@dharma-ai-labs/agent-fabric 0.2.165 → 0.2.166

package/dist/index.js

@@ -76,7 +76,7 @@ import { namedCodexEnvironment } from './namedCodexEnvironment.js';
 import { namedCodexNodeOutputArguments } from './namedCodexNodeOutput.js';
 import { namedCodexFilesystem } from './namedCodexFilesystem.js';
 import { createNamedSessionChildOwner, currentNamedSessionChildOwner } from './namedSessionChildOwner.js';
-import { awaitCodexSetupSession, consumeCodexSetupSessions, currentAcceptedSetupSessionScope, originalCodexSetupSessionSender, withCodexSetupSessionSender } from './codexSetupSessionHandoff.js';
+import { awaitCodexSetupSession, codexSetupSessionPolicyHash, consumeCodexSetupSessions, currentAcceptedSetupSessionScope, originalCodexSetupSessionSender, withCodexSetupSessionSender } from './codexSetupSessionHandoff.js';
 import { receiveCodexSetupChildStart, runCodexSetupChildStartup, sendCodexSetupChildStart } from './codexSetupChildStartup.js';
 import { assertBootstrapHostSource, captureBootstrapHostChild, currentBootstrapHostScope, inspectCodexBootstrapHostPreparation, prepareCodexBootstrapHost, runCodexBootstrapHost, runCodexBootstrapHostScope } from './bootstrapHostScope.js';
 // Trusted runtime composition only; these exports do not enable effectful setup.
@@ -90,7 +90,7 @@ import { assertCodexSetupExecutionLease } from './codexSetupAdmission.js';
 import { parseLocalCodexSetupReadiness } from '@dharma-ai-labs/agent-fabric-local-vault/setup-readiness';
 import { writeBootstrapHostJson, writeBootstrapHostText } from './bootstrapHostFiles.js';
 export { openCooperativeInboxSession } from './cooperativeInboxSession.js';
-const VERSION = '0.2.165';
+const VERSION = '0.2.166';
 const USAGE = CLI_USAGE;
 const execFileAsync = promisify(execFile);
 const LOCAL_PROVIDER_IDS = ['codex', 'claude', 'agy', 'hermes'];
@@ -2323,7 +2323,7 @@ async function qualifyCodexSetupSessionSource(request) {
         verifyServerAuthorizedPolicy({ policy, publicKeyEd25519: enrollment.serverPublicKeyEd25519,
             organizationId: request.organizationId, workspaceId: request.workspaceId });
         await assertWorkspaceAuthorizationCurrent(request.workspaceId, policy.serverAuthorization);
-        if (policy.revision !== request.policyRevision || sha256(canonicalize(policy)) !== request.policyHash)
+        if (policy.revision !== request.policyRevision || codexSetupSessionPolicyHash(policy) !== request.policyHash)
             return false;
         const fabric = await client();
         await fetchRepositorySourceAuthorization(fabric, role);
@@ -3262,9 +3262,9 @@ async function bootstrap(flags, hostScope) {
             repository: onboarded,
         };
     }
-    const launcher = await step(() => installStableRepositoryLauncher(workspace));
-    const autostart = flags.has('no-relay-daemon')
-        ? { state: 'disabled', backend: null }
+    const { launcher, autostart } = flags.has('no-relay-daemon')
+        ? { launcher: await step(() => installStableRepositoryLauncher(workspace)),
+            autostart: { state: 'disabled', backend: null } }
         : await step(() => withOnboardingStage('autostart', String(onboarded.workspaceId || ''), `dharma bootstrap --resume --complete --portal-url ${hqUrl} --organization-id ${organizationId} --workspace . --policy-revision ${policyRevision}`
             + (joinedBindingId ? ` --join-repository-binding-id ${joinedBindingId} --join-source-fingerprint ${joinedFingerprint}` : ''), () => withRelayStartupMutation(async () => {
             const home = dharmaHome();
@@ -3290,11 +3290,18 @@ async function bootstrap(flags, hostScope) {
                     if (canonical.length !== 1)
                         throw new Error('relay_workspace_conflict: startup policy route changed.');
                     await step(() => loadVerifiedWorkspacePolicy(anchor.policy, authorized.serverAuthorization?.workspaceId ?? ''));
+                    if (anchor.version !== VERSION) {
+                        throw new Error('relay_runtime_upgrade_required: upgrade the existing startup anchor before connecting another repository.');
+                    }
                 }
             }
-            return step(() => enableRelayAutostart({ home, workspace, policy: resolve(workspace, '.dharma', 'approved-policy.json'),
+            // Keep previous launcher bytes intact until startup ownership and version
+            // admit this operation; the supported upgrade relies on those exact bytes.
+            const launcher = await step(() => installStableRepositoryLauncher(workspace));
+            const autostart = await step(() => enableRelayAutostart({ home, workspace, policy: resolve(workspace, '.dharma', 'approved-policy.json'),
                 launcher: resolve(workspace, process.platform === 'win32' ? launcher.windows : launcher.shell),
                 version: VERSION, preserveStandardAnchor: true }));
+            return { launcher, autostart };
         })));
     let sharedRepositoryReady = onboarded.sharedRepositoryReady === true;
     const completionRequested = flags.has('complete');
@@ -4691,7 +4698,7 @@ async function requestBootstrapNamedSession(hostScope, flags) {
             organizationId: intent.organizationId, membershipId: intent.recipientMembershipId, deviceId: config.deviceId,
             workspaceId, repositoryBindingId: role.repositoryBindingId, endpointId: role.endpointId, provider: 'codex',
             origin: intent.origin, repositoryFingerprint: intent.repositoryFingerprint, policyRevision: policy.revision,
-            policyHash: sha256(canonicalize(policy)), scopeDigest: intent.scopeDigest, contractDigest: intent.contractDigest,
+            policyHash: codexSetupSessionPolicyHash(policy), scopeDigest: intent.scopeDigest, contractDigest: intent.contractDigest,
             name, workspaceRoot: workspace, maximumCostCents: 1000, maximumTurnCostCents: 25,
             issuedAt: new Date().toISOString(), expiresAt: new Date(Math.min(Date.parse(intent.expiresAt), Date.parse(policy.serverAuthorization.expiresAt))).toISOString() } });
     await step(() => assertCodexSetupExecutionLease(sender.lease, intent));