@marifold/core 0.69.0 → 0.71.0

package/dist/workspace/WorkspaceExecutor.js

@@ -0,0 +1,212 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkspaceExecutor = void 0;
+exports.executionTools = executionTools;
+const WorkspaceArtifactTransfer_1 = require("./WorkspaceArtifactTransfer");
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const workspace_protocol_1 = require("@marifold/workspace-protocol");
+const RunWorkspace_1 = require("../agent/RunWorkspace");
+const RunArtifacts_1 = require("../agent/RunArtifacts");
+const ToolRegistry_1 = require("../agent/ToolRegistry");
+const InspectAttachmentTool_1 = require("../agent/tools/InspectAttachmentTool");
+const ReadAttachmentTool_1 = require("../agent/tools/ReadAttachmentTool");
+const SearchAttachmentTool_1 = require("../agent/tools/SearchAttachmentTool");
+const ReadFileTool_1 = require("../agent/tools/ReadFileTool");
+const WriteFileTool_1 = require("../agent/tools/WriteFileTool");
+const ShellExecTool_1 = require("../agent/tools/ShellExecTool");
+const WorkspacePaths_1 = require("./WorkspacePaths");
+function executionTools() {
+    return [
+        new InspectAttachmentTool_1.InspectAttachmentTool(),
+        new ReadAttachmentTool_1.ReadAttachmentTool(),
+        new SearchAttachmentTool_1.SearchAttachmentTool(),
+        new ReadFileTool_1.ReadFileTool(),
+        new WriteFileTool_1.WriteFileTool(),
+        new ShellExecTool_1.ShellExecTool(),
+    ];
+}
+/** A device owns its own capability construction. Host paths, trusted folders,
+ * shell environments, and credentials are never accepted as grants over RPC. */
+class WorkspaceExecutor {
+    config;
+    runsDir;
+    protectedPaths;
+    runs = new Map();
+    registry = new ToolRegistry_1.ToolRegistry();
+    timer;
+    constructor(config, runsDir, protectedPaths = []) {
+        this.config = config;
+        this.runsDir = runsDir;
+        this.protectedPaths = protectedPaths;
+        for (const tool of executionTools())
+            this.registry.register(tool);
+        this.timer = setInterval(() => {
+            for (const [id, run] of this.runs)
+                if (run.lease < Date.now()) {
+                    run.abort.abort();
+                    this.runs.delete(id);
+                }
+        }, 5000);
+        this.timer.unref();
+    }
+    close() {
+        clearInterval(this.timer);
+        for (const run of this.runs.values())
+            run.abort.abort();
+        this.runs.clear();
+    }
+    cancelWorkspace(workspaceId) {
+        for (const [key, run] of this.runs)
+            if (key.startsWith(`${workspaceId}:`)) {
+                run.abort.abort();
+                this.runs.delete(key);
+            }
+    }
+    async handle(operation, value, context) {
+        const b = (0, workspace_protocol_1.record)(value);
+        const runId = (0, workspace_protocol_1.identifier)(b.runId);
+        const key = `${context.workspaceId}:${runId}`;
+        // Completed output is read-only and recoverable after a guest restart. Never
+        // reconstruct execution capabilities or grants from an on-disk run directory.
+        if (operation === 'executor.artifact') {
+            const artifact = (0, RunArtifacts_1.resolveRunArtifact)(`ws_${(0, workspace_protocol_1.identifier)(context.workspaceId)}_${runId}`, (0, workspace_protocol_1.identifier)(b.artifactId), this.runsDir ?? path.join((0, WorkspacePaths_1.marifoldHome)(), 'runs'));
+            if (!artifact)
+                throw new Error('Artifact is unavailable.');
+            const offset = b.offset;
+            if (typeof offset !== 'number' || !Number.isSafeInteger(offset) || offset < 0 || offset > artifact.size)
+                throw new Error('Invalid artifact offset.');
+            const fd = fs.openSync(artifact.path, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+            try {
+                const bytes = Buffer.alloc(Math.min((0, WorkspaceArtifactTransfer_1.artifactReadLength)(b.length), artifact.size - offset));
+                const n = fs.readSync(fd, bytes, 0, bytes.length, offset);
+                return { data: bytes.subarray(0, n).toString('base64'), size: artifact.size };
+            }
+            finally {
+                fs.closeSync(fd);
+            }
+        }
+        if (operation === 'executor.prepare') {
+            if (this.runs.has(key))
+                throw new Error('Execution already prepared.');
+            if (this.runs.size >= 50)
+                throw new Error('Execution capacity reached.');
+            if (Array.isArray(b.images) && b.images.some((image) => !image || typeof image !== 'object' || 'path' in image))
+                throw new Error('Remote image inputs must carry bytes or URLs, never device paths.');
+            const config = this.config();
+            const workspace = (0, RunWorkspace_1.createRunWorkspace)({
+                deniedRoots: this.protectedPaths,
+                id: `ws_${context.workspaceId}_${runId}`,
+                cwd: typeof b.cwd === 'string' ? b.cwd : undefined,
+                trustedFolders: config.trustedFolders,
+                files: Array.isArray(b.files) ? b.files : undefined,
+                images: Array.isArray(b.images) ? b.images : undefined,
+                ...(this.runsDir ? { runsDir: this.runsDir } : {}),
+            });
+            this.runs.set(key, {
+                workspace,
+                abort: new AbortController(),
+                lease: Date.now() + 45000,
+                grants: new Map(),
+                completed: false,
+            });
+            return workspace;
+        }
+        const run = this.runs.get(key);
+        if (!run)
+            throw new Error('Execution is unavailable or its lease expired. Start a new run explicitly.');
+        if (operation === 'executor.cancel') {
+            run.abort.abort();
+            return { cancelled: true };
+        }
+        if (operation === 'executor.lease') {
+            if (!run.completed && !run.abort.signal.aborted)
+                run.lease = Date.now() + 45000;
+            return { active: !run.abort.signal.aborted };
+        }
+        if (operation === 'executor.artifacts') {
+            run.completed = true;
+            run.lease = Date.now() + 24 * 60 * 60 * 1000;
+            return (0, RunArtifacts_1.listRunArtifacts)(run.workspace);
+        }
+        if (run.completed || run.abort.signal.aborted)
+            throw new Error('Execution has ended.');
+        const tool = this.registry.get(String(b.tool));
+        if (!tool || tool.kind === 'interaction')
+            throw new Error('Unsupported execution tool.');
+        const input = (0, workspace_protocol_1.record)(b.input);
+        const toolContext = {
+            workspace: run.workspace,
+            cwd: run.workspace.cwd,
+            trustedFolders: this.config().trustedFolders,
+            outputLimit: this.config().toolOutputLimit,
+            signal: run.abort.signal,
+        };
+        const risk = (await tool.assessRisk?.(input, toolContext)) ?? { escalate: false };
+        const blocked = risk.blocked || (!risk.trusted && this.config().approval[tool.kind] === 'deny');
+        const hash = (0, workspace_protocol_1.digest)(JSON.stringify([tool.definition.name, input]));
+        if (operation === 'executor.assess') {
+            const grant = (0, workspace_protocol_1.randomId)();
+            for (const [id, g] of run.grants)
+                if (g.expires < Date.now())
+                    run.grants.delete(id);
+            if (run.grants.size >= 128)
+                throw new Error('Too many outstanding execution grants.');
+            if (!blocked)
+                run.grants.set(grant, { hash, expires: Date.now() + 6 * 60 * 1000 });
+            return {
+                ...risk,
+                blocked,
+                grant,
+                persistable: false,
+                trusted: false,
+                escalate: true,
+                reason: blocked
+                    ? (risk.reason ?? 'Denied by execution device policy.')
+                    : (risk.reason ?? 'Approve this call on the selected device.'),
+            };
+        }
+        if (operation !== 'executor.execute')
+            throw new Error('Unsupported executor operation.');
+        const grant = run.grants.get(String(b.grant));
+        run.grants.delete(String(b.grant));
+        if (blocked || !grant || grant.hash !== hash || grant.expires < Date.now())
+            throw new Error('Execution grant is invalid or expired.');
+        return tool.execute(input, toolContext);
+    }
+}
+exports.WorkspaceExecutor = WorkspaceExecutor;
+//# sourceMappingURL=WorkspaceExecutor.js.map

package/dist/workspace/WorkspaceExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceExecutor.js","sourceRoot":"","sources":["../../src/workspace/WorkspaceExecutor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2EAAiE;AACjE,MAAY,EAAE,oCAAgB;AAC9B,MAAY,IAAI,sCAAkB;AAClC,qEAAoF;AAEpF,wDAA8E;AAC9E,wDAA6E;AAC7E,wDAAgG;AAChG,gFAA6E;AAC7E,0EAAuE;AACvE,8EAA2E;AAC3E,8DAA2D;AAC3D,gEAA6D;AAC7D,gEAA6D;AAC7D,qDAAgD;AAIhD;IACE,OAAO;QACL,IAAI,6CAAqB,EAAE;QAC3B,IAAI,uCAAkB,EAAE;QACxB,IAAI,2CAAoB,EAAE;QAC1B,IAAI,2BAAY,EAAE;QAClB,IAAI,6BAAa,EAAE;QACnB,IAAI,6BAAa,EAAE;KACpB,CAAC;AACJ,CAAC;AAQD;gFACgF;AAChF;IAKqB,MAAM;IACN,OAAO;IACP,cAAc;IANzB,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpC,QAAQ,GAAG,IAAI,2BAAY,EAAE,CAAC;IAC9B,KAAK,CAAiC;IAC9C,YACmB,MAAiC,EACjC,OAAgB,EAChB,cAAc,GAAa,EAAE;sBAF7B,MAAM;uBACN,OAAO;8BACP,cAAc;QAE/B,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE;YAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI;gBAC/B,IAAI,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC3B,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvB,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,KAAK;QACH,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IACD,eAAe,CAAC,WAAmB;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI;YAChC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,KAAc,EAAE,OAAkC;QAChF,MAAM,CAAC,GAAG,IAAA,2BAAM,EAAC,KAAK,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,IAAA,+BAAU,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,EAAE,CAAC;QAC9C,6EAA6E;QAC7E,8EAA8E;QAC9E,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAA,iCAAkB,EACjC,MAAM,IAAA,+BAAU,EAAC,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,EAAE,EAChD,IAAA,+BAAU,EAAC,CAAC,CAAC,UAAU,CAAC,EACxB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAA,6BAAY,GAAE,EAAE,MAAM,CAAC,CAClD,CAAC;YACF,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,QAAQ,CAAC,IAAI;gBACrG,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACvF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAA,8CAAkB,EAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC;gBAC3F,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1D,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChF,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACvE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACzE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,CAAC;gBAC7G,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAA,iCAAkB,EAAC;gBACnC,WAAW,EAAE,IAAI,CAAC,cAAc;gBAChC,EAAE,EAAE,MAAM,OAAO,CAAC,WAAW,IAAI,KAAK,EAAE;gBACxC,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;gBAClD,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,SAAS;gBAC9D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,MAAgB,CAAC,CAAC,CAAC,SAAS;gBACjE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;gBACjB,SAAS;gBACT,KAAK,EAAE,IAAI,eAAe,EAAE;gBAC5B,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBACzB,MAAM,EAAE,IAAI,GAAG,EAAE;gBACjB,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QACxG,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;YACpC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;gBAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAChF,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACvC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;YACrB,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAC7C,OAAO,IAAA,+BAAgB,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,IAAA,2BAAM,EAAC,CAAC,CAAC,KAAK,CAA8B,CAAC;QAC3D,MAAM,WAAW,GAAyB;YACxC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG;YACtB,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,cAAc;YAC5C,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,eAAe;YAC1C,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;SACzB,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,IAAA,2BAAM,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAA,6BAAQ,GAAE,CAAC;YACzB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;oBAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACpF,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACtF,IAAI,CAAC,OAAO;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACnF,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO;gBACP,KAAK;gBACL,WAAW,EAAE,KAAK;gBAClB,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,OAAO;oBACb,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,oCAAoC,CAAC;oBACvD,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,2CAA2C,CAAC;aACjE,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,KAAK,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,IAAI,OAAO,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;YACxE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/workspace/WorkspaceManager.d.ts

@@ -0,0 +1,43 @@
+import type { WorkspaceSummary } from '@marifold/workspace-protocol';
+import { WorkspaceStore } from './WorkspaceStore';
+export interface WorkspaceOperationContext {
+    workspaceId: string;
+    senderDeviceId: string;
+    hostDeviceId: string;
+}
+export declare class WorkspaceManager {
+    readonly store: WorkspaceStore;
+    private peers;
+    private hostStatus;
+    private presence;
+    onMembershipRemoved?: (workspaceId: string, deviceId?: string) => void;
+    private heartbeat?;
+    private remoteHandler?;
+    private executorHandler?;
+    constructor(configPath: string);
+    start(handler: NonNullable<WorkspaceManager['remoteHandler']>, executor?: WorkspaceManager['executorHandler']): void;
+    close(): void;
+    list(): WorkspaceSummary[];
+    create(name: string, url: string, registrationToken: string): Promise<{
+        workspace: WorkspaceSummary;
+        invitation: string;
+    }>;
+    add(url: string, token: string, executor?: boolean): Promise<WorkspaceSummary>;
+    devices(id: string): {
+        id: string;
+        name: string;
+        host: boolean;
+        platform: string;
+        architecture: string;
+        executor: boolean;
+        online: boolean;
+    }[];
+    request(id: string, operation: string, input: unknown, requestId?: string): Promise<unknown>;
+    execute(id: string, device: string, operation: string, input: unknown, requestId?: string): Promise<unknown>;
+    remove(id: string): Promise<void>;
+    setExecutor(id: string, enabled: boolean): Promise<void>;
+    private connect;
+    private checkHost;
+    private dispatch;
+}
+//# sourceMappingURL=WorkspaceManager.d.ts.map

package/dist/workspace/WorkspaceManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceManager.d.ts","sourceRoot":"","sources":["../../src/workspace/WorkspaceManager.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAGV,gBAAgB,EAGjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAuB,MAAM,kBAAkB,CAAC;AAGvE,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AACD,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAkG;IAClH,mBAAmB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACvE,OAAO,CAAC,SAAS,CAAC,CAAiC;IACnD,OAAO,CAAC,aAAa,CAAC,CAA8F;IACpH,OAAO,CAAC,eAAe,CAAC,CAA8F;IACtH,YAAY,UAAU,EAAE,MAAM,EAE7B;IACD,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAQnH;IACD,KAAK,IAAI,IAAI,CAIZ;IACD,IAAI,IAAI,gBAAgB,EAAE,CAazB;IACK,MAAM,CACV,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,EACX,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAoB9D;IACK,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuDjF;IACD,OAAO,CAAC,EAAE,EAAE,MAAM;;;;;;;;QAmBjB;IACK,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,SAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CA8BrG;IACK,OAAO,CACX,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,EACd,SAAS,SAAa,GACrB,OAAO,CAAC,OAAO,CAAC,CAelB;IACK,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBtC;IACK,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;IACD,OAAO,CAAC,OAAO;YAiCD,SAAS;YAoBT,QAAQ;CAoFvB"}

package/dist/workspace/WorkspaceManager.js

@@ -0,0 +1,378 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkspaceManager = void 0;
+const MarifoldError_1 = require("../errors/MarifoldError");
+const os = __importStar(require("node:os"));
+const workspace_protocol_1 = require("@marifold/workspace-protocol");
+const WorkspaceStore_1 = require("./WorkspaceStore");
+const BridgePeer_1 = require("./bridge/BridgePeer");
+class WorkspaceManager {
+    store;
+    peers = new Map();
+    hostStatus = new Map();
+    presence = new Map();
+    onMembershipRemoved;
+    heartbeat;
+    remoteHandler;
+    executorHandler;
+    constructor(configPath) {
+        this.store = new WorkspaceStore_1.WorkspaceStore(configPath);
+    }
+    start(handler, executor) {
+        this.remoteHandler = handler;
+        this.executorHandler = executor;
+        this.store.interruptRequests();
+        for (const c of this.store.list())
+            this.connect(c);
+        this.heartbeat = setInterval(() => {
+            for (const c of this.store.list())
+                if (c.role === 'guest')
+                    void this.checkHost(c);
+        }, 15000);
+    }
+    close() {
+        clearInterval(this.heartbeat);
+        for (const peer of this.peers.values())
+            peer.close();
+        this.store.close();
+    }
+    list() {
+        return this.store
+            .list()
+            .map(({ id, name, role, bridgeUrl, deviceId, hostDeviceId, executor }) => ({
+            id,
+            name,
+            role,
+            bridgeUrl,
+            deviceId,
+            hostDeviceId,
+            executor,
+            online: role === 'host' ? Boolean(this.peers.get(id)?.online) : this.hostStatus.get(id) === true,
+        }));
+    }
+    async create(name, url, registrationToken) {
+        const c = await this.store.create(name, url, os.hostname());
+        try {
+            const response = await fetch(`${c.bridgeUrl}/v1/hosts`, {
+                method: 'POST',
+                headers: { authorization: `Bearer ${registrationToken}`, 'content-type': 'application/json' },
+                body: JSON.stringify({ workspaceId: c.id, hostDeviceId: c.hostDeviceId, host: c.host }),
+                signal: AbortSignal.timeout(10000),
+                redirect: 'error',
+            });
+            if (!response.ok)
+                throw new Error(`Bridge registration failed (HTTP ${response.status}).`);
+            const peer = this.connect(c);
+            await peer.ready();
+            return { workspace: this.list().find((w) => w.id === c.id), invitation: this.store.invite(c.id) };
+        }
+        catch (error) {
+            this.peers.get(c.id)?.close();
+            this.peers.delete(c.id);
+            this.store.remove(c.id);
+            throw error;
+        }
+    }
+    async add(url, token, executor = false) {
+        if (token.length > 16384)
+            throw new Error('Invalid invitation.');
+        const invitation = (0, workspace_protocol_1.record)(JSON.parse(Buffer.from(token, 'base64url').toString('utf8')));
+        if (invitation.version !== 1 ||
+            invitation.expiresAt < Date.now() ||
+            (0, workspace_protocol_1.bridgeOrigin)(url) !== invitation.bridgeUrl ||
+            typeof invitation.secret !== 'string')
+            throw new Error('Invitation expired or belongs to a different bridge.');
+        const workspaceId = (0, workspace_protocol_1.identifier)(invitation.workspaceId);
+        if (this.store.list().some((c) => c.id === workspaceId))
+            throw new Error('Workspace already connected.');
+        const identity = await (0, workspace_protocol_1.createIdentity)();
+        const pendingId = `pending_${(0, workspace_protocol_1.randomId)()}`;
+        const temporary = new BridgePeer_1.BridgePeer({
+            bridgeUrl: invitation.bridgeUrl,
+            workspaceId,
+            deviceId: pendingId,
+            identity,
+            host: invitation.host,
+            onRequest: async () => {
+                throw new Error('Pairing is not an execution connection.');
+            },
+        });
+        temporary.start();
+        try {
+            await temporary.ready();
+            const reply = (0, workspace_protocol_1.record)(await temporary.request('join', { secret: invitation.secret, name: os.hostname() }));
+            const certificate = reply.certificate;
+            if (!(0, workspace_protocol_1.validMembership)(certificate, invitation.host) ||
+                certificate.membership.workspaceId !== workspaceId ||
+                JSON.stringify(certificate.membership.identity) !== JSON.stringify((0, workspace_protocol_1.publicIdentity)(identity)))
+                throw new Error('Host returned invalid membership.');
+            const c = {
+                id: workspaceId,
+                name: String(reply.name),
+                role: 'guest',
+                bridgeUrl: invitation.bridgeUrl,
+                hostDeviceId: temporary.hostId,
+                deviceId: certificate.membership.deviceId,
+                identity,
+                host: invitation.host,
+                certificate,
+                executor,
+            };
+            this.store.save(c);
+            const peer = this.connect(c);
+            await peer.ready();
+            await this.checkHost(c);
+            return this.list().find((w) => w.id === c.id);
+        }
+        finally {
+            temporary.close();
+        }
+    }
+    devices(id) {
+        const c = this.store.get(id);
+        return this.store
+            .devices(c.id)
+            .filter((d) => !d.revoked)
+            .map((d) => {
+            const m = d.certificate.membership;
+            const host = m.deviceId === c.hostDeviceId;
+            const p = this.presence.get(`${c.id}:${m.deviceId}`);
+            return {
+                id: m.deviceId,
+                name: m.name,
+                host,
+                platform: host ? os.platform() : (p?.platform ?? ''),
+                architecture: host ? os.arch() : (p?.architecture ?? ''),
+                executor: host || p?.executor === true,
+                online: host || Boolean(p && Date.now() - p.seen < 35000),
+            };
+        });
+    }
+    async request(id, operation, input, requestId = (0, workspace_protocol_1.randomId)()) {
+        const c = this.store.get(id);
+        if (c.role === 'host')
+            return this.dispatch(c, { type: 'request', operation, input, id: requestId }, { id: c.deviceId, identity: c.host, certificate: c.certificate });
+        const peer = this.peers.get(c.id);
+        if (!peer?.online || this.hostStatus.get(c.id) !== true)
+            throw new MarifoldError_1.MarifoldError('WORKSPACE_OFFLINE', 'Workspace host is offline.');
+        const read = ['devices', 'run.events', 'artifact.read'].includes(operation) ||
+            (operation === 'api' && (0, workspace_protocol_1.record)(input).method === 'GET');
+        let result;
+        try {
+            result = await peer.request(operation, input, c.hostDeviceId, c.host, requestId, read ? 60000 : 120000);
+        }
+        catch (error) {
+            if (!peer.online ||
+                this.hostStatus.get(c.id) !== true)
+                throw new MarifoldError_1.MarifoldError('WORKSPACE_OFFLINE', 'Workspace host is unavailable.');
+            if (read && error instanceof Error && error.message.includes('timed out'))
+                throw new MarifoldError_1.MarifoldError('WORKSPACE_TIMEOUT', 'Workspace request timed out while the bridge remained connected.');
+            throw error;
+        }
+        if (operation === 'rename' && typeof (0, workspace_protocol_1.record)(result).name === 'string')
+            this.store.rename(c.id, String((0, workspace_protocol_1.record)(result).name));
+        return result;
+    }
+    async execute(id, device, operation, input, requestId = (0, workspace_protocol_1.randomId)()) {
+        const c = this.store.get(id);
+        if (c.role !== 'host')
+            throw new Error('Only the workspace host coordinates execution.');
+        const member = this.store.devices(c.id).find((d) => d.certificate.membership.deviceId === device && !d.revoked);
+        if (!member)
+            throw new Error('Execution device is not a workspace member.');
+        const peer = this.peers.get(c.id);
+        if (!peer?.online)
+            throw new MarifoldError_1.MarifoldError('WORKSPACE_OFFLINE', 'Execution device is unavailable.');
+        return peer.request(operation, input, device, member.certificate.membership.identity, requestId, operation === 'executor.execute' ? 120000 : 10000);
+    }
+    async remove(id) {
+        const c = this.store.get(id);
+        this.onMembershipRemoved?.(c.id);
+        if (c.role === 'host') {
+            const peer = this.peers.get(c.id);
+            if (peer?.online) {
+                for (const d of this.store.devices(c.id))
+                    if (d.certificate.membership.deviceId !== c.deviceId)
+                        await peer.revoke(d.certificate.membership.deviceId);
+                await peer.revoke(c.deviceId);
+            }
+        }
+        else if (this.peers.get(c.id)?.online) {
+            // Leaving locally must remain available even when the host disappears.
+            try {
+                await this.peers.get(c.id).request('leave', {}, c.hostDeviceId, c.host, (0, workspace_protocol_1.randomId)(), 3000);
+            }
+            catch {
+                /* Host can revoke an offline former device separately. */
+            }
+        }
+        this.peers.get(c.id)?.close();
+        this.peers.delete(c.id);
+        this.hostStatus.delete(c.id);
+        this.store.remove(c.id);
+    }
+    async setExecutor(id, enabled) {
+        const connection = this.store.get(id);
+        if (connection.role !== 'guest')
+            throw new Error('The workspace host always executes its local tools.');
+        this.store.save({ ...connection, executor: enabled });
+        await this.checkHost(this.store.get(connection.id));
+    }
+    connect(c) {
+        this.peers.get(c.id)?.close();
+        const peer = new BridgePeer_1.BridgePeer({
+            bridgeUrl: c.bridgeUrl,
+            workspaceId: c.id,
+            deviceId: c.deviceId,
+            hostDeviceId: c.hostDeviceId,
+            identity: c.identity,
+            host: c.host,
+            certificate: c.certificate,
+            accept: (certificate) => c.role !== 'host' ||
+                this.store.devices(c.id).some((d) => !d.revoked && d.certificate.signature === certificate.signature),
+            onRequest: (request, sender) => this.dispatch(c, request, sender),
+            onStatus: (online) => {
+                if (!online)
+                    this.hostStatus.set(c.id, false);
+                else if (c.role === 'host') {
+                    for (const d of this.store.devices(c.id))
+                        if (d.revoked)
+                            void this.peers
+                                .get(c.id)
+                                ?.revoke(d.certificate.membership.deviceId)
+                                .catch(() => undefined);
+                }
+                else if (c.role === 'guest')
+                    queueMicrotask(() => {
+                        void this.checkHost(c);
+                    });
+            },
+        });
+        this.peers.set(c.id, peer);
+        peer.start();
+        return peer;
+    }
+    async checkHost(c) {
+        try {
+            const peer = this.peers.get(c.id);
+            if (!peer?.online)
+                throw new Error('offline');
+            const status = (0, workspace_protocol_1.record)(await peer.request('status', { platform: os.platform(), architecture: os.arch(), executor: this.store.get(c.id).executor }, c.hostDeviceId, c.host, (0, workspace_protocol_1.randomId)(), 10000));
+            if (typeof status.name === 'string' && status.name !== c.name)
+                this.store.rename(c.id, status.name);
+            this.hostStatus.set(c.id, true);
+        }
+        catch {
+            this.hostStatus.set(c.id, false);
+        }
+    }
+    async dispatch(c, request, sender) {
+        const context = { workspaceId: c.id, senderDeviceId: sender.id, hostDeviceId: c.hostDeviceId };
+        if (c.role === 'guest') {
+            if (sender.id !== c.hostDeviceId || !this.store.get(c.id).executor || !request.operation.startsWith('executor.'))
+                throw new Error('This device has not enabled this execution capability.');
+            if (!this.executorHandler)
+                throw new Error('Executor unavailable.');
+            if (['executor.lease', 'executor.assess', 'executor.artifact', 'executor.artifacts', 'executor.cancel'].includes(request.operation))
+                return this.executorHandler(request.operation, request.input, context);
+            return this.store.once(c.id, sender.id, request.id, request, () => this.executorHandler(request.operation, request.input, context));
+        }
+        if (request.operation === 'status') {
+            const info = (0, workspace_protocol_1.record)(request.input);
+            this.presence.set(`${c.id}:${sender.id}`, {
+                seen: Date.now(),
+                platform: String(info.platform ?? ''),
+                architecture: String(info.architecture ?? ''),
+                executor: info.executor === true,
+            });
+            return { name: this.store.get(c.id).name, hostDeviceId: c.hostDeviceId };
+        }
+        if (sender.certificate && ['run.events', 'artifact.read'].includes(request.operation))
+            return this.remoteHandler(request.operation, request.input, context);
+        if (sender.certificate &&
+            request.operation === 'api' &&
+            ((0, workspace_protocol_1.record)(request.input).method === 'GET' || (0, workspace_protocol_1.record)(request.input).path === '/v1/terminal/snapshot'))
+            return this.remoteHandler(request.operation, request.input, context);
+        if (sender.certificate && request.operation === 'devices')
+            return { devices: this.devices(c.id) };
+        return this.store.once(c.id, sender.id, request.id, request, async () => {
+            const input = (0, workspace_protocol_1.record)(request.input);
+            if (request.operation === 'join') {
+                if (sender.certificate || typeof input.secret !== 'string')
+                    throw new Error('Invalid pairing request.');
+                return {
+                    name: this.store.get(c.id).name,
+                    certificate: this.store.enroll(c.id, input.secret, (0, workspace_protocol_1.randomId)(), String(input.name), sender.identity),
+                };
+            }
+            if (!sender.certificate)
+                throw new Error('Workspace membership required.');
+            if (request.operation === 'invite')
+                return { invitation: this.store.invite(c.id) };
+            if (request.operation === 'rename') {
+                this.store.rename(c.id, String(input.name));
+                return { name: this.store.get(c.id).name };
+            }
+            if (request.operation === 'devices')
+                return { devices: this.devices(c.id) };
+            if (request.operation === 'revoke' || request.operation === 'leave') {
+                const deviceId = request.operation === 'leave' ? sender.id : (0, workspace_protocol_1.identifier)(input.deviceId);
+                this.store.revoke(c.id, deviceId);
+                this.onMembershipRemoved?.(c.id, deviceId);
+                // The host's authoritative membership check takes effect immediately.
+                // Allow the departing device's final response to enter the relay first.
+                if (deviceId === sender.id)
+                    setTimeout(() => {
+                        void this.peers
+                            .get(c.id)
+                            ?.revoke(deviceId)
+                            .catch(() => undefined);
+                    }, 1000).unref();
+                else
+                    await this.peers.get(c.id)?.revoke(deviceId);
+                return { revoked: true };
+            }
+            if (!this.remoteHandler)
+                throw new Error('Workspace operation unavailable.');
+            return this.remoteHandler(request.operation, request.input, context);
+        }, () => {
+            if (request.operation === 'join')
+                this.store.validateInvitation(c.id, (0, workspace_protocol_1.record)(request.input).secret);
+        });
+    }
+}
+exports.WorkspaceManager = WorkspaceManager;
+//# sourceMappingURL=WorkspaceManager.js.map