@miadi/connector 0.1.18 → 0.1.20

package/dist/decisions.d.ts

@@ -1,10 +1,12 @@
 export declare const DECISIONS_CARD_URI = "ui://miadi/decisions-v1.html";
+/** The default lifetime of a card's decision token, in seconds; MIADI_CONNECTOR_DECISION_TOKEN_TTL changes it. */
 export declare const DECISION_TOKEN_TTL: number;
 /** Where the tokens travel in a result's `_meta`, keyed by record id. */
 export declare const DECISION_TOKENS_META = "miadi/decisionTokens";
 export declare class DecisionTokens {
+    readonly ttl: number;
     private readonly secret;
-    constructor(stateDir: string);
+    constructor(stateDir: string, ttl?: number);
     private sign;
     /** A token for one card: one request, at the version the card shows, for one person in one client. */
     issue(recordId: string, personId: string, clientId: string, now?: number, version?: number): string;
@@ -17,4 +19,4 @@ export declare class DecisionTokens {
  * and calls `decide_request` through the host. In a host without that bridge it
  * shows each request's approval page instead.
  */
-export declare const DECISIONS_CARD_HTML = "<!doctype html>\n<html lang=\"en\"><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n<style>\n:root{color-scheme:light dark;--fg:#1d1b18;--muted:#5b5650;--line:#d9d4cc;--accent:#7a4a00;--ok:#1d6b3a;--err:#b00020;--chip:#f1ede6}\n@media (prefers-color-scheme:dark){:root{--fg:#ece8e1;--muted:#b3ada4;--line:#3a3631;--accent:#ffd700;--ok:#7fd49b;--err:#ff8a80;--chip:#24211d}}\n*{box-sizing:border-box}\nbody{margin:0;color:var(--fg);font:15px/1.45 system-ui,sans-serif;background:transparent}\nmain{padding:12px;display:grid;gap:12px}\n.empty,.note{color:var(--muted)}\narticle{border:1px solid var(--line);border-radius:10px;padding:12px}\nh2{font-size:15px;margin:0 0 4px}\n.kind{display:inline-block;font-size:12px;padding:1px 8px;border-radius:999px;background:var(--chip);color:var(--muted);margin-bottom:6px}\n.meta{font-size:13px;color:var(--muted);margin:0 0 6px}\n.does{margin:6px 0;font-weight:600}\ndetails{margin:6px 0}\nsummary{cursor:pointer;color:var(--muted);font-size:13px}\npre{white-space:pre-wrap;overflow-wrap:anywhere;font-size:12px;margin:6px 0 0;max-height:240px;overflow:auto}\ntextarea{width:100%;min-height:64px;padding:8px;border:1px solid var(--line);border-radius:8px;background:transparent;color:var(--fg);font:inherit;margin-top:8px}\n.row{display:flex;flex-wrap:wrap;gap:8px;margin-top:8px}\nbutton{padding:8px 12px;border-radius:8px;border:1px solid var(--line);background:transparent;color:var(--fg);font:inherit;cursor:pointer;min-height:40px}\nbutton.primary{border-color:var(--accent);outline:1px solid var(--accent)}\nbutton:focus-visible,a:focus-visible,textarea:focus-visible{outline:2px solid var(--accent);outline-offset:2px}\nbutton[disabled]{opacity:.55;cursor:default}\na{color:inherit}\n.done{color:var(--ok);font-weight:600}\n.fail{color:var(--err);font-weight:600}\n</style></head><body><main id=\"root\" aria-live=\"polite\"><p class=\"note\">Loading requests\u2026</p></main>\n<script>\n(function(){\n  var root=document.getElementById(\"root\");\n  var decided={};\n  // A redraw while a decision is being recorded must not offer the buttons again.\n  var pending={};\n  var errors={};\n  function el(tag,attrs,text){var e=document.createElement(tag);if(attrs)for(var k in attrs){if(k===\"class\")e.className=attrs[k];else e.setAttribute(k,attrs[k]);}if(text!=null)e.textContent=text;return e;}\n  function host(){return window.openai||null;}\n  function data(){var h=host();return h&&h.toolOutput?h.toolOutput:null;}\n  function tokens(){var h=host();var m=h&&h.toolResponseMetadata;return (m&&m[\"miadi/decisionTokens\"])||{};}\n  function render(){\n    var d=data();root.textContent=\"\";\n    if(!d){root.appendChild(el(\"p\",{class:\"note\"},\"Waiting for the request list.\"));return;}\n    var list=d.decisions||[];\n    if(!list.length){root.appendChild(el(\"p\",{class:\"empty\"},d.message||\"No request is waiting for a decision.\"));return;}\n    if(!d.can_decide_here&&d.reason){root.appendChild(el(\"p\",{class:\"note\"},d.reason));}\n    var t=tokens();\n    list.forEach(function(r){root.appendChild(card(r,t[r.id]));});\n  }\n  // Where a request stands, as the connector projected it: the label, its lines, and the review it produced.\n  function decidedBlock(d){\n    var box=el(\"div\",{role:\"status\",class:d.cls});\n    if(d.note)box.appendChild(el(\"p\",{class:\"line\"},d.note));\n    box.appendChild(el(\"p\",{class:\"label\"},d.label));\n    (d.lines||[]).forEach(function(l){box.appendChild(el(\"p\",{class:\"line\"},l));});\n    if(d.url){var p=el(\"p\",{class:\"line\"});p.appendChild(el(\"a\",{href:d.url,target:\"_blank\",rel:\"noopener\"},d.url));box.appendChild(p);}\n    return box;\n  }\n  function toolResult(res){\n    var out=(res&&(res.structuredContent||res.structured_content))||null;\n    if(!out&&res&&res.content&&res.content[0]&&res.content[0].text){try{out=JSON.parse(res.content[0].text);}catch(e){out={message:res.content[0].text};}}\n    return out;\n  }\n  function projectionView(p,note){return {cls:p.stage===\"failed\"?\"fail\":\"done\",stage:p.stage,label:p.label,lines:p.lines||[],url:p.receipt_url||null,note:note||null};}\n  function card(r,token){\n    var a=el(\"article\",{\"aria-label\":r.title});\n    a.appendChild(el(\"span\",{class:\"kind\"},r.kind_label||r.kind));\n    a.appendChild(el(\"h2\",null,r.title));\n    a.appendChild(el(\"p\",{class:\"meta\"},\"Asked by \"+r.by+(r.via?\" through \"+r.via:\"\")+\" \u00B7 \"+new Date(r.created_at).toLocaleString()+(r.circle?\" \u00B7 \"+r.circle+\" circle\":\"\")));\n    a.appendChild(el(\"p\",{class:\"does\"},r.consequence));\n    if(r.intention)a.appendChild(el(\"p\",null,r.intention));\n    var det=el(\"details\");det.appendChild(el(\"summary\",null,\"What exactly is asked\"));det.appendChild(el(\"pre\",null,r.detail||\"\"));a.appendChild(det);\n    var status=el(\"p\",{role:\"status\"});\n    if(r.projection&&r.projection.stage!==\"awaiting_decision\"&&(!decided[r.id]||[\"recording\",\"dispatching\"].indexOf(r.projection.stage)===-1)){decided[r.id]=projectionView(r.projection);}\n    if(decided[r.id]){\n      var shown=decided[r.id];a.appendChild(decidedBlock(shown));\n      if([\"recording\",\"dispatching\"].indexOf(shown.stage)!==-1&&host()&&host().callTool){\n        var refresh=el(\"button\",{type:\"button\"},\"Refresh status\");\n        refresh.addEventListener(\"click\",function(){\n          refresh.disabled=true;\n          host().callTool(\"get_run_result\",{record_id:r.id}).then(function(res){\n            var out=toolResult(res);var p=out&&(out.projection||(out.data&&out.data.projection));\n            if(p){decided[r.id]=projectionView(p);delete errors[r.id];}\n            else{errors[r.id]=(out&&out.message)||\"Status could not be refreshed.\";}\n            render();\n          },function(err){errors[r.id]=\"Status could not be refreshed: \"+String(err&&err.message||err);render();});\n        });\n        a.appendChild(refresh);\n      }\n      if(errors[r.id])a.appendChild(el(\"p\",{class:\"fail\",role:\"status\"},errors[r.id]));\n      return a;\n    }\n    if(pending[r.id]){status.className=\"note\";status.textContent=\"Recording your decision\u2026\";a.appendChild(status);return a;}\n    if(!token||!host()||!host().callTool){\n      var p=el(\"p\",{class:\"note\"});p.appendChild(document.createTextNode(\"Decide on its approval page: \"));\n      var link=el(\"a\",{href:r.approval_url,target:\"_blank\",rel:\"noopener\"},\"open the approval page\");p.appendChild(link);a.appendChild(p);return a;\n    }\n    var ta=el(\"textarea\",{\"aria-label\":\"Instructions or changes (needed to approve with changes or send back)\",placeholder:\"Instructions or changes (needed to approve with changes or send back)\"});\n    a.appendChild(ta);\n    var row=el(\"div\",{class:\"row\"});\n    var buttons=[[\"approve\",\"Approve\",\"primary\"],[\"approve_with_changes\",\"Approve with my changes\",\"\"],[\"request_revision\",\"Send back for revision\",\"\"],[\"decline\",\"Decline\",\"\"]];\n    var btns=[];\n    buttons.forEach(function(b){var x=el(\"button\",{type:\"button\",class:b[2]},b[1]);x.addEventListener(\"click\",function(){go(b[0]);});btns.push(x);row.appendChild(x);});\n    a.appendChild(row);a.appendChild(status);\n    if(errors[r.id]){status.className=\"fail\";status.textContent=errors[r.id];}\n    function go(choice){\n      var text=ta.value.trim();\n      if((choice===\"approve_with_changes\"||choice===\"request_revision\")&&!text){status.className=\"fail\";status.textContent=choice===\"request_revision\"?\"Say what to revise.\":\"Write the changes to apply.\";ta.focus();return;}\n      btns.forEach(function(x){x.disabled=true;});status.className=\"note\";status.textContent=\"Recording your decision\u2026\";pending[r.id]=true;delete errors[r.id];\n      host().callTool(\"decide_request\",{record_id:r.id,decision:choice,instructions:text||undefined,decision_token:token}).then(function(res){\n        var out=toolResult(res);\n        // The connector answers with the request's projection, also when a click finds it decided already.\n        var proj=out&&out.projection;\n        var already=!!(out&&out.error===\"already_decided\");\n        var ok=out&&!out.error;\n        delete pending[r.id];\n        if(proj){decided[r.id]=projectionView(proj,already?\"This request was already decided. Here is where it stands.\":null);}\n        else{decided[r.id]={cls:ok?\"done\":\"fail\",label:ok?(out.summary||\"Recorded.\"):((out&&out.message)||\"Not recorded.\"),lines:[],url:null,note:null};}\n        render();\n      },function(err){delete pending[r.id];errors[r.id]=\"Not recorded: \"+(err&&err.message?err.message:String(err));render();});\n    }\n    return a;\n  }\n  window.addEventListener(\"openai:set_globals\",render);\n  render();\n})();\n</script></body></html>";
+export declare const DECISIONS_CARD_HTML = "<!doctype html>\n<html lang=\"en\"><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n<style>\n:root{color-scheme:light dark;--fg:#1d1b18;--muted:#5b5650;--line:#d9d4cc;--accent:#7a4a00;--ok:#1d6b3a;--err:#b00020;--chip:#f1ede6}\n@media (prefers-color-scheme:dark){:root{--fg:#ece8e1;--muted:#b3ada4;--line:#3a3631;--accent:#ffd700;--ok:#7fd49b;--err:#ff8a80;--chip:#24211d}}\n*{box-sizing:border-box}\nbody{margin:0;color:var(--fg);font:15px/1.45 system-ui,sans-serif;background:transparent}\nmain{padding:12px;display:grid;gap:12px}\n.empty,.note{color:var(--muted)}\narticle{border:1px solid var(--line);border-radius:10px;padding:12px}\nh2{font-size:15px;margin:0 0 4px}\n.kind{display:inline-block;font-size:12px;padding:1px 8px;border-radius:999px;background:var(--chip);color:var(--muted);margin-bottom:6px}\n.meta{font-size:13px;color:var(--muted);margin:0 0 6px}\n.does{margin:6px 0;font-weight:600}\ndetails{margin:6px 0}\nsummary{cursor:pointer;color:var(--muted);font-size:13px}\npre{white-space:pre-wrap;overflow-wrap:anywhere;font-size:12px;margin:6px 0 0;max-height:240px;overflow:auto}\ntextarea{width:100%;min-height:64px;padding:8px;border:1px solid var(--line);border-radius:8px;background:transparent;color:var(--fg);font:inherit;margin-top:8px}\n.row{display:flex;flex-wrap:wrap;gap:8px;margin-top:8px}\nbutton{padding:8px 12px;border-radius:8px;border:1px solid var(--line);background:transparent;color:var(--fg);font:inherit;cursor:pointer;min-height:40px}\nbutton.primary{border-color:var(--accent);outline:1px solid var(--accent)}\nbutton:focus-visible,a:focus-visible,textarea:focus-visible{outline:2px solid var(--accent);outline-offset:2px}\nbutton[disabled]{opacity:.55;cursor:default}\na{color:inherit}\n.done{color:var(--ok);font-weight:600}\n.fail{color:var(--err);font-weight:600}\n</style></head><body><main id=\"root\" aria-live=\"polite\"><p class=\"note\">Loading requests\u2026</p></main>\n<script>\n(function(){\n  var root=document.getElementById(\"root\");\n  var decided={};\n  // A redraw while a decision is being recorded must not offer the buttons again.\n  var pending={};\n  var errors={};\n  // A decision still running is followed to its outcome (jgwill/Miadi#924): one read every POLL_MS, at most POLL_MAX.\n  var POLL_MS=3000,POLL_MAX=100,polls={};\n  // An error that leaves the request open offers its approval page under it.\n  var relink={};\n  function el(tag,attrs,text){var e=document.createElement(tag);if(attrs)for(var k in attrs){if(k===\"class\")e.className=attrs[k];else e.setAttribute(k,attrs[k]);}if(text!=null)e.textContent=text;return e;}\n  function host(){return window.openai||null;}\n  function data(){var h=host();return h&&h.toolOutput?h.toolOutput:null;}\n  function tokens(){var h=host();var m=h&&h.toolResponseMetadata;return (m&&m[\"miadi/decisionTokens\"])||{};}\n  function render(){\n    var d=data();root.textContent=\"\";\n    if(!d){root.appendChild(el(\"p\",{class:\"note\"},\"Waiting for the request list.\"));return;}\n    var list=d.decisions||[];\n    if(!list.length){root.appendChild(el(\"p\",{class:\"empty\"},d.message||\"No request is waiting for a decision.\"));return;}\n    if(!d.can_decide_here&&d.reason){root.appendChild(el(\"p\",{class:\"note\"},d.reason));}\n    var t=tokens();\n    list.forEach(function(r){root.appendChild(card(r,t[r.id]));});\n  }\n  // Where a request stands, as the connector projected it: the label, its lines, and the review it produced.\n  function decidedBlock(d){\n    var box=el(\"div\",{role:\"status\",class:d.cls});\n    if(d.note)box.appendChild(el(\"p\",{class:\"line\"},d.note));\n    box.appendChild(el(\"p\",{class:\"label\"},d.label));\n    (d.lines||[]).forEach(function(l){box.appendChild(el(\"p\",{class:\"line\"},l));});\n    if(d.url){var p=el(\"p\",{class:\"line\"});p.appendChild(el(\"a\",{href:d.url,target:\"_blank\",rel:\"noopener\"},d.url));box.appendChild(p);}\n    return box;\n  }\n  function toolResult(res){\n    var out=(res&&(res.structuredContent||res.structured_content))||null;\n    if(!out&&res&&res.content&&res.content[0]&&res.content[0].text){try{out=JSON.parse(res.content[0].text);}catch(e){out={message:res.content[0].text};}}\n    return out;\n  }\n  function projectionView(p,note){return {cls:p.stage===\"failed\"?\"fail\":[\"recording\",\"dispatching\"].indexOf(p.stage)!==-1?\"note\":\"done\",stage:p.stage,label:p.label,lines:p.lines||[],url:p.receipt_url||null,note:note||null};}\n  // Read where a request stands. Still running: read again later. Never decided (the call was lost on the way): offer the decision again.\n  function follow(r,lost){\n    if(!host()||!host().callTool)return;\n    polls[r.id]=(polls[r.id]||0)+1;\n    host().callTool(\"get_run_result\",{record_id:r.id}).then(function(res){\n      var out=toolResult(res);var p=out&&(out.projection||(out.data&&out.data.projection));\n      if(!p){if(lost){delete decided[r.id];errors[r.id]=lost;}render();return;}\n      if(p.stage===\"awaiting_decision\"){delete decided[r.id];if(lost)errors[r.id]=lost+\" Nothing was decided; decide again.\";render();return;}\n      var note=decided[r.id]&&decided[r.id].note;\n      decided[r.id]=projectionView(p,note);delete errors[r.id];render();\n      if(p.stage===\"recording\"&&polls[r.id]<POLL_MAX)setTimeout(function(){follow(r);},POLL_MS);\n    },function(err){\n      if(lost){decided[r.id]={cls:\"note\",stage:\"recording\",label:\"Your decision may be recorded. Checking again\u2026\",lines:[],url:null,note:null};render();}\n      if(polls[r.id]<POLL_MAX)setTimeout(function(){follow(r,lost);},POLL_MS);\n    });\n  }\n  function card(r,token){\n    var a=el(\"article\",{\"aria-label\":r.title});\n    a.appendChild(el(\"span\",{class:\"kind\"},r.kind_label||r.kind));\n    a.appendChild(el(\"h2\",null,r.title));\n    a.appendChild(el(\"p\",{class:\"meta\"},\"Asked by \"+r.by+(r.via?\" through \"+r.via:\"\")+\" \u00B7 \"+new Date(r.created_at).toLocaleString()+(r.circle?\" \u00B7 \"+r.circle+\" circle\":\"\")));\n    a.appendChild(el(\"p\",{class:\"does\"},r.consequence));\n    if(r.intention)a.appendChild(el(\"p\",null,r.intention));\n    var det=el(\"details\");det.appendChild(el(\"summary\",null,\"What exactly is asked\"));det.appendChild(el(\"pre\",null,r.detail||\"\"));a.appendChild(det);\n    var status=el(\"p\",{role:\"status\"});\n    if(r.projection&&r.projection.stage!==\"awaiting_decision\"&&(!decided[r.id]||[\"recording\",\"dispatching\"].indexOf(r.projection.stage)===-1)){decided[r.id]=projectionView(r.projection);}\n    if(decided[r.id]){\n      var shown=decided[r.id];a.appendChild(decidedBlock(shown));\n      if(shown.stage===\"recording\"&&polls[r.id]===undefined&&host()&&host().callTool){polls[r.id]=0;setTimeout(function(){follow(r);},POLL_MS);}\n      if([\"recording\",\"dispatching\"].indexOf(shown.stage)!==-1&&host()&&host().callTool){\n        var refresh=el(\"button\",{type:\"button\"},\"Refresh status\");\n        refresh.addEventListener(\"click\",function(){\n          refresh.disabled=true;\n          host().callTool(\"get_run_result\",{record_id:r.id}).then(function(res){\n            var out=toolResult(res);var p=out&&(out.projection||(out.data&&out.data.projection));\n            if(p){decided[r.id]=projectionView(p);delete errors[r.id];}\n            else{errors[r.id]=(out&&out.message)||\"Status could not be refreshed.\";}\n            render();\n          },function(err){errors[r.id]=\"Status could not be refreshed: \"+String(err&&err.message||err);render();});\n        });\n        a.appendChild(refresh);\n      }\n      if(errors[r.id])a.appendChild(el(\"p\",{class:\"fail\",role:\"status\"},errors[r.id]));\n      return a;\n    }\n    function approvalLink(){var p=el(\"p\",{class:\"note\"});p.appendChild(document.createTextNode(\"Decide on its approval page: \"));p.appendChild(el(\"a\",{href:r.approval_url,target:\"_blank\",rel:\"noopener\"},\"open the approval page\"));return p;}\n    if(pending[r.id]){status.className=\"note\";status.textContent=\"Recording your decision\u2026\";a.appendChild(status);return a;}\n    if(!token||!host()||!host().callTool){a.appendChild(approvalLink());return a;}\n    var ta=el(\"textarea\",{\"aria-label\":\"Instructions or changes (needed to approve with changes or send back)\",placeholder:\"Instructions or changes (needed to approve with changes or send back)\"});\n    a.appendChild(ta);\n    var row=el(\"div\",{class:\"row\"});\n    var buttons=[[\"approve\",\"Approve\",\"primary\"],[\"approve_with_changes\",\"Approve with my changes\",\"\"],[\"request_revision\",\"Send back for revision\",\"\"],[\"decline\",\"Decline\",\"\"]];\n    var btns=[];\n    buttons.forEach(function(b){var x=el(\"button\",{type:\"button\",class:b[2]},b[1]);x.addEventListener(\"click\",function(){go(b[0]);});btns.push(x);row.appendChild(x);});\n    a.appendChild(row);a.appendChild(status);\n    if(errors[r.id]){status.className=\"fail\";status.textContent=errors[r.id];if(relink[r.id])a.appendChild(approvalLink());}\n    function go(choice){\n      var text=ta.value.trim();\n      if((choice===\"approve_with_changes\"||choice===\"request_revision\")&&!text){status.className=\"fail\";status.textContent=choice===\"request_revision\"?\"Say what to revise.\":\"Write the changes to apply.\";ta.focus();return;}\n      btns.forEach(function(x){x.disabled=true;});status.className=\"note\";status.textContent=\"Recording your decision\u2026\";pending[r.id]=true;delete errors[r.id];\n      host().callTool(\"decide_request\",{record_id:r.id,decision:choice,instructions:text||undefined,decision_token:token}).then(function(res){\n        var out=toolResult(res);\n        // The connector answers with the request's projection, also when a click finds it decided already.\n        var proj=out&&(out.projection||(out.detail&&out.detail.projection));\n        var code=out&&out.error;\n        delete pending[r.id];\n        // The token expired or the request was revised, and it still awaits a decision: say so and keep it open.\n        if(code&&(!proj||proj.stage===\"awaiting_decision\")){errors[r.id]=(out&&out.message)||\"Not recorded.\";relink[r.id]=true;render();return;}\n        var note=out&&out.replayed?\"This decision was already recorded. Nothing ran again.\":code===\"decision_conflict\"?\"A different decision was recorded first. Here is where it stands.\":code===\"already_decided\"?\"This request was already decided. Here is where it stands.\":null;\n        if(proj){decided[r.id]=projectionView(proj,note);}\n        else{decided[r.id]={cls:code?\"fail\":\"done\",label:code?((out&&out.message)||\"Not recorded.\"):((out&&out.summary)||\"Recorded.\"),lines:[],url:null,note:null};}\n        render();\n      },function(err){\n        // The host gave up waiting; the connector may still have recorded it. Read before offering the buttons again (#924).\n        delete pending[r.id];\n        decided[r.id]={cls:\"note\",stage:\"recording\",label:\"Checking whether your decision was recorded\u2026\",lines:[],url:null,note:null};\n        polls[r.id]=0;render();\n        follow(r,\"Not recorded: \"+(err&&err.message?err.message:String(err))+\".\");\n      });\n    }\n    return a;\n  }\n  window.addEventListener(\"openai:set_globals\",render);\n  render();\n})();\n</script></body></html>";

package/dist/decisions.js

@@ -7,9 +7,14 @@
  *   so the host does not offer it to the model;
  * - it requires a decision token that travels only in the `_meta` of the
  *   `show_decisions` result, which hosts deliver to the card and keep from the
- *   model. The token is bound to one request, one person and one OAuth client,
- *   and expires. A request decided once is no longer awaiting approval, so a
- *   token cannot be used twice.
+ *   model. The token is bound to one request, its version, one person and one
+ *   OAuth client, and expires (7 days by default). A request decided once is no
+ *   longer awaiting approval, so a token cannot decide twice.
+ *
+ * The token's lifetime is not what keeps a request safe: using it needs the same
+ * person's bearer for the same client with `miadi:approve`, and that bearer can
+ * already ask show_decisions for a fresh token. A short lifetime only made cards
+ * left open for a few hours refuse their person (jgwill/Miadi#924).
  *
  * The sign-in must also carry `miadi:approve`, which a person grants by ticking
  * it, and Miadi must give them the write tier.
@@ -18,13 +23,17 @@ import { createHmac, timingSafeEqual } from "node:crypto";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { newSecret } from "./store.js";
+import { DEFAULT_DECISION_TOKEN_TTL } from "./config.js";
 export const DECISIONS_CARD_URI = "ui://miadi/decisions-v1.html";
-export const DECISION_TOKEN_TTL = 30 * 60;
+/** The default lifetime of a card's decision token, in seconds; MIADI_CONNECTOR_DECISION_TOKEN_TTL changes it. */
+export const DECISION_TOKEN_TTL = DEFAULT_DECISION_TOKEN_TTL;
 /** Where the tokens travel in a result's `_meta`, keyed by record id. */
 export const DECISION_TOKENS_META = "miadi/decisionTokens";
 export class DecisionTokens {
+    ttl;
     secret;
-    constructor(stateDir) {
+    constructor(stateDir, ttl = DECISION_TOKEN_TTL) {
+        this.ttl = ttl;
         const file = join(stateDir, "decision-secret");
         if (!existsSync(file))
             writeFileSync(file, newSecret(32), { mode: 0o600, flag: "wx" });
@@ -37,7 +46,7 @@ export class DecisionTokens {
     }
     /** A token for one card: one request, at the version the card shows, for one person in one client. */
     issue(recordId, personId, clientId, now = Math.floor(Date.now() / 1000), version = 1) {
-        const exp = now + DECISION_TOKEN_TTL;
+        const exp = now + this.ttl;
         return `${exp}.v${version}.${this.sign(recordId, personId, clientId, exp, version)}`;
     }
     /** `stale`: the token is genuine but was minted for a version the request no longer holds. */
@@ -98,6 +107,10 @@ a{color:inherit}
   // A redraw while a decision is being recorded must not offer the buttons again.
   var pending={};
   var errors={};
+  // A decision still running is followed to its outcome (jgwill/Miadi#924): one read every POLL_MS, at most POLL_MAX.
+  var POLL_MS=3000,POLL_MAX=100,polls={};
+  // An error that leaves the request open offers its approval page under it.
+  var relink={};
   function el(tag,attrs,text){var e=document.createElement(tag);if(attrs)for(var k in attrs){if(k==="class")e.className=attrs[k];else e.setAttribute(k,attrs[k]);}if(text!=null)e.textContent=text;return e;}
   function host(){return window.openai||null;}
   function data(){var h=host();return h&&h.toolOutput?h.toolOutput:null;}
@@ -125,7 +138,23 @@ a{color:inherit}
     if(!out&&res&&res.content&&res.content[0]&&res.content[0].text){try{out=JSON.parse(res.content[0].text);}catch(e){out={message:res.content[0].text};}}
     return out;
   }
-  function projectionView(p,note){return {cls:p.stage==="failed"?"fail":"done",stage:p.stage,label:p.label,lines:p.lines||[],url:p.receipt_url||null,note:note||null};}
+  function projectionView(p,note){return {cls:p.stage==="failed"?"fail":["recording","dispatching"].indexOf(p.stage)!==-1?"note":"done",stage:p.stage,label:p.label,lines:p.lines||[],url:p.receipt_url||null,note:note||null};}
+  // Read where a request stands. Still running: read again later. Never decided (the call was lost on the way): offer the decision again.
+  function follow(r,lost){
+    if(!host()||!host().callTool)return;
+    polls[r.id]=(polls[r.id]||0)+1;
+    host().callTool("get_run_result",{record_id:r.id}).then(function(res){
+      var out=toolResult(res);var p=out&&(out.projection||(out.data&&out.data.projection));
+      if(!p){if(lost){delete decided[r.id];errors[r.id]=lost;}render();return;}
+      if(p.stage==="awaiting_decision"){delete decided[r.id];if(lost)errors[r.id]=lost+" Nothing was decided; decide again.";render();return;}
+      var note=decided[r.id]&&decided[r.id].note;
+      decided[r.id]=projectionView(p,note);delete errors[r.id];render();
+      if(p.stage==="recording"&&polls[r.id]<POLL_MAX)setTimeout(function(){follow(r);},POLL_MS);
+    },function(err){
+      if(lost){decided[r.id]={cls:"note",stage:"recording",label:"Your decision may be recorded. Checking again…",lines:[],url:null,note:null};render();}
+      if(polls[r.id]<POLL_MAX)setTimeout(function(){follow(r,lost);},POLL_MS);
+    });
+  }
   function card(r,token){
     var a=el("article",{"aria-label":r.title});
     a.appendChild(el("span",{class:"kind"},r.kind_label||r.kind));
@@ -138,6 +167,7 @@ a{color:inherit}
     if(r.projection&&r.projection.stage!=="awaiting_decision"&&(!decided[r.id]||["recording","dispatching"].indexOf(r.projection.stage)===-1)){decided[r.id]=projectionView(r.projection);}
     if(decided[r.id]){
       var shown=decided[r.id];a.appendChild(decidedBlock(shown));
+      if(shown.stage==="recording"&&polls[r.id]===undefined&&host()&&host().callTool){polls[r.id]=0;setTimeout(function(){follow(r);},POLL_MS);}
       if(["recording","dispatching"].indexOf(shown.stage)!==-1&&host()&&host().callTool){
         var refresh=el("button",{type:"button"},"Refresh status");
         refresh.addEventListener("click",function(){
@@ -154,11 +184,9 @@ a{color:inherit}
       if(errors[r.id])a.appendChild(el("p",{class:"fail",role:"status"},errors[r.id]));
       return a;
     }
+    function approvalLink(){var p=el("p",{class:"note"});p.appendChild(document.createTextNode("Decide on its approval page: "));p.appendChild(el("a",{href:r.approval_url,target:"_blank",rel:"noopener"},"open the approval page"));return p;}
     if(pending[r.id]){status.className="note";status.textContent="Recording your decision…";a.appendChild(status);return a;}
-    if(!token||!host()||!host().callTool){
-      var p=el("p",{class:"note"});p.appendChild(document.createTextNode("Decide on its approval page: "));
-      var link=el("a",{href:r.approval_url,target:"_blank",rel:"noopener"},"open the approval page");p.appendChild(link);a.appendChild(p);return a;
-    }
+    if(!token||!host()||!host().callTool){a.appendChild(approvalLink());return a;}
     var ta=el("textarea",{"aria-label":"Instructions or changes (needed to approve with changes or send back)",placeholder:"Instructions or changes (needed to approve with changes or send back)"});
     a.appendChild(ta);
     var row=el("div",{class:"row"});
@@ -166,7 +194,7 @@ a{color:inherit}
     var btns=[];
     buttons.forEach(function(b){var x=el("button",{type:"button",class:b[2]},b[1]);x.addEventListener("click",function(){go(b[0]);});btns.push(x);row.appendChild(x);});
     a.appendChild(row);a.appendChild(status);
-    if(errors[r.id]){status.className="fail";status.textContent=errors[r.id];}
+    if(errors[r.id]){status.className="fail";status.textContent=errors[r.id];if(relink[r.id])a.appendChild(approvalLink());}
     function go(choice){
       var text=ta.value.trim();
       if((choice==="approve_with_changes"||choice==="request_revision")&&!text){status.className="fail";status.textContent=choice==="request_revision"?"Say what to revise.":"Write the changes to apply.";ta.focus();return;}
@@ -174,14 +202,22 @@ a{color:inherit}
       host().callTool("decide_request",{record_id:r.id,decision:choice,instructions:text||undefined,decision_token:token}).then(function(res){
         var out=toolResult(res);
         // The connector answers with the request's projection, also when a click finds it decided already.
-        var proj=out&&out.projection;
-        var already=!!(out&&out.error==="already_decided");
-        var ok=out&&!out.error;
+        var proj=out&&(out.projection||(out.detail&&out.detail.projection));
+        var code=out&&out.error;
         delete pending[r.id];
-        if(proj){decided[r.id]=projectionView(proj,already?"This request was already decided. Here is where it stands.":null);}
-        else{decided[r.id]={cls:ok?"done":"fail",label:ok?(out.summary||"Recorded."):((out&&out.message)||"Not recorded."),lines:[],url:null,note:null};}
+        // The token expired or the request was revised, and it still awaits a decision: say so and keep it open.
+        if(code&&(!proj||proj.stage==="awaiting_decision")){errors[r.id]=(out&&out.message)||"Not recorded.";relink[r.id]=true;render();return;}
+        var note=out&&out.replayed?"This decision was already recorded. Nothing ran again.":code==="decision_conflict"?"A different decision was recorded first. Here is where it stands.":code==="already_decided"?"This request was already decided. Here is where it stands.":null;
+        if(proj){decided[r.id]=projectionView(proj,note);}
+        else{decided[r.id]={cls:code?"fail":"done",label:code?((out&&out.message)||"Not recorded."):((out&&out.summary)||"Recorded."),lines:[],url:null,note:null};}
         render();
-      },function(err){delete pending[r.id];errors[r.id]="Not recorded: "+(err&&err.message?err.message:String(err));render();});
+      },function(err){
+        // The host gave up waiting; the connector may still have recorded it. Read before offering the buttons again (#924).
+        delete pending[r.id];
+        decided[r.id]={cls:"note",stage:"recording",label:"Checking whether your decision was recorded…",lines:[],url:null,note:null};
+        polls[r.id]=0;render();
+        follow(r,"Not recorded: "+(err&&err.message?err.message:String(err))+".");
+      });
     }
     return a;
   }

package/dist/mission-status.js

@@ -108,7 +108,9 @@ function nextAction(record, standing, queue, result) {
         case "dispatching":
             return queue?.state === "delivered"
                 ? "The brief is with its session. Follow it, or steer it with request_session_steer inside the approved grant."
-                : "Wait for the factory intake to deliver the brief.";
+                : queue?.state === "refused"
+                    ? "The factory runner refused to launch its provider; nothing runs. The requester decides on a new request with a provider they chose."
+                    : "Wait for the factory intake to deliver the brief.";
         case "failed":
             return standing.rerun.available ? "A write-tier person may run it again with the same approval." : "Read the failure and decide.";
         case "completed":

package/dist/model-preflight.d.ts

@@ -1,4 +1,5 @@
 import { type JevConfig, type ProviderAvailability, type ProviderId } from "./providers.js";
+import { type ProviderAuthorization } from "./provider-policy.js";
 export declare const PREFLIGHT_CONTRACT = "miadi.mission_model_preflight";
 export declare const PREFLIGHT_VERSION = 1;
 /** Below this, a Jev choice is not acted on (the ≥0.8 practice of jgwill/Miadi#770). */
@@ -34,7 +35,7 @@ export interface LaunchEvidence {
     /** What shows it (a process line, a pane header); reported by the caller, not checked by the connector. */
     evidence: string;
 }
-export type PreflightState = "recommended" | "abstained" | "provider_mismatch";
+export type PreflightState = "recommended" | "abstained" | "provider_mismatch" | "provider_not_authorized";
 export type DeciderSource = "jev" | "static_fallback" | "synthetic_fixture";
 export type RouterState = "answered" | "not_requested" | "router_unconfigured" | "router_unavailable" | "invalid_answer";
 export interface ModelPreflight {
@@ -57,6 +58,8 @@ export interface ModelPreflight {
     /** approved: the request was approved with this provider. requested: it is not approved (yet); the provider is only asked for. */
     provider_basis: "approved" | "requested";
     candidates: ModelCandidate[];
+    /** Whether the mission's provider is authorized and by whom (jgwill/Miadi#926). */
+    provider_authorization?: Record<string, unknown>;
     decider: {
         source: DeciderSource;
         router: RouterState;
@@ -117,7 +120,7 @@ export interface JevRequest {
 }
 /** The model a provider's own config names, when it names one. Only that key is read. */
 export declare function configuredModel(provider: ProviderId, home?: string): string | null;
-export declare function candidatesFor(found: ProviderAvailability[], approved: ProviderId | null, modelOf?: (p: ProviderId) => string | null, basis?: "approved" | "requested"): ModelCandidate[];
+export declare function candidatesFor(found: ProviderAvailability[], approved: ProviderId | null, modelOf?: (p: ProviderId) => string | null, basis?: "approved" | "requested", authorization?: Pick<ProviderAuthorization, "authorized" | "provider" | "requester">): ModelCandidate[];
 /** The least review a task gets, whatever any decider says. Jev may raise it, never lower it. */
 export declare function reviewFloor(task: TaskType, criticality: Criticality): ReviewTier;
 export declare function decisionState(task: TaskType, criticality: Criticality, candidates: ModelCandidate[]): Record<string, unknown>;
@@ -134,6 +137,10 @@ export interface PreflightInput {
     task: TaskType;
     criticality: Criticality;
     candidates: ModelCandidate[];
+    /** Whether the mission's provider is authorized, and by whom (jgwill/Miadi#926); shown as given. */
+    provider_authorization?: Record<string, unknown> & {
+        authorized?: boolean;
+    };
     launch?: LaunchEvidence;
     /** The decider to consult, when the caller asked for one; absent means static fallback only. */
     adapter?: JevAdapter;

package/dist/model-preflight.js

@@ -7,6 +7,9 @@
  *   is kept (no switching without a person), Claude Code only when named, an
  *   uninstalled or sign-in-less provider is ineligible, and a reported launch on
  *   another provider fails closed as provider_mismatch before anything is asked.
+ * - Codex is eligible only with its requester's own choice for the mission or
+ *   their own policy (provider-policy.ts, jgwill/Miadi#926); a reported Codex
+ *   launch without either fails closed as provider_not_authorized.
  * - Jev is consulted only when the caller asks (consult_jev) and the connector's
  *   environment holds a Jev key. The state sent holds the task type, the
  *   criticality and the candidates: no task text, mission id, repository name or
@@ -25,6 +28,7 @@ import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { PROVIDERS } from "./providers.js";
+import { needsPersonChoice } from "./provider-policy.js";
 export const PREFLIGHT_CONTRACT = "miadi.mission_model_preflight";
 export const PREFLIGHT_VERSION = 1;
 /** Below this, a Jev choice is not acted on (the ≥0.8 practice of jgwill/Miadi#770). */
@@ -52,7 +56,7 @@ export function configuredModel(provider, home = homedir()) {
     }
     return null;
 }
-export function candidatesFor(found, approved, modelOf = (p) => configuredModel(p), basis = "approved") {
+export function candidatesFor(found, approved, modelOf = (p) => configuredModel(p), basis = "approved", authorization) {
     return PROVIDERS.map((spec) => {
         const a = found.find((p) => p.id === spec.id);
         const installed = Boolean(a?.installed);
@@ -68,6 +72,9 @@ export function candidatesFor(found, approved, modelOf = (p) => configuredModel(
             [eligible, reason] = [false, `Not the ${basis} provider (${approved}); switching needs a person's approval.`];
         else if (!approved && !spec.selectable_by_default)
             [eligible, reason] = [false, `${spec.name} runs only when a request names it.`];
+        else if (needsPersonChoice(spec.id) && !(authorization?.authorized && authorization.provider === spec.id)) {
+            [eligible, reason] = [false, `${spec.name} runs only when ${authorization?.requester.name ?? "the requester"} chooses it for this mission, or their own policy allows it (jgwill/Miadi#926).`];
+        }
         return {
             option: model ? `${spec.id}:${model}` : spec.id,
             provider: spec.id,
@@ -212,6 +219,7 @@ export async function modelPreflight(input) {
         approved_provider,
         provider_basis: input.provider_basis ?? "approved",
         candidates,
+        ...(input.provider_authorization ? { provider_authorization: input.provider_authorization } : {}),
         evidence: { model_cost: "unknown", quota: "unknown" },
         policy: {
             deterministic: true,
@@ -223,6 +231,20 @@ export async function modelPreflight(input) {
         ? { approved_provider, actual: { ...input.launch, source: "reported" }, mismatch: approved_provider ? input.launch.provider !== approved_provider : null }
         : { approved_provider, actual: "unverified", mismatch: null };
     // Fail closed before anything is asked or spent.
+    if (input.launch && needsPersonChoice(input.launch.provider) && !(input.provider_authorization?.authorized && approved_provider === input.launch.provider)) {
+        return {
+            ...base,
+            state: "provider_not_authorized",
+            decider: { source: "static_fallback", router: "not_requested", calibration: "not_applicable", derivation: "deterministic policy: Codex launched without its requester's own choice or policy (jgwill/Miadi#926)" },
+            recommendation: {
+                confidence: null,
+                review_tier: floor,
+                explanation: `Reported running on ${input.launch.provider}, which no choice of the requester's authorizes for this mission. Nothing proceeds on it; the requester chooses it on the approval page, or the mission runs on another provider.`,
+                abstain_reasons: ["provider_not_authorized"],
+            },
+            launch,
+        };
+    }
     if (launch.mismatch) {
         return {
             ...base,

package/dist/provider-policy.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Codex runs only on its requester's own choice for that one mission (jgwill/Miadi#926).
+ *
+ * The assistant that asks (ChatGPT or any MCP client) may name provider "codex", but that
+ * name is the caller's, not the person's. The connector cannot read the chat, so it never
+ * treats the provider field as the person's choice. Codex is authorized for a run only by:
+ *
+ * - a `provider_choice` record the requester made themself on the request's approval page,
+ *   a browser form signed in with their own Miadi person token, outside the MCP channel
+ *   (an OAuth client never holds the person token). The choice is bound to the request id,
+ *   its version and its content hash, and must be fresh (CHOICE_TTL_MS) when the request
+ *   is approved. A revision makes it stale. It covers that mission only;
+ * - or the requester's own provider policy, set by them on the connector's /providers page,
+ *   saying Codex may be named for their requests without a per-mission choice.
+ *
+ * A generic approval (page or card), the caller's provider field, the host's preference
+ * order, a Jev recommendation, and a choice made by anyone other than the requester
+ * authorize nothing. Other providers keep their regular policy (jgwill/Miadi#893, #913).
+ * The check runs when a request is made or revised, when it is approved, when its brief
+ * is written (approval and every rerun), and the factory runner checks the brief again
+ * before it launches anything.
+ */
+import type { ConnectorRecord } from "./records.js";
+/** Providers a request may name only with the requester's own per-mission choice. */
+export declare const CHOICE_PROVIDERS: readonly string[];
+export declare const CODEX_POLICIES: readonly ["per_mission_choice", "selectable"];
+export type CodexPolicy = (typeof CODEX_POLICIES)[number];
+export declare const DEFAULT_CODEX_POLICY: CodexPolicy;
+/** How long a per-mission choice stays good for the approval that follows it. */
+export declare const CHOICE_TTL_MS: number;
+export declare function needsPersonChoice(provider: string | null | undefined): boolean;
+/** Whether a person id may make a choice or set a policy: a person, never a service token. */
+export declare function isPersonId(personId: string | undefined): boolean;
+export interface ProviderPolicy {
+    person_id: string;
+    codex: CodexPolicy;
+    source: "default" | "person";
+    record?: string;
+    set_at?: string;
+}
+/** A person's provider policy: the latest one they set themself, else the default. */
+export declare function providerPolicyOf(records: ConnectorRecord[], personId: string): ProviderPolicy;
+export interface ProviderChoiceView {
+    record: string;
+    provider: string;
+    by: {
+        person_id: string;
+        name: string;
+    };
+    at: string;
+    version: number;
+    content_hash: string;
+    via?: string;
+}
+export type AuthorizationState = "not_required" | "person_choice" | "policy_selectable" | "needs_person_choice";
+export interface ProviderAuthorization {
+    state: AuthorizationState;
+    authorized: boolean;
+    /** The provider the run would launch with (the resolved one), or null when the runner's default applies. */
+    provider: string | null;
+    /** The provider field as the caller wrote it: evidence of what was asked, never of who chose it. */
+    requested: string | null;
+    requester: {
+        person_id: string;
+        name: string;
+        client?: string;
+    };
+    policy: {
+        codex: CodexPolicy;
+        source: ProviderPolicy["source"];
+        record?: string;
+        set_at?: string;
+    };
+    choice?: ProviderChoiceView;
+    /** Choices recorded for this request that do not bind it (another version, another person, too old). */
+    not_binding?: Array<{
+        record: string;
+        why: string;
+    }>;
+    explanation: string;
+}
+/**
+ * Whether the provider a request names may launch, and why. Pure: the ledger is read,
+ * nothing is written. `requireFresh` (the approval) also refuses a choice older than
+ * CHOICE_TTL_MS; the brief written for an approved request checks the binding only.
+ */
+export declare function authorizeProvider(record: ConnectorRecord, records: ConnectorRecord[], opts?: {
+    now?: number;
+    requireFresh?: boolean;
+}): ProviderAuthorization;
+/** The authorization as the brief carries it to the factory runner: attributes it checks before launching. */
+export declare function briefAttributes(a: ProviderAuthorization): Record<string, string>;
+/** The authorization as a receipt keeps it: no body text, only who, what and which record. */
+export declare function authorizationReceipt(a: ProviderAuthorization): Record<string, unknown>;

package/dist/provider-policy.js

@@ -0,0 +1,150 @@
+import { contentHash, versionOf } from "./revisions.js";
+/** Providers a request may name only with the requester's own per-mission choice. */
+export const CHOICE_PROVIDERS = ["codex"];
+export const CODEX_POLICIES = ["per_mission_choice", "selectable"];
+export const DEFAULT_CODEX_POLICY = "per_mission_choice";
+/** How long a per-mission choice stays good for the approval that follows it. */
+export const CHOICE_TTL_MS = 24 * 60 * 60 * 1000;
+export function needsPersonChoice(provider) {
+    return typeof provider === "string" && CHOICE_PROVIDERS.includes(provider);
+}
+/** Whether a person id may make a choice or set a policy: a person, never a service token. */
+export function isPersonId(personId) {
+    return typeof personId === "string" && personId.length > 0 && !personId.startsWith("system:");
+}
+/** A person's provider policy: the latest one they set themself, else the default. */
+export function providerPolicyOf(records, personId) {
+    let latest;
+    for (const r of records) {
+        if (r.kind !== "provider_policy" || r.actor.person_id !== personId || !isPersonId(r.actor.person_id))
+            continue;
+        if (!CODEX_POLICIES.includes(String(r.body.codex)))
+            continue;
+        latest = r;
+    }
+    if (!latest)
+        return { person_id: personId, codex: DEFAULT_CODEX_POLICY, source: "default" };
+    return { person_id: personId, codex: latest.body.codex, source: "person", record: latest.id, set_at: latest.created_at };
+}
+function str(v) {
+    return typeof v === "string" && v ? v : null;
+}
+/**
+ * Whether the provider a request names may launch, and why. Pure: the ledger is read,
+ * nothing is written. `requireFresh` (the approval) also refuses a choice older than
+ * CHOICE_TTL_MS; the brief written for an approved request checks the binding only.
+ */
+export function authorizeProvider(record, records, opts = {}) {
+    const body = (record.body ?? {});
+    const requested = str(body.provider);
+    const provider = str(body.resolved_provider) ?? requested;
+    const requester = {
+        person_id: record.actor.person_id,
+        name: record.actor.name,
+        ...(record.actor.client_name ? { client: record.actor.client_name } : {}),
+    };
+    const policy = providerPolicyOf(records, record.actor.person_id);
+    const policyView = { codex: policy.codex, source: policy.source, ...(policy.record ? { record: policy.record, set_at: policy.set_at } : {}) };
+    const base = { provider, requested, requester, policy: policyView };
+    if (!needsPersonChoice(provider)) {
+        return {
+            ...base,
+            state: "not_required",
+            authorized: true,
+            explanation: provider
+                ? `${provider} needs no per-mission choice; it was ${requested ? "named in the request" : "picked by the host's preference order"} and verified installed.`
+                : "No provider is named: the factory runner's configured default launches, and the runner never starts Codex for a connector brief without the brief's own authorization.",
+        };
+    }
+    if (policy.codex === "selectable" && isPersonId(record.actor.person_id)) {
+        return {
+            ...base,
+            state: "policy_selectable",
+            authorized: true,
+            explanation: `${record.actor.name}'s own provider policy (set ${policy.set_at}) lets their requests name Codex without a per-mission choice. They can change it on the connector's providers page.`,
+        };
+    }
+    const now = opts.now ?? Date.now();
+    const version = versionOf(record);
+    const hash = contentHash(record);
+    const notBinding = [];
+    let choice;
+    for (const r of records) {
+        if (r.kind !== "provider_choice")
+            continue;
+        const b = (r.body ?? {});
+        if (b.request_id !== record.id)
+            continue;
+        const why = b.provider !== provider
+            ? `it chose ${String(b.provider)}, not ${provider}`
+            : r.actor.person_id !== record.actor.person_id || !isPersonId(r.actor.person_id)
+                ? `${r.actor.name} is not the requester`
+                : b.version !== version || b.content_hash !== hash
+                    ? `it was made for version ${String(b.version)}; the request is at version ${version}`
+                    : opts.requireFresh && now - Date.parse(r.created_at) > CHOICE_TTL_MS
+                        ? `it is older than ${CHOICE_TTL_MS / 3_600_000} hours`
+                        : null;
+        if (why)
+            notBinding.push({ record: r.id, why });
+        else
+            choice = r;
+    }
+    const extra = notBinding.length ? { not_binding: notBinding } : {};
+    if (choice) {
+        const b = choice.body;
+        return {
+            ...base,
+            ...extra,
+            state: "person_choice",
+            authorized: true,
+            choice: {
+                record: choice.id,
+                provider: String(b.provider),
+                by: { person_id: choice.actor.person_id, name: choice.actor.name },
+                at: choice.created_at,
+                version: Number(b.version),
+                content_hash: String(b.content_hash),
+                ...(choice.actor.client_id ? { via: choice.actor.client_id } : {}),
+            },
+            explanation: `${choice.actor.name} chose Codex for this mission (version ${version}) on its approval page at ${choice.created_at}. The choice covers this mission only.`,
+        };
+    }
+    if (!isPersonId(record.actor.person_id)) {
+        return {
+            ...base,
+            ...extra,
+            state: "needs_person_choice",
+            authorized: false,
+            explanation: `The request names Codex and was made with a service token (${record.actor.name}). Only a person chooses Codex, for a request of their own, so this request cannot run Codex. Name another provider.`,
+        };
+    }
+    return {
+        ...base,
+        ...extra,
+        state: "needs_person_choice",
+        authorized: false,
+        explanation: `The request names Codex${requester.client ? `, asked through ${requester.client}` : ""}. Codex runs only when ${record.actor.name} chooses it for this mission on its approval page; approving the request, on the page or on a card, does not choose it. Name another provider to run without that step.`,
+    };
+}
+/** The authorization as the brief carries it to the factory runner: attributes it checks before launching. */
+export function briefAttributes(a) {
+    if (!needsPersonChoice(a.provider))
+        return {};
+    if (a.state === "person_choice" && a.choice)
+        return { provider_authorization: "person_choice", provider_choice: a.choice.record };
+    if (a.state === "policy_selectable" && a.policy.record)
+        return { provider_authorization: "policy_selectable", provider_policy: a.policy.record };
+    return {};
+}
+/** The authorization as a receipt keeps it: no body text, only who, what and which record. */
+export function authorizationReceipt(a) {
+    return {
+        state: a.state,
+        authorized: a.authorized,
+        provider: a.provider,
+        requested: a.requested,
+        requester: a.requester,
+        policy: a.policy,
+        ...(a.choice ? { choice: a.choice } : {}),
+    };
+}

package/dist/providers.d.ts

@@ -8,7 +8,11 @@ export interface ProviderSpec {
     /** Config paths whose existence suggests a sign-in; contents are never read. */
     auth_evidence: string[];
 }
-/** Preference order when a run request names no provider (jgwill/Miadi#893). */
+/**
+ * Preference order when a run request names no provider (jgwill/Miadi#893). Codex is never
+ * picked by default: a request names it, and it runs only on the requester's own choice for
+ * that mission or their own policy (provider-policy.ts, jgwill/Miadi#926).
+ */
 export declare const PROVIDERS: ProviderSpec[];
 export interface ProviderAvailability {
     id: ProviderId;
@@ -38,8 +42,8 @@ export type ProviderResolution = {
 /**
  * Resolve the provider a run will ask the intake for. A requested provider must
  * be known and installed; with no request the first installed provider in the
- * preference order that may be selected by default wins — Claude Code only ever
- * by an explicit request.
+ * preference order that may be selected by default wins. Codex and Claude Code
+ * only ever by name; whether a named Codex may run is provider-policy.ts's answer.
  */
 export declare function resolveProvider(requested: string | undefined, found: ProviderAvailability[]): ProviderResolution;
 /**