@mrpatronz/nexusflow 2.9.0 → 2.10.0

package/dist/workrooms/contracts.js

@@ -0,0 +1,231 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+export const WORKROOM_SCHEMA_VERSION = 1;
+export const WORKROOM_INVITE_TTL_MS = 30 * 60 * 1000;
+export const WORKROOM_MAX_DOCUMENT_BYTES = 256 * 1024;
+export const WORKROOM_DOCUMENT_HISTORY_LIMIT = 10;
+export const WORKROOM_AUDIT_LIMIT = 1_000;
+export const WORKROOM_MAX_PACKAGE_BYTES = 10 * 1024 * 1024;
+export const WORKROOM_MAX_PACKAGE_FILES = 2_000;
+export const WORKROOM_MAX_FILE_BYTES = 5 * 1024 * 1024;
+export const WORKROOM_MAX_RESOURCE_UPLOAD_BYTES = 16 * 1024 * 1024;
+export const WORKROOM_MAX_RESOURCE_CATALOG_JSON_BYTES = 40 * 1024 * 1024;
+export const WORKROOM_MAX_EXPORT_PLAINTEXT_BYTES = 96 * 1024 * 1024;
+export const WORKROOM_MAX_WORKFLOW_EVIDENCE_BYTES = 512 * 1024;
+export const WORKROOM_MAX_WORKFLOW_STEP_EVIDENCE_BYTES = 16 * 1024;
+export const WORKROOM_MAX_RESOURCES = 500;
+export const WORKROOM_MAX_PARTICIPANTS = 500;
+export const WORKROOM_MAX_PENDING_JOINS = 100;
+export const WORKROOM_MAX_RETAINED_INVITES = 500;
+export const WORKROOM_MAX_RETAINED_JOIN_REQUESTS = 500;
+const isoDateSchema = z.string().datetime({ offset: true });
+const identifierSchema = z.string().min(1).max(128).regex(/^[a-z0-9][a-z0-9._-]*$/);
+const digestSchema = z.string().regex(/^[a-f0-9]{64}$/);
+const semanticVersionSchema = z.string().max(80).regex(/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/);
+export const participantRoleSchema = z.enum(['host', 'publisher', 'member']);
+export const workroomParticipantSchema = z.object({
+    id: identifierSchema,
+    displayName: z.string().trim().min(1).max(80),
+    role: participantRoleSchema,
+    joinedAt: isoDateSchema,
+    lastSeenAt: isoDateSchema,
+    revokedAt: isoDateSchema.optional(),
+});
+export const documentNameSchema = z.enum(['plan', 'decisions', 'handoff']);
+export const workroomDocumentRevisionSchema = z.object({
+    revision: z.number().int().nonnegative(),
+    content: z.string().max(WORKROOM_MAX_DOCUMENT_BYTES),
+    updatedAt: isoDateSchema,
+    updatedBy: identifierSchema,
+});
+export const workroomDocumentSchema = workroomDocumentRevisionSchema.extend({
+    name: documentNameSchema,
+    history: z.array(workroomDocumentRevisionSchema).max(WORKROOM_DOCUMENT_HISTORY_LIMIT),
+});
+export const portableRepoSchema = z.object({
+    id: identifierSchema,
+    name: z.string().trim().min(1).max(160),
+    remoteUrl: z.string().trim().min(1).max(2_048),
+    defaultBranch: z.string().trim().min(1).max(255),
+    handoff: z.object({
+        branch: z.string().max(255),
+        commit: z.string().regex(/^[a-f0-9]{7,64}$/).or(z.literal('unknown')),
+        ahead: z.number().int().nonnegative(),
+        behind: z.number().int().nonnegative(),
+        dirty: z.boolean(),
+        publishedAt: isoDateSchema,
+        publishedBy: identifierSchema,
+    }).optional(),
+});
+export const immutableResourceRefSchema = z.object({
+    kind: z.enum(['skill', 'agent', 'workflow']),
+    id: identifierSchema,
+    version: semanticVersionSchema,
+    digest: digestSchema,
+});
+export const portableFeatureBundleSchema = z.object({
+    schemaVersion: z.literal(WORKROOM_SCHEMA_VERSION),
+    project: z.object({
+        id: identifierSchema,
+        name: z.string().trim().min(1).max(160),
+    }),
+    feature: z.object({
+        id: identifierSchema,
+        goal: z.string().trim().min(1).max(20_000),
+        description: z.string().max(100_000),
+    }),
+    repos: z.array(portableRepoSchema).max(100),
+    pinnedResources: z.array(immutableResourceRefSchema).max(1_000),
+    workflowRef: immutableResourceRefSchema.optional(),
+    createdAt: isoDateSchema,
+});
+export const resourceFileSchema = z.object({
+    path: z.string().min(1).max(1_024),
+    contentBase64: z.string(),
+    mode: z.number().int().min(0).max(0o777).optional(),
+});
+export const workroomResourceManifestSchema = z.object({
+    schemaVersion: z.literal(WORKROOM_SCHEMA_VERSION),
+    kind: z.enum(['skill', 'agent', 'workflow']),
+    id: identifierSchema,
+    version: semanticVersionSchema,
+    digest: digestSchema,
+    ownerMemberId: identifierSchema,
+    maintainerMemberIds: z.array(identifierSchema).max(100),
+    createdAt: isoDateSchema,
+    dependencies: z.array(immutableResourceRefSchema).max(100),
+    compatibility: z.object({
+        platforms: z.array(z.enum(['win32', 'linux', 'darwin'])).max(3).optional(),
+        nexusflow: z.string().max(80).optional(),
+    }).optional(),
+    quarantinedAt: isoDateSchema.optional(),
+});
+export const workroomResourcePackageSchema = z.object({
+    manifest: workroomResourceManifestSchema,
+    files: z.array(resourceFileSchema).min(1).max(WORKROOM_MAX_PACKAGE_FILES),
+});
+export const workflowStepSchema = z.object({
+    id: identifierSchema,
+    title: z.string().trim().min(1).max(240),
+    requiresEvidence: z.boolean(),
+});
+export const workflowPackageSchema = z.object({
+    schemaVersion: z.literal(WORKROOM_SCHEMA_VERSION),
+    id: identifierSchema,
+    version: semanticVersionSchema,
+    name: z.string().trim().min(1).max(160),
+    description: z.string().max(2_000),
+    markdown: z.string().max(2 * 1024 * 1024),
+    steps: z.array(workflowStepSchema).max(500),
+    dependencies: z.array(immutableResourceRefSchema).max(100),
+}).superRefine((workflow, context) => {
+    if (new Set(workflow.steps.map((step) => step.id)).size !== workflow.steps.length) {
+        context.addIssue({ code: 'custom', message: 'Workflow step IDs must be unique.' });
+    }
+});
+export function digestWorkflowPackage(workflow) {
+    return createHash('sha256').update(JSON.stringify(workflow)).digest('hex');
+}
+export const workflowStepProgressSchema = z.object({
+    stepId: identifierSchema,
+    status: z.enum(['pending', 'in_progress', 'completion_proposed', 'completed', 'skipped']),
+    revision: z.number().int().nonnegative(),
+    evidence: z.string()
+        .max(WORKROOM_MAX_WORKFLOW_STEP_EVIDENCE_BYTES)
+        .refine((value) => Buffer.byteLength(value, 'utf8') <= WORKROOM_MAX_WORKFLOW_STEP_EVIDENCE_BYTES, 'Workflow step evidence is limited to 16 KiB of UTF-8 text.')
+        .optional(),
+    proposedBy: identifierSchema.optional(),
+    updatedBy: identifierSchema,
+    updatedAt: isoDateSchema,
+});
+export const workflowProgressSchema = z.object({
+    workflow: immutableResourceRefSchema,
+    package: workflowPackageSchema,
+    revision: z.number().int().nonnegative(),
+    steps: z.array(workflowStepProgressSchema).max(500),
+}).superRefine((progress, context) => {
+    if (progress.workflow.kind !== 'workflow'
+        || progress.workflow.id !== progress.package.id
+        || progress.workflow.version !== progress.package.version
+        || progress.workflow.digest !== digestWorkflowPackage(progress.package)) {
+        context.addIssue({ code: 'custom', message: 'Workflow progress must match its exact digest-bound package.' });
+    }
+    const packageStepIds = progress.package.steps.map((step) => step.id);
+    const progressStepIds = progress.steps.map((step) => step.stepId);
+    if (packageStepIds.length !== progressStepIds.length
+        || packageStepIds.some((stepId, index) => progressStepIds[index] !== stepId)) {
+        context.addIssue({ code: 'custom', message: 'Workflow progress steps must exactly match the retained package.' });
+    }
+});
+export const workroomEventSchema = z.object({
+    sequence: z.number().int().positive(),
+    type: z.enum([
+        'room.created',
+        'invite.created',
+        'join.requested',
+        'member.joined',
+        'member.rejected',
+        'member.revoked',
+        'member.role_changed',
+        'document.updated',
+        'handoff.published',
+        'resource.published',
+        'resource.quarantined',
+        'resource.purged',
+        'workflow.updated',
+    ]),
+    actorId: identifierSchema,
+    createdAt: isoDateSchema,
+    summary: z.string().max(500),
+});
+export const workroomSnapshotSchema = z.object({
+    schemaVersion: z.literal(WORKROOM_SCHEMA_VERSION),
+    roomId: identifierSchema,
+    name: z.string().trim().min(1).max(160),
+    address: z.string().min(1).max(255),
+    port: z.number().int().min(1).max(65_535),
+    certificateFingerprint: z.string().min(32).max(128),
+    revision: z.number().int().positive(),
+    createdAt: isoDateSchema,
+    bundle: portableFeatureBundleSchema,
+    documents: z.record(documentNameSchema, workroomDocumentSchema),
+    participants: z.array(workroomParticipantSchema).max(WORKROOM_MAX_PARTICIPANTS),
+    pendingJoins: z.array(z.object({
+        id: identifierSchema,
+        displayName: z.string(),
+        requestedAt: isoDateSchema,
+    })).max(WORKROOM_MAX_PENDING_JOINS),
+    resources: z.array(workroomResourceManifestSchema).max(WORKROOM_MAX_RESOURCES),
+    workflowProgress: workflowProgressSchema.optional(),
+    activity: z.array(workroomEventSchema),
+});
+export const workroomInviteSchema = z.object({
+    schemaVersion: z.literal(WORKROOM_SCHEMA_VERSION),
+    url: z.string().url().refine((value) => value.startsWith('https://'), 'Workroom URL must use HTTPS.'),
+    roomId: identifierSchema,
+    token: z.string().regex(/^[A-Za-z0-9_-]{40,}$/),
+    fingerprint: z.string().min(32).max(128),
+});
+export class WorkroomRevisionError extends Error {
+    expected;
+    actual;
+    constructor(expected, actual) {
+        super(`Workroom revision conflict: expected ${expected}, current revision is ${actual}.`);
+        this.name = 'WorkroomRevisionError';
+        this.expected = expected;
+        this.actual = actual;
+    }
+}
+export class WorkroomAuthorizationError extends Error {
+    constructor(message = 'This Workroom action is not authorized.') {
+        super(message);
+        this.name = 'WorkroomAuthorizationError';
+    }
+}
+export class WorkroomValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WorkroomValidationError';
+    }
+}
+//# sourceMappingURL=contracts.js.map

package/dist/workrooms/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/workrooms/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAU,CAAC;AAClD,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,GAAG,IAAI,CAAC;AACtD,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAChD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,kCAAkC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnE,MAAM,CAAC,MAAM,wCAAwC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzE,MAAM,CAAC,MAAM,mCAAmC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpE,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,GAAG,IAAI,CAAC;AAC/D,MAAM,CAAC,MAAM,yCAAyC,GAAG,EAAE,GAAG,IAAI,CAAC;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AACjD,MAAM,CAAC,MAAM,mCAAmC,GAAG,GAAG,CAAC;AAEvD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACpF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACxD,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;AAE9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,IAAI,EAAE,qBAAqB;IAC3B,QAAQ,EAAE,aAAa;IACvB,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAG3E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACpD,SAAS,EAAE,aAAa;IACxB,SAAS,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAC,MAAM,CAAC;IAC1E,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;CACtF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;QAClB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,gBAAgB;KAC9B,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACxC,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;KACrC,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC/D,WAAW,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,aAAa;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,YAAY;IACpB,aAAa,EAAE,gBAAgB;IAC/B,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvD,SAAS,EAAE,aAAa;IACxB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1D,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC1E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC,CAAC,QAAQ,EAAE;IACb,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,QAAQ,EAAE,8BAA8B;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;CAC1E,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,gBAAgB;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACjD,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC3D,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACnC,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClF,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC,CAAC;AAGH,MAAM,UAAU,qBAAqB,CAAC,QAA2B;IAC/D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACzF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;SACjB,GAAG,CAAC,yCAAyC,CAAC;SAC9C,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,yCAAyC,EACxF,4DAA4D,CAC7D;SACA,QAAQ,EAAE;IACb,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EAAE,aAAa;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,0BAA0B;IACpC,OAAO,EAAE,qBAAqB;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACpD,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU;WACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC,EAAE;WAC5C,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,OAAO;WACtD,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,cAAc,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM;WAC/C,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kEAAkE,EAAE,CAAC,CAAC;IACpH,CAAC;AACH,CAAC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QACX,cAAc;QACd,gBAAgB;QAChB,gBAAgB;QAChB,eAAe;QACf,iBAAiB;QACjB,gBAAgB;QAChB,qBAAqB;QACrB,kBAAkB;QAClB,mBAAmB;QACnB,oBAAoB;QACpB,sBAAsB;QACtB,iBAAiB;QACjB,kBAAkB;KACnB,CAAC;IACF,OAAO,EAAE,gBAAgB;IACzB,SAAS,EAAE,aAAa;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACjD,MAAM,EAAE,gBAAgB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACzC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,aAAa;IACxB,MAAM,EAAE,2BAA2B;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;IAC/D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAC/E,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7B,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,WAAW,EAAE,aAAa;KAC3B,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC9E,gBAAgB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACjD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,8BAA8B,CAAC;IACrG,MAAM,EAAE,gBAAgB;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACzC,CAAC,CAAC;AAcH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,QAAQ,CAAS;IACjB,MAAM,CAAS;IAE/B,YAAY,QAAgB,EAAE,MAAc;QAC1C,KAAK,CAAC,wCAAwC,QAAQ,yBAAyB,MAAM,GAAG,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAO,GAAG,yCAAyC;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/workrooms/crypto.d.ts

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+export interface PasswordDigest {
+    readonly salt: string;
+    readonly hash: string;
+}
+export declare function randomToken(bytes?: number): string;
+export declare function tokenDigest(token: string): string;
+export declare function hashPassword(password: string): Promise<PasswordDigest>;
+export declare function verifyPassword(password: string, digest: PasswordDigest): Promise<boolean>;
+export declare function normalizeFingerprint(value: string): string;
+export interface EncryptedExportV1 {
+    readonly schemaVersion: 1;
+    readonly algorithm: 'aes-256-gcm+scrypt';
+    readonly salt: string;
+    readonly iv: string;
+    readonly tag: string;
+    readonly ciphertext: string;
+}
+export declare const encryptedExportSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    algorithm: z.ZodLiteral<"aes-256-gcm+scrypt">;
+    salt: z.ZodString;
+    iv: z.ZodString;
+    tag: z.ZodString;
+    ciphertext: z.ZodString;
+}, z.core.$strip>;
+export declare function assertExportPlaintextSize(byteLength: number): void;
+export declare function encryptExport(value: unknown, passphrase: string): Promise<EncryptedExportV1>;
+export declare function decryptExport<T>(envelope: EncryptedExportV1, passphrase: string): Promise<T>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/workrooms/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/workrooms/crypto.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,WAAW,CAAC,KAAK,SAAK,GAAG,MAAM,CAE9C;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAI5E;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAI/F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,qBAAqB;;;;;;;iBAOhC,CAAC;AAEH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAIlE;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgBlG;AAED,wBAAsB,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAgBlG"}

package/dist/workrooms/crypto.js

@@ -0,0 +1,72 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes, scrypt as scryptCallback, timingSafeEqual, } from 'node:crypto';
+import { promisify } from 'node:util';
+import { z } from 'zod';
+import { WORKROOM_MAX_EXPORT_PLAINTEXT_BYTES, WorkroomValidationError } from './contracts.js';
+const scrypt = promisify(scryptCallback);
+export function randomToken(bytes = 32) {
+    return randomBytes(bytes).toString('base64url');
+}
+export function tokenDigest(token) {
+    return createHash('sha256').update(token, 'utf8').digest('hex');
+}
+export async function hashPassword(password) {
+    const salt = randomBytes(16);
+    const derived = await scrypt(password, salt, 32);
+    return { salt: salt.toString('base64'), hash: derived.toString('base64') };
+}
+export async function verifyPassword(password, digest) {
+    const expected = Buffer.from(digest.hash, 'base64');
+    const actual = await scrypt(password, Buffer.from(digest.salt, 'base64'), expected.length);
+    return actual.length === expected.length && timingSafeEqual(actual, expected);
+}
+export function normalizeFingerprint(value) {
+    return value.replace(/[^a-f0-9]/gi, '').toUpperCase();
+}
+export const encryptedExportSchema = z.object({
+    schemaVersion: z.literal(1),
+    algorithm: z.literal('aes-256-gcm+scrypt'),
+    salt: z.string().max(128).regex(/^[A-Za-z0-9+/]+={0,2}$/),
+    iv: z.string().max(128).regex(/^[A-Za-z0-9+/]+={0,2}$/),
+    tag: z.string().max(128).regex(/^[A-Za-z0-9+/]+={0,2}$/),
+    ciphertext: z.string().max(144 * 1024 * 1024).regex(/^[A-Za-z0-9+/]*={0,2}$/),
+});
+export function assertExportPlaintextSize(byteLength) {
+    if (!Number.isSafeInteger(byteLength) || byteLength < 0 || byteLength > WORKROOM_MAX_EXPORT_PLAINTEXT_BYTES) {
+        throw new WorkroomValidationError('Workroom exports are limited to 96 MiB before encryption.');
+    }
+}
+export async function encryptExport(value, passphrase) {
+    const plaintext = Buffer.from(JSON.stringify(value), 'utf8');
+    assertExportPlaintextSize(plaintext.length);
+    const salt = randomBytes(16);
+    const iv = randomBytes(12);
+    const key = await scrypt(passphrase, salt, 32);
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    return encryptedExportSchema.parse({
+        schemaVersion: 1,
+        algorithm: 'aes-256-gcm+scrypt',
+        salt: salt.toString('base64'),
+        iv: iv.toString('base64'),
+        tag: cipher.getAuthTag().toString('base64'),
+        ciphertext: ciphertext.toString('base64'),
+    });
+}
+export async function decryptExport(envelope, passphrase) {
+    const parsed = encryptedExportSchema.parse(envelope);
+    const salt = Buffer.from(parsed.salt, 'base64');
+    const iv = Buffer.from(parsed.iv, 'base64');
+    if (salt.length !== 16 || iv.length !== 12 || Buffer.from(parsed.tag, 'base64').length !== 16) {
+        throw new Error('Invalid Workroom export cryptographic parameters.');
+    }
+    const key = await scrypt(passphrase, salt, 32);
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(Buffer.from(parsed.tag, 'base64'));
+    const plaintext = Buffer.concat([
+        decipher.update(Buffer.from(parsed.ciphertext, 'base64')),
+        decipher.final(),
+    ]);
+    assertExportPlaintextSize(plaintext.length);
+    return JSON.parse(plaintext.toString('utf8'));
+}
+//# sourceMappingURL=crypto.js.map

package/dist/workrooms/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/workrooms/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,MAAM,IAAI,cAAc,EACxB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mCAAmC,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE9F,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;AAOzC,MAAM,UAAU,WAAW,CAAC,KAAK,GAAG,EAAE;IACpC,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAW,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAsB;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAW,CAAC;IACrG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxD,CAAC;AAWD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACzD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACvD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,mCAAmC,EAAE,CAAC;QAC5G,MAAM,IAAI,uBAAuB,CAAC,2DAA2D,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAc,EAAE,UAAkB;IACpE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,yBAAyB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAW,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,qBAAqB,CAAC,KAAK,CAAC;QACjC,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,oBAAoB;QAC/B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,QAA2B,EAAE,UAAkB;IACpF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAW,CAAC;IACzD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzD,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC;IACH,yBAAyB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;AACrD,CAAC"}

package/dist/workrooms/host.d.ts

@@ -0,0 +1,61 @@
+import type { Server as HttpsServer } from 'node:https';
+import { Hono } from 'hono';
+import { type PortableFeatureBundleV1, type WorkroomDocumentName } from './contracts.js';
+import { WorkroomService } from './service.js';
+export interface WorkroomNetworkInterface {
+    readonly name: string;
+    readonly address: string;
+    readonly family: 'IPv4' | 'IPv6';
+    readonly internal: boolean;
+}
+export declare function listWorkroomNetworkInterfaces(): WorkroomNetworkInterface[];
+export declare function assertLocalInterface(address: string): void;
+export declare function createWorkroomApp(service: WorkroomService): Hono;
+export interface StartHostedWorkroomInput {
+    readonly homeDir: string;
+    readonly name: string;
+    readonly workspaceId: string;
+    readonly address: string;
+    readonly port: number;
+    readonly password: string;
+    readonly hostDisplayName: string;
+    readonly bundle: PortableFeatureBundleV1;
+    readonly documents: Partial<Record<WorkroomDocumentName, string>>;
+    readonly roomId?: string;
+}
+export interface HostedWorkroom {
+    readonly roomId: string;
+    readonly roomDir: string;
+    readonly service: WorkroomService;
+    readonly server: HttpsServer;
+    readonly hostToken: string;
+    readonly hostAgentToken: string;
+    readonly certificateFingerprint: string;
+    readonly url: string;
+    stop(): Promise<void>;
+}
+export declare function writeHostedWorkroomCredential(roomDir: string, hostToken: string, hostAgentToken: string, password: string): Promise<void>;
+export declare function prepareHostedWorkroomCredentialRotation(roomDir: string, hostToken: string, hostAgentToken: string, password: string): Promise<void>;
+export declare function commitHostedWorkroomCredentialRotation(roomDir: string): Promise<void>;
+export declare function discardHostedWorkroomCredentialRotation(roomDir: string): Promise<void>;
+export declare function startHostedWorkroom(input: StartHostedWorkroomInput): Promise<HostedWorkroom>;
+export interface PausedWorkroom {
+    readonly roomId: string;
+    readonly name: string;
+    readonly workspaceId: string;
+    readonly address: string;
+    readonly port: number;
+    readonly createdAt: string;
+}
+export interface QuarantinedWorkroom {
+    readonly roomId: string;
+    readonly status: 'failed' | 'in-progress';
+    readonly name?: string;
+    readonly workspaceId?: string;
+    readonly recordedAt?: string;
+}
+export declare function listQuarantinedWorkrooms(homeDir: string): Promise<QuarantinedWorkroom[]>;
+export declare function discardQuarantinedWorkroom(homeDir: string, roomId: string): Promise<void>;
+export declare function listPausedWorkrooms(homeDir: string): Promise<PausedWorkroom[]>;
+export declare function resumeHostedWorkroom(homeDir: string, roomId: string, password: string): Promise<HostedWorkroom>;
+//# sourceMappingURL=host.d.ts.map

package/dist/workrooms/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/workrooms/host.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAC;AAMxD,OAAO,EAAE,IAAI,EAA0B,MAAM,MAAM,CAAC;AAOpD,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAA8B,eAAe,EAAE,MAAM,cAAc,CAAC;AAG3E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,wBAAgB,6BAA6B,IAAI,wBAAwB,EAAE,CAS1E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAI1D;AA2BD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAoXhE;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AA8FD,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,uCAAuC,CAC3D,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,sCAAsC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI3F;AAED,wBAAsB,uCAAuC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI5F;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,cAAc,CAAC,CA2ClG;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAmBD,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAgC9F;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB/F;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CA+BpF;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAkDrH"}