[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_380":381,"_382":383},"routes/_app.x.$handle.$name",{"_100":99,"_31":43,"_109":88,"_26":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":123,"_124":24,"_125":126,"_127":57,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","r9_blob_probe.ts","latestPath","fileId","65c9ecd2-a35c-11f1-8a26-1607ee4eb77e","name","fileType","script","content","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nconst r=await blob.get(\"bootstrap/r9/codex_device_bootstrap_v4.py\");\nconst raw=new Uint8Array(await r.arrayBuffer());\nconst d=await crypto.subtle.digest(\"SHA-256\",raw);\nconst sha=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconsole.log(JSON.stringify({bytes:raw.length,sha256:sha},null,2));","createdAt",["D",1787975266512],"branchVersion","branchId","8ea2fbb1-e156-4271-9ff4-69ea9972a394","id","ea8b2cee-9441-4610-a164-e736539c861b","rumbo-continuity-relay",["D",1787964475423],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Durable GPT-Codex continuity relay","imageUrl","d3788f19-13c5-4356-87e8-dce639626bb9","pinnedFileId","01a04afc-c88b-766f-9e89-3c0c81cf30bc","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04116-f28c-754c-9173-77bf5814fcd6","tursoName","ea8b2cee94414610a164e736539c861b","tursoHostname","ea8b2cee94414610a164e736539c861b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531243171],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":53,"_105":106,"_107":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":91,"_92":93,"_94":48,"_95":42,"_96":63,"_97":43,"_98":99},"isOwned",15,"r9-scoped-isolated-local-read","projectId","forkedBranchId","cdbfe23c-d122-4f18-ad6e-34fdd0cb88da","forkedBranchVersion",88,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","sebas1","handle","displayName","sebas","avatar","https://lh3.googleusercontent.com/a/ACg8ocJaC6uiXPmN9dvgA2XcSlzBSkPJO0GN5zKzPm3a8cbjmXC9HYA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":375,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":376,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":377,"_82":378,"_84":379,"_86":24},"tree",[294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313],"files",[294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313],"counts",{"_282":61,"_283":284,"_285":61,"_286":287,"_288":289},"contents",[139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158],"upstreamProject","upstreamBranch",{"_41":91,"_36":132,"_133":134,"_31":135,"_89":42,"_13":136,"_90":-5,"_92":-5,"_137":138,"_45":-5,"_86":24,"_47":48,"_98":99,"_62":63,"_97":43},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1787964475423],"updatedAt",["D",1788191453959],"main",234,"lockfileKey","1788191454040-esm.town_v_sebas1_rumbo-continuity-relay@234-main",{"_41":276,"_31":277,"_29":278,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":279,"_13":61,"_32":280,"_34":-5,"_23":24,"_163":-5,"_26":281},{"_41":270,"_31":271,"_29":272,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":273,"_13":61,"_32":20,"_34":274,"_23":24,"_163":-5,"_26":275},{"_41":264,"_31":265,"_29":266,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":267,"_13":61,"_32":20,"_34":268,"_23":24,"_163":-5,"_26":269},{"_41":258,"_31":259,"_29":260,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":261,"_13":61,"_32":20,"_34":262,"_23":24,"_163":-5,"_26":263},{"_41":252,"_31":253,"_29":254,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":255,"_13":61,"_32":20,"_34":256,"_23":24,"_163":-5,"_26":257},{"_41":246,"_31":247,"_29":248,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":249,"_13":61,"_32":20,"_34":250,"_23":24,"_163":-5,"_26":251},{"_41":240,"_31":241,"_29":242,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":243,"_13":61,"_32":20,"_34":244,"_23":24,"_163":-5,"_26":245},{"_41":234,"_31":235,"_29":236,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":237,"_13":61,"_32":20,"_34":238,"_23":24,"_163":-5,"_26":239},{"_41":228,"_31":229,"_29":230,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":231,"_13":61,"_32":20,"_34":232,"_23":24,"_163":-5,"_26":233},{"_41":222,"_31":223,"_29":224,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":225,"_13":61,"_32":33,"_34":226,"_23":24,"_163":-5,"_26":227},{"_41":215,"_31":216,"_29":217,"_160":-5,"_39":40,"_38":218,"_161":57,"_36":219,"_13":61,"_32":20,"_34":220,"_23":24,"_163":-5,"_26":221},{"_41":208,"_31":209,"_29":210,"_160":-5,"_39":40,"_38":168,"_161":24,"_36":211,"_13":61,"_32":212,"_34":213,"_23":24,"_163":-5,"_26":214},{"_41":202,"_31":203,"_29":204,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":205,"_13":61,"_32":33,"_34":206,"_23":24,"_163":-5,"_26":207},{"_41":196,"_31":197,"_29":198,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":199,"_13":61,"_32":33,"_34":200,"_23":24,"_163":-5,"_26":201},{"_41":190,"_31":191,"_29":192,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":193,"_13":61,"_32":33,"_34":194,"_23":24,"_163":-5,"_26":195},{"_41":184,"_31":185,"_29":186,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":187,"_13":61,"_32":33,"_34":188,"_23":24,"_163":-5,"_26":189},{"_41":178,"_31":179,"_29":180,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":181,"_13":61,"_32":33,"_34":182,"_23":24,"_163":-5,"_26":183},{"_41":172,"_31":173,"_29":174,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":175,"_13":61,"_32":33,"_34":176,"_23":24,"_163":-5,"_26":177},{"_41":165,"_31":166,"_29":167,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":169,"_13":61,"_32":33,"_34":170,"_23":24,"_163":-5,"_26":171},{"_41":159,"_31":27,"_29":30,"_160":-5,"_39":40,"_38":14,"_161":57,"_36":162,"_13":61,"_32":33,"_34":35,"_23":24,"_163":-5,"_26":164},"aebaa134-e530-41ad-9d4b-4d7e491ca9a1","parentId","latest",["D",1787975266512],"label",[27],"b364b67a-fea6-4da8-b26c-5e3517c6ee2c","r6_main_postmerge_selftest.ts","01a04b9f-d094-726a-8052-ec39e70634fc",1,["D",1787975159958],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst base=\"https://sebas1--01a04afcc88b766f9e893c0c81cf30bc.web.val.run\";\nconst lane=\"CODEX_REAL_RUNTIME_ACCEPTANCE_V1\";\nconst gpt=Deno.env.get(\"GPT_TOKEN_V4\");\nconst admin=Deno.env.get(\"ADMIN_TOKEN_V4\");\nif(!gpt||!admin) throw new Error(\"R6_MAIN_REQUIRED_ENV_MISSING\");\nlet fixture=\"\";\n\nasync function j(method:string,path:string,body?:unknown,token?:string,ok=[200]){\n const r=await fetch(base+path,{method,headers:{\n ...(body!==undefined?{\"content-type\":\"application/json\"}:{}),\n ...(token?{authorization:\"Bearer \"+token}:{}),\n \"user-agent\":\"r6-main-postmerge-selftest/1\"\n },body:body===undefined?undefined:JSON.stringify(body),cache:\"no-store\"});\n const x=await r.json();\n if(!ok.includes(r.status)) throw new Error(path+\"_HTTP_\"+r.status+\"_\"+JSON.stringify(x));\n return {status:r.status,body:x};\n}\n\ntry {\n const health=await j(\"GET\",\"/health\");\n if(health.body.implementation_revision!==\"R6-DEVICE-BOOTSTRAP\"||health.body.production_go!==false) throw new Error(\"HEALTH_INVARIANT\");\n\n const meta=await j(\"GET\",\"/v1/bootstrap/codex-device/metadata\");\n if(meta.body.launcher_sha256!==\"5bd101b674bcc4cc6f6e842d285c486857cb73b20211c375706067eba71fbcd6\"||meta.body.launcher_bytes!==13466||meta.body.launcher_version!==\"1.3\") throw new Error(\"META_DRIFT\");\n\n const launcher=await fetch(base+\"/v1/bootstrap/codex-device.py\",{cache:\"no-store\"});\n const raw=new Uint8Array(await launcher.arrayBuffer());\n const d=await crypto.subtle.digest(\"SHA-256\",raw);\n const sha=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(launcher.status!==200||raw.length!==13466||sha!==meta.body.launcher_sha256||launcher.headers.get(\"x-sha256\")!==sha) throw new Error(\"LAUNCHER_DRIFT\");\n\n const acc=await j(\"GET\",\"/v1/acceptance/\"+lane,undefined,gpt);\n if(acc.body.state!==\"PENDING_CODEX_ACK\"||acc.body.production_go!==false) throw new Error(\"ACCEPTANCE_DRIFT\");\n\n const state=await j(\"GET\",\"/v1/state/\"+lane,undefined,gpt);\n if(Number(state.body.state?.revision)!==1||state.body.state?.checkpoint_sha256!==\"d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962\") throw new Error(\"STATE_DRIFT\");\n\n const start=await j(\"POST\",\"/v1/pair/codex/device/start\",{client_label:\"r6-main-postmerge-selftest\"},undefined,[201]);\n fixture=String(start.body.pairing_id||\"\");\n if(!/^[A-Za-z0-9_-]{43}$/.test(String(start.body.device_code||\"\"))||!/^[A-Z2-9]{4}-[A-Z2-9]{4}$/.test(String(start.body.user_code||\"\"))) throw new Error(\"DEVICE_CODES_INVALID\");\n\n const pending=await j(\"POST\",\"/v1/pair/codex/device/poll\",{device_code:start.body.device_code},undefined,[202]);\n if(pending.body.authorized!==false||pending.body.status!==\"PENDING_APPROVAL\") throw new Error(\"PENDING_NOT_CLOSED\");\n\n const unauth=await fetch(base+\"/v1/pair/codex/device/approve\",{method:\"POST\",headers:{\"content-type\":\"application/json\"},body:JSON.stringify({user_code:start.body.user_code})});\n if(unauth.status!==401) throw new Error(\"UNAUTH_APPROVE_\"+unauth.status);\n\n const approved=await j(\"POST\",\"/v1/pair/codex/device/approve\",{user_code:start.body.user_code},gpt,[200]);\n if(approved.body.approved!==true||approved.body.idempotent!==false||approved.body.production_go!==false) throw new Error(\"APPROVE_FAIL\");\n\n const replay=await j(\"POST\",\"/v1/pair/codex/device/approve\",{user_code:start.body.user_code},gpt,[200]);\n if(replay.body.idempotent!==true) throw new Error(\"APPROVE_REPLAY_FAIL\");\n\n const deviceRow=await sqlite.execute({sql:\"SELECT approved_at,approved_by,delivered_at FROM device_pairing_sessions WHERE pairing_id=?\",args:[fixture]});\n const dr:any=deviceRow.rows[0];\n if(!dr?.approved_at||dr.approved_by!==\"gpt\"||dr.delivered_at) throw new Error(\"DEVICE_DB_DRIFT\");\n\n const real=await sqlite.execute({sql:\"SELECT COUNT(*) AS n FROM pairing_sessions WHERE pairing_id='codex-v4'\"});\n if(Number((real.rows[0] as any)?.n ?? -1)!==0) throw new Error(\"REAL_CODEX_PAIRING_TOUCHED\");\n\n const audit=await j(\"GET\",\"/v1/audit\",undefined,admin);\n if(audit.body.audit_chain_ok!==true) throw new Error(\"AUDIT_CHAIN_FAIL\");\n\n console.log(JSON.stringify({\n selftest:\"PASS\",implementation_revision:health.body.implementation_revision,\n launcher_sha256:sha,launcher_bytes:raw.length,launcher_version:meta.body.launcher_version,\n device_start_http:201,pending_poll_http:202,unauth_approve_http:401,\n gpt_approve_http:200,approval_replay:\"IDEMPOTENT_PASS\",token_delivered:false,\n acceptance_state:acc.body.state,lane_revision:state.body.state.revision,\n checkpoint_sha256:state.body.state.checkpoint_sha256,audit_chain_ok:true,\n audit_event_count:audit.body.count,real_codex_pairing_touched:false,\n real_codex_runtime:\"NOT_PROVEN_BY_THIS_TEST\",production_go:false\n },null,2));\n} finally {\n if(fixture) await sqlite.execute({sql:\"DELETE FROM device_pairing_sessions WHERE pairing_id=?\",args:[fixture]});\n if(fixture){\n const left=await sqlite.execute({sql:\"SELECT COUNT(*) AS n FROM device_pairing_sessions WHERE pairing_id=?\",args:[fixture]});\n if(Number((left.rows[0] as any)?.n ?? -1)!==0) throw new Error(\"POSTMERGE_FIXTURE_CLEANUP_FAIL\");\n }\n}",[166],"ed4985be-32ba-45a2-a325-4a4963f2205e","r6_device_pairing_selftest.ts","01a04b9f-d094-726a-8052-e998c34d1362",["D",1787975159958],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst base=\"https://sebas1--01a04b6c896271ba8fca9e6b08c7e987.web.val.run\";\nconst gpt=Deno.env.get(\"GPT_TOKEN_V4\");\nif(!gpt) throw new Error(\"GPT_TOKEN_V4_MISSING\");\nlet pairingId=\"\";\ntry {\n const start=await fetch(base+\"/v1/pair/codex/device/start\",{\n method:\"POST\",headers:{\"content-type\":\"application/json\",\"user-agent\":\"r6-device-selftest/1\"},\n body:JSON.stringify({client_label:\"r6-device-selftest\"})\n });\n const s=await start.json();\n if(start.status!==201) throw new Error(\"START_\"+start.status+\"_\"+JSON.stringify(s));\n pairingId=String(s.pairing_id||\"\");\n if(!/^[0-9a-f-]{36}$/.test(pairingId)) throw new Error(\"PAIRING_ID_INVALID\");\n if(!/^[A-Za-z0-9_-]{43}$/.test(String(s.device_code||\"\"))) throw new Error(\"DEVICE_CODE_INVALID\");\n if(!/^[A-Z2-9]{4}-[A-Z2-9]{4}$/.test(String(s.user_code||\"\"))) throw new Error(\"USER_CODE_INVALID\");\n if(s.production_go!==false) throw new Error(\"START_PRODUCTION_GO\");\n\n const pending=await fetch(base+\"/v1/pair/codex/device/poll\",{\n method:\"POST\",headers:{\"content-type\":\"application/json\"},\n body:JSON.stringify({device_code:s.device_code})\n });\n const p=await pending.json();\n if(pending.status!==202||p.status!==\"PENDING_APPROVAL\"||p.authorized!==false) {\n throw new Error(\"PENDING_FAIL_\"+pending.status+\"_\"+JSON.stringify(p));\n }\n\n const denied=await fetch(base+\"/v1/pair/codex/device/approve\",{\n method:\"POST\",headers:{\"content-type\":\"application/json\"},\n body:JSON.stringify({user_code:s.user_code})\n });\n if(denied.status!==401) throw new Error(\"UNAUTH_APPROVAL_EXPECTED_401_\"+denied.status);\n\n const before=await sqlite.execute({\n sql:\"SELECT approved_at,delivered_at FROM device_pairing_sessions WHERE pairing_id=?\",args:[pairingId]\n });\n if(!before.rows.length||(before.rows[0] as any).approved_at||(before.rows[0] as any).delivered_at) throw new Error(\"PREAPPROVAL_DB_DRIFT\");\n\n const approved=await fetch(base+\"/v1/pair/codex/device/approve\",{\n method:\"POST\",headers:{\"content-type\":\"application/json\",\"authorization\":\"Bearer \"+gpt},\n body:JSON.stringify({user_code:s.user_code})\n });\n const a=await approved.json();\n if(approved.status!==200||a.approved!==true||a.idempotent!==false||a.production_go!==false) {\n throw new Error(\"APPROVAL_FAIL_\"+approved.status+\"_\"+JSON.stringify(a));\n }\n\n const replay=await fetch(base+\"/v1/pair/codex/device/approve\",{\n method:\"POST\",headers:{\"content-type\":\"application/json\",\"authorization\":\"Bearer \"+gpt},\n body:JSON.stringify({user_code:s.user_code})\n });\n const ar=await replay.json();\n if(replay.status!==200||ar.approved!==true||ar.idempotent!==true) throw new Error(\"APPROVAL_REPLAY_FAIL\");\n\n const after=await sqlite.execute({\n sql:\"SELECT approved_at,approved_by,delivered_at FROM device_pairing_sessions WHERE pairing_id=?\",args:[pairingId]\n });\n const row:any=after.rows[0];\n if(!row?.approved_at||row.approved_by!==\"gpt\"||row.delivered_at) throw new Error(\"POSTAPPROVAL_DB_DRIFT\");\n\n const real=await sqlite.execute({sql:\"SELECT COUNT(*) AS n FROM pairing_sessions WHERE pairing_id='codex-v4'\"});\n if(Number((real.rows[0] as any)?.n||0)!==0) throw new Error(\"REAL_PAIRING_TOUCHED\");\n\n console.log(JSON.stringify({\n selftest:\"PASS\",\n start_http:201,\n pending_poll_http:202,\n unauth_approve_http:401,\n authenticated_approve_http:200,\n approval_replay:\"IDEMPOTENT_PASS\",\n approved_by:\"gpt\",\n token_delivered:false,\n real_codex_pairing_touched:false,\n production_go:false\n },null,2));\n} finally {\n if(pairingId) await sqlite.execute({sql:\"DELETE FROM device_pairing_sessions WHERE pairing_id=?\",args:[pairingId]});\n const left=pairingId?await sqlite.execute({sql:\"SELECT COUNT(*) AS n FROM device_pairing_sessions WHERE pairing_id=?\",args:[pairingId]}):null;\n if(left&&Number((left.rows[0] as any)?.n ?? -1)!==0) throw new Error(\"DEVICE_FIXTURE_CLEANUP_FAILED\");\n}",[173],"23f15d9e-f321-491b-83dc-9f65fd64e866","r6_branch_regression.ts","01a04b9f-d094-726a-8052-e4f83ce95c85",["D",1787975159958],"const base=\"https://sebas1--01a04b6c896271ba8fca9e6b08c7e987.web.val.run\";\nconst lane=\"CODEX_REAL_RUNTIME_ACCEPTANCE_V1\";\nconst gpt=Deno.env.get(\"GPT_TOKEN_V4\");\nconst admin=Deno.env.get(\"ADMIN_TOKEN_V4\");\nif(!gpt||!admin) throw new Error(\"R6_REQUIRED_ENV_MISSING\");\n\nconst healthRes=await fetch(base+\"/health\",{cache:\"no-store\"});\nconst health=await healthRes.json();\nif(healthRes.status!==200||health.implementation_revision!==\"R6-DEVICE-BOOTSTRAP\") throw new Error(\"R6_HEALTH\");\nif(health.production_go!==false) throw new Error(\"R6_HEALTH_PRODUCTION_GO\");\n\nconst metaRes=await fetch(base+\"/v1/bootstrap/codex-device/metadata\",{cache:\"no-store\"});\nconst meta=await metaRes.json();\nif(metaRes.status!==200||meta.launcher_sha256!==\"5bd101b674bcc4cc6f6e842d285c486857cb73b20211c375706067eba71fbcd6\"||meta.launcher_bytes!==13466||meta.launcher_version!==\"1.3\") throw new Error(\"R6_METADATA\");\nif(meta.security_boundary?.embedded_credentials!==false||meta.security_boundary?.final_chatgpt_ack_required!==true) throw new Error(\"R6_METADATA_BOUNDARY\");\n\nconst accRes=await fetch(base+\"/v1/acceptance/\"+lane,{headers:{authorization:\"Bearer \"+gpt},cache:\"no-store\"});\nconst acc=await accRes.json();\nif(accRes.status!==200||acc.state!==\"PENDING_CODEX_ACK\") throw new Error(\"R6_ACCEPTANCE_\"+acc.state);\nif(acc.production_go!==false) throw new Error(\"R6_ACCEPTANCE_GO\");\n\nconst stateRes=await fetch(base+\"/v1/state/\"+lane,{headers:{authorization:\"Bearer \"+gpt},cache:\"no-store\"});\nconst state=await stateRes.json();\nif(stateRes.status!==200||Number(state.state?.revision)!==1) throw new Error(\"R6_STATE_REVISION\");\nif(state.state?.checkpoint_sha256!==\"d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962\") throw new Error(\"R6_STATE_CHECKPOINT\");\n\nconst auditRes=await fetch(base+\"/v1/audit\",{headers:{authorization:\"Bearer \"+admin},cache:\"no-store\"});\nconst audit=await auditRes.json();\nif(auditRes.status!==200||audit.audit_chain_ok!==true) throw new Error(\"R6_AUDIT\");\n\nconsole.log(JSON.stringify({\n selftest:\"PASS\",implementation_revision:health.implementation_revision,\n acceptance_state:acc.state,lane_revision:state.state.revision,\n checkpoint_sha256:state.state.checkpoint_sha256,audit_chain_ok:audit.audit_chain_ok,\n audit_event_count:audit.count,launcher_sha256:meta.launcher_sha256,\n launcher_bytes:meta.launcher_bytes,launcher_version:meta.launcher_version,embedded_credentials:false,\n final_chatgpt_ack_required:true,production_go:false,\n real_codex_runtime:\"NOT_PROVEN_BY_THIS_TEST\"\n},null,2));",[179],"1e326e6c-bd09-4faf-8583-925bd501616f","r6_bootstrap_http_selftest.ts","01a04b9f-d094-726a-8052-e1f78d3fdab5",["D",1787975159958],"const url=\"https://sebas1--01a04b6c896271ba8fca9e6b08c7e987.web.val.run/v1/bootstrap/codex-device.py\";\nconst expectedSha=\"5bd101b674bcc4cc6f6e842d285c486857cb73b20211c375706067eba71fbcd6\";\nconst expectedBytes=13466;\nconst res=await fetch(url,{cache:\"no-store\"});\nconst raw=new Uint8Array(await res.arrayBuffer());\nconst d=await crypto.subtle.digest(\"SHA-256\",raw);\nconst sha=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nif(res.status!==200) throw new Error(\"BOOTSTRAP_HTTP_\"+res.status);\nif(raw.length!==expectedBytes) throw new Error(\"BOOTSTRAP_SIZE_\"+raw.length);\nif(sha!==expectedSha) throw new Error(\"BOOTSTRAP_SHA_\"+sha);\nif(res.headers.get(\"x-sha256\")!==expectedSha) throw new Error(\"BOOTSTRAP_HEADER_SHA\");\nconst text=new TextDecoder().decode(raw);\nif(!text.startsWith(\"#!/usr/bin/env python3\")) throw new Error(\"BOOTSTRAP_SHEBANG\");\nif(!text.includes('User-Agent\":\"rumbo-codex-device-bootstrap/1.3')) throw new Error(\"BOOTSTRAP_VERSION_MARKER\");\nif(!text.includes(\"receipt_sha=h(RECEIPT.read_bytes())\")) throw new Error(\"EXACT_RECEIPT_HASH_MISSING\");\nif(!text.includes(\"def verify_existing_receipt():\")) throw new Error(\"RESUME_VERIFIER_MISSING\");\nif(!text.includes('\"challenge_nonce\":nonce')) throw new Error(\"NONCE_RECEIPT_BINDING_MISSING\");\nif(!text.includes(\"local receipt belongs to a different bootstrap script\")) throw new Error(\"SCRIPT_RECEIPT_BINDING_MISSING\");\nif(!text.includes('market_backup=BACKUPS/f\"marketplace-{stamp}.json\"')) throw new Error(\"PERSISTENT_MARKET_BACKUP_MISSING\");\nif(!text.includes('cache_backup=BACKUPS/f\"{PLUGIN}-cache-{stamp}\"')) throw new Error(\"CACHE_BACKUP_MISSING\");\nif(!text.includes(\"write(MARKET,market_before)\")) throw new Error(\"MARKETPLACE_ROLLBACK_MISSING\");\nif(!text.includes(\"shutil.move(str(cache_backup),str(cache))\")) throw new Error(\"CACHE_ROLLBACK_MISSING\");\nconsole.log(JSON.stringify({\n selftest:\"PASS\",status:res.status,bytes:raw.length,sha256:sha,\n header_sha256:res.headers.get(\"x-sha256\"),launcher_version:\"1.3\",\n exact_receipt_bytes_hash:true,resume_verification:true,nonce_receipt_binding:true,\n plugin_backup_rollback:true,marketplace_backup_rollback:true,cache_backup_rollback:true\n},null,2));",[185],"992fdc42-70cd-484a-9dcf-b51066b07969","r5_pairing_selftest.ts","01a04b9f-d094-726a-8052-df61fc1b63f5",["D",1787975159958],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { classifyPairing } from \"./pairing_state.ts\";\n\nfunction assert(cond: unknown, message: string): asserts cond {\n if (!cond) throw new Error(message);\n}\n\nconst now = Date.now();\nassert(classifyPairing(null, now) === \"ISSUE_NEW\", \"null must issue\");\nassert(\n classifyPairing({expires_at:new Date(now+60000).toISOString(),confirmed_at:null}, now) === \"REDELIVER_ACTIVE\",\n \"active unconfirmed must redeliver\"\n);\nassert(\n classifyPairing({expires_at:new Date(now).toISOString(),confirmed_at:null}, now) === \"REISSUE_EXPIRED\",\n \"expiry boundary must reissue\"\n);\nassert(\n classifyPairing({expires_at:new Date(now-1).toISOString(),confirmed_at:null}, now) === \"REISSUE_EXPIRED\",\n \"expired must reissue\"\n);\nassert(\n classifyPairing({expires_at:new Date(now+60000).toISOString(),confirmed_at:new Date(now-1).toISOString()}, now) === \"ALREADY_CONFIRMED\",\n \"confirmed must stop\"\n);\nassert(\n classifyPairing({expires_at:\"not-a-date\",confirmed_at:null}, now) === \"INVALID_EXISTING_SESSION\",\n \"invalid expiry must fail closed\"\n);\n\nconst pairingId = \"r5-selftest-expired\";\nconst dummySha = \"a\".repeat(64);\nlet cleanupOk = false;\ntry {\n await sqlite.execute({sql:\"DELETE FROM pairing_sessions WHERE pairing_id=?\",args:[pairingId]});\n const expiredIssued = new Date(now-120000).toISOString();\n const expiredAt = new Date(now-60000).toISOString();\n await sqlite.execute({\n sql:\"INSERT INTO pairing_sessions(pairing_id,pairing_code_sha256,issued_at,expires_at,confirmed_at,client_label) VALUES(?,?,?,?,NULL,?)\",\n args:[pairingId,dummySha,expiredIssued,expiredAt,\"r5-selftest\"]\n });\n\n const before = await sqlite.execute({sql:\"SELECT expires_at,confirmed_at FROM pairing_sessions WHERE pairing_id=?\",args:[pairingId]});\n const beforeRow:any = before.rows[0];\n assert(classifyPairing({expires_at:String(beforeRow.expires_at),confirmed_at:null}, Date.now()) === \"REISSUE_EXPIRED\", \"fixture must be expired\");\n\n const issuedAt = new Date().toISOString();\n const expiresAt = new Date(Date.parse(issuedAt)+10*60*1000).toISOString();\n const reissued:any = await sqlite.execute({\n sql:\"UPDATE pairing_sessions SET pairing_code_sha256=?,issued_at=?,expires_at=?,confirmed_at=NULL,client_label=? WHERE pairing_id=? AND confirmed_at IS NULL AND expires_at<=?\",\n args:[dummySha,issuedAt,expiresAt,\"r5-selftest-reissued\",pairingId,issuedAt]\n });\n assert(Number(reissued?.rowsAffected ?? 0) === 1, \"expired row must reissue atomically\");\n\n const active = await sqlite.execute({sql:\"SELECT expires_at,confirmed_at FROM pairing_sessions WHERE pairing_id=?\",args:[pairingId]});\n const activeRow:any = active.rows[0];\n assert(classifyPairing({expires_at:String(activeRow.expires_at),confirmed_at:null}, Date.now()) === \"REDELIVER_ACTIVE\", \"reissued row must be active\");\n\n const confirmedAt = new Date().toISOString();\n const confirmed:any = await sqlite.execute({\n sql:\"UPDATE pairing_sessions SET confirmed_at=? WHERE pairing_id=? AND confirmed_at IS NULL AND expires_at>?\",\n args:[confirmedAt,pairingId,confirmedAt]\n });\n assert(Number(confirmed?.rowsAffected ?? 0) === 1, \"active row must confirm atomically\");\n\n const after = await sqlite.execute({sql:\"SELECT expires_at,confirmed_at FROM pairing_sessions WHERE pairing_id=?\",args:[pairingId]});\n const afterRow:any = after.rows[0];\n assert(!!afterRow.confirmed_at, \"confirmed_at must be durable\");\n assert(\n classifyPairing({expires_at:String(afterRow.expires_at),confirmed_at:String(afterRow.confirmed_at)}, Date.now()) === \"ALREADY_CONFIRMED\",\n \"confirmed row must classify confirmed\"\n );\n\n console.log(JSON.stringify({\n selftest:\"PASS\",\n pure_state_cases:6,\n sqlite_expiry_reissue:\"PASS\",\n sqlite_atomic_confirm:\"PASS\",\n production_pairing_touched:false\n }, null, 2));\n} finally {\n await sqlite.execute({sql:\"DELETE FROM pairing_sessions WHERE pairing_id=?\",args:[pairingId]});\n const left = await sqlite.execute({sql:\"SELECT COUNT(*) AS n FROM pairing_sessions WHERE pairing_id=?\",args:[pairingId]});\n cleanupOk = Number((left.rows[0] as any)?.n ?? -1) === 0;\n if (!cleanupOk) throw new Error(\"SELFTEST_FIXTURE_CLEANUP_FAILED\");\n}\n",[191],"72e0ef3f-19cb-4edb-9a02-bbac6e98beba","r5_branch_regression.ts","01a04b9f-d094-726a-8052-dbad22d75a0c",["D",1787975159958],"const base = \"https://sebas1--01a04b6631be7019bc45cebfd3460391.web.val.run\";\nconst lane = \"CODEX_REAL_RUNTIME_ACCEPTANCE_V1\";\nconst gpt = Deno.env.get(\"GPT_TOKEN_V4\");\nconst admin = Deno.env.get(\"ADMIN_TOKEN_V4\");\nif (!gpt || !admin) throw new Error(\"R5_REQUIRED_ENV_MISSING\");\n\nconst healthRes = await fetch(base + \"/health\");\nconst health = await healthRes.json();\nif (healthRes.status !== 200 || health.implementation_revision !== \"R5-PAIRING-RECOVERY\") {\n throw new Error(\"R5_HEALTH_MISMATCH\");\n}\nif (health.production_go !== false) throw new Error(\"R5_PRODUCTION_GO_INVARIANT_BROKEN\");\n\nconst acceptanceRes = await fetch(`${base}/v1/acceptance/${lane}`, {\n headers:{Authorization:`Bearer ${gpt}`}\n});\nconst acceptance = await acceptanceRes.json();\nif (acceptanceRes.status !== 200) throw new Error(\"R5_ACCEPTANCE_UNREADABLE\");\nif (acceptance.state !== \"PENDING_CODEX_ACK\") throw new Error(`R5_ACCEPTANCE_DRIFT_${acceptance.state}`);\nif (acceptance.production_go !== false) throw new Error(\"R5_ACCEPTANCE_PRODUCTION_GO\");\n\nconst stateRes = await fetch(`${base}/v1/state/${lane}`, {\n headers:{Authorization:`Bearer ${gpt}`}\n});\nconst state = await stateRes.json();\nif (stateRes.status !== 200 || Number(state.state?.revision) !== 1) throw new Error(\"R5_LANE_REVISION_DRIFT\");\nif (state.state?.checkpoint_sha256 !== \"d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962\") {\n throw new Error(\"R5_LANE_CHECKPOINT_DRIFT\");\n}\n\nconst auditRes = await fetch(base + \"/v1/audit\", {\n headers:{Authorization:`Bearer ${admin}`}\n});\nconst audit = await auditRes.json();\nif (auditRes.status !== 200 || audit.audit_chain_ok !== true) throw new Error(\"R5_AUDIT_CHAIN_FAIL\");\n\nconsole.log(JSON.stringify({\n selftest:\"PASS\",\n implementation_revision:health.implementation_revision,\n acceptance_state:acceptance.state,\n lane_revision:state.state.revision,\n checkpoint_sha256:state.state.checkpoint_sha256,\n audit_chain_ok:audit.audit_chain_ok,\n audit_event_count:audit.count,\n production_go:false,\n real_codex_runtime:\"NOT_PROVEN_BY_THIS_TEST\"\n},null,2));",[197],"3532e492-9a15-4936-85e9-730fda3445ae","pairing_state.ts","01a04b9f-d094-726a-8052-d440a6b129a4",["D",1787975159958],"export type PairingSnapshot = {\n expires_at: string | null;\n confirmed_at: string | null;\n} | null;\n\nexport type PairingDecision =\n | \"ISSUE_NEW\"\n | \"REDELIVER_ACTIVE\"\n | \"REISSUE_EXPIRED\"\n | \"ALREADY_CONFIRMED\"\n | \"INVALID_EXISTING_SESSION\";\n\nexport function classifyPairing(\n existing: PairingSnapshot,\n nowMs: number,\n): PairingDecision {\n if (!Number.isFinite(nowMs)) return \"INVALID_EXISTING_SESSION\";\n if (!existing) return \"ISSUE_NEW\";\n if (existing.confirmed_at) return \"ALREADY_CONFIRMED\";\n if (!existing.expires_at) return \"INVALID_EXISTING_SESSION\";\n const expiresMs = Date.parse(existing.expires_at);\n if (!Number.isFinite(expiresMs)) return \"INVALID_EXISTING_SESSION\";\n return expiresMs <= nowMs ? \"REISSUE_EXPIRED\" : \"REDELIVER_ACTIVE\";\n}\n",[203],"17583fcb-6afa-4131-a9d2-2a273ec21501","main.tsx","01a04b9f-d094-726a-8052-d1c6f66c2b93",["D",1787975159958],"http","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { classifyPairing } from \"./pairing_state.ts\";\n\nconst app = new Hono();\nconst LANE_RE = /^[A-Z0-9][A-Z0-9_.:-]{0,95}$/;\nconst MAX_BODY = 256 * 1024;\nconst secretKeyRe = /(password|api[_-]?key|secret|access[_-]?token|refresh[_-]?token|private[_-]?key|authorization|session[_-]?cookie)/i;\nconst tokenPrefixRe = /(sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9_]{20,}|glpat-[A-Za-z0-9_-]{12,}|xox[baprs]-[A-Za-z0-9-]{10,})/;\nconst SHA256_RE = /^[a-f0-9]{64}$/;\nconst R2_TARGET_REPOSITORY_IDENTITY_SHA256 = \"59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23\";\nconst R2_CONTROL_PACKAGE_SHA256 = \"afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f\";\nconst R2_GUARD_MAX_TTL_SECONDS = 900;\nconst DEVICE_PAIRING_TTL_MS = 15 * 60 * 1000;\nconst DEVICE_PAIRING_MAX_PENDING_PER_FINGERPRINT = 3;\nconst DEVICE_PAIRING_MAX_PENDING_GLOBAL = 100;\nconst DEVICE_ACCESS_TOKEN_TTL_MS = 60 * 60 * 1000;\nconst DEVICE_ACCESS_LANE = \"CODEX_REAL_RUNTIME_ACCEPTANCE_V2\";\nconst DEVICE_USER_CODE_ALPHABET = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n\nasync function init() {\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS lane_state (\n lane TEXT PRIMARY KEY,\n revision INTEGER NOT NULL DEFAULT 0,\n checkpoint_sha256 TEXT NOT NULL DEFAULT '',\n updated_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS messages (\n id TEXT PRIMARY KEY,\n actor TEXT NOT NULL CHECK(actor IN ('gpt','codex')),\n recipient TEXT NOT NULL CHECK(recipient IN ('gpt','codex')),\n lane TEXT NOT NULL,\n base_revision INTEGER NOT NULL,\n revision INTEGER NOT NULL,\n payload_json TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n message_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL,\n acked_at TEXT\n )`,\n `CREATE INDEX IF NOT EXISTS idx_messages_inbox ON messages(recipient,lane,acked_at,revision)`,\n `CREATE TABLE IF NOT EXISTS acknowledgements (\n id TEXT PRIMARY KEY,\n actor TEXT NOT NULL CHECK(actor IN ('gpt','codex')),\n target_message_id TEXT NOT NULL UNIQUE,\n target_message_sha256 TEXT NOT NULL,\n created_at TEXT NOT NULL,\n FOREIGN KEY(target_message_id) REFERENCES messages(id)\n )`,\n `CREATE TABLE IF NOT EXISTS audit_events (\n seq INTEGER PRIMARY KEY AUTOINCREMENT,\n event_type TEXT NOT NULL,\n actor TEXT NOT NULL,\n lane TEXT,\n object_id TEXT,\n object_sha256 TEXT,\n prev_event_sha256 TEXT NOT NULL,\n event_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS pairing_events (\n pairing_id TEXT PRIMARY KEY,\n pairing_code_sha256 TEXT NOT NULL,\n consumed_at TEXT NOT NULL,\n client_label TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS pairing_sessions (\n pairing_id TEXT PRIMARY KEY,\n pairing_code_sha256 TEXT NOT NULL,\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n confirmed_at TEXT,\n client_label TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS device_pairing_sessions (\n pairing_id TEXT PRIMARY KEY,\n device_code_sha256 TEXT NOT NULL UNIQUE,\n user_code_sha256 TEXT NOT NULL UNIQUE,\n client_fingerprint_sha256 TEXT NOT NULL,\n client_label TEXT,\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n approved_at TEXT,\n approved_by TEXT,\n delivered_at TEXT\n )`,\n `CREATE INDEX IF NOT EXISTS idx_device_pairing_pending ON device_pairing_sessions(client_fingerprint_sha256,expires_at,approved_at)`,\n `CREATE TABLE IF NOT EXISTS device_access_tokens (\\n token_sha256 TEXT PRIMARY KEY,\\n pairing_id TEXT NOT NULL UNIQUE,\\n lane_scope TEXT NOT NULL,\\n issued_at TEXT NOT NULL,\\n expires_at TEXT NOT NULL,\\n revoked_at TEXT,\\n FOREIGN KEY(pairing_id) REFERENCES device_pairing_sessions(pairing_id)\\n )`,\n `CREATE INDEX IF NOT EXISTS idx_device_access_active ON device_access_tokens(expires_at,revoked_at,lane_scope)`,\n `CREATE TABLE IF NOT EXISTS request_dedup (\n actor TEXT NOT NULL,\n request_id TEXT NOT NULL,\n body_sha256 TEXT NOT NULL,\n message_id TEXT NOT NULL,\n created_at TEXT NOT NULL,\n PRIMARY KEY(actor,request_id),\n FOREIGN KEY(message_id) REFERENCES messages(id)\n )`,\n `CREATE TABLE IF NOT EXISTS guard_authorizations (\n authorization_id TEXT PRIMARY KEY,\n action TEXT NOT NULL CHECK(action IN ('TEST_ONLY','MERGE_PR')),\n repository_identity_sha256 TEXT NOT NULL,\n pr_number INTEGER NOT NULL,\n base_sha TEXT NOT NULL,\n head_sha TEXT NOT NULL,\n package_sha256 TEXT NOT NULL,\n evidence_sha256 TEXT NOT NULL,\n request_sha256 TEXT NOT NULL UNIQUE,\n token_sha256 TEXT NOT NULL UNIQUE,\n status TEXT NOT NULL CHECK(status IN ('ISSUED','CONSUMED','REVOKED','EXPIRED')),\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n consumed_at TEXT,\n consumer TEXT\n )`,\n `CREATE INDEX IF NOT EXISTS idx_guard_status ON guard_authorizations(status,expires_at)`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_prev_unique ON audit_events(prev_event_sha256)`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_message_accepted_unique ON audit_events(object_id) WHERE event_type='MESSAGE_ACCEPTED'`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_message_acked_unique ON audit_events(object_id) WHERE event_type='MESSAGE_ACKED'`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_guard_event_unique ON audit_events(event_type,object_id) WHERE event_type LIKE 'GUARD_%'`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_device_event_unique ON audit_events(event_type,object_id) WHERE event_type LIKE 'CODEX_DEVICE_%'`,\n `CREATE TRIGGER IF NOT EXISTS messages_revision_guard\n BEFORE INSERT ON messages\n BEGIN\n SELECT CASE\n WHEN COALESCE((SELECT revision FROM lane_state WHERE lane=NEW.lane), -1) != NEW.base_revision\n THEN RAISE(ABORT, 'STALE_REVISION')\n END;\n END`,\n `CREATE TRIGGER IF NOT EXISTS messages_revision_advance\n AFTER INSERT ON messages\n BEGIN\n UPDATE lane_state\n SET revision=NEW.revision, updated_at=NEW.created_at\n WHERE lane=NEW.lane AND revision=NEW.base_revision;\n END`\n ]);\n}\n\nfunction bearer(req: Request): string {\n const h = req.headers.get(\"authorization\") || \"\";\n return h.startsWith(\"Bearer \") ? h.slice(7) : \"\";\n}\n\ntype AuthContext = { role:\"gpt\"|\"codex\"|\"admin\"; kind:\"environment\"|\"device\"; lane_scope?:string; pairing_id?:string; };\n\nasync function authFrom(req: Request): Promise {\n const token = bearer(req);\n if (!token) return null;\n const gpt = Deno.env.get(\"GPT_TOKEN_V4\") || \"\";\n const admin = Deno.env.get(\"ADMIN_TOKEN_V4\") || \"\";\n if (gpt && constantTimeEqual(token,gpt)) return {role:\"gpt\",kind:\"environment\"};\n if (admin && constantTimeEqual(token,admin)) return {role:\"admin\",kind:\"environment\"};\n const tokenSha = await sha(token);\n const nowIso = new Date().toISOString();\n const rs = await sqlite.execute({sql:\"SELECT pairing_id,lane_scope,expires_at,revoked_at FROM device_access_tokens WHERE token_sha256=? LIMIT 1\",args:[tokenSha]});\n if (!rs.rows.length) return null;\n const row:any = rs.rows[0];\n if (row.revoked_at || String(row.expires_at) <= nowIso) return null;\n return {role:\"codex\",kind:\"device\",lane_scope:String(row.lane_scope),pairing_id:String(row.pairing_id)};\n}\n\nasync function roleFrom(req: Request): Promise<\"gpt\"|\"codex\"|\"admin\"|null> {\n return (await authFrom(req))?.role || null;\n}\n\nfunction laneAuthorized(auth: AuthContext, lane: string): boolean {\n return auth.kind !== \"device\" || auth.lane_scope === lane;\n}\n\nfunction constantTimeEqual(a: string, b: string): boolean {\n const aa = new TextEncoder().encode(a);\n const bb = new TextEncoder().encode(b);\n if (aa.length !== bb.length) return false;\n let diff = 0;\n for (let i = 0; i < aa.length; i++) diff |= aa[i] ^ bb[i];\n return diff === 0;\n}\n\nfunction guardAuthorized(req: Request): boolean {\n const expected = Deno.env.get(\"R2_GUARD_TOKEN_V1\") || \"\";\n const observed = bearer(req);\n return !!expected && !!observed && constantTimeEqual(expected, observed);\n}\n\nfunction validGitSha(v: unknown): boolean {\n return typeof v === \"string\" && /^[a-f0-9]{40}$/.test(v);\n}\n\nfunction validSha256(v: unknown): v is string {\n return typeof v === \"string\" && SHA256_RE.test(v);\n}\n\nfunction randomOneTimeToken(bytes = 32): string {\n const raw = new Uint8Array(bytes);\n crypto.getRandomValues(raw);\n const binary = Array.from(raw, b => String.fromCharCode(b)).join(\"\");\n return btoa(binary).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replace(/=+$/g, \"\");\n}\n\nasync function deriveDeviceAccessToken(pairingId:string, deviceSha:string): Promise {\n const master = Deno.env.get(\"CODEX_DEVICE_TOKEN_MASTER_V1\") || \"\";\n if (!master) throw new Error(\"DEVICE_TOKEN_MASTER_NOT_CONFIGURED\");\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\"raw\",enc.encode(master),{name:\"HMAC\",hash:\"SHA-256\"},false,[\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\",key,enc.encode(\"rumbo-codex-device-token/v1|\"+pairingId+\"|\"+deviceSha));\n const binary = Array.from(new Uint8Array(sig), b => String.fromCharCode(b)).join(\"\");\n return \"cdxdev_\" + btoa(binary).replaceAll(\"+\",\"-\").replaceAll(\"/\",\"_\").replace(/=+$/g,\"\");\n}\n\nfunction randomUserCode(chars = 8): string {\n let out = \"\";\n while (out.length < chars) {\n const raw = new Uint8Array(16);\n crypto.getRandomValues(raw);\n for (const n of raw) {\n const limit = 256 - (256 % DEVICE_USER_CODE_ALPHABET.length);\n if (n >= limit) continue;\n out += DEVICE_USER_CODE_ALPHABET[n % DEVICE_USER_CODE_ALPHABET.length];\n if (out.length === chars) break;\n }\n }\n return out;\n}\n\nfunction normalizeUserCode(v: unknown): string {\n return String(v || \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\");\n}\n\ntype GuardAction = \"TEST_ONLY\" | \"MERGE_PR\";\ntype GuardBinding = {\n action: GuardAction;\n repository_identity_sha256: string;\n pr_number: number;\n base_sha: string;\n head_sha: string;\n package_sha256: string;\n evidence_sha256: string;\n};\n\nfunction parseGuardBinding(b: any): GuardBinding | null {\n const action = String(b?.action || \"\") as GuardAction;\n const repository_identity_sha256 = String(b?.repository_identity_sha256 || \"\");\n const pr_number = Number(b?.pr_number);\n const base_sha = String(b?.base_sha || \"\");\n const head_sha = String(b?.head_sha || \"\");\n const package_sha256 = String(b?.package_sha256 || \"\");\n const evidence_sha256 = String(b?.evidence_sha256 || \"\");\n if (action !== \"TEST_ONLY\" && action !== \"MERGE_PR\") return null;\n if (repository_identity_sha256 !== R2_TARGET_REPOSITORY_IDENTITY_SHA256) return null;\n if (!Number.isSafeInteger(pr_number) || pr_number <= 0) return null;\n if (!validGitSha(base_sha) || !validGitSha(head_sha)) return null;\n if (package_sha256 !== R2_CONTROL_PACKAGE_SHA256) return null;\n if (!validSha256(evidence_sha256)) return null;\n return {action,repository_identity_sha256,pr_number,base_sha,head_sha,package_sha256,evidence_sha256};\n}\n\nfunction canonical(v: unknown): string {\n if (v === null || typeof v !== \"object\") return JSON.stringify(v);\n if (Array.isArray(v)) return \"[\" + v.map(canonical).join(\",\") + \"]\";\n const o = v as Record;\n return \"{\" + Object.keys(o).sort().map(k => JSON.stringify(k)+\":\"+canonical(o[k])).join(\",\") + \"}\";\n}\nasync function sha(s: string): Promise {\n const b = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(b)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction hasSecret(v: unknown): boolean {\n if (typeof v === \"string\") return tokenPrefixRe.test(v);\n if (Array.isArray(v)) return v.some(hasSecret);\n if (v && typeof v === \"object\") {\n return Object.entries(v as Record).some(([k,x]) => secretKeyRe.test(k) || hasSecret(x));\n }\n return false;\n}\nasync function bodyJson(c: any) {\n const len = Number(c.req.header(\"content-length\") || \"0\");\n if (len > MAX_BODY) throw new Error(\"PAYLOAD_TOO_LARGE\");\n const txt = await c.req.text();\n if (new TextEncoder().encode(txt).length > MAX_BODY) throw new Error(\"PAYLOAD_TOO_LARGE\");\n return JSON.parse(txt || \"{}\");\n}\nasync function audit(event_type:string, actor:string, lane:string|null, object_id:string|null, object_sha256:string|null) {\n const idempotentEvent = event_type === \"MESSAGE_ACCEPTED\" || event_type === \"MESSAGE_ACKED\" || event_type.startsWith(\"GUARD_\") || event_type.startsWith(\"CODEX_DEVICE_\");\n if (idempotentEvent && object_id) {\n const existing = await sqlite.execute({sql:\"SELECT event_sha256 FROM audit_events WHERE event_type=? AND object_id=? LIMIT 1\",args:[event_type,object_id]});\n if (existing.rows.length) return String(existing.rows[0].event_sha256);\n }\n for (let attempt=0; attempt<8; attempt++) {\n const last = await sqlite.execute(\"SELECT event_sha256 FROM audit_events ORDER BY seq DESC LIMIT 1\");\n const prev = String(last.rows[0]?.event_sha256 || \"0\".repeat(64));\n const created_at = new Date().toISOString();\n const ev = {event_type,actor,lane,object_id,object_sha256,prev_event_sha256:prev,created_at};\n const event_sha256 = await sha(canonical(ev));\n try {\n await sqlite.execute({sql:`INSERT INTO audit_events(event_type,actor,lane,object_id,object_sha256,prev_event_sha256,event_sha256,created_at)\n VALUES(?,?,?,?,?,?,?,?)`,args:[event_type,actor,lane,object_id,object_sha256,prev,event_sha256,created_at]});\n return event_sha256;\n } catch (e) {\n if (idempotentEvent && object_id) {\n const existing = await sqlite.execute({sql:\"SELECT event_sha256 FROM audit_events WHERE event_type=? AND object_id=? LIMIT 1\",args:[event_type,object_id]});\n if (existing.rows.length) return String(existing.rows[0].event_sha256);\n }\n if (!String(e).includes(\"UNIQUE\")) throw e;\n }\n }\n throw new Error(\"AUDIT_APPEND_CONTENTION\");\n}\n\nawait init();\n\napp.get(\"/\", (c) => c.json({service:\"rumbo-continuity-relay\",protocol:\"rumbo-continuity-relay/v1\",implementation_revision:\"R8-SCOPED-DEVICE-TOKENS\",status:\"ok\",production_go:false}));\napp.get(\"/health\", (c) => c.json({\n ok:true,\n protocol:\"rumbo-continuity-relay/v1\",\n implementation_revision:\"R8-SCOPED-DEVICE-TOKENS\",\n capabilities:[\n \"atomic-stale-guard\",\"request-idempotency\",\"idempotent-ack\",\"audit-chain\",\n \"two-phase-pairing\",\"pairing-expiry-recovery\",\"pairing-constant-time-code-check\",\"device-code-pairing\",\n \"scoped-per-device-bearer\",\"legacy-shared-codex-bearer-revoked\",\"secretless-public-bootstrap\",\"canonical-plugin-reconstruction\",\"canonical-v1.6-skill-bootstrap\",\n \"codex-runtime-acceptance-verifier\",\"server-enforced-acceptance-deadline\",\"actual-codex-exec-evidence\",\n \"codex-local-random-file-probe\",\"completed-command-execution-evidence\",\"prohibited-item-event-rejection\",\n \"exact-bootstrap-hash-binding\",\"v1-superseded-v2-active\",\n \"external-r2-authorizer\",\"one-time-token-ledger\",\"exact-pr-binding\",\"fail-closed-merge-gate\"\n ],\n guard:{\n configured:!!Deno.env.get(\"R2_GUARD_TOKEN_V1\"),\n merge_authorization_enabled:Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") === \"true\",\n max_ttl_seconds:R2_GUARD_MAX_TTL_SECONDS\n },\n production_go:false\n}));\n\napp.get(\"/v1/state/:lane\", async (c) => {\n const auth = await authFrom(c.req.raw); if (!auth) return c.json({error:\"UNAUTHORIZED\"},401);\n const lane = c.req.param(\"lane\"); if (!LANE_RE.test(lane)) return c.json({error:\"INVALID_LANE\"},400);\n if (!laneAuthorized(auth,lane)) return c.json({error:\"DEVICE_TOKEN_SCOPE_VIOLATION\"},403);\n const st = await sqlite.execute({sql:\"SELECT lane,revision,checkpoint_sha256,updated_at FROM lane_state WHERE lane=?\",args:[lane]});\n const row = st.rows[0] || {lane,revision:0,checkpoint_sha256:\"0\".repeat(64),updated_at:null};\n const pending = await sqlite.execute({sql:\"SELECT recipient,COUNT(*) AS n FROM messages WHERE lane=? AND acked_at IS NULL GROUP BY recipient\",args:[lane]});\n return c.json({state:row,pending:pending.rows});\n});\n\napp.get(\"/v1/inbox\", async (c) => {\n const auth = await authFrom(c.req.raw); if (!auth || (auth.role !== \"gpt\" && auth.role !== \"codex\")) return c.json({error:\"UNAUTHORIZED\"},401);\n const role = auth.role;\n const lane = c.req.query(\"lane\") || \"\"; if (!LANE_RE.test(lane)) return c.json({error:\"INVALID_LANE\"},400);\n if (!laneAuthorized(auth,lane)) return c.json({error:\"DEVICE_TOKEN_SCOPE_VIOLATION\"},403);\n const rs = await sqlite.execute({sql:`SELECT id,actor,recipient,lane,base_revision,revision,payload_json,payload_sha256,message_sha256,created_at\n FROM messages WHERE recipient=? AND lane=? AND acked_at IS NULL ORDER BY revision,id LIMIT 100`,args:[role,lane]});\n return c.json({messages:rs.rows.map((r:any)=>({...r,payload:JSON.parse(String(r.payload_json)),payload_json:undefined}))});\n});\n\napp.post(\"/v1/messages\", async (c) => {\n const auth = await authFrom(c.req.raw); if (!auth || (auth.role !== \"gpt\" && auth.role !== \"codex\")) return c.json({error:\"UNAUTHORIZED\"},401);\n const actor = auth.role;\n try {\n const b = await bodyJson(c);\n const lane = String(b.lane||\"\"); if (!LANE_RE.test(lane)) return c.json({error:\"INVALID_LANE\"},400);\n if (!laneAuthorized(auth,lane)) return c.json({error:\"DEVICE_TOKEN_SCOPE_VIOLATION\"},403);\n const base = Number(b.base_revision); if (!Number.isSafeInteger(base) || base < 0) return c.json({error:\"INVALID_BASE_REVISION\"},400);\n const payload = b.payload ?? {}; if (hasSecret(payload)) return c.json({error:\"SECRET_REJECTED\"},400);\n const requestId = String(b.request_id || \"\").trim();\n if (requestId && !/^[A-Za-z0-9_.:-]{16,128}$/.test(requestId)) return c.json({error:\"INVALID_REQUEST_ID\"},400);\n const requestBodySha256 = await sha(canonical({lane,base_revision:base,payload}));\n if (requestId) {\n const prior = await sqlite.execute({sql:\"SELECT body_sha256,message_id FROM request_dedup WHERE actor=? AND request_id=?\",args:[actor,requestId]});\n if (prior.rows.length) {\n const d:any = prior.rows[0];\n if (String(d.body_sha256)!==requestBodySha256) return c.json({error:\"IDEMPOTENCY_KEY_REUSE_MISMATCH\"},409);\n const m = await sqlite.execute({sql:\"SELECT id,lane,revision,payload_sha256,message_sha256 FROM messages WHERE id=?\",args:[String(d.message_id)]});\n if (!m.rows.length) return c.json({error:\"DEDUP_MESSAGE_MISSING\"},500);\n const row:any = m.rows[0];\n const checkpoint_sha256 = await sha(canonical({lane:String(row.lane),revision:Number(row.revision),message_sha256:String(row.message_sha256)}));\n return c.json({accepted:true,idempotent:true,id:row.id,lane:row.lane,revision:row.revision,payload_sha256:row.payload_sha256,message_sha256:row.message_sha256,checkpoint_sha256},200);\n }\n }\n await sqlite.execute({sql:\"INSERT OR IGNORE INTO lane_state(lane,revision,checkpoint_sha256,updated_at) VALUES(?,0,?,?)\",args:[lane,\"0\".repeat(64),new Date().toISOString()]});\n const st = await sqlite.execute({sql:\"SELECT revision FROM lane_state WHERE lane=?\",args:[lane]});\n const cur = Number(st.rows[0]?.revision ?? 0); if (cur !== base) return c.json({error:\"STALE_REVISION\",expected:cur,observed:base},409);\n const recipient = actor === \"gpt\" ? \"codex\" : \"gpt\";\n const id = crypto.randomUUID(); const revision = base + 1; const created_at = new Date().toISOString();\n const payload_json = canonical(payload); const payload_sha256 = await sha(payload_json);\n const envelope = {protocol:\"rumbo-continuity-relay/v1\",id,actor,recipient,lane,base_revision:base,revision,payload_sha256,created_at};\n const message_sha256 = await sha(canonical(envelope));\n const checkpoint_sha256 = await sha(canonical({lane,revision,message_sha256}));\n const statements:any[] = [\n {sql:`INSERT INTO messages(id,actor,recipient,lane,base_revision,revision,payload_json,payload_sha256,message_sha256,created_at)\n VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[id,actor,recipient,lane,base,revision,payload_json,payload_sha256,message_sha256,created_at]},\n {sql:\"UPDATE lane_state SET checkpoint_sha256=? WHERE lane=? AND revision=?\",args:[checkpoint_sha256,lane,revision]}\n ];\n if (requestId) statements.push({sql:\"INSERT INTO request_dedup(actor,request_id,body_sha256,message_id,created_at) VALUES(?,?,?,?,?)\",args:[actor,requestId,requestBodySha256,id,created_at]});\n try {\n await sqlite.batch(statements);\n } catch (e) {\n if (requestId) {\n const prior = await sqlite.execute({sql:\"SELECT body_sha256,message_id FROM request_dedup WHERE actor=? AND request_id=?\",args:[actor,requestId]});\n if (prior.rows.length) {\n const d:any = prior.rows[0];\n if (String(d.body_sha256)!==requestBodySha256) return c.json({error:\"IDEMPOTENCY_KEY_REUSE_MISMATCH\"},409);\n const m = await sqlite.execute({sql:\"SELECT id,lane,revision,payload_sha256,message_sha256 FROM messages WHERE id=?\",args:[String(d.message_id)]});\n if (m.rows.length) {\n const row:any=m.rows[0];\n const cp=await sha(canonical({lane:String(row.lane),revision:Number(row.revision),message_sha256:String(row.message_sha256)}));\n return c.json({accepted:true,idempotent:true,id:row.id,lane:row.lane,revision:row.revision,payload_sha256:row.payload_sha256,message_sha256:row.message_sha256,checkpoint_sha256:cp},200);\n }\n }\n }\n if (String(e).includes(\"STALE_REVISION\")) {\n const curState=await sqlite.execute({sql:\"SELECT revision FROM lane_state WHERE lane=?\",args:[lane]});\n return c.json({error:\"STALE_REVISION\",expected:Number(curState.rows[0]?.revision ?? 0),observed:base},409);\n }\n throw e;\n }\n const verify = await sqlite.execute({sql:\"SELECT revision,checkpoint_sha256 FROM lane_state WHERE lane=?\",args:[lane]});\n if (Number(verify.rows[0]?.revision) !== revision || String(verify.rows[0]?.checkpoint_sha256)!==checkpoint_sha256) return c.json({error:\"ATOMIC_ADVANCE_FAILED\"},409);\n await audit(\"MESSAGE_ACCEPTED\",actor,lane,id,message_sha256);\n return c.json({accepted:true,idempotent:false,id,lane,revision,payload_sha256,message_sha256,checkpoint_sha256},201);\n } catch (e) { return c.json({error:String(e?.message||e)},400); }\n});\n\napp.post(\"/v1/acks\", async (c) => {\n const auth = await authFrom(c.req.raw); if (!auth || (auth.role !== \"gpt\" && auth.role !== \"codex\")) return c.json({error:\"UNAUTHORIZED\"},401);\n const actor = auth.role;\n try {\n const b = await bodyJson(c); const id = String(b.message_id||\"\"); const msgSha = String(b.message_sha256||\"\");\n const rs = await sqlite.execute({sql:\"SELECT * FROM messages WHERE id=?\",args:[id]}); const m:any = rs.rows[0];\n if (!m) return c.json({error:\"NOT_FOUND\"},404);\n if (!laneAuthorized(auth,String(m.lane))) return c.json({error:\"DEVICE_TOKEN_SCOPE_VIOLATION\"},403);\n if (String(m.recipient)!==actor) return c.json({error:\"WRONG_RECIPIENT\"},403);\n if (String(m.message_sha256)!==msgSha) return c.json({error:\"HASH_MISMATCH\"},409);\n const prior = await sqlite.execute({sql:\"SELECT id FROM acknowledgements WHERE target_message_id=?\",args:[id]});\n if (prior.rows.length) return c.json({acked:true,idempotent:true,message_id:id});\n const ackId = crypto.randomUUID(), created_at = new Date().toISOString();\n const results:any = await sqlite.batch([\n {sql:\"INSERT OR IGNORE INTO acknowledgements(id,actor,target_message_id,target_message_sha256,created_at) VALUES(?,?,?,?,?)\",args:[ackId,actor,id,msgSha,created_at]},\n {sql:\"UPDATE messages SET acked_at=COALESCE(acked_at,?) WHERE id=?\",args:[created_at,id]}\n ]);\n const inserted = Number(results?.[0]?.rowsAffected ?? 0) > 0;\n if (inserted) await audit(\"MESSAGE_ACKED\",actor,String(m.lane),id,msgSha);\n return c.json({acked:true,idempotent:!inserted,message_id:id});\n } catch (e) { return c.json({error:String(e?.message||e)},400); }\n});\n\napp.get(\"/v1/acceptance/:lane\", async (c) => {\n const role = await roleFrom(c.req.raw);\n if (role !== \"gpt\" && role !== \"admin\") return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n const lane = c.req.param(\"lane\");\n if (lane === \"CODEX_REAL_RUNTIME_ACCEPTANCE_V1\") return c.json({\n lane,state:\"SUPERSEDED_BY_CODEX_REAL_RUNTIME_ACCEPTANCE_V2\",\n mechanical_checks_passed:false,production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n if (lane !== \"CODEX_REAL_RUNTIME_ACCEPTANCE_V2\") return c.json({error:\"UNSUPPORTED_ACCEPTANCE_LANE\"},404,{\"Cache-Control\":\"no-store\"});\n const challenges = await sqlite.execute({sql:`SELECT id,revision,payload_json,message_sha256,created_at,acked_at\n FROM messages WHERE lane=? AND actor='gpt' AND recipient='codex' ORDER BY revision ASC`,args:[lane]});\n if (challenges.rows.length !== 1) return c.json({\n lane,state:challenges.rows.length ? \"AMBIGUOUS_CHALLENGE_SET\" : \"CHALLENGE_NOT_PROVEN\",\n challenge_count:challenges.rows.length,mechanical_checks_passed:false,production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n const challenge:any = challenges.rows[0];\n let cp:any;\n try { cp = JSON.parse(String(challenge.payload_json)); } catch { cp = null; }\n const required = [\n \"consume_this_exact_message\",\"ack_exact_message_id_and_message_sha256\",\n \"execute_actual_codex_cli_read_only_ephemeral\",\"publish_reverse_response_with_same_challenge_nonce\",\n \"include_local_plugin_manifest_sha256\",\"include_local_runtime_receipt_sha256\",\n \"include_codex_runtime_nonce\",\"include_codex_last_message_sha256\",\"include_codex_exec_events_sha256\",\n \"do_not_include_secrets\",\"preserve_fail_closed_project_gates\",\"production_go_false\"\n ];\n const declared = Array.isArray(cp?.acceptance_requirements) ? cp.acceptance_requirements.map(String) : [];\n const deadline = String(cp?.acceptance_not_after_utc || \"\");\n const deadlineMs = Date.parse(deadline);\n const execContract:any = cp?.required_codex_execution || {};\n const contractOk = cp?.kind === \"runtime_acceptance_challenge_v2\"\n && typeof cp?.challenge_nonce === \"string\" && cp.challenge_nonce.length >= 32\n && Number.isFinite(deadlineMs)\n && cp?.canonical_release === \"GPT_CODEX_CONTEXT_BRIDGE_V1_6\"\n && cp?.canonical_release_sha256 === \"cdbbb59d96a4a45d943f6d14a610e3cdbf451cc9480ed9300a170f60bef39e0b\"\n && cp?.canonical_skill_sha256 === \"152dee3cf1bf86e81539e3f334f74d8bf630937d516b0a88a60463c9f0feb068\"\n && cp?.expected_plugin_name === \"rumbo-gpt-codex-continuity\"\n && cp?.expected_plugin_version === \"1.1.0\"\n && execContract?.mode === \"codex exec\"\n && execContract?.ephemeral === true\n && execContract?.sandbox === \"read-only\"\n && execContract?.skip_git_repo_check === true\n && execContract?.dangerous_bypass_forbidden === true\n && execContract?.user_config_preserved === true\n && required.every(x => declared.includes(x));\n const evidence:any = {\n challenge_message_id:String(challenge.id),\n challenge_message_sha256:String(challenge.message_sha256),\n challenge_revision:Number(challenge.revision)\n };\n if (!contractOk) return c.json({lane,state:\"CHALLENGE_CONTRACT_MISMATCH\",mechanical_checks_passed:false,evidence,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n\n const codexAck = await sqlite.execute({sql:`SELECT id,created_at FROM acknowledgements\n WHERE actor='codex' AND target_message_id=? AND target_message_sha256=? LIMIT 1`,\n args:[String(challenge.id),String(challenge.message_sha256)]});\n if (!codexAck.rows.length) {\n const expired = Date.now() > deadlineMs;\n return c.json({\n lane,state:expired ? \"CHALLENGE_EXPIRED_NO_CODEX_ACK\" : \"PENDING_CODEX_ACK\",\n mechanical_checks_passed:false,evidence:{...evidence,acceptance_not_after_utc:deadline},production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n }\n const codexAckAt = Date.parse(String((codexAck.rows[0] as any).created_at || \"\"));\n if (!Number.isFinite(codexAckAt) || codexAckAt > deadlineMs) {\n return c.json({\n lane,state:\"CODEX_ACK_AFTER_DEADLINE\",mechanical_checks_passed:false,\n evidence:{...evidence,codex_ack_id:String((codexAck.rows[0] as any).id),acceptance_not_after_utc:deadline},\n production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n }\n\n const reverse = await sqlite.execute({sql:`SELECT id,revision,payload_json,message_sha256,created_at,acked_at\n FROM messages WHERE lane=? AND actor='codex' AND recipient='gpt' AND revision>? ORDER BY revision ASC`,\n args:[lane,Number(challenge.revision)]});\n if (!reverse.rows.length) return c.json({lane,state:\"PENDING_CODEX_RESPONSE\",mechanical_checks_passed:false,evidence:{...evidence,codex_ack_id:String((codexAck.rows[0] as any).id)},production_go:false},200,{\"Cache-Control\":\"no-store\"});\n if (reverse.rows.length !== 1) return c.json({lane,state:\"AMBIGUOUS_MULTIPLE_CODEX_RESPONSES\",response_count:reverse.rows.length,mechanical_checks_passed:false,evidence,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n\n const response:any = reverse.rows[0];\n let rp:any;\n try { rp = JSON.parse(String(response.payload_json)); } catch { rp = null; }\n const responseCreatedAt = Date.parse(String(response.created_at || \"\"));\n const codexExecution:any = rp?.codex_execution || {};\n const checks = {\n response_before_deadline:Number.isFinite(responseCreatedAt) && responseCreatedAt <= deadlineMs,\n response_kind:rp?.kind === \"runtime_acceptance_response_v2\",\n challenge_nonce_exact:typeof rp?.challenge_nonce === \"string\" && rp.challenge_nonce === cp.challenge_nonce,\n challenge_message_id_exact:rp?.challenge_message_id === String(challenge.id),\n challenge_message_sha256_exact:rp?.challenge_message_sha256 === String(challenge.message_sha256),\n canonical_release_exact:rp?.canonical_release === \"GPT_CODEX_CONTEXT_BRIDGE_V1_6\",\n canonical_release_sha256_exact:rp?.canonical_release_sha256 === \"cdbbb59d96a4a45d943f6d14a610e3cdbf451cc9480ed9300a170f60bef39e0b\",\n canonical_skill_sha256_exact:rp?.canonical_skill_sha256 === \"152dee3cf1bf86e81539e3f334f74d8bf630937d516b0a88a60463c9f0feb068\",\n plugin_name_exact:rp?.plugin_name === \"rumbo-gpt-codex-continuity\",\n plugin_version_exact:rp?.plugin_version === \"1.1.0\",\n local_plugin_manifest_sha256_exact:rp?.local_plugin_manifest_sha256 === \"fa1cd2699d74981f02fe695a973495b1bf8fe7f43b5c8a0168b526e71622e580\",\n local_runtime_receipt_sha256:validSha256(rp?.local_runtime_receipt_sha256),\n bootstrap_script_sha256_exact:rp?.bootstrap_script_sha256 === \"1b9aa25d8141fbcc01312a34860f0e4bd33d4f03443706452127638697bfe4d4\",\n codex_cli_version:typeof rp?.codex_cli_version === \"string\" && rp.codex_cli_version.length > 0 && rp.codex_cli_version.length <= 300,\n codex_runtime_nonce:typeof rp?.codex_runtime_nonce === \"string\" && /^[a-f0-9]{64}$/.test(rp.codex_runtime_nonce),\n codex_last_message_sha256:validSha256(rp?.codex_last_message_sha256),\n codex_exec_events_sha256:validSha256(rp?.codex_exec_events_sha256),\n codex_tool_probe_verified:rp?.codex_tool_probe_verified === true,\n codex_tool_probe_sha256:validSha256(rp?.codex_tool_probe_sha256),\n codex_skill_md_sha256_exact:rp?.codex_skill_md_sha256 === \"224197fb56be75ae395fb2e4e2eb48f3bd64d1e187df5799fd6d661e4d1ec09f\",\n codex_command_execution_count:Number.isSafeInteger(rp?.codex_command_execution_count) && rp.codex_command_execution_count >= 1,\n codex_prohibited_items_seen:rp?.codex_prohibited_items_seen === false,\n codex_exec_exit_code:rp?.codex_exec_exit_code === 0,\n codex_output_bindings_exact:rp?.codex_output_bindings_exact === true,\n codex_exec_mode:codexExecution?.mode === \"codex exec\",\n codex_exec_ephemeral:codexExecution?.ephemeral === true,\n codex_exec_sandbox:codexExecution?.sandbox === \"read-only\",\n codex_exec_dangerous_bypass:codexExecution?.dangerous_bypass_used === false,\n codex_exec_model_override:codexExecution?.model_override_used === false,\n codex_exec_skip_git_repo_check:codexExecution?.skip_git_repo_check === true,\n runtime_claim:rp?.runtime_claim === \"ACTUAL_CODEX_CLI_EXEC_READ_ONLY_EPHEMERAL\",\n fail_closed_project_gates_preserved:rp?.fail_closed_project_gates_preserved === true,\n secrets_exposed:rp?.secrets_exposed === false,\n production_go:rp?.production_go === false\n };\n const responseEvidence = {\n ...evidence,codex_ack_id:String((codexAck.rows[0] as any).id),\n codex_ack_created_at:String((codexAck.rows[0] as any).created_at || \"\"),\n acceptance_not_after_utc:deadline,\n codex_response_message_id:String(response.id),\n codex_response_message_sha256:String(response.message_sha256),\n codex_response_revision:Number(response.revision),\n codex_response_created_at:String(response.created_at || \"\"),\n checks\n };\n if (!Object.values(checks).every(Boolean)) return c.json({lane,state:\"INVALID_CODEX_RESPONSE\",mechanical_checks_passed:false,evidence:responseEvidence,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n\n const gptAck = await sqlite.execute({sql:`SELECT id,created_at FROM acknowledgements\n WHERE actor='gpt' AND target_message_id=? AND target_message_sha256=? LIMIT 1`,\n args:[String(response.id),String(response.message_sha256)]});\n if (!gptAck.rows.length) return c.json({\n lane,state:\"PENDING_CHATGPT_ACK\",mechanical_checks_passed:true,\n evidence:responseEvidence,manual_semantic_review_required:true,production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n\n return c.json({\n lane,state:\"PASS_RUNTIME_ROUNDTRIP\",mechanical_checks_passed:true,\n evidence:{...responseEvidence,gpt_ack_id:String((gptAck.rows[0] as any).id)},\n claim_boundary:\"Continuity transport/runtime binding only; no project production authorization.\",\n production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.post(\"/v1/guard/authorize\", async (c) => {\n if (!guardAuthorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const binding = parseGuardBinding(b);\n if (!binding) return c.json({error:\"INVALID_GUARD_BINDING\"},400,{\"Cache-Control\":\"no-store\"});\n if (binding.action === \"MERGE_PR\" && Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") !== \"true\") {\n return c.json({error:\"MERGE_AUTHORIZATION_DISABLED\",production_go:false},423,{\"Cache-Control\":\"no-store\"});\n }\n const ttl = b.ttl_seconds === undefined ? 300 : Number(b.ttl_seconds);\n if (!Number.isSafeInteger(ttl) || ttl < 60 || ttl > R2_GUARD_MAX_TTL_SECONDS) {\n return c.json({error:\"INVALID_TTL\",min_seconds:60,max_seconds:R2_GUARD_MAX_TTL_SECONDS},400,{\"Cache-Control\":\"no-store\"});\n }\n const requestSha256 = await sha(canonical(binding));\n const prior = await sqlite.execute({\n sql:\"SELECT authorization_id,status,expires_at FROM guard_authorizations WHERE request_sha256=? LIMIT 1\",\n args:[requestSha256]\n });\n if (prior.rows.length) {\n const row:any = prior.rows[0];\n return c.json({\n error:\"AUTHORIZATION_ALREADY_EXISTS\",\n authorization_id:row.authorization_id,\n status:row.status,\n expires_at:row.expires_at,\n request_sha256:requestSha256\n },409,{\"Cache-Control\":\"no-store\"});\n }\n\n const rawToken = randomOneTimeToken();\n const tokenSha256 = await sha(rawToken);\n const authorizationId = crypto.randomUUID();\n const issuedAt = new Date();\n const issuedAtIso = issuedAt.toISOString();\n const expiresAt = new Date(issuedAt.getTime() + ttl * 1000).toISOString();\n try {\n await sqlite.execute({\n sql:`INSERT INTO guard_authorizations(\n authorization_id,action,repository_identity_sha256,pr_number,base_sha,head_sha,\n package_sha256,evidence_sha256,request_sha256,token_sha256,status,issued_at,expires_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?, 'ISSUED', ?,?)`,\n args:[\n authorizationId,binding.action,binding.repository_identity_sha256,binding.pr_number,\n binding.base_sha,binding.head_sha,binding.package_sha256,binding.evidence_sha256,\n requestSha256,tokenSha256,issuedAtIso,expiresAt\n ]\n });\n } catch (e) {\n if (String(e).includes(\"UNIQUE\")) return c.json({error:\"AUTHORIZATION_COLLISION\"},409,{\"Cache-Control\":\"no-store\"});\n throw e;\n }\n\n try {\n await audit(\"GUARD_AUTHORIZATION_ISSUED\",\"guard\",null,authorizationId,requestSha256);\n } catch (e) {\n await sqlite.execute({sql:\"UPDATE guard_authorizations SET status='REVOKED' WHERE authorization_id=? AND status='ISSUED'\",args:[authorizationId]});\n throw e;\n }\n\n return c.json({\n authorized:true,\n authorization_id:authorizationId,\n action:binding.action,\n request_sha256:requestSha256,\n token:rawToken,\n token_type:\"One-Time\",\n issued_at:issuedAtIso,\n expires_at:expiresAt,\n production_go:false,\n merge_authorized:binding.action === \"MERGE_PR\",\n note:\"The raw one-time token is returned only on issuance; only its SHA-256 is persisted.\"\n },201,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/guard/consume\", async (c) => {\n if (!guardAuthorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const binding = parseGuardBinding(b);\n if (!binding) return c.json({error:\"INVALID_GUARD_BINDING\"},400,{\"Cache-Control\":\"no-store\"});\n if (binding.action === \"MERGE_PR\" && Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") !== \"true\") {\n return c.json({error:\"MERGE_AUTHORIZATION_DISABLED\",production_go:false},423,{\"Cache-Control\":\"no-store\"});\n }\n const authorizationId = String(b.authorization_id || \"\");\n const rawToken = String(b.token || \"\");\n if (!authorizationId || !/^[A-Za-z0-9_-]{43,128}$/.test(rawToken)) {\n return c.json({error:\"INVALID_CONSUMPTION_REQUEST\"},400,{\"Cache-Control\":\"no-store\"});\n }\n const requestSha256 = await sha(canonical(binding));\n const rs = await sqlite.execute({sql:\"SELECT * FROM guard_authorizations WHERE authorization_id=? LIMIT 1\",args:[authorizationId]});\n if (!rs.rows.length) return c.json({error:\"AUTHORIZATION_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n\n if (String(row.status) === \"ISSUED\" && Date.parse(String(row.expires_at)) <= Date.now()) {\n await sqlite.execute({sql:\"UPDATE guard_authorizations SET status='EXPIRED' WHERE authorization_id=? AND status='ISSUED'\",args:[authorizationId]});\n await audit(\"GUARD_AUTHORIZATION_EXPIRED\",\"guard\",null,authorizationId,String(row.request_sha256));\n return c.json({error:\"AUTHORIZATION_EXPIRED\",authorization_id:authorizationId},410,{\"Cache-Control\":\"no-store\"});\n }\n if (String(row.status) !== \"ISSUED\") {\n return c.json({error:\"AUTHORIZATION_NOT_ISSUED\",authorization_id:authorizationId,status:row.status},409,{\"Cache-Control\":\"no-store\"});\n }\n if (!constantTimeEqual(String(row.request_sha256), requestSha256)) {\n return c.json({error:\"BINDING_MISMATCH\"},409,{\"Cache-Control\":\"no-store\"});\n }\n const observedTokenSha256 = await sha(rawToken);\n if (!constantTimeEqual(String(row.token_sha256), observedTokenSha256)) {\n return c.json({error:\"TOKEN_MISMATCH\"},403,{\"Cache-Control\":\"no-store\"});\n }\n\n const consumedAt = new Date().toISOString();\n const consumer = String(b.consumer || \"unspecified\").slice(0,128);\n if (!/^[A-Za-z0-9_.:-]{1,128}$/.test(consumer)) {\n return c.json({error:\"INVALID_CONSUMER\"},400,{\"Cache-Control\":\"no-store\"});\n }\n const updated:any = await sqlite.execute({\n sql:\"UPDATE guard_authorizations SET status='CONSUMED',consumed_at=?,consumer=? WHERE authorization_id=? AND status='ISSUED' AND consumed_at IS NULL\",\n args:[consumedAt,consumer,authorizationId]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) {\n return c.json({error:\"AUTHORIZATION_RACE_LOST\",authorization_id:authorizationId},409,{\"Cache-Control\":\"no-store\"});\n }\n\n const receipt = {\n schema:\"rumbo-r2-guard-consumption/v1\",\n authorization_id:authorizationId,\n action:binding.action,\n repository_identity_sha256:binding.repository_identity_sha256,\n pr_number:binding.pr_number,\n base_sha:binding.base_sha,\n head_sha:binding.head_sha,\n package_sha256:binding.package_sha256,\n evidence_sha256:binding.evidence_sha256,\n request_sha256:requestSha256,\n consumed_at:consumedAt,\n consumer,\n production_go:false,\n merge_authorized:binding.action === \"MERGE_PR\"\n };\n const receiptSha256 = await sha(canonical(receipt));\n await audit(\"GUARD_AUTHORIZATION_CONSUMED\",\"guard\",null,authorizationId,receiptSha256);\n return c.json({...receipt,consumed:true,receipt_sha256:receiptSha256},200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/guard/revoke\", async (c) => {\n if (!guardAuthorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const authorizationId = String(b.authorization_id || \"\");\n if (!authorizationId) return c.json({error:\"INVALID_AUTHORIZATION_ID\"},400,{\"Cache-Control\":\"no-store\"});\n const rs = await sqlite.execute({sql:\"SELECT status,request_sha256,expires_at FROM guard_authorizations WHERE authorization_id=? LIMIT 1\",args:[authorizationId]});\n if (!rs.rows.length) return c.json({error:\"AUTHORIZATION_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n if (String(row.status) === \"ISSUED\" && Date.parse(String(row.expires_at)) <= Date.now()) {\n const expired:any = await sqlite.execute({\n sql:\"UPDATE guard_authorizations SET status='EXPIRED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorizationId]\n });\n if (Number(expired?.rowsAffected ?? 0) === 1) {\n await audit(\"GUARD_AUTHORIZATION_EXPIRED\",\"guard\",null,authorizationId,String(row.request_sha256));\n }\n return c.json({error:\"AUTHORIZATION_EXPIRED\",authorization_id:authorizationId},410,{\"Cache-Control\":\"no-store\"});\n }\n if (String(row.status) !== \"ISSUED\") {\n return c.json({error:\"AUTHORIZATION_NOT_ISSUED\",status:row.status},409,{\"Cache-Control\":\"no-store\"});\n }\n const updated:any = await sqlite.execute({\n sql:\"UPDATE guard_authorizations SET status='REVOKED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorizationId]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) return c.json({error:\"AUTHORIZATION_RACE_LOST\"},409,{\"Cache-Control\":\"no-store\"});\n await audit(\"GUARD_AUTHORIZATION_REVOKED\",\"guard\",null,authorizationId,String(row.request_sha256));\n return c.json({revoked:true,authorization_id:authorizationId,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.get(\"/v1/guard/authorizations/:id\", async (c) => {\n if (!guardAuthorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n const authorizationId = c.req.param(\"id\");\n const now = new Date().toISOString();\n const rs = await sqlite.execute({\n sql:`SELECT authorization_id,action,repository_identity_sha256,pr_number,base_sha,head_sha,\n package_sha256,evidence_sha256,request_sha256,status,\n CASE WHEN status='ISSUED' AND expires_at<=? THEN 'EXPIRED' ELSE status END AS effective_status,\n issued_at,expires_at,consumed_at,consumer\n FROM guard_authorizations WHERE authorization_id=? LIMIT 1`,\n args:[now,authorizationId]\n });\n if (!rs.rows.length) return c.json({error:\"AUTHORIZATION_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n return c.json({authorization:rs.rows[0],production_go:false},200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.get(\"/v1/guard/ledger\", async (c) => {\n if (!guardAuthorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n const rawLimit = Number(c.req.query(\"limit\") || \"50\");\n const limit = Number.isSafeInteger(rawLimit) ? Math.max(1,Math.min(100,rawLimit)) : 50;\n const now = new Date().toISOString();\n const rs = await sqlite.execute({\n sql:`SELECT authorization_id,action,repository_identity_sha256,pr_number,base_sha,head_sha,\n package_sha256,evidence_sha256,request_sha256,status,\n CASE WHEN status='ISSUED' AND expires_at<=? THEN 'EXPIRED' ELSE status END AS effective_status,\n issued_at,expires_at,consumed_at,consumer\n FROM guard_authorizations ORDER BY issued_at DESC LIMIT ?`,\n args:[now,limit]\n });\n return c.json({\n schema:\"rumbo-r2-guard-ledger/v1\",\n external_authorizer_live:true,\n durable_one_time_token_ledger:true,\n merge_authorization_enabled:Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") === \"true\",\n production_go:false,\n records:rs.rows\n },200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.get(\"/v1/audit\", async (c) => {\n const role = await roleFrom(c.req.raw); if (role !== \"admin\") return c.json({error:\"UNAUTHORIZED\"},401);\n const rs = await sqlite.execute(\"SELECT * FROM audit_events ORDER BY seq ASC\");\n let prev=\"0\".repeat(64), ok=true;\n for (const r of rs.rows as any[]) {\n const ev={event_type:r.event_type,actor:r.actor,lane:r.lane,object_id:r.object_id,object_sha256:r.object_sha256,prev_event_sha256:r.prev_event_sha256,created_at:r.created_at};\n const h=await sha(canonical(ev)); if (r.prev_event_sha256!==prev || r.event_sha256!==h) ok=false; prev=String(r.event_sha256);\n }\n return c.json({audit_chain_ok:ok,count:rs.rows.length,tail_sha256:prev,events:rs.rows});\n});\n\napp.post(\"/v1/pair/codex/device/start\", async (c) => {\n try {\n const b = await bodyJson(c);\n const rawLabel = String(b.client_label || \"\").slice(0,128);\n const clientLabel = rawLabel.replace(/[^\\x20-\\x7E]/g, \"?\");\n const ip = c.req.header(\"cf-connecting-ip\") || (c.req.header(\"x-forwarded-for\") || \"\").split(\",\")[0].trim() || \"unknown\";\n const ua = c.req.header(\"user-agent\") || \"unknown\";\n const fingerprint = await sha(ip + \"|\" + ua);\n const now = new Date();\n const nowIso = now.toISOString();\n await sqlite.execute({\n sql:\"DELETE FROM device_pairing_sessions WHERE approved_at IS NULL AND expires_at<=?\",\n args:[nowIso]\n });\n const perClient = await sqlite.execute({\n sql:\"SELECT COUNT(*) AS n FROM device_pairing_sessions WHERE client_fingerprint_sha256=? AND approved_at IS NULL AND expires_at>?\",\n args:[fingerprint,nowIso]\n });\n const globalPending = await sqlite.execute({\n sql:\"SELECT COUNT(*) AS n FROM device_pairing_sessions WHERE approved_at IS NULL AND expires_at>?\",\n args:[nowIso]\n });\n if (Number((perClient.rows[0] as any)?.n || 0) >= DEVICE_PAIRING_MAX_PENDING_PER_FINGERPRINT) {\n return c.json({error:\"DEVICE_PAIRING_RATE_LIMITED\",scope:\"client\",production_go:false},429,{\"Cache-Control\":\"no-store\"});\n }\n if (Number((globalPending.rows[0] as any)?.n || 0) >= DEVICE_PAIRING_MAX_PENDING_GLOBAL) {\n return c.json({error:\"DEVICE_PAIRING_CAPACITY_REACHED\",production_go:false},503,{\"Cache-Control\":\"no-store\"});\n }\n\n for (let attempt=0; attempt<8; attempt++) {\n const pairingId = crypto.randomUUID();\n const deviceCode = randomOneTimeToken(32);\n const userCodeRaw = randomUserCode(8);\n const userCode = userCodeRaw.slice(0,4) + \"-\" + userCodeRaw.slice(4);\n const deviceSha = await sha(deviceCode);\n const userSha = await sha(userCodeRaw);\n const expiresAt = new Date(now.getTime()+DEVICE_PAIRING_TTL_MS).toISOString();\n try {\n await sqlite.execute({\n sql:`INSERT INTO device_pairing_sessions(\n pairing_id,device_code_sha256,user_code_sha256,client_fingerprint_sha256,client_label,issued_at,expires_at\n ) VALUES(?,?,?,?,?,?,?)`,\n args:[pairingId,deviceSha,userSha,fingerprint,clientLabel,nowIso,expiresAt]\n });\n return c.json({\n schema:\"rumbo-codex-device-pairing/v1\",\n pairing_id:pairingId,\n device_code:deviceCode,\n user_code:userCode,\n expires_at:expiresAt,\n expires_in_seconds:Math.floor(DEVICE_PAIRING_TTL_MS/1000),\n poll_after_seconds:2,\n poll_path:\"/v1/pair/codex/device/poll\",\n approval_instruction:\"Paste user_code into the authorized RUMBO/ChatGPT continuity conversation. Never share device_code.\",\n production_go:false\n },201,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n if (!String(e).includes(\"UNIQUE\")) throw e;\n }\n }\n return c.json({error:\"DEVICE_PAIRING_COLLISION_RETRY_EXHAUSTED\",production_go:false},503,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/pair/codex/device/approve\", async (c) => {\n const actor = await roleFrom(c.req.raw);\n if (actor !== \"gpt\" && actor !== \"admin\") return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const normalized = normalizeUserCode(b.user_code);\n if (normalized.length !== 8 || [...normalized].some(ch => !DEVICE_USER_CODE_ALPHABET.includes(ch))) {\n return c.json({error:\"INVALID_USER_CODE\"},400,{\"Cache-Control\":\"no-store\"});\n }\n const userSha = await sha(normalized);\n const rs = await sqlite.execute({\n sql:\"SELECT pairing_id,device_code_sha256,expires_at,approved_at,approved_by FROM device_pairing_sessions WHERE user_code_sha256=? LIMIT 1\",\n args:[userSha]\n });\n if (!rs.rows.length) return c.json({error:\"DEVICE_PAIRING_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n const nowIso = new Date().toISOString();\n if (String(row.expires_at) <= nowIso) return c.json({error:\"DEVICE_PAIRING_EXPIRED\"},410,{\"Cache-Control\":\"no-store\"});\n if (row.approved_at) {\n return c.json({approved:true,idempotent:true,pairing_id:row.pairing_id,expires_at:row.expires_at,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n }\n const updated:any = await sqlite.execute({\n sql:\"UPDATE device_pairing_sessions SET approved_at=?,approved_by=? WHERE pairing_id=? AND approved_at IS NULL AND expires_at>?\",\n args:[nowIso,actor,String(row.pairing_id),nowIso]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) {\n return c.json({error:\"DEVICE_PAIRING_APPROVAL_RACE_LOST\"},409,{\"Cache-Control\":\"no-store\"});\n }\n try {\n await audit(\"CODEX_DEVICE_PAIRING_APPROVED\",actor,null,String(row.pairing_id),String(row.device_code_sha256));\n } catch (e) {\n await sqlite.execute({\n sql:\"UPDATE device_pairing_sessions SET approved_at=NULL,approved_by=NULL WHERE pairing_id=? AND approved_at=? AND delivered_at IS NULL\",\n args:[String(row.pairing_id),nowIso]\n });\n throw e;\n }\n return c.json({\n approved:true,idempotent:false,pairing_id:row.pairing_id,expires_at:row.expires_at,\n next:\"The local device may continue polling. Approval does not itself issue an acceptance ACK.\",\n production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/pair/codex/device/revoke\", async (c) => {\n const actor = await roleFrom(c.req.raw);\n if (actor !== \"gpt\" && actor !== \"admin\") return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const pairingId = String(b.pairing_id || \"\");\n if (!/^[0-9a-f-]{36}$/.test(pairingId)) return c.json({error:\"INVALID_PAIRING_ID\"},400,{\"Cache-Control\":\"no-store\"});\n const rs = await sqlite.execute({\n sql:\"SELECT token_sha256,revoked_at,expires_at FROM device_access_tokens WHERE pairing_id=? LIMIT 1\",\n args:[pairingId]\n });\n if (!rs.rows.length) return c.json({error:\"DEVICE_ACCESS_TOKEN_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n if (row.revoked_at) return c.json({revoked:true,idempotent:true,pairing_id:pairingId,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n const revokedAt = new Date().toISOString();\n const updated:any = await sqlite.execute({\n sql:\"UPDATE device_access_tokens SET revoked_at=? WHERE pairing_id=? AND revoked_at IS NULL\",\n args:[revokedAt,pairingId]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) return c.json({error:\"DEVICE_ACCESS_TOKEN_REVOKE_RACE_LOST\"},409,{\"Cache-Control\":\"no-store\"});\n await audit(\"CODEX_DEVICE_ACCESS_TOKEN_REVOKED\",actor,DEVICE_ACCESS_LANE,pairingId,String(row.token_sha256));\n return c.json({revoked:true,idempotent:false,pairing_id:pairingId,revoked_at:revokedAt,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/pair/codex/device/poll\", async (c) => {\n try {\n const b = await bodyJson(c);\n const deviceCode = String(b.device_code || \"\");\n if (!/^[A-Za-z0-9_-]{43}$/.test(deviceCode)) return c.json({error:\"INVALID_DEVICE_CODE\"},400,{\"Cache-Control\":\"no-store\"});\n const deviceSha = await sha(deviceCode);\n const rs = await sqlite.execute({\n sql:\"SELECT pairing_id,device_code_sha256,expires_at,approved_at,approved_by,delivered_at,client_label FROM device_pairing_sessions WHERE device_code_sha256=? LIMIT 1\",\n args:[deviceSha]\n });\n if (!rs.rows.length) return c.json({error:\"DEVICE_PAIRING_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const d:any = rs.rows[0];\n const now = new Date();\n const nowIso = now.toISOString();\n if (String(d.expires_at) <= nowIso) return c.json({error:\"DEVICE_PAIRING_EXPIRED\"},410,{\"Cache-Control\":\"no-store\"});\n if (!d.approved_at) return c.json({authorized:false,status:\"PENDING_APPROVAL\",retry_after_seconds:2,production_go:false},202,{\"Cache-Control\":\"no-store\"});\n\n const pairingId = String(d.pairing_id);\n const accessToken = await deriveDeviceAccessToken(pairingId,deviceSha);\n const tokenSha = await sha(accessToken);\n const accessExpiresAt = new Date(now.getTime()+DEVICE_ACCESS_TOKEN_TTL_MS).toISOString();\n const existing = await sqlite.execute({\n sql:\"SELECT token_sha256,lane_scope,expires_at,revoked_at FROM device_access_tokens WHERE pairing_id=? LIMIT 1\",\n args:[pairingId]\n });\n let tokenDelivery = \"REDELIVERED_ACTIVE\";\n if (!existing.rows.length) {\n await sqlite.execute({\n sql:\"INSERT INTO device_access_tokens(token_sha256,pairing_id,lane_scope,issued_at,expires_at) VALUES(?,?,?,?,?)\",\n args:[tokenSha,pairingId,DEVICE_ACCESS_LANE,nowIso,accessExpiresAt]\n });\n await audit(\"CODEX_DEVICE_ACCESS_TOKEN_ISSUED\",\"codex\",DEVICE_ACCESS_LANE,pairingId,tokenSha);\n tokenDelivery = \"ISSUED_NEW\";\n } else {\n const row:any = existing.rows[0];\n if (String(row.token_sha256)!==tokenSha || String(row.lane_scope)!==DEVICE_ACCESS_LANE) return c.json({error:\"DEVICE_ACCESS_TOKEN_BINDING_MISMATCH\",production_go:false},409,{\"Cache-Control\":\"no-store\"});\n if (row.revoked_at) return c.json({error:\"DEVICE_ACCESS_TOKEN_REVOKED\",production_go:false},410,{\"Cache-Control\":\"no-store\"});\n if (String(row.expires_at) <= nowIso) {\n await sqlite.execute({\n sql:\"UPDATE device_access_tokens SET issued_at=?,expires_at=? WHERE pairing_id=? AND revoked_at IS NULL\",\n args:[nowIso,accessExpiresAt,pairingId]\n });\n tokenDelivery = \"REISSUED_EXPIRED\";\n }\n }\n\n if (!d.delivered_at) {\n const deliveredAt = new Date().toISOString();\n const updated:any = await sqlite.execute({\n sql:\"UPDATE device_pairing_sessions SET delivered_at=? WHERE pairing_id=? AND delivered_at IS NULL\",\n args:[deliveredAt,pairingId]\n });\n if (Number(updated?.rowsAffected ?? 0) === 1) await audit(\"CODEX_DEVICE_PAIRING_TOKEN_DELIVERED\",\"codex\",DEVICE_ACCESS_LANE,pairingId,tokenSha);\n }\n\n return c.json({\n schema:\"rumbo-codex-device-pairing/v2\",\n authorized:true,\n role:\"codex\",\n token_type:\"Bearer\",\n token:accessToken,\n pairing_id:pairingId,\n pairing_delivery:tokenDelivery,\n access_token_expires_at:accessExpiresAt,\n lane_scope:DEVICE_ACCESS_LANE,\n confirmed:true,\n relay_url:\"https://sebas1--01a04afcc88b766f9e893c0c81cf30bc.web.val.run\",\n skill_metadata_path:\"/v1/bootstrap/skill/metadata\",\n skill_download_path:\"/v1/bootstrap/skill\",\n production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/pair/codex\", async (c) => {\n return c.json({\n error:\"STATIC_PAIRING_DEPRECATED_USE_DEVICE_FLOW\",\n replacement_start_path:\"/v1/pair/codex/device/start\",\n replacement_poll_path:\"/v1/pair/codex/device/poll\",\n production_go:false\n },410,{\"Cache-Control\":\"no-store\"});\n});\n\napp.post(\"/v1/pair/codex/confirm\", async (c) => {\n return c.json({\n error:\"LEGACY_CONFIRM_DEPRECATED_DEVICE_TOKEN_IS_ALREADY_SCOPED\",\n production_go:false\n },410,{\"Cache-Control\":\"no-store\"});\n});\n\napp.get(\"/v1/bootstrap/codex-device/metadata\", (c) => {\n return c.json({\n schema:\"rumbo-codex-device-bootstrap/v2\",\n implementation_revision:\"R8-SCOPED-DEVICE-TOKENS\",\n launcher_path:\"/v1/bootstrap/codex-device.py\",\n launcher_sha256:\"0730c133a34e0af5a6f433db07f9128b09b1e8dbc684cb651b6a1a482e16c305\",\n launcher_bytes:14890,\n launcher_version:\"2.5\",\n python_minimum:\"3.11\",\n canonical_release:\"GPT_CODEX_CONTEXT_BRIDGE_V1_6\",\n canonical_release_sha256:\"cdbbb59d96a4a45d943f6d14a610e3cdbf451cc9480ed9300a170f60bef39e0b\",\n canonical_skill_sha256:\"152dee3cf1bf86e81539e3f334f74d8bf630937d516b0a88a60463c9f0feb068\",\n plugin_name:\"rumbo-gpt-codex-continuity\",\n plugin_version:\"1.1.0\",\n plugin_manifest_sha256:\"fa1cd2699d74981f02fe695a973495b1bf8fe7f43b5c8a0168b526e71622e580\",\n acceptance_lane:\"CODEX_REAL_RUNTIME_ACCEPTANCE_V2\",\n challenge_message_id:\"0d0f03ed-ba76-4607-acb8-e5f64ce40b61\",\n challenge_message_sha256:\"53bb04b8b2d01b5bea40ad5d02b8c9806c4f5f1d65ee108144995913b469238a\",\n acceptance_not_after_utc:\"2026-08-30T03:15:00Z\",\n security_boundary:{\n embedded_credentials:false,\n device_code_secret_delivered_only_after_gpt_or_admin_approval:true,\n per_device_scoped_bearer:true,\n shared_codex_bearer_accepted:false,\n device_token_lane_scope:DEVICE_ACCESS_LANE,\n device_token_ttl_seconds:Math.floor(DEVICE_ACCESS_TOKEN_TTL_MS/1000),\n actual_codex_exec_required:true,\n codex_exec_ephemeral:true,\n codex_exec_sandbox:\"read-only\",\n dangerous_bypass_forbidden:true,\n model_override_forbidden:true,\n exact_runtime_output_hashes_required:true,\n local_random_file_probe_required:true,\n completed_command_execution_required:true,\n command_output_must_bind_probe_manifest_and_skill_hashes:true,\n prohibited_item_types:[\"file_change\",\"web_search\",\"mcp_tool_call\"],\n skill_md_sha256:\"224197fb56be75ae395fb2e4e2eb48f3bd64d1e187df5799fd6d661e4d1ec09f\",\n final_chatgpt_ack_required:true,\n production_go:false\n },\n production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.get(\"/v1/bootstrap/codex-device.py\", async (c) => {\n const res = await blob.get(\"bootstrap/r7/codex_device_bootstrap_file_probe.py\");\n let text = await res.text();\n const sourceSha = await sha(text);\n if (sourceSha !== \"1b9aa25d8141fbcc01312a34860f0e4bd33d4f03443706452127638697bfe4d4\") {\n return c.json({error:\"BOOTSTRAP_SOURCE_HASH_MISMATCH\",production_go:false},500,{\"Cache-Control\":\"no-store\"});\n }\n function replaceExact(source:string,oldText:string,newText:string):string {\n if (!source.includes(oldText)) throw new Error(\"BOOTSTRAP_TRANSFORM_ANCHOR_MISSING\");\n return source.replace(oldText,newText);\n }\n text = text.replaceAll(\"R7-ACTUAL-CODEX-ATTESTATION\",\"R8-SCOPED-DEVICE-TOKENS\");\n text = replaceExact(text,\n '{\"client_label\":f\"codex-r7:{platform.node()[:48]}\"}',\n '{\"client_label\":f\"codex-r8:{platform.node()[:48]}\"}');\n text = replaceExact(text,\n 'print(\"\\\\nRUMBO DEVICE PAIRING R7\\\\nCódigo:\",s[\"user_code\"],\"\\\\nPegá ese código en el chat RUMBO/ChatGPT.\\\\n\")',\n 'print(\"\\\\nRUMBO DEVICE PAIRING R8\\\\nCódigo:\",s[\"user_code\"],\"\\\\nPegá ese código en el chat RUMBO/ChatGPT.\\\\n\")');\n text = replaceExact(text,\n ' if st==200 and p.get(\"authorized\"): return p[\"token\"],p',\n ' if st==200 and p.get(\"authorized\"):\\n if p.get(\"schema\")!=\"rumbo-codex-device-pairing/v2\": raise RuntimeError(\"unexpected device pairing schema\")\\n if p.get(\"confirmed\") is not True: raise RuntimeError(\"device token was not issued as confirmed\")\\n if p.get(\"lane_scope\")!=LANE: raise RuntimeError(\"device token lane scope mismatch\")\\n if not isinstance(p.get(\"access_token_expires_at\"),str): raise RuntimeError(\"device token expiry missing\")\\n token=p[\"token\"]\\n status,raw,_=C(\"GET\",\"/v1/state/DEVICE_TOKEN_NEGATIVE_SCOPE_PROBE\",token=token,ok=(403,))\\n err=json.loads(raw.decode())\\n if err.get(\"error\")!=\"DEVICE_TOKEN_SCOPE_VIOLATION\": raise RuntimeError(\"device token scope negative probe failed\")\\n return token,p');\n text = replaceExact(text,\n ' if not pairing.get(\"confirmed\"):\\n _,q=J(\"POST\",\"/v1/pair/codex/confirm\",{\"pairing_id\":\"codex-v4\"},token)\\n if not q.get(\"confirmed\"): raise RuntimeError(\"pairing confirm failed\")\\n',\n '');\n const observed = await sha(text);\n if (observed !== \"0730c133a34e0af5a6f433db07f9128b09b1e8dbc684cb651b6a1a482e16c305\") {\n return c.json({error:\"BOOTSTRAP_TRANSFORM_HASH_MISMATCH\",observed,production_go:false},500,{\"Cache-Control\":\"no-store\"});\n }\n return new Response(text,{\n status:200,\n headers:{\n \"Content-Type\":\"text/x-python; charset=utf-8\",\n \"Content-Disposition\":\"attachment; filename=codex_device_bootstrap_r8.py\",\n \"X-SHA256\":\"0730c133a34e0af5a6f433db07f9128b09b1e8dbc684cb651b6a1a482e16c305\",\n \"Cache-Control\":\"no-store\"\n }\n });\n});\n\napp.get(\"/v1/bootstrap/skill/metadata\", async (c) => {\n const role = await roleFrom(c.req.raw); if (!role) return c.json({error:\"UNAUTHORIZED\"},401);\n return c.json({\n release:\"GPT_CODEX_CONTEXT_BRIDGE_V1_6\",\n protocol:\"gpt-codex-context-bridge/v2\",\n skill_name:\"gpt-codex-context-bridge\",\n skill_zip_sha256:\"152dee3cf1bf86e81539e3f334f74d8bf630937d516b0a88a60463c9f0feb068\",\n encoding:\"binary/zip\",\n source_blob:\"bridge/v1.6/gpt-codex-context-bridge-skill.zip.b64\",\n claim_boundary:\"Skill bytes are canonical V1.6 bytes; installing/running them in the user's real Codex runtime remains a separate acceptance gate.\"\n });\n});\n\napp.get(\"/v1/bootstrap/skill\", async (c) => {\n const role = await roleFrom(c.req.raw); if (!role) return c.json({error:\"UNAUTHORIZED\"},401);\n const res = await blob.get(\"bridge/v1.6/gpt-codex-context-bridge-skill.zip.b64\");\n const b64 = await res.text();\n const raw = Uint8Array.from(atob(b64), ch => ch.charCodeAt(0));\n return new Response(raw, {\n status:200,\n headers:{\n \"Content-Type\":\"application/zip\",\n \"Content-Disposition\":\"attachment; filename=gpt-codex-context-bridge.zip\",\n \"X-SHA256\":\"152dee3cf1bf86e81539e3f334f74d8bf630937d516b0a88a60463c9f0feb068\",\n \"Cache-Control\":\"no-store\"\n }\n });\n});\n\napp.onError((err,c) => { console.error(err); return c.json({error:\"INTERNAL_ERROR\"},500); });\nexport default app.fetch;\n",[209],"69e725e0-3119-4073-b461-070b831fff5b","codex_device_bootstrap_r9_v4.py","58576a66-a35c-11f1-ae97-1607ee4eb77e",2,["D",1787975243955],"#!/usr/bin/env python3\nfrom __future__ import annotations\nimport calendar,hashlib,io,json,os,platform,re,secrets,shutil,subprocess,sys,tempfile,time,urllib.error,urllib.parse,urllib.request,zipfile\nfrom pathlib import Path\n\nBASE=\"https://sebas1--01a04afcc88b766f9e893c0c81cf30bc.web.val.run\"\nLANE=\"CODEX_REAL_RUNTIME_ACCEPTANCE_V3\"\nCID=\"303a5235-c328-4e8e-b0f6-a699b656df79\"\nCSHA=\"c9ad9641b690078d91f6eab6961d67f01a22e179ecaf5b27408cba629a840157\"\nRELEASE=\"GPT_CODEX_CONTEXT_BRIDGE_V1_6\"\nRELEASE_SHA=\"cdbbb59d96a4a45d943f6d14a610e3cdbf451cc9480ed9300a170f60bef39e0b\"\nSKILL_SHA=\"152dee3cf1bf86e81539e3f334f74d8bf630937d516b0a88a60463c9f0feb068\"\nPLUGIN=\"rumbo-gpt-codex-continuity\"\nVERSION=\"1.2.0\"\nMANIFEST_SHA=\"c0f12562dbee00f897b7f0d164b35845f7388ec996c19b371c0ccf6e0fb12d27\"\nDEADLINE=\"2026-08-30T03:15:00Z\"\nMANIFEST='{\"name\": \"rumbo-gpt-codex-continuity\", \"version\": \"1.2.0\", \"description\": \"RUMBO GPT-Codex continuity bridge with isolated real-runtime local-read attestation.\", \"author\": {\"name\": \"RUMBO\"}, \"skills\": \"./skills/\", \"interface\": {\"displayName\": \"RUMBO GPT-Codex Continuity\", \"shortDescription\": \"Durable evidence-bound GPT↔Codex continuity.\", \"longDescription\": \"Canonical GPT-Codex Context Bridge V1.6 plus isolated real-runtime local-read attestation.\", \"developerName\": \"RUMBO\", \"category\": \"Productivity\", \"capabilities\": [], \"defaultPrompt\": \"Use the GPT-Codex continuity bridge and preserve fail-closed project state.\"}}'\nSTATE=Path.home()/\".agents\"/\"rumbo\"/\"gpt-codex-continuity-v3\"\nRECEIPT=STATE/\"runtime-acceptance-receipt-v3.json\"\n\ndef H(b:bytes)->str: return hashlib.sha256(b).hexdigest()\ndef A(path:Path,b:bytes):\n path.parent.mkdir(parents=True,exist_ok=True)\n t=path.with_suffix(path.suffix+\".tmp\")\n t.write_bytes(b); os.replace(t,path)\n try: os.chmod(path,0o600)\n except OSError: pass\n\ndef R(cmd,**kw):\n return subprocess.run([str(x) for x in cmd],text=True,capture_output=True,**kw)\n\ndef C(method,path,body=None,token=None,ok=(200,)):\n headers={\"User-Agent\":\"rumbo-codex-bootstrap-r9/4.0\"}\n data=None if body is None else json.dumps(body,separators=(\",\",\":\")).encode()\n if data is not None: headers[\"Content-Type\"]=\"application/json\"\n if token: headers[\"Authorization\"]=\"Bearer \"+token\n req=urllib.request.Request(BASE+path,data=data,headers=headers,method=method)\n try:\n with urllib.request.urlopen(req,timeout=30) as x: status,raw=x.status,x.read()\n except urllib.error.HTTPError as e:\n status,raw=e.code,e.read()\n if status not in ok:\n raise RuntimeError(f\"{path} HTTP {status}: {raw[:600].decode(errors='replace')}\")\n return status,raw\n\ndef J(method,path,body=None,token=None,ok=(200,)):\n s,b=C(method,path,body,token,ok)\n return s,json.loads(b.decode())\n\ndef metadata_self_check():\n _,m=J(\"GET\",\"/v1/bootstrap/codex-device/metadata\")\n own=H(Path(__file__).read_bytes())\n if m.get(\"implementation_revision\")!=\"R9-SCOPED-ISOLATED-LOCAL-READ\":\n raise RuntimeError(\"unexpected relay revision\")\n if m.get(\"schema\")!=\"rumbo-codex-device-bootstrap/v3\":\n raise RuntimeError(\"unexpected metadata schema\")\n if m.get(\"acceptance_lane\")!=LANE or m.get(\"challenge_message_id\")!=CID or m.get(\"challenge_message_sha256\")!=CSHA:\n raise RuntimeError(\"acceptance metadata mismatch\")\n if m.get(\"launcher_sha256\")!=own:\n raise RuntimeError(\"bootstrap self-hash mismatch\")\n if m.get(\"plugin_manifest_sha256\")!=MANIFEST_SHA or m.get(\"plugin_version\")!=VERSION:\n raise RuntimeError(\"plugin metadata mismatch\")\n if m.get(\"acceptance_not_after_utc\")!=DEADLINE:\n raise RuntimeError(\"deadline metadata mismatch\")\n\ndef isolated_codex_env():\n codex=shutil.which(\"codex\")\n if not codex: raise RuntimeError(\"Codex CLI not found on PATH\")\n original=Path(os.environ.get(\"CODEX_HOME\") or (Path.home()/\".codex\")).expanduser()\n td=tempfile.TemporaryDirectory(prefix=\"rumbo-codex-home-r9-\")\n iso=Path(td.name)\n auth=original/\"auth.json\"\n if auth.is_file():\n shutil.copy2(auth,iso/\"auth.json\")\n try: os.chmod(iso/\"auth.json\",0o600)\n except OSError: pass\n env=os.environ.copy()\n for k in list(env):\n if k.startswith(\"CODEX_\"):\n env.pop(k,None)\n env[\"CODEX_HOME\"]=str(iso)\n gh=R([codex,\"--help\"],env=env,timeout=30)\n eh=R([codex,\"exec\",\"--help\"],env=env,timeout=30)\n gtxt=(gh.stdout or \"\")+(gh.stderr or \"\"); etxt=(eh.stdout or \"\")+(eh.stderr or \"\")\n if gh.returncode or eh.returncode or \"--ask-for-approval\" not in gtxt or \"--sandbox\" not in gtxt:\n td.cleanup(); raise RuntimeError(\"Codex global safety flags unavailable; no pairing started\")\n for flag in (\"--ignore-user-config\",\"--ignore-rules\",\"--ephemeral\",\"--output-schema\",\"--output-last-message\"):\n if flag not in etxt:\n td.cleanup(); raise RuntimeError(\"Codex exec safety capability missing: \"+flag)\n status=R([codex,\"login\",\"status\"],env=env,timeout=30)\n if status.returncode:\n td.cleanup()\n raise RuntimeError(\"isolated Codex auth unavailable; no pairing started\")\n return td,codex,env\n\ndef pair():\n _,s=J(\"POST\",\"/v1/pair/codex/device/start\",{\"client_label\":f\"codex-r9:{platform.node()[:48]}\",\"bootstrap_script_sha256\":H(Path(__file__).read_bytes()),\"acceptance_lane\":LANE,\"challenge_message_id\":CID,\"challenge_message_sha256\":CSHA},ok=(201,))\n print(\"\\nRUMBO DEVICE PAIRING R9\\nCódigo:\",s[\"user_code\"],\"\\nPegá ese código en el chat RUMBO/ChatGPT. No compartas device_code.\\n\")\n end=time.time()+int(s.get(\"expires_in_seconds\",900))\n while time.time()=calendar.timegm(time.strptime(DEADLINE,\"%Y-%m-%dT%H:%M:%SZ\")):\n raise RuntimeError(\"challenge expired\")\n for k,v in {\n \"canonical_release\":RELEASE,\n \"canonical_release_sha256\":RELEASE_SHA,\n \"canonical_skill_sha256\":SKILL_SHA,\n \"expected_plugin_name\":PLUGIN,\n \"expected_plugin_version\":VERSION\n }.items():\n if p.get(k)!=v: raise RuntimeError(\"challenge binding mismatch: \"+k)\n ex=p.get(\"required_codex_execution\") or {}\n must={\n \"mode\":\"codex exec\",\"ephemeral\":True,\"sandbox\":\"read-only\",\"ask_for_approval\":\"never\",\n \"skip_git_repo_check\":True,\"dangerous_bypass_forbidden\":True,\"model_override_forbidden\":True,\n \"isolated_codex_home\":True,\"user_config_inherited\":False,\"project_config_inherited\":False,\n \"local_read_challenge_required\":True,\"hidden_local_nonce_not_in_prompt\":True\n }\n if any(ex.get(k)!=v for k,v in must.items()): raise RuntimeError(\"execution contract mismatch\")\n return ch\n\ndef workdir(token):\n _,raw=C(\"GET\",\"/v1/bootstrap/skill\",token=token)\n if H(raw)!=SKILL_SHA: raise RuntimeError(\"skill hash mismatch\")\n td=tempfile.TemporaryDirectory(prefix=\"rumbo-codex-r9-work-\"); root=Path(td.name)\n with zipfile.ZipFile(io.BytesIO(raw)) as z:\n pre=\"gpt-codex-context-bridge/\"\n for n in z.namelist():\n if n.endswith(\"/\"): continue\n if not n.startswith(pre): raise RuntimeError(\"unexpected skill layout\")\n rel=Path(n[len(pre):])\n if rel.is_absolute() or \"..\" in rel.parts: raise RuntimeError(\"unsafe skill path\")\n d=root/\"skills\"/\"gpt-codex-context-bridge\"/rel\n d.parent.mkdir(parents=True,exist_ok=True); d.write_bytes(z.read(n))\n mp=root/\".codex-plugin\"/\"plugin.json\"\n A(mp,(json.dumps(json.loads(MANIFEST),ensure_ascii=False,indent=2)+\"\\n\").encode())\n if H(mp.read_bytes())!=MANIFEST_SHA: raise RuntimeError(\"manifest hash mismatch\")\n skill_md=root/\"skills\"/\"gpt-codex-context-bridge\"/\"SKILL.md\"\n if not skill_md.is_file(): raise RuntimeError(\"SKILL.md missing\")\n skill_md_sha=H(skill_md.read_bytes())\n probe=secrets.token_hex(32)\n probe_path=root/\"RUNTIME_PROBE.txt\"\n A(probe_path,(\"probe_nonce=\"+probe+\"\\n\").encode())\n return td,root,probe,H(probe_path.read_bytes()),skill_md_sha\n\ndef codex_run(codex,env,root,ch,probe,probe_file_sha,skill_md_sha):\n version=R([codex,\"--version\"],env=env,timeout=30)\n if version.returncode: raise RuntimeError(\"codex --version failed\")\n with tempfile.TemporaryDirectory(prefix=\"rumbo-codex-r9-out-\") as od:\n od=Path(od); schema_path=od/\"schema.json\"; last_path=od/\"last.json\"\n schema={\n \"type\":\"object\",\"additionalProperties\":False,\n \"required\":[\"task_completed\",\"challenge_nonce\",\"challenge_message_id\",\"challenge_message_sha256\",\n \"canonical_release\",\"canonical_release_sha256\",\"canonical_skill_sha256\",\n \"plugin_name\",\"plugin_version\",\"plugin_manifest_sha256\",\"skill_md_sha256\",\n \"probe_nonce\",\"runtime_nonce\",\"production_go\",\"secrets_exposed\"],\n \"properties\":{\n \"task_completed\":{\"type\":\"boolean\"},\"challenge_nonce\":{\"type\":\"string\"},\n \"challenge_message_id\":{\"type\":\"string\"},\"challenge_message_sha256\":{\"type\":\"string\"},\n \"canonical_release\":{\"type\":\"string\"},\"canonical_release_sha256\":{\"type\":\"string\"},\n \"canonical_skill_sha256\":{\"type\":\"string\"},\"plugin_name\":{\"type\":\"string\"},\n \"plugin_version\":{\"type\":\"string\"},\"plugin_manifest_sha256\":{\"type\":\"string\",\"pattern\":\"^[0-9a-f]{64}$\"},\n \"skill_md_sha256\":{\"type\":\"string\",\"pattern\":\"^[0-9a-f]{64}$\"},\n \"probe_nonce\":{\"type\":\"string\",\"pattern\":\"^[0-9a-f]{64}$\"},\n \"runtime_nonce\":{\"type\":\"string\",\"pattern\":\"^[0-9a-f]{64}$\"},\n \"production_go\":{\"type\":\"boolean\"},\"secrets_exposed\":{\"type\":\"boolean\"}\n }\n }\n schema_path.write_text(json.dumps(schema),encoding=\"utf-8\")\n cp=ch[\"payload\"]\n prompt=f\"\"\"REAL CODEX RUNTIME ACCEPTANCE V3 ONLY.\nDo not modify files, use web search, call MCP tools, or expose auth/secrets.\nUse a read-only LOCAL SHELL COMMAND that reads RUNTIME_PROBE.txt and computes SHA-256 for BOTH:\n- .codex-plugin/plugin.json\n- skills/gpt-codex-context-bridge/SKILL.md\nThe command must print the probe_nonce from RUNTIME_PROBE.txt plus both computed hashes.\nThe probe nonce and expected local file hashes are intentionally NOT present in this prompt.\nGenerate a separate fresh random 32-byte runtime nonce as 64 lowercase hex.\nReturn only JSON matching the supplied schema.\nRequired server bindings:\nchallenge_nonce={cp['challenge_nonce']}\nchallenge_message_id={CID}\nchallenge_message_sha256={CSHA}\ncanonical_release={RELEASE}\ncanonical_release_sha256={RELEASE_SHA}\ncanonical_skill_sha256={SKILL_SHA}\nproduction_go=false\nsecrets_exposed=false\ntask_completed=true\nIf any local read, command, or hash fails, set task_completed=false.\n\"\"\"\n cmd=[\n codex,\"--ask-for-approval\",\"never\",\"--sandbox\",\"read-only\",\n \"exec\",\"--ignore-user-config\",\"--ignore-rules\",\"--skip-git-repo-check\",\n \"--ephemeral\",\"--json\",\"--output-schema\",str(schema_path),\n \"--output-last-message\",str(last_path),\"-C\",str(root),prompt\n ]\n p=R(cmd,cwd=root,env=env,timeout=360)\n if p.returncode or not last_path.is_file():\n raise RuntimeError(\"codex exec failed: \"+(p.stderr or p.stdout)[-2000:])\n last=last_path.read_bytes(); o=json.loads(last.decode())\n checks=[\n o.get(\"task_completed\") is True,o.get(\"challenge_nonce\")==cp[\"challenge_nonce\"],\n o.get(\"challenge_message_id\")==CID,o.get(\"challenge_message_sha256\")==CSHA,\n o.get(\"canonical_release\")==RELEASE,o.get(\"canonical_release_sha256\")==RELEASE_SHA,\n o.get(\"canonical_skill_sha256\")==SKILL_SHA,o.get(\"plugin_name\")==PLUGIN,\n o.get(\"plugin_version\")==VERSION,o.get(\"plugin_manifest_sha256\")==MANIFEST_SHA,\n o.get(\"skill_md_sha256\")==skill_md_sha,o.get(\"probe_nonce\")==probe,\n bool(re.fullmatch(r\"[0-9a-f]{64}\",str(o.get(\"runtime_nonce\",\"\")))),\n o.get(\"production_go\") is False,o.get(\"secrets_exposed\") is False\n ]\n if not all(checks): raise RuntimeError(\"Codex structured output/local proof binding failed\")\n tid=None; probe_command_verified=False; prohibited_items_seen=False; command_count=0\n for line in (p.stdout or \"\").splitlines():\n try: e=json.loads(line)\n except Exception: continue\n if e.get(\"type\")==\"thread.started\" and isinstance(e.get(\"thread_id\"),str): tid=e[\"thread_id\"]\n if e.get(\"type\")==\"item.completed\":\n item=e.get(\"item\") or {}; it=item.get(\"type\")\n if it in {\"file_change\",\"web_search\",\"mcp_tool_call\"}: prohibited_items_seen=True\n if it==\"command_execution\":\n command_count+=1\n output=str(item.get(\"aggregated_output\") or item.get(\"output\") or \"\")\n if item.get(\"exit_code\")==0 and item.get(\"status\")==\"completed\" and probe in output and MANIFEST_SHA in output and skill_md_sha in output:\n probe_command_verified=True\n if not probe_command_verified or prohibited_items_seen or command_count < 1:\n raise RuntimeError(\"Codex command-execution proof failed\")\n return {\n \"codex_cli_version\":(version.stdout or version.stderr).strip()[:300],\n \"codex_thread_id\":tid,\"codex_runtime_nonce\":o[\"runtime_nonce\"],\n \"codex_local_read_challenge_sha256\":probe_file_sha,\n \"codex_last_message_sha256\":H(last),\n \"codex_exec_events_sha256\":H((p.stdout or \"\").encode()),\n \"codex_tool_probe_verified\":True,\"codex_tool_probe_sha256\":H(probe.encode()),\n \"codex_skill_md_sha256\":skill_md_sha,\"codex_command_execution_count\":command_count,\n \"codex_prohibited_items_seen\":False,\"codex_exec_exit_code\":0,\n \"codex_cli_contract_preflight\":True,\"codex_output_bindings_exact\":True,\n \"codex_local_read_proof_exact\":True,\n \"codex_execution\":{\n \"mode\":\"codex exec\",\"ephemeral\":True,\"sandbox\":\"read-only\",\"ask_for_approval\":\"never\",\n \"dangerous_bypass_used\":False,\"model_override_used\":False,\"skip_git_repo_check\":True,\n \"isolated_codex_home\":True,\"user_config_inherited\":False,\"project_config_inherited\":False,\n \"ignore_user_config\":True,\"ignore_rules\":True\n }\n }\n\ndef main():\n if sys.version_info<(3,11): raise SystemExit(\"Python 3.11+ required\")\n metadata_self_check()\n codex_home,codex,env=isolated_codex_env()\n try:\n token,pairing=pair()\n ch=challenge(token)\n work_tmp,root,probe,probe_file_sha,skill_md_sha=workdir(token)\n try:\n runtime=codex_run(codex,env,root,ch,probe,probe_file_sha,skill_md_sha)\n finally:\n work_tmp.cleanup()\n if pairing.get(\"confirmed\") is not True:\n raise RuntimeError(\"scoped device token was not confirmed\")\n rec={\n \"schema\":\"rumbo.codex-real-runtime-receipt/v3\",\n \"device_pairing_session_id\":pairing.get(\"device_pairing_session_id\"),\n \"challenge_message_id\":CID,\"challenge_message_sha256\":CSHA,\n \"challenge_nonce\":ch[\"payload\"][\"challenge_nonce\"],\"acceptance_not_after_utc\":DEADLINE,\n \"canonical_release\":RELEASE,\"canonical_release_sha256\":RELEASE_SHA,\"canonical_skill_sha256\":SKILL_SHA,\n \"plugin_name\":PLUGIN,\"plugin_version\":VERSION,\"local_plugin_manifest_sha256\":MANIFEST_SHA,\n **runtime,\n \"fail_closed_project_gates_preserved\":True,\"secrets_exposed\":False,\"production_go\":False,\n \"bootstrap_script_sha256\":H(Path(__file__).read_bytes()),\n \"created_at_utc\":time.strftime(\"%Y-%m-%dT%H:%M:%SZ\",time.gmtime())\n }\n A(RECEIPT,(json.dumps(rec,ensure_ascii=False,indent=2)+\"\\n\").encode())\n receipt_sha=H(RECEIPT.read_bytes())\n _,ack=J(\"POST\",\"/v1/acks\",{\"message_id\":CID,\"message_sha256\":CSHA},token)\n if not ack.get(\"acked\"): raise RuntimeError(\"challenge ACK failed\")\n payload={\n \"kind\":\"runtime_acceptance_response_v3\",\n \"device_pairing_session_id\":rec[\"device_pairing_session_id\"],\n \"challenge_nonce\":rec[\"challenge_nonce\"],\"challenge_message_id\":CID,\"challenge_message_sha256\":CSHA,\n \"canonical_release\":RELEASE,\"canonical_release_sha256\":RELEASE_SHA,\"canonical_skill_sha256\":SKILL_SHA,\n \"plugin_name\":PLUGIN,\"plugin_version\":VERSION,\"local_plugin_manifest_sha256\":MANIFEST_SHA,\n \"local_runtime_receipt_sha256\":receipt_sha,\"bootstrap_script_sha256\":rec[\"bootstrap_script_sha256\"],\n **runtime,\n \"runtime_claim\":\"ACTUAL_CODEX_CLI_EXEC_ISOLATED_READ_ONLY_LOCAL_READ_PROVEN\",\n \"fail_closed_project_gates_preserved\":True,\"secrets_exposed\":False,\"production_go\":False\n }\n _,res=J(\"POST\",\"/v1/messages\",{\n \"lane\":LANE,\"base_revision\":1,\n \"request_id\":\"runtime-acceptance-v3-\"+CID.replace(\"-\",\"\"),\n \"payload\":payload\n },token,ok=(200,201))\n print(\"\\nRUNTIME_ACCEPTANCE_V3_RESPONSE=PUBLISHED\")\n print(\"response_message_id=\",res.get(\"id\"))\n print(\"response_message_sha256=\",res.get(\"message_sha256\"))\n print(\"local_runtime_receipt_sha256=\",receipt_sha)\n print(\"NEXT_GATE=PENDING_CHATGPT_SEMANTIC_REVIEW_AND_ACK\")\n finally:\n codex_home.cleanup()\n\nif __name__==\"__main__\": raise SystemExit(main())\n",[216],"0da1002e-2a24-4d14-b154-b48ee074af67","acceptance_selftest.ts","01a04b9f-d094-726a-8052-cfd25f86f79c",["D",1787975159958],"const base = \"https://sebas1--01a04afcc88b766f9e893c0c81cf30bc.web.val.run\";\nconst lane = \"CODEX_REAL_RUNTIME_ACCEPTANCE_V1\";\nconst gpt = Deno.env.get(\"GPT_TOKEN_V4\");\nconst admin = Deno.env.get(\"ADMIN_TOKEN_V4\");\nif (!gpt || !admin) throw new Error(\"R4_REQUIRED_ENV_MISSING\");\n\nconst healthRes = await fetch(base + \"/health\");\nconst health = await healthRes.json();\nconst acceptedRuntimeRevisions = new Set([\"R4-ACCEPTANCE-GUARD\",\"R5-PAIRING-RECOVERY\",\"R6-DEVICE-BOOTSTRAP\"]);\nif (healthRes.status !== 200 || !acceptedRuntimeRevisions.has(health.implementation_revision)) {\n throw new Error(\"ACCEPTANCE_RUNTIME_REVISION_MISMATCH\");\n}\nif (health.production_go !== false) throw new Error(\"HEALTH_PRODUCTION_GO_INVARIANT_BROKEN\");\n\nconst unauthRes = await fetch(`${base}/v1/acceptance/${lane}`);\nif (unauthRes.status !== 401) throw new Error(`UNAUTH_ACCEPTANCE_EXPECTED_401_GOT_${unauthRes.status}`);\n\nconst acceptanceRes = await fetch(`${base}/v1/acceptance/${lane}`, {\n headers: { Authorization: `Bearer ${gpt}` }\n});\nconst acceptance = await acceptanceRes.json();\nconst allowed = new Set([\n \"CHALLENGE_NOT_PROVEN\",\"AMBIGUOUS_CHALLENGE_SET\",\"CHALLENGE_CONTRACT_MISMATCH\",\n \"PENDING_CODEX_ACK\",\"PENDING_CODEX_RESPONSE\",\"AMBIGUOUS_MULTIPLE_CODEX_RESPONSES\",\n \"INVALID_CODEX_RESPONSE\",\"PENDING_CHATGPT_ACK\",\"PASS_RUNTIME_ROUNDTRIP\"\n]);\nif (acceptanceRes.status !== 200 || !allowed.has(acceptance.state)) {\n throw new Error(\"ACCEPTANCE_STATE_INVALID\");\n}\nif (acceptance.production_go !== false) throw new Error(\"ACCEPTANCE_PRODUCTION_GO_INVARIANT_BROKEN\");\nif (acceptance.state === \"PASS_RUNTIME_ROUNDTRIP\") {\n if (acceptance.mechanical_checks_passed !== true || !acceptance.evidence?.gpt_ack_id) {\n throw new Error(\"FALSE_PASS_GUARD_FAILED\");\n }\n}\nif (acceptance.state === \"PENDING_CODEX_ACK\") {\n if (acceptance.evidence?.challenge_message_id !== \"f7ca12d8-226a-43b9-9fc0-bd9ede8548af\") {\n throw new Error(\"CHALLENGE_ID_DRIFT\");\n }\n if (acceptance.evidence?.challenge_message_sha256 !== \"70d6702195fca8666fd31d15084993c8ce4a7e191bd692984c0b1429c92f5979\") {\n throw new Error(\"CHALLENGE_SHA_DRIFT\");\n }\n}\n\nconst stateRes = await fetch(`${base}/v1/state/${lane}`, {\n headers: { Authorization: `Bearer ${gpt}` }\n});\nconst state = await stateRes.json();\nif (stateRes.status !== 200) throw new Error(\"LANE_STATE_UNREADABLE\");\n\nconst auditRes = await fetch(base + \"/v1/audit\", {\n headers: { Authorization: `Bearer ${admin}` }\n});\nconst audit = await auditRes.json();\nif (auditRes.status !== 200 || audit.audit_chain_ok !== true) throw new Error(\"AUDIT_CHAIN_NOT_OK\");\n\nconsole.log(JSON.stringify({\n selftest:\"PASS\",\n implementation_revision:health.implementation_revision,\n unauth_acceptance_status:unauthRes.status,\n acceptance_state:acceptance.state,\n mechanical_checks_passed:acceptance.mechanical_checks_passed,\n lane_revision:state.state?.revision,\n lane_checkpoint_sha256:state.state?.checkpoint_sha256,\n audit_chain_ok:audit.audit_chain_ok,\n audit_event_count:audit.count,\n production_go:false,\n evidence:acceptance.evidence ?? null\n}, null, 2));",[223],"1d9f1f23-7ec3-4020-bc18-fc5fcf59a17c","README.md","01a04b9f-d094-726a-8052-c8afbf2ad8c0",["D",1787975159958],"# RUMBO Continuity Relay\n\nLive durable relay for material continuity between ChatGPT-side workflows and a Codex/local runtime.\n\n## Protocol\n\n`rumbo-continuity-relay/v1`\n\nCurrent implementation: `R6-DEVICE-BOOTSTRAP` (R5 pairing recovery, R4 acceptance verifier and R3 external guard preserved).\n\n## Security model\n\n- bearer-role separation: GPT, Codex, admin;\n- no credentials in repository/code;\n- secret-bearing continuity payload rejection;\n- strict lane grammar;\n- optimistic revision control with SQLite trigger-enforced stale-write rejection;\n- exact message SHA-256 binding;\n- exact recipient ACK binding;\n- idempotent ACK replay handling;\n- append-only hash-chained audit events;\n- persistent val-scoped SQLite storage.\n\n## Secretless real-device bootstrap\n\nR6 removes the pre-shared-secret/opaque-ZIP dependency from the remaining physical Codex gate. A real Codex host can download a public, hash-pinned Python launcher containing no credentials, obtain a 256-bit device code plus a short human code, and poll while the user authorizes that short code through an authenticated GPT/admin surface.\n\nDevice sessions persist only SHA-256 values for device/user codes. Approval is atomic, requires GPT/admin, and is separate from token delivery. Sensitive state changes compensate an audit-append failure instead of leaving unaudited authorization state. Rate/capacity bounds are enforced on pending public sessions.\n\nThe launcher is currently v1.3, 13,466 bytes, SHA-256:\n\n`5bd101b674bcc4cc6f6e842d285c486857cb73b20211c375706067eba71fbcd6`\n\nIt verifies the canonical V1.6 Skill ZIP, reconstructs a clean official-format Codex plugin, preserves plugin/marketplace/cache backups, verifies both `codex plugin list` and cached Skill bytes, writes an exact-byte runtime receipt, supports receipt-bound crash recovery, ACKs only the exact stored challenge, and publishes the nonce-bound reverse response. It never emits the final ChatGPT ACK; that remains a separate semantic-review gate.\n\nPublic read-only bootstrap endpoints:\n- `GET /v1/bootstrap/codex-device/metadata`\n- `GET /v1/bootstrap/codex-device.py`\n\nDevice pairing endpoints:\n- `POST /v1/pair/codex/device/start`\n- `POST /v1/pair/codex/device/approve` — GPT/admin only\n- `POST /v1/pair/codex/device/poll`\n\nA prepared launcher, device session or plugin installation is not proof of a real runtime roundtrip. Until a real host ACKs the challenge and publishes the reverse response, the acceptance state remains `PENDING_CODEX_ACK` and production remains NO_GO.\n\n## Pairing recovery hardening\n\nR5 removes a permanent-liveness failure in the real `codex-v4` bootstrap: an issued but unconfirmed pairing that expires can now be safely re-issued with the same fixed pairing id, instead of returning HTTP 410 forever. The pairing code check uses constant-time comparison, issue/reissue paths are race-checked, and confirmation is atomically conditioned on `expires_at`.\n\nAn active unconfirmed issuance is still redelivered without creating a second session; a confirmed session still fails closed against re-pairing. Expired confirmation responses are explicitly retryable and require a fresh pairing issuance. Synthetic regression fixtures never use `codex-v4` and are deleted in `finally`.\n\nThis changes bootstrap liveness only. It does not ACK the acceptance challenge, prove a real Codex runtime, grant merge authority, or change `production_go=false`.\n\n## Codex real-runtime acceptance verifier\n\nR4 adds a read-only, fail-closed verifier for the exact lane `CODEX_REAL_RUNTIME_ACCEPTANCE_V1`.\n\nProtected endpoint:\n\n- `GET /v1/acceptance/CODEX_REAL_RUNTIME_ACCEPTANCE_V1` — GPT/admin bearer only.\n\nThe verifier derives its contract from the stored acceptance challenge and never creates an ACK, message, pairing, authorization or production promotion. It reports only evidence-backed states:\n\n`CHALLENGE_NOT_PROVEN -> PENDING_CODEX_ACK -> PENDING_CODEX_RESPONSE -> PENDING_CHATGPT_ACK -> PASS_RUNTIME_ROUNDTRIP`\n\nAmbiguous, malformed or mechanically invalid evidence fails closed. `PENDING_CHATGPT_ACK` explicitly requires semantic review before the final GPT ACK. Even `PASS_RUNTIME_ROUNDTRIP` proves only continuity transport/runtime binding and always returns `production_go=false`.\n\nCurrent authenticated self-test observes `PENDING_CODEX_ACK`, which is consistent with the live ledger: the real Codex runtime has not yet ACKed the exact challenge.\n\n## R2 external authorization guard\n\nR3-GUARD adds an external, fail-closed authorization surface for the RUMBO Continuity R2 control package.\n\nProperties:\n\n- controller bearer is held only as an encrypted Val Town environment variable;\n- target repository is bound by an opaque immutable repository-identity SHA-256;\n- control package is pinned to one exact SHA-256;\n- authorization binds exactly to action, PR number, base SHA, head SHA, package SHA-256 and evidence SHA-256;\n- raw one-time authorization tokens are returned only at issuance;\n- only token SHA-256 values are persisted;\n- authorizations have a 60–900 second TTL;\n- exact request bindings cannot be re-issued because request SHA-256 is unique;\n- consumption is atomic and one-time;\n- replay, token mismatch, binding mismatch and stale/expired authorization fail closed;\n- ledger reads never expose token hashes;\n- guard lifecycle events are added to the existing audit hash chain;\n- `production_go` is always false on this surface.\n\n### Merge gate\n\n`MERGE_PR` issuance **and consumption** are disabled unless the runtime environment explicitly contains:\n\n`R2_ALLOW_MERGE_AUTHORIZATION=true`\n\nThat variable is intentionally absent. Therefore this runtime cannot presently authorize a PR merge.\n\nA green guard receipt is not product GO and cannot substitute for live GitHub-side observation of the exact PR state.\n\n## Guard endpoints\n\nAll guard endpoints require the dedicated R2 guard bearer except public health.\n\n- `POST /v1/guard/authorize`\n- `POST /v1/guard/consume`\n- `POST /v1/guard/revoke`\n- `GET /v1/guard/authorizations/:id`\n- `GET /v1/guard/ledger`\n\nThe temporary self-test route used during branch validation was removed before promotion.\n\n## Guard validation evidence\n\nThe branch implementation was exercised against the live Val Town runtime with an internal bearer self-test that did not expose the bearer or one-time token.\n\nFinal adversarial matrix:\n\n- unauthenticated ledger → 401;\n- merge issuance while disabled → 423;\n- invalid repository binding → 400;\n- TTL below policy → 400;\n- TEST_ONLY issuance → 201;\n- invalid consumer label → 400 with authorization still ISSUED;\n- exact TEST_ONLY consumption → 200;\n- consumed-token replay → 409;\n- duplicate exact authorization request → 409;\n- read of an expired fixture → effective status EXPIRED without mutating on read;\n- revoke of expired authorization → 410 and durable EXPIRED state;\n- pre-existing MERGE_PR fixture consumption while merge gate disabled → 423;\n- revoked merge fixture → 200;\n- ledger read → 200;\n- token-hash leakage check → false.\n\nValidated receipt SHA-256:\n\n`90d2e2fd1691b523e0a0ab182ad2f41dd9a6d8dd6ec2f06d8af19c24a58e82ab`\n\nThe live health endpoint remained 200 after removal of the temporary self-test route.\n\n## Continuity endpoints\n\n- `GET /health`\n- `GET /v1/state/:lane`\n- `GET /v1/inbox?lane=...`\n- `POST /v1/messages`\n- `POST /v1/acks`\n- `GET /v1/acceptance/CODEX_REAL_RUNTIME_ACCEPTANCE_V1` (GPT/admin; read-only)\n- `GET /v1/audit` (admin only)\n\n## Boundary\n\nThe relay is a transport, evidence surface and external fail-closed authorization ledger. It does not replace lane-scoped CURRENT authority, the RUMBO continuity capsule, GitHub branch/ruleset enforcement, a dedicated GitHub App, an independent deployer, or project production authorization.\n\nA real Codex-runtime roundtrip remains a separate acceptance gate until the user's actual Codex/local runtime executes the client and produces a receipt.\n",[229],"f8cd4eee-65ad-4a80-b1ea-152124efd1b5","R6_DEVICE_BOOTSTRAP_RELEASE.md","01a04b9f-d094-726a-8052-c6bdffd065de",["D",1787975159958],"# RUMBO Continuity Relay — R6-DEVICE-BOOTSTRAP Release Evidence\n\nDate: 2026-08-28/29 UTC\nBranch: r6-device-bootstrap\nFork baseline: main version 50\nBranch version before this receipt: 39\nScope: secretless real-device bootstrap for the existing Codex runtime acceptance gate\nProduction: NO_GO\n\n## Objective and preserved authority\n\nThe durable gate remains CODEX_REAL_RUNTIME_ACCEPTANCE_V1. R6 does not replace R5 pairing recovery, R4 acceptance verification, R3 fail-closed external guard, or the exact challenge.\n\nExact challenge:\n- id: f7ca12d8-226a-43b9-9fc0-bd9ede8548af\n- message SHA-256: 70d6702195fca8666fd31d15084993c8ce4a7e191bd692984c0b1429c92f5979\n- lane checkpoint SHA-256: d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962\n- live acceptance state during branch validation: PENDING_CODEX_ACK\n\n## Problem solved\n\nThe remaining physical gate depended on a pre-shared pairing secret and an opaque activation ZIP whose latest sidecar was observable but whose bytes/regeneration receipt were not available in the current File Library surface.\n\nR6 introduces a public device-code bootstrap with no embedded credentials:\n1. real Codex host starts a device session;\n2. server returns a 256-bit device code plus a short human code;\n3. only the short code is pasted into an authenticated RUMBO/ChatGPT conversation;\n4. GPT/admin approval atomically authorizes that exact hash-bound device session;\n5. the local host polls using the secret device code and only then receives the Codex bearer;\n6. local bootstrap confirms pairing, reconstructs and verifies the plugin, ACKs the exact challenge, and publishes the nonce-bound reverse response;\n7. final ChatGPT semantic review/ACK remains separate.\n\n## Server security properties\n\n- raw device/user codes are never persisted; only SHA-256 values are stored;\n- 32-byte device-code entropy;\n- unbiased short-code generation via rejection sampling;\n- pending-session limits: 3 per client fingerprint, 100 global;\n- client fingerprint stores only SHA-256 of network/user-agent material;\n- approval requires GPT/admin bearer;\n- start cannot approve;\n- pre-approval poll returns 202 and no bearer;\n- approval is atomic against expiry;\n- device/token-delivery sensitive changes compensate audit-append failure;\n- real pairing issue/reissue paths compensate audit-append failure;\n- active pairing from another channel fails closed;\n- production_go=false throughout.\n\n## Public bootstrap launcher\n\nPath: /v1/bootstrap/codex-device.py\nMetadata path: /v1/bootstrap/codex-device/metadata\nLauncher version: 1.3\nPython minimum: 3.11\nBytes: 13,466\nSHA-256: 5bd101b674bcc4cc6f6e842d285c486857cb73b20211c375706067eba71fbcd6\nEmbedded credentials: false\n\nLauncher properties:\n- canonical V1.6 Skill ZIP SHA verification;\n- safe ZIP path validation;\n- clean plugin staging rather than hybrid overlay;\n- official-format .codex-plugin/plugin.json and personal marketplace entry;\n- plugin, cache and marketplace backups;\n- rollback of plugin/cache/marketplace on handled installation failure;\n- codex plugin add invocation;\n- plugin list check plus material cached-SKILL byte verification;\n- exact-byte runtime receipt SHA;\n- receipt binds exact challenge id/SHA, challenge nonce and bootstrap script SHA;\n- crash/retry resume verifies manifest, marketplace, plugin list and cache before reuse;\n- exact challenge ACK only;\n- deterministic idempotent reverse-response request id;\n- final ChatGPT ACK is never fabricated.\n\nLocal sandbox syntax compilation of these exact bytes: PASS.\n\n## Branch tests\n\nBootstrap HTTP integrity:\n- evaluation id: 01a04b79-fc0c-779d-8dd6-b1428bf9a932\n- HTTP 200\n- bytes: 13,466 exact\n- body SHA-256: exact\n- X-SHA256: exact\n- launcher v1.3 marker: PASS\n- exact receipt-byte hash marker: PASS\n- resume verifier: PASS\n- nonce receipt binding: PASS\n- plugin/marketplace/cache rollback markers: PASS\n\nDevice separation self-test:\n- final evaluation id: 01a04b7a-34c5-71bd-b230-3f314a00c4ce\n- start: HTTP 201\n- pre-approval poll: HTTP 202\n- unauthenticated approval: HTTP 401\n- GPT approval: HTTP 200\n- approval replay: IDEMPOTENT_PASS\n- token delivered: false\n- real codex-v4 pairing touched: false\n- fixture cleanup: PASS\n\nNote: an earlier self-test evaluation printed all functional checks PASS but ended with a false cleanup failure because the test used 0 || -1. Database inspection proved the row had been deleted. The test assertion was corrected to nullish handling and the final evaluation above passed. Synthetic approval audit events are preserved in the append-only audit chain and are not represented as real runtime evidence.\n\nIntegrated branch regression:\n- evaluation id: 01a04b7a-222f-77bf-9a1b-b08e25952f67\n- implementation: R6-DEVICE-BOOTSTRAP\n- acceptance: PENDING_CODEX_ACK\n- lane revision: 1\n- checkpoint exact: PASS\n- audit_chain_ok: true\n- launcher metadata exact: PASS\n- production_go: false\n- real_codex_runtime: NOT_PROVEN_BY_THIS_TEST\n\nFinal static/adversarial audit:\n- 26/26 security/invariant checks PASS\n- R5 pairing recovery preserved\n- R4 acceptance verifier preserved\n- R2_ALLOW_MERGE_AUTHORIZATION absent\n- no self-test HTTP route\n- no literal bearer/API/GitHub credential in launcher\n- no production promotion path added\n\n## Database boundary after branch tests\n\n- real pairing id codex-v4: no row\n- device self-test fixture rows: none\n- challenge ACK: NOT_PROVEN\n- Codex reverse response: NOT_PROVEN\n- final GPT ACK: NOT_PROVEN\n\n## Promotion boundary\n\nR6 branch may be promoted because it makes the physical gate safer and recoverable without performing that gate.\n\nPromotion does NOT mean:\n- REAL_CODEX_RUNTIME_PASS\n- REAL_CODEX_ACK\n- REAL_CODEX_RESPONSE\n- FINAL_CHATGPT_ACK\n- PRODUCT_GO\n- PRODUCTION_GO\n\nAfter promotion, main must be revalidated for health, launcher bytes/hash, device separation, acceptance/checkpoint, audit chain, zero codex-v4 row, and remote-device availability.\n",[235],"dd6f9d87-a52f-4883-acad-b68504314bf2","R5_POST_PROMOTION_RECEIPT.md","01a04b9f-d094-726a-8052-c296b5a517c5",["D",1787975159958],"# RUMBO Continuity Relay — R5 Post-Promotion Receipt\n\nEffective UTC: 2026-08-29T02:47Z\nPromoted target: main\nPromotion commit/version: main 49\nImplementation: R5-PAIRING-RECOVERY\nProduction: NO_GO\n\n## Promotion receipt\n\nBranch r5-pairing-recovery was forked from main version 48 and merged only after main was re-read at the same version 48. Merge result: SUCCESS, target main version 49.\n\n## Post-merge verification on main\n\nHealth:\n- HTTP 200\n- implementation_revision: R5-PAIRING-RECOVERY\n- pairing-expiry-recovery capability: present\n- pairing-constant-time-code-check capability: present\n- merge_authorization_enabled: false\n- production_go: false\n\nSynthetic pairing regression:\n- evaluation id: 01a04b6a-643a-748c-b502-207898cf4510\n- result: PASS\n- pure state cases: 6\n- SQLite expiry reissue: PASS\n- SQLite atomic confirm: PASS\n- production_pairing_touched: false\n\nAcceptance regression:\n- evaluation id: 01a04b6a-7069-716e-9477-7ef12f256275\n- result: PASS\n- implementation_revision: R5-PAIRING-RECOVERY\n- unauthenticated acceptance: HTTP 401\n- state: PENDING_CODEX_ACK\n- lane revision: 1\n- checkpoint SHA-256: d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962\n- audit_chain_ok: true\n- audit event count: 33\n- production_go: false\n- challenge id: f7ca12d8-226a-43b9-9fc0-bd9ede8548af\n- challenge message SHA-256: 70d6702195fca8666fd31d15084993c8ce4a7e191bd692984c0b1429c92f5979\n\nDatabase after regressions:\n- codex-v4 rows: 0\n- r5-selftest-expired rows: 0\n\nPost-promotion static audit:\n- all checked invariants: PASS\n- R4 acceptance route preserved\n- no self-test HTTP route\n- pairing code constant-time comparison present\n- expired reissue atomic condition present\n- confirm-before-expiry atomic condition present\n- production_go=false retained\n- merge-enabling environment variable absent\n- no literal OpenAI/GitHub token pattern in source\n\nRemote execution surface:\n- connected Remote Desktop Commander devices: 0\n- actual user Codex process: NOT_OBSERVED\n\n## Activation-package reconciliation\n\nThe latest indexed sidecar for RUMBO_CODEX_REAL_RUNTIME_ACTIVATION_CURRENT.zip reports SHA-256:\n8db386dfe56569916da7a62c59499fcb2d7e6c8d82f7da647511a9a8c8d50943\n\nThe ZIP bytes and a regeneration receipt are not available through the current File Library index. Therefore:\n- ACTIVATION_CURRENT_SIDECAR = OBSERVED\n- ACTIVATION_CURRENT_BYTES = NOT_PROVEN\n- ACTIVATION_CURRENT_EXECUTION = NOT_PROVEN\n\nR5 does not depend on that opaque package.\n\n## Truth boundary\n\nR5_MAIN = PASS_LIVE\nPAIRING_RECOVERY = PASS_LIVE\nACCEPTANCE_VERIFIER = PASS_LIVE\nAUDIT_CHAIN = PASS\nREAL_CODEX_PAIRING_V4 = NOT_PROVEN\nREAL_CODEX_ACK = NOT_PROVEN\nREAL_CODEX_RESPONSE = NOT_PROVEN\nFINAL_CHATGPT_ACK = NOT_PROVEN\nFULL_FEDERATED_RUNTIME = NO_GO\nPRODUCTION = NO_GO\n\nThe next valid promotion requires evidence from the user's actual Codex runtime. No synthetic test, release ZIP, plugin listing, prepared launcher, TEST_ONLY PR binding, or activation sidecar can substitute for that receipt.\n",[241],"3c9630f6-5dd3-4c1d-a721-bb89eded654b","R5_PAIRING_RECOVERY_RELEASE.md","01a04b9f-d094-726a-8052-bd4da8e79437",["D",1787975159958],"# RUMBO Continuity Relay — R5-PAIRING-RECOVERY Release Evidence\n\nDate: 2026-08-28/29 UTC\nBranch: r5-pairing-recovery\nFork baseline: main version 48\nScope: Codex V4 bootstrap liveness/security hardening only\nProduction: NO_GO\n\n## Recovered objective and gate\n\nThe durable CURRENT requires one real user Codex execution on lane CODEX_REAL_RUNTIME_ACCEPTANCE_V1. R4 already verifies that roundtrip fail-closed. R5 does not change that gate.\n\nExact challenge remains:\n- message id: f7ca12d8-226a-43b9-9fc0-bd9ede8548af\n- message SHA-256: 70d6702195fca8666fd31d15084993c8ce4a7e191bd692984c0b1429c92f5979\n- checkpoint SHA-256: d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962\n- state during validation: PENDING_CODEX_ACK\n\n## Defect reproduced by source audit\n\nThe R4 pairing route used the fixed real pairing id codex-v4. Once an unconfirmed issuance exceeded its ten-minute expiry, every subsequent valid pairing request returned PAIRING_EXPIRED. No re-issuance path existed, so a lost/abandoned first attempt could permanently block the only real-runtime gate.\n\nAdditional hardening findings:\n- pairing-code comparison used ordinary string equality even though constantTimeEqual already existed;\n- confirmation expiry was checked before a later unconditional UPDATE, leaving a narrow time-of-check/time-of-use race.\n\n## R5 implementation\n\nAdded pairing_state.ts with explicit fail-closed states:\n- ISSUE_NEW\n- REDELIVER_ACTIVE\n- REISSUE_EXPIRED\n- ALREADY_CONFIRMED\n- INVALID_EXISTING_SESSION\n\nPair issue now:\n- compares the V4 pairing code with constantTimeEqual;\n- redelivers an active unconfirmed issuance;\n- atomically reissues an expired unconfirmed session using the same fixed pairing id;\n- rejects confirmed or malformed state;\n- detects issue/reissue races;\n- emits CODEX_PAIRING_REISSUED_AFTER_EXPIRY only after a successful atomic reissue.\n\nPair confirmation now:\n- rejects invalid timestamps;\n- returns retryable PAIRING_EXPIRED at the expiry boundary;\n- atomically confirms only while expires_at is still in the future;\n- re-reads after a lost race and returns confirmed-idempotent, expired-retryable, or fail-closed race state.\n\nNo real pairing was issued by validation.\n\n## Tests\n\nSynthetic pairing state + SQLite regression:\n- file: r5_pairing_selftest.ts\n- branch file version: 8\n- evaluation id: 01a04b67-a25c-731b-8fe8-5d21ab141684\n- pure state cases: 6 PASS\n- expired-session atomic reissue: PASS\n- atomic confirmation: PASS\n- synthetic fixture cleanup: PASS\n- production_pairing_touched: false\n\nBranch HTTP regression:\n- file: r5_branch_regression.ts\n- branch file version: 12\n- evaluation id: 01a04b69-aaae-7148-b28c-0dc5ddd28407\n- branch health: R5-PAIRING-RECOVERY / HTTP 200\n- acceptance: PENDING_CODEX_ACK\n- lane revision: 1\n- checkpoint SHA-256 exact: PASS\n- audit_chain_ok: true\n- production_go: false\n- real_codex_runtime: NOT_PROVEN_BY_THIS_TEST\n\nNegative HTTP checks:\n- wrong pairing code: HTTP 403 PAIRING_DENIED\n- unauthenticated confirmation: HTTP 401\n\nPost-test database check:\n- codex-v4 rows: 0\n- r5-selftest-expired rows: 0\n\n## Static security audit\n\nThirteen source/runtime invariants passed:\n- R5 revision marker present;\n- R4 acceptance route preserved;\n- exactly one pair-issue route;\n- exactly one pair-confirm route;\n- no self-test HTTP route;\n- constant-time pairing-code comparison present;\n- expired reissue is atomic;\n- confirmation expiry is atomic;\n- reissue event is audited;\n- production_go=false invariant retained;\n- no literal OpenAI key pattern;\n- no literal GitHub token pattern;\n- R2_ALLOW_MERGE_AUTHORIZATION environment variable absent.\n\n## Preserved predecessor work\n\nR5 preserves:\n- R4-ACCEPTANCE-GUARD state machine and exact acceptance challenge;\n- R3-GUARD external TEST_ONLY authorizer;\n- PR #412 as the active TEST_ONLY successor binding;\n- merge authorization disabled;\n- production NO_GO.\n\n## Truth boundary\n\nR5_PAIRING_RECOVERY_IMPLEMENTATION = PASS_BRANCH\nR5_SYNTHETIC_REGRESSION = PASS\nR5_BRANCH_HTTP_REGRESSION = PASS\nREAL_CODEX_PAIRING_V4 = NOT_PROVEN\nREAL_CODEX_ACK = NOT_PROVEN\nREAL_CODEX_RESPONSE = NOT_PROVEN\nFINAL_CHATGPT_ACK = NOT_PROVEN\nFULL_FEDERATED_RUNTIME = NO_GO\nPRODUCTION = NO_GO\n\n## Promotion condition\n\nThis branch may be merged into the relay because it repairs the bootstrap path without consuming the bootstrap. Merge does not authorize or simulate the real runtime. After merge, health, synthetic pairing regression, acceptance regression, database absence of codex-v4, and audit-chain validity must be rechecked on main.\n",[247],"f9f3cac9-6da2-4ec0-9886-e041136d4b0d","R4_PR412_SUCCESSOR_BIND.md","01a04b9f-d094-726a-8052-b8f1cca39e26",["D",1787975159958],"# RUMBO R4 — Successor PR #412 Exact TEST_ONLY Binding\n\nStatus: **PASS / MERGE_NOT_AUTHORIZED / PRODUCTION_NO_GO**\n\nThis record supersedes the historical PR #392 binding for active continuity work.\n\n## Exact GitHub binding\n\n- PR: `412`\n- base SHA observed at binding precheck: `1ad77acefc7326595c50d7b0edffa81a2188e737`\n- head SHA: `d0043f418c1b0f7d21b36dc1c5469c9ded49cfd7`\n- changed files: 5\n- PR state: OPEN / DRAFT\n- mergeable at precheck: true\n- branch relation at precheck: 7 ahead / 4 behind current main\n\nRepository identity SHA-256:\n\n`59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23`\n\nControl package SHA-256:\n\n`afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f`\n\n## External evidence object\n\nCanonical evidence SHA-256:\n\n`67613e277793d67e574db7af2399084e454209af492b78dbff2c8c99e0ff5b8b`\n\nScope:\n\n`TEST_ONLY_SUCCESSOR_PR_HEAD_BINDING_NO_MERGE_NO_PRODUCTION`\n\nThe evidence object also recorded:\n\n- runtime `R4-ACCEPTANCE-GUARD`;\n- HTTP runtime file version 40;\n- guard configured true;\n- merge authorization enabled false;\n- `production_go=false`;\n- Codex runtime acceptance `PENDING_CODEX_ACK`;\n- observer run `33229303565` queued at binding precheck.\n\n## One-time transaction\n\nVal Town evaluation ID:\n\n`01a04b5f-19d9-73cd-a69c-a81df8bad877`\n\nResult:\n\n- selftest: PASS\n- authorization ID: `5ea45798-b901-42c3-bd6a-bc3998f6c2a8`\n- request SHA-256: `28ca0c6ec5eeb5b1f54554b863cfe03c02e94876a95dee38b44713cca6b37c2d`\n- consumption receipt SHA-256: `f2fbfe727122a89f3833d97a54b9497d29d860f5bf1efdabeef76ceca708195f`\n- merge_authorized: false\n- production_go: false\n\nThe dedicated guard bearer and raw one-time token were used only inside the Val Town runtime and were not logged. The temporary self-test script was deleted after the single successful execution.\n\n## Claim boundary\n\nThis proves a live, exact, one-time TEST_ONLY authorization for the stated PR #412 snapshot.\n\nIt does not authorize merging, deployment, product production, or bypass of any unresolved trust-root gate. If the PR head or relevant base evidence changes, this receipt becomes historical and a new exact binding is required.\n",[253],"a86be422-6eb0-4d46-9bc1-bbe43d28d1fe","R4_PR392_FINAL_BIND.md","01a04b9f-d094-726a-8052-b5614fc4e4c9",["D",1787975159958],"# RUMBO R4 — PR #392 Final Head Binding\n\nStatus: **TEST_ONLY_BINDING_PASS / MERGE_NOT_AUTHORIZED / PRODUCTION_NO_GO**\n\nThis record binds the live external R2 guard to the exact current GitHub PR #392 head without granting merge or production authority.\n\n## GitHub binding\n\n- repository identity SHA-256: `59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23`\n- PR: `392`\n- base SHA: `fd66dc70415c2aefcd654b9f01ce5b3c4d115a7f`\n- head SHA: `bcfb38f46438535cd200d10a2cde3bcb4f7aafc2`\n- control package SHA-256: `afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f`\n\nThe PR was observed OPEN, DRAFT, mergeable, with five changed files when the evidence object was constructed.\n\n## External runtime binding\n\nRuntime: `sebas1/rumbo-continuity-relay`\n\nImplementation observed before issuance:\n\n`R4-ACCEPTANCE-GUARD`\n\nRuntime guard state:\n\n- configured: true\n- merge authorization enabled: false\n- production_go: false\n\nThe Codex real-runtime acceptance verifier remained fail-closed at:\n\n`PENDING_CODEX_ACK`\n\nChallenge message SHA-256:\n\n`70d6702195fca8666fd31d15084993c8ce4a7e191bd692984c0b1429c92f5979`\n\n## Evidence object\n\nCanonical evidence SHA-256:\n\n`2abe5bb70059597092668a7c1d50534a069aacb6f84d92037e7db21a2bf14914`\n\nScope:\n\n`TEST_ONLY_FINAL_PR_HEAD_BINDING_NO_MERGE_NO_PRODUCTION`\n\n## One-time authorization transaction\n\nA branch-scoped script used the encrypted `R2_GUARD_TOKEN_V1` environment variable to call the live main runtime. The bearer and the raw one-time token were never logged.\n\nResult:\n\n- authorize: PASS\n- consume: PASS\n- one-time authorization ID: `6c54a26a-4cf3-4893-87ff-233c5351cc3d`\n- request SHA-256: `76629d5646aca94992c6248b24d1713d8ebf795214f5b2f8716265955c1bf196`\n- consumption receipt SHA-256: `7a73164985f7f19e26fdd755f83387adc1bc2729aa193dbb15330df0c8cf8c15`\n- merge_authorized: false\n- production_go: false\n\nVal Town evaluation ID:\n\n`01a04b5b-0efc-7728-8cc1-a86bd8d43430`\n\n## Safety audit\n\nThe runtime was independently re-audited before this transaction:\n\n- five guard routes present;\n- five guard routes require the dedicated guard bearer;\n- no raw guard bearer embedded in source;\n- merge authorization blocked at both issuance and consumption;\n- no public guard self-test route;\n- unauthenticated ledger access returns 401;\n- guard token hashes are not projected by ledger/status reads;\n- `production_go=false` remains invariant;\n- R4 acceptance verifier is read-only and currently reports `PENDING_CODEX_ACK`;\n- acceptance self-test returned PASS while preserving `production_go=false`.\n\nThe temporary PR-binding script was deleted from the release branch after its single successful execution.\n\n## Claim boundary\n\nThis record proves only that the external fail-closed authorizer could issue and atomically consume one TEST_ONLY authorization bound to the exact PR #392 head above.\n\nIt does **not** prove or authorize:\n\n- `MERGE_PR`\n- `GITHUB_OBSERVER_VALIDATED`\n- `DEDICATED_GITHUB_APP_CUSTODY`\n- `EXTERNAL_DEPLOYER_LIVE`\n- `PRODUCT_GO`\n- `PRODUCTION_GO`\n\nPR #392 must remain draft while the private GitHub-hosted observer is unable to obtain a runner and until the remaining trust-root gates are satisfied.\n",[259],"59873388-86b2-4b5b-843d-9514e097722b","R4_ACCEPTANCE_RELEASE.md","01a04b9f-d094-726a-8052-b137ce05585e",["D",1787975159958],"# RUMBO Continuity Relay — R4-ACCEPTANCE-GUARD Release Evidence\n\nDate: 2026-08-28/29 UTC\nScope: GPT↔Codex continuity relay / real-runtime acceptance verification only\nBaseline reconciled: main branch version 37 (R3-GUARD merge)\nProduction: NO_GO\n\n## Why R4 exists\n\nThe durable CURRENT V6 correctly required one real Codex runtime execution but had no live read-only endpoint that converted the exact acceptance-lane evidence into an explicit fail-closed state machine.\n\nR4 adds that verifier without changing the acceptance challenge, issuing an ACK, creating a message, consuming pairing, authorizing a project action or promoting production.\n\n## Preserved concurrent work\n\nR3-GUARD was detected as a concurrent same-scope mutation after the earlier relay baseline was read. It was reconciled before R4 edits.\n\nR4 preserves:\n- external R2 authorizer;\n- one-time-token ledger;\n- exact PR/base/head/package/evidence binding;\n- merge authorization disabled unless separately enabled;\n- production_go=false.\n\n## New protected endpoint\n\nGET /v1/acceptance/CODEX_REAL_RUNTIME_ACCEPTANCE_V1\n\nAuthorization: GPT or admin bearer only.\nMutation behavior: none.\n\nFail-closed states:\n- CHALLENGE_NOT_PROVEN\n- AMBIGUOUS_CHALLENGE_SET\n- CHALLENGE_CONTRACT_MISMATCH\n- PENDING_CODEX_ACK\n- PENDING_CODEX_RESPONSE\n- AMBIGUOUS_MULTIPLE_CODEX_RESPONSES\n- INVALID_CODEX_RESPONSE\n- PENDING_CHATGPT_ACK\n- PASS_RUNTIME_ROUNDTRIP\n\nPASS requires:\n1. exactly one stored GPT→Codex acceptance challenge;\n2. challenge contract contains all seven declared acceptance requirements;\n3. exact Codex ACK bound to challenge message id + message SHA-256;\n4. exactly one Codex→GPT reverse response;\n5. exact challenge nonce;\n6. valid SHA-256 syntax for local plugin manifest and local runtime receipt;\n7. exact final GPT ACK bound to reverse message id + message SHA-256.\n\nPENDING_CHATGPT_ACK keeps manual semantic review explicit. PASS proves only continuity transport/runtime binding; it never grants project production authorization.\n\n## Live release regression\n\nSelf-test file: acceptance_selftest.ts\nSelf-test file version: 45\nEvaluation ID: 01a04b59-7aa6-74ed-a388-865ee2e1437c\nResult: PASS\n\nObserved:\n- implementation_revision = R4-ACCEPTANCE-GUARD\n- unauthenticated acceptance request = HTTP 401\n- authenticated acceptance state = PENDING_CODEX_ACK\n- mechanical_checks_passed = false\n- lane revision = 1\n- lane checkpoint SHA-256 = d97d464ac817879c733f26249518faf3833a48c8e00a14d7ebed389af9a70962\n- audit_chain_ok = true\n- audit event count at release test = 29\n- production_go = false\n\nExact challenge:\n- message id = f7ca12d8-226a-43b9-9fc0-bd9ede8548af\n- message SHA-256 = 70d6702195fca8666fd31d15084993c8ce4a7e191bd692984c0b1429c92f5979\n- acked_at = null\n\nReal pairing:\n- pairing id codex-v4 rows observed = 0\n- therefore production pairing is NOT_ISSUED / NOT_CONFIRMED.\n\n## Source versions at seal preparation\n\n- main.tsx = version 40\n- README.md = version 44\n- acceptance_selftest.ts = version 45\n- R3_GUARD_RELEASE.md = version 37\n\n## Reconciliation with durable CURRENT\n\nSECOND_BRAIN_CONTINUITY_CURRENT_V6 remains semantically correct for the gate:\n- actual Codex runtime requires one real execution;\n- full federated runtime remains NO_GO until real Codex response and final ChatGPT ACK.\n\nIts relay implementation label is now stale relative to the live relay because R3-GUARD and R4-ACCEPTANCE-GUARD were promoted afterward. This release evidence is an append-only live implementation delta; it does not silently rewrite the durable CURRENT pointer.\n\n## Truth boundary\n\nR4_IMPLEMENTATION = PASS_LIVE\nR4_SELFTEST = PASS\nAUDIT_CHAIN = PASS\nREAL_CODEX_PAIRING_V4 = NOT_PROVEN\nREAL_CODEX_ACK = NOT_PROVEN\nREAL_CODEX_RESPONSE = NOT_PROVEN\nFINAL_CHATGPT_ACK = NOT_PROVEN\nFULL_FEDERATED_RUNTIME = NO_GO\nPRODUCTION = NO_GO\n\n## Next gate\n\nThe only valid next promotion event is a real user Codex/local runtime:\n1. performs V4 pairing/bootstrap;\n2. consumes this exact challenge;\n3. ACKs this exact challenge id + SHA-256;\n4. publishes one reverse response with the same nonce plus local manifest/runtime receipt SHA-256 values;\n5. then ChatGPT performs semantic review and exact final ACK.\n\nNo simulation, static package, activation ZIP, self-test or prepared launcher may substitute for that receipt.\n",[265],"cf48cebc-96ac-44c9-94d7-b3e0ca684e06","R3_GUARD_RELEASE.md","01a04b9f-d094-726a-8052-ac8b9dfabb20",["D",1787975159958],"# RUMBO Continuity Relay — R3-GUARD Release Evidence\n\nDate: 2026-08-28/29 UTC \nBranch: `r2-guard-v1` \nSource file: `main.tsx` version 23 before this evidence-file commit \nPrior main baseline: version 36\n\n## Scope\n\nR3-GUARD adds a fail-closed external authorization runtime and durable one-time-token ledger for the RUMBO Continuity R2 control package.\n\nIt does **not** grant product production approval, does not deploy the product, does not provide native GitHub branch protection, and does not claim dedicated GitHub App custody.\n\n## Exact package pin\n\n`afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f`\n\nLocal package evidence retained by the R2 control lane:\n\n- unit tests: 105/105 PASS\n- blackbox: 43/43 PASS\n- static groups: 9/9 PASS\n- manifest entries: 99/99 verified\n\n## Runtime safety properties\n\n- dedicated encrypted guard bearer; no bearer value in source;\n- exact opaque repository-identity SHA-256 pin;\n- exact PR/base/head/package/evidence binding;\n- one-time random token, persisted only as SHA-256;\n- 60–900 second TTL;\n- duplicate exact request rejection;\n- atomic single consumption;\n- replay rejection;\n- exact binding mismatch rejection;\n- expiry enforcement;\n- guard lifecycle events hash-chained through the existing audit ledger;\n- protected ledger/status endpoints;\n- token hashes omitted from read APIs;\n- `production_go=false` invariant;\n- `MERGE_PR` blocked at both issuance and consumption unless an explicit runtime gate is enabled.\n\nThe merge-enabling environment variable is intentionally absent.\n\n## Live adversarial self-test V2\n\nTrace ID:\n\n`01a04b54d32f71f6a6603bbca17a4e44`\n\nHTTP result: 200.\n\nChecks:\n\n- unauthorized ledger: 401\n- merge issuance disabled: 423\n- invalid repository binding: 400\n- invalid TTL: 400\n- TEST_ONLY authorize: 201\n- invalid consumer: 400; state remained ISSUED\n- TEST_ONLY consume: 200\n- replay: 409\n- duplicate authorize: 409\n- effective expired read: 200 / EXPIRED\n- revoke expired authorization: 410 / durable EXPIRED\n- MERGE_PR fixture consume while disabled: 423\n- merge fixture revoke: 200\n- ledger: 200\n- token-hash leakage: false\n\nTEST_ONLY consumption receipt SHA-256:\n\n`90d2e2fd1691b523e0a0ab182ad2f41dd9a6d8dd6ec2f06d8af19c24a58e82ab`\n\nTemporary self-test and housekeeping HTTP routes were removed before release.\n\n## Final static audit\n\n- guard routes present: 5\n- guard routes with explicit bearer check: 5\n- self-test routes present: 0\n- raw guard bearer embedded in source: false\n- merge-disabled branches present at issuance and consumption: true\n- public/authenticated ledger projection includes token SHA-256: false\n- production-go false markers retained: true\n\n## Post-cleanup live check\n\n`GET /health` returned 200 with:\n\n- implementation revision `R3-GUARD`\n- guard configured: true\n- merge authorization enabled: false\n- production_go: false\n\n## Promotion boundary\n\nPromotion of this branch means only:\n\n`EXTERNAL_AUTHORIZER_LIVE_FAIL_CLOSED` \n`ONE_TIME_TOKEN_LEDGER_LIVE`\n\nIt does not mean:\n\n`GITHUB_OBSERVER_VALIDATED` \n`DEDICATED_GITHUB_APP_CUSTODY` \n`EXTERNAL_DEPLOYER_LIVE` \n`PRODUCT_GO` \n`PRODUCTION_GO`\n",[271],"cd451100-6b03-4f0a-bb79-0dea4a0c98e0","components","01a04b9f-d094-726a-8052-ab8c52b8ddee",["D",1787975159958],"directory",[277],"pulls","branches",26,"forks","envVars",{"_290":292,"_293":61},"connections",{"_290":61,"_291":61},"count","unfilledCount",21,"emptyCount",{"_41":276,"_31":277,"_29":278,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":372,"_13":61,"_32":280,"_34":-5,"_23":24,"_163":-5,"_315":373,"_26":374},{"_41":270,"_31":271,"_29":272,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":369,"_13":61,"_32":20,"_34":274,"_23":24,"_163":-5,"_315":370,"_26":371},{"_41":264,"_31":265,"_29":266,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":366,"_13":61,"_32":20,"_34":268,"_23":24,"_163":-5,"_315":367,"_26":368},{"_41":258,"_31":259,"_29":260,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":363,"_13":61,"_32":20,"_34":262,"_23":24,"_163":-5,"_315":364,"_26":365},{"_41":252,"_31":253,"_29":254,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":360,"_13":61,"_32":20,"_34":256,"_23":24,"_163":-5,"_315":361,"_26":362},{"_41":246,"_31":247,"_29":248,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":357,"_13":61,"_32":20,"_34":250,"_23":24,"_163":-5,"_315":358,"_26":359},{"_41":240,"_31":241,"_29":242,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":354,"_13":61,"_32":20,"_34":244,"_23":24,"_163":-5,"_315":355,"_26":356},{"_41":234,"_31":235,"_29":236,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":351,"_13":61,"_32":20,"_34":238,"_23":24,"_163":-5,"_315":352,"_26":353},{"_41":228,"_31":229,"_29":230,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":348,"_13":61,"_32":20,"_34":232,"_23":24,"_163":-5,"_315":349,"_26":350},{"_41":222,"_31":223,"_29":224,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":345,"_13":61,"_32":33,"_34":226,"_23":24,"_163":-5,"_315":346,"_26":347},{"_41":215,"_31":216,"_29":217,"_160":-5,"_39":40,"_38":218,"_161":57,"_36":342,"_13":61,"_32":20,"_34":220,"_23":24,"_163":-5,"_315":343,"_26":344},{"_41":208,"_31":209,"_29":210,"_160":-5,"_39":40,"_38":168,"_161":24,"_36":339,"_13":61,"_32":212,"_34":213,"_23":24,"_163":-5,"_315":340,"_26":341},{"_41":202,"_31":203,"_29":204,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":336,"_13":61,"_32":33,"_34":206,"_23":24,"_163":-5,"_315":337,"_26":338},{"_41":196,"_31":197,"_29":198,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":333,"_13":61,"_32":33,"_34":200,"_23":24,"_163":-5,"_315":334,"_26":335},{"_41":190,"_31":191,"_29":192,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":330,"_13":61,"_32":33,"_34":194,"_23":24,"_163":-5,"_315":331,"_26":332},{"_41":184,"_31":185,"_29":186,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":327,"_13":61,"_32":33,"_34":188,"_23":24,"_163":-5,"_315":328,"_26":329},{"_41":178,"_31":179,"_29":180,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":324,"_13":61,"_32":33,"_34":182,"_23":24,"_163":-5,"_315":325,"_26":326},{"_41":172,"_31":173,"_29":174,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":321,"_13":61,"_32":33,"_34":176,"_23":24,"_163":-5,"_315":322,"_26":323},{"_41":165,"_31":166,"_29":167,"_160":-5,"_39":40,"_38":168,"_161":57,"_36":318,"_13":61,"_32":33,"_34":170,"_23":24,"_163":-5,"_315":319,"_26":320},{"_41":159,"_31":27,"_29":30,"_160":-5,"_39":40,"_38":14,"_161":57,"_36":314,"_13":61,"_32":33,"_34":35,"_23":24,"_163":-5,"_315":316,"_26":317},["D",1787975266512],"children",[],[27],["D",1787975159958],[],[166],["D",1787975159958],[],[173],["D",1787975159958],[],[179],["D",1787975159958],[],[185],["D",1787975159958],[],[191],["D",1787975159958],[],[197],["D",1787975159958],[],[203],["D",1787975159958],[],[209],["D",1787975243955],[],[216],["D",1787975159958],[],[223],["D",1787975159958],[],[229],["D",1787975159958],[],[235],["D",1787975159958],[],[241],["D",1787975159958],[],[247],["D",1787975159958],[],[253],["D",1787975159958],[],[259],["D",1787975159958],[],[265],["D",1787975159958],[],[271],["D",1787975159958],[],[277],["D",1787964475423],["D",1789531243171],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":53,"_105":106,"_107":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":91,"_92":93,"_94":48,"_95":42,"_96":63,"_97":43,"_98":99},"ctx",{"_80":-5,"_129":413,"_414":415,"_416":417,"_418":24,"_419":24,"_420":24,"_421":57,"_422":-5,"_423":-7,"_424":-7,"_425":61,"_426":24,"_427":24,"_428":-5,"_429":24,"_430":24,"_431":24,"_432":-5},"ENV",{"_384":385,"_386":387,"_388":135,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398,"_399":400,"_401":402,"_403":404,"_405":406,"_407":408,"_409":410,"_411":412},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v3