@hyperdreamer/pi-webui 1.15.2 → 1.16.0

package/dist/server/workspaceTasks/workspaceTasksWorkspaceCatalogAdapter.js

@@ -0,0 +1,171 @@
+import { TASKS_CONFIG_PATH, assertWorkspaceTasksCatalogSize, parseWorkspaceTasksConfig, parseWorkspaceTasksConfigText, serializeWorkspaceTasksConfig, } from "../../shared/workspaceTasks.js";
+import { resolveWorkspaceContext } from "../workspaces/workspaceContext.js";
+import { WorkspaceTasksInvalidCatalogError, WorkspaceTasksRevisionConflictError, WorkspaceTasksUnavailableError, WorkspaceTasksUnknownOutcomeError, } from "./workspaceTasksErrors.js";
+const MISSING_MESSAGE = "No workspace tasks configured here.";
+const MISSING_HINT = `${TASKS_CONFIG_PATH} is optional. Create it in this workspace if you want custom tasks.`;
+const INVALID_MESSAGE = "Workspace tasks configuration is invalid.";
+const INVALID_HINT = `Fix ${TASKS_CONFIG_PATH}, then click Refresh.`;
+const UNAVAILABLE_MESSAGE = "Could not load workspace tasks.";
+const UNAVAILABLE_HINT = `Fix ${TASKS_CONFIG_PATH}, then click Refresh.`;
+export function createWorkspaceTasksWorkspaceCatalogAdapter(options) {
+    const { files, authorizer, workspaceMutations } = options;
+    return {
+        async read(address) {
+            try {
+                await validateAddress(address);
+                return responseFromProjection(await readProjection(address));
+            }
+            catch {
+                return unavailableResponse();
+            }
+        },
+        async replace(address, input, writeOptions) {
+            try {
+                await validateAddress(address);
+            }
+            catch {
+                throw new WorkspaceTasksUnavailableError();
+            }
+            await authorizer.reconcileGlobalMoveClaim({ scope: "workspace", address }, writeOptions?.permit);
+            let authorizationError;
+            const publication = { attempted: false, acknowledged: false };
+            try {
+                return await workspaceMutations.run(address, async () => {
+                    const current = await readProjection(address);
+                    if (current.kind === "invalid")
+                        throw new WorkspaceTasksInvalidCatalogError(current.detail);
+                    if (input.expectedRevision !== current.revision)
+                        throw new WorkspaceTasksRevisionConflictError();
+                    const proposed = canonicalizeCatalog(input.config);
+                    if (current.kind === "loaded" && current.canonical === proposed.canonical) {
+                        return responseFromProjection(current);
+                    }
+                    const intent = {
+                        scope: "workspace",
+                        address,
+                        expectedRevision: input.expectedRevision,
+                        config: proposed.config,
+                    };
+                    try {
+                        authorizer.assertWorkspaceMutationAllowed(address, intent, writeOptions?.permit);
+                    }
+                    catch (error) {
+                        authorizationError = error;
+                        throw error;
+                    }
+                    const hooks = {
+                        onPublicationAttempt: () => {
+                            publication.attempted = true;
+                        },
+                        onPublished: () => {
+                            publication.acknowledged = true;
+                            invokeNonThrowing(writeOptions?.onWriteAcknowledged);
+                        },
+                    };
+                    await files.publishCatalog(address, Buffer.from(proposed.canonical, "utf8"), hooks);
+                    const verified = await readProjection(address);
+                    if (verified.kind !== "loaded" || !verified.bytes.equals(Buffer.from(proposed.canonical, "utf8"))) {
+                        throw new WorkspaceTasksUnknownOutcomeError();
+                    }
+                    return responseFromProjection(verified);
+                });
+            }
+            catch (error) {
+                if (error === authorizationError)
+                    throw error;
+                if (error instanceof WorkspaceTasksInvalidCatalogError
+                    || error instanceof WorkspaceTasksRevisionConflictError
+                    || error instanceof WorkspaceTasksUnknownOutcomeError) {
+                    if (error instanceof WorkspaceTasksUnknownOutcomeError) {
+                        invokeNonThrowing(writeOptions?.onWriteOutcomeUnknown);
+                    }
+                    throw error;
+                }
+                if (publication.attempted) {
+                    invokeNonThrowing(writeOptions?.onWriteOutcomeUnknown);
+                    throw new WorkspaceTasksUnknownOutcomeError();
+                }
+                throw new WorkspaceTasksUnavailableError();
+            }
+        },
+    };
+    async function validateAddress(address) {
+        if (options.projects === undefined || options.workspaces === undefined)
+            return;
+        // The file resolver repeats this check before touching the fixed path. The
+        // adapter check keeps route identity failures outside the mutation queue.
+        await resolveWorkspaceContext(options.projects, options.workspaces, address.projectId, address.workspaceId);
+    }
+    async function readProjection(address) {
+        let source;
+        try {
+            source = await files.readCatalog(address);
+        }
+        catch {
+            throw new WorkspaceTasksUnavailableError();
+        }
+        if (source.kind === "missing")
+            return source;
+        if (source.bytes.includes(0))
+            throw new WorkspaceTasksUnavailableError();
+        let text;
+        try {
+            text = new TextDecoder("utf-8", { fatal: true }).decode(source.bytes);
+        }
+        catch {
+            throw new WorkspaceTasksUnavailableError();
+        }
+        const parsed = parseWorkspaceTasksConfigText(text);
+        if (!parsed.ok)
+            return { kind: "invalid", detail: parsed.error };
+        try {
+            assertWorkspaceTasksCatalogSize(parsed.config);
+        }
+        catch (error) {
+            return { kind: "invalid", detail: errorMessage(error) };
+        }
+        return {
+            kind: "loaded",
+            config: parsed.config,
+            canonical: serializeWorkspaceTasksConfig(parsed.config),
+            bytes: source.bytes,
+            revision: source.revision,
+        };
+    }
+    function canonicalizeCatalog(value) {
+        const parsed = parseWorkspaceTasksConfig(value);
+        if (!parsed.ok)
+            throw new WorkspaceTasksInvalidCatalogError(parsed.error);
+        try {
+            assertWorkspaceTasksCatalogSize(parsed.config);
+        }
+        catch (error) {
+            throw new WorkspaceTasksInvalidCatalogError(errorMessage(error));
+        }
+        return { config: parsed.config, canonical: serializeWorkspaceTasksConfig(parsed.config) };
+    }
+}
+function responseFromProjection(projection) {
+    if (projection.kind === "missing") {
+        return { kind: "missing", message: MISSING_MESSAGE, hint: MISSING_HINT, revision: projection.revision };
+    }
+    if (projection.kind === "invalid") {
+        return { kind: "invalid", message: INVALID_MESSAGE, hint: INVALID_HINT, detail: projection.detail };
+    }
+    return { kind: "loaded", config: projection.config, revision: projection.revision };
+}
+function unavailableResponse() {
+    return { kind: "unavailable", message: UNAVAILABLE_MESSAGE, hint: UNAVAILABLE_HINT };
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function invokeNonThrowing(callback) {
+    try {
+        callback?.();
+    }
+    catch {
+        // Lifecycle observers must not change the persistence outcome.
+    }
+}
+//# sourceMappingURL=workspaceTasksWorkspaceCatalogAdapter.js.map

package/dist/server/workspaceTasks/workspaceTasksWorkspaceCatalogAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceTasksWorkspaceCatalogAdapter.js","sourceRoot":"","sources":["../../../src/server/workspaceTasks/workspaceTasksWorkspaceCatalogAdapter.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,iBAAiB,EACjB,+BAA+B,EAC/B,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,GAE9B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,iCAAiC,EACjC,mCAAmC,EACnC,8BAA8B,EAC9B,iCAAiC,GAIlC,MAAM,2BAA2B,CAAC;AAiDnC,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAC9D,MAAM,YAAY,GAAG,GAAG,iBAAiB,qEAAqE,CAAC;AAC/G,MAAM,eAAe,GAAG,2CAA2C,CAAC;AACpE,MAAM,YAAY,GAAG,OAAO,iBAAiB,uBAAuB,CAAC;AACrE,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,OAAO,iBAAiB,uBAAuB,CAAC;AAEzE,MAAM,UAAU,2CAA2C,CACzD,OAAqD;IAErD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAE1D,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,OAAO;YAChB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;gBAC/B,OAAO,sBAAsB,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,mBAAmB,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY;YACxC,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,8BAA8B,EAAE,CAAC;YAC7C,CAAC;YACD,MAAM,UAAU,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YAEjG,IAAI,kBAA2B,CAAC;YAChC,MAAM,WAAW,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAC9D,IAAI,CAAC;gBACH,OAAO,MAAM,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;oBACtD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;oBAC9C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;wBAAE,MAAM,IAAI,iCAAiC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC5F,IAAI,KAAK,CAAC,gBAAgB,KAAK,OAAO,CAAC,QAAQ;wBAAE,MAAM,IAAI,mCAAmC,EAAE,CAAC;oBAEjG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACnD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;wBAC1E,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;oBACzC,CAAC;oBAED,MAAM,MAAM,GAAmE;wBAC7E,KAAK,EAAE,WAAW;wBAClB,OAAO;wBACP,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;wBACxC,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB,CAAC;oBACF,IAAI,CAAC;wBACH,UAAU,CAAC,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;oBACnF,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,kBAAkB,GAAG,KAAK,CAAC;wBAC3B,MAAM,KAAK,CAAC;oBACd,CAAC;oBAED,MAAM,KAAK,GAAgD;wBACzD,oBAAoB,EAAE,GAAG,EAAE;4BACzB,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC;wBAC/B,CAAC;wBACD,WAAW,EAAE,GAAG,EAAE;4BAChB,WAAW,CAAC,YAAY,GAAG,IAAI,CAAC;4BAChC,iBAAiB,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;wBACvD,CAAC;qBACF,CAAC;oBACF,MAAM,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;oBAEpF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;oBAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;wBAClG,MAAM,IAAI,iCAAiC,EAAE,CAAC;oBAChD,CAAC;oBACD,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;gBAC1C,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,KAAK,kBAAkB;oBAAE,MAAM,KAAK,CAAC;gBAC9C,IAAI,KAAK,YAAY,iCAAiC;uBACjD,KAAK,YAAY,mCAAmC;uBACpD,KAAK,YAAY,iCAAiC,EAAE,CAAC;oBACxD,IAAI,KAAK,YAAY,iCAAiC,EAAE,CAAC;wBACvD,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;oBACzD,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;oBAC1B,iBAAiB,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;oBACvD,MAAM,IAAI,iCAAiC,EAAE,CAAC;gBAChD,CAAC;gBACD,MAAM,IAAI,8BAA8B,EAAE,CAAC;YAC7C,CAAC;QACH,CAAC;KACF,CAAC;IAEF,KAAK,UAAU,eAAe,CAAC,OAAgC;QAC7D,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QAC/E,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9G,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,OAAgC;QAC5D,IAAI,MAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC7C,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAEzE,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjE,IAAI,CAAC;YACH,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC;YACvD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;IAED,SAAS,mBAAmB,CAAC,KAA2B;QACtD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,iCAAiC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,iCAAiC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAsC;IACpE,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AACvF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkC;IAC3D,IAAI,CAAC;QACH,QAAQ,EAAE,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC"}

package/dist/server/workspaceTasks/workspaceTasksWorkspaceFile.js

@@ -0,0 +1,227 @@
+import { createHash, randomUUID } from "node:crypto";
+import { lstat, mkdir, open, readFile, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { basename, dirname, join, relative } from "node:path";
+import { MAX_WORKSPACE_FILE_BYTES } from "../../shared/workspaceFiles.js";
+import { TASKS_CONFIG_PATH } from "../../shared/workspaceTasks.js";
+import { readWorkspaceFileBytesFromTarget } from "../workspaces/fileContentService.js";
+import { ensureInside, isNodeErrorWithCode, normalizeRelativePath } from "../workspaces/pathSafety.js";
+import { resolveWorkspaceContext } from "../workspaces/workspaceContext.js";
+const defaultFileSystem = {
+    lstat: (path) => lstat(path),
+    realpath: (path) => realpath(path),
+    mkdir: (path, options) => mkdir(path, options),
+    open: (path) => open(path, "r"),
+    readFile: (path) => readFile(path),
+    writeFile: (path, bytes, options) => writeFile(path, bytes, options),
+    rename: (from, to) => rename(from, to),
+    unlink: (path) => unlink(path),
+    stat: (path) => stat(path),
+};
+export function createWorkspaceTasksWorkspaceFileResolver(options) {
+    const fileSystem = { ...defaultFileSystem, ...(options.fileSystem ?? {}) };
+    const resolveContext = options.resolveContext ?? resolveWorkspaceContext;
+    async function workspaceRoot(address) {
+        const context = await resolveContext(options.projects, options.workspaces, address.projectId, address.workspaceId);
+        const root = await fileSystem.realpath(context.root);
+        const metadata = await fileSystem.lstat(root);
+        if (!metadata.isDirectory())
+            throw new Error("Workspace path must be a directory");
+        return root;
+    }
+    async function resolveFixedTaskPath(address, createParent) {
+        const root = await workspaceRoot(address);
+        const parentPath = join(root, ".pi-webui");
+        let parent;
+        try {
+            parent = await resolveSafeDirectory(root, parentPath, createParent);
+        }
+        catch (error) {
+            if (!createParent && isNodeErrorWithCode(error, "ENOENT"))
+                return { root, parentMissing: true };
+            throw error;
+        }
+        const target = join(parent, "tasks.json");
+        const final = await inspectFinalEntry(target);
+        if (final?.isSymbolicLink() === true)
+            throw new Error("Workspace task file must not be a symbolic link");
+        return { root, parent, target, final };
+    }
+    async function readCatalog(address) {
+        const resolved = await resolveFixedTaskPath(address, false);
+        if ("parentMissing" in resolved || resolved.final === undefined)
+            return { kind: "missing", revision: revisionForMissing() };
+        if (!resolved.final.isFile())
+            throw new Error("Workspace task file must be a regular file");
+        if (resolved.final.size > MAX_WORKSPACE_FILE_BYTES) {
+            throw new Error(`Workspace task file exceeds ${String(MAX_WORKSPACE_FILE_BYTES)} bytes`);
+        }
+        let bytes;
+        try {
+            bytes = await readWorkspaceFileBytesFromTarget(resolved.target, {
+                stat: fileSystem.stat,
+                open: fileSystem.open,
+            });
+        }
+        catch (error) {
+            if (isNodeErrorWithCode(error, "ENOENT"))
+                return { kind: "missing", revision: revisionForMissing() };
+            throw error;
+        }
+        return { kind: "present", bytes, revision: revisionForBytes(bytes) };
+    }
+    async function publishCatalog(address, bytes, hooks = {}) {
+        const resolved = await resolveFixedTaskPath(address, true);
+        if ("parentMissing" in resolved)
+            throw new Error("Workspace task parent could not be created");
+        await publishBytes(resolved.parent, resolved.target, Buffer.from(bytes), hooks);
+    }
+    async function writeExplorerTaskFile(address, body, writeOptions = {}) {
+        const resolved = await resolveFixedTaskPath(address, writeOptions.createDirs ?? true);
+        if ("parentMissing" in resolved)
+            throw new Error("Path does not exist");
+        const exists = resolved.final !== undefined;
+        if (resolved.final !== undefined && !resolved.final.isFile())
+            throw new Error("Path is not a file");
+        if (exists && writeOptions.overwrite === false)
+            throw new Error(`File already exists: ${TASKS_CONFIG_PATH}`);
+        await publishBytes(resolved.parent, resolved.target, Buffer.from(body));
+        const metadata = await fileSystem.stat(resolved.target);
+        return {
+            path: TASKS_CONFIG_PATH,
+            size: metadata.size,
+            modifiedAt: metadata.mtime.toISOString(),
+            created: !exists,
+        };
+    }
+    async function deleteExplorerTaskFile(address) {
+        const resolved = await resolveFixedTaskPath(address, false);
+        if ("parentMissing" in resolved || resolved.final === undefined)
+            return { path: TASKS_CONFIG_PATH, existed: false };
+        if (!resolved.final.isFile())
+            throw new Error("Path is not a file");
+        try {
+            await fileSystem.unlink(resolved.target);
+        }
+        catch (error) {
+            if (isNodeErrorWithCode(error, "ENOENT"))
+                return { path: TASKS_CONFIG_PATH, existed: false };
+            throw error;
+        }
+        return { path: TASKS_CONFIG_PATH, existed: true };
+    }
+    async function moveExplorerTaskFile(address, normalizedMove) {
+        const root = await workspaceRoot(address);
+        const from = normalizeRelativePath(normalizedMove.fromPath);
+        const to = normalizeRelativePath(normalizedMove.toPath);
+        if (from === "" || to === "")
+            throw new Error("File move paths are required");
+        const source = await resolveExplorerEntry(root, from, false);
+        if (source.final === undefined)
+            throw new Error("Path does not exist");
+        if (source.final.isSymbolicLink())
+            throw new Error("Workspace task file must not be a symbolic link");
+        if (!source.final.isFile())
+            throw new Error("Source path is not a file");
+        const destination = await resolveExplorerEntry(root, to, normalizedMove.createDirs ?? true);
+        if (destination.final !== undefined && normalizedMove.overwrite !== true) {
+            throw new Error(`File already exists: ${to}`);
+        }
+        if (destination.final !== undefined && destination.final.isSymbolicLink() && isTaskPath(to)) {
+            throw new Error("Workspace task file must not be a symbolic link");
+        }
+        await fileSystem.rename(source.target, destination.target);
+        const finalMetadata = await fileSystem.stat(destination.target);
+        return {
+            fromPath: from,
+            toPath: to,
+            size: finalMetadata.size,
+            modifiedAt: finalMetadata.mtime.toISOString(),
+        };
+    }
+    return { readCatalog, publishCatalog, writeExplorerTaskFile, deleteExplorerTaskFile, moveExplorerTaskFile };
+    async function publishBytes(parent, target, bytes, hooks = {}) {
+        const temporary = join(parent, `.${basename(target)}.${randomUUID()}.tmp`);
+        let temporaryCreated = true;
+        try {
+            await fileSystem.writeFile(temporary, bytes, { flag: "wx", mode: 0o600 });
+            hooks.onPublicationAttempt?.();
+            await fileSystem.rename(temporary, target);
+            temporaryCreated = false;
+            hooks.onPublished?.();
+        }
+        finally {
+            if (temporaryCreated) {
+                try {
+                    await fileSystem.unlink(temporary);
+                }
+                catch {
+                    // The publication error is authoritative; cleanup is best effort.
+                }
+            }
+        }
+    }
+    async function resolveExplorerEntry(root, relativePath, createParent) {
+        const requested = normalizeRelativePath(relativePath);
+        const targetPath = join(root, requested);
+        ensureInside(root, targetPath);
+        const parent = await resolveSafeDirectory(root, dirname(targetPath), createParent);
+        const target = join(parent, basename(targetPath));
+        return { target, final: await inspectFinalEntry(target) };
+    }
+    async function resolveSafeDirectory(root, directory, createMissing) {
+        const relativeDirectory = normalizeRelativePath(relative(root, directory));
+        let current = root;
+        for (const part of relativeDirectory === "" ? [] : relativeDirectory.split("/")) {
+            const next = join(current, part);
+            let metadata;
+            try {
+                metadata = await fileSystem.lstat(next);
+            }
+            catch (error) {
+                if (!isNodeErrorWithCode(error, "ENOENT") || !createMissing)
+                    throw error;
+                await fileSystem.mkdir(next, { recursive: false });
+                metadata = await fileSystem.lstat(next);
+            }
+            if (metadata.isSymbolicLink())
+                throw new Error("Workspace task parent must not be a symbolic link");
+            if (!metadata.isDirectory())
+                throw new Error("Workspace task parent must be a directory");
+            const canonical = await fileSystem.realpath(next);
+            ensureInside(root, canonical);
+            current = canonical;
+        }
+        return current;
+    }
+    async function inspectFinalEntry(path) {
+        try {
+            return await fileSystem.lstat(path);
+        }
+        catch (error) {
+            if (isNodeErrorWithCode(error, "ENOENT"))
+                return undefined;
+            throw error;
+        }
+    }
+}
+function revisionForMissing() {
+    const hash = createHash("sha256");
+    hash.update("workspace-task-file:missing\0", "utf8");
+    return hash.digest("hex");
+}
+function revisionForBytes(bytes) {
+    const hash = createHash("sha256");
+    hash.update("workspace-task-file:present\0", "utf8");
+    hash.update(bytes);
+    return hash.digest("hex");
+}
+function isTaskPath(path) {
+    return isWorkspaceTasksPath(path);
+}
+export function normalizeWorkspaceTasksPath(path) {
+    return normalizeRelativePath(path);
+}
+export function isWorkspaceTasksPath(path) {
+    return normalizeWorkspaceTasksPath(path) === TASKS_CONFIG_PATH;
+}
+//# sourceMappingURL=workspaceTasksWorkspaceFile.js.map

package/dist/server/workspaceTasks/workspaceTasksWorkspaceFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceTasksWorkspaceFile.js","sourceRoot":"","sources":["../../../src/server/workspaceTasks/workspaceTasksWorkspaceFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE3G,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAQ9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAmC,MAAM,qCAAqC,CAAC;AACxH,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACvG,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AA8D5E,MAAM,iBAAiB,GAAsC;IAC3D,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;IAC9C,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;IAC/B,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClC,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC;IACpE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACtC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9B,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,UAAU,yCAAyC,CACvD,OAAmD;IAEnD,MAAM,UAAU,GAAG,EAAE,GAAG,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,uBAAuB,CAAC;IAEzE,KAAK,UAAU,aAAa,CAAC,OAAgC;QAC3D,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACnH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,oBAAoB,CACjC,OAAgC,EAChC,YAAqB;QAErB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3C,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;YAChG,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,cAAc,EAAE,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACzG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,OAAgC;QACzD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5D,IAAI,eAAe,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;QAC5H,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5F,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,gCAAgC,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC9D,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAAE,CAAC;YACrG,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;IACvE,CAAC;IAED,KAAK,UAAU,cAAc,CAC3B,OAAgC,EAChC,KAAiB,EACjB,QAAqD,EAAE;QAEvD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,eAAe,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC/F,MAAM,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,UAAU,qBAAqB,CAClC,OAAgC,EAChC,IAAgB,EAChB,eAA0C,EAAE;QAE5C,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,YAAY,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;QACtF,IAAI,eAAe,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC;QAC5C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACpG,IAAI,MAAM,IAAI,YAAY,CAAC,SAAS,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,iBAAiB,EAAE,CAAC,CAAC;QAE7G,MAAM,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE;YACxC,OAAO,EAAE,CAAC,MAAM;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,OAAgC;QACpE,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5D,IAAI,eAAe,IAAI,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpH,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC7F,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,UAAU,oBAAoB,CACjC,OAAgC,EAChC,cAAgD;QAEhD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,qBAAqB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,qBAAqB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACtG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAEzE,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,cAAc,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;QAC5F,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,cAAc,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChE,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,CAAC;IAE5G,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,MAAc,EACd,KAAa,EACb,QAAqD,EAAE;QAEvD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;QAC3E,IAAI,gBAAgB,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC/B,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3C,gBAAgB,GAAG,KAAK,CAAC;YACzB,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,gBAAgB,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,kEAAkE;gBACpE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,oBAAoB,CACjC,IAAY,EACZ,YAAoB,EACpB,YAAqB;QAErB,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,SAAiB,EAAE,aAAsB;QACzF,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,iBAAiB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,QAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,aAAa;oBAAE,MAAM,KAAK,CAAC;gBACzE,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,QAAQ,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACpG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClD,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC9B,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;QAC3C,IAAI,CAAC;YACH,OAAO,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC3D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAwB;IAClE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,OAAO,2BAA2B,CAAC,IAAI,CAAC,KAAK,iBAAiB,CAAC;AACjE,CAAC"}

package/dist/server/workspaceTasks/workspaceTasksWorkspacePathGate.js

@@ -0,0 +1,42 @@
+import { isWorkspaceTasksPath } from "./workspaceTasksWorkspaceFile.js";
+const GENERIC_WORKSPACE_EXPECTED_REVISION = "workspace-explorer";
+const EMPTY_CATALOG = { version: 1, tasks: [] };
+/**
+ * Serializes explorer operations that target the fixed workspace task file with
+ * the same per-workspace authority used by the task adapter.
+ */
+export class WorkspaceTasksWorkspacePathGate {
+    constructor(authorizer, workspaceMutations) {
+        this.authorizer = authorizer;
+        if (workspaceMutations !== undefined) {
+            this.workspaceMutations = workspaceMutations;
+        }
+        else if (isWorkspaceMutationCoordinator(authorizer)) {
+            this.workspaceMutations = authorizer;
+        }
+        else {
+            throw new Error("Workspace task path gate requires a workspace mutation coordinator");
+        }
+    }
+    async run(address, normalizedTargets, operation) {
+        if (!normalizedTargets.some((target) => isWorkspaceTasksPath(target)))
+            return operation();
+        await this.authorizer.reconcileGlobalMoveClaim({ scope: "workspace", address });
+        return this.workspaceMutations.run(address, async () => {
+            this.authorizer.assertWorkspaceMutationAllowed(address, workspaceMutationIntent(address));
+            return operation();
+        });
+    }
+}
+function workspaceMutationIntent(address) {
+    return {
+        scope: "workspace",
+        address,
+        expectedRevision: GENERIC_WORKSPACE_EXPECTED_REVISION,
+        config: EMPTY_CATALOG,
+    };
+}
+function isWorkspaceMutationCoordinator(value) {
+    return "run" in value && typeof value.run === "function";
+}
+//# sourceMappingURL=workspaceTasksWorkspacePathGate.js.map

package/dist/server/workspaceTasks/workspaceTasksWorkspacePathGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceTasksWorkspacePathGate.js","sourceRoot":"","sources":["../../../src/server/workspaceTasks/workspaceTasksWorkspacePathGate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAIxE,MAAM,mCAAmC,GAAG,oBAAoB,CAAC;AACjE,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAEzD;;;GAGG;AACH,MAAM,OAAO,+BAA+B;IAG1C,YACmB,UAA4C,EAC7D,kBAA+D;QAD9C,eAAU,GAAV,UAAU,CAAkC;QAG7D,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC/C,CAAC;aAAM,IAAI,8BAA8B,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CACP,OAAgC,EAChC,iBAAoC,EACpC,SAA2B;QAE3B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QAE1F,MAAM,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACrD,IAAI,CAAC,UAAU,CAAC,8BAA8B,CAAC,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1F,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,OAAgC;IAC/D,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,OAAO;QACP,gBAAgB,EAAE,mCAAmC;QACrD,MAAM,EAAE,aAAa;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAuC;IAEvC,OAAO,KAAK,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,UAAU,CAAC;AAC3D,CAAC"}

package/dist/server/workspaces/fileContentService.js

@@ -1,9 +1,9 @@
-import { lstat, mkdir, open, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
-import { basename, dirname, join } from "node:path";
+import { lstat, mkdir, open, readlink, realpath, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { MAX_WORKSPACE_FILE_BYTES } from "../../shared/workspaceFiles.js";
 import { imageMimeTypeForPath } from "./imagePreviewService.js";
 import { resolveWorkspacePathAccessTarget } from "./pathAccessPolicy.js";
-import { ensureInside, isNodeErrorWithCode, resolveInsideWorkspace, resolveParentInsideWorkspace } from "./pathSafety.js";
-const MAX_BYTES = 512 * 1024;
+import { ensureInside, isNodeErrorWithCode, normalizeRelativePath, resolveInsideWorkspace, resolveParentInsideWorkspace } from "./pathSafety.js";
 export async function readWorkspaceFile(rootPath, path, pathAccess) {
     if (path === undefined || path === "")
         throw new Error("path query parameter is required");
@@ -11,7 +11,7 @@ export async function readWorkspaceFile(rootPath, path, pathAccess) {
     const s = await stat(target);
     if (!s.isFile())
         throw new Error("Path is not a file");
-    const bytesToRead = Math.min(s.size, MAX_BYTES);
+    const bytesToRead = Math.min(s.size, MAX_WORKSPACE_FILE_BYTES);
     const buffer = await readFilePrefix(target, bytesToRead);
     const media = mediaForPath(displayPath);
     const binary = media.mediaType === "image" || isProbablyBinary(buffer);
@@ -23,10 +23,63 @@ export async function readWorkspaceFile(rootPath, path, pathAccess) {
         size: s.size,
         modifiedAt: s.mtime.toISOString(),
         content: binary ? "" : buffer.toString("utf8"),
-        truncated: s.size > MAX_BYTES,
+        truncated: s.size > MAX_WORKSPACE_FILE_BYTES,
         binary,
     };
 }
+/**
+ * Read a complete workspace file as bytes while requiring valid UTF-8. This
+ * is intentionally separate from the explorer preview, whose contract keeps
+ * truncation and replacement-character decoding for arbitrary files.
+ */
+export async function readWorkspaceFileRaw(rootPath, path, pathAccess) {
+    if (path === undefined || path === "")
+        throw new Error("path query parameter is required");
+    let target;
+    if (path.startsWith("/") || path.startsWith("~")) {
+        ({ target } = await resolveWorkspacePathAccessTarget(rootPath, path, pathAccess));
+    }
+    else {
+        const resolved = await resolveParentInsideWorkspace(rootPath, path);
+        const realParent = await realpath(dirname(resolved.target));
+        target = join(realParent, basename(resolved.target));
+        ensureInside(resolved.root, target);
+        const entry = await lstat(target);
+        if (entry.isSymbolicLink())
+            throw new Error("Workspace file must not be a symbolic link");
+    }
+    return readWorkspaceFileBytesFromTarget(target);
+}
+export async function readWorkspaceFileBytesFromTarget(target, operations = { stat, open: (path) => open(path, "r") }) {
+    const metadata = await operations.stat(target);
+    if (!metadata.isFile())
+        throw new Error("Path is not a file");
+    if (metadata.size > MAX_WORKSPACE_FILE_BYTES) {
+        throw new Error(`Workspace file exceeds ${String(MAX_WORKSPACE_FILE_BYTES)} bytes`);
+    }
+    const buffer = Buffer.alloc(MAX_WORKSPACE_FILE_BYTES + 1);
+    const handle = await operations.open(target);
+    let bytesRead = 0;
+    try {
+        while (bytesRead < buffer.length) {
+            const result = await handle.read(buffer, bytesRead, buffer.length - bytesRead, bytesRead);
+            if (result.bytesRead === 0)
+                break;
+            bytesRead += result.bytesRead;
+        }
+    }
+    finally {
+        await handle.close();
+    }
+    if (bytesRead > MAX_WORKSPACE_FILE_BYTES) {
+        throw new Error(`Workspace file exceeds ${String(MAX_WORKSPACE_FILE_BYTES)} bytes`);
+    }
+    const bytes = buffer.subarray(0, bytesRead);
+    if (bytes.includes(0))
+        throw new Error("Workspace file is binary");
+    new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    return bytes;
+}
 async function readFilePrefix(target, bytesToRead) {
     if (bytesToRead === 0)
         return Buffer.alloc(0);
@@ -40,6 +93,63 @@ async function readFilePrefix(target, bytesToRead) {
         await handle.close();
     }
 }
+/**
+ * Resolve existing aliases before a route decides whether a fixed-file owner
+ * owns a mutation. A caller can stop at its fixed target to preserve that
+ * owner's final-entry no-follow checks.
+ */
+export async function resolveWorkspaceFileMutationPath(rootPath, path, options = {}) {
+    const { root, relativePath } = await resolveParentInsideWorkspace(rootPath, path ?? "");
+    const resolvedPaths = new Set([relativePath]);
+    if (options.stopAt?.(relativePath) === true) {
+        return { normalizedPath: relativePath, resolvedPaths: [...resolvedPaths] };
+    }
+    let current = root;
+    let remaining = relativePath === "" ? [] : relativePath.split("/");
+    let resolvedLinks = 0;
+    while (remaining.length > 0) {
+        const part = remaining.shift();
+        if (part === undefined)
+            break;
+        const target = join(current, part);
+        ensureInside(root, target);
+        let entry;
+        try {
+            entry = await lstat(target);
+        }
+        catch (error) {
+            if (!isNodeErrorWithCode(error, "ENOENT"))
+                throw error;
+            const unresolvedTarget = join(target, ...remaining);
+            ensureInside(root, unresolvedTarget);
+            const unresolvedPath = normalizeRelativePath(relative(root, unresolvedTarget));
+            resolvedPaths.add(unresolvedPath);
+            return { normalizedPath: relativePath, resolvedPaths: [...resolvedPaths] };
+        }
+        if (!entry.isSymbolicLink()) {
+            current = target;
+            continue;
+        }
+        if (remaining.length === 0 && options.followFinalSymlink === false) {
+            return { normalizedPath: relativePath, resolvedPaths: [...resolvedPaths] };
+        }
+        resolvedLinks += 1;
+        if (resolvedLinks > 40)
+            throw new Error("Too many symbolic links in workspace mutation path");
+        const link = await readlink(target);
+        const linkTarget = isAbsolute(link) ? link : resolve(dirname(target), link);
+        ensureInside(root, linkTarget);
+        const linkPath = normalizeRelativePath(relative(root, linkTarget));
+        remaining = [...(linkPath === "" ? [] : linkPath.split("/")), ...remaining];
+        const resolvedPath = remaining.join("/");
+        resolvedPaths.add(resolvedPath);
+        if (options.stopAt?.(resolvedPath) === true) {
+            return { normalizedPath: relativePath, resolvedPaths: [...resolvedPaths] };
+        }
+        current = root;
+    }
+    return { normalizedPath: relativePath, resolvedPaths: [...resolvedPaths] };
+}
 export async function writeWorkspaceFile(rootPath, path, content, options = {}) {
     if (path === undefined || path === "")
         throw new Error("path query parameter is required");