@tickernelz/paperclip-pro-adapter-codex-local 2026.925.0

package/dist/server/codex-auth-merge-scripts.d.ts

@@ -0,0 +1,21 @@
+import type { SandboxManagedRuntimeAssetProvision } from "@tickernelz/paperclip-pro-adapter-utils/sandbox-managed-runtime";
+export declare const CODEX_AUTH_MERGE_EXTRACT_SCRIPT_NAME = "codex-auth-merge-extract.sh";
+export declare const CODEX_AUTH_MERGE_DECISION_SCRIPT_NAME = "codex-auth-merge-decision.cjs";
+/**
+ * Builds the inbound (host→sandbox) provisioning contribution for the Codex
+ * managed-home asset as **files + an ordered post-upload merge command**: the two
+ * merge scripts ride the sync operation's `files` (staged into the runtime root
+ * alongside the uploaded home tar via native `uploadFiles`), and the merge-extract
+ * script runs as the operation's ordered **post-upload command** instead of a
+ * plain `tar -xf`, so a sandbox that already carries a Codex `auth.json` keeps
+ * whichever credential is newer (newer-`auth.json`-wins, same-identity, atomic
+ * `0600` install — all inside the opaque script, unchanged).
+ *
+ * The command string handed to the provider is opaque and fully shell-quoted from
+ * already-confined paths (Security Conditions C1/C3): it invokes only the staged
+ * script by path — no `auth.json` bytes, token fields, or workspace content are
+ * interpolated into the shell (C5). This is behaviour-identical to the extraction
+ * the sandbox core previously drove through the custom-provision tar path.
+ */
+export declare function buildCodexAuthInboundProvision(): SandboxManagedRuntimeAssetProvision;
+//# sourceMappingURL=codex-auth-merge-scripts.d.ts.map

package/dist/server/codex-auth-merge-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-merge-scripts.d.ts","sourceRoot":"","sources":["../../src/server/codex-auth-merge-scripts.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,iEAAiE,CAAC;AAS3H,eAAO,MAAM,oCAAoC,gCAAgC,CAAC;AAClF,eAAO,MAAM,qCAAqC,kCAAkC,CAAC;AASrF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,8BAA8B,IAAI,mCAAmC,CAUpF"}

package/dist/server/codex-auth-merge-scripts.js

@@ -0,0 +1,40 @@
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { shellQuote } from "@tickernelz/paperclip-pro-adapter-utils/ssh";
+// Codex-specific inbound auth-merge assets. These live alongside the Codex
+// adapter server code; the two script files (`codex-auth-merge-extract.sh` and
+// `codex-auth-merge-decision.cjs`) are read from this directory at runtime and
+// staged into the sandbox. The sandbox runtime *core*
+// (`sandbox-managed-runtime.ts`) is intentionally free of any Codex knowledge —
+// the adapter supplies this contribution through the generic `provision` seam.
+export const CODEX_AUTH_MERGE_EXTRACT_SCRIPT_NAME = "codex-auth-merge-extract.sh";
+export const CODEX_AUTH_MERGE_DECISION_SCRIPT_NAME = "codex-auth-merge-decision.cjs";
+const CODEX_AUTH_MERGE_EXTRACT_SCRIPT_BYTES = readFileSync(new URL(`./${CODEX_AUTH_MERGE_EXTRACT_SCRIPT_NAME}`, import.meta.url));
+const CODEX_AUTH_MERGE_DECISION_SCRIPT_BYTES = readFileSync(new URL(`./${CODEX_AUTH_MERGE_DECISION_SCRIPT_NAME}`, import.meta.url));
+/**
+ * Builds the inbound (host→sandbox) provisioning contribution for the Codex
+ * managed-home asset as **files + an ordered post-upload merge command**: the two
+ * merge scripts ride the sync operation's `files` (staged into the runtime root
+ * alongside the uploaded home tar via native `uploadFiles`), and the merge-extract
+ * script runs as the operation's ordered **post-upload command** instead of a
+ * plain `tar -xf`, so a sandbox that already carries a Codex `auth.json` keeps
+ * whichever credential is newer (newer-`auth.json`-wins, same-identity, atomic
+ * `0600` install — all inside the opaque script, unchanged).
+ *
+ * The command string handed to the provider is opaque and fully shell-quoted from
+ * already-confined paths (Security Conditions C1/C3): it invokes only the staged
+ * script by path — no `auth.json` bytes, token fields, or workspace content are
+ * interpolated into the shell (C5). This is behaviour-identical to the extraction
+ * the sandbox core previously drove through the custom-provision tar path.
+ */
+export function buildCodexAuthInboundProvision() {
+    return {
+        stageFiles: [
+            { name: CODEX_AUTH_MERGE_EXTRACT_SCRIPT_NAME, contents: CODEX_AUTH_MERGE_EXTRACT_SCRIPT_BYTES },
+            { name: CODEX_AUTH_MERGE_DECISION_SCRIPT_NAME, contents: CODEX_AUTH_MERGE_DECISION_SCRIPT_BYTES },
+        ],
+        postUploadCommand: ({ assetTarPath, assetDir, runtimeRootDir }) => `sh ${shellQuote(path.posix.join(runtimeRootDir, CODEX_AUTH_MERGE_EXTRACT_SCRIPT_NAME))} ` +
+            `${shellQuote(assetDir)} ${shellQuote(assetTarPath)}`,
+    };
+}
+//# sourceMappingURL=codex-auth-merge-scripts.js.map

package/dist/server/codex-auth-merge-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-merge-scripts.js","sourceRoot":"","sources":["../../src/server/codex-auth-merge-scripts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,6CAA6C,CAAC;AAGzE,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,sDAAsD;AACtD,gFAAgF;AAChF,+EAA+E;AAE/E,MAAM,CAAC,MAAM,oCAAoC,GAAG,6BAA6B,CAAC;AAClF,MAAM,CAAC,MAAM,qCAAqC,GAAG,+BAA+B,CAAC;AAErF,MAAM,qCAAqC,GAAG,YAAY,CACxD,IAAI,GAAG,CAAC,KAAK,oCAAoC,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACtE,CAAC;AACF,MAAM,sCAAsC,GAAG,YAAY,CACzD,IAAI,GAAG,CAAC,KAAK,qCAAqC,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CACvE,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,8BAA8B;IAC5C,OAAO;QACL,UAAU,EAAE;YACV,EAAE,IAAI,EAAE,oCAAoC,EAAE,QAAQ,EAAE,qCAAqC,EAAE;YAC/F,EAAE,IAAI,EAAE,qCAAqC,EAAE,QAAQ,EAAE,sCAAsC,EAAE;SAClG;QACD,iBAAiB,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE,CAChE,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAC,GAAG;YAC1F,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE;KACxD,CAAC;AACJ,CAAC"}

package/dist/server/codex-auth-merge.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=codex-auth-merge.test.d.ts.map

package/dist/server/codex-auth-merge.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-merge.test.d.ts","sourceRoot":"","sources":["../../src/server/codex-auth-merge.test.ts"],"names":[],"mappings":""}