@agent-native/core 0.45.1 → 0.47.1

package/dist/workspace-files/store.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Workspace-files store.
+ *
+ * Provides read/write/append/list/delete/grep operations over the
+ * `workspace_files` table. All writes enforce per-file (2 MB) and per-scope
+ * (200 MB) caps. The table is lazily migrated on first use.
+ */
+/** Max content size per file (bytes). */
+export declare const MAX_FILE_BYTES: number;
+/** Max total content size across all files in one scope (bytes). */
+export declare const MAX_SCOPE_BYTES: number;
+/** Max content size when saving via saveToFile from provider-api / fetch tool (bytes). */
+export declare const SAVE_TO_FILE_MAX_BYTES: number;
+export interface WorkspaceFilesScope {
+    scope: "user" | "org";
+    scopeId: string;
+}
+/**
+ * Validate a workspace file path.
+ * - Non-empty, no leading slash, no ".." components, no null bytes.
+ */
+export declare function validatePath(path: string): string | null;
+export interface WorkspaceFile {
+    id: string;
+    scope: string;
+    scopeId: string;
+    path: string;
+    content: string;
+    contentType: string;
+    sizeBytes: number;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface WorkspaceFileMeta {
+    id: string;
+    path: string;
+    contentType: string;
+    sizeBytes: number;
+    createdAt: string;
+    updatedAt: string;
+}
+/**
+ * Write (create or overwrite) a workspace file.
+ * Enforces per-file (2 MB default; `saveToFile` callers may raise it up to
+ * 20 MB via `opts.maxFileBytes`) and per-scope (200 MB) caps.
+ */
+export declare function writeWorkspaceFile(scope: WorkspaceFilesScope, path: string, content: string, contentType?: string, opts?: {
+    maxFileBytes?: number;
+}): Promise<WorkspaceFileMeta>;
+/**
+ * Append text to an existing workspace file, or create it if it doesn't exist.
+ */
+export declare function appendWorkspaceFile(scope: WorkspaceFilesScope, path: string, text: string, contentType?: string): Promise<WorkspaceFileMeta>;
+/**
+ * Read a workspace file's content (with optional offset and maxChars for paging).
+ * Returns null if the file doesn't exist.
+ */
+export declare function readWorkspaceFile(scope: WorkspaceFilesScope, path: string, opts?: {
+    offset?: number;
+    maxChars?: number;
+}): Promise<WorkspaceFile | null>;
+/**
+ * Get file metadata without loading content.
+ */
+export declare function getWorkspaceFileMeta(scope: WorkspaceFilesScope, path: string): Promise<WorkspaceFileMeta | null>;
+/**
+ * List workspace files, optionally filtered by path prefix.
+ * Returns metadata only (no content).
+ */
+export declare function listWorkspaceFiles(scope: WorkspaceFilesScope, prefix?: string): Promise<WorkspaceFileMeta[]>;
+/**
+ * Delete a workspace file. Returns true if deleted, false if not found.
+ */
+export declare function deleteWorkspaceFile(scope: WorkspaceFilesScope, path: string): Promise<boolean>;
+/**
+ * Search file contents for a substring or regex pattern.
+ * Returns matching lines with path context.
+ */
+export declare function grepWorkspaceFiles(scope: WorkspaceFilesScope, pattern: string, opts?: {
+    pathPrefix?: string;
+    useRegex?: boolean;
+    maxMatchesPerFile?: number;
+    maxFiles?: number;
+}): Promise<Array<{
+    path: string;
+    lineNumber: number;
+    line: string;
+}>>;
+//# sourceMappingURL=store.d.ts.map

package/dist/workspace-files/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/workspace-files/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,yCAAyC;AACzC,eAAO,MAAM,cAAc,QAAkB,CAAC;AAE9C,oEAAoE;AACpE,eAAO,MAAM,eAAe,QAAoB,CAAC;AAEjD,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB,QAAmB,CAAC;AAoBvD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWxD;AAMD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,SAAe,EAC1B,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CA4E5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,SAAe,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAQ5B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAkC/B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAmBnC;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA+B9B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IACL,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA+BpE"}

package/dist/workspace-files/store.js

@@ -0,0 +1,298 @@
+/**
+ * Workspace-files store.
+ *
+ * Provides read/write/append/list/delete/grep operations over the
+ * `workspace_files` table. All writes enforce per-file (2 MB) and per-scope
+ * (200 MB) caps. The table is lazily migrated on first use.
+ */
+import crypto from "node:crypto";
+import { getDbExec } from "../db/client.js";
+import { WORKSPACE_FILES_CREATE_SQL, WORKSPACE_FILES_INDEX_SQL, } from "./schema.js";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Max content size per file (bytes). */
+export const MAX_FILE_BYTES = 2 * 1024 * 1024; // 2 MB
+/** Max total content size across all files in one scope (bytes). */
+export const MAX_SCOPE_BYTES = 200 * 1024 * 1024; // 200 MB
+/** Max content size when saving via saveToFile from provider-api / fetch tool (bytes). */
+export const SAVE_TO_FILE_MAX_BYTES = 20 * 1024 * 1024; // 20 MB
+// ---------------------------------------------------------------------------
+// Lazy table init
+// ---------------------------------------------------------------------------
+let _tableReady = false;
+async function ensureTable() {
+    if (_tableReady)
+        return;
+    const db = getDbExec();
+    await db.execute(WORKSPACE_FILES_CREATE_SQL);
+    await db.execute(WORKSPACE_FILES_INDEX_SQL);
+    _tableReady = true;
+}
+/**
+ * Validate a workspace file path.
+ * - Non-empty, no leading slash, no ".." components, no null bytes.
+ */
+export function validatePath(path) {
+    if (!path || typeof path !== "string")
+        return "path is required";
+    if (path.startsWith("/"))
+        return 'path must not start with "/"';
+    if (path.includes("\0"))
+        return "path must not contain null bytes";
+    const parts = path.split("/");
+    for (const part of parts) {
+        if (part === "..")
+            return 'path must not contain ".." components';
+        if (part === "")
+            return 'path must not contain empty segments ("//" or trailing "/")';
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// Store operations
+// ---------------------------------------------------------------------------
+/**
+ * Write (create or overwrite) a workspace file.
+ * Enforces per-file (2 MB default; `saveToFile` callers may raise it up to
+ * 20 MB via `opts.maxFileBytes`) and per-scope (200 MB) caps.
+ */
+export async function writeWorkspaceFile(scope, path, content, contentType = "text/plain", opts) {
+    const pathErr = validatePath(path);
+    if (pathErr)
+        throw new Error(`Invalid path: ${pathErr}`);
+    const maxFileBytes = Math.min(opts?.maxFileBytes ?? MAX_FILE_BYTES, SAVE_TO_FILE_MAX_BYTES);
+    const bytes = Buffer.byteLength(content, "utf8");
+    if (bytes > maxFileBytes) {
+        throw new Error(`File "${path}" would be ${(bytes / 1024 / 1024).toFixed(2)} MB, which exceeds the ${(maxFileBytes / 1024 / 1024).toFixed(0)} MB per-file limit.`);
+    }
+    await ensureTable();
+    const db = getDbExec();
+    // Check scope total (excluding current file's existing bytes).
+    const existing = await getWorkspaceFileMeta(scope, path);
+    const existingBytes = existing?.sizeBytes ?? 0;
+    const scopeTotal = await getScopeTotalBytes(scope);
+    const newTotal = scopeTotal - existingBytes + bytes;
+    if (newTotal > MAX_SCOPE_BYTES) {
+        throw new Error(`Writing "${path}" would bring the workspace total to ${(newTotal / 1024 / 1024).toFixed(1)} MB, exceeding the 200 MB limit.`);
+    }
+    const now = new Date().toISOString();
+    if (existing) {
+        await db.execute({
+            sql: `UPDATE workspace_files SET content = ?, content_type = ?, size_bytes = ?, updated_at = ? WHERE scope = ? AND scope_id = ? AND path = ?`,
+            args: [
+                content,
+                contentType,
+                bytes,
+                now,
+                scope.scope,
+                scope.scopeId,
+                path,
+            ],
+        });
+        return {
+            ...existing,
+            content: undefined,
+            contentType,
+            sizeBytes: bytes,
+            updatedAt: now,
+        };
+    }
+    const id = crypto.randomUUID();
+    await db.execute({
+        sql: `INSERT INTO workspace_files (id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        args: [
+            id,
+            scope.scope,
+            scope.scopeId,
+            path,
+            content,
+            contentType,
+            bytes,
+            now,
+            now,
+        ],
+    });
+    return {
+        id,
+        path,
+        contentType,
+        sizeBytes: bytes,
+        createdAt: now,
+        updatedAt: now,
+    };
+}
+/**
+ * Append text to an existing workspace file, or create it if it doesn't exist.
+ */
+export async function appendWorkspaceFile(scope, path, text, contentType = "text/plain") {
+    const pathErr = validatePath(path);
+    if (pathErr)
+        throw new Error(`Invalid path: ${pathErr}`);
+    await ensureTable();
+    const existing = await readWorkspaceFile(scope, path);
+    const newContent = existing ? existing.content + text : text;
+    return writeWorkspaceFile(scope, path, newContent, contentType);
+}
+/**
+ * Read a workspace file's content (with optional offset and maxChars for paging).
+ * Returns null if the file doesn't exist.
+ */
+export async function readWorkspaceFile(scope, path, opts) {
+    const pathErr = validatePath(path);
+    if (pathErr)
+        throw new Error(`Invalid path: ${pathErr}`);
+    await ensureTable();
+    const db = getDbExec();
+    const result = await db.execute({
+        sql: `SELECT id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,
+        args: [scope.scope, scope.scopeId, path],
+    });
+    const row = result.rows[0];
+    if (!row)
+        return null;
+    let content = String(row[4] ?? "");
+    if (opts?.offset || opts?.maxChars) {
+        const off = opts.offset ?? 0;
+        content = content.slice(off, opts.maxChars !== undefined ? off + opts.maxChars : undefined);
+    }
+    return {
+        id: String(row[0]),
+        scope: String(row[1]),
+        scopeId: String(row[2]),
+        path: String(row[3]),
+        content,
+        contentType: String(row[5] ?? "text/plain"),
+        sizeBytes: Number(row[6] ?? 0),
+        createdAt: String(row[7]),
+        updatedAt: String(row[8]),
+    };
+}
+/**
+ * Get file metadata without loading content.
+ */
+export async function getWorkspaceFileMeta(scope, path) {
+    await ensureTable();
+    const db = getDbExec();
+    const result = await db.execute({
+        sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,
+        args: [scope.scope, scope.scopeId, path],
+    });
+    const row = result.rows[0];
+    if (!row)
+        return null;
+    return {
+        id: String(row[0]),
+        path: String(row[1]),
+        contentType: String(row[2] ?? "text/plain"),
+        sizeBytes: Number(row[3] ?? 0),
+        createdAt: String(row[4]),
+        updatedAt: String(row[5]),
+    };
+}
+/**
+ * List workspace files, optionally filtered by path prefix.
+ * Returns metadata only (no content).
+ */
+export async function listWorkspaceFiles(scope, prefix) {
+    await ensureTable();
+    const db = getDbExec();
+    if (prefix) {
+        // Allow a trailing slash on list prefixes, but reject traversal and
+        // other invalid path shapes before they reach the LIKE pattern.
+        const normalizedPrefix = prefix.endsWith("/")
+            ? prefix.slice(0, -1)
+            : prefix;
+        const pathErr = validatePath(normalizedPrefix);
+        if (pathErr) {
+            throw new Error(pathErr);
+        }
+        const result = await db.execute({
+            sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND (path = ? OR path LIKE ? ESCAPE '\\') ORDER BY path ASC`,
+            args: [
+                scope.scope,
+                scope.scopeId,
+                normalizedPrefix,
+                `${normalizedPrefix.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_")}/%`,
+            ],
+        });
+        return result.rows.map(rowToMeta);
+    }
+    const result = await db.execute({
+        sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? ORDER BY path ASC`,
+        args: [scope.scope, scope.scopeId],
+    });
+    return result.rows.map(rowToMeta);
+}
+/**
+ * Delete a workspace file. Returns true if deleted, false if not found.
+ */
+export async function deleteWorkspaceFile(scope, path) {
+    const pathErr = validatePath(path);
+    if (pathErr)
+        throw new Error(`Invalid path: ${pathErr}`);
+    await ensureTable();
+    const db = getDbExec();
+    const result = await db.execute({
+        sql: `DELETE FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,
+        args: [scope.scope, scope.scopeId, path],
+    });
+    return result.rowsAffected > 0;
+}
+/**
+ * Search file contents for a substring or regex pattern.
+ * Returns matching lines with path context.
+ */
+export async function grepWorkspaceFiles(scope, pattern, opts) {
+    const files = await listWorkspaceFiles(scope, opts?.pathPrefix);
+    const limited = files.slice(0, opts?.maxFiles ?? 50);
+    let regex;
+    try {
+        regex = opts?.useRegex
+            ? new RegExp(pattern, "i")
+            : new RegExp(pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "i");
+    }
+    catch {
+        throw new Error(`Invalid regex pattern: ${pattern}`);
+    }
+    const results = [];
+    const maxPerFile = opts?.maxMatchesPerFile ?? 20;
+    for (const meta of limited) {
+        const file = await readWorkspaceFile(scope, meta.path);
+        if (!file)
+            continue;
+        const lines = file.content.split("\n");
+        let matchCount = 0;
+        for (let i = 0; i < lines.length; i++) {
+            if (regex.test(lines[i])) {
+                results.push({ path: meta.path, lineNumber: i + 1, line: lines[i] });
+                matchCount++;
+                if (matchCount >= maxPerFile)
+                    break;
+            }
+        }
+    }
+    return results;
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+async function getScopeTotalBytes(scope) {
+    const db = getDbExec();
+    const result = await db.execute({
+        sql: `SELECT COALESCE(SUM(size_bytes), 0) as total FROM workspace_files WHERE scope = ? AND scope_id = ?`,
+        args: [scope.scope, scope.scopeId],
+    });
+    return Number(result.rows[0]?.[0] ?? 0);
+}
+function rowToMeta(row) {
+    return {
+        id: String(row[0]),
+        path: String(row[1]),
+        contentType: String(row[2] ?? "text/plain"),
+        sizeBytes: Number(row[3] ?? 0),
+        createdAt: String(row[4]),
+        updatedAt: String(row[5]),
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/workspace-files/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/workspace-files/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,yCAAyC;AACzC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAEtD,oEAAoE;AACpE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAE3D,0FAA0F;AAC1F,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAEhE,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,KAAK,UAAU,WAAW;IACxB,IAAI,WAAW;QAAE,OAAO;IACxB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC7C,MAAM,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5C,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACjE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAChE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,uCAAuC,CAAC;QAClE,IAAI,IAAI,KAAK,EAAE;YACb,OAAO,6DAA6D,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA2BD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,IAAY,EACZ,OAAe,EACf,WAAW,GAAG,YAAY,EAC1B,IAAgC;IAEhC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,IAAI,EAAE,YAAY,IAAI,cAAc,EACpC,sBAAsB,CACvB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,cAAc,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAClJ,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,QAAQ,EAAE,SAAS,IAAI,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,KAAK,CAAC;IACpD,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,wCAAwC,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,wIAAwI;YAC7I,IAAI,EAAE;gBACJ,OAAO;gBACP,WAAW;gBACX,KAAK;gBACL,GAAG;gBACH,KAAK,CAAC,KAAK;gBACX,KAAK,CAAC,OAAO;gBACb,IAAI;aACL;SACF,CAAC,CAAC;QACH,OAAO;YACL,GAAG,QAAQ;YACX,OAAO,EAAE,SAAgB;YACzB,WAAW;YACX,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;SACiB,CAAC;IACpC,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,EAAE,CAAC,OAAO,CAAC;QACf,GAAG,EAAE,uJAAuJ;QAC5J,IAAI,EAAE;YACJ,EAAE;YACF,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,OAAO;YACb,IAAI;YACJ,OAAO;YACP,WAAW;YACX,KAAK;YACL,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE;QACF,IAAI;QACJ,WAAW;QACX,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA0B,EAC1B,IAAY,EACZ,IAAY,EACZ,WAAW,GAAG,YAAY;IAE1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA0B,EAC1B,IAAY,EACZ,IAA6C;IAE7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,gKAAgK;QACrK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;KACzC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC,KAAK,CACrB,GAAG,EACH,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO;QACP,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA0B,EAC1B,IAAY;IAEZ,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,sIAAsI;QAC3I,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;KACzC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,MAAe;IAEf,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,IAAI,MAAM,EAAE,CAAC;QACX,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC3C,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,qLAAqL;YAC1L,IAAI,EAAE;gBACJ,KAAK,CAAC,KAAK;gBACX,KAAK,CAAC,OAAO;gBACb,gBAAgB;gBAChB,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;aACzF;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,2IAA2I;QAChJ,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA0B,EAC1B,IAAY;IAEZ,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,2EAA2E;QAChF,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;KACzC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,OAAe,EACf,IAKC;IAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAErD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,EAAE,QAAQ;YACpB,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;YAC1B,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAA8D,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,EAAE,iBAAiB,IAAI,EAAE,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrE,UAAU,EAAE,CAAC;gBACb,IAAI,UAAU,IAAI,UAAU;oBAAE,MAAM;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,KAAK,UAAU,kBAAkB,CAAC,KAA0B;IAC1D,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,oGAAoG;QACzG,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,GAAU;IAC3B,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Workspace-files store.\n *\n * Provides read/write/append/list/delete/grep operations over the\n * `workspace_files` table. All writes enforce per-file (2 MB) and per-scope\n * (200 MB) caps. The table is lazily migrated on first use.\n */\n\nimport crypto from \"node:crypto\";\nimport { getDbExec } from \"../db/client.js\";\nimport {\n  WORKSPACE_FILES_CREATE_SQL,\n  WORKSPACE_FILES_INDEX_SQL,\n} from \"./schema.js\";\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Max content size per file (bytes). */\nexport const MAX_FILE_BYTES = 2 * 1024 * 1024; // 2 MB\n\n/** Max total content size across all files in one scope (bytes). */\nexport const MAX_SCOPE_BYTES = 200 * 1024 * 1024; // 200 MB\n\n/** Max content size when saving via saveToFile from provider-api / fetch tool (bytes). */\nexport const SAVE_TO_FILE_MAX_BYTES = 20 * 1024 * 1024; // 20 MB\n\n// ---------------------------------------------------------------------------\n// Lazy table init\n// ---------------------------------------------------------------------------\n\nlet _tableReady = false;\n\nasync function ensureTable(): Promise<void> {\n  if (_tableReady) return;\n  const db = getDbExec();\n  await db.execute(WORKSPACE_FILES_CREATE_SQL);\n  await db.execute(WORKSPACE_FILES_INDEX_SQL);\n  _tableReady = true;\n}\n\n// ---------------------------------------------------------------------------\n// Scope helpers\n// ---------------------------------------------------------------------------\n\nexport interface WorkspaceFilesScope {\n  scope: \"user\" | \"org\";\n  scopeId: string;\n}\n\n/**\n * Validate a workspace file path.\n * - Non-empty, no leading slash, no \"..\" components, no null bytes.\n */\nexport function validatePath(path: string): string | null {\n  if (!path || typeof path !== \"string\") return \"path is required\";\n  if (path.startsWith(\"/\")) return 'path must not start with \"/\"';\n  if (path.includes(\"\\0\")) return \"path must not contain null bytes\";\n  const parts = path.split(\"/\");\n  for (const part of parts) {\n    if (part === \"..\") return 'path must not contain \"..\" components';\n    if (part === \"\")\n      return 'path must not contain empty segments (\"//\" or trailing \"/\")';\n  }\n  return null;\n}\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface WorkspaceFile {\n  id: string;\n  scope: string;\n  scopeId: string;\n  path: string;\n  content: string;\n  contentType: string;\n  sizeBytes: number;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface WorkspaceFileMeta {\n  id: string;\n  path: string;\n  contentType: string;\n  sizeBytes: number;\n  createdAt: string;\n  updatedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store operations\n// ---------------------------------------------------------------------------\n\n/**\n * Write (create or overwrite) a workspace file.\n * Enforces per-file (2 MB default; `saveToFile` callers may raise it up to\n * 20 MB via `opts.maxFileBytes`) and per-scope (200 MB) caps.\n */\nexport async function writeWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  content: string,\n  contentType = \"text/plain\",\n  opts?: { maxFileBytes?: number },\n): Promise<WorkspaceFileMeta> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  const maxFileBytes = Math.min(\n    opts?.maxFileBytes ?? MAX_FILE_BYTES,\n    SAVE_TO_FILE_MAX_BYTES,\n  );\n  const bytes = Buffer.byteLength(content, \"utf8\");\n  if (bytes > maxFileBytes) {\n    throw new Error(\n      `File \"${path}\" would be ${(bytes / 1024 / 1024).toFixed(2)} MB, which exceeds the ${(maxFileBytes / 1024 / 1024).toFixed(0)} MB per-file limit.`,\n    );\n  }\n\n  await ensureTable();\n  const db = getDbExec();\n\n  // Check scope total (excluding current file's existing bytes).\n  const existing = await getWorkspaceFileMeta(scope, path);\n  const existingBytes = existing?.sizeBytes ?? 0;\n  const scopeTotal = await getScopeTotalBytes(scope);\n  const newTotal = scopeTotal - existingBytes + bytes;\n  if (newTotal > MAX_SCOPE_BYTES) {\n    throw new Error(\n      `Writing \"${path}\" would bring the workspace total to ${(newTotal / 1024 / 1024).toFixed(1)} MB, exceeding the 200 MB limit.`,\n    );\n  }\n\n  const now = new Date().toISOString();\n\n  if (existing) {\n    await db.execute({\n      sql: `UPDATE workspace_files SET content = ?, content_type = ?, size_bytes = ?, updated_at = ? WHERE scope = ? AND scope_id = ? AND path = ?`,\n      args: [\n        content,\n        contentType,\n        bytes,\n        now,\n        scope.scope,\n        scope.scopeId,\n        path,\n      ],\n    });\n    return {\n      ...existing,\n      content: undefined as any,\n      contentType,\n      sizeBytes: bytes,\n      updatedAt: now,\n    } as unknown as WorkspaceFileMeta;\n  }\n\n  const id = crypto.randomUUID();\n  await db.execute({\n    sql: `INSERT INTO workspace_files (id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      scope.scope,\n      scope.scopeId,\n      path,\n      content,\n      contentType,\n      bytes,\n      now,\n      now,\n    ],\n  });\n  return {\n    id,\n    path,\n    contentType,\n    sizeBytes: bytes,\n    createdAt: now,\n    updatedAt: now,\n  };\n}\n\n/**\n * Append text to an existing workspace file, or create it if it doesn't exist.\n */\nexport async function appendWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  text: string,\n  contentType = \"text/plain\",\n): Promise<WorkspaceFileMeta> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  await ensureTable();\n  const existing = await readWorkspaceFile(scope, path);\n  const newContent = existing ? existing.content + text : text;\n  return writeWorkspaceFile(scope, path, newContent, contentType);\n}\n\n/**\n * Read a workspace file's content (with optional offset and maxChars for paging).\n * Returns null if the file doesn't exist.\n */\nexport async function readWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  opts?: { offset?: number; maxChars?: number },\n): Promise<WorkspaceFile | null> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  await ensureTable();\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `SELECT id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,\n    args: [scope.scope, scope.scopeId, path],\n  });\n\n  const row = result.rows[0];\n  if (!row) return null;\n\n  let content = String(row[4] ?? \"\");\n  if (opts?.offset || opts?.maxChars) {\n    const off = opts.offset ?? 0;\n    content = content.slice(\n      off,\n      opts.maxChars !== undefined ? off + opts.maxChars : undefined,\n    );\n  }\n\n  return {\n    id: String(row[0]),\n    scope: String(row[1]),\n    scopeId: String(row[2]),\n    path: String(row[3]),\n    content,\n    contentType: String(row[5] ?? \"text/plain\"),\n    sizeBytes: Number(row[6] ?? 0),\n    createdAt: String(row[7]),\n    updatedAt: String(row[8]),\n  };\n}\n\n/**\n * Get file metadata without loading content.\n */\nexport async function getWorkspaceFileMeta(\n  scope: WorkspaceFilesScope,\n  path: string,\n): Promise<WorkspaceFileMeta | null> {\n  await ensureTable();\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,\n    args: [scope.scope, scope.scopeId, path],\n  });\n\n  const row = result.rows[0];\n  if (!row) return null;\n\n  return {\n    id: String(row[0]),\n    path: String(row[1]),\n    contentType: String(row[2] ?? \"text/plain\"),\n    sizeBytes: Number(row[3] ?? 0),\n    createdAt: String(row[4]),\n    updatedAt: String(row[5]),\n  };\n}\n\n/**\n * List workspace files, optionally filtered by path prefix.\n * Returns metadata only (no content).\n */\nexport async function listWorkspaceFiles(\n  scope: WorkspaceFilesScope,\n  prefix?: string,\n): Promise<WorkspaceFileMeta[]> {\n  await ensureTable();\n  const db = getDbExec();\n\n  if (prefix) {\n    // Allow a trailing slash on list prefixes, but reject traversal and\n    // other invalid path shapes before they reach the LIKE pattern.\n    const normalizedPrefix = prefix.endsWith(\"/\")\n      ? prefix.slice(0, -1)\n      : prefix;\n    const pathErr = validatePath(normalizedPrefix);\n    if (pathErr) {\n      throw new Error(pathErr);\n    }\n    const result = await db.execute({\n      sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND (path = ? OR path LIKE ? ESCAPE '\\\\') ORDER BY path ASC`,\n      args: [\n        scope.scope,\n        scope.scopeId,\n        normalizedPrefix,\n        `${normalizedPrefix.replace(/\\\\/g, \"\\\\\\\\\").replace(/%/g, \"\\\\%\").replace(/_/g, \"\\\\_\")}/%`,\n      ],\n    });\n    return result.rows.map(rowToMeta);\n  }\n\n  const result = await db.execute({\n    sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? ORDER BY path ASC`,\n    args: [scope.scope, scope.scopeId],\n  });\n  return result.rows.map(rowToMeta);\n}\n\n/**\n * Delete a workspace file. Returns true if deleted, false if not found.\n */\nexport async function deleteWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n): Promise<boolean> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  await ensureTable();\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `DELETE FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,\n    args: [scope.scope, scope.scopeId, path],\n  });\n  return result.rowsAffected > 0;\n}\n\n/**\n * Search file contents for a substring or regex pattern.\n * Returns matching lines with path context.\n */\nexport async function grepWorkspaceFiles(\n  scope: WorkspaceFilesScope,\n  pattern: string,\n  opts?: {\n    pathPrefix?: string;\n    useRegex?: boolean;\n    maxMatchesPerFile?: number;\n    maxFiles?: number;\n  },\n): Promise<Array<{ path: string; lineNumber: number; line: string }>> {\n  const files = await listWorkspaceFiles(scope, opts?.pathPrefix);\n  const limited = files.slice(0, opts?.maxFiles ?? 50);\n\n  let regex: RegExp;\n  try {\n    regex = opts?.useRegex\n      ? new RegExp(pattern, \"i\")\n      : new RegExp(pattern.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\"), \"i\");\n  } catch {\n    throw new Error(`Invalid regex pattern: ${pattern}`);\n  }\n\n  const results: Array<{ path: string; lineNumber: number; line: string }> = [];\n  const maxPerFile = opts?.maxMatchesPerFile ?? 20;\n\n  for (const meta of limited) {\n    const file = await readWorkspaceFile(scope, meta.path);\n    if (!file) continue;\n    const lines = file.content.split(\"\\n\");\n    let matchCount = 0;\n    for (let i = 0; i < lines.length; i++) {\n      if (regex.test(lines[i])) {\n        results.push({ path: meta.path, lineNumber: i + 1, line: lines[i] });\n        matchCount++;\n        if (matchCount >= maxPerFile) break;\n      }\n    }\n  }\n\n  return results;\n}\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\nasync function getScopeTotalBytes(scope: WorkspaceFilesScope): Promise<number> {\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `SELECT COALESCE(SUM(size_bytes), 0) as total FROM workspace_files WHERE scope = ? AND scope_id = ?`,\n    args: [scope.scope, scope.scopeId],\n  });\n  return Number(result.rows[0]?.[0] ?? 0);\n}\n\nfunction rowToMeta(row: any[]): WorkspaceFileMeta {\n  return {\n    id: String(row[0]),\n    path: String(row[1]),\n    contentType: String(row[2] ?? \"text/plain\"),\n    sizeBytes: Number(row[3] ?? 0),\n    createdAt: String(row[4]),\n    updatedAt: String(row[5]),\n  };\n}\n"]}

package/dist/workspace-files/tool.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `workspace-files` agent tool.
+ *
+ * A single tool with an `action` discriminator covering write, append, read,
+ * list, delete, and grep. Files persist across conversations; the agent uses
+ * them to stage large intermediate results (fetched pages, per-item memos)
+ * and then read back selectively for synthesis.
+ *
+ * Scope is automatically resolved from the active request context:
+ *  - org scope when a request orgId is present (shared across users in the org)
+ *  - user scope otherwise (personal to the requesting user's email)
+ */
+import type { ActionEntry } from "../agent/production-agent.js";
+export declare function createWorkspaceFilesTool(): Record<string, ActionEntry>;
+//# sourceMappingURL=tool.d.ts.map

package/dist/workspace-files/tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA2BhE,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAiOtE"}