codexgpt 1.0.0

package/dist/policy/executionCapabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionCapabilities.js","sourceRoot":"","sources":["../../src/policy/executionCapabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EAElC,MAAM,0BAA0B,CAAC;AAiBlC,SAAS,cAAc,CAAC,KAAa,EAAE,IAAY;IACjD,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QACvD,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QACtE,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAC5E,aAAa,EAAE,aAAa;QAC5B,kBAAkB,EAAE,MAAM;QAC1B,mBAAmB,EAAE,MAAM;QAC3B,iBAAiB,EAAE,MAAM;QACzB,cAAc,EAAE,mBAAmB;QACnC,oBAAoB,EAAE,MAAM;QAC5B,kBAAkB,EAAE,yBAAyB;QAC7C,sBAAsB,EAAE,MAAM;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAI/C;IACC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACjC,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,yBAAyB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,4BAA4B,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,kBAAkB;QAClB,sBAAsB;QACtB,oBAAoB;QACpB,kBAAkB;QAClB,aAAa;QACb,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,OAAO,yBAAyB;IACpC,OAAO,CAA8B;IAC5B,UAAU,CAAgC;IAC1C,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,SAAS,GAAG,KAAK,CAAC;IAElB,YAAY,KAAyF;QACnG,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ;QACN,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAiC;QAC7C,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC5D,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC9G,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;CACF"}

package/dist/policy/executionResources.js

@@ -0,0 +1,192 @@
+import { semanticDigest } from "./authorizationFacts.js";
+function normalizedEnvironmentMap(input, platform, label) {
+    const normalized = new Map();
+    for (const [key, value] of Object.entries(input)) {
+        if (!key || /[=\0]/.test(key) || /\0/.test(value)) {
+            throw new Error(`${label} contains an invalid environment entry.`);
+        }
+        const effectiveKey = platform === "win32" ? key.toLocaleUpperCase("en-US") : key;
+        if (normalized.has(effectiveKey)) {
+            throw new Error(`${label} contains a duplicate environment key.`);
+        }
+        normalized.set(effectiveKey, value);
+    }
+    return normalized;
+}
+export function resolveEffectiveEnvironmentV3(input) {
+    const platform = input.platform ?? process.platform;
+    const effective = normalizedEnvironmentMap(input.base, platform, "Base environment");
+    const overrides = normalizedEnvironmentMap(input.overrides, platform, "Environment overrides");
+    for (const [key, value] of overrides)
+        effective.set(key, value);
+    const entries = [...effective.entries()].sort(([left], [right]) => left.localeCompare(right, "en-US"));
+    return Object.freeze({
+        entries,
+        digest: semanticDigest({ schemaVersion: 3, domain: "effective-environment", entries })
+    });
+}
+function requireDigest(name, value) {
+    if (!/^sha256:[a-f0-9]{64}$/.test(value))
+        throw new Error(`${name} must be a SHA-256 digest.`);
+    return value;
+}
+function requireSafeId(name, value) {
+    if (value === null)
+        return null;
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/.test(value))
+        throw new Error(`${name} is invalid.`);
+    return value;
+}
+function commandFacts(command) {
+    if (command.kind === "argv") {
+        const args = command.args ?? [];
+        return {
+            commandKind: "argv",
+            argumentCount: args.length,
+            scriptBytes: 0,
+            commandDigest: semanticDigest({ domain: "argv", executable: command.executable, args })
+        };
+    }
+    return {
+        commandKind: command.kind,
+        argumentCount: 0,
+        scriptBytes: Buffer.byteLength(command.script, "utf8"),
+        commandDigest: semanticDigest({
+            domain: command.kind,
+            edition: command.kind === "powershell" ? command.edition ?? "auto" : null,
+            scriptBytes: Buffer.from(command.script, "utf8").toString("base64")
+        })
+    };
+}
+export function describeExecutionResourceV3(input) {
+    if (input.contractVersion !== 3)
+        throw new Error("Execution resources require contract 3.");
+    if (!Number.isInteger(input.deadlineMs) || input.deadlineMs < 1)
+        throw new Error("Execution deadline is invalid.");
+    if (!Number.isInteger(input.lifetimeMs) || input.lifetimeMs < 1)
+        throw new Error("Execution lifetime is invalid.");
+    const command = commandFacts(input.command);
+    const verification = input.verification
+        ? {
+            mergePlanId: requireSafeId("mergePlanId", input.verification.mergePlanId),
+            integrationWorkspaceId: requireSafeId("integrationWorkspaceId", input.verification.integrationWorkspaceId),
+            category: requireSafeId("verificationCategory", input.verification.category),
+            taskWorktreeId: requireSafeId("taskWorktreeId", input.verification.taskWorktreeId),
+            taskGeneration: input.verification.taskGeneration,
+            repositoryId: requireSafeId("repositoryId", input.verification.repositoryId),
+            candidateOid: input.verification.candidateOid,
+            candidateTreeOid: input.verification.candidateTreeOid,
+            manifestDigest: requireDigest("manifestDigest", input.verification.manifestDigest),
+            rootIdentity: requireDigest("rootIdentity", input.verification.rootIdentity)
+        }
+        : null;
+    if (verification && (!Number.isSafeInteger(verification.taskGeneration) || verification.taskGeneration < 1)) {
+        throw new Error("Verification task generation is invalid.");
+    }
+    const semanticFacts = {
+        schemaVersion: 3,
+        domain: "codexgpt.execution.authorization",
+        operation: input.operation,
+        ...command,
+        effectiveEnvironmentDigest: requireDigest("effectiveEnvironmentDigest", input.effectiveEnvironmentDigest),
+        logicalCwdDigest: semanticDigest({ logicalCwd: input.logicalCwd }),
+        absoluteCwdIdentity: requireDigest("absoluteCwdIdentity", input.absoluteCwdIdentity),
+        backendId: requireSafeId("backendId", input.backend.backendId),
+        backendVersion: requireSafeId("backendVersion", input.backend.backendVersion),
+        executableIdentity: requireDigest("executableIdentity", input.backend.executableIdentity),
+        terminal: input.terminal,
+        deadlineMs: input.deadlineMs,
+        lifetimeMs: input.lifetimeMs,
+        networkPosture: input.networkPosture,
+        accessMode: input.accessMode,
+        workspaceId: requireSafeId("workspaceId", input.workspaceId),
+        leaseId: requireSafeId("leaseId", input.leaseId),
+        snapshotId: requireSafeId("snapshotId", input.snapshotId),
+        contractVersion: 3,
+        policyRevision: requireSafeId("policyRevision", input.policyRevision),
+        evidenceRevision: requireSafeId("evidenceRevision", input.evidenceRevision),
+        identityRevision: requireSafeId("identityRevision", input.identityRevision),
+        transportRevision: requireSafeId("transportRevision", input.transportRevision),
+        ...(verification ? { verification } : {})
+    };
+    const semanticFactsDigest = semanticDigest(semanticFacts);
+    return Object.freeze({
+        schemaVersion: 3,
+        kind: "execution",
+        operation: input.operation,
+        commandKind: command.commandKind,
+        argumentCount: command.argumentCount,
+        scriptBytes: command.scriptBytes,
+        commandDigest: command.commandDigest,
+        effectiveEnvironmentDigest: semanticFacts.effectiveEnvironmentDigest,
+        logicalCwdDigest: semanticFacts.logicalCwdDigest,
+        absoluteCwdIdentity: semanticFacts.absoluteCwdIdentity,
+        backendId: semanticFacts.backendId,
+        backendVersion: semanticFacts.backendVersion,
+        executableIdentity: semanticFacts.executableIdentity,
+        terminal: input.terminal,
+        deadlineMs: input.deadlineMs,
+        lifetimeMs: input.lifetimeMs,
+        networkPosture: input.networkPosture,
+        accessMode: input.accessMode,
+        workspaceId: semanticFacts.workspaceId,
+        leaseId: semanticFacts.leaseId,
+        snapshotId: semanticFacts.snapshotId,
+        contractVersion: 3,
+        policyRevision: semanticFacts.policyRevision,
+        evidenceRevision: semanticFacts.evidenceRevision,
+        identityRevision: semanticFacts.identityRevision,
+        transportRevision: semanticFacts.transportRevision,
+        ...(verification ? { verification } : {}),
+        semanticFactsDigest,
+        resourceFingerprint: semanticDigest({ domain: "codexgpt.execution.resource", semanticFactsDigest })
+    });
+}
+export function describeProcessActionResourceV3(input) {
+    const list = input.operation === "list_processes";
+    if (!input.contextMatches || (!list && input.owned !== true))
+        throw new Error("PROCESS_NOT_FOUND");
+    if (!list && !/^process_[a-f0-9]{32}$/.test(input.processId ?? ""))
+        throw new Error("PROCESS_NOT_FOUND");
+    if (!list && (!Number.isInteger(input.generation) || (input.generation ?? -1) < 0))
+        throw new Error("PROCESS_NOT_FOUND");
+    if (input.operation === "resize_process_terminal" && input.terminal !== "conpty") {
+        throw new Error("TERMINAL_NOT_AVAILABLE");
+    }
+    const riskClass = input.operation === "write_process_input"
+        ? "R3"
+        : input.operation === "interrupt_process" || input.operation === "terminate_process"
+            ? "R2"
+            : "R0";
+    const inputDigest = input.operation === "write_process_input"
+        ? semanticDigest({
+            domain: "process-input",
+            generation: input.generation,
+            bytes: Buffer.from(input.input ?? []).toString("base64"),
+            close: input.close === true
+        })
+        : null;
+    const semanticFactsDigest = semanticDigest({
+        schemaVersion: 3,
+        domain: "codexgpt.process.action",
+        operation: input.operation,
+        processId: input.processId ?? null,
+        generation: input.generation ?? null,
+        terminal: input.terminal ?? "none",
+        inputDigest
+    });
+    return Object.freeze({
+        schemaVersion: 3,
+        kind: "process_action",
+        operation: input.operation,
+        processId: input.processId ?? null,
+        generation: input.generation ?? null,
+        terminal: input.terminal ?? "none",
+        inputBytes: input.input?.byteLength ?? 0,
+        inputDigest,
+        riskClass,
+        semanticFactsDigest,
+        resourceFingerprint: semanticDigest({ domain: "codexgpt.process.resource", semanticFactsDigest })
+    });
+}
+//# sourceMappingURL=executionResources.js.map

package/dist/policy/executionResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionResources.js","sourceRoot":"","sources":["../../src/policy/executionResources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAkBzD,SAAS,wBAAwB,CAC/B,KAAuC,EACvC,QAAyB,EACzB,KAAa;IAEb,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACjF,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;QACpE,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAI7C;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACpD,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACrF,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IAC/F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,SAAS;QAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACvG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO;QACP,MAAM,EAAE,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC;KACvF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAoB;IACvD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAM/C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,OAAO;YACL,WAAW,EAAE,MAAM;YACnB,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;SACxF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC;QACtD,aAAa,EAAE,cAAc,CAAC;YAC5B,MAAM,EAAE,OAAO,CAAC,IAAI;YACpB,OAAO,EAAE,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI;YACzE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACpE,CAAC;KACH,CAAC;AACJ,CAAC;AAwCD,MAAM,UAAU,2BAA2B,CAAC,KAAuC;IACjF,IAAI,KAAK,CAAC,eAAe,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5F,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnH,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY;QACrC,CAAC,CAAC;YACE,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC;YACzE,sBAAsB,EAAE,aAAa,CAAC,wBAAwB,EAAE,KAAK,CAAC,YAAY,CAAC,sBAAsB,CAAC;YAC1G,QAAQ,EAAE,aAAa,CAAC,sBAAsB,EAAE,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC5E,cAAc,EAAE,aAAa,CAAC,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC;YAClF,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;YACjD,YAAY,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC;YAC5E,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,YAAY;YAC7C,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,gBAAgB;YACrD,cAAc,EAAE,aAAa,CAAC,gBAAgB,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC;YAClF,YAAY,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC;SAC7E;QACH,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,cAAc,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,aAAa,GAAG;QACpB,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,kCAAkC;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,OAAO;QACV,0BAA0B,EAAE,aAAa,CAAC,4BAA4B,EAAE,KAAK,CAAC,0BAA0B,CAAC;QACzG,gBAAgB,EAAE,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAClE,mBAAmB,EAAE,aAAa,CAAC,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CAAC;QACpF,SAAS,EAAE,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9D,cAAc,EAAE,aAAa,CAAC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC7E,kBAAkB,EAAE,aAAa,CAAC,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACzF,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC;QAC5D,OAAO,EAAE,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAChD,UAAU,EAAE,aAAa,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;QACzD,eAAe,EAAE,CAAC;QAClB,cAAc,EAAE,aAAa,CAAC,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC;QACrE,gBAAgB,EAAE,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC;QAC3E,gBAAgB,EAAE,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC;QAC3E,iBAAiB,EAAE,aAAa,CAAC,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAC;QAC9E,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAC;IACX,MAAM,mBAAmB,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAU;QACzB,IAAI,EAAE,WAAoB;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,0BAA0B,EAAE,aAAa,CAAC,0BAA0B;QACpE,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;QAChD,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,SAAS,EAAE,aAAa,CAAC,SAAS;QAClC,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,aAAa,CAAC,WAAW;QACtC,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,eAAe,EAAE,CAAU;QAC3B,cAAc,EAAE,aAAa,CAAC,cAAc;QAC5C,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;QAChD,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;QAChD,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;QAClD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,mBAAmB;QACnB,mBAAmB,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,CAAC;KACpG,CAAC,CAAC;AACL,CAAC;AAqBD,MAAM,UAAU,+BAA+B,CAAC,KAA2C;IACzF,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,KAAK,gBAAgB,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnG,IAAI,CAAC,IAAI,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzH,IAAI,KAAK,CAAC,SAAS,KAAK,yBAAyB,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,SAAS,GAAc,KAAK,CAAC,SAAS,KAAK,qBAAqB;QACpE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,mBAAmB,IAAI,KAAK,CAAC,SAAS,KAAK,mBAAmB;YAClF,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,KAAK,qBAAqB;QAC3D,CAAC,CAAC,cAAc,CAAC;YACb,MAAM,EAAE,eAAe;YACvB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxD,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI;SAC5B,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,mBAAmB,GAAG,cAAc,CAAC;QACzC,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,yBAAyB;QACjC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM;QAClC,WAAW;KACZ,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAU;QACzB,IAAI,EAAE,gBAAyB;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM;QAClC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC;QACxC,WAAW;QACX,SAAS;QACT,mBAAmB;QACnB,mBAAmB,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,CAAC;KAClG,CAAC,CAAC;AACL,CAAC"}

package/dist/policy/fullAccessResources.js

@@ -0,0 +1,23 @@
+export class ProcessPolicyUnenforceableError extends Error {
+    code = "PROCESS_POLICY_UNENFORCEABLE";
+    constructor() {
+        super("PROCESS_POLICY_UNENFORCEABLE");
+        this.name = "ProcessPolicyUnenforceableError";
+    }
+}
+export function assertFullAccessProfileEligibleV3(profile) {
+    if (!profile.ambientFilesystem ||
+        !profile.ambientCredentials ||
+        !profile.ambientRegistry ||
+        !profile.unrestrictedNetwork ||
+        profile.requireBlockedPathEnforcement ||
+        profile.requireCredentialIsolation ||
+        profile.requireRegistryIsolation ||
+        profile.requireDeviceIsolation ||
+        profile.requireNetworkEnforcement ||
+        profile.requireSandbox) {
+        throw new ProcessPolicyUnenforceableError();
+    }
+    return true;
+}
+//# sourceMappingURL=fullAccessResources.js.map

package/dist/policy/fullAccessResources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fullAccessResources.js","sourceRoot":"","sources":["../../src/policy/fullAccessResources.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,IAAI,GAAG,8BAAuC,CAAC;IAExD;QACE,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,UAAU,iCAAiC,CAAC,OAA4B;IAC5E,IACE,CAAC,OAAO,CAAC,iBAAiB;QAC1B,CAAC,OAAO,CAAC,kBAAkB;QAC3B,CAAC,OAAO,CAAC,eAAe;QACxB,CAAC,OAAO,CAAC,mBAAmB;QAC5B,OAAO,CAAC,6BAA6B;QACrC,OAAO,CAAC,0BAA0B;QAClC,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,sBAAsB;QAC9B,OAAO,CAAC,yBAAyB;QACjC,OAAO,CAAC,cAAc,EACtB,CAAC;QACD,MAAM,IAAI,+BAA+B,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/policy/hardPolicy.js

@@ -0,0 +1,50 @@
+export const HARD_POLICY_REVISION = "hard-policy-v1";
+function filesystemSegments(relativePath) {
+    return relativePath.replaceAll("\\", "/").split("/").filter(Boolean).map((segment) => segment.toLocaleLowerCase("en-US"));
+}
+function isEnvFamily(segments) {
+    return segments.some((segment) => segment === ".env" || segment.startsWith(".env."));
+}
+function isGitMetadata(segments) {
+    return segments.includes(".git");
+}
+function isPrivateKey(segments) {
+    const basename = segments.at(-1) ?? "";
+    return segments.includes(".ssh") ||
+        basename === "id_rsa" || basename.startsWith("id_rsa.") ||
+        basename === "id_ed25519" || basename.startsWith("id_ed25519.") ||
+        basename.endsWith(".pem") || basename.endsWith(".key");
+}
+export function evaluateHardPolicy(resource, deployment) {
+    const matches = [];
+    if (deployment.capabilityDisabled)
+        matches.push({ id: "hard.deployment.disabled" });
+    if (resource.kind === "filesystem") {
+        if (resource.containment !== "inside")
+            matches.push({ id: "hard.fs.escape" });
+        const segments = filesystemSegments(resource.comparisonKey);
+        if (isEnvFamily(segments))
+            matches.push({ id: "hard.fs.secret.env" });
+        if (isPrivateKey(segments))
+            matches.push({ id: "hard.fs.private-key" });
+        if (isGitMetadata(segments))
+            matches.push({ id: "hard.fs.git-direct" });
+    }
+    if (resource.kind === "filesystem_batch") {
+        const comparisonKeys = resource.entries.flatMap((entry) => [
+            entry.sourceComparisonKey,
+            entry.destinationComparisonKey
+        ].filter((value) => value !== null));
+        for (const comparisonKey of comparisonKeys) {
+            const segments = filesystemSegments(comparisonKey);
+            if (isEnvFamily(segments))
+                matches.push({ id: "hard.fs.secret.env" });
+            if (isPrivateKey(segments))
+                matches.push({ id: "hard.fs.private-key" });
+            if (isGitMetadata(segments))
+                matches.push({ id: "hard.fs.git-direct" });
+        }
+    }
+    return matches;
+}
+//# sourceMappingURL=hardPolicy.js.map

package/dist/policy/hardPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardPolicy.js","sourceRoot":"","sources":["../../src/policy/hardPolicy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAyB,CAAC;AAU9D,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,SAAS,WAAW,CAAC,QAAkB;IACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB;IACvC,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9B,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;QACvD,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;QAC/D,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAA8B,EAC9B,UAAqC;IAErC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,IAAI,UAAU,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAEpF,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,WAAW,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtE,IAAI,YAAY,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACxE,IAAI,aAAa,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACzD,KAAK,CAAC,mBAAmB;YACzB,KAAK,CAAC,wBAAwB;SAC/B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC;QACtD,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;YACnD,IAAI,WAAW,CAAC,QAAQ,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtE,IAAI,YAAY,CAAC,QAAQ,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACxE,IAAI,aAAa,CAAC,QAAQ,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/policy/identity.js

@@ -0,0 +1,142 @@
+import { createHmac, randomBytes as nodeRandomBytes } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { CodexGPTHome } from "../profileStore.js";
+import { requestIdentityV1Schema } from "./schemas.js";
+const IDENTITY_KEY_BYTES = 32;
+const BASE32_ALPHABET = "abcdefghijklmnopqrstuvwxyz234567";
+function isFileError(error, code) {
+    return Boolean(error && typeof error === "object" && "code" in error && error.code === code);
+}
+function base32Lower(buffer) {
+    let bits = 0;
+    let value = 0;
+    let output = "";
+    for (const byte of buffer) {
+        value = (value << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            output += BASE32_ALPHABET[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    if (bits > 0)
+        output += BASE32_ALPHABET[(value << (5 - bits)) & 31];
+    return output;
+}
+export function identityKeyPath(home = CodexGPTHome()) {
+    return path.join(home, "policy", "identity-hmac.key");
+}
+function readIdentityKey(filePath) {
+    const key = fs.readFileSync(filePath);
+    if (key.length !== IDENTITY_KEY_BYTES) {
+        throw new Error("Identity key has an invalid length.");
+    }
+    return key;
+}
+export function loadOrCreateIdentityKey(options = {}) {
+    const filePath = identityKeyPath(options.home);
+    try {
+        return readIdentityKey(filePath);
+    }
+    catch (error) {
+        if (!isFileError(error, "ENOENT"))
+            throw error;
+    }
+    fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
+    const key = (options.randomBytes ?? nodeRandomBytes)(IDENTITY_KEY_BYTES);
+    if (!Buffer.isBuffer(key) || key.length !== IDENTITY_KEY_BYTES) {
+        throw new Error("Identity key generator returned an invalid length.");
+    }
+    try {
+        fs.writeFileSync(filePath, key, { flag: "wx", mode: 0o600 });
+        try {
+            fs.chmodSync(filePath, 0o600);
+        }
+        catch {
+            // Best-effort permission repair for filesystems that support chmod.
+        }
+        return Buffer.from(key);
+    }
+    catch (error) {
+        if (!isFileError(error, "EEXIST"))
+            throw error;
+        return readIdentityKey(filePath);
+    }
+}
+export function credentialRef(rawCredential, key) {
+    if (!rawCredential)
+        throw new Error("Credential reference requires a non-empty credential.");
+    if (!Buffer.isBuffer(key) || key.length !== IDENTITY_KEY_BYTES)
+        throw new Error("Credential reference key is invalid.");
+    const digest = createHmac("sha256", key)
+        .update("codexgpt/request-identity/v1\0", "utf8")
+        .update(rawCredential, "utf8")
+        .digest();
+    return `cred_${base32Lower(digest).slice(0, 26)}`;
+}
+function uniqueScopes(scopes) {
+    return [...new Set(scopes)];
+}
+export function identityForStdio(scopes) {
+    return requestIdentityV1Schema.parse({
+        schemaVersion: 1,
+        kind: "local_process",
+        authenticationMode: "stdio",
+        credentialRef: null,
+        subject: null,
+        scopes: uniqueScopes(scopes),
+        assuranceLevel: "local"
+    });
+}
+export function identityForLoopback(scopes) {
+    return requestIdentityV1Schema.parse({
+        schemaVersion: 1,
+        kind: "loopback_unauthenticated",
+        authenticationMode: "loopback_none",
+        credentialRef: null,
+        subject: null,
+        scopes: uniqueScopes(scopes),
+        assuranceLevel: "low"
+    });
+}
+export function identityForSharedSecret(authenticationMode, rawCredential, key, scopes) {
+    return requestIdentityV1Schema.parse({
+        schemaVersion: 1,
+        kind: authenticationMode === "query_token" ? "shared_secret_query" : "shared_secret_bearer",
+        authenticationMode,
+        credentialRef: credentialRef(rawCredential, key),
+        subject: null,
+        scopes: uniqueScopes(scopes),
+        assuranceLevel: "shared_secret"
+    });
+}
+export function currentPolicyIdentity(source) {
+    const candidate = source;
+    return typeof candidate.currentIdentity === "function" ? candidate.currentIdentity() : candidate.identity;
+}
+export function createStdioPolicySessionSource(input) {
+    const sessionId = input.sessionId.trim();
+    if (!sessionId || sessionId === "pending")
+        throw new Error("STDIO policy session id is invalid.");
+    const identity = Object.freeze(identityForStdio(input.scopes));
+    return Object.freeze({
+        transportKind: "stdio",
+        transportSessionId: () => sessionId,
+        identity,
+        currentIdentity: () => identity
+    });
+}
+export function createHttpPolicySessionSource(input) {
+    const identity = input.authenticationMode === "loopback_none"
+        ? identityForLoopback(input.scopes)
+        : identityForSharedSecret(input.authenticationMode, input.configuredCredential ?? "", input.key, input.scopes);
+    const frozenIdentity = Object.freeze(identity);
+    return Object.freeze({
+        transportKind: "streamable_http",
+        transportSessionId: input.transportSessionId,
+        identity: frozenIdentity,
+        currentIdentity: () => frozenIdentity
+    });
+}
+//# sourceMappingURL=identity.js.map

package/dist/policy/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/policy/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAGvD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAE3D,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAI,GAAG,YAAY,EAAE;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAqE,EAAE;IAEvE,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC;IACjD,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,eAAe,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC;QAC/C,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,aAAqB,EAAE,GAAW;IAC9D,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC7F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SACrC,MAAM,CAAC,gCAAgC,EAAE,MAAM,CAAC;SAChD,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC;SAC7B,MAAM,EAAE,CAAC;IACZ,OAAO,QAAQ,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CAAC,MAA8B;IAClD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA8B;IAC7D,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACnC,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,eAAe;QACrB,kBAAkB,EAAE,OAAO;QAC3B,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;QAC5B,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA8B;IAChE,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACnC,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,0BAA0B;QAChC,kBAAkB,EAAE,eAAe;QACnC,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;QAC5B,cAAc,EAAE,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,kBAA4C,EAC5C,aAAqB,EACrB,GAAW,EACX,MAA8B;IAE9B,OAAO,uBAAuB,CAAC,KAAK,CAAC;QACnC,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,kBAAkB,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sBAAsB;QAC3F,kBAAkB;QAClB,aAAa,EAAE,aAAa,CAAC,aAAa,EAAE,GAAG,CAAC;QAChD,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC;QAC5B,cAAc,EAAE,eAAe;KAChC,CAAC,CAAC;AACL,CAAC;AASD,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACtE,MAAM,SAAS,GAAG,MAAkF,CAAC;IACrG,OAAO,OAAO,SAAS,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAG9C;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,OAAgB;QAC/B,kBAAkB,EAAE,GAAG,EAAE,CAAC,SAAS;QACnC,QAAQ;QACR,eAAe,EAAE,GAAG,EAAE,CAAC,QAAQ;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAM7C;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,kBAAkB,KAAK,eAAe;QAC3D,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC;QACnC,CAAC,CAAC,uBAAuB,CACrB,KAAK,CAAC,kBAAkB,EACxB,KAAK,CAAC,oBAAoB,IAAI,EAAE,EAChC,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,MAAM,CACb,CAAC;IACN,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,iBAA0B;QACzC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,QAAQ,EAAE,cAAc;QACxB,eAAe,EAAE,GAAG,EAAE,CAAC,cAAc;KACtC,CAAC,CAAC;AACL,CAAC"}