Codex-specific governed materialization guard owned by ASM.
Codex-native auth, OAuth, and app-server mechanics remain in codex_sdk.
This module only decides whether a governed ASM run may hand a materialized
Codex command/env/cwd/config-root envelope to that SDK boundary.
Summary
Types
@type t() :: %ASM.RuntimeAuth.CodexMaterialization{ api_key: String.t() | nil, base_url: String.t() | nil, clear_env?: true, command: String.t(), config_root: String.t(), connector_binding_ref: String.t(), credential_lease_ref: String.t(), cwd: String.t(), env: %{optional(String.t()) => String.t()}, native_auth_assertion: map(), native_auth_assertion_ref: String.t(), provider_account_ref: String.t(), source: atom(), target_auth_posture: atom() }
Functions
@spec authorize_config( map(), keyword() ) :: {:ok, t() | nil} | {:error, ASM.Error.t()}
@spec metadata_key() :: atom()
@spec new(term(), ASM.RuntimeAuth.t() | map()) :: {:ok, t()} | {:error, ASM.Error.t()}