approval-md 0.1.0 → 0.3.0

package/dist/src/codex/serve.js

@@ -0,0 +1,98 @@
+/**
+ * The strict Codex broker server (APRV-325.2): one tool, and nothing else.
+ *
+ * This is deliberately NOT `src/mcp/server.ts` with a flag. That server
+ * publishes the whole agent verb catalog — `run` spawns argv on the host,
+ * `adapter <name>` spends vault credentials, `journal write` writes a local
+ * file — and its tool list is derived from the verb registry, so a verb added
+ * tomorrow appears on it. A constrained Codex session is the case where that
+ * derivation is exactly wrong: the session must reach ONE door, the door must
+ * be the same door next month, and the way to guarantee that is a server whose
+ * catalog is a literal of length one.
+ *
+ * Everything else follows from the same reasoning:
+ *
+ * - **The catalog is a literal.** {@link BROKER_TOOLS} is checked at CALL time
+ *   as well as at list time, so a client that crafted the name itself is
+ *   refused by the same check that filtered the list (the defence in depth
+ *   `mcp-guest-restricted` keeps on the broad server).
+ * - **The input schema has no authority in it.** `operations` and
+ *   `expected_policy_sha256`, `additionalProperties: false`, and the broker
+ *   refuses an unknown key a second time. There is no `--as`, no path, no
+ *   class, no token and no sandbox flag to remove, because none was ever
+ *   published.
+ * - **Identity and every path come from the manifest**, which lives under a
+ *   root-owned install root. The operator who installed it chose them; this
+ *   process cannot be argued into different ones.
+ * - **A refusal is a RESULT, not a JSON-RPC error**, for the reason the broad
+ *   server gives: the call was well formed and the runtime's answer was no,
+ *   which the caller has to be able to read as data and branch on.
+ */
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, McpError, } from "@modelcontextprotocol/sdk/types.js";
+import { SPEC_VERSION } from "../core/version.js";
+import { applyWorkspaceChange, BROKER_TOOLS, } from "./broker.js";
+export const BROKER_TOOL_NAME = "codex_workspace_apply";
+/** The whole published contract of this server. */
+export const BROKER_TOOL = {
+    name: BROKER_TOOL_NAME,
+    title: "apply a bounded workspace change through the approval gate",
+    description: "Apply a bounded, typed change to the canonical workspace through approval.md's gate. Every operation is create, replace, delete or move on a relative path inside the workspace; `replace`, `delete` and `move` state the SHA-256 of the bytes they expect to find and are refused if the workspace has moved on. `expected_policy_sha256` is the digest of the policy you read, and a proposal built against a different one is refused rather than silently re-evaluated. The acting identity, the workspace root, the policy, the log and every class are the installation's and cannot be named here. A class the policy resolves to a human decision is refused with `approval-required` and the action keys a person must grant; ask again once they have. Nothing partially applies: either the whole proposal took, or it did not, or the answer is honestly unknown and a person owns it.",
+    inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        required: ["operations", "expected_policy_sha256"],
+        properties: {
+            operations: {
+                type: "array",
+                minItems: 1,
+                maxItems: 64,
+                description: "The bounded closed change language. `{kind:\"create\", path, after_base64}`, `{kind:\"replace\", path, expected_before_sha256, after_base64}`, `{kind:\"delete\", path, expected_before_sha256}`, `{kind:\"move\", from, to, expected_before_sha256}`. Paths are relative NFC POSIX paths inside the workspace; images are canonical base64, at most 1 MiB each and 8 MiB combined.",
+                items: { type: "object" },
+            },
+            expected_policy_sha256: {
+                type: "string",
+                pattern: "^[0-9a-f]{64}$",
+                description: "SHA-256 of the exact APPROVAL.md bytes this proposal was built against. A mismatch refuses `attestation-drift`.",
+            },
+        },
+    },
+};
+export const BROKER_INSTRUCTIONS = "This server is the ONLY way a change reaches the canonical workspace in this session. It publishes exactly one tool, `codex_workspace_apply`, and no other name is callable whether or not something advertised it. You cannot name the acting identity, the workspace root, the policy file, the log, an action class, a reversibility, a grant token or a sandbox posture: all of those belong to the installation an operator owns, and a call that mentions one is refused rather than quietly overridden. Read the policy, hash its exact bytes, and send that digest as `expected_policy_sha256`; if it has changed since, you are told so instead of being evaluated against something you did not read. Every proposal is all-or-nothing: the operations are staged, journaled and applied under a workspace lock, and the outcome you are given is what reading the workspace back proved, not what this process believes it did. When the policy sends a class to a human, the refusal names the action keys awaiting a decision; call again with the same bytes once they have decided, and the same call will apply. Shell, network and credentials are not here and are not coming: this door is for workspace changes.";
+/**
+ * Build the strict server. Nothing is connected until `Server.connect`.
+ *
+ * `tokens` is omitted from what a caller of this constructor may forward for
+ * the same reason `--as` is absent from the published schema: a raw grant token
+ * is spend material, and a server process holding one for every class would be
+ * a server that executes a human's decision without the human. The manual path
+ * works through sealed delivery instead — the human grants, the token is sealed
+ * to the key the request minted, and `core/execute.ts` opens it at the start.
+ */
+export function createCodexBrokerServer(options) {
+    const server = new Server({ name: "approval-md-codex-broker", version: SPEC_VERSION }, { capabilities: { tools: {} }, instructions: BROKER_INSTRUCTIONS });
+    server.setRequestHandler(ListToolsRequestSchema, () => ({ tools: [BROKER_TOOL] }));
+    server.setRequestHandler(CallToolRequestSchema, (request) => {
+        const name = request.params.name;
+        if (!BROKER_TOOLS.has(name)) {
+            throw new McpError(ErrorCode.InvalidParams, `unknown tool ${JSON.stringify(name)}: this server publishes exactly ${[...BROKER_TOOLS].join(", ")}. Shell, network, credential and gate-authority verbs are not withheld here, they are absent`);
+        }
+        const result = applyWorkspaceChange(name, options.installation, request.params.arguments, options.broker ?? {});
+        const payload = result.ok
+            ? { ...result }
+            : { error: { code: result.code, message: result.message, ...(result.detail === undefined ? {} : { detail: result.detail }), ...(result.pending === undefined ? {} : { pending: result.pending }), ...(result.state === undefined ? {} : { state: result.state }) } };
+        return {
+            content: [{ type: "text", text: JSON.stringify(payload) }],
+            structuredContent: payload,
+            ...(result.ok ? {} : { isError: true }),
+        };
+    });
+    return server;
+}
+/** Build the strict server and connect it. Resolves once connected. */
+export async function serveCodexBroker(options, transport) {
+    const server = createCodexBrokerServer(options);
+    await server.connect(transport);
+    return server;
+}
+//# sourceMappingURL=serve.js.map

package/dist/src/codex/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../../src/codex/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAEnE,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,sBAAsB,EACtB,QAAQ,GAGT,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,YAAY,GAGb,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,gBAAgB,GAAG,uBAAgC,CAAC;AAEjE,mDAAmD;AACnD,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,4DAA4D;IACnE,WAAW,EACT,o2BAAo2B;IACt2B,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,CAAC,YAAY,EAAE,wBAAwB,CAAC;QAClD,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,CAAC;gBACX,QAAQ,EAAE,EAAE;gBACZ,WAAW,EACT,qXAAqX;gBACvX,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC1B;YACD,sBAAsB,EAAE;gBACtB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,gBAAgB;gBACzB,WAAW,EACT,iHAAiH;aACpH;SACF;KACqB;CACzB,CAAC;AAQF,MAAM,CAAC,MAAM,mBAAmB,GAC9B,sqCAAsqC,CAAC;AAEzqC;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA4B;IAClE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,YAAY,EAAE,EAC3D,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,mBAAmB,EAAE,CACnE,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnF,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,CAAC,OAAO,EAAkB,EAAE;QAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAChB,SAAS,CAAC,aAAa,EACvB,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mCAAmC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,8FAA8F,CAClM,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CACjC,IAAI,EACJ,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,OAAO,CAAC,MAAM,IAAI,EAAE,CACrB,CAAC;QACF,MAAM,OAAO,GAA4B,MAAM,CAAC,EAAE;YAChD,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE;YACf,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACvQ,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,iBAAiB,EAAE,OAAO;YAC1B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SACxC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA4B,EAC5B,SAAoB;IAEpB,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/codex/templates.d.ts

@@ -0,0 +1,41 @@
+import { type CodexInstanceManifest } from "./manifest.js";
+export declare const CODEX_BUNDLE_VERSION = 1;
+export declare const CODEX_BUNDLE_FILES: readonly ["codex-instance.json", "requirements.toml", "managed_config.toml", "approval-codex-mcp", "approval-codex-start", "com.approval.codex-broker.plist", "com.approval.codex-runner.plist", "INSTALL.md"];
+export interface PrepareInput {
+    instanceId: string;
+    workspace: string;
+    primary: string;
+    installRoot: string;
+    output: string;
+    codexExecutable: string;
+    nodeExecutable: string;
+}
+export type PrepareResult = {
+    ok: true;
+    output: string;
+    manifest: CodexInstanceManifest;
+    files: string[];
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+export interface BundleIndex {
+    version: 1;
+    files: Record<string, string>;
+}
+export declare function manifestFor(input: PrepareInput): CodexInstanceManifest;
+export declare function requirementsToml(manifest: CodexInstanceManifest): string;
+export declare function managedConfigToml(manifest: CodexInstanceManifest): string;
+export declare function renderBundle(manifest: CodexInstanceManifest): Record<string, string>;
+export declare function prepareBundle(input: PrepareInput): PrepareResult;
+export type BundleCheck = {
+    ok: true;
+    manifest: CodexInstanceManifest;
+    files: string[];
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+export declare function checkBundle(directory: string): BundleCheck;

package/dist/src/codex/templates.js

@@ -0,0 +1,319 @@
+import { createHash } from "node:crypto";
+import { mkdirSync, lstatSync, readFileSync, realpathSync, readdirSync, writeFileSync, } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { CODEX_INSTANCE_SCHEMA_VERSION, SUPPORTED_CODEX_PLATFORM, SUPPORTED_CODEX_VERSION, checkCodexInstance, } from "./manifest.js";
+export const CODEX_BUNDLE_VERSION = 1;
+export const CODEX_BUNDLE_FILES = [
+    "codex-instance.json",
+    "requirements.toml",
+    "managed_config.toml",
+    "approval-codex-mcp",
+    "approval-codex-start",
+    "com.approval.codex-broker.plist",
+    "com.approval.codex-runner.plist",
+    "INSTALL.md",
+];
+function quote(value) {
+    return JSON.stringify(value);
+}
+function xml(value) {
+    return value
+        .replaceAll("&", "&")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replaceAll('"', "&quot;");
+}
+function sha256(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+function packageVersion() {
+    const packageRoot = fileURLToPath(new URL("../../../", import.meta.url));
+    const value = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
+    if (typeof value.version !== "string")
+        throw new Error("installed package.json has no version");
+    return value.version;
+}
+export function manifestFor(input) {
+    const installRoot = resolve(input.installRoot);
+    const manifestPath = join(installRoot, "instances", `${input.instanceId}.json`);
+    const mcpExecutable = join(installRoot, "bin", "approval-codex-mcp");
+    return {
+        schema_version: CODEX_INSTANCE_SCHEMA_VERSION,
+        instance_id: input.instanceId,
+        platform: SUPPORTED_CODEX_PLATFORM,
+        codex_version: SUPPORTED_CODEX_VERSION,
+        node_version: process.versions.node,
+        package_version: packageVersion(),
+        paths: {
+            install_root: installRoot,
+            package_root: join(installRoot, "package"),
+            workspace: resolve(input.workspace),
+            primary: resolve(input.primary),
+            policy: join(resolve(input.primary), "APPROVAL.md"),
+            log: join(resolve(input.primary), ".approval", "log", "events.jsonl"),
+            manifest: manifestPath,
+            codex_executable: resolve(input.codexExecutable),
+            node_executable: resolve(input.nodeExecutable),
+            mcp_executable: mcpExecutable,
+            broker_executable: join(installRoot, "bin", "approval-codex-broker"),
+            runner_executable: join(installRoot, "bin", "approval-codex-runner"),
+        },
+        principals: {
+            codex: "_approval_codex",
+            broker: "_approval_broker",
+            runner: "_approval_runner",
+        },
+        invocation: {
+            command: mcpExecutable,
+            args: ["codex", "serve", "--manifest", manifestPath],
+        },
+        components: {
+            broker: "required-not-shipped",
+            runner: "required-not-shipped",
+        },
+    };
+}
+export function requirementsToml(manifest) {
+    const rules = manifest.invocation.args
+        .map((value) => `  { match = "exact", value = ${quote(value)} },`)
+        .join("\n");
+    return `# INERT REVIEW ARTIFACT. Installing this file is a human/MDM action.
+allowed_approval_policies = ["never"]
+allowed_web_search_modes = ["disabled"]
+default_permissions = "approval-codex-readonly"
+allow_managed_hooks_only = true
+allow_remote_control = false
+
+[allowed_permission_profiles]
+approval-codex-readonly = true
+
+[permissions.approval-codex-readonly.filesystem]
+":root" = "deny"
+":minimal" = "read"
+
+[permissions.approval-codex-readonly.filesystem.":workspace_roots"]
+"." = "read"
+
+[permissions.approval-codex-readonly.network]
+enabled = false
+
+[features]
+apps = false
+browser_use = false
+browser_use_external = false
+browser_use_full_cdp_access = false
+computer_use = false
+in_app_browser = false
+plugins = false
+web_search = false
+
+[mcp_servers.approval-codex.identity]
+command = { executable = ${quote(manifest.invocation.command)}, args = [
+${rules}
+] }
+`;
+}
+export function managedConfigToml(manifest) {
+    const args = manifest.invocation.args.map(quote).join(", ");
+    return `# INERT REVIEW ARTIFACT. This enables only the pinned strict MCP shim.
+[mcp_servers.approval-codex]
+command = ${quote(manifest.invocation.command)}
+args = [${args}]
+required = true
+`;
+}
+function shellQuote(value) {
+    return `'${value.replaceAll("'", "'\"'\"'")}'`;
+}
+function launcher(manifest, mode) {
+    const cli = join(manifest.paths.package_root, "cli.js");
+    const prefix = `exec /usr/bin/env -i PATH=/usr/bin:/bin HOME=/var/empty TMPDIR=/tmp ${shellQuote(manifest.paths.node_executable)} ${shellQuote(cli)}`;
+    const command = mode === "serve"
+        ? `if [ "$#" -ne 4 ] || [ "$1" != 'codex' ] || [ "$2" != 'serve' ] || [ "$3" != '--manifest' ] || [ "$4" != ${shellQuote(manifest.paths.manifest)} ]; then exit 2; fi
+${prefix} codex serve --manifest ${shellQuote(manifest.paths.manifest)}`
+        : `if [ "$#" -ne 0 ]; then exit 2; fi\n${prefix} codex start --manifest ${shellQuote(manifest.paths.manifest)}`;
+    return `#!/bin/sh
+# INERT until installed root-owned with the complete APRV-325 broker/runner.
+cd ${shellQuote(manifest.paths.package_root)} || exit 1
+${command}
+`;
+}
+function plist(manifest, component) {
+    const executable = component === "broker" ? manifest.paths.broker_executable : manifest.paths.runner_executable;
+    const principal = component === "broker" ? manifest.principals.broker : manifest.principals.runner;
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>com.approval.codex-${component}</string>
+  <key>ProgramArguments</key><array>
+    <string>${xml(executable)}</string>
+    <string>--manifest</string>
+    <string>${xml(manifest.paths.manifest)}</string>
+  </array>
+  <key>UserName</key><string>${principal}</string>
+  <key>RunAtLoad</key><false/>
+</dict></plist>
+`;
+}
+function installGuide(manifest) {
+    return `# Constrained Codex instance ${manifest.instance_id}
+
+This bundle is inert. It does not create users, install files, load launchd
+services, edit /etc/codex, authenticate Codex, start an executor, or change
+approval.md policy.
+
+The broker and runner are deliberately marked required-not-shipped. Do not
+install or start this bundle until APRV-325.2 and APRV-325.3 replace those
+placeholders and strict doctor reports ready.
+
+Target install root: ${manifest.paths.install_root}
+Canonical workspace: ${manifest.paths.workspace}
+Primary gate checkout: ${manifest.paths.primary}
+
+Review bundle-sha256.json, then run:
+  approval codex setup --check <this-directory>
+  approval codex doctor --manifest ${manifest.paths.manifest}
+
+A passing setup check proves only that this review bundle is internally
+consistent. It does not prove host custody or enforcement.
+`;
+}
+export function renderBundle(manifest) {
+    return {
+        "codex-instance.json": `${JSON.stringify(manifest, null, 2)}\n`,
+        "requirements.toml": requirementsToml(manifest),
+        "managed_config.toml": managedConfigToml(manifest),
+        "approval-codex-mcp": launcher(manifest, "serve"),
+        "approval-codex-start": launcher(manifest, "start"),
+        "com.approval.codex-broker.plist": plist(manifest, "broker"),
+        "com.approval.codex-runner.plist": plist(manifest, "runner"),
+        "INSTALL.md": installGuide(manifest),
+    };
+}
+export function prepareBundle(input) {
+    let manifest;
+    try {
+        manifest = manifestFor(input);
+    }
+    catch (cause) {
+        return { ok: false, code: "package-unreadable", message: cause instanceof Error ? cause.message : String(cause) };
+    }
+    const checked = checkCodexInstance(manifest);
+    if (!checked.ok) {
+        return {
+            ok: false,
+            code: "manifest-invalid",
+            message: checked.errors.map((error) => `${error.path || "/"}: ${error.message}`).join("; "),
+        };
+    }
+    let output;
+    try {
+        const requestedOutput = resolve(input.output);
+        output = join(realpathSync(dirname(requestedOutput)), basename(requestedOutput));
+    }
+    catch (cause) {
+        return { ok: false, code: "prepare-failed", message: cause instanceof Error ? cause.message : String(cause) };
+    }
+    const roots = [manifest.paths.workspace, manifest.paths.primary, manifest.paths.install_root];
+    if (roots.some((root) => output === root || output.startsWith(`${root}/`) || root.startsWith(`${output}/`))) {
+        return { ok: false, code: "output-overlap", message: "preparation output must be disjoint from workspace, primary and install roots" };
+    }
+    try {
+        mkdirSync(output);
+        const rendered = renderBundle(manifest);
+        for (const [name, content] of Object.entries(rendered)) {
+            writeFileSync(join(output, name), content, {
+                encoding: "utf8",
+                mode: name.startsWith("approval-codex-") ? 0o755 : 0o644,
+                flag: "wx",
+            });
+        }
+        const index = { version: CODEX_BUNDLE_VERSION, files: {} };
+        for (const name of CODEX_BUNDLE_FILES) {
+            index.files[name] = sha256(readFileSync(join(output, name)));
+        }
+        writeFileSync(join(output, "bundle-sha256.json"), `${JSON.stringify(index, null, 2)}\n`, {
+            encoding: "utf8",
+            mode: 0o644,
+            flag: "wx",
+        });
+        return { ok: true, output, manifest, files: [...CODEX_BUNDLE_FILES, "bundle-sha256.json"] };
+    }
+    catch (cause) {
+        return { ok: false, code: "prepare-failed", message: cause instanceof Error ? cause.message : String(cause) };
+    }
+}
+export function checkBundle(directory) {
+    const root = resolve(directory);
+    try {
+        if (!lstatSync(root).isDirectory() || realpathSync(root) !== root) {
+            return { ok: false, code: "bundle-root-unsafe", message: "bundle root must be a canonical directory, not a symlink" };
+        }
+        if (!lstatSync(join(root, "bundle-sha256.json")).isFile()) {
+            return { ok: false, code: "bundle-index-unreadable", message: "bundle-sha256.json must be a regular file" };
+        }
+    }
+    catch (cause) {
+        return { ok: false, code: "bundle-index-unreadable", message: cause instanceof Error ? cause.message : String(cause) };
+    }
+    let index;
+    try {
+        index = JSON.parse(readFileSync(join(root, "bundle-sha256.json"), "utf8"));
+    }
+    catch (cause) {
+        return { ok: false, code: "bundle-index-unreadable", message: cause instanceof Error ? cause.message : String(cause) };
+    }
+    if (index.version !== CODEX_BUNDLE_VERSION ||
+        typeof index.files !== "object" ||
+        index.files === null ||
+        Array.isArray(index.files)) {
+        return { ok: false, code: "bundle-index-invalid", message: "bundle-sha256.json has an unsupported shape or version" };
+    }
+    const expected = [...CODEX_BUNDLE_FILES].sort();
+    const actual = Object.keys(index.files).sort();
+    if (JSON.stringify(actual) !== JSON.stringify(expected)) {
+        return { ok: false, code: "bundle-file-set", message: "bundle index must name the exact required file set" };
+    }
+    try {
+        const disk = readdirSync(root).sort();
+        const allowed = [...expected, "bundle-sha256.json"].sort();
+        if (JSON.stringify(disk) !== JSON.stringify(allowed)) {
+            return { ok: false, code: "bundle-file-set", message: "bundle directory must contain only the indexed files and bundle-sha256.json" };
+        }
+        for (const name of expected) {
+            if (!lstatSync(join(root, name)).isFile()) {
+                return { ok: false, code: "bundle-file-type", message: `${name} must be a regular file, not a symlink or directory` };
+            }
+            if (index.files[name] !== sha256(readFileSync(join(root, name)))) {
+                return { ok: false, code: "bundle-hash-mismatch", message: `${name} does not match bundle-sha256.json` };
+            }
+        }
+    }
+    catch (cause) {
+        return { ok: false, code: "bundle-unreadable", message: cause instanceof Error ? cause.message : String(cause) };
+    }
+    let manifestValue;
+    try {
+        manifestValue = JSON.parse(readFileSync(join(root, "codex-instance.json"), "utf8"));
+    }
+    catch (cause) {
+        return {
+            ok: false,
+            code: "manifest-invalid",
+            message: cause instanceof Error ? cause.message : String(cause),
+        };
+    }
+    const checked = checkCodexInstance(manifestValue);
+    if (!checked.ok) {
+        return { ok: false, code: "manifest-invalid", message: checked.errors.map((error) => error.message).join("; ") };
+    }
+    const expectedRendered = renderBundle(checked.manifest);
+    for (const [name, content] of Object.entries(expectedRendered)) {
+        if (readFileSync(join(root, name), "utf8") !== content) {
+            return { ok: false, code: "bundle-template-drift", message: `${name} does not match the manifest-derived template` };
+        }
+    }
+    return { ok: true, manifest: checked.manifest, files: [...expected, "bundle-sha256.json"] };
+}
+//# sourceMappingURL=templates.js.map

package/dist/src/codex/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../../src/codex/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GAEnB,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IACpB,sBAAsB;IACtB,iCAAiC;IACjC,iCAAiC;IACjC,YAAY;CACJ,CAAC;AAqBX,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAE/E,CAAC;IACF,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,UAAU,OAAO,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACrE,OAAO;QACL,cAAc,EAAE,6BAA6B;QAC7C,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,QAAQ,EAAE,wBAAwB;QAClC,aAAa,EAAE,uBAAuB;QACtC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QACnC,eAAe,EAAE,cAAc,EAAE;QACjC,KAAK,EAAE;YACL,YAAY,EAAE,WAAW;YACzB,YAAY,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC;YAC1C,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;YACnC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC/B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;YACnD,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,CAAC;YACrE,QAAQ,EAAE,YAAY;YACtB,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;YAChD,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;YAC9C,cAAc,EAAE,aAAa;YAC7B,iBAAiB,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,uBAAuB,CAAC;YACpE,iBAAiB,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,uBAAuB,CAAC;SACrE;QACD,UAAU,EAAE;YACV,KAAK,EAAE,iBAAiB;YACxB,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,kBAAkB;SAC3B;QACD,UAAU,EAAE;YACV,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC;SACrD;QACD,UAAU,EAAE;YACV,MAAM,EAAE,sBAAsB;YAC9B,MAAM,EAAE,sBAAsB;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAA+B;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI;SACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gCAAgC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;SACjE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA+BkB,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;EAC3D,KAAK;;CAEN,CAAC;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA+B;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO;;YAEG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;UACpC,IAAI;;CAEb,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,QAA+B,EAAE,IAAuB;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,uEAAuE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;IACtJ,MAAM,OAAO,GACX,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,4GAA4G,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;EACrJ,MAAM,2BAA2B,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;QAClE,CAAC,CAAC,uCAAuC,MAAM,2BAA2B,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpH,OAAO;;KAEJ,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC;EAC1C,OAAO;CACR,CAAC;AACF,CAAC;AAED,SAAS,KAAK,CAAC,QAA+B,EAAE,SAA8B;IAC5E,MAAM,UAAU,GACd,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC/F,MAAM,SAAS,GACb,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;IACnF,OAAO;;;+CAGsC,SAAS;;cAE1C,GAAG,CAAC,UAAU,CAAC;;cAEf,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;;+BAEX,SAAS;;;CAGvC,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,QAA+B;IACnD,OAAO,gCAAgC,QAAQ,CAAC,WAAW;;;;;;;;;;uBAUtC,QAAQ,CAAC,KAAK,CAAC,YAAY;uBAC3B,QAAQ,CAAC,KAAK,CAAC,SAAS;yBACtB,QAAQ,CAAC,KAAK,CAAC,OAAO;;;;qCAIV,QAAQ,CAAC,KAAK,CAAC,QAAQ;;;;CAI3D,CAAC;AACF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA+B;IAC1D,OAAO;QACL,qBAAqB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QAC/D,mBAAmB,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QAC/C,qBAAqB,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QAClD,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QACjD,sBAAsB,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QACnD,iCAAiC,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5D,iCAAiC,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5D,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,IAAI,QAA+B,CAAC;IACpC,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpH,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC5F,CAAC;IACJ,CAAC;IACD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,+EAA+E,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE;gBACzC,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;gBACxD,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAgB,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACvF,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,CAAC;IAC9F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAChH,CAAC;AACH,CAAC;AAMD,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;QACxH,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;QAC9G,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,IACE,KAAK,CAAC,OAAO,KAAK,oBAAoB;QACtC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,KAAK,KAAK,IAAI;QACpB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAC1B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;IACxH,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,EAAE,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,6EAA6E,EAAE,CAAC;QACxI,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,IAAI,qDAAqD,EAAE,CAAC;YACxH,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,GAAG,IAAI,oCAAoC,EAAE,CAAC;YAC3G,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACnH,CAAC;IACD,IAAI,aAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACnH,CAAC;IACD,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC/D,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,IAAI,+CAA+C,EAAE,CAAC;QACvH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,QAAQ,EAAE,oBAAoB,CAAC,EAAE,CAAC;AAC9F,CAAC"}

package/dist/src/codex/trust.d.ts

@@ -0,0 +1,19 @@
+import type { CodexInstanceManifest } from "./manifest.js";
+export interface DoctorFinding {
+    code: string;
+    path?: string;
+    message: string;
+}
+export interface DoctorReport {
+    ok: false;
+    ready: false;
+    findings: DoctorFinding[];
+}
+export interface TrustOptions {
+    platform?: NodeJS.Platform;
+    resolveUid?: (name: string) => number | null;
+    groupsFor?: (name: string) => number[] | null;
+}
+export declare function parseCodexVersionOutput(stdout: string, stderr: string): string | null;
+export declare function parseNodeVersionOutput(stdout: string, stderr: string): string | null;
+export declare function diagnoseCodexInstance(manifest: CodexInstanceManifest, options?: TrustOptions): DoctorReport;