@omnicross/daemon 0.4.4 → 0.4.6

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { Logger, OutboundApiServerConfig, ProviderConfigSource, TransformerService, Transformer, ResolvedTransformerChain, ApiServerSettingsStore, PricingStore, AutomaticPricingSource, OutboundPermission, OutboundKeyDb, OutboundKeyDbRow, OutboundKeyPolicy, PricingEngine as PricingEngine$1, OpenAIOperationRegistry } from '@omnicross/core';
+import { Logger, OutboundApiServerConfig, ProviderConfigSource, TransformerService, Transformer, ResolvedTransformerChain, ApiServerSettingsStore, PricingStore, AutomaticPricingSource, OutboundPermission, OutboundKeyDb, OutboundKeyDbRow, GatewayBindingTarget, OutboundKeyPolicy, PricingEngine as PricingEngine$1, OpenAIOperationRegistry } from '@omnicross/core';
 import { SearchRuntime, SearchFrontendModes } from '@omnicross/core/search';
 import { ApiKeyPoolService } from '@omnicross/core/completion/ApiKeyPoolService';
 import { AllowanceSchedulingConfig, AccountProbeConfig, ImagesServerConfig, ImageProviderId, OutboundKeyDb as OutboundKeyDb$1, VoucherDb, KeySpendReader, OutboundApiServer } from '@omnicross/core/outbound-api';
@@ -2263,6 +2263,119 @@ type AuditCompactor = () => {
 /** The read surface the AdminServer consumes (bootstrap binds it to the ledger dir). */
 type BillingStatusReader = () => BillingDeliveryStatus;
 
+/**
+ * Codex session discovery and provider migration.
+ *
+ * Codex stores the human-readable rollout in JSONL files and keeps the index
+ * used by `codex resume` in state_5.sqlite.  These two stores must move
+ * together: changing only one of them makes a session either appear under the
+ * wrong provider or disappear from resume entirely.
+ *
+ * This module deliberately exposes metadata only.  It never returns a JSONL
+ * line, prompt, tool output, or response body to the admin API.
+ */
+interface CodexSessionManagerOptions {
+    /** Defaults to CODEX_HOME or the current user's `.codex` directory. */
+    codexHome?: string;
+    /** Defaults to `<codexHome>/state_5.sqlite`. */
+    stateDatabasePath?: string;
+}
+interface CodexStateDatabaseStatus {
+    path: string;
+    available: boolean;
+    reason?: string;
+}
+type CodexSessionStatus = 'ready' | 'missing_rollout' | 'unreadable_rollout';
+interface CodexSessionSummary {
+    id: string;
+    cwd: string;
+    rolloutPath: string;
+    provider: string | null;
+    /** Provider from the JSONL session_meta record, when available. */
+    jsonlProvider: string | null;
+    model: string | null;
+    createdAt: string | null;
+    updatedAt: string | null;
+    fileSize: number | null;
+    fileModifiedAt: string | null;
+    status: CodexSessionStatus;
+    /** True when the session has a row in state_5.sqlite. */
+    inStateDatabase: boolean;
+}
+interface CodexSessionListResult {
+    projectPath: string;
+    codexHome: string;
+    stateDatabase: CodexStateDatabaseStatus;
+    sessions: CodexSessionSummary[];
+    warnings: string[];
+}
+interface CodexSessionProviderPlan {
+    id: string;
+    provider: string | null;
+    model: string | null;
+    rolloutPath: string;
+    status: CodexSessionStatus | 'blocked';
+    /** All provider values found in structured JSON properties. */
+    providers: string[];
+    /** Number of structured provider properties matching fromProvider. */
+    matchingFields: number;
+    /** Number of structured provider properties that would change. */
+    changedFields: number;
+    sqliteWillUpdate: boolean;
+    action: 'update' | 'no_change' | 'blocked';
+    reason?: string;
+}
+interface CodexSessionProviderPreview {
+    projectPath: string;
+    fromProvider: string | null;
+    toProvider: string;
+    stateDatabase: CodexStateDatabaseStatus;
+    sessions: CodexSessionProviderPlan[];
+    warnings: string[];
+}
+interface ApplyCodexSessionProviderInput {
+    projectPath: string;
+    sessionIds: string[];
+    toProvider: string;
+    fromProvider?: string;
+}
+interface CodexSessionProviderApplyResult {
+    ok: true;
+    projectPath: string;
+    fromProvider: string | null;
+    toProvider: string;
+    updatedSessions: number;
+    jsonlFiles: number;
+    jsonlFields: number;
+    sqliteRows: number;
+    backups: string[];
+}
+declare class CodexSessionManagerError extends Error {
+    constructor(message: string);
+}
+/**
+ * The manager serializes mutations in one daemon process.  This does not try
+ * to lock Codex itself; the file snapshot check below still refuses to replace
+ * a rollout that changed while it was being prepared.
+ */
+declare class CodexSessionManager {
+    readonly codexHome: string;
+    readonly stateDatabasePath: string;
+    private mutationTail;
+    constructor(options?: CodexSessionManagerOptions);
+    list(projectPath: string): Promise<CodexSessionListResult>;
+    preview(input: Omit<ApplyCodexSessionProviderInput, 'toProvider'> & {
+        toProvider: string;
+    }): Promise<CodexSessionProviderPreview>;
+    apply(input: ApplyCodexSessionProviderInput): Promise<CodexSessionProviderApplyResult>;
+    private applyLocked;
+    private withMutationLock;
+}
+declare function replaceStructuredProviderFields(value: unknown, fromProvider: string | undefined, toProvider: string, providers?: Set<string>): {
+    matchingFields: number;
+    changedFields: number;
+};
+
 /**
  * ProviderKeyQuota — BYO provider-row key quota parsing (pure functions).
  *
@@ -3349,6 +3462,15 @@ declare class IntegrationManager {
     }>;
     /** Resolve the plaintext only for the command-auth helper; callers must not log it. */
     getIntegrationToken(client: IntegrationClientId): Promise<string>;
+    /**
+     * Resolve ONE access key's plaintext by id — the `--key-id` variant the
+     * command-auth helper serves for key-scoped Codex launches (each terminal
+     * picks its own gateway key, so concurrent sessions can route to different
+     * upstreams through their keys' bindings). Enforces the SAME usability
+     * contract as the client-bound path: existing, enabled, not revoked,
+     * revealable, and holding the codex-required endpoint permissions.
+     */
+    getKeyToken(keyId: string): Promise<string>;
     /** Compatibility alias for callers predating per-client bindings. */
     getGatewayToken(client?: IntegrationClientId): Promise<string>;
     private ensureClientKey;
@@ -3409,6 +3531,14 @@ type AntigravityLoopbackFn = (state: string, timeoutMs?: number, signal?: AbortS
  * never a provider key. On win32 the token rides the spawned process environment
  * (inherited by the terminal), never the command line / a file on disk.
  *
+ * KEY-SCOPED LAUNCH (`{ keyId }` body, codex only): instead of a route lease, the
+ * terminal's Codex authenticates to the RESIDENT outbound gateway as ONE chosen
+ * access key, so routing follows that key's gateway bindings. Concurrent
+ * terminals can then use different keys (hence different upstreams) at once.
+ * The redirect rides `-c` overrides reusing the INSTALLED provider name
+ * (`omnicross`) plus a `--key-id`-scoped auth command; no secret ever enters the
+ * spawned env (Codex invokes the helper itself).
+ *
  * @module @omnicross/daemon/admin/cliLaunch
  */
 
@@ -3771,6 +3901,12 @@ interface AdminApiDeps {
      * actually runs.
      */
     readonly cliCommandRunner?: CommandRunner;
+    /**
+     * Codex command-auth helper invocation for KEY-SCOPED launches (the `--key-id`
+     * variant). Wired by bootstrap from the same inputs as the integration
+     * install's helper; absent ⇒ `keyId` launches answer 501 (light embedders).
+     */
+    readonly codexAuthHelper?: CodexAuthHelperConfig;
     /** Factory so each request observes the outbound server's current loopback port. */
     readonly integrationManagerFactory?: () => IntegrationManager;
     /**
@@ -3815,6 +3951,8 @@ declare function handleAdminApi(req: http.IncomingMessage, res: http.ServerRespo
 
 /** The dependencies the admin server + its API need (live daemon handles). */
 interface AdminServerDeps extends AdminApiDeps {
+    /** Authenticated Codex rollout/state database manager. */
+    codexSessionManager?: CodexSessionManager;
     /** Read the resolved admin config (enabled/port/networkBinding/token). */
     getAdminConfig: () => ResolvedAdminConfig;
     /**
@@ -4209,6 +4347,7 @@ declare class JsonOutboundKeyDb implements OutboundKeyDb {
     outboundApiKeysSetEnabled(id: string, enabled: boolean): Promise<boolean>;
     outboundApiKeysSetPermissions(id: string, permissions: OutboundPermission[]): Promise<boolean>;
     outboundApiKeysSetMaxConcurrency(id: string, maxConcurrency: number | null): Promise<boolean>;
+    outboundApiKeysSetUpstream(id: string, target: GatewayBindingTarget | null): Promise<boolean>;
     outboundApiKeysSetPolicy(id: string, policy: OutboundKeyPolicy): Promise<boolean>;
     outboundApiKeysMarkActivated(id: string, activatedAt: number): Promise<boolean>;
     /** Apply `fn` to the row with `id`, persisting when it returns true. */
@@ -4896,6 +5035,8 @@ interface Daemon {
     readonly usageRecorder: UsageRecorder;
     /** The localhost admin/dashboard HTTP listener (RT3). Started by `start.ts`. */
     readonly adminServer: AdminServer;
+    /** Codex JSONL + state_5.sqlite session provider manager. */
+    readonly codexSessionManager: CodexSessionManager;
     /**
      * Proactive background OAuth refresh sweep (external-cli-sync). NOT started
      * here — `start.ts` arms it for the resident daemon; the short-lived `launch`
@@ -5212,4 +5353,4 @@ declare function mapCcrToOmnicross(ccr: CcrConfig): {
     notes: string[];
 };
 
-export { type AdminApiDeps, AdminServer, type AdminServerDeps, type AdminServerStatus, type CcrConfig, type CcrProvider, type CcrRouter, ConfigFileProviderConfigSource, ConfigurableLogger, ConsoleLogger, DEFAULT_ADMIN_PORT, type Daemon, type DaemonAdminConfig, type DaemonApiFormat, type DaemonConfig, type DaemonPaths, type DaemonProviderConfig, type HealthReportDeps, type HostedImageContributionFactory, type HostedImageRuntimeGenerationLease, type ImageApiMetricDimensions, type ImageApiMetricSnapshot, type ImageExecutionMetricDimensions, type ImageExecutionMetricSnapshot, type ImageHistogramSnapshot, ImageObservability, type ImageObservabilityOptions, type ImageObservabilitySnapshot, type ImageRuntimeCapabilityInspection, type ImageRuntimeGenerationFactoryOptions, type ImageRuntimeGenerationSharedStorage, ImageRuntimeManager, type ImageRuntimeManagerStatus, type ImageRuntimeMetadataObservability, type ImageRuntimeResourceStatus, type ImageRuntimeSafeUnavailableReason, JsonApiServerSettingsStore, JsonOutboundKeyDb, JsonSubscriptionCredentialStore, type PreparedImageRuntimeChange, type PreparedImageRuntimeGeneration, type ProductionImageRuntimeComponents, type ProductionImageRuntimeGeneration, type ResolvedAdminConfig, type TrustedImageApiRuntimeResolver, type TrustedImageApiRuntimeResolverOptions, buildDaemon, buildHealthReport, createHostedImageContributionFactory, createImageRuntimeGeneration, createTrustedImageApiRuntimeResolver, handleAdminApi, inferApiFormat, loadConfig, mapCcrToOmnicross, parseCcrConfig, resetDaemonSingletonsForTests, resolveAdminConfig, saveConfig, validateConfig };
+export { type AdminApiDeps, AdminServer, type AdminServerDeps, type AdminServerStatus, type ApplyCodexSessionProviderInput, type CcrConfig, type CcrProvider, type CcrRouter, type CodexSessionListResult, CodexSessionManager, CodexSessionManagerError, type CodexSessionManagerOptions, type CodexSessionProviderApplyResult, type CodexSessionProviderPlan, type CodexSessionProviderPreview, type CodexSessionSummary, type CodexStateDatabaseStatus, ConfigFileProviderConfigSource, ConfigurableLogger, ConsoleLogger, DEFAULT_ADMIN_PORT, type Daemon, type DaemonAdminConfig, type DaemonApiFormat, type DaemonConfig, type DaemonPaths, type DaemonProviderConfig, type HealthReportDeps, type HostedImageContributionFactory, type HostedImageRuntimeGenerationLease, type ImageApiMetricDimensions, type ImageApiMetricSnapshot, type ImageExecutionMetricDimensions, type ImageExecutionMetricSnapshot, type ImageHistogramSnapshot, ImageObservability, type ImageObservabilityOptions, type ImageObservabilitySnapshot, type ImageRuntimeCapabilityInspection, type ImageRuntimeGenerationFactoryOptions, type ImageRuntimeGenerationSharedStorage, ImageRuntimeManager, type ImageRuntimeManagerStatus, type ImageRuntimeMetadataObservability, type ImageRuntimeResourceStatus, type ImageRuntimeSafeUnavailableReason, JsonApiServerSettingsStore, JsonOutboundKeyDb, JsonSubscriptionCredentialStore, type PreparedImageRuntimeChange, type PreparedImageRuntimeGeneration, type ProductionImageRuntimeComponents, type ProductionImageRuntimeGeneration, type ResolvedAdminConfig, type TrustedImageApiRuntimeResolver, type TrustedImageApiRuntimeResolverOptions, buildDaemon, buildHealthReport, createHostedImageContributionFactory, createImageRuntimeGeneration, createTrustedImageApiRuntimeResolver, handleAdminApi, inferApiFormat, loadConfig, mapCcrToOmnicross, parseCcrConfig, replaceStructuredProviderFields, resetDaemonSingletonsForTests, resolveAdminConfig, saveConfig, validateConfig };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { Logger, OutboundApiServerConfig, ProviderConfigSource, TransformerService, Transformer, ResolvedTransformerChain, ApiServerSettingsStore, PricingStore, AutomaticPricingSource, OutboundPermission, OutboundKeyDb, OutboundKeyDbRow, OutboundKeyPolicy, PricingEngine as PricingEngine$1, OpenAIOperationRegistry } from '@omnicross/core';
+import { Logger, OutboundApiServerConfig, ProviderConfigSource, TransformerService, Transformer, ResolvedTransformerChain, ApiServerSettingsStore, PricingStore, AutomaticPricingSource, OutboundPermission, OutboundKeyDb, OutboundKeyDbRow, GatewayBindingTarget, OutboundKeyPolicy, PricingEngine as PricingEngine$1, OpenAIOperationRegistry } from '@omnicross/core';
 import { SearchRuntime, SearchFrontendModes } from '@omnicross/core/search';
 import { ApiKeyPoolService } from '@omnicross/core/completion/ApiKeyPoolService';
 import { AllowanceSchedulingConfig, AccountProbeConfig, ImagesServerConfig, ImageProviderId, OutboundKeyDb as OutboundKeyDb$1, VoucherDb, KeySpendReader, OutboundApiServer } from '@omnicross/core/outbound-api';
@@ -2263,6 +2263,119 @@ type AuditCompactor = () => {
 /** The read surface the AdminServer consumes (bootstrap binds it to the ledger dir). */
 type BillingStatusReader = () => BillingDeliveryStatus;
 
+/**
+ * Codex session discovery and provider migration.
+ *
+ * Codex stores the human-readable rollout in JSONL files and keeps the index
+ * used by `codex resume` in state_5.sqlite.  These two stores must move
+ * together: changing only one of them makes a session either appear under the
+ * wrong provider or disappear from resume entirely.
+ *
+ * This module deliberately exposes metadata only.  It never returns a JSONL
+ * line, prompt, tool output, or response body to the admin API.
+ */
+interface CodexSessionManagerOptions {
+    /** Defaults to CODEX_HOME or the current user's `.codex` directory. */
+    codexHome?: string;
+    /** Defaults to `<codexHome>/state_5.sqlite`. */
+    stateDatabasePath?: string;
+}
+interface CodexStateDatabaseStatus {
+    path: string;
+    available: boolean;
+    reason?: string;
+}
+type CodexSessionStatus = 'ready' | 'missing_rollout' | 'unreadable_rollout';
+interface CodexSessionSummary {
+    id: string;
+    cwd: string;
+    rolloutPath: string;
+    provider: string | null;
+    /** Provider from the JSONL session_meta record, when available. */
+    jsonlProvider: string | null;
+    model: string | null;
+    createdAt: string | null;
+    updatedAt: string | null;
+    fileSize: number | null;
+    fileModifiedAt: string | null;
+    status: CodexSessionStatus;
+    /** True when the session has a row in state_5.sqlite. */
+    inStateDatabase: boolean;
+}
+interface CodexSessionListResult {
+    projectPath: string;
+    codexHome: string;
+    stateDatabase: CodexStateDatabaseStatus;
+    sessions: CodexSessionSummary[];
+    warnings: string[];
+}
+interface CodexSessionProviderPlan {
+    id: string;
+    provider: string | null;
+    model: string | null;
+    rolloutPath: string;
+    status: CodexSessionStatus | 'blocked';
+    /** All provider values found in structured JSON properties. */
+    providers: string[];
+    /** Number of structured provider properties matching fromProvider. */
+    matchingFields: number;
+    /** Number of structured provider properties that would change. */
+    changedFields: number;
+    sqliteWillUpdate: boolean;
+    action: 'update' | 'no_change' | 'blocked';
+    reason?: string;
+}
+interface CodexSessionProviderPreview {
+    projectPath: string;
+    fromProvider: string | null;
+    toProvider: string;
+    stateDatabase: CodexStateDatabaseStatus;
+    sessions: CodexSessionProviderPlan[];
+    warnings: string[];
+}
+interface ApplyCodexSessionProviderInput {
+    projectPath: string;
+    sessionIds: string[];
+    toProvider: string;
+    fromProvider?: string;
+}
+interface CodexSessionProviderApplyResult {
+    ok: true;
+    projectPath: string;
+    fromProvider: string | null;
+    toProvider: string;
+    updatedSessions: number;
+    jsonlFiles: number;
+    jsonlFields: number;
+    sqliteRows: number;
+    backups: string[];
+}
+declare class CodexSessionManagerError extends Error {
+    constructor(message: string);
+}
+/**
+ * The manager serializes mutations in one daemon process.  This does not try
+ * to lock Codex itself; the file snapshot check below still refuses to replace
+ * a rollout that changed while it was being prepared.
+ */
+declare class CodexSessionManager {
+    readonly codexHome: string;
+    readonly stateDatabasePath: string;
+    private mutationTail;
+    constructor(options?: CodexSessionManagerOptions);
+    list(projectPath: string): Promise<CodexSessionListResult>;
+    preview(input: Omit<ApplyCodexSessionProviderInput, 'toProvider'> & {
+        toProvider: string;
+    }): Promise<CodexSessionProviderPreview>;
+    apply(input: ApplyCodexSessionProviderInput): Promise<CodexSessionProviderApplyResult>;
+    private applyLocked;
+    private withMutationLock;
+}
+declare function replaceStructuredProviderFields(value: unknown, fromProvider: string | undefined, toProvider: string, providers?: Set<string>): {
+    matchingFields: number;
+    changedFields: number;
+};
+
 /**
  * ProviderKeyQuota — BYO provider-row key quota parsing (pure functions).
  *
@@ -3349,6 +3462,15 @@ declare class IntegrationManager {
     }>;
     /** Resolve the plaintext only for the command-auth helper; callers must not log it. */
     getIntegrationToken(client: IntegrationClientId): Promise<string>;
+    /**
+     * Resolve ONE access key's plaintext by id — the `--key-id` variant the
+     * command-auth helper serves for key-scoped Codex launches (each terminal
+     * picks its own gateway key, so concurrent sessions can route to different
+     * upstreams through their keys' bindings). Enforces the SAME usability
+     * contract as the client-bound path: existing, enabled, not revoked,
+     * revealable, and holding the codex-required endpoint permissions.
+     */
+    getKeyToken(keyId: string): Promise<string>;
     /** Compatibility alias for callers predating per-client bindings. */
     getGatewayToken(client?: IntegrationClientId): Promise<string>;
     private ensureClientKey;
@@ -3409,6 +3531,14 @@ type AntigravityLoopbackFn = (state: string, timeoutMs?: number, signal?: AbortS
  * never a provider key. On win32 the token rides the spawned process environment
  * (inherited by the terminal), never the command line / a file on disk.
  *
+ * KEY-SCOPED LAUNCH (`{ keyId }` body, codex only): instead of a route lease, the
+ * terminal's Codex authenticates to the RESIDENT outbound gateway as ONE chosen
+ * access key, so routing follows that key's gateway bindings. Concurrent
+ * terminals can then use different keys (hence different upstreams) at once.
+ * The redirect rides `-c` overrides reusing the INSTALLED provider name
+ * (`omnicross`) plus a `--key-id`-scoped auth command; no secret ever enters the
+ * spawned env (Codex invokes the helper itself).
+ *
  * @module @omnicross/daemon/admin/cliLaunch
  */
 
@@ -3771,6 +3901,12 @@ interface AdminApiDeps {
      * actually runs.
      */
     readonly cliCommandRunner?: CommandRunner;
+    /**
+     * Codex command-auth helper invocation for KEY-SCOPED launches (the `--key-id`
+     * variant). Wired by bootstrap from the same inputs as the integration
+     * install's helper; absent ⇒ `keyId` launches answer 501 (light embedders).
+     */
+    readonly codexAuthHelper?: CodexAuthHelperConfig;
     /** Factory so each request observes the outbound server's current loopback port. */
     readonly integrationManagerFactory?: () => IntegrationManager;
     /**
@@ -3815,6 +3951,8 @@ declare function handleAdminApi(req: http.IncomingMessage, res: http.ServerRespo
 
 /** The dependencies the admin server + its API need (live daemon handles). */
 interface AdminServerDeps extends AdminApiDeps {
+    /** Authenticated Codex rollout/state database manager. */
+    codexSessionManager?: CodexSessionManager;
     /** Read the resolved admin config (enabled/port/networkBinding/token). */
     getAdminConfig: () => ResolvedAdminConfig;
     /**
@@ -4209,6 +4347,7 @@ declare class JsonOutboundKeyDb implements OutboundKeyDb {
     outboundApiKeysSetEnabled(id: string, enabled: boolean): Promise<boolean>;
     outboundApiKeysSetPermissions(id: string, permissions: OutboundPermission[]): Promise<boolean>;
     outboundApiKeysSetMaxConcurrency(id: string, maxConcurrency: number | null): Promise<boolean>;
+    outboundApiKeysSetUpstream(id: string, target: GatewayBindingTarget | null): Promise<boolean>;
     outboundApiKeysSetPolicy(id: string, policy: OutboundKeyPolicy): Promise<boolean>;
     outboundApiKeysMarkActivated(id: string, activatedAt: number): Promise<boolean>;
     /** Apply `fn` to the row with `id`, persisting when it returns true. */
@@ -4896,6 +5035,8 @@ interface Daemon {
     readonly usageRecorder: UsageRecorder;
     /** The localhost admin/dashboard HTTP listener (RT3). Started by `start.ts`. */
     readonly adminServer: AdminServer;
+    /** Codex JSONL + state_5.sqlite session provider manager. */
+    readonly codexSessionManager: CodexSessionManager;
     /**
      * Proactive background OAuth refresh sweep (external-cli-sync). NOT started
      * here — `start.ts` arms it for the resident daemon; the short-lived `launch`
@@ -5212,4 +5353,4 @@ declare function mapCcrToOmnicross(ccr: CcrConfig): {
     notes: string[];
 };
 
-export { type AdminApiDeps, AdminServer, type AdminServerDeps, type AdminServerStatus, type CcrConfig, type CcrProvider, type CcrRouter, ConfigFileProviderConfigSource, ConfigurableLogger, ConsoleLogger, DEFAULT_ADMIN_PORT, type Daemon, type DaemonAdminConfig, type DaemonApiFormat, type DaemonConfig, type DaemonPaths, type DaemonProviderConfig, type HealthReportDeps, type HostedImageContributionFactory, type HostedImageRuntimeGenerationLease, type ImageApiMetricDimensions, type ImageApiMetricSnapshot, type ImageExecutionMetricDimensions, type ImageExecutionMetricSnapshot, type ImageHistogramSnapshot, ImageObservability, type ImageObservabilityOptions, type ImageObservabilitySnapshot, type ImageRuntimeCapabilityInspection, type ImageRuntimeGenerationFactoryOptions, type ImageRuntimeGenerationSharedStorage, ImageRuntimeManager, type ImageRuntimeManagerStatus, type ImageRuntimeMetadataObservability, type ImageRuntimeResourceStatus, type ImageRuntimeSafeUnavailableReason, JsonApiServerSettingsStore, JsonOutboundKeyDb, JsonSubscriptionCredentialStore, type PreparedImageRuntimeChange, type PreparedImageRuntimeGeneration, type ProductionImageRuntimeComponents, type ProductionImageRuntimeGeneration, type ResolvedAdminConfig, type TrustedImageApiRuntimeResolver, type TrustedImageApiRuntimeResolverOptions, buildDaemon, buildHealthReport, createHostedImageContributionFactory, createImageRuntimeGeneration, createTrustedImageApiRuntimeResolver, handleAdminApi, inferApiFormat, loadConfig, mapCcrToOmnicross, parseCcrConfig, resetDaemonSingletonsForTests, resolveAdminConfig, saveConfig, validateConfig };
+export { type AdminApiDeps, AdminServer, type AdminServerDeps, type AdminServerStatus, type ApplyCodexSessionProviderInput, type CcrConfig, type CcrProvider, type CcrRouter, type CodexSessionListResult, CodexSessionManager, CodexSessionManagerError, type CodexSessionManagerOptions, type CodexSessionProviderApplyResult, type CodexSessionProviderPlan, type CodexSessionProviderPreview, type CodexSessionSummary, type CodexStateDatabaseStatus, ConfigFileProviderConfigSource, ConfigurableLogger, ConsoleLogger, DEFAULT_ADMIN_PORT, type Daemon, type DaemonAdminConfig, type DaemonApiFormat, type DaemonConfig, type DaemonPaths, type DaemonProviderConfig, type HealthReportDeps, type HostedImageContributionFactory, type HostedImageRuntimeGenerationLease, type ImageApiMetricDimensions, type ImageApiMetricSnapshot, type ImageExecutionMetricDimensions, type ImageExecutionMetricSnapshot, type ImageHistogramSnapshot, ImageObservability, type ImageObservabilityOptions, type ImageObservabilitySnapshot, type ImageRuntimeCapabilityInspection, type ImageRuntimeGenerationFactoryOptions, type ImageRuntimeGenerationSharedStorage, ImageRuntimeManager, type ImageRuntimeManagerStatus, type ImageRuntimeMetadataObservability, type ImageRuntimeResourceStatus, type ImageRuntimeSafeUnavailableReason, JsonApiServerSettingsStore, JsonOutboundKeyDb, JsonSubscriptionCredentialStore, type PreparedImageRuntimeChange, type PreparedImageRuntimeGeneration, type ProductionImageRuntimeComponents, type ProductionImageRuntimeGeneration, type ResolvedAdminConfig, type TrustedImageApiRuntimeResolver, type TrustedImageApiRuntimeResolverOptions, buildDaemon, buildHealthReport, createHostedImageContributionFactory, createImageRuntimeGeneration, createTrustedImageApiRuntimeResolver, handleAdminApi, inferApiFormat, loadConfig, mapCcrToOmnicross, parseCcrConfig, replaceStructuredProviderFields, resetDaemonSingletonsForTests, resolveAdminConfig, saveConfig, validateConfig };