@sentropic/h2a 0.85.24 → 0.86.0

package/dist/runtime/identity/live.js

@@ -9,6 +9,61 @@ import { decideLegacyAdoption, legacyAliasAlreadyAdopted, recordIdentityAlias }
 import { defaultProviderSessionReaders, readHostSessionName } from "./readers.js";
 import { resolveProviderSession } from "./resolver.js";
 import { durableWorkspaceId } from "./workspace-id.js";
+/**
+ * The CLOSED vocabulary an agent may DECLARE at registration.
+ *
+ * DISPLAY ONLY, and NON-AUTHORITATIVE. Self-reported by the agent, and it MUST
+ * NEVER be an input to any authorization decision, anywhere — not in h2a, not in
+ * a gateway, not in a UI. Authorization is the principal binding plus
+ * server-side scoping; a capability string proves nothing. (Binding condition #3
+ * of the session-exposure feed contract ratified 2026-07-24,
+ * docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md.)
+ *
+ * These values are written to `H2AActorRegistration.declaredCapabilities` and
+ * NEVER to `capabilities` — the latter is the authority-bearing rights list read
+ * by the subagent ceiling (`subagents.ts` `capabilities-exceed-parent`) and by
+ * `canAttestComprehension`. Writing display vocabulary there would widen a
+ * privilege ceiling as a side effect of a display feature, which is exactly the
+ * defect the architect's 2026-07-25 split ruling removes. The two fields must
+ * never be merged.
+ *
+ * Note why "no vocabulary member may ever equal a right string" is NOT a
+ * sufficient guard, and is not relied upon here: the subagent ceiling is a
+ * SUBSET check over the whole field, not a lookup of specific right strings — so
+ * that invariant holds for these three values and the ceiling still widens.
+ * Separation of fields is the mitigation; string choice is not.
+ *
+ * Closed on purpose: an unknown string is DROPPED rather than stored, so the
+ * set a consumer can ever render stays enumerable and reviewable.
+ */
+export const H2A_DECLARED_CAPABILITIES = [
+    /** The agent can open/hold h2a sessions (presence + heartbeat). */
+    "h2a.session",
+    /** The agent is reachable over an MCP channel. */
+    "h2a.mcp",
+    /** The agent can fan work out to subagents. */
+    "h2a.subagents"
+];
+/**
+ * What the CLI's own registration path declares. Narrower than the vocabulary
+ * on purpose: these two are true of every h2a CLI agent by construction, while
+ * `h2a.subagents` is host-specific and not knowable at this call site — an
+ * over-claim would be a lie in a browser panel, so it is left to a host plugin
+ * that actually knows.
+ */
+export const H2A_CLI_DECLARED_CAPABILITIES = [
+    "h2a.session",
+    "h2a.mcp"
+];
+/**
+ * Keep only members of the closed vocabulary, de-duplicated and in vocabulary
+ * order, so what lands in the registry is never caller-shaped free text.
+ */
+export function sanitizeDeclaredCapabilities(capabilities) {
+    if (!capabilities || capabilities.length === 0)
+        return [];
+    return H2A_DECLARED_CAPABILITIES.filter((known) => capabilities.includes(known));
+}
 function safeKeyName(instance) {
     return instance.replace(/[:/]/g, "-");
 }
@@ -43,7 +98,14 @@ function realWorkspacePath(cwd) {
 function labelFromCwd(cwd) {
     return basename(cwd) || "workspace";
 }
-function publicKeyFingerprint(publicKeyPem) {
+/**
+ * Short, stable, NON-SECRET fingerprint of a public key: the first 16 hex chars
+ * of its sha256. Used by the reclaim proof's nonce and by the enrollment
+ * ceremony's owner-facing summary, so the owner can eyeball WHICH key was
+ * proved without ever reading a PEM. It is a label, never an authority: nothing
+ * may accept a fingerprint where it should verify a signature.
+ */
+export function publicKeyFingerprint(publicKeyPem) {
     return createHash("sha256").update(publicKeyPem, "utf8").digest("hex").slice(0, 16);
 }
 function remoteBridgeInstance(providerSessionId) {
@@ -116,6 +178,9 @@ function ensureRegistered(input) {
             instance: input.instance,
             roles: ["AGENTS"],
             scopes: [...input.scopes],
+            // AUTHORITY-BEARING and intentionally left EMPTY, exactly as before this
+            // workstream: it is the subagent ceiling and the attestation right. A
+            // display list must never be written here (architect ruling, 2026-07-25).
             capabilities: [],
             endpoints: [{ kind: "local-files", uri: `file://${input.root}` }],
             publicKeys: [input.publicKeyPem],
@@ -123,7 +188,11 @@ function ensureRegistered(input) {
             agentUuid: input.agentUuid,
             workspace: input.workspace,
             name: input.name,
-            createdAt: new Date(input.now()).toISOString()
+            createdAt: new Date(input.now()).toISOString(),
+            // The declared DISPLAY list, kept structurally apart from `capabilities`.
+            ...(input.declaredCapabilities.length > 0
+                ? { declaredCapabilities: [...input.declaredCapabilities] }
+                : {})
         };
         store.registerInstance(registration);
         return;
@@ -206,6 +275,10 @@ export function resolveLiveIdentity(input) {
         name,
         publicKeyPem: keypair.publicKeyPem,
         scopes,
+        // Declared at mint only: an already-registered instance keeps whatever it
+        // declared then. Nothing downstream may treat this list as authority, so a
+        // narrow/empty list is a display gap, never a permission gap.
+        declaredCapabilities: sanitizeDeclaredCapabilities(input.declaredCapabilities),
         now
     });
     recordIdentityAlias(input.root, {
@@ -222,6 +295,9 @@ export function resolveLiveIdentity(input) {
         legacyInstance,
         action: result.action,
         providerSessionSource: provider.source,
+        ...(provider.providerSessionId !== undefined
+            ? { providerSessionId: provider.providerSessionId }
+            : {}),
         privateKeyPath: keypair.privateKeyPath,
         publicKeyPath: keypair.publicKeyPath,
         migrationNotice: result.action === "mint" || !existingBinding

package/dist/runtime/identity/live.js.map

@@ -1 +1 @@
-{"version":3,"file":"live.js","sourceRoot":"","sources":["../../../src/runtime/identity/live.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,aAAa,EACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,aAAa,EAGd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAA+B,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AA0BvD,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QACjE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,EAAE,IAAI,iBAAiB,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;AACtC,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,oBAAoB,CAAC,iBAAyB;IACrD,OAAO,iBAAiB,CAAC,UAAU,CAAC,SAAS,CAAC;QAC5C,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,UAAU,iBAAiB,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC7E,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IAGjD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5F,OAAO;QACL,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC;QACzD,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;QACvD,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,QAAgB,EAChB,iBAA0B;IAE1B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,aAAa,EAAE,QAAQ,CAAC,aAAa;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3D,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,oBAAoB,QAAQ,IAAI,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/F,OAAO,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KASzB;IACC,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,YAAY,GAAyB;YACzC,EAAE,EAAE,KAAK,CAAC,QAAQ;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACjE,UAAU,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;YAChC,gBAAgB,EAAE,EAAE;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC/C,CAAC;QACF,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACzE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA+B;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,6BAA6B,CAAC;IAC/D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,WAAW,GACf,kBAAkB,CAAC,QAAQ,CAAC;QAC5B,QAAQ,CAAC,aAAa;QACtB,iBAAiB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAoB;QACjC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,KAAK;KACN,CAAC;IACF,MAAM,cAAc,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACvE,qFAAqF;IACrF,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS;QACvC,CAAC,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACtF,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,IAAI,KAAK,CAAC;IAE7C,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,iBAAiB;gBAClC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAClD,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC,CAAC;IAEF,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,iBAAiB,GACrB,QAAQ,CAAC,iBAAiB,IAAI,YAAY,IAAI,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;IACnE,MAAM,MAAM,GACV,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,GAAG,UAAU,EAAE,EAAE;QAC9C,CAAC,CAAC,aAAa,CACX,KAAK,CAAC,IAAI,EACV,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EACtD;YACE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC;YACtE,IAAI;YACJ,GAAG;SACJ,CACF,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE;QAC9C,IAAI;QACJ,iBAAiB;QACjB,WAAW,EAAE,SAAS,CAAC,EAAE;KAC1B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,oBAAoB,CAAC;QAC1C,oBAAoB,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC;QAC3E,sBAAsB,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxE,gBAAgB,CAAC;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS;QACT,IAAI;QACJ,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM;QACN,GAAG;KACJ,CAAC,CAAC;IACH,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE;QAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc;QACd,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC;QACpC,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;KAClC,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI;QACJ,SAAS;QACT,IAAI;QACJ,cAAc;QACd,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,qBAAqB,EAAE,QAAQ,CAAC,MAAM;QACtC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,eAAe,EACb,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,eAAe;YAC1C,CAAC,CAAC,uBAAuB,MAAM,CAAC,QAAQ,iBAAiB,cAAc,KAAK,cAAc,CAAC,MAAM,EAAE;YACnG,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"live.js","sourceRoot":"","sources":["../../../src/runtime/identity/live.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,aAAa,EACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,aAAa,EAGd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAA+B,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,mEAAmE;IACnE,aAAa;IACb,kDAAkD;IAClD,SAAS;IACT,+CAA+C;IAC/C,eAAe;CACP,CAAC;AAIX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAqC;IAC7E,aAAa;IACb,SAAS;CACV,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAA2C;IAE3C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1D,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACnF,CAAC;AA4CD,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QACjE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,KAAK,MAAM,IAAI,IAAI,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,EAAE,IAAI,iBAAiB,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,oBAAoB,CAAC,iBAAyB;IACrD,OAAO,iBAAiB,CAAC,UAAU,CAAC,SAAS,CAAC;QAC5C,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,UAAU,iBAAiB,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC7E,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IAGjD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5F,OAAO;QACL,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC;QACzD,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;QACvD,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,IAAY,EACZ,QAAgB,EAChB,iBAA0B;IAE1B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,aAAa,EAAE,QAAQ,CAAC,aAAa;SACtC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3D,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,KAAK,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,oBAAoB,QAAQ,IAAI,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/F,OAAO,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAWzB;IACC,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,YAAY,GAAyB;YACzC,EAAE,EAAE,KAAK,CAAC,QAAQ;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YACzB,yEAAyE;YACzE,sEAAsE;YACtE,0EAA0E;YAC1E,YAAY,EAAE,EAAE;YAChB,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACjE,UAAU,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;YAChC,gBAAgB,EAAE,EAAE;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC9C,0EAA0E;YAC1E,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC;gBACvC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,KAAK,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACzE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA+B;IACjE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,6BAA6B,CAAC;IAC/D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,WAAW,GACf,kBAAkB,CAAC,QAAQ,CAAC;QAC5B,QAAQ,CAAC,aAAa;QACtB,iBAAiB,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAoB;QACjC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,KAAK;KACN,CAAC;IACF,MAAM,cAAc,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACvE,qFAAqF;IACrF,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS;QACvC,CAAC,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACtF,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,IAAI,KAAK,CAAC;IAE7C,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,iBAAiB;gBAClC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAClD,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC,CAAC;IAEF,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,iBAAiB,GACrB,QAAQ,CAAC,iBAAiB,IAAI,YAAY,IAAI,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;IACnE,MAAM,MAAM,GACV,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC,EAAE,MAAM,EAAE,MAAe,EAAE,GAAG,UAAU,EAAE,EAAE;QAC9C,CAAC,CAAC,aAAa,CACX,KAAK,CAAC,IAAI,EACV,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EACtD;YACE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC;YACtE,IAAI;YACJ,GAAG;SACJ,CACF,CAAC;IAER,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE;QAC9C,IAAI;QACJ,iBAAiB;QACjB,WAAW,EAAE,SAAS,CAAC,EAAE;KAC1B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,oBAAoB,CAAC;QAC1C,oBAAoB,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC;QAC3E,sBAAsB,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxE,gBAAgB,CAAC;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS;QACT,IAAI;QACJ,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM;QACN,0EAA0E;QAC1E,2EAA2E;QAC3E,8DAA8D;QAC9D,oBAAoB,EAAE,4BAA4B,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC9E,GAAG;KACJ,CAAC,CAAC;IACH,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE;QAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc;QACd,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC;QACpC,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;KAClC,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI;QACJ,SAAS;QACT,IAAI;QACJ,cAAc;QACd,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,qBAAqB,EAAE,QAAQ,CAAC,MAAM;QACtC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,eAAe,EACb,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,eAAe;YAC1C,CAAC,CAAC,uBAAuB,MAAM,CAAC,QAAQ,iBAAiB,cAAc,KAAK,cAAc,CAAC,MAAM,EAAE;YACnG,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC"}

package/dist/runtime/identity/readers.d.ts

@@ -8,25 +8,79 @@
  */
 import type { ProviderSessionReaders } from "./resolver.js";
 export declare const defaultProviderSessionReaders: ProviderSessionReaders;
+/**
+ * How much of the tail of a Claude transcript to scan for the current title.
+ *
+ * A transcript is append-only, and `customTitle` is carried by dedicated
+ * **rename-event records** (`type: "custom-title"`) — NOT by ordinary records.
+ * Measured 2026-07-25 over all 8078 local transcripts: title-bearing records are
+ * 0.06% of tail records (5.1% within the one heavily-renamed transcript that
+ * motivated this fix). The newest such record is therefore near the END, and a
+ * 64 KiB window reaches it: of the 45 transcripts that carry a title at all,
+ * **all 45** are resolved from this window — 0 missed, 0 wrong values.
+ *
+ * Bounded rather than whole-file because this now runs on the heartbeat and live
+ * transcripts reach hundreds of MB (largest local: 233 MB; cost 0.30 ms/call).
+ */
+export declare const CLAUDE_TITLE_TAIL_BYTES: number;
+/**
+ * How much of the TAIL of `~/.codex/session_index.jsonl` to read. Codex resolves
+ * last-match-wins, so the tail is what matters; the file grows monotonically and
+ * this also runs on the heartbeat (48 KiB today, so today's whole file fits).
+ * A session whose entry has aged out of the window simply yields `undefined`,
+ * which the caller treats as "keep the name you have".
+ */
+export declare const CODEX_INDEX_TAIL_BYTES: number;
+/**
+ * Upper bound on a display name written into presence. A host title is
+ * user-controlled and unbounded; `isH2ASession` only checks `typeof`, so an
+ * absurd title would otherwise land in every peer's presence read. Truncated
+ * rather than rejected so the name stays findable by the substring match that
+ * `discover_sessions(name:)` performs.
+ */
+export declare const MAX_DISPLAY_NAME_CHARS = 200;
+/** Initial re-scan delay after a transcript lookup MISSES (negative cache). */
+export declare const TRANSCRIPT_MISS_BACKOFF_MS = 60000;
+/** Ceiling for the negative-cache backoff. */
+export declare const TRANSCRIPT_MISS_BACKOFF_MAX_MS = 300000;
 /**
  * Injectable FS readers for `readHostSessionName` (test-friendly).
  * Only reading is required; real-FS defaults are `defaultHostNameReaders`.
  */
 export interface HostNameReaders {
-    /** Read up to `maxLines` newline-delimited lines from a file. Returns [] on any error. */
-    readLines(path: string, maxLines: number): string[];
-    /** List newline-delimited JSONL entries from `~/.codex/session_index.jsonl`. */
+    /**
+     * Read the LAST `maxBytes` of a file as newline-delimited lines, dropping a
+     * leading partial record when the file was truncated. Returns [] on any error.
+     *
+     * Deliberately not `readLines(path, maxLines)` (the pre-fix head reader): a
+     * head read of an append-only transcript returns the title as of session
+     * START and can never observe a later rename. An external implementor of this
+     * interface gets a compile error rather than silently-stale names.
+     */
+    readTailLines(path: string, maxBytes: number): string[];
+    /**
+     * List newline-delimited JSONL entries from the TAIL of
+     * `~/.codex/session_index.jsonl` (see `CODEX_INDEX_TAIL_BYTES`).
+     */
     readCodexSessionIndex(): string[];
     /** Whether the home dir root is known (for path construction). */
     homedir(): string;
+    /**
+     * Locate the transcript file for a Claude session id. Optional: defaults to
+     * scanning `~/.claude/projects`. Injectable so a test can COUNT the scans and
+     * pin the negative-cache behaviour — that walk is 87 directories / 14345 files
+     * and it sits on a 5-second timer, so a repeated miss must not re-walk.
+     */
+    findClaudeTranscript?(cwd: string, sessionId: string, home: string): string | undefined;
 }
 export declare const defaultHostNameReaders: HostNameReaders;
 /**
  * Read the host-native session name for the given session.
  *
  * - **claude**: reads the transcript JSONL (located via the CLAUDE_CODE_SESSION_ID
- *   resolver); scans the first 40 lines for `customTitle` (user rename) first,
- *   then falls back to `agentName`. Never returns `aiTitle`.
+ *   resolver); scans the TAIL for the LAST `customTitle` (the current user
+ *   rename — the transcript is append-only), then falls back to the first
+ *   `agentName` seen. Never returns `aiTitle`.
  * - **codex**: reads `~/.codex/session_index.jsonl`; returns `thread_name` for
  *   the entry whose `id === sessionId` (last-match wins).
  * - Other hosts: returns undefined.
@@ -39,4 +93,34 @@ export declare function readHostSessionName(opts: {
     sessionId?: string;
     readers?: HostNameReaders;
 }): string | undefined;
+/**
+ * Build a re-callable resolver for this session's host-native display name, for
+ * the heartbeat refresh path (spec 2026-07-25-h2a-lane-addressing §D1b).
+ *
+ * `readHostSessionName` is a one-shot: it re-scans every project directory to
+ * locate the transcript. This factory memoizes the transcript path (the session
+ * id is fixed for the life of the server process) so a steady-state heartbeat
+ * costs one bounded tail read.
+ *
+ * **Negative caching (required, not an optimization).** A session whose
+ * transcript never appears is a real, observed state — it is the RC-3 case in the
+ * spec, where `CLAUDE_CODE_SESSION_ID` names a session with no transcript at all.
+ * Memoizing only on success meant that session re-walked
+ * `~/.claude/projects` — 87 directories, 14345 files, 8.73 ms — on EVERY
+ * heartbeat, i.e. every 5 seconds, forever. So a miss is cached too, with
+ * exponential backoff from `TRANSCRIPT_MISS_BACKOFF_MS` to
+ * `TRANSCRIPT_MISS_BACKOFF_MAX_MS`. A transcript that appears later is still
+ * picked up, just not instantly — bounded by the current backoff.
+ *
+ * Returns `undefined` whenever the title cannot be read — the caller must treat
+ * that as "keep the name you have", never as "fall back to the cwd basename".
+ */
+export declare function createHostSessionNameRefresher(opts: {
+    host: string;
+    cwd: string;
+    sessionId?: string;
+    readers?: HostNameReaders;
+    /** Injectable clock, for testing the negative cache without real waiting. */
+    now?: () => number;
+}): () => string | undefined;
 //# sourceMappingURL=readers.d.ts.map

package/dist/runtime/identity/readers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readers.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/readers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AA2F5D,eAAO,MAAM,6BAA6B,EAAE,sBAK3C,CAAC;AAIF;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,0FAA0F;IAC1F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACpD,gFAAgF;IAChF,qBAAqB,IAAI,MAAM,EAAE,CAAC;IAClC,kEAAkE;IAClE,OAAO,IAAI,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,sBAAsB,EAAE,eAqBpC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B,GAAG,MAAM,GAAG,SAAS,CAcrB"}
+{"version":3,"file":"readers.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/readers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAcH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AA2F5D,eAAO,MAAM,6BAA6B,EAAE,sBAK3C,CAAC;AAIF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,QAAY,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,QAAa,CAAC;AAEjD;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,+EAA+E;AAC/E,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,8CAA8C;AAC9C,eAAO,MAAM,8BAA8B,SAAU,CAAC;AAEtD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxD;;;OAGG;IACH,qBAAqB,IAAI,MAAM,EAAE,CAAC;IAClC,kEAAkE;IAClE,OAAO,IAAI,MAAM,CAAC;IAClB;;;;;OAKG;IACH,oBAAoB,CAAC,CACnB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAAC;CACvB;AAED,eAAO,MAAM,sBAAsB,EAAE,eAiDpC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B,GAAG,MAAM,GAAG,SAAS,CAcrB;AAmKD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,MAAM,MAAM,GAAG,SAAS,CAgC3B"}

package/dist/runtime/identity/readers.js

@@ -6,7 +6,7 @@
  * never blocks connect). The transcript layouts were live-verified 2026-05-30
  * (gemini's path layout drifts across versions — we match on `.project_root`).
  */
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { closeSync, existsSync, openSync, readFileSync, readSync, readdirSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 /** First newline-delimited line of a (possibly large) file, decoded best-effort. */
@@ -111,36 +111,97 @@ export const defaultProviderSessionReaders = {
     geminiSessionForCwd,
     agyConversationForCwd
 };
+// ── WP-6: host-native session name reading ────────────────────────────────
+/**
+ * How much of the tail of a Claude transcript to scan for the current title.
+ *
+ * A transcript is append-only, and `customTitle` is carried by dedicated
+ * **rename-event records** (`type: "custom-title"`) — NOT by ordinary records.
+ * Measured 2026-07-25 over all 8078 local transcripts: title-bearing records are
+ * 0.06% of tail records (5.1% within the one heavily-renamed transcript that
+ * motivated this fix). The newest such record is therefore near the END, and a
+ * 64 KiB window reaches it: of the 45 transcripts that carry a title at all,
+ * **all 45** are resolved from this window — 0 missed, 0 wrong values.
+ *
+ * Bounded rather than whole-file because this now runs on the heartbeat and live
+ * transcripts reach hundreds of MB (largest local: 233 MB; cost 0.30 ms/call).
+ */
+export const CLAUDE_TITLE_TAIL_BYTES = 64 * 1024;
+/**
+ * How much of the TAIL of `~/.codex/session_index.jsonl` to read. Codex resolves
+ * last-match-wins, so the tail is what matters; the file grows monotonically and
+ * this also runs on the heartbeat (48 KiB today, so today's whole file fits).
+ * A session whose entry has aged out of the window simply yields `undefined`,
+ * which the caller treats as "keep the name you have".
+ */
+export const CODEX_INDEX_TAIL_BYTES = 256 * 1024;
+/**
+ * Upper bound on a display name written into presence. A host title is
+ * user-controlled and unbounded; `isH2ASession` only checks `typeof`, so an
+ * absurd title would otherwise land in every peer's presence read. Truncated
+ * rather than rejected so the name stays findable by the substring match that
+ * `discover_sessions(name:)` performs.
+ */
+export const MAX_DISPLAY_NAME_CHARS = 200;
+/** Initial re-scan delay after a transcript lookup MISSES (negative cache). */
+export const TRANSCRIPT_MISS_BACKOFF_MS = 60_000;
+/** Ceiling for the negative-cache backoff. */
+export const TRANSCRIPT_MISS_BACKOFF_MAX_MS = 300_000;
 export const defaultHostNameReaders = {
-    readLines(path, maxLines) {
+    readTailLines(path, maxBytes) {
+        let fd;
         try {
-            const raw = readFileSync(path, "utf8");
-            return raw.split("\n").slice(0, maxLines);
+            const size = statSync(path).size;
+            const length = Math.min(size, Math.max(0, maxBytes));
+            const start = size - length;
+            const buf = Buffer.allocUnsafe(length);
+            fd = openSync(path, "r");
+            let read = 0;
+            while (read < length) {
+                const n = readSync(fd, buf, read, length - read, start + read);
+                if (n <= 0)
+                    break;
+                read += n;
+            }
+            const lines = buf.subarray(0, read).toString("utf8").split("\n");
+            // When we started mid-file the first element is a partial record; drop it
+            // rather than letting JSON.parse fail on a truncated object.
+            if (start > 0)
+                lines.shift();
+            return lines;
         }
         catch {
             return [];
         }
+        finally {
+            if (fd !== undefined) {
+                try {
+                    closeSync(fd);
+                }
+                catch {
+                    // best-effort
+                }
+            }
+        }
     },
     readCodexSessionIndex() {
-        try {
-            const f = join(homedir(), ".codex", "session_index.jsonl");
-            const raw = readFileSync(f, "utf8");
-            return raw.split("\n");
-        }
-        catch {
-            return [];
-        }
+        // Tail-bounded: this runs on the heartbeat and the index grows monotonically.
+        return defaultHostNameReaders.readTailLines(join(homedir(), ".codex", "session_index.jsonl"), CODEX_INDEX_TAIL_BYTES);
     },
     homedir() {
         return homedir();
+    },
+    findClaudeTranscript(cwd, sessionId, home) {
+        return findClaudeTranscript(cwd, sessionId, home);
     }
 };
 /**
  * Read the host-native session name for the given session.
  *
  * - **claude**: reads the transcript JSONL (located via the CLAUDE_CODE_SESSION_ID
- *   resolver); scans the first 40 lines for `customTitle` (user rename) first,
- *   then falls back to `agentName`. Never returns `aiTitle`.
+ *   resolver); scans the TAIL for the LAST `customTitle` (the current user
+ *   rename — the transcript is append-only), then falls back to the first
+ *   `agentName` seen. Never returns `aiTitle`.
  * - **codex**: reads `~/.codex/session_index.jsonl`; returns `thread_name` for
  *   the entry whose `id === sessionId` (last-match wins).
  * - Other hosts: returns undefined.
@@ -195,34 +256,176 @@ function findClaudeTranscript(cwd, sessionId, home = homedir()) {
         return undefined;
     }
 }
+/**
+ * C0/C1 control characters and Unicode bidi overrides/isolates.
+ *
+ * A display name is host-controlled free text that D3's list-and-ask presents to
+ * a HUMAN choosing a message recipient. A bidi override (U+202E) can make
+ * `auth<U+202E>gnitnuocca` render as `authaccounting`, so two candidates in a
+ * disambiguation list can be made to look alike; a C0 control can truncate or
+ * corrupt a terminal line. Neither is ever legitimate in a display name, so both
+ * are removed at INGEST rather than left to every consumer to re-discover.
+ *
+ * This is defence in depth, not a substitute for escaping: a renderer must still
+ * escape what it prints (spec §10.6), and candidate choice must never rest on
+ * title text alone.
+ */
+// eslint-disable-next-line no-control-regex
+const UNSAFE_DISPLAY_CHARS = /[\u0000-\u001F\u007F-\u009F\u200E\u200F\u202A-\u202E\u2066-\u2069]/g;
+/**
+ * Normalize a candidate display name: strip unsafe characters, trim, reject
+ * whitespace-only, and cap the length. Without the trim a title of `"   "` is
+ * truthy and would be written to presence verbatim; without the cap an unbounded
+ * user-controlled string lands in every peer's presence read (`isH2ASession` only
+ * checks `typeof`).
+ *
+ * EVERY host reader must route its title through this function. Claude reaches it
+ * via `jsonField`; Codex calls it directly (`readCodexSessionName`). A reader that
+ * bypasses it writes untrimmed, unbounded, control-bearing text into presence.
+ */
+function normalizeTitle(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.replace(UNSAFE_DISPLAY_CHARS, "").trim();
+    if (trimmed.length === 0)
+        return undefined;
+    return trimmed.length > MAX_DISPLAY_NAME_CHARS
+        ? trimmed.slice(0, MAX_DISPLAY_NAME_CHARS)
+        : trimmed;
+}
+/**
+ * Read one display-name field out of a JSONL record. Total (undefined on junk).
+ *
+ * `requireCustomTitleType` applies the same policy as
+ * `h2a-runtime/src/restore.ts` — only a dedicated rename-event record
+ * (`type: "custom-title"`) carries an authoritative title. See
+ * `titleFromClaudeTranscript` for the measurement behind that choice.
+ */
+function jsonField(line, key, requireCustomTitleType = false) {
+    const trimmed = line?.trim();
+    if (!trimmed)
+        return undefined;
+    try {
+        const obj = JSON.parse(trimmed);
+        if (requireCustomTitleType && obj.type !== "custom-title")
+            return undefined;
+        return normalizeTitle(obj[key]);
+    }
+    catch {
+        return undefined; // skip malformed lines
+    }
+}
+/**
+ * Extract the CURRENT display title from a Claude transcript.
+ *
+ * A transcript is **append-only**, and a title lives on a dedicated rename-event
+ * record (`type: "custom-title"`), so a rename appends the NEW title at the END.
+ * We therefore scan **backwards** and take the LAST one.
+ *
+ * The pre-fix reader took the FIRST `customTitle` out of the first 40 lines,
+ * which is the title as of session start — it could never observe a rename, so
+ * `presence.name` stayed pinned to a stale title for the life of the session
+ * (measured live: 1022 records saying `39etc` then 65 saying `auth`; the reader
+ * returned `39etc` while the human saw `auth`).
+ *
+ * **Policy note (single source of truth).** `h2a-runtime/src/restore.ts:187-200`
+ * reads the same field and requires `type === "custom-title"`. This reader now
+ * applies the identical predicate, so the two agree by construction. That is not
+ * a guess: measured 2026-07-25 across all 8078 local transcripts, comparing both
+ * policies on the same window, there were **0 divergences**, and **0** of the 89
+ * title-bearing records carried the field on any other record type. The stricter
+ * predicate is chosen because a misread produces a WRONG name (bad routing) while
+ * a missed read produces NO name (the caller keeps the name it has).
+ *
+ * `agentName` keeps first-seen-wins — it is not user-mutable, so recency is
+ * meaningless for it, and it is not a rename event so the type check must not
+ * apply to it. `aiTitle` is never read, hence never returned.
+ */
+function titleFromClaudeTranscript(transcriptPath, readers) {
+    const lines = readers.readTailLines(transcriptPath, CLAUDE_TITLE_TAIL_BYTES);
+    for (let i = lines.length - 1; i >= 0; i -= 1) {
+        // Cheap pre-filter before JSON.parse, mirroring restore.ts.
+        if (!lines[i]?.includes('"custom-title"'))
+            continue;
+        const customTitle = jsonField(lines[i], "customTitle", true);
+        if (customTitle)
+            return customTitle;
+    }
+    for (const line of lines) {
+        const agentName = jsonField(line, "agentName");
+        if (agentName)
+            return agentName;
+    }
+    return undefined;
+}
+/** Locate a transcript, preferring an injected finder (see `HostNameReaders`). */
+function locateClaudeTranscript(cwd, sessionId, readers) {
+    return readers.findClaudeTranscript
+        ? readers.findClaudeTranscript(cwd, sessionId, readers.homedir())
+        : findClaudeTranscript(cwd, sessionId, readers.homedir());
+}
 function readClaudeSessionName(cwd, sessionId, readers) {
     if (!sessionId)
         return undefined;
-    const transcriptPath = findClaudeTranscript(cwd, sessionId, readers.homedir());
+    const transcriptPath = locateClaudeTranscript(cwd, sessionId, readers);
     if (!transcriptPath)
         return undefined;
-    const lines = readers.readLines(transcriptPath, 40);
-    let customTitle;
-    let agentName;
-    for (const line of lines) {
-        const trimmed = line.trim();
-        if (!trimmed)
-            continue;
+    return titleFromClaudeTranscript(transcriptPath, readers);
+}
+/**
+ * Build a re-callable resolver for this session's host-native display name, for
+ * the heartbeat refresh path (spec 2026-07-25-h2a-lane-addressing §D1b).
+ *
+ * `readHostSessionName` is a one-shot: it re-scans every project directory to
+ * locate the transcript. This factory memoizes the transcript path (the session
+ * id is fixed for the life of the server process) so a steady-state heartbeat
+ * costs one bounded tail read.
+ *
+ * **Negative caching (required, not an optimization).** A session whose
+ * transcript never appears is a real, observed state — it is the RC-3 case in the
+ * spec, where `CLAUDE_CODE_SESSION_ID` names a session with no transcript at all.
+ * Memoizing only on success meant that session re-walked
+ * `~/.claude/projects` — 87 directories, 14345 files, 8.73 ms — on EVERY
+ * heartbeat, i.e. every 5 seconds, forever. So a miss is cached too, with
+ * exponential backoff from `TRANSCRIPT_MISS_BACKOFF_MS` to
+ * `TRANSCRIPT_MISS_BACKOFF_MAX_MS`. A transcript that appears later is still
+ * picked up, just not instantly — bounded by the current backoff.
+ *
+ * Returns `undefined` whenever the title cannot be read — the caller must treat
+ * that as "keep the name you have", never as "fall back to the cwd basename".
+ */
+export function createHostSessionNameRefresher(opts) {
+    const readers = opts.readers ?? defaultHostNameReaders;
+    const now = opts.now ?? Date.now;
+    let cachedTranscript;
+    let nextScanAllowedAt = 0;
+    let missBackoffMs = TRANSCRIPT_MISS_BACKOFF_MS;
+    return () => {
         try {
-            const obj = JSON.parse(trimmed);
-            if (typeof obj.customTitle === "string" && obj.customTitle.length > 0) {
-                customTitle = obj.customTitle;
-                break; // prefer first customTitle found
+            if (opts.host === "codex") {
+                return readCodexSessionName(opts.sessionId, readers);
             }
-            if (!agentName && typeof obj.agentName === "string" && obj.agentName.length > 0) {
-                agentName = obj.agentName;
+            const sessionId = opts.sessionId;
+            if (opts.host !== "claude" || !sessionId)
+                return undefined;
+            if (cachedTranscript === undefined) {
+                const at = now();
+                // Negative-cache hit: do NOT walk the filesystem.
+                if (at < nextScanAllowedAt)
+                    return undefined;
+                cachedTranscript = locateClaudeTranscript(opts.cwd, sessionId, readers);
+                if (cachedTranscript === undefined) {
+                    nextScanAllowedAt = at + missBackoffMs;
+                    missBackoffMs = Math.min(missBackoffMs * 2, TRANSCRIPT_MISS_BACKOFF_MAX_MS);
+                    return undefined;
+                }
             }
+            return titleFromClaudeTranscript(cachedTranscript, readers);
         }
         catch {
-            // skip malformed lines
+            return undefined; // a naming bug must never break the heartbeat
         }
-    }
-    return customTitle ?? agentName;
+    };
 }
 function readCodexSessionName(sessionId, readers) {
     if (!sessionId)
@@ -235,8 +438,14 @@ function readCodexSessionName(sessionId, readers) {
             continue;
         try {
             const obj = JSON.parse(trimmed);
-            if (obj.id === sessionId && typeof obj.thread_name === "string" && obj.thread_name.length > 0) {
-                lastMatch = obj.thread_name;
+            if (obj.id === sessionId) {
+                // Route through the SAME normalization as Claude. Previously this branch
+                // assigned `obj.thread_name` raw, so a Codex thread name was written to
+                // presence untrimmed, whitespace-only-accepted and UNBOUNDED — the one
+                // host-controlled presence input the length cap did not actually cover.
+                const normalized = normalizeTitle(obj.thread_name);
+                if (normalized !== undefined)
+                    lastMatch = normalized;
             }
         }
         catch {