@hellolynk-ai/codex-plugin 0.2.104-macos.1 → 0.2.105-macos.1

package/hellolynk-client-pack-manifest.json

@@ -2,7 +2,7 @@
   "contract": "hellolynk-client-npm-pack-manifest-v1",
   "client": "codex",
   "packageName": "@hellolynk-ai/codex-plugin",
-  "version": "0.2.104-macos.1",
+  "version": "0.2.105-macos.1",
   "workbench": {
     "path": "plugins/hellolynk-codex/runtime/workbench/hellolynk-workbench-build.json",
     "contract": "hellolynk-shared-workbench-build-v1",
@@ -33,7 +33,7 @@
     {
       "path": "package.json",
       "bytes": 1776,
-      "sha256": "9485c043ba6f164976d9256d03da20c8db9a5c688d10359fc006a5b17ffeb917"
+      "sha256": "359e72f8e2c6b348b590151d5c95f8dd9bf08e7812e55baea52c074286072124"
     },
     {
       "path": "plugins/hellolynk-codex/.app.json",
@@ -43,7 +43,7 @@
     {
       "path": "plugins/hellolynk-codex/.codex-plugin/plugin.json",
       "bytes": 1669,
-      "sha256": "5cbee29306a0ff88cbe11d76bcaefdbfd5b56292cf8e5a4de21577ca0b61674e"
+      "sha256": "dc33e34ece594590424d3ec1508409e07a02741db5d93d368824e46f12c095a2"
     },
     {
       "path": "plugins/hellolynk-codex/.mcp.json",
@@ -58,7 +58,7 @@
     {
       "path": "plugins/hellolynk-codex/package.json",
       "bytes": 1030,
-      "sha256": "6f378efda0ab9a8f5555e88978dfaccdf7db448b7219da4e86b21fe0b59f1f75"
+      "sha256": "be5fc524bab2f659f8f1e851bd1c59c6edf2a5fd4394c1a917a8d5ee9321190e"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-account.mjs",
@@ -67,8 +67,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-core.mjs",
-      "bytes": 33550,
-      "sha256": "94bbad1d0ccee969bbffed176449e427188f1b892512a64167ab31f63d258e2b"
+      "bytes": 35808,
+      "sha256": "dbab0f067c1a7f02c43b2696e1f5972288acd4f93a18684bf3cc120edff5cf94"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-profile.mjs",
@@ -107,8 +107,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 38559,
-      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
+      "bytes": 40123,
+      "sha256": "4b4b27cd86f4816e5e6ec4914816a335cdea5c4b4ffb2091775c061a9676a69c"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-runtime-safety.cjs",
@@ -147,8 +147,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-core.mjs",
-      "bytes": 33550,
-      "sha256": "94bbad1d0ccee969bbffed176449e427188f1b892512a64167ab31f63d258e2b"
+      "bytes": 35808,
+      "sha256": "dbab0f067c1a7f02c43b2696e1f5972288acd4f93a18684bf3cc120edff5cf94"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-client-profile.mjs",
@@ -332,8 +332,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-assembly.mjs",
-      "bytes": 46842,
-      "sha256": "d0ac9c697bf8a85263d99a0739da557c62f52c72f4afb105eb97b3aac2ae1f3b"
+      "bytes": 46294,
+      "sha256": "287ad6e077c8da05799b970ffa6607d8c7a0ab54a4837de51516e6af0ef6695b"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-installation-store.mjs",
@@ -348,7 +348,7 @@
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-process.mjs",
       "bytes": 225161,
-      "sha256": "7b237a1400c604da5decbb29ab3ce556fd1b744d0cfd7d28b5560b217da120b1"
+      "sha256": "ad6809633f49f7316acf6ce5b8f71a13d7ba20d3b62a2700664421ba671b5369"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-store-adapters.mjs",
@@ -362,8 +362,8 @@
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-platform-credential-store.mjs",
-      "bytes": 38559,
-      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
+      "bytes": 40123,
+      "sha256": "4b4b27cd86f4816e5e6ec4914816a335cdea5c4b4ffb2091775c061a9676a69c"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/core/hellolynk-relay-client-cli.mjs",
@@ -408,12 +408,12 @@
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-manifest.json",
       "bytes": 14698,
-      "sha256": "96b171b53d91da097e2c36c36dbe9e6e6b0e2ca0fb34c1741b0df2cb5ac38e9b"
+      "sha256": "f4b81255068b2a48cdf759b06af6f11409e5e89b8be1de75799c9db053a0a1ec"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/neutral-host-release-pin.json",
       "bytes": 146,
-      "sha256": "f68a4fe31eba6adc1c31aa1c2ccf399e584e02ea9556371f2b8363cf5633c7f3"
+      "sha256": "86b4c52c5fa4988c3337698b838fc6f36d468d6342bc7f0075c3e054b29908ee"
     },
     {
       "path": "plugins/hellolynk-codex/runtime/platform/darwin/hellolynk-keychain-helper.bin",
@@ -593,7 +593,7 @@
     {
       "path": "plugins/hellolynk-codex/server/codex-neutral-production.mjs",
       "bytes": 27551,
-      "sha256": "2c2f209339385cc14f27fe985f4deb75f4bd48e689035311847cc3b08e36ac52"
+      "sha256": "a307100c0b5835f5a6cba5151db367515b7f6cedd09d16af914f28e163df107a"
     },
     {
       "path": "plugins/hellolynk-codex/server/mcp-proxy.mjs",

package/hellolynk-client-pack-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-client-npm-pack-pin-v1",
-  "manifestSha256": "bb5217cd79d40f6b12e7361bc4f655ec7a1918b6f17d3138cfdcd0d6d7c25644"
+  "manifestSha256": "f51a0c64b7f2492259f270d2d320601020fa2b02600e3e27279c8f87f8a7b67a"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/codex-plugin",
-  "version": "0.2.104-macos.1",
+  "version": "0.2.105-macos.1",
   "description": "HelloLynk Messaging for Codex: open conversations and let your AI message other people's AI assistants.",
   "homepage": "https://hellolynk.com",
   "repository": {

package/plugins/hellolynk-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "hellolynk-codex",
-  "version": "0.2.104",
+  "version": "0.2.105",
   "description": "HelloLynk 通讯、本地未读提醒与安全文字收发的 Codex 插件。",
   "author": {
     "name": "HelloLynk local project"

package/plugins/hellolynk-codex/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hellolynk-ai/codex-plugin",
-  "version": "0.2.104",
+  "version": "0.2.105",
   "private": true,
   "type": "module",
   "description": "Project-local HelloLynk Messaging, unread notification, and secure messaging plugin for Codex.",

package/plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-client-core.mjs

@@ -1,9 +1,11 @@
+import { createHash } from "node:crypto";
 import runtimeSafety from "./hellolynk-runtime-safety.cjs";
 const DEFAULT_TIMEOUT_MS = 10_000;
 const MAX_JSON_RESPONSE_BYTES = 256 * 1024;
 const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "[::1]"]);
 const DEVICE_RUNTIME_TTL_MS = 20 * 60 * 1000;
 const DEVICE_RUNTIME_RECOVERY_WINDOW_MS = 120_000;
+const DEVICE_CREDENTIAL_RECHECK_MS = 60 * 60_000;
 const DEVICE_RUNTIME_SCOPES = Object.freeze([
   "relay.text.receive",
   "relay.text.send",
@@ -567,6 +569,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
   const issue = options.issue || issueDeviceRuntimeSession;
   const now = options.now || (() => Date.now());
   const sessionStore = options.sessionStore || null;
+  const credentialRejections = sessionStore?.credentialRejections;
   const sessionKey = options.sessionKey == null ? null : String(options.sessionKey);
   if (sessionStore && (
     !sessionKey ||
@@ -580,6 +583,8 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     5 * 60 * 1000,
   );
   let current = null;
+  let rejectedCredential = null;
+  let localIssueTail = Promise.resolve();
 
   const routeMatches = (session, input) => {
     const expectedValues = [
@@ -652,22 +657,67 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     return proof;
   };
 
+  const issueSession = async (input, previousSession) => {
+    const request = { ...input, previousSession };
+    if (options.loadDeviceCredential) request.deviceCredential = await options.loadDeviceCredential();
+    const fingerprint = request.deviceCredential && request.baseUrl
+      ? createHash("sha256").update(JSON.stringify([
+        normalizeHelloLynkBaseUrl(request.baseUrl, { allowLoopbackHttp: request.allowLoopbackHttp === true }),
+        request.deviceCredential,
+      ])).digest("hex")
+      : null;
+    // The production caller holds the existing session lock, including across
+    // Host processes. An authority denial may drain the current Host.
+    if (fingerprint) {
+      const isCoolingDown = (rejection) => {
+        if (rejection?.fingerprint !== fingerprint) return false;
+        const age = now() - rejection.rejectedAtMs;
+        return age >= 0 && age < DEVICE_CREDENTIAL_RECHECK_MS;
+      };
+      // A generic denial may clear after a server-side repair, without a new
+      // credential. The lock permits one recheck once the cooldown ends.
+      if (isCoolingDown(rejectedCredential)
+        || isCoolingDown(await credentialRejections?.load(sessionKey).catch(() => null))) {
+        throw new HelloLynkClientError("device_credential_invalid", { httpStatus: 401 });
+      }
+    }
+    let session;
+    try {
+      session = reusable(await issue(request), input);
+    } catch (error) {
+      if (fingerprint && error?.httpStatus === 401 && error.code === "device_credential_invalid") {
+        rejectedCredential = { fingerprint, rejectedAtMs: now() };
+        // Preserve the authority denial even if local storage is unavailable.
+        await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+      }
+      throw error;
+    }
+    if (session && fingerprint) {
+      rejectedCredential = null;
+      await credentialRejections?.remove(sessionKey).catch(() => {});
+    }
+    return session;
+  };
+
   return {
     async get(input) {
       if (!sessionStore) {
-        if (
-          current && current.expiresAtMs - now() > minimumRemainingMs
-          && routeMatches(current, input)
-          && scopesMatch(current, input)
-          && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
-          && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
-        ) return current;
-        const reusableCurrent = reusable(current, input);
-        if (reusableCurrent) return reusableCurrent;
-        const previousSession = recoveryProof(current, input);
-        current = reusable(await issue({ ...input, previousSession }), input);
-        if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
-        return current;
+        const result = localIssueTail.then(async () => {
+          if (
+            current && current.expiresAtMs - now() > minimumRemainingMs
+            && routeMatches(current, input)
+            && scopesMatch(current, input)
+            && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
+            && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
+          ) return current;
+          const reusableCurrent = reusable(current, input);
+          if (reusableCurrent) return reusableCurrent;
+          current = await issueSession(input, recoveryProof(current, input));
+          if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
+          return current;
+        });
+        localIssueTail = result.catch(() => {});
+        return result;
       }
       const inMemory = reusable(current, input);
       if (inMemory) return inMemory;
@@ -678,7 +728,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
           current = persisted;
           return current;
         }
-        const issued = reusable(await issue({ ...input, previousSession: persisted }), input);
+        const issued = await issueSession(input, persisted);
         if (!issued) throw new HelloLynkClientError("invalid_runtime_session_handle");
         await sessionStore.save(sessionKey, issued);
         current = issued;

package/plugins/hellolynk-codex/runtime/bootstrap/core/hellolynk-platform-credential-store.mjs

@@ -297,6 +297,36 @@ export async function secureWindowsClientReleaseTree(clientRoot, releaseId, opti
   });
 }
 
+// Accessed under the same cross-process lock as the corresponding session.
+function createCredentialRejectionStore(root) {
+  const fileFor = (profile) => join(root, `runtime-session-rejection-${assertCredentialProfileId(profile)}.json`);
+  const isRejection = (value) => typeof value?.fingerprint === "string" && /^[a-f0-9]{64}$/.test(value.fingerprint)
+    && Number.isSafeInteger(value.rejectedAtMs) && value.rejectedAtMs >= 0;
+  return {
+    async load(profile) {
+      let value;
+      try { value = JSON.parse(await readFile(fileFor(profile), "utf8")); }
+      catch (error) { if (error?.code === "ENOENT" || error instanceof SyntaxError) return null; throw error; }
+      return isRejection(value) ? value : null;
+    },
+    async save(profile, rejection) {
+      if (!isRejection(rejection)) throw new HelloLynkCredentialStoreError("invalid_credential_rejection");
+      const { fingerprint, rejectedAtMs } = rejection;
+      const file = fileFor(profile);
+      const temporary = `${file}.${randomBytes(12).toString("hex")}.tmp`;
+      try {
+        await writeFile(temporary, `${JSON.stringify({ fingerprint, rejectedAtMs })}\n`, { encoding: "utf8", flag: "wx", mode: 0o600 });
+        await rename(temporary, file);
+      } finally {
+        await rm(temporary, { force: true }).catch(() => {});
+      }
+    },
+    async remove(profile) {
+      await rm(fileFor(profile), { force: true });
+    },
+  };
+}
+
 export function createPlatformCredentialStore(options = {}) {
   const platform = options.platform || process.platform;
   const run = options.runHelper || runCredentialHelper;
@@ -370,6 +400,7 @@ export function createPlatformCredentialStore(options = {}) {
         await invoke("Remove", assertCredentialProfileId(profile), "");
       },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(runtimeStoreRoot),
         async save(profile, session) {
           const body = JSON.stringify({ schemaVersion: 1, ...assertRuntimeSession(session) });
           await invoke("StoreRuntimeSession", assertCredentialProfileId(profile), body);
@@ -504,6 +535,7 @@ export function createPlatformCredentialStore(options = {}) {
       },
       async remove(profile) { await entry(root, "device", profile, "remove"); },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(root),
         async save(profile, session) { await entry(root, "session", profile, "save", assertRuntimeSession(session)); },
         async load(profile) {
           const value = await entry(root, "session", profile, "load");

package/plugins/hellolynk-codex/runtime/core/hellolynk-client-core.mjs

@@ -1,9 +1,11 @@
+import { createHash } from "node:crypto";
 import runtimeSafety from "./hellolynk-runtime-safety.cjs";
 const DEFAULT_TIMEOUT_MS = 10_000;
 const MAX_JSON_RESPONSE_BYTES = 256 * 1024;
 const LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "[::1]"]);
 const DEVICE_RUNTIME_TTL_MS = 20 * 60 * 1000;
 const DEVICE_RUNTIME_RECOVERY_WINDOW_MS = 120_000;
+const DEVICE_CREDENTIAL_RECHECK_MS = 60 * 60_000;
 const DEVICE_RUNTIME_SCOPES = Object.freeze([
   "relay.text.receive",
   "relay.text.send",
@@ -567,6 +569,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
   const issue = options.issue || issueDeviceRuntimeSession;
   const now = options.now || (() => Date.now());
   const sessionStore = options.sessionStore || null;
+  const credentialRejections = sessionStore?.credentialRejections;
   const sessionKey = options.sessionKey == null ? null : String(options.sessionKey);
   if (sessionStore && (
     !sessionKey ||
@@ -580,6 +583,8 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     5 * 60 * 1000,
   );
   let current = null;
+  let rejectedCredential = null;
+  let localIssueTail = Promise.resolve();
 
   const routeMatches = (session, input) => {
     const expectedValues = [
@@ -652,22 +657,67 @@ export function createDeviceRuntimeSessionManager(options = {}) {
     return proof;
   };
 
+  const issueSession = async (input, previousSession) => {
+    const request = { ...input, previousSession };
+    if (options.loadDeviceCredential) request.deviceCredential = await options.loadDeviceCredential();
+    const fingerprint = request.deviceCredential && request.baseUrl
+      ? createHash("sha256").update(JSON.stringify([
+        normalizeHelloLynkBaseUrl(request.baseUrl, { allowLoopbackHttp: request.allowLoopbackHttp === true }),
+        request.deviceCredential,
+      ])).digest("hex")
+      : null;
+    // The production caller holds the existing session lock, including across
+    // Host processes. An authority denial may drain the current Host.
+    if (fingerprint) {
+      const isCoolingDown = (rejection) => {
+        if (rejection?.fingerprint !== fingerprint) return false;
+        const age = now() - rejection.rejectedAtMs;
+        return age >= 0 && age < DEVICE_CREDENTIAL_RECHECK_MS;
+      };
+      // A generic denial may clear after a server-side repair, without a new
+      // credential. The lock permits one recheck once the cooldown ends.
+      if (isCoolingDown(rejectedCredential)
+        || isCoolingDown(await credentialRejections?.load(sessionKey).catch(() => null))) {
+        throw new HelloLynkClientError("device_credential_invalid", { httpStatus: 401 });
+      }
+    }
+    let session;
+    try {
+      session = reusable(await issue(request), input);
+    } catch (error) {
+      if (fingerprint && error?.httpStatus === 401 && error.code === "device_credential_invalid") {
+        rejectedCredential = { fingerprint, rejectedAtMs: now() };
+        // Preserve the authority denial even if local storage is unavailable.
+        await credentialRejections?.save(sessionKey, rejectedCredential).catch(() => {});
+      }
+      throw error;
+    }
+    if (session && fingerprint) {
+      rejectedCredential = null;
+      await credentialRejections?.remove(sessionKey).catch(() => {});
+    }
+    return session;
+  };
+
   return {
     async get(input) {
       if (!sessionStore) {
-        if (
-          current && current.expiresAtMs - now() > minimumRemainingMs
-          && routeMatches(current, input)
-          && scopesMatch(current, input)
-          && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
-          && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
-        ) return current;
-        const reusableCurrent = reusable(current, input);
-        if (reusableCurrent) return reusableCurrent;
-        const previousSession = recoveryProof(current, input);
-        current = reusable(await issue({ ...input, previousSession }), input);
-        if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
-        return current;
+        const result = localIssueTail.then(async () => {
+          if (
+            current && current.expiresAtMs - now() > minimumRemainingMs
+            && routeMatches(current, input)
+            && scopesMatch(current, input)
+            && (input?.expectedAgentId == null || input.expectedAgentId === current.agentId)
+            && (input?.expectedPrincipalId == null || input.expectedPrincipalId === current.principalId)
+          ) return current;
+          const reusableCurrent = reusable(current, input);
+          if (reusableCurrent) return reusableCurrent;
+          current = await issueSession(input, recoveryProof(current, input));
+          if (!current) throw new HelloLynkClientError("invalid_runtime_session_handle");
+          return current;
+        });
+        localIssueTail = result.catch(() => {});
+        return result;
       }
       const inMemory = reusable(current, input);
       if (inMemory) return inMemory;
@@ -678,7 +728,7 @@ export function createDeviceRuntimeSessionManager(options = {}) {
           current = persisted;
           return current;
         }
-        const issued = reusable(await issue({ ...input, previousSession: persisted }), input);
+        const issued = await issueSession(input, persisted);
         if (!issued) throw new HelloLynkClientError("invalid_runtime_session_handle");
         await sessionStore.save(sessionKey, issued);
         current = issued;

package/plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-assembly.mjs

@@ -7,7 +7,6 @@ import path from "node:path";
 
 import {
   createDeviceRuntimeSessionManager,
-  issueDeviceRuntimeSession,
   normalizeHelloLynkBaseUrl,
 } from "./hellolynk-client-core.mjs";
 import { readClientProfile } from "./hellolynk-client-profile.mjs";
@@ -243,31 +242,19 @@ export async function startHelloLynkNeutralHostAssembly(options = {}, dependenci
     const manager = (dependencies.createRuntimeSessionManager || createDeviceRuntimeSessionManager)({
       sessionStore: credentialStore.runtimeSessions,
       sessionKey,
-      issue: async ({ previousSession } = {}) => {
-        let deviceCredential = await credentialStore.load(profile.profileId);
-        try {
-          return await (dependencies.issueRuntimeSession || issueDeviceRuntimeSession)({
-            baseUrl: profile.baseUrl,
-            allowLoopbackHttp: profile.allowLoopbackHttp,
-            deviceCredential,
-            expectedPrincipalId: profile.principalId,
-            expectedAgentId: profile.agentId,
-            expectedDelegateId: profile.delegateId,
-            expectedHostId: profile.hostId,
-            expectedAuthorizationVersion: profile.authorizationVersion,
-            previousSession,
-            fetchImpl: dependencies.fetchImpl,
-          });
-        } finally { deviceCredential = null; }
-      },
+      loadDeviceCredential: () => credentialStore.load(profile.profileId),
+      issue: dependencies.issueRuntimeSession,
     });
     const sessionProvider = Object.freeze({
       get: () => manager.get({
+        baseUrl: profile.baseUrl,
+        allowLoopbackHttp: profile.allowLoopbackHttp,
         expectedPrincipalId: profile.principalId,
         expectedAgentId: profile.agentId,
         expectedDelegateId: profile.delegateId,
         expectedHostId: profile.hostId,
         expectedAuthorizationVersion: profile.authorizationVersion,
+        fetchImpl: dependencies.fetchImpl,
       }),
       clear: (error) => manager.clear(error),
       status: () => manager.status(),

package/plugins/hellolynk-codex/runtime/core/hellolynk-neutral-host-process.mjs

@@ -34,7 +34,7 @@ export const HELLOLYNK_NEUTRAL_HOST_PROCESS_CONTRACT = "hellolynk-neutral-host-p
 export const HELLOLYNK_NEUTRAL_HOST_DISCOVERY_CONTRACT = "hellolynk-neutral-host-discovery-v1";
 // Raised with every release batch, together with the six client versions. A Host reports it
 // in its health; the higher release stays and the lower one makes room.
-export const HELLOLYNK_HOST_RELEASE_ORDINAL = 16;
+export const HELLOLYNK_HOST_RELEASE_ORDINAL = 17;
 
 const INSTALLATION_LOCK_CONTRACT = "hellolynk-neutral-host-installation-lock-v2";
 const INSTALLATION_LOCK_MAX_BYTES = 4 * 1024;

package/plugins/hellolynk-codex/runtime/core/hellolynk-platform-credential-store.mjs

@@ -297,6 +297,36 @@ export async function secureWindowsClientReleaseTree(clientRoot, releaseId, opti
   });
 }
 
+// Accessed under the same cross-process lock as the corresponding session.
+function createCredentialRejectionStore(root) {
+  const fileFor = (profile) => join(root, `runtime-session-rejection-${assertCredentialProfileId(profile)}.json`);
+  const isRejection = (value) => typeof value?.fingerprint === "string" && /^[a-f0-9]{64}$/.test(value.fingerprint)
+    && Number.isSafeInteger(value.rejectedAtMs) && value.rejectedAtMs >= 0;
+  return {
+    async load(profile) {
+      let value;
+      try { value = JSON.parse(await readFile(fileFor(profile), "utf8")); }
+      catch (error) { if (error?.code === "ENOENT" || error instanceof SyntaxError) return null; throw error; }
+      return isRejection(value) ? value : null;
+    },
+    async save(profile, rejection) {
+      if (!isRejection(rejection)) throw new HelloLynkCredentialStoreError("invalid_credential_rejection");
+      const { fingerprint, rejectedAtMs } = rejection;
+      const file = fileFor(profile);
+      const temporary = `${file}.${randomBytes(12).toString("hex")}.tmp`;
+      try {
+        await writeFile(temporary, `${JSON.stringify({ fingerprint, rejectedAtMs })}\n`, { encoding: "utf8", flag: "wx", mode: 0o600 });
+        await rename(temporary, file);
+      } finally {
+        await rm(temporary, { force: true }).catch(() => {});
+      }
+    },
+    async remove(profile) {
+      await rm(fileFor(profile), { force: true });
+    },
+  };
+}
+
 export function createPlatformCredentialStore(options = {}) {
   const platform = options.platform || process.platform;
   const run = options.runHelper || runCredentialHelper;
@@ -370,6 +400,7 @@ export function createPlatformCredentialStore(options = {}) {
         await invoke("Remove", assertCredentialProfileId(profile), "");
       },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(runtimeStoreRoot),
         async save(profile, session) {
           const body = JSON.stringify({ schemaVersion: 1, ...assertRuntimeSession(session) });
           await invoke("StoreRuntimeSession", assertCredentialProfileId(profile), body);
@@ -504,6 +535,7 @@ export function createPlatformCredentialStore(options = {}) {
       },
       async remove(profile) { await entry(root, "device", profile, "remove"); },
       runtimeSessions: {
+        credentialRejections: createCredentialRejectionStore(root),
         async save(profile, session) { await entry(root, "session", profile, "save", assertRuntimeSession(session)); },
         async load(profile) {
           const value = await entry(root, "session", profile, "load");

package/plugins/hellolynk-codex/runtime/neutral-host-release-manifest.json

@@ -4,7 +4,7 @@
   "files": [
     {
       "path": "release/package.json",
-      "sha256": "6f378efda0ab9a8f5555e88978dfaccdf7db448b7219da4e86b21fe0b59f1f75"
+      "sha256": "be5fc524bab2f659f8f1e851bd1c59c6edf2a5fd4394c1a917a8d5ee9321190e"
     },
     {
       "path": "neutral-host-bootstrap.mjs",
@@ -32,7 +32,7 @@
     },
     {
       "path": "core/hellolynk-client-core.mjs",
-      "sha256": "94bbad1d0ccee969bbffed176449e427188f1b892512a64167ab31f63d258e2b"
+      "sha256": "dbab0f067c1a7f02c43b2696e1f5972288acd4f93a18684bf3cc120edff5cf94"
     },
     {
       "path": "core/hellolynk-client-profile.mjs",
@@ -184,7 +184,7 @@
     },
     {
       "path": "core/hellolynk-neutral-host-assembly.mjs",
-      "sha256": "d0ac9c697bf8a85263d99a0739da557c62f52c72f4afb105eb97b3aac2ae1f3b"
+      "sha256": "287ad6e077c8da05799b970ffa6607d8c7a0ab54a4837de51516e6af0ef6695b"
     },
     {
       "path": "core/hellolynk-neutral-host-installation-store.mjs",
@@ -196,7 +196,7 @@
     },
     {
       "path": "core/hellolynk-neutral-host-process.mjs",
-      "sha256": "7b237a1400c604da5decbb29ab3ce556fd1b744d0cfd7d28b5560b217da120b1"
+      "sha256": "ad6809633f49f7316acf6ce5b8f71a13d7ba20d3b62a2700664421ba671b5369"
     },
     {
       "path": "core/hellolynk-neutral-host-store-adapters.mjs",
@@ -208,7 +208,7 @@
     },
     {
       "path": "core/hellolynk-platform-credential-store.mjs",
-      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
+      "sha256": "4b4b27cd86f4816e5e6ec4914816a335cdea5c4b4ffb2091775c061a9676a69c"
     },
     {
       "path": "core/hellolynk-relay-client-cli.mjs",
@@ -324,7 +324,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-client-core.mjs",
-      "sha256": "94bbad1d0ccee969bbffed176449e427188f1b892512a64167ab31f63d258e2b"
+      "sha256": "dbab0f067c1a7f02c43b2696e1f5972288acd4f93a18684bf3cc120edff5cf94"
     },
     {
       "path": "bootstrap/core/hellolynk-client-profile.mjs",
@@ -348,7 +348,7 @@
     },
     {
       "path": "bootstrap/core/hellolynk-platform-credential-store.mjs",
-      "sha256": "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"
+      "sha256": "4b4b27cd86f4816e5e6ec4914816a335cdea5c4b4ffb2091775c061a9676a69c"
     },
     {
       "path": "bootstrap/core/hellolynk-runtime-safety.cjs",
@@ -376,7 +376,7 @@
     },
     {
       "path": "release/server/codex-neutral-production.mjs",
-      "sha256": "2c2f209339385cc14f27fe985f4deb75f4bd48e689035311847cc3b08e36ac52"
+      "sha256": "a307100c0b5835f5a6cba5151db367515b7f6cedd09d16af914f28e163df107a"
     },
     {
       "path": "release/server/neutral-host-adapter.mjs",

package/plugins/hellolynk-codex/runtime/neutral-host-release-pin.json

@@ -1,4 +1,4 @@
 {
   "contract": "hellolynk-neutral-host-release-pin-v1",
-  "manifestSha256": "96b171b53d91da097e2c36c36dbe9e6e6b0e2ca0fb34c1741b0df2cb5ac38e9b"
+  "manifestSha256": "f4b81255068b2a48cdf759b06af6f11409e5e89b8be1de75799c9db053a0a1ec"
 }

package/plugins/hellolynk-codex/server/codex-neutral-production.mjs

@@ -30,8 +30,8 @@ const TRUSTED_BOOTSTRAP_FILES = Object.freeze(new Map([
   ["runtime/bootstrap/core/hellolynk-neutral-host-installation-store.mjs", "42ae1e7deb876a8308b7bfed6a7b891d1834117b62504fc5befe3f91a0b4c740"],
   ["runtime/bootstrap/core/hellolynk-host-auth.mjs", "db1ec56f4e60e6450fba50188eecf89748f39f5d7a75c2456c30a6053233555d"],
   ["runtime/bootstrap/core/hellolynk-client-profile.mjs", "8be37831c96610e3d0a64848ada86488970cc6079e49764b47d8a8b2ba852269"],
-  ["runtime/bootstrap/core/hellolynk-platform-credential-store.mjs", "3969708bafefc3b267bb34a9dcc115804c874ad14f4a036426d727c02ff70d42"],
-  ["runtime/bootstrap/core/hellolynk-client-core.mjs", "94bbad1d0ccee969bbffed176449e427188f1b892512a64167ab31f63d258e2b"],
+  ["runtime/bootstrap/core/hellolynk-platform-credential-store.mjs", "4b4b27cd86f4816e5e6ec4914816a335cdea5c4b4ffb2091775c061a9676a69c"],
+  ["runtime/bootstrap/core/hellolynk-client-core.mjs", "dbab0f067c1a7f02c43b2696e1f5972288acd4f93a18684bf3cc120edff5cf94"],
   ["runtime/bootstrap/platform/windows/hellolynk-host-protected-store.ps1", "24357e8ce54090b4ec68e457f02c9e834a80f3273ef3c03a8c0fa7258797fb49"],
   ...(process.platform === "darwin" ? [
     ["runtime/bootstrap/platform/darwin/hellolynk-keychain-helper.bin", "f1a782c08229ebc0e8d1704b6390e91c5695e084b4df0a1a6dc043f6b23700ab"],