@greppleai/grip 0.0.1 → 0.1.3

package/dist/daemon/shared-connection.js

@@ -0,0 +1,271 @@
+import { createHash, randomBytes } from "node:crypto";
+import { VERSION } from "../config.js";
+import { RemoteWorkspaceServerProtocol, } from "../core/remote-workspace-protocol/session.js";
+import { parseSharedWorkspaceClientEnvelope, } from "../core/remote-workspace-protocol/shared-transport.js";
+import { DaemonActivityBudget } from "./activity-budget.js";
+import { withSharedRevisionGuard } from "./shared-revision.js";
+import { createDaemonWorkspaceRuntime } from "./workspace-runtime.js";
+/** One authenticated v2 WebSocket. No state (including request IDs) is shared between channels. */
+export class SharedDaemonConnection {
+    channels = new Map();
+    channelDisposals = new WeakMap();
+    pendingDisposals = new Set();
+    usedControlIds = new Set();
+    epoch = randomBytes(18).toString("base64url");
+    hello = false;
+    closed = false;
+    queue = Promise.resolve();
+    pendingInboundMessages = 0;
+    pendingInboundBytes = 0;
+    budget;
+    configuration;
+    roots;
+    send;
+    closeSocket;
+    constructor(configuration, roots, send, closeSocket, budget = new DaemonActivityBudget(configuration)) {
+        this.configuration = configuration;
+        this.roots = roots;
+        this.send = send;
+        this.closeSocket = closeSocket;
+        this.budget = budget;
+    }
+    receive(payload) {
+        if (this.closed)
+            return Promise.resolve();
+        const limits = this.configuration.protocolLimits;
+        if (payload.byteLength > limits.maxMessageBytes ||
+            this.pendingInboundMessages >= limits.maxPendingInboundMessages ||
+            this.pendingInboundBytes + payload.byteLength > limits.maxPendingInboundBytes) {
+            this.closed = true;
+            this.closeSocket(1009, "Shared workspace inbound queue exceeds limits");
+            return Promise.resolve();
+        }
+        // Copy before queuing: WebSocket buffers need not remain stable after the callback returns.
+        const queuedPayload = Uint8Array.from(payload);
+        this.pendingInboundMessages++;
+        this.pendingInboundBytes += queuedPayload.byteLength;
+        let complete;
+        const finished = new Promise((resolve) => {
+            complete = resolve;
+        });
+        let channelPending = false;
+        const settle = () => {
+            this.pendingInboundMessages--;
+            this.pendingInboundBytes -= queuedPayload.byteLength;
+            complete();
+        };
+        const fail = () => {
+            if (!this.closed) {
+                this.closed = true;
+                this.closeSocket(1002, "Invalid shared workspace frame");
+            }
+        };
+        const scheduled = this.queue.then(() => {
+            if (this.closed)
+                return;
+            const frame = parseSharedWorkspaceClientEnvelope(queuedPayload, limits);
+            if (frame.type === "channel") {
+                // Validate the channel before letting the control queue advance. Its own
+                // protocol preserves per-channel receive order and bounds queued frames.
+                if (!this.channels.has(frame.channelId))
+                    throw new Error("Unknown shared workspace channel");
+                channelPending = true;
+                void this.dispatch(frame).catch(fail).finally(settle);
+                return;
+            }
+            // Hello, opens, closes and reloads remain serialized in control order.
+            return this.dispatch(frame);
+        });
+        this.queue = scheduled.catch(fail).finally(() => {
+            if (!channelPending)
+                settle();
+        });
+        return finished;
+    }
+    get handshakeComplete() {
+        return this.hello;
+    }
+    async beginDrain() {
+        await Promise.allSettled([...this.channels.values()].map((channel) => channel.protocol.beginDrain()));
+    }
+    createChannelRuntime(root) {
+        return createDaemonWorkspaceRuntime({
+            ...this.configuration,
+            workspaceRoot: root,
+            // Operator-wide resource files and the v1 temporary root are not channel-scoped.
+            // Keep them available on v1, but never expose them through a child channel.
+            temporaryRoot: undefined,
+            sandboxInstructionsPath: undefined,
+            userAgentsPath: undefined,
+        });
+    }
+    reload() {
+        const operation = this.queue.then(async () => {
+            if (this.closed)
+                throw new Error("Shared workspace connection is closed");
+            for (const channel of this.channels.values()) {
+                const previous = channel.runtime;
+                const previousHandler = channel.handler;
+                const candidate = this.createChannelRuntime(channel.workspace.root);
+                const candidateHandler = candidate.createHandler(channel.workspace, true);
+                channel.runtime = candidate;
+                channel.handler = candidateHandler;
+                try {
+                    await channel.protocol.publishCatalog({ ...candidate.catalog, generation: channel.generation + 1 });
+                    channel.generation++;
+                }
+                catch (error) {
+                    channel.runtime = previous;
+                    channel.handler = previousHandler;
+                    await candidate.dispose();
+                    throw error;
+                }
+                await previous.retire();
+            }
+        });
+        this.queue = operation.catch(() => undefined);
+        return operation;
+    }
+    async dispatch(frame) {
+        if (frame.type === "hello") {
+            if (this.hello)
+                throw new Error("Duplicate v2 hello");
+            this.hello = true;
+            this.usedControlIds.add(frame.id);
+            await this.send({ type: "hello_ack", id: frame.id, version: 2, epoch: this.epoch, daemonVersion: VERSION });
+            return;
+        }
+        if (!this.hello)
+            throw new Error("V2 hello required before opening channels");
+        if (frame.type === "open") {
+            if (this.usedControlIds.has(frame.id))
+                throw new Error("Duplicate v2 control ID");
+            if (this.usedControlIds.size >= 65_536)
+                throw new Error("V2 control ID budget exhausted");
+            this.usedControlIds.add(frame.id);
+            if (this.channels.size >= Math.min(this.configuration.maxConnections, 32)) {
+                await this.send({
+                    type: "control_error",
+                    id: frame.id,
+                    code: "limit_exceeded",
+                    message: "Channel limit reached",
+                });
+                return;
+            }
+            let root;
+            try {
+                root = await this.roots.bind(frame.root);
+            }
+            catch {
+                await this.send({
+                    type: "control_error",
+                    id: frame.id,
+                    code: "invalid_root",
+                    message: "Workspace root is not an existing directory under the shared parent",
+                });
+                return;
+            }
+            await this.open(frame.id, root);
+            return;
+        }
+        const channel = this.channels.get(frame.channelId);
+        if (!channel)
+            throw new Error("Unknown shared workspace channel");
+        if (frame.type === "close") {
+            // Do not wait on a channel's in-flight requests while blocking the socket receive queue.
+            this.channels.delete(frame.channelId);
+            // Begin cancellation before acknowledging detach; track it for physical shutdown.
+            void this.disposeChannel(channel);
+            await this.send({ type: "closed", channelId: frame.channelId });
+            return;
+        }
+        await channel.protocol.receive(Buffer.from(JSON.stringify(frame.payload)));
+    }
+    async open(id, root) {
+        const channelId = randomBytes(24).toString("base64url");
+        const workspace = Object.freeze({
+            id: randomBytes(18).toString("base64url"),
+            root,
+            pathFlavor: "posix",
+        });
+        let runtime;
+        try {
+            runtime = this.createChannelRuntime(root);
+        }
+        catch {
+            // A bad child project configuration is an open failure, not a corrupt
+            // physical envelope. Keep already bound sibling channels usable.
+            await this.send({
+                type: "control_error",
+                id,
+                code: "invalid_request",
+                message: "Unable to initialize shared workspace channel",
+            });
+            return;
+        }
+        const handler = runtime.createHandler(workspace, true);
+        let channel;
+        const protocol = new RemoteWorkspaceServerProtocol({
+            send: (payload) => this.channels.has(channelId) && !this.closed
+                ? this.send({ type: "channel", channelId, payload })
+                : Promise.reject(new Error("Shared workspace channel is closed")),
+            close: async (reason) => {
+                const channel = this.channels.get(channelId);
+                if (channel) {
+                    this.channels.delete(channelId);
+                    void this.disposeChannel(channel);
+                    if (!this.closed)
+                        await this.send({ type: "closed", channelId, reason });
+                }
+            },
+        }, {
+            validateToolArguments: (toolName, value) => channel.handler.validateToolArguments(toolName, value),
+            handleRequest: (request, context) => this.budget.run(request.method, async () => {
+                const result = await withSharedRevisionGuard(request, workspace.root, channel.runtime.operations, context, () => channel.handler.handleRequest(request, context));
+                if (request.method !== "workspace.read")
+                    return result;
+                const read = result;
+                return {
+                    ...read,
+                    revision: createHash("sha256").update(Buffer.from(read.contentBase64, "base64")).digest("hex"),
+                };
+            }),
+        }, {
+            workspace,
+            catalog: runtime.catalog,
+            capabilities: runtime.capabilities,
+            limits: this.configuration.protocolLimits,
+            backendLabel: "grip-shared-workspace-daemon",
+        });
+        channel = { runtime, handler, protocol, workspace, generation: runtime.catalog.generation };
+        this.channels.set(channelId, channel);
+        try {
+            await this.send({ type: "opened", id, channelId });
+        }
+        catch (error) {
+            this.channels.delete(channelId);
+            void this.disposeChannel(channel);
+            throw error;
+        }
+    }
+    disposeChannel(channel) {
+        const existing = this.channelDisposals.get(channel);
+        if (existing)
+            return existing;
+        const disposal = (async () => {
+            await channel.protocol.disconnect().catch(() => undefined);
+            await channel.runtime.dispose().catch(() => undefined);
+        })();
+        this.channelDisposals.set(channel, disposal);
+        this.pendingDisposals.add(disposal);
+        void disposal.then(() => this.pendingDisposals.delete(disposal), () => this.pendingDisposals.delete(disposal));
+        return disposal;
+    }
+    async disconnect() {
+        this.closed = true;
+        const channels = [...this.channels.values()];
+        this.channels.clear();
+        await Promise.allSettled([...channels.map((channel) => this.disposeChannel(channel)), ...this.pendingDisposals]);
+    }
+}
+//# sourceMappingURL=shared-connection.js.map

package/dist/daemon/shared-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-connection.js","sourceRoot":"","sources":["../../src/daemon/shared-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAKvC,OAAO,EAEN,6BAA6B,GAC7B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACN,kCAAkC,GAGlC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EAAE,4BAA4B,EAA+B,MAAM,wBAAwB,CAAC;AAUnG,mGAAmG;AACnG,MAAM,OAAO,sBAAsB;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,gBAAgB,GAAG,IAAI,OAAO,EAA0B,CAAC;IACzD,gBAAgB,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC5C,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,KAAK,GAAG,KAAK,CAAC;IACd,MAAM,GAAG,KAAK,CAAC;IACf,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,sBAAsB,GAAG,CAAC,CAAC;IAC3B,mBAAmB,GAAG,CAAC,CAAC;IACf,MAAM,CAAuB;IAE7B,aAAa,CAAsB;IACnC,KAAK,CAAuB;IAC5B,IAAI,CAAyD;IAC7D,WAAW,CAA0C;IAEtE,YACC,aAAkC,EAClC,KAA2B,EAC3B,IAA4D,EAC5D,WAAoD,EACpD,MAAM,GAAyB,IAAI,oBAAoB,CAAC,aAAa,CAAC,EACrE;QACD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAAA,CACrB;IAED,OAAO,CAAC,OAAmB,EAAiB;QAC3C,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;QACjD,IACC,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,eAAe;YAC3C,IAAI,CAAC,sBAAsB,IAAI,MAAM,CAAC,yBAAyB;YAC/D,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,sBAAsB,EAC5E,CAAC;YACF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,+CAA+C,CAAC,CAAC;YACxE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;QACD,4FAA4F;QAC5F,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,mBAAmB,IAAI,aAAa,CAAC,UAAU,CAAC;QACrD,IAAI,QAAqB,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/C,QAAQ,GAAG,OAAO,CAAC;QAAA,CACnB,CAAC,CAAC;QACH,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC9B,IAAI,CAAC,mBAAmB,IAAI,aAAa,CAAC,UAAU,CAAC;YACrD,QAAQ,EAAE,CAAC;QAAA,CACX,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;YAC1D,CAAC;QAAA,CACD,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,MAAM,KAAK,GAAG,kCAAkC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACxE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,yEAAyE;gBACzE,yEAAyE;gBACzE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAC7F,cAAc,GAAG,IAAI,CAAC;gBACtB,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtD,OAAO;YACR,CAAC;YACD,uEAAuE;YACvE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAA,CAC5B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChD,IAAI,CAAC,cAAc;gBAAE,MAAM,EAAE,CAAC;QAAA,CAC9B,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAAA,CAChB;IAED,IAAI,iBAAiB,GAAY;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC;IAAA,CAClB;IAED,KAAK,CAAC,UAAU,GAAkB;QACjC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAAA,CACtG;IAEO,oBAAoB,CAAC,IAAY,EAA0B;QAClE,OAAO,4BAA4B,CAAC;YACnC,GAAG,IAAI,CAAC,aAAa;YACrB,aAAa,EAAE,IAAI;YACnB,iFAAiF;YACjF,4EAA4E;YAC5E,aAAa,EAAE,SAAS;YACxB,uBAAuB,EAAE,SAAS;YAClC,cAAc,EAAE,SAAS;SACzB,CAAC,CAAC;IAAA,CACH;IAED,MAAM,GAAkB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC1E,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;gBACjC,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC;gBACxC,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC1E,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;gBAC5B,OAAO,CAAC,OAAO,GAAG,gBAAgB,CAAC;gBACnC,IAAI,CAAC;oBACJ,MAAM,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC;oBACpG,OAAO,CAAC,UAAU,EAAE,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC;oBAC3B,OAAO,CAAC,OAAO,GAAG,eAAe,CAAC;oBAClC,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,KAAK,CAAC;gBACb,CAAC;gBACD,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzB,CAAC;QAAA,CACD,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IAAA,CACjB;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAoC,EAAiB;QAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5G,OAAO;QACR,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAClF,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC1F,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC3E,MAAM,IAAI,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,eAAe;oBACrB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,uBAAuB;iBAChC,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACJ,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,eAAe;oBACrB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,qEAAqE;iBAC9E,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,yFAAyF;YACzF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACtC,kFAAkF;YAClF,KAAK,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAChE,OAAO;QACR,CAAC;QACD,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAAA,CAC3E;IAEO,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,IAAY,EAAiB;QAC3D,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YACzC,IAAI;YACJ,UAAU,EAAE,OAAgB;SAC5B,CAAC,CAAC;QACH,IAAI,OAA+B,CAAC;QACpC,IAAI,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,sEAAsE;YACtE,iEAAiE;YACjE,MAAM,IAAI,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,eAAe;gBACrB,EAAE;gBACF,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,+CAA+C;aACxD,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,OAAiB,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,6BAA6B,CACjD;YACC,IAAI,EAAE,CAAC,OAAqC,EAAE,EAAE,CAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC3C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;gBACpD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACnE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChC,KAAK,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC1E,CAAC;YAAA,CACD;SACD,EACD;YACC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC;YAClG,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC3C,OAAO,EACP,SAAS,CAAC,IAAI,EACd,OAAO,CAAC,OAAO,CAAC,UAAU,EAC1B,OAAO,EACP,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CACrD,CAAC;gBACF,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB;oBAAE,OAAO,MAAM,CAAC;gBACvD,MAAM,IAAI,GAAG,MAAmC,CAAC;gBACjD,OAAO;oBACN,GAAG,IAAI;oBACP,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9F,CAAC;YAAA,CACF,CAAC;SACH,EACD;YACC,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,cAAc;YACzC,YAAY,EAAE,8BAA8B;SAC5C,CACD,CAAC;QACF,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,KAAK,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAEO,cAAc,CAAC,OAAgB,EAAiB;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAAA,CACvD,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,KAAK,QAAQ,CAAC,IAAI,CACjB,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC5C,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC5C,CAAC;QACF,OAAO,QAAQ,CAAC;IAAA,CAChB;IAED,KAAK,CAAC,UAAU,GAAkB;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAAA,CACjH;CACD","sourcesContent":["import { createHash, randomBytes } from \"node:crypto\";\nimport { VERSION } from \"../config.ts\";\nimport type {\n\tRemoteWorkspaceIdentity,\n\tRemoteWorkspaceServerMessage,\n} from \"../core/remote-workspace-protocol/contract.ts\";\nimport {\n\ttype RemoteWorkspaceServerHandler,\n\tRemoteWorkspaceServerProtocol,\n} from \"../core/remote-workspace-protocol/session.ts\";\nimport {\n\tparseSharedWorkspaceClientEnvelope,\n\ttype SharedWorkspaceClientEnvelope,\n\ttype SharedWorkspaceServerFrame,\n} from \"../core/remote-workspace-protocol/shared-transport.ts\";\nimport { DaemonActivityBudget } from \"./activity-budget.ts\";\nimport type { DaemonConfiguration } from \"./config.ts\";\nimport { withSharedRevisionGuard } from \"./shared-revision.ts\";\nimport type { SharedWorkspaceRoots } from \"./shared-roots.ts\";\nimport { createDaemonWorkspaceRuntime, type DaemonWorkspaceRuntime } from \"./workspace-runtime.ts\";\n\ninterface Channel {\n\treadonly protocol: RemoteWorkspaceServerProtocol;\n\truntime: DaemonWorkspaceRuntime;\n\thandler: RemoteWorkspaceServerHandler;\n\treadonly workspace: RemoteWorkspaceIdentity;\n\tgeneration: number;\n}\n\n/** One authenticated v2 WebSocket. No state (including request IDs) is shared between channels. */\nexport class SharedDaemonConnection {\n\tprivate readonly channels = new Map<string, Channel>();\n\tprivate readonly channelDisposals = new WeakMap<Channel, Promise<void>>();\n\tprivate readonly pendingDisposals = new Set<Promise<void>>();\n\tprivate readonly usedControlIds = new Set<string>();\n\tprivate readonly epoch = randomBytes(18).toString(\"base64url\");\n\tprivate hello = false;\n\tprivate closed = false;\n\tprivate queue: Promise<void> = Promise.resolve();\n\tprivate pendingInboundMessages = 0;\n\tprivate pendingInboundBytes = 0;\n\tprivate readonly budget: DaemonActivityBudget;\n\n\tprivate readonly configuration: DaemonConfiguration;\n\tprivate readonly roots: SharedWorkspaceRoots;\n\tprivate readonly send: (message: SharedWorkspaceServerFrame) => Promise<void>;\n\tprivate readonly closeSocket: (code: number, message: string) => void;\n\n\tconstructor(\n\t\tconfiguration: DaemonConfiguration,\n\t\troots: SharedWorkspaceRoots,\n\t\tsend: (message: SharedWorkspaceServerFrame) => Promise<void>,\n\t\tcloseSocket: (code: number, message: string) => void,\n\t\tbudget: DaemonActivityBudget = new DaemonActivityBudget(configuration),\n\t) {\n\t\tthis.configuration = configuration;\n\t\tthis.roots = roots;\n\t\tthis.send = send;\n\t\tthis.closeSocket = closeSocket;\n\t\tthis.budget = budget;\n\t}\n\n\treceive(payload: Uint8Array): Promise<void> {\n\t\tif (this.closed) return Promise.resolve();\n\t\tconst limits = this.configuration.protocolLimits;\n\t\tif (\n\t\t\tpayload.byteLength > limits.maxMessageBytes ||\n\t\t\tthis.pendingInboundMessages >= limits.maxPendingInboundMessages ||\n\t\t\tthis.pendingInboundBytes + payload.byteLength > limits.maxPendingInboundBytes\n\t\t) {\n\t\t\tthis.closed = true;\n\t\t\tthis.closeSocket(1009, \"Shared workspace inbound queue exceeds limits\");\n\t\t\treturn Promise.resolve();\n\t\t}\n\t\t// Copy before queuing: WebSocket buffers need not remain stable after the callback returns.\n\t\tconst queuedPayload = Uint8Array.from(payload);\n\t\tthis.pendingInboundMessages++;\n\t\tthis.pendingInboundBytes += queuedPayload.byteLength;\n\t\tlet complete!: () => void;\n\t\tconst finished = new Promise<void>((resolve) => {\n\t\t\tcomplete = resolve;\n\t\t});\n\t\tlet channelPending = false;\n\t\tconst settle = () => {\n\t\t\tthis.pendingInboundMessages--;\n\t\t\tthis.pendingInboundBytes -= queuedPayload.byteLength;\n\t\t\tcomplete();\n\t\t};\n\t\tconst fail = () => {\n\t\t\tif (!this.closed) {\n\t\t\t\tthis.closed = true;\n\t\t\t\tthis.closeSocket(1002, \"Invalid shared workspace frame\");\n\t\t\t}\n\t\t};\n\t\tconst scheduled = this.queue.then(() => {\n\t\t\tif (this.closed) return;\n\t\t\tconst frame = parseSharedWorkspaceClientEnvelope(queuedPayload, limits);\n\t\t\tif (frame.type === \"channel\") {\n\t\t\t\t// Validate the channel before letting the control queue advance. Its own\n\t\t\t\t// protocol preserves per-channel receive order and bounds queued frames.\n\t\t\t\tif (!this.channels.has(frame.channelId)) throw new Error(\"Unknown shared workspace channel\");\n\t\t\t\tchannelPending = true;\n\t\t\t\tvoid this.dispatch(frame).catch(fail).finally(settle);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\t// Hello, opens, closes and reloads remain serialized in control order.\n\t\t\treturn this.dispatch(frame);\n\t\t});\n\t\tthis.queue = scheduled.catch(fail).finally(() => {\n\t\t\tif (!channelPending) settle();\n\t\t});\n\t\treturn finished;\n\t}\n\n\tget handshakeComplete(): boolean {\n\t\treturn this.hello;\n\t}\n\n\tasync beginDrain(): Promise<void> {\n\t\tawait Promise.allSettled([...this.channels.values()].map((channel) => channel.protocol.beginDrain()));\n\t}\n\n\tprivate createChannelRuntime(root: string): DaemonWorkspaceRuntime {\n\t\treturn createDaemonWorkspaceRuntime({\n\t\t\t...this.configuration,\n\t\t\tworkspaceRoot: root,\n\t\t\t// Operator-wide resource files and the v1 temporary root are not channel-scoped.\n\t\t\t// Keep them available on v1, but never expose them through a child channel.\n\t\t\ttemporaryRoot: undefined,\n\t\t\tsandboxInstructionsPath: undefined,\n\t\t\tuserAgentsPath: undefined,\n\t\t});\n\t}\n\n\treload(): Promise<void> {\n\t\tconst operation = this.queue.then(async () => {\n\t\t\tif (this.closed) throw new Error(\"Shared workspace connection is closed\");\n\t\t\tfor (const channel of this.channels.values()) {\n\t\t\t\tconst previous = channel.runtime;\n\t\t\t\tconst previousHandler = channel.handler;\n\t\t\t\tconst candidate = this.createChannelRuntime(channel.workspace.root);\n\t\t\t\tconst candidateHandler = candidate.createHandler(channel.workspace, true);\n\t\t\t\tchannel.runtime = candidate;\n\t\t\t\tchannel.handler = candidateHandler;\n\t\t\t\ttry {\n\t\t\t\t\tawait channel.protocol.publishCatalog({ ...candidate.catalog, generation: channel.generation + 1 });\n\t\t\t\t\tchannel.generation++;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tchannel.runtime = previous;\n\t\t\t\t\tchannel.handler = previousHandler;\n\t\t\t\t\tawait candidate.dispose();\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t\tawait previous.retire();\n\t\t\t}\n\t\t});\n\t\tthis.queue = operation.catch(() => undefined);\n\t\treturn operation;\n\t}\n\n\tprivate async dispatch(frame: SharedWorkspaceClientEnvelope): Promise<void> {\n\t\tif (frame.type === \"hello\") {\n\t\t\tif (this.hello) throw new Error(\"Duplicate v2 hello\");\n\t\t\tthis.hello = true;\n\t\t\tthis.usedControlIds.add(frame.id);\n\t\t\tawait this.send({ type: \"hello_ack\", id: frame.id, version: 2, epoch: this.epoch, daemonVersion: VERSION });\n\t\t\treturn;\n\t\t}\n\t\tif (!this.hello) throw new Error(\"V2 hello required before opening channels\");\n\t\tif (frame.type === \"open\") {\n\t\t\tif (this.usedControlIds.has(frame.id)) throw new Error(\"Duplicate v2 control ID\");\n\t\t\tif (this.usedControlIds.size >= 65_536) throw new Error(\"V2 control ID budget exhausted\");\n\t\t\tthis.usedControlIds.add(frame.id);\n\t\t\tif (this.channels.size >= Math.min(this.configuration.maxConnections, 32)) {\n\t\t\t\tawait this.send({\n\t\t\t\t\ttype: \"control_error\",\n\t\t\t\t\tid: frame.id,\n\t\t\t\t\tcode: \"limit_exceeded\",\n\t\t\t\t\tmessage: \"Channel limit reached\",\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tlet root: string;\n\t\t\ttry {\n\t\t\t\troot = await this.roots.bind(frame.root);\n\t\t\t} catch {\n\t\t\t\tawait this.send({\n\t\t\t\t\ttype: \"control_error\",\n\t\t\t\t\tid: frame.id,\n\t\t\t\t\tcode: \"invalid_root\",\n\t\t\t\t\tmessage: \"Workspace root is not an existing directory under the shared parent\",\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait this.open(frame.id, root);\n\t\t\treturn;\n\t\t}\n\t\tconst channel = this.channels.get(frame.channelId);\n\t\tif (!channel) throw new Error(\"Unknown shared workspace channel\");\n\t\tif (frame.type === \"close\") {\n\t\t\t// Do not wait on a channel's in-flight requests while blocking the socket receive queue.\n\t\t\tthis.channels.delete(frame.channelId);\n\t\t\t// Begin cancellation before acknowledging detach; track it for physical shutdown.\n\t\t\tvoid this.disposeChannel(channel);\n\t\t\tawait this.send({ type: \"closed\", channelId: frame.channelId });\n\t\t\treturn;\n\t\t}\n\t\tawait channel.protocol.receive(Buffer.from(JSON.stringify(frame.payload)));\n\t}\n\n\tprivate async open(id: string, root: string): Promise<void> {\n\t\tconst channelId = randomBytes(24).toString(\"base64url\");\n\t\tconst workspace = Object.freeze({\n\t\t\tid: randomBytes(18).toString(\"base64url\"),\n\t\t\troot,\n\t\t\tpathFlavor: \"posix\" as const,\n\t\t});\n\t\tlet runtime: DaemonWorkspaceRuntime;\n\t\ttry {\n\t\t\truntime = this.createChannelRuntime(root);\n\t\t} catch {\n\t\t\t// A bad child project configuration is an open failure, not a corrupt\n\t\t\t// physical envelope. Keep already bound sibling channels usable.\n\t\t\tawait this.send({\n\t\t\t\ttype: \"control_error\",\n\t\t\t\tid,\n\t\t\t\tcode: \"invalid_request\",\n\t\t\t\tmessage: \"Unable to initialize shared workspace channel\",\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst handler = runtime.createHandler(workspace, true);\n\t\tlet channel!: Channel;\n\t\tconst protocol = new RemoteWorkspaceServerProtocol(\n\t\t\t{\n\t\t\t\tsend: (payload: RemoteWorkspaceServerMessage) =>\n\t\t\t\t\tthis.channels.has(channelId) && !this.closed\n\t\t\t\t\t\t? this.send({ type: \"channel\", channelId, payload })\n\t\t\t\t\t\t: Promise.reject(new Error(\"Shared workspace channel is closed\")),\n\t\t\t\tclose: async (reason) => {\n\t\t\t\t\tconst channel = this.channels.get(channelId);\n\t\t\t\t\tif (channel) {\n\t\t\t\t\t\tthis.channels.delete(channelId);\n\t\t\t\t\t\tvoid this.disposeChannel(channel);\n\t\t\t\t\t\tif (!this.closed) await this.send({ type: \"closed\", channelId, reason });\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t},\n\t\t\t{\n\t\t\t\tvalidateToolArguments: (toolName, value) => channel.handler.validateToolArguments(toolName, value),\n\t\t\t\thandleRequest: (request, context) =>\n\t\t\t\t\tthis.budget.run(request.method, async () => {\n\t\t\t\t\t\tconst result = await withSharedRevisionGuard(\n\t\t\t\t\t\t\trequest,\n\t\t\t\t\t\t\tworkspace.root,\n\t\t\t\t\t\t\tchannel.runtime.operations,\n\t\t\t\t\t\t\tcontext,\n\t\t\t\t\t\t\t() => channel.handler.handleRequest(request, context),\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (request.method !== \"workspace.read\") return result;\n\t\t\t\t\t\tconst read = result as { contentBase64: string };\n\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t...read,\n\t\t\t\t\t\t\trevision: createHash(\"sha256\").update(Buffer.from(read.contentBase64, \"base64\")).digest(\"hex\"),\n\t\t\t\t\t\t};\n\t\t\t\t\t}),\n\t\t\t},\n\t\t\t{\n\t\t\t\tworkspace,\n\t\t\t\tcatalog: runtime.catalog,\n\t\t\t\tcapabilities: runtime.capabilities,\n\t\t\t\tlimits: this.configuration.protocolLimits,\n\t\t\t\tbackendLabel: \"grip-shared-workspace-daemon\",\n\t\t\t},\n\t\t);\n\t\tchannel = { runtime, handler, protocol, workspace, generation: runtime.catalog.generation };\n\t\tthis.channels.set(channelId, channel);\n\t\ttry {\n\t\t\tawait this.send({ type: \"opened\", id, channelId });\n\t\t} catch (error) {\n\t\t\tthis.channels.delete(channelId);\n\t\t\tvoid this.disposeChannel(channel);\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tprivate disposeChannel(channel: Channel): Promise<void> {\n\t\tconst existing = this.channelDisposals.get(channel);\n\t\tif (existing) return existing;\n\t\tconst disposal = (async () => {\n\t\t\tawait channel.protocol.disconnect().catch(() => undefined);\n\t\t\tawait channel.runtime.dispose().catch(() => undefined);\n\t\t})();\n\t\tthis.channelDisposals.set(channel, disposal);\n\t\tthis.pendingDisposals.add(disposal);\n\t\tvoid disposal.then(\n\t\t\t() => this.pendingDisposals.delete(disposal),\n\t\t\t() => this.pendingDisposals.delete(disposal),\n\t\t);\n\t\treturn disposal;\n\t}\n\n\tasync disconnect(): Promise<void> {\n\t\tthis.closed = true;\n\t\tconst channels = [...this.channels.values()];\n\t\tthis.channels.clear();\n\t\tawait Promise.allSettled([...channels.map((channel) => this.disposeChannel(channel)), ...this.pendingDisposals]);\n\t}\n}\n"]}

package/dist/daemon/shared-revision.d.ts

@@ -0,0 +1,5 @@
+import { type RemoteWorkspaceServerRequestContext, type RemoteWorkspaceTypedRequest } from "../core/remote-workspace-protocol/session.ts";
+import type { ConfinedDaemonToolOperations } from "./workspace-runtime.ts";
+/** v2-only CAS checked inside the same process-wide per-file queue as edit/write. */
+export declare function withSharedRevisionGuard<T>(request: RemoteWorkspaceTypedRequest, root: string, operations: ConfinedDaemonToolOperations, context: RemoteWorkspaceServerRequestContext, action: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=shared-revision.d.ts.map

package/dist/daemon/shared-revision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-revision.d.ts","sourceRoot":"","sources":["../../src/daemon/shared-revision.ts"],"names":[],"mappings":"AAGA,OAAO,EAEN,KAAK,mCAAmC,EACxC,KAAK,2BAA2B,EAChC,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAmD3E,qFAAqF;AACrF,wBAAgB,uBAAuB,CAAC,CAAC,EACxC,OAAO,EAAE,2BAA2B,EACpC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,4BAA4B,EACxC,OAAO,EAAE,mCAAmC,EAC5C,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACtB,OAAO,CAAC,CAAC,CAAC,CAgBZ","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { resolve } from \"node:path\";\nimport type { ExpectedWorkspaceRevision } from \"../core/remote-workspace-protocol/contract.ts\";\nimport {\n\tRemoteWorkspaceRequestError,\n\ttype RemoteWorkspaceServerRequestContext,\n\ttype RemoteWorkspaceTypedRequest,\n} from \"../core/remote-workspace-protocol/session.ts\";\nimport { withFileMutationGuard } from \"../core/tools/file-mutation-queue.ts\";\nimport type { ConfinedDaemonToolOperations } from \"./workspace-runtime.ts\";\n\ntype SharedRevisionErrorCode = \"invalid_request\" | \"conflict\";\n\nfunction revisionError(code: SharedRevisionErrorCode, message: string): RemoteWorkspaceRequestError {\n\treturn new RemoteWorkspaceRequestError({ code, message, executionState: \"not_started\", retryable: false });\n}\nfunction requireActiveMutation(context: RemoteWorkspaceServerRequestContext): void {\n\tif (context.signal.aborted)\n\t\tthrow new RemoteWorkspaceRequestError({\n\t\t\tcode: \"cancelled\",\n\t\t\tmessage: \"Shared mutation was cancelled before starting\",\n\t\t\texecutionState: \"not_started\",\n\t\t\tretryable: false,\n\t\t});\n}\n\nfunction missing(error: unknown): boolean {\n\treturn (\n\t\ttypeof error === \"object\" &&\n\t\terror !== null &&\n\t\t\"code\" in error &&\n\t\t(error.code === \"ENOENT\" || error.code === \"ENOTDIR\")\n\t);\n}\n\nasync function checkRevision(\n\tfilePath: string,\n\ttarget: string,\n\trevision: ExpectedWorkspaceRevision,\n\toperations: ConfinedDaemonToolOperations,\n\tcontext: RemoteWorkspaceServerRequestContext,\n): Promise<void> {\n\trequireActiveMutation(context);\n\tif (resolve(filePath) !== target)\n\t\tthrow revisionError(\"invalid_request\", \"Shared mutation path does not match its revision precondition\");\n\tif (\"sha256\" in revision || \"absent\" in revision) {\n\t\tlet actual: Buffer | undefined;\n\t\ttry {\n\t\t\tactual = await operations.readFile(target);\n\t\t} catch (error) {\n\t\t\tif (!missing(error)) throw error;\n\t\t}\n\t\tif (\"sha256\" in revision && (!actual || createHash(\"sha256\").update(actual).digest(\"hex\") !== revision.sha256)) {\n\t\t\tthrow revisionError(\"conflict\", \"Workspace file changed since the expected revision\");\n\t\t}\n\t\tif (\"absent\" in revision && actual) throw revisionError(\"conflict\", \"Workspace file already exists\");\n\t}\n\trequireActiveMutation(context);\n\tcontext.markSideEffectStarted();\n}\n/** v2-only CAS checked inside the same process-wide per-file queue as edit/write. */\nexport function withSharedRevisionGuard<T>(\n\trequest: RemoteWorkspaceTypedRequest,\n\troot: string,\n\toperations: ConfinedDaemonToolOperations,\n\tcontext: RemoteWorkspaceServerRequestContext,\n\taction: () => Promise<T>,\n): Promise<T> {\n\tconst params = request.params as Record<string, unknown>;\n\tconst toolName = request.method === \"tool.invoke\" ? params.toolName : undefined;\n\tif (request.method !== \"workspace.write\" && toolName !== \"edit\" && toolName !== \"write\") return action();\n\tconst args = toolName ? (params.arguments as { path?: unknown }) : params;\n\tif (typeof args?.path !== \"string\" || !args.path)\n\t\tthrow revisionError(\"invalid_request\", \"Shared mutation requires a file path\");\n\tconst revision = params.expectedRevision as ExpectedWorkspaceRevision | undefined;\n\tif (!revision || (toolName === \"edit\" && !(\"sha256\" in revision))) {\n\t\tthrow revisionError(\n\t\t\t\"invalid_request\",\n\t\t\t\"Shared edit requires expected SHA-256; shared write requires expected SHA-256, expected absence or explicit unsafeOverwrite\",\n\t\t);\n\t}\n\tconst target = resolve(root, args.path);\n\treturn withFileMutationGuard((filePath) => checkRevision(filePath, target, revision, operations, context), action);\n}\n"]}

package/dist/daemon/shared-revision.js

@@ -0,0 +1,61 @@
+import { createHash } from "node:crypto";
+import { resolve } from "node:path";
+import { RemoteWorkspaceRequestError, } from "../core/remote-workspace-protocol/session.js";
+import { withFileMutationGuard } from "../core/tools/file-mutation-queue.js";
+function revisionError(code, message) {
+    return new RemoteWorkspaceRequestError({ code, message, executionState: "not_started", retryable: false });
+}
+function requireActiveMutation(context) {
+    if (context.signal.aborted)
+        throw new RemoteWorkspaceRequestError({
+            code: "cancelled",
+            message: "Shared mutation was cancelled before starting",
+            executionState: "not_started",
+            retryable: false,
+        });
+}
+function missing(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        (error.code === "ENOENT" || error.code === "ENOTDIR"));
+}
+async function checkRevision(filePath, target, revision, operations, context) {
+    requireActiveMutation(context);
+    if (resolve(filePath) !== target)
+        throw revisionError("invalid_request", "Shared mutation path does not match its revision precondition");
+    if ("sha256" in revision || "absent" in revision) {
+        let actual;
+        try {
+            actual = await operations.readFile(target);
+        }
+        catch (error) {
+            if (!missing(error))
+                throw error;
+        }
+        if ("sha256" in revision && (!actual || createHash("sha256").update(actual).digest("hex") !== revision.sha256)) {
+            throw revisionError("conflict", "Workspace file changed since the expected revision");
+        }
+        if ("absent" in revision && actual)
+            throw revisionError("conflict", "Workspace file already exists");
+    }
+    requireActiveMutation(context);
+    context.markSideEffectStarted();
+}
+/** v2-only CAS checked inside the same process-wide per-file queue as edit/write. */
+export function withSharedRevisionGuard(request, root, operations, context, action) {
+    const params = request.params;
+    const toolName = request.method === "tool.invoke" ? params.toolName : undefined;
+    if (request.method !== "workspace.write" && toolName !== "edit" && toolName !== "write")
+        return action();
+    const args = toolName ? params.arguments : params;
+    if (typeof args?.path !== "string" || !args.path)
+        throw revisionError("invalid_request", "Shared mutation requires a file path");
+    const revision = params.expectedRevision;
+    if (!revision || (toolName === "edit" && !("sha256" in revision))) {
+        throw revisionError("invalid_request", "Shared edit requires expected SHA-256; shared write requires expected SHA-256, expected absence or explicit unsafeOverwrite");
+    }
+    const target = resolve(root, args.path);
+    return withFileMutationGuard((filePath) => checkRevision(filePath, target, revision, operations, context), action);
+}
+//# sourceMappingURL=shared-revision.js.map

package/dist/daemon/shared-revision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-revision.js","sourceRoot":"","sources":["../../src/daemon/shared-revision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EACN,2BAA2B,GAG3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAK7E,SAAS,aAAa,CAAC,IAA6B,EAAE,OAAe,EAA+B;IACnG,OAAO,IAAI,2BAA2B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAAA,CAC3G;AACD,SAAS,qBAAqB,CAAC,OAA4C,EAAQ;IAClF,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;QACzB,MAAM,IAAI,2BAA2B,CAAC;YACrC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,+CAA+C;YACxD,cAAc,EAAE,aAAa;YAC7B,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;AAAA,CACJ;AAED,SAAS,OAAO,CAAC,KAAc,EAAW;IACzC,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CACrD,CAAC;AAAA,CACF;AAED,KAAK,UAAU,aAAa,CAC3B,QAAgB,EAChB,MAAc,EACd,QAAmC,EACnC,UAAwC,EACxC,OAA4C,EAC5B;IAChB,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,MAAM;QAC/B,MAAM,aAAa,CAAC,iBAAiB,EAAE,+DAA+D,CAAC,CAAC;IACzG,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAClD,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAClC,CAAC;QACD,IAAI,QAAQ,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChH,MAAM,aAAa,CAAC,UAAU,EAAE,oDAAoD,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,QAAQ,IAAI,QAAQ,IAAI,MAAM;YAAE,MAAM,aAAa,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;IACtG,CAAC;IACD,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,qBAAqB,EAAE,CAAC;AAAA,CAChC;AACD,qFAAqF;AACrF,MAAM,UAAU,uBAAuB,CACtC,OAAoC,EACpC,IAAY,EACZ,UAAwC,EACxC,OAA4C,EAC5C,MAAwB,EACX;IACb,MAAM,MAAM,GAAG,OAAO,CAAC,MAAiC,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,EAAE,CAAC;IACzG,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,SAAgC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1E,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI;QAC/C,MAAM,aAAa,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAyD,CAAC;IAClF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,aAAa,CAClB,iBAAiB,EACjB,6HAA6H,CAC7H,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,qBAAqB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;AAAA,CACnH","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { resolve } from \"node:path\";\nimport type { ExpectedWorkspaceRevision } from \"../core/remote-workspace-protocol/contract.ts\";\nimport {\n\tRemoteWorkspaceRequestError,\n\ttype RemoteWorkspaceServerRequestContext,\n\ttype RemoteWorkspaceTypedRequest,\n} from \"../core/remote-workspace-protocol/session.ts\";\nimport { withFileMutationGuard } from \"../core/tools/file-mutation-queue.ts\";\nimport type { ConfinedDaemonToolOperations } from \"./workspace-runtime.ts\";\n\ntype SharedRevisionErrorCode = \"invalid_request\" | \"conflict\";\n\nfunction revisionError(code: SharedRevisionErrorCode, message: string): RemoteWorkspaceRequestError {\n\treturn new RemoteWorkspaceRequestError({ code, message, executionState: \"not_started\", retryable: false });\n}\nfunction requireActiveMutation(context: RemoteWorkspaceServerRequestContext): void {\n\tif (context.signal.aborted)\n\t\tthrow new RemoteWorkspaceRequestError({\n\t\t\tcode: \"cancelled\",\n\t\t\tmessage: \"Shared mutation was cancelled before starting\",\n\t\t\texecutionState: \"not_started\",\n\t\t\tretryable: false,\n\t\t});\n}\n\nfunction missing(error: unknown): boolean {\n\treturn (\n\t\ttypeof error === \"object\" &&\n\t\terror !== null &&\n\t\t\"code\" in error &&\n\t\t(error.code === \"ENOENT\" || error.code === \"ENOTDIR\")\n\t);\n}\n\nasync function checkRevision(\n\tfilePath: string,\n\ttarget: string,\n\trevision: ExpectedWorkspaceRevision,\n\toperations: ConfinedDaemonToolOperations,\n\tcontext: RemoteWorkspaceServerRequestContext,\n): Promise<void> {\n\trequireActiveMutation(context);\n\tif (resolve(filePath) !== target)\n\t\tthrow revisionError(\"invalid_request\", \"Shared mutation path does not match its revision precondition\");\n\tif (\"sha256\" in revision || \"absent\" in revision) {\n\t\tlet actual: Buffer | undefined;\n\t\ttry {\n\t\t\tactual = await operations.readFile(target);\n\t\t} catch (error) {\n\t\t\tif (!missing(error)) throw error;\n\t\t}\n\t\tif (\"sha256\" in revision && (!actual || createHash(\"sha256\").update(actual).digest(\"hex\") !== revision.sha256)) {\n\t\t\tthrow revisionError(\"conflict\", \"Workspace file changed since the expected revision\");\n\t\t}\n\t\tif (\"absent\" in revision && actual) throw revisionError(\"conflict\", \"Workspace file already exists\");\n\t}\n\trequireActiveMutation(context);\n\tcontext.markSideEffectStarted();\n}\n/** v2-only CAS checked inside the same process-wide per-file queue as edit/write. */\nexport function withSharedRevisionGuard<T>(\n\trequest: RemoteWorkspaceTypedRequest,\n\troot: string,\n\toperations: ConfinedDaemonToolOperations,\n\tcontext: RemoteWorkspaceServerRequestContext,\n\taction: () => Promise<T>,\n): Promise<T> {\n\tconst params = request.params as Record<string, unknown>;\n\tconst toolName = request.method === \"tool.invoke\" ? params.toolName : undefined;\n\tif (request.method !== \"workspace.write\" && toolName !== \"edit\" && toolName !== \"write\") return action();\n\tconst args = toolName ? (params.arguments as { path?: unknown }) : params;\n\tif (typeof args?.path !== \"string\" || !args.path)\n\t\tthrow revisionError(\"invalid_request\", \"Shared mutation requires a file path\");\n\tconst revision = params.expectedRevision as ExpectedWorkspaceRevision | undefined;\n\tif (!revision || (toolName === \"edit\" && !(\"sha256\" in revision))) {\n\t\tthrow revisionError(\n\t\t\t\"invalid_request\",\n\t\t\t\"Shared edit requires expected SHA-256; shared write requires expected SHA-256, expected absence or explicit unsafeOverwrite\",\n\t\t);\n\t}\n\tconst target = resolve(root, args.path);\n\treturn withFileMutationGuard((filePath) => checkRevision(filePath, target, revision, operations, context), action);\n}\n"]}

package/dist/daemon/shared-roots.d.ts

@@ -0,0 +1,9 @@
+/** The parent mount is fixed; children can be created at any time. */
+export declare class SharedWorkspaceRoots {
+    readonly parent: string;
+    private constructor();
+    static fromParent(parent: string): Promise<SharedWorkspaceRoots>;
+    bind(requested: string): Promise<string>;
+    private assertWithin;
+}
+//# sourceMappingURL=shared-roots.d.ts.map

package/dist/daemon/shared-roots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-roots.d.ts","sourceRoot":"","sources":["../../src/daemon/shared-roots.ts"],"names":[],"mappings":"AAGA,sEAAsE;AACtE,qBAAa,oBAAoB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,eAEN;IAED,OAAa,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAIrE;IAEK,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS7C;IAED,OAAO,CAAC,YAAY;CAMpB","sourcesContent":["import { realpath, stat } from \"node:fs/promises\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\n\n/** The parent mount is fixed; children can be created at any time. */\nexport class SharedWorkspaceRoots {\n\treadonly parent: string;\n\tprivate constructor(parent: string) {\n\t\tthis.parent = parent;\n\t}\n\n\tstatic async fromParent(parent: string): Promise<SharedWorkspaceRoots> {\n\t\tconst canonical = await realpath(parent);\n\t\tif (!(await stat(canonical)).isDirectory()) throw new Error(\"Shared workspace parent is not a directory\");\n\t\treturn new SharedWorkspaceRoots(canonical);\n\t}\n\n\tasync bind(requested: string): Promise<string> {\n\t\tif (!isAbsolute(requested) || requested.includes(\"\\0\"))\n\t\t\tthrow new Error(\"Shared workspace root must be an absolute path\");\n\t\tconst candidate = resolve(requested);\n\t\tthis.assertWithin(candidate);\n\t\tconst canonical = await realpath(candidate);\n\t\tthis.assertWithin(canonical);\n\t\tif (!(await stat(canonical)).isDirectory()) throw new Error(\"Shared workspace root is not a directory\");\n\t\treturn canonical;\n\t}\n\n\tprivate assertWithin(path: string): void {\n\t\tconst suffix = relative(this.parent, path);\n\t\tif (suffix === \"..\" || suffix.startsWith(`..${sep}`) || isAbsolute(suffix)) {\n\t\t\tthrow new Error(\"Shared workspace root escapes the parent mount\");\n\t\t}\n\t}\n}\n"]}

package/dist/daemon/shared-roots.js

@@ -0,0 +1,33 @@
+import { realpath, stat } from "node:fs/promises";
+import { isAbsolute, relative, resolve, sep } from "node:path";
+/** The parent mount is fixed; children can be created at any time. */
+export class SharedWorkspaceRoots {
+    parent;
+    constructor(parent) {
+        this.parent = parent;
+    }
+    static async fromParent(parent) {
+        const canonical = await realpath(parent);
+        if (!(await stat(canonical)).isDirectory())
+            throw new Error("Shared workspace parent is not a directory");
+        return new SharedWorkspaceRoots(canonical);
+    }
+    async bind(requested) {
+        if (!isAbsolute(requested) || requested.includes("\0"))
+            throw new Error("Shared workspace root must be an absolute path");
+        const candidate = resolve(requested);
+        this.assertWithin(candidate);
+        const canonical = await realpath(candidate);
+        this.assertWithin(canonical);
+        if (!(await stat(canonical)).isDirectory())
+            throw new Error("Shared workspace root is not a directory");
+        return canonical;
+    }
+    assertWithin(path) {
+        const suffix = relative(this.parent, path);
+        if (suffix === ".." || suffix.startsWith(`..${sep}`) || isAbsolute(suffix)) {
+            throw new Error("Shared workspace root escapes the parent mount");
+        }
+    }
+}
+//# sourceMappingURL=shared-roots.js.map

package/dist/daemon/shared-roots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-roots.js","sourceRoot":"","sources":["../../src/daemon/shared-roots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/D,sEAAsE;AACtE,MAAM,OAAO,oBAAoB;IACvB,MAAM,CAAS;IACxB,YAAoB,MAAc,EAAE;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAAA,CACrB;IAED,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAc,EAAiC;QACtE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC1G,OAAO,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAAA,CAC3C;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAmB;QAC9C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACxG,OAAO,SAAS,CAAC;IAAA,CACjB;IAEO,YAAY,CAAC,IAAY,EAAQ;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACnE,CAAC;IAAA,CACD;CACD","sourcesContent":["import { realpath, stat } from \"node:fs/promises\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\n\n/** The parent mount is fixed; children can be created at any time. */\nexport class SharedWorkspaceRoots {\n\treadonly parent: string;\n\tprivate constructor(parent: string) {\n\t\tthis.parent = parent;\n\t}\n\n\tstatic async fromParent(parent: string): Promise<SharedWorkspaceRoots> {\n\t\tconst canonical = await realpath(parent);\n\t\tif (!(await stat(canonical)).isDirectory()) throw new Error(\"Shared workspace parent is not a directory\");\n\t\treturn new SharedWorkspaceRoots(canonical);\n\t}\n\n\tasync bind(requested: string): Promise<string> {\n\t\tif (!isAbsolute(requested) || requested.includes(\"\\0\"))\n\t\t\tthrow new Error(\"Shared workspace root must be an absolute path\");\n\t\tconst candidate = resolve(requested);\n\t\tthis.assertWithin(candidate);\n\t\tconst canonical = await realpath(candidate);\n\t\tthis.assertWithin(canonical);\n\t\tif (!(await stat(canonical)).isDirectory()) throw new Error(\"Shared workspace root is not a directory\");\n\t\treturn canonical;\n\t}\n\n\tprivate assertWithin(path: string): void {\n\t\tconst suffix = relative(this.parent, path);\n\t\tif (suffix === \"..\" || suffix.startsWith(`..${sep}`) || isAbsolute(suffix)) {\n\t\t\tthrow new Error(\"Shared workspace root escapes the parent mount\");\n\t\t}\n\t}\n}\n"]}

package/dist/daemon/workspace-runtime.d.ts

@@ -38,7 +38,7 @@ export interface DaemonWorkspaceRuntime {
     readonly lspRuntime?: LspRuntimeState;
     readonly catalog: RemoteWorkspaceCatalog;
     readonly capabilities: readonly RemoteWorkspaceCapability[];
-    createHandler(workspace: RemoteWorkspaceIdentity): RemoteWorkspaceServerHandler;
+    createHandler(workspace: RemoteWorkspaceIdentity, sharedMode?: boolean): RemoteWorkspaceServerHandler;
     retire(): Promise<void>;
     dispose(): Promise<void>;
 }