@dharma-ai-labs/agent-fabric 0.2.189 → 0.2.191

package/dist/codexSetupPortalPreparation.js

@@ -0,0 +1,101 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { resolve } from 'node:path';
+import { setTimeout as delay } from 'node:timers/promises';
+import { canonicalize, validateContract } from '@dharma-ai-labs/agent-fabric-contracts';
+import { captureCodexSetupPromptBinding, captureCodexSetupUserPrompt, capturePublicCodexSetupPrompt } from './codexSetupUserPrompt.js';
+const fail = () => { throw new Error('codex_setup_portal_preparation_unavailable'); };
+/** A public HTTPS receipt is presentation binding, not a host execution lease. */
+export async function requestCodexSetupHostPreparation(input) {
+    // Capture before awaiting: no secret-bearing prose may reach the endpoint.
+    const initialUserPrompt = capturePublicCodexSetupPrompt(input.initialUserPrompt);
+    const pins = [...initialUserPrompt.replace(/\r\n/g, '\n').matchAll(/^Preparation context SHA256: ([a-f0-9]{64})\.$/gm)];
+    if (pins.length !== 1)
+        return fail();
+    const originalContextPin = pins[0][1];
+    const { origin, organizationId, setupReference, cliVersion } = input;
+    const initialUserPromptSha256 = createHash('sha256').update(initialUserPrompt, 'utf8').digest('hex');
+    const promptSha256 = createHash('sha256').update(initialUserPrompt.replace(/\r\n/g, '\n'), 'utf8').digest('hex');
+    const now = input.now ?? Date.now;
+    const signal = AbortSignal.any([input.signal, AbortSignal.timeout(15000)]);
+    let reader;
+    const cancel = () => { void reader?.cancel().catch(() => { }); };
+    try {
+        const url = new URL(origin);
+        if (url.origin !== origin || url.protocol !== 'https:' || url.username || url.password
+            || !/^org_[A-Za-z0-9]+$/.test(organizationId)
+            || !/^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/.test(setupReference)
+            || !/^\d+\.\d+\.\d+$/.test(cliVersion) || signal.aborted)
+            return fail();
+        const response = await (input.fetcher ?? fetch)(origin + '/api/v1/agent-fabric/bootstrap/setup-claim', {
+            method: 'POST', redirect: 'error', credentials: 'omit', signal,
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ action: 'prepare_host', organizationId, setupReference, promptSha256 }),
+        });
+        if (signal.aborted || response.status !== 200 || !response.body
+            || !response.headers.get('content-type')?.toLowerCase().startsWith('application/json')
+            || Number(response.headers.get('content-length')) > 65536)
+            return fail();
+        reader = response.body.getReader();
+        signal.addEventListener('abort', cancel, { once: true });
+        const chunks = [];
+        let size = 0;
+        while (true) {
+            if (signal.aborted)
+                return fail();
+            const part = await reader.read();
+            if (part.done)
+                break;
+            size += part.value.byteLength;
+            if (size > 65536) {
+                await reader.cancel();
+                return fail();
+            }
+            chunks.push(part.value);
+        }
+        const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        const checked = await validateContract(resolve(import.meta.dirname, 'schemas'), 'https://schemas.dharma-ai.io/setup-host-preparation/v1', value);
+        if (!checked.ok || signal.aborted)
+            return fail();
+        const prepared = value, at = now();
+        const contextSha256 = createHash('sha256').update('dharma.setup-host-context/v1\0').update(canonicalize({
+            cliVersion: prepared.cliVersion, expiresAt: prepared.expiresAt, binding: prepared.binding, context: prepared.context
+        })).digest('hex');
+        if (contextSha256 !== originalContextPin || prepared.integrity.contextSha256 !== originalContextPin)
+            return fail();
+        const issued = Date.parse(prepared.preparedAt), expires = Date.parse(prepared.expiresAt);
+        if (prepared.context.origin !== origin || prepared.context.organizationId !== organizationId
+            || prepared.context.setupReference !== setupReference || prepared.cliVersion !== cliVersion
+            || prepared.promptSha256 !== promptSha256 || !Number.isFinite(at)
+            || new Date(issued).toISOString() !== prepared.preparedAt
+            || new Date(expires).toISOString() !== prepared.expiresAt
+            || issued - at > 5000 || expires <= at || expires <= issued || expires - issued > 900000)
+            return fail();
+        const binding = captureCodexSetupPromptBinding(prepared.binding);
+        const intent = Object.freeze({
+            schema: 'dharma.codex-setup-intent/v1', ...prepared.context,
+            operationId: randomUUID(), hostContextId: randomUUID(),
+            issuedAt: prepared.preparedAt, expiresAt: prepared.expiresAt,
+        });
+        if (captureCodexSetupUserPrompt(initialUserPrompt, intent, binding) !== initialUserPrompt)
+            return fail();
+        // Match the claim client's bounded skew wait; never change the local clock
+        // or admit effects before the response's strict issued-at boundary.
+        if (issued > at)
+            await (input.sleep ?? ((ms, ownedSignal) => delay(ms, undefined, { signal: ownedSignal })))(issued - at, signal);
+        const currentTime = now();
+        if (signal.aborted || !Number.isFinite(currentTime) || currentTime < issued || currentTime >= expires)
+            return fail();
+        // No provider, key store, setup journal or enrollment operation is entered.
+        return Object.freeze({ effects: false, grantRedeemed: false,
+            initialUserPrompt, initialUserPromptSha256, promptSha256, portalContextSha256: originalContextPin, binding, intent,
+            requiresHostExecutionAdmission: true, requiresRecipientApproval: true });
+    }
+    catch {
+        return fail();
+    }
+    finally {
+        signal.removeEventListener('abort', cancel);
+        reader?.releaseLock();
+    }
+}
+//# sourceMappingURL=codexSetupPortalPreparation.js.map

package/dist/codexSetupPortalPreparation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalPreparation.js","sourceRoot":"","sources":["../src/codexSetupPortalPreparation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,UAAU,EAAC,MAAM,aAAa,CAAC;AACnD,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,UAAU,IAAI,KAAK,EAAC,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAC,YAAY,EAAE,gBAAgB,EAAC,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAC,8BAA8B,EAAE,2BAA2B,EAAE,6BAA6B,EAAC,MAAM,2BAA2B,CAAC;AAYrI,MAAM,IAAI,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAA,CAAC,CAAC;AAE3F,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAItD;IACC,2EAA2E;IAC3E,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC,CAAC;IACxH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC;IACxC,MAAM,EAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAC,GAAG,KAAK,CAAC;IACnE,MAAM,uBAAuB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrG,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,MAA2D,CAAC;IAChE,MAAM,MAAM,GAAG,GAAG,EAAE,GAAE,KAAK,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;eACjF,CAAC,oBAAoB,CAAC,IAAI,CAAC,cAAc,CAAC;eAC1C,CAAC,2EAA2E,CAAC,IAAI,CAAC,cAAc,CAAC;eACjG,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,4CAA4C,EAAE;YACrG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM;YAC9D,OAAO,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAC,CAAC;SAC7F,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI;eAC1D,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;eACnF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,KAAK;YAAE,OAAO,IAAI,EAAE,CAAC;QAC3E,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAiB,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC9C,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACvD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAAA,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;YAAA,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAC5E,wDAAwD,EAAE,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,KAAoB,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACtG,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;SAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxI,IAAI,aAAa,KAAK,kBAAkB,IAAI,QAAQ,CAAC,SAAS,CAAC,aAAa,KAAK,kBAAkB;YAAE,OAAO,IAAI,EAAE,CAAC;QACnH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc;eACvF,QAAQ,CAAC,OAAO,CAAC,cAAc,KAAK,cAAc,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU;eACxF,QAAQ,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;eAC9D,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,UAAU;eACtD,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,SAAS;eACtD,MAAM,GAAG,EAAE,GAAG,IAAI,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,GAAG,MAAM,GAAG,MAAM;YAAE,OAAO,IAAI,EAAE,CAAC;QAC1G,MAAM,OAAO,GAAG,8BAA8B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,MAAM,GAA+B,MAAM,CAAC,MAAM,CAAC;YACvD,MAAM,EAAE,8BAA8B,EAAE,GAAG,QAAQ,CAAC,OAAO;YAC3D,WAAW,EAAE,UAAU,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE;YACtD,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC7D,CAAC,CAAC;QACH,IAAI,2BAA2B,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,iBAAiB;YAAE,OAAO,IAAI,EAAE,CAAC;QACzG,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,MAAM,GAAG,EAAE;YAAE,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,EAAC,MAAM,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAChI,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,MAAM,IAAI,WAAW,IAAI,OAAO;YAAE,OAAO,IAAI,EAAE,CAAC;QACrH,4EAA4E;QAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAE,KAAc,EAAE,aAAa,EAAE,KAAc;YAC1E,iBAAiB,EAAE,uBAAuB,EAAE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM;YAClH,8BAA8B,EAAE,IAAa,EAAE,yBAAyB,EAAE,IAAa,EAAC,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QAAA,OAAO,IAAI,EAAE,CAAC;IAAA,CAAC;YAChB,CAAC;QAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAAA,CAAC;AAC/E,CAAC"}

package/dist/codexSetupPortalPreparation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codexSetupPortalPreparation.test.d.ts.map

package/dist/codexSetupPortalPreparation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalPreparation.test.d.ts","sourceRoot":"","sources":["../src/codexSetupPortalPreparation.test.ts"],"names":[],"mappings":""}

package/dist/codexSetupPortalPreparation.test.js

@@ -0,0 +1,173 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { canonicalize } from '@dharma-ai-labs/agent-fabric-contracts';
+import test from 'node:test';
+import { requestCodexSetupHostPreparation } from './codexSetupPortalPreparation.js';
+const now = Date.parse('2030-01-01T00:00:00.000Z');
+const reference = '11111111-1111-4111-8111-111111111111';
+const membership = '22222222-2222-4222-8222-222222222222';
+const binding = { recipientEmail: 'synthetic@example.test', repositoryRemoteUrl: 'https://github.com/example/synthetic.git' };
+const fingerprint = `sha256:${'a'.repeat(64)}`;
+const context = { origin: 'https://www.dharma-ai.io', organizationId: 'org_fixture',
+    setupReference: reference, recipientMembershipId: membership, repositoryFingerprint: fingerprint,
+    policyRevision: 'policy-v1', scopeDigest: `sha256:${'b'.repeat(64)}`, contractDigest: `sha256:${'c'.repeat(64)}` };
+const contextHash = (value) => createHash('sha256').update('dharma.setup-host-context/v1\0').update(canonicalize({
+    cliVersion: value.cliVersion, expiresAt: value.expiresAt, binding: value.binding, context: value.context
+})).digest('hex');
+const originalPin = contextHash({ cliVersion: '0.2.190', expiresAt: '2030-01-01T00:15:00.000Z', binding, context });
+const prompt = '# Dharma Agent Fabric \u2014 one-prompt source setup\n'
+    + `Recipient: ${binding.recipientEmail}. Organization: org_fixture.\n`
+    + `Selected repository: ${binding.repositoryRemoteUrl}. Fingerprint: ${fingerprint}.\n`
+    + `Public setup reference: ${reference}. Fixed expiry: 2030-01-01T00:15:00.000Z.\n`
+    + `Preparation context SHA256: ${originalPin}.\n`;
+function fixture() {
+    let calls = 0;
+    const response = { schema: 'dharma.setup-host-preparation/v1', ok: true, effects: false,
+        grantRedeemed: false, approvalRequired: true, sourcePolicyRevalidated: true,
+        preparedAt: new Date(now).toISOString(), expiresAt: '2030-01-01T00:15:00.000Z',
+        promptSha256: createHash('sha256').update(prompt).digest('hex'), cliVersion: '0.2.190',
+        binding: { ...binding }, context: { ...context },
+        integrity: { algorithm: 'sha256', kind: 'portal-context', authenticity: 'same-origin-https', contextSha256: originalPin } };
+    const input = { origin: response.context.origin, organizationId: 'org_fixture', setupReference: reference,
+        cliVersion: '0.2.190', initialUserPrompt: prompt, signal: new AbortController().signal, now: () => now,
+        fetcher: (async (url, options) => {
+            calls++;
+            assert.equal(String(url), 'https://www.dharma-ai.io/api/v1/agent-fabric/bootstrap/setup-claim');
+            assert.equal(options?.redirect, 'error');
+            assert.deepEqual(JSON.parse(String(options?.body)), { action: 'prepare_host', organizationId: 'org_fixture',
+                setupReference: reference, promptSha256: createHash('sha256').update(prompt).digest('hex') });
+            assert.equal(options?.credentials, 'omit');
+            return new Response(JSON.stringify(response), { headers: { 'content-type': 'application/json' } });
+        }) };
+    return { response, input, get calls() { return calls; } };
+}
+test('public preparation obtains independent server binding without invoking a provider or enrollment', async () => {
+    const f = fixture();
+    const result = await requestCodexSetupHostPreparation(f.input);
+    assert.equal(f.calls, 1);
+    assert.deepEqual(result.binding, binding);
+    assert.equal(result.initialUserPrompt, prompt);
+    assert.equal(result.effects, false);
+    assert.equal(result.portalContextSha256, originalPin);
+});
+test('portal-pinned context is canonical across JSON object key order', async () => {
+    const f = fixture();
+    f.response.context = Object.fromEntries(Object.entries(f.response.context).reverse());
+    assert.equal((await requestCodexSetupHostPreparation(f.input)).portalContextSha256, originalPin);
+});
+test('a replayed intact context cannot extend its fixed expiry', async () => {
+    const f = fixture();
+    await assert.rejects(requestCodexSetupHostPreparation({ ...f.input, now: () => now + 900001 }));
+    assert.equal(f.calls, 1);
+});
+test('credential-shaped prose is rejected before any network admission', async () => {
+    const f = fixture();
+    const canary = ['dhab', 'synthetic', 'not-a-real-grant'].join('_');
+    await assert.rejects(requestCodexSetupHostPreparation({ ...f.input, initialUserPrompt: prompt + canary }));
+    assert.equal(f.calls, 0);
+});
+for (const field of ['recipientMembershipId', 'policyRevision', 'scopeDigest', 'contractDigest']) {
+    test(`recomputed response integrity cannot substitute the original portal-pinned ${field}`, async () => {
+        const f = fixture();
+        if (field === 'recipientMembershipId')
+            f.response.context[field] = reference;
+        else if (field === 'policyRevision')
+            f.response.context[field] = 'foreign-policy';
+        else
+            f.response.context[field] = 'sha256:' + 'f'.repeat(64);
+        f.response.integrity.contextSha256 = contextHash(f.response);
+        await assert.rejects(requestCodexSetupHostPreparation(f.input), /^Error: codex_setup_portal_preparation_unavailable$/);
+        assert.equal(f.calls, 1);
+    });
+}
+for (const reason of ['missing', 'duplicate']) {
+    test(`a ${reason} original portal context pin is rejected before fetch`, async () => {
+        const f = fixture();
+        const value = reason === 'missing' ? prompt.replace(`Preparation context SHA256: ${originalPin}.\n`, '')
+            : prompt + `Preparation context SHA256: ${originalPin}.\n`;
+        await assert.rejects(requestCodexSetupHostPreparation({ ...f.input, initialUserPrompt: value }));
+        assert.equal(f.calls, 0);
+    });
+}
+test('bounded server clock lead waits without weakening issued-at or expiry validation', async () => {
+    const f = fixture();
+    let localNow = now, waited = 0;
+    f.response.preparedAt = new Date(now + 2208).toISOString();
+    const result = await requestCodexSetupHostPreparation({ ...f.input, now: () => localNow,
+        ...{ sleep: async (ms) => { waited++; assert.equal(ms, 2208); localNow += ms; } } });
+    assert.equal(waited, 1);
+    assert.equal(result.intent.issuedAt, f.response.preparedAt);
+    assert.equal(f.calls, 1);
+});
+test('excessive server clock lead is rejected without sleeping or provider effects', async () => {
+    const f = fixture();
+    let waits = 0;
+    f.response.preparedAt = new Date(now + 5001).toISOString();
+    await assert.rejects(requestCodexSetupHostPreparation({ ...f.input,
+        ...{ sleep: async () => { waits++; } } }));
+    assert.equal(waits, 0);
+    assert.equal(f.calls, 1);
+});
+test('clock wait cancellation cannot authorize a future preparation', async () => {
+    const f = fixture(), control = new AbortController();
+    f.response.preparedAt = new Date(now + 1000).toISOString();
+    await assert.rejects(requestCodexSetupHostPreparation({ ...f.input, signal: control.signal,
+        ...{ sleep: async () => { control.abort(); } } }));
+});
+test('clipboard CRLF uses the same public digest while preserving actual native message bytes', async () => {
+    const f = fixture(), original = prompt.replace(/\n/g, '\r\n');
+    const result = await requestCodexSetupHostPreparation({ ...f.input, initialUserPrompt: original });
+    assert.equal(result.initialUserPrompt, original);
+    assert.equal(result.initialUserPromptSha256, createHash('sha256').update(original).digest('hex'));
+    assert.equal(result.promptSha256, createHash('sha256').update(prompt).digest('hex'));
+});
+for (const cause of ['origin', 'organization', 'reference', 'version', 'prompt-hash', 'recipient', 'repository', 'expired', 'effects', 'unknown']) {
+    test(`public preparation rejects ${cause} instead of accepting model-supplied binding`, async () => {
+        const f = fixture();
+        if (cause === 'origin')
+            f.response.context.origin = 'https://foreign.example';
+        if (cause === 'organization')
+            f.response.context.organizationId = 'org_foreign';
+        if (cause === 'reference')
+            f.response.context.setupReference = membership;
+        if (cause === 'version')
+            f.response.cliVersion = '0.2.191';
+        if (cause === 'prompt-hash')
+            f.response.promptSha256 = 'e'.repeat(64);
+        if (cause === 'recipient')
+            f.response.binding.recipientEmail = 'other@example.test';
+        if (cause === 'repository')
+            f.response.binding.repositoryRemoteUrl = 'https://github.com/other/source.git';
+        if (cause === 'expired')
+            f.response.expiresAt = new Date(now).toISOString();
+        if (cause === 'effects')
+            f.response.effects = true;
+        if (cause === 'unknown')
+            f.response.privateField = 'PRIVATE_CANARY';
+        await assert.rejects(requestCodexSetupHostPreparation(f.input));
+    });
+}
+test('a cancelled preparation makes no network request', async () => {
+    const f = fixture();
+    await assert.rejects(requestCodexSetupHostPreparation({ ...f.input, signal: AbortSignal.abort() }));
+    assert.equal(f.calls, 0);
+});
+for (const cause of ['http-error', 'invalid-json', 'oversized', 'foreign-redirect', 'vendor-error']) {
+    test(`transport ${cause} is bounded, not retried and never reflects a response or vendor exception`, async () => {
+        const f = fixture();
+        let calls = 0;
+        const fetcher = (async () => {
+            calls++;
+            if (cause === 'vendor-error')
+                throw Error('PRIVATE_VENDOR_EXCEPTION');
+            if (cause === 'http-error')
+                return new Response('PRIVATE_RESPONSE', { status: 403 });
+            if (cause === 'foreign-redirect')
+                return new Response('', { status: 302, headers: { location: 'https://foreign.example' } });
+            return new Response(cause === 'invalid-json' ? 'PRIVATE_INVALID_RESPONSE' : 'x'.repeat(65537), { headers: { 'content-type': 'application/json' } });
+        });
+        await assert.rejects(requestCodexSetupHostPreparation({ ...f.input, fetcher }), error => error instanceof Error && error.message === 'codex_setup_portal_preparation_unavailable');
+        assert.equal(calls, 1);
+    });
+}
+//# sourceMappingURL=codexSetupPortalPreparation.test.js.map

package/dist/codexSetupPortalPreparation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPortalPreparation.test.js","sourceRoot":"","sources":["../src/codexSetupPortalPreparation.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,YAAY,EAAC,MAAM,wCAAwC,CAAC;AACpE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,gCAAgC,EAAC,MAAM,kCAAkC,CAAC;AAElF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACnD,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,UAAU,GAAG,sCAAsC,CAAC;AAC1D,MAAM,OAAO,GAAG,EAAC,cAAc,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,0CAA0C,EAAC,CAAC;AAC5H,MAAM,WAAW,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/C,MAAM,OAAO,GAAG,EAAC,MAAM,EAAE,0BAA0B,EAAE,cAAc,EAAE,aAAa;IAChF,cAAc,EAAE,SAAS,EAAE,qBAAqB,EAAE,UAAU,EAAE,qBAAqB,EAAE,WAAW;IAChG,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAC,CAAC;AACpH,MAAM,WAAW,GAAG,CAAC,KAAkF,EAAE,EAAE,CACzG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;IAChF,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9H,MAAM,WAAW,GAAG,WAAW,CAAC,EAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,EAAE,OAAO,EAAE,OAAO,EAAC,CAAC,CAAC;AAClH,MAAM,MAAM,GAAG,wDAAwD;MACnE,cAAc,OAAO,CAAC,cAAc,gCAAgC;MACpE,wBAAwB,OAAO,CAAC,mBAAmB,kBAAkB,WAAW,KAAK;MACrF,2BAA2B,SAAS,6CAA6C;MACjF,+BAA+B,WAAW,KAAK,CAAC;AACpD,SAAS,OAAO;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,EAAC,MAAM,EAAE,kCAAkC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK;QACpF,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI;QAC3E,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,0BAA0B;QAC9E,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,SAAS;QACtF,OAAO,EAAE,EAAC,GAAG,OAAO,EAAC,EAAE,OAAO,EAAE,EAAC,GAAG,OAAO,EAAC;QAC5C,SAAS,EAAE,EAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAC,EAAC,CAAC;IAC3H,MAAM,KAAK,GAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS;QACtG,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAiB,EAAE,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;QACjH,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;YAC/B,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,oEAAoE,CAAC,CAAC;YAChG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,EAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa;gBACxG,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;YAC/F,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAC,OAAO,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC,EAAC,CAAC,CAAC;QACjG,CAAC,CAAiB,EAAC,CAAC;IACtB,OAAO,EAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,KAAK,KAAI,OAAO,KAAK,CAAC,CAAA,CAAC,EAAC,CAAC;AACxD,CAAC;AACD,IAAI,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;IACjH,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,SAAS,CAAE,MAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,CAAC,KAAK,CAAE,MAAc,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAE,MAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAA8B,CAAC;IACnH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC;AACnG,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,MAAM,EAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,GAAG,MAAM,EAAC,CAAC,CAAC,CAAC;IACzG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,KAAK,IAAI,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,CAAU,EAAE,CAAC;IAC1G,IAAI,CAAC,8EAA8E,KAAK,EAAE,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,IAAI,KAAK,KAAK,uBAAuB;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;aACxE,IAAI,KAAK,KAAK,gBAAgB;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,gBAAgB,CAAC;;YAC7E,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,qDAAqD,CAAC,CAAC;QACvH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,WAAW,CAAU,EAAE,CAAC;IACvD,IAAI,CAAC,KAAK,MAAM,uDAAuD,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,+BAA+B,WAAW,KAAK,EAAE,EAAE,CAAC;YACtG,CAAC,CAAC,MAAM,GAAG,+BAA+B,WAAW,KAAK,CAAC;QAC7D,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IAAC,IAAI,QAAQ,GAAG,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;QACpF,GAAG,EAAC,KAAK,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,GAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA,CAAC,EAAC,EAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACjH,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK;QAC/D,GAAG,EAAC,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,KAAK,EAAE,CAAC,CAAA,CAAC,EAAC,EAAC,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,CAAC,GAAG,OAAO,EAAE,EAAE,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACrD,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;QACvF,GAAG,EAAC,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA,CAAC,EAAC,EAAC,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;IACzG,MAAM,CAAC,GAAG,OAAO,EAAE,EAAE,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAC,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACvF,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAU,EAAE,CAAC;IAC3J,IAAI,CAAC,8BAA8B,KAAK,8CAA8C,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,IAAI,KAAK,KAAK,QAAQ;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,yBAAyB,CAAC;QAC9E,IAAI,KAAK,KAAK,cAAc;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,GAAG,aAAa,CAAC;QAChF,IAAI,KAAK,KAAK,WAAW;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,GAAG,UAAU,CAAC;QAC1E,IAAI,KAAK,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,GAAG,SAAS,CAAC;QAC3D,IAAI,KAAK,KAAK,aAAa;YAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,KAAK,KAAK,WAAW;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,GAAG,oBAAoB,CAAC;QACpF,IAAI,KAAK,KAAK,YAAY;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,GAAG,qCAAqC,CAAC;QAC3G,IAAI,KAAK,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5E,IAAI,KAAK,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAG,CAAC,CAAC,QAAoC,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACjG,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,EAAC,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,CAAU,EAAE,CAAC;IAC7G,IAAI,CAAC,aAAa,KAAK,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC9G,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,cAAc;gBAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACtE,IAAI,KAAK,KAAK,YAAY;gBAAE,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAC,MAAM,EAAE,GAAG,EAAC,CAAC,CAAC;YACnF,IAAI,KAAK,KAAK,kBAAkB;gBAAE,OAAO,IAAI,QAAQ,CAAC,EAAE,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAC,QAAQ,EAAE,yBAAyB,EAAC,EAAC,CAAC,CAAC;YACzH,OAAO,IAAI,QAAQ,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3F,EAAC,OAAO,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC,EAAC,CAAC,CAAC;QACrD,CAAC,CAAiB,CAAC;QACnB,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAC,CAAC,EAC1E,KAAK,CAAC,EAAE,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,4CAA4C,CAAC,CAAC;QACrG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/codexSetupPublicStdin.d.ts

@@ -0,0 +1,6 @@
+import type { Readable } from 'node:stream';
+/** Agent-supplied public text only; never a terminal password/grant prompt. */
+export declare function readCodexSetupPublicStdin(stream: Readable & {
+    isTTY?: boolean;
+}, signal: AbortSignal): Promise<string>;
+//# sourceMappingURL=codexSetupPublicStdin.d.ts.map

package/dist/codexSetupPublicStdin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPublicStdin.d.ts","sourceRoot":"","sources":["../src/codexSetupPublicStdin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,aAAa,CAAC;AAG1C,+EAA+E;AAC/E,wBAAsB,yBAAyB,CAAC,MAAM,EAAE,QAAQ,GAAG;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAqB1H"}

package/dist/codexSetupPublicStdin.js

@@ -0,0 +1,36 @@
+import { capturePublicCodexSetupPrompt } from './codexSetupUserPrompt.js';
+/** Agent-supplied public text only; never a terminal password/grant prompt. */
+export async function readCodexSetupPublicStdin(stream, signal) {
+    const fail = () => new Error('codex_setup_public_input_unavailable');
+    if (stream.isTTY || signal.aborted)
+        throw fail();
+    const deadline = AbortSignal.any([signal, AbortSignal.timeout(15000)]);
+    const cancel = () => stream.destroy(fail());
+    deadline.addEventListener('abort', cancel, { once: true });
+    const chunks = [];
+    let size = 0;
+    try {
+        for await (const chunk of stream) {
+            if (deadline.aborted)
+                throw fail();
+            const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            size += bytes.length;
+            if (size > 32768)
+                throw fail();
+            chunks.push(bytes);
+        }
+        if (deadline.aborted)
+            throw fail();
+        const bytes = Buffer.concat(chunks), text = bytes.toString('utf8');
+        if (!Buffer.from(text, 'utf8').equals(bytes))
+            throw fail();
+        return capturePublicCodexSetupPrompt(text);
+    }
+    catch {
+        throw fail();
+    }
+    finally {
+        deadline.removeEventListener('abort', cancel);
+    }
+}
+//# sourceMappingURL=codexSetupPublicStdin.js.map

package/dist/codexSetupPublicStdin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPublicStdin.js","sourceRoot":"","sources":["../src/codexSetupPublicStdin.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,6BAA6B,EAAC,MAAM,2BAA2B,CAAC;AAExE,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAoC,EAAE,MAAmB;IACvG,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAa,EAAE,CAAC;IAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,OAAO;gBAAE,MAAM,IAAI,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,KAAK;gBAAE,MAAM,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,EAAE,CAAC;QAC3D,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QAAA,MAAM,IAAI,EAAE,CAAC;IAAA,CAAC;YACf,CAAC;QAAA,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAAA,CAAC;AAC1D,CAAC"}

package/dist/codexSetupPublicStdin.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codexSetupPublicStdin.test.d.ts.map

package/dist/codexSetupPublicStdin.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPublicStdin.test.d.ts","sourceRoot":"","sources":["../src/codexSetupPublicStdin.test.ts"],"names":[],"mappings":""}

package/dist/codexSetupPublicStdin.test.js

@@ -0,0 +1,40 @@
+import assert from 'node:assert/strict';
+import { PassThrough, Readable } from 'node:stream';
+import test from 'node:test';
+import { readCodexSetupPublicStdin } from './codexSetupPublicStdin.js';
+const prompt = '# Public setup\r\nOriginal text is preserved.\n';
+test('public stdin preserves valid original bytes across chunks without echo or file transport', async () => {
+    const stream = Readable.from([Buffer.from(prompt.slice(0, 8)), Buffer.from(prompt.slice(8))]);
+    assert.equal(await readCodexSetupPublicStdin(stream, new AbortController().signal), prompt);
+});
+for (const reason of ['tty', 'cancelled']) {
+    test(`public stdin refuses ${reason} before reading`, async () => {
+        let reads = 0;
+        const stream = new Readable({ read() { reads++; this.push(null); } });
+        const control = new AbortController();
+        if (reason === 'tty')
+            stream.isTTY = true;
+        else
+            control.abort();
+        await assert.rejects(readCodexSetupPublicStdin(stream, control.signal), /^Error: codex_setup_public_input_unavailable$/);
+        assert.equal(reads, 0);
+    });
+}
+for (const [reason, bytes] of [
+    ['oversized', Buffer.alloc(32769, 97)], ['invalid-utf8', Buffer.from([0xc3, 0x28])],
+    ['empty', Buffer.alloc(0)], ['credential', Buffer.from(['dhab', 'synthetic', 'never-real'].join('_'))],
+]) {
+    test(`public stdin rejects ${reason} with a constant non-disclosing result`, async () => {
+        await assert.rejects(readCodexSetupPublicStdin(Readable.from([bytes]), new AbortController().signal), /^Error: codex_setup_public_input_unavailable$/);
+    });
+}
+test('cancellation destroys only the owned waiting public input stream', async () => {
+    const stream = new PassThrough(), other = new PassThrough(), control = new AbortController();
+    const reading = readCodexSetupPublicStdin(stream, control.signal);
+    control.abort();
+    await assert.rejects(reading, /^Error: codex_setup_public_input_unavailable$/);
+    assert.equal(stream.destroyed, true);
+    assert.equal(other.destroyed, false);
+    other.destroy();
+});
+//# sourceMappingURL=codexSetupPublicStdin.test.js.map

package/dist/codexSetupPublicStdin.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexSetupPublicStdin.test.js","sourceRoot":"","sources":["../src/codexSetupPublicStdin.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAC,WAAW,EAAE,QAAQ,EAAC,MAAM,aAAa,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,yBAAyB,EAAC,MAAM,4BAA4B,CAAC;AAErE,MAAM,MAAM,GAAG,iDAAiD,CAAC;AACjE,IAAI,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;IAC1G,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,yBAAyB,CAAC,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC;AACH,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,WAAW,CAAU,EAAE,CAAC;IACnD,IAAI,CAAC,wBAAwB,MAAM,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAC,IAAI,KAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,EAAC,CAAiC,CAAC;QAClG,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,MAAM,KAAK,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;;YAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,+CAA+C,CAAC,CAAC;QACzH,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI;IAC5B,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9F,EAAE,CAAC;IACX,IAAI,CAAC,wBAAwB,MAAM,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,EAClG,+CAA+C,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;IAClF,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,EAAE,KAAK,GAAG,IAAI,WAAW,EAAE,EAAE,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,+CAA+C,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3E,KAAK,CAAC,OAAO,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/codexSetupUserPrompt.d.ts

@@ -5,6 +5,8 @@ export type CodexSetupPromptBinding = Readonly<{
 }>;
 /** Public fields captured from the independently verified recipient/selection. */
 export declare function captureCodexSetupPromptBinding(value: unknown): CodexSetupPromptBinding;
+/** Reject credential-bearing public prose before network or persistence. */
+export declare function capturePublicCodexSetupPrompt(value: unknown): string;
 /** Presentation consistency only. The original host intent and lease, never
  * model-visible prose, remain the authority for every protected setup effect. */
 export declare function captureCodexSetupUserPrompt(value: unknown, intent: Readonly<CodexSetupIntent>, suppliedBinding?: unknown): string | undefined;

package/dist/codexSetupUserPrompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codexSetupUserPrompt.d.ts","sourceRoot":"","sources":["../src/codexSetupUserPrompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,0BAA0B,CAAC;AAG/D,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC;AAEtG,kFAAkF;AAClF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAmBtF;AAED;iFACiF;AACjF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CA4B7I"}
+{"version":3,"file":"codexSetupUserPrompt.d.ts","sourceRoot":"","sources":["../src/codexSetupUserPrompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,0BAA0B,CAAC;AAI/D,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC;AAEtG,kFAAkF;AAClF,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAmBtF;AAED,4EAA4E;AAC5E,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAepE;AAED;iFACiF;AACjF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAiB7I"}

package/dist/codexSetupUserPrompt.js

@@ -1,4 +1,5 @@
 import { redactValue } from '@dharma-ai-labs/agent-fabric-evidence-reduction';
+import { containsCredential } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
 /** Public fields captured from the independently verified recipient/selection. */
 export function captureCodexSetupPromptBinding(value) {
     const invalid = () => { throw new Error('codex_setup_public_prompt_invalid'); };
@@ -28,11 +29,8 @@ export function captureCodexSetupPromptBinding(value) {
     }
     return Object.freeze({ recipientEmail, repositoryRemoteUrl });
 }
-/** Presentation consistency only. The original host intent and lease, never
- * model-visible prose, remain the authority for every protected setup effect. */
-export function captureCodexSetupUserPrompt(value, intent, suppliedBinding) {
-    if (value === undefined)
-        return undefined;
+/** Reject credential-bearing public prose before network or persistence. */
+export function capturePublicCodexSetupPrompt(value) {
     const invalid = () => { throw new Error('codex_setup_public_prompt_invalid'); };
     if (typeof value !== 'string' || !value || Buffer.byteLength(value, 'utf8') > 32_768
         || Buffer.from(value, 'utf8').toString('utf8') !== value
@@ -43,12 +41,21 @@ export function captureCodexSetupUserPrompt(value, intent, suppliedBinding) {
         inputBytes: Buffer.byteLength(value), outputBytes: Buffer.byteLength(value) };
     redactValue(value, stats);
     // Public setup prose includes documented paths, but never secret-bearing values.
-    if ([...stats.classes].some(name => name !== 'local_path')
+    if (containsCredential(value) || [...stats.classes].some(name => name !== 'local_path')
         || /\b(?:proxy[_-]?authorization|authorization|set[_-]?cookie|cookie)["']?\s*[:=]\s*["']?\S+/i.test(value)
         || /\b(?:gh[pousr]_|github_pat_|sk_live_|sk_test_)[A-Za-z0-9_]{12,}|\bBearer\s+[A-Za-z0-9_.+-]{8,}/i.test(value)
         || /\b[A-Za-z0-9_]*(?:password|passwd|secret|api_key|access_token|refresh_token|credentials?|token)(?:_[A-Za-z0-9_]+)?["']?\s*[:=]\s*["']?[^\s"',;]+/i.test(value))
         return invalid();
-    const binding = captureCodexSetupPromptBinding(suppliedBinding), lines = value.split(/\r?\n/);
+    return value;
+}
+/** Presentation consistency only. The original host intent and lease, never
+ * model-visible prose, remain the authority for every protected setup effect. */
+export function captureCodexSetupUserPrompt(value, intent, suppliedBinding) {
+    if (value === undefined)
+        return undefined;
+    const prompt = capturePublicCodexSetupPrompt(value);
+    const invalid = () => { throw new Error('codex_setup_public_prompt_invalid'); };
+    const binding = captureCodexSetupPromptBinding(suppliedBinding), lines = prompt.split(/\r?\n/);
     const only = (prefix) => {
         const selected = lines.filter(line => line.startsWith(prefix));
         if (selected.length !== 1)
@@ -61,6 +68,6 @@ export function captureCodexSetupUserPrompt(value, intent, suppliedBinding) {
         || only('Public setup reference: ') !== `Public setup reference: ${intent.setupReference}. Fixed expiry: ${intent.expiresAt}.`) {
         return invalid();
     }
-    return value;
+    return prompt;
 }
 //# sourceMappingURL=codexSetupUserPrompt.js.map

package/dist/codexSetupUserPrompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"codexSetupUserPrompt.js","sourceRoot":"","sources":["../src/codexSetupUserPrompt.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,WAAW,EAAsB,MAAM,iDAAiD,CAAC;AAIjG,kFAAkF;AAClF,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,MAAM,OAAO,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/G,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oCAAoC;QAAE,OAAO,OAAO,EAAE,CAAC;IACpI,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC9E,MAAM,cAAc,GAAY,MAAM,CAAC,cAAe,CAAC,KAAK,EAAE,mBAAmB,GAAY,MAAM,CAAC,mBAAoB,CAAC,KAAK,CAAC;IAC/H,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,GAAG,GAAG;WAChE,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC;WAC5C,CAAC,kCAAkC,CAAC,IAAI,CAAC,cAAc,CAAC;WACxD,OAAO,mBAAmB,KAAK,QAAQ,IAAI,mBAAmB,CAAC,MAAM,GAAG,IAAI;WAC5E,yBAAyB,CAAC,IAAI,CAAC,mBAAmB,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;eAClF,GAAG,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;IACpI,CAAC;IAAC,MAAM,CAAC;QAAA,OAAO,OAAO,EAAE,CAAC;IAAA,CAAC;IAC3B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,cAAc,EAAE,mBAAmB,EAAC,CAAC,CAAC;AAC9D,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,2BAA2B,CAAC,KAAc,EAAE,MAAkC,EAAE,eAAyB;IACvH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM;WAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK;WACrD,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC;WAC5D,mEAAmE,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACvG,MAAM,KAAK,GAAmB,EAAC,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC;QACpF,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAC,CAAC;IAC/E,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,iFAAiF;IACjF,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC;WACrD,2FAA2F,CAAC,IAAI,CAAC,KAAK,CAAC;WACvG,iGAAiG,CAAC,IAAI,CAAC,KAAK,CAAC;WAC7G,mJAAmJ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACvL,MAAM,OAAO,GAAG,8BAA8B,CAAC,eAAe,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;IACtB,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,sDAAsD;WAClE,IAAI,CAAC,aAAa,CAAC,KAAK,cAAc,OAAO,CAAC,cAAc,mBAAmB,MAAM,CAAC,cAAc,GAAG;WACvG,IAAI,CAAC,uBAAuB,CAAC,KAAK,wBAAwB,OAAO,CAAC,mBAAmB,kBAAkB,MAAM,CAAC,qBAAqB,GAAG;WACtI,IAAI,CAAC,0BAA0B,CAAC,KAAK,2BAA2B,MAAM,CAAC,cAAc,mBAAmB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACjI,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"codexSetupUserPrompt.js","sourceRoot":"","sources":["../src/codexSetupUserPrompt.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,WAAW,EAAsB,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAC,kBAAkB,EAAC,MAAM,2EAA2E,CAAC;AAI7G,kFAAkF;AAClF,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,MAAM,OAAO,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/G,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oCAAoC;QAAE,OAAO,OAAO,EAAE,CAAC;IACpI,MAAM,MAAM,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC9E,MAAM,cAAc,GAAY,MAAM,CAAC,cAAe,CAAC,KAAK,EAAE,mBAAmB,GAAY,MAAM,CAAC,mBAAoB,CAAC,KAAK,CAAC;IAC/H,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,GAAG,GAAG;WAChE,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC;WAC5C,CAAC,kCAAkC,CAAC,IAAI,CAAC,cAAc,CAAC;WACxD,OAAO,mBAAmB,KAAK,QAAQ,IAAI,mBAAmB,CAAC,MAAM,GAAG,IAAI;WAC5E,yBAAyB,CAAC,IAAI,CAAC,mBAAmB,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;eAClF,GAAG,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;IACpI,CAAC;IAAC,MAAM,CAAC;QAAA,OAAO,OAAO,EAAE,CAAC;IAAA,CAAC;IAC3B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,cAAc,EAAE,mBAAmB,EAAC,CAAC,CAAC;AAC9D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,MAAM,OAAO,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM;WAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK;WACrD,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC;WAC5D,mEAAmE,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACvG,MAAM,KAAK,GAAmB,EAAC,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC;QACpF,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAC,CAAC;IAC/E,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,iFAAiF;IACjF,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,CAAC;WAClF,2FAA2F,CAAC,IAAI,CAAC,KAAK,CAAC;WACvG,iGAAiG,CAAC,IAAI,CAAC,KAAK,CAAC;WAC7G,mJAAmJ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACvL,OAAO,KAAK,CAAC;AACf,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,2BAA2B,CAAC,KAAc,EAAE,MAAkC,EAAE,eAAyB;IACvH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,GAAU,EAAE,GAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,8BAA8B,CAAC,eAAe,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE;QAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,EAAE,CAAC;QAC5C,OAAO,QAAQ,CAAC,CAAC,CAAE,CAAC;IACtB,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,sDAAsD;WAClE,IAAI,CAAC,aAAa,CAAC,KAAK,cAAc,OAAO,CAAC,cAAc,mBAAmB,MAAM,CAAC,cAAc,GAAG;WACvG,IAAI,CAAC,uBAAuB,CAAC,KAAK,wBAAwB,OAAO,CAAC,mBAAmB,kBAAkB,MAAM,CAAC,qBAAqB,GAAG;WACtI,IAAI,CAAC,0BAA0B,CAAC,KAAK,2BAA2B,MAAM,CAAC,cAAc,mBAAmB,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QACjI,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/codexSetupUserPrompt.test.js

@@ -78,6 +78,13 @@ test('credential-contaminated public text is rejected before a persistent native
         assert.throws(() => captureCodexSetupUserPrompt(prompt + contaminated, intent, binding), /^Error: codex_setup_public_prompt_invalid$/);
     }
 });
+test('capture rejects product bootstrap grants in otherwise valid public text', () => {
+    const synthetic = ['dhab', 'SYNTHETIC_NOT_A_REAL_GRANT_20261013'].join('_');
+    for (const contaminated of [synthetic, synthetic.toUpperCase(), `Unexpected private value: ${synthetic}`,
+        JSON.stringify({ unrelated: synthetic })]) {
+        assert.throws(() => captureCodexSetupUserPrompt(prompt + contaminated, intent, binding), /^Error: codex_setup_public_prompt_invalid$/);
+    }
+});
 test('public metadata booleans are not mistaken for credential assignments', () => {
     const publicMetadata = prompt + 'directCredentialFileRead:false; providerCredentialRead:false;';
     assert.equal(captureCodexSetupUserPrompt(publicMetadata, intent, binding), publicMetadata);

package/dist/codexSetupUserPrompt.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"codexSetupUserPrompt.test.js","sourceRoot":"","sources":["../src/codexSetupUserPrompt.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,2BAA2B,EAAE,8BAA8B,EAAC,MAAM,2BAA2B,CAAC;AAGtG,MAAM,MAAM,GAAqB,EAAC,MAAM,EAAE,8BAA8B;IACtE,WAAW,EAAE,sCAAsC,EAAE,cAAc,EAAE,sCAAsC;IAC3G,cAAc,EAAE,eAAe,EAAE,qBAAqB,EAAE,sCAAsC;IAC9F,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,WAAW;IAC5G,WAAW,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;IACnF,aAAa,EAAE,sCAAsC;IACrD,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,0BAA0B,EAAC,CAAC;AAC/E,MAAM,MAAM,GAAG,wDAAwD;MACnE,oDAAoD,MAAM,CAAC,cAAc,KAAK;MAC9E,sEAAsE,MAAM,CAAC,qBAAqB,KAAK;MACvG,2BAA2B,MAAM,CAAC,cAAc,mBAAmB,MAAM,CAAC,SAAS,KAAK;MACxF,6EAA6E,CAAC;AAClF,MAAM,OAAO,GAAG,EAAC,cAAc,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,iCAAiC,EAAC,CAAC;AAEnH,IAAI,CAAC,sFAAsF,EAAE,GAAG,EAAE;IAChG,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,sBAAsB,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,sCAAsC,CAAC,CAAC;AAClH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qGAAqG,EAAE,GAAG,EAAE;IAC/G,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB,EAAE,MAAM,GAAG,gBAAgB;QAC/F,MAAM,GAAG,4CAA4C,EAAE,MAAM,GAAG,qBAAqB;QACrF,MAAM,GAAG,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,4CAA4C,CAAC,CAAC;IACzH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,KAAK,MAAM,MAAM,IAAI,CAAC,aAAa,EAAE,uBAAuB,EAAE,0BAA0B,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAE,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC5H,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACnH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC;QACzE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACjH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,GAAG,EAAE;IACxG,MAAM,UAAU,GAAG,MAAM,GAAG,0DAA0D,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,gFAAgF;IAChF,iFAAiF;AACnF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4FAA4F,EAAE,GAAG,EAAE;IACtG,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAC,GAAG,OAAO,EAAE,cAAc,EAAE,EAAE,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,cAAc,EAAE,KAAK,EAAC;QACvG,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,gCAAgC,EAAC;QAC1H,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,8CAA8C,EAAC;QACjF,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,2CAA2C,EAAC;QAC9E,EAAC,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAC;QACtE,EAAC,IAAI,cAAc,KAAI,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAC,CAAC,EAAE,CAAC;QACxH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,EAAE,4CAA4C,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,EAAC,GAAG,OAAO,EAAC,EAAE,QAAQ,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACnF,QAAQ,CAAC,cAAc,GAAG,sBAAsB,CAAC;IACjD,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,GAAG,EAAE;IACzG,KAAK,MAAM,YAAY,IAAI,CAAC,+CAA+C,EAAE,iCAAiC;QAC5G,CAAC,IAAI,EAAE,MAAM,EAAE,6BAA6B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,mDAAmD;QAC5G,uCAAuC,EAAE,kCAAkC;QAC3E,0CAA0C,EAAE,2CAA2C,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,GAAG,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EACrF,4CAA4C,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,cAAc,GAAG,MAAM,GAAG,+DAA+D,CAAC;IAChG,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;AAC7F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,KAAK,MAAM,MAAM,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvH,+CAA+C,EAAE,wDAAwD;QACzG,6CAA6C,EAAE,mDAAmD;QAClG,mDAAmD,EAAE,uDAAuD,CAAC,EAAE,CAAC;QAChH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAC/E,4CAA4C,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"codexSetupUserPrompt.test.js","sourceRoot":"","sources":["../src/codexSetupUserPrompt.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAC,2BAA2B,EAAE,8BAA8B,EAAC,MAAM,2BAA2B,CAAC;AAGtG,MAAM,MAAM,GAAqB,EAAC,MAAM,EAAE,8BAA8B;IACtE,WAAW,EAAE,sCAAsC,EAAE,cAAc,EAAE,sCAAsC;IAC3G,cAAc,EAAE,eAAe,EAAE,qBAAqB,EAAE,sCAAsC;IAC9F,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,WAAW;IAC5G,WAAW,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;IACnF,aAAa,EAAE,sCAAsC;IACrD,QAAQ,EAAE,0BAA0B,EAAE,SAAS,EAAE,0BAA0B,EAAC,CAAC;AAC/E,MAAM,MAAM,GAAG,wDAAwD;MACnE,oDAAoD,MAAM,CAAC,cAAc,KAAK;MAC9E,sEAAsE,MAAM,CAAC,qBAAqB,KAAK;MACvG,2BAA2B,MAAM,CAAC,cAAc,mBAAmB,MAAM,CAAC,SAAS,KAAK;MACxF,6EAA6E,CAAC;AAClF,MAAM,OAAO,GAAG,EAAC,cAAc,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,iCAAiC,EAAC,CAAC;AAEnH,IAAI,CAAC,sFAAsF,EAAE,GAAG,EAAE;IAChG,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,sBAAsB,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,kBAAkB,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,mCAAmC,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,sCAAsC,CAAC,CAAC;AAClH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qGAAqG,EAAE,GAAG,EAAE;IAC/G,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,uBAAuB,EAAE,MAAM,GAAG,gBAAgB;QAC/F,MAAM,GAAG,4CAA4C,EAAE,MAAM,GAAG,qBAAqB;QACrF,MAAM,GAAG,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,4CAA4C,CAAC,CAAC;IACzH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,KAAK,MAAM,MAAM,IAAI,CAAC,aAAa,EAAE,uBAAuB,EAAE,0BAA0B,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAE,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;QAC5H,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACnH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC;QACzE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QACjH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,GAAG,EAAE;IACxG,MAAM,UAAU,GAAG,MAAM,GAAG,0DAA0D,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,gFAAgF;IAChF,iFAAiF;AACnF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4FAA4F,EAAE,GAAG,EAAE;IACtG,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAC,GAAG,OAAO,EAAE,cAAc,EAAE,EAAE,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,cAAc,EAAE,KAAK,EAAC;QACvG,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,gCAAgC,EAAC;QAC1H,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,8CAA8C,EAAC;QACjF,EAAC,GAAG,OAAO,EAAE,mBAAmB,EAAE,2CAA2C,EAAC;QAC9E,EAAC,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAC,EAAE,EAAC,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAC;QACtE,EAAC,IAAI,cAAc,KAAI,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAA,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAC,CAAC,EAAE,CAAC;QACxH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,KAAK,CAAC,EAAE,4CAA4C,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,EAAC,GAAG,OAAO,EAAC,EAAE,QAAQ,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;IACnF,QAAQ,CAAC,cAAc,GAAG,sBAAsB,CAAC;IACjD,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,GAAG,EAAE;IACzG,KAAK,MAAM,YAAY,IAAI,CAAC,+CAA+C,EAAE,iCAAiC;QAC5G,CAAC,IAAI,EAAE,MAAM,EAAE,6BAA6B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,mDAAmD;QAC5G,uCAAuC,EAAE,kCAAkC;QAC3E,0CAA0C,EAAE,2CAA2C,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,GAAG,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EACrF,4CAA4C,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,KAAK,MAAM,YAAY,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,6BAA6B,SAAS,EAAE;QACtG,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAE,SAAS,EAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,GAAG,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EACrF,4CAA4C,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,cAAc,GAAG,MAAM,GAAG,+DAA+D,CAAC;IAChG,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;AAC7F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;IACxF,KAAK,MAAM,MAAM,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvH,+CAA+C,EAAE,wDAAwD;QACzG,6CAA6C,EAAE,mDAAmD;QAClG,mDAAmD,EAAE,uDAAuD,CAAC,EAAE,CAAC;QAChH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAC/E,4CAA4C,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -219,6 +219,11 @@ export declare function openCodexBootstrapNativeHost(input: Omit<Parameters<type
     close: () => Promise<void>;
     settled: Promise<void>;
     initialUserPromptSha256: string | undefined;
+    readonly verifiedCompletion: Readonly<{
+        operationId: string;
+        setupReference: string;
+        readinessReceiptId: string;
+    }> | undefined;
     readonly diagnostics: readonly Readonly<CodexSetupFailureDiagnostic>[];
 }>>;
 /** Prepared controller ingress for the portal's public command, never a shell evaluator. */
@@ -232,11 +237,21 @@ export declare function openCodexBootstrapFromPortalCommand(input: Parameters<ty
     close: () => Promise<void>;
     settled: Promise<void>;
     initialUserPromptSha256: string | undefined;
+    readonly verifiedCompletion: Readonly<{
+        operationId: string;
+        setupReference: string;
+        readinessReceiptId: string;
+    }> | undefined;
     readonly diagnostics: readonly Readonly<CodexSetupFailureDiagnostic>[];
 }>>;
 /** Official native-host composition. The caller supplies its already owned
  * transport and qualification, never a vault, executor or readiness callback. */
 export declare function startCodexBootstrapNativeHost(input: Omit<Parameters<typeof startCodexSetupNativeHost>[0], 'openJournal' | 'execute' | 'verifyReadiness'>): Promise<Readonly<{
+    verifiedCompletion: Readonly<{
+        operationId: string;
+        setupReference: string;
+        readinessReceiptId: string;
+    }> | undefined;
     diagnostics: readonly Readonly<CodexSetupFailureDiagnostic>[];
     threadId: string;
     turnId: string;