approval-md 0.1.0 → 0.2.0

package/dist/src/codex/trust.js

@@ -0,0 +1,183 @@
+import { lstatSync, realpathSync, statSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+function ancestors(path) {
+    const values = [];
+    let current = resolve(path);
+    for (;;) {
+        values.unshift(current);
+        const parent = dirname(current);
+        if (parent === current)
+            return values;
+        current = parent;
+    }
+}
+function systemUid(name) {
+    const result = spawnSync("/usr/bin/id", ["-u", name], {
+        encoding: "utf8", timeout: 2_000, maxBuffer: 16_384, env: { PATH: "/usr/bin:/bin" },
+    });
+    if (result.status !== 0)
+        return null;
+    const value = Number(result.stdout.trim());
+    return Number.isSafeInteger(value) && value >= 0 ? value : null;
+}
+function systemGroups(name) {
+    const result = spawnSync("/usr/bin/id", ["-G", name], {
+        encoding: "utf8", timeout: 2_000, maxBuffer: 16_384, env: { PATH: "/usr/bin:/bin" },
+    });
+    if (result.status !== 0)
+        return null;
+    const groups = result.stdout.trim().split(/\s+/u).map(Number);
+    return groups.length > 0 && groups.every((value) => Number.isSafeInteger(value) && value >= 0)
+        ? groups
+        : null;
+}
+export function parseCodexVersionOutput(stdout, stderr) {
+    if (stderr.length !== 0)
+        return null;
+    return /^codex-cli (\d+\.\d+\.\d+)$/u.exec(stdout.trim())?.[1] ?? null;
+}
+export function parseNodeVersionOutput(stdout, stderr) {
+    if (stderr.length !== 0)
+        return null;
+    return /^v(\d+\.\d+\.\d+)$/u.exec(stdout.trim())?.[1] ?? null;
+}
+function add(findings, code, message, path) {
+    findings.push(path === undefined ? { code, message } : { code, path, message });
+}
+function inspectNoSymlinks(path, findings) {
+    let safe = true;
+    for (const candidate of ancestors(path)) {
+        try {
+            if (lstatSync(candidate).isSymbolicLink()) {
+                add(findings, "path-symlink", "path or ancestor is a symbolic link", candidate);
+                safe = false;
+            }
+        }
+        catch {
+            add(findings, "path-missing", "path or ancestor does not exist", candidate);
+            return false;
+        }
+    }
+    try {
+        if (realpathSync(path) !== resolve(path)) {
+            add(findings, "path-canonical", "real path differs from the manifest path", path);
+            safe = false;
+        }
+    }
+    catch {
+        return false;
+    }
+    return safe;
+}
+function inspectRootCustody(path, findings) {
+    let safe = true;
+    for (const candidate of ancestors(path)) {
+        let stat;
+        try {
+            stat = statSync(candidate);
+        }
+        catch {
+            return false;
+        }
+        if (stat.uid !== 0) {
+            add(findings, "owner-not-root", `trusted path ancestor is owned by uid ${String(stat.uid)}, expected 0`, candidate);
+            safe = false;
+        }
+        if ((stat.mode & 0o022) !== 0) {
+            add(findings, "trusted-path-writable", "trusted path ancestor is group- or world-writable", candidate);
+            safe = false;
+        }
+    }
+    return safe;
+}
+function inspectExecutable(path, findings) {
+    try {
+        const stat = statSync(path);
+        let safe = true;
+        if (!stat.isFile()) {
+            add(findings, "component-not-file", "component is not a regular file", path);
+            safe = false;
+        }
+        if ((stat.mode & 0o111) === 0) {
+            add(findings, "component-not-executable", "component has no execute bit", path);
+            safe = false;
+        }
+        return safe;
+    }
+    catch {
+        add(findings, "component-missing", "required enforcement component is missing", path);
+        return false;
+    }
+}
+export function diagnoseCodexInstance(manifest, options = {}) {
+    const findings = [];
+    const platform = options.platform ?? process.platform;
+    if (platform !== manifest.platform) {
+        add(findings, "unsupported-platform", `manifest requires ${manifest.platform}; this host is ${platform}`);
+    }
+    const resolveUid = options.resolveUid ?? systemUid;
+    const groupsFor = options.groupsFor ?? systemGroups;
+    const identities = Object.values(manifest.principals).map((name) => ({
+        name, uid: resolveUid(name), groups: groupsFor(name),
+    }));
+    for (const identity of identities) {
+        if (identity.uid === null || identity.groups === null) {
+            add(findings, "principal-missing", `principal ${identity.name} does not exist or cannot be resolved`);
+        }
+        else if (identity.uid === 0) {
+            add(findings, "principal-root", `service principal ${identity.name} must not be uid 0`);
+        }
+    }
+    const knownUids = identities.flatMap((identity) => identity.uid === null ? [] : [identity.uid]);
+    if (new Set(knownUids).size !== knownUids.length) {
+        add(findings, "principal-overlap", "Codex, broker and runner principals must have distinct non-root uids");
+    }
+    for (const path of Object.values(manifest.paths)) {
+        inspectNoSymlinks(path, findings);
+    }
+    const trusted = [
+        manifest.paths.install_root,
+        manifest.paths.package_root,
+        manifest.paths.manifest,
+        manifest.paths.codex_executable,
+        manifest.paths.node_executable,
+        manifest.paths.mcp_executable,
+        manifest.paths.broker_executable,
+        manifest.paths.runner_executable,
+    ];
+    for (const path of trusted)
+        inspectRootCustody(path, findings);
+    const executables = [
+        manifest.paths.codex_executable,
+        manifest.paths.node_executable,
+        manifest.paths.mcp_executable,
+        manifest.paths.broker_executable,
+        manifest.paths.runner_executable,
+    ];
+    for (const path of executables)
+        inspectExecutable(path, findings);
+    add(findings, "trusted-path-acl-unproven", "POSIX ownership and mode do not prove that trusted paths have no writable ACL; APRV-325.1 executes no manifest-selected binary");
+    add(findings, "codex-version-unchecked", "Codex version was not executed because ACL-aware executable custody is not implemented", manifest.paths.codex_executable);
+    add(findings, "node-version-unchecked", "Node version was not executed because ACL-aware executable custody is not implemented", manifest.paths.node_executable);
+    const codex = identities.find((entry) => entry.name === manifest.principals.codex);
+    if (codex !== undefined && codex.uid !== null && codex.groups !== null) {
+        try {
+            const stat = statSync(manifest.paths.workspace);
+            const ownerWritable = stat.uid === codex.uid && (stat.mode & 0o200) !== 0;
+            const groupWritable = codex.groups.includes(stat.gid) && (stat.mode & 0o020) !== 0;
+            const worldWritable = (stat.mode & 0o002) !== 0;
+            if (ownerWritable || groupWritable || worldWritable) {
+                add(findings, "workspace-writable-by-codex", "workspace root is writable by the Codex principal under POSIX ownership and mode", manifest.paths.workspace);
+            }
+        }
+        catch {
+            // Missing paths were already reported.
+        }
+    }
+    add(findings, "workspace-custody-unproven", "root mode inspection does not prove subtree and ACL non-write; APRV-325.3 must perform a principal-executed denial probe", manifest.paths.workspace);
+    add(findings, "broker-not-ready", "APRV-325.1 ships preparation only; the policy-bound broker is not implemented", manifest.paths.broker_executable);
+    add(findings, "runner-not-ready", "APRV-325.1 ships preparation only; the confined runner is not implemented", manifest.paths.runner_executable);
+    return { ok: false, ready: false, findings };
+}
+//# sourceMappingURL=trust.js.map

package/dist/src/codex/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../../src/codex/trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAsB/C,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QACtC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;KACpF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;QACpD,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;KACpF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC5F,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,MAAc;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,MAAc;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,GAAG,CAAC,QAAyB,EAAE,IAAY,EAAE,OAAe,EAAE,IAAa;IAClF,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAyB;IAChE,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC1C,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,qCAAqC,EAAE,SAAS,CAAC,CAAC;gBAChF,IAAI,GAAG,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,iCAAiC,EAAE,SAAS,CAAC,CAAC;YAC5E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,0CAA0C,EAAE,IAAI,CAAC,CAAC;YAClF,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,QAAyB;IACjE,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,yCAAyC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;YACpH,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,QAAQ,EAAE,uBAAuB,EAAE,mDAAmD,EAAE,SAAS,CAAC,CAAC;YACvG,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAyB;IAChE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,GAAG,CAAC,QAAQ,EAAE,oBAAoB,EAAE,iCAAiC,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,QAAQ,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;YAChF,IAAI,GAAG,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,2CAA2C,EAAE,IAAI,CAAC,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAA+B,EAC/B,OAAO,GAAiB,EAAE;IAE1B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACnC,GAAG,CAAC,QAAQ,EAAE,sBAAsB,EAAE,qBAAqB,QAAQ,CAAC,QAAQ,kBAAkB,QAAQ,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;KACrD,CAAC,CAAC,CAAC;IACJ,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACtD,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,aAAa,QAAQ,CAAC,IAAI,uCAAuC,CAAC,CAAC;QACxG,CAAC;aAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,qBAAqB,QAAQ,CAAC,IAAI,oBAAoB,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACjD,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,sEAAsE,CAAC,CAAC;IAC7G,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,OAAO,GAAG;QACd,QAAQ,CAAC,KAAK,CAAC,YAAY;QAC3B,QAAQ,CAAC,KAAK,CAAC,YAAY;QAC3B,QAAQ,CAAC,KAAK,CAAC,QAAQ;QACvB,QAAQ,CAAC,KAAK,CAAC,gBAAgB;QAC/B,QAAQ,CAAC,KAAK,CAAC,eAAe;QAC9B,QAAQ,CAAC,KAAK,CAAC,cAAc;QAC7B,QAAQ,CAAC,KAAK,CAAC,iBAAiB;QAChC,QAAQ,CAAC,KAAK,CAAC,iBAAiB;KACjC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG;QAClB,QAAQ,CAAC,KAAK,CAAC,gBAAgB;QAC/B,QAAQ,CAAC,KAAK,CAAC,eAAe;QAC9B,QAAQ,CAAC,KAAK,CAAC,cAAc;QAC7B,QAAQ,CAAC,KAAK,CAAC,iBAAiB;QAChC,QAAQ,CAAC,KAAK,CAAC,iBAAiB;KACjC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAElE,GAAG,CAAC,QAAQ,EAAE,2BAA2B,EAAE,gIAAgI,CAAC,CAAC;IAC7K,GAAG,CAAC,QAAQ,EAAE,yBAAyB,EAAE,wFAAwF,EAAE,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpK,GAAG,CAAC,QAAQ,EAAE,wBAAwB,EAAE,uFAAuF,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAEjK,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1E,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACnF,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,aAAa,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;gBACpD,GAAG,CAAC,QAAQ,EAAE,6BAA6B,EAAE,kFAAkF,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7J,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IACD,GAAG,CAAC,QAAQ,EAAE,4BAA4B,EAAE,0HAA0H,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElM,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,+EAA+E,EAAE,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrJ,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,2EAA2E,EAAE,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEjJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC"}

package/dist/src/codex/workspace-plan.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Read-only planning for a future policy-bound Codex workspace broker (APRV-325.2.1).
+ *
+ * This module validates a closed change language, classifies every endpoint,
+ * and binds the bytes and filesystem identities it observes. It does not append
+ * to the approval log, mutate a workspace, establish OS custody, or make the
+ * supplied context trustworthy. A future broker must supply that context from
+ * its protected configuration and retain exclusive write custody while it
+ * revalidates and applies an authorized plan.
+ */
+import type { PolicyLoadResult } from "../core/policy-load.js";
+export declare const WORKSPACE_PLAN_VERSION: "approval.codex.workspace-plan.v1";
+export declare const MAX_WORKSPACE_OPERATIONS = 64;
+export declare const MAX_WORKSPACE_PATH_BYTES = 1024;
+export declare const MAX_WORKSPACE_IMAGE_BYTES = 1048576;
+export declare const MAX_WORKSPACE_TOTAL_BYTES = 8388608;
+export declare const MAX_WORKSPACE_DIRECTORY_ENTRIES = 4096;
+export type WorkspaceOperationInput = {
+    kind: "create";
+    path: string;
+    after_base64: string;
+} | {
+    kind: "replace";
+    path: string;
+    expected_before_sha256: string;
+    after_base64: string;
+} | {
+    kind: "delete";
+    path: string;
+    expected_before_sha256: string;
+} | {
+    kind: "move";
+    from: string;
+    to: string;
+    expected_before_sha256: string;
+};
+/**
+ * Assertions supplied by the future trusted broker. The planner validates their
+ * shape and binds them; possession of this object proves no custody or attestation.
+ */
+export interface WorkspacePlanContext {
+    actor: string;
+    root: string;
+    policy_sha256: string;
+    policy: PolicyLoadResult;
+}
+export interface FsIdentity {
+    dev: string;
+    ino: string;
+}
+export interface DirectoryBinding extends FsIdentity {
+    path: string;
+}
+export interface FileMetadata extends FsIdentity {
+    mode: string;
+    uid: string;
+    gid: string;
+    nlink: string;
+    size: string;
+    mtime_ns: string;
+    ctime_ns: string;
+}
+export interface BoundImage {
+    base64: string;
+    sha256: string;
+    byte_length: number;
+}
+export interface BoundFileImage extends BoundImage {
+    metadata: FileMetadata;
+}
+export type PlannedWorkspaceOperation = {
+    kind: "create";
+    path: string;
+    class: string;
+    directories: readonly DirectoryBinding[];
+    after: BoundImage;
+} | {
+    kind: "replace";
+    path: string;
+    class: string;
+    directories: readonly DirectoryBinding[];
+    before: BoundFileImage;
+    after: BoundImage;
+} | {
+    kind: "delete";
+    path: string;
+    class: string;
+    directories: readonly DirectoryBinding[];
+    before: BoundFileImage;
+} | {
+    kind: "move";
+    from: string;
+    to: string;
+    classes: readonly string[];
+    source_directories: readonly DirectoryBinding[];
+    destination_directories: readonly DirectoryBinding[];
+    before: BoundFileImage;
+    after: BoundImage;
+};
+export interface WorkspacePlanPayload {
+    version: typeof WORKSPACE_PLAN_VERSION;
+    actor: string;
+    root: string;
+    root_identity: FsIdentity;
+    policy_sha256: string;
+    operations: readonly PlannedWorkspaceOperation[];
+}
+export interface WorkspaceActionLeg {
+    class: string;
+    reversible: false;
+    payload_hash: string;
+}
+export interface WorkspacePlan {
+    payload: WorkspacePlanPayload;
+    payload_hash: string;
+    actions: readonly WorkspaceActionLeg[];
+}
+export type WorkspacePlanRefusalCode = "input-invalid" | "operation-limit" | "path-invalid" | "path-conflict" | "payload-too-large" | "policy-unavailable" | "class-human-only" | "root-unsafe" | "parent-unsafe" | "source-unsafe" | "destination-exists" | "preimage-mismatch" | "workspace-drift" | "context-drift";
+export type WorkspacePlanResult = {
+    ok: true;
+    plan: WorkspacePlan;
+} | {
+    ok: false;
+    code: WorkspacePlanRefusalCode;
+    message: string;
+    path?: string;
+};
+/** Build a deterministic immutable proposal without changing the workspace. */
+export declare function planWorkspaceProposal(input: unknown, context: WorkspacePlanContext): WorkspacePlanResult;
+/** Re-read and reclassify a plan. Success means only that the snapshot still matches. */
+export declare function revalidateWorkspacePlan(plan: WorkspacePlan, context: WorkspacePlanContext): WorkspacePlanResult;