oh-my-codex 0.20.1 → 0.20.3

package/dist/hooks/__tests__/prompt-session-provenance.test.js

@@ -0,0 +1,82 @@
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { evaluateResolvedPromptTurn, extractSelectedTargetOwnerEvidence, preflightSelectedTargetOwner, } from '../prompt-session-provenance.js';
+const pointer = (overrides = {}) => ({
+    status: 'usable',
+    state: {
+        session_id: 'selected-root',
+        native_session_id: 'native-root',
+        previous_native_session_id: 'native-prior',
+        owner_omx_session_id: 'omx-owner',
+        owner_codex_session_id: 'codex-owner',
+        started_at: '2026-07-14T00:00:00.000Z',
+        cwd: '/selected',
+        pid: 1,
+    },
+    ...overrides,
+});
+function evaluate(input) {
+    return evaluateResolvedPromptTurn({ producer: 'native', selectedPointer: pointer(), nowIso: '2026-07-14T00:00:00.000Z', ...input });
+}
+describe('prompt-session provenance', () => {
+    it('classifies payload, pointer fallback, and notify fork relations deterministically', () => {
+        const cases = [
+            ['explicit payload remains independent despite selected pointer', { payloadSessionId: 'payload-root' }, 'authorized', 'explicit-independent'],
+            ['selected pointer alias retains payload as owner', { payloadSessionId: 'native-root' }, 'authorized', 'pointer-alias'],
+            ['absent payload uses exact selected fallback', {}, 'authorized', 'pointer-fallback'],
+            ['notify uses only an existing explicit fork', { producer: 'notify', payloadSessionId: 'native-root', ownerEnvSessionId: 'fork-scope', forkScopeExists: true }, 'authorized', 'notify-explicit-existing-fork'],
+            ['native never accepts unrelated owner environment', { payloadSessionId: 'native-root', ownerEnvSessionId: 'fork-scope' }, 'rejected'],
+            ['missing notify fork rejects', { producer: 'notify', payloadSessionId: 'native-root', ownerEnvSessionId: 'fork-scope', forkScopeExists: false }, 'rejected'],
+        ];
+        for (const [name, input, status, relation] of cases) {
+            const result = evaluate(input);
+            assert.equal(result.status, status, name);
+            if (result.status !== 'rejected')
+                assert.equal(result.authorization.targetRelation, relation, name);
+        }
+    });
+    it('rejects malformed present identity before all relation policy', () => {
+        const malformedPayload = evaluate({ payloadSessionId: 'bad/id' });
+        const malformedOwner = evaluate({ payloadSessionId: 'native-root', ownerEnvSessionId: ' ' });
+        assert.deepEqual([malformedPayload.status, malformedPayload.status === 'rejected' && malformedPayload.reason], ['rejected', 'payload_session_invalid']);
+        assert.deepEqual([malformedOwner.status, malformedOwner.status === 'rejected' && malformedOwner.reason], ['rejected', 'owner_env_invalid']);
+    });
+    it('suppresses only positively proven target children and rejects foreign or ambiguous roots', () => {
+        assert.equal(evaluate({ payloadSessionId: 'native-root', threadFacts: { spawnRootOwnerSessionId: 'native-root' } }).status, 'suppressed-target-child');
+        assert.equal(evaluate({ payloadSessionId: 'native-root', threadFacts: { transcriptRootOwnerSessionId: 'foreign-root' } }).status, 'rejected');
+        assert.equal(evaluate({ payloadSessionId: 'native-root', threadFacts: { trackerRootOwnerSessionIds: ['native-root', 'foreign-root'] } }).status, 'rejected');
+        assert.equal(evaluate({ payloadSessionId: 'native-root', threadFacts: { trackerRootOwnerSessionIds: ['native-root', 'foreign-root'], currentTargetAnchored: true } }).status, 'authorized');
+    });
+    it('keeps payload owner and fork storage separate and preflights owner metadata fail-closed', () => {
+        const context = evaluate({ producer: 'notify', payloadSessionId: 'native-root', ownerEnvSessionId: 'fork-scope', forkScopeExists: true });
+        assert.equal(context.status, 'authorized');
+        if (context.status !== 'authorized')
+            return;
+        assert.equal(context.authorization.ownerCodexSessionId, 'native-root');
+        assert.deepEqual(context.authorization.allowedStorageSessionIds, ['fork-scope']);
+        assert.equal(preflightSelectedTargetOwner(context, [{ targetSessionId: 'fork-scope', ownerCodexSessionId: 'foreign-owner' }], 'notify').status, 'rejected');
+    });
+    it('creates redacted rejection diagnostics without identifiers and preserves cardinality', () => {
+        const result = evaluate({ payloadSessionId: 'bad/id', ownerEnvSessionId: 'private-owner' });
+        assert.equal(result.status, 'rejected');
+        if (result.status !== 'rejected')
+            return;
+        assert.deepEqual(Object.keys(result.diagnostic).sort(), ['producer', 'reason', 'selectedRootStatus', 'timestamp']);
+        assert.equal(JSON.stringify(result.diagnostic).includes('bad/id'), false);
+        assert.equal(JSON.stringify(result.diagnostic).includes('private-owner'), false);
+    });
+    it('extracts nested active-skill owners and marks malformed state as conflicting evidence', () => {
+        const context = evaluateResolvedPromptTurn({
+            producer: 'native', payloadSessionId: 'target', selectedPointer: { status: 'absent' },
+        });
+        const nested = extractSelectedTargetOwnerEvidence({
+            session_id: 'target',
+            owner_codex_session_id: 'target',
+            active_skills: [{ session_id: 'target', owner_codex_session_id: 'foreign' }],
+        });
+        assert.equal(preflightSelectedTargetOwner(context, nested).status, 'rejected');
+        assert.equal(preflightSelectedTargetOwner(context, extractSelectedTargetOwnerEvidence(null)).status, 'rejected');
+        assert.equal(preflightSelectedTargetOwner(context, extractSelectedTargetOwnerEvidence('target')).status, 'rejected');
+    });
+});
+//# sourceMappingURL=prompt-session-provenance.test.js.map

package/dist/hooks/__tests__/prompt-session-provenance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-session-provenance.test.js","sourceRoot":"","sources":["../../../src/hooks/__tests__/prompt-session-provenance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,EAClC,4BAA4B,GAE7B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,OAAO,GAAG,CAAC,SAAS,GAAgE,EAAE,EAAE,EAAE,CAAC,CAAC;IAChG,MAAM,EAAE,QAAiB;IACzB,KAAK,EAAE;QACL,UAAU,EAAE,eAAe;QAC3B,iBAAiB,EAAE,aAAa;QAChC,0BAA0B,EAAE,cAAc;QAC1C,oBAAoB,EAAE,WAAW;QACjC,sBAAsB,EAAE,aAAa;QACrC,UAAU,EAAE,0BAA0B;QACtC,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,CAAC;KACP;IACD,GAAG,SAAS;CACb,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAA+C;IAC/D,OAAO,0BAA0B,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AACtI,CAAC;AAED,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,KAAK,GAA+E;YACxF,CAAC,+DAA+D,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,sBAAsB,CAAC;YAC7I,CAAC,iDAAiD,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC;YACvH,CAAC,6CAA6C,EAAE,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC;YACrF,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,+BAA+B,CAAC;YAC9M,CAAC,kDAAkD,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,UAAU,CAAC;YACtI,CAAC,6BAA6B,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,UAAU,CAAC;SAC9J,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;gBAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtG,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,QAAQ,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7F,MAAM,CAAC,SAAS,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,MAAM,KAAK,UAAU,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACxJ,MAAM,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,KAAK,UAAU,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC9I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,uBAAuB,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACvJ,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,4BAA4B,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9I,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,0BAA0B,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7J,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,0BAA0B,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9L,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1I,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO;QAC5C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,wBAAwB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9J,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO;QACzC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC,CAAC;QACnH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,OAAO,GAAG,0BAA0B,CAAC;YACzC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;SACtF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,kCAAkC,CAAC;YAChD,UAAU,EAAE,QAAQ;YACpB,sBAAsB,EAAE,QAAQ;YAChC,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjH,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,kCAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}