@imgly/codesign-mcp 0.1.0

package/dist/workspace/node-fs.js

@@ -0,0 +1,90 @@
+// `node:fs/promises`-backed WorkspaceFS rooted at a host directory. The bulk
+// of methods are thin passthroughs; the exceptions are documented inline:
+//   - writeFile creates parent dirs (our consumers expect that; node does not)
+//   - exists is implemented in terms of stat (node deprecates fs.exists)
+import { promises as nodeFs } from 'node:fs';
+import { dirname, normalize as nodeNormalize, resolve as resolvePath } from 'node:path';
+function toPosix(p) {
+    return p.replace(/\\/g, '/');
+}
+export class NodeWorkspaceFS {
+    constructor(root) {
+        this.root = root;
+    }
+    abs(path) {
+        // Strip leading slash so `resolve` doesn't escape root.
+        const trimmed = path.startsWith('/') ? path.slice(1) : path;
+        const resolved = resolvePath(this.root, nodeNormalize(trimmed));
+        const rootResolved = resolvePath(this.root);
+        if (resolved !== rootResolved &&
+            !resolved.startsWith(`${rootResolved}/`) &&
+            !resolved.startsWith(`${rootResolved}\\`)) {
+            const err = new Error(`path escapes workspace root: ${path}`);
+            err.code = 'EACCES';
+            throw err;
+        }
+        return resolved;
+    }
+    async readFile(path, options) {
+        const encoding = typeof options === 'string' ? options : (options?.encoding ?? null);
+        const abs = this.abs(path);
+        if (encoding === 'utf8' || encoding === 'utf-8')
+            return nodeFs.readFile(abs, 'utf8');
+        const buf = await nodeFs.readFile(abs);
+        return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+    }
+    async writeFile(path, data) {
+        const abs = this.abs(path);
+        await nodeFs.mkdir(dirname(abs), { recursive: true });
+        await nodeFs.writeFile(abs, data);
+    }
+    async stat(path) {
+        const st = await nodeFs.stat(this.abs(path));
+        return {
+            size: st.size,
+            mtimeMs: st.mtimeMs,
+            isFile: () => st.isFile(),
+            isDirectory: () => st.isDirectory()
+        };
+    }
+    async exists(path) {
+        try {
+            await nodeFs.stat(this.abs(path));
+            return true;
+        }
+        catch (err) {
+            if (err.code === 'ENOENT')
+                return false;
+            throw err;
+        }
+    }
+    async readdir(path, options) {
+        const abs = this.abs(path);
+        if (options?.withFileTypes) {
+            const entries = await nodeFs.readdir(abs, { withFileTypes: true });
+            return entries.map((e) => ({
+                name: toPosix(e.name),
+                isFile: () => e.isFile(),
+                isDirectory: () => e.isDirectory()
+            }));
+        }
+        return (await nodeFs.readdir(abs)).map(toPosix);
+    }
+    async mkdir(path, options) {
+        await nodeFs.mkdir(this.abs(path), { recursive: options?.recursive });
+    }
+    async rm(path, options) {
+        const rmOptions = {};
+        if (options?.recursive !== undefined)
+            rmOptions.recursive = options.recursive;
+        if (options?.force !== undefined)
+            rmOptions.force = options.force;
+        await nodeFs.rm(this.abs(path), rmOptions);
+    }
+    async rename(oldPath, newPath) {
+        const newAbs = this.abs(newPath);
+        await nodeFs.mkdir(dirname(newAbs), { recursive: true });
+        await nodeFs.rename(this.abs(oldPath), newAbs);
+    }
+}
+//# sourceMappingURL=node-fs.js.map

package/dist/workspace/node-fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-fs.js","sourceRoot":"","sources":["../../src/workspace/node-fs.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,+EAA+E;AAC/E,yEAAyE;AACzE,OAAO,EAAE,QAAQ,IAAI,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EACL,OAAO,EACP,SAAS,IAAI,aAAa,EAC1B,OAAO,IAAI,WAAW,EACvB,MAAM,WAAW,CAAC;AAUnB,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,eAAe;IAC1B,YAA4B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAEpC,GAAG,CAAC,IAAY;QACtB,wDAAwD;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IACE,QAAQ,KAAK,YAAY;YACzB,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC;YACxC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,YAAY,IAAI,CAAC,EACzC,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAE3D,CAAC;YACF,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;YACpB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAQD,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,OAA4C;QAE5C,MAAM,QAAQ,GACZ,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO;YAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAyB;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE;YACzB,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAOD,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,OAAwB;QAExB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,CAAC,EAAU,EAAE,CAAC,CAAC;gBACd,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;gBACrB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;gBACxB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;aACnC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,OAAsB;QAC9C,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,EAAE,CACN,IAAY,EACZ,OAAkD;QAElD,MAAM,SAAS,GAA6C,EAAE,CAAC;QAC/D,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS;YAClC,SAAS,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAC1C,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;YAAE,SAAS,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAClE,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAe;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;CACF","sourcesContent":["// `node:fs/promises`-backed WorkspaceFS rooted at a host directory. The bulk\n// of methods are thin passthroughs; the exceptions are documented inline:\n//   - writeFile creates parent dirs (our consumers expect that; node does not)\n//   - exists is implemented in terms of stat (node deprecates fs.exists)\nimport { promises as nodeFs } from 'node:fs';\nimport {\n  dirname,\n  normalize as nodeNormalize,\n  resolve as resolvePath\n} from 'node:path';\nimport type {\n  Dirent,\n  FileHandleStats,\n  MkdirOptions,\n  ReaddirOptions,\n  ReadFileOptions,\n  WorkspaceFS\n} from './types.js';\n\nfunction toPosix(p: string): string {\n  return p.replace(/\\\\/g, '/');\n}\n\nexport class NodeWorkspaceFS implements WorkspaceFS {\n  constructor(public readonly root: string) {}\n\n  private abs(path: string): string {\n    // Strip leading slash so `resolve` doesn't escape root.\n    const trimmed = path.startsWith('/') ? path.slice(1) : path;\n    const resolved = resolvePath(this.root, nodeNormalize(trimmed));\n    const rootResolved = resolvePath(this.root);\n    if (\n      resolved !== rootResolved &&\n      !resolved.startsWith(`${rootResolved}/`) &&\n      !resolved.startsWith(`${rootResolved}\\\\`)\n    ) {\n      const err = new Error(`path escapes workspace root: ${path}`) as Error & {\n        code: string;\n      };\n      err.code = 'EACCES';\n      throw err;\n    }\n    return resolved;\n  }\n\n  async readFile(path: string): Promise<Uint8Array>;\n  async readFile(path: string, encoding: 'utf8' | 'utf-8'): Promise<string>;\n  async readFile(\n    path: string,\n    options: ReadFileOptions\n  ): Promise<Uint8Array | string>;\n  async readFile(\n    path: string,\n    options?: 'utf8' | 'utf-8' | ReadFileOptions\n  ): Promise<Uint8Array | string> {\n    const encoding =\n      typeof options === 'string' ? options : (options?.encoding ?? null);\n    const abs = this.abs(path);\n    if (encoding === 'utf8' || encoding === 'utf-8')\n      return nodeFs.readFile(abs, 'utf8');\n    const buf = await nodeFs.readFile(abs);\n    return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);\n  }\n\n  async writeFile(path: string, data: Uint8Array | string): Promise<void> {\n    const abs = this.abs(path);\n    await nodeFs.mkdir(dirname(abs), { recursive: true });\n    await nodeFs.writeFile(abs, data);\n  }\n\n  async stat(path: string): Promise<FileHandleStats> {\n    const st = await nodeFs.stat(this.abs(path));\n    return {\n      size: st.size,\n      mtimeMs: st.mtimeMs,\n      isFile: () => st.isFile(),\n      isDirectory: () => st.isDirectory()\n    };\n  }\n\n  async exists(path: string): Promise<boolean> {\n    try {\n      await nodeFs.stat(this.abs(path));\n      return true;\n    } catch (err) {\n      if ((err as { code?: string }).code === 'ENOENT') return false;\n      throw err;\n    }\n  }\n\n  async readdir(path: string): Promise<string[]>;\n  async readdir(\n    path: string,\n    options: { withFileTypes: true }\n  ): Promise<Dirent[]>;\n  async readdir(\n    path: string,\n    options?: ReaddirOptions\n  ): Promise<string[] | Dirent[]> {\n    const abs = this.abs(path);\n    if (options?.withFileTypes) {\n      const entries = await nodeFs.readdir(abs, { withFileTypes: true });\n      return entries.map(\n        (e): Dirent => ({\n          name: toPosix(e.name),\n          isFile: () => e.isFile(),\n          isDirectory: () => e.isDirectory()\n        })\n      );\n    }\n    return (await nodeFs.readdir(abs)).map(toPosix);\n  }\n\n  async mkdir(path: string, options?: MkdirOptions): Promise<void> {\n    await nodeFs.mkdir(this.abs(path), { recursive: options?.recursive });\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const rmOptions: { recursive?: boolean; force?: boolean } = {};\n    if (options?.recursive !== undefined)\n      rmOptions.recursive = options.recursive;\n    if (options?.force !== undefined) rmOptions.force = options.force;\n    await nodeFs.rm(this.abs(path), rmOptions);\n  }\n\n  async rename(oldPath: string, newPath: string): Promise<void> {\n    const newAbs = this.abs(newPath);\n    await nodeFs.mkdir(dirname(newAbs), { recursive: true });\n    await nodeFs.rename(this.abs(oldPath), newAbs);\n  }\n}\n"]}

package/dist/workspace/s3.d.ts

@@ -0,0 +1,32 @@
+import { type Dirent, type FileHandleStats, type MkdirOptions, type ReadFileOptions, type WorkspaceFS } from './types.js';
+/** The subset of the AWS SDK S3Client the adapter uses (also lets tests inject a fake). */
+export interface S3Like {
+    send(command: unknown): Promise<unknown>;
+}
+export interface S3WorkspaceFSOptions {
+    client: S3Like;
+    bucket: string;
+}
+export declare class S3WorkspaceFS implements WorkspaceFS {
+    private readonly client;
+    private readonly bucket;
+    constructor(opts: S3WorkspaceFSOptions);
+    private getBytes;
+    readFile(path: string): Promise<Uint8Array>;
+    readFile(path: string, encoding: 'utf8' | 'utf-8'): Promise<string>;
+    readFile(path: string, options: ReadFileOptions): Promise<Uint8Array | string>;
+    writeFile(path: string, data: Uint8Array | string): Promise<void>;
+    stat(path: string): Promise<FileHandleStats>;
+    exists(path: string): Promise<boolean>;
+    readdir(path: string): Promise<string[]>;
+    readdir(path: string, options: {
+        withFileTypes: true;
+    }): Promise<Dirent[]>;
+    mkdir(_path: string, _options?: MkdirOptions): Promise<void>;
+    rm(path: string, options?: {
+        recursive?: boolean;
+        force?: boolean;
+    }): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+}
+//# sourceMappingURL=s3.d.ts.map

package/dist/workspace/s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.d.ts","sourceRoot":"","sources":["../../src/workspace/s3.ts"],"names":[],"mappings":"AAqBA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,eAAe,EAEpB,KAAK,YAAY,EAEjB,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,2FAA2F;AAC3F,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAwBD,qBAAa,aAAc,YAAW,WAAW;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,IAAI,EAAE,oBAAoB;YAKxB,QAAQ;IAoBhB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IACnE,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;IAazB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA4B5C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoBtC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACxC,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,aAAa,EAAE,IAAI,CAAA;KAAE,GAC/B,OAAO,CAAC,MAAM,EAAE,CAAC;IAuDd,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5D,EAAE,CACN,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GACjD,OAAO,CAAC,IAAI,CAAC;IAqCV,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQ9D"}

package/dist/workspace/s3.js

@@ -0,0 +1,191 @@
+// packages/codesign-mcp/src/workspace/s3.ts
+//
+// Direct S3/R2 WorkspaceFS. Works against AWS S3 and Cloudflare R2 (via its
+// S3-compatible endpoint with R2 API tokens — a binding is a Workers-runtime
+// API NOT available inside a container, see spec §9.2). Tenant-agnostic and
+// rooted at the bucket; ScopedWorkspaceFS adds the `workspaces/<id>/` prefix.
+//
+// Contract notes (spec §4.3/§4.5):
+//   - writeFile is a single awaited PutObject -> durable-on-return.
+//   - hot-path reads are by-id GetObject; a bounded retry (READ_RETRIES) absorbs
+//     a rare read-after-write 404, then a persistent miss surfaces as ENOENT.
+//
+// NOT exported from workspace/index.ts on purpose: keeps @aws-sdk/client-s3 out
+// of the browser bundle. cli/http.ts imports it directly (node-only).
+import { DeleteObjectCommand, GetObjectCommand, HeadObjectCommand, ListObjectsV2Command, PutObjectCommand } from '@aws-sdk/client-s3';
+import { fsError } from './types.js';
+const READ_RETRIES = 3;
+// ~120ms between read retries: long enough to span typical eventual-consistency
+// propagation on R2/S3, short enough not to stall the hot read path.
+const RETRY_DELAY_MS = 120;
+function is404(err) {
+    const e = err;
+    return (e?.name === 'NoSuchKey' ||
+        e?.name === 'NotFound' ||
+        e?.$metadata?.httpStatusCode === 404);
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function normalizeKey(path) {
+    return path.startsWith('/') ? path.slice(1) : path;
+}
+export class S3WorkspaceFS {
+    constructor(opts) {
+        this.client = opts.client;
+        this.bucket = opts.bucket;
+    }
+    async getBytes(key) {
+        let lastErr;
+        for (let attempt = 0; attempt < READ_RETRIES; attempt++) {
+            try {
+                const res = (await this.client.send(new GetObjectCommand({ Bucket: this.bucket, Key: key })));
+                const body = res.Body;
+                if (!body)
+                    throw fsError('ENOENT', `empty body: ${key}`);
+                return await body.transformToByteArray();
+            }
+            catch (err) {
+                lastErr = err;
+                if (!is404(err))
+                    throw err;
+                if (attempt < READ_RETRIES - 1)
+                    await delay(RETRY_DELAY_MS);
+            }
+        }
+        if (is404(lastErr))
+            throw fsError('ENOENT', `no such key: ${key}`);
+        throw lastErr;
+    }
+    async readFile(path, options) {
+        const bytes = await this.getBytes(normalizeKey(path));
+        const encoding = typeof options === 'string' ? options : (options?.encoding ?? null);
+        if (encoding === 'utf8' || encoding === 'utf-8')
+            return new TextDecoder('utf-8').decode(bytes);
+        return bytes;
+    }
+    async writeFile(path, data) {
+        const body = typeof data === 'string' ? new TextEncoder().encode(data) : data;
+        await this.client.send(new PutObjectCommand({
+            Bucket: this.bucket,
+            Key: normalizeKey(path),
+            Body: body
+        }));
+    }
+    async stat(path) {
+        const key = normalizeKey(path);
+        try {
+            const head = (await this.client.send(new HeadObjectCommand({ Bucket: this.bucket, Key: key })));
+            return {
+                size: head.ContentLength ?? 0,
+                mtimeMs: head.LastModified ? head.LastModified.getTime() : 0,
+                isFile: () => true,
+                isDirectory: () => false
+            };
+        }
+        catch (err) {
+            if (is404(err)) {
+                if (await this.exists(key)) {
+                    return {
+                        size: 0,
+                        mtimeMs: 0,
+                        isFile: () => false,
+                        isDirectory: () => true
+                    };
+                }
+                throw fsError('ENOENT', `no such key: ${key}`);
+            }
+            throw err;
+        }
+    }
+    async exists(path) {
+        const key = normalizeKey(path);
+        try {
+            await this.client.send(new HeadObjectCommand({ Bucket: this.bucket, Key: key }));
+            return true;
+        }
+        catch (err) {
+            if (!is404(err))
+                throw err;
+        }
+        const res = (await this.client.send(new ListObjectsV2Command({
+            Bucket: this.bucket,
+            Prefix: `${key}/`,
+            MaxKeys: 1
+        })));
+        return (res.Contents?.length ?? 0) > 0;
+    }
+    async readdir(path, options) {
+        const key = normalizeKey(path);
+        const prefix = key === '' ? '' : `${key}/`;
+        const files = [];
+        const dirs = [];
+        let token;
+        do {
+            const res = (await this.client.send(new ListObjectsV2Command({
+                Bucket: this.bucket,
+                Prefix: prefix,
+                Delimiter: '/',
+                ContinuationToken: token
+            })));
+            for (const c of res.Contents ?? []) {
+                if (c.Key && c.Key !== prefix)
+                    files.push(c.Key.slice(prefix.length));
+            }
+            for (const p of res.CommonPrefixes ?? []) {
+                if (p.Prefix)
+                    dirs.push(p.Prefix.slice(prefix.length).replace(/\/$/, ''));
+            }
+            token = res.IsTruncated ? res.NextContinuationToken : undefined;
+        } while (token);
+        if (options?.withFileTypes) {
+            return [
+                ...dirs.map((name) => ({
+                    name,
+                    isFile: () => false,
+                    isDirectory: () => true
+                })),
+                ...files.map((name) => ({
+                    name,
+                    isFile: () => true,
+                    isDirectory: () => false
+                }))
+            ];
+        }
+        return [...dirs, ...files];
+    }
+    async mkdir(_path, _options) {
+        // S3 has no directories; mkdir is a no-op (keys imply their prefixes).
+    }
+    async rm(path, options) {
+        const key = normalizeKey(path);
+        if (options?.recursive) {
+            let token;
+            do {
+                const res = (await this.client.send(new ListObjectsV2Command({
+                    Bucket: this.bucket,
+                    Prefix: `${key}/`,
+                    ContinuationToken: token
+                })));
+                for (const c of res.Contents ?? []) {
+                    if (c.Key)
+                        await this.client.send(new DeleteObjectCommand({ Bucket: this.bucket, Key: c.Key }));
+                }
+                token = res.IsTruncated ? res.NextContinuationToken : undefined;
+            } while (token);
+            // node:fs.rm(path,{recursive:true}) removes the path itself too; an S3
+            // delete of a missing key is a no-op, so this is safe whether or not
+            // `key` exists as an object in its own right.
+            await this.client.send(new DeleteObjectCommand({ Bucket: this.bucket, Key: key }));
+            return;
+        }
+        await this.client.send(new DeleteObjectCommand({ Bucket: this.bucket, Key: key }));
+    }
+    async rename(oldPath, newPath) {
+        const oldKey = normalizeKey(oldPath);
+        const bytes = await this.getBytes(oldKey);
+        await this.writeFile(newPath, bytes);
+        await this.client.send(new DeleteObjectCommand({ Bucket: this.bucket, Key: oldKey }));
+    }
+}
+//# sourceMappingURL=s3.js.map

package/dist/workspace/s3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.js","sourceRoot":"","sources":["../../src/workspace/s3.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,EAAE;AACF,mCAAmC;AACnC,oEAAoE;AACpE,iFAAiF;AACjF,8EAA8E;AAC9E,EAAE;AACF,gFAAgF;AAChF,sEAAsE;AACtE,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,OAAO,EAKR,MAAM,YAAY,CAAC;AAYpB,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,gFAAgF;AAChF,qEAAqE;AACrE,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,SAAS,KAAK,CAAC,GAAY;IACzB,MAAM,CAAC,GAAG,GAAiE,CAAC;IAC5E,OAAO,CACL,CAAC,EAAE,IAAI,KAAK,WAAW;QACvB,CAAC,EAAE,IAAI,KAAK,UAAU;QACtB,CAAC,EAAE,SAAS,EAAE,cAAc,KAAK,GAAG,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,OAAO,aAAa;IAIxB,YAAY,IAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAW;QAChC,IAAI,OAAgB,CAAC;QACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACjC,IAAI,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACxD,CAA+D,CAAC;gBACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;gBACtB,IAAI,CAAC,IAAI;oBAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC;gBACzD,OAAO,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAG,CAAC;gBACd,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAC3B,IAAI,OAAO,GAAG,YAAY,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC;QACnE,MAAM,OAAO,CAAC;IAChB,CAAC;IAQD,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,OAA4C;QAE5C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GACZ,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;QACtE,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO;YAC7C,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAyB;QACrD,MAAM,IAAI,GACR,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,gBAAgB,CAAC;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,IAAI;SACX,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAClC,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACzD,CAAoD,CAAC;YACtD,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;gBAC7B,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5D,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;gBAClB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;aACzB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACf,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,OAAO;wBACL,IAAI,EAAE,CAAC;wBACP,OAAO,EAAE,CAAC;wBACV,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;wBACnB,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;qBACxB,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,CAAC,QAAQ,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACzD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;QAC7B,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACjC,IAAI,oBAAoB,CAAC;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,GAAG,GAAG,GAAG;YACjB,OAAO,EAAE,CAAC;SACX,CAAC,CACH,CAA6B,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAOD,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,OAAwB;QAExB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;QAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,KAAyB,CAAC;QAC9B,GAAG,CAAC;YACF,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACjC,IAAI,oBAAoB,CAAC;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,iBAAiB,EAAE,KAAK;aACzB,CAAC,CACH,CAKA,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACnC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,CAAC,MAAM;oBACV,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,CAAC,QAAQ,KAAK,EAAE;QAEhB,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;YAC3B,OAAO;gBACL,GAAG,IAAI,CAAC,GAAG,CACT,CAAC,IAAI,EAAU,EAAE,CAAC,CAAC;oBACjB,IAAI;oBACJ,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;oBACnB,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI;iBACxB,CAAC,CACH;gBACD,GAAG,KAAK,CAAC,GAAG,CACV,CAAC,IAAI,EAAU,EAAE,CAAC,CAAC;oBACjB,IAAI;oBACJ,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;oBAClB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK;iBACzB,CAAC,CACH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,QAAuB;QAChD,uEAAuE;IACzE,CAAC;IAED,KAAK,CAAC,EAAE,CACN,IAAY,EACZ,OAAkD;QAElD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,IAAI,KAAyB,CAAC;YAC9B,GAAG,CAAC;gBACF,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACjC,IAAI,oBAAoB,CAAC;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,MAAM,EAAE,GAAG,GAAG,GAAG;oBACjB,iBAAiB,EAAE,KAAK;iBACzB,CAAC,CACH,CAIA,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;oBACnC,IAAI,CAAC,CAAC,GAAG;wBACP,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAC7D,CAAC;gBACN,CAAC;gBACD,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,CAAC,QAAQ,KAAK,EAAE;YAChB,uEAAuE;YACvE,qEAAqE;YACrE,8CAA8C;YAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC3D,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAe;QAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAC9D,CAAC;IACJ,CAAC;CACF","sourcesContent":["// packages/codesign-mcp/src/workspace/s3.ts\n//\n// Direct S3/R2 WorkspaceFS. Works against AWS S3 and Cloudflare R2 (via its\n// S3-compatible endpoint with R2 API tokens — a binding is a Workers-runtime\n// API NOT available inside a container, see spec §9.2). Tenant-agnostic and\n// rooted at the bucket; ScopedWorkspaceFS adds the `workspaces/<id>/` prefix.\n//\n// Contract notes (spec §4.3/§4.5):\n//   - writeFile is a single awaited PutObject -> durable-on-return.\n//   - hot-path reads are by-id GetObject; a bounded retry (READ_RETRIES) absorbs\n//     a rare read-after-write 404, then a persistent miss surfaces as ENOENT.\n//\n// NOT exported from workspace/index.ts on purpose: keeps @aws-sdk/client-s3 out\n// of the browser bundle. cli/http.ts imports it directly (node-only).\nimport {\n  DeleteObjectCommand,\n  GetObjectCommand,\n  HeadObjectCommand,\n  ListObjectsV2Command,\n  PutObjectCommand\n} from '@aws-sdk/client-s3';\nimport {\n  type Dirent,\n  type FileHandleStats,\n  fsError,\n  type MkdirOptions,\n  type ReaddirOptions,\n  type ReadFileOptions,\n  type WorkspaceFS\n} from './types.js';\n\n/** The subset of the AWS SDK S3Client the adapter uses (also lets tests inject a fake). */\nexport interface S3Like {\n  send(command: unknown): Promise<unknown>;\n}\n\nexport interface S3WorkspaceFSOptions {\n  client: S3Like;\n  bucket: string;\n}\n\nconst READ_RETRIES = 3;\n// ~120ms between read retries: long enough to span typical eventual-consistency\n// propagation on R2/S3, short enough not to stall the hot read path.\nconst RETRY_DELAY_MS = 120;\n\nfunction is404(err: unknown): boolean {\n  const e = err as { name?: string; $metadata?: { httpStatusCode?: number } };\n  return (\n    e?.name === 'NoSuchKey' ||\n    e?.name === 'NotFound' ||\n    e?.$metadata?.httpStatusCode === 404\n  );\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nfunction normalizeKey(path: string): string {\n  return path.startsWith('/') ? path.slice(1) : path;\n}\n\nexport class S3WorkspaceFS implements WorkspaceFS {\n  private readonly client: S3Like;\n  private readonly bucket: string;\n\n  constructor(opts: S3WorkspaceFSOptions) {\n    this.client = opts.client;\n    this.bucket = opts.bucket;\n  }\n\n  private async getBytes(key: string): Promise<Uint8Array> {\n    let lastErr: unknown;\n    for (let attempt = 0; attempt < READ_RETRIES; attempt++) {\n      try {\n        const res = (await this.client.send(\n          new GetObjectCommand({ Bucket: this.bucket, Key: key })\n        )) as { Body?: { transformToByteArray(): Promise<Uint8Array> } };\n        const body = res.Body;\n        if (!body) throw fsError('ENOENT', `empty body: ${key}`);\n        return await body.transformToByteArray();\n      } catch (err) {\n        lastErr = err;\n        if (!is404(err)) throw err;\n        if (attempt < READ_RETRIES - 1) await delay(RETRY_DELAY_MS);\n      }\n    }\n    if (is404(lastErr)) throw fsError('ENOENT', `no such key: ${key}`);\n    throw lastErr;\n  }\n\n  async readFile(path: string): Promise<Uint8Array>;\n  async readFile(path: string, encoding: 'utf8' | 'utf-8'): Promise<string>;\n  async readFile(\n    path: string,\n    options: ReadFileOptions\n  ): Promise<Uint8Array | string>;\n  async readFile(\n    path: string,\n    options?: 'utf8' | 'utf-8' | ReadFileOptions\n  ): Promise<Uint8Array | string> {\n    const bytes = await this.getBytes(normalizeKey(path));\n    const encoding =\n      typeof options === 'string' ? options : (options?.encoding ?? null);\n    if (encoding === 'utf8' || encoding === 'utf-8')\n      return new TextDecoder('utf-8').decode(bytes);\n    return bytes;\n  }\n\n  async writeFile(path: string, data: Uint8Array | string): Promise<void> {\n    const body =\n      typeof data === 'string' ? new TextEncoder().encode(data) : data;\n    await this.client.send(\n      new PutObjectCommand({\n        Bucket: this.bucket,\n        Key: normalizeKey(path),\n        Body: body\n      })\n    );\n  }\n\n  async stat(path: string): Promise<FileHandleStats> {\n    const key = normalizeKey(path);\n    try {\n      const head = (await this.client.send(\n        new HeadObjectCommand({ Bucket: this.bucket, Key: key })\n      )) as { ContentLength?: number; LastModified?: Date };\n      return {\n        size: head.ContentLength ?? 0,\n        mtimeMs: head.LastModified ? head.LastModified.getTime() : 0,\n        isFile: () => true,\n        isDirectory: () => false\n      };\n    } catch (err) {\n      if (is404(err)) {\n        if (await this.exists(key)) {\n          return {\n            size: 0,\n            mtimeMs: 0,\n            isFile: () => false,\n            isDirectory: () => true\n          };\n        }\n        throw fsError('ENOENT', `no such key: ${key}`);\n      }\n      throw err;\n    }\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const key = normalizeKey(path);\n    try {\n      await this.client.send(\n        new HeadObjectCommand({ Bucket: this.bucket, Key: key })\n      );\n      return true;\n    } catch (err) {\n      if (!is404(err)) throw err;\n    }\n    const res = (await this.client.send(\n      new ListObjectsV2Command({\n        Bucket: this.bucket,\n        Prefix: `${key}/`,\n        MaxKeys: 1\n      })\n    )) as { Contents?: unknown[] };\n    return (res.Contents?.length ?? 0) > 0;\n  }\n\n  async readdir(path: string): Promise<string[]>;\n  async readdir(\n    path: string,\n    options: { withFileTypes: true }\n  ): Promise<Dirent[]>;\n  async readdir(\n    path: string,\n    options?: ReaddirOptions\n  ): Promise<string[] | Dirent[]> {\n    const key = normalizeKey(path);\n    const prefix = key === '' ? '' : `${key}/`;\n    const files: string[] = [];\n    const dirs: string[] = [];\n    let token: string | undefined;\n    do {\n      const res = (await this.client.send(\n        new ListObjectsV2Command({\n          Bucket: this.bucket,\n          Prefix: prefix,\n          Delimiter: '/',\n          ContinuationToken: token\n        })\n      )) as {\n        Contents?: Array<{ Key?: string }>;\n        CommonPrefixes?: Array<{ Prefix?: string }>;\n        IsTruncated?: boolean;\n        NextContinuationToken?: string;\n      };\n      for (const c of res.Contents ?? []) {\n        if (c.Key && c.Key !== prefix) files.push(c.Key.slice(prefix.length));\n      }\n      for (const p of res.CommonPrefixes ?? []) {\n        if (p.Prefix)\n          dirs.push(p.Prefix.slice(prefix.length).replace(/\\/$/, ''));\n      }\n      token = res.IsTruncated ? res.NextContinuationToken : undefined;\n    } while (token);\n\n    if (options?.withFileTypes) {\n      return [\n        ...dirs.map(\n          (name): Dirent => ({\n            name,\n            isFile: () => false,\n            isDirectory: () => true\n          })\n        ),\n        ...files.map(\n          (name): Dirent => ({\n            name,\n            isFile: () => true,\n            isDirectory: () => false\n          })\n        )\n      ];\n    }\n    return [...dirs, ...files];\n  }\n\n  async mkdir(_path: string, _options?: MkdirOptions): Promise<void> {\n    // S3 has no directories; mkdir is a no-op (keys imply their prefixes).\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const key = normalizeKey(path);\n    if (options?.recursive) {\n      let token: string | undefined;\n      do {\n        const res = (await this.client.send(\n          new ListObjectsV2Command({\n            Bucket: this.bucket,\n            Prefix: `${key}/`,\n            ContinuationToken: token\n          })\n        )) as {\n          Contents?: Array<{ Key?: string }>;\n          IsTruncated?: boolean;\n          NextContinuationToken?: string;\n        };\n        for (const c of res.Contents ?? []) {\n          if (c.Key)\n            await this.client.send(\n              new DeleteObjectCommand({ Bucket: this.bucket, Key: c.Key })\n            );\n        }\n        token = res.IsTruncated ? res.NextContinuationToken : undefined;\n      } while (token);\n      // node:fs.rm(path,{recursive:true}) removes the path itself too; an S3\n      // delete of a missing key is a no-op, so this is safe whether or not\n      // `key` exists as an object in its own right.\n      await this.client.send(\n        new DeleteObjectCommand({ Bucket: this.bucket, Key: key })\n      );\n      return;\n    }\n    await this.client.send(\n      new DeleteObjectCommand({ Bucket: this.bucket, Key: key })\n    );\n  }\n\n  async rename(oldPath: string, newPath: string): Promise<void> {\n    const oldKey = normalizeKey(oldPath);\n    const bytes = await this.getBytes(oldKey);\n    await this.writeFile(newPath, bytes);\n    await this.client.send(\n      new DeleteObjectCommand({ Bucket: this.bucket, Key: oldKey })\n    );\n  }\n}\n"]}

package/dist/workspace/scoped.d.ts

@@ -0,0 +1,32 @@
+import { type Dirent, type FileHandleStats, type MkdirOptions, type ReaddirOptions, type ReadFileOptions, type WorkspaceFS } from './types.js';
+/**
+ * Validate an opaque, front-asserted workspaceId as a relative path prefix.
+ * Internal `/` is allowed (namespaces like `u/usr_8842`, `s/<sessionId>`);
+ * empty ids, leading `/`, `.`/`..` segments, empty segments, backslashes, and
+ * control characters are rejected. Throws `Error & { code: 'EINVAL' }`.
+ */
+export declare function sanitizeWorkspaceId(id: string): string;
+export declare class ScopedWorkspaceFS implements WorkspaceFS {
+    private readonly inner;
+    private readonly prefix;
+    constructor(inner: WorkspaceFS, workspaceId: string);
+    private scoped;
+    readFile(path: string): Promise<Uint8Array>;
+    readFile(path: string, encoding: 'utf8' | 'utf-8'): Promise<string>;
+    readFile(path: string, options: ReadFileOptions): Promise<Uint8Array | string>;
+    writeFile(path: string, data: Uint8Array | string): Promise<void>;
+    stat(path: string): Promise<FileHandleStats>;
+    exists(path: string): Promise<boolean>;
+    readdir(path: string): Promise<string[]>;
+    readdir(path: string, options: {
+        withFileTypes: true;
+    }): Promise<Dirent[]>;
+    readdir(path: string, options?: ReaddirOptions): Promise<string[] | Dirent[]>;
+    mkdir(path: string, options?: MkdirOptions): Promise<void>;
+    rm(path: string, options?: {
+        recursive?: boolean;
+        force?: boolean;
+    }): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+}
+//# sourceMappingURL=scoped.d.ts.map

package/dist/workspace/scoped.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped.d.ts","sourceRoot":"","sources":["../../src/workspace/scoped.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,eAAe,EAEpB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAatD;AAED,qBAAa,iBAAkB,YAAW,WAAW;IAIjD,OAAO,CAAC,QAAQ,CAAC,KAAK;IAHxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAGb,KAAK,EAAE,WAAW,EACnC,WAAW,EAAE,MAAM;IAKrB,OAAO,CAAC,MAAM;IAKd,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IACnE,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;IAW/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAI5C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACxC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,aAAa,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC1E,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IAW7E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,EAAE,CACA,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GACjD,OAAO,CAAC,IAAI,CAAC;IAIhB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxD"}

package/dist/workspace/scoped.js

@@ -0,0 +1,76 @@
+// packages/codesign-mcp/src/workspace/scoped.ts
+//
+// ScopedWorkspaceFS decorates a WorkspaceFS, prefixing every path with
+// `workspaces/<workspaceId>/`. The workspaceId is an opaque, front-asserted
+// string (see docs/specs/2026-06-09-codesign-mcp-hosted-onprem-design.md §3.1):
+// the container is blind to whether it names a user, a session, or a shared
+// workspace, and to whether it is durable or ephemeral. The decorator's one
+// job is to sanitise it as a path segment so an opaque id can never escape its
+// prefix (§3.3). RevisionStore stays tenant-agnostic; this is the only place
+// tenancy enters the storage path. Overloads are delegated by branching (no
+// `as any`), mirroring node-fs.ts.
+import { fsError } from './types.js';
+/**
+ * Validate an opaque, front-asserted workspaceId as a relative path prefix.
+ * Internal `/` is allowed (namespaces like `u/usr_8842`, `s/<sessionId>`);
+ * empty ids, leading `/`, `.`/`..` segments, empty segments, backslashes, and
+ * control characters are rejected. Throws `Error & { code: 'EINVAL' }`.
+ */
+export function sanitizeWorkspaceId(id) {
+    if (id.length === 0)
+        throw fsError('EINVAL', 'workspaceId must be non-empty');
+    if (id.startsWith('/'))
+        throw fsError('EINVAL', `workspaceId must not start with '/': ${id}`);
+    for (const segment of id.split('/')) {
+        if (segment === '' || segment === '.' || segment === '..')
+            throw fsError('EINVAL', `workspaceId has an invalid path segment: ${id}`);
+        // Reject control characters (0x00-0x1f) and backslashes.
+        // eslint-disable-next-line no-control-regex
+        if (/[\x00-\x1f\\]/.test(segment))
+            throw fsError('EINVAL', `workspaceId has illegal characters: ${id}`);
+    }
+    return id;
+}
+export class ScopedWorkspaceFS {
+    constructor(inner, workspaceId) {
+        this.inner = inner;
+        this.prefix = `workspaces/${sanitizeWorkspaceId(workspaceId)}`;
+    }
+    scoped(path) {
+        const rel = path.startsWith('/') ? path.slice(1) : path;
+        return `${this.prefix}/${rel}`;
+    }
+    readFile(path, options) {
+        const p = this.scoped(path);
+        if (options === undefined)
+            return this.inner.readFile(p);
+        if (typeof options === 'string')
+            return this.inner.readFile(p, options);
+        return this.inner.readFile(p, options);
+    }
+    writeFile(path, data) {
+        return this.inner.writeFile(this.scoped(path), data);
+    }
+    stat(path) {
+        return this.inner.stat(this.scoped(path));
+    }
+    exists(path) {
+        return this.inner.exists(this.scoped(path));
+    }
+    readdir(path, options) {
+        const p = this.scoped(path);
+        if (options?.withFileTypes)
+            return this.inner.readdir(p, { withFileTypes: true });
+        return this.inner.readdir(p, options);
+    }
+    mkdir(path, options) {
+        return this.inner.mkdir(this.scoped(path), options);
+    }
+    rm(path, options) {
+        return this.inner.rm(this.scoped(path), options);
+    }
+    rename(oldPath, newPath) {
+        return this.inner.rename(this.scoped(oldPath), this.scoped(newPath));
+    }
+}
+//# sourceMappingURL=scoped.js.map

package/dist/workspace/scoped.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped.js","sourceRoot":"","sources":["../../src/workspace/scoped.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,gFAAgF;AAChF,4EAA4E;AAC5E,4EAA4E;AAC5E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,mCAAmC;AACnC,OAAO,EAGL,OAAO,EAKR,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;IAC9E,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QACpB,MAAM,OAAO,CAAC,QAAQ,EAAE,wCAAwC,EAAE,EAAE,CAAC,CAAC;IACxE,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YACvD,MAAM,OAAO,CAAC,QAAQ,EAAE,4CAA4C,EAAE,EAAE,CAAC,CAAC;QAC5E,yDAAyD;QACzD,4CAA4C;QAC5C,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;YAC/B,MAAM,OAAO,CAAC,QAAQ,EAAE,uCAAuC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,iBAAiB;IAG5B,YACmB,KAAkB,EACnC,WAAmB;QADF,UAAK,GAAL,KAAK,CAAa;QAGnC,IAAI,CAAC,MAAM,GAAG,cAAc,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;IACjE,CAAC;IAEO,MAAM,CAAC,IAAY;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;IACjC,CAAC;IAQD,QAAQ,CACN,IAAY,EACZ,OAA4C;QAE5C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,IAAyB;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAKD,OAAO,CACL,IAAY,EACZ,OAAwB;QAExB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,OAAO,EAAE,aAAa;YACxB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,OAAsB;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,EAAE,CACA,IAAY,EACZ,OAAkD;QAElD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,CAAC,OAAe,EAAE,OAAe;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;CACF","sourcesContent":["// packages/codesign-mcp/src/workspace/scoped.ts\n//\n// ScopedWorkspaceFS decorates a WorkspaceFS, prefixing every path with\n// `workspaces/<workspaceId>/`. The workspaceId is an opaque, front-asserted\n// string (see docs/specs/2026-06-09-codesign-mcp-hosted-onprem-design.md §3.1):\n// the container is blind to whether it names a user, a session, or a shared\n// workspace, and to whether it is durable or ephemeral. The decorator's one\n// job is to sanitise it as a path segment so an opaque id can never escape its\n// prefix (§3.3). RevisionStore stays tenant-agnostic; this is the only place\n// tenancy enters the storage path. Overloads are delegated by branching (no\n// `as any`), mirroring node-fs.ts.\nimport {\n  type Dirent,\n  type FileHandleStats,\n  fsError,\n  type MkdirOptions,\n  type ReaddirOptions,\n  type ReadFileOptions,\n  type WorkspaceFS\n} from './types.js';\n\n/**\n * Validate an opaque, front-asserted workspaceId as a relative path prefix.\n * Internal `/` is allowed (namespaces like `u/usr_8842`, `s/<sessionId>`);\n * empty ids, leading `/`, `.`/`..` segments, empty segments, backslashes, and\n * control characters are rejected. Throws `Error & { code: 'EINVAL' }`.\n */\nexport function sanitizeWorkspaceId(id: string): string {\n  if (id.length === 0) throw fsError('EINVAL', 'workspaceId must be non-empty');\n  if (id.startsWith('/'))\n    throw fsError('EINVAL', `workspaceId must not start with '/': ${id}`);\n  for (const segment of id.split('/')) {\n    if (segment === '' || segment === '.' || segment === '..')\n      throw fsError('EINVAL', `workspaceId has an invalid path segment: ${id}`);\n    // Reject control characters (0x00-0x1f) and backslashes.\n    // eslint-disable-next-line no-control-regex\n    if (/[\\x00-\\x1f\\\\]/.test(segment))\n      throw fsError('EINVAL', `workspaceId has illegal characters: ${id}`);\n  }\n  return id;\n}\n\nexport class ScopedWorkspaceFS implements WorkspaceFS {\n  private readonly prefix: string;\n\n  constructor(\n    private readonly inner: WorkspaceFS,\n    workspaceId: string\n  ) {\n    this.prefix = `workspaces/${sanitizeWorkspaceId(workspaceId)}`;\n  }\n\n  private scoped(path: string): string {\n    const rel = path.startsWith('/') ? path.slice(1) : path;\n    return `${this.prefix}/${rel}`;\n  }\n\n  readFile(path: string): Promise<Uint8Array>;\n  readFile(path: string, encoding: 'utf8' | 'utf-8'): Promise<string>;\n  readFile(\n    path: string,\n    options: ReadFileOptions\n  ): Promise<Uint8Array | string>;\n  readFile(\n    path: string,\n    options?: 'utf8' | 'utf-8' | ReadFileOptions\n  ): Promise<Uint8Array | string> {\n    const p = this.scoped(path);\n    if (options === undefined) return this.inner.readFile(p);\n    if (typeof options === 'string') return this.inner.readFile(p, options);\n    return this.inner.readFile(p, options);\n  }\n\n  writeFile(path: string, data: Uint8Array | string): Promise<void> {\n    return this.inner.writeFile(this.scoped(path), data);\n  }\n\n  stat(path: string): Promise<FileHandleStats> {\n    return this.inner.stat(this.scoped(path));\n  }\n\n  exists(path: string): Promise<boolean> {\n    return this.inner.exists(this.scoped(path));\n  }\n\n  readdir(path: string): Promise<string[]>;\n  readdir(path: string, options: { withFileTypes: true }): Promise<Dirent[]>;\n  readdir(path: string, options?: ReaddirOptions): Promise<string[] | Dirent[]>;\n  readdir(\n    path: string,\n    options?: ReaddirOptions\n  ): Promise<string[] | Dirent[]> {\n    const p = this.scoped(path);\n    if (options?.withFileTypes)\n      return this.inner.readdir(p, { withFileTypes: true });\n    return this.inner.readdir(p, options);\n  }\n\n  mkdir(path: string, options?: MkdirOptions): Promise<void> {\n    return this.inner.mkdir(this.scoped(path), options);\n  }\n\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    return this.inner.rm(this.scoped(path), options);\n  }\n\n  rename(oldPath: string, newPath: string): Promise<void> {\n    return this.inner.rename(this.scoped(oldPath), this.scoped(newPath));\n  }\n}\n"]}

package/dist/workspace/types.d.ts

@@ -0,0 +1,75 @@
+export interface FileHandleStats {
+    /** Size in bytes. */
+    size: number;
+    /** UNIX-epoch ms. */
+    mtimeMs: number;
+    isFile(): boolean;
+    isDirectory(): boolean;
+}
+export interface ReadFileOptions {
+    encoding?: 'utf8' | 'utf-8' | null;
+}
+export interface MkdirOptions {
+    recursive?: boolean;
+}
+export interface ReaddirOptions {
+    withFileTypes?: boolean;
+}
+export interface Dirent {
+    name: string;
+    isFile(): boolean;
+    isDirectory(): boolean;
+}
+/**
+ * The workspace filesystem. Paths are forward-slash POSIX style, absolute
+ * within the workspace root (e.g. `objects/3a/2b1c.scene`, leading `/`
+ * optional; impls normalise). The workspace owns its root; consumers never
+ * see absolute disk paths.
+ *
+ * Error contract: throws `Error & { code: string }` with node-standard codes —
+ * `ENOENT`, `EEXIST`, `ENOTDIR`, `ENOSYS`.
+ */
+export interface WorkspaceFS {
+    /** Read a file as bytes. Throws ENOENT if missing. */
+    readFile(path: string): Promise<Uint8Array>;
+    /** Read a file as UTF-8 string. Convenience over `readFile` + decode. */
+    readFile(path: string, encoding: 'utf8' | 'utf-8'): Promise<string>;
+    readFile(path: string, options: ReadFileOptions): Promise<Uint8Array | string>;
+    /**
+     * Write a file. Creates parent dirs implicitly (matches our usage; node
+     * does not).
+     *
+     * CONTRACT — durable-on-return: this MUST NOT resolve until the bytes are
+     * durably readable by other instances sharing this backend. The revision
+     * store's cross-instance correctness depends on it (see the design doc
+     * §4.3/§4.5): a by-id read on another container, issued only after this
+     * write's caller responded, must never 404. A direct awaited R2/S3 PUT
+     * satisfies this; a write-back-caching FUSE mount does NOT — do not back a
+     * WorkspaceFS with one.
+     */
+    writeFile(path: string, data: Uint8Array | string): Promise<void>;
+    /** Stat a file/dir. Throws ENOENT if missing. */
+    stat(path: string): Promise<FileHandleStats>;
+    /** True iff `path` exists. Convenience — node has no `exists` (deprecated). */
+    exists(path: string): Promise<boolean>;
+    /** Read a directory listing. */
+    readdir(path: string): Promise<string[]>;
+    readdir(path: string, options: {
+        withFileTypes: true;
+    }): Promise<Dirent[]>;
+    readdir(path: string, options?: ReaddirOptions): Promise<string[] | Dirent[]>;
+    /** Create a directory. `recursive: true` matches `mkdir -p`. */
+    mkdir(path: string, options?: MkdirOptions): Promise<void>;
+    /** Remove a file or directory. `recursive` removes subtrees. */
+    rm(path: string, options?: {
+        recursive?: boolean;
+        force?: boolean;
+    }): Promise<void>;
+    /** Rename or move a path. Atomic where supported. */
+    rename(oldPath: string, newPath: string): Promise<void>;
+}
+/** Construct a node-shaped FS error. */
+export declare function fsError(code: string, message: string): Error & {
+    code: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/workspace/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workspace/types.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,eAAe;IAC9B,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,IAAI,OAAO,CAAC;IAClB,WAAW,IAAI,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,IAAI,OAAO,CAAC;IAClB,WAAW,IAAI,OAAO,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;IAEhC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE,iDAAiD;IACjD,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE7C,+EAA+E;IAC/E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvC,gCAAgC;IAChC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,aAAa,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAE9E,gEAAgE;IAChE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3D,gEAAgE;IAChE,EAAE,CACA,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GACjD,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,qDAAqD;IACrD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,wCAAwC;AACxC,wBAAgB,OAAO,CACrB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,KAAK,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAI1B"}

package/dist/workspace/types.js

@@ -0,0 +1,18 @@
+// packages/codesign-mcp/src/workspace/types.ts
+//
+// `WorkspaceFS` mirrors `node:fs/promises` exactly for the subset codesign-mcp
+// needs. This is a hard repo rule (`.claude/rules/platform-matches-node.md`):
+// method names, parameter shapes, return shapes, and error semantics match
+// node so a `NodeWorkspaceFS` is essentially a passthrough, and any future
+// backend (S3-backed, in-process, sandbox VFS) is a drop-in.
+//
+// Subset, not superset: we only expose methods we use. When we need a
+// convenience that doesn't exist on `node:fs/promises`, we name it differently
+// (e.g. `readFileBytes` — not added yet, kept here as the precedent).
+/** Construct a node-shaped FS error. */
+export function fsError(code, message) {
+    const err = new Error(message);
+    err.code = code;
+    return err;
+}
+//# sourceMappingURL=types.js.map

package/dist/workspace/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/workspace/types.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,sEAAsE;AACtE,+EAA+E;AAC/E,sEAAsE;AAsFtE,wCAAwC;AACxC,MAAM,UAAU,OAAO,CACrB,IAAY,EACZ,OAAe;IAEf,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAA6B,CAAC;IAC3D,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAChB,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["// packages/codesign-mcp/src/workspace/types.ts\n//\n// `WorkspaceFS` mirrors `node:fs/promises` exactly for the subset codesign-mcp\n// needs. This is a hard repo rule (`.claude/rules/platform-matches-node.md`):\n// method names, parameter shapes, return shapes, and error semantics match\n// node so a `NodeWorkspaceFS` is essentially a passthrough, and any future\n// backend (S3-backed, in-process, sandbox VFS) is a drop-in.\n//\n// Subset, not superset: we only expose methods we use. When we need a\n// convenience that doesn't exist on `node:fs/promises`, we name it differently\n// (e.g. `readFileBytes` — not added yet, kept here as the precedent).\n\nexport interface FileHandleStats {\n  /** Size in bytes. */\n  size: number;\n  /** UNIX-epoch ms. */\n  mtimeMs: number;\n  isFile(): boolean;\n  isDirectory(): boolean;\n}\n\nexport interface ReadFileOptions {\n  encoding?: 'utf8' | 'utf-8' | null;\n}\n\nexport interface MkdirOptions {\n  recursive?: boolean;\n}\n\nexport interface ReaddirOptions {\n  withFileTypes?: boolean;\n}\n\nexport interface Dirent {\n  name: string;\n  isFile(): boolean;\n  isDirectory(): boolean;\n}\n\n/**\n * The workspace filesystem. Paths are forward-slash POSIX style, absolute\n * within the workspace root (e.g. `objects/3a/2b1c.scene`, leading `/`\n * optional; impls normalise). The workspace owns its root; consumers never\n * see absolute disk paths.\n *\n * Error contract: throws `Error & { code: string }` with node-standard codes —\n * `ENOENT`, `EEXIST`, `ENOTDIR`, `ENOSYS`.\n */\nexport interface WorkspaceFS {\n  /** Read a file as bytes. Throws ENOENT if missing. */\n  readFile(path: string): Promise<Uint8Array>;\n  /** Read a file as UTF-8 string. Convenience over `readFile` + decode. */\n  readFile(path: string, encoding: 'utf8' | 'utf-8'): Promise<string>;\n  readFile(\n    path: string,\n    options: ReadFileOptions\n  ): Promise<Uint8Array | string>;\n\n  /**\n   * Write a file. Creates parent dirs implicitly (matches our usage; node\n   * does not).\n   *\n   * CONTRACT — durable-on-return: this MUST NOT resolve until the bytes are\n   * durably readable by other instances sharing this backend. The revision\n   * store's cross-instance correctness depends on it (see the design doc\n   * §4.3/§4.5): a by-id read on another container, issued only after this\n   * write's caller responded, must never 404. A direct awaited R2/S3 PUT\n   * satisfies this; a write-back-caching FUSE mount does NOT — do not back a\n   * WorkspaceFS with one.\n   */\n  writeFile(path: string, data: Uint8Array | string): Promise<void>;\n\n  /** Stat a file/dir. Throws ENOENT if missing. */\n  stat(path: string): Promise<FileHandleStats>;\n\n  /** True iff `path` exists. Convenience — node has no `exists` (deprecated). */\n  exists(path: string): Promise<boolean>;\n\n  /** Read a directory listing. */\n  readdir(path: string): Promise<string[]>;\n  readdir(path: string, options: { withFileTypes: true }): Promise<Dirent[]>;\n  readdir(path: string, options?: ReaddirOptions): Promise<string[] | Dirent[]>;\n\n  /** Create a directory. `recursive: true` matches `mkdir -p`. */\n  mkdir(path: string, options?: MkdirOptions): Promise<void>;\n\n  /** Remove a file or directory. `recursive` removes subtrees. */\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n\n  /** Rename or move a path. Atomic where supported. */\n  rename(oldPath: string, newPath: string): Promise<void>;\n}\n\n/** Construct a node-shaped FS error. */\nexport function fsError(\n  code: string,\n  message: string\n): Error & { code: string } {\n  const err = new Error(message) as Error & { code: string };\n  err.code = code;\n  return err;\n}\n"]}