@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/integration-authorization/application.d.ts

@@ -0,0 +1,56 @@
+import type { CommandReceipt } from "@maiaos/protocol";
+import { Effect } from "effect";
+import type { InstalledHarnessScannerService } from "../harness/installed/scan.js";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+import type { ProcessResourceManagerService } from "../runtime/process/resource/contract.js";
+import { type AuthorizationProjection, type CodexIntegrationPlanRecord } from "../runtime/process/resource/integration-authorization/index.js";
+import type { NodeDatabaseResource } from "../storage/node-database.js";
+export declare const codexIntegrationRuntimePolicy: Readonly<{
+    adapterVersion: "codex-app-server-v1";
+    ownerKinds: readonly ["codex-probe", "codex-session"];
+    sandboxPolicyRevision: "adr-009-codex-sandbox-v1";
+    vouchPolicyRevision: "adr-009-codex-vouch-v1";
+}>;
+export type IntegrationAuthorizationApplication = {
+    readonly database: NodeDatabaseResource;
+    readonly installedHarnesses: InstalledHarnessScannerService;
+    readonly manager: ProcessResourceManagerService;
+};
+export declare const withPlanAndStatusAdmission: <TValue>(application: IntegrationAuthorizationApplication, operation: Effect.Effect<TValue, NodeRuntimeError>) => Effect.Effect<TValue, NodeRuntimeError>;
+export declare const requireDarwinIntegrationAuthorization: () => Effect.Effect<void, NodeRuntimeError>;
+export declare const planCodexIntegration: (application: IntegrationAuthorizationApplication, input: {
+    readonly commandId: string;
+    readonly requestDigest: string;
+}) => Effect.Effect<CodexIntegrationPlanRecord, NodeRuntimeError, never>;
+export type AppliedCodexIntegration = {
+    readonly authorization: AuthorizationProjection;
+    readonly delivery: "duplicate" | "new";
+    readonly receipt: CommandReceipt;
+    readonly recordedAt: string;
+};
+type ApplyCodexInput = {
+    readonly commandId: string;
+    readonly planId: string;
+    readonly requestDigest: string;
+};
+export declare const applyCodexIntegration: (application: IntegrationAuthorizationApplication, input: ApplyCodexInput) => Effect.Effect<AppliedCodexIntegration, NodeRuntimeError, never>;
+export type ShownCodexIntegration = undefined | {
+    readonly activeUnsettledPermits: number;
+    readonly authorization: AuthorizationProjection;
+    readonly revokingUnsettledPermits: number;
+};
+export declare const showCodexIntegration: (application: IntegrationAuthorizationApplication) => Effect.Effect<ShownCodexIntegration, NodeRuntimeError, never>;
+export type RemovedCodexIntegration = {
+    readonly authorization: AuthorizationProjection;
+    readonly delivery: "duplicate" | "new";
+    readonly invalidatedIssuedPermits: number;
+    readonly receipt: CommandReceipt;
+    readonly recordedAt: string;
+    readonly remainingUnsettledPermits: number;
+};
+export declare const removeCodexIntegration: (application: IntegrationAuthorizationApplication, input: {
+    readonly commandId: string;
+    readonly requestDigest: string;
+}) => Effect.Effect<RemovedCodexIntegration, NodeRuntimeError, never>;
+export {};
+//# sourceMappingURL=application.d.ts.map

package/dist/integration-authorization/application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.d.ts","sourceRoot":"","sources":["../../src/integration-authorization/application.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAa,MAAM,QAAQ,CAAC;AAE3C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AAO7F,OAAO,EACL,KAAK,uBAAuB,EAE5B,KAAK,0BAA0B,EAEhC,MAAM,gEAAgE,CAAC;AAKxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAQxE,eAAO,MAAM,6BAA6B;;;;;EAKxC,CAAC;AAEH,MAAM,MAAM,mCAAmC,GAAG;IAChD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;IAC5D,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;CACjD,CAAC;AAYF,eAAO,MAAM,0BAA0B,GAAI,MAAM,EAC/C,aAAa,mCAAmC,EAChD,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,KACjD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAmBxC,CAAC;AAQF,eAAO,MAAM,qCAAqC,QAAO,MAAM,CAAC,MAAM,CACpE,IAAI,EACJ,gBAAgB,CASX,CAAC;AAsGR,eAAO,MAAM,oBAAoB;wBAIF,MAAM;4BAA0B,MAAM;wEAQnE,CAAC;AAeH,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,KAAK,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AA4CF,eAAO,MAAM,qBAAqB,+IAsBhC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT;IACE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C,CAAC;AAEN,eAAO,MAAM,oBAAoB,qHAM/B,CAAC;AAgCH,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,KAAK,CAAC;IACvC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;CAC5C,CAAC;AA2BF,eAAO,MAAM,sBAAsB;wBAIJ,MAAM;4BAA0B,MAAM;qEAgBnE,CAAC"}

package/dist/integration-authorization/application.js

@@ -0,0 +1,185 @@
+import { createHash } from "node:crypto";
+import { Effect, Semaphore } from "effect";
+import { makeNodeRuntimeError, } from "../runtime/errors.js";
+import { inspectDarwinVouchedTarget, retainDarwinVouchedAuthorizationTarget, verifyRetainedDarwinVouchedTargetPath, } from "../runtime/process/resource/darwin-vouch-policy.js";
+import { CODEX_OWNER_KINDS, } from "../runtime/process/resource/integration-authorization/index.js";
+import { hasCodexAuthorizationRevocation, processResourceManagerRevokeCodexAuthorization, } from "../runtime/process/resource/internal-spawn.js";
+const maximumPlanAndStatusRequestsPerActor = 4;
+const planAndStatusAdmissions = new WeakMap();
+export const codexIntegrationRuntimePolicy = Object.freeze({
+    adapterVersion: "codex-app-server-v1",
+    ownerKinds: CODEX_OWNER_KINDS,
+    sandboxPolicyRevision: "adr-009-codex-sandbox-v1",
+    vouchPolicyRevision: "adr-009-codex-vouch-v1",
+});
+const planAndStatusAdmission = (manager) => {
+    const existing = planAndStatusAdmissions.get(manager);
+    if (existing !== undefined)
+        return existing;
+    const created = Semaphore.makeUnsafe(maximumPlanAndStatusRequestsPerActor);
+    planAndStatusAdmissions.set(manager, created);
+    return created;
+};
+export const withPlanAndStatusAdmission = (application, operation) => {
+    const semaphore = planAndStatusAdmission(application.manager);
+    return Effect.acquireUseRelease(Semaphore.takeIfAvailable(semaphore, 1).pipe(Effect.flatMap((admitted) => admitted
+        ? Effect.succeed(true)
+        : Effect.fail(makeNodeRuntimeError("saturated", "The integration authorization request limit is saturated.", true)))), () => operation, () => Semaphore.release(semaphore, 1));
+};
+const integrationUnavailable = () => makeNodeRuntimeError("resource_not_found", "The closed-catalog Codex integration target is unavailable.");
+export const requireDarwinIntegrationAuthorization = () => process.platform === "darwin"
+    ? Effect.void
+    : Effect.fail(makeNodeRuntimeError("command_not_implemented", "Codex integration authorization is unsupported on this platform."));
+const policyStale = () => makeNodeRuntimeError("storage_conflict", "The Codex integration plan policy revision is stale.", true);
+const sha256 = (value) => createHash("sha256").update(value).digest("hex");
+const planIdFor = (commandId, target) => `plan_codex_${sha256(JSON.stringify({ commandId, target })).slice(0, 48)}`;
+const settlementCommandIdFor = (commandId) => `ia.remove.settle.${sha256(commandId).slice(0, 48)}`;
+const settlementRequestDigestFor = (commandId, outcome) => sha256(JSON.stringify({ commandId, outcome }));
+const inspectResolvedCodex = Effect.fn("IntegrationAuthorization.inspectResolvedCodex")(function* (installedHarnesses) {
+    const resolve = installedHarnesses.resolveCodexForAuthorization;
+    if (resolve === undefined)
+        return yield* Effect.fail(integrationUnavailable());
+    const resolution = yield* resolve();
+    if (resolution.state !== "resolved")
+        return yield* Effect.fail(integrationUnavailable());
+    const identity = yield* inspectDarwinVouchedTarget(resolution.executable.path);
+    if (identity.device !== resolution.executable.device ||
+        identity.inode !== resolution.executable.inode ||
+        identity.sizeBytes !== resolution.executable.sizeBytes) {
+        return yield* Effect.fail(integrationUnavailable());
+    }
+    return identity;
+});
+const targetFromIdentity = (identity) => ({
+    adapterVersion: codexIntegrationRuntimePolicy.adapterVersion,
+    executableIdentity: {
+        device: identity.device,
+        inode: identity.inode,
+        sizeBytes: identity.sizeBytes,
+    },
+    executablePath: identity.path,
+    executableSha256: identity.sha256,
+    ownerKinds: codexIntegrationRuntimePolicy.ownerKinds,
+    sandboxPolicyRevision: codexIntegrationRuntimePolicy.sandboxPolicyRevision,
+    vouchPolicyRevision: codexIntegrationRuntimePolicy.vouchPolicyRevision,
+});
+const targetFromResolvedCodex = Effect.fn("IntegrationAuthorization.resolveCodexTarget")(function* (installedHarnesses) {
+    return targetFromIdentity(yield* inspectResolvedCodex(installedHarnesses));
+});
+const targetPolicyIsCurrent = (target) => target.adapterVersion === codexIntegrationRuntimePolicy.adapterVersion &&
+    target.sandboxPolicyRevision ===
+        codexIntegrationRuntimePolicy.sandboxPolicyRevision &&
+    target.vouchPolicyRevision ===
+        codexIntegrationRuntimePolicy.vouchPolicyRevision &&
+    target.ownerKinds.length ===
+        codexIntegrationRuntimePolicy.ownerKinds.length &&
+    codexIntegrationRuntimePolicy.ownerKinds.every((ownerKind) => target.ownerKinds.includes(ownerKind));
+const planTargetExpectation = (plan) => ({
+    adapter: "codex",
+    adapterVersion: plan.target.adapterVersion,
+    executablePath: plan.target.executablePath,
+    ownerKinds: plan.target.ownerKinds,
+    sandboxPolicyRevision: plan.target.sandboxPolicyRevision,
+    sha256: plan.target.executableSha256,
+    vouchPolicyRevision: plan.target.vouchPolicyRevision,
+});
+const retainedTargetMatchesPlan = (lease, plan) => lease.identity.device.toString() === plan.target.executableIdentity.device &&
+    lease.identity.inode.toString() === plan.target.executableIdentity.inode &&
+    lease.identity.size.toString() === plan.target.executableIdentity.sizeBytes;
+const requireCurrentPlanPolicy = (plan) => targetPolicyIsCurrent(plan.target) ? Effect.void : Effect.fail(policyStale());
+export const planCodexIntegration = Effect.fn("IntegrationAuthorization.planCodex")(function* (application, input) {
+    const target = yield* targetFromResolvedCodex(application.installedHarnesses);
+    return yield* application.database.createCodexIntegrationPlan({
+        ...input,
+        planId: planIdFor(input.commandId, target),
+        target,
+    });
+});
+const readRequiredPlan = Effect.fn("IntegrationAuthorization.readRequiredPlan")(function* (database, planId) {
+    const plan = yield* database.readCodexIntegrationPlan(planId);
+    if (plan !== undefined)
+        return plan;
+    return yield* Effect.fail(makeNodeRuntimeError("resource_not_found", "The Codex integration plan was not found."));
+});
+const replayCodexApply = Effect.fn("IntegrationAuthorization.replayCodexApply")(function* (database, input) {
+    const existing = yield* database.findCommand({
+        actorId: "actor_local_user",
+        commandId: input.commandId,
+        method: "integration.apply.codex",
+        requestDigest: input.requestDigest,
+    });
+    if (existing === undefined)
+        return undefined;
+    return yield* database.applyCodexIntegrationAuthorization({
+        ...input,
+        policy: codexIntegrationRuntimePolicy,
+        verifyTargetIdentity: () => {
+            throw makeNodeRuntimeError("storage_corrupt", "The integration apply replay attempted a new target effect.");
+        },
+    });
+});
+const applyRetainedCodexPlan = (context) => {
+    if (!retainedTargetMatchesPlan(context.lease, context.plan))
+        return Effect.fail(integrationUnavailable());
+    return context.database.applyCodexIntegrationAuthorization({
+        ...context.input,
+        policy: codexIntegrationRuntimePolicy,
+        verifyTargetIdentity: () => {
+            verifyRetainedDarwinVouchedTargetPath(context.lease);
+        },
+    });
+};
+export const applyCodexIntegration = Effect.fn("IntegrationAuthorization.applyCodex")(function* (application, input) {
+    const replay = yield* replayCodexApply(application.database, input);
+    if (replay !== undefined)
+        return replay;
+    const plan = yield* readRequiredPlan(application.database, input.planId);
+    yield* requireCurrentPlanPolicy(plan);
+    return yield* Effect.scoped(retainDarwinVouchedAuthorizationTarget(planTargetExpectation(plan)).pipe(Effect.flatMap((lease) => applyRetainedCodexPlan({
+        database: application.database,
+        input,
+        lease,
+        plan,
+    }))));
+});
+export const showCodexIntegration = Effect.fn("IntegrationAuthorization.showCodex")(function* (application) {
+    return yield* application.database.showCodexIntegrationAuthorization();
+});
+const cleanAuthorizedTrees = (manager, authorizationRevision) => hasCodexAuthorizationRevocation(manager)
+    ? manager[processResourceManagerRevokeCodexAuthorization](authorizationRevision).pipe(Effect.result)
+    : Effect.succeed({ _tag: "Failure" });
+const settleRemoval = (database, input) => database.settleCodexIntegrationRevocation({
+    commandId: settlementCommandIdFor(input.commandId),
+    outcome: input.outcome,
+    requestDigest: settlementRequestDigestFor(input.commandId, input.outcome),
+});
+const removalResult = (revoking, settlement) => ({
+    authorization: settlement.authorization,
+    delivery: revoking.delivery,
+    invalidatedIssuedPermits: revoking.invalidatedIssuedPermits,
+    receipt: revoking.receipt,
+    recordedAt: revoking.recordedAt,
+    remainingUnsettledPermits: settlement.remainingUnsettledPermits,
+});
+const settleCleanRemoval = Effect.fn("IntegrationAuthorization.settleCleanRemoval")(function* (database, commandId) {
+    const revoked = yield* Effect.result(settleRemoval(database, { commandId, outcome: "revoked" }));
+    if (revoked._tag === "Success")
+        return revoked.success;
+    return yield* settleRemoval(database, {
+        commandId,
+        outcome: "cleanup_unknown",
+    });
+});
+export const removeCodexIntegration = Effect.fn("IntegrationAuthorization.removeCodex")(function* (application, input) {
+    const revoking = yield* application.database.beginCodexIntegrationRevocation(input);
+    const cleanup = yield* cleanAuthorizedTrees(application.manager, revoking.authorization.revision);
+    const clean = cleanup._tag === "Success" && cleanup.success.state === "clean";
+    const settlement = clean
+        ? yield* settleCleanRemoval(application.database, input.commandId)
+        : yield* settleRemoval(application.database, {
+            commandId: input.commandId,
+            outcome: "cleanup_unknown",
+        });
+    return removalResult(revoking, settlement);
+});
+//# sourceMappingURL=application.js.map

package/dist/integration-authorization/application.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.js","sourceRoot":"","sources":["../../src/integration-authorization/application.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAG3C,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEL,0BAA0B,EAC1B,sCAAsC,EACtC,qCAAqC,GACtC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAEL,iBAAiB,GAGlB,MAAM,gEAAgE,CAAC;AACxE,OAAO,EACL,+BAA+B,EAC/B,8CAA8C,GAC/C,MAAM,+CAA+C,CAAC;AAGvD,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAC/C,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAGxC,CAAC;AAEJ,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IACzD,cAAc,EAAE,qBAAqB;IACrC,UAAU,EAAE,iBAAiB;IAC7B,qBAAqB,EAAE,0BAA0B;IACjD,mBAAmB,EAAE,wBAAwB;CAC9C,CAAC,CAAC;AAQH,MAAM,sBAAsB,GAAG,CAC7B,OAAsC,EACjB,EAAE;IACvB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC3E,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,WAAgD,EAChD,SAAkD,EACT,EAAE;IAC3C,MAAM,SAAS,GAAG,sBAAsB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,iBAAiB,CAC7B,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ;QACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,oBAAoB,CAClB,WAAW,EACX,2DAA2D,EAC3D,IAAI,CACL,CACF,CACN,CACF,EACD,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CACtC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,GAAqB,EAAE,CACpD,oBAAoB,CAClB,oBAAoB,EACpB,6DAA6D,CAC9D,CAAC;AAEJ,MAAM,CAAC,MAAM,qCAAqC,GAAG,GAGnD,EAAE,CACF,OAAO,CAAC,QAAQ,KAAK,QAAQ;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,oBAAoB,CAClB,yBAAyB,EACzB,kEAAkE,CACnE,CACF,CAAC;AAER,MAAM,WAAW,GAAG,GAAqB,EAAE,CACzC,oBAAoB,CAClB,kBAAkB,EAClB,sDAAsD,EACtD,IAAI,CACL,CAAC;AAEJ,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CACvC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnD,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAE,MAAkC,EAAE,EAAE,CAC1E,cAAc,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAE7E,MAAM,sBAAsB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC3D,oBAAoB,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAEvD,MAAM,0BAA0B,GAAG,CACjC,SAAiB,EACjB,OAAsC,EAC9B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAE5D,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CACpC,+CAA+C,CAChD,CAAC,QAAQ,CAAC,EAAE,kBAAkD;IAC7D,MAAM,OAAO,GAAG,kBAAkB,CAAC,4BAA4B,CAAC;IAChE,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU;QACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAChD,UAAU,CAAC,UAAU,CAAC,IAAI,CAC3B,CAAC;IACF,IACE,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,UAAU,CAAC,MAAM;QAChD,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,UAAU,CAAC,KAAK;QAC9C,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,UAAU,CAAC,SAAS,EACtD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,QAAuE,EAC3C,EAAE,CAAC,CAAC;IAChC,cAAc,EAAE,6BAA6B,CAAC,cAAc;IAC5D,kBAAkB,EAAE;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B;IACD,cAAc,EAAE,QAAQ,CAAC,IAAI;IAC7B,gBAAgB,EAAE,QAAQ,CAAC,MAAM;IACjC,UAAU,EAAE,6BAA6B,CAAC,UAAU;IACpD,qBAAqB,EAAE,6BAA6B,CAAC,qBAAqB;IAC1E,mBAAmB,EAAE,6BAA6B,CAAC,mBAAmB;CACvE,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CACvC,6CAA6C,CAC9C,CAAC,QAAQ,CAAC,EAAE,kBAAkD;IAC7D,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,MAAkC,EAAW,EAAE,CAC5E,MAAM,CAAC,cAAc,KAAK,6BAA6B,CAAC,cAAc;IACtE,MAAM,CAAC,qBAAqB;QAC1B,6BAA6B,CAAC,qBAAqB;IACrD,MAAM,CAAC,mBAAmB;QACxB,6BAA6B,CAAC,mBAAmB;IACnD,MAAM,CAAC,UAAU,CAAC,MAAM;QACtB,6BAA6B,CAAC,UAAU,CAAC,MAAM;IACjD,6BAA6B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3D,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CACtC,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAAC,IAAgC,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,EAAE,OAAgB;IACzB,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;IAC1C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;IAC1C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;IAClC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;IACxD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;IACpC,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;CACrD,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAChC,KAA+B,EAC/B,IAAgC,EACvB,EAAE,CACX,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM;IAC1E,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK;IACxE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC;AAE9E,MAAM,wBAAwB,GAAG,CAC/B,IAAgC,EACO,EAAE,CACzC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAC3C,oCAAoC,CACrC,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,KAAqE;IAErE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC5D,GAAG,KAAK;QACR,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;QAC1C,MAAM;KACP,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CAC7E,QAAQ,CAAC,EAAE,QAA8B,EAAE,MAAc;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,oBAAoB,CAClB,oBAAoB,EACpB,2CAA2C,CAC5C,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAeF,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CAC7E,QAAQ,CAAC,EACP,QAA8B,EAC9B,KAAsB;IAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC3C,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,yBAAyB;QACjC,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACxD,GAAG,KAAK;QACR,MAAM,EAAE,6BAA6B;QACrC,oBAAoB,EAAE,GAAG,EAAE;YACzB,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,OAK/B,EAAE,EAAE;IACH,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC;QACzD,OAAO,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACzD,GAAG,OAAO,CAAC,KAAK;QAChB,MAAM,EAAE,6BAA6B;QACrC,oBAAoB,EAAE,GAAG,EAAE;YACzB,qCAAqC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAC5C,qCAAqC,CACtC,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,KAAsB;IAEtB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,KAAK,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CACzB,sCAAsC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,sBAAsB,CAAC;QACrB,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,KAAK;QACL,KAAK;QACL,IAAI;KACL,CAAC,CACH,CACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAUH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAC3C,oCAAoC,CACrC,CAAC,QAAQ,CAAC,EACT,WAAgD;IAEhD,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,iCAAiC,EAAE,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAC3B,OAAsC,EACtC,qBAA6B,EAC7B,EAAE,CACF,+BAA+B,CAAC,OAAO,CAAC;IACtC,CAAC,CAAC,OAAO,CAAC,8CAA8C,CAAC,CACrD,qBAAqB,CACtB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC;AAEnD,MAAM,aAAa,GAAG,CACpB,QAA8B,EAC9B,KAGC,EACD,EAAE,CACF,QAAQ,CAAC,gCAAgC,CAAC;IACxC,SAAS,EAAE,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC;IAClD,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,aAAa,EAAE,0BAA0B,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;CAC1E,CAAC,CAAC;AAkBL,MAAM,aAAa,GAAG,CACpB,QAAyB,EACzB,UAAgC,EACP,EAAE,CAAC,CAAC;IAC7B,aAAa,EAAE,UAAU,CAAC,aAAa;IACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;IAC3B,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;IAC3D,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;IAC/B,yBAAyB,EAAE,UAAU,CAAC,yBAAyB;CAChE,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAClC,6CAA6C,CAC9C,CAAC,QAAQ,CAAC,EAAE,QAA8B,EAAE,SAAiB;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAClC,aAAa,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAC3D,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IACvD,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE;QACpC,SAAS;QACT,OAAO,EAAE,iBAAiB;KAC3B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAC7C,sCAAsC,CACvC,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,KAAqE;IAErE,MAAM,QAAQ,GACZ,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,oBAAoB,CACzC,WAAW,CAAC,OAAO,EACnB,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAChC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC;IAC9E,MAAM,UAAU,GAAG,KAAK;QACtB,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;QAClE,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE;YACzC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,iBAAiB;SAC3B,CAAC,CAAC;IACP,OAAO,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC"}

package/dist/integration-authorization/pi-rpc-application.d.ts

@@ -0,0 +1,46 @@
+import { Effect } from "effect";
+import type { PiRpcIntegrationPlanRecord, PiRpcIntegrationPlanTarget } from "../harness/pi-rpc/authorization/index.js";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+import { type IntegrationAuthorizationApplication } from "./application.js";
+export declare const piRpcIntegrationRuntimePolicy: Readonly<{
+    adapterVersion: "pi-rpc-v1";
+    conversationPolicyRevision: "adr-009-pi-rpc-conversation-v2";
+    ownerKinds: readonly ["pi-rpc-probe", "pi-rpc-session"];
+    vouchPolicyRevision: "adr-009-pi-rpc-vouch-v1";
+}>;
+export declare const requirePiRpcIntegrationPlatform: () => Effect.Effect<void, NodeRuntimeError>;
+export declare const planPiRpcIntegration: (application: IntegrationAuthorizationApplication, input: {
+    readonly commandId: string;
+    readonly requestDigest: string;
+}) => Effect.Effect<PiRpcIntegrationPlanRecord, NodeRuntimeError, never>;
+export declare const piRpcIntegrationPlanMatchesCurrentTarget: (plan: PiRpcIntegrationPlanRecord, target: PiRpcIntegrationPlanTarget) => boolean;
+type ApplyInput = {
+    readonly commandId: string;
+    readonly planId: string;
+    readonly requestDigest: string;
+};
+export declare const applyPiRpcIntegration: (application: IntegrationAuthorizationApplication, input: ApplyInput) => Effect.Effect<{
+    readonly authorization: import("../harness/pi-rpc/authorization/types.js").PiRpcAuthorizationProjection;
+    readonly delivery: "duplicate" | "new";
+    readonly receipt: import("@maiaos/protocol").CommandReceipt;
+    readonly recordedAt: string;
+}, NodeRuntimeError, never>;
+export declare const showPiRpcIntegration: (application: IntegrationAuthorizationApplication) => Effect.Effect<{
+    readonly activeUnsettledPermits: number;
+    readonly authorization: import("../harness/pi-rpc/authorization/types.js").PiRpcAuthorizationProjection;
+    readonly revokingUnsettledPermits: number;
+} | undefined, NodeRuntimeError, never>;
+export declare const removePiRpcIntegration: (application: IntegrationAuthorizationApplication, input: {
+    readonly commandId: string;
+    readonly requestDigest: string;
+}) => Effect.Effect<{
+    authorization: import("../harness/pi-rpc/authorization/types.js").PiRpcAuthorizationProjection;
+    remainingUnsettledPermits: number;
+    delivery: "duplicate" | "new";
+    receipt: import("@maiaos/protocol").CommandReceipt;
+    recordedAt: string;
+    invalidatedIssuedPermits: number;
+}, NodeRuntimeError, never>;
+export declare const withPiRpcPlanAdmission: <TValue>(application: IntegrationAuthorizationApplication, operation: Effect.Effect<TValue, NodeRuntimeError>) => Effect.Effect<TValue, NodeRuntimeError, never>;
+export {};
+//# sourceMappingURL=pi-rpc-application.d.ts.map

package/dist/integration-authorization/pi-rpc-application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-rpc-application.d.ts","sourceRoot":"","sources":["../../src/integration-authorization/pi-rpc-application.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAMhC,OAAO,KAAK,EACV,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,0CAA0C,CAAC;AAElD,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EACL,KAAK,mCAAmC,EAEzC,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,6BAA6B;;;;;EAKxC,CAAC;AAQH,eAAO,MAAM,+BAA+B,QAAO,MAAM,CAAC,MAAM,CAC9D,IAAI,EACJ,gBAAgB,CASX,CAAC;AAkIR,eAAO,MAAM,oBAAoB;wBAIF,MAAM;4BAA0B,MAAM;wEAQnE,CAAC;AAeH,eAAO,MAAM,wCAAwC,GACnD,MAAM,0BAA0B,EAChC,QAAQ,0BAA0B,KACjC,OAUF,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AA+CF,eAAO,MAAM,qBAAqB;;;;;2BAehC,CAAC;AAEH,eAAO,MAAM,oBAAoB,GAC/B,aAAa,mCAAmC;;;;uCACW,CAAC;AAe9D,eAAO,MAAM,sBAAsB;wBAIJ,MAAM;4BAA0B,MAAM;;;;;;;;2BAuBnE,CAAC;AAEH,eAAO,MAAM,sBAAsB,GAAI,MAAM,EAC3C,aAAa,mCAAmC,EAChD,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,mDACG,CAAC"}

package/dist/integration-authorization/pi-rpc-application.js

@@ -0,0 +1,201 @@
+import { createHash } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
+import { Effect } from "effect";
+import { resolvePiRpcArtifact, } from "../harness/pi-rpc/artifact.js";
+import { PI_RPC_SESSION_PACKAGE_VERSION } from "../harness/pi-rpc/contract.js";
+import { makeNodeRuntimeError, } from "../runtime/errors.js";
+import { hasPiRpcAuthorizationRevocation, processResourceManagerRevokePiRpcAuthorization, } from "../runtime/process/resource/internal-spawn.js";
+import { withPlanAndStatusAdmission, } from "./application.js";
+export const piRpcIntegrationRuntimePolicy = Object.freeze({
+    adapterVersion: "pi-rpc-v1",
+    conversationPolicyRevision: "adr-009-pi-rpc-conversation-v2",
+    ownerKinds: ["pi-rpc-probe", "pi-rpc-session"],
+    vouchPolicyRevision: "adr-009-pi-rpc-vouch-v1",
+});
+const unavailable = () => makeNodeRuntimeError("resource_not_found", "The closed-catalog Pi RPC integration target is unavailable.");
+export const requirePiRpcIntegrationPlatform = () => process.platform === "darwin"
+    ? Effect.void
+    : Effect.fail(makeNodeRuntimeError("command_not_implemented", "Pi RPC integration authorization is unsupported on this platform."));
+const exactNumber = (value, label) => {
+    const number = Number(value);
+    if (Number.isSafeInteger(number) && number >= 0)
+        return number;
+    throw makeNodeRuntimeError("internal_error", `The ${label} filesystem identity exceeds the supported range.`);
+};
+const packageManifestSha256 = (artifact) => {
+    const entry = artifact.entries.find((candidate) => candidate.relativePath === "package.json");
+    if (entry !== undefined)
+        return entry.sha256;
+    throw unavailable();
+};
+const fileIdentity = (identity, label) => ({
+    device: exactNumber(identity.device, `${label} device`),
+    inode: exactNumber(identity.inode, `${label} inode`),
+    sizeBytes: exactNumber(identity.size, `${label} size`),
+});
+const directoryIdentity = (identity, label) => ({
+    device: exactNumber(identity.device, `${label} device`),
+    inode: exactNumber(identity.inode, `${label} inode`),
+});
+const packageIdentity = (artifact) => ({
+    packageManifestSha256: packageManifestSha256(artifact),
+    packageName: artifact.packageName,
+    packageRootIdentity: directoryIdentity(artifact.packageRootPhysicalIdentity.realpath.identity, "Pi RPC package-root"),
+    packageRootPath: artifact.packageRootPath,
+    packageVersion: artifact.packageVersion,
+});
+const artifactFromResolved = (artifact) => ({
+    closureSha256: artifact.closureSha256,
+    entries: artifact.entries,
+    entryIdentity: fileIdentity(artifact.entryPhysicalIdentity.realpath.identity, "Pi RPC entry"),
+    entryPath: artifact.entryPath,
+    entrySha256: artifact.entrySha256,
+    excludedBinEntryCount: artifact.excludedBinEntryCount,
+    fileCount: artifact.fileCount,
+    interpreterArchitecture: process.arch === "arm64" ? "arm64" : "x64",
+    interpreterIdentity: fileIdentity(artifact.interpreterPhysicalIdentity.realpath.identity, "Pi RPC interpreter"),
+    interpreterPath: artifact.interpreterPath,
+    interpreterSha256: artifact.interpreterSha256,
+    interpreterVersion: "24.19.0",
+    manifestBytes: artifact.manifestBytes,
+    ...packageIdentity(artifact),
+    totalBytes: artifact.totalBytes,
+});
+const targetFromResolved = (artifact) => {
+    if (artifact.packageVersion !== PI_RPC_SESSION_PACKAGE_VERSION) {
+        throw unavailable();
+    }
+    return {
+        adapterVersion: piRpcIntegrationRuntimePolicy.adapterVersion,
+        artifact: artifactFromResolved(artifact),
+        conversationPolicyRevision: piRpcIntegrationRuntimePolicy.conversationPolicyRevision,
+        ownerKinds: piRpcIntegrationRuntimePolicy.ownerKinds,
+        vouchPolicyRevision: piRpcIntegrationRuntimePolicy.vouchPolicyRevision,
+    };
+};
+const resolvePiRpcExecutable = Effect.fn("IntegrationAuthorization.resolvePiRpcExecutable")(function* (application) {
+    const resolve = application.installedHarnesses.resolvePiForAuthorization;
+    if (resolve === undefined)
+        return yield* Effect.fail(unavailable());
+    const resolved = yield* resolve();
+    if (resolved.state !== "resolved")
+        return yield* Effect.fail(unavailable());
+    return resolved.executable.path;
+});
+const resolvePiRpcTarget = Effect.fn("IntegrationAuthorization.resolvePiRpcTarget")(function* (application) {
+    const executablePath = yield* resolvePiRpcExecutable(application);
+    return yield* Effect.try({
+        catch: () => unavailable(),
+        try: () => resolvePiRpcArtifact({
+            interpreterPath: process.execPath,
+            piExecutablePath: executablePath,
+        }),
+    });
+});
+const planIdFor = (commandId, target) => `plan_pi_rpc_${createHash("sha256")
+    .update(JSON.stringify({
+    closureSha256: target.artifact.closureSha256,
+    commandId,
+    entrySha256: target.artifact.entrySha256,
+    interpreterSha256: target.artifact.interpreterSha256,
+    policy: piRpcIntegrationRuntimePolicy,
+}))
+    .digest("hex")
+    .slice(0, 48)}`;
+export const planPiRpcIntegration = Effect.fn("IntegrationAuthorization.planPiRpc")(function* (application, input) {
+    const target = targetFromResolved(yield* resolvePiRpcTarget(application));
+    return yield* application.database.createPiRpcIntegrationPlan({
+        ...input,
+        planId: planIdFor(input.commandId, target),
+        target,
+    });
+});
+const readRequiredPlan = Effect.fn("IntegrationAuthorization.readRequiredPiRpcPlan")(function* (application, planId) {
+    const plan = yield* application.database.readPiRpcIntegrationPlan(planId);
+    if (plan !== undefined)
+        return plan;
+    return yield* Effect.fail(makeNodeRuntimeError("resource_not_found", "The Pi RPC integration plan was not found."));
+});
+export const piRpcIntegrationPlanMatchesCurrentTarget = (plan, target) => {
+    const { entries: _entries, ...artifact } = target.artifact;
+    return isDeepStrictEqual(plan.target, {
+        adapter: "pi-rpc",
+        adapterVersion: target.adapterVersion,
+        artifact,
+        conversationPolicyRevision: target.conversationPolicyRevision,
+        ownerKinds: target.ownerKinds,
+        vouchPolicyRevision: target.vouchPolicyRevision,
+    });
+};
+const replayApply = Effect.fn("IntegrationAuthorization.replayPiRpcApply")(function* (application, input) {
+    const existing = yield* application.database.findCommand({
+        actorId: "actor_local_user",
+        commandId: input.commandId,
+        method: "integration.apply.pi-rpc",
+        requestDigest: input.requestDigest,
+    });
+    if (existing === undefined)
+        return;
+    return yield* application.database.applyPiRpcIntegrationAuthorization({
+        ...input,
+        policy: piRpcIntegrationRuntimePolicy,
+        verifyArtifactIdentity: () => {
+            throw makeNodeRuntimeError("storage_corrupt", "The Pi RPC apply replay attempted a new artifact effect.");
+        },
+    });
+});
+const verifyCurrentPlanTarget = (plan, executablePath) => () => {
+    try {
+        const artifact = resolvePiRpcArtifact({
+            interpreterPath: process.execPath,
+            piExecutablePath: executablePath,
+        });
+        if (!piRpcIntegrationPlanMatchesCurrentTarget(plan, targetFromResolved(artifact)))
+            throw unavailable();
+    }
+    catch {
+        throw unavailable();
+    }
+};
+export const applyPiRpcIntegration = Effect.fn("IntegrationAuthorization.applyPiRpc")(function* (application, input) {
+    const replay = yield* replayApply(application, input);
+    if (replay !== undefined)
+        return replay;
+    const plan = yield* readRequiredPlan(application, input.planId);
+    const executablePath = yield* resolvePiRpcExecutable(application);
+    return yield* application.database.applyPiRpcIntegrationAuthorization({
+        ...input,
+        policy: piRpcIntegrationRuntimePolicy,
+        verifyArtifactIdentity: verifyCurrentPlanTarget(plan, executablePath),
+    });
+});
+export const showPiRpcIntegration = (application) => application.database.showPiRpcIntegrationAuthorization();
+const settlementIdentity = (commandId, outcome) => ({
+    commandId: `ia.pi.remove.settle.${createHash("sha256")
+        .update(commandId)
+        .digest("hex")
+        .slice(0, 48)}`,
+    requestDigest: createHash("sha256")
+        .update(JSON.stringify({ commandId, outcome }))
+        .digest("hex"),
+});
+export const removePiRpcIntegration = Effect.fn("IntegrationAuthorization.removePiRpc")(function* (application, input) {
+    const revoking = yield* application.database.beginPiRpcIntegrationRevocation(input);
+    const cleanup = hasPiRpcAuthorizationRevocation(application.manager)
+        ? yield* application.manager[processResourceManagerRevokePiRpcAuthorization](revoking.authorization.revision).pipe(Effect.result)
+        : { _tag: "Failure" };
+    const outcome = cleanup._tag === "Success" && cleanup.success.state === "clean"
+        ? "revoked"
+        : "cleanup_unknown";
+    const settlement = yield* application.database.settlePiRpcIntegrationRevocation({
+        ...settlementIdentity(input.commandId, outcome),
+        outcome,
+    });
+    return {
+        ...revoking,
+        authorization: settlement.authorization,
+        remainingUnsettledPermits: settlement.remainingUnsettledPermits,
+    };
+});
+export const withPiRpcPlanAdmission = (application, operation) => withPlanAndStatusAdmission(application, operation);
+//# sourceMappingURL=pi-rpc-application.js.map

package/dist/integration-authorization/pi-rpc-application.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-rpc-application.js","sourceRoot":"","sources":["../../src/integration-authorization/pi-rpc-application.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAEL,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,+BAA+B,EAC/B,8CAA8C,GAC/C,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAEL,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IACzD,cAAc,EAAE,WAAW;IAC3B,0BAA0B,EAAE,gCAAgC;IAC5D,UAAU,EAAE,CAAC,cAAc,EAAE,gBAAgB,CAAU;IACvD,mBAAmB,EAAE,yBAAyB;CAC/C,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,GAAqB,EAAE,CACzC,oBAAoB,CAClB,oBAAoB,EACpB,8DAA8D,CAC/D,CAAC;AAEJ,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAG7C,EAAE,CACF,OAAO,CAAC,QAAQ,KAAK,QAAQ;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,oBAAoB,CAClB,yBAAyB,EACzB,mEAAmE,CACpE,CACF,CAAC;AAER,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/D,MAAM,oBAAoB,CACxB,gBAAgB,EAChB,OAAO,KAAK,mDAAmD,CAChE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,QAA+B,EAAU,EAAE;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CACjC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,KAAK,cAAc,CACzD,CAAC;IACF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAC7C,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,QAAgF,EAChF,KAAa,EACb,EAAE,CAAC,CAAC;IACJ,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC;IACvD,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC;IACpD,SAAS,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CACxB,QAAsF,EACtF,KAAa,EACb,EAAE,CAAC,CAAC;IACJ,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,CAAC;IACvD,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,QAA+B,EAAE,EAAE,CAAC,CAAC;IAC5D,qBAAqB,EAAE,qBAAqB,CAAC,QAAQ,CAAC;IACtD,WAAW,EAAE,QAAQ,CAAC,WAAW;IACjC,mBAAmB,EAAE,iBAAiB,CACpC,QAAQ,CAAC,2BAA2B,CAAC,QAAQ,CAAC,QAAQ,EACtD,qBAAqB,CACtB;IACD,eAAe,EAAE,QAAQ,CAAC,eAAe;IACzC,cAAc,EAAE,QAAQ,CAAC,cAAc;CACxC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAC3B,QAA+B,EACS,EAAE,CAAC,CAAC;IAC5C,aAAa,EAAE,QAAQ,CAAC,aAAa;IACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,aAAa,EAAE,YAAY,CACzB,QAAQ,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,EAChD,cAAc,CACf;IACD,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;IACjC,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;IACrD,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,uBAAuB,EAAE,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;IACnE,mBAAmB,EAAE,YAAY,CAC/B,QAAQ,CAAC,2BAA2B,CAAC,QAAQ,CAAC,QAAQ,EACtD,oBAAoB,CACrB;IACD,eAAe,EAAE,QAAQ,CAAC,eAAe;IACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;IAC7C,kBAAkB,EAAE,SAAS;IAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;IACrC,GAAG,eAAe,CAAC,QAAQ,CAAC;IAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAChC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,QAA+B,EACH,EAAE;IAC9B,IAAI,QAAQ,CAAC,cAAc,KAAK,8BAA8B,EAAE,CAAC;QAC/D,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,OAAO;QACL,cAAc,EAAE,6BAA6B,CAAC,cAAc;QAC5D,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC;QACxC,0BAA0B,EACxB,6BAA6B,CAAC,0BAA0B;QAC1D,UAAU,EAAE,6BAA6B,CAAC,UAAU;QACpD,mBAAmB,EAAE,6BAA6B,CAAC,mBAAmB;KACvE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CACtC,iDAAiD,CAClD,CAAC,QAAQ,CAAC,EAAE,WAAgD;IAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,kBAAkB,CAAC,yBAAyB,CAAC;IACzE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5E,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAClC,6CAA6C,CAC9C,CAAC,QAAQ,CAAC,EAAE,WAAgD;IAC3D,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAC1B,GAAG,EAAE,GAAG,EAAE,CACR,oBAAoB,CAAC;YACnB,eAAe,EAAE,OAAO,CAAC,QAAQ;YACjC,gBAAgB,EAAE,cAAc;SACjC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAChB,SAAiB,EACjB,MAAkC,EAC1B,EAAE,CACV,eAAe,UAAU,CAAC,QAAQ,CAAC;KAChC,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;IACb,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa;IAC5C,SAAS;IACT,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;IACxC,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB;IACpD,MAAM,EAAE,6BAA6B;CACtC,CAAC,CACH;KACA,MAAM,CAAC,KAAK,CAAC;KACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAEpB,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAC3C,oCAAoC,CACrC,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,KAAqE;IAErE,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC5D,GAAG,KAAK;QACR,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;QAC1C,MAAM;KACP,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAChC,gDAAgD,CACjD,CAAC,QAAQ,CAAC,EAAE,WAAgD,EAAE,MAAc;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,oBAAoB,CAClB,oBAAoB,EACpB,4CAA4C,CAC7C,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CACtD,IAAgC,EAChC,MAAkC,EACzB,EAAE;IACX,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3D,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE;QACpC,OAAO,EAAE,QAAQ;QACjB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ;QACR,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;KAChD,CAAC,CAAC;AACL,CAAC,CAAC;AAQF,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CACxE,QAAQ,CAAC,EACP,WAAgD,EAChD,KAAiB;IAEjB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QACvD,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,0BAA0B;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACpE,GAAG,KAAK;QACR,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,GAAG,EAAE;YAC3B,MAAM,oBAAoB,CACxB,iBAAiB,EACjB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,MAAM,uBAAuB,GAC3B,CAAC,IAAgC,EAAE,cAAsB,EAAgB,EAAE,CAC3E,GAAG,EAAE;IACH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,eAAe,EAAE,OAAO,CAAC,QAAQ;YACjC,gBAAgB,EAAE,cAAc;SACjC,CAAC,CAAC;QACH,IACE,CAAC,wCAAwC,CACvC,IAAI,EACJ,kBAAkB,CAAC,QAAQ,CAAC,CAC7B;YAED,MAAM,WAAW,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;AACH,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAC5C,qCAAqC,CACtC,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,KAAiB;IAEjB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACpE,GAAG,KAAK;QACR,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,uBAAuB,CAAC,IAAI,EAAE,cAAc,CAAC;KACtE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,WAAgD,EAChD,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,iCAAiC,EAAE,CAAC;AAE9D,MAAM,kBAAkB,GAAG,CACzB,SAAiB,EACjB,OAAsC,EACtC,EAAE,CAAC,CAAC;IACJ,SAAS,EAAE,uBAAuB,UAAU,CAAC,QAAQ,CAAC;SACnD,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IACjB,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;SAC9C,MAAM,CAAC,KAAK,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAC7C,sCAAsC,CACvC,CAAC,QAAQ,CAAC,EACT,WAAgD,EAChD,KAAqE;IAErE,MAAM,QAAQ,GACZ,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,+BAA+B,CAAC,WAAW,CAAC,OAAO,CAAC;QAClE,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CACxB,8CAA8C,CAC/C,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACxD,CAAC,CAAE,EAAE,IAAI,EAAE,SAAS,EAAY,CAAC;IACnC,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,OAAO;QAC7D,CAAC,CAAE,SAAmB;QACtB,CAAC,CAAE,iBAA2B,CAAC;IACnC,MAAM,UAAU,GACd,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QAC3D,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC;QAC/C,OAAO;KACR,CAAC,CAAC;IACL,OAAO;QACL,GAAG,QAAQ;QACX,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,yBAAyB,EAAE,UAAU,CAAC,yBAAyB;KAChE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,WAAgD,EAChD,SAAkD,EAClD,EAAE,CAAC,0BAA0B,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC"}

package/dist/integration-authorization/pi-rpc-requests.d.ts

@@ -0,0 +1,10 @@
+import { type LocalNodeRequestPayload, type LocalNodeSuccessResult } from "@maiaos/protocol";
+import { Effect } from "effect";
+import { type NodeRuntimeError } from "../runtime/errors.js";
+import type { IntegrationAuthorizationApplication } from "./application.js";
+type PiRpcRequest = Extract<LocalNodeRequestPayload, {
+    readonly method: "integration.apply.pi-rpc" | "integration.plan.pi-rpc" | "integration.remove.pi-rpc" | "integration.status.pi-rpc";
+}>;
+export declare const executePiRpcIntegrationAuthorizationRequest: (application: IntegrationAuthorizationApplication, request: PiRpcRequest, envelopeCommandId: string) => Effect.Effect<LocalNodeSuccessResult, NodeRuntimeError, never>;
+export {};
+//# sourceMappingURL=pi-rpc-requests.d.ts.map

package/dist/integration-authorization/pi-rpc-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-rpc-requests.d.ts","sourceRoot":"","sources":["../../src/integration-authorization/pi-rpc-requests.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,kBAAkB,CAAC;AAU5E,KAAK,YAAY,GAAG,OAAO,CACzB,uBAAuB,EACvB;IACE,QAAQ,CAAC,MAAM,EACX,0BAA0B,GAC1B,yBAAyB,GACzB,2BAA2B,GAC3B,2BAA2B,CAAC;CACjC,CACF,CAAC;AAwSF,eAAO,MAAM,2CAA2C,wKAkBtD,CAAC"}