@yalehwang/cloudpit 2.0.0 → 3.0.0

package/dist-server/server/modules/providers/tests/codex-runtime-provider-injection.test.js

@@ -0,0 +1,228 @@
+/**
+ * Per-run Codex SDK provider injection (AC-464).
+ *
+ * The runtime used to always construct `new Codex()` with no options, so a
+ * model bound to a project upstream provider still dialled Codex's global
+ * default. This criterion pins the three readings that make the binding real:
+ *
+ *   - POSITIVE: a model whose public config carries `codexProviderId` compiles
+ *     `config.model_provider` + `config.model_providers.<id>` (base_url,
+ *     env_key, wire_api) and passes the token-file secret in the child env
+ *     under `env_key`. The REAL Codex SDK spawns the REAL bundled CLI, which
+ *     POSTs to a local mock `/v1/responses`; the mock asserts the request's
+ *     `Authorization` header is `Bearer <token-file secret>`.
+ *   - ISOLATION: a host sentinel variable present in `process.env` is absent
+ *     from the child env, while plumbing (PATH/HOME) survives.
+ *   - NEGATIVE: a model with no `codexProviderId` still constructs `new Codex()`
+ *     with neither `config` nor `env`; a model bound to an unknown provider is
+ *     refused with a readable line and never falls back to the default endpoint.
+ */
+import assert from 'node:assert/strict';
+import http from 'node:http';
+import { mkdtemp, rm, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import test from 'node:test';
+import { Codex } from '@openai/codex-sdk';
+import { codexRuntime } from '../../../modules/providers/list/codex/codex-runtime.provider.js';
+import { createCodexModelProvidersSource, } from '../../../modules/settings/index.js';
+import { installCodexProviderRegistryPort, } from '../../../shared/ports/codex-provider-registry.port.js';
+const HOST_SENTINEL_KEY = 'CC_CODEX_HOST_SENTINEL';
+const HOST_SENTINEL_VALUE = 'host-secret-that-must-not-reach-the-child';
+const PROVIDER_ID = 'bob';
+const ENV_KEY = 'BOB_API_KEY';
+const TOKEN_SECRET = 'token-file-secret-4242';
+/**
+ * A local Responses-API mock. A 400 is deliberate: Codex 0.166 treats it as a
+ * terminal client error (no 5xx retry/backoff), so the criterion settles in
+ * well under a second while still exercising the real HTTP path — including the
+ * `Authorization` header the provider's `env_key` produces.
+ */
+async function startMockResponsesApi() {
+    const requests = [];
+    const server = http.createServer((request, response) => {
+        requests.push({
+            url: request.url ?? '',
+            authorization: typeof request.headers.authorization === 'string'
+                ? request.headers.authorization
+                : undefined,
+        });
+        request.resume();
+        response.writeHead(400, { 'content-type': 'application/json' });
+        response.end(JSON.stringify({ error: { message: 'mock: provider injection criterion' } }));
+    });
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const { port } = server.address();
+    return {
+        requests,
+        baseUrl: `http://127.0.0.1:${port}/v1`,
+        close: () => new Promise((resolve, reject) => {
+            server.close((error) => (error ? reject(error) : resolve()));
+        }),
+    };
+}
+/**
+ * Writes the production settings document + token file, then installs the real
+ * settings source in the shared registry port. Nothing about the resolution is
+ * stubbed: the runtime reads the JSON and the 0600 token file through the same
+ * `resolve()` the production composition root installs.
+ */
+async function withProviderRegistry(baseUrl, run) {
+    const directory = await mkdtemp(path.join(os.tmpdir(), 'codex-perrun-injection-'));
+    const settingsPath = path.join(directory, 'codex.settings.json');
+    const tokenFile = path.join(directory, 'bob.token');
+    await writeFile(tokenFile, TOKEN_SECRET, { encoding: 'utf8', mode: 0o600 });
+    await writeFile(settingsPath, JSON.stringify({
+        modelProviders: {
+            [PROVIDER_ID]: {
+                name: 'Bob Upstream',
+                baseUrl,
+                envKey: ENV_KEY,
+                tokenFile,
+            },
+        },
+    }), 'utf8');
+    const source = createCodexModelProvidersSource({ settingsPath, env: {}, homeDir: directory });
+    installCodexProviderRegistryPort({
+        read: () => ({
+            providers: source.read().providers.map((provider) => ({ id: provider.id })),
+            reservedIds: [],
+        }),
+        resolve: (id) => source.resolve(id),
+    });
+    try {
+        await run(directory);
+    }
+    finally {
+        await rm(directory, { recursive: true, force: true });
+    }
+}
+/** A context whose single model option carries (or omits) a provider binding. */
+function contextForModel(modelId, codexProviderId) {
+    return {
+        resolveProviderSessionId: () => null,
+        resolveResumeModel: async () => modelId,
+        getProviderModels: async () => ({
+            OPTIONS: [{
+                    value: modelId,
+                    label: modelId,
+                    isCustom: true,
+                    config: codexProviderId === undefined
+                        ? { env: [] }
+                        : { codexProviderId, env: [] },
+                }],
+            DEFAULT: modelId,
+        }),
+        normalizeMessage: () => [],
+        isProviderInstalled: async () => true,
+    };
+}
+/**
+ * Captures the options the runtime handed the REAL SDK constructor while
+ * letting the original `startThread` run, so the CLI still starts for real.
+ */
+function captureCodexOptions(t) {
+    let captured;
+    const originalStartThread = Codex.prototype.startThread;
+    t.mock.method(Codex.prototype, 'startThread', function startThread(options) {
+        captured = this.options;
+        return originalStartThread.call(this, options);
+    });
+    return {
+        options: () => {
+            assert.ok(captured, 'the runtime must construct the SDK through startThread');
+            return captured;
+        },
+    };
+}
+test('AC-464: a bound model launches the real SDK under its provider and the token file supplies Authorization', async (t) => {
+    const mock = await startMockResponsesApi();
+    const previousHome = process.env.HOME;
+    process.env[HOST_SENTINEL_KEY] = HOST_SENTINEL_VALUE;
+    try {
+        await withProviderRegistry(mock.baseUrl, async (home) => {
+            // Keep the real CLI's session/config writes inside the criterion's temp
+            // directory instead of the operator's ~/.codex.
+            process.env.HOME = home;
+            const capture = captureCodexOptions(t);
+            const messages = [];
+            await codexRuntime.run('hello provider', {
+                sessionId: 'codex-perrun-injection',
+                model: 'bound-model',
+                cwd: home,
+                permissionMode: 'bypassPermissions',
+            }, { isWebSocketWriter: true, send: (message) => messages.push(message) }, contextForModel('bound-model', PROVIDER_ID));
+            const options = capture.options();
+            assert.deepEqual(options.config, {
+                model_provider: PROVIDER_ID,
+                model_providers: {
+                    [PROVIDER_ID]: {
+                        name: 'Bob Upstream',
+                        base_url: mock.baseUrl,
+                        env_key: ENV_KEY,
+                        wire_api: 'responses',
+                    },
+                },
+            });
+            assert.equal(options.env?.[ENV_KEY], TOKEN_SECRET);
+            assert.equal(options.env?.[HOST_SENTINEL_KEY], undefined, 'a host sentinel must not reach the child');
+            // The real bundled CLI actually spoke to the mock: the secret arrived as
+            // the bearer token, which is the end-to-end reading the config alone
+            // cannot prove.
+            assert.ok(mock.requests.length >= 1, `the real CLI must call the mock; messages=${JSON.stringify(messages)}`);
+            assert.equal(mock.requests[0].url, '/v1/responses');
+            assert.equal(mock.requests[0].authorization, `Bearer ${TOKEN_SECRET}`);
+        });
+    }
+    finally {
+        if (previousHome === undefined)
+            delete process.env.HOME;
+        else
+            process.env.HOME = previousHome;
+        delete process.env[HOST_SENTINEL_KEY];
+        await mock.close();
+    }
+});
+test('AC-464: an unbound model keeps the previous no-options construction', async (t) => {
+    let captured;
+    const fakeThread = {
+        id: 'native-thread',
+        async runStreamed() {
+            return { events: (async function* () { })() };
+        },
+    };
+    // No CLI is needed for the negative reading: the question is what the runtime
+    // handed the constructor, and the SDK stores it on the instance.
+    t.mock.method(Codex.prototype, 'startThread', function startThread() {
+        captured = this.options;
+        return fakeThread;
+    });
+    await codexRuntime.run('hello default', {
+        model: 'unbound-model',
+        cwd: os.tmpdir(),
+    }, { isWebSocketWriter: true, send: () => { } }, contextForModel('unbound-model'));
+    assert.ok(captured, 'the runtime must construct the SDK through startThread');
+    assert.equal(captured.config, undefined);
+    assert.equal(captured.env, undefined);
+});
+test('AC-464: a model bound to an unknown provider fails readably and never dials the default', async (t) => {
+    const mock = await startMockResponsesApi();
+    try {
+        await withProviderRegistry(mock.baseUrl, async (home) => {
+            const messages = [];
+            await codexRuntime.run('hello nobody', {
+                model: 'dangling-model',
+                cwd: home,
+            }, { isWebSocketWriter: true, send: (message) => messages.push(message) }, contextForModel('dangling-model', 'nobody'));
+            const error = messages.find((message) => message.kind === 'error');
+            assert.ok(error, `an unresolvable provider must surface an error; messages=${JSON.stringify(messages)}`);
+            assert.match(String(error.content), /nobody/);
+            assert.match(String(error.content), /not configured/);
+            assert.equal(mock.requests.length, 0, 'a refusal must not spawn the CLI against any endpoint');
+        });
+    }
+    finally {
+        await mock.close();
+    }
+});
+//# sourceMappingURL=codex-runtime-provider-injection.test.js.map

package/dist-server/server/modules/providers/tests/codex-runtime-provider-injection.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-runtime-provider-injection.test.js","sourceRoot":"","sources":["../../../../../server/modules/providers/tests/codex-runtime-provider-injection.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAA0B,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAG1C,OAAO,EAAE,YAAY,EAAE,MAAM,0DAA0D,CAAC;AACxF,OAAO,EACL,+BAA+B,GAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gCAAgC,GACjC,MAAM,gDAAgD,CAAC;AAGxD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AACnD,MAAM,mBAAmB,GAAG,2CAA2C,CAAC;AACxE,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAK9C;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB;IAKlC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACrD,QAAQ,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,EAAE;YACtB,aAAa,EAAE,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;gBAC9D,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa;gBAC/B,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,oBAAoB,IAAI,KAAK;QACtC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,OAAe,EACf,GAAoC;IAEpC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,SAAS,CACb,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC;QACb,cAAc,EAAE;YACd,CAAC,WAAW,CAAC,EAAE;gBACb,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,MAAM,EAAE,OAAO;gBACf,SAAS;aACV;SACF;KACF,CAAC,EACF,MAAM,CACP,CAAC;IAEF,MAAM,MAAM,GAAG,+BAA+B,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9F,gCAAgC,CAAC;QAC/B,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACX,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3E,WAAW,EAAE,EAAE;SAChB,CAAC;QACF,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CACtB,OAAe,EACf,eAAwB;IAExB,OAAO;QACL,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI;QACpC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;QACvC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC9B,OAAO,EAAE,CAAC;oBACR,KAAK,EAAE,OAAO;oBACd,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,eAAe,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;wBACb,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,EAAE,EAAE;iBACjC,CAAC;YACF,OAAO,EAAE,OAAO;SACjB,CAAC;QACF,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE;QAC1B,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;KACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,CAAc;IACzC,IAAI,QAAkC,CAAC;IACvC,MAAM,mBAAmB,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;IACxD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,WAAW,CAEhE,OAAuB;QAEvB,QAAQ,GAAI,IAA6C,CAAC,OAAO,CAAC;QAClE,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAC;YAC9E,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,0GAA0G,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC3H,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,mBAAmB,CAAC;IAErD,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtD,wEAAwE;YACxE,gDAAgD;YAChD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YACxB,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;YAEvC,MAAM,QAAQ,GAAU,EAAE,CAAC;YAC3B,MAAM,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE;gBACvC,SAAS,EAAE,wBAAwB;gBACnC,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,IAAI;gBACT,cAAc,EAAE,mBAAmB;aACpC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,eAAe,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;YAExH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE;gBAC/B,cAAc,EAAE,WAAW;gBAC3B,eAAe,EAAE;oBACf,CAAC,WAAW,CAAC,EAAE;wBACb,IAAI,EAAE,cAAc;wBACpB,QAAQ,EAAE,IAAI,CAAC,OAAO;wBACtB,OAAO,EAAE,OAAO;wBAChB,QAAQ,EAAE,WAAW;qBACtB;iBACF;aACF,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,0CAA0C,CAAC,CAAC;YAEtG,yEAAyE;YACzE,qEAAqE;YACrE,gBAAgB;YAChB,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,6CAA6C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC9G,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YACpD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;;YACnD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IACtF,IAAI,QAAkC,CAAC;IACvC,MAAM,UAAU,GAAG;QACjB,EAAE,EAAE,eAAe;QACnB,KAAK,CAAC,WAAW;YACf,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,SAAS,CAAC,MAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/C,CAAC;KACmB,CAAC;IACvB,8EAA8E;IAC9E,iEAAiE;IACjE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,WAAW;QAChE,QAAQ,GAAI,IAA6C,CAAC,OAAO,CAAC;QAClE,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE;QACtC,KAAK,EAAE,eAAe;QACtB,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE;KACjB,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC;IAElF,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAC1G,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtD,MAAM,QAAQ,GAAU,EAAE,CAAC;YAC3B,MAAM,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE;gBACrC,KAAK,EAAE,gBAAgB;gBACvB,GAAG,EAAE,IAAI;aACV,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,eAAe,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;YAExH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YACnE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,4DAA4D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACzG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACtD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,uDAAuD,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist-server/server/modules/providers/tests/codex-session-provider-binding.test.js

@@ -0,0 +1,306 @@
+import assert from 'node:assert/strict';
+import { once } from 'node:events';
+import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import test from 'node:test';
+import express from 'express';
+import { closeConnection, getConnection, initializeDatabase, providerModelsDb, sessionsDb, } from '../../../modules/database/index.js';
+import providerRouter from '../../../modules/providers/provider.routes.js';
+import { providerModelsService } from '../../../modules/providers/index.js';
+import { sessionsService } from '../../../modules/providers/services/sessions.service.js';
+import { providerRegistry } from '../../../modules/providers/provider.registry.js';
+import { installCodexProviderRegistryPort, } from '../../../shared/ports/codex-provider-registry.port.js';
+import { AppError } from '../../../shared/utils.js';
+/**
+ * A session records the upstream provider its model is bound to (AC-462).
+ *
+ * Legs:
+ * 1. the sessions row gains `model_provider_id`, and the first send records the
+ *    provider the selected model entry declares (`codexProviderId`);
+ * 2. a model that declares no provider leaves the session unbound;
+ * 3. moving a bound session to a selection that runs under a DIFFERENT provider
+ *    is refused with the fork/new-session action, and nothing is written; the
+ *    same provider with another model is an ordinary switch;
+ * 4. a provider that was deleted or renamed is MARKED — the recorded model is
+ *    still the one the conversation ran with, never the catalog default — and a
+ *    fresh binding to it is refused;
+ * 5. a row that recorded no binding (a session from before the column, or one
+ *    that only ever ran unbound) can still establish one;
+ * 6. the HTTP route answers the refusal with the same code and message;
+ * 7. a fork inherits the binding, because its source thread started under it;
+ * 8. the pre-admission send guard refuses the same switch before a run exists.
+ *
+ * WHY THESE READ THE SERVICE, NOT A COPY OF ITS LOGIC. `setSessionModel` is the
+ * funnel every send passes through (`chat.send`, `chat.edit-send`, the
+ * active-model route and the MCP reconfigure tool), so a green run over it is a
+ * reading of the guard every entry point shares. The registry is a shared port
+ * installed by the settings module in production; these legs install a fake
+ * reading and mutate its ids to model a deleted or renamed provider.
+ */
+const BOUND_BOB = 'bound-bob-model';
+const BOUND_BOB_SECOND = 'bound-bob-second-model';
+const BOUND_ALICE = 'bound-alice-model';
+const UNBOUND = 'plain-unbound-model';
+const createRegistry = () => {
+    const providerIds = new Set(['bob', 'alice']);
+    const read = () => ({
+        providers: [...providerIds].map((id) => ({ id })),
+        reservedIds: ['openai', 'ollama', 'lmstudio'],
+    });
+    return { providerIds, read };
+};
+async function withBindingWorkspace(run) {
+    const previousDatabasePath = process.env.DATABASE_PATH;
+    const directory = await mkdtemp(path.join(os.tmpdir(), 'codex-session-provider-binding-'));
+    const workspacePath = path.join(directory, 'workspace');
+    await mkdir(workspacePath, { recursive: true });
+    const { providerIds, read } = createRegistry();
+    closeConnection();
+    process.env.DATABASE_PATH = path.join(directory, 'auth.db');
+    await writeFile(process.env.DATABASE_PATH, '');
+    await initializeDatabase();
+    // Installed before the first write: the service reads this port lazily, so
+    // every leg below is judged against the registry this test states.
+    installCodexProviderRegistryPort({ read });
+    const app = express().use(express.json()).use('/api/providers', providerRouter);
+    app.use((error, _req, res, _next) => {
+        if (error instanceof AppError) {
+            res.status(error.statusCode).json({
+                success: false,
+                error: { code: error.code, message: error.message },
+            });
+            return;
+        }
+        res.status(500).json({ success: false, error: { code: 'INTERNAL_ERROR' } });
+    });
+    const server = app.listen(0, '127.0.0.1');
+    await once(server, 'listening');
+    try {
+        const address = server.address();
+        await run({ baseUrl: `http://127.0.0.1:${address.port}`, workspacePath, providerIds });
+    }
+    finally {
+        await new Promise((resolve, reject) => {
+            server.close((error) => error ? reject(error) : resolve());
+        });
+        closeConnection();
+        if (previousDatabasePath === undefined) {
+            delete process.env.DATABASE_PATH;
+        }
+        else {
+            process.env.DATABASE_PATH = previousDatabasePath;
+        }
+        await rm(directory, { recursive: true, force: true });
+    }
+}
+/** Seeds one custom Codex model entry; `providerId` is its `codexProviderId`. */
+function seedModel(modelId, providerId) {
+    providerModelsDb.createCustomProviderModel('codex', {
+        id: modelId,
+        model: modelId,
+        config: providerId === undefined ? { env: [] } : { env: [], codexProviderId: providerId },
+    });
+}
+/** Seeds the app row a send would write to. */
+function seedSession(sessionId, workspacePath, provider = 'codex') {
+    sessionsDb.createAppSession(sessionId, provider, workspacePath, 'Binding session');
+}
+function sessionColumns() {
+    return getConnection().prepare('PRAGMA table_info(sessions)').all()
+        .map((column) => column.name);
+}
+/**
+ * The refusal a provider switch must produce: 409, the recorded id, what the
+ * requested selection would run under, and the way out.
+ */
+function providerSwitchRefusal(expectedTarget) {
+    return (error) => {
+        assert.ok(error instanceof AppError, `expected an AppError, got ${String(error)}`);
+        assert.equal(error.statusCode, 409);
+        assert.equal(error.code, 'SESSION_PROVIDER_MISMATCH');
+        assert.match(error.message, /"bob"/);
+        assert.match(error.message, expectedTarget);
+        assert.match(error.message, /fork this session/i);
+        assert.match(error.message, /start a new one/i);
+        return true;
+    };
+}
+test('the first send records the upstream provider its model is bound to, and readers carry it', async () => {
+    await withBindingWorkspace(async ({ workspacePath }) => {
+        assert.ok(sessionColumns().includes('model_provider_id'), 'the sessions table must carry the column this feature records into');
+        seedModel(BOUND_BOB, 'bob');
+        seedSession('first-send', workspacePath);
+        const stored = providerModelsService.setSessionModel('codex', 'first-send', BOUND_BOB);
+        assert.equal(sessionsDb.getSessionById('first-send')?.model_provider_id, 'bob');
+        assert.equal(stored?.modelProviderId, 'bob');
+        assert.equal(stored?.modelProviderProblem, null);
+        const resolved = await providerModelsService.resolveSessionModel('codex', { sessionId: 'first-send' });
+        assert.equal(resolved.model, BOUND_BOB);
+        assert.equal(resolved.modelProviderId, 'bob');
+        assert.equal(resolved.modelProviderProblem, null);
+        assert.equal(resolved.source, 'session');
+        // Write-once: a later write cannot move the conversation behind the guard.
+        assert.equal(sessionsDb.setSessionModelProviderId('first-send', 'alice'), false);
+        assert.equal(sessionsDb.getSessionById('first-send')?.model_provider_id, 'bob');
+    });
+});
+test('a model that declares no provider leaves the session unbound', async () => {
+    await withBindingWorkspace(async ({ workspacePath }) => {
+        seedModel(UNBOUND);
+        seedSession('unbound-session', workspacePath);
+        const stored = providerModelsService.setSessionModel('codex', 'unbound-session', UNBOUND);
+        assert.equal(sessionsDb.getSessionById('unbound-session')?.model_provider_id, null);
+        assert.equal(stored?.modelProviderId, null);
+        assert.equal(stored?.modelProviderProblem, null);
+        const resolved = await providerModelsService.resolveSessionModel('codex', { sessionId: 'unbound-session' });
+        assert.equal(resolved.model, UNBOUND);
+        assert.equal(resolved.modelProviderId, null);
+        assert.equal(resolved.modelProviderProblem, null);
+    });
+});
+test('moving a bound session to another provider is refused with the fork action; the same provider is not', async () => {
+    await withBindingWorkspace(async ({ workspacePath }) => {
+        seedModel(BOUND_BOB, 'bob');
+        seedModel(BOUND_BOB_SECOND, 'bob');
+        seedModel(BOUND_ALICE, 'alice');
+        seedModel(UNBOUND);
+        seedSession('bound-session', workspacePath);
+        providerModelsService.setSessionModel('codex', 'bound-session', BOUND_BOB);
+        // Another provider's model — including a model that would inherit the
+        // process-global provider (NULL) — is a provider switch, not a model switch.
+        assert.throws(() => providerModelsService.setSessionModel('codex', 'bound-session', BOUND_ALICE), providerSwitchRefusal(/"alice"/));
+        assert.throws(() => providerModelsService.setSessionModel('codex', 'bound-session', UNBOUND), providerSwitchRefusal(/inherits the provider default/));
+        // Nothing was written by either refusal.
+        const unchanged = sessionsDb.getSessionById('bound-session');
+        assert.equal(unchanged?.model, BOUND_BOB);
+        assert.equal(unchanged?.model_provider_id, 'bob');
+        // Another model on the SAME provider is an ordinary switch.
+        providerModelsService.setSessionModel('codex', 'bound-session', BOUND_BOB_SECOND);
+        const switched = sessionsDb.getSessionById('bound-session');
+        assert.equal(switched?.model, BOUND_BOB_SECOND);
+        assert.equal(switched?.model_provider_id, 'bob');
+    });
+});
+test('a deleted or renamed provider is marked, and the session keeps the model it ran with', async () => {
+    await withBindingWorkspace(async ({ workspacePath, providerIds }) => {
+        seedModel(BOUND_BOB, 'bob');
+        seedSession('orphaned-session', workspacePath);
+        providerModelsService.setSessionModel('codex', 'orphaned-session', BOUND_BOB);
+        const before = await providerModelsService.resolveSessionModel('codex', { sessionId: 'orphaned-session' });
+        assert.equal(before.modelProviderProblem, null, 'a provider that still exists is not marked');
+        // Renaming the provider is a full-file replacement of the registry: the old
+        // id disappears, exactly as a delete would.
+        providerIds.delete('bob');
+        providerIds.add('robert');
+        const after = await providerModelsService.resolveSessionModel('codex', { sessionId: 'orphaned-session' });
+        // The model is the recorded one, NOT the catalog default: a provider that
+        // disappeared must not make the session look like it never picked a model.
+        assert.equal(after.model, BOUND_BOB);
+        assert.equal(after.modelProviderId, 'bob');
+        assert.ok(after.modelProviderProblem);
+        assert.match(after.modelProviderProblem, /"bob"/);
+        assert.match(after.modelProviderProblem, /no longer defined/);
+        assert.match(after.modelProviderProblem, /fork this session/i);
+        // The row itself is untouched by the read.
+        const row = sessionsDb.getSessionById('orphaned-session');
+        assert.equal(row?.model, BOUND_BOB);
+        assert.equal(row?.model_provider_id, 'bob');
+        // A fresh binding to the retired provider is refused, and writes nothing.
+        seedSession('fresh-session', workspacePath);
+        assert.throws(() => providerModelsService.setSessionModel('codex', 'fresh-session', BOUND_BOB), (error) => error instanceof AppError
+            && error.statusCode === 409
+            && error.code === 'SESSION_PROVIDER_UNKNOWN'
+            && /"bob"/.test(error.message)
+            && /no longer exists/.test(error.message));
+        const fresh = sessionsDb.getSessionById('fresh-session');
+        assert.equal(fresh?.model_provider_id, null);
+    });
+});
+test('a row that recorded no binding can still establish one', async () => {
+    await withBindingWorkspace(async ({ workspacePath }) => {
+        seedModel(UNBOUND);
+        seedModel(BOUND_BOB, 'bob');
+        seedSession('legacy-session', workspacePath);
+        // A session from before the column: it has a model, but no provider id.
+        sessionsDb.setSessionModel('legacy-session', UNBOUND);
+        assert.equal(sessionsDb.getSessionById('legacy-session')?.model_provider_id, null);
+        const stored = providerModelsService.setSessionModel('codex', 'legacy-session', BOUND_BOB);
+        assert.equal(stored?.modelProviderId, 'bob');
+        assert.equal(sessionsDb.getSessionById('legacy-session')?.model_provider_id, 'bob');
+    });
+});
+test('the active-model route answers the refusal with the same readable code', async () => {
+    await withBindingWorkspace(async ({ baseUrl, workspacePath }) => {
+        seedModel(BOUND_BOB, 'bob');
+        seedModel(BOUND_ALICE, 'alice');
+        seedSession('route-session', workspacePath);
+        providerModelsService.setSessionModel('codex', 'route-session', BOUND_BOB);
+        const refused = await fetch(`${baseUrl}/api/providers/codex/sessions/route-session/active-model`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ model: BOUND_ALICE }),
+        });
+        const refusedBody = await refused.json();
+        assert.equal(refused.status, 409);
+        assert.equal(refusedBody.error?.code, 'SESSION_PROVIDER_MISMATCH');
+        assert.match(String(refusedBody.error?.message), /fork this session/i);
+        assert.equal(sessionsDb.getSessionById('route-session')?.model, BOUND_BOB);
+        const reading = await fetch(`${baseUrl}/api/providers/codex/sessions/route-session/active-model`);
+        const readingBody = await reading.json();
+        assert.equal(readingBody.data.model, BOUND_BOB);
+        assert.equal(readingBody.data.modelProviderId, 'bob');
+        assert.equal(readingBody.data.modelProviderProblem, null);
+    });
+});
+test('a fork inherits the upstream provider binding of the conversation it branched from', async () => {
+    await withBindingWorkspace(async ({ workspacePath }) => {
+        const sourcePath = path.join(workspacePath, 'native-source.jsonl');
+        const forkedPath = path.join(workspacePath, 'native-fork.jsonl');
+        await writeFile(sourcePath, '{}\n', 'utf8');
+        await writeFile(forkedPath, '{}\n', 'utf8');
+        seedSession('fork-source', workspacePath, 'claude');
+        sessionsDb.assignProviderSessionId('fork-source', 'native-source');
+        getConnection()
+            .prepare('UPDATE sessions SET jsonl_path = ? WHERE session_id = ?')
+            .run(sourcePath, 'fork-source');
+        sessionsDb.setSessionModelProviderId('fork-source', 'bob');
+        const claude = providerRegistry.resolveProvider('claude');
+        const realFork = claude.fork;
+        Object.defineProperty(claude, 'fork', {
+            configurable: true,
+            writable: true,
+            value: {
+                forkSession: async () => ({ providerSessionId: 'native-fork', jsonlPath: forkedPath }),
+            },
+        });
+        try {
+            const result = await sessionsService.forkSessionById('fork-source');
+            // The branch resumes a thread the provider started under `bob`; dropping
+            // the binding would make that resume the mismatch this column prevents.
+            assert.equal(sessionsDb.getSessionById(result.sessionId)?.model_provider_id, 'bob');
+        }
+        finally {
+            Object.defineProperty(claude, 'fork', { configurable: true, writable: true, value: realFork });
+        }
+    });
+});
+test('the pre-admission send guard refuses the switch and passes the first send', async () => {
+    await withBindingWorkspace(async ({ workspacePath }) => {
+        seedModel(BOUND_BOB, 'bob');
+        seedModel(BOUND_ALICE, 'alice');
+        seedSession('guard-session', workspacePath);
+        // A session with no recorded binding: the first send is exactly where one
+        // is allowed to be established, so the guard passes.
+        assert.doesNotThrow(() => {
+            providerModelsService.assertSessionProviderSwitch('codex', 'guard-session', BOUND_BOB);
+        });
+        providerModelsService.setSessionModel('codex', 'guard-session', BOUND_BOB);
+        assert.throws(() => providerModelsService.assertSessionProviderSwitch('codex', 'guard-session', BOUND_ALICE), providerSwitchRefusal(/"alice"/));
+        // Same provider, another model: nothing for the guard to refuse.
+        assert.doesNotThrow(() => {
+            providerModelsService.assertSessionProviderSwitch('codex', 'guard-session', BOUND_BOB);
+        });
+    });
+});
+//# sourceMappingURL=codex-session-provider-binding.test.js.map

package/dist-server/server/modules/providers/tests/codex-session-provider-binding.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-session-provider-binding.test.js","sourceRoot":"","sources":["../../../../../server/modules/providers/tests/codex-session-provider-binding.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,OAA2D,MAAM,SAAS,CAAC;AAElF,OAAO,EACL,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,GACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,cAAc,MAAM,wCAAwC,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EACL,gCAAgC,GAEjC,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAClD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAStC,MAAM,cAAc,GAAG,GAA2E,EAAE;IAClG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAiC,EAAE,CAAC,CAAC;QAChD,SAAS,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC/B,CAAC,CAAC;AAEF,KAAK,UAAU,oBAAoB,CAAC,GAAiD;IACnF,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAC3F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACxD,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,cAAc,EAAE,CAAC;IAE/C,eAAe,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,kBAAkB,EAAE,CAAC;IAC3B,2EAA2E;IAC3E,mEAAmE;IACnE,gCAAgC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAChF,GAAG,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,IAAa,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;QAC5E,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;gBAChC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACpD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;QAChD,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,eAAe,EAAE,CAAC;QAClB,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,oBAAoB,CAAC;QACnD,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,SAAS,CAAC,OAAe,EAAE,UAAmB;IACrD,gBAAgB,CAAC,yBAAyB,CAAC,OAAO,EAAE;QAClD,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;KAC1F,CAAC,CAAC;AACL,CAAC;AAED,+CAA+C;AAC/C,SAAS,WAAW,CAAC,SAAiB,EAAE,aAAqB,EAAE,QAAQ,GAAG,OAAO;IAC/E,UAAU,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,cAAc;IACrB,OAAQ,aAAa,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAA8B;SAC7F,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,cAAsB;IACnD,OAAO,CAAC,KAAc,EAAW,EAAE;QACjC,MAAM,CAAC,EAAE,CAAC,KAAK,YAAY,QAAQ,EAAE,6BAA6B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;IAC1G,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACrD,MAAM,CAAC,EAAE,CACP,cAAc,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAC9C,oEAAoE,CACrE,CAAC;QAEF,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,WAAW,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAEvF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QACvG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEzC,2EAA2E;QAC3E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACrD,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,WAAW,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE1F,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5G,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;IACtH,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACrD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACnC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAChC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,WAAW,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC5C,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAE3E,sEAAsE;QACtE,6EAA6E;QAC7E,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,CAAC,EAClF,qBAAqB,CAAC,SAAS,CAAC,CACjC,CAAC;QACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAC9E,qBAAqB,CAAC,+BAA+B,CAAC,CACvD,CAAC;QAEF,yCAAyC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAElD,4DAA4D;QAC5D,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;IACtG,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,EAAE;QAClE,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,WAAW,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;QAC/C,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3G,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,EAAE,4CAA4C,CAAC,CAAC;QAE9F,4EAA4E;QAC5E,4CAA4C;QAC5C,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC1G,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;QAE/D,2CAA2C;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAE5C,0EAA0E;QAC1E,WAAW,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,EAChF,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,YAAY,QAAQ;eACxC,KAAK,CAAC,UAAU,KAAK,GAAG;eACxB,KAAK,CAAC,IAAI,KAAK,0BAA0B;eACzC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;eAC3B,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAC5C,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACrD,SAAS,CAAC,OAAO,CAAC,CAAC;QACnB,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,WAAW,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAE7C,wEAAwE;QACxE,UAAU,CAAC,eAAe,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAE3F,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE;QAC9D,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAChC,WAAW,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAC5C,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAE3E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,0DAA0D,EAAE;YAChG,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,EAAqD,CAAC;QAE5F,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,2BAA2B,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAE3E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,0DAA0D,CAAC,CAAC;QAClG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,EAErC,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;IACpG,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QACjE,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE5C,WAAW,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QACpD,UAAU,CAAC,uBAAuB,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;QACnE,aAAa,EAAE;aACZ,OAAO,CAAC,yDAAyD,CAAC;aAClE,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAClC,UAAU,CAAC,yBAAyB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAA6B,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE;YACpC,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE;gBACL,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;aACtE;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YACpE,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACtF,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;IAC3F,MAAM,oBAAoB,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE;QACrD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5B,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAChC,WAAW,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;QAE5C,0EAA0E;QAC1E,qDAAqD;QACrD,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACvB,qBAAqB,CAAC,2BAA2B,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,qBAAqB,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,CAAC,EAC9F,qBAAqB,CAAC,SAAS,CAAC,CACjC,CAAC;QACF,iEAAiE;QACjE,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE;YACvB,qBAAqB,CAAC,2BAA2B,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist-server/server/modules/providers/tests/codex-sessions.test.js

@@ -56,7 +56,7 @@ const writeCodexTranscript = async (homeDir, codexSessionId, workspacePath, firs
     await writeFile(filePath, `${lines.join('\n')}\n`, 'utf8');
     return filePath;
 };
-test('Codex synchronizer preserves the title assigned when CloudCLI creates a session', { concurrency: false }, async () => {
+test('Codex synchronizer preserves the title assigned when Cloudpit creates a session', { concurrency: false }, async () => {
     const tempRoot = await mkdtemp(path.join(os.tmpdir(), 'codex-session-sync-app-'));
     const workspacePath = path.join(tempRoot, 'workspace');
     await mkdir(workspacePath, { recursive: true });

package/dist-server/server/modules/providers/tests/opencode-sessions.test.js

@@ -393,13 +393,13 @@ const seedOpenCodeSession = async (homeDir, workspacePath, options) => {
         db.close();
     }
 };
-test('OpenCode synchronizer preserves the title assigned when CloudCLI creates a session', { concurrency: false }, async () => {
+test('OpenCode synchronizer preserves the title assigned when Cloudpit creates a session', { concurrency: false }, async () => {
     const tempRoot = await mkdtemp(path.join(os.tmpdir(), 'opencode-session-sync-app-'));
     const workspacePath = path.join(tempRoot, 'workspace');
     await mkdir(workspacePath, { recursive: true });
     const restoreHomeDir = patchHomeDir(tempRoot);
     try {
-        // Both provider-owned values differ from the CloudCLI title so either one
+        // Both provider-owned values differ from the Cloudpit title so either one
         // leaking through would change the assertion below.
         await seedOpenCodeSession(tempRoot, workspacePath, {
             sessionId: 'oc-app-1',

package/dist-server/server/modules/providers/tests/provider-models.service.test.js

@@ -21,6 +21,8 @@ const createSessionStore = (rows = {}, efforts = {}, permissionModes = {}) => {
             model,
             effort: efforts[sessionId] ?? null,
             permission_mode: permissionModes[sessionId] ?? null,
+            // The upstream provider a session is bound to; NULL until recorded.
+            model_provider_id: null,
         },
     ]));
     return {
@@ -32,6 +34,15 @@ const createSessionStore = (rows = {}, efforts = {}, permissionModes = {}) => {
                 session.model = model;
             }
         },
+        // Write-once, like the column: a second call cannot move the binding.
+        setSessionModelProviderId: (sessionId, modelProviderId) => {
+            const session = sessions.get(sessionId);
+            if (!session || session.model_provider_id) {
+                return false;
+            }
+            session.model_provider_id = modelProviderId;
+            return true;
+        },
         setSessionEffort: (sessionId, effort) => {
             const session = sessions.get(sessionId);
             if (session) {
@@ -308,6 +319,10 @@ test('setSessionModel records the model on the session row', () => {
         model: 'opus',
         effort: null,
         permissionMode: null,
+        // The fixture installs no provider registry and binds no model entry, so
+        // no upstream provider is recorded and there is nothing to mark.
+        modelProviderId: null,
+        modelProviderProblem: null,
         source: 'session',
     });
     assert.equal(sessions.sessions.get('session-1')?.model, 'opus');