youmd 0.11.0 → 0.13.0

package/dist/lib/codex-device-auth.js

@@ -0,0 +1,295 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CODEX_LOGIN_KILL_GRACE_MS = exports.CODEX_LOGIN_TIMEOUT_MS = exports.CODEX_STATUS_TIMEOUT_MS = exports.CODEX_STATUS_MAX_OUTPUT_BYTES = exports.CODEX_DEVICE_AUTH_ARGS = exports.CODEX_STATUS_ARGS = exports.CODEX_EXECUTABLE = void 0;
+exports.validateOfficialChatGPTBundle = validateOfficialChatGPTBundle;
+exports.resolveTrustedCodexExecutable = resolveTrustedCodexExecutable;
+exports.classifyCodexLoginStatusStreams = classifyCodexLoginStatusStreams;
+exports.runCodexLoginStatus = runCodexLoginStatus;
+exports.terminateCodexChild = terminateCodexChild;
+exports.runCodexDeviceAuth = runCodexDeviceAuth;
+exports.getCodexAuthenticationStatus = getCodexAuthenticationStatus;
+exports.ensureCodexAuthentication = ensureCodexAuthentication;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+/**
+ * The ChatGPT desktop bundle supplies the supported local Codex executable on
+ * this macOS adapter surface. This M3 adapter accepts only the exact sealed
+ * macOS bundle; it intentionally does not use PATH/npm/Homebrew candidates.
+ */
+exports.CODEX_EXECUTABLE = "/Applications/ChatGPT.app/Contents/Resources/codex";
+exports.CODEX_STATUS_ARGS = ["login", "status"];
+exports.CODEX_DEVICE_AUTH_ARGS = ["login", "--device-auth"];
+exports.CODEX_STATUS_MAX_OUTPUT_BYTES = 1024;
+exports.CODEX_STATUS_TIMEOUT_MS = 5000;
+/** OpenAI's device flow has a long human approval window; leave margin. */
+exports.CODEX_LOGIN_TIMEOUT_MS = 16 * 60000;
+exports.CODEX_LOGIN_KILL_GRACE_MS = 3000;
+const CHATGPT_BUNDLE = "/Applications/ChatGPT.app";
+const CHATGPT_DESIGNATED_REQUIREMENT = 'anchor apple generic and identifier "com.openai.codex" and certificate leaf[subject.OU] = "2DC432GLL2"';
+/** Validate code signature and designated OpenAI app identity; never CDHash-pin. */
+function validateOfficialChatGPTBundle(bundlePath = CHATGPT_BUNDLE) {
+    try {
+        (0, child_process_1.execFileSync)("/usr/bin/codesign", ["--verify", "--deep", "--strict", "--requirement", CHATGPT_DESIGNATED_REQUIREMENT, bundlePath], {
+            stdio: "ignore", timeout: 5000,
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolve only the exact sealed ChatGPT bundle resource after validating the
+ * app's Apple/OpenAI designated requirement. No PATH, alias, config value, or
+ * caller-selected executable is part of this auth boundary.
+ */
+function resolveTrustedCodexExecutable(deps = {}) {
+    if (!(deps.validateBundle ?? validateOfficialChatGPTBundle)(CHATGPT_BUNDLE))
+        return null;
+    const realpath = deps.realpathSync ?? fs.realpathSync;
+    const lstat = deps.lstatSync ?? fs.lstatSync;
+    try {
+        const resolved = realpath(exports.CODEX_EXECUTABLE);
+        if (resolved !== exports.CODEX_EXECUTABLE)
+            return null;
+        const entry = lstat(resolved);
+        if (!entry.isFile() || entry.isSymbolicLink() || (entry.mode & 0o022) !== 0 || (entry.mode & 0o111) === 0)
+            return null;
+        return resolved;
+    }
+    catch {
+        return null;
+    }
+}
+function sanitizedCodexEnvironment() {
+    const environment = {};
+    for (const key of ["HOME", "PATH", "TERM"]) {
+        if (process.env[key])
+            environment[key] = process.env[key];
+    }
+    return environment;
+}
+function report(authenticationKind) {
+    return {
+        schemaVersion: "you-md/openai-codex-local-status/v1",
+        target: "openai_codex",
+        source: "codex_login_status",
+        authenticationKind,
+        authenticated: authenticationKind === "chatgpt" || authenticationKind === "api_key",
+        providerCredentialsRead: false,
+        deviceCodeCaptured: false,
+    };
+}
+/**
+ * Intentionally exact matching. Never relay status output: if a future CLI
+ * prints a device URL, token, path, or arbitrary diagnostic, it becomes the
+ * safe `unknown` enum rather than data that You.md retains or uploads.
+ */
+function classifyCodexLoginStatusStreams(stdout, stderr, exitCode) {
+    if (stdout.length + stderr.length > exports.CODEX_STATUS_MAX_OUTPUT_BYTES)
+        return report("unknown");
+    if (exitCode !== 0)
+        return report("unknown");
+    // Codex versions have emitted its short status line on either stream. One
+    // exact non-empty stream is safe; mixed output is diagnostic ambiguity.
+    if ((stdout.length === 0) === (stderr.length === 0))
+        return report("unknown");
+    const value = (stdout.length > 0 ? stdout : stderr).toString("utf8");
+    if (!/^[^\r\n]+(?:\r?\n)?$/.test(value))
+        return report("unknown");
+    const recognized = {
+        "Logged in using ChatGPT": "chatgpt",
+        "Logged in using an API key": "api_key",
+        "Logged in using API key": "api_key",
+        "Not logged in": "signed_out",
+    };
+    return report(recognized[value.trim()] ?? "unknown");
+}
+/** Capture bounded status streams, classify them, then discard their raw bytes. */
+function runCodexLoginStatus(request) {
+    return new Promise((resolve) => {
+        const child = (0, child_process_1.spawn)(request.executable, [...request.argv], {
+            shell: request.shell,
+            stdio: [...request.stdio],
+            windowsHide: true,
+            env: sanitizedCodexEnvironment(),
+        });
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        let bytes = 0;
+        let settled = false;
+        let stopping = false;
+        let pendingStopResult;
+        let forceKillTimer;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (forceKillTimer)
+                clearTimeout(forceKillTimer);
+            resolve(result);
+        };
+        const requestStop = (result) => {
+            if (stopping)
+                return;
+            stopping = true;
+            pendingStopResult = result;
+            forceKillTimer = terminateCodexChild(child, () => finish(result));
+        };
+        const timer = setTimeout(() => {
+            requestStop({ exitCode: null, stdout: Buffer.alloc(0), stderr: Buffer.alloc(0), timedOut: true });
+        }, request.timeoutMs);
+        child.once("error", () => finish({ exitCode: null, stdout: Buffer.alloc(0), stderr: Buffer.alloc(0) }));
+        child.stdout?.on("data", (chunk) => {
+            bytes += chunk.length;
+            if (bytes > exports.CODEX_STATUS_MAX_OUTPUT_BYTES) {
+                return requestStop({ exitCode: null, stdout: Buffer.alloc(exports.CODEX_STATUS_MAX_OUTPUT_BYTES + 1), stderr: Buffer.alloc(0) });
+            }
+            stdoutChunks.push(chunk);
+        });
+        child.stderr?.on("data", (chunk) => {
+            bytes += chunk.length;
+            if (bytes > exports.CODEX_STATUS_MAX_OUTPUT_BYTES) {
+                return requestStop({ exitCode: null, stdout: Buffer.alloc(0), stderr: Buffer.alloc(exports.CODEX_STATUS_MAX_OUTPUT_BYTES + 1) });
+            }
+            stderrChunks.push(chunk);
+        });
+        child.once("close", (exitCode) => finish(pendingStopResult ?? {
+            exitCode, stdout: Buffer.concat(stdoutChunks), stderr: Buffer.concat(stderrChunks),
+        }));
+    });
+}
+/**
+ * Start an official interactive device-login flow without intercepting either
+ * stdout or stderr. The device code and callback URL never enter this process.
+ */
+/** Send TERM first and force KILL only if a local child resists. */
+function terminateCodexChild(child, complete, graceMs = exports.CODEX_LOGIN_KILL_GRACE_MS) {
+    child.kill("SIGTERM");
+    return setTimeout(() => {
+        child.kill("SIGKILL");
+        complete();
+    }, graceMs);
+}
+function runCodexDeviceAuth(request) {
+    return new Promise((resolve) => {
+        const child = (0, child_process_1.spawn)(request.executable, [...request.argv], {
+            shell: request.shell,
+            stdio: request.stdio,
+            windowsHide: true,
+            env: sanitizedCodexEnvironment(),
+        });
+        let settled = false;
+        let stopping = false;
+        let pendingStopResult;
+        let forceKillTimer;
+        const signals = ["SIGINT", "SIGTERM"];
+        const cleanup = () => signals.forEach((signal) => process.removeListener(signal, cancel));
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (forceKillTimer)
+                clearTimeout(forceKillTimer);
+            cleanup();
+            resolve(result);
+        };
+        const requestStop = (result) => {
+            if (stopping)
+                return;
+            stopping = true;
+            pendingStopResult = result;
+            forceKillTimer = terminateCodexChild(child, () => finish(result));
+        };
+        const cancel = () => {
+            requestStop({ exitCode: null, cancelled: true });
+        };
+        const timer = setTimeout(() => {
+            requestStop({ exitCode: null, timedOut: true });
+        }, request.timeoutMs);
+        signals.forEach((signal) => process.once(signal, cancel));
+        child.once("error", () => finish({ exitCode: null }));
+        child.once("close", (exitCode) => finish(pendingStopResult ?? { exitCode }));
+    });
+}
+function statusRequest(executable) {
+    return { executable, argv: exports.CODEX_STATUS_ARGS, shell: false, stdio: ["ignore", "pipe", "pipe"], timeoutMs: exports.CODEX_STATUS_TIMEOUT_MS };
+}
+function loginRequest(executable) {
+    return { executable, argv: exports.CODEX_DEVICE_AUTH_ARGS, shell: false, stdio: "inherit", timeoutMs: exports.CODEX_LOGIN_TIMEOUT_MS };
+}
+async function getCodexAuthenticationStatus(deps = {}) {
+    const executable = (deps.resolveExecutable ?? resolveTrustedCodexExecutable)();
+    if (!executable)
+        return report("unavailable");
+    try {
+        const result = await (deps.runStatus ?? runCodexLoginStatus)(statusRequest(executable));
+        return result.timedOut ? report("unavailable") : classifyCodexLoginStatusStreams(result.stdout, result.stderr ?? Buffer.alloc(0), result.exitCode);
+    }
+    catch {
+        return report("unavailable");
+    }
+}
+async function ensureCodexAuthentication(deps = {}) {
+    const before = await getCodexAuthenticationStatus(deps);
+    if (before.authenticationKind === "chatgpt")
+        return { status: before, loginChildRan: false, providerStateChanged: false };
+    if (before.authenticationKind === "api_key")
+        throw new Error("codex_chatgpt_sign_in_required");
+    const executable = (deps.resolveExecutable ?? resolveTrustedCodexExecutable)();
+    if (!executable)
+        throw new Error("codex_login_unavailable");
+    let login;
+    try {
+        login = await (deps.runLogin ?? runCodexDeviceAuth)(loginRequest(executable));
+    }
+    catch {
+        throw new Error("codex_login_unavailable");
+    }
+    if (login.cancelled)
+        throw new Error("codex_login_cancelled");
+    if (login.timedOut)
+        throw new Error("codex_login_timeout");
+    if (login.exitCode !== 0)
+        throw new Error("codex_login_failed");
+    const after = await getCodexAuthenticationStatus(deps);
+    if (after.authenticationKind !== "chatgpt")
+        throw new Error("codex_login_status_unrecognized");
+    return { status: after, loginChildRan: true, providerStateChanged: true };
+}
+//# sourceMappingURL=codex-device-auth.js.map

package/dist/lib/codex-device-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-device-auth.js","sourceRoot":"","sources":["../../src/lib/codex-device-auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmEA,sEASC;AAOD,sEAaC;AA2BD,0EAeC;AAGD,kDAkDC;AAOD,kDAMC;AAED,gDAsCC;AAUD,oEASC;AAQD,8DAgBC;AA/RD,iDAAuE;AACvE,uCAAyB;AAEzB;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,oDAAoD,CAAC;AACxE,QAAA,iBAAiB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AACjD,QAAA,sBAAsB,GAAG,CAAC,OAAO,EAAE,eAAe,CAAU,CAAC;AAC7D,QAAA,6BAA6B,GAAG,IAAK,CAAC;AACtC,QAAA,uBAAuB,GAAG,IAAK,CAAC;AAC7C,2EAA2E;AAC9D,QAAA,sBAAsB,GAAG,EAAE,GAAG,KAAM,CAAC;AACrC,QAAA,yBAAyB,GAAG,IAAK,CAAC;AAgD/C,MAAM,cAAc,GAAG,2BAA2B,CAAC;AACnD,MAAM,8BAA8B,GAAG,wGAAwG,CAAC;AAEhJ,oFAAoF;AACpF,SAAgB,6BAA6B,CAAC,UAAU,GAAG,cAAc;IACvE,IAAI,CAAC;QACH,IAAA,4BAAY,EAAC,mBAAmB,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,8BAA8B,EAAE,UAAU,CAAC,EAAE;YACjI,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAK;SAChC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,6BAA6B,CAAC,OAAsC,EAAE;IACpF,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,6BAA6B,CAAC,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,wBAAgB,CAAC,CAAC;QAC5C,IAAI,QAAQ,KAAK,wBAAgB;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB;IAChC,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,MAAM,CAAC,kBAA2C;IACzD,OAAO;QACL,aAAa,EAAE,qCAAqC;QACpD,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,oBAAoB;QAC5B,kBAAkB;QAClB,aAAa,EAAE,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,KAAK,SAAS;QACnF,uBAAuB,EAAE,KAAK;QAC9B,kBAAkB,EAAE,KAAK;KAC1B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,+BAA+B,CAAC,MAAc,EAAE,MAAc,EAAE,QAAuB;IACrG,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,qCAA6B;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5F,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,UAAU,GAA4C;QAC1D,yBAAyB,EAAE,SAAS;QACpC,4BAA4B,EAAE,SAAS;QACvC,yBAAyB,EAAE,SAAS;QACpC,eAAe,EAAE,YAAY;KAC9B,CAAC;IACF,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,mFAAmF;AACnF,SAAgB,mBAAmB,CAAC,OAA8B;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAiB,IAAA,qBAAK,EAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;YACvE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,yBAAyB,EAAE;SACjC,CAAC,CAAC;QACH,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,iBAAmD,CAAC;QACxD,IAAI,cAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC,MAA4B,EAAE,EAAE;YAC9C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,cAAc;gBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;YACjD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,MAA4B,EAAE,EAAE;YACnD,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,iBAAiB,GAAG,MAAM,CAAC;YAC3B,cAAc,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpG,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxG,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,qCAA6B,EAAE,CAAC;gBAC1C,OAAO,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,qCAA6B,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3H,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,qCAA6B,EAAE,CAAC;gBAC1C,OAAO,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,qCAA6B,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3H,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAuB,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI;YAC3E,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;SACnF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,oEAAoE;AACpE,SAAgB,mBAAmB,CAAC,KAAiC,EAAE,QAAoB,EAAE,OAAO,GAAG,iCAAyB;IAC9H,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,OAAO,UAAU,CAAC,GAAG,EAAE;QACrB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,QAAQ,EAAE,CAAC;IACb,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAA6B;IAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAiB,IAAA,qBAAK,EAAC,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE;YACvE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,IAAI;YACjB,GAAG,EAAE,yBAAyB,EAAE;SACjC,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,iBAAkD,CAAC;QACvD,IAAI,cAA0C,CAAC;QAC/C,MAAM,OAAO,GAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAE,EAAE;YAC7C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,cAAc;gBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,MAA2B,EAAE,EAAE;YAClD,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,iBAAiB,GAAG,MAAM,CAAC;YAC3B,cAAc,GAAG,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAuB,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB;IACvC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,yBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,+BAAuB,EAAE,CAAC;AACtI,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,8BAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,8BAAsB,EAAE,CAAC;AACzH,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAAC,OAA4B,EAAE;IAC/E,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,6BAA6B,CAAC,EAAE,CAAC;IAC/E,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAQM,KAAK,UAAU,yBAAyB,CAAC,OAA4B,EAAE;IAC5E,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;IAC1H,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,6BAA6B,CAAC,EAAE,CAAC;IAC/E,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAE5D,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;IAC5I,IAAI,KAAK,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAG,MAAM,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC"}

package/dist/lib/codex-job-control-plane.d.ts

@@ -0,0 +1,67 @@
+import { type DeclaredInput } from "./codex-readonly-job";
+import { type NativeHostDeps } from "./connected-access-native";
+export declare const CODEX_JOB_API_ORIGIN = "https://kindly-cassowary-600.convex.site";
+export type JobControlDeps = {
+    fetch: typeof fetch;
+    openApproval: (url: string) => void;
+    sleep: (ms: number) => Promise<void>;
+    token: () => string | undefined;
+};
+export type PreparedClaim = {
+    claimRef: string;
+    keyId: string;
+    canonicalization: "RFC8785";
+    signingAlgorithm: "Ed25519";
+    preparedCanonicalPayload: string;
+    payloadHash: string;
+    expiresAt: string;
+};
+export type Job = {
+    jobId: string;
+    status: string;
+    hostedApprovalUrl?: string;
+    preparedClaim?: PreparedClaim | null;
+};
+/** Bearer control plane deliberately has no approve method: approval is owner-session UI only. */
+export declare function prepareAndAwaitOwnerApproval(input: {
+    keyId: string;
+    workspaceRef: string;
+    deviceId: string;
+    files: DeclaredInput[];
+    deadlineSeconds: number;
+}, deps: JobControlDeps, options?: {
+    waitForApproval?: boolean;
+}): Promise<Job>;
+export type JobLifecycleDeps = JobControlDeps & {
+    native?: NativeHostDeps;
+    publicKey: string;
+    run: (claim: Record<string, unknown>, grant: Record<string, unknown>) => Promise<{
+        outcome: "succeeded" | "failed";
+        resultDigest: string;
+        contextLoaded: boolean;
+        modelStarted: boolean;
+    }>;
+    signClaim?: (input: {
+        approvedCanonicalClaim: string;
+        expiresAt: number;
+        expectedPublicKey: string;
+    }) => Promise<{
+        signature: string;
+        payloadHash: string;
+    }>;
+    signStep?: (input: {
+        approvedCanonicalStep: string;
+        expiresAt: number;
+        expectedPublicKey: string;
+    }) => Promise<{
+        signature: string;
+        payloadHash: string;
+    }>;
+};
+/** Full fake-injectable lifecycle; no bearer approve endpoint exists or is callable here. */
+export declare function claimAndRunApprovedLocalCodexJob(job: Job, deps: JobLifecycleDeps): Promise<{
+    outcome: "succeeded" | "failed";
+    contextLoaded: boolean;
+    modelStarted: boolean;
+}>;
+//# sourceMappingURL=codex-job-control-plane.d.ts.map

package/dist/lib/codex-job-control-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-job-control-plane.d.ts","sourceRoot":"","sources":["../../src/lib/codex-job-control-plane.ts"],"names":[],"mappings":"AACA,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAiE,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE/H,eAAO,MAAM,oBAAoB,6CAA6C,CAAC;AAC/E,MAAM,MAAM,cAAc,GAAG;IAAE,KAAK,EAAE,OAAO,KAAK,CAAC;IAAC,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AACjK,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,SAAS,CAAC;IAAC,gBAAgB,EAAE,SAAS,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AACpM,MAAM,MAAM,GAAG,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,CAAC;AAMtH,kGAAkG;AAClG,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,aAAa,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CASrP;AAID,MAAM,MAAM,gBAAgB,GAAG,cAAc,GAAG;IAC9C,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,WAAW,GAAG,QAAQ,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC3L,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,sBAAsB,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7J,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,qBAAqB,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5J,CAAC;AA0BF,6FAA6F;AAC7F,wBAAsB,gCAAgC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,GAAG,QAAQ,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC,CAepL"}

package/dist/lib/codex-job-control-plane.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CODEX_JOB_API_ORIGIN = void 0;
+exports.prepareAndAwaitOwnerApproval = prepareAndAwaitOwnerApproval;
+exports.claimAndRunApprovedLocalCodexJob = claimAndRunApprovedLocalCodexJob;
+const crypto_1 = require("crypto");
+const codex_readonly_job_1 = require("./codex-readonly-job");
+const connected_access_native_1 = require("./connected-access-native");
+exports.CODEX_JOB_API_ORIGIN = "https://kindly-cassowary-600.convex.site";
+function hash(value) { return `sha256:${(0, crypto_1.createHash)("sha256").update(value).digest("hex")}`; }
+function canonical(value) { if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string")
+    return JSON.stringify(value); if (Array.isArray(value))
+    return `[${value.map(canonical).join(",")}]`; const record = value; return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonical(record[key])}`).join(",")}}`; }
+function b64(value) { return Buffer.from(canonical(value)).toString("base64url"); }
+async function api(deps, path, init) { const token = deps.token(); if (!token)
+    throw new Error("authentication_required"); const response = await deps.fetch(`${exports.CODEX_JOB_API_ORIGIN}${path}`, { ...init, headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json", Accept: "application/json", ...(init?.headers ?? {}) } }); if (!response.ok)
+    throw new Error(`job_api_failed:${response.status}`); return response.json(); }
+/** Bearer control plane deliberately has no approve method: approval is owner-session UI only. */
+async function prepareAndAwaitOwnerApproval(input, deps, options = {}) {
+    const draft = { keyId: input.keyId, workspaceRef: input.workspaceRef, deviceId: input.deviceId, contextDigest: codex_readonly_job_1.CODEX_READONLY_JOB_CONTEXT_DIGEST, fileHashes: input.files, deadlineSeconds: input.deadlineSeconds };
+    const prepared = await api(deps, "/api/v1/me/agent-jobs/prepare", { method: "POST", body: JSON.stringify({ ...draft, idempotencyKey: `idem:${hash(canonical(draft)).slice(7, 31)}` }) });
+    const expectedApprovalUrl = `https://www.you.md/local-agent-jobs/${prepared.job.jobId}`;
+    if (prepared.job.hostedApprovalUrl !== expectedApprovalUrl)
+        throw new Error("job_approval_url_invalid");
+    if (options.waitForApproval === false)
+        return prepared.job;
+    deps.openApproval(expectedApprovalUrl);
+    for (let attempt = 0; attempt < 60; attempt += 1) {
+        const current = await api(deps, `/api/v1/me/agent-jobs/${prepared.job.jobId}`);
+        if (current.job.preparedClaim) {
+            if (current.job.preparedClaim.keyId !== input.keyId)
+                throw new Error("job_key_binding_mismatch");
+            return current.job;
+        }
+        await deps.sleep(1000);
+    }
+    throw new Error("job_approval_timeout");
+}
+const CLAIM_KEYS = ["schemaVersion", "jobId", "jobDigest", "approvalNonce", "approvalRef", "idempotencyKey", "keyId", "keyGeneration", "applicationId", "applicationGeneration", "deviceId", "ownerRef", "workspaceRef", "tenantRef", "projectRef", "runtimeId", "audience", "target", "action", "contextRef", "contextDigest", "fileHashes", "modelClass", "executionProfile", "networkPolicy", "writePolicy", "authorizationEvidence", "deadline", "htu", "htm", "iat", "jti"];
+function decodeApprovedClaim(job) {
+    const claim = job.preparedClaim;
+    if (!claim || claim.canonicalization !== "RFC8785" || claim.signingAlgorithm !== "Ed25519" || !/^dak_[A-Za-z0-9]{12,64}$/.test(claim.keyId) || !/^sha256:[a-f0-9]{64}$/.test(claim.payloadHash) || Date.parse(claim.expiresAt) <= Date.now())
+        throw new Error("job_prepared_claim_invalid");
+    const bytes = Buffer.from(claim.preparedCanonicalPayload, "base64url");
+    if (bytes.length === 0 || bytes.length > 8192 || hash(bytes) !== claim.payloadHash)
+        throw new Error("job_prepared_claim_invalid");
+    let parsed;
+    try {
+        parsed = JSON.parse(bytes.toString("utf8"));
+    }
+    catch {
+        throw new Error("job_prepared_claim_invalid");
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        throw new Error("job_prepared_claim_invalid");
+    const payload = parsed;
+    if (Object.keys(payload).length !== CLAIM_KEYS.length || CLAIM_KEYS.some((key) => !(key in payload)) || payload.jobId !== job.jobId || payload.keyId !== claim.keyId || payload.contextDigest !== codex_readonly_job_1.CODEX_READONLY_JOB_CONTEXT_DIGEST || payload.applicationId !== "app:youmd-local-codex-adapter" || payload.tenantRef !== "personal" || payload.projectRef !== "project:youmd-owner-context" || payload.runtimeId !== "runtime:youmd-local-codex" || payload.target !== "openai_codex" || payload.action !== "read_only_audit" || payload.audience !== "youmd:personal" || payload.htm !== "POST" || payload.htu !== `${exports.CODEX_JOB_API_ORIGIN}/api/v1/me/agent-jobs/${job.jobId}/claim`)
+        throw new Error("job_prepared_claim_invalid");
+    return { claim, payload };
+}
+function bindGrant(payload, grant) {
+    if (!grant || grant.jobId !== payload.jobId || grant.jobDigest !== payload.jobDigest || grant.keyId !== payload.keyId || grant.keyGeneration !== payload.keyGeneration || grant.applicationId !== payload.applicationId || grant.applicationGeneration !== payload.applicationGeneration || grant.contextDigest !== payload.contextDigest || grant.deadline !== payload.deadline || grant.approvalState !== "approved" || !grant.approvalRef || !["claimed", "running", "approved"].includes(grant.status))
+        throw new Error("job_execution_grant_invalid");
+}
+function step(payload, type, extra) {
+    const iat = Date.now();
+    const jti = `jti:${hash(`${payload.jobId}:${type}:${iat}:${canonical(extra)}`).slice(7, 31)}`;
+    const { schemaVersion: _schemaVersion, approvalNonce: _approvalNonce, ...base } = payload;
+    return { schemaVersion: "you-md/connected-agent-access/local-codex-job-step/v1", type, ...base, htu: `${exports.CODEX_JOB_API_ORIGIN}/api/v1/me/agent-jobs/${payload.jobId}/${type === "event" ? "events" : type}`, htm: "POST", iat, jti, ...extra };
+}
+async function signedPost(deps, payload, expiresAt, type, extra) {
+    const signedPayload = step(payload, type, extra);
+    const signer = deps.signStep ?? ((input) => (0, connected_access_native_1.signApprovedLocalCodexJobStep)(input, undefined, deps.native));
+    const signature = await signer({ approvedCanonicalStep: b64(signedPayload), expiresAt, expectedPublicKey: deps.publicKey });
+    const body = { keyId: payload.keyId, iat: signedPayload.iat, jti: signedPayload.jti, signature: signature.signature, ...extra };
+    return api(deps, `/api/v1/me/agent-jobs/${payload.jobId}/${type === "event" ? "events" : type}`, { method: "POST", body: JSON.stringify(body) });
+}
+/** Full fake-injectable lifecycle; no bearer approve endpoint exists or is callable here. */
+async function claimAndRunApprovedLocalCodexJob(job, deps) {
+    const { claim, payload } = decodeApprovedClaim(job);
+    const expiresAt = Date.parse(claim.expiresAt);
+    const signClaim = deps.signClaim ?? ((input) => (0, connected_access_native_1.signApprovedLocalCodexJobClaim)(input, undefined, deps.native));
+    const signed = await signClaim({ approvedCanonicalClaim: claim.preparedCanonicalPayload, expiresAt, expectedPublicKey: deps.publicKey });
+    if (signed.payloadHash !== claim.payloadHash)
+        throw new Error("job_prepared_claim_invalid");
+    const claimed = await api(deps, `/api/v1/me/agent-jobs/${job.jobId}/claim`, { method: "POST", body: JSON.stringify({ claimRef: claim.claimRef, signature: signed.signature }) });
+    bindGrant(payload, claimed.executionGrant);
+    await signedPost(deps, payload, expiresAt, "start", {});
+    let result;
+    try {
+        result = await deps.run(payload, claimed.executionGrant);
+    }
+    catch {
+        result = { outcome: "failed", resultDigest: hash("runner_failed"), contextLoaded: false, modelStarted: false };
+    }
+    if (result.contextLoaded)
+        await signedPost(deps, payload, expiresAt, "event", { eventId: `event:${hash("context").slice(7, 23)}`, eventType: "context_loaded", sequence: 1, payloadHash: hash("context_loaded") });
+    if (result.modelStarted)
+        await signedPost(deps, payload, expiresAt, "event", { eventId: `event:${hash("model").slice(7, 23)}`, eventType: "model_started", sequence: 2, payloadHash: hash("model_started") });
+    if (result.outcome === "succeeded" && !result.modelStarted)
+        result = { ...result, outcome: "failed", resultDigest: hash("runner_never_started") };
+    await signedPost(deps, payload, expiresAt, "complete", { outcome: result.outcome, resultDigest: result.resultDigest });
+    return { outcome: result.outcome, contextLoaded: result.contextLoaded, modelStarted: result.modelStarted };
+}
+//# sourceMappingURL=codex-job-control-plane.js.map

package/dist/lib/codex-job-control-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-job-control-plane.js","sourceRoot":"","sources":["../../src/lib/codex-job-control-plane.ts"],"names":[],"mappings":";;;AAcA,oEASC;AAqCD,4EAeC;AA3ED,mCAAoC;AACpC,6DAA6F;AAC7F,uEAA+H;AAElH,QAAA,oBAAoB,GAAG,0CAA0C,CAAC;AAI/E,SAAS,IAAI,CAAC,KAAsB,IAAY,OAAO,UAAU,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AACtH,SAAS,SAAS,CAAC,KAAc,IAAY,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;IAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,MAAM,GAAG,KAAgC,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACta,SAAS,GAAG,CAAC,KAAc,IAAY,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACpG,KAAK,UAAU,GAAG,CAAI,IAAoB,EAAE,IAAY,EAAE,IAAkB,IAAgB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;IAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,4BAAoB,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;IAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC,CAAC,CAAC;AAE1f,kGAAkG;AAC3F,KAAK,UAAU,4BAA4B,CAAC,KAAiH,EAAE,IAAoB,EAAE,UAAyC,EAAE;IACrO,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,sDAAiC,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;IACpN,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAe,IAAI,EAAE,+BAA+B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvM,MAAM,mBAAmB,GAAG,uCAAuC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACxF,IAAI,QAAQ,CAAC,GAAG,CAAC,iBAAiB,KAAK,mBAAmB;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxG,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC;IAC3D,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACvC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAAC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAe,IAAI,EAAE,yBAAyB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAAC,OAAO,OAAO,CAAC,GAAG,CAAC;QAAC,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC;IAAC,CAAC;IACrU,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAC1C,CAAC;AAWD,MAAM,UAAU,GAAG,CAAC,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,uBAAuB,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,uBAAuB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACjd,SAAS,mBAAmB,CAAC,GAAQ;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5R,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;IAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1M,IAAI,MAAe,CAAC;IAAC,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAAC,CAAC;IAClI,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,MAAsB,CAAC;IAC1J,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,aAAa,KAAK,sDAAiC,IAAI,OAAO,CAAC,aAAa,KAAK,+BAA+B,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,OAAO,CAAC,UAAU,KAAK,6BAA6B,IAAI,OAAO,CAAC,SAAS,KAAK,2BAA2B,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,4BAAoB,yBAAyB,GAAG,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACtsB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AACD,SAAS,SAAS,CAAC,OAAqB,EAAE,KAAkB;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC7hB,CAAC;AACD,SAAS,IAAI,CAAC,OAAqB,EAAE,IAAoC,EAAE,KAA8B;IACvG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAAC,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACtH,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC1F,OAAO,EAAE,aAAa,EAAE,uDAAuD,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,4BAAoB,yBAAyB,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;AAChP,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,IAAsB,EAAE,OAAqB,EAAE,SAAiB,EAAE,IAAoC,EAAE,KAA8B;IAC9J,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,uDAA6B,EAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5J,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC;IAChI,OAAO,GAAG,CAAC,IAAI,EAAE,yBAAyB,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnJ,CAAC;AAED,6FAA6F;AACtF,KAAK,UAAU,gCAAgC,CAAC,GAAQ,EAAE,IAAsB;IACrF,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,wDAA8B,EAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,sBAAsB,EAAE,KAAK,CAAC,wBAAwB,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACzI,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,MAAM,GAAG,CAAkC,IAAI,EAAE,yBAAyB,GAAG,CAAC,KAAK,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAClN,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3C,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,MAAgH,CAAC;IACrH,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;IAC3L,IAAI,MAAM,CAAC,aAAa;QAAE,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnN,IAAI,MAAM,CAAC,YAAY;QAAE,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC9M,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;IAClJ,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACvH,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;AAC7G,CAAC"}

package/dist/lib/codex-readonly-job.d.ts

@@ -0,0 +1,76 @@
+import * as fs from "fs";
+/** Local-only M3.5 boundary. A receipt is evidence, never a runnable grant. */
+export declare const CODEX_READONLY_JOB_MAX_PROMPT_BYTES: number;
+export declare const CODEX_READONLY_JOB_MAX_EVENT_BYTES: number;
+export declare const CODEX_READONLY_JOB_MAX_TOTAL_OUTPUT_BYTES: number;
+export declare const CODEX_READONLY_JOB_TIMEOUT_MS: number;
+export declare const CODEX_READONLY_JOB_KILL_GRACE_MS = 3000;
+export declare const CODEX_READONLY_JOB_INSTRUCTION = "Audit the declared You.md owner context snapshot for internal inconsistencies, stale statements, missing provenance, and actionable next steps. Do not modify files. Do not use external tools or network tools. Return a concise findings summary.";
+export declare const CODEX_READONLY_JOB_CONTEXT_DIGEST = "sha256:4f5580463381df28be0ae267baa874c39ee5abee03096998803996df8440cf85";
+export type DeclaredInput = {
+    path: string;
+    digest: string;
+};
+export type ApprovedLocalCodexJob = Record<string, unknown> & {
+    jobId: string;
+    jobDigest: string;
+    deviceId: string;
+    applicationId: "app:youmd-local-codex-adapter";
+    audience: string;
+    contextDigest: string;
+    deadline: string;
+    approvalState: "approved";
+    approvalRef: string;
+    approvalExpiresAt: string;
+    keyId: string;
+    keyGeneration: number;
+    applicationGeneration: number;
+    executionProfile: Record<string, unknown>;
+    networkPolicy: Record<string, unknown>;
+    writePolicy: Record<string, unknown>;
+    authorizationEvidence: Record<string, unknown>;
+    fileHashes: DeclaredInput[];
+};
+export type ReadonlyJobEvent = {
+    type: "started" | "event" | "completed" | "cancelled" | "failed";
+    jobId: string;
+    data?: unknown;
+};
+export type CodexJobRunRequest = {
+    executable: string;
+    argv: readonly string[];
+    cwd: string;
+    shell: false;
+    stdio: ["pipe", "pipe", "pipe"];
+    stdin: Buffer;
+    timeoutMs: number;
+    env: NodeJS.ProcessEnv;
+    signal?: AbortSignal;
+};
+export type CodexJobRunner = (request: CodexJobRunRequest, onEvent: (event: ReadonlyJobEvent) => void) => Promise<{
+    exitCode: number | null;
+    cancelled?: boolean;
+    timedOut?: boolean;
+    resultHash?: string;
+    modelStarted?: boolean;
+}>;
+export type ReadonlyJobDeps = {
+    resolveExecutable?: () => string | null;
+    run?: CodexJobRunner;
+    mkdtempSync?: typeof fs.mkdtempSync;
+    rmSync?: typeof fs.rmSync;
+};
+/** Strictly proves this is a separately approved, no-write/local-Codex grant. */
+export declare function validateApprovedReadonlyLocalCodexJob(job: ApprovedLocalCodexJob, now?: number): void;
+/** Copies only exact allowlisted, hash-verified file bytes into a private snapshot. */
+export declare function createDeclaredInputSnapshot(sourceRoot: string, files: readonly DeclaredInput[], deps?: Pick<ReadonlyJobDeps, "mkdtempSync">): string;
+export declare function buildReadonlyCodexJobRequest(executable: string, snapshot: string, deadline: number): CodexJobRunRequest;
+export declare const runReadonlyCodexJob: CodexJobRunner;
+/** Fake-child friendly adapter. It never invokes the provider until an approved grant exists. */
+export declare function executeApprovedReadonlyLocalCodexJob(job: ApprovedLocalCodexJob, sourceRoot: string, onEvent: (event: ReadonlyJobEvent) => void, deps?: ReadonlyJobDeps, signal?: AbortSignal): Promise<{
+    status: "completed" | "cancelled" | "failed";
+    resultHash: string;
+    contextLoaded: true;
+    modelStarted: boolean;
+}>;
+//# sourceMappingURL=codex-readonly-job.d.ts.map

package/dist/lib/codex-readonly-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-readonly-job.d.ts","sourceRoot":"","sources":["../../src/lib/codex-readonly-job.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAKzB,+EAA+E;AAC/E,eAAO,MAAM,mCAAmC,QAAY,CAAC;AAC7D,eAAO,MAAM,kCAAkC,QAAY,CAAC;AAC5D,eAAO,MAAM,yCAAyC,QAAa,CAAC;AACpE,eAAO,MAAM,6BAA6B,QAAc,CAAC;AACzD,eAAO,MAAM,gCAAgC,OAAQ,CAAC;AACtD,eAAO,MAAM,8BAA8B,wPAAwP,CAAC;AACpS,eAAO,MAAM,iCAAiC,4EAA4E,CAAC;AAE3H,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7D,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC5D,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,+BAA+B,CAAC;IACnG,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrP,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7H,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AACnI,MAAM,MAAM,kBAAkB,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,CAAC;AAC7N,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,KAAK,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AACrO,MAAM,MAAM,eAAe,GAAG;IAAE,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,CAAC,EAAE,cAAc,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAA;CAAE,CAAC;AAahK,iFAAiF;AACjF,wBAAgB,qCAAqC,CAAC,GAAG,EAAE,qBAAqB,EAAE,GAAG,SAAa,GAAG,IAAI,CAexG;AAED,uFAAuF;AACvF,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,aAAa,EAAE,EAAE,IAAI,GAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAM,GAAG,MAAM,CAgBxJ;AAED,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAIvH;AAED,eAAO,MAAM,mBAAmB,EAAE,cAUhC,CAAC;AAEH,iGAAiG;AACjG,wBAAsB,oCAAoC,CAAC,GAAG,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,EAAE,IAAI,GAAE,eAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAAC,CAKlU"}