@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.1

package/dist/trpc/routers/workspace.js

@@ -5,111 +5,167 @@
  * on REST because tRPC's JSON link doesn't carry binary payloads. The other
  * CRUD + listFiles (which returns JSON metadata) endpoints move here.
  *
- * Workspaces browse the local filesystem — disabled in production via the
- * `NODETOOL_ENV=production` env var.
+ * Pointing a workspace at an arbitrary host folder browses the local
+ * filesystem, so create/update/delete are disabled in production via the
+ * `NODETOOL_ENV=production` env var. Reading is not: every user has a default
+ * workspace, and in production it is the server-managed folder under the data
+ * dir — listing and downloading from that reaches nothing the deployment did
+ * not create itself.
  */
-import { stat, readdir, access } from "node:fs/promises";
+import { stat, access } from "node:fs/promises";
 import { existsSync, constants } from "node:fs";
-import { resolve, relative, join, isAbsolute } from "node:path";
+import { isAbsolute, basename } from "node:path";
 import { Workspace } from "@nodetool-ai/models";
+import { workspaceFromRow } from "../../lib/workflow-workspace.js";
 import { ApiErrorCode } from "../../error-codes.js";
 import { router } from "../index.js";
 import { protectedProcedure } from "../middleware.js";
 import { throwApiError } from "../error-formatter.js";
-import { listInput, listOutput, getDefaultOutput, getInput, workspaceResponse, createInput, updateInput, deleteInput, deleteOutput, listFilesInput, listFilesOutput } from "@nodetool-ai/protocol/api-schemas/workspace.js";
+import { listInput, listOutput, workspaceResponse, createInput, updateInput, deleteInput, deleteOutput, listFilesInput, listFilesOutput, readFileInput, readFileOutput, writeFileInput, writeFileOutput, MAX_TEXT_FILE_BYTES } from "@nodetool-ai/protocol/api-schemas/workspace.js";
+import { isObjectLike } from "../../lib/wire-values.js";
 function toWorkspaceResponse(ws) {
     return {
         id: ws.id,
         user_id: ws.user_id,
+        project_id: ws.project_id,
         name: ws.name,
         path: ws.path,
         is_default: ws.is_default,
+        is_managed: ws.isManaged(),
         is_accessible: ws.isAccessible(),
         created_at: ws.created_at,
         updated_at: ws.updated_at
     };
 }
-/** Guard: workspace operations are disabled in production. */
+/** True when this deployment lets a user point a workspace at a host folder. */
+function canManageWorkspaces() {
+    return process.env["NODETOOL_ENV"] !== "production";
+}
+/** Guard: choosing a workspace folder is disabled in production. */
 function requireNonProduction() {
-    if (process.env["NODETOOL_ENV"] === "production") {
-        throwApiError(ApiErrorCode.FORBIDDEN, "Workspaces are disabled in production");
+    if (!canManageWorkspaces()) {
+        throwApiError(ApiErrorCode.FORBIDDEN, "Managing workspace folders is disabled in production");
+    }
+}
+/**
+ * Guard for the read paths: in production only the managed workspace may be
+ * read. A row created while the deployment ran locally can point anywhere on
+ * the host, and listFiles would happily enumerate it.
+ */
+function requireReadable(ws) {
+    if (!canManageWorkspaces() && !ws.isManaged()) {
+        throwApiError(ApiErrorCode.FORBIDDEN, "This workspace is not readable in production");
+    }
+}
+/**
+ * Validate a workspace path: absolute, existing, a directory, and writable.
+ * Shared by create and update so update can't repoint a workspace at an
+ * arbitrary directory (e.g. /etc) and read it via listFiles.
+ */
+async function validateWorkspacePath(candidate) {
+    if (!isAbsolute(candidate)) {
+        throwApiError(ApiErrorCode.INVALID_INPUT, "Path must be absolute");
+    }
+    if (!existsSync(candidate)) {
+        throwApiError(ApiErrorCode.INVALID_INPUT, "Path does not exist");
+    }
+    try {
+        const s = await stat(candidate);
+        if (!s.isDirectory()) {
+            throwApiError(ApiErrorCode.INVALID_INPUT, "Path is not a directory");
+        }
+    }
+    catch (err) {
+        if (isObjectLike(err) &&
+            "name" in err &&
+            err.name === "TRPCError") {
+            throw err; // already a throwApiError result — rethrow
+        }
+        throwApiError(ApiErrorCode.INVALID_INPUT, "Cannot access path");
+    }
+    try {
+        await access(candidate, constants.W_OK);
+    }
+    catch {
+        throwApiError(ApiErrorCode.INVALID_INPUT, "Path is not writable");
     }
 }
+/**
+ * Ceiling on what `readFile` will pull into memory to slice a text preview
+ * from. The workspace interface has no ranged read, so a file past this is
+ * refused rather than loaded and cut.
+ */
+const MAX_READABLE_BYTES = 32 * 1024 * 1024;
+/**
+ * Resolve the row a file procedure addresses, applying the same guards
+ * `listFiles` applies: the row must exist, be readable in this deployment, and
+ * the path must be workspace-relative.
+ */
+async function resolveFileTarget(userId, id, path) {
+    const row = await Workspace.find(userId, id);
+    if (!row) {
+        throwApiError(ApiErrorCode.NOT_FOUND, "Workspace not found");
+    }
+    requireReadable(row);
+    if (path.startsWith("/")) {
+        throwApiError(ApiErrorCode.INVALID_INPUT, "Absolute paths not allowed, use relative paths");
+    }
+    const workspace = workspaceFromRow(row);
+    if (!workspace) {
+        throwApiError(ApiErrorCode.INTERNAL_ERROR, "Workspace storage is not configured");
+    }
+    return { row, workspace };
+}
+/** Containment is the workspace's own rule; surface its refusal as a 403. */
+function rethrowTraversal(err) {
+    if (err instanceof Error && err.name === "WorkspacePathError") {
+        throwApiError(ApiErrorCode.FORBIDDEN, "Path traversal not allowed");
+    }
+    throw err;
+}
 export const workspaceRouter = router({
     list: protectedProcedure
         .input(listInput)
         .output(listOutput)
         .query(async ({ ctx, input }) => {
-        requireNonProduction();
-        const [items] = await Workspace.paginate(ctx.userId, {
+        // Listing creates the default workspace when the user has none, so the
+        // editor never has to render a "no workspace" state and a run always has
+        // somewhere to write.
+        await Workspace.ensureDefault(ctx.userId);
+        const page = {
             limit: input.limit
-        });
+        };
+        if (input.project_id !== undefined)
+            page.projectId = input.project_id;
+        const [items] = await Workspace.paginate(ctx.userId, page);
+        const readable = canManageWorkspaces()
+            ? items
+            : items.filter((ws) => ws.isManaged());
         return {
-            workspaces: items.map(toWorkspaceResponse),
+            workspaces: readable.map(toWorkspaceResponse),
+            can_manage: canManageWorkspaces(),
             next: null
         };
     }),
-    getDefault: protectedProcedure
-        .output(getDefaultOutput)
-        .query(async ({ ctx }) => {
-        requireNonProduction();
-        const ws = await Workspace.getDefault(ctx.userId);
-        return ws ? toWorkspaceResponse(ws) : null;
-    }),
-    get: protectedProcedure
-        .input(getInput)
-        .output(workspaceResponse)
-        .query(async ({ ctx, input }) => {
-        requireNonProduction();
-        const ws = await Workspace.find(ctx.userId, input.id);
-        if (!ws) {
-            throwApiError(ApiErrorCode.NOT_FOUND, "Workspace not found");
-        }
-        return toWorkspaceResponse(ws);
-    }),
     create: protectedProcedure
         .input(createInput)
         .output(workspaceResponse)
         .mutation(async ({ ctx, input }) => {
         requireNonProduction();
-        // Validate path
-        if (!isAbsolute(input.path)) {
-            throwApiError(ApiErrorCode.INVALID_INPUT, "Path must be absolute");
-        }
-        if (!existsSync(input.path)) {
-            throwApiError(ApiErrorCode.INVALID_INPUT, "Path does not exist");
-        }
-        try {
-            const s = await stat(input.path);
-            if (!s.isDirectory()) {
-                throwApiError(ApiErrorCode.INVALID_INPUT, "Path is not a directory");
-            }
-        }
-        catch (err) {
-            // If stat itself failed (not the isDirectory check), surface as cannot access.
-            if (err &&
-                typeof err === "object" &&
-                "name" in err &&
-                err.name === "TRPCError") {
-                throw err; // already a throwApiError result — rethrow
-            }
-            throwApiError(ApiErrorCode.INVALID_INPUT, "Cannot access path");
-        }
-        try {
-            await access(input.path, constants.W_OK);
-        }
-        catch {
-            throwApiError(ApiErrorCode.INVALID_INPUT, "Path is not writable");
-        }
+        await validateWorkspacePath(input.path);
         if (input.is_default) {
             await Workspace.unsetOtherDefaults(ctx.userId);
         }
-        const ws = (await Workspace.create({
+        const workspaceInput = {
             user_id: ctx.userId,
             name: input.name,
             path: input.path,
             is_default: input.is_default
-        }));
+        };
+        if (input.project_id !== undefined) {
+            workspaceInput.project_id = input.project_id;
+        }
+        const ws = (await Workspace.create(workspaceInput));
         return toWorkspaceResponse(ws);
     }),
     update: protectedProcedure
@@ -123,8 +179,13 @@ export const workspaceRouter = router({
         }
         if (input.name !== undefined)
             ws.name = input.name;
-        if (input.path !== undefined)
+        if (input.path !== undefined) {
+            // Validate exactly as create does — otherwise a user could repoint
+            // their workspace at any directory (/etc, /root) and enumerate/read it
+            // via listFiles and the REST download endpoint.
+            await validateWorkspacePath(input.path);
             ws.path = input.path;
+        }
         if (input.is_default !== undefined) {
             if (input.is_default) {
                 await Workspace.unsetOtherDefaults(ctx.userId);
@@ -143,6 +204,9 @@ export const workspaceRouter = router({
         if (!ws) {
             throwApiError(ApiErrorCode.NOT_FOUND, "Workspace not found");
         }
+        if (ws.is_default) {
+            throwApiError(ApiErrorCode.INVALID_INPUT, "Cannot delete the default workspace");
+        }
         const hasWorkflows = await Workspace.hasLinkedWorkflows(input.id);
         if (hasWorkflows) {
             throwApiError(ApiErrorCode.INVALID_INPUT, "Cannot delete workspace with linked workflows");
@@ -154,50 +218,123 @@ export const workspaceRouter = router({
         .input(listFilesInput)
         .output(listFilesOutput)
         .query(async ({ ctx, input }) => {
-        requireNonProduction();
-        const workspace = await Workspace.find(ctx.userId, input.id);
-        if (!workspace) {
+        const row = await Workspace.find(ctx.userId, input.id);
+        if (!row) {
             throwApiError(ApiErrorCode.NOT_FOUND, "Workspace not found");
         }
-        const queryPath = input.path;
-        if (queryPath.startsWith("/")) {
+        requireReadable(row);
+        if (input.path.startsWith("/")) {
             throwApiError(ApiErrorCode.INVALID_INPUT, "Absolute paths not allowed, use relative paths");
         }
-        const workspacePath = resolve(workspace.path);
-        const resolvedPath = resolve(join(workspacePath, queryPath));
-        // Path traversal check — boundary-safe: a sibling like `/tmp/ws-evil`
-        // would pass a naive `startsWith("/tmp/ws")`, so use `path.relative`
-        // and require the result to be empty or a non-`..` relative path.
-        const rel = relative(workspacePath, resolvedPath);
-        if (rel.startsWith("..") || isAbsolute(rel)) {
-            throwApiError(ApiErrorCode.FORBIDDEN, "Path traversal not allowed");
+        // Listing goes through the workspace, so a cloud workspace (a prefix in
+        // object storage) browses exactly like a local folder. Containment is
+        // the workspace's own rule — there is no path arithmetic to get wrong
+        // here any more.
+        const workspace = workspaceFromRow(row);
+        if (!workspace) {
+            throwApiError(ApiErrorCode.INTERNAL_ERROR, "Workspace storage is not configured");
         }
         let entries;
         try {
-            entries = await readdir(resolvedPath);
+            entries = await workspace.list(input.path === "." ? "" : input.path);
         }
-        catch {
+        catch (err) {
+            if (err instanceof Error && err.name === "WorkspacePathError") {
+                throwApiError(ApiErrorCode.FORBIDDEN, "Path traversal not allowed");
+            }
             throwApiError(ApiErrorCode.NOT_FOUND, "Directory not found");
         }
-        const files = [];
-        for (const entry of entries) {
-            const entryRelative = join(queryPath === "." ? "" : queryPath, entry);
-            const fullPath = join(resolvedPath, entry);
-            try {
-                const s = await stat(fullPath);
-                files.push({
-                    name: entry,
-                    path: entryRelative,
-                    size: s.size,
-                    is_dir: s.isDirectory(),
-                    modified_at: s.mtime.toISOString()
-                });
-            }
-            catch {
-                // skip inaccessible entries
+        // An empty listing is either an empty directory or a path that is not
+        // there. Only a stat tells them apart, and the client shows a different
+        // thing for each — an empty folder, or an error.
+        if (entries.length === 0 && input.path !== "." && input.path !== "") {
+            const info = await workspace.stat(input.path).catch(() => null);
+            if (!info) {
+                throwApiError(ApiErrorCode.NOT_FOUND, "Directory not found");
             }
         }
+        const files = entries.map((entry) => ({
+            name: entry.name,
+            path: entry.path,
+            size: entry.size,
+            is_dir: entry.isDirectory,
+            modified_at: new Date(entry.modifiedAt).toISOString()
+        }));
         return files;
+    }),
+    /**
+     * Read one workspace file as UTF-8 text, for the editor's file viewer.
+     *
+     * Files larger than `MAX_TEXT_FILE_BYTES` come back cut to that many bytes
+     * with `truncated: true`; `size` always reports the whole file. Past
+     * `MAX_READABLE_BYTES` nothing is read at all — slicing 2 MiB off a
+     * multi-gigabyte file would still load the whole thing into memory first.
+     */
+    readFile: protectedProcedure
+        .input(readFileInput)
+        .output(readFileOutput)
+        .query(async ({ ctx, input }) => {
+        const { workspace } = await resolveFileTarget(ctx.userId, input.id, input.path);
+        const info = await workspace.stat(input.path).catch(rethrowTraversal);
+        if (!info) {
+            throwApiError(ApiErrorCode.NOT_FOUND, "File not found");
+        }
+        if (info.isDirectory) {
+            throwApiError(ApiErrorCode.INVALID_INPUT, "Path is a directory");
+        }
+        if (info.size > MAX_READABLE_BYTES) {
+            throwApiError(ApiErrorCode.INVALID_INPUT, "File is too large to open as text");
+        }
+        const bytes = await workspace.read(input.path).catch(rethrowTraversal);
+        if (!bytes) {
+            throwApiError(ApiErrorCode.NOT_FOUND, "File not found");
+        }
+        const truncated = bytes.byteLength > MAX_TEXT_FILE_BYTES;
+        const slice = truncated
+            ? bytes.subarray(0, MAX_TEXT_FILE_BYTES)
+            : bytes;
+        return {
+            content: new TextDecoder().decode(slice),
+            size: info.size,
+            modified_at: new Date(info.modifiedAt).toISOString(),
+            truncated
+        };
+    }),
+    /**
+     * Write UTF-8 text to a workspace file, creating it when absent.
+     *
+     * Guarded exactly like the read paths — a workspace this deployment refuses
+     * to list is a workspace it refuses to write — plus the accessibility check,
+     * since a row whose folder has gone missing would otherwise recreate it.
+     */
+    writeFile: protectedProcedure
+        .input(writeFileInput)
+        .output(writeFileOutput)
+        .mutation(async ({ ctx, input }) => {
+        const { row, workspace } = await resolveFileTarget(ctx.userId, input.id, input.path);
+        if (!row.isAccessible()) {
+            throwApiError(ApiErrorCode.FORBIDDEN, "Workspace is not accessible");
+        }
+        if (Buffer.byteLength(input.content, "utf8") > MAX_TEXT_FILE_BYTES) {
+            throwApiError(ApiErrorCode.INVALID_INPUT, "File content is too large");
+        }
+        const existing = await workspace.stat(input.path).catch(rethrowTraversal);
+        if (existing?.isDirectory) {
+            throwApiError(ApiErrorCode.INVALID_INPUT, "Path is a directory");
+        }
+        await workspace
+            .write(input.path, input.content, "text/plain; charset=utf-8")
+            .catch(rethrowTraversal);
+        const info = await workspace.stat(input.path);
+        const size = info?.size ?? Buffer.byteLength(input.content, "utf8");
+        const modifiedAt = info?.modifiedAt ?? Date.now();
+        return {
+            name: basename(input.path),
+            path: input.path,
+            size,
+            is_dir: false,
+            modified_at: new Date(modifiedAt).toISOString()
+        };
     })
 });
 //# sourceMappingURL=workspace.js.map

package/dist/trpc/routers/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../../src/trpc/routers/workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACZ,cAAc,EACd,eAAe,EAGhB,MAAM,gDAAgD,CAAC;AAExD,SAAS,mBAAmB,CAAC,EAAa;IACxC,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,aAAa,EAAE,EAAE,CAAC,YAAY,EAAE;QAChC,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,UAAU,EAAE,EAAE,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,SAAS,oBAAoB;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,EAAE,CAAC;QACjD,aAAa,CACX,YAAY,CAAC,SAAS,EACtB,uCAAuC,CACxC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;IACpC,IAAI,EAAE,kBAAkB;SACrB,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,UAAU,CAAC;SAClB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9B,oBAAoB,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;YACnD,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC1C,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC,CAAC;IAEJ,UAAU,EAAE,kBAAkB;SAC3B,MAAM,CAAC,gBAAgB,CAAC;SACxB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACvB,oBAAoB,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC,CAAC;IAEJ,GAAG,EAAE,kBAAkB;SACpB,KAAK,CAAC,QAAQ,CAAC;SACf,MAAM,CAAC,iBAAiB,CAAC;SACzB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9B,oBAAoB,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IAEJ,MAAM,EAAE,kBAAkB;SACvB,KAAK,CAAC,WAAW,CAAC;SAClB,MAAM,CAAC,iBAAiB,CAAC;SACzB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,oBAAoB,EAAE,CAAC;QAEvB,gBAAgB;QAChB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrB,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,yBAAyB,CAC1B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+EAA+E;YAC/E,IACE,GAAG;gBACH,OAAO,GAAG,KAAK,QAAQ;gBACvB,MAAM,IAAI,GAAG;gBACZ,GAAwB,CAAC,IAAI,KAAK,WAAW,EAC9C,CAAC;gBACD,MAAM,GAAG,CAAC,CAAC,2CAA2C;YACxD,CAAC;YACD,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC;YACjC,OAAO,EAAE,GAAG,CAAC,MAAM;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAc,CAAC;QAEjB,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IAEJ,MAAM,EAAE,kBAAkB;SACvB,KAAK,CAAC,WAAW,CAAC;SAClB,MAAM,CAAC,iBAAiB,CAAC;SACzB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,oBAAoB,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACnD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC;YACD,EAAE,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IAEJ,MAAM,EAAE,kBAAkB;SACvB,KAAK,CAAC,WAAW,CAAC;SAClB,MAAM,CAAC,YAAY,CAAC;SACpB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,oBAAoB,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,YAAY,EAAE,CAAC;YACjB,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,+CAA+C,CAChD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACvD,CAAC,CAAC;IAEJ,SAAS,EAAE,kBAAkB;SAC1B,KAAK,CAAC,cAAc,CAAC;SACrB,MAAM,CAAC,eAAe,CAAC;SACvB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9B,oBAAoB,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;QAC7B,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QAE7D,sEAAsE;QACtE,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE;oBACvB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;CACL,CAAC,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../../src/trpc/routers/workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,WAAW,EACX,YAAY,EACZ,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,mBAAmB,EAGpB,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,SAAS,mBAAmB,CAAC,EAAa;IACxC,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE;QAC1B,aAAa,EAAE,EAAE,CAAC,YAAY,EAAE;QAChC,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,UAAU,EAAE,EAAE,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,mBAAmB;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC;AACtD,CAAC;AAED,oEAAoE;AACpE,SAAS,oBAAoB;IAC3B,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC3B,aAAa,CACX,YAAY,CAAC,SAAS,EACtB,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,EAAa;IACpC,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC;QAC9C,aAAa,CACX,YAAY,CAAC,SAAS,EACtB,8CAA8C,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IACpD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,YAAY,CAAC,GAAG,CAAC;YACjB,MAAM,IAAI,GAAG;YACZ,GAAwB,CAAC,IAAI,KAAK,WAAW,EAC9C,CAAC;YACD,MAAM,GAAG,CAAC,CAAC,2CAA2C;QACxD,CAAC;QACD,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,MAAc,EACd,EAAU,EACV,IAAY;IAEZ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,CAAC;IAErB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,aAAa,CACX,YAAY,CAAC,cAAc,EAC3B,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC9D,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;IACpC,IAAI,EAAE,kBAAkB;SACrB,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,UAAU,CAAC;SAClB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9B,uEAAuE;QACvE,yEAAyE;QACzE,sBAAsB;QACtB,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAA6C;YACrD,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;QACF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,mBAAmB,EAAE;YACpC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QACzC,OAAO;YACL,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC7C,UAAU,EAAE,mBAAmB,EAAE;YACjC,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC,CAAC;IAEJ,MAAM,EAAE,kBAAkB;SACvB,KAAK,CAAC,WAAW,CAAC;SAClB,MAAM,CAAC,iBAAiB,CAAC;SACzB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,oBAAoB,EAAE,CAAC;QAEvB,MAAM,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,cAAc,GAA4B;YAC9C,OAAO,EAAE,GAAG,CAAC,MAAM;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;QACF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,cAAc,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAC/C,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAc,CAAC;QAEjE,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IAEJ,MAAM,EAAE,kBAAkB;SACvB,KAAK,CAAC,WAAW,CAAC;SAClB,MAAM,CAAC,iBAAiB,CAAC;SACzB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,oBAAoB,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,mEAAmE;YACnE,uEAAuE;YACvE,gDAAgD;YAChD,MAAM,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,SAAS,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC;YACD,EAAE,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IAEJ,MAAM,EAAE,kBAAkB;SACvB,KAAK,CAAC,WAAW,CAAC;SAClB,MAAM,CAAC,YAAY,CAAC;SACpB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,oBAAoB,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;YAClB,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,YAAY,EAAE,CAAC;YACjB,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,+CAA+C,CAChD,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACvD,CAAC,CAAC;IAEJ,SAAS,EAAE,kBAAkB;SAC1B,KAAK,CAAC,cAAc,CAAC;SACrB,MAAM,CAAC,eAAe,CAAC;SACvB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,CAAC;QAErB,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,sEAAsE;QACtE,sEAAsE;QACtE,iBAAiB;QACjB,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,aAAa,CACX,YAAY,CAAC,cAAc,EAC3B,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,IAAI,OAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC9D,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;YACtE,CAAC;YACD,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QAED,sEAAsE;QACtE,wEAAwE;QACxE,iDAAiD;QACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAgB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,WAAW;YACzB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SACtD,CAAC,CAAC,CAAC;QACJ,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEJ;;;;;;;OAOG;IACH,QAAQ,EAAE,kBAAkB;SACzB,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,cAAc,CAAC;SACtB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,iBAAiB,CAC3C,GAAG,CAAC,MAAM,EACV,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,CACX,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;YACnC,aAAa,CACX,YAAY,CAAC,aAAa,EAC1B,mCAAmC,CACpC,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,GAAG,mBAAmB,CAAC;QACzD,MAAM,KAAK,GAAG,SAAS;YACrB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC;YACxC,CAAC,CAAC,KAAK,CAAC;QACV,OAAO;YACL,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;YACpD,SAAS;SACV,CAAC;IACJ,CAAC,CAAC;IAEJ;;;;;;OAMG;IACH,SAAS,EAAE,kBAAkB;SAC1B,KAAK,CAAC,cAAc,CAAC;SACrB,MAAM,CAAC,eAAe,CAAC;SACvB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,MAAM,iBAAiB,CAChD,GAAG,CAAC,MAAM,EACV,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,IAAI,CACX,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC;YACxB,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,mBAAmB,EAAE,CAAC;YACnE,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC1E,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;YAC1B,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,SAAS;aACZ,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC;aAC7D,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAE3B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SAChD,CAAC;IACJ,CAAC,CAAC;CACL,CAAC,CAAC"}

package/dist/trpc/sandbox-coverage.d.ts

@@ -0,0 +1,64 @@
+/**
+ * What sandboxed code can reach of NodeTool's own API, and what it cannot.
+ *
+ * The capability registry (`@nodetool-ai/agents`, `src/capabilities/`) is the
+ * whole surface a guest has: the `nodetool.*` imports, the agent toolbelt and
+ * the MCP mount all resolve through it, and `http_request` cannot reach back
+ * in because the fetch guard refuses loopback and private ranges. So every
+ * procedure in this router either has a capability behind it or does not exist
+ * as far as a run is concerned.
+ *
+ * Before this table, "does not exist" covered two very different things: a
+ * surface deliberately kept out of a sandbox, and one nobody had got to yet.
+ * They read identically from outside, which is how a security boundary rots —
+ * the next person adding a router has no way to tell whether the omission next
+ * to theirs was a decision. Each procedure therefore carries one of four
+ * verdicts and, for three of them, a reason a reviewer can disagree with:
+ *
+ * - `capability` — the wire name a run calls instead. Checked to resolve.
+ * - `elsewhere`  — reachable, by a differently-shaped capability.
+ * - `withheld`   — deliberately out of reach, with the risk stated.
+ * - `gap`        — not covered, and not for a security reason. Work, written
+ *                  down as work.
+ *
+ * `tests/sandbox-api-coverage.test.ts` walks the live router and fails when
+ * the two disagree in either direction, so a new procedure cannot land
+ * unclassified and a stale line cannot outlive the procedure it describes.
+ *
+ * The recurring shape of the withheld set is worth naming, because it is the
+ * rule to apply to the next one: a run may act on the rows its own user owns,
+ * and may not touch credentials, billing, other tenants, host control, the
+ * transcript of its own behaviour, or anything that grants a third party
+ * access. Publishing is the one deliberate exception — `set_workflow_access`
+ * exists and is classified `external`, so the gate asks a human first.
+ */
+/** Why one procedure is or is not reachable from sandboxed code. */
+export type SandboxApiVerdict = {
+    readonly capability: string;
+    readonly elsewhere?: never;
+    readonly withheld?: never;
+    readonly gap?: never;
+} | {
+    readonly elsewhere: string;
+    readonly capability?: never;
+    readonly withheld?: never;
+    readonly gap?: never;
+} | {
+    readonly withheld: string;
+    readonly capability?: never;
+    readonly elsewhere?: never;
+    readonly gap?: never;
+} | {
+    readonly gap: string;
+    readonly capability?: never;
+    readonly elsewhere?: never;
+    readonly withheld?: never;
+};
+/**
+ * Every tRPC procedure path, and what sandboxed code can do about it.
+ *
+ * Keyed by the dotted path `appRouter._def.procedures` uses, so the test can
+ * compare this against the router itself rather than against a copy of it.
+ */
+export declare const SANDBOX_API_COVERAGE: Readonly<Record<string, SandboxApiVerdict>>;
+//# sourceMappingURL=sandbox-coverage.d.ts.map

package/dist/trpc/sandbox-coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-coverage.d.ts","sourceRoot":"","sources":["../../src/trpc/sandbox-coverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,oEAAoE;AACpE,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAA;CAAE,GAC5G;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAA;CAAE,GAC5G;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAA;CAAE,GAC5G;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAEjH;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CACzC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAuqC9B,CAAC"}