source 2<\/a>/);
assert.doesNotMatch(html, /|/);
});
test('a citation inside indented code fails even when the section has other prose', () => {
const value = fixture();
const text = '# A factual title\n\n## Introduction\nOrdinary prose.\n\n A checked claim.';
value.output[1].content[0].text = text;
value.output[1].content[0].annotations[0].start_index = text.indexOf('checked');
value.output[1].content[0].annotations[0].end_index = text.indexOf('claim.') + 5;
assert.throws(() => validateAndRender(value), /not a visible clickable link/);
});
test('model-authored source labels cannot impersonate generated citation links', () => {
const value = fixture();
value.output[1].content[1].text += '\n[source 1](https://example.org/a)';
assert.throws(() => validateAndRender(value), /reserved source-link label/);
});
test('accepts BMP Unicode prose in multiple blocks while keeping citation links outside code', () => {
const value = fixture();
const text = value.output[1].content[0].text.replace('checked claim', 'café claim');
value.output[1].content[0].text = text;
value.output[1].content[0].annotations[0].start_index = text.indexOf('café');
value.output[1].content[0].annotations[0].end_index = text.indexOf('claim.') + 5;
const result = validateAndRender(value);
assert.match(result.renderedDraft, /café claim\. \[source 1\]\(https:\/\/example\.org\/a\)/);
assert.equal(result.citations[0].blockIndex, 0);
});
test('rejects existing output path and missing parent before any API request', async () => {
const existing = await mkdtemp(join(tmpdir(), 'openai-blog-'));
try {
await assert.rejects(requireNewOutputPath(existing), /already exists/);
await assert.doesNotReject(requireNewOutputPath(join(existing, 'new-run')));
await assert.rejects(requireNewOutputPath(join(existing, 'absent', 'new-run')), /ENOENT/);
} finally {
await rm(existing, { recursive: true, force: true });
}
});
```
## Conclusion
The files give a writer a repeatable path from an approved topic to a searched, cited draft with a visible human approval boundary. A successful local validation means the response contains the required sections, a completed search receipt and clickable citation links. Publishable accuracy comes only after a person opens the sources and resolves the claims. Keep that review record with `draft-raw.md`, `evidence.json` and the final copy.
## Sources
- [OpenAI: Web search guide (checked October 26, 2026)](https://developers.openai.com/api/docs/guides/tools-web-search) — Explains the native Responses web_search action, consulted sources and URL citation display. The code checks the returned action and renders links; a source link alone does not verify a claim.
- [OpenAI: Responses create reference (checked October 26, 2026)](https://developers.openai.com/api/reference/resources/responses/methods/create) — Defines REST request fields used in the project, including tool choice, source inclusion, response state and output bounds. Account success was not tested.
- [OpenAI: GPT-6 Luna model page (checked October 26, 2026)](https://developers.openai.com/api/docs/models/gpt-6-luna) — Documents model availability, low reasoning and web-search support; a particular account's entitlement and tier still require a check.
- [OpenAI: API pricing (checked October 26, 2026)](https://developers.openai.com/api/docs/pricing) — Lists model and search-tool cost categories. The number of searches and actual cost of a reader run are unknown in advance.
- [OpenAI: API data controls (checked October 26, 2026)](https://developers.openai.com/api/docs/guides/your-data) — Separates store:false application state from abuse-monitoring logs and account-specific exceptions.
- [OpenAI: Services Agreement](https://openai.com/policies/services-agreement/) — Describes input and output responsibilities. It does not grant a right to copy third-party source pages.
- [markdown-it 15.0.3 npm record (checked October 26, 2026)](https://registry.npmjs.org/markdown-it/15.0.3) — Records the pinned package version, MIT license and integrity; the complete published lockfile provides the actual dependency tree.
- [markdown-it repository](https://github.com/markdown-it/markdown-it) — Documents the CommonMark parser used for structural and rendered-link checks. Offline fixtures exercised this implementation.
- [Microsoft: Read-Host (checked October 26, 2026)](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/read-host?view=powershell-7.6) — Read-Host -MaskInput hides typed characters and returns a plaintext string; the prompt alone does not encrypt the key.
- [Microsoft: PowerShell environment variables (checked October 26, 2026)](https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_environment_variables?view=powershell-7.6) — A variable assigned through Env: is available to child processes in the same session.