@cuna_labs/cli 0.1.0

package/dist/workspace/lifecycle.js

@@ -0,0 +1,94 @@
+import { createHash } from "node:crypto";
+import { lstat, rmdir, unlink } from "node:fs/promises";
+import { relative, resolve, sep } from "node:path";
+import { assertLexicallyInsideRoot } from "./paths.js";
+import { workspaceError } from "./errors.js";
+export function exportSafeLocalState(input) {
+    validateInventory(input.stateRoot, input.workspaceId, input.records);
+    const records = Object.freeze(input.records
+        .map((record) => Object.freeze({
+        dataId: record.dataId,
+        class: record.class,
+        relativeLocation: relative(resolve(input.stateRoot), resolve(record.absoluteLocation)).split(sep).join("/"),
+        policyVersion: record.policyVersion,
+        retentionDeadline: record.retentionDeadline,
+    }))
+        .sort((left, right) => left.dataId.localeCompare(right.dataId)));
+    const body = {
+        schemaVersion: 1,
+        workspaceId: input.workspaceId,
+        generation: input.generation,
+        createdAt: (input.now ?? new Date()).toISOString(),
+        records,
+    };
+    return Object.freeze({ ...body, digest: digest("cuna-local-export-v1", body) });
+}
+export async function deleteLocalState(input) {
+    if (!input.authorized) {
+        throw workspaceError("deletion_forbidden", "Local state deletion is not authorized.", "policy", "authorization_required");
+    }
+    validateInventory(input.stateRoot, input.workspaceId, input.records);
+    const now = input.now ?? new Date();
+    const inventoryDigest = digest("cuna-local-inventory-v1", input.records.map((record) => ({
+        class: record.class,
+        dataId: record.dataId,
+        location: relative(resolve(input.stateRoot), resolve(record.absoluteLocation)).split(sep).join("/"),
+        policyVersion: record.policyVersion,
+    })).sort((left, right) => left.dataId.localeCompare(right.dataId)));
+    const held = input.records.filter((record) => record.legalHold !== undefined && Date.parse(record.legalHold.expiresAt) > now.getTime());
+    if (held.length > 0) {
+        return deletionReceipt(input, inventoryDigest, [], held.map((record) => record.dataId), "held", now);
+    }
+    const completed = [];
+    const pending = [];
+    for (const record of input.records) {
+        try {
+            const path = assertLexicallyInsideRoot(input.stateRoot, record.absoluteLocation);
+            const metadata = await lstat(path);
+            if (metadata.isDirectory() && !metadata.isSymbolicLink())
+                await rmdir(path);
+            else
+                await unlink(path);
+            completed.push(record.dataId);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                completed.push(record.dataId);
+            else
+                pending.push(record.dataId);
+        }
+    }
+    return deletionReceipt(input, inventoryDigest, completed, pending, pending.length === 0 ? "deleted" : "partially_deleted", now);
+}
+function deletionReceipt(input, inventoryDigest, completedDataIds, pendingDataIds, state, now) {
+    return Object.freeze({
+        requestId: input.requestId,
+        workspaceId: input.workspaceId,
+        inventoryDigest,
+        completedDataIds: Object.freeze([...completedDataIds].sort()),
+        pendingDataIds: Object.freeze([...pendingDataIds].sort()),
+        state,
+        observedAt: now.toISOString(),
+        evidenceExpiresAt: new Date(now.getTime() + (input.evidenceTtlMs ?? 300_000)).toISOString(),
+    });
+}
+function validateInventory(stateRoot, workspaceId, records) {
+    const ids = new Set();
+    for (const record of records) {
+        if (record.workspaceId !== workspaceId) {
+            throw workspaceError("lifecycle_identity", "Local lifecycle inventory crosses workspace identity.", "policy", "workspace_mismatch");
+        }
+        if (ids.has(record.dataId)) {
+            throw workspaceError("lifecycle_inventory", "Local lifecycle inventory contains duplicate data IDs.", "integrity", "duplicate_data_id");
+        }
+        ids.add(record.dataId);
+        assertLexicallyInsideRoot(stateRoot, record.absoluteLocation);
+        if (!Number.isFinite(Date.parse(record.retentionDeadline))) {
+            throw workspaceError("lifecycle_inventory", "Local lifecycle retention metadata is malformed.", "integrity", "invalid_deadline");
+        }
+    }
+}
+function digest(domain, value) {
+    return createHash("sha256").update(domain).update("\0").update(JSON.stringify(value)).digest("hex");
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/workspace/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/workspace/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA6C7C,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;SACxC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3G,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,CAAU;QACzB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QAClD,OAAO;KACR,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAQtC;IACC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,cAAc,CAAC,oBAAoB,EAAE,yCAAyC,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IAC5H,CAAC;IACD,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,eAAe,GAAG,MAAM,CAAC,yBAAyB,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvF,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACnG,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;;gBACvE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;;gBACjF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CACpB,KAAK,EACL,eAAe,EACf,SAAS,EACT,OAAO,EACP,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,EACtD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,KAIC,EACD,eAAuB,EACvB,gBAAmC,EACnC,cAAiC,EACjC,KAA0B,EAC1B,GAAS;IAET,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe;QACf,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,KAAK;QACL,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;QAC7B,iBAAiB,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;KAC5F,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,WAAmB,EAAE,OAAmC;IACpG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACvC,MAAM,cAAc,CAAC,oBAAoB,EAAE,uDAAuD,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QACtI,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,cAAc,CAAC,qBAAqB,EAAE,wDAAwD,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAC1I,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,yBAAyB,CAAC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,cAAc,CAAC,qBAAqB,EAAE,kDAAkD,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,KAAc;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtG,CAAC"}

package/dist/workspace/manifest.d.ts

@@ -0,0 +1,47 @@
+import { type ExclusionPolicy } from "./exclusion.js";
+import { type FilesystemCapabilities } from "./paths.js";
+export interface ContentChunk {
+    readonly index: number;
+    readonly byteLength: number;
+    readonly digest: string;
+}
+export interface ManifestEntry {
+    readonly path: string;
+    readonly kind: "directory" | "file" | "symlink";
+    readonly byteLength: number;
+    readonly executable: boolean;
+    readonly contentDigest?: string;
+    readonly chunks?: readonly ContentChunk[];
+    readonly linkTarget?: string;
+}
+export interface WorkspaceManifest {
+    readonly schemaVersion: 2;
+    readonly minimumReaderVersion: 1;
+    readonly minimumWriterVersion: 2;
+    readonly policyDigest: string;
+    readonly manifestRoot: string;
+    readonly entryCount: number;
+    readonly totalBytes: number;
+    readonly excludedCounts: Readonly<Record<string, number>>;
+    readonly entries: readonly ManifestEntry[];
+}
+export interface ManifestLimits {
+    readonly maximumEntries: number;
+    readonly maximumTotalBytes: number;
+    readonly maximumFileBytes: number;
+    readonly chunkBytes: number;
+}
+export declare function createWorkspaceManifest(input: {
+    readonly root: string;
+    readonly policy: ExclusionPolicy;
+    readonly capabilities: FilesystemCapabilities;
+    readonly limits?: Partial<ManifestLimits>;
+    readonly allowSafeRelativeSymlinks?: boolean;
+    readonly beforeContentRead?: (wirePath: string) => void;
+    readonly signal?: AbortSignal;
+}): Promise<WorkspaceManifest>;
+export declare function streamContentChunks(path: string, chunkBytes: number): AsyncGenerator<{
+    readonly bytes: Uint8Array;
+    readonly chunk: ContentChunk;
+}>;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/workspace/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/workspace/manifest.ts"],"names":[],"mappings":"AAKA,OAAO,EAA8B,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClF,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AASD,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4G7B;AAED,wBAAuB,mBAAmB,CACxC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,cAAc,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC,CAoB9E"}

package/dist/workspace/manifest.js

@@ -0,0 +1,243 @@
+import { createHash } from "node:crypto";
+import { constants as fileConstants } from "node:fs";
+import { open, opendir, readlink, realpath } from "node:fs/promises";
+import { basename, dirname, join, relative, sep } from "node:path";
+import { detectHighConfidenceSecret } from "./exclusion.js";
+import { assertLexicallyInsideRoot, assertNoPortableCollisions, normalizeWirePath, } from "./paths.js";
+import { workspaceError } from "./errors.js";
+const DEFAULT_LIMITS = Object.freeze({
+    maximumEntries: 100_000,
+    maximumTotalBytes: 2 * 1024 * 1024 * 1024,
+    maximumFileBytes: 512 * 1024 * 1024,
+    chunkBytes: 4 * 1024 * 1024,
+});
+export async function createWorkspaceManifest(input) {
+    input.signal?.throwIfAborted();
+    const root = await realpath(input.root);
+    const limits = Object.freeze({ ...DEFAULT_LIMITS, ...input.limits });
+    validateLimits(limits);
+    const entries = [];
+    const excludedCounts = new Map();
+    let totalBytes = 0;
+    async function walk(directory, parentWirePath) {
+        input.signal?.throwIfAborted();
+        const handle = await opendir(directory);
+        const children = [];
+        for await (const child of handle) {
+            input.signal?.throwIfAborted();
+            children.push(child);
+        }
+        children.sort((left, right) => left.name.normalize("NFC").localeCompare(right.name.normalize("NFC"), "en"));
+        for (const child of children) {
+            input.signal?.throwIfAborted();
+            const wirePath = normalizeWirePath(parentWirePath.length === 0 ? child.name : `${parentWirePath}/${child.name}`, input.capabilities);
+            const physicalPath = assertLexicallyInsideRoot(root, join(directory, child.name));
+            const kind = child.isDirectory()
+                ? "directory"
+                : child.isFile()
+                    ? "file"
+                    : child.isSymbolicLink()
+                        ? "symlink"
+                        : "special";
+            const decision = input.policy.decide(wirePath, kind);
+            if (decision.excluded) {
+                increment(excludedCounts, decision.reason ?? "user_rule");
+                continue;
+            }
+            if (entries.length >= limits.maximumEntries)
+                throw limitFailure("entry_limit");
+            if (kind === "special") {
+                throw workspaceError("portability_conflict", "A workspace entry kind cannot be represented portably.", "unsupported", "special_file");
+            }
+            if (kind === "directory") {
+                await verifiedPhysicalParent(root, physicalPath);
+                entries.push(Object.freeze({ path: wirePath, kind, byteLength: 0, executable: false }));
+                await walk(physicalPath, wirePath);
+                continue;
+            }
+            if (kind === "symlink") {
+                const target = await readlink(physicalPath);
+                if (!input.allowSafeRelativeSymlinks || !input.capabilities.symlinks) {
+                    throw workspaceError("portability_conflict", "The workspace symlink is not enabled for this filesystem capability tuple.", "unsupported", "symlink_unsupported");
+                }
+                if (target.includes("\0") || /^(?:[/\\]|[A-Za-z]:)/u.test(target)) {
+                    throw workspaceError("path_escape", "The workspace symlink target is unsafe.", "policy", "external_symlink");
+                }
+                assertLexicallyInsideRoot(root, join(dirname(physicalPath), target));
+                const targetBytes = Buffer.byteLength(target, "utf8");
+                if (targetBytes > 4_096)
+                    throw limitFailure("symlink_limit");
+                entries.push(Object.freeze({
+                    path: wirePath,
+                    kind,
+                    byteLength: targetBytes,
+                    executable: false,
+                    linkTarget: target.normalize("NFC"),
+                }));
+                totalBytes += targetBytes;
+                continue;
+            }
+            const hashed = await hashStableFile(physicalPath, wirePath, root, limits, input.beforeContentRead, input.signal);
+            totalBytes += hashed.byteLength;
+            if (totalBytes > limits.maximumTotalBytes)
+                throw limitFailure("total_bytes_limit");
+            entries.push(Object.freeze({
+                path: wirePath,
+                kind: "file",
+                byteLength: hashed.byteLength,
+                executable: hashed.executable,
+                contentDigest: hashed.contentDigest,
+                chunks: Object.freeze(hashed.chunks),
+            }));
+        }
+    }
+    await walk(root, "");
+    input.signal?.throwIfAborted();
+    assertNoPortableCollisions(entries.map((entry) => entry.path), input.capabilities);
+    entries.sort((left, right) => Buffer.from(left.path).compare(Buffer.from(right.path)));
+    const manifestRoot = publicProtocolManifestRoot(entries);
+    return Object.freeze({
+        schemaVersion: 2,
+        minimumReaderVersion: 1,
+        minimumWriterVersion: 2,
+        policyDigest: input.policy.digest,
+        manifestRoot,
+        entryCount: entries.length,
+        totalBytes,
+        excludedCounts: Object.freeze(Object.fromEntries([...excludedCounts.entries()].sort())),
+        entries: Object.freeze(entries),
+    });
+}
+export async function* streamContentChunks(path, chunkBytes) {
+    if (!Number.isSafeInteger(chunkBytes) || chunkBytes < 1)
+        throw limitFailure("invalid_chunk_size");
+    const handle = await open(path, fileConstants.O_RDONLY | fileConstants.O_NOFOLLOW);
+    try {
+        let index = 0;
+        for await (const value of handle.createReadStream({ highWaterMark: chunkBytes, autoClose: false })) {
+            const bytes = Buffer.from(value);
+            yield Object.freeze({
+                bytes,
+                chunk: Object.freeze({
+                    index,
+                    byteLength: bytes.byteLength,
+                    digest: createHash("sha256").update(bytes).digest("hex"),
+                }),
+            });
+            index += 1;
+        }
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function hashStableFile(physicalPath, wirePath, root, limits, beforeContentRead, signal) {
+    const resolvedParent = await verifiedPhysicalParent(root, physicalPath);
+    const admittedPath = join(resolvedParent, basename(physicalPath));
+    const handle = await open(admittedPath, fileConstants.O_RDONLY | fileConstants.O_NOFOLLOW);
+    const before = await handle.stat({ bigint: true });
+    if (!before.isFile() || before.nlink > 1n) {
+        await handle.close();
+        throw workspaceError("snapshot_unstable", "The workspace file is unsafe or changed during admission.", "integrity", before.nlink > 1n ? "hard_link" : "unsafe_type");
+    }
+    if (before.size > BigInt(limits.maximumFileBytes)) {
+        await handle.close();
+        throw limitFailure("file_bytes_limit");
+    }
+    try {
+        const opened = await handle.stat({ bigint: true });
+        if (!sameIdentity(before, opened))
+            throw unstableFailure();
+        beforeContentRead?.(wirePath);
+        signal?.throwIfAborted();
+        const contentHash = createHash("sha256").update("cuna-content-v1\0");
+        const chunks = [];
+        let byteLength = 0;
+        let overlap = Buffer.alloc(0);
+        let secretCategory;
+        for await (const value of handle.createReadStream({ highWaterMark: limits.chunkBytes, autoClose: false, ...(signal === undefined ? {} : { signal }) })) {
+            signal?.throwIfAborted();
+            const bytes = Buffer.from(value);
+            byteLength += bytes.byteLength;
+            if (byteLength > limits.maximumFileBytes)
+                throw limitFailure("file_bytes_limit");
+            contentHash.update(bytes);
+            chunks.push(Object.freeze({
+                index: chunks.length,
+                byteLength: bytes.byteLength,
+                digest: createHash("sha256").update(bytes).digest("hex"),
+            }));
+            secretCategory ??= detectHighConfidenceSecret(Buffer.concat([overlap, bytes]));
+            overlap = bytes.subarray(Math.max(0, bytes.byteLength - 128));
+        }
+        const after = await handle.stat({ bigint: true });
+        const afterParent = await verifiedPhysicalParent(root, admittedPath);
+        if (afterParent !== resolvedParent)
+            throw unstableFailure();
+        if (!sameIdentity(opened, after) || BigInt(byteLength) !== after.size)
+            throw unstableFailure();
+        if (secretCategory !== undefined) {
+            throw workspaceError("secret_blocked", "A workspace file was blocked by the secret-safety policy.", "policy", secretCategory);
+        }
+        return {
+            byteLength,
+            executable: (Number(after.mode) & 0o111) !== 0,
+            contentDigest: contentHash.digest("hex"),
+            chunks,
+        };
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function verifiedPhysicalParent(root, candidate) {
+    const parent = await realpath(dirname(candidate));
+    const difference = relative(root, parent);
+    if (difference === ".." || difference.startsWith(`..${sep}`)) {
+        throw workspaceError("path_escape", "A workspace ancestor escapes the canonical root.", "policy", "symlink_escape");
+    }
+    return parent;
+}
+function sameIdentity(left, right) {
+    return left.dev === right.dev && left.ino === right.ino && left.size === right.size && left.mtimeNs === right.mtimeNs;
+}
+function publicProtocolManifestRoot(entries) {
+    const entryDigests = entries
+        .map((entry) => {
+        const canonical = JSON.stringify({
+            path: entry.path,
+            kind: entry.kind,
+            byte_length: entry.kind === "symlink" ? 0 : entry.byteLength,
+            executable: entry.executable,
+            chunks: entry.chunks?.map((chunk) => ({
+                digest: chunk.digest,
+                byte_length: chunk.byteLength,
+            })) ?? [],
+            link_target: entry.linkTarget ?? null,
+        });
+        return Object.freeze({
+            path: entry.path,
+            digest: createHash("sha256").update(canonical).digest("hex"),
+        });
+    })
+        .sort((left, right) => Buffer.compare(Buffer.from(left.path, "utf8"), Buffer.from(right.path, "utf8")));
+    return createHash("sha256")
+        .update(entryDigests.map((entry) => entry.digest).join(""))
+        .digest("hex");
+}
+function increment(map, key) {
+    map.set(key, (map.get(key) ?? 0) + 1);
+}
+function validateLimits(limits) {
+    for (const value of Object.values(limits)) {
+        if (!Number.isSafeInteger(value) || value < 1)
+            throw limitFailure("invalid_limits");
+    }
+}
+function limitFailure(reason) {
+    return workspaceError("resource_limit", "The workspace exceeds a declared resource limit.", "policy", reason);
+}
+function unstableFailure() {
+    return workspaceError("snapshot_unstable", "The workspace file changed while it was being admitted.", "conflict", "file_identity_changed");
+}
+//# sourceMappingURL=manifest.js.map

package/dist/workspace/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/workspace/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,IAAI,aAAa,EAAoB,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEnE,OAAO,EAAE,0BAA0B,EAAwB,MAAM,gBAAgB,CAAC;AAClF,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAqC7C,MAAM,cAAc,GAAmB,MAAM,CAAC,MAAM,CAAC;IACnD,cAAc,EAAE,OAAO;IACvB,iBAAiB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI;IACzC,gBAAgB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACnC,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAQ7C;IACC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,UAAU,IAAI,CAAC,SAAiB,EAAE,cAAsB;QAC3D,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5G,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,iBAAiB,CAChC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,cAAc,IAAI,KAAK,CAAC,IAAI,EAAE,EAC5E,KAAK,CAAC,YAAY,CACnB,CAAC;YACF,MAAM,YAAY,GAAG,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAClF,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE;gBAC9B,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE;oBACd,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE;wBACtB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;YAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACrD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC;gBAC1D,SAAS;YACX,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc;gBAAE,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;YAC/E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,cAAc,CAClB,sBAAsB,EACtB,wDAAwD,EACxD,aAAa,EACb,cAAc,CACf,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,MAAM,sBAAsB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;gBACxF,MAAM,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;oBACrE,MAAM,cAAc,CAClB,sBAAsB,EACtB,4EAA4E,EAC5E,aAAa,EACb,qBAAqB,CACtB,CAAC;gBACJ,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClE,MAAM,cAAc,CAAC,aAAa,EAAE,yCAAyC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;gBAC/G,CAAC;gBACD,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACrE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtD,IAAI,WAAW,GAAG,KAAK;oBAAE,MAAM,YAAY,CAAC,eAAe,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;oBACzB,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,UAAU,EAAE,WAAW;oBACvB,UAAU,EAAE,KAAK;oBACjB,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;iBACpC,CAAC,CAAC,CAAC;gBACJ,UAAU,IAAI,WAAW,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACjH,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC;YAChC,IAAI,UAAU,GAAG,MAAM,CAAC,iBAAiB;gBAAE,MAAM,YAAY,CAAC,mBAAmB,CAAC,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACzB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM;gBACZ,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;aACrC,CAAC,CAAC,CAAC;QACN,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrB,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/B,0BAA0B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACnF,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,YAAY,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAU;QACzB,oBAAoB,EAAE,CAAC;QACvB,oBAAoB,EAAE,CAAC;QACvB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;QACjC,YAAY;QACZ,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,UAAU;QACV,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,mBAAmB,CACxC,IAAY,EACZ,UAAkB;IAElB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,MAAM,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACnG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;YAC/C,MAAM,MAAM,CAAC,MAAM,CAAC;gBAClB,KAAK;gBACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;oBACnB,KAAK;oBACL,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBACzD,CAAC;aACH,CAAC,CAAC;YACH,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,YAAoB,EACpB,QAAgB,EAChB,IAAY,EACZ,MAAsB,EACtB,iBAA8C,EAC9C,MAAoB;IAOpB,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC;QAC1C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,cAAc,CAClB,mBAAmB,EACnB,2DAA2D,EAC3D,WAAW,EACX,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,YAAY,CAAC,kBAAkB,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,eAAe,EAAE,CAAC;QAC3D,iBAAiB,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,cAAkC,CAAC;QACvC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YACvJ,MAAM,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;YAC/C,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,UAAU,GAAG,MAAM,CAAC,gBAAgB;gBAAE,MAAM,YAAY,CAAC,kBAAkB,CAAC,CAAC;YACjF,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACzD,CAAC,CAAC,CAAC;YACJ,cAAc,KAAK,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/E,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACrE,IAAI,WAAW,KAAK,cAAc;YAAE,MAAM,eAAe,EAAE,CAAC;QAC5D,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,IAAI;YAAE,MAAM,eAAe,EAAE,CAAC;QAC/F,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,cAAc,CAClB,gBAAgB,EAChB,2DAA2D,EAC3D,QAAQ,EACR,cAAc,CACf,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU;YACV,UAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9C,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YACxC,MAAM;SACP,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,SAAiB;IACnE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7D,MAAM,cAAc,CAAC,aAAa,EAAE,kDAAkD,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,IAAiB,EAAE,KAAkB;IACzD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;AACxH,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAiC;IACnE,MAAM,YAAY,GAAG,OAAO;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU;YAC5D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,UAAU;aAC9B,CAAC,CAAC,IAAI,EAAE;YACT,WAAW,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;SACtC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAChF,CAAC;IACJ,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SAC1D,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,GAAwB,EAAE,GAAW;IACtD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,cAAc,CAAC,gBAAgB,EAAE,kDAAkD,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,cAAc,CACnB,mBAAmB,EACnB,yDAAyD,EACzD,UAAU,EACV,uBAAuB,CACxB,CAAC;AACJ,CAAC"}

package/dist/workspace/paths.d.ts

@@ -0,0 +1,14 @@
+export interface FilesystemCapabilities {
+    readonly platform: "windows" | "macos" | "linux";
+    readonly caseSensitive: boolean;
+    readonly unicodeNormalization: "nfc" | "nfd" | "preserving";
+    readonly symlinks: boolean;
+    readonly atomicRename: boolean;
+    readonly maximumComponentBytes: number;
+    readonly maximumPathBytes: number;
+}
+export declare function normalizeWirePath(input: string, capabilities: FilesystemCapabilities): string;
+export declare function portabilityCollisionKey(wirePath: string, capabilities: FilesystemCapabilities): string;
+export declare function assertNoPortableCollisions(paths: readonly string[], capabilities: FilesystemCapabilities): void;
+export declare function assertLexicallyInsideRoot(root: string, candidate: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/workspace/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/workspace/paths.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACjD,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,oBAAoB,EAAE,KAAK,GAAG,KAAK,GAAG,YAAY,CAAC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAKD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,sBAAsB,GACnC,MAAM,CAgCR;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,sBAAsB,GACnC,MAAM,CAGR;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,YAAY,EAAE,sBAAsB,GACnC,IAAI,CAgBN;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAiBjF"}

package/dist/workspace/paths.js

@@ -0,0 +1,67 @@
+import { isAbsolute, relative, resolve, sep } from "node:path";
+import { workspaceError } from "./errors.js";
+const WINDOWS_DEVICES = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\..*)?$/iu;
+const LONE_SURROGATE = /[\uD800-\uDFFF]/u;
+export function normalizeWirePath(input, capabilities) {
+    if (input.length === 0 || input.includes("\0") || LONE_SURROGATE.test(input)) {
+        throw pathFailure("invalid_encoding");
+    }
+    if (input.includes("\\") || input.startsWith("/") || /^[A-Za-z]:/u.test(input)) {
+        throw pathFailure("absolute_or_platform_path");
+    }
+    const components = input.split("/");
+    if (components.length > 256)
+        throw pathFailure("nesting_limit");
+    const normalized = components.map((component) => {
+        if (component.length === 0 || component === "." || component === "..") {
+            throw pathFailure("unsafe_component");
+        }
+        const nfc = component.normalize("NFC");
+        if (WINDOWS_DEVICES.test(nfc) ||
+            nfc.endsWith(".") ||
+            nfc.endsWith(" ") ||
+            nfc.includes(":")) {
+            throw pathFailure("unportable_component");
+        }
+        if (Buffer.byteLength(nfc, "utf8") > capabilities.maximumComponentBytes) {
+            throw pathFailure("component_too_long");
+        }
+        return nfc;
+    });
+    const wirePath = normalized.join("/");
+    if (Buffer.byteLength(wirePath, "utf8") > capabilities.maximumPathBytes) {
+        throw pathFailure("path_too_long");
+    }
+    return wirePath;
+}
+export function portabilityCollisionKey(wirePath, capabilities) {
+    const normalized = normalizeWirePath(wirePath, capabilities).normalize("NFC");
+    return capabilities.caseSensitive ? normalized : normalized.toLocaleLowerCase("en-US");
+}
+export function assertNoPortableCollisions(paths, capabilities) {
+    const observed = new Map();
+    for (const path of paths) {
+        const normalized = normalizeWirePath(path, capabilities);
+        const key = portabilityCollisionKey(normalized, capabilities);
+        const previous = observed.get(key);
+        if (previous !== undefined) {
+            throw workspaceError("portability_conflict", "Two workspace paths cannot be represented distinctly on the destination filesystem.", "conflict", "case_or_unicode_collision");
+        }
+        observed.set(key, normalized);
+    }
+}
+export function assertLexicallyInsideRoot(root, candidate) {
+    const canonicalRoot = resolve(root);
+    const canonicalCandidate = resolve(candidate);
+    const difference = relative(canonicalRoot, canonicalCandidate);
+    if (difference === ".." ||
+        difference.startsWith(`..${sep}`) ||
+        isAbsolute(difference)) {
+        throw workspaceError("path_escape", "The workspace path escapes the canonical local root.", "policy", "outside_root");
+    }
+    return canonicalCandidate;
+}
+function pathFailure(reason) {
+    return workspaceError("path_invalid", "The workspace path is not portable or safely relative.", "policy", reason);
+}
+//# sourceMappingURL=paths.js.map

package/dist/workspace/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/workspace/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAY7C,MAAM,eAAe,GAAG,oDAAoD,CAAC;AAC7E,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,YAAoC;IAEpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,MAAM,WAAW,CAAC,kBAAkB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,WAAW,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,WAAW,CAAC,eAAe,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,WAAW,CAAC,kBAAkB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,IACE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YACzB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjB,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EACjB,CAAC;YACD,MAAM,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC,qBAAqB,EAAE,CAAC;YACxE,MAAM,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC,gBAAgB,EAAE,CAAC;QACxE,MAAM,WAAW,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,YAAoC;IAEpC,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAwB,EACxB,YAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,cAAc,CAClB,sBAAsB,EACtB,qFAAqF,EACrF,UAAU,EACV,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,SAAiB;IACvE,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAC/D,IACE,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;QACjC,UAAU,CAAC,UAAU,CAAC,EACtB,CAAC;QACD,MAAM,cAAc,CAClB,aAAa,EACb,sDAAsD,EACtD,QAAQ,EACR,cAAc,CACf,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,cAAc,CACnB,cAAc,EACd,wDAAwD,EACxD,QAAQ,EACR,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/workspace/schema.d.ts

@@ -0,0 +1,15 @@
+export interface DurableSchemaEnvelope {
+    readonly schemaVersion: number;
+    readonly minimumReaderVersion: number;
+    readonly minimumWriterVersion: number;
+}
+export interface SchemaSupport {
+    readonly readerVersion: number;
+    readonly writerVersion: number;
+    readonly readableSchemaVersions: readonly number[];
+    readonly writableSchemaVersions: readonly number[];
+}
+export declare const LOCAL_SCHEMA_SUPPORT: SchemaSupport;
+export declare function assertReadableSchema(envelope: DurableSchemaEnvelope, support?: SchemaSupport): void;
+export declare function assertWritableSchema(envelope: DurableSchemaEnvelope, support?: SchemaSupport): void;
+//# sourceMappingURL=schema.d.ts.map

package/dist/workspace/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/workspace/schema.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAED,eAAO,MAAM,oBAAoB,EAAE,aAKjC,CAAC;AAEH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,GAAE,aAAoC,GAC5C,IAAI,CAaN;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,GAAE,aAAoC,GAC5C,IAAI,CAaN"}

package/dist/workspace/schema.js

@@ -0,0 +1,33 @@
+import { workspaceError } from "./errors.js";
+export const LOCAL_SCHEMA_SUPPORT = Object.freeze({
+    readerVersion: 2,
+    writerVersion: 2,
+    readableSchemaVersions: Object.freeze([1, 2]),
+    writableSchemaVersions: Object.freeze([2]),
+});
+export function assertReadableSchema(envelope, support = LOCAL_SCHEMA_SUPPORT) {
+    assertSchemaNumbers(envelope);
+    if (!support.readableSchemaVersions.includes(envelope.schemaVersion) ||
+        envelope.minimumReaderVersion > support.readerVersion) {
+        throw workspaceError("schema_incompatible", "The local workspace record requires an unsupported reader.", "unsupported", "reader_version_incompatible");
+    }
+}
+export function assertWritableSchema(envelope, support = LOCAL_SCHEMA_SUPPORT) {
+    assertReadableSchema(envelope, support);
+    if (!support.writableSchemaVersions.includes(envelope.schemaVersion) ||
+        envelope.minimumWriterVersion > support.writerVersion) {
+        throw workspaceError("schema_incompatible", "The local workspace record cannot be safely mutated by this writer.", "unsupported", "writer_version_incompatible");
+    }
+}
+function assertSchemaNumbers(envelope) {
+    for (const value of [
+        envelope.schemaVersion,
+        envelope.minimumReaderVersion,
+        envelope.minimumWriterVersion,
+    ]) {
+        if (!Number.isSafeInteger(value) || value < 1) {
+            throw workspaceError("schema_malformed", "The local workspace record has malformed schema metadata.", "integrity", "invalid_schema_version");
+        }
+    }
+}
+//# sourceMappingURL=schema.js.map

package/dist/workspace/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/workspace/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAe7C,MAAM,CAAC,MAAM,oBAAoB,GAAkB,MAAM,CAAC,MAAM,CAAC;IAC/D,aAAa,EAAE,CAAC;IAChB,aAAa,EAAE,CAAC;IAChB,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAClC,QAA+B,EAC/B,UAAyB,oBAAoB;IAE7C,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9B,IACE,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChE,QAAQ,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,EACrD,CAAC;QACD,MAAM,cAAc,CAClB,qBAAqB,EACrB,4DAA4D,EAC5D,aAAa,EACb,6BAA6B,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAA+B,EAC/B,UAAyB,oBAAoB;IAE7C,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxC,IACE,CAAC,OAAO,CAAC,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChE,QAAQ,CAAC,oBAAoB,GAAG,OAAO,CAAC,aAAa,EACrD,CAAC;QACD,MAAM,cAAc,CAClB,qBAAqB,EACrB,qEAAqE,EACrE,aAAa,EACb,6BAA6B,CAC9B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA+B;IAC1D,KAAK,MAAM,KAAK,IAAI;QAClB,QAAQ,CAAC,aAAa;QACtB,QAAQ,CAAC,oBAAoB;QAC7B,QAAQ,CAAC,oBAAoB;KAC9B,EAAE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,cAAc,CAClB,kBAAkB,EAClB,2DAA2D,EAC3D,WAAW,EACX,wBAAwB,CACzB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/workspace/selection-screen.d.ts

@@ -0,0 +1,4 @@
+import type { ForegroundTerminalHost } from "../terminal/foreground.js";
+import { type WorkspaceSelectionContext } from "./selection-service.js";
+export declare function runWorkspaceSelectionScreen(context: WorkspaceSelectionContext, sourcePath: string, host?: ForegroundTerminalHost, signal?: AbortSignal): Promise<"saved" | "back" | "cancelled">;
+//# sourceMappingURL=selection-screen.d.ts.map

package/dist/workspace/selection-screen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selection-screen.d.ts","sourceRoot":"","sources":["../../src/workspace/selection-screen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,sBAAsB,EAAC,MAAM,2BAA2B,CAAC;AAItE,OAAO,EAA6E,KAAK,yBAAyB,EAAC,MAAM,wBAAwB,CAAC;AAIlJ,wBAAsB,2BAA2B,CAAC,OAAO,EAAC,yBAAyB,EAAC,UAAU,EAAC,MAAM,EAAC,IAAI,GAAC,sBAAyD,EAAC,MAAM,CAAC,EAAC,WAAW,GAAE,OAAO,CAAC,OAAO,GAAC,MAAM,GAAC,WAAW,CAAC,CAmG5N"}