@dharma-ai-labs/agent-fabric 0.2.196 → 0.2.197

package/dist/index.js

@@ -86,7 +86,7 @@ import { namedCodexEnvironment } from './namedCodexEnvironment.js';
 import { namedCodexNodeOutputArguments } from './namedCodexNodeOutput.js';
 import { namedCodexFilesystem } from './namedCodexFilesystem.js';
 import { createNamedSessionChildOwner, currentNamedSessionChildOwner } from './namedSessionChildOwner.js';
-import { awaitCodexSetupSession, codexSetupSessionPolicyHash, consumeCodexSetupSessions, currentAcceptedSetupSessionScope, originalCodexSetupSessionSender, withCodexSetupSessionSender } from './codexSetupSessionHandoff.js';
+import { assertCodexSetupSessionPostCommitAcknowledged, awaitCodexSetupSession, clearCodexSetupSessionPostCommitAcknowledgment, codexSetupSessionPolicyHash, consumeCodexSetupSessions, currentAcceptedSetupSessionScope, originalCodexSetupSessionSender, withCodexSetupSessionSender } from './codexSetupSessionHandoff.js';
 import { receiveCodexSetupChildStart, runCodexSetupChildStartup, sendCodexSetupChildStart } from './codexSetupChildStartup.js';
 import { assertBootstrapHostSource, captureBootstrapHostChild, currentBootstrapHostScope, inspectCodexBootstrapHostPreparation, prepareCodexBootstrapHost, runCodexBootstrapHost, runCodexBootstrapHostScope } from './bootstrapHostScope.js';
 // Trusted runtime composition only; these exports do not enable effectful setup.
@@ -104,7 +104,7 @@ import { assertCodexSetupExecutionLease } from './codexSetupAdmission.js';
 import { parseLocalCodexSetupReadiness } from '@dharma-ai-labs/agent-fabric-local-vault/setup-readiness';
 import { writeBootstrapHostJson, writeBootstrapHostText } from './bootstrapHostFiles.js';
 export { openCooperativeInboxSession } from './cooperativeInboxSession.js';
-const VERSION = '0.2.196';
+const VERSION = '0.2.197';
 const USAGE = CLI_USAGE;
 const execFileAsync = promisify(execFile);
 const LOCAL_PROVIDER_IDS = ['codex', 'claude', 'agy', 'hermes'];
@@ -2616,7 +2616,7 @@ async function readBootstrapRuntimeJson(path, scope) {
     }
 }
 /** Actual scoped runtime readback. No callback-supplied ready flag or receipt ID. */
-async function observeCodexBootstrapRuntime(prepared, vault, firstLearning, intentDigest) {
+async function observeCodexBootstrapRuntime(prepared, vault, firstLearning, intentDigest, requirePostCommitAcknowledgment = false) {
     const { scope, intent } = prepared, workspace = String(prepared.flags.get('workspace'));
     const step = (operation) => scope.step(operation);
     await scope.assert();
@@ -2754,7 +2754,14 @@ async function observeCodexBootstrapRuntime(prepared, vault, firstLearning, inte
             throw new Error('setup_runtime_session_unconfirmed');
         const handoff = await step(() => vault.readCodexSetupSession(intent.operationId, intentDigest));
         const request = handoff?.request, result = handoff?.result;
+        const acceptedAt = typeof handoff?.acceptedAt === 'string' ? Date.parse(handoff.acceptedAt) : NaN;
+        const resultRecordedAt = typeof handoff?.resultRecordedAt === 'string' ? Date.parse(handoff.resultRecordedAt) : NaN;
         if (handoff?.state !== 'accepted' || !request || result?.state !== 'started'
+            || !Number.isFinite(acceptedAt) || !Number.isFinite(resultRecordedAt)
+            || new Date(acceptedAt).toISOString() !== handoff.acceptedAt
+            || new Date(resultRecordedAt).toISOString() !== handoff.resultRecordedAt
+            || acceptedAt < Date.parse(request.issuedAt) || acceptedAt >= Date.parse(request.expiresAt)
+            || resultRecordedAt < acceptedAt || resultRecordedAt >= Date.parse(request.expiresAt)
             || request.setupReference !== intent.setupReference || request.membershipId !== intent.recipientMembershipId
             || request.organizationId !== intent.organizationId || request.deviceId !== config.deviceId
             || request.workspaceId !== item.workspaceId || request.workspaceRoot !== workspace || request.name !== name
@@ -2765,6 +2772,10 @@ async function observeCodexBootstrapRuntime(prepared, vault, firstLearning, inte
             || result.supervisorPid !== supervisorPid || result.sessionStartTicks !== processes[2].startTicks
             || result.supervisorStartTicks !== processes[0].startTicks)
             throw new Error('setup_runtime_session_unconfirmed');
+        if (requirePostCommitAcknowledgment)
+            assertCodexSetupSessionPostCommitAcknowledged(scope, {
+                request, result, acceptedAt: handoff.acceptedAt, resultRecordedAt: handoff.resultRecordedAt,
+            });
     }
     const supervisor = await readBootstrapRuntimeJson(resolve(home, 'relay', 'supervisor-workspace.json'), scope);
     if (supervisor.pid !== supervisorPid || supervisor.organizationId !== intent.organizationId || supervisor.deviceId !== config.deviceId
@@ -2824,7 +2835,7 @@ export async function createCodexBootstrapCompletionOwner(scope, vault, observeF
             if (!disposition)
                 throw new Error('setup_runtime_first_learning_unconfirmed');
             // Keep the original execution's disposition; reobserve all live state.
-            return runCodexBootstrapHostScope(scope, current => observeCodexBootstrapRuntime(current, vault, disposition, intentDigest));
+            return runCodexBootstrapHostScope(scope, current => observeCodexBootstrapRuntime(current, vault, disposition, intentDigest, retained === undefined));
         } });
     return Object.freeze({
         execute: async (lease) => {
@@ -2847,6 +2858,9 @@ export async function createCodexBootstrapCompletionOwner(scope, vault, observeF
                     reportCodexSetupFailure(observeFailure, error, 'completion');
                 throw error;
             }
+            finally {
+                clearCodexSetupSessionPostCommitAcknowledgment(scope);
+            }
         },
         verify: readiness.verify,
     });