@agent-native/core 0.49.27 → 0.51.0

package/dist/templates/workspace-core/.agents/skills/harness-agents/SKILL.md

@@ -0,0 +1,98 @@
+---
+name: harness-agents
+description: >-
+  Add or use full agent harness runtimes like Claude Code, Codex, Pi, Cursor, or Mastra inside Agent Native.
+scope: dev
+---
+
+# Harness Agents
+
+## Rule
+
+Full agent harnesses are not `AgentEngine` providers. Use the `AgentHarness`
+substrate in `@agent-native/core/agent/harness`.
+
+## Why
+
+`AgentEngine` is for one model round trip beneath `runAgentLoop`. Harnesses like
+Claude Code, Codex, Pi, Cursor, and Mastra own their own loop, workspace,
+native tools, session state, compaction, approval model, and sandbox behavior.
+Putting a harness under `AgentEngine.stream()` double-runs the loop and loses
+session lifecycle semantics.
+
+## How
+
+1. Register or resolve a harness adapter.
+
+```ts
+import {
+  registerBuiltinAgentHarnesses,
+  resolveAgentHarness,
+} from "@agent-native/core/agent/harness";
+
+registerBuiltinAgentHarnesses();
+const harness = resolveAgentHarness("ai-sdk-harness:codex");
+```
+
+2. Start a turn through the run-manager bridge.
+
+```ts
+import { startAgentHarnessRun } from "@agent-native/core/agent/harness";
+
+startAgentHarnessRun({
+  runId,
+  threadId,
+  adapter: harness,
+  input: { prompt },
+  createSession: {
+    sessionId,
+    resumeState,
+    instructions,
+    sandbox,
+    permissionMode: "allow-reads",
+  },
+  ownerEmail,
+  orgId,
+});
+```
+
+3. Persist native session state in SQL.
+
+Use `saveAgentHarnessSession`, `updateAgentHarnessSession`, and
+`getLatestAgentHarnessSessionForThread`. The `resumeState` is opaque; Agent
+Native stores it but does not inspect it.
+
+4. Surface runs through background agents.
+
+Harness runs are projected into the shared `BackgroundAgentRun` shape with
+`createAgentHarnessBackgroundAgentController()` and are available through the
+existing run routes as `goalId=agent-harness`.
+
+## Adapter Guidance
+
+- Keep harness packages optional. Use dynamic imports in adapters and expose an
+  install hint through `installPackage`.
+- Use the AI SDK harness adapter as one implementation, not as Agent Native's
+  public abstraction.
+- For bridge-backed coding harnesses, require a real sandbox/workspace provider.
+  Do not run arbitrary coding agents in the host process by default.
+- Pass only a narrow, intentional set of Agent Native actions as host tools.
+  Preserve `defineAction` auth, request context, timeouts, truncation, and
+  read-only metadata.
+
+## Don't
+
+- Don't add Claude Code, Codex, Cursor, Mastra, or Pi as an `AgentEngine`.
+- Don't replay full Agent Native chat history into a native harness each turn.
+  Resume the harness session instead.
+- Don't store resume state in `application_state`; it belongs in the harness
+  session SQL table.
+- Don't expose every app action to every harness session by default.
+
+## Related Skills
+
+- `adding-a-feature` — feature parity across UI/actions/instructions/state.
+- `delegate-to-agent` — background agents use run-manager infrastructure.
+- `external-agents` — expose openable resources and external-agent surfaces.
+- `storing-data` — durable SQL state and additive schema changes.
+

package/dist/workspace-files/index.d.ts

@@ -1,4 +1,3 @@
 export { writeWorkspaceFile, appendWorkspaceFile, readWorkspaceFile, getWorkspaceFileMeta, listWorkspaceFiles, deleteWorkspaceFile, grepWorkspaceFiles, validatePath, MAX_FILE_BYTES, MAX_SCOPE_BYTES, SAVE_TO_FILE_MAX_BYTES, type WorkspaceFilesScope, type WorkspaceFile, type WorkspaceFileMeta, } from "./store.js";
 export { createWorkspaceFilesTool } from "./tool.js";
-export { WORKSPACE_FILES_CREATE_SQL, WORKSPACE_FILES_INDEX_SQL, } from "./schema.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/workspace-files/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workspace-files/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workspace-files/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,eAAe,EACf,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC"}

package/dist/workspace-files/index.js

@@ -1,4 +1,3 @@
 export { writeWorkspaceFile, appendWorkspaceFile, readWorkspaceFile, getWorkspaceFileMeta, listWorkspaceFiles, deleteWorkspaceFile, grepWorkspaceFiles, validatePath, MAX_FILE_BYTES, MAX_SCOPE_BYTES, SAVE_TO_FILE_MAX_BYTES, } from "./store.js";
 export { createWorkspaceFilesTool } from "./tool.js";
-export { WORKSPACE_FILES_CREATE_SQL, WORKSPACE_FILES_INDEX_SQL, } from "./schema.js";
 //# sourceMappingURL=index.js.map

package/dist/workspace-files/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workspace-files/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,eAAe,EACf,sBAAsB,GAIvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,aAAa,CAAC","sourcesContent":["export {\n  writeWorkspaceFile,\n  appendWorkspaceFile,\n  readWorkspaceFile,\n  getWorkspaceFileMeta,\n  listWorkspaceFiles,\n  deleteWorkspaceFile,\n  grepWorkspaceFiles,\n  validatePath,\n  MAX_FILE_BYTES,\n  MAX_SCOPE_BYTES,\n  SAVE_TO_FILE_MAX_BYTES,\n  type WorkspaceFilesScope,\n  type WorkspaceFile,\n  type WorkspaceFileMeta,\n} from \"./store.js\";\n\nexport { createWorkspaceFilesTool } from \"./tool.js\";\nexport {\n  WORKSPACE_FILES_CREATE_SQL,\n  WORKSPACE_FILES_INDEX_SQL,\n} from \"./schema.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workspace-files/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,cAAc,EACd,eAAe,EACf,sBAAsB,GAIvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC","sourcesContent":["export {\n  writeWorkspaceFile,\n  appendWorkspaceFile,\n  readWorkspaceFile,\n  getWorkspaceFileMeta,\n  listWorkspaceFiles,\n  deleteWorkspaceFile,\n  grepWorkspaceFiles,\n  validatePath,\n  MAX_FILE_BYTES,\n  MAX_SCOPE_BYTES,\n  SAVE_TO_FILE_MAX_BYTES,\n  type WorkspaceFilesScope,\n  type WorkspaceFile,\n  type WorkspaceFileMeta,\n} from \"./store.js\";\n\nexport { createWorkspaceFilesTool } from \"./tool.js\";\n"]}

package/dist/workspace-files/store.d.ts

@@ -1,15 +1,20 @@
 /**
- * Workspace-files store.
+ * Compatibility wrapper for the old `workspace-files` API.
  *
- * Provides read/write/append/list/delete/grep operations over the
- * `workspace_files` table. All writes enforce per-file (2 MB) and per-scope
- * (200 MB) caps. The table is lazily migrated on first use.
+ * Storage now goes through the core Resources table so agent files live in the
+ * same workspace the user manages in the Resources panel. Paths under
+ * `scratch/` are hidden agent scratch; every other path is a normal visible
+ * resource in the current personal or organization scope.
  */
-/** Max content size per file (bytes). */
+/** Max content size per file (bytes) for direct workspaceWrite calls. */
 export declare const MAX_FILE_BYTES: number;
-/** Max total content size across all files in one scope (bytes). */
+/**
+ * Legacy export retained for API compatibility. The Resources store is the
+ * canonical quota surface now, so the compatibility wrapper does not maintain a
+ * separate per-scope total.
+ */
 export declare const MAX_SCOPE_BYTES: number;
-/** Max content size when saving via saveToFile from provider-api / fetch tool (bytes). */
+/** Max content size when saving via saveToFile from provider-api / fetch tool. */
 export declare const SAVE_TO_FILE_MAX_BYTES: number;
 export interface WorkspaceFilesScope {
     scope: "user" | "org";
@@ -41,8 +46,8 @@ export interface WorkspaceFileMeta {
 }
 /**
  * Write (create or overwrite) a workspace file.
- * Enforces per-file (2 MB default; `saveToFile` callers may raise it up to
- * 20 MB via `opts.maxFileBytes`) and per-scope (200 MB) caps.
+ * Enforces per-file limits for the compatibility API; persistence is handled by
+ * Resources. Use `scratch/...` for temporary hidden agent files.
  */
 export declare function writeWorkspaceFile(scope: WorkspaceFilesScope, path: string, content: string, contentType?: string, opts?: {
     maxFileBytes?: number;

package/dist/workspace-files/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/workspace-files/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,yCAAyC;AACzC,eAAO,MAAM,cAAc,QAAkB,CAAC;AAE9C,oEAAoE;AACpE,eAAO,MAAM,eAAe,QAAoB,CAAC;AAEjD,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB,QAAmB,CAAC;AAoBvD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWxD;AAMD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,SAAe,EAC1B,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CA4E5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,SAAe,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAQ5B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAkC/B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAmBnC;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA+B9B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IACL,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA+BpE"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/workspace-files/store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiBH,yEAAyE;AACzE,eAAO,MAAM,cAAc,QAAkB,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,eAAe,QAAoB,CAAC;AAEjD,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,QAAmB,CAAC;AAMvD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAoBD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWxD;AAMD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,SAAe,EAC1B,IAAI,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CA4B5B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,WAAW,SAAe,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAO5B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAiB/B;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAMnC;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAiB9B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IACL,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CA+BpE"}

package/dist/workspace-files/store.js

@@ -1,33 +1,39 @@
 /**
- * Workspace-files store.
+ * Compatibility wrapper for the old `workspace-files` API.
  *
- * Provides read/write/append/list/delete/grep operations over the
- * `workspace_files` table. All writes enforce per-file (2 MB) and per-scope
- * (200 MB) caps. The table is lazily migrated on first use.
+ * Storage now goes through the core Resources table so agent files live in the
+ * same workspace the user manages in the Resources panel. Paths under
+ * `scratch/` are hidden agent scratch; every other path is a normal visible
+ * resource in the current personal or organization scope.
  */
-import crypto from "node:crypto";
-import { getDbExec } from "../db/client.js";
-import { WORKSPACE_FILES_CREATE_SQL, WORKSPACE_FILES_INDEX_SQL, } from "./schema.js";
+import { SHARED_OWNER, resourceDeleteByPath, resourceGetByPath, resourceList, resourcePut, } from "../resources/store.js";
 // ---------------------------------------------------------------------------
 // Constants
 // ---------------------------------------------------------------------------
-/** Max content size per file (bytes). */
+/** Max content size per file (bytes) for direct workspaceWrite calls. */
 export const MAX_FILE_BYTES = 2 * 1024 * 1024; // 2 MB
-/** Max total content size across all files in one scope (bytes). */
+/**
+ * Legacy export retained for API compatibility. The Resources store is the
+ * canonical quota surface now, so the compatibility wrapper does not maintain a
+ * separate per-scope total.
+ */
 export const MAX_SCOPE_BYTES = 200 * 1024 * 1024; // 200 MB
-/** Max content size when saving via saveToFile from provider-api / fetch tool (bytes). */
+/** Max content size when saving via saveToFile from provider-api / fetch tool. */
 export const SAVE_TO_FILE_MAX_BYTES = 20 * 1024 * 1024; // 20 MB
-// ---------------------------------------------------------------------------
-// Lazy table init
-// ---------------------------------------------------------------------------
-let _tableReady = false;
-async function ensureTable() {
-    if (_tableReady)
-        return;
-    const db = getDbExec();
-    await db.execute(WORKSPACE_FILES_CREATE_SQL);
-    await db.execute(WORKSPACE_FILES_INDEX_SQL);
-    _tableReady = true;
+function ownerForScope(scope) {
+    return scope.scope === "org" ? SHARED_OWNER : scope.scopeId;
+}
+function visibilityForPath(path) {
+    return path === "scratch" || path.startsWith("scratch/")
+        ? "agent_scratch"
+        : "workspace";
+}
+function workspaceFileMetadata(scope) {
+    return {
+        source: "workspace-files",
+        scope: scope.scope,
+        scopeId: scope.scopeId,
+    };
 }
 /**
  * Validate a workspace file path.
@@ -54,8 +60,8 @@ export function validatePath(path) {
 // ---------------------------------------------------------------------------
 /**
  * Write (create or overwrite) a workspace file.
- * Enforces per-file (2 MB default; `saveToFile` callers may raise it up to
- * 20 MB via `opts.maxFileBytes`) and per-scope (200 MB) caps.
+ * Enforces per-file limits for the compatibility API; persistence is handled by
+ * Resources. Use `scratch/...` for temporary hidden agent files.
  */
 export async function writeWorkspaceFile(scope, path, content, contentType = "text/plain", opts) {
     const pathErr = validatePath(path);
@@ -66,61 +72,12 @@ export async function writeWorkspaceFile(scope, path, content, contentType = "te
     if (bytes > maxFileBytes) {
         throw new Error(`File "${path}" would be ${(bytes / 1024 / 1024).toFixed(2)} MB, which exceeds the ${(maxFileBytes / 1024 / 1024).toFixed(0)} MB per-file limit.`);
     }
-    await ensureTable();
-    const db = getDbExec();
-    // Check scope total (excluding current file's existing bytes).
-    const existing = await getWorkspaceFileMeta(scope, path);
-    const existingBytes = existing?.sizeBytes ?? 0;
-    const scopeTotal = await getScopeTotalBytes(scope);
-    const newTotal = scopeTotal - existingBytes + bytes;
-    if (newTotal > MAX_SCOPE_BYTES) {
-        throw new Error(`Writing "${path}" would bring the workspace total to ${(newTotal / 1024 / 1024).toFixed(1)} MB, exceeding the 200 MB limit.`);
-    }
-    const now = new Date().toISOString();
-    if (existing) {
-        await db.execute({
-            sql: `UPDATE workspace_files SET content = ?, content_type = ?, size_bytes = ?, updated_at = ? WHERE scope = ? AND scope_id = ? AND path = ?`,
-            args: [
-                content,
-                contentType,
-                bytes,
-                now,
-                scope.scope,
-                scope.scopeId,
-                path,
-            ],
-        });
-        return {
-            ...existing,
-            content: undefined,
-            contentType,
-            sizeBytes: bytes,
-            updatedAt: now,
-        };
-    }
-    const id = crypto.randomUUID();
-    await db.execute({
-        sql: `INSERT INTO workspace_files (id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
-        args: [
-            id,
-            scope.scope,
-            scope.scopeId,
-            path,
-            content,
-            contentType,
-            bytes,
-            now,
-            now,
-        ],
+    const resource = await resourcePut(ownerForScope(scope), path, content, contentType, {
+        createdBy: "agent",
+        visibility: visibilityForPath(path),
+        metadata: workspaceFileMetadata(scope),
     });
-    return {
-        id,
-        path,
-        contentType,
-        sizeBytes: bytes,
-        createdAt: now,
-        updatedAt: now,
-    };
+    return resourceToMeta(resource);
 }
 /**
  * Append text to an existing workspace file, or create it if it doesn't exist.
@@ -129,8 +86,7 @@ export async function appendWorkspaceFile(scope, path, text, contentType = "text
     const pathErr = validatePath(path);
     if (pathErr)
         throw new Error(`Invalid path: ${pathErr}`);
-    await ensureTable();
-    const existing = await readWorkspaceFile(scope, path);
+    const existing = await resourceGetByPath(ownerForScope(scope), path);
     const newContent = existing ? existing.content + text : text;
     return writeWorkspaceFile(scope, path, newContent, contentType);
 }
@@ -142,87 +98,43 @@ export async function readWorkspaceFile(scope, path, opts) {
     const pathErr = validatePath(path);
     if (pathErr)
         throw new Error(`Invalid path: ${pathErr}`);
-    await ensureTable();
-    const db = getDbExec();
-    const result = await db.execute({
-        sql: `SELECT id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,
-        args: [scope.scope, scope.scopeId, path],
-    });
-    const row = result.rows[0];
-    if (!row)
+    const resource = await resourceGetByPath(ownerForScope(scope), path);
+    if (!resource)
         return null;
-    let content = String(row[4] ?? "");
+    let content = resource.content;
     if (opts?.offset || opts?.maxChars) {
         const off = opts.offset ?? 0;
         content = content.slice(off, opts.maxChars !== undefined ? off + opts.maxChars : undefined);
     }
-    return {
-        id: String(row[0]),
-        scope: String(row[1]),
-        scopeId: String(row[2]),
-        path: String(row[3]),
-        content,
-        contentType: String(row[5] ?? "text/plain"),
-        sizeBytes: Number(row[6] ?? 0),
-        createdAt: String(row[7]),
-        updatedAt: String(row[8]),
-    };
+    return resourceToFile(resource, scope, content);
 }
 /**
  * Get file metadata without loading content.
  */
 export async function getWorkspaceFileMeta(scope, path) {
-    await ensureTable();
-    const db = getDbExec();
-    const result = await db.execute({
-        sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,
-        args: [scope.scope, scope.scopeId, path],
-    });
-    const row = result.rows[0];
-    if (!row)
-        return null;
-    return {
-        id: String(row[0]),
-        path: String(row[1]),
-        contentType: String(row[2] ?? "text/plain"),
-        sizeBytes: Number(row[3] ?? 0),
-        createdAt: String(row[4]),
-        updatedAt: String(row[5]),
-    };
+    const pathErr = validatePath(path);
+    if (pathErr)
+        throw new Error(`Invalid path: ${pathErr}`);
+    const resource = await resourceGetByPath(ownerForScope(scope), path);
+    return resource ? resourceToMeta(resource) : null;
 }
 /**
  * List workspace files, optionally filtered by path prefix.
  * Returns metadata only (no content).
  */
 export async function listWorkspaceFiles(scope, prefix) {
-    await ensureTable();
-    const db = getDbExec();
-    if (prefix) {
-        // Allow a trailing slash on list prefixes, but reject traversal and
-        // other invalid path shapes before they reach the LIKE pattern.
-        const normalizedPrefix = prefix.endsWith("/")
-            ? prefix.slice(0, -1)
-            : prefix;
-        const pathErr = validatePath(normalizedPrefix);
-        if (pathErr) {
-            throw new Error(pathErr);
-        }
-        const result = await db.execute({
-            sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND (path = ? OR path LIKE ? ESCAPE '\\') ORDER BY path ASC`,
-            args: [
-                scope.scope,
-                scope.scopeId,
-                normalizedPrefix,
-                `${normalizedPrefix.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_")}/%`,
-            ],
-        });
-        return result.rows.map(rowToMeta);
-    }
-    const result = await db.execute({
-        sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? ORDER BY path ASC`,
-        args: [scope.scope, scope.scopeId],
+    const owner = ownerForScope(scope);
+    const normalizedPrefix = normalizePrefix(prefix);
+    const resources = await resourceList(owner, normalizedPrefix, {
+        includeAgentScratch: true,
     });
-    return result.rows.map(rowToMeta);
+    const filtered = normalizedPrefix
+        ? resources.filter((resource) => resource.path === normalizedPrefix ||
+            resource.path.startsWith(`${normalizedPrefix}/`))
+        : resources;
+    return filtered
+        .map(resourceToMeta)
+        .sort((a, b) => a.path.localeCompare(b.path));
 }
 /**
  * Delete a workspace file. Returns true if deleted, false if not found.
@@ -231,13 +143,7 @@ export async function deleteWorkspaceFile(scope, path) {
     const pathErr = validatePath(path);
     if (pathErr)
         throw new Error(`Invalid path: ${pathErr}`);
-    await ensureTable();
-    const db = getDbExec();
-    const result = await db.execute({
-        sql: `DELETE FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,
-        args: [scope.scope, scope.scopeId, path],
-    });
-    return result.rowsAffected > 0;
+    return resourceDeleteByPath(ownerForScope(scope), path);
 }
 /**
  * Search file contents for a substring or regex pattern.
@@ -277,22 +183,41 @@ export async function grepWorkspaceFiles(scope, pattern, opts) {
 // ---------------------------------------------------------------------------
 // Internal helpers
 // ---------------------------------------------------------------------------
-async function getScopeTotalBytes(scope) {
-    const db = getDbExec();
-    const result = await db.execute({
-        sql: `SELECT COALESCE(SUM(size_bytes), 0) as total FROM workspace_files WHERE scope = ? AND scope_id = ?`,
-        args: [scope.scope, scope.scopeId],
-    });
-    return Number(result.rows[0]?.[0] ?? 0);
+function normalizePrefix(prefix) {
+    if (!prefix)
+        return undefined;
+    const normalized = prefix.replace(/\/+$/, "");
+    if (!normalized)
+        return undefined;
+    const pathErr = validatePath(normalized);
+    if (pathErr)
+        throw new Error(pathErr);
+    return normalized;
+}
+function isoTime(value) {
+    return new Date(value).toISOString();
 }
-function rowToMeta(row) {
+function resourceToMeta(resource) {
     return {
-        id: String(row[0]),
-        path: String(row[1]),
-        contentType: String(row[2] ?? "text/plain"),
-        sizeBytes: Number(row[3] ?? 0),
-        createdAt: String(row[4]),
-        updatedAt: String(row[5]),
+        id: resource.id,
+        path: resource.path,
+        contentType: resource.mimeType,
+        sizeBytes: resource.size,
+        createdAt: isoTime(resource.createdAt),
+        updatedAt: isoTime(resource.updatedAt),
+    };
+}
+function resourceToFile(resource, scope, content) {
+    return {
+        id: resource.id,
+        scope: scope.scope,
+        scopeId: scope.scopeId,
+        path: resource.path,
+        content,
+        contentType: resource.mimeType,
+        sizeBytes: resource.size,
+        createdAt: isoTime(resource.createdAt),
+        updatedAt: isoTime(resource.updatedAt),
     };
 }
 //# sourceMappingURL=store.js.map

package/dist/workspace-files/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/workspace-files/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAErB,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,yCAAyC;AACzC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAEtD,oEAAoE;AACpE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAE3D,0FAA0F;AAC1F,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAEhE,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,KAAK,UAAU,WAAW;IACxB,IAAI,WAAW;QAAE,OAAO;IACxB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC7C,MAAM,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5C,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACjE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAChE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,uCAAuC,CAAC;QAClE,IAAI,IAAI,KAAK,EAAE;YACb,OAAO,6DAA6D,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA2BD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,IAAY,EACZ,OAAe,EACf,WAAW,GAAG,YAAY,EAC1B,IAAgC;IAEhC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,IAAI,EAAE,YAAY,IAAI,cAAc,EACpC,sBAAsB,CACvB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,cAAc,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAClJ,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,QAAQ,EAAE,SAAS,IAAI,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,KAAK,CAAC;IACpD,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,wCAAwC,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,OAAO,CAAC;YACf,GAAG,EAAE,wIAAwI;YAC7I,IAAI,EAAE;gBACJ,OAAO;gBACP,WAAW;gBACX,KAAK;gBACL,GAAG;gBACH,KAAK,CAAC,KAAK;gBACX,KAAK,CAAC,OAAO;gBACb,IAAI;aACL;SACF,CAAC,CAAC;QACH,OAAO;YACL,GAAG,QAAQ;YACX,OAAO,EAAE,SAAgB;YACzB,WAAW;YACX,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,GAAG;SACiB,CAAC;IACpC,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,MAAM,EAAE,CAAC,OAAO,CAAC;QACf,GAAG,EAAE,uJAAuJ;QAC5J,IAAI,EAAE;YACJ,EAAE;YACF,KAAK,CAAC,KAAK;YACX,KAAK,CAAC,OAAO;YACb,IAAI;YACJ,OAAO;YACP,WAAW;YACX,KAAK;YACL,GAAG;YACH,GAAG;SACJ;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE;QACF,IAAI;QACJ,WAAW;QACX,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA0B,EAC1B,IAAY,EACZ,IAAY,EACZ,WAAW,GAAG,YAAY;IAE1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA0B,EAC1B,IAAY,EACZ,IAA6C;IAE7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,gKAAgK;QACrK,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;KACzC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC,KAAK,CACrB,GAAG,EACH,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO;QACP,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA0B,EAC1B,IAAY;IAEZ,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,sIAAsI;QAC3I,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;KACzC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,MAAe;IAEf,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAEvB,IAAI,MAAM,EAAE,CAAC;QACX,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC3C,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,qLAAqL;YAC1L,IAAI,EAAE;gBACJ,KAAK,CAAC,KAAK;gBACX,KAAK,CAAC,OAAO;gBACb,gBAAgB;gBAChB,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;aACzF;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,2IAA2I;QAChJ,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA0B,EAC1B,IAAY;IAEZ,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,2EAA2E;QAChF,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;KACzC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,OAAe,EACf,IAKC;IAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAErD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,EAAE,QAAQ;YACpB,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;YAC1B,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAA8D,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,EAAE,iBAAiB,IAAI,EAAE,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrE,UAAU,EAAE,CAAC;gBACb,IAAI,UAAU,IAAI,UAAU;oBAAE,MAAM;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,KAAK,UAAU,kBAAkB,CAAC,KAA0B;IAC1D,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;QAC9B,GAAG,EAAE,oGAAoG;QACzG,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,GAAU;IAC3B,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Workspace-files store.\n *\n * Provides read/write/append/list/delete/grep operations over the\n * `workspace_files` table. All writes enforce per-file (2 MB) and per-scope\n * (200 MB) caps. The table is lazily migrated on first use.\n */\n\nimport crypto from \"node:crypto\";\nimport { getDbExec } from \"../db/client.js\";\nimport {\n  WORKSPACE_FILES_CREATE_SQL,\n  WORKSPACE_FILES_INDEX_SQL,\n} from \"./schema.js\";\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Max content size per file (bytes). */\nexport const MAX_FILE_BYTES = 2 * 1024 * 1024; // 2 MB\n\n/** Max total content size across all files in one scope (bytes). */\nexport const MAX_SCOPE_BYTES = 200 * 1024 * 1024; // 200 MB\n\n/** Max content size when saving via saveToFile from provider-api / fetch tool (bytes). */\nexport const SAVE_TO_FILE_MAX_BYTES = 20 * 1024 * 1024; // 20 MB\n\n// ---------------------------------------------------------------------------\n// Lazy table init\n// ---------------------------------------------------------------------------\n\nlet _tableReady = false;\n\nasync function ensureTable(): Promise<void> {\n  if (_tableReady) return;\n  const db = getDbExec();\n  await db.execute(WORKSPACE_FILES_CREATE_SQL);\n  await db.execute(WORKSPACE_FILES_INDEX_SQL);\n  _tableReady = true;\n}\n\n// ---------------------------------------------------------------------------\n// Scope helpers\n// ---------------------------------------------------------------------------\n\nexport interface WorkspaceFilesScope {\n  scope: \"user\" | \"org\";\n  scopeId: string;\n}\n\n/**\n * Validate a workspace file path.\n * - Non-empty, no leading slash, no \"..\" components, no null bytes.\n */\nexport function validatePath(path: string): string | null {\n  if (!path || typeof path !== \"string\") return \"path is required\";\n  if (path.startsWith(\"/\")) return 'path must not start with \"/\"';\n  if (path.includes(\"\\0\")) return \"path must not contain null bytes\";\n  const parts = path.split(\"/\");\n  for (const part of parts) {\n    if (part === \"..\") return 'path must not contain \"..\" components';\n    if (part === \"\")\n      return 'path must not contain empty segments (\"//\" or trailing \"/\")';\n  }\n  return null;\n}\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface WorkspaceFile {\n  id: string;\n  scope: string;\n  scopeId: string;\n  path: string;\n  content: string;\n  contentType: string;\n  sizeBytes: number;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface WorkspaceFileMeta {\n  id: string;\n  path: string;\n  contentType: string;\n  sizeBytes: number;\n  createdAt: string;\n  updatedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store operations\n// ---------------------------------------------------------------------------\n\n/**\n * Write (create or overwrite) a workspace file.\n * Enforces per-file (2 MB default; `saveToFile` callers may raise it up to\n * 20 MB via `opts.maxFileBytes`) and per-scope (200 MB) caps.\n */\nexport async function writeWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  content: string,\n  contentType = \"text/plain\",\n  opts?: { maxFileBytes?: number },\n): Promise<WorkspaceFileMeta> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  const maxFileBytes = Math.min(\n    opts?.maxFileBytes ?? MAX_FILE_BYTES,\n    SAVE_TO_FILE_MAX_BYTES,\n  );\n  const bytes = Buffer.byteLength(content, \"utf8\");\n  if (bytes > maxFileBytes) {\n    throw new Error(\n      `File \"${path}\" would be ${(bytes / 1024 / 1024).toFixed(2)} MB, which exceeds the ${(maxFileBytes / 1024 / 1024).toFixed(0)} MB per-file limit.`,\n    );\n  }\n\n  await ensureTable();\n  const db = getDbExec();\n\n  // Check scope total (excluding current file's existing bytes).\n  const existing = await getWorkspaceFileMeta(scope, path);\n  const existingBytes = existing?.sizeBytes ?? 0;\n  const scopeTotal = await getScopeTotalBytes(scope);\n  const newTotal = scopeTotal - existingBytes + bytes;\n  if (newTotal > MAX_SCOPE_BYTES) {\n    throw new Error(\n      `Writing \"${path}\" would bring the workspace total to ${(newTotal / 1024 / 1024).toFixed(1)} MB, exceeding the 200 MB limit.`,\n    );\n  }\n\n  const now = new Date().toISOString();\n\n  if (existing) {\n    await db.execute({\n      sql: `UPDATE workspace_files SET content = ?, content_type = ?, size_bytes = ?, updated_at = ? WHERE scope = ? AND scope_id = ? AND path = ?`,\n      args: [\n        content,\n        contentType,\n        bytes,\n        now,\n        scope.scope,\n        scope.scopeId,\n        path,\n      ],\n    });\n    return {\n      ...existing,\n      content: undefined as any,\n      contentType,\n      sizeBytes: bytes,\n      updatedAt: now,\n    } as unknown as WorkspaceFileMeta;\n  }\n\n  const id = crypto.randomUUID();\n  await db.execute({\n    sql: `INSERT INTO workspace_files (id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n    args: [\n      id,\n      scope.scope,\n      scope.scopeId,\n      path,\n      content,\n      contentType,\n      bytes,\n      now,\n      now,\n    ],\n  });\n  return {\n    id,\n    path,\n    contentType,\n    sizeBytes: bytes,\n    createdAt: now,\n    updatedAt: now,\n  };\n}\n\n/**\n * Append text to an existing workspace file, or create it if it doesn't exist.\n */\nexport async function appendWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  text: string,\n  contentType = \"text/plain\",\n): Promise<WorkspaceFileMeta> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  await ensureTable();\n  const existing = await readWorkspaceFile(scope, path);\n  const newContent = existing ? existing.content + text : text;\n  return writeWorkspaceFile(scope, path, newContent, contentType);\n}\n\n/**\n * Read a workspace file's content (with optional offset and maxChars for paging).\n * Returns null if the file doesn't exist.\n */\nexport async function readWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  opts?: { offset?: number; maxChars?: number },\n): Promise<WorkspaceFile | null> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  await ensureTable();\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `SELECT id, scope, scope_id, path, content, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,\n    args: [scope.scope, scope.scopeId, path],\n  });\n\n  const row = result.rows[0];\n  if (!row) return null;\n\n  let content = String(row[4] ?? \"\");\n  if (opts?.offset || opts?.maxChars) {\n    const off = opts.offset ?? 0;\n    content = content.slice(\n      off,\n      opts.maxChars !== undefined ? off + opts.maxChars : undefined,\n    );\n  }\n\n  return {\n    id: String(row[0]),\n    scope: String(row[1]),\n    scopeId: String(row[2]),\n    path: String(row[3]),\n    content,\n    contentType: String(row[5] ?? \"text/plain\"),\n    sizeBytes: Number(row[6] ?? 0),\n    createdAt: String(row[7]),\n    updatedAt: String(row[8]),\n  };\n}\n\n/**\n * Get file metadata without loading content.\n */\nexport async function getWorkspaceFileMeta(\n  scope: WorkspaceFilesScope,\n  path: string,\n): Promise<WorkspaceFileMeta | null> {\n  await ensureTable();\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,\n    args: [scope.scope, scope.scopeId, path],\n  });\n\n  const row = result.rows[0];\n  if (!row) return null;\n\n  return {\n    id: String(row[0]),\n    path: String(row[1]),\n    contentType: String(row[2] ?? \"text/plain\"),\n    sizeBytes: Number(row[3] ?? 0),\n    createdAt: String(row[4]),\n    updatedAt: String(row[5]),\n  };\n}\n\n/**\n * List workspace files, optionally filtered by path prefix.\n * Returns metadata only (no content).\n */\nexport async function listWorkspaceFiles(\n  scope: WorkspaceFilesScope,\n  prefix?: string,\n): Promise<WorkspaceFileMeta[]> {\n  await ensureTable();\n  const db = getDbExec();\n\n  if (prefix) {\n    // Allow a trailing slash on list prefixes, but reject traversal and\n    // other invalid path shapes before they reach the LIKE pattern.\n    const normalizedPrefix = prefix.endsWith(\"/\")\n      ? prefix.slice(0, -1)\n      : prefix;\n    const pathErr = validatePath(normalizedPrefix);\n    if (pathErr) {\n      throw new Error(pathErr);\n    }\n    const result = await db.execute({\n      sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? AND (path = ? OR path LIKE ? ESCAPE '\\\\') ORDER BY path ASC`,\n      args: [\n        scope.scope,\n        scope.scopeId,\n        normalizedPrefix,\n        `${normalizedPrefix.replace(/\\\\/g, \"\\\\\\\\\").replace(/%/g, \"\\\\%\").replace(/_/g, \"\\\\_\")}/%`,\n      ],\n    });\n    return result.rows.map(rowToMeta);\n  }\n\n  const result = await db.execute({\n    sql: `SELECT id, path, content_type, size_bytes, created_at, updated_at FROM workspace_files WHERE scope = ? AND scope_id = ? ORDER BY path ASC`,\n    args: [scope.scope, scope.scopeId],\n  });\n  return result.rows.map(rowToMeta);\n}\n\n/**\n * Delete a workspace file. Returns true if deleted, false if not found.\n */\nexport async function deleteWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n): Promise<boolean> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  await ensureTable();\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `DELETE FROM workspace_files WHERE scope = ? AND scope_id = ? AND path = ?`,\n    args: [scope.scope, scope.scopeId, path],\n  });\n  return result.rowsAffected > 0;\n}\n\n/**\n * Search file contents for a substring or regex pattern.\n * Returns matching lines with path context.\n */\nexport async function grepWorkspaceFiles(\n  scope: WorkspaceFilesScope,\n  pattern: string,\n  opts?: {\n    pathPrefix?: string;\n    useRegex?: boolean;\n    maxMatchesPerFile?: number;\n    maxFiles?: number;\n  },\n): Promise<Array<{ path: string; lineNumber: number; line: string }>> {\n  const files = await listWorkspaceFiles(scope, opts?.pathPrefix);\n  const limited = files.slice(0, opts?.maxFiles ?? 50);\n\n  let regex: RegExp;\n  try {\n    regex = opts?.useRegex\n      ? new RegExp(pattern, \"i\")\n      : new RegExp(pattern.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\"), \"i\");\n  } catch {\n    throw new Error(`Invalid regex pattern: ${pattern}`);\n  }\n\n  const results: Array<{ path: string; lineNumber: number; line: string }> = [];\n  const maxPerFile = opts?.maxMatchesPerFile ?? 20;\n\n  for (const meta of limited) {\n    const file = await readWorkspaceFile(scope, meta.path);\n    if (!file) continue;\n    const lines = file.content.split(\"\\n\");\n    let matchCount = 0;\n    for (let i = 0; i < lines.length; i++) {\n      if (regex.test(lines[i])) {\n        results.push({ path: meta.path, lineNumber: i + 1, line: lines[i] });\n        matchCount++;\n        if (matchCount >= maxPerFile) break;\n      }\n    }\n  }\n\n  return results;\n}\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\nasync function getScopeTotalBytes(scope: WorkspaceFilesScope): Promise<number> {\n  const db = getDbExec();\n  const result = await db.execute({\n    sql: `SELECT COALESCE(SUM(size_bytes), 0) as total FROM workspace_files WHERE scope = ? AND scope_id = ?`,\n    args: [scope.scope, scope.scopeId],\n  });\n  return Number(result.rows[0]?.[0] ?? 0);\n}\n\nfunction rowToMeta(row: any[]): WorkspaceFileMeta {\n  return {\n    id: String(row[0]),\n    path: String(row[1]),\n    contentType: String(row[2] ?? \"text/plain\"),\n    sizeBytes: Number(row[3] ?? 0),\n    createdAt: String(row[4]),\n    updatedAt: String(row[5]),\n  };\n}\n"]}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/workspace-files/store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,WAAW,GAIZ,MAAM,uBAAuB,CAAC;AAE/B,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;AAE3D,kFAAkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAWhE,SAAS,aAAa,CAAC,KAA0B;IAC/C,OAAO,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QACtD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,WAAW,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA0B;IACvD,OAAO;QACL,MAAM,EAAE,iBAAiB;QACzB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACjE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAChE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,uCAAuC,CAAC;QAClE,IAAI,IAAI,KAAK,EAAE;YACb,OAAO,6DAA6D,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA2BD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,IAAY,EACZ,OAAe,EACf,WAAW,GAAG,YAAY,EAC1B,IAAgC;IAEhC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAC3B,IAAI,EAAE,YAAY,IAAI,cAAc,EACpC,sBAAsB,CACvB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,cAAc,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAClJ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,aAAa,CAAC,KAAK,CAAC,EACpB,IAAI,EACJ,OAAO,EACP,WAAW,EACX;QACE,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC;QACnC,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC;KACvC,CACF,CAAC;IAEF,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA0B,EAC1B,IAAY,EACZ,IAAY,EACZ,WAAW,GAAG,YAAY;IAE1B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA0B,EAC1B,IAAY,EACZ,IAA6C;IAE7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC,KAAK,CACrB,GAAG,EACH,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA0B,EAC1B,IAAY;IAEZ,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,MAAe;IAEf,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,gBAAgB,EAAE;QAC5D,mBAAmB,EAAE,IAAI;KAC1B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,gBAAgB;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,CACd,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,IAAI,KAAK,gBAAgB;YAClC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC,CACnD;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,QAAQ;SACZ,GAAG,CAAC,cAAc,CAAC;SACnB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA0B,EAC1B,IAAY;IAEZ,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;IAEzD,OAAO,oBAAoB,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA0B,EAC1B,OAAe,EACf,IAKC;IAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAErD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,EAAE,QAAQ;YACpB,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;YAC1B,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAA8D,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,EAAE,iBAAiB,IAAI,EAAE,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrE,UAAU,EAAE,CAAC;gBACb,IAAI,UAAU,IAAI,UAAU;oBAAE,MAAM;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,eAAe,CAAC,MAAe;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,QAAsB;IAC5C,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,QAAQ;QAC9B,SAAS,EAAE,QAAQ,CAAC,IAAI;QACxB,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,QAAkB,EAClB,KAA0B,EAC1B,OAAe;IAEf,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO;QACP,WAAW,EAAE,QAAQ,CAAC,QAAQ;QAC9B,SAAS,EAAE,QAAQ,CAAC,IAAI;QACxB,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;KACvC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Compatibility wrapper for the old `workspace-files` API.\n *\n * Storage now goes through the core Resources table so agent files live in the\n * same workspace the user manages in the Resources panel. Paths under\n * `scratch/` are hidden agent scratch; every other path is a normal visible\n * resource in the current personal or organization scope.\n */\n\nimport {\n  SHARED_OWNER,\n  resourceDeleteByPath,\n  resourceGetByPath,\n  resourceList,\n  resourcePut,\n  type Resource,\n  type ResourceMeta,\n  type ResourceVisibility,\n} from \"../resources/store.js\";\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Max content size per file (bytes) for direct workspaceWrite calls. */\nexport const MAX_FILE_BYTES = 2 * 1024 * 1024; // 2 MB\n\n/**\n * Legacy export retained for API compatibility. The Resources store is the\n * canonical quota surface now, so the compatibility wrapper does not maintain a\n * separate per-scope total.\n */\nexport const MAX_SCOPE_BYTES = 200 * 1024 * 1024; // 200 MB\n\n/** Max content size when saving via saveToFile from provider-api / fetch tool. */\nexport const SAVE_TO_FILE_MAX_BYTES = 20 * 1024 * 1024; // 20 MB\n\n// ---------------------------------------------------------------------------\n// Scope helpers\n// ---------------------------------------------------------------------------\n\nexport interface WorkspaceFilesScope {\n  scope: \"user\" | \"org\";\n  scopeId: string;\n}\n\nfunction ownerForScope(scope: WorkspaceFilesScope): string {\n  return scope.scope === \"org\" ? SHARED_OWNER : scope.scopeId;\n}\n\nfunction visibilityForPath(path: string): ResourceVisibility {\n  return path === \"scratch\" || path.startsWith(\"scratch/\")\n    ? \"agent_scratch\"\n    : \"workspace\";\n}\n\nfunction workspaceFileMetadata(scope: WorkspaceFilesScope) {\n  return {\n    source: \"workspace-files\",\n    scope: scope.scope,\n    scopeId: scope.scopeId,\n  };\n}\n\n/**\n * Validate a workspace file path.\n * - Non-empty, no leading slash, no \"..\" components, no null bytes.\n */\nexport function validatePath(path: string): string | null {\n  if (!path || typeof path !== \"string\") return \"path is required\";\n  if (path.startsWith(\"/\")) return 'path must not start with \"/\"';\n  if (path.includes(\"\\0\")) return \"path must not contain null bytes\";\n  const parts = path.split(\"/\");\n  for (const part of parts) {\n    if (part === \"..\") return 'path must not contain \"..\" components';\n    if (part === \"\")\n      return 'path must not contain empty segments (\"//\" or trailing \"/\")';\n  }\n  return null;\n}\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface WorkspaceFile {\n  id: string;\n  scope: string;\n  scopeId: string;\n  path: string;\n  content: string;\n  contentType: string;\n  sizeBytes: number;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface WorkspaceFileMeta {\n  id: string;\n  path: string;\n  contentType: string;\n  sizeBytes: number;\n  createdAt: string;\n  updatedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Store operations\n// ---------------------------------------------------------------------------\n\n/**\n * Write (create or overwrite) a workspace file.\n * Enforces per-file limits for the compatibility API; persistence is handled by\n * Resources. Use `scratch/...` for temporary hidden agent files.\n */\nexport async function writeWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  content: string,\n  contentType = \"text/plain\",\n  opts?: { maxFileBytes?: number },\n): Promise<WorkspaceFileMeta> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  const maxFileBytes = Math.min(\n    opts?.maxFileBytes ?? MAX_FILE_BYTES,\n    SAVE_TO_FILE_MAX_BYTES,\n  );\n  const bytes = Buffer.byteLength(content, \"utf8\");\n  if (bytes > maxFileBytes) {\n    throw new Error(\n      `File \"${path}\" would be ${(bytes / 1024 / 1024).toFixed(2)} MB, which exceeds the ${(maxFileBytes / 1024 / 1024).toFixed(0)} MB per-file limit.`,\n    );\n  }\n\n  const resource = await resourcePut(\n    ownerForScope(scope),\n    path,\n    content,\n    contentType,\n    {\n      createdBy: \"agent\",\n      visibility: visibilityForPath(path),\n      metadata: workspaceFileMetadata(scope),\n    },\n  );\n\n  return resourceToMeta(resource);\n}\n\n/**\n * Append text to an existing workspace file, or create it if it doesn't exist.\n */\nexport async function appendWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  text: string,\n  contentType = \"text/plain\",\n): Promise<WorkspaceFileMeta> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  const existing = await resourceGetByPath(ownerForScope(scope), path);\n  const newContent = existing ? existing.content + text : text;\n  return writeWorkspaceFile(scope, path, newContent, contentType);\n}\n\n/**\n * Read a workspace file's content (with optional offset and maxChars for paging).\n * Returns null if the file doesn't exist.\n */\nexport async function readWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n  opts?: { offset?: number; maxChars?: number },\n): Promise<WorkspaceFile | null> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  const resource = await resourceGetByPath(ownerForScope(scope), path);\n  if (!resource) return null;\n\n  let content = resource.content;\n  if (opts?.offset || opts?.maxChars) {\n    const off = opts.offset ?? 0;\n    content = content.slice(\n      off,\n      opts.maxChars !== undefined ? off + opts.maxChars : undefined,\n    );\n  }\n\n  return resourceToFile(resource, scope, content);\n}\n\n/**\n * Get file metadata without loading content.\n */\nexport async function getWorkspaceFileMeta(\n  scope: WorkspaceFilesScope,\n  path: string,\n): Promise<WorkspaceFileMeta | null> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  const resource = await resourceGetByPath(ownerForScope(scope), path);\n  return resource ? resourceToMeta(resource) : null;\n}\n\n/**\n * List workspace files, optionally filtered by path prefix.\n * Returns metadata only (no content).\n */\nexport async function listWorkspaceFiles(\n  scope: WorkspaceFilesScope,\n  prefix?: string,\n): Promise<WorkspaceFileMeta[]> {\n  const owner = ownerForScope(scope);\n  const normalizedPrefix = normalizePrefix(prefix);\n  const resources = await resourceList(owner, normalizedPrefix, {\n    includeAgentScratch: true,\n  });\n  const filtered = normalizedPrefix\n    ? resources.filter(\n        (resource) =>\n          resource.path === normalizedPrefix ||\n          resource.path.startsWith(`${normalizedPrefix}/`),\n      )\n    : resources;\n\n  return filtered\n    .map(resourceToMeta)\n    .sort((a, b) => a.path.localeCompare(b.path));\n}\n\n/**\n * Delete a workspace file. Returns true if deleted, false if not found.\n */\nexport async function deleteWorkspaceFile(\n  scope: WorkspaceFilesScope,\n  path: string,\n): Promise<boolean> {\n  const pathErr = validatePath(path);\n  if (pathErr) throw new Error(`Invalid path: ${pathErr}`);\n\n  return resourceDeleteByPath(ownerForScope(scope), path);\n}\n\n/**\n * Search file contents for a substring or regex pattern.\n * Returns matching lines with path context.\n */\nexport async function grepWorkspaceFiles(\n  scope: WorkspaceFilesScope,\n  pattern: string,\n  opts?: {\n    pathPrefix?: string;\n    useRegex?: boolean;\n    maxMatchesPerFile?: number;\n    maxFiles?: number;\n  },\n): Promise<Array<{ path: string; lineNumber: number; line: string }>> {\n  const files = await listWorkspaceFiles(scope, opts?.pathPrefix);\n  const limited = files.slice(0, opts?.maxFiles ?? 50);\n\n  let regex: RegExp;\n  try {\n    regex = opts?.useRegex\n      ? new RegExp(pattern, \"i\")\n      : new RegExp(pattern.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\"), \"i\");\n  } catch {\n    throw new Error(`Invalid regex pattern: ${pattern}`);\n  }\n\n  const results: Array<{ path: string; lineNumber: number; line: string }> = [];\n  const maxPerFile = opts?.maxMatchesPerFile ?? 20;\n\n  for (const meta of limited) {\n    const file = await readWorkspaceFile(scope, meta.path);\n    if (!file) continue;\n    const lines = file.content.split(\"\\n\");\n    let matchCount = 0;\n    for (let i = 0; i < lines.length; i++) {\n      if (regex.test(lines[i])) {\n        results.push({ path: meta.path, lineNumber: i + 1, line: lines[i] });\n        matchCount++;\n        if (matchCount >= maxPerFile) break;\n      }\n    }\n  }\n\n  return results;\n}\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\nfunction normalizePrefix(prefix?: string): string | undefined {\n  if (!prefix) return undefined;\n  const normalized = prefix.replace(/\\/+$/, \"\");\n  if (!normalized) return undefined;\n  const pathErr = validatePath(normalized);\n  if (pathErr) throw new Error(pathErr);\n  return normalized;\n}\n\nfunction isoTime(value: number): string {\n  return new Date(value).toISOString();\n}\n\nfunction resourceToMeta(resource: ResourceMeta): WorkspaceFileMeta {\n  return {\n    id: resource.id,\n    path: resource.path,\n    contentType: resource.mimeType,\n    sizeBytes: resource.size,\n    createdAt: isoTime(resource.createdAt),\n    updatedAt: isoTime(resource.updatedAt),\n  };\n}\n\nfunction resourceToFile(\n  resource: Resource,\n  scope: WorkspaceFilesScope,\n  content: string,\n): WorkspaceFile {\n  return {\n    id: resource.id,\n    scope: scope.scope,\n    scopeId: scope.scopeId,\n    path: resource.path,\n    content,\n    contentType: resource.mimeType,\n    sizeBytes: resource.size,\n    createdAt: isoTime(resource.createdAt),\n    updatedAt: isoTime(resource.updatedAt),\n  };\n}\n"]}

package/dist/workspace-files/tool.d.ts

@@ -1,10 +1,9 @@
 /**
- * `workspace-files` agent tool.
+ * `workspace-files` bridge tool.
  *
  * A single tool with an `action` discriminator covering write, append, read,
- * list, delete, and grep. Files persist across conversations; the agent uses
- * them to stage large intermediate results (fetched pages, per-item memos)
- * and then read back selectively for synthesis.
+ * list, delete, and grep. It is kept for `run-code` workspaceRead/workspaceWrite
+ * compatibility and delegates storage to the Resources table.
  *
  * Scope is automatically resolved from the active request context:
  *  - org scope when a request orgId is present (shared across users in the org)

package/dist/workspace-files/tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA2BhE,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAgOtE"}
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AA2BhE,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAkOtE"}