@maiaos/node 0.1.0-canary.44938d4.manual.1

package/dist/runtime/process/resource/integration-authorization/projection.js

@@ -0,0 +1,56 @@
+import { parsePersistedPlanPayload } from "./plan-integrity.js";
+import { parseOwnerKindsJson } from "./policy.js";
+export const projectAuthorization = (row) => ({
+    adapterVersion: row.adapterVersion,
+    executablePath: row.executablePath,
+    executableSha256: row.executableSha256,
+    ownerKinds: parseOwnerKindsJson(row.ownerKindsJson),
+    planDigest: row.planDigest,
+    planId: row.planId,
+    revision: row.authorizationRevision.toString(),
+    sandboxPolicyRevision: row.sandboxPolicyRevision,
+    state: row.state,
+    vouchPolicyRevision: row.vouchPolicyRevision,
+});
+export const projectPermit = (permit) => ({
+    adapterVersion: permit.adapterVersion,
+    authorizationRevision: permit.authorizationRevision.toString(),
+    dispatchingAt: permit.dispatchingAt ?? undefined,
+    executableSha256: permit.executableSha256,
+    expiresAt: permit.expiresAt,
+    fenceId: permit.fenceId,
+    id: permit.permitId,
+    issuedAt: permit.issuedAt,
+    ownerKind: permit.ownerKind,
+    processTreeId: permit.processTreeId ?? undefined,
+    sandboxPolicyRevision: permit.sandboxPolicyRevision,
+    scopeCommandId: permit.scopeCommandId,
+    ...(permit.scopeSessionId === null
+        ? {}
+        : { scopeSessionId: permit.scopeSessionId }),
+    startedAt: permit.startedAt ?? undefined,
+    state: permit.state,
+    terminalAt: permit.terminalAt ?? undefined,
+    terminalReason: permit.terminalReason ?? undefined,
+    vouchPolicyRevision: permit.vouchPolicyRevision,
+});
+export const projectPlan = (plan) => ({
+    createdAt: plan.createdAt,
+    expiresAt: plan.expiresAt,
+    integration: "codex",
+    planBytes: plan.planBytes,
+    planDigest: plan.planDigest,
+    planId: plan.planId,
+    target: {
+        adapter: "codex",
+        adapterVersion: plan.adapterVersion,
+        executableIdentity: parsePersistedPlanPayload(plan.planJson).target
+            .executableIdentity,
+        executablePath: plan.executablePath,
+        executableSha256: plan.executableSha256,
+        ownerKinds: parseOwnerKindsJson(plan.ownerKindsJson),
+        sandboxPolicyRevision: plan.sandboxPolicyRevision,
+        vouchPolicyRevision: plan.vouchPolicyRevision,
+    },
+});
+//# sourceMappingURL=projection.js.map

package/dist/runtime/process/resource/integration-authorization/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../../../../src/runtime/process/resource/integration-authorization/projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAUlD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,GAAqB,EACI,EAAE,CAAC,CAAC;IAC7B,cAAc,EAAE,GAAG,CAAC,cAAc;IAClC,cAAc,EAAE,GAAG,CAAC,cAAc;IAClC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;IACtC,UAAU,EAAE,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC;IACnD,UAAU,EAAE,GAAG,CAAC,UAAU;IAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,QAAQ,EAAE,GAAG,CAAC,qBAAqB,CAAC,QAAQ,EAAE;IAC9C,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;IAChD,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAiB,EAAoB,EAAE,CAAC,CAAC;IACrE,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE;IAC9D,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;IAChD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;IACzC,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,EAAE,EAAE,MAAM,CAAC,QAAQ;IACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;IAChD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;IACnD,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI;QAChC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;IAC9C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;IACxC,KAAK,EAAE,MAAM,CAAC,KAAK;IACnB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;IAC1C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,SAAS;IAClD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAa,EAA8B,EAAE,CAAC,CAAC;IACzE,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,WAAW,EAAE,OAAO;IACpB,SAAS,EAAE,IAAI,CAAC,SAAS;IACzB,UAAU,EAAE,IAAI,CAAC,UAAU;IAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;IACnB,MAAM,EAAE;QACN,OAAO,EAAE,OAAO;QAChB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;aAChE,kBAAkB;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC;QACpD,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C;CACF,CAAC,CAAC"}

package/dist/runtime/process/resource/integration-authorization/replay-store.d.ts

@@ -0,0 +1,9 @@
+import type { DatabaseSync } from "node:sqlite";
+import type { CommandInput, IntegrationReplayMethod, ReplayResult } from "./types.js";
+export declare const withReplay: <TResult extends Record<string, unknown>>(database: DatabaseSync, input: CommandInput & {
+    readonly method: IntegrationReplayMethod;
+}, operation: (() => TResult) | {
+    readonly onNewResult: (result: TResult) => void;
+    readonly run: () => TResult;
+}) => ReplayResult<TResult>;
+//# sourceMappingURL=replay-store.d.ts.map

package/dist/runtime/process/resource/integration-authorization/replay-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-store.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/process/resource/integration-authorization/replay-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAKhD,OAAO,KAAK,EACV,YAAY,EACZ,uBAAuB,EACvB,YAAY,EAEb,MAAM,YAAY,CAAC;AA8EpB,eAAO,MAAM,UAAU,GAAI,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChE,UAAU,YAAY,EACtB,OAAO,YAAY,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,EAClE,WACI,CAAC,MAAM,OAAO,CAAC,GACf;IACE,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC;CAC7B,KACJ,YAAY,CAAC,OAAO,CAanB,CAAC"}

package/dist/runtime/process/resource/integration-authorization/replay-store.js

@@ -0,0 +1,55 @@
+import { makeNodeRuntimeError } from "../../../errors.js";
+import { parseJson, requireCommandInput } from "./policy.js";
+const replayRow = (database, commandId) => database
+    .prepare(`SELECT
+        method AS method,
+        request_digest AS requestDigest,
+        result_json AS resultJson
+       FROM integration_authorization_command_replays
+       WHERE command_id = ?`)
+    .get(commandId);
+const assertReplayMatchesInput = (existing, input) => {
+    if (existing.method === input.method &&
+        existing.requestDigest === input.requestDigest) {
+        return;
+    }
+    throw makeNodeRuntimeError("storage_conflict", "The command identifier was reused with different integration authorization input.");
+};
+const persistReplay = (database, input, result) => {
+    database
+        .prepare(`INSERT INTO integration_authorization_command_replays(
+        command_id, method, request_digest, result_json, created_at
+      ) VALUES (?, ?, ?, ?, ?)`)
+        .run(input.commandId, input.method, input.requestDigest, JSON.stringify(result), input.recordedAt);
+};
+const replayDuplicate = (existing) => {
+    const duplicate = parseJson(existing.resultJson, "The integration authorization replay result");
+    return { ...duplicate, delivery: "duplicate" };
+};
+const runReplayTransaction = (database, run) => {
+    database.exec("BEGIN IMMEDIATE");
+    try {
+        const result = run();
+        database.exec("COMMIT");
+        return result;
+    }
+    catch (error) {
+        database.exec("ROLLBACK");
+        throw error;
+    }
+};
+export const withReplay = (database, input, operation) => runReplayTransaction(database, () => {
+    requireCommandInput(input);
+    const existing = replayRow(database, input.commandId);
+    if (existing !== undefined) {
+        assertReplayMatchesInput(existing, input);
+        return replayDuplicate(existing);
+    }
+    const run = typeof operation === "function" ? operation : operation.run;
+    const result = run();
+    if (typeof operation !== "function")
+        operation.onNewResult(result);
+    persistReplay(database, input, result);
+    return { ...result, delivery: "new" };
+});
+//# sourceMappingURL=replay-store.js.map

package/dist/runtime/process/resource/integration-authorization/replay-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-store.js","sourceRoot":"","sources":["../../../../../src/runtime/process/resource/integration-authorization/replay-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAQ7D,MAAM,SAAS,GAAG,CAChB,QAAsB,EACtB,SAAiB,EACM,EAAE,CACzB,QAAQ;KACL,OAAO,CACN;;;;;4BAKsB,CACvB;KACA,GAAG,CAAC,SAAS,CAA0B,CAAC;AAE7C,MAAM,wBAAwB,GAAG,CAC/B,QAAmB,EACnB,KAAkE,EAC5D,EAAE;IACR,IACE,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAChC,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,EAC9C,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,oBAAoB,CACxB,kBAAkB,EAClB,mFAAmF,CACpF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,QAAsB,EACtB,KAAkE,EAClE,MAAe,EACT,EAAE;IACR,QAAQ;SACL,OAAO,CACN;;+BAEyB,CAC1B;SACA,GAAG,CACF,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,aAAa,EACnB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,KAAK,CAAC,UAAU,CACjB,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,QAAmB,EACI,EAAE;IACzB,MAAM,SAAS,GAAG,SAAS,CACzB,QAAQ,CAAC,UAAU,EACnB,6CAA6C,CACnC,CAAC;IACb,OAAO,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACjD,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,QAAsB,EACtB,GAAgC,EACT,EAAE;IACzB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,QAAsB,EACtB,KAAkE,EAClE,SAKK,EACkB,EAAE,CACzB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE;IAClC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO,eAAe,CAAU,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC;IACxE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACnE,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC,CAAC,CAAC"}

package/dist/runtime/process/resource/integration-authorization/types.d.ts

@@ -0,0 +1,152 @@
+export declare const CODEX_INTEGRATION = "codex";
+export declare const CODEX_OWNER_KINDS: readonly ["codex-probe", "codex-session"];
+export type CodexOwnerKind = (typeof CODEX_OWNER_KINDS)[number];
+export type CommandInput = {
+    readonly commandId: string;
+    readonly recordedAt: string;
+    readonly requestDigest: string;
+};
+export type ReplayResult<T> = T & {
+    readonly delivery: "duplicate" | "new";
+};
+export type IntegrationReplayMethod = "integration.apply.codex" | "integration.permit.dispatch" | "integration.permit.issue" | "integration.permit.settle" | "integration.permit.start" | "integration.plan.codex" | "integration.remove.codex" | "integration.remove.settle.codex";
+export type ReplayRow = {
+    readonly method: IntegrationReplayMethod;
+    readonly requestDigest: string;
+    readonly resultJson: string;
+};
+export type PlanRow = {
+    readonly adapterVersion: string;
+    readonly createdAt: string;
+    readonly createdAtMs: number;
+    readonly executablePath: string;
+    readonly executableSha256: string;
+    readonly expiresAt: string;
+    readonly expiresAtMs: number;
+    readonly integration: string;
+    readonly ownerKindsJson: string;
+    readonly planBytes: number;
+    readonly planDigest: string;
+    readonly planId: string;
+    readonly planJson: string;
+    readonly sandboxPolicyRevision: string;
+    readonly targetAdapter: string;
+    readonly targetCount: number;
+    readonly vouchPolicyRevision: string;
+};
+export type AuthorizationState = "active" | "cleanup_unknown" | "replaced" | "revoked" | "revoking";
+export type AuthorizationRow = {
+    readonly adapterVersion: string;
+    readonly authorizationRevision: number;
+    readonly createdAt: string;
+    readonly executablePath: string;
+    readonly executableSha256: string;
+    readonly ownerKindsJson: string;
+    readonly planDigest: string;
+    readonly planId: string;
+    readonly revocationStartedAt: null | string;
+    readonly sandboxPolicyRevision: string;
+    readonly state: AuthorizationState;
+    readonly vouchPolicyRevision: string;
+};
+export type PermitState = "dispatching" | "issued" | "started" | "terminal";
+export type PermitTerminalReason = "cleanup_unknown" | "completed" | "expired" | "failed" | "revoked_after_start" | "revoked_before_start" | "stale_policy" | "stale_revision";
+export type PermitRow = {
+    readonly adapterVersion: string;
+    readonly authorizationRevision: number;
+    readonly dispatchingAt: null | string;
+    readonly dispatchingAtMs: null | number;
+    readonly executableSha256: string;
+    readonly expiresAt: string;
+    readonly expiresAtMs: number;
+    readonly fenceId: string;
+    readonly integration: string;
+    readonly issuedAt: string;
+    readonly issuedAtMs: number;
+    readonly ownerKind: CodexOwnerKind;
+    readonly permitId: string;
+    readonly processTreeId: null | string;
+    readonly sandboxPolicyRevision: string;
+    readonly scopeCommandId: string;
+    readonly scopeSessionId: null | string;
+    readonly startedAt: null | string;
+    readonly startedAtMs: null | number;
+    readonly state: PermitState;
+    readonly terminalAt: null | string;
+    readonly terminalAtMs: null | number;
+    readonly terminalReason: null | PermitTerminalReason;
+    readonly vouchPolicyRevision: string;
+};
+export type CodexIntegrationPlanTarget = {
+    readonly adapterVersion: string;
+    readonly executableIdentity: {
+        readonly device: string;
+        readonly inode: string;
+        readonly sizeBytes: string;
+    };
+    readonly executablePath: string;
+    readonly executableSha256: string;
+    readonly ownerKinds: readonly string[];
+    readonly sandboxPolicyRevision: string;
+    readonly vouchPolicyRevision: string;
+};
+export type CodexIntegrationPlanRecord = {
+    readonly createdAt: string;
+    readonly expiresAt: string;
+    readonly integration: "codex";
+    readonly planBytes: number;
+    readonly planDigest: string;
+    readonly planId: string;
+    readonly target: {
+        readonly adapter: "codex";
+        readonly adapterVersion: string;
+        readonly executableIdentity: {
+            readonly device: string;
+            readonly inode: string;
+            readonly sizeBytes: string;
+        };
+        readonly executablePath: string;
+        readonly executableSha256: string;
+        readonly ownerKinds: readonly CodexOwnerKind[];
+        readonly sandboxPolicyRevision: string;
+        readonly vouchPolicyRevision: string;
+    };
+};
+export type CodexPolicyRevisionSnapshot = {
+    readonly adapterVersion: string;
+    readonly sandboxPolicyRevision: string;
+    readonly vouchPolicyRevision: string;
+};
+export type AuthorizationProjection = {
+    readonly adapterVersion: string;
+    readonly executablePath: string;
+    readonly executableSha256: string;
+    readonly ownerKinds: readonly CodexOwnerKind[];
+    readonly planDigest: string;
+    readonly planId: string;
+    readonly revision: string;
+    readonly sandboxPolicyRevision: string;
+    readonly state: AuthorizationState;
+    readonly vouchPolicyRevision: string;
+};
+export type PermitProjection = {
+    readonly adapterVersion: string;
+    readonly authorizationRevision: string;
+    readonly dispatchingAt?: string;
+    readonly executableSha256: string;
+    readonly expiresAt: string;
+    readonly fenceId: string;
+    readonly id: string;
+    readonly issuedAt: string;
+    readonly ownerKind: CodexOwnerKind;
+    readonly processTreeId?: string;
+    readonly sandboxPolicyRevision: string;
+    readonly scopeCommandId: string;
+    readonly scopeSessionId?: string;
+    readonly startedAt?: string;
+    readonly state: PermitState;
+    readonly terminalAt?: string;
+    readonly terminalReason?: PermitTerminalReason;
+    readonly vouchPolicyRevision: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/process/resource/integration-authorization/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/process/resource/integration-authorization/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC,eAAO,MAAM,iBAAiB,2CAA4C,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,KAAK,CAAA;CAAE,CAAC;AAE7E,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,6BAA6B,GAC7B,0BAA0B,GAC1B,2BAA2B,GAC3B,0BAA0B,GAC1B,wBAAwB,GACxB,0BAA0B,GAC1B,iCAAiC,CAAC;AAEtC,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC5B,QAAQ,GAAG,iBAAiB,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;AAErE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE5E,MAAM,MAAM,oBAAoB,GAC5B,iBAAiB,GACjB,WAAW,GACX,SAAS,GACT,QAAQ,GACR,qBAAqB,GACrB,sBAAsB,GACtB,cAAc,GACd,gBAAgB,CAAC;AAErB,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,IAAI,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,IAAI,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,MAAM,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,IAAI,GAAG,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,oBAAoB,CAAC;IACrD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE;QAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,kBAAkB,EAAE;YAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;SAC5B,CAAC;QACF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;QAC/C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;QACvC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;KACtC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC"}

package/dist/runtime/process/resource/integration-authorization/types.js

@@ -0,0 +1,3 @@
+export const CODEX_INTEGRATION = "codex";
+export const CODEX_OWNER_KINDS = ["codex-probe", "codex-session"];
+//# sourceMappingURL=types.js.map

package/dist/runtime/process/resource/integration-authorization/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/runtime/process/resource/integration-authorization/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,eAAe,CAAU,CAAC"}

package/dist/runtime/process/resource/integration-authorization-manager.d.ts

@@ -0,0 +1,9 @@
+import { Effect, type Scope } from "effect";
+import { type NodeRuntimeError } from "../../errors.js";
+import type { ProcessResourceManagerService } from "./contract.js";
+export declare const withCodexIntegrationAuthorization: (input: {
+    readonly databasePath: string;
+    readonly enabled: boolean;
+    readonly manager: ProcessResourceManagerService;
+}) => Effect.Effect<ProcessResourceManagerService, NodeRuntimeError, Scope.Scope>;
+//# sourceMappingURL=integration-authorization-manager.d.ts.map

package/dist/runtime/process/resource/integration-authorization-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-authorization-manager.d.ts","sourceRoot":"","sources":["../../../../src/runtime/process/resource/integration-authorization-manager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAO,KAAK,KAAK,EAAa,MAAM,QAAQ,CAAC;AAO5D,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAIV,6BAA6B,EAC9B,MAAM,eAAe,CAAC;AA+pBvB,eAAO,MAAM,iCAAiC,GAAI,OAAO;IACvD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;CACjD,KAAG,MAAM,CAAC,MAAM,CACf,6BAA6B,EAC7B,gBAAgB,EAChB,KAAK,CAAC,KAAK,CAOsB,CAAC"}