@maudecode/talaria-web 1.16.1 → 1.18.0

package/dist/workspace/preview.js

@@ -0,0 +1,110 @@
+/**
+ * `/api/file` previews (TAL-566): the server names how a workspace file renders, so clients only map the kind to an
+ * element. Media files are only stat'ed; their bytes stream from `/api/file/raw`.
+ */
+import { extname } from 'node:path';
+import { hmacHex, safeEqual } from '../auth/crypto.js';
+import { readFileContent } from './fs.js';
+import { AUDIO_VIDEO_PDF_TYPES, INLINE_IMAGE_TYPES, mimeFor } from './media.js';
+/** Rows a CSV preview ships, header included; the rest stay in the editable text. */
+export const CSV_PREVIEW_ROWS = 500;
+const TEXT_KINDS = { '.md': 'markdown', '.markdown': 'markdown', '.mdown': 'markdown', '.csv': 'csv', '.html': 'html', '.htm': 'html' };
+function mediaKind(mime) {
+    if (INLINE_IMAGE_TYPES.has(mime) || mime === 'image/svg+xml')
+        return 'image';
+    if (mime === 'application/pdf')
+        return 'pdf';
+    if (AUDIO_VIDEO_PDF_TYPES.has(mime))
+        return mime.startsWith('audio/') ? 'audio' : 'video';
+    return null;
+}
+export function readFilePreview(workspace, rel) {
+    const mime = mimeFor(rel);
+    const media = mediaKind(mime);
+    if (media)
+        return { ...readFileContent(workspace, rel, { statOnly: true }), preview: media, mime };
+    const file = readFileContent(workspace, rel);
+    if (file.binary)
+        return { ...file, preview: 'binary' };
+    const preview = TEXT_KINDS[extname(rel).toLowerCase()] ?? 'text';
+    if (preview !== 'csv')
+        return { ...file, preview };
+    const { rows, truncated } = csvRows(file.content ?? '', CSV_PREVIEW_ROWS);
+    return { ...file, preview, table: rows, table_truncated: truncated };
+}
+/** Path prefix of the HTML preview frame's documents and their relative assets. */
+export const PREVIEW_PREFIX = '/workspace-preview/';
+const GRANT_HOURS_MS = 3600_000;
+/**
+ * The HTML preview frame's URL: `workspace-preview/<grant>/<path>`, where the grant signs the workspace root with an
+ * expiry 1 to 2 hours out (fixed within each hour, so a refetch keeps the same URL and the frame does not reload). The
+ * sandboxed frame has an opaque origin and sends no cookie, so the grant, minted only after the caller could read
+ * the file, is what authorizes the page and its relative assets.
+ */
+export function previewUrl(key, root, rel, now = Date.now()) {
+    const exp = (Math.ceil(now / GRANT_HOURS_MS) + 1) * (GRANT_HOURS_MS / 1000);
+    const grant = `${Buffer.from(root, 'utf8').toString('base64url')}.${String(exp)}`;
+    const path = rel.split('/').filter((part) => part && part !== '.').map(encodeURIComponent).join('/');
+    return `${PREVIEW_PREFIX.slice(1)}${grant}.${hmacHex(key, `preview:${grant}`)}/${path}`;
+}
+/** The workspace root a grant path segment authorizes, or null when it is forged or expired. */
+export function previewGrantRoot(key, segment, now = Date.now()) {
+    const parts = segment.split('.');
+    if (parts.length !== 3)
+        return null;
+    const [root, exp, sig] = parts;
+    if (!safeEqual(sig, hmacHex(key, `preview:${root}.${exp}`)))
+        return null;
+    if (!/^\d+$/.test(exp) || Number(exp) * 1000 < now)
+        return null;
+    return Buffer.from(root, 'base64url').toString('utf8');
+}
+/** RFC 4180 rows (quoted fields, doubled quotes, CRLF), skipping blank lines; stops after `limit` rows. */
+export function csvRows(text, limit) {
+    const rows = [];
+    let row = [];
+    let field = '';
+    let quoted = false;
+    let truncated = false;
+    const endRow = () => {
+        row.push(field);
+        if (row.length > 1 || row[0] !== '') {
+            if (rows.length === limit)
+                truncated = true;
+            else
+                rows.push(row);
+        }
+        row = [];
+        field = '';
+    };
+    for (let i = 0; i < text.length && !truncated; i++) {
+        const c = text.charAt(i);
+        if (quoted) {
+            if (c !== '"')
+                field += c;
+            else if (text[i + 1] === '"') {
+                field += '"';
+                i++;
+            }
+            else
+                quoted = false;
+        }
+        else if (c === '"' && field === '')
+            quoted = true;
+        else if (c === ',') {
+            row.push(field);
+            field = '';
+        }
+        else if (c === '\n' || c === '\r') {
+            if (c === '\r' && text[i + 1] === '\n')
+                i++;
+            endRow();
+        }
+        else
+            field += c;
+    }
+    if (!truncated && (field !== '' || row.length))
+        endRow();
+    return { rows, truncated };
+}
+//# sourceMappingURL=preview.js.map

package/dist/workspace/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../src/workspace/preview.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,eAAe,EAAoB,MAAM,SAAS,CAAA;AAC3D,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAE/E,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAEnC,MAAM,UAAU,GAAoC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAIxK,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,OAAO,CAAA;IAC5E,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IACzF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,GAAW;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACzB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,KAAK;QAAE,OAAO,EAAE,GAAG,eAAe,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAClG,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC5C,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,MAAM,CAAA;IAChE,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAA;IAClD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAA;IACzE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAA;AACtE,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAA;AACnD,MAAM,cAAc,GAAG,QAAQ,CAAA;AAE/B;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjF,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,CAAA;IAC3E,MAAM,KAAK,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IACjF,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpG,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,EAAE,WAAW,KAAK,EAAE,CAAC,IAAI,IAAI,EAAE,CAAA;AACzF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,OAAe,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,KAAiC,CAAA;IAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACxE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,GAAG;QAAE,OAAO,IAAI,CAAA;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACxD,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,KAAa;IACjD,MAAM,IAAI,GAAe,EAAE,CAAA;IAC3B,IAAI,GAAG,GAAa,EAAE,CAAA;IACtB,IAAI,KAAK,GAAG,EAAE,CAAA;IACd,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACf,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;gBAAE,SAAS,GAAG,IAAI,CAAA;;gBACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACrB,CAAC;QACD,GAAG,GAAG,EAAE,CAAA;QACR,KAAK,GAAG,EAAE,CAAA;IACZ,CAAC,CAAA;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QACxB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAA;iBACpB,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,KAAK,IAAI,GAAG,CAAC;gBAAC,CAAC,EAAE,CAAA;YAAC,CAAC;;gBAC9C,MAAM,GAAG,KAAK,CAAA;QACrB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,GAAG,IAAI,CAAA;aAC9C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,KAAK,GAAG,EAAE,CAAA;QAAC,CAAC;aAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAA;YAC3C,MAAM,EAAE,CAAA;QACV,CAAC;;YAAM,KAAK,IAAI,CAAC,CAAA;IACnB,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,EAAE,CAAA;IACxD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAC5B,CAAC"}

package/dist/workspace/rollback.d.ts

@@ -1,29 +1,44 @@
+import { type SidecarLike } from '../sidecar/client.js';
+export declare const CHECKPOINT_STORE_BUSY_MESSAGE = "Checkpoints are being restored or compared. Retry when that finishes.";
 export interface RollbackDeps {
-    hermesHome: () => string;
+    sidecar: () => SidecarLike | null;
+    profileHome: () => string;
     knownWorkspaces: () => string[];
+    /** Whether a run in the profile at this home is active: its turn may be capturing a checkpoint into the same store. */
+    activeRunInProfile: (profileHome: string) => boolean;
 }
-export declare function validateCheckpointId(checkpoint: unknown): string;
-/** SHA-256 of the canonical workspace path, first 12 hex chars (matches the Agent's CheckpointManager). */
-export declare function workspaceHash(workspace: string): string;
-/** A git invocation that did not run to completion (timeout, missing binary): Python let these escape as 500s. */
-export declare class RollbackInternalError extends Error {
+export interface CheckpointFile {
+    file: string;
+    status: 'modified' | 'added' | 'deleted';
 }
+export declare function validateCheckpointId(checkpoint: unknown): string;
 export declare class RollbackStore {
     readonly deps: RollbackDeps;
+    /** Profile homes whose checkpoint store a diff or restore is using, with the number of holders. */
+    private readonly busyStores;
+    /** Each profile store's last queued operation; the next one starts after it settles. */
+    private readonly storeQueues;
     constructor(deps: RollbackDeps);
-    private root;
-    resolveWorkspace(workspace: unknown): string;
-    private static entryModes;
-    private static isRegular;
-    private static readBlob;
-    private static readWorkspaceText;
-    list(workspace: unknown): Record<string, unknown>;
-    private static inspect;
-    diff(workspace: unknown, checkpoint: unknown): Record<string, unknown>;
-    restore(workspace: unknown, checkpoint: unknown): Record<string, unknown>;
+    /** Whether a diff or restore is using the checkpoint store at `profileHome`; no turn in that profile starts meanwhile. */
+    storeBusy(profileHome: string): boolean;
+    /**
+     * Run `fn` with the profile's checkpoint store to itself. The Agent keeps one store per profile and its store lock does
+     * not wait (older Agents have none), so a turn capturing a checkpoint, or a second diff or restore, anywhere in the
+     * profile meanwhile would fail or race. Refused while a run in the profile is active; the check and the hold happen in
+     * the same tick, turn admission refuses while the hold lasts, and operations on one store run one after another.
+     */
+    private exclusive;
+    /** `allowed` adds paths the caller already vouches for (a session's own workspace) to the configured list. */
+    resolveWorkspace(workspace: unknown, allowed?: string[]): string;
+    private sidecar;
+    list(workspace: unknown, allowed?: string[]): Promise<Record<string, unknown>>;
+    diff(workspace: unknown, checkpoint: unknown, allowed?: string[]): Promise<Record<string, unknown>>;
+    /** The Agent snapshots the workspace first, then checks the checkpoint out over it; a file added since is left in place. */
+    restore(workspace: unknown, checkpoint: unknown, allowed?: string[]): Promise<Record<string, unknown>>;
 }
-/** Python `str.splitlines()`: also breaks on \v, \f, \x1c-\x1e, \x85, \u2028 and \u2029. */
-export declare const PY_LINE_BREAK: RegExp;
-export declare function splitLinesPy(text: string): string[];
-/** Python `str.splitlines(keepends=True)`. */
-export declare function splitKeepEnds(text: string): string[];
+/**
+ * The files a checkpoint diff touches, in order. The diff is `git diff <checkpoint> --cached` in the Agent's store, so
+ * `a/` is the checkpoint and `b/` the workspace: a file only in the workspace is `added`, one only in the checkpoint is
+ * `deleted`, and a rename is both. Paths with unusual bytes arrive C-quoted (`core.quotePath`).
+ */
+export declare function checkpointDiffFiles(diff: string): CheckpointFile[];