@dharma-ai-labs/agent-fabric 0.2.202 → 0.2.204

package/AGENT_FABRIC_ONBOARDING.md

@@ -67,6 +67,8 @@ On a **source-authorized** Linux Codex client, complete bootstrap also starts on
 
 For local coding requests, use `dharma sessions work --name <name> --workspace-id <workspace-id> --work-id <unique-work-id> --prompt "<bounded coding request>"`. This runs in the same retained conversation under the signed policy's approved writable folders. Each peer question uses a separate read-only turn profile with network disabled; it cannot inherit the previous local turn's write permissions. Work and questions are serialized, and signed package activation waits for the task boundary. Keep requests bounded by the session allowance; reserved costs remain liabilities until actual usage is reconciled.
 
+A reserved peer cost is not proof that the peer executed. If transport fails before server acceptance, the named session can reuse that exact-cost peer reservation only for the still-queued signed question and a fresh server acceptance. It never clears the reservation, reuses local-work or legacy accounting, accepts a replayed acknowledgement as new execution authority, or automatically reruns an expired question or an uncertain already-accepted turn. Report an explicit unresolved result rather than repeatedly asking the same question or increasing its allowance.
+
 New named Codex conversations expose `dharma_peer_ask` and `dharma_peer_reply` tools during local coding turns. Supply the exact peer binding and task IDs, category and bounded question; inspect the returned state rather than treating `queued` as an answer. These tools delegate through the enrolled owner, not model-readable credentials or network access. They are unavailable in incoming read-only question turns, cannot approve devices or change policy, and stop on revocation or uncertain delivery. Obtain peer binding IDs from their attributed readiness/status receipts; role discovery alone does not prove a live conversation. Existing conversations require verification of retained tool availability after restart; do not create a replacement enrollment to hide a failure.
 
 For bounded named questions and answers in local-analysis mode, current enrolled workspace/repository source authorization is checked independently of automatic-learning consent. The current whole-repository peer sandbox requires whole-repository source approval; partial paths, revoked/expired/unavailable policy, metadata-only mode, excluded paths and secret-bearing text stay blocked. Do not enable organization-wide native-history ingestion to work around a peer failure. Peer messages do not become accepted learning observations. The task ID is local correlation, not execution authority; the signed read-only offer, exact target/session, expiry, owner and budget still govern execution.

package/README.md

@@ -336,6 +336,14 @@ they do not establish full context, the executed model, or actual skill use, and
 local coding work. Queue failures preserve the actual coding result; a failed or
 interrupted provider turn retains its reservation and is not replayed on restart.
 
+For named-session peer questions, a transport failure before server acceptance
+does not require clearing the reserved cost. The same exact-cost peer reservation
+can be reused only while its signed offer remains queued and the server confirms
+a fresh acceptance. A replayed acceptance cannot authorize another provider turn.
+Peer reservations have a separate internal namespace; local-work and legacy
+reservations remain distinct liabilities and retain their replay guards. An
+expired question or an uncertain already-accepted turn is not automatically rerun.
+
 ## Manual enrollment
 
 Manual browser-confirmed enrollment remains available when no one-time grant is

package/dist/codexBoundSession.d.ts

@@ -9,6 +9,7 @@ interface CodexBoundSessionInput {
     openTransport(): Promise<CodexStdioTransport>;
     verifier: SessionQuestionVerifier;
     budget: CodexSessionBudget;
+    questionBudget?: CodexSessionBudget;
     localWriteRoots?: string[];
     additionalFilesystemRules?: Readonly<Record<string, 'read' | 'deny'>>;
     localToolHandler?: CodexToolHandler;
@@ -37,6 +38,7 @@ export declare function openCodexBoundSession(input: CodexBoundSessionInput): Pr
         question: unknown;
         now?: Date;
         timeoutMs?: number;
+        repositoryContext?: string;
     }): Promise<{
         answer: string;
         answerHash: string;
@@ -52,6 +54,7 @@ export declare function openCodexBoundSession(input: CodexBoundSessionInput): Pr
 }>;
 export declare function runCodexBoundSessionQuestion(input: CodexBoundSessionInput & {
     question: unknown;
+    repositoryContext?: string;
     now?: Date;
     timeoutMs?: number;
 }): Promise<{

package/dist/codexBoundSession.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codexBoundSession.d.ts","sourceRoot":"","sources":["../src/codexBoundSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACxH,OAAO,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC3H,OAAO,EAA8E,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,2EAA2E,CAAC;AACnP,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6EAA6E,CAAC;AAEvH,UAAU,sBAAsB;IAC9B,KAAK,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,4BAA4B,CAAC;IAEvC,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,yBAAyB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IACtE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,sBAAsB;;;qBA2C9C;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,wBAAwB,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5G,cAAc,CAAC,EAAE,qBAAqB,CAAA;KAAE;;;;;;;;;;yBAiBf;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;GAkCnF;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,sBAAsB,GAAG;IACjF,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;;;;;;;;;;;GAmBA"}
+{"version":3,"file":"codexBoundSession.d.ts","sourceRoot":"","sources":["../src/codexBoundSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACxH,OAAO,KAAK,EAAE,4BAA4B,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC3H,OAAO,EAA8E,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,2EAA2E,CAAC;AACnP,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6EAA6E,CAAC;AAEvH,UAAU,sBAAsB;IAC9B,KAAK,EAAE,UAAU,GAAG,gBAAgB,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,4BAA4B,CAAC;IAEvC,aAAa,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,QAAQ,EAAE,uBAAuB,CAAC;IAClC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,yBAAyB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IACtE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,sBAAsB;;;qBA2C9C;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,wBAAwB,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5G,cAAc,CAAC,EAAE,qBAAqB,CAAA;KAAE;;;;;;;;;;yBAiBf;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;;;;;;;;GAmC/G;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,sBAAsB,GAAG;IACjF,QAAQ,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;;;;;;;;;;;GAmBA"}

package/dist/codexBoundSession.js

@@ -111,8 +111,9 @@ export async function openCodexBoundSession(input) {
             try {
                 const result = await runCodexBridgeQuestion({
                     transport, binding: codexBinding, question: request.question,
-                    verifier: input.verifier, exclusiveLease: lease, budget: input.budget,
+                    verifier: input.verifier, exclusiveLease: lease, budget: input.questionBudget ?? input.budget,
                     now: request.now, timeoutMs: request.timeoutMs,
+                    repositoryContext: request.repositoryContext,
                     additionalFilesystemRules: input.additionalFilesystemRules,
                 });
                 if (closing)

package/dist/codexBoundSession.js.map

@@ -1 +1 @@
-{"version":3,"file":"codexBoundSession.js","sourceRoot":"","sources":["../src/codexBoundSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAgC,MAAM,wCAAwC,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,iBAAiB,EAA8E,MAAM,2EAA2E,CAAC;AAkBnP,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA6B;IACvE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;eACzF,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,wBAAwB,KAAK,OAAO,CAAC,wBAAwB,EAAE,CAAC;YAC9G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC;IACxB,IAAI,SAA8B,CAAC;IACnC,IAAI,CAAC;QAAC,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;IAAC,CAAC;IAChD,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAE1C,KAAK,UAAU,KAAK;QAClB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,2EAA2E;YAC3E,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YAAC,MAAM,QAAQ,CAAC;QAAC,CAAC;gBACf,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACpF,KAAK,CAAC,OAAO,CAAC,OAC4B;YACxC,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrD,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE;oBAC7F,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;oBACxF,WAAW,EAAE,KAAK,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;gBACrG,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,kCAAkC,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7H,IAAI,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;gBACtF,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,OAA8D;YAC9E,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrD,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,YAAwD,CAAC;YAC7D,IAAI,CAAC;gBACH,IAAI,CAAC;oBAAC,YAAY,GAAG,MAAM,cAAc,EAAE,CAAC;gBAAC,CAAC;gBAC9C,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBACxG,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAC/E,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC7C,IAAI,CAAC,SAAS,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAA,OAAO,GAAG,KAAK,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAA,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;oBAC1C,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC5D,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;oBACrE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC9C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;iBAC3D,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,CAAC,KAAK,CAAC,sBAAsB,IAAI,MAAM,KAAK,4BAA4B,CAAC;uBACzE,CAAC,CAAC,KAAK,YAAY,+BAA+B,CAAC;uBACnD,CAAC,CAAC,kCAAkC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxE,IAAI,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;oBAAC,CAAC;oBACtB,MAAM,CAAC,CAAC,sEAAsE,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAIlD;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAC7E,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"codexBoundSession.js","sourceRoot":"","sources":["../src/codexBoundSession.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAgC,MAAM,wCAAwC,CAAC;AAExH,OAAO,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,iBAAiB,EAA8E,MAAM,2EAA2E,CAAC;AAmBnP,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA6B;IACvE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;eACzF,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,wBAAwB,KAAK,OAAO,CAAC,wBAAwB,EAAE,CAAC;YAC9G,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC;IACxB,IAAI,SAA8B,CAAC;IACnC,IAAI,CAAC;QAAC,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;IAAC,CAAC;IAChD,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAE1C,KAAK,UAAU,KAAK;QAClB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,2EAA2E;YAC3E,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC;YAAC,MAAM,QAAQ,CAAC;QAAC,CAAC;gBACf,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACpF,KAAK,CAAC,OAAO,CAAC,OAC4B;YACxC,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrD,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE;oBAC7F,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;oBACxF,WAAW,EAAE,KAAK,CAAC,gBAAgB,EAAE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;gBACrG,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,CAAC,kCAAkC,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC7H,IAAI,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;gBACtF,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,OAA0F;YAC1G,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrD,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,YAAwD,CAAC;YAC7D,IAAI,CAAC;gBACH,IAAI,CAAC;oBAAC,YAAY,GAAG,MAAM,cAAc,EAAE,CAAC;gBAAC,CAAC;gBAC9C,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBACxG,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAC/E,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;gBAC7C,IAAI,CAAC,SAAS,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAA,OAAO,GAAG,KAAK,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAA,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;oBAC1C,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC5D,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,MAAM;oBAC7F,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC9C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;oBAC5C,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;iBAC3D,CAAC,CAAC;gBACH,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,2EAA2E;gBAC3E,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,CAAC,KAAK,CAAC,sBAAsB,IAAI,MAAM,KAAK,4BAA4B,CAAC;uBACzE,CAAC,CAAC,KAAK,YAAY,+BAA+B,CAAC;uBACnD,CAAC,CAAC,kCAAkC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxE,IAAI,CAAC;wBAAC,MAAM,KAAK,EAAE,CAAC;oBAAC,CAAC;oBACtB,MAAM,CAAC,CAAC,sEAAsE,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAKlD;IACC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7F,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAC7E,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;QAC5E,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/codexBoundSession.test.js

@@ -3,6 +3,7 @@ import { createHash, generateKeyPairSync, randomBytes } from 'node:crypto';
 import { mkdtemp } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { join, resolve } from 'node:path';
+import { createServer } from 'node:http';
 import test, { describe } from 'node:test';
 import { canonicalize, signCanonicalObject } from '@dharma-ai-labs/agent-fabric-contracts';
 import { LocalVault } from '@dharma-ai-labs/agent-fabric-local-vault';
@@ -10,6 +11,7 @@ import { openCodexBoundSession, runCodexBoundSessionQuestion } from './codexBoun
 import { openCodexInboxSession } from './codexInboxSession.js';
 import { reconcileProviderSessionReply } from './providerSessionReplyRecovery.js';
 import { NamedPeerContentAuthorizationError } from './namedPeerContentAuthorization.js';
+import { NamedSessionBudget } from './namedSessionBudget.js';
 const { privateKey, publicKey } = generateKeyPairSync('ed25519');
 const ids = {
     repositoryBindingId: '40000000-0000-4000-8000-000000000001',
@@ -216,6 +218,90 @@ describe('qualified Linux retained Codex consumer', { skip: process.platform !==
             f.vault.close();
         }
     });
+    for (const scenario of ['current', 'denied', 'forged', 'expired'])
+        test('peer context is loaded lazily per offered question before acceptance: '
+            + scenario, async () => {
+            const deniedContext = scenario === 'denied';
+            const f = await fixture(), remote = fakeTransport(f.binding);
+            let offered = false, accepted = false, loads = 0, reserves = 0;
+            let q = signedQuestion(f.binding, f.now), context = 'CURRENT_SIGNED_V8';
+            if (scenario === 'forged')
+                q = { ...q, signature: 'invalid-fixture-signature' };
+            if (scenario === 'expired') {
+                const { signature: _signature, ...unsigned } = q;
+                const expired = { ...unsigned, expiresAt: new Date(f.now.getTime() - 1).toISOString() };
+                q = { ...expired, signature: signCanonicalObject(expired, privateKey) };
+            }
+            const prompts = [];
+            const request = remote.transport.request.bind(remote.transport);
+            remote.transport.request = async (method, params) => {
+                if (method === 'turn/start')
+                    prompts.push(JSON.stringify(params.input));
+                return request(method, params);
+            };
+            const channelTransport = { async signedPost(route, input) {
+                    const body = input;
+                    const envelope = { ok: true, organizationId: f.binding.organizationId, correlationId: ids.threadId };
+                    if (route.endsWith('provider-sessions'))
+                        return { ...envelope, registration: {
+                                bindingId: f.binding.bindingId, workspaceId: f.binding.workspaceId, endpointId: f.binding.endpointId,
+                                repositoryBindingId: f.binding.repositoryBindingId, membershipId: f.binding.membershipId,
+                                deviceId: f.binding.deviceId, provider: 'codex', mode: 'bridge_owned', revision: 1, state: 'attached',
+                                leaseUntil: new Date(Date.now() + 60000).toISOString(), replay: false
+                            } };
+                    if (body.action === 'inbox')
+                        return { ...envelope, result: { offers: offered && !accepted ? [q] : [] } };
+                    if (body.action === 'accept')
+                        accepted = true;
+                    return { ...envelope, result: { questionId: q.questionId, taskId: q.taskId,
+                            targetBindingId: f.binding.bindingId, state: body.action === 'reply' ? 'answered' : 'accepted', replay: false } };
+                } };
+            const inbox = await openCodexInboxSession({ ...f, bindingId: f.binding.bindingId, expectedRevision: 0,
+                channelTransport, authorizeContent: async () => true,
+                budget: { reserve: async () => { reserves++; return true; } }, openTransport: async () => remote.transport });
+            const options = { loadRepositoryContext: async () => {
+                    assert.equal(accepted, false);
+                    loads++;
+                    if (deniedContext)
+                        throw new Error('synthetic_context_denied');
+                    return context;
+                } };
+            try {
+                assert.equal((await Reflect.apply(inbox.runNext, inbox, [options])).state, 'idle');
+                assert.equal(loads, 0);
+                offered = true;
+                if (scenario === 'forged' || scenario === 'expired') {
+                    await assert.rejects(Reflect.apply(inbox.runNext, inbox, [options]), /provider_session_channel_response/);
+                    assert.equal(loads, 0);
+                    assert.equal(reserves, 0);
+                    assert.equal(accepted, false);
+                    assert.equal(prompts.length, 0);
+                }
+                else if (deniedContext) {
+                    await assert.rejects(Reflect.apply(inbox.runNext, inbox, [options]), /synthetic_context_denied/);
+                    assert.equal(loads, 1);
+                    assert.equal(reserves, 0);
+                    assert.equal(accepted, false);
+                    assert.equal(prompts.length, 0);
+                }
+                else {
+                    assert.equal((await Reflect.apply(inbox.runNext, inbox, [options])).state, 'answered');
+                    assert.equal(loads, 1);
+                    assert.match(prompts[0], /CURRENT_SIGNED_V8/);
+                    context = 'CURRENT_SIGNED_V9';
+                    accepted = false;
+                    q = signedQuestion(f.binding, f.now, '40000000-0000-4000-8000-000000000020');
+                    assert.equal((await Reflect.apply(inbox.runNext, inbox, [options])).state, 'answered');
+                    assert.equal(loads, 2);
+                    assert.match(prompts[1], /CURRENT_SIGNED_V9/);
+                    assert.doesNotMatch(prompts[1], /CURRENT_SIGNED_V8/);
+                }
+            }
+            finally {
+                await inbox.close();
+                f.vault.close();
+            }
+        });
     test('default inbox startup recovers the server revision with its retained local owner and no provider turn', async () => {
         const f = await fixture(), remote = fakeTransport(f.binding), actions = [];
         let reserves = 0;
@@ -684,6 +770,182 @@ describe('qualified Linux retained Codex consumer', { skip: process.platform !==
             f.vault.close();
         }
     });
+    test('an unaccepted question recovers its existing reservation only through a fresh acceptance', async () => {
+        const f = await fixture(), question = signedQuestion(f.binding, f.now);
+        const path = join(f.root, 'question-budget.sqlite');
+        let budget = new NamedSessionBudget(path, 'question-recovery', 50);
+        let accepts = 0, accepted = false;
+        const remotes = [];
+        const channelTransport = { async signedPost(route, input) {
+                const body = input;
+                const envelope = { ok: true, organizationId: f.binding.organizationId, correlationId: ids.threadId };
+                if (route.endsWith('provider-sessions'))
+                    return { ...envelope, registration: {
+                            bindingId: f.binding.bindingId, workspaceId: f.binding.workspaceId, endpointId: f.binding.endpointId,
+                            repositoryBindingId: f.binding.repositoryBindingId, membershipId: f.binding.membershipId,
+                            deviceId: f.binding.deviceId, provider: 'codex', mode: 'bridge_owned',
+                            revision: Number(body.expectedRevision) + 1, state: 'attached',
+                            leaseUntil: new Date(Date.now() + 60_000).toISOString(), replay: false
+                        } };
+                if (body.action === 'inbox')
+                    return { ...envelope, result: { offers: accepted ? [] : [question] } };
+                if (body.action === 'accept') {
+                    accepts++;
+                    if (accepts === 1)
+                        throw new Error('private-transport-error-must-not-be-exposed');
+                    assert.equal(accepted, false);
+                    accepted = true;
+                }
+                return { ...envelope, result: { questionId: question.questionId, taskId: question.taskId,
+                        targetBindingId: f.binding.bindingId, state: body.action === 'reply' ? 'answered' : 'accepted', replay: false } };
+            } };
+        const open = async () => {
+            const remote = fakeTransport(f.binding);
+            remotes.push(remote);
+            const options = { ...f, bindingId: f.binding.bindingId, expectedRevision: 0,
+                budget: { reserve: async (id, cents) => budget.reserve(id, cents) },
+                questionBudget: { reserve: async (id, cents) => budget.reserveUnacceptedQuestion(id, cents) },
+                channelTransport, authorizeContent: async () => true, openTransport: async () => remote.transport };
+            return openCodexInboxSession(options);
+        };
+        let inbox = await open();
+        try {
+            await assert.rejects(inbox.runNext(), /provider_session_channel_uncertain/);
+            assert.equal(accepted, false);
+            assert.equal(remotes[0].calls.includes('turn/start'), false);
+            assert.equal(budget.status().reservedCents, 25);
+            await inbox.close();
+            budget.close();
+            budget = new NamedSessionBudget(path, 'question-recovery', 50);
+            inbox = await open();
+            assert.equal((await inbox.runNext()).state, 'answered');
+            assert.equal(accepts, 2);
+            assert.equal(remotes.flatMap(remote => remote.calls).filter(call => call === 'turn/start').length, 1);
+            assert.equal(budget.status().reservedCents, 25);
+            assert.equal(budget.reserve(question.questionId, 25), true, 'a distinct local-work purpose needs its own reservation');
+            assert.equal(budget.reserve(question.questionId, 25), false, 'local-work reservation replay stays forbidden');
+            assert.equal(budget.status().reservedCents, 50);
+        }
+        finally {
+            await inbox.close();
+            budget.close();
+            f.vault.close();
+        }
+    });
+    for (const lostAt of ['before_commit', 'after_commit'])
+        test(`HTTP acceptance loss ${lostAt} preserves cost and never repeats execution`, async () => {
+            const f = await fixture(), question = signedQuestion(f.binding, f.now);
+            const path = join(f.root, 'http-question-budget.sqlite');
+            let budget = new NamedSessionBudget(path, 'http-question-recovery', 50);
+            let accepted = false, accepts = 0;
+            const remotes = [];
+            const server = createServer(async (request, response) => {
+                const chunks = [];
+                for await (const chunk of request)
+                    chunks.push(Buffer.from(chunk));
+                const body = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+                const envelope = { ok: true, organizationId: f.binding.organizationId, correlationId: ids.threadId };
+                const send = (value) => { response.setHeader('content-type', 'application/json'); response.end(JSON.stringify(value)); };
+                assert.equal(body.bindingId, f.binding.bindingId);
+                assert.equal(body.workspaceId, f.binding.workspaceId);
+                if (request.url?.endsWith('provider-sessions')) {
+                    send({ ...envelope, registration: {
+                            bindingId: f.binding.bindingId, workspaceId: f.binding.workspaceId, endpointId: f.binding.endpointId,
+                            repositoryBindingId: f.binding.repositoryBindingId, membershipId: f.binding.membershipId,
+                            deviceId: f.binding.deviceId, provider: 'codex', mode: 'bridge_owned',
+                            revision: Number(body.expectedRevision) + 1, state: 'attached',
+                            leaseUntil: new Date(Date.now() + 60_000).toISOString(), replay: false
+                        } });
+                    return;
+                }
+                if (body.action === 'inbox') {
+                    send({ ...envelope, result: { offers: accepted ? [] : [question] } });
+                    return;
+                }
+                if (body.action === 'accept') {
+                    accepts++;
+                    if (accepts === 1) {
+                        accepted = lostAt === 'after_commit';
+                        request.socket.destroy();
+                        return;
+                    }
+                    assert.equal(accepted, false);
+                    accepted = true;
+                }
+                send({ ...envelope, result: { questionId: question.questionId, taskId: question.taskId,
+                        targetBindingId: f.binding.bindingId, state: body.action === 'reply' ? 'answered' : 'accepted', replay: false } });
+            });
+            await new Promise(resolveListen => server.listen(0, '127.0.0.1', resolveListen));
+            const origin = `http://127.0.0.1:${server.address().port}`;
+            const channelTransport = { async signedPost(route, body) {
+                    const response = await fetch(origin + route, { method: 'POST', body: JSON.stringify(body),
+                        headers: { 'content-type': 'application/json' }, signal: AbortSignal.timeout(3000) });
+                    assert.equal(response.status, 200);
+                    return await response.json();
+                } };
+            const open = async () => {
+                const remote = fakeTransport(f.binding);
+                remotes.push(remote);
+                return openCodexInboxSession({ ...f, bindingId: f.binding.bindingId, expectedRevision: 0,
+                    budget: { reserve: async (id, cents) => budget.reserve(id, cents) },
+                    questionBudget: { reserve: async (id, cents) => budget.reserveUnacceptedQuestion(id, cents) },
+                    channelTransport, authorizeContent: async () => true, openTransport: async () => remote.transport });
+            };
+            let inbox = await open();
+            try {
+                await assert.rejects(inbox.runNext(), /provider_session_channel_uncertain/);
+                assert.equal(remotes[0].calls.includes('turn/start'), false);
+                assert.equal(budget.status().reservedCents, 25);
+                await inbox.close();
+                budget.close();
+                budget = new NamedSessionBudget(path, 'http-question-recovery', 50);
+                inbox = await open();
+                assert.equal((await inbox.runNext()).state, lostAt === 'before_commit' ? 'answered' : 'idle');
+                assert.equal(accepts, lostAt === 'before_commit' ? 2 : 1);
+                assert.equal(remotes.flatMap(remote => remote.calls).filter(call => call === 'turn/start').length, lostAt === 'before_commit' ? 1 : 0);
+                assert.equal(budget.status().reservedCents, 25);
+            }
+            finally {
+                await inbox.close();
+                budget.close();
+                f.vault.close();
+                server.closeAllConnections();
+                await new Promise(resolveClose => server.close(() => resolveClose()));
+            }
+        });
+    test('a replayed acceptance never authorizes another provider turn', async () => {
+        const f = await fixture(), question = signedQuestion(f.binding, f.now), remote = fakeTransport(f.binding);
+        let accepts = 0;
+        const channelTransport = { async signedPost(route, input) {
+                const body = input;
+                const envelope = { ok: true, organizationId: f.binding.organizationId, correlationId: ids.threadId };
+                if (route.endsWith('provider-sessions'))
+                    return { ...envelope, registration: {
+                            bindingId: f.binding.bindingId, workspaceId: f.binding.workspaceId, endpointId: f.binding.endpointId,
+                            repositoryBindingId: f.binding.repositoryBindingId, membershipId: f.binding.membershipId,
+                            deviceId: f.binding.deviceId, provider: 'codex', mode: 'bridge_owned',
+                            revision: Number(body.expectedRevision) + 1, state: 'attached',
+                            leaseUntil: new Date(Date.now() + 60_000).toISOString(), replay: false
+                        } };
+                if (body.action === 'inbox')
+                    return { ...envelope, result: { offers: [question] } };
+                if (body.action === 'accept')
+                    accepts++;
+                return { ...envelope, result: { questionId: question.questionId, taskId: question.taskId,
+                        targetBindingId: f.binding.bindingId, state: body.action === 'reply' ? 'answered' : 'accepted', replay: true } };
+            } };
+        const inbox = await openCodexInboxSession({ ...f, bindingId: f.binding.bindingId, expectedRevision: 0,
+            channelTransport, authorizeContent: async () => true, openTransport: async () => remote.transport });
+        try {
+            await assert.rejects(inbox.runNext(), /replayed/);
+            assert.equal(accepts, 1);
+            assert.equal(remote.calls.includes('turn/start'), false);
+        }
+        finally {
+            await inbox.close();
+            f.vault.close();
+        }
+    });
     test('bound dispatch resolves one encrypted binding and releases a completed turn', async () => {
         const f = await fixture();
         const remote = fakeTransport(f.binding);