test/integration/host-flow.test.ts (1)

460-473: Cover the full leaked-field set in this regression test.

This only proves prePromptMessageCount is stripped. The old ...args spread also leaked tokenBudget and runtimeContext, so it would be better to pass both here and assert they stay out of after_turn_kernel as well.

Suggested test tightening

   await context.afterTurn({
     sessionId: "test-session",
     userId: "test-user",
     messages: mockMessages,
     prePromptMessageCount: 2,
     isHeartbeat: false,
+    tokenBudget: 1024,
+    runtimeContext: { currentTokenCount: 900 },
   });

   const params = rpc.getLastCall("after_turn_kernel");
   assert.ok(params, "Expected after_turn_kernel to be called");
   assert.equal(params.sessionId, "test-session");
   assert.equal(params.userId, "test-user");
   assert.equal("prePromptMessageCount" in params, false, "prePromptMessageCount must not leak to daemon — daemon defaults to 0 and uses content-hash dedup");
+  assert.equal("tokenBudget" in params, false, "tokenBudget must stay host-local");
+  assert.equal("runtimeContext" in params, false, "runtimeContext must stay host-local");
   assert.equal(params.isHeartbeat, false);
   assert.deepEqual(params.messages, mockMessages);

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@test/integration/host-flow.test.ts` around lines 460 - 473, The test
currently only asserts that prePromptMessageCount is stripped from the params
passed to after_turn_kernel; extend it to also verify that tokenBudget and
runtimeContext are not leaked: after calling context.afterTurn(...) and
retrieving params via rpc.getLastCall("after_turn_kernel"), add assertions that
"tokenBudget" and "runtimeContext" are not present on params (e.g.,
assert.equal("tokenBudget" in params, false) and assert.equal("runtimeContext"
in params, false)) while keeping the existing checks for sessionId, userId, and
isHeartbeat so the test ensures the full leaked-field set
(prePromptMessageCount, tokenBudget, runtimeContext) is stripped before the RPC
call.