@aigne/aos 0.2.0-beta

package/dist/session/session-dir-providers.cjs

@@ -0,0 +1,254 @@
+let _aigne_afs = require("@aigne/afs");
+
+//#region src/session/session-dir-providers.ts
+/**
+* Session dir sub-providers — factory functions that compose the per-session
+* directory schema documented in S.3:
+*
+*   instance/sessions/<id>/meta.json         readonly (daemon-driven)
+*   instance/sessions/<id>/messages/         append-only (NNNNNN.json)
+*   instance/sessions/<id>/state.json        atomic readwrite
+*   instance/sessions/<id>/blocklet-state/   free readwrite KV
+*   instance/sessions/<id>/tmp/              session scratch
+*
+* Each factory returns a small in-memory AFSModule. Persistence (if/when
+* added) is an implementation detail swap — the surface stays identical.
+*/
+const MESSAGE_FILENAME_RE = /^\d{6}\.json$/;
+const norm = (p) => p.startsWith("/") ? p : `/${p}`;
+/**
+* Readonly single-file provider exposing daemon-authored session metadata as
+* `/` (the mount root). Writes rejected at every op. Content updates happen
+* out-of-band via BlockletManager.updateSessionMeta (unmount → rebuild →
+* remount) so there's no backdoor writer path.
+*/
+function createSessionMetaProvider(name, meta) {
+	const content = JSON.stringify(meta, null, 2);
+	const assertRoot = (p) => {
+		if (norm(p) !== "/") throw new _aigne_afs.AFSNotFoundError(p);
+	};
+	return {
+		name,
+		accessMode: "readonly",
+		async stat(path) {
+			assertRoot(path);
+			return { data: {
+				path: "/",
+				type: "file",
+				size: content.length,
+				mimeType: "application/json"
+			} };
+		},
+		async list(path) {
+			assertRoot(path);
+			return { data: [] };
+		},
+		async read(path) {
+			assertRoot(path);
+			return { data: {
+				path: "/",
+				content,
+				mimeType: "application/json"
+			} };
+		},
+		async write() {
+			throw new _aigne_afs.AFSAccessModeError("readonly", "write");
+		},
+		async delete() {
+			throw new _aigne_afs.AFSAccessModeError("readonly", "delete");
+		}
+	};
+}
+/**
+* Append-only messages provider. Filenames must match `/^\d{6}\.json$/`,
+* writes to existing keys are rejected, and path segments containing `..`
+* are rejected (path-traversal guard; AFS should reject these upstream, but
+* this provider fails closed regardless).
+*/
+function createSessionMessagesProvider(name) {
+	const files = /* @__PURE__ */ new Map();
+	const assertSafeKey = (path) => {
+		const p = norm(path);
+		if (p === "/") return p;
+		const rel = p.slice(1);
+		if (rel.includes("..") || rel.includes("/")) throw new _aigne_afs.AFSPathError(`Invalid messages path: ${path}`, path);
+		if (!MESSAGE_FILENAME_RE.test(rel)) throw new _aigne_afs.AFSPathError(`messages filename must match /^\\d{6}\\.json$/ (got ${JSON.stringify(rel)})`, path);
+		return p;
+	};
+	return {
+		name,
+		accessMode: "readwrite",
+		async stat(path) {
+			if (norm(path) === "/") return { data: {
+				path: "/",
+				type: "directory",
+				childrenCount: files.size
+			} };
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				type: "file",
+				size: content.length
+			} };
+		},
+		async list(path) {
+			if (norm(path) !== "/") throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: [...files.keys()].sort().map((key) => ({
+				path: key,
+				type: "file",
+				size: files.get(key)?.length ?? 0
+			})) };
+		},
+		async read(path) {
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				content,
+				mimeType: "application/json"
+			} };
+		},
+		async write(path, payload) {
+			const key = assertSafeKey(path);
+			if (files.has(key)) throw new _aigne_afs.AFSAccessModeError("append-only", "overwrite");
+			const content = typeof payload?.content === "string" ? payload.content : payload?.content ? new TextDecoder("utf-8", { fatal: false }).decode(payload.content) : "";
+			files.set(key, content);
+			return { data: {
+				path: key,
+				bytesWritten: content.length
+			} };
+		}
+	};
+}
+/**
+* Single-file readwrite provider for `state.json`. Overwrites are allowed
+* (semantics: atomic snapshot replace). Reads before first write throw
+* AFSNotFoundError so daemons can distinguish "never written" from "empty".
+*/
+function createSessionStateProvider(name) {
+	let content;
+	const assertRoot = (p) => {
+		if (norm(p) !== "/") throw new _aigne_afs.AFSNotFoundError(p);
+	};
+	return {
+		name,
+		accessMode: "readwrite",
+		async stat(path) {
+			assertRoot(path);
+			if (content === void 0) throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: {
+				path: "/",
+				type: "file",
+				size: content.length,
+				mimeType: "application/json"
+			} };
+		},
+		async list(path) {
+			assertRoot(path);
+			return { data: [] };
+		},
+		async read(path) {
+			assertRoot(path);
+			if (content === void 0) throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: {
+				path: "/",
+				content,
+				mimeType: "application/json"
+			} };
+		},
+		async write(path, payload) {
+			assertRoot(path);
+			const next = typeof payload?.content === "string" ? payload.content : payload?.content ? new TextDecoder("utf-8", { fatal: false }).decode(payload.content) : "";
+			content = next;
+			return { data: {
+				path: "/",
+				bytesWritten: next.length
+			} };
+		},
+		async delete(path) {
+			assertRoot(path);
+			const existed = content !== void 0;
+			content = void 0;
+			return { data: {
+				path: "/",
+				deleted: existed
+			} };
+		}
+	};
+}
+/**
+* Free readwrite KV for blocklet-authored state. Flat namespace (no nested
+* directories). Keys must not contain `..` or `/` so there's no traversal
+* surface even if an upstream guard is misconfigured.
+*/
+function createBlockletStateProvider(name) {
+	const files = /* @__PURE__ */ new Map();
+	const assertSafeKey = (path) => {
+		const p = norm(path);
+		if (p === "/") return p;
+		const rel = p.slice(1);
+		if (rel.length === 0 || rel.includes("..") || rel.includes("/")) throw new _aigne_afs.AFSPathError(`Invalid blocklet-state path: ${path}`, path);
+		return p;
+	};
+	return {
+		name,
+		accessMode: "readwrite",
+		async stat(path) {
+			if (norm(path) === "/") return { data: {
+				path: "/",
+				type: "directory",
+				childrenCount: files.size
+			} };
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				type: "file",
+				size: content.length
+			} };
+		},
+		async list(path) {
+			if (norm(path) !== "/") throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: [...files.keys()].sort().map((key) => ({
+				path: key,
+				type: "file",
+				size: files.get(key)?.length ?? 0
+			})) };
+		},
+		async read(path) {
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new _aigne_afs.AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				content
+			} };
+		},
+		async write(path, payload) {
+			const key = assertSafeKey(path);
+			const next = typeof payload?.content === "string" ? payload.content : payload?.content ? new TextDecoder("utf-8", { fatal: false }).decode(payload.content) : "";
+			files.set(key, next);
+			return { data: {
+				path: key,
+				bytesWritten: next.length
+			} };
+		},
+		async delete(path) {
+			const key = assertSafeKey(path);
+			return { data: {
+				path: key,
+				deleted: files.delete(key)
+			} };
+		}
+	};
+}
+
+//#endregion
+exports.createBlockletStateProvider = createBlockletStateProvider;
+exports.createSessionMessagesProvider = createSessionMessagesProvider;
+exports.createSessionMetaProvider = createSessionMetaProvider;
+exports.createSessionStateProvider = createSessionStateProvider;

package/dist/session/session-dir-providers.d.cts

@@ -0,0 +1,32 @@
+import { AFSModule } from "@aigne/afs";
+
+//#region src/session/session-dir-providers.d.ts
+/**
+ * Readonly single-file provider exposing daemon-authored session metadata as
+ * `/` (the mount root). Writes rejected at every op. Content updates happen
+ * out-of-band via BlockletManager.updateSessionMeta (unmount → rebuild →
+ * remount) so there's no backdoor writer path.
+ */
+declare function createSessionMetaProvider(name: string, meta: Record<string, unknown>): AFSModule;
+/**
+ * Append-only messages provider. Filenames must match `/^\d{6}\.json$/`,
+ * writes to existing keys are rejected, and path segments containing `..`
+ * are rejected (path-traversal guard; AFS should reject these upstream, but
+ * this provider fails closed regardless).
+ */
+declare function createSessionMessagesProvider(name: string): AFSModule;
+/**
+ * Single-file readwrite provider for `state.json`. Overwrites are allowed
+ * (semantics: atomic snapshot replace). Reads before first write throw
+ * AFSNotFoundError so daemons can distinguish "never written" from "empty".
+ */
+declare function createSessionStateProvider(name: string): AFSModule;
+/**
+ * Free readwrite KV for blocklet-authored state. Flat namespace (no nested
+ * directories). Keys must not contain `..` or `/` so there's no traversal
+ * surface even if an upstream guard is misconfigured.
+ */
+declare function createBlockletStateProvider(name: string): AFSModule;
+//#endregion
+export { createBlockletStateProvider, createSessionMessagesProvider, createSessionMetaProvider, createSessionStateProvider };
+//# sourceMappingURL=session-dir-providers.d.cts.map

package/dist/session/session-dir-providers.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-dir-providers.d.cts","names":[],"sources":["../../src/session/session-dir-providers.ts"],"mappings":";;;;;;;AAsIA;;iBA5GgB,yBAAA,CAA0B,IAAA,UAAc,IAAA,EAAM,MAAA,oBAA0B,SAAA;;;AAkKxF;;;;iBAxHgB,6BAAA,CAA8B,IAAA,WAAe,SAAA;;;;;;iBAkE7C,0BAAA,CAA2B,IAAA,WAAe,SAAA;;;;;;iBAsD1C,2BAAA,CAA4B,IAAA,WAAe,SAAA"}

package/dist/session/session-dir-providers.d.mts

@@ -0,0 +1,32 @@
+import { AFSModule } from "@aigne/afs";
+
+//#region src/session/session-dir-providers.d.ts
+/**
+ * Readonly single-file provider exposing daemon-authored session metadata as
+ * `/` (the mount root). Writes rejected at every op. Content updates happen
+ * out-of-band via BlockletManager.updateSessionMeta (unmount → rebuild →
+ * remount) so there's no backdoor writer path.
+ */
+declare function createSessionMetaProvider(name: string, meta: Record<string, unknown>): AFSModule;
+/**
+ * Append-only messages provider. Filenames must match `/^\d{6}\.json$/`,
+ * writes to existing keys are rejected, and path segments containing `..`
+ * are rejected (path-traversal guard; AFS should reject these upstream, but
+ * this provider fails closed regardless).
+ */
+declare function createSessionMessagesProvider(name: string): AFSModule;
+/**
+ * Single-file readwrite provider for `state.json`. Overwrites are allowed
+ * (semantics: atomic snapshot replace). Reads before first write throw
+ * AFSNotFoundError so daemons can distinguish "never written" from "empty".
+ */
+declare function createSessionStateProvider(name: string): AFSModule;
+/**
+ * Free readwrite KV for blocklet-authored state. Flat namespace (no nested
+ * directories). Keys must not contain `..` or `/` so there's no traversal
+ * surface even if an upstream guard is misconfigured.
+ */
+declare function createBlockletStateProvider(name: string): AFSModule;
+//#endregion
+export { createBlockletStateProvider, createSessionMessagesProvider, createSessionMetaProvider, createSessionStateProvider };
+//# sourceMappingURL=session-dir-providers.d.mts.map

package/dist/session/session-dir-providers.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-dir-providers.d.mts","names":[],"sources":["../../src/session/session-dir-providers.ts"],"mappings":";;;;;;;AAsIA;;iBA5GgB,yBAAA,CAA0B,IAAA,UAAc,IAAA,EAAM,MAAA,oBAA0B,SAAA;;;AAkKxF;;;;iBAxHgB,6BAAA,CAA8B,IAAA,WAAe,SAAA;;;;;;iBAkE7C,0BAAA,CAA2B,IAAA,WAAe,SAAA;;;;;;iBAsD1C,2BAAA,CAA4B,IAAA,WAAe,SAAA"}

package/dist/session/session-dir-providers.mjs

@@ -0,0 +1,252 @@
+import { AFSAccessModeError, AFSNotFoundError, AFSPathError } from "@aigne/afs";
+
+//#region src/session/session-dir-providers.ts
+/**
+* Session dir sub-providers — factory functions that compose the per-session
+* directory schema documented in S.3:
+*
+*   instance/sessions/<id>/meta.json         readonly (daemon-driven)
+*   instance/sessions/<id>/messages/         append-only (NNNNNN.json)
+*   instance/sessions/<id>/state.json        atomic readwrite
+*   instance/sessions/<id>/blocklet-state/   free readwrite KV
+*   instance/sessions/<id>/tmp/              session scratch
+*
+* Each factory returns a small in-memory AFSModule. Persistence (if/when
+* added) is an implementation detail swap — the surface stays identical.
+*/
+const MESSAGE_FILENAME_RE = /^\d{6}\.json$/;
+const norm = (p) => p.startsWith("/") ? p : `/${p}`;
+/**
+* Readonly single-file provider exposing daemon-authored session metadata as
+* `/` (the mount root). Writes rejected at every op. Content updates happen
+* out-of-band via BlockletManager.updateSessionMeta (unmount → rebuild →
+* remount) so there's no backdoor writer path.
+*/
+function createSessionMetaProvider(name, meta) {
+	const content = JSON.stringify(meta, null, 2);
+	const assertRoot = (p) => {
+		if (norm(p) !== "/") throw new AFSNotFoundError(p);
+	};
+	return {
+		name,
+		accessMode: "readonly",
+		async stat(path) {
+			assertRoot(path);
+			return { data: {
+				path: "/",
+				type: "file",
+				size: content.length,
+				mimeType: "application/json"
+			} };
+		},
+		async list(path) {
+			assertRoot(path);
+			return { data: [] };
+		},
+		async read(path) {
+			assertRoot(path);
+			return { data: {
+				path: "/",
+				content,
+				mimeType: "application/json"
+			} };
+		},
+		async write() {
+			throw new AFSAccessModeError("readonly", "write");
+		},
+		async delete() {
+			throw new AFSAccessModeError("readonly", "delete");
+		}
+	};
+}
+/**
+* Append-only messages provider. Filenames must match `/^\d{6}\.json$/`,
+* writes to existing keys are rejected, and path segments containing `..`
+* are rejected (path-traversal guard; AFS should reject these upstream, but
+* this provider fails closed regardless).
+*/
+function createSessionMessagesProvider(name) {
+	const files = /* @__PURE__ */ new Map();
+	const assertSafeKey = (path) => {
+		const p = norm(path);
+		if (p === "/") return p;
+		const rel = p.slice(1);
+		if (rel.includes("..") || rel.includes("/")) throw new AFSPathError(`Invalid messages path: ${path}`, path);
+		if (!MESSAGE_FILENAME_RE.test(rel)) throw new AFSPathError(`messages filename must match /^\\d{6}\\.json$/ (got ${JSON.stringify(rel)})`, path);
+		return p;
+	};
+	return {
+		name,
+		accessMode: "readwrite",
+		async stat(path) {
+			if (norm(path) === "/") return { data: {
+				path: "/",
+				type: "directory",
+				childrenCount: files.size
+			} };
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				type: "file",
+				size: content.length
+			} };
+		},
+		async list(path) {
+			if (norm(path) !== "/") throw new AFSNotFoundError(path);
+			return { data: [...files.keys()].sort().map((key) => ({
+				path: key,
+				type: "file",
+				size: files.get(key)?.length ?? 0
+			})) };
+		},
+		async read(path) {
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				content,
+				mimeType: "application/json"
+			} };
+		},
+		async write(path, payload) {
+			const key = assertSafeKey(path);
+			if (files.has(key)) throw new AFSAccessModeError("append-only", "overwrite");
+			const content = typeof payload?.content === "string" ? payload.content : payload?.content ? new TextDecoder("utf-8", { fatal: false }).decode(payload.content) : "";
+			files.set(key, content);
+			return { data: {
+				path: key,
+				bytesWritten: content.length
+			} };
+		}
+	};
+}
+/**
+* Single-file readwrite provider for `state.json`. Overwrites are allowed
+* (semantics: atomic snapshot replace). Reads before first write throw
+* AFSNotFoundError so daemons can distinguish "never written" from "empty".
+*/
+function createSessionStateProvider(name) {
+	let content;
+	const assertRoot = (p) => {
+		if (norm(p) !== "/") throw new AFSNotFoundError(p);
+	};
+	return {
+		name,
+		accessMode: "readwrite",
+		async stat(path) {
+			assertRoot(path);
+			if (content === void 0) throw new AFSNotFoundError(path);
+			return { data: {
+				path: "/",
+				type: "file",
+				size: content.length,
+				mimeType: "application/json"
+			} };
+		},
+		async list(path) {
+			assertRoot(path);
+			return { data: [] };
+		},
+		async read(path) {
+			assertRoot(path);
+			if (content === void 0) throw new AFSNotFoundError(path);
+			return { data: {
+				path: "/",
+				content,
+				mimeType: "application/json"
+			} };
+		},
+		async write(path, payload) {
+			assertRoot(path);
+			const next = typeof payload?.content === "string" ? payload.content : payload?.content ? new TextDecoder("utf-8", { fatal: false }).decode(payload.content) : "";
+			content = next;
+			return { data: {
+				path: "/",
+				bytesWritten: next.length
+			} };
+		},
+		async delete(path) {
+			assertRoot(path);
+			const existed = content !== void 0;
+			content = void 0;
+			return { data: {
+				path: "/",
+				deleted: existed
+			} };
+		}
+	};
+}
+/**
+* Free readwrite KV for blocklet-authored state. Flat namespace (no nested
+* directories). Keys must not contain `..` or `/` so there's no traversal
+* surface even if an upstream guard is misconfigured.
+*/
+function createBlockletStateProvider(name) {
+	const files = /* @__PURE__ */ new Map();
+	const assertSafeKey = (path) => {
+		const p = norm(path);
+		if (p === "/") return p;
+		const rel = p.slice(1);
+		if (rel.length === 0 || rel.includes("..") || rel.includes("/")) throw new AFSPathError(`Invalid blocklet-state path: ${path}`, path);
+		return p;
+	};
+	return {
+		name,
+		accessMode: "readwrite",
+		async stat(path) {
+			if (norm(path) === "/") return { data: {
+				path: "/",
+				type: "directory",
+				childrenCount: files.size
+			} };
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				type: "file",
+				size: content.length
+			} };
+		},
+		async list(path) {
+			if (norm(path) !== "/") throw new AFSNotFoundError(path);
+			return { data: [...files.keys()].sort().map((key) => ({
+				path: key,
+				type: "file",
+				size: files.get(key)?.length ?? 0
+			})) };
+		},
+		async read(path) {
+			const key = assertSafeKey(path);
+			const content = files.get(key);
+			if (content === void 0) throw new AFSNotFoundError(path);
+			return { data: {
+				path: key,
+				content
+			} };
+		},
+		async write(path, payload) {
+			const key = assertSafeKey(path);
+			const next = typeof payload?.content === "string" ? payload.content : payload?.content ? new TextDecoder("utf-8", { fatal: false }).decode(payload.content) : "";
+			files.set(key, next);
+			return { data: {
+				path: key,
+				bytesWritten: next.length
+			} };
+		},
+		async delete(path) {
+			const key = assertSafeKey(path);
+			return { data: {
+				path: key,
+				deleted: files.delete(key)
+			} };
+		}
+	};
+}
+
+//#endregion
+export { createBlockletStateProvider, createSessionMessagesProvider, createSessionMetaProvider, createSessionStateProvider };
+//# sourceMappingURL=session-dir-providers.mjs.map

package/dist/session/session-dir-providers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-dir-providers.mjs","names":[],"sources":["../../src/session/session-dir-providers.ts"],"sourcesContent":["/**\n * Session dir sub-providers — factory functions that compose the per-session\n * directory schema documented in S.3:\n *\n *   instance/sessions/<id>/meta.json         readonly (daemon-driven)\n *   instance/sessions/<id>/messages/         append-only (NNNNNN.json)\n *   instance/sessions/<id>/state.json        atomic readwrite\n *   instance/sessions/<id>/blocklet-state/   free readwrite KV\n *   instance/sessions/<id>/tmp/              session scratch\n *\n * Each factory returns a small in-memory AFSModule. Persistence (if/when\n * added) is an implementation detail swap — the surface stays identical.\n */\n\nimport { AFSAccessModeError, type AFSModule, AFSNotFoundError, AFSPathError } from \"@aigne/afs\";\n\nconst MESSAGE_FILENAME_RE = /^\\d{6}\\.json$/;\n\nconst norm = (p: string) => (p.startsWith(\"/\") ? p : `/${p}`);\n\n/**\n * Readonly single-file provider exposing daemon-authored session metadata as\n * `/` (the mount root). Writes rejected at every op. Content updates happen\n * out-of-band via BlockletManager.updateSessionMeta (unmount → rebuild →\n * remount) so there's no backdoor writer path.\n */\nexport function createSessionMetaProvider(name: string, meta: Record<string, unknown>): AFSModule {\n  const content = JSON.stringify(meta, null, 2);\n  const assertRoot = (p: string) => {\n    if (norm(p) !== \"/\") throw new AFSNotFoundError(p);\n  };\n  return {\n    name,\n    accessMode: \"readonly\",\n    async stat(path: string) {\n      assertRoot(path);\n      return {\n        data: {\n          path: \"/\",\n          type: \"file\" as const,\n          size: content.length,\n          mimeType: \"application/json\",\n        },\n      };\n    },\n    async list(path: string) {\n      assertRoot(path);\n      return { data: [] };\n    },\n    async read(path: string) {\n      assertRoot(path);\n      return { data: { path: \"/\", content, mimeType: \"application/json\" } };\n    },\n    async write() {\n      throw new AFSAccessModeError(\"readonly\", \"write\");\n    },\n    async delete() {\n      throw new AFSAccessModeError(\"readonly\", \"delete\");\n    },\n  } as unknown as AFSModule;\n}\n\n/**\n * Append-only messages provider. Filenames must match `/^\\d{6}\\.json$/`,\n * writes to existing keys are rejected, and path segments containing `..`\n * are rejected (path-traversal guard; AFS should reject these upstream, but\n * this provider fails closed regardless).\n */\nexport function createSessionMessagesProvider(name: string): AFSModule {\n  const files = new Map<string, string>();\n  const assertSafeKey = (path: string): string => {\n    const p = norm(path);\n    if (p === \"/\") return p;\n    const rel = p.slice(1);\n    if (rel.includes(\"..\") || rel.includes(\"/\")) {\n      throw new AFSPathError(`Invalid messages path: ${path}`, path);\n    }\n    if (!MESSAGE_FILENAME_RE.test(rel)) {\n      throw new AFSPathError(\n        `messages filename must match /^\\\\d{6}\\\\.json$/ (got ${JSON.stringify(rel)})`,\n        path,\n      );\n    }\n    return p;\n  };\n  return {\n    name,\n    accessMode: \"readwrite\" as const,\n    async stat(path: string) {\n      const p = norm(path);\n      if (p === \"/\") {\n        return { data: { path: \"/\", type: \"directory\" as const, childrenCount: files.size } };\n      }\n      const key = assertSafeKey(path);\n      const content = files.get(key);\n      if (content === undefined) throw new AFSNotFoundError(path);\n      return { data: { path: key, type: \"file\" as const, size: content.length } };\n    },\n    async list(path: string) {\n      const p = norm(path);\n      if (p !== \"/\") throw new AFSNotFoundError(path);\n      const entries = [...files.keys()]\n        .sort()\n        .map((key) => ({ path: key, type: \"file\" as const, size: files.get(key)?.length ?? 0 }));\n      return { data: entries };\n    },\n    async read(path: string) {\n      const key = assertSafeKey(path);\n      const content = files.get(key);\n      if (content === undefined) throw new AFSNotFoundError(path);\n      return { data: { path: key, content, mimeType: \"application/json\" } };\n    },\n    async write(path: string, payload: { content?: string | Uint8Array }) {\n      const key = assertSafeKey(path);\n      if (files.has(key)) {\n        throw new AFSAccessModeError(\"append-only\", \"overwrite\");\n      }\n      const content =\n        typeof payload?.content === \"string\"\n          ? payload.content\n          : payload?.content\n            ? new TextDecoder(\"utf-8\", { fatal: false }).decode(payload.content)\n            : \"\";\n      files.set(key, content);\n      return { data: { path: key, bytesWritten: content.length } };\n    },\n  } as unknown as AFSModule;\n}\n\n/**\n * Single-file readwrite provider for `state.json`. Overwrites are allowed\n * (semantics: atomic snapshot replace). Reads before first write throw\n * AFSNotFoundError so daemons can distinguish \"never written\" from \"empty\".\n */\nexport function createSessionStateProvider(name: string): AFSModule {\n  let content: string | undefined;\n  const assertRoot = (p: string) => {\n    if (norm(p) !== \"/\") throw new AFSNotFoundError(p);\n  };\n  return {\n    name,\n    accessMode: \"readwrite\" as const,\n    async stat(path: string) {\n      assertRoot(path);\n      if (content === undefined) throw new AFSNotFoundError(path);\n      return {\n        data: {\n          path: \"/\",\n          type: \"file\" as const,\n          size: content.length,\n          mimeType: \"application/json\",\n        },\n      };\n    },\n    async list(path: string) {\n      assertRoot(path);\n      return { data: [] };\n    },\n    async read(path: string) {\n      assertRoot(path);\n      if (content === undefined) throw new AFSNotFoundError(path);\n      return { data: { path: \"/\", content, mimeType: \"application/json\" } };\n    },\n    async write(path: string, payload: { content?: string | Uint8Array }) {\n      assertRoot(path);\n      const next =\n        typeof payload?.content === \"string\"\n          ? payload.content\n          : payload?.content\n            ? new TextDecoder(\"utf-8\", { fatal: false }).decode(payload.content)\n            : \"\";\n      content = next;\n      return { data: { path: \"/\", bytesWritten: next.length } };\n    },\n    async delete(path: string) {\n      assertRoot(path);\n      const existed = content !== undefined;\n      content = undefined;\n      return { data: { path: \"/\", deleted: existed } };\n    },\n  } as unknown as AFSModule;\n}\n\n/**\n * Free readwrite KV for blocklet-authored state. Flat namespace (no nested\n * directories). Keys must not contain `..` or `/` so there's no traversal\n * surface even if an upstream guard is misconfigured.\n */\nexport function createBlockletStateProvider(name: string): AFSModule {\n  const files = new Map<string, string>();\n  const assertSafeKey = (path: string): string => {\n    const p = norm(path);\n    if (p === \"/\") return p;\n    const rel = p.slice(1);\n    if (rel.length === 0 || rel.includes(\"..\") || rel.includes(\"/\")) {\n      throw new AFSPathError(`Invalid blocklet-state path: ${path}`, path);\n    }\n    return p;\n  };\n  return {\n    name,\n    accessMode: \"readwrite\" as const,\n    async stat(path: string) {\n      const p = norm(path);\n      if (p === \"/\") {\n        return { data: { path: \"/\", type: \"directory\" as const, childrenCount: files.size } };\n      }\n      const key = assertSafeKey(path);\n      const content = files.get(key);\n      if (content === undefined) throw new AFSNotFoundError(path);\n      return { data: { path: key, type: \"file\" as const, size: content.length } };\n    },\n    async list(path: string) {\n      const p = norm(path);\n      if (p !== \"/\") throw new AFSNotFoundError(path);\n      return {\n        data: [...files.keys()].sort().map((key) => ({\n          path: key,\n          type: \"file\" as const,\n          size: files.get(key)?.length ?? 0,\n        })),\n      };\n    },\n    async read(path: string) {\n      const key = assertSafeKey(path);\n      const content = files.get(key);\n      if (content === undefined) throw new AFSNotFoundError(path);\n      return { data: { path: key, content } };\n    },\n    async write(path: string, payload: { content?: string | Uint8Array }) {\n      const key = assertSafeKey(path);\n      const next =\n        typeof payload?.content === \"string\"\n          ? payload.content\n          : payload?.content\n            ? new TextDecoder(\"utf-8\", { fatal: false }).decode(payload.content)\n            : \"\";\n      files.set(key, next);\n      return { data: { path: key, bytesWritten: next.length } };\n    },\n    async delete(path: string) {\n      const key = assertSafeKey(path);\n      const existed = files.delete(key);\n      return { data: { path: key, deleted: existed } };\n    },\n  } as unknown as AFSModule;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,MAAM,sBAAsB;AAE5B,MAAM,QAAQ,MAAe,EAAE,WAAW,IAAI,GAAG,IAAI,IAAI;;;;;;;AAQzD,SAAgB,0BAA0B,MAAc,MAA0C;CAChG,MAAM,UAAU,KAAK,UAAU,MAAM,MAAM,EAAE;CAC7C,MAAM,cAAc,MAAc;AAChC,MAAI,KAAK,EAAE,KAAK,IAAK,OAAM,IAAI,iBAAiB,EAAE;;AAEpD,QAAO;EACL;EACA,YAAY;EACZ,MAAM,KAAK,MAAc;AACvB,cAAW,KAAK;AAChB,UAAO,EACL,MAAM;IACJ,MAAM;IACN,MAAM;IACN,MAAM,QAAQ;IACd,UAAU;IACX,EACF;;EAEH,MAAM,KAAK,MAAc;AACvB,cAAW,KAAK;AAChB,UAAO,EAAE,MAAM,EAAE,EAAE;;EAErB,MAAM,KAAK,MAAc;AACvB,cAAW,KAAK;AAChB,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK;IAAS,UAAU;IAAoB,EAAE;;EAEvE,MAAM,QAAQ;AACZ,SAAM,IAAI,mBAAmB,YAAY,QAAQ;;EAEnD,MAAM,SAAS;AACb,SAAM,IAAI,mBAAmB,YAAY,SAAS;;EAErD;;;;;;;;AASH,SAAgB,8BAA8B,MAAyB;CACrE,MAAM,wBAAQ,IAAI,KAAqB;CACvC,MAAM,iBAAiB,SAAyB;EAC9C,MAAM,IAAI,KAAK,KAAK;AACpB,MAAI,MAAM,IAAK,QAAO;EACtB,MAAM,MAAM,EAAE,MAAM,EAAE;AACtB,MAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,CACzC,OAAM,IAAI,aAAa,0BAA0B,QAAQ,KAAK;AAEhE,MAAI,CAAC,oBAAoB,KAAK,IAAI,CAChC,OAAM,IAAI,aACR,uDAAuD,KAAK,UAAU,IAAI,CAAC,IAC3E,KACD;AAEH,SAAO;;AAET,QAAO;EACL;EACA,YAAY;EACZ,MAAM,KAAK,MAAc;AAEvB,OADU,KAAK,KAAK,KACV,IACR,QAAO,EAAE,MAAM;IAAE,MAAM;IAAK,MAAM;IAAsB,eAAe,MAAM;IAAM,EAAE;GAEvF,MAAM,MAAM,cAAc,KAAK;GAC/B,MAAM,UAAU,MAAM,IAAI,IAAI;AAC9B,OAAI,YAAY,OAAW,OAAM,IAAI,iBAAiB,KAAK;AAC3D,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK,MAAM;IAAiB,MAAM,QAAQ;IAAQ,EAAE;;EAE7E,MAAM,KAAK,MAAc;AAEvB,OADU,KAAK,KAAK,KACV,IAAK,OAAM,IAAI,iBAAiB,KAAK;AAI/C,UAAO,EAAE,MAHO,CAAC,GAAG,MAAM,MAAM,CAAC,CAC9B,MAAM,CACN,KAAK,SAAS;IAAE,MAAM;IAAK,MAAM;IAAiB,MAAM,MAAM,IAAI,IAAI,EAAE,UAAU;IAAG,EAAE,EAClE;;EAE1B,MAAM,KAAK,MAAc;GACvB,MAAM,MAAM,cAAc,KAAK;GAC/B,MAAM,UAAU,MAAM,IAAI,IAAI;AAC9B,OAAI,YAAY,OAAW,OAAM,IAAI,iBAAiB,KAAK;AAC3D,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK;IAAS,UAAU;IAAoB,EAAE;;EAEvE,MAAM,MAAM,MAAc,SAA4C;GACpE,MAAM,MAAM,cAAc,KAAK;AAC/B,OAAI,MAAM,IAAI,IAAI,CAChB,OAAM,IAAI,mBAAmB,eAAe,YAAY;GAE1D,MAAM,UACJ,OAAO,SAAS,YAAY,WACxB,QAAQ,UACR,SAAS,UACP,IAAI,YAAY,SAAS,EAAE,OAAO,OAAO,CAAC,CAAC,OAAO,QAAQ,QAAQ,GAClE;AACR,SAAM,IAAI,KAAK,QAAQ;AACvB,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK,cAAc,QAAQ;IAAQ,EAAE;;EAE/D;;;;;;;AAQH,SAAgB,2BAA2B,MAAyB;CAClE,IAAI;CACJ,MAAM,cAAc,MAAc;AAChC,MAAI,KAAK,EAAE,KAAK,IAAK,OAAM,IAAI,iBAAiB,EAAE;;AAEpD,QAAO;EACL;EACA,YAAY;EACZ,MAAM,KAAK,MAAc;AACvB,cAAW,KAAK;AAChB,OAAI,YAAY,OAAW,OAAM,IAAI,iBAAiB,KAAK;AAC3D,UAAO,EACL,MAAM;IACJ,MAAM;IACN,MAAM;IACN,MAAM,QAAQ;IACd,UAAU;IACX,EACF;;EAEH,MAAM,KAAK,MAAc;AACvB,cAAW,KAAK;AAChB,UAAO,EAAE,MAAM,EAAE,EAAE;;EAErB,MAAM,KAAK,MAAc;AACvB,cAAW,KAAK;AAChB,OAAI,YAAY,OAAW,OAAM,IAAI,iBAAiB,KAAK;AAC3D,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK;IAAS,UAAU;IAAoB,EAAE;;EAEvE,MAAM,MAAM,MAAc,SAA4C;AACpE,cAAW,KAAK;GAChB,MAAM,OACJ,OAAO,SAAS,YAAY,WACxB,QAAQ,UACR,SAAS,UACP,IAAI,YAAY,SAAS,EAAE,OAAO,OAAO,CAAC,CAAC,OAAO,QAAQ,QAAQ,GAClE;AACR,aAAU;AACV,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK,cAAc,KAAK;IAAQ,EAAE;;EAE3D,MAAM,OAAO,MAAc;AACzB,cAAW,KAAK;GAChB,MAAM,UAAU,YAAY;AAC5B,aAAU;AACV,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK,SAAS;IAAS,EAAE;;EAEnD;;;;;;;AAQH,SAAgB,4BAA4B,MAAyB;CACnE,MAAM,wBAAQ,IAAI,KAAqB;CACvC,MAAM,iBAAiB,SAAyB;EAC9C,MAAM,IAAI,KAAK,KAAK;AACpB,MAAI,MAAM,IAAK,QAAO;EACtB,MAAM,MAAM,EAAE,MAAM,EAAE;AACtB,MAAI,IAAI,WAAW,KAAK,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,CAC7D,OAAM,IAAI,aAAa,gCAAgC,QAAQ,KAAK;AAEtE,SAAO;;AAET,QAAO;EACL;EACA,YAAY;EACZ,MAAM,KAAK,MAAc;AAEvB,OADU,KAAK,KAAK,KACV,IACR,QAAO,EAAE,MAAM;IAAE,MAAM;IAAK,MAAM;IAAsB,eAAe,MAAM;IAAM,EAAE;GAEvF,MAAM,MAAM,cAAc,KAAK;GAC/B,MAAM,UAAU,MAAM,IAAI,IAAI;AAC9B,OAAI,YAAY,OAAW,OAAM,IAAI,iBAAiB,KAAK;AAC3D,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK,MAAM;IAAiB,MAAM,QAAQ;IAAQ,EAAE;;EAE7E,MAAM,KAAK,MAAc;AAEvB,OADU,KAAK,KAAK,KACV,IAAK,OAAM,IAAI,iBAAiB,KAAK;AAC/C,UAAO,EACL,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS;IAC3C,MAAM;IACN,MAAM;IACN,MAAM,MAAM,IAAI,IAAI,EAAE,UAAU;IACjC,EAAE,EACJ;;EAEH,MAAM,KAAK,MAAc;GACvB,MAAM,MAAM,cAAc,KAAK;GAC/B,MAAM,UAAU,MAAM,IAAI,IAAI;AAC9B,OAAI,YAAY,OAAW,OAAM,IAAI,iBAAiB,KAAK;AAC3D,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK;IAAS,EAAE;;EAEzC,MAAM,MAAM,MAAc,SAA4C;GACpE,MAAM,MAAM,cAAc,KAAK;GAC/B,MAAM,OACJ,OAAO,SAAS,YAAY,WACxB,QAAQ,UACR,SAAS,UACP,IAAI,YAAY,SAAS,EAAE,OAAO,OAAO,CAAC,CAAC,OAAO,QAAQ,QAAQ,GAClE;AACR,SAAM,IAAI,KAAK,KAAK;AACpB,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK,cAAc,KAAK;IAAQ,EAAE;;EAE3D,MAAM,OAAO,MAAc;GACzB,MAAM,MAAM,cAAc,KAAK;AAE/B,UAAO,EAAE,MAAM;IAAE,MAAM;IAAK,SADZ,MAAM,OAAO,IAAI;IACa,EAAE;;EAEnD"}

package/dist/session/session-id.cjs

@@ -0,0 +1,20 @@
+
+//#region src/session/session-id.ts
+/**
+* Shared session-id validator. A session id keys both the per-session `/tmp`
+* provider and the `${blockletName}<NUL>${sessionId}` caches, and is
+* interpolated into physical sub-paths (`/sessions/<sid>/tmp`).
+* Rejecting `..`, path separators, and the NUL cache-key separator keeps those
+* uses safe. Every runtime (Node daemon, CF DO) and every consumer
+* (BlockletManager, session-tmp backend) MUST share this one predicate so
+* they can't drift — historically the afs-loader guard checked a space char
+* while BlockletManager checked NUL, an inconsistency this consolidation ends.
+*/
+function isValidSessionId(id) {
+	if (typeof id !== "string" || id.length === 0) return false;
+	if (id.includes("..") || id.includes("/") || id.includes("\\")) return false;
+	return !id.includes("\0");
+}
+
+//#endregion
+exports.isValidSessionId = isValidSessionId;

package/dist/session/session-id.d.cts

@@ -0,0 +1,15 @@
+//#region src/session/session-id.d.ts
+/**
+ * Shared session-id validator. A session id keys both the per-session `/tmp`
+ * provider and the `${blockletName}<NUL>${sessionId}` caches, and is
+ * interpolated into physical sub-paths (`/sessions/<sid>/tmp`).
+ * Rejecting `..`, path separators, and the NUL cache-key separator keeps those
+ * uses safe. Every runtime (Node daemon, CF DO) and every consumer
+ * (BlockletManager, session-tmp backend) MUST share this one predicate so
+ * they can't drift — historically the afs-loader guard checked a space char
+ * while BlockletManager checked NUL, an inconsistency this consolidation ends.
+ */
+declare function isValidSessionId(id: unknown): id is string;
+//#endregion
+export { isValidSessionId };
+//# sourceMappingURL=session-id.d.cts.map

package/dist/session/session-id.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.d.cts","names":[],"sources":["../../src/session/session-id.ts"],"mappings":";;AAUA;;;;;;;;;iBAAgB,gBAAA,CAAiB,EAAA,YAAc,EAAA"}

package/dist/session/session-id.d.mts

@@ -0,0 +1,15 @@
+//#region src/session/session-id.d.ts
+/**
+ * Shared session-id validator. A session id keys both the per-session `/tmp`
+ * provider and the `${blockletName}<NUL>${sessionId}` caches, and is
+ * interpolated into physical sub-paths (`/sessions/<sid>/tmp`).
+ * Rejecting `..`, path separators, and the NUL cache-key separator keeps those
+ * uses safe. Every runtime (Node daemon, CF DO) and every consumer
+ * (BlockletManager, session-tmp backend) MUST share this one predicate so
+ * they can't drift — historically the afs-loader guard checked a space char
+ * while BlockletManager checked NUL, an inconsistency this consolidation ends.
+ */
+declare function isValidSessionId(id: unknown): id is string;
+//#endregion
+export { isValidSessionId };
+//# sourceMappingURL=session-id.d.mts.map

package/dist/session/session-id.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.d.mts","names":[],"sources":["../../src/session/session-id.ts"],"mappings":";;AAUA;;;;;;;;;iBAAgB,gBAAA,CAAiB,EAAA,YAAc,EAAA"}