, origin: 'https://fixture.invalid',
+            repositoryFingerprint: digest, policyRevision: 'policy-v1', scopeDigest: digest, contractDigest: digest,
+            hostContextId: uuid, issuedAt: new Date(now - 1000).toISOString(), expiresAt: new Date(now + 60_000).toISOString() },
+    }, async () => onboard(flags)), { message: 'codex_setup_host_enrollment_missing' });
+    assert.equal(logins, 0);
+    assert.equal((await onboard(flags)).stage, 'approve_device');
+    assert.equal(logins, 1, 'ordinary legacy onboarding keeps its existing login path');
+});
 test('registry recovery command plans before applying one current-device anchor row', async () => {
     const workspace = resolve('/fixture', 'anchor');
     const policyPath = resolve(workspace, '.dharma', 'approved-policy.json');
@@ -546,7 +580,7 @@ test('bootstrap completes after the relay installs the signed shared release', a
     assert.equal(actual.repositoryReadiness.attempts, 3);
     assert.equal(actual.namedSession.state, 'running');
     assert.equal(actual.workflowReadiness.namedSession, 'ready');
-    assert.equal(f.calls.filter(value => value === 'named_session').length, 1);
+    assert.deepEqual(f.calls.filter(value => value.startsWith('named_session:')), ['named_session:start', 'named_session:readiness']);
 });
 test('published-package secret denial stays visible without repeating evidence capture', async () => {
     const f = bootstrapDependencies({ ok: true, stage: 'ready', localStage: 'ready',
@@ -594,12 +628,35 @@ test('a failed named session cannot produce a complete bootstrap receipt', async
 test('a stopped named session keeps an otherwise ready bootstrap incomplete', async () => {
     const f = bootstrapDependencies({ ok: true, stage: 'ready', localStage: 'ready',
         sharedRepositoryReady: true, workspaceId: 'workspace_fixture' });
-    f.dependencies.namedSessionCommand = async () => ({ ok: true, state: 'stopped' });
+    const respond = f.dependencies.namedSessionCommand;
+    f.dependencies.namedSessionCommand = async (action, flags) => ({
+        ...await respond(action, flags), state: 'stopped',
+    });
     const actual = await (await caller('bootstrap', f.dependencies))(bootstrapFlags(true));
     assert.equal(actual.ok, false);
     assert.equal(actual.stage, 'named_session_pending');
     assert.equal(actual.workflowReadiness.namedSession, 'pending');
 });
+test('bootstrap rejects missing or malformed native observations using the real IPC parser', async () => {
+    for (const nativeSkill of [undefined, { schema: 'foreign-observation' }]) {
+        const f = bootstrapDependencies({ ok: true, stage: 'ready', localStage: 'ready',
+            sharedRepositoryReady: true, workspaceId: 'workspace_fixture' });
+        const respond = f.dependencies.namedSessionCommand;
+        f.dependencies.namedSessionCommand = async (action, flags) => ({
+            ...await respond(action, flags), ...(action === 'readiness' ? { nativeSkill } : {}),
+        });
+        await assert.rejects((await caller('bootstrap', f.dependencies))(bootstrapFlags(true)), /named_session_native_skill_invalid/);
+    }
+});
+test('bootstrap rejects a readiness identity changed after named-session start', async () => {
+    const f = bootstrapDependencies({ ok: true, stage: 'ready', localStage: 'ready',
+        sharedRepositoryReady: true, workspaceId: 'workspace_fixture' });
+    const respond = f.dependencies.namedSessionCommand;
+    f.dependencies.namedSessionCommand = async (action, flags) => ({
+        ...await respond(action, flags), ...(action === 'readiness' ? { membershipId: 'foreign_member' } : {}),
+    });
+    await assert.rejects((await caller('bootstrap', f.dependencies))(bootstrapFlags(true)), /named_session_readiness_scope_mismatch/);
+});
 test('bootstrap reports a blocked repository candidate without replaying enrollment', async () => {
     const f = bootstrapDependencies({ ok: true, stage: 'shared_repository_pending', localStage: 'ready',
         sharedRepositoryReady: false, workspaceId: 'workspace_fixture' });