@maudecode/talaria-web 0.0.0

package/dist/workspace/upload.js

@@ -0,0 +1,215 @@
+/** Chat attachment uploads: multipart parsing, the per-session inbox, and rollback receipts (Python `api/upload.py`). */
+import { closeSync, existsSync, lstatSync, mkdirSync, realpathSync } from 'node:fs';
+import { writeFully } from '../fs/atomic.js';
+import { basename, extname, join } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { isWithin, resolvePathLikePython } from './paths.js';
+import { openAnchoredCreateFd, rmtreeAnchored, unlinkAnchored, FileExistsError } from './fs.js';
+import { mimeFor } from './media.js';
+/** Python `parse_multipart`: boundary split with CRLF or LF part separators. */
+export function parseMultipart(raw, contentType) {
+    const m = /boundary=([^;\s]+)/.exec(contentType);
+    if (!m)
+        throw new Error('No boundary in Content-Type');
+    const boundary = Buffer.from((m[1] ?? '').replace(/^"|"$/g, ''));
+    const delimiter = Buffer.concat([Buffer.from('--'), boundary]);
+    const fields = {};
+    const files = {};
+    const parts = splitBuffer(raw, delimiter);
+    for (const part of parts.slice(1)) {
+        const stripped = stripLeadingNewlines(part);
+        if (stripped.subarray(0, 2).toString() === '--')
+            break;
+        const crlf = part.indexOf('\r\n\r\n');
+        const lf = crlf < 0 ? part.indexOf('\n\n') : -1;
+        const sepIndex = crlf >= 0 ? crlf : lf;
+        const sepLen = crlf >= 0 ? 4 : 2;
+        if (sepIndex < 0)
+            continue;
+        const headerRaw = part.subarray(0, sepIndex);
+        let body = part.subarray(sepIndex + sepLen);
+        if (body.subarray(-2).toString() === '\r\n')
+            body = body.subarray(0, -2);
+        else if (body.subarray(-1).toString() === '\n')
+            body = body.subarray(0, -1);
+        const headers = stripLeadingNewlines(headerRaw).toString('utf8');
+        const disp = /^content-disposition:\s*(.*)$/im.exec(headers)?.[1] ?? '';
+        const nameM = /name="([^"]*)"/.exec(disp);
+        const fileM = /filename="([^"]*)"/.exec(disp);
+        if (!nameM)
+            continue;
+        const name = nameM[1] ?? '';
+        if (fileM)
+            files[name] = { filename: fileM[1] ?? '', body: Buffer.from(body) };
+        else
+            fields[name] = body.toString('utf8');
+    }
+    return { fields, files };
+}
+function splitBuffer(buf, delimiter) {
+    const out = [];
+    let start = 0;
+    for (;;) {
+        const idx = buf.indexOf(delimiter, start);
+        if (idx < 0)
+            break;
+        out.push(buf.subarray(start, idx));
+        start = idx + delimiter.length;
+    }
+    out.push(buf.subarray(start));
+    return out;
+}
+function stripLeadingNewlines(buf) {
+    let i = 0;
+    while (i < buf.length && (buf[i] === 0x0d || buf[i] === 0x0a))
+        i += 1;
+    return buf.subarray(i);
+}
+export function sanitizeUploadName(filename) {
+    const safe = basename(filename).replace(/[^\w.-]/g, '_').slice(0, 200);
+    if (!safe || safe.replace(/^\.+|\.+$/g, '') === '')
+        throw new Error('Invalid filename');
+    return safe;
+}
+const RECEIPT_TTL_MS = 60 * 60 * 1000;
+export class UploadInbox {
+    attachmentRoot;
+    now;
+    receipts = new Map();
+    constructor(attachmentRoot, now = () => Date.now()) {
+        this.attachmentRoot = attachmentRoot;
+        this.now = now;
+    }
+    /** Python `_session_attachment_dir`. */
+    sessionDir(sessionId) {
+        const root = resolvePathLikePython(this.attachmentRoot());
+        const dest = resolvePathLikePython(join(root, (sessionId || 'session').replace(/[^\w.-]/g, '_').slice(0, 120)));
+        if (dest !== root && !isWithin(dest, root))
+            throw new Error('Invalid attachment directory');
+        return dest;
+    }
+    registerReceipt(sessionId, target, isDir = false) {
+        const st = lstatSync(target, { bigint: true });
+        const token = randomBytes(32).toString('base64url');
+        const now = this.now();
+        for (const [key, value] of this.receipts)
+            if (now - value.createdAt > RECEIPT_TTL_MS)
+                this.receipts.delete(key);
+        this.receipts.set(token, { sessionId, path: target, isDir, dev: st.dev, ino: st.ino, size: st.size, mtimeNs: st.mtimeNs, ctimeNs: st.ctimeNs, createdAt: now });
+        return token;
+    }
+    rollback(sessionId, tokens) {
+        const root = this.sessionDir(sessionId);
+        let rolledBack = 0;
+        let failed = 0;
+        const now = this.now();
+        for (const token of tokens) {
+            const receipt = this.receipts.get(token);
+            if (receipt?.sessionId !== sessionId || receipt.rollingBack) {
+                failed += 1;
+                continue;
+            }
+            if (now - receipt.createdAt > RECEIPT_TTL_MS) {
+                this.receipts.delete(token);
+                failed += 1;
+                continue;
+            }
+            receipt.rollingBack = true;
+            try {
+                let resolved = receipt.path;
+                try {
+                    resolved = realpathSync(receipt.path);
+                }
+                catch { /* lstat below fails too */ }
+                let rootResolved = root;
+                try {
+                    rootResolved = realpathSync(root);
+                }
+                catch { /* keep */ }
+                if (resolved !== rootResolved && !isWithin(resolved, rootResolved))
+                    throw new Error('Invalid rollback target');
+                const current = lstatSync(receipt.path, { bigint: true });
+                if (current.dev !== receipt.dev || current.ino !== receipt.ino || current.size !== receipt.size || current.mtimeNs !== receipt.mtimeNs || current.ctimeNs !== receipt.ctimeNs)
+                    throw new Error('Upload target changed');
+                if (receipt.isDir)
+                    rmtreeAnchored(root, receipt.path);
+                else
+                    unlinkAnchored(root, receipt.path);
+            }
+            catch {
+                receipt.rollingBack = false;
+                failed += 1;
+                continue;
+            }
+            this.receipts.delete(token);
+            rolledBack += 1;
+        }
+        return { ok: failed === 0, rolled_back: rolledBack, failed };
+    }
+    /** Write one upload into the session inbox with an O_EXCL anchored create. */
+    store(sessionId, filename, bytes) {
+        const safeName = sanitizeUploadName(filename);
+        const destDir = this.sessionDir(sessionId);
+        mkdirSync(destDir, { recursive: true });
+        // Python `_upload_destination`: a name already in the inbox gets `-1`, `-2`, ... (every clipboard paste is
+        // `image.png`); the 409 below is reserved for a duplicate that raced past this check.
+        const dest = uploadDestination(destDir, safeName);
+        let fd;
+        try {
+            fd = openAnchoredCreateFd(destDir, dest);
+        }
+        catch (error) {
+            if (error instanceof FileExistsError)
+                throw new UploadConflict(`Upload destination already exists: ${safeName}`);
+            throw new UploadRejected('Upload destination rejected');
+        }
+        try {
+            writeFully(fd, bytes);
+        }
+        finally {
+            closeSync(fd);
+        }
+        let token;
+        try {
+            token = this.registerReceipt(sessionId, dest);
+        }
+        catch (error) {
+            try {
+                unlinkAnchored(destDir, dest);
+            }
+            catch { /* ignore */ }
+            throw error;
+        }
+        // The response reports the name actually stored (Python `test_duplicate_upload_response_reports_actual_stored_filename`).
+        const stored = basename(dest);
+        const mime = guessMime(stored);
+        return { filename: stored, path: dest, size: bytes.length, mime, is_image: mime.startsWith('image/'), rollback_token: token };
+    }
+}
+export class UploadConflict extends Error {
+}
+export function uploadDestination(destDir, safeName) {
+    const dest = join(destDir, safeName);
+    if (!existsSync(dest))
+        return dest;
+    const ext = extname(safeName);
+    const stem = safeName.slice(0, safeName.length - ext.length);
+    for (let idx = 1; idx < 1000; idx += 1) {
+        const candidate = join(destDir, `${stem}-${String(idx)}${ext}`);
+        if (!existsSync(candidate))
+            return candidate;
+    }
+    throw new UploadRejected('Too many uploads with the same filename');
+}
+export class UploadRejected extends Error {
+}
+/** Python `mimetypes.guess_type` for the common cases plus the media map. */
+export function guessMime(name) {
+    const fromMap = mimeFor(name);
+    if (fromMap !== 'application/octet-stream' && !name.toLowerCase().endsWith('.ts') && !name.toLowerCase().endsWith('.tsx'))
+        return fromMap;
+    const ext = name.toLowerCase().slice(name.lastIndexOf('.'));
+    const extra = { '.txt': 'text/plain', '.md': 'text/markdown', '.csv': 'text/csv', '.py': 'text/x-python', '.js': 'text/javascript', '.mjs': 'text/javascript', '.css': 'text/css', '.xml': 'application/xml', '.zip': 'application/zip', '.gz': 'application/gzip', '.tar': 'application/x-tar', '.yaml': 'application/yaml', '.yml': 'application/yaml', '.ts': 'video/mp2t', '.tsx': 'application/octet-stream', '.heic': 'image/heic', '.tif': 'image/tiff', '.tiff': 'image/tiff', '.avif': 'image/avif' };
+    return extra[ext] ?? 'application/octet-stream';
+}
+//# sourceMappingURL=upload.js.map

package/dist/workspace/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/workspace/upload.ts"],"names":[],"mappings":"AAAA,yHAAyH;AACzH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAIpC,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,WAAmB;IAC7D,MAAM,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAChD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC9D,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,MAAM,KAAK,GAAuD,EAAE,CAAA;IACpE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,IAAI;YAAE,MAAK;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;QACtC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,QAAQ,GAAG,CAAC;YAAE,SAAQ;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC5C,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAA;QAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,MAAM;YAAE,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;aACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,IAAI;YAAE,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC3E,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAChE,MAAM,IAAI,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACvE,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;;YACzE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,SAAiB;IACjD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACzC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAK;QAClB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;QAClC,KAAK,GAAG,GAAG,GAAG,SAAS,CAAC,MAAM,CAAA;IAChC,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7B,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAA;IACrE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACtE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACvF,OAAO,IAAI,CAAA;AACb,CAAC;AAID,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAErC,MAAM,OAAO,WAAW;IAGD;IAA+C;IAFnD,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IAEtD,YAAqB,cAA4B,EAAmB,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QAAnF,mBAAc,GAAd,cAAc,CAAc;QAAmB,QAAG,GAAH,GAAG,CAAiC;IAAG,CAAC;IAE5G,wCAAwC;IACxC,UAAU,CAAC,SAAiB;QAC1B,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;QACzD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;QAC/G,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC3F,OAAO,IAAI,CAAA;IACb,CAAC;IAED,eAAe,CAAC,SAAiB,EAAE,MAAc,EAAE,KAAK,GAAG,KAAK;QAC9D,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,cAAc;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/J,OAAO,KAAK,CAAA;IACd,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,MAAgB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,UAAU,GAAG,CAAC,CAAA;QAClB,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACxC,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACtF,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACpG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAA;YAC1B,IAAI,CAAC;gBACH,IAAI,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAA;gBAC3B,IAAI,CAAC;oBAAC,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;gBACnF,IAAI,YAAY,GAAG,IAAI,CAAA;gBACvB,IAAI,CAAC;oBAAC,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC9D,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;gBAC9G,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACzD,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;gBACvN,IAAI,OAAO,CAAC,KAAK;oBAAE,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;;oBAChD,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,WAAW,GAAG,KAAK,CAAA;gBAC3B,MAAM,IAAI,CAAC,CAAA;gBACX,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC3B,UAAU,IAAI,CAAC,CAAA;QACjB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;IAC9D,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,SAAiB,EAAE,QAAgB,EAAE,KAAa;QACtD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC1C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACvC,2GAA2G;QAC3G,sFAAsF;QACtF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QACjD,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,IAAI,cAAc,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAA;YAChH,MAAM,IAAI,cAAc,CAAC,6BAA6B,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC;YACH,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACvB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;QACD,IAAI,KAAa,CAAA;QACjB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5D,MAAM,KAAK,CAAA;QACb,CAAC;QACD,0HAA0H;QAC1H,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAA;IAC/H,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,QAAgB;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5D,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAA;QAC/D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAC9C,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,yCAAyC,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,OAAO,KAAK,0BAA0B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAA;IACzI,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3D,MAAM,KAAK,GAA2B,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;IACtgB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAA;AACjD,CAAC"}

package/dist/workspace/workspaces.d.ts

@@ -0,0 +1,84 @@
+export declare const PROFILE_NAME_RE: RegExp;
+export declare const REMOTE_WORKSPACE_UNSUPPORTED_CODE = "remote_workspace_unsupported";
+export declare const REMOTE_WORKSPACE_UNSUPPORTED_MESSAGE = "Workspace file operations are only supported for local terminal backends.";
+export interface WorkspaceEntry {
+    path: string;
+    name: string;
+}
+export interface TerminalConfig {
+    backend?: string;
+    cwd?: string;
+}
+export interface WorkspaceDeps {
+    /** Global STATE_DIR (default profile state). */
+    stateDir: string;
+    /** Boot-time default workspace. */
+    defaultWorkspace: () => string;
+    /** Home directory for a logical profile name; throws on an invalid name. */
+    profileHome: (profile: string) => string;
+    /** The active request profile name. */
+    activeProfile: () => string;
+    isRootProfileHome: (home: string) => boolean;
+    /** `terminal:` block and workspace keys from the profile's config.yaml (checkpoint 7 wires the reader). */
+    profileConfig: (profile: string | null) => {
+        terminal?: TerminalConfig | null;
+        workspace?: string;
+        default_workspace?: string;
+    } | null;
+    home?: string;
+}
+export declare function isRemoteTerminalBackend(terminal: TerminalConfig | null | undefined): boolean;
+export declare function stripSurroundingQuotes(path: string): string;
+export declare function blockedRoots(): string[];
+/** Blocked system root check with user-tmp carve-outs (Python `_is_blocked_system_path`). */
+export declare function isBlockedSystemPath(candidate: string): boolean;
+/** Python `_is_blocked_workspace_path`: compares the raw spelling and the resolved path. */
+export declare function isBlockedWorkspacePath(candidate: string, rawPath?: string | null): boolean;
+export declare class WorkspaceRegistry {
+    readonly deps: WorkspaceDeps;
+    readonly home: string;
+    constructor(deps: WorkspaceDeps);
+    private profileHomeParam;
+    /** Per-profile `webui_state/` dir; the literal default profile uses the global state dir. */
+    stateDir(profile: string | null): string;
+    private workspacesFile;
+    private lastWorkspaceFile;
+    private get globalWorkspacesFile();
+    private get globalLastWorkspaceFile();
+    homePath(): string;
+    resolvePath(path: string, profile?: string | null): string;
+    remoteTerminalCwd(profile: string | null): string | null;
+    /** A target-side path under `terminal.cwd` for a remote profile, without a local stat. */
+    remoteTerminalWorkspaceCandidate(path: string, profile?: string | null): string | null;
+    profileSupportsLocalIo(profile?: string | null): boolean;
+    /**
+     * Python `get_profile_default_workspace` (`GET /api/profile/active`): a named profile's own last workspace first,
+     * never the global one (#5169), then the profile's configured default.
+     */
+    profileDefaultWorkspace(profile?: string | null): string;
+    /** Python `_profile_default_workspace`: config.yaml `workspace` / `default_workspace` / `terminal.cwd`, else the live default — never `last_workspace.txt`. */
+    profileConfigDefaultWorkspace(profile?: string | null): string;
+    private cleanWorkspaceList;
+    load(profile?: string | null): WorkspaceEntry[];
+    private migrateGlobalWorkspaces;
+    save(workspaces: WorkspaceEntry[], profile?: string | null): void;
+    private validLastWorkspace;
+    /** Profile `last_workspace.txt` -> profile config -> live default (never the global file). */
+    profileDefaultWorkspaceForBoot(profile?: string | null): string;
+    lastWorkspace(profile?: string | null): string;
+    setLastWorkspace(path: string, profile?: string | null): void;
+    /** Python `_workspace_access_error`. */
+    accessError(candidate: string, missingLabel?: string): string | null;
+    trustedRoots(profile?: string | null): string[];
+    /** Directory suggestions under trusted roots only (Python `list_workspace_suggestions`). */
+    suggest(prefix?: string, limit?: number, profile?: string | null): string[];
+    /** Python `resolve_trusted_workspace`: home, saved list, or under the boot default. */
+    resolveTrusted(path: string | null | undefined, profile?: string | null): string;
+    private rejectBlockedRemote;
+    /** Recover only a genuinely missing implicit workspace (Python `resolve_implicit_workspace_with_recovery`). */
+    resolveImplicitWithRecovery(candidate: string | null | undefined, fallback: (profile: string | null) => string, profile?: string | null): [string, boolean];
+    /** Less strict than `resolveTrusted`: explicit user intent to register (Python `validate_workspace_to_add`). */
+    validateToAdd(path: string, profile?: string | null): string;
+}
+export declare function isDir(path: string): boolean;
+export declare function isWritableDir(path: string): boolean;