feat: add tiered channel agent and mobile Codex bridge

product-source/hololake-native-desktop/scripts/mobile-sync-admission.test.mjs

@@ -22,7 +22,11 @@ test('mobile sync is a signed opt-in bridge, not a second persona system', () =>
 
 test('all desktop controls cross one numbered route family', () => {
   const routes = registry.operations.filter((route) => route.module_number === 'HLP-NIPC-MOD-0030')
-  assert.deepEqual(routes.map((route) => route.operation_number), Array.from({ length: 6 }, (_, index) => `HLP-NIPC-OP-${String(index + 141).padStart(4, '0')}`))
+  assert.deepEqual(routes.map((route) => route.operation_number), [
+    ...Array.from({ length: 6 }, (_, index) => `HLP-NIPC-OP-${String(index + 141).padStart(4, '0')}`),
+    'HLP-NIPC-OP-0176',
+    'HLP-NIPC-OP-0177',
+  ])
   assert.ok(routes.every((route) => route.target_number === 'HLP-NIPC-TGT-0030'))
   assert.ok(routes.every((route) => route.admission === 'VERIFIED_HUMAN_ROUTE'))
   assert.doesNotMatch(frontend, /from ['"]@tauri-apps\/api\/core['"]/)
@@ -41,3 +45,17 @@ test('transport is bounded, encrypted, replay guarded and explicitly controlled'
   assert.match(frontend, /开启 iPhone 同步/)
   assert.match(frontend, /关闭本机同步入口/)
 })
+
+test('mobile Agent chat executes only on the paired desktop and is idempotent', () => {
+  assert.equal(contract.agent_chat.execution_node, 'PAIRED_DESKTOP_ROOT_ONLY')
+  assert.equal(contract.agent_chat.arbitrary_shell_from_mobile, false)
+  assert.match(rust, /mobile_agent_requests/)
+  assert.match(rust, /AGENT_REQUEST_IN_PROGRESS/)
+  assert.match(rust, /content_sha256/)
+  assert.match(rust, /persona_agent_runtime::send_message/)
+  assert.match(rust, /UNBOUND_CHANNEL_SYSTEM_RESPONSE/)
+  assert.match(rust, /thread\/resume/)
+  assert.match(rust, /turn\/start/)
+  assert.match(rust, /"type": "readOnly"/)
+  assert.match(rust, /CODEX_INTERACTIVE_APPROVAL_REQUIRED_ON_DESKTOP/)
+})